last executing test programs:

5.115343347s ago: executing program 4 (id=420):
syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000006c0), 0xfe, 0x246, &(0x7f0000000ac0)="$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")
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000100)=@v1={0x0, @adiantum, 0x0, @desc1})
chdir(&(0x7f0000000300)='./bus\x00')
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
r1 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000140)={'fscrypt:', @desc1}, &(0x7f00000001c0)={0x0, "28d7b07d54891881fe02c1203fe49696b9f26f2da4149683f065714f8a61d1f32c99064bbd27b2aa77459cff33a3a98350f1af9d51ed5bef3d63520d260804d0"}, 0x48, 0xfffffffffffffffd)
keyctl$revoke(0x3, r1)
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0)

4.986979848s ago: executing program 4 (id=422):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000004200)={{0x12, 0x1, 0x0, 0xe2, 0x79, 0x3b, 0x10, 0x5d1, 0x2001, 0x900, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x4d, 0x2f, 0x9c}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0x8, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r1}, &(0x7f00000005c0), &(0x7f0000000600)}, 0x20)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000180)={0x0, 0x0, 0x2, "8144"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000a40)={0x84, &(0x7f0000000540)={0x0, 0x0, 0x2, "cd74"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
read$eventfd(0xffffffffffffffff, 0x0, 0x0)

4.704305453s ago: executing program 3 (id=432):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
close(r1)
syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000400)='./bus\x00', 0x800, &(0x7f0000000840)=ANY=[@ANYRES8=0x0, @ANYRES16, @ANYRES64], 0x1, 0x36e, &(0x7f0000000c00)="$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")
r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0)
fallocate(r2, 0x0, 0x0, 0x1000f4)
io_setup(0x7, &(0x7f00000000c0)=<r4=>0x0)
io_submit(r4, 0x2, &(0x7f0000001d00)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000000)="96", 0xfe00}, &(0x7f0000000040)={0x0, 0x0, 0x41, 0x0, 0x0, 0xffffffffffffffff, 0x0}])

4.530505127s ago: executing program 3 (id=435):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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")
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='ext4_es_find_extent_range_exit\x00', r2}, 0x10)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0)
write$cgroup_int(r3, &(0x7f0000000100), 0x1001)

4.442383444s ago: executing program 3 (id=438):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="001c6559299fdf419c18f6395f0010000018"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@private0, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x120}, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000}}, {{@in=@empty}, 0x0, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}}, 0xe8)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x41, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

4.230935932s ago: executing program 3 (id=443):
syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x4000, &(0x7f00000000c0), 0x2, 0xbb8, &(0x7f00000017c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0)
ioctl$FS_IOC_ENABLE_VERITY(r0, 0x8004587d, &(0x7f0000000140)={0x2, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0})
quotactl$Q_SETINFO(0xffffffff80000601, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0xee01, &(0x7f0000000140))
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x111491, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
write$binfmt_aout(r1, 0x0, 0xc1)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x12, r1, 0x0)
ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0x80045505, 0x0)
mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2014c7f, 0x0)

4.153609919s ago: executing program 3 (id=446):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = dup(r0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r2, <r3=>0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r4}, 0x10)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r2, &(0x7f0000000000), &(0x7f00000000c0)=""/109}, 0x20)
ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f0000000400)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0})

3.850635294s ago: executing program 3 (id=453):
r0 = socket(0x1, 0x2, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r1, 0x26, 0x0, 0x0, @void, @value}, 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r2, &(0x7f0000000180), &(0x7f00000000c0)=@tcp6=r0}, 0x20)
bind$unix(r0, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e)
sendmmsg$unix(r0, &(0x7f0000001680), 0x0, 0x0)
recvmmsg(r0, &(0x7f0000000d40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000500)=""/65, 0x41}], 0x1}}], 0x2, 0x0, 0x0)
r3 = socket(0x1, 0x2, 0x0)
sendmmsg$unix(r3, &(0x7f0000001680)=[{{&(0x7f0000000280)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x1, 0x0)

3.341453907s ago: executing program 1 (id=461):
openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0)
io_uring_setup(0x0, &(0x7f00000002c0)={0x0, 0x7183, 0x20, 0x0, 0x13f})
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendmmsg$inet(r0, &(0x7f0000001000)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000640)="0036d551863e1902129da79f5986e05288f50e5398660c1a29b0f45c0cc36902e0251c8d34197b357b32b161f9ad72d55a0eab976aae24ed805271b43f0ce2fea5e764494873e0d82a172b3bb54f59b458fd35039c7d81e9ab07f2fb4dad61bd500a119b54c74a12e4569e47b69a95f92c6380af2bd003fa56f06a23bbd1c76d7756bf4fcaff0c23374ec7c4aadbb8b985f14893a91d750e168350685e0f4f079d2d8e79be174ef9355b70719c712c5d15d3e7505a8696", 0xb7}, {&(0x7f00000001c0)="316f5534ea963b2e4bb210515fd2", 0xe}], 0x2}}], 0x1, 0x0)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4)
sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x182, 0x0, 0x27)

2.213068813s ago: executing program 1 (id=466):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, 0x0, &(0x7f0000000040)}, 0x20)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', <r3=>0x0})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_PAUSE_GET(r4, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000280)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000001b0006000c00018008000100", @ANYRES32=r3], 0x20}}, 0x0)

2.212701913s ago: executing program 2 (id=467):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r1}, 0x10)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r2}, 0x10)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0)
write$cgroup_type(r3, &(0x7f0000000180), 0x40010)

2.212465883s ago: executing program 4 (id=468):
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
getpid()
sched_setscheduler(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000006020207b1af8ff00000000bfa100000000000007010000f8ffffffb7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
sendmsg$NFNL_MSG_CTHELPER_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x40080)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = dup(r2)
ioctl$KVM_SET_MSRS(r3, 0x4140aecd, &(0x7f00000001c0)=ANY=[])

1.465757186s ago: executing program 0 (id=469):
syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f0000001380), 0x1, 0x5d8, &(0x7f0000000c00)="$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")
r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000040000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10)
fcntl$setstatus(r0, 0x4, 0x6100)
r3 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r3, 0x0)
ftruncate(r0, 0x1f)
write$cgroup_type(r0, &(0x7f0000000200), 0x175d9003)

1.465319876s ago: executing program 1 (id=470):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x161000, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r1}, 0x10)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000380)={'rose0\x00', 0x112})
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r3}, 0x10)
ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000100)={'vlan0\x00', 0x400})

1.464998126s ago: executing program 2 (id=471):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
mount_setattr(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000380)={0x0, 0x0, 0x100000}, 0x20)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x89901)
move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[])
umount2(&(0x7f00000001c0)='./file0\x00', 0x0)

1.464647636s ago: executing program 4 (id=472):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r1}, 0x10)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)

677.953333ms ago: executing program 0 (id=473):
r0 = socket$inet(0x2, 0x1, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000dc0)='cpuacct.usage_all\x00', 0x26e1, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r1}, &(0x7f0000000040), &(0x7f0000000180)=r2}, 0x20)
bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e23, @multicast1}, 0x10)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r3}, 0x10)
sendto$inet(r0, 0x0, 0xffffffffffffff7c, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10)
close(r0)

676.974883ms ago: executing program 1 (id=474):
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, 0x0, 0x38}, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='page_pool_release\x00', r1}, 0x10)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='page_pool_release\x00', r3}, 0x10)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x7, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000002c0)={r4}, 0x69)

676.657983ms ago: executing program 2 (id=475):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
unshare(0x62040200)
gettid()
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)

676.083323ms ago: executing program 4 (id=478):
rt_sigprocmask(0x0, &(0x7f0000000480)={[0xfffffffffffffffd]}, 0x0, 0x8)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x1, 0x56a, &(0x7f00000015c0)="$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")
accept$inet(0xffffffffffffffff, 0x0, 0x0)
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)
fallocate(r1, 0x0, 0x0, 0x1000f4)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
r2 = open(&(0x7f0000000100)='./bus\x00', 0x14113e, 0x0)
write$binfmt_script(r2, &(0x7f0000000080), 0x208e24b)
fallocate(r0, 0x0, 0x0, 0x1a00)

308.514374ms ago: executing program 0 (id=476):
chdir(0x0)
mkdir(0x0, 0x0)
chdir(0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f00000004c0)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f0000000140)='./bus\x00')
r0 = creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
ftruncate(r0, 0x100000001)

307.960164ms ago: executing program 1 (id=477):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000072000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r1}, 0x10)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x21085e, &(0x7f00000001c0)={[{@grpquota}, {@nouid32}, {@minixdf}]}, 0x1, 0x504, &(0x7f0000001480)="$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")
unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a4a421, &(0x7f00000008c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000))

306.759684ms ago: executing program 4 (id=479):
sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0)
getpid()
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r0, &(0x7f0000000440), 0x10)
listen(r0, 0x0)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10)
writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x1}], 0x1)
r2 = accept4$unix(r0, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000003380)=[{&(0x7f0000000c00)=""/124, 0x7c}], 0x1}}], 0x1, 0x60000160, 0x0)

288.362756ms ago: executing program 2 (id=484):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x7, 0x8000, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0, <r1=>0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000020d0039000000000000b4a518110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @tracing, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10)
io_setup(0x8, &(0x7f00000008c0)=<r3=>0x0)
r4 = openat$sysfs(0xffffff9c, &(0x7f00000037c0)='/sys/kernel/notes', 0x0, 0x0)
r5 = eventfd(0x0)
io_submit(r3, 0x1, &(0x7f00000004c0)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x1, r5}])

256.969638ms ago: executing program 0 (id=481):
socket$packet(0x11, 0xa, 0x300)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x38, r3, 0x1, 0x0, 0x0, {{}, {}, {0x1c, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'syzkaller0\x00'}}}}}, 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})
writev(r0, &(0x7f0000001400)=[{&(0x7f0000000c00)="89e7ee2c7cdad9b4b47380c988ca", 0xfdef}], 0x1)

208.645283ms ago: executing program 1 (id=482):
syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000480)={[{@nodiscard}, {}, {@acl}, {@alloc_mode_reuse}, {@inline_xattr}, {@disable_roll_forward}, {@background_gc_on}, {@nobarrier}, {@noflush_merge}, {@user_xattr}, {@fsync_mode_strict}, {@adaptive_mode}, {@jqfmt_vfsold}, {@noinline_dentry}]}, 0x1, 0x5505, &(0x7f0000002480)="$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")
r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x6b142, 0x0)
pwritev2(r1, &(0x7f0000002600)=[{&(0x7f0000000300)="fe", 0x1}], 0x1, 0x0, 0x0, 0x0)
fallocate(r0, 0x0, 0x0, 0x1001f0)
r2 = open(&(0x7f00000002c0)='./file0\x00', 0x14937e, 0x0)
r3 = open(&(0x7f0000000040)='./bus\x00', 0x145142, 0x0)
r4 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0)
pwritev2(r4, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x6a000}], 0x1, 0x7000, 0x0, 0x3)
ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000000)={r2})

165.930546ms ago: executing program 2 (id=483):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='vm_unmapped_area\x00', r1}, 0x10)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='vm_unmapped_area\x00', r3}, 0x10)
io_setup(0x3, &(0x7f0000000340))

24.791508ms ago: executing program 0 (id=485):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x10, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r0 = socket$inet6(0xa, 0x1, 0x0)
ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={@mcast1, @mcast2, @mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x320})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@newlink={0x24, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfeffff7f}, [@IFLA_VFINFO_LIST={0x4}]}, 0x24}}, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x6, 0x6, 0x8, 0x1, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x3, 0x7, @void, @value, @void, @value}, 0x48)
ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r1, 0x890b, &(0x7f0000000000)={0xffffc0fe, 'vlan0\x00'})
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010d00000000000000850a000000000000000500000014000500200100000000000000000100000000001c00090008000000", @ANYRES32=r3], 0x4c}}, 0x0)

24.181388ms ago: executing program 2 (id=486):
syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000002240)='./file0\x00', 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="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", @ANYRESOCT=0x0, @ANYRES32], 0x6, 0x2d7, &(0x7f0000000a00)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10)
socketpair$tipc(0x1e, 0x5, 0x0, 0x0)
write$binfmt_aout(r0, &(0x7f0000000340)=ANY=[@ANYRESHEX=r0, @ANYBLOB="9e8b32628dea0c337ee5a625726952e890748455d87f0eafa51c11e078e121744b7aaa59b0c1a29aa26c8bd339caf580"], 0xc1)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000005, 0x13, r0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)

0s ago: executing program 0 (id=494):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x16, 0x0, 0x4, 0xff, 0x100, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r1}, 0x0, &(0x7f0000000340)}, 0x20)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349f7f2})
syz_usb_control_io(r0, 0x0, 0x0)

kernel console output (not intermixed with test programs):

96 bytes left
[   26.293573][  T419] loop2: detected capacity change from 0 to 40427
[   26.300819][  T419] =======================================================
[   26.300819][  T419] WARNING: The mand mount option has been deprecated and
[   26.300819][  T419]          and is ignored by this kernel. Remove the mand
[   26.300819][  T419]          option from the mount to silence this warning.
[   26.300819][  T419] =======================================================
[   26.337440][  T419] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[   26.342932][  T426] loop0: detected capacity change from 0 to 256
[   26.345683][   T24] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[   26.351820][  T426] exfat: Bad value for 'fmask'
[   26.367920][  T419] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[   26.377185][   T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   26.387061][  T419] F2FS-fs (loop2): invalid crc value
[   26.394753][   T24] usb 2-1: config 0 descriptor??
[   26.401331][  T419] F2FS-fs (loop2): Found nat_bits in checkpoint
[   26.407625][  T386] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00
[   26.416584][  T386] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   26.424636][  T386] usb 5-1: Product: syz
[   26.428666][  T386] usb 5-1: Manufacturer: syz
[   26.433116][  T386] usb 5-1: SerialNumber: syz
[   26.441361][  T386] usb 5-1: config 0 descriptor??
[   26.460089][  T419] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[   26.467397][  T419] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[   26.493300][  T386] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected
[   26.504049][  T386] usb 5-1: Detected FT232H
[   26.642080][  T433] loop0: detected capacity change from 0 to 40427
[   26.650878][  T433] F2FS-fs (loop0): Invalid log blocks per segment (83886089)
[   26.658925][  T433] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock
[   26.668385][  T433] F2FS-fs (loop0): invalid crc value
[   26.674962][  T433] F2FS-fs (loop0): Found nat_bits in checkpoint
[   26.702252][  T436] serio: Serial port pts0
[   26.702889][  T386] ftdi_sio ttyUSB0: Unable to read latency timer: -32
[   26.727903][  T433] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0
[   26.734890][  T433] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[   26.764797][  T298] syz-executor: attempt to access beyond end of device
[   26.764797][  T298] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[   26.772509][  T316] usb 4-1: string descriptor 0 read error: -22
[   27.011812][   T28] kauditd_printk_skb: 93 callbacks suppressed
[   27.011828][   T28] audit: type=1400 audit(1729099748.887:169): avc:  denied  { create } for  pid=456 comm="syz.2.48" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[   27.043945][  T316] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.0001/input/input4
[   27.067637][  T316] uclogic 0003:256C:006D.0001: input,hiddev96,hidraw0: USB HID v0.00 Device [HID 256c:006d] on usb-dummy_hcd.3-1/input0
[   27.099708][   T28] audit: type=1400 audit(1729099748.977:170): avc:  denied  { create } for  pid=460 comm="syz.2.50" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   27.156527][   T28] audit: type=1400 audit(1729099748.977:171): avc:  denied  { connect } for  pid=460 comm="syz.2.50" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   27.185674][  T386] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0
[   27.198714][   T28] audit: type=1400 audit(1729099748.977:172): avc:  denied  { ioctl } for  pid=460 comm="syz.2.50" path="socket:[16456]" dev="sockfs" ino=16456 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   27.225581][   T28] audit: type=1400 audit(1729099748.977:173): avc:  denied  { write } for  pid=460 comm="syz.2.50" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   27.246870][   T28] audit: type=1400 audit(1729099748.977:174): avc:  denied  { bind } for  pid=460 comm="syz.2.50" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   27.266433][   T28] audit: type=1400 audit(1729099748.977:175): avc:  denied  { read } for  pid=460 comm="syz.2.50" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   27.285676][   T28] audit: type=1400 audit(1729099749.027:176): avc:  denied  { block_suspend } for  pid=463 comm="syz.2.51" capability=36  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[   27.307299][  T386] usb 4-1: USB disconnect, device number 2
[   27.313448][   T28] audit: type=1400 audit(1729099749.057:177): avc:  denied  { append } for  pid=85 comm="syslogd" name="messages" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   27.336370][   T28] audit: type=1400 audit(1729099749.057:178): avc:  denied  { open } for  pid=85 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   27.380996][  T321] usb 5-1: USB disconnect, device number 2
[   27.398573][  T321] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[   27.414495][  T321] ftdi_sio 5-1:0.0: device disconnected
[   27.423299][  T479] loop0: detected capacity change from 0 to 256
[   27.430139][  T479] FAT-fs (loop0): bogus number of FAT sectors
[   27.436295][  T479] FAT-fs (loop0): Can't find a valid FAT filesystem
[   27.537735][  T298] syz-executor (298) used greatest stack depth: 21520 bytes left
[   27.686875][  T493] bridge0: port 1(bridge_slave_0) entered blocking state
[   27.704161][  T493] bridge0: port 1(bridge_slave_0) entered disabled state
[   27.713014][  T493] device bridge_slave_0 entered promiscuous mode
[   27.733225][  T493] bridge0: port 2(bridge_slave_1) entered blocking state
[   27.740094][  T493] bridge0: port 2(bridge_slave_1) entered disabled state
[   27.752876][  T493] device bridge_slave_1 entered promiscuous mode
[   27.850230][  T493] bridge0: port 2(bridge_slave_1) entered blocking state
[   27.857145][  T493] bridge0: port 2(bridge_slave_1) entered forwarding state
[   27.864522][  T493] bridge0: port 1(bridge_slave_0) entered blocking state
[   27.871543][  T493] bridge0: port 1(bridge_slave_0) entered forwarding state
[   27.929331][  T386] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   27.937794][  T386] bridge0: port 1(bridge_slave_0) entered disabled state
[   27.946087][  T386] bridge0: port 2(bridge_slave_1) entered disabled state
[   27.982896][  T316] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   27.990959][  T316] bridge0: port 1(bridge_slave_0) entered blocking state
[   27.998026][  T316] bridge0: port 1(bridge_slave_0) entered forwarding state
[   28.023150][  T316] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   28.031224][  T316] bridge0: port 2(bridge_slave_1) entered blocking state
[   28.038120][  T316] bridge0: port 2(bridge_slave_1) entered forwarding state
[   28.073073][  T321] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   28.088621][  T321] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   28.103565][   T43] device bridge_slave_1 left promiscuous mode
[   28.110282][   T43] bridge0: port 2(bridge_slave_1) entered disabled state
[   28.118180][   T43] device bridge_slave_0 left promiscuous mode
[   28.124977][   T43] bridge0: port 1(bridge_slave_0) entered disabled state
[   28.133740][   T43] device veth1_macvtap left promiscuous mode
[   28.140368][   T43] device veth0_vlan left promiscuous mode
[   28.227099][  T503] loop4: detected capacity change from 0 to 40427
[   28.262311][  T493] device veth0_vlan entered promiscuous mode
[   28.268608][  T503] F2FS-fs (loop4): invalid crc value
[   28.275692][  T325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   28.284464][  T325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   28.296571][  T325] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   28.304091][  T325] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   28.304705][  T503] F2FS-fs (loop4): Found nat_bits in checkpoint
[   28.320696][  T493] device veth1_macvtap entered promiscuous mode
[   28.329346][   T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   28.353027][  T386] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   28.377535][  T316] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   28.387884][  T508] loop3: detected capacity change from 0 to 40427
[   28.419981][  T514] loop0: detected capacity change from 0 to 1024
[   28.434142][  T508] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[   28.443460][  T514] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   28.446907][  T503] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4
[   28.464936][  T508] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[   28.491900][  T508] F2FS-fs (loop3): invalid crc value
[   28.503420][  T508] F2FS-fs (loop3): Found nat_bits in checkpoint
[   28.503419][  T514] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[   28.529644][  T503] syz.4.66: attempt to access beyond end of device
[   28.529644][  T503] loop4: rw=2049, sector=53248, nr_sectors = 8 limit=40427
[   28.545090][  T493] EXT4-fs (loop0): unmounting filesystem.
[   28.604851][  T294] syz-executor: attempt to access beyond end of device
[   28.604851][  T294] loop4: rw=524288, sector=45064, nr_sectors = 8 limit=40427
[   28.614002][  T508] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[   28.626316][   T24] usb 2-1: Cannot set autoneg
[   28.630862][   T24] MOSCHIP usb-ethernet driver: probe of 2-1:0.0 failed with error -71
[   28.642691][   T24] usb 2-1: USB disconnect, device number 2
[   28.648841][  T508] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[   28.656445][  T294] syz-executor: attempt to access beyond end of device
[   28.656445][  T294] loop4: rw=0, sector=45064, nr_sectors = 8 limit=40427
[   28.713662][  T294] syz-executor: attempt to access beyond end of device
[   28.713662][  T294] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[   28.747507][  T508] syz.3.68: attempt to access beyond end of device
[   28.747507][  T508] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[   28.793656][  T508] syz.3.68 (508) used greatest stack depth: 21000 bytes left
[   28.809605][  T517] loop2: detected capacity change from 0 to 40427
[   28.835258][  T517] F2FS-fs (loop2): invalid crc value
[   28.889134][  T517] F2FS-fs (loop2): Found nat_bits in checkpoint
[   28.980644][  T517] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4
[   29.065536][  T545] device pim6reg1 entered promiscuous mode
[   29.101939][  T295] syz-executor: attempt to access beyond end of device
[   29.101939][  T295] loop2: rw=2049, sector=45096, nr_sectors = 16 limit=40427
[   29.197351][  T558] loop0: detected capacity change from 0 to 512
[   29.204757][  T558] EXT4-fs: Ignoring removed mblk_io_submit option
[   29.220489][  T558] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[   29.231617][  T547] bridge0: port 1(bridge_slave_0) entered blocking state
[   29.242220][  T547] bridge0: port 1(bridge_slave_0) entered disabled state
[   29.250211][  T547] device bridge_slave_0 entered promiscuous mode
[   29.269489][  T561] syz.0.82 (561) used greatest stack depth: 20296 bytes left
[   29.281945][  T493] EXT4-fs (loop0): unmounting filesystem.
[   29.295241][  T547] bridge0: port 2(bridge_slave_1) entered blocking state
[   29.302457][  T547] bridge0: port 2(bridge_slave_1) entered disabled state
[   29.318827][  T563] loop0: detected capacity change from 0 to 256
[   29.328655][  T547] device bridge_slave_1 entered promiscuous mode
[   29.343177][  T386] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[   29.352125][  T563] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   29.363334][  T563] exFAT-fs (loop0): Medium has reported failures. Some data may be lost.
[   29.374453][  T563] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[   29.442466][   T24] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[   29.456292][   T10] device bridge_slave_1 left promiscuous mode
[   29.462524][   T10] bridge0: port 2(bridge_slave_1) entered disabled state
[   29.470504][   T10] device bridge_slave_0 left promiscuous mode
[   29.476786][   T10] bridge0: port 1(bridge_slave_0) entered disabled state
[   29.484782][   T10] device veth1_macvtap left promiscuous mode
[   29.490812][   T10] device veth0_vlan left promiscuous mode
[   29.593446][  T570] process 'syz.0.85' launched './file0' with NULL argv: empty string added
[   29.602441][  T386] usb 4-1: Using ep0 maxpacket: 8
[   29.613653][   T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   29.621095][   T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   29.628386][   T60] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   29.642556][   T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   29.650775][   T40] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   29.659362][   T40] bridge0: port 1(bridge_slave_0) entered blocking state
[   29.666447][   T40] bridge0: port 1(bridge_slave_0) entered forwarding state
[   29.673778][   T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   29.682026][   T40] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   29.690581][   T40] bridge0: port 2(bridge_slave_1) entered blocking state
[   29.697464][   T40] bridge0: port 2(bridge_slave_1) entered forwarding state
[   29.704869][   T40] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   29.714187][  T321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   29.722161][  T321] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   29.723024][  T386] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   29.752236][  T547] device veth0_vlan entered promiscuous mode
[   29.758732][  T321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   29.767650][  T321] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   29.775635][  T321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   29.784377][  T321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   29.792659][  T321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   29.800356][  T321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   29.810298][   T40] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   29.812483][  T386] usb 4-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d
[   29.817768][   T40] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   29.826937][  T386] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105
[   29.833768][   T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   29.841904][  T386] usb 4-1: SerialNumber: syz
[   29.853867][   T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   29.865542][  T547] device veth1_macvtap entered promiscuous mode
[   29.866760][   T24] usb 2-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00
[   29.879413][  T386] usb 4-1: config 0 descriptor??
[   29.881963][   T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   29.895847][   T24] usb 2-1: config 0 descriptor??
[   29.901832][  T316] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   29.910316][  T316] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   29.918904][  T316] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   29.933089][  T386] usb 4-1: Found UVC 0.00 device <unnamed> (05ac:8501)
[   29.940656][  T386] uvcvideo 4-1:0.0: Entity type for entity Output 255 was not initialized!
[   29.949210][   T19] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   29.957356][   T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   29.966033][  T386] usb 4-1: Failed to create links for entity 255
[   29.972180][  T386] usb 4-1: Failed to register entities (-22).
[   29.978536][   T19] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   29.986781][   T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   30.050618][  T577] loop4: detected capacity change from 0 to 2048
[   30.057490][  T577] EXT4-fs: Ignoring removed mblk_io_submit option
[   30.072628][   T60] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   30.075481][  T577] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[   30.083758][   T60] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   30.106493][   T60] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[   30.115650][   T60] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   30.130199][   T60] usb 3-1: config 0 descriptor??
[   30.153672][  T581] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.86: bg 0: block 234: padding at end of block bitmap is not set
[   30.161899][  T386] usb 4-1: USB disconnect, device number 3
[   30.172398][  T581] EXT4-fs (loop4): Remounting filesystem read-only
[   30.220464][  T547] EXT4-fs (loop4): unmounting filesystem.
[   30.384101][   T24] logitech-hidpp-device 0003:046D:C086.0002: unknown main item tag 0x0
[   30.392704][   T24] logitech-hidpp-device 0003:046D:C086.0002: unknown main item tag 0x0
[   30.403697][   T24] logitech-hidpp-device 0003:046D:C086.0002: unknown main item tag 0x4
[   30.411968][   T24] logitech-hidpp-device 0003:046D:C086.0002: unknown main item tag 0x0
[   30.421740][   T24] logitech-hidpp-device 0003:046D:C086.0002: hidraw0: USB HID v0.00 Device [HID 046d:c086] on usb-dummy_hcd.1-1/input0
[   30.522690][   T19] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[   30.540396][  T594] loop0: detected capacity change from 0 to 40427
[   30.548426][  T594] F2FS-fs (loop0): invalid crc value
[   30.555011][  T594] F2FS-fs (loop0): Found nat_bits in checkpoint
[   30.592253][  T594] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[   30.612811][   T60] hid (null): bogus close delimiter
[   30.613058][  T316] usb 2-1: USB disconnect, device number 3
[   30.763156][   T19] usb 5-1: Using ep0 maxpacket: 16
[   30.862489][   T60] usb 3-1: language id specifier not provided by device, defaulting to English
[   30.882464][   T19] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   30.893454][   T19] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   30.904065][   T19] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40
[   30.913007][   T19] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   30.921329][   T19] usb 5-1: config 0 descriptor??
[   31.112453][   T60] uclogic 0003:256C:006D.0003: failed retrieving Huion firmware version: -71
[   31.121339][   T60] uclogic 0003:256C:006D.0003: failed probing parameters: -71
[   31.129125][   T60] uclogic: probe of 0003:256C:006D.0003 failed with error -71
[   31.137286][  T610] netlink: 24 bytes leftover after parsing attributes in process `syz.1.97'.
[   31.149213][   T60] usb 3-1: USB disconnect, device number 2
[   31.318777][  T614] loop1: detected capacity change from 0 to 40427
[   31.332045][  T614] F2FS-fs (loop1): Invalid SB checksum offset: 0
[   31.338550][  T614] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock
[   31.349258][  T614] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437)
[   31.385442][  T614] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0
[   31.392486][  T614] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[   31.403575][   T19] cp2112 0003:10C4:EA90.0004: unknown main item tag 0x0
[   31.410384][   T19] cp2112 0003:10C4:EA90.0004: unknown main item tag 0x0
[   31.427590][   T19] cp2112 0003:10C4:EA90.0004: unknown main item tag 0x0
[   31.442446][   T19] cp2112 0003:10C4:EA90.0004: unknown main item tag 0x0
[   31.459958][   T19] cp2112 0003:10C4:EA90.0004: unknown main item tag 0x0
[   31.467609][   T19] cp2112 0003:10C4:EA90.0004: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0
[   31.528466][  T614] syz.1.99: attempt to access beyond end of device
[   31.528466][  T614] loop1: rw=2049, sector=53248, nr_sectors = 2144 limit=40427
[   31.548128][  T614] syz.1.99: attempt to access beyond end of device
[   31.548128][  T614] loop1: rw=2049, sector=55392, nr_sectors = 2048 limit=40427
[   31.570117][  T614] syz.1.99: attempt to access beyond end of device
[   31.570117][  T614] loop1: rw=2049, sector=57440, nr_sectors = 2048 limit=40427
[   31.616446][  T585] loop4: detected capacity change from 0 to 2048
[   31.622780][   T19] cp2112 0003:10C4:EA90.0004: error requesting version
[   31.630188][   T19] cp2112: probe of 0003:10C4:EA90.0004 failed with error -32
[   31.674998][  T585] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[   31.706460][   T24] usb 5-1: USB disconnect, device number 3
[   31.894848][  T668] device pim6reg1 entered promiscuous mode
[   31.947688][  T676] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[   31.979153][   T19] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[   31.996668][  T682] loop1: detected capacity change from 0 to 512
[   32.008043][  T682] EXT4-fs: Ignoring removed orlov option
[   32.016728][  T684] loop0: detected capacity change from 0 to 128
[   32.024057][  T684] EXT4-fs (loop0): Test dummy encryption mode enabled
[   32.031707][  T684] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[   32.040968][  T684] ext4 filesystem being mounted at /28/mnt supports timestamps until 2038 (0x7fffffff)
[   32.045490][  T682] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[   32.060162][  T682] ext4 filesystem being mounted at /22/bus supports timestamps until 2038 (0x7fffffff)
[   32.064331][  T684] fscrypt: AES-256-XTS using implementation "xts-aes-aesni"
[   32.082254][   T28] kauditd_printk_skb: 47 callbacks suppressed
[   32.082272][   T28] audit: type=1400 audit(1729099753.957:226): avc:  denied  { execute } for  pid=683 comm="syz.0.127" path="/28/mnt/bus" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   32.115177][  T296] EXT4-fs (loop1): unmounting filesystem.
[   32.135947][   T28] audit: type=1400 audit(1729099754.017:227): avc:  denied  { read } for  pid=690 comm="syz.1.128" name="ptp0" dev="devtmpfs" ino=172 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[   32.162126][   T28] audit: type=1400 audit(1729099754.037:228): avc:  denied  { open } for  pid=690 comm="syz.1.128" path="/dev/ptp0" dev="devtmpfs" ino=172 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[   32.185327][   T28] audit: type=1400 audit(1729099754.037:229): avc:  denied  { ioctl } for  pid=690 comm="syz.1.128" path="cgroup:[4026532295]" dev="nsfs" ino=4026532295 ioctlcmd=0xb701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[   32.222014][  T547] EXT4-fs (loop4): unmounting filesystem.
[   32.240999][   T28] audit: type=1400 audit(1729099754.117:230): avc:  denied  { sqpoll } for  pid=695 comm="syz.4.130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[   32.274467][  T493] EXT4-fs (loop0): unmounting filesystem.
[   32.336663][  T702] loop0: detected capacity change from 0 to 2048
[   32.352525][   T19] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   32.369258][   T19] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   32.386245][   T19] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[   32.395691][   T19] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   32.404542][  T702] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[   32.409202][   T19] usb 3-1: config 0 descriptor??
[   32.431100][   T28] audit: type=1400 audit(1729099754.307:231): avc:  denied  { setopt } for  pid=711 comm="syz.1.137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   32.461444][  T493] EXT4-fs (loop0): unmounting filesystem.
[   32.523423][  T722] syzkaller0: mtu greater than device maximum
[   32.625437][  T738] loop1: detected capacity change from 0 to 512
[   32.643792][  T740] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[   32.664347][  T738] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[   32.684568][  T738] ext4 filesystem being mounted at /31/wÅü5ÔTÕÔ)­`)Y�Fæ¾nA­½@T<Ÿ3»Ú‚$¢ó×rçcnH³<¿pƒrèñ¹“>ÅwC¾" žð-ùËòöè€Ó8 supports timestamps until 2038 (0x7fffffff)
[   32.791062][  T732] loop0: detected capacity change from 0 to 40427
[   32.798149][  T732] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[   32.805829][  T732] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[   32.817468][  T296] EXT4-fs (loop1): unmounting filesystem.
[   32.822521][  T732] F2FS-fs (loop0): invalid crc value
[   32.824819][  T747] loop4: detected capacity change from 0 to 8192
[   32.840019][  T747] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   32.851856][  T732] F2FS-fs (loop0): Found nat_bits in checkpoint
[   32.864885][   T28] audit: type=1400 audit(1729099754.747:232): avc:  denied  { mount } for  pid=746 comm="syz.4.151" name="/" dev="loop4" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1
[   32.902812][   T19] hid (null): bogus close delimiter
[   32.920902][  T755] loop1: detected capacity change from 0 to 256
[   32.932689][  T732] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[   32.942044][  T732] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[   32.982623][   T28] audit: type=1400 audit(1729099754.867:233): avc:  denied  { mounton } for  pid=754 comm="syz.1.153" path="/33/file0/bus" dev="loop1" ino=1048610 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=file permissive=1
[   33.014901][  T732] bio_check_eod: 5 callbacks suppressed
[   33.014923][  T732] syz.0.146: attempt to access beyond end of device
[   33.014923][  T732] loop0: rw=2049, sector=45096, nr_sectors = 128 limit=40427
[   33.036926][  T732] syz.0.146: attempt to access beyond end of device
[   33.036926][  T732] loop0: rw=34817, sector=45096, nr_sectors = 128 limit=40427
[   33.055948][  T732] syz.0.146: attempt to access beyond end of device
[   33.055948][  T732] loop0: rw=2049, sector=45096, nr_sectors = 128 limit=40427
[   33.073098][  T732] syz.0.146: attempt to access beyond end of device
[   33.073098][  T732] loop0: rw=2049, sector=77824, nr_sectors = 416 limit=40427
[   33.087482][  T755] loop1: detected capacity change from 256 to 253
[   33.112587][   T19] usb 3-1: language id specifier not provided by device, defaulting to English
[   33.133330][   T10] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix.
[   33.143179][   T10] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix.
[   33.206701][   T28] audit: type=1400 audit(1729099755.087:234): avc:  denied  { remount } for  pid=746 comm="syz.4.151" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1
[   33.258176][   T28] audit: type=1400 audit(1729099755.137:235): avc:  denied  { unmount } for  pid=296 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1
[   33.508797][  T768] bridge0: port 1(bridge_slave_0) entered blocking state
[   33.511105][  T770] kvm: pic: non byte write
[   33.517326][  T768] bridge0: port 1(bridge_slave_0) entered disabled state
[   33.528855][  T768] device bridge_slave_0 entered promiscuous mode
[   33.538034][  T768] bridge0: port 2(bridge_slave_1) entered blocking state
[   33.545015][  T768] bridge0: port 2(bridge_slave_1) entered disabled state
[   33.552736][  T768] device bridge_slave_1 entered promiscuous mode
[   33.555324][   T19] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.0005/input/input5
[   33.572184][  T778] syz.0.161 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[   33.573437][   T19] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.0005/input/input6
[   33.595506][   T19] input: HID 256c:006d Touch Strip as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.0005/input/input7
[   33.609838][   T19] input: HID 256c:006d Dial as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.0005/input/input8
[   33.625176][   T19] uclogic 0003:256C:006D.0005: input,hiddev96,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.2-1/input0
[   33.661580][  T780] loop3: detected capacity change from 0 to 512
[   33.680201][  T780] EXT4-fs (loop3): 1 truncate cleaned up
[   33.689859][  T780] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[   33.774086][   T60] usb 3-1: USB disconnect, device number 3
[   33.800156][  T768] bridge0: port 2(bridge_slave_1) entered blocking state
[   33.807038][  T768] bridge0: port 2(bridge_slave_1) entered forwarding state
[   33.814157][  T768] bridge0: port 1(bridge_slave_0) entered blocking state
[   33.821091][  T768] bridge0: port 1(bridge_slave_0) entered forwarding state
[   33.847614][   T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   33.862581][   T24] bridge0: port 1(bridge_slave_0) entered disabled state
[   33.873614][   T24] bridge0: port 2(bridge_slave_1) entered disabled state
[   33.890600][   T19] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   33.899013][   T19] bridge0: port 1(bridge_slave_0) entered blocking state
[   33.906005][   T19] bridge0: port 1(bridge_slave_0) entered forwarding state
[   33.913339][   T19] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   33.921653][   T19] bridge0: port 2(bridge_slave_1) entered blocking state
[   33.928567][   T19] bridge0: port 2(bridge_slave_1) entered forwarding state
[   33.955228][  T225] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   33.964609][  T225] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   33.973941][  T509] device bridge_slave_1 left promiscuous mode
[   33.980021][  T509] bridge0: port 2(bridge_slave_1) entered disabled state
[   33.987477][  T509] device bridge_slave_0 left promiscuous mode
[   33.994113][  T509] bridge0: port 1(bridge_slave_0) entered disabled state
[   34.002088][  T509] device veth1_macvtap left promiscuous mode
[   34.008201][  T509] device veth0_vlan left promiscuous mode
[   34.082283][  T768] device veth0_vlan entered promiscuous mode
[   34.088895][   T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   34.097148][   T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   34.105525][   T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   34.113371][   T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   34.122094][   T19] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   34.129802][   T19] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   34.141728][   T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   34.149821][   T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   34.159973][  T768] device veth1_macvtap entered promiscuous mode
[   34.169984][   T19] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   34.177565][   T19] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   34.185845][   T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   34.197641][   T19] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   34.206565][   T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   34.340848][  T805] loop2: detected capacity change from 0 to 1024
[   34.348203][  T805] EXT4-fs: Ignoring removed nomblk_io_submit option
[   34.377644][  T805] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[   34.496906][  T297] EXT4-fs (loop3): unmounting filesystem.
[   34.514966][  T817] loop3: detected capacity change from 0 to 1024
[   34.521457][  T817] EXT4-fs: Ignoring removed oldalloc option
[   34.531552][  T817] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   34.558703][  T817] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[   34.587946][  T297] EXT4-fs (loop3): unmounting filesystem.
[   34.662410][   T19] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[   34.672428][  T316] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   34.811592][  T834] loop4: detected capacity change from 0 to 512
[   34.822425][   T24] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[   34.823779][  T834] EXT4-fs (loop4): too many log groups per flexible block group
[   34.837443][  T834] EXT4-fs (loop4): failed to initialize mballoc (-12)
[   34.844448][  T834] EXT4-fs (loop4): mount failed
[   34.912433][  T316] usb 1-1: Using ep0 maxpacket: 16
[   35.022849][   T19] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   35.033814][  T316] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   35.044698][   T19] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   35.054612][  T316] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   35.064983][   T19] usb 3-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00
[   35.074089][  T316] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40
[   35.079690][  T842] loop4: detected capacity change from 0 to 40427
[   35.083383][   T19] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   35.097529][  T316] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   35.105716][  T842] F2FS-fs (loop4): Small segment_count (9 < 1 * 24)
[   35.112905][  T316] usb 1-1: config 0 descriptor??
[   35.117979][   T19] usb 3-1: config 0 descriptor??
[   35.127943][  T842] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[   35.138290][  T842] F2FS-fs (loop4): Found nat_bits in checkpoint
[   35.187660][  T842] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[   35.194794][  T842] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[   35.212435][   T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   35.223918][   T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   35.233655][   T24] usb 2-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00
[   35.243285][   T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   35.254911][   T24] usb 2-1: config 0 descriptor??
[   35.268883][  T547] syz-executor: attempt to access beyond end of device
[   35.268883][  T547] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[   35.583408][  T316] cp2112 0003:10C4:EA90.0006: unknown main item tag 0x0
[   35.591829][  T316] cp2112 0003:10C4:EA90.0006: unknown main item tag 0x0
[   35.598957][  T316] cp2112 0003:10C4:EA90.0006: unknown main item tag 0x0
[   35.607669][   T19] lg-g15 0003:046D:C222.0007: unknown main item tag 0x0
[   35.615139][  T316] cp2112 0003:10C4:EA90.0006: unknown main item tag 0x0
[   35.623087][  T316] cp2112 0003:10C4:EA90.0006: unknown main item tag 0x0
[   35.630354][   T19] lg-g15 0003:046D:C222.0007: hidraw0: USB HID v0.00 Device [HID 046d:c222] on usb-dummy_hcd.2-1/input0
[   35.643031][  T316] cp2112 0003:10C4:EA90.0006: hidraw1: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.0-1/input0
[   35.692827][  T386] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[   35.743424][   T24] hid-multitouch 0003:1FD2:6007.0008: unknown main item tag 0x0
[   35.750928][   T24] hid-multitouch 0003:1FD2:6007.0008: unknown main item tag 0x0
[   35.758427][   T24] hid-multitouch 0003:1FD2:6007.0008: unknown main item tag 0x0
[   35.765906][   T24] hid-multitouch 0003:1FD2:6007.0008: unknown main item tag 0x0
[   35.773360][   T24] hid-multitouch 0003:1FD2:6007.0008: unknown main item tag 0x0
[   35.781931][   T24] hid-multitouch 0003:1FD2:6007.0008: hidraw2: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.1-1/input0
[   35.792493][  T316] cp2112 0003:10C4:EA90.0006: Part Number: 0x00 Device Version: 0x00
[   35.824681][   T24] usb 3-1: USB disconnect, device number 4
[   35.944568][  T225] usb 2-1: USB disconnect, device number 4
[   36.052524][  T386] usb 5-1: config 0 has an invalid descriptor of length 235, skipping remainder of the config
[   36.062755][  T386] usb 5-1: too many endpoints for config 0 interface 0 altsetting 199: 83, using maximum allowed: 30
[   36.073766][  T386] usb 5-1: config 0 interface 0 altsetting 199 has 0 endpoint descriptors, different from the interface descriptor's value: 83
[   36.086880][  T386] usb 5-1: config 0 interface 0 has no altsetting 0
[   36.252664][  T386] usb 5-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99
[   36.261764][  T386] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   36.269648][  T386] usb 5-1: Product: syz
[   36.273721][  T386] usb 5-1: Manufacturer: syz
[   36.278096][  T386] usb 5-1: SerialNumber: syz
[   36.283176][  T386] usb 5-1: config 0 descriptor??
[   36.327912][  T295] EXT4-fs (loop2): unmounting filesystem.
[   36.501663][  T873] loop1: detected capacity change from 0 to 2048
[   36.514510][  T873] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[   36.527818][  T873] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[   36.542812][  T873] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28
[   36.555124][  T873] EXT4-fs (loop1): This should not happen!! Data will be lost
[   36.555124][  T873] 
[   36.565839][  T873] EXT4-fs (loop1): Total free blocks count 0
[   36.572129][  T386] usb 5-1: selecting invalid altsetting 0
[   36.575227][  T877] loop3: detected capacity change from 0 to 128
[   36.579880][  T386] snd-usb-audio: probe of 5-1:0.0 failed with error -2
[   36.590490][  T873] EXT4-fs (loop1): Free/Dirty block details
[   36.592042][  T386] usb 5-1: USB disconnect, device number 4
[   36.599953][  T873] EXT4-fs (loop1): free_blocks=2415919104
[   36.607797][  T873] EXT4-fs (loop1): dirty_blocks=16
[   36.612115][  T877] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[   36.613054][  T873] EXT4-fs (loop1): Block reservation details
[   36.621519][  T877] ext4 filesystem being mounted at /23/mnt supports timestamps until 2038 (0x7fffffff)
[   36.627344][  T873] EXT4-fs (loop1): i_reserved_data_blocks=1
[   36.651453][  T877] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni"
[   36.663073][  T877] fscrypt: loop3: 1 inode(s) still busy after removing key with identifier 69b2f6edeee720cce0577937eb8a6751, including ino 12
[   36.676464][  T225] usb 1-1: USB disconnect, device number 2
[   36.683314][  T509] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28
[   36.687421][  T297] EXT4-fs (loop3): unmounting filesystem.
[   36.729466][  T884] loop3: detected capacity change from 0 to 2048
[   36.742465][   T40] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[   36.744890][  T886] loop1: detected capacity change from 0 to 128
[   36.754799][  T884] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[   36.766551][  T886] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[   36.775258][  T886] ext4 filesystem being mounted at /9/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff)
[   36.813012][  T467] udevd[467]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   36.836244][  T768] EXT4-fs (loop1): unmounting filesystem.
[   36.858495][  T297] EXT4-fs (loop3): unmounting filesystem.
[   37.012557][   T40] usb 3-1: Using ep0 maxpacket: 32
[   37.064546][  T910] xt_hashlimit: size too large, truncated to 1048576
[   37.101347][   T28] kauditd_printk_skb: 12 callbacks suppressed
[   37.101363][   T28] audit: type=1400 audit(1729099758.977:248): avc:  denied  { unlink } for  pid=911 comm="syz.3.208" name="#1" dev="tmpfs" ino=180 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[   37.152684][   T40] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   37.168052][   T40] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   37.180713][   T40] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[   37.189961][   T40] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   37.202521][   T40] usb 3-1: config 0 descriptor??
[   37.232400][   T24] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[   37.247889][   T40] hub 3-1:0.0: USB hub found
[   37.315817][   T28] audit: type=1400 audit(1729099759.197:249): avc:  denied  { map } for  pid=920 comm="syz.4.212" path="socket:[18935]" dev="sockfs" ino=18935 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[   37.351254][  T921] loop4: detected capacity change from 0 to 2048
[   37.357481][   T28] audit: type=1400 audit(1729099759.217:250): avc:  denied  { read accept } for  pid=920 comm="syz.4.212" path="socket:[18935]" dev="sockfs" ino=18935 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[   37.386767][  T921] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[   37.405744][   T28] audit: type=1400 audit(1729099759.287:251): avc:  denied  { remove_name } for  pid=547 comm="syz-executor" name="lost+found" dev="loop4" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   37.432876][  T547] EXT4-fs (loop4): unmounting filesystem.
[   37.438627][   T28] audit: type=1400 audit(1729099759.307:252): avc:  denied  { rmdir } for  pid=547 comm="syz-executor" name="lost+found" dev="loop4" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   37.463874][   T28] audit: type=1400 audit(1729099759.307:253): avc:  denied  { unlink } for  pid=547 comm="syz-executor" name="file0" dev="loop4" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   37.480917][  T919] loop0: detected capacity change from 0 to 40427
[   37.486999][   T40] hub 3-1:0.0: 1 port detected
[   37.497702][   T60] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[   37.498357][   T28] audit: type=1400 audit(1729099759.307:254): avc:  denied  { unlink } for  pid=547 comm="syz-executor" name="file1" dev="loop4" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1
[   37.528240][  T919] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[   37.546901][  T919] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[   37.549332][   T28] audit: type=1400 audit(1729099759.307:255): avc:  denied  { unmount } for  pid=547 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1
[   37.558416][  T927] loop4: detected capacity change from 0 to 128
[   37.575484][   T28] audit: type=1400 audit(1729099759.307:256): avc:  denied  { unlink } for  pid=547 comm="syz-executor" name="bus" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   37.581878][  T919] F2FS-fs (loop0): invalid crc value
[   37.613847][  T919] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 39874397669)
[   37.626839][  T919] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix.
[   37.634236][  T927] FAT-fs (loop4): error, clusters badly computed (2 != 1)
[   37.642629][  T927] FAT-fs (loop4): Filesystem has been set read-only
[   37.659902][  T919] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[   37.661818][  T547] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 0, start 0000ac9a)
[   37.666994][  T919] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[   37.686345][  T547] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 0, start 0000ac9a)
[   37.688117][   T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   37.707532][   T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   37.717529][   T24] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[   37.726694][   T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   37.741296][   T24] usb 2-1: config 0 descriptor??
[   37.882621][   T60] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   37.894545][   T60] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   37.904265][   T60] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[   37.913459][   T60] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   37.929208][   T60] usb 4-1: config 0 descriptor??
[   37.947184][  T935] bridge0: port 1(bridge_slave_0) entered blocking state
[   37.954198][  T935] bridge0: port 1(bridge_slave_0) entered disabled state
[   37.961398][  T935] device bridge_slave_0 entered promiscuous mode
[   37.968294][  T935] bridge0: port 2(bridge_slave_1) entered blocking state
[   37.975681][  T935] bridge0: port 2(bridge_slave_1) entered disabled state
[   37.983029][  T935] device bridge_slave_1 entered promiscuous mode
[   38.034027][  T935] bridge0: port 2(bridge_slave_1) entered blocking state
[   38.040900][  T935] bridge0: port 2(bridge_slave_1) entered forwarding state
[   38.048104][  T935] bridge0: port 1(bridge_slave_0) entered blocking state
[   38.055935][  T935] bridge0: port 1(bridge_slave_0) entered forwarding state
[   38.080432][  T321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   38.088228][  T321] bridge0: port 1(bridge_slave_0) entered disabled state
[   38.095886][  T321] bridge0: port 2(bridge_slave_1) entered disabled state
[   38.102488][  T386] usb 1-1: new full-speed USB device number 3 using dummy_hcd
[   38.112974][  T316] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   38.121117][  T316] bridge0: port 1(bridge_slave_0) entered blocking state
[   38.128102][  T316] bridge0: port 1(bridge_slave_0) entered forwarding state
[   38.142714][   T40] hub 3-1:0.0: activate --> -90
[   38.148455][  T316] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   38.156652][  T316] bridge0: port 2(bridge_slave_1) entered blocking state
[   38.163558][  T316] bridge0: port 2(bridge_slave_1) entered forwarding state
[   38.170773][  T316] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   38.186006][  T325] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   38.198960][  T935] device veth0_vlan entered promiscuous mode
[   38.205657][  T325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   38.214108][  T325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   38.221915][  T325] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   38.229380][  T325] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   38.242476][  T316] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   38.252712][  T935] device veth1_macvtap entered promiscuous mode
[   38.263574][  T573] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   38.273886][  T941] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   38.472474][  T386] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[   38.483736][  T386] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64
[   38.502195][  T386] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64
[   38.513085][  T386] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64
[   38.682495][  T386] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   38.691414][  T386] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   38.699379][  T386] usb 1-1: Product: syz
[   38.703430][  T386] usb 1-1: Manufacturer: syz
[   38.707801][  T386] usb 1-1: SerialNumber: syz
[   38.732596][  T934] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22
[   38.763804][  T509] device bridge_slave_1 left promiscuous mode
[   38.769746][  T509] bridge0: port 2(bridge_slave_1) entered disabled state
[   38.777156][  T509] device bridge_slave_0 left promiscuous mode
[   38.783421][  T509] bridge0: port 1(bridge_slave_0) entered disabled state
[   38.791373][  T509] device veth1_macvtap left promiscuous mode
[   38.797348][  T509] device veth0_vlan left promiscuous mode
[   38.806049][   T28] audit: type=1400 audit(1729099760.687:257): avc:  denied  { write } for  pid=956 comm="syz.4.222" path="socket:[19086]" dev="sockfs" ino=19086 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   38.895647][   T24] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.0009/input/input9
[   38.908716][   T24] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.0009/input/input10
[   38.922141][   T24] input: HID 256c:006d Touch Strip as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.0009/input/input11
[   38.936210][   T24] input: HID 256c:006d Dial as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.0009/input/input12
[   38.950467][   T24] uclogic 0003:256C:006D.0009: input,hiddev96,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.1-1/input0
[   38.954212][  T934] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22
[   38.977901][  T934] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22
[   39.063651][   T60] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.000A/input/input13
[   39.080068][   T60] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.000A/input/input14
[   39.100161][   T60] input: HID 256c:006d Touch Strip as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.000A/input/input15
[   39.114613][   T60] input: HID 256c:006d Dial as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.000A/input/input16
[   39.128151][   T60] uclogic 0003:256C:006D.000A: input,hiddev97,hidraw1: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.3-1/input0
[   39.144392][   T19] usb 2-1: USB disconnect, device number 5
[   39.203123][   T40] usb 3-1-port1: over-current condition
[   39.208562][   T40] usb 3-1-port1: config error
[   39.258323][   T60] usb 4-1: USB disconnect, device number 4
[   39.412937][  T941] usb 3-1: USB disconnect, device number 5
[   39.629862][  T964] kvm: emulating exchange as write
[   39.632806][  T934] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22
[   39.642199][  T934] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22
[   39.872562][  T386] cdc_ncm 1-1:1.0: MAC-Address: 42:42:42:42:42:42
[   39.881981][  T386] cdc_ncm 1-1:1.0: dwNtbInMaxSize=2 is too small. Using 2048
[   39.897734][  T386] cdc_ncm 1-1:1.0: setting rx_max = 2048
[   39.926884][  T977] loop2: detected capacity change from 0 to 512
[   39.935126][  T977] EXT4-fs: Ignoring removed mblk_io_submit option
[   39.942161][  T977] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem
[   39.952501][  T977] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b002c118, mo2=0002]
[   39.960301][  T977] System zones: 1-12
[   39.983527][  T977] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2213: inode #15: comm syz.2.229: corrupted in-inode xattr
[   39.995905][  T977] EXT4-fs error (device loop2): ext4_orphan_get:1401: comm syz.2.229: couldn't read orphan inode 15 (err -117)
[   40.009499][  T977] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[   40.023413][  T977] EXT4-fs warning (device loop2): dx_probe:832: inode #2: comm syz.2.229: Unrecognised inode hash code 4
[   40.034782][  T977] EXT4-fs warning (device loop2): dx_probe:965: inode #2: comm syz.2.229: Corrupt directory, running e2fsck is recommended
[   40.049549][  T977] EXT4-fs warning (device loop2): dx_probe:832: inode #2: comm syz.2.229: Unrecognised inode hash code 4
[   40.060839][  T977] EXT4-fs warning (device loop2): dx_probe:965: inode #2: comm syz.2.229: Corrupt directory, running e2fsck is recommended
[   40.083462][  T295] EXT4-fs (loop2): unmounting filesystem.
[   40.092452][  T386] cdc_ncm 1-1:1.0: setting tx_max = 184
[   40.101548][  T386] cdc_ncm 1-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM (NO ZLP), 42:42:42:42:42:42
[   40.123958][  T982] loop3: detected capacity change from 0 to 4096
[   40.135860][  T386] usb 1-1: USB disconnect, device number 3
[   40.164444][  T386] cdc_ncm 1-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.0-1, CDC NCM (NO ZLP)
[   40.193460][  T982] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[   40.399843][  T297] EXT4-fs (loop3): unmounting filesystem.
[   40.508521][ T1013] loop2: detected capacity change from 0 to 128
[   40.545836][ T1013] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[   40.572780][ T1013] ext4 filesystem being mounted at /35/mnt supports timestamps until 2038 (0x7fffffff)
[   40.589674][ T1020] loop3: detected capacity change from 0 to 512
[   40.626659][  T295] EXT4-fs (loop2): unmounting filesystem.
[   40.648192][ T1020] EXT4-fs error (device loop3): ext4_quota_enable:6951: comm syz.3.239: Bad quota inum: 2, type: 2
[   40.672822][ T1020] EXT4-fs warning (device loop3): ext4_enable_quotas:6999: Failed to enable quota tracking (type=2, err=-117, ino=2). Please run e2fsck to fix.
[   40.703131][ T1020] EXT4-fs (loop3): mount failed
[   40.739895][ T1039] loop2: detected capacity change from 0 to 128
[   40.747800][ T1027] device pim6reg1 entered promiscuous mode
[   40.930387][ T1039] syz.2.243: attempt to access beyond end of device
[   40.930387][ T1039] loop2: rw=34817, sector=97, nr_sectors = 32 limit=128
[   40.978378][ T1067] loop3: detected capacity change from 0 to 1024
[   41.023475][ T1067] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[   41.053233][ T1075] loop1: detected capacity change from 0 to 2048
[   41.060266][ T1075] EXT4-fs: Ignoring removed mblk_io_submit option
[   41.103757][ T1075] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[   41.111091][ T1067] EXT4-fs error (device loop3): ext4_xattr_ibody_get:603: inode #15: comm syz.3.253: corrupted in-inode xattr
[   41.146538][ T1067] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2213: inode #15: comm syz.3.253: corrupted in-inode xattr
[   41.178605][  T297] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 16: comm syz-executor: path /38/bus: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[   41.219298][  T297] EXT4-fs (loop3): unmounting filesystem.
[   41.220245][ T1086] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.256: bg 0: block 234: padding at end of block bitmap is not set
[   41.241739][ T1086] EXT4-fs (loop1): Remounting filesystem read-only
[   41.302503][  T768] EXT4-fs (loop1): unmounting filesystem.
[   41.455951][ T1102] binder: BINDER_SET_CONTEXT_MGR already set
[   41.461901][ T1102] binder: 1101:1102 ioctl 4018620d 20000040 returned -16
[   41.492799][  T941] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[   41.556832][ T1110] loop1: detected capacity change from 0 to 512
[   41.563812][ T1110] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   41.577164][ T1110] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   41.589538][ T1110] EXT4-fs (loop1): 1 truncate cleaned up
[   41.595106][ T1110] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[   41.610794][ T1103] bridge0: port 1(bridge_slave_0) entered blocking state
[   41.618030][ T1103] bridge0: port 1(bridge_slave_0) entered disabled state
[   41.625821][ T1103] device bridge_slave_0 entered promiscuous mode
[   41.633265][ T1103] bridge0: port 2(bridge_slave_1) entered blocking state
[   41.640146][ T1103] bridge0: port 2(bridge_slave_1) entered disabled state
[   41.647911][ T1103] device bridge_slave_1 entered promiscuous mode
[   41.735559][ T1103] bridge0: port 2(bridge_slave_1) entered blocking state
[   41.742489][ T1103] bridge0: port 2(bridge_slave_1) entered forwarding state
[   41.749645][ T1103] bridge0: port 1(bridge_slave_0) entered blocking state
[   41.756676][ T1103] bridge0: port 1(bridge_slave_0) entered forwarding state
[   41.763956][   T24] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[   41.797053][   T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   41.805478][   T60] bridge0: port 1(bridge_slave_0) entered disabled state
[   41.813602][   T60] bridge0: port 2(bridge_slave_1) entered disabled state
[   41.834990][   T40] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   41.843871][   T40] bridge0: port 1(bridge_slave_0) entered blocking state
[   41.850820][   T40] bridge0: port 1(bridge_slave_0) entered forwarding state
[   41.858078][   T40] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   41.866902][   T40] bridge0: port 2(bridge_slave_1) entered blocking state
[   41.873886][   T40] bridge0: port 2(bridge_slave_1) entered forwarding state
[   41.892460][  T941] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   41.903372][  T941] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   41.913558][  T700] device bridge_slave_1 left promiscuous mode
[   41.919635][  T941] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00
[   41.920396][  T700] bridge0: port 2(bridge_slave_1) entered disabled state
[   41.929024][  T941] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   41.944342][  T941] usb 5-1: config 0 descriptor??
[   41.951599][  T700] device bridge_slave_0 left promiscuous mode
[   41.958476][  T700] bridge0: port 1(bridge_slave_0) entered disabled state
[   41.968403][  T700] device veth1_macvtap left promiscuous mode
[   41.974584][  T700] device veth0_vlan left promiscuous mode
[   42.072455][   T24] usb 3-1: too many configurations: 65, using maximum allowed: 8
[   42.089565][ T1103] device veth0_vlan entered promiscuous mode
[   42.097176][   T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   42.106326][   T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   42.115120][   T60] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   42.123328][   T60] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   42.130967][   T60] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   42.139294][   T60] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   42.154639][   T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   42.163528][   T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   42.172762][ T1103] device veth1_macvtap entered promiscuous mode
[   42.187510][   T60] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   42.196333][   T60] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   42.205117][   T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   42.218018][  T386] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   42.226317][  T386] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   42.323743][ T1118] loop3: detected capacity change from 0 to 8192
[   42.372794][ T1118]  loop3: p1 p3 p4
[   42.376526][ T1118] loop3: p1 size 3523149824 extends beyond EOD, truncated
[   42.384223][ T1118] loop3: p3 start 4294901760 is beyond EOD, truncated
[   42.390856][ T1118] loop3: p4 size 50331648 extends beyond EOD, truncated
[   42.401585][  T103]  loop3: p1 p3 p4
[   42.405380][  T103] loop3: p1 size 3523149824 extends beyond EOD, truncated
[   42.414026][  T103] loop3: p3 start 4294901760 is beyond EOD, truncated
[   42.420841][  T103] loop3: p4 size 50331648 extends beyond EOD, truncated
[   42.421780][  T768] EXT4-fs (loop1): unmounting filesystem.
[   42.428742][  T941] cp2112 0003:10C4:EA90.000B: item fetching failed at offset 5/7
[   42.444657][  T941] cp2112 0003:10C4:EA90.000B: parse failed
[   42.450416][  T941] cp2112: probe of 0003:10C4:EA90.000B failed with error -22
[   42.494092][ T1120] loop1: detected capacity change from 0 to 2048
[   42.510786][ T1120] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[   42.544542][  T768] EXT4-fs (loop1): unmounting filesystem.
[   42.589528][ T1125] loop1: detected capacity change from 0 to 2048
[   42.632774][ T1125]  loop1: p3 < > p4 < >
[   42.636846][ T1125] loop1: partition table partially beyond EOD, truncated
[   42.644167][  T316] usb 5-1: USB disconnect, device number 5
[   42.644598][ T1125] loop1: p3 start 4284289 is beyond EOD, truncated
[   42.682141][  T103]  loop1: p3 < > p4 < >
[   42.688724][ T1128] loop3: detected capacity change from 0 to 2048
[   42.695550][ T1128] EXT4-fs: Ignoring removed mblk_io_submit option
[   42.695902][  T103] loop1: partition table partially beyond EOD, truncated
[   42.709672][  T103] loop1: p3 start 4284289 is beyond EOD, truncated
[   42.714586][ T1128] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[   42.782470][   T24] usb 3-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d
[   42.791361][   T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   42.804550][ T1131] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.275: bg 0: block 234: padding at end of block bitmap is not set
[   42.818870][ T1131] EXT4-fs (loop3): Remounting filesystem read-only
[   42.881159][ T1103] EXT4-fs (loop3): unmounting filesystem.
[   42.955944][ T1142] loop1: detected capacity change from 0 to 1024
[   42.956005][ T1143] loop3: detected capacity change from 0 to 256
[   42.974179][ T1143] FAT-fs (loop3): bogus number of FAT sectors
[   42.977596][ T1142] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[   42.980345][ T1143] FAT-fs (loop3): Can't find a valid FAT filesystem
[   42.999548][   T28] kauditd_printk_skb: 16 callbacks suppressed
[   42.999564][   T28] audit: type=1400 audit(1729099764.877:274): avc:  denied  { setattr } for  pid=1140 comm="syz.1.280" name="work" dev="loop1" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1
[   43.027988][   T28] audit: type=1400 audit(1729099764.877:275): avc:  denied  { rename } for  pid=1140 comm="syz.1.280" name="#4" dev="loop1" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   43.051872][   T28] audit: type=1400 audit(1729099764.877:276): avc:  denied  { unlink } for  pid=1140 comm="syz.1.280" name="#4" dev="loop1" ino=22 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1
[   43.060561][  T768] EXT4-fs error (device loop1): ext4_empty_dir:3087: inode #11: comm syz-executor: invalid size
[   43.074266][   T28] audit: type=1400 audit(1729099764.927:277): avc:  denied  { write } for  pid=1140 comm="syz.1.280" name="/" dev="overlay" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   43.106781][  T768] EXT4-fs error (device loop1): ext4_empty_dir:3087: inode #11: comm syz-executor: invalid size
[   43.107154][   T28] audit: type=1400 audit(1729099764.927:278): avc:  denied  { add_name } for  pid=1140 comm="syz.1.280" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   43.142888][  T768] EXT4-fs error (device loop1): ext4_empty_dir:3087: inode #11: comm syz-executor: invalid size
[   43.157613][   T28] audit: type=1400 audit(1729099764.937:279): avc:  denied  { rmdir } for  pid=768 comm="syz-executor" name="bus" dev="loop1" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1
[   43.158797][  T768] EXT4-fs error (device loop1): ext4_empty_dir:3087: inode #11: comm syz-executor: invalid size
[   43.190157][  T768] EXT4-fs error (device loop1): ext4_empty_dir:3087: inode #11: comm syz-executor: invalid size
[   43.202479][  T768] EXT4-fs error (device loop1): ext4_empty_dir:3087: inode #11: comm syz-executor: invalid size
[   43.214473][  T768] EXT4-fs error (device loop1): ext4_empty_dir:3087: inode #11: comm syz-executor: invalid size
[   43.225677][  T768] EXT4-fs error (device loop1): ext4_empty_dir:3087: inode #11: comm syz-executor: invalid size
[   43.234859][ T1150] loop3: detected capacity change from 0 to 512
[   43.237049][  T768] EXT4-fs error (device loop1): ext4_empty_dir:3087: inode #11: comm syz-executor: invalid size
[   43.253462][  T768] EXT4-fs error (device loop1): ext4_empty_dir:3087: inode #11: comm syz-executor: invalid size
[   43.258643][ T1150] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors
[   43.281456][ T1150] EXT4-fs (loop3): group descriptors corrupted!
[   43.337097][  T768] EXT4-fs (loop1): unmounting filesystem.
[   43.403017][   T24] usb 3-1: Found UVC 0.00 device <unnamed> (046d:08c1)
[   43.409954][   T24] usb 3-1: No valid video chain found.
[   43.500551][ T1160] bridge0: port 1(bridge_slave_0) entered blocking state
[   43.507516][ T1160] bridge0: port 1(bridge_slave_0) entered disabled state
[   43.515069][ T1160] device bridge_slave_0 entered promiscuous mode
[   43.522109][ T1160] bridge0: port 2(bridge_slave_1) entered blocking state
[   43.529463][ T1160] bridge0: port 2(bridge_slave_1) entered disabled state
[   43.536881][ T1160] device bridge_slave_1 entered promiscuous mode
[   43.593272][ T1160] bridge0: port 2(bridge_slave_1) entered blocking state
[   43.600335][ T1160] bridge0: port 2(bridge_slave_1) entered forwarding state
[   43.607479][ T1160] bridge0: port 1(bridge_slave_0) entered blocking state
[   43.607723][   T24] usb 3-1: USB disconnect, device number 6
[   43.614363][ T1160] bridge0: port 1(bridge_slave_0) entered forwarding state
[   43.646368][  T941] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   43.654175][  T941] bridge0: port 1(bridge_slave_0) entered disabled state
[   43.661343][  T941] bridge0: port 2(bridge_slave_1) entered disabled state
[   43.686657][  T941] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   43.695420][  T941] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   43.703929][  T941] bridge0: port 1(bridge_slave_0) entered blocking state
[   43.710781][  T941] bridge0: port 1(bridge_slave_0) entered forwarding state
[   43.718337][  T941] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   43.726467][  T941] bridge0: port 2(bridge_slave_1) entered blocking state
[   43.733807][  T941] bridge0: port 2(bridge_slave_1) entered forwarding state
[   43.741028][  T941] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   43.748986][  T941] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   43.762771][  T386] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   43.770945][  T386] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   43.778468][  T386] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   43.786612][ T1160] device veth0_vlan entered promiscuous mode
[   43.798704][ T1160] device veth1_macvtap entered promiscuous mode
[   43.808148][  T316] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   43.823353][  T386] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   43.832002][  T386] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   43.863909][   T28] audit: type=1400 audit(1729099765.747:280): avc:  denied  { ioctl } for  pid=1166 comm="syz.4.299" path="socket:[21789]" dev="sockfs" ino=21789 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   43.933289][   T10] device bridge_slave_1 left promiscuous mode
[   43.939257][   T10] bridge0: port 2(bridge_slave_1) entered disabled state
[   43.946973][   T10] device bridge_slave_0 left promiscuous mode
[   43.953355][   T10] bridge0: port 1(bridge_slave_0) entered disabled state
[   43.961376][   T10] device veth1_macvtap left promiscuous mode
[   43.967519][   T10] device veth0_vlan left promiscuous mode
[   44.132494][  T386] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[   44.195650][ T1174] loop4: detected capacity change from 0 to 2048
[   44.255150][ T1178] loop0: detected capacity change from 0 to 256
[   44.255367][ T1176] loop2: detected capacity change from 0 to 2048
[   44.275814][ T1176] EXT4-fs: Ignoring removed mblk_io_submit option
[   44.280243][ T1174] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a802c018, mo2=0002]
[   44.301480][ T1174] System zones: 0-7
[   44.306010][ T1174] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[   44.322412][ T1176] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[   44.358733][  T935] EXT4-fs (loop4): unmounting filesystem.
[   44.372537][  T386] usb 2-1: Using ep0 maxpacket: 16
[   44.433465][ T1188] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.288: bg 0: block 234: padding at end of block bitmap is not set
[   44.457635][ T1188] EXT4-fs (loop2): Remounting filesystem read-only
[   44.492462][  T386] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   44.503961][  T386] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   44.513801][  T386] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   44.526808][  T386] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00
[   44.535721][  T386] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   44.574610][  T386] usb 2-1: config 0 descriptor??
[   44.585238][  T295] EXT4-fs (loop2): unmounting filesystem.
[   44.693781][   T28] audit: type=1400 audit(1729099766.577:281): avc:  denied  { watch } for  pid=1204 comm="syz.3.301" path="/10" dev="tmpfs" ino=72 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[   44.751293][ T1210] netlink: 28 bytes leftover after parsing attributes in process `syz.3.303'.
[   44.760396][ T1210] netlink: 28 bytes leftover after parsing attributes in process `syz.3.303'.
[   44.864208][ T1216] loop3: detected capacity change from 0 to 1024
[   44.870923][ T1216] EXT4-fs: Ignoring removed orlov option
[   44.876747][ T1216] EXT4-fs: Ignoring removed nomblk_io_submit option
[   44.894365][ T1216] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[   44.936945][ T1216] EXT4-fs error (device loop3): __ext4_get_inode_loc:4497: comm syz.3.306: Invalid inode table block 0 in block_group 0
[   44.949922][ T1216] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5870: Corrupt filesystem
[   44.960075][ T1216] EXT4-fs error (device loop3): ext4_dirty_inode:6074: inode #18: comm syz.3.306: mark_inode_dirty error
[   44.971644][ T1216] EXT4-fs error (device loop3): __ext4_get_inode_loc:4497: comm syz.3.306: Invalid inode table block 0 in block_group 0
[   44.984672][ T1216] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5870: Corrupt filesystem
[   44.994500][ T1216] EXT4-fs error (device loop3): ext4_alloc_file_blocks:4524: inode #18: comm syz.3.306: mark_inode_dirty error
[   45.017445][ T1103] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 16: comm syz-executor: path /15/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[   45.038353][ T1103] EXT4-fs error (device loop3): __ext4_get_inode_loc:4497: comm syz-executor: Invalid inode table block 0 in block_group 0
[   45.039330][  T386] koneplus 0003:1E7D:2E22.000C: unknown main item tag 0x0
[   45.051719][ T1103] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5870: Corrupt filesystem
[   45.059336][  T386] koneplus 0003:1E7D:2E22.000C: hidraw0: USB HID v0.00 Device [HID 1e7d:2e22] on usb-dummy_hcd.1-1/input0
[   45.067819][ T1103] EXT4-fs error (device loop3): ext4_dirty_inode:6074: inode #2: comm syz-executor: mark_inode_dirty error
[   45.096639][ T1103] EXT4-fs (loop3): unmounting filesystem.
[   45.320216][ T1223] loop0: detected capacity change from 0 to 1024
[   45.355509][ T1221] bridge0: port 1(bridge_slave_0) entered blocking state
[   45.363415][ T1221] bridge0: port 1(bridge_slave_0) entered disabled state
[   45.364652][ T1223] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[   45.370995][ T1221] device bridge_slave_0 entered promiscuous mode
[   45.386183][ T1221] bridge0: port 2(bridge_slave_1) entered blocking state
[   45.394568][ T1221] bridge0: port 2(bridge_slave_1) entered disabled state
[   45.402290][ T1221] device bridge_slave_1 entered promiscuous mode
[   45.441764][  T493] EXT4-fs error (device loop0): ext4_empty_dir:3087: inode #11: comm syz-executor: invalid size
[   45.453909][  T493] EXT4-fs error (device loop0): ext4_empty_dir:3087: inode #11: comm syz-executor: invalid size
[   45.465976][  T493] EXT4-fs error (device loop0): ext4_empty_dir:3087: inode #11: comm syz-executor: invalid size
[   45.478899][  T316] usb 2-1: USB disconnect, device number 6
[   45.486795][  T493] EXT4-fs error (device loop0): ext4_empty_dir:3087: inode #11: comm syz-executor: invalid size
[   45.488228][   T28] audit: type=1400 audit(1729099767.367:282): avc:  denied  { mounton } for  pid=1233 comm="syz.4.313" path="/24/file0" dev="tmpfs" ino=147 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1
[   45.520247][  T493] EXT4-fs error (device loop0): ext4_empty_dir:3087: inode #11: comm syz-executor: invalid size
[   45.544494][  T493] EXT4-fs error (device loop0): ext4_empty_dir:3087: inode #11: comm syz-executor: invalid size
[   45.556939][  T493] EXT4-fs error (device loop0): ext4_empty_dir:3087: inode #11: comm syz-executor: invalid size
[   45.568367][  T493] EXT4-fs error (device loop0): ext4_empty_dir:3087: inode #11: comm syz-executor: invalid size
[   45.579384][  T493] EXT4-fs error (device loop0): ext4_empty_dir:3087: inode #11: comm syz-executor: invalid size
[   45.590525][  T493] EXT4-fs error (device loop0): ext4_empty_dir:3087: inode #11: comm syz-executor: invalid size
[   45.630038][ T1221] bridge0: port 2(bridge_slave_1) entered blocking state
[   45.630102][  T493] EXT4-fs (loop0): unmounting filesystem.
[   45.637039][ T1221] bridge0: port 2(bridge_slave_1) entered forwarding state
[   45.637139][ T1221] bridge0: port 1(bridge_slave_0) entered blocking state
[   45.637157][ T1221] bridge0: port 1(bridge_slave_0) entered forwarding state
[   45.664254][  T386] bridge0: port 1(bridge_slave_0) entered disabled state
[   45.671632][  T386] bridge0: port 2(bridge_slave_1) entered disabled state
[   45.683294][  T386] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   45.690814][  T386] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   45.708384][  T573] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   45.716534][  T573] bridge0: port 1(bridge_slave_0) entered blocking state
[   45.723517][  T573] bridge0: port 1(bridge_slave_0) entered forwarding state
[   45.730954][  T573] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   45.739383][  T573] bridge0: port 2(bridge_slave_1) entered blocking state
[   45.746295][  T573] bridge0: port 2(bridge_slave_1) entered forwarding state
[   45.763803][  T573] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   45.771795][  T573] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   45.801301][ T1221] device veth0_vlan entered promiscuous mode
[   45.824037][  T573] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   45.842814][  T573] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   45.850894][  T573] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   45.872047][  T573] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   45.879245][   T28] audit: type=1400 audit(1729099767.747:283): avc:  denied  { mounton } for  pid=1242 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1
[   45.915182][  T573] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   45.923905][ T1221] device veth1_macvtap entered promiscuous mode
[   45.933936][  T509] device bridge_slave_1 left promiscuous mode
[   45.939967][  T509] bridge0: port 2(bridge_slave_1) entered disabled state
[   45.947469][  T509] device bridge_slave_0 left promiscuous mode
[   45.953527][  T509] bridge0: port 1(bridge_slave_0) entered disabled state
[   45.961245][  T509] device veth1_macvtap left promiscuous mode
[   45.967481][  T509] device veth0_vlan left promiscuous mode
[   46.015358][ T1249] loop1: detected capacity change from 0 to 128
[   46.025950][ T1249] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[   46.035262][ T1249] ext4 filesystem being mounted at /1/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff)
[   46.084361][  T386] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   46.086613][ T1160] EXT4-fs (loop1): unmounting filesystem.
[   46.117171][  T941] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   46.159149][ T1256] loop3: detected capacity change from 0 to 512
[   46.175449][ T1256] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[   46.184331][ T1256] ext4 filesystem being mounted at /0/file0 supports timestamps until 2038 (0x7fffffff)
[   46.201420][ T1242] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.208657][ T1242] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.215678][   T40] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[   46.223814][ T1242] device bridge_slave_0 entered promiscuous mode
[   46.231634][ T1242] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.239101][ T1242] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.246881][ T1242] device bridge_slave_1 entered promiscuous mode
[   46.256504][ T1256] EXT4-fs error (device loop3): ext4_do_update_inode:5212: inode #2: comm syz.3.309: corrupted inode contents
[   46.272556][ T1256] EXT4-fs error (device loop3): ext4_dirty_inode:6074: inode #2: comm syz.3.309: mark_inode_dirty error
[   46.284044][ T1256] EXT4-fs error (device loop3): ext4_do_update_inode:5212: inode #2: comm syz.3.309: corrupted inode contents
[   46.296031][ T1256] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #2: comm syz.3.309: mark_inode_dirty error
[   46.317860][ T1221] EXT4-fs (loop3): unmounting filesystem.
[   46.376461][ T1267] kvm: vcpu 0: requested 88 ns lapic timer period limited to 200000 ns
[   46.402435][  T941] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[   46.417414][   T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   46.425091][   T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   46.444118][   T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   46.452607][   T60] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   46.460722][   T60] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.467763][   T60] bridge0: port 1(bridge_slave_0) entered forwarding state
[   46.475020][   T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   46.483564][   T60] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   46.491850][   T60] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.498782][   T60] bridge0: port 2(bridge_slave_1) entered forwarding state
[   46.506351][   T60] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   46.523893][   T24] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   46.531986][   T24] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   46.555096][   T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   46.562538][  T573] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[   46.563701][   T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   46.578345][   T60] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   46.586377][   T60] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   46.594575][ T1242] device veth0_vlan entered promiscuous mode
[   46.602600][   T40] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   46.613927][   T40] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   46.621877][   T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   46.624196][   T40] usb 3-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00
[   46.635275][ T1242] device veth1_macvtap entered promiscuous mode
[   46.641041][   T40] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   46.655093][  T941] usb 2-1: Using ep0 maxpacket: 16
[   46.655445][   T19] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   46.669396][   T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   46.678802][   T40] usb 3-1: config 0 descriptor??
[   46.687803][  T386] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   46.802426][  T941] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 8
[   46.932440][  T573] usb 5-1: config 1 has an invalid descriptor of length 95, skipping remainder of the config
[   46.945050][  T573] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[   46.983352][  T509] device bridge_slave_1 left promiscuous mode
[   46.989558][  T509] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.996790][  T941] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00
[   47.006292][  T941] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   47.006539][  T509] device bridge_slave_0 left promiscuous mode
[   47.014536][  T941] usb 2-1: Product: syz
[   47.021210][  T509] bridge0: port 1(bridge_slave_0) entered disabled state
[   47.025347][  T941] usb 2-1: Manufacturer: syz
[   47.032729][  T573] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[   47.036883][  T941] usb 2-1: SerialNumber: syz
[   47.045832][  T573] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[   47.057493][  T941] usb 2-1: config 0 descriptor??
[   47.058440][  T573] usb 5-1: SerialNumber: syz
[   47.068826][  T509] device veth1_macvtap left promiscuous mode
[   47.074831][  T509] device veth0_vlan left promiscuous mode
[   47.103199][  T941] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected
[   47.112252][  T941] usb 2-1: Detected FT232R
[   47.173802][   T40] arvo 0003:1E7D:30D4.000D: unknown main item tag 0x0
[   47.180716][   T40] arvo 0003:1E7D:30D4.000D: unknown main item tag 0x0
[   47.188403][   T40] arvo 0003:1E7D:30D4.000D: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.2-1/input0
[   47.333974][  T941] ftdi_sio ttyUSB0: Unable to read latency timer: -32
[   47.343362][  T573] usb 5-1: 0:2 : does not exist
[   47.382545][   T40] arvo 0003:1E7D:30D4.000D: couldn't init struct arvo_device
[   47.390255][   T40] arvo 0003:1E7D:30D4.000D: couldn't install keyboard
[   47.397900][   T40] arvo: probe of 0003:1E7D:30D4.000D failed with error -5
[   47.593694][   T40] usb 3-1: USB disconnect, device number 7
[   47.607951][  T941] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0
[   47.699133][ T1284] loop0: detected capacity change from 0 to 2048
[   47.726908][ T1284] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[   47.744352][ T1242] EXT4-fs (loop0): unmounting filesystem.
[   47.807938][  T573] usb 5-1: USB disconnect, device number 6
[   47.835356][  T325] usb 2-1: USB disconnect, device number 7
[   47.848892][  T325] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[   47.861281][  T325] ftdi_sio 2-1:0.0: device disconnected
[   47.898360][ T1299] loop0: detected capacity change from 0 to 128
[   47.907075][ T1299] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[   47.915975][ T1299] ext4 filesystem being mounted at /9/mnt supports timestamps until 2038 (0x7fffffff)
[   47.930491][ T1299] fscrypt: loop0: 1 inode(s) still busy after removing key with identifier 69b2f6edeee720cce0577937eb8a6751, including ino 12
[   47.948610][ T1242] EXT4-fs (loop0): unmounting filesystem.
[   47.963945][ T1304] loop0: detected capacity change from 0 to 512
[   47.975144][ T1304] EXT4-fs (loop0): 1 orphan inode deleted
[   47.981044][ T1304] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[   47.990512][ T1304] ext4 filesystem being mounted at /10/file1 supports timestamps until 2038 (0x7fffffff)
[   48.010861][ T1242] EXT4-fs (loop0): unmounting filesystem.
[   48.023055][  T467] udevd[467]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   48.040983][ T1309] hub 6-0:1.0: USB hub found
[   48.046716][ T1309] hub 6-0:1.0: 1 port detected
[   48.238791][ T1320] syz.2.343[1320] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   48.238847][ T1320] syz.2.343[1320] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   48.263131][   T28] kauditd_printk_skb: 7 callbacks suppressed
[   48.263148][   T28] audit: type=1400 audit(1729099770.147:291): avc:  denied  { mount } for  pid=1321 comm="syz.2.344" name="/" dev="configfs" ino=13590 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1
[   48.323355][   T28] audit: type=1400 audit(1729099770.197:292): avc:  denied  { unmount } for  pid=295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1
[   48.329032][ T1324] loop4: detected capacity change from 0 to 1024
[   48.349960][ T1324] EXT4-fs: Ignoring removed bh option
[   48.365715][ T1324] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[   48.474902][ T1324] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5870: Corrupt filesystem
[   48.484432][ T1324] EXT4-fs (loop4): Remounting filesystem read-only
[   48.516951][  T935] EXT4-fs error (device loop4): ext4_map_blocks:607: inode #2: block 16: comm syz-executor: lblock 0 mapped to illegal pblock 16 (length 1)
[   48.535668][  T935] EXT4-fs (loop4): unmounting filesystem.
[   48.692466][   T19] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[   48.706697][ T1336] bridge0: port 1(bridge_slave_0) entered blocking state
[   48.713907][ T1336] bridge0: port 1(bridge_slave_0) entered disabled state
[   48.721310][ T1336] device bridge_slave_0 entered promiscuous mode
[   48.728878][ T1336] bridge0: port 2(bridge_slave_1) entered blocking state
[   48.736131][ T1336] bridge0: port 2(bridge_slave_1) entered disabled state
[   48.743548][ T1336] device bridge_slave_1 entered promiscuous mode
[   48.770823][ T1343] loop3: detected capacity change from 0 to 512
[   48.777786][ T1343] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[   48.790142][ T1343] EXT4-fs (loop3): 1 truncate cleaned up
[   48.795835][ T1343] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[   48.819261][ T1221] EXT4-fs (loop3): unmounting filesystem.
[   48.832490][  T325] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[   48.847238][ T1347] loop3: detected capacity change from 0 to 1024
[   48.854602][ T1347] EXT4-fs: Ignoring removed oldalloc option
[   48.874218][ T1336] bridge0: port 2(bridge_slave_1) entered blocking state
[   48.881291][ T1336] bridge0: port 2(bridge_slave_1) entered forwarding state
[   48.888412][ T1336] bridge0: port 1(bridge_slave_0) entered blocking state
[   48.895280][ T1336] bridge0: port 1(bridge_slave_0) entered forwarding state
[   48.908998][ T1347] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[   48.950861][   T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   48.959406][   T40] bridge0: port 1(bridge_slave_0) entered disabled state
[   48.970909][   T40] bridge0: port 2(bridge_slave_1) entered disabled state
[   48.987940][  T573] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   48.998452][  T573] bridge0: port 1(bridge_slave_0) entered blocking state
[   49.005355][  T573] bridge0: port 1(bridge_slave_0) entered forwarding state
[   49.017016][   T40] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   49.021602][ T1354] loop0: detected capacity change from 0 to 512
[   49.025729][   T40] bridge0: port 2(bridge_slave_1) entered blocking state
[   49.037909][   T40] bridge0: port 2(bridge_slave_1) entered forwarding state
[   49.051486][ T1221] EXT4-fs (loop3): unmounting filesystem.
[   49.052625][   T19] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   49.069685][   T40] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   49.077460][   T19] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   49.077519][   T19] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[   49.077544][   T19] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   49.086654][   T19] usb 3-1: config 0 descriptor??
[   49.094279][ T1354] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[   49.117543][  T325] usb 2-1: Using ep0 maxpacket: 32
[   49.122535][ T1354] ext4 filesystem being mounted at /14/bus supports timestamps until 2038 (0x7fffffff)
[   49.123104][   T40] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   49.137158][ T1354] syz.0.357[1354] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   49.139996][ T1354] syz.0.357[1354] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   49.157448][ T1336] device veth0_vlan entered promiscuous mode
[   49.183003][   T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   49.190989][   T40] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   49.201079][ T1354] syz.0.357[1354] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   49.201158][ T1354] syz.0.357[1354] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   49.213073][   T40] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   49.239827][   T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   49.249905][ T1242] EXT4-fs (loop0): unmounting filesystem.
[   49.256315][   T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   49.266123][ T1336] device veth1_macvtap entered promiscuous mode
[   49.272792][  T325] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   49.283954][  T325] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   49.294079][  T325] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[   49.294600][  T509] device bridge_slave_1 left promiscuous mode
[   49.303202][  T325] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   49.309278][  T509] bridge0: port 2(bridge_slave_1) entered disabled state
[   49.325057][  T509] device bridge_slave_0 left promiscuous mode
[   49.331158][  T509] bridge0: port 1(bridge_slave_0) entered disabled state
[   49.338233][  T325] usb 2-1: config 0 descriptor??
[   49.350312][  T509] device veth1_macvtap left promiscuous mode
[   49.356894][  T509] device veth0_vlan left promiscuous mode
[   49.393066][  T325] hub 2-1:0.0: USB hub found
[   49.414601][ T1365] loop0: detected capacity change from 0 to 512
[   49.421349][ T1365] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   49.436047][ T1365] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[   49.444919][ T1365] ext4 filesystem being mounted at /17/file0 supports timestamps until 2038 (0x7fffffff)
[   49.457736][   T28] audit: type=1400 audit(1729099771.337:293): avc:  denied  { name_bind } for  pid=1364 comm="syz.0.362" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1
[   49.484447][ T1242] EXT4-fs (loop0): unmounting filesystem.
[   49.509212][  T941] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   49.517660][  T941] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   49.552967][   T19] hid (null): bogus close delimiter
[   49.597042][ T1359] bridge0: port 1(bridge_slave_0) entered blocking state
[   49.604644][ T1359] bridge0: port 1(bridge_slave_0) entered disabled state
[   49.612098][ T1359] device bridge_slave_0 entered promiscuous mode
[   49.612575][  T325] hub 2-1:0.0: 1 port detected
[   49.620424][ T1359] bridge0: port 2(bridge_slave_1) entered blocking state
[   49.630701][ T1359] bridge0: port 2(bridge_slave_1) entered disabled state
[   49.638429][ T1359] device bridge_slave_1 entered promiscuous mode
[   49.726020][ T1359] bridge0: port 2(bridge_slave_1) entered blocking state
[   49.733005][ T1359] bridge0: port 2(bridge_slave_1) entered forwarding state
[   49.740088][ T1359] bridge0: port 1(bridge_slave_0) entered blocking state
[   49.747130][ T1359] bridge0: port 1(bridge_slave_0) entered forwarding state
[   49.772489][   T19] usb 3-1: language id specifier not provided by device, defaulting to English
[   49.781574][  T941] bridge0: port 1(bridge_slave_0) entered disabled state
[   49.789401][  T941] bridge0: port 2(bridge_slave_1) entered disabled state
[   49.797488][  T941] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   49.806018][  T941] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   49.822520][  T225] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   49.830745][  T225] bridge0: port 1(bridge_slave_0) entered blocking state
[   49.838110][  T225] bridge0: port 1(bridge_slave_0) entered forwarding state
[   49.842565][   T40] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[   49.853592][  T225] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   49.861822][  T225] bridge0: port 2(bridge_slave_1) entered blocking state
[   49.869200][  T225] bridge0: port 2(bridge_slave_1) entered forwarding state
[   49.883939][  T941] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   49.891755][  T941] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   49.910538][   T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   49.924545][  T225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   49.934071][  T225] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   49.941868][  T225] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   49.951605][ T1359] device veth0_vlan entered promiscuous mode
[   49.952638][  T325] hub 2-1:0.0: hub_hub_status failed (err = -71)
[   49.966765][  T325] hub 2-1:0.0: config failed, can't get hub status (err -71)
[   49.971699][ T1380] loop4: detected capacity change from 0 to 256
[   49.983461][   T28] audit: type=1400 audit(1729099771.867:294): avc:  denied  { mounton } for  pid=1379 comm="syz.4.365" path="/2/file1/file0" dev="loop4" ino=1048657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1
[   49.992376][ T1336] FAT-fs (loop4): error, corrupted directory (invalid entries)
[   50.013489][ T1359] device veth1_macvtap entered promiscuous mode
[   50.023015][ T1336] FAT-fs (loop4): Filesystem has been set read-only
[   50.029644][  T225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   50.033366][ T1336] FAT-fs (loop4): error, corrupted directory (invalid entries)
[   50.051673][  T386] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   50.060684][  T386] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   50.112481][  T325] usbhid 2-1:0.0: can't add hid device: -71
[   50.119011][  T325] usbhid: probe of 2-1:0.0 failed with error -71
[   50.183528][  T325] usb 2-1: USB disconnect, device number 8
[   50.222547][   T40] usb 1-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config
[   50.233228][   T40] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[   50.262584][   T19] uclogic 0003:256C:006D.000E: interface is invalid, ignoring
[   50.322567][   T40] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[   50.336894][   T40] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[   50.345559][  T386] usb 3-1: USB disconnect, device number 8
[   50.346390][   T40] usb 1-1: SerialNumber: syz
[   50.372095][ T1388] bridge0: port 1(bridge_slave_0) entered blocking state
[   50.379046][ T1388] bridge0: port 1(bridge_slave_0) entered disabled state
[   50.387120][ T1388] device bridge_slave_0 entered promiscuous mode
[   50.397255][ T1388] bridge0: port 2(bridge_slave_1) entered blocking state
[   50.404456][ T1388] bridge0: port 2(bridge_slave_1) entered disabled state
[   50.411887][ T1388] device bridge_slave_1 entered promiscuous mode
[   50.474388][ T1388] bridge0: port 2(bridge_slave_1) entered blocking state
[   50.481360][ T1388] bridge0: port 2(bridge_slave_1) entered forwarding state
[   50.488584][ T1388] bridge0: port 1(bridge_slave_0) entered blocking state
[   50.495588][ T1388] bridge0: port 1(bridge_slave_0) entered forwarding state
[   50.514200][  T555] device bridge_slave_1 left promiscuous mode
[   50.520308][  T555] bridge0: port 2(bridge_slave_1) entered disabled state
[   50.528385][  T555] device bridge_slave_0 left promiscuous mode
[   50.536474][  T555] bridge0: port 1(bridge_slave_0) entered disabled state
[   50.550426][  T555] device veth1_macvtap left promiscuous mode
[   50.556456][  T555] device veth0_vlan left promiscuous mode
[   50.582532][   T60] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[   50.613151][   T40] usb 1-1: 0:2 : does not exist
[   50.669697][  T386] bridge0: port 1(bridge_slave_0) entered disabled state
[   50.677235][  T386] bridge0: port 2(bridge_slave_1) entered disabled state
[   50.692540][   T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   50.699912][   T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   50.708004][   T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   50.716670][   T19] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   50.725093][   T19] bridge0: port 1(bridge_slave_0) entered blocking state
[   50.731933][   T19] bridge0: port 1(bridge_slave_0) entered forwarding state
[   50.739240][   T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   50.747587][   T19] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   50.755860][   T19] bridge0: port 2(bridge_slave_1) entered blocking state
[   50.762882][   T19] bridge0: port 2(bridge_slave_1) entered forwarding state
[   50.782480][  T386] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   50.790447][  T386] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   50.798525][  T386] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   50.806438][  T386] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   50.815323][  T386] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   50.823669][  T386] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   50.836294][ T1388] device veth0_vlan entered promiscuous mode
[   50.842564][   T60] usb 4-1: Using ep0 maxpacket: 16
[   50.849718][  T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   50.858350][  T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   50.867218][  T315] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   50.874332][   T24] usb 2-1: new low-speed USB device number 9 using dummy_hcd
[   50.881905][  T315] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   50.894947][   T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   50.903563][   T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   50.913593][ T1388] device veth1_macvtap entered promiscuous mode
[   50.937303][  T225] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   50.944692][   T28] audit: type=1400 audit(1729099772.817:295): avc:  denied  { bind } for  pid=1406 comm="syz.2.376" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   50.965428][  T225] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   50.974003][  T225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   50.974060][   T28] audit: type=1400 audit(1729099772.817:296): avc:  denied  { listen } for  pid=1406 comm="syz.2.376" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   51.002741][   T28] audit: type=1400 audit(1729099772.817:297): avc:  denied  { write } for  pid=1406 comm="syz.2.376" path="socket:[23327]" dev="sockfs" ino=23327 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   51.011176][   T60] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   51.031302][   T28] audit: type=1400 audit(1729099772.817:298): avc:  denied  { accept } for  pid=1406 comm="syz.2.376" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   51.046206][   T60] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   51.067674][   T28] audit: type=1400 audit(1729099772.817:299): avc:  denied  { read } for  pid=1406 comm="syz.2.376" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   51.073590][  T941] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   51.095563][   T60] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[   51.108876][  T941] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   51.117366][   T60] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[   51.127470][   T40] usb 1-1: USB disconnect, device number 4
[   51.133828][   T60] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   51.149984][   T60] usb 4-1: config 0 descriptor??
[   51.272583][   T24] usb 2-1: config 246 has too many interfaces: 42, using maximum allowed: 32
[   51.286743][   T24] usb 2-1: config 246 has an invalid descriptor of length 0, skipping remainder of the config
[   51.300611][ T1422] loop4: detected capacity change from 0 to 128
[   51.307301][   T24] usb 2-1: config 246 has 1 interface, different from the descriptor's value: 42
[   51.316502][   T24] usb 2-1: config 246 interface 0 altsetting 0 has an invalid endpoint with address 0x3F, skipping
[   51.327399][   T24] usb 2-1: config 246 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   51.343532][  T467] udevd[467]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   51.356676][ T1422] syz.4.382: attempt to access beyond end of device
[   51.356676][ T1422] loop4: rw=0, sector=121, nr_sectors = 119 limit=128
[   51.413890][ T1414] loop2: detected capacity change from 0 to 40427
[   51.421917][ T1414] F2FS-fs (loop2): invalid crc value
[   51.427687][   T24] usb 2-1: config 246 has too many interfaces: 42, using maximum allowed: 32
[   51.433623][ T1414] F2FS-fs (loop2): Found nat_bits in checkpoint
[   51.442615][   T24] usb 2-1: config 246 has an invalid descriptor of length 0, skipping remainder of the config
[   51.442647][   T24] usb 2-1: config 246 has 1 interface, different from the descriptor's value: 42
[   51.442679][   T24] usb 2-1: config 246 interface 0 altsetting 0 has an invalid endpoint with address 0x3F, skipping
[   51.442705][   T24] usb 2-1: config 246 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   51.489179][  T700] kworker/u4:6: attempt to access beyond end of device
[   51.489179][  T700] loop4: rw=1, sector=241, nr_sectors = 800 limit=128
[   51.530322][ T1414] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[   51.542584][   T24] usb 2-1: config 246 has too many interfaces: 42, using maximum allowed: 32
[   51.545887][ T1414] syz.2.379: attempt to access beyond end of device
[   51.545887][ T1414] loop2: rw=10241, sector=45096, nr_sectors = 8 limit=40427
[   51.552053][   T24] usb 2-1: config 246 has an invalid descriptor of length 0, skipping remainder of the config
[   51.575651][   T24] usb 2-1: config 246 has 1 interface, different from the descriptor's value: 42
[   51.585108][   T24] usb 2-1: config 246 interface 0 altsetting 0 has an invalid endpoint with address 0x3F, skipping
[   51.596383][   T24] usb 2-1: config 246 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   51.620858][ T1429] loop0: detected capacity change from 0 to 512
[   51.627535][  T295] syz-executor: attempt to access beyond end of device
[   51.627535][  T295] loop2: rw=2049, sector=45104, nr_sectors = 16 limit=40427
[   51.644194][   T60] microsoft 0003:045E:07DA.000F: unknown main item tag 0x7
[   51.651569][   T60] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0
[   51.652129][ T1429] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[   51.659726][   T60] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0
[   51.676985][   T60] microsoft 0003:045E:07DA.000F: unknown main item tag 0x2
[   51.690157][   T60] microsoft 0003:045E:07DA.000F: unknown main item tag 0x2
[   51.698221][   T60] microsoft 0003:045E:07DA.000F: unknown main item tag 0x2
[   51.711750][ T1429] EXT4-fs (loop0): 1 truncate cleaned up
[   51.723777][ T1429] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[   51.727348][   T60] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.000F/input/input17
[   51.757522][   T28] audit: type=1400 audit(1729099773.637:300): avc:  denied  { read } for  pid=88 comm="acpid" name="event3" dev="devtmpfs" ino=608 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   51.758495][   T60] microsoft 0003:045E:07DA.000F: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0
[   51.801907][ T1433] device pim6reg1 entered promiscuous mode
[   51.831214][ T1242] EXT4-fs (loop0): unmounting filesystem.
[   51.865159][ T1435] syz.0.387[1435] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   51.865243][ T1435] syz.0.387[1435] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   51.879047][ T1435] syz.0.387[1435] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   51.882660][   T24] usb 2-1: string descriptor 0 read error: -22
[   51.903780][ T1435] syz.0.387[1435] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   51.912996][   T24] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[   51.935220][   T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   51.963474][  T555] device bridge_slave_1 left promiscuous mode
[   51.969516][  T555] bridge0: port 2(bridge_slave_1) entered disabled state
[   51.977547][  T555] device bridge_slave_0 left promiscuous mode
[   51.983931][  T555] bridge0: port 1(bridge_slave_0) entered disabled state
[   51.991728][  T555] device veth1_macvtap left promiscuous mode
[   52.000032][  T555] device veth0_vlan left promiscuous mode
[   52.156025][ T1449] loop4: detected capacity change from 0 to 8192
[   52.164023][ T1449] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   52.222446][   T60] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[   52.257483][ T1456] device pim6reg1 entered promiscuous mode
[   52.267692][  T225] usb 2-1: USB disconnect, device number 9
[   52.371029][  T315] usb 4-1: USB disconnect, device number 5
[   52.478557][ T1467] loop0: detected capacity change from 0 to 256
[   52.485452][ T1467] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[   52.503127][ T1467] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   52.612629][   T60] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 255, changing to 11
[   52.625139][   T60] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 59391, setting to 1024
[   52.641688][   T60] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00
[   52.651118][   T60] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   52.682456][ T1438] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22
[   52.828190][ T1491] device pim6reg1 entered promiscuous mode
[   52.934289][ T1497] overlayfs: statfs failed on './file0'
[   52.977621][ T1499] loop3: detected capacity change from 0 to 512
[   53.004791][ T1499] ext4 filesystem being mounted at /12/file0 supports timestamps until 2038 (0x7fffffff)
[   53.021992][ T1499] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters
[   53.042418][   T40] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[   53.071705][ T1499] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 23 with error 28
[   53.084604][ T1499] EXT4-fs (loop3): This should not happen!! Data will be lost
[   53.084604][ T1499] 
[   53.094851][ T1499] EXT4-fs (loop3): Total free blocks count 0
[   53.100715][ T1499] EXT4-fs (loop3): Free/Dirty block details
[   53.102447][ T1508] loop4: detected capacity change from 0 to 1024
[   53.115118][ T1499] EXT4-fs (loop3): free_blocks=65281
[   53.120261][ T1499] EXT4-fs (loop3): dirty_blocks=23
[   53.125713][ T1499] EXT4-fs (loop3): Block reservation details
[   53.131801][ T1499] EXT4-fs (loop3): i_reserved_data_blocks=23
[   53.138580][ T1511] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28
[   53.153973][ T1511] EXT4-fs (loop3): This should not happen!! Data will be lost
[   53.153973][ T1511] 
[   53.208945][ T1517] tipc: Started in network mode
[   53.214927][ T1517] tipc: Node identity aa72f3e2bd46, cluster identity 4711
[   53.222012][ T1517] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   53.250595][ T1517] tipc: Resetting bearer <eth:syzkaller0>
[   53.258314][ T1516] tipc: Resetting bearer <eth:syzkaller0>
[   53.260182][ T1519] loop4: detected capacity change from 0 to 512
[   53.283329][ T1516] tipc: Disabling bearer <eth:syzkaller0>
[   53.285037][ T1519] ext4 filesystem being mounted at /10/file0 supports timestamps until 2038 (0x7fffffff)
[   53.305432][ T1521] device batadv_slave_1 entered promiscuous mode
[   53.308851][   T28] kauditd_printk_skb: 7 callbacks suppressed
[   53.308872][   T28] audit: type=1400 audit(1729099775.187:308): avc:  denied  { remount } for  pid=1518 comm="syz.4.418" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[   53.320934][ T1524] netlink: 4 bytes leftover after parsing attributes in process `syz.1.419'.
[   53.345838][ T1524] device bridge_slave_1 left promiscuous mode
[   53.352020][ T1524] bridge0: port 2(bridge_slave_1) entered disabled state
[   53.352186][ T1519] EXT4-fs (loop4): re-mounted. Quota mode: writeback.
[   53.366168][ T1524] device bridge_slave_0 left promiscuous mode
[   53.372625][ T1524] bridge0: port 1(bridge_slave_0) entered disabled state
[   53.389889][ T1526] loop4: detected capacity change from 0 to 128
[   53.401447][ T1526] ext4 filesystem being mounted at /11/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff)
[   53.418681][ T1529] loop3: detected capacity change from 0 to 512
[   53.445528][ T1526] syz.4.420 (pid 1526) is setting deprecated v1 encryption policy; recommend upgrading to v2.
[   53.457995][ T1529] ext4 filesystem being mounted at /15/file0 supports timestamps until 2038 (0x7fffffff)
[   53.471748][ T1529] EXT4-fs (loop3): re-mounted. Quota mode: writeback.
[   53.479096][   T40] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   53.496820][ T1520] device batadv_slave_1 left promiscuous mode
[   53.508986][   T40] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   53.519064][   T40] usb 1-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00
[   53.529346][   T40] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   53.539436][   T28] audit: type=1400 audit(1729099775.417:309): avc:  denied  { write } for  pid=1534 comm="syz.1.424" name="tcp" dev="proc" ino=4026532649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1
[   53.565551][ T1537] loop3: detected capacity change from 0 to 128
[   53.569891][   T40] usb 1-1: config 0 descriptor??
[   53.605501][ T1537] syz.3.423: attempt to access beyond end of device
[   53.605501][ T1537] loop3: rw=0, sector=121, nr_sectors = 119 limit=128
[   53.606157][ T1541] netlink: 12 bytes leftover after parsing attributes in process `syz.1.426'.
[   53.643502][ T1543] netlink: 25 bytes leftover after parsing attributes in process `syz.1.427'.
[   53.667244][ T1545] loop1: detected capacity change from 0 to 1024
[   53.677716][ T1545] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[   53.689880][  T509] kworker/u4:4: attempt to access beyond end of device
[   53.689880][  T509] loop3: rw=1, sector=241, nr_sectors = 800 limit=128
[   53.704037][   T28] audit: type=1400 audit(1729099775.587:310): avc:  denied  { rename } for  pid=1544 comm="syz.1.428" name="file1" dev="loop1" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1
[   53.749096][ T1551] netlink: 172 bytes leftover after parsing attributes in process `syz.1.430'.
[   53.772540][  T225] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[   53.802740][   T60] aiptek 3-1:17.0: Aiptek using 400 ms programming speed
[   53.812097][   T60] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:17.0/input/input18
[   53.814130][ T1555] loop3: detected capacity change from 0 to 128
[   53.844599][ T1555] syz.3.432: attempt to access beyond end of device
[   53.844599][ T1555] loop3: rw=0, sector=121, nr_sectors = 119 limit=128
[   53.847216][   T60] usb 3-1: USB disconnect, device number 9
[   53.863627][    C1] aiptek 3-1:17.0: aiptek_irq - usb_submit_urb failed with result -19
[   53.875526][  T467] udevd[467]: setting owner of /dev/input/event3 to uid=0, gid=104 failed: No such file or directory
[   53.939068][  T509] kworker/u4:4: attempt to access beyond end of device
[   53.939068][  T509] loop3: rw=1, sector=241, nr_sectors = 800 limit=128
[   53.974061][ T1563] loop1: detected capacity change from 0 to 2048
[   53.984487][ T1565] loop3: detected capacity change from 0 to 512
[   54.012398][  T225] usb 5-1: Using ep0 maxpacket: 16
[   54.020777][ T1565] ext4 filesystem being mounted at /20/bus supports timestamps until 2038 (0x7fffffff)
[   54.054093][   T40] hid-multitouch 0003:1FD2:6007.0010: unknown main item tag 0x0
[   54.061766][   T40] hid-multitouch 0003:1FD2:6007.0010: unknown main item tag 0x0
[   54.070592][   T40] hid-multitouch 0003:1FD2:6007.0010: item fetching failed at offset 2/5
[   54.079952][   T40] hid-multitouch: probe of 0003:1FD2:6007.0010 failed with error -22
[   54.101985][ T1578] syz.1.439[1578] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   54.102067][ T1578] syz.1.439[1578] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   54.132598][ T1580] loop1: detected capacity change from 0 to 128
[   54.148631][ T1575] kvm: pic: non byte write
[   54.156949][ T1580] ext4 filesystem being mounted at /26/mnt supports timestamps until 2038 (0x7fffffff)
[   54.245547][ T1587] loop3: detected capacity change from 0 to 4096
[   54.262191][   T19] usb 1-1: USB disconnect, device number 5
[   54.291994][ T1587] EXT4-fs (loop3): shut down requested (2)
[   54.292548][  T225] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00
[   54.306881][ T1587] EXT4-fs (loop3): re-mounted. Quota mode: writeback.
[   54.311730][  T225] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   54.321818][  T225] usb 5-1: Product: syz
[   54.331200][  T225] usb 5-1: Manufacturer: syz
[   54.336378][  T225] usb 5-1: SerialNumber: syz
[   54.340771][ T1359] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop3 ino=11
[   54.350010][  T225] usb 5-1: config 0 descriptor??
[   54.350258][ T1359] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop3 ino=11
[   54.377012][ T1359] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop3 ino=11
[   54.388289][ T1359] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop3 ino=11
[   54.398239][  T225] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected
[   54.402057][ T1595] KVM: debugfs: duplicate directory 1595-5
[   54.405729][ T1359] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop3 ino=11
[   54.420256][  T225] usb 5-1: Detected FT232H
[   54.424807][ T1359] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop3 ino=11
[   54.433997][ T1359] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop3 ino=11
[   54.451603][ T1359] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop3 ino=15
[   54.460780][ T1359] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop3 ino=15
[   54.470079][ T1359] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop3 ino=16
[   54.479976][ T1359] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop3 ino=16
[   54.492459][ T1359] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop3 ino=16
[   54.501378][ T1359] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop3 ino=16
[   54.536293][ T1601] loop1: detected capacity change from 0 to 2048
[   54.594698][  T377] tipc: Left network mode
[   54.602474][  T225] ftdi_sio ttyUSB0: Unable to read latency timer: -32
[   54.614214][   T28] audit: type=1400 audit(1729099776.497:311): avc:  denied  { bind } for  pid=1608 comm="syz.1.452" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   54.657613][   T28] audit: type=1400 audit(1729099776.517:312): avc:  denied  { setopt } for  pid=1608 comm="syz.1.452" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   54.709647][ T1614] incfs: Can't find or create .index dir in ./file0
[   54.721671][ T1614] incfs: mount failed -14
[   55.093046][  T377] device bridge_slave_1 left promiscuous mode
[   55.099484][  T377] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.104461][  T225] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0
[   55.114740][  T377] device bridge_slave_0 left promiscuous mode
[   55.120823][  T377] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.133027][  T377] device veth1_macvtap left promiscuous mode
[   55.138982][  T377] device veth0_vlan left promiscuous mode
[   55.159880][ T1633] loop2: detected capacity change from 0 to 256
[   55.172718][ T1633] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fe7f, chksum : 0xa154a131, utbl_chksum : 0xe619d30d)
[   55.190109][ T1633] syz.2.462: attempt to access beyond end of device
[   55.190109][ T1633] loop2: rw=524288, sector=34359738488, nr_sectors = 3 limit=256
[   55.204665][ T1633] syz.2.462: attempt to access beyond end of device
[   55.204665][ T1633] loop2: rw=0, sector=34359738488, nr_sectors = 3 limit=256
[   55.224589][   T28] audit: type=1400 audit(1729099777.107:313): avc:  denied  { remove_name } for  pid=295 comm="syz-executor" name=".index" dev="loop2" ino=1048677 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   55.249395][   T28] audit: type=1400 audit(1729099777.127:314): avc:  denied  { rmdir } for  pid=295 comm="syz-executor" name=".index" dev="loop2" ino=1048677 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   55.272299][   T28] audit: type=1400 audit(1729099777.127:315): avc:  denied  { unlink } for  pid=295 comm="syz-executor" name="file0" dev="loop2" ino=1048679 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   55.305509][  T225] usb 5-1: USB disconnect, device number 7
[   55.314435][  T225] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[   55.323911][  T225] ftdi_sio 5-1:0.0: device disconnected
[   55.680879][ T1641] loop0: detected capacity change from 0 to 128
[   55.690692][ T1641] ext4 filesystem being mounted at /31/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff)
[   56.295849][ T1652] syz.2.467[1652] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   56.295936][ T1652] syz.2.467[1652] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   56.296686][ T1653] loop0: detected capacity change from 0 to 512
[   56.320366][ T1652] syz.2.467[1652] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   56.333512][ T1652] syz.2.467[1652] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   56.365109][ T1653] EXT4-fs (loop0): 1 orphan inode deleted
[   56.382780][ T1653] ext4 filesystem being mounted at /32/file1 supports timestamps until 2038 (0x7fffffff)
[   57.028106][ T1665] loop0: detected capacity change from 0 to 1024
[   57.824374][ T1674] syz.1.474[1674] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   57.824458][ T1674] syz.1.474[1674] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   57.839570][ T1674] syz.1.474[1674] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   57.850834][ T1674] syz.1.474[1674] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   57.852877][ T1677] loop4: detected capacity change from 0 to 1024
[   57.894639][ T1677] EXT4-fs: Ignoring removed orlov option
[   57.900835][ T1677] EXT4-fs: Ignoring removed nomblk_io_submit option
[   57.950296][ T1677] EXT4-fs error (device loop4): __ext4_get_inode_loc:4497: comm syz.4.478: Invalid inode table block 0 in block_group 0
[   57.963432][ T1677] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5870: Corrupt filesystem
[   57.972950][ T1677] EXT4-fs error (device loop4): ext4_dirty_inode:6074: inode #18: comm syz.4.478: mark_inode_dirty error
[   57.985515][ T1677] EXT4-fs error (device loop4): __ext4_get_inode_loc:4497: comm syz.4.478: Invalid inode table block 0 in block_group 0
[   57.998544][ T1677] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5870: Corrupt filesystem
[   58.009084][ T1677] EXT4-fs error (device loop4): ext4_alloc_file_blocks:4524: inode #18: comm syz.4.478: mark_inode_dirty error
[   58.029081][ T1388] EXT4-fs error (device loop4): ext4_readdir:260: inode #2: block 16: comm syz-executor: path /15/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[   58.050767][ T1388] EXT4-fs error (device loop4): __ext4_get_inode_loc:4497: comm syz-executor: Invalid inode table block 0 in block_group 0
[   58.064537][ T1388] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5870: Corrupt filesystem
[   58.074254][ T1388] EXT4-fs error (device loop4): ext4_dirty_inode:6074: inode #2: comm syz-executor: mark_inode_dirty error
[   58.195321][ T1686] loop1: detected capacity change from 0 to 512
[   58.219623][ T1686] ext4 filesystem being mounted at /41/file0 supports timestamps until 2038 (0x7fffffff)
[   58.247378][ T1686] EXT4-fs (loop1): re-mounted. Quota mode: writeback.
[   58.250510][ T1694] tipc: Started in network mode
[   58.259021][ T1694] tipc: Node identity 0a1627d3ab39, cluster identity 4711
[   58.266314][ T1694] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   58.328718][ T1694] tipc: Resetting bearer <eth:syzkaller0>
[   58.373117][ T1693] tipc: Resetting bearer <eth:syzkaller0>
[   58.387418][ T1693] tipc: Disabling bearer <eth:syzkaller0>
[   58.473290][ T1716] loop2: detected capacity change from 0 to 256
SYZFAIL: failed to mkdtemp
 (errno 28: No space left on device)
SYZFAIL: failed to mkdtemp
 (errno 28: No space left on device)
SYZFAIL: failed to mkdtemp
 (errno 28: No space left on device)
SYZFAIL: failed to mkdtemp
 (errno 28: No space left on device)
SYZFAIL: failed to mkdtemp
 (errno 28: No space left on device)
SYZFAIL: failed to mkdtemp
 (errno 28: No space left on device)
SYZFAIL: failed to mkdtemp
 (errno 28: No space left on device)
SYZFAIL: failed to mkdtemp
 (errno 28: No space left on device)
SYZFAIL: failed to mkdtemp
 (errno 28: No space left on device)
SYZFAIL: failed to mkdtemp
 (errno 28: No space left on device)
SYZFAIL: failed to mkdtemp
 (errno 28: No space left on device)
SYZFAIL: failed to mkdtemp
 (errno 28: No space left on device)
SYZFAIL: failed to mkdtemp
 (errno 28: No space left on device)
SYZFAIL: failed to mkdtemp
 (errno 28: No space left on device)
SYZFAIL: failed to mkdtemp
 (errno 28: No space left on device)
SYZFAIL: failed to mkdtemp
 (errno 28: No space left on device)
SYZFAIL: failed to mkdtemp
 (errno 28: No space left on device)
SYZFAIL: failed to mkdtemp
 (errno 28: No space left on device)
SYZFAIL: failed to mkdtemp
 (errno 28: No space left on device)
SYZFAIL: failed to mkdtemp
 (errno 28: No space left on device)
SYZFAIL: failed to mkdtemp
 (errno 28: No space left on device)
SYZFAIL: repeatedly failed to execute the program
proc=3 req=454 state=1 status=67 (errno 9: Bad file descriptor)
[   58.512814][ T1716] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[   58.527108][ T1716] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   58.774781][  T316] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[   58.795066][ T1726] bridge0: port 1(bridge_slave_0) entered blocking state
[   58.802054][ T1726] bridge0: port 1(bridge_slave_0) entered disabled state
[   58.809714][ T1726] device bridge_slave_0 entered promiscuous mode
[   58.818247][ T1726] bridge0: port 2(bridge_slave_1) entered blocking state
[   58.825487][ T1726] bridge0: port 2(bridge_slave_1) entered disabled state
[   58.832836][ T1726] device bridge_slave_1 entered promiscuous mode
[   58.882186][ T1726] bridge0: port 2(bridge_slave_1) entered blocking state
[   58.889150][ T1726] bridge0: port 2(bridge_slave_1) entered forwarding state
[   58.896383][ T1726] bridge0: port 1(bridge_slave_0) entered blocking state
[   58.903351][ T1726] bridge0: port 1(bridge_slave_0) entered forwarding state
[   58.928231][   T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   58.935980][   T40] bridge0: port 1(bridge_slave_0) entered disabled state
[   58.944131][   T40] bridge0: port 2(bridge_slave_1) entered disabled state
[   58.963552][   T40] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   58.971524][   T40] bridge0: port 1(bridge_slave_0) entered blocking state
[   58.978500][   T40] bridge0: port 1(bridge_slave_0) entered forwarding state
[   58.985699][   T40] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   58.994430][   T40] bridge0: port 2(bridge_slave_1) entered blocking state
[   59.001265][   T40] bridge0: port 2(bridge_slave_1) entered forwarding state
[   59.008653][   T40] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   59.016678][   T40] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   59.033596][   T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   59.044100][   T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   59.052122][   T40] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   59.059977][   T40] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   59.068761][ T1726] device veth0_vlan entered promiscuous mode
[   59.081598][ T1726] device veth1_macvtap entered promiscuous mode
[   59.089146][   T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   59.101512][  T225] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   59.110042][  T225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   59.121517][   T60] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   59.129684][   T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   59.140337][  T377] device bridge_slave_1 left promiscuous mode
[   59.146638][  T377] bridge0: port 2(bridge_slave_1) entered disabled state
[   59.154271][  T377] device bridge_slave_0 left promiscuous mode
[   59.160213][  T377] bridge0: port 1(bridge_slave_0) entered disabled state
[   59.168296][  T377] device veth1_macvtap left promiscuous mode
[   59.174408][  T377] device veth0_vlan left promiscuous mode
[   59.534732][  T377] tipc: Left network mode
[   60.083529][  T377] device bridge_slave_1 left promiscuous mode
[   60.090014][  T377] bridge0: port 2(bridge_slave_1) entered disabled state
[   60.097675][  T377] device bridge_slave_0 left promiscuous mode
[   60.104093][  T377] bridge0: port 1(bridge_slave_0) entered disabled state
[   60.112801][  T377] device bridge_slave_1 left promiscuous mode
[   60.119152][  T377] bridge0: port 2(bridge_slave_1) entered disabled state
[   60.126840][  T377] device bridge_slave_0 left promiscuous mode
[   60.133360][  T377] bridge0: port 1(bridge_slave_0) entered disabled state
[   60.141299][  T377] device bridge_slave_1 left promiscuous mode
[   60.147404][  T377] bridge0: port 2(bridge_slave_1) entered disabled state
[   60.155084][  T377] device bridge_slave_0 left promiscuous mode
[   60.161147][  T377] bridge0: port 1(bridge_slave_0) entered disabled state
[   60.169939][  T377] device veth1_macvtap left promiscuous mode
[   60.176023][  T377] device veth0_vlan left promiscuous mode
[   60.181800][  T377] device veth1_macvtap left promiscuous mode
[   60.187717][  T377] device veth0_vlan left promiscuous mode
[   60.193545][  T377] device veth1_macvtap left promiscuous mode
[   60.199513][  T377] device veth0_vlan left promiscuous mode
[   60.205902][  T377] device veth1_macvtap left promiscuous mode
[   60.212125][  T377] device veth0_vlan left promiscuous mode