last executing test programs:

25m16.698014219s ago: executing program 0 (id=1970):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4)
sendmmsg$inet(r0, &(0x7f0000004bc0)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000840)="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", 0x136}, {&(0x7f00000004c0)="f5e022a4d2ed0cf5f8b2e9857cb9af98da7aa60f7a1582aadeaef336f9139f6768452f868624c7e6ce0948f33f1a63e0fcf0f2df28a3f1f4de26a8b575ccb465985e48f65b9a7fcc93c0a5be8b16774f7c7ca9848a182d6ee7c0f2b9c0e7030ed93ee34214c25c", 0x67}, {&(0x7f0000000640)="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", 0x159}], 0x3}}, {{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000180)="5c89eeb1aa86c6f680f09cc1c1d4bc5fc6a067d295afd3aa97af3d777b810648f9ceb270e506af84050329123d5c61507d00561b8f1a15e64fa2779be424fdeff46058854f7acfc80b2ae98431c52ed23e73185dc18671b8439f0e9ac1e33ac8378c98695a08bdb8f2a756b1704c036e3b0ff2d1e9d397a82e24debd371e6855b7dc2dea47d58b", 0x87}, {&(0x7f00000002c0)="74585184786b8d507fbe8904d6eaef6b77268b5ceb7524f823a85cd2f36b3d5323f9b107000000dedf57ce30514c12ac0900000000000000e5dde36e58", 0x3d}, {&(0x7f0000000300)="7ada661b9bb92c9709cc4ca60b292c39499077a20ccd455f4ddd90bb9ffe71eb4bba0aca080b51f46cfac4b6a890205fe377abc2781cdc21c4a4f02b00493da39905212197186ced4b96c143d5ade63c337c33e361f17ffb267a72be57f86b0ff7a38e0017572f04c9fdde8109f2d0f91d77c352420543e3028fe5e102d3d1a402b0248b7008b41303d7296225", 0x8d}, {&(0x7f0000000980)="7449ed0bdf9ed395ea4623dd4dc0734433855485e931db749829da53159c843de28a33d67f020936ef5db5028f9c57c5940cf882c802bd1ef31cf6834d9751830c3d9aa739f302319f8c0c63ae7982c5909f37dd105725e5974b8bb2c2a8d66de427a8da59be9714cd58e43fd98941456eb56cb33222e0bfca630973612222f558ddb6f821940f421f8bfc9bb4536056a748ae91dcca231ae1", 0x99}], 0x4}}], 0x2, 0x0)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4)
sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27)

25m15.567909415s ago: executing program 0 (id=1978):
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000850000002300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000d00)='kfree\x00', r0}, 0x10)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
close(0xffffffffffffffff)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
sendfile(r2, r1, 0x0, 0x2)

25m14.736870742s ago: executing program 0 (id=1990):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f00000007c0)='skb_copy_datagram_iovec\x00', r0}, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f00000007c0)='skb_copy_datagram_iovec\x00', r1}, 0x10)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$inet(r3, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0)
recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)

25m14.685645992s ago: executing program 0 (id=1992):
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x20044e, &(0x7f0000000340)={[{@minixdf}, {@usrjquota}, {@grpquota}, {@noblock_validity}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x8}}]}, 0x3, 0x451, &(0x7f0000000f80)="$eJzs3M2PU1UbAPDn3k6HlxdwRsQPPtRRNE78mGEAlYULNZq4wMREF7qczAwEKYxhxkQIUTAGV8aYuDcu/Rdc6cYYVyZudW9IiGEDuKq57b1MW9rCdFqq098vuXDOvedyztNzT3vuPS0BjKyp7I8kYntE/B4RE/Vsc4Gp+l/Xr55fuHH1/EIS1erbfyW1cteunl8oihbnbcsz02lE+lkSe9vUu3L23Mn5SmXpTJ6fXT31wezK2XPPnTg1f3zp+NLpg0eOHD409+ILB5/vS5xZm67t+Xh53+433vvqzaNfNMXfEkefTHU7+GS12ufqhmtHQzoZG2JDWJdSRGTdVa6N/4koxVrnTcTrnw61ccBAVavV6rbOhy9UgU0siea8IQ+jovigz+5/i611EvDy4KYfQ3fllfoNUBb39XyrHxmLNC9Tbrm/7aepiHj3wt/fZFsM5jkEAECTH7L5z7Pt5n9pPNBQ7p58bWgyIu6NiJ0RcV9E7IqI+yNqZR+MiIfWWX/rIsmt85/0ck+B3aFs/vdSvrbVPP8rZn8xWcpzO2rxl5NjJypLB/LXZDrKW7L8XJc6fnztty87HWuc/2VbVn8xF8zbcXlsS/M5i/Or8xuJudGVixF7xtrFn9xcCUgiYndE7OmxjhNPf7ev07Hbx99FH9aZqt9GPFXv/wvREn8h6b4+Ofu/qCwdmC2uilv98uultzrVv6H4+yDr//+3vf5vxj+ZNK7Xrqy/jkt/fN7xnqbX6388eaeWHs/3fTS/unpmLmI8OVpvdOP+g2vnFvmifBb/9P72439nrL0SeyMiu4gfjohHIuLRvO2PRcTjEbG/S/w/v/rE+73HP1hZ/Ivr6v+1xHi07mmfKJ386fumSidvif9G9/4/XEtN53vu5P3vTtrV29UMAAAA/z1pRGyPJJ25mU7TmZn69+V3RaSV5ZXVZ44tf3h6sf4bgckop8WTromG56Fz+W19PX8xIupfLSiOH8qfG39d2lrLzywsVxaHHTyMuG0dxn/mz9KwWwcMnN9rwegy/mF0Gf8wuox/GF1txv/WYbQDuPvaff5/MoR2AHdfy/i37AcjxP0/jK6O438z/88/QI3PfxhJK1vj9j+S75oo/qUeT9+0iSj/K5qx8UQ1adu5kQ67YRKDTAz3fQkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKBf/gkAAP//qmHgTw==")
openat(0xffffffffffffff9c, 0x0, 0x8000, 0x106)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0)
mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc51, 0x0)
mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x88700a, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00')
read$FUSE(r0, &(0x7f0000001080)={0x2020}, 0x2053)

25m14.601213991s ago: executing program 0 (id=1995):
r0 = io_uring_setup(0x5f48, &(0x7f00000001c0)={0x0, 0x0, 0x2, 0x0, 0x20000})
r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xa}, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, 0x0)
ioctl$TCSETS(r1, 0x5402, &(0x7f0000000040)={0x1, 0xffffffff, 0x4, 0xffff, 0x0, "008ef14ba278887cb0baba08431799b17e6324"})
r3 = dup(r1)
write$UHID_INPUT(r3, &(0x7f0000001040)={0x18, {"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", 0x100d}}, 0xfffffdef)
close_range(r0, 0xffffffffffffffff, 0x0)

25m14.501207711s ago: executing program 0 (id=1998):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000280)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c)
listen(r0, 0x2)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
connect$inet(r1, &(0x7f0000000040)={0x2, 0x2, @local}, 0x10)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
connect$inet(r2, &(0x7f0000000040)={0x2, 0x2, @local}, 0x10)
accept4$inet6(r0, 0x0, 0x0, 0x80800)

25m14.457004691s ago: executing program 32 (id=1998):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000280)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c)
listen(r0, 0x2)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
connect$inet(r1, &(0x7f0000000040)={0x2, 0x2, @local}, 0x10)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
connect$inet(r2, &(0x7f0000000040)={0x2, 0x2, @local}, 0x10)
accept4$inet6(r0, 0x0, 0x0, 0x80800)

25m7.883007327s ago: executing program 2 (id=2050):
unshare(0x28000400)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "7f12ddb357f7adf97affffffff7d1800"})
r1 = syz_open_pts(r0, 0x0)
ioctl$TIOCVHANGUP(r1, 0x5437, 0x0)
dup3(r0, r1, 0x0)
ioctl$TCSETA(r1, 0x5406, &(0x7f0000000000)={0x0, 0x8000, 0x0, 0x0, 0x11, '\x00\x00\x00\x00 #\x00'})
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000100))
ioctl$TIOCGPTPEER(r0, 0x5441, 0x0)

25m7.538109186s ago: executing program 2 (id=2053):
r0 = socket$inet(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000d06000)=0x1, 0x4)
setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5)
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./bus\x00', 0x1000840, &(0x7f0000000900)={[{@shortname_mixed}, {@fat=@sys_immutable}, {@fat=@nfs}, {@iocharset={'iocharset', 0x3d, 'cp936'}}, {@shortname_lower}, {@utf8}, {@fat=@nocase}, {@fat=@codepage={'codepage', 0x3d, '860'}}, {@shortname_lower}, {@shortname_lower}, {@shortname_win95}, {@utf8no}, {@fat=@discard}, {@shortname_win95}, {@uni_xlateno}]}, 0x43, 0x350, &(0x7f0000000580)="$eJzs3U9oW3UcAPBv9tKkHcz2IAwF4elN0LJWPOipZXQwzEUl+OcgBtepNHXQYLA7NKsX8Sh41JM3D3rwsLMIinjz4NUJMhUPutvA4ZMkL81Lk3adkM3i53MI331/329+v7c8mtfX5tdXV2LjwkxcvHHjeszOlqK8cnYlbpZiIZIYuBLjKhNyAMDxcDPL4s+s74gtpSkvCQCYst77/+unCpl3vz6sPvPuDwDHXv79/9xhNbMHDVyaypIAgCkbu///yMhwZfRH/eXCbwUAAMfV8y+9/MxqLeK5NJ2N2HyvXW/X4+nh+OrFeDOasR5nYj5uRfQvFLoPpd7jufO1tTNpmnbil4Wodzva9YjNTrvev1JYTXr91ViK+VjI+/OrjSzLknNf1NaW0p6IuNLpzR+bpXZ9Jk7m8/94MtZjOdK4f6w/4nxtbTnNn6C+OejvROwO71t0178Y8/H9a3EpmnEhur2Dy5ra2s5Smp7NaiP97Xq1V9d34B0QAAAAAAAAAAAAAAAAAAAAAAD4VxbTPQt7+99kw/17FhcnjPf2x+n35/sD7fb3B8qqWWTZH+88Xn8/iZH9gfbvz9Oul+PEvT10AAAAAAAAAAAAAAAAAAAA+M9obVei0Wyub7W2L28Ug85Wa/tERHQzb3372VdzMV5zm6Ccz1EYSvPU5Y1GlgyKs2SkJg+S7uSDzKdX91ZcrKnuHcXEZVQPHmo2Tz3880fDzEPJ4Jn/HtYkMfkAk33LKAab9/WXdCf/UXvB8m1qrmVZdlD7zivjXVGKKN/5C3d4kHWDb66/8cATrdNP9jJfZn2PPjb/wrUPP/lto9Hszhy9V7Cy1bqVbTTyf08+2Q4OksL5U4p+UCqeCeXD2ndHM43kh99ffPCD7442e1bMvD2hJukfzuf7hyr9oLvMfUNzk+aamXDyTyE4/fFK4+rOT78etavwRcJGHQAAAAAAAAAAAAAAAAAAcFcUPiueyz/sO3NY11PPTn9lAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHD3DP/+fyHYHcscJfirE+ND1fWtVkTlXh8mAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD/c/8EAAD//9HQbnk=")
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10)
r5 = creat(0x0, 0xecf86c37d53049cc)
write$FUSE_NOTIFY_STORE(r5, &(0x7f0000000040)=ANY=[], 0x28)
close(r5)
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f0000000200)=ANY=[@ANYBLOB='iocharset=macgreek,umask=00000000000000000000005,namecase=1,uid=', @ANYRESHEX=0x0, @ANYBLOB="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"], 0x1, 0x1528, &(0x7f00000037c0)="$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")
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='bridge0\x00', 0x10)
connect$inet(r0, &(0x7f0000000140)={0x2, 0x8000, @broadcast}, 0x10)
setsockopt$inet_opts(r0, 0x0, 0x1, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'veth0_to_team\x00'})
r6 = socket$inet6(0xa, 0x3, 0x2)
setsockopt$inet6_buf(r6, 0x29, 0x39, &(0x7f00000001c0)="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", 0x117)
setsockopt$inet6_IPV6_RTHDRDSTOPTS(r6, 0x29, 0x37, &(0x7f0000000080)=ANY=[@ANYBLOB="080004"], 0x18)
write$binfmt_aout(r6, 0x0, 0x0)

25m3.809059343s ago: executing program 2 (id=2060):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0xc, 0x10, &(0x7f0000000e40)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000008000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r3, 0xfffff000, 0xe, 0x0, &(0x7f0000000300)="61df712bc884fed5722780b605a7", 0x0, 0x2f00, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x50)

25m3.751892263s ago: executing program 2 (id=2063):
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000280)='./file1\x00', 0x402, &(0x7f0000000ac0)=ANY=[], 0x1, 0x27a, &(0x7f0000000540)="$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")
open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x14113e, 0x0)
utimes(&(0x7f0000000280)='./file0\x00', 0x0)
write$binfmt_script(r0, &(0x7f0000000080), 0x208e24b)
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='rdma.current\x00', 0x275a, 0x0)
setsockopt$packet_fanout_data(r1, 0x107, 0x16, 0x0, 0x0)
fsetxattr(r1, 0x0, 0x0, 0x0, 0x0)
rmdir(&(0x7f0000000180)='./file0/../file0\x00')

25m3.704785112s ago: executing program 2 (id=2066):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb80, &(0x7f0000000c40)="$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")
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', <r4=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x468, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x43c, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffd, 0x10000, 0x0, 0xfffffffd, 0x4000, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0xfffffffa, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2a, 0x2, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40100000, 0x7, 0x0, 0x0, 0xfffff001, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, @TCA_TBF_RATE64={0xc}, @TCA_TBF_PARMS={0x28, 0x1, {{}, {0x2, 0x0, 0x0, 0x0, 0x0, 0x40}}}]}}]}, 0x468}}, 0x0)

25m3.393474002s ago: executing program 2 (id=2073):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000440)='veno\x00', 0x5)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000002c0)=[@window, @mss, @mss={0x2, 0x8}, @window, @window={0x3, 0x3, 0x5}, @timestamp, @mss={0x2, 0x9}, @timestamp], 0x2000000000000135)
write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0x440)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4)
sendto$inet(r0, &(0x7f00000004c0)="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", 0x131, 0x805, 0x0, 0x0)

25m2.91500976s ago: executing program 33 (id=2073):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000440)='veno\x00', 0x5)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000002c0)=[@window, @mss, @mss={0x2, 0x8}, @window, @window={0x3, 0x3, 0x5}, @timestamp, @mss={0x2, 0x9}, @timestamp], 0x2000000000000135)
write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0x440)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4)
sendto$inet(r0, &(0x7f00000004c0)="3ce2de4d8d957a8de4e490b6cd03b988d4edef164bd3377aa381b5f50b7ca414516489f78cd7208982e9bde22b2b7c1c7606d565477f3db9d2b077283644c0f27ab52a863a42863e06944e40a0b3c5d21c8cbe102e7f726263f28aef1bc12a069063d4c30e8f329fdb36859be727fbef4314161e5fb5f01ae00a2634d5cdecca2089c62e32f4c919886b2b88d237e287318739bec0364caf15889f38a312ef6621c0f21709a4bf2b16274cf933f6ad8fcc9c2024bc1b4713f650e860f93ae93b2361956b3e80c38c5fd29b5c1b5d7ce67edc856a8dc0ba54cee53de9a48c131389426bd06ec7c695add357934fc0321f0d3d7982e4fe5a0039decc491a663afd02facb08dd9695f854c7b031d9af8bd7350897996b5208b23030cc0feb84570730eaf24b9f2ac05d0feb3be07a29f88709", 0x131, 0x805, 0x0, 0x0)

6.554112512s ago: executing program 3 (id=7300):
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
close(0xffffffffffffffff)
mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
syz_mount_image$exfat(&(0x7f0000001500), &(0x7f0000001540)='./file1\x00', 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="6572726f72733d636f6e74696e75652c00a3a2a4e7417e941910c27d130b55ac2d5f7a61e59ec6d5de07239091924c32eeb367d16409d6d3ec1fb755f9a7989ebc4e96918e268f0b7acebf67c07bc4731250f87d27b5e9e61000e70f0c6a4e2432073d0d3e18f864e9ef64637d14e5485f36e53c821cb5898685c055a367ea51b653eff6581710f6c3824bc667bd24219163c60803099f985567be0d978e301b4f6603628606afadb04eee58f42f1853f2e8598a5e250e0f4c9a"], 0x1, 0x14fe, &(0x7f0000002ac0)="$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")
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040), 0x208e24b)

5.359777188s ago: executing program 6 (id=7306):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x5, 0x1, 0x8e, 0xe7c9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_DELETE_BATCH(0x18, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0xe30a, r0}, 0x38)

5.359611018s ago: executing program 6 (id=7307):
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={0xffffffffffffffff, 0x0, 0x0}, 0x20)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000004000000e27f000001"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000004c0), &(0x7f0000000900), 0x953, r0}, 0x38)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000200)='fdb_delete\x00', r1}, 0x10)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"})

5.359323898s ago: executing program 6 (id=7308):
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"})

5.358810388s ago: executing program 3 (id=7309):
r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}}]}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f00000002c0)='mm_page_alloc\x00', r1}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r2}, 0x10)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r3}, 0x10)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)

5.309274298s ago: executing program 6 (id=7310):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x3, 0x1, 0x0, 0xf, 0x4000000, [{0xd, 0xb16c}]}]}}, 0x0, 0x2e, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28)
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0)
socket(0x6, 0x6, 0x8)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
eventfd2(0x6, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10)
syz_mount_image$f2fs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x8, &(0x7f00000002c0)={[{@fault_injection={'fault_injection', 0x3d, 0x4ee}}, {@extent_cache}, {@alloc_mode_def}, {@six_active_logs}, {@six_active_logs}, {@nodiscard}, {@jqfmt_vfsv1}, {@noacl}, {@checkpoint_diasble}, {@alloc_mode_def}, {@noextent_cache}, {@nouser_xattr}, {@jqfmt_vfsold}, {@fastboot}, {@memory_low}, {@inline_xattr_size={'inline_xattr_size', 0x3d, 0x9}}]}, 0x1, 0x5505, &(0x7f0000002480)="$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")

5.262706647s ago: executing program 3 (id=7311):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000088500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r1}, 0x10)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000280)={'wg2\x00'})
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00'}, 0x10)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'wg2\x00', @multicast})

2.660623299s ago: executing program 3 (id=7312):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r3)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200))
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x7, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x36)

2.591160578s ago: executing program 5 (id=7313):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r1}, 0x10)
close(r0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r2}, 0x10)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local})
close(r3)

2.590916759s ago: executing program 1 (id=7314):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x3, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xb, 0xff, 0x2, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000380)={r2, &(0x7f0000000300), &(0x7f0000000340)=""/55}, 0x20)

2.590207378s ago: executing program 6 (id=7315):
syz_usb_connect$cdc_ncm(0x4, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000002505a1a440000102030109025c0002010000000904000001a3f45747d649f9a30105240000000d240f8100000000000000000006241a0000000905810300000000000904010000020d00000904010102020d000009058202000000000009050302"], 0x0)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00090582"], 0x0)
r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
r1 = syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000e80)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000d80), 0x0})
write$char_usb(r0, &(0x7f0000001300)="92", 0x2)
ioctl$HIDIOCGRDESC(r0, 0x4008c002, 0x0)

2.493850728s ago: executing program 4 (id=7316):
r0 = syz_usb_connect(0x3, 0x24, &(0x7f0000000f80)=ANY=[@ANYBLOB="120100038ee3710889076001fe8201020301090212000107d1102d0904"], &(0x7f0000001c40)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000002d00)={0x44, &(0x7f0000000000)={0x20, 0x16, 0x6, "99d9e9678b2c"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000003140)={0x34, &(0x7f0000002ec0)={0x40, 0xe, 0x2, "68ae"}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)

2.493694138s ago: executing program 1 (id=7317):
syz_clone(0x40089000, 0x0, 0x0, 0x0, 0x0, 0x0)

2.490140418s ago: executing program 5 (id=7318):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000088500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x2d, 0x0, 0x6}]})

2.415496508s ago: executing program 5 (id=7319):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10)
bpf$MAP_DELETE_BATCH(0x18, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0xe30a}, 0x38)

2.415176818s ago: executing program 5 (id=7320):
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
close(0xffffffffffffffff)
mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
syz_mount_image$exfat(&(0x7f0000001500), &(0x7f0000001540)='./file1\x00', 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="6572726f72733d636f6e74696e75652c00a3a2a4e7417e941910c27d130b55ac2d5f7a61e59ec6d5de07239091924c32eeb367d16409d6d3ec1fb755f9a7989ebc4e96918e268f0b7acebf67c07bc4731250f87d27b5e9e61000e70f0c6a4e2432073d0d3e18f864e9ef64637d14e5485f36e53c821cb5898685c055a367ea51b653eff6581710f6c3824bc667bd24219163c60803099f985567be0d978e301b4f6603628606afadb04eee58f42f1853f2e8598a5e250e0f4c9a"], 0x1, 0x14fe, &(0x7f0000002ac0)="$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")
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040), 0x208e24b)

2.414272838s ago: executing program 1 (id=7321):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_DELETE_ELEM(0x2, &(0x7f00000002c0)={r0, &(0x7f0000000280)='z', 0x20000000}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2})
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r2}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @broadcast})

2.357819547s ago: executing program 3 (id=7322):
r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x7d)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x458, 0x5011, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x394}}}}]}}]}}, 0x0)
syz_usb_connect$cdc_ncm(0x6, 0x76, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000002505a1a44000010203010902640002010000000904000001020d000008240600010d4bb505240000000d240f0100000000000000000006241a000000052401000009058103000000fb000904"], 0x0)
syz_usb_connect(0x3, 0x8c6, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201500236e47e2082055c2955d4010203010902b408048006a00309047f0e01ff2dde700a24010100800201020824050503"], &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x2f, &(0x7f0000000100)=ANY=[@ANYBLOB="2f03bac6c75bef54b57901ce"]}]})
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0)
r2 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x20000)
ioctl$HIDIOCGFIELDINFO(r2, 0xc038480a, &(0x7f0000000000)={0x1, 0x100, 0x1, 0xfffffffa, 0x40, 0xfffffffd, 0x1, 0x0, 0x9, 0x101, 0x1, 0xffff, 0xe, 0xcc5})
r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000200)=ANY=[@ANYRES64=r0, @ANYRES16=r0, @ANYRES16=0x0, @ANYRESOCT=r0], 0x0)
r4 = syz_open_dev$evdev(&(0x7f0000000140), 0x7d, 0x1)
ioctl$EVIOCSABS0(r4, 0x401845c0, &(0x7f0000000180)={0x8, 0x8, 0x4, 0x101, 0xffffffff, 0x7})
syz_usb_disconnect(r3)
syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[], 0x0)
syz_usb_control_io(r3, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
write$char_usb(r0, 0x0, 0x0)
r5 = syz_usb_connect(0x1, 0x2f, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0xd, 0x85, 0xa1, 0x40, 0xac8, 0x332d, 0x7ec8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x36, 0x9, 0x1, 0xe, 0x1, 0x0, 0x0, [@generic={0x2}], [{{0x9, 0x5, 0x2, 0x6, 0x200, 0xc0, 0x5, 0x9}}]}}]}}]}}, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100001d06e110d119af1e43a20102078ad4c2d02f050c182e0cf0ae0000004d70aa00"], 0x0)
syz_usb_connect(0x0, 0x10b, &(0x7f0000000000)=ANY=[@ANYBLOB="050109"], 0x0)
syz_open_dev$evdev(&(0x7f0000000000), 0xc, 0x20000)
r6 = syz_usb_connect(0x0, 0x24, &(0x7f0000000cc0)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0)
syz_usb_control_io(r6, 0x0, &(0x7f0000000f80)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e00)={0x40, 0x13, 0x6, @local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r6, 0x0, &(0x7f0000001740)={0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x40, 0x19, 0x2, "0200"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_ep_write(r5, 0x4, 0x58, &(0x7f00000004c0)="e62b119f3d7f863f5cae3c5a2b81ea42ee7503226744b821248db52469377ecc6c0d37ac4572e9c4e49f1505380ee67d5d51d122322648265a5f60faae16998bacbd7e1b686c4816f23f14f0918cf3e13f1c798e7661b172")

2.103859607s ago: executing program 1 (id=7323):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x3, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r1}, 0x18)
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)

1.275897324s ago: executing program 1 (id=7324):
syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0)

1.275561874s ago: executing program 1 (id=7325):
r0 = syz_usb_connect(0x2, 0x2d, &(0x7f00000010c0)=ANY=[@ANYBLOB="12010000eafa7240936901b0293df400100109021b000124a800800904000001030000000905", @ANYRES16], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000002480)={{0x12, 0x1, 0x0, 0x6, 0x38, 0x37, 0x40, 0x424, 0x9d00, 0xebc7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xc6, 0x1f, 0xe}}]}}]}}, 0x0)
syz_usb_control_io$uac1(r1, 0x0, 0x0)
syz_usb_control_io$uac1(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0)
syz_usb_control_io$printer(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0)
syz_usb_control_io$uac1(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$printer(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0)

1.275307114s ago: executing program 5 (id=7326):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r0}, 0x10)
syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0)

1.251152994s ago: executing program 5 (id=7327):
r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[], 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f0000000380)={0x1c, &(0x7f0000000040)=ANY=[], 0x0, 0x0})

296.393421ms ago: executing program 4 (id=7328):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r1}, 0x10)
close(r0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r2}, 0x10)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local})
close(r3)

216.675431ms ago: executing program 4 (id=7329):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000088500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x2d, 0x0, 0x6}]})

139.23477ms ago: executing program 6 (id=7330):
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582020055"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000200)=ANY=[@ANYBLOB="401504"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000300)={0x0, 0x16, 0x4, "94c161ee"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f0000000140)={0x0, 0xf, 0x4, "c7a13997"}, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000680)={0x2c, &(0x7f0000000340)={0x20, 0x3, 0x4, "a13b1f21"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000740)={0x34, &(0x7f0000000240)={0x40, 0x15, 0x4, "6ce4d1f4"}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000001200)={0x34, &(0x7f0000000f80)={0x0, 0xf, 0x4, "c9025447"}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f00000005c0)={0x34, &(0x7f0000000280)={0x0, 0x11, 0x4, "717c64ac"}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, &(0x7f0000000300)={0x20, 0x12, 0x4, "d227d4cd"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

139.02127ms ago: executing program 4 (id=7331):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10)
bpf$MAP_DELETE_BATCH(0x18, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0xe30a}, 0x38)

138.89139ms ago: executing program 4 (id=7332):
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)

138.71124ms ago: executing program 4 (id=7333):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_DELETE_ELEM(0x2, &(0x7f00000002c0)={r0, &(0x7f0000000280)='z', 0x20000000}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2})
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r2}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @broadcast})

0s ago: executing program 3 (id=7334):
r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000402312073f00000000000109022400010000a00009040000020300020009210000000122370009058103"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB='@\nE\x00\x00'], 0x0, 0x0, 0x0, 0x0}, 0x0)

kernel console output (not intermixed with test programs):

1][T12637] usb 6-1: New USB device found, idVendor=04dd, idProduct=9031, bcdDevice=9a.c7
[ 1903.931080][T25441] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5874'.
[ 1903.939973][T12637] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1903.947823][T12637] usb 6-1: Product: syz
[ 1903.951858][T12637] usb 6-1: Manufacturer: syz
[ 1903.956262][T12637] usb 6-1: SerialNumber: syz
[ 1903.962468][T12637] usb 6-1: config 0 descriptor??
[ 1903.967712][T25441] loop6: detected capacity change from 0 to 16
[ 1903.975364][T12637] zaurus: probe of 6-1:0.0 failed with error -22
[ 1903.988480][T25441] erofs: Unknown parameter '����'
[ 1904.181415][T25436] syz.5.5873: attempt to access beyond end of device
[ 1904.181415][T25436] loop5: rw=0, sector=145, nr_sectors = 8 limit=128
[ 1904.295255][T25436] syz.5.5873: attempt to access beyond end of device
[ 1904.295255][T25436] loop5: rw=0, sector=145, nr_sectors = 8 limit=128
[ 1904.353934][T25446] fuse: Bad value for 'fd'
[ 1904.425345][T25436] syz.5.5873: attempt to access beyond end of device
[ 1904.425345][T25436] loop5: rw=0, sector=145, nr_sectors = 8 limit=128
[ 1904.446996][T25436] syz.5.5873: attempt to access beyond end of device
[ 1904.446996][T25436] loop5: rw=0, sector=145, nr_sectors = 8 limit=128
[ 1904.468253][T25436] syz.5.5873: attempt to access beyond end of device
[ 1904.468253][T25436] loop5: rw=0, sector=145, nr_sectors = 8 limit=128
[ 1904.501248][T25436] syz.5.5873: attempt to access beyond end of device
[ 1904.501248][T25436] loop5: rw=0, sector=145, nr_sectors = 8 limit=128
[ 1904.538278][T25436] syz.5.5873: attempt to access beyond end of device
[ 1904.538278][T25436] loop5: rw=0, sector=145, nr_sectors = 8 limit=128
[ 1904.551768][T25436] syz.5.5873: attempt to access beyond end of device
[ 1904.551768][T25436] loop5: rw=0, sector=145, nr_sectors = 8 limit=128
[ 1904.567499][T23783] usb 6-1: USB disconnect, device number 54
[ 1907.557280][T25484] fuse: Bad value for 'fd'
[ 1908.442804][T25498] fuse: Bad value for 'fd'
[ 1908.681031][T25509] loop5: detected capacity change from 0 to 1024
[ 1908.710063][T25509] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[ 1908.880657][ T8341] EXT4-fs (loop5): unmounting filesystem.
[ 1913.055308][T25565] fuse: Bad value for 'fd'
[ 1913.055354][T25563] fuse: Bad value for 'fd'
[ 1913.284433][T25560] fuse: Bad value for 'fd'
[ 1913.671761][T25580] fuse: Bad value for 'fd'
[ 1914.240591][T25585] fuse: Bad value for 'fd'
[ 1914.254274][T25591] fuse: Bad value for 'fd'
[ 1914.504295][T25598] fuse: Bad value for 'fd'
[ 1917.191013][T25625] loop6: detected capacity change from 0 to 1024
[ 1917.296014][T25625] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[ 1917.668922][ T8558] EXT4-fs (loop6): unmounting filesystem.
[ 1919.564593][T25667] loop6: detected capacity change from 0 to 1024
[ 1919.658928][T25667] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[ 1921.294174][ T8558] EXT4-fs (loop6): unmounting filesystem.
[ 1923.402227][T25695] loop6: detected capacity change from 0 to 1024
[ 1923.528653][T25695] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[ 1923.906867][T25707] fuse: Bad value for 'fd'
[ 1923.916992][T25714] fuse: Bad value for 'fd'
[ 1924.018575][ T8558] EXT4-fs (loop6): unmounting filesystem.
[ 1926.225653][T25748] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5939'.
[ 1926.235522][T25748] loop5: detected capacity change from 0 to 16
[ 1926.241836][T25748] erofs: Unknown parameter '����'
[ 1926.301186][T25163] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[ 1930.249898][T25769] fuse: Bad value for 'fd'
[ 1932.137737][T25812] fuse: Bad value for 'fd'
[ 1932.819224][T25826] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5959'.
[ 1933.244868][T25832] fuse: Bad value for 'fd'
[ 1933.732852][T25843] fuse: Bad value for 'fd'
[ 1935.117405][T25862] fuse: Bad value for 'fd'
[ 1936.464791][T25870] fuse: Bad value for 'fd'
[ 1946.092977][T25936] fuse: Bad value for 'fd'
[ 1946.922838][T25952] fuse: Bad value for 'fd'
[ 1948.475370][T25974] fuse: Bad value for 'fd'
[ 1950.768821][T25986] fuse: Bad value for 'fd'
[ 1950.773934][T25999] netlink: 20 bytes leftover after parsing attributes in process `syz.6.6000'.
[ 1950.784934][T25999] loop6: detected capacity change from 0 to 16
[ 1950.791211][T25999] erofs: Unknown parameter '����'
[ 1950.888333][T25437] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[ 1951.700598][T26016] fuse: Bad value for 'fd'
[ 1955.589020][T26056] fuse: Bad value for 'fd'
[ 1955.621683][T26054] fuse: Bad value for 'fd'
[ 1956.333215][T26079] fuse: Bad value for 'fd'
[ 1957.199903][T26096] fuse: Bad value for 'fd'
[ 1958.442917][T26114] fuse: Bad value for 'fd'
[ 1958.912998][T26128] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6029'.
[ 1960.023617][T26144] loop5: detected capacity change from 0 to 1024
[ 1960.119888][T26144] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[ 1961.275691][ T8341] EXT4-fs (loop5): unmounting filesystem.
[ 1962.675494][T26172] fuse: Bad value for 'fd'
[ 1963.064093][T26186] fuse: Bad value for 'fd'
[ 1963.224356][T26196] fuse: Bad value for 'fd'
[ 1963.778795][T26202] fuse: Bad value for 'fd'
[ 1965.943783][T26237] netlink: 20 bytes leftover after parsing attributes in process `syz.6.6058'.
[ 1965.953681][T26237] loop6: detected capacity change from 0 to 16
[ 1965.959979][T26237] erofs: Unknown parameter '����'
[ 1966.079214][T25163] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[ 1966.090108][T26245] loop5: detected capacity change from 0 to 1024
[ 1966.120707][T26245] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[ 1966.412322][ T8341] EXT4-fs (loop5): unmounting filesystem.
[ 1966.599385][T26258] fuse: Bad value for 'fd'
[ 1966.609761][T26261] fuse: Bad value for 'fd'
[ 1966.643381][T26264] fuse: Bad value for 'fd'
[ 1966.931231][T26270] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6065'.
[ 1969.290876][T26298] fuse: Bad value for 'fd'
[ 1970.336487][T26314] fuse: Bad value for 'fd'
[ 1971.043228][T26326] fuse: Bad value for 'fd'
[ 1971.125259][T26329] fuse: Bad value for 'fd'
[ 1971.244972][T26335] fuse: Bad value for 'fd'
[ 1971.322478][T26340] fuse: Bad value for 'fd'
[ 1971.821730][T26348] fuse: Bad value for 'fd'
[ 1971.915933][T26354] loop5: detected capacity change from 0 to 1024
[ 1971.921221][T26351] fuse: Bad value for 'fd'
[ 1971.974767][T26354] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[ 1972.136572][ T8341] EXT4-fs (loop5): unmounting filesystem.
[ 1972.151442][T26356] fuse: Bad value for 'fd'
[ 1973.341414][T26383] fuse: Bad value for 'fd'
[ 1973.446129][T26394] loop6: detected capacity change from 0 to 1024
[ 1973.459799][T26394] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[ 1973.524399][T26398] loop5: detected capacity change from 0 to 1024
[ 1973.541030][T26398] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[ 1973.652648][ T8558] EXT4-fs (loop6): unmounting filesystem.
[ 1973.675518][T26406] loop6: detected capacity change from 0 to 1024
[ 1973.691042][T26406] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[ 1973.831169][ T8341] EXT4-fs (loop5): unmounting filesystem.
[ 1974.616318][ T8558] EXT4-fs (loop6): unmounting filesystem.
[ 1976.550479][T26443] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6105'.
[ 1976.560348][T26443] loop5: detected capacity change from 0 to 16
[ 1976.566651][T26443] erofs: Unknown parameter '����'
[ 1976.700182][T25163] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[ 1977.238814][T26470] loop6: detected capacity change from 0 to 1024
[ 1977.250008][T26470] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[ 1977.332312][T26475] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6113'.
[ 1977.624089][ T8558] EXT4-fs (loop6): unmounting filesystem.
[ 1978.968256][T26487] netlink: 20 bytes leftover after parsing attributes in process `syz.6.6116'.
[ 1979.033760][T26487] loop6: detected capacity change from 0 to 16
[ 1979.047020][T26487] erofs: Unknown parameter '����'
[ 1979.287204][T26497] loop5: detected capacity change from 0 to 1024
[ 1979.351852][T26497] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[ 1979.686883][ T8341] EXT4-fs (loop5): unmounting filesystem.
[ 1979.991593][T26516] fuse: Bad value for 'fd'
[ 1980.419290][T26525] fuse: Bad value for 'fd'
[ 1983.084597][T26594] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6139'.
[ 1984.032353][T26588] fuse: Bad value for 'fd'
[ 1987.326696][T26662] fuse: Bad value for 'fd'
[ 1990.127086][T26704] netlink: 'syz.3.6169': attribute type 10 has an invalid length.
[ 1991.432507][T26726] loop6: detected capacity change from 0 to 1024
[ 1991.482336][T26726] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[ 1991.691238][ T8558] EXT4-fs (loop6): unmounting filesystem.
[ 1991.993345][T26733] fuse: Bad value for 'fd'
[ 1992.363291][T26742] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6179'.
[ 1992.892535][T26761] netlink: 'syz.4.6184': attribute type 10 has an invalid length.
[ 1998.533802][T26839] loop5: detected capacity change from 0 to 128
[ 1998.634326][T26839] syz.5.6201: attempt to access beyond end of device
[ 1998.634326][T26839] loop5: rw=2049, sector=145, nr_sectors = 896 limit=128
[ 1998.710179][T26839] syz.5.6201: attempt to access beyond end of device
[ 1998.710179][T26839] loop5: rw=524288, sector=145, nr_sectors = 224 limit=128
[ 2000.269954][T26883] fuse: Bad value for 'fd'
[ 2000.926425][T26895] netlink: 20 bytes leftover after parsing attributes in process `syz.6.6214'.
[ 2000.944323][T26895] loop6: detected capacity change from 0 to 16
[ 2000.951945][T26895] erofs: Unknown parameter '����'
[ 2002.655017][T26927] fuse: Bad value for 'fd'
[ 2002.668511][T26924] fuse: Bad value for 'fd'
[ 2002.732810][T26930] fuse: Bad value for 'fd'
[ 2002.976540][T26934] fuse: Bad value for 'fd'
[ 2004.531981][T26965] loop6: detected capacity change from 0 to 128
[ 2004.583678][T26965] syz.6.6233: attempt to access beyond end of device
[ 2004.583678][T26965] loop6: rw=2049, sector=145, nr_sectors = 896 limit=128
[ 2004.649380][T26965] syz.6.6233: attempt to access beyond end of device
[ 2004.649380][T26965] loop6: rw=524288, sector=145, nr_sectors = 224 limit=128
[ 2004.771715][T26963] fuse: Bad value for 'fd'
[ 2005.023557][T26979] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6235'.
[ 2005.040671][T26979] loop5: detected capacity change from 0 to 16
[ 2005.048148][T26979] erofs: Unknown parameter '����'
[ 2005.325883][T25388] usb 7-1: new high-speed USB device number 34 using dummy_hcd
[ 2005.520991][T25388] usb 7-1: New USB device found, idVendor=04dd, idProduct=9031, bcdDevice=9a.c7
[ 2005.530621][T25388] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2005.538568][T25388] usb 7-1: Product: syz
[ 2005.542828][T25388] usb 7-1: Manufacturer: syz
[ 2005.547294][T25388] usb 7-1: SerialNumber: syz
[ 2005.553618][T25388] usb 7-1: config 0 descriptor??
[ 2005.568091][T25388] zaurus: probe of 7-1:0.0 failed with error -22
[ 2005.762747][T26965] syz.6.6233: attempt to access beyond end of device
[ 2005.762747][T26965] loop6: rw=0, sector=145, nr_sectors = 8 limit=128
[ 2005.813535][T26965] syz.6.6233: attempt to access beyond end of device
[ 2005.813535][T26965] loop6: rw=0, sector=145, nr_sectors = 8 limit=128
[ 2005.838249][T26965] syz.6.6233: attempt to access beyond end of device
[ 2005.838249][T26965] loop6: rw=0, sector=145, nr_sectors = 8 limit=128
[ 2005.933653][T26965] syz.6.6233: attempt to access beyond end of device
[ 2005.933653][T26965] loop6: rw=0, sector=145, nr_sectors = 8 limit=128
[ 2005.970074][T26965] syz.6.6233: attempt to access beyond end of device
[ 2005.970074][T26965] loop6: rw=0, sector=145, nr_sectors = 8 limit=128
[ 2006.015349][T26965] syz.6.6233: attempt to access beyond end of device
[ 2006.015349][T26965] loop6: rw=0, sector=145, nr_sectors = 8 limit=128
[ 2006.028696][T26965] syz.6.6233: attempt to access beyond end of device
[ 2006.028696][T26965] loop6: rw=0, sector=145, nr_sectors = 8 limit=128
[ 2006.042605][T26965] syz.6.6233: attempt to access beyond end of device
[ 2006.042605][T26965] loop6: rw=0, sector=145, nr_sectors = 8 limit=128
[ 2006.058981][T25388] usb 7-1: USB disconnect, device number 34
[ 2009.080694][T27028] fuse: Bad value for 'fd'
[ 2009.193601][T27035] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6250'.
[ 2009.789857][T27045] loop6: detected capacity change from 0 to 128
[ 2009.919958][T27047] syz.6.6252: attempt to access beyond end of device
[ 2009.919958][T27047] loop6: rw=2049, sector=145, nr_sectors = 760 limit=128
[ 2009.949485][T27047] syz.6.6252: attempt to access beyond end of device
[ 2009.949485][T27047] loop6: rw=524288, sector=145, nr_sectors = 224 limit=128
[ 2010.238245][T18765] usb 7-1: new high-speed USB device number 35 using dummy_hcd
[ 2010.398212][T18765] usb 7-1: device descriptor read/64, error -71
[ 2010.668204][T18765] usb 7-1: device descriptor read/64, error -71
[ 2010.938186][T18765] usb 7-1: new high-speed USB device number 36 using dummy_hcd
[ 2011.098187][T18765] usb 7-1: device descriptor read/64, error -71
[ 2011.387660][T18765] usb 7-1: device descriptor read/64, error -71
[ 2011.498541][T27077] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6258'.
[ 2011.804085][T18765] usb usb7-port1: attempt power cycle
[ 2012.218226][T18765] usb 7-1: new high-speed USB device number 37 using dummy_hcd
[ 2012.259244][T18765] usb 7-1: device descriptor read/8, error -71
[ 2012.402169][T27084] fuse: Bad value for 'fd'
[ 2012.419446][T18765] usb 7-1: device descriptor read/8, error -71
[ 2012.708177][T18765] usb 7-1: new high-speed USB device number 38 using dummy_hcd
[ 2012.739317][T18765] usb 7-1: device descriptor read/8, error -71
[ 2012.888840][T18765] usb 7-1: device descriptor read/8, error -71
[ 2013.008306][T18765] usb usb7-port1: unable to enumerate USB device
[ 2013.945241][T27110] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6268'.
[ 2014.709855][T27127] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6271'.
[ 2014.806382][T27119] fuse: Bad value for 'fd'
[ 2015.388918][T27135] fuse: Bad value for 'fd'
[ 2015.545540][T27142] loop5: detected capacity change from 0 to 1024
[ 2015.559611][T27142] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[ 2016.082918][ T8341] EXT4-fs (loop5): unmounting filesystem.
[ 2016.335261][T27155] fuse: Bad value for 'fd'
[ 2016.344330][T27159] fuse: Bad value for 'fd'
[ 2016.589138][T27165] fuse: Bad value for 'fd'
[ 2017.300589][T27180] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6283'.
[ 2017.318697][T27180] loop5: detected capacity change from 0 to 16
[ 2017.326369][T27180] erofs: Unknown parameter '����'
[ 2017.473289][T27177] fuse: Bad value for 'fd'
[ 2017.541862][T26969] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[ 2017.802932][T27182] fuse: Bad value for 'fd'
[ 2017.880763][T27189] fuse: Bad value for 'fd'
[ 2018.750640][T27203] fuse: Bad value for 'fd'
[ 2018.891376][T27212] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6292'.
[ 2020.195026][T27218] fuse: Bad value for 'fd'
[ 2020.750750][T27240] netlink: 20 bytes leftover after parsing attributes in process `syz.6.6297'.
[ 2020.768360][T27240] loop6: detected capacity change from 0 to 16
[ 2020.775883][T27240] erofs: Unknown parameter '����'
[ 2020.872007][T27236] fuse: Bad value for 'fd'
[ 2020.884405][T27233] fuse: Bad value for 'fd'
[ 2020.993562][T26969] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[ 2021.356672][T27248] fuse: Bad value for 'fd'
[ 2021.587474][T27255] netlink: 20 bytes leftover after parsing attributes in process `syz.6.6302'.
[ 2022.057324][T27257] fuse: Bad value for 'fd'
[ 2022.173661][T27265] fuse: Bad value for 'fd'
[ 2022.290202][T27270] loop6: detected capacity change from 0 to 1024
[ 2022.310088][T27270] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[ 2022.456011][ T8558] EXT4-fs (loop6): unmounting filesystem.
[ 2023.211969][T27287] fuse: Bad value for 'fd'
[ 2023.218804][T27289] fuse: Bad value for 'fd'
[ 2023.587166][T27301] netlink: 20 bytes leftover after parsing attributes in process `syz.6.6313'.
[ 2023.605334][T27301] loop6: detected capacity change from 0 to 16
[ 2023.613119][T27301] erofs: Unknown parameter '����'
[ 2023.861505][T26969] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[ 2025.763645][T27338] loop6: detected capacity change from 0 to 128
[ 2025.839829][T27338] syz.6.6322: attempt to access beyond end of device
[ 2025.839829][T27338] loop6: rw=2049, sector=145, nr_sectors = 896 limit=128
[ 2025.881976][T27338] syz.6.6322: attempt to access beyond end of device
[ 2025.881976][T27338] loop6: rw=524288, sector=145, nr_sectors = 224 limit=128
[ 2026.454311][T27349] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6325'.
[ 2027.459794][ T9071] usb 7-1: new high-speed USB device number 39 using dummy_hcd
[ 2028.106206][ T9071] usb 7-1: New USB device found, idVendor=04dd, idProduct=9031, bcdDevice=9a.c7
[ 2028.128141][ T9071] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2028.136090][ T9071] usb 7-1: Product: syz
[ 2028.158162][ T9071] usb 7-1: Manufacturer: syz
[ 2028.162593][ T9071] usb 7-1: SerialNumber: syz
[ 2028.178355][ T9071] usb 7-1: config 0 descriptor??
[ 2028.198676][ T9071] zaurus: probe of 7-1:0.0 failed with error -22
[ 2028.320497][T27363] fuse: Bad value for 'fd'
[ 2028.384613][T27338] syz.6.6322: attempt to access beyond end of device
[ 2028.384613][T27338] loop6: rw=0, sector=145, nr_sectors = 8 limit=128
[ 2028.428227][T27338] syz.6.6322: attempt to access beyond end of device
[ 2028.428227][T27338] loop6: rw=0, sector=145, nr_sectors = 8 limit=128
[ 2028.455684][T27338] syz.6.6322: attempt to access beyond end of device
[ 2028.455684][T27338] loop6: rw=0, sector=145, nr_sectors = 8 limit=128
[ 2028.481915][T27338] syz.6.6322: attempt to access beyond end of device
[ 2028.481915][T27338] loop6: rw=0, sector=145, nr_sectors = 8 limit=128
[ 2028.512256][T27338] syz.6.6322: attempt to access beyond end of device
[ 2028.512256][T27338] loop6: rw=0, sector=145, nr_sectors = 8 limit=128
[ 2028.537452][T27338] syz.6.6322: attempt to access beyond end of device
[ 2028.537452][T27338] loop6: rw=0, sector=145, nr_sectors = 8 limit=128
[ 2028.560965][T27338] syz.6.6322: attempt to access beyond end of device
[ 2028.560965][T27338] loop6: rw=0, sector=145, nr_sectors = 8 limit=128
[ 2028.583847][T27338] syz.6.6322: attempt to access beyond end of device
[ 2028.583847][T27338] loop6: rw=0, sector=145, nr_sectors = 8 limit=128
[ 2028.609664][T18765] usb 7-1: USB disconnect, device number 39
[ 2029.017282][T27375] fuse: Bad value for 'fd'
[ 2030.402952][T27402] fuse: Bad value for 'fd'
[ 2031.110357][T27421] loop5: detected capacity change from 0 to 1024
[ 2031.174959][T27421] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[ 2031.175379][T27427] loop6: detected capacity change from 0 to 128
[ 2031.329499][T27427] syz.6.6345: attempt to access beyond end of device
[ 2031.329499][T27427] loop6: rw=2049, sector=145, nr_sectors = 896 limit=128
[ 2031.640411][ T8341] EXT4-fs (loop5): unmounting filesystem.
[ 2031.828155][T23443] usb 7-1: new high-speed USB device number 40 using dummy_hcd
[ 2031.983680][T27444] fuse: Bad value for 'fd'
[ 2032.020846][T23443] usb 7-1: New USB device found, idVendor=04dd, idProduct=9031, bcdDevice=9a.c7
[ 2032.032084][T23443] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2032.044388][T23443] usb 7-1: Product: syz
[ 2032.053212][T23443] usb 7-1: Manufacturer: syz
[ 2032.060145][T23443] usb 7-1: SerialNumber: syz
[ 2032.069211][T23443] usb 7-1: config 0 descriptor??
[ 2032.080080][T23443] zaurus: probe of 7-1:0.0 failed with error -22
[ 2032.209526][T27450] fuse: Bad value for 'fd'
[ 2032.282343][T23443] usb 7-1: USB disconnect, device number 40
[ 2032.611103][T27458] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6350'.
[ 2032.629467][T27458] loop5: detected capacity change from 0 to 16
[ 2032.636922][T27458] erofs: Unknown parameter '����'
[ 2032.959057][T27457] fuse: Bad value for 'fd'
[ 2033.419848][T27473] netlink: 'syz.6.6353': attribute type 10 has an invalid length.
[ 2033.533967][T27467] fuse: Bad value for 'fd'
[ 2033.766638][T27483] loop6: detected capacity change from 0 to 128
[ 2033.785873][T27483] syz.6.6357: attempt to access beyond end of device
[ 2033.785873][T27483] loop6: rw=2049, sector=145, nr_sectors = 896 limit=128
[ 2033.864869][T27484] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6355'.
[ 2033.881704][T27484] loop5: detected capacity change from 0 to 16
[ 2033.889102][T27484] erofs: Unknown parameter '����'
[ 2033.965573][T27476] fuse: Bad value for 'fd'
[ 2033.981230][T27483] syz.6.6357: attempt to access beyond end of device
[ 2033.981230][T27483] loop6: rw=524288, sector=145, nr_sectors = 192 limit=128
[ 2034.156131][T26969] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[ 2034.368160][T23443] usb 7-1: new high-speed USB device number 41 using dummy_hcd
[ 2034.585243][T23443] usb 7-1: New USB device found, idVendor=04dd, idProduct=9031, bcdDevice=9a.c7
[ 2034.597962][T23443] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2034.606250][T23443] usb 7-1: Product: syz
[ 2034.610732][T23443] usb 7-1: Manufacturer: syz
[ 2034.684019][T23443] usb 7-1: SerialNumber: syz
[ 2034.722623][T23443] usb 7-1: config 0 descriptor??
[ 2034.729394][T23443] zaurus: probe of 7-1:0.0 failed with error -22
[ 2034.761564][T27495] fuse: Bad value for 'fd'
[ 2034.939455][T27483] syz.6.6357: attempt to access beyond end of device
[ 2034.939455][T27483] loop6: rw=0, sector=145, nr_sectors = 8 limit=128
[ 2035.045904][T27483] syz.6.6357: attempt to access beyond end of device
[ 2035.045904][T27483] loop6: rw=0, sector=145, nr_sectors = 8 limit=128
[ 2035.100527][T27483] syz.6.6357: attempt to access beyond end of device
[ 2035.100527][T27483] loop6: rw=0, sector=145, nr_sectors = 8 limit=128
[ 2035.113656][T27483] syz.6.6357: attempt to access beyond end of device
[ 2035.113656][T27483] loop6: rw=0, sector=145, nr_sectors = 8 limit=128
[ 2035.127233][T27483] syz.6.6357: attempt to access beyond end of device
[ 2035.127233][T27483] loop6: rw=0, sector=145, nr_sectors = 8 limit=128
[ 2035.141876][T27483] syz.6.6357: attempt to access beyond end of device
[ 2035.141876][T27483] loop6: rw=0, sector=145, nr_sectors = 8 limit=128
[ 2035.159481][T27483] syz.6.6357: attempt to access beyond end of device
[ 2035.159481][T27483] loop6: rw=0, sector=145, nr_sectors = 8 limit=128
[ 2035.194068][T18765] usb 7-1: USB disconnect, device number 41
[ 2035.528236][T27510] fuse: Bad value for 'fd'
[ 2035.915421][T27519] netlink: 20 bytes leftover after parsing attributes in process `syz.6.6365'.
[ 2035.932700][T27519] loop6: detected capacity change from 0 to 16
[ 2035.940408][T27519] erofs: Unknown parameter '����'
[ 2036.223178][T27527] netlink: 'syz.4.6367': attribute type 10 has an invalid length.
[ 2036.449873][T27523] fuse: Bad value for 'fd'
[ 2036.856109][T27537] netlink: 20 bytes leftover after parsing attributes in process `syz.6.6370'.
[ 2036.874618][T27537] loop6: detected capacity change from 0 to 16
[ 2036.882376][T27537] erofs: Unknown parameter '����'
[ 2037.886316][T27548] fuse: Bad value for 'fd'
[ 2037.910844][T27558] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6374'.
[ 2038.392809][T27565] loop5: detected capacity change from 0 to 128
[ 2038.423953][T27565] bio_check_eod: 1 callbacks suppressed
[ 2038.423974][T27565] syz.5.6377: attempt to access beyond end of device
[ 2038.423974][T27565] loop5: rw=2049, sector=145, nr_sectors = 896 limit=128
[ 2038.451739][T27565] syz.5.6377: attempt to access beyond end of device
[ 2038.451739][T27565] loop5: rw=524288, sector=145, nr_sectors = 224 limit=128
[ 2038.558794][T27562] fuse: Bad value for 'fd'
[ 2038.738222][T23443] usb 6-1: new high-speed USB device number 55 using dummy_hcd
[ 2038.798897][T27572] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6378'.
[ 2038.942683][T23443] usb 6-1: New USB device found, idVendor=04dd, idProduct=9031, bcdDevice=9a.c7
[ 2038.981505][T23443] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2039.117517][T23443] usb 6-1: Product: syz
[ 2039.123783][T23443] usb 6-1: Manufacturer: syz
[ 2039.130443][T23443] usb 6-1: SerialNumber: syz
[ 2039.140864][T23443] usb 6-1: config 0 descriptor??
[ 2039.148289][T23443] zaurus: probe of 6-1:0.0 failed with error -22
[ 2039.344987][T27577] fuse: Bad value for 'fd'
[ 2039.350274][T27565] syz.5.6377: attempt to access beyond end of device
[ 2039.350274][T27565] loop5: rw=0, sector=145, nr_sectors = 8 limit=128
[ 2039.363771][T27565] syz.5.6377: attempt to access beyond end of device
[ 2039.363771][T27565] loop5: rw=0, sector=145, nr_sectors = 8 limit=128
[ 2039.377759][T27565] syz.5.6377: attempt to access beyond end of device
[ 2039.377759][T27565] loop5: rw=0, sector=145, nr_sectors = 8 limit=128
[ 2039.391390][T27565] syz.5.6377: attempt to access beyond end of device
[ 2039.391390][T27565] loop5: rw=0, sector=145, nr_sectors = 8 limit=128
[ 2039.408659][T27565] syz.5.6377: attempt to access beyond end of device
[ 2039.408659][T27565] loop5: rw=0, sector=145, nr_sectors = 8 limit=128
[ 2039.423678][T27565] syz.5.6377: attempt to access beyond end of device
[ 2039.423678][T27565] loop5: rw=0, sector=145, nr_sectors = 8 limit=128
[ 2040.278886][T27582] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6381'.
[ 2040.323018][T27565] syz.5.6377: attempt to access beyond end of device
[ 2040.323018][T27565] loop5: rw=0, sector=145, nr_sectors = 8 limit=128
[ 2040.338190][T27565] syz.5.6377: attempt to access beyond end of device
[ 2040.338190][T27565] loop5: rw=0, sector=145, nr_sectors = 8 limit=128
[ 2040.354521][T23443] usb 6-1: USB disconnect, device number 55
[ 2040.559292][T27585] fuse: Bad value for 'fd'
[ 2040.572738][T27588] fuse: Bad value for 'fd'
[ 2040.684839][T27591] fuse: Bad value for 'fd'
[ 2041.516772][T27610] fuse: Bad value for 'fd'
[ 2042.314008][T27630] fuse: Bad value for 'fd'
[ 2042.697820][T27641] loop5: detected capacity change from 0 to 1024
[ 2042.740312][T27641] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[ 2042.970009][ T8341] EXT4-fs (loop5): unmounting filesystem.
[ 2043.141045][T27651] fuse: Bad value for 'fd'
[ 2043.215017][T27648] fuse: Bad value for 'fd'
[ 2043.298308][T27657] fuse: Bad value for 'fd'
[ 2044.052437][T27677] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6403'.
[ 2044.296808][T27675] fuse: Bad value for 'fd'
[ 2044.420118][T27680] loop6: detected capacity change from 0 to 1024
[ 2044.495999][T27680] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[ 2044.742126][ T8558] EXT4-fs (loop6): unmounting filesystem.
[ 2045.019869][T27691] fuse: Bad value for 'fd'
[ 2046.297188][T27720] fuse: Bad value for 'fd'
[ 2046.452598][T27725] fuse: Bad value for 'fd'
[ 2046.534329][T27729] fuse: Bad value for 'fd'
[ 2046.729540][T27734] fuse: Bad value for 'fd'
[ 2047.264348][T27747] fuse: Bad value for 'fd'
[ 2047.500092][T27759] fuse: Bad value for 'fd'
[ 2049.199432][T27782] fuse: Bad value for 'fd'
[ 2049.763952][T27800] loop6: detected capacity change from 0 to 128
[ 2049.800129][T27800] syz.6.6435: attempt to access beyond end of device
[ 2049.800129][T27800] loop6: rw=2049, sector=145, nr_sectors = 896 limit=128
[ 2049.822156][T27800] syz.6.6435: attempt to access beyond end of device
[ 2049.822156][T27800] loop6: rw=524288, sector=145, nr_sectors = 224 limit=128
[ 2049.990167][T27802] fuse: Bad value for 'fd'
[ 2050.154541][T18765] usb 7-1: new high-speed USB device number 42 using dummy_hcd
[ 2050.347222][T18765] usb 7-1: New USB device found, idVendor=04dd, idProduct=9031, bcdDevice=9a.c7
[ 2050.356262][T18765] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2050.364177][T18765] usb 7-1: Product: syz
[ 2050.368348][T18765] usb 7-1: Manufacturer: syz
[ 2050.372956][T18765] usb 7-1: SerialNumber: syz
[ 2050.378295][T18765] usb 7-1: config 0 descriptor??
[ 2050.384096][T18765] zaurus: probe of 7-1:0.0 failed with error -22
[ 2050.584637][T27800] syz.6.6435: attempt to access beyond end of device
[ 2050.584637][T27800] loop6: rw=0, sector=145, nr_sectors = 8 limit=128
[ 2050.629400][T27800] syz.6.6435: attempt to access beyond end of device
[ 2050.629400][T27800] loop6: rw=0, sector=145, nr_sectors = 8 limit=128
[ 2050.643208][T27800] syz.6.6435: attempt to access beyond end of device
[ 2050.643208][T27800] loop6: rw=0, sector=145, nr_sectors = 8 limit=128
[ 2050.656619][T27800] syz.6.6435: attempt to access beyond end of device
[ 2050.656619][T27800] loop6: rw=0, sector=145, nr_sectors = 8 limit=128
[ 2050.670432][T27800] syz.6.6435: attempt to access beyond end of device
[ 2050.670432][T27800] loop6: rw=0, sector=145, nr_sectors = 8 limit=128
[ 2050.683960][T27800] syz.6.6435: attempt to access beyond end of device
[ 2050.683960][T27800] loop6: rw=0, sector=145, nr_sectors = 8 limit=128
[ 2050.697932][T27800] syz.6.6435: attempt to access beyond end of device
[ 2050.697932][T27800] loop6: rw=0, sector=145, nr_sectors = 8 limit=128
[ 2051.338071][T27822] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6440'.
[ 2051.760205][T27824] netlink: 'syz.1.6441': attribute type 10 has an invalid length.
[ 2051.992787][T27800] syz.6.6435: attempt to access beyond end of device
[ 2051.992787][T27800] loop6: rw=0, sector=145, nr_sectors = 8 limit=128
[ 2052.219644][ T8805] usb 7-1: USB disconnect, device number 42
[ 2052.429929][T27830] fuse: Bad value for 'fd'
[ 2053.043007][T27845] fuse: Bad value for 'fd'
[ 2053.171156][T27850] fuse: Bad value for 'fd'
[ 2053.264806][T27858] loop5: detected capacity change from 0 to 1024
[ 2053.316022][T27858] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[ 2053.552677][ T8341] EXT4-fs (loop5): unmounting filesystem.
[ 2053.827655][T27870] fuse: Bad value for 'fd'
[ 2053.862743][T27868] fuse: Bad value for 'fd'
[ 2053.989792][T27878] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6454'.
[ 2055.437907][T27888] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6457'.
[ 2055.448058][T27888] loop5: detected capacity change from 0 to 16
[ 2055.454523][T27888] erofs: Unknown parameter '����'
[ 2055.728857][T27890] fuse: Bad value for 'fd'
[ 2056.089652][T27905] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6461'.
[ 2057.136262][T27918] fuse: Bad value for 'fd'
[ 2057.616958][T27929] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6466'.
[ 2057.636105][T27929] loop5: detected capacity change from 0 to 16
[ 2057.643905][T27929] erofs: Unknown parameter '����'
[ 2057.844835][T26969] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[ 2058.396173][T27941] loop5: detected capacity change from 0 to 1024
[ 2058.498349][T27941] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[ 2058.739125][T27948] fuse: Bad value for 'fd'
[ 2058.800064][ T8341] EXT4-fs (loop5): unmounting filesystem.
[ 2058.822272][T27951] fuse: Bad value for 'fd'
[ 2058.839902][T27956] loop5: detected capacity change from 0 to 128
[ 2058.885283][T27956] syz.5.6473: attempt to access beyond end of device
[ 2058.885283][T27956] loop5: rw=2049, sector=145, nr_sectors = 896 limit=128
[ 2058.940170][T27956] syz.5.6473: attempt to access beyond end of device
[ 2058.940170][T27956] loop5: rw=524288, sector=145, nr_sectors = 224 limit=128
[ 2059.238166][T25388] usb 6-1: new high-speed USB device number 56 using dummy_hcd
[ 2059.241137][T27958] fuse: Bad value for 'fd'
[ 2059.468311][T27971] netlink: 'syz.6.6477': attribute type 10 has an invalid length.
[ 2059.853480][T25388] usb 6-1: New USB device found, idVendor=04dd, idProduct=9031, bcdDevice=9a.c7
[ 2059.864477][T25388] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2059.876555][T25388] usb 6-1: Product: syz
[ 2059.882668][T25388] usb 6-1: Manufacturer: syz
[ 2059.889276][T25388] usb 6-1: SerialNumber: syz
[ 2059.900491][T25388] usb 6-1: config 0 descriptor??
[ 2059.911049][T25388] zaurus: probe of 6-1:0.0 failed with error -22
[ 2060.165905][T27956] syz.5.6473: attempt to access beyond end of device
[ 2060.165905][T27956] loop5: rw=0, sector=145, nr_sectors = 8 limit=128
[ 2060.354505][T27956] syz.5.6473: attempt to access beyond end of device
[ 2060.354505][T27956] loop5: rw=0, sector=145, nr_sectors = 8 limit=128
[ 2060.372567][T27956] syz.5.6473: attempt to access beyond end of device
[ 2060.372567][T27956] loop5: rw=0, sector=145, nr_sectors = 8 limit=128
[ 2060.465587][T27956] syz.5.6473: attempt to access beyond end of device
[ 2060.465587][T27956] loop5: rw=0, sector=145, nr_sectors = 8 limit=128
[ 2060.486989][T27956] syz.5.6473: attempt to access beyond end of device
[ 2060.486989][T27956] loop5: rw=0, sector=145, nr_sectors = 8 limit=128
[ 2060.514900][T27956] syz.5.6473: attempt to access beyond end of device
[ 2060.514900][T27956] loop5: rw=0, sector=145, nr_sectors = 8 limit=128
[ 2060.538252][T27956] syz.5.6473: attempt to access beyond end of device
[ 2060.538252][T27956] loop5: rw=0, sector=145, nr_sectors = 8 limit=128
[ 2060.554163][T27956] syz.5.6473: attempt to access beyond end of device
[ 2060.554163][T27956] loop5: rw=0, sector=145, nr_sectors = 8 limit=128
[ 2060.578762][T23443] usb 6-1: USB disconnect, device number 56
[ 2060.935996][T27990] fuse: Bad value for 'fd'
[ 2061.064623][T27993] fuse: Bad value for 'fd'
[ 2061.108038][T27996] loop5: detected capacity change from 0 to 1024
[ 2061.119690][T27996] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[ 2061.258936][T28002] loop6: detected capacity change from 0 to 1024
[ 2061.289685][T28002] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[ 2061.339344][ T8341] EXT4-fs (loop5): unmounting filesystem.
[ 2061.550573][ T8558] EXT4-fs (loop6): unmounting filesystem.
[ 2061.572603][T28006] fuse: Bad value for 'fd'
[ 2061.601750][T28018] loop6: detected capacity change from 0 to 1024
[ 2061.718380][T28018] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[ 2062.028947][ T8558] EXT4-fs (loop6): unmounting filesystem.
[ 2062.273718][T28031] fuse: Bad value for 'fd'
[ 2062.343833][T28034] fuse: Bad value for 'fd'
[ 2063.020832][T28050] fuse: Bad value for 'fd'
[ 2063.114599][T28054] fuse: Bad value for 'fd'
[ 2063.533161][T28057] fuse: Bad value for 'fd'
[ 2065.127257][T28101] netlink: 20 bytes leftover after parsing attributes in process `syz.6.6508'.
[ 2065.146878][T28101] loop6: detected capacity change from 0 to 16
[ 2065.154718][T28101] erofs: Unknown parameter '����'
[ 2065.787803][T28110] fuse: Bad value for 'fd'
[ 2065.829994][T28120] loop6: detected capacity change from 0 to 128
[ 2065.869188][T28120] syz.6.6513: attempt to access beyond end of device
[ 2065.869188][T28120] loop6: rw=2049, sector=145, nr_sectors = 896 limit=128
[ 2065.895794][T28120] syz.6.6513: attempt to access beyond end of device
[ 2065.895794][T28120] loop6: rw=524288, sector=145, nr_sectors = 224 limit=128
[ 2066.178137][T25388] usb 7-1: new high-speed USB device number 43 using dummy_hcd
[ 2066.361557][T25388] usb 7-1: New USB device found, idVendor=04dd, idProduct=9031, bcdDevice=9a.c7
[ 2066.375598][T25388] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2066.384016][T25388] usb 7-1: Product: syz
[ 2066.428963][T25388] usb 7-1: Manufacturer: syz
[ 2066.433523][T25388] usb 7-1: SerialNumber: syz
[ 2066.444091][T25388] usb 7-1: config 0 descriptor??
[ 2066.458469][T25388] zaurus: probe of 7-1:0.0 failed with error -22
[ 2066.647969][T28134] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6515'.
[ 2066.745901][T28120] syz.6.6513: attempt to access beyond end of device
[ 2066.745901][T28120] loop6: rw=0, sector=145, nr_sectors = 8 limit=128
[ 2066.783073][T28132] fuse: Bad value for 'fd'
[ 2066.815538][T28120] syz.6.6513: attempt to access beyond end of device
[ 2066.815538][T28120] loop6: rw=0, sector=145, nr_sectors = 8 limit=128
[ 2066.901734][T28120] syz.6.6513: attempt to access beyond end of device
[ 2066.901734][T28120] loop6: rw=0, sector=145, nr_sectors = 8 limit=128
[ 2066.949930][T28120] syz.6.6513: attempt to access beyond end of device
[ 2066.949930][T28120] loop6: rw=0, sector=145, nr_sectors = 8 limit=128
[ 2066.963480][T28120] syz.6.6513: attempt to access beyond end of device
[ 2066.963480][T28120] loop6: rw=0, sector=145, nr_sectors = 8 limit=128
[ 2066.976591][T28120] syz.6.6513: attempt to access beyond end of device
[ 2066.976591][T28120] loop6: rw=0, sector=145, nr_sectors = 8 limit=128
[ 2066.989710][T28120] syz.6.6513: attempt to access beyond end of device
[ 2066.989710][T28120] loop6: rw=0, sector=145, nr_sectors = 8 limit=128
[ 2067.003023][T28120] syz.6.6513: attempt to access beyond end of device
[ 2067.003023][T28120] loop6: rw=0, sector=145, nr_sectors = 8 limit=128
[ 2067.016760][T25388] usb 7-1: USB disconnect, device number 43
[ 2067.408558][T28139] fuse: Bad value for 'fd'
[ 2067.658683][T28146] fuse: Bad value for 'fd'
[ 2068.229006][T28158] fuse: Bad value for 'fd'
[ 2068.478519][T28168] fuse: Bad value for 'fd'
[ 2068.623990][T28174] fuse: Bad value for 'fd'
[ 2069.570010][T28189] fuse: Bad value for 'fd'
[ 2069.955730][T28199] fuse: Bad value for 'fd'
[ 2070.318762][T28208] fuse: Bad value for 'fd'
[ 2070.733481][T28214] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6537'.
[ 2072.974421][T28233] fuse: Bad value for 'fd'
[ 2073.011061][T28235] fuse: Bad value for 'fd'
[ 2073.211898][T28246] fuse: Bad value for 'fd'
[ 2073.229498][T28248] fuse: Bad value for 'fd'
[ 2074.154160][T28266] fuse: Bad value for 'fd'
[ 2075.315759][T28272] fuse: Bad value for 'fd'
[ 2076.093207][T28283] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6554'.
[ 2076.103106][T28283] loop5: detected capacity change from 0 to 16
[ 2076.109426][T28283] erofs: Unknown parameter '����'
[ 2076.148776][T26969] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[ 2077.323716][T28291] fuse: Bad value for 'fd'
[ 2079.363674][T28326] loop5: detected capacity change from 0 to 1024
[ 2080.076778][T28330] netlink: 20 bytes leftover after parsing attributes in process `syz.6.6564'.
[ 2080.086701][T28330] loop6: detected capacity change from 0 to 16
[ 2080.093017][T28330] erofs: Unknown parameter '����'
[ 2080.428282][T28326] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[ 2080.573550][T28343] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6567'.
[ 2080.890697][T28347] netlink: 20 bytes leftover after parsing attributes in process `syz.6.6568'.
[ 2080.908354][T28347] loop6: detected capacity change from 0 to 16
[ 2080.915882][T28347] erofs: Unknown parameter '����'
[ 2082.094532][ T8341] EXT4-fs (loop5): unmounting filesystem.
[ 2082.234642][T28374] loop6: detected capacity change from 0 to 128
[ 2082.256893][T28374] syz.6.6576: attempt to access beyond end of device
[ 2082.256893][T28374] loop6: rw=2049, sector=145, nr_sectors = 896 limit=128
[ 2082.279372][T28374] syz.6.6576: attempt to access beyond end of device
[ 2082.279372][T28374] loop6: rw=524288, sector=145, nr_sectors = 224 limit=128
[ 2082.360567][T28367] fuse: Bad value for 'fd'
[ 2082.370423][T28366] fuse: Bad value for 'fd'
[ 2082.372217][T28370] fuse: Bad value for 'fd'
[ 2082.568189][T23443] usb 7-1: new high-speed USB device number 44 using dummy_hcd
[ 2082.760878][T23443] usb 7-1: New USB device found, idVendor=04dd, idProduct=9031, bcdDevice=9a.c7
[ 2082.770080][T23443] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2082.777935][T23443] usb 7-1: Product: syz
[ 2082.782330][T23443] usb 7-1: Manufacturer: syz
[ 2082.786928][T23443] usb 7-1: SerialNumber: syz
[ 2082.801783][T23443] usb 7-1: config 0 descriptor??
[ 2082.808990][T23443] zaurus: probe of 7-1:0.0 failed with error -22
[ 2083.029345][T28374] syz.6.6576: attempt to access beyond end of device
[ 2083.029345][T28374] loop6: rw=0, sector=145, nr_sectors = 8 limit=128
[ 2083.044655][T28374] syz.6.6576: attempt to access beyond end of device
[ 2083.044655][T28374] loop6: rw=0, sector=145, nr_sectors = 8 limit=128
[ 2083.058154][T28374] syz.6.6576: attempt to access beyond end of device
[ 2083.058154][T28374] loop6: rw=0, sector=145, nr_sectors = 8 limit=128
[ 2083.072843][T28374] syz.6.6576: attempt to access beyond end of device
[ 2083.072843][T28374] loop6: rw=0, sector=145, nr_sectors = 8 limit=128
[ 2084.237943][T28374] syz.6.6576: attempt to access beyond end of device
[ 2084.237943][T28374] loop6: rw=0, sector=145, nr_sectors = 8 limit=128
[ 2084.638664][T28374] syz.6.6576: attempt to access beyond end of device
[ 2084.638664][T28374] loop6: rw=0, sector=145, nr_sectors = 8 limit=128
[ 2084.740272][T28374] syz.6.6576: attempt to access beyond end of device
[ 2084.740272][T28374] loop6: rw=0, sector=145, nr_sectors = 8 limit=128
[ 2084.761623][T28374] syz.6.6576: attempt to access beyond end of device
[ 2084.761623][T28374] loop6: rw=0, sector=145, nr_sectors = 8 limit=128
[ 2084.778683][T25388] usb 7-1: USB disconnect, device number 44
[ 2085.026891][T28401] fuse: Bad value for 'fd'
[ 2085.104729][T28398] fuse: Bad value for 'fd'
[ 2085.615578][T28413] fuse: Bad value for 'fd'
[ 2086.014772][T28419] fuse: Bad value for 'fd'
[ 2087.429033][T28437] fuse: Bad value for 'fd'
[ 2088.433057][T28455] loop6: detected capacity change from 0 to 1024
[ 2088.459688][T28455] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[ 2088.593273][T28444] fuse: Bad value for 'fd'
[ 2089.848943][ T8558] EXT4-fs (loop6): unmounting filesystem.
[ 2090.022287][T28483] loop6: detected capacity change from 0 to 1024
[ 2091.759731][T28483] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[ 2092.396593][ T8558] EXT4-fs (loop6): unmounting filesystem.
[ 2094.709141][T28503] fuse: Bad value for 'fd'
[ 2100.352917][T28544] fuse: Bad value for 'fd'
[ 2100.661026][T28566] fuse: Bad value for 'fd'
[ 2100.661062][T28568] fuse: Bad value for 'fd'
[ 2103.705936][T28603] fuse: Bad value for 'fd'
[ 2103.740483][T28601] fuse: Bad value for 'fd'
[ 2104.371692][T28619] fuse: Bad value for 'fd'
[ 2104.377668][T28616] fuse: Bad value for 'fd'
[ 2106.417198][T28656] fuse: Bad value for 'fd'
[ 2107.937210][T28671] fuse: Bad value for 'fd'
[ 2108.518469][T28691] fuse: Bad value for 'fd'
[ 2108.535169][T28683] fuse: Bad value for 'fd'
[ 2108.999311][T28703] loop6: detected capacity change from 0 to 16
[ 2109.006906][T28703] erofs: Unknown parameter '����'
[ 2109.192064][T28700] fuse: Bad value for 'fd'
[ 2110.062259][T28711] fuse: Bad value for 'fd'
[ 2110.153267][T28720] loop6: detected capacity change from 0 to 128
[ 2110.316941][T28720] syz.6.6656: attempt to access beyond end of device
[ 2110.316941][T28720] loop6: rw=2049, sector=145, nr_sectors = 896 limit=128
[ 2110.343448][T28720] syz.6.6656: attempt to access beyond end of device
[ 2110.343448][T28720] loop6: rw=524288, sector=145, nr_sectors = 224 limit=128
[ 2110.730497][T28724] fuse: Bad value for 'fd'
[ 2110.938129][T18765] usb 7-1: new high-speed USB device number 45 using dummy_hcd
[ 2111.000951][T28736] loop5: detected capacity change from 0 to 128
[ 2111.044480][T28736] syz.5.6661: attempt to access beyond end of device
[ 2111.044480][T28736] loop5: rw=2049, sector=145, nr_sectors = 896 limit=128
[ 2111.065564][T28736] syz.5.6661: attempt to access beyond end of device
[ 2111.065564][T28736] loop5: rw=524288, sector=145, nr_sectors = 224 limit=128
[ 2111.130726][T18765] usb 7-1: New USB device found, idVendor=04dd, idProduct=9031, bcdDevice=9a.c7
[ 2111.143025][T18765] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2111.156396][T18765] usb 7-1: Product: syz
[ 2111.163781][T18765] usb 7-1: Manufacturer: syz
[ 2111.172601][T18765] usb 7-1: SerialNumber: syz
[ 2111.182411][T18765] usb 7-1: config 0 descriptor??
[ 2111.192187][T18765] zaurus: probe of 7-1:0.0 failed with error -22
[ 2111.369743][T23443] usb 6-1: new high-speed USB device number 57 using dummy_hcd
[ 2111.388604][T28720] syz.6.6656: attempt to access beyond end of device
[ 2111.388604][T28720] loop6: rw=0, sector=145, nr_sectors = 8 limit=128
[ 2111.401675][T28720] syz.6.6656: attempt to access beyond end of device
[ 2111.401675][T28720] loop6: rw=0, sector=145, nr_sectors = 8 limit=128
[ 2111.414904][T28720] syz.6.6656: attempt to access beyond end of device
[ 2111.414904][T28720] loop6: rw=0, sector=145, nr_sectors = 8 limit=128
[ 2111.428110][T28720] syz.6.6656: attempt to access beyond end of device
[ 2111.428110][T28720] loop6: rw=0, sector=145, nr_sectors = 8 limit=128
[ 2111.441304][T28720] syz.6.6656: attempt to access beyond end of device
[ 2111.441304][T28720] loop6: rw=0, sector=145, nr_sectors = 8 limit=128
[ 2111.454462][T28720] syz.6.6656: attempt to access beyond end of device
[ 2111.454462][T28720] loop6: rw=0, sector=145, nr_sectors = 8 limit=128
[ 2111.471070][ T8805] usb 7-1: USB disconnect, device number 45
[ 2111.580608][T23443] usb 6-1: New USB device found, idVendor=04dd, idProduct=9031, bcdDevice=9a.c7
[ 2111.589544][T23443] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2111.597288][T23443] usb 6-1: Product: syz
[ 2111.601319][T23443] usb 6-1: Manufacturer: syz
[ 2111.605707][T23443] usb 6-1: SerialNumber: syz
[ 2111.611181][T23443] usb 6-1: config 0 descriptor??
[ 2111.616894][T23443] zaurus: probe of 6-1:0.0 failed with error -22
[ 2111.818092][T25388] usb 6-1: USB disconnect, device number 57
[ 2112.455204][T28761] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6666'.
[ 2113.611656][T28773] fuse: Bad value for 'fd'
[ 2113.850549][T28787] loop6: detected capacity change from 0 to 1024
[ 2113.931640][T28782] fuse: Bad value for 'fd'
[ 2113.940358][T28787] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[ 2114.041828][T28794] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6673'.
[ 2114.060039][T28794] loop5: detected capacity change from 0 to 16
[ 2114.067836][T28794] erofs: Unknown parameter '����'
[ 2114.287270][T26969] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[ 2114.335409][ T8558] EXT4-fs (loop6): unmounting filesystem.
[ 2114.538921][T28798] fuse: Bad value for 'fd'
[ 2114.923070][T28816] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6680'.
[ 2114.941736][T28816] loop5: detected capacity change from 0 to 16
[ 2114.949353][T28816] erofs: Unknown parameter '����'
[ 2115.118670][T26969] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[ 2115.393446][T28822] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6681'.
[ 2117.794956][T28850] fuse: Bad value for 'fd'
[ 2119.929539][T28875] loop6: detected capacity change from 0 to 128
[ 2120.150014][T28887] bio_check_eod: 10 callbacks suppressed
[ 2120.150048][T28887] syz.6.6692: attempt to access beyond end of device
[ 2120.150048][T28887] loop6: rw=2049, sector=145, nr_sectors = 352 limit=128
[ 2120.599362][T28882] fuse: Bad value for 'fd'
[ 2120.638149][T18765] usb 7-1: new high-speed USB device number 46 using dummy_hcd
[ 2120.988719][T28897] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6698'.
[ 2123.899318][T28902] fuse: Bad value for 'fd'
[ 2125.094255][T18765] usb 7-1: device not accepting address 46, error -71
[ 2125.978237][T28946] fuse: Bad value for 'fd'
[ 2126.355727][T28954] fuse: Bad value for 'fd'
[ 2126.575023][T28968] loop6: detected capacity change from 0 to 1024
[ 2126.610333][T28968] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[ 2126.849155][ T8558] EXT4-fs (loop6): unmounting filesystem.
[ 2127.027477][T28975] fuse: Bad value for 'fd'
[ 2127.176912][T28982] fuse: Bad value for 'fd'
[ 2127.182191][T28985] netlink: 20 bytes leftover after parsing attributes in process `syz.6.6717'.
[ 2127.192103][T28985] loop6: detected capacity change from 0 to 16
[ 2127.198388][T28985] erofs: Unknown parameter '����'
[ 2127.306053][T26969] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[ 2127.511847][T28995] loop6: detected capacity change from 0 to 128
[ 2127.552382][T28995] syz.6.6722: attempt to access beyond end of device
[ 2127.552382][T28995] loop6: rw=2049, sector=145, nr_sectors = 896 limit=128
[ 2127.574043][T28995] syz.6.6722: attempt to access beyond end of device
[ 2127.574043][T28995] loop6: rw=524288, sector=145, nr_sectors = 224 limit=128
[ 2128.445195][T12637] usb 7-1: new high-speed USB device number 48 using dummy_hcd
[ 2128.650790][T12637] usb 7-1: New USB device found, idVendor=04dd, idProduct=9031, bcdDevice=9a.c7
[ 2128.659757][T12637] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2129.096625][T12637] usb 7-1: Product: syz
[ 2129.100709][T12637] usb 7-1: Manufacturer: syz
[ 2129.105060][T12637] usb 7-1: SerialNumber: syz
[ 2129.110668][T12637] usb 7-1: config 0 descriptor??
[ 2129.145409][T12637] zaurus: probe of 7-1:0.0 failed with error -22
[ 2129.403293][T28995] syz.6.6722: attempt to access beyond end of device
[ 2129.403293][T28995] loop6: rw=0, sector=145, nr_sectors = 8 limit=128
[ 2129.475799][T29018] fuse: Bad value for 'fd'
[ 2129.582947][T28995] syz.6.6722: attempt to access beyond end of device
[ 2129.582947][T28995] loop6: rw=0, sector=145, nr_sectors = 8 limit=128
[ 2129.662651][T28995] syz.6.6722: attempt to access beyond end of device
[ 2129.662651][T28995] loop6: rw=0, sector=145, nr_sectors = 8 limit=128
[ 2129.676304][T28995] syz.6.6722: attempt to access beyond end of device
[ 2129.676304][T28995] loop6: rw=0, sector=145, nr_sectors = 8 limit=128
[ 2129.689747][T28995] syz.6.6722: attempt to access beyond end of device
[ 2129.689747][T28995] loop6: rw=0, sector=145, nr_sectors = 8 limit=128
[ 2129.735859][T28995] syz.6.6722: attempt to access beyond end of device
[ 2129.735859][T28995] loop6: rw=0, sector=145, nr_sectors = 8 limit=128
[ 2129.749455][T28995] syz.6.6722: attempt to access beyond end of device
[ 2129.749455][T28995] loop6: rw=0, sector=145, nr_sectors = 8 limit=128
[ 2129.763056][T28995] syz.6.6722: attempt to access beyond end of device
[ 2129.763056][T28995] loop6: rw=0, sector=145, nr_sectors = 8 limit=128
[ 2129.781892][T18765] usb 7-1: USB disconnect, device number 48
[ 2133.219310][T29057] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6733'.
[ 2139.847858][T29112] fuse: Bad value for 'fd'
[ 2140.795282][T29126] fuse: Bad value for 'fd'
[ 2141.940600][T29143] loop6: detected capacity change from 0 to 128
[ 2141.970297][T29143] syz.6.6755: attempt to access beyond end of device
[ 2141.970297][T29143] loop6: rw=2049, sector=145, nr_sectors = 896 limit=128
[ 2141.996177][T29143] syz.6.6755: attempt to access beyond end of device
[ 2141.996177][T29143] loop6: rw=524288, sector=145, nr_sectors = 224 limit=128
[ 2144.901184][T18765] usb 7-1: new high-speed USB device number 49 using dummy_hcd
[ 2148.505866][T29189] fuse: Bad value for 'fd'
[ 2149.573945][T29208] fuse: Bad value for 'fd'
[ 2149.589357][T29206] fuse: Bad value for 'fd'
[ 2150.861491][T29231] fuse: Bad value for 'fd'
[ 2150.875531][T29234] fuse: Bad value for 'fd'
[ 2151.241283][T29239] fuse: Bad value for 'fd'
[ 2151.615263][T29247] fuse: Bad value for 'fd'
[ 2155.225022][T29288] netlink: 20 bytes leftover after parsing attributes in process `syz.6.6789'.
[ 2155.237701][T29283] loop6: detected capacity change from 0 to 16
[ 2155.244315][T29283] erofs: Unknown parameter '����'
[ 2155.434315][T29294] netlink: 292 bytes leftover after parsing attributes in process `syz.3.6791'.
[ 2155.778978][T26969] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[ 2158.851774][T29337] fuse: Bad value for 'fd'
[ 2159.505557][T29350] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6805'.
[ 2159.789714][T29340] fuse: Bad value for 'fd'
[ 2160.625209][T29363] loop5: detected capacity change from 0 to 128
[ 2160.646954][T29363] syz.5.6808: attempt to access beyond end of device
[ 2160.646954][T29363] loop5: rw=2049, sector=145, nr_sectors = 896 limit=128
[ 2160.681392][T29363] syz.5.6808: attempt to access beyond end of device
[ 2160.681392][T29363] loop5: rw=524288, sector=145, nr_sectors = 224 limit=128
[ 2160.866036][T29379] loop6: detected capacity change from 0 to 1024
[ 2160.890780][T29379] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[ 2160.971577][T29368] fuse: Bad value for 'fd'
[ 2160.971641][T29371] fuse: Bad value for 'fd'
[ 2161.028108][ T8805] usb 6-1: new high-speed USB device number 58 using dummy_hcd
[ 2161.064558][ T8558] EXT4-fs (loop6): unmounting filesystem.
[ 2161.242139][ T8805] usb 6-1: New USB device found, idVendor=04dd, idProduct=9031, bcdDevice=9a.c7
[ 2161.251470][ T8805] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2161.276985][ T8805] usb 6-1: Product: syz
[ 2161.281560][ T8805] usb 6-1: Manufacturer: syz
[ 2161.286091][ T8805] usb 6-1: SerialNumber: syz
[ 2161.406602][ T8805] usb 6-1: config 0 descriptor??
[ 2161.427330][ T8805] zaurus: probe of 6-1:0.0 failed with error -22
[ 2161.652788][T18765] usb 6-1: USB disconnect, device number 58
[ 2162.153759][T29400] fuse: Bad value for 'fd'
[ 2163.637129][T29421] fuse: Bad value for 'fd'
[ 2167.025757][T29468] loop5: detected capacity change from 0 to 1024
[ 2167.057307][T29468] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[ 2167.194817][ T8341] EXT4-fs (loop5): unmounting filesystem.
[ 2167.291037][T29484] netlink: 284 bytes leftover after parsing attributes in process `syz.4.6834'.
[ 2167.331994][T29464] fuse: Bad value for 'fd'
[ 2167.494884][T29479] fuse: Bad value for 'fd'
[ 2170.878931][T29515] fuse: Bad value for 'fd'
[ 2174.054447][T29545] fuse: Bad value for 'fd'
[ 2174.176438][T29552] fuse: Bad value for 'fd'
[ 2175.703237][T29565] fuse: Bad value for 'fd'
[ 2177.830952][T29581] fuse: Bad value for 'fd'
[ 2177.872864][T29592] fuse: Bad value for 'fd'
[ 2181.914066][T29641] netlink: 292 bytes leftover after parsing attributes in process `syz.1.6872'.
[ 2183.192566][T29654] fuse: Bad value for 'fd'
[ 2183.380150][T29662] fuse: Bad value for 'fd'
[ 2184.290974][T29692] overlayfs: failed to clone upperpath
[ 2184.443841][T29689] fuse: Bad value for 'fd'
[ 2185.839362][T29709] fuse: Bad value for 'fd'
[ 2185.848719][T29701] fuse: Bad value for 'fd'
[ 2189.220059][T29730] fuse: Bad value for 'fd'
[ 2189.220091][T29733] fuse: Bad value for 'fd'
[ 2189.633886][T25036] tipc: Left network mode
[ 2189.744602][T29753] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2189.752189][T29753] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2189.759993][T29753] device bridge_slave_0 entered promiscuous mode
[ 2189.767013][T29753] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2189.774155][T29753] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2189.790260][T29753] device bridge_slave_1 entered promiscuous mode
[ 2189.908421][T29753] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2189.915294][T29753] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2189.922448][T29753] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2189.929320][T29753] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2189.982037][T29178] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 2190.066597][T29178] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2190.102803][T29178] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2190.200643][T29766] fuse: Bad value for 'fd'
[ 2190.276263][T29178] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 2190.296175][T29178] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2190.303300][T29178] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2190.310813][T29178] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 2190.319010][T29178] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2190.326031][T29178] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2190.349847][T29178] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 2190.445429][T29178] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 2190.462908][T29178] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 2190.474753][T29178] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 2190.483000][T29178] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 2190.490708][T29178] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 2190.505480][T29753] device veth0_vlan entered promiscuous mode
[ 2190.872739][T29753] device veth1_macvtap entered promiscuous mode
[ 2190.992138][T29178] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 2191.000833][T29178] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 2191.009570][T29178] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 2191.040304][T29784] loop4: detected capacity change from 0 to 1024
[ 2191.888518][T25036] device bridge_slave_1 left promiscuous mode
[ 2191.894592][T25036] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2193.078121][T29798] loop6: detected capacity change from 0 to 1024
[ 2193.105194][T25036] device bridge_slave_0 left promiscuous mode
[ 2193.111258][T25036] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2193.122509][T29784] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[ 2193.132417][T25036] device veth1_macvtap left promiscuous mode
[ 2193.142174][T25036] device veth0_vlan left promiscuous mode
[ 2193.230607][T29798] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[ 2193.400577][T29753] EXT4-fs (loop4): unmounting filesystem.
[ 2193.420007][ T8558] EXT4-fs (loop6): unmounting filesystem.
[ 2193.455385][T29801] fuse: Bad value for 'fd'
[ 2193.710203][T29813] fuse: Bad value for 'fd'
[ 2194.114008][T29830] overlayfs: failed to clone upperpath
[ 2194.125953][T29809] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2194.138062][T29809] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2194.149471][T29809] device bridge_slave_0 entered promiscuous mode
[ 2194.156380][T29830] overlayfs: failed to clone lowerpath
[ 2194.175519][T29809] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2194.182713][T29809] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2194.195511][T29809] device bridge_slave_1 entered promiscuous mode
[ 2194.243705][T25036] tipc: Left network mode
[ 2194.441000][T29809] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2194.447876][T29809] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2194.455019][T29809] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2194.461960][T29809] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2194.828855][T29178] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 2194.836977][T29178] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2194.855266][T29178] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2194.896542][T29178] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 2194.907954][T29178] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2194.914868][T29178] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2194.932568][T29178] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 2194.944902][T29178] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2194.951797][T29178] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2195.044525][T29809] device veth0_vlan entered promiscuous mode
[ 2195.101322][T29178] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 2195.112038][T29178] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 2195.120211][T29178] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 2195.127712][T29178] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 2195.136771][T29178] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 2196.380725][T29178] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 2196.431535][  T532] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 2196.452329][  T532] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 2196.477207][T29809] device veth1_macvtap entered promiscuous mode
[ 2196.533107][T29851] loop6: detected capacity change from 0 to 1024
[ 2196.544462][  T532] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 2196.556387][  T532] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 2196.565160][  T532] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 2197.440994][  T532] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 2197.770746][T29851] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[ 2197.780142][  T532] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 2197.806590][T29860] netlink: 292 bytes leftover after parsing attributes in process `syz.5.6918'.
[ 2197.816528][T29860] loop5: detected capacity change from 0 to 16
[ 2197.822814][T29860] erofs: Unknown parameter '����'
[ 2197.835526][T25036] device veth1_macvtap left promiscuous mode
[ 2197.950045][T26969] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[ 2198.373833][T29865] netlink: 276 bytes leftover after parsing attributes in process `syz.3.6906'.
[ 2198.383715][T29865] loop3: detected capacity change from 0 to 16
[ 2198.390607][T29865] erofs: Unknown parameter '����'
[ 2198.390987][T29869] fuse: Bad value for 'fd'
[ 2198.477275][T26969] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[ 2198.504219][ T8558] EXT4-fs (loop6): unmounting filesystem.
[ 2199.598126][T29881] netlink: 276 bytes leftover after parsing attributes in process `syz.1.6924'.
[ 2200.986310][T29892] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2201.055125][T29892] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2201.099060][T29892] device bridge_slave_0 entered promiscuous mode
[ 2201.138965][T29892] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2201.155710][T29889] fuse: Bad value for 'fd'
[ 2201.199569][T29892] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2201.240022][T29892] device bridge_slave_1 entered promiscuous mode
[ 2201.321240][T29892] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2201.328134][T29892] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2201.335272][T29892] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2201.342153][T29892] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2201.352772][T29901] fuse: Bad value for 'fd'
[ 2201.432952][T29892] device veth0_vlan entered promiscuous mode
[ 2201.446769][T29892] device veth1_macvtap entered promiscuous mode
[ 2201.483833][T29178] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 2201.491707][T29178] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 2201.500638][T29178] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 2201.511069][T29178] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 2202.595750][T29178] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 2202.749112][T29178] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 2202.757185][T29178] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 2202.798592][T29178] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 2202.825905][T29178] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 2202.834028][T29178] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 2202.841606][T29178] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 2202.849810][T29178] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 2202.908005][T29922] loop4: detected capacity change from 0 to 1024
[ 2202.999160][T29922] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[ 2203.266693][T29934] netlink: 292 bytes leftover after parsing attributes in process `syz.3.6934'.
[ 2203.292925][T29934] loop3: detected capacity change from 0 to 16
[ 2203.301453][T29934] erofs: Unknown parameter '����'
[ 2203.531786][T29753] EXT4-fs (loop4): unmounting filesystem.
[ 2203.677739][T25036] device bridge_slave_1 left promiscuous mode
[ 2203.684011][T25036] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2203.691546][T25036] device bridge_slave_0 left promiscuous mode
[ 2203.697515][T25036] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2203.705565][T25036] device veth1_macvtap left promiscuous mode
[ 2204.057977][T25036] device veth0_vlan left promiscuous mode
[ 2204.230540][T29937] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2204.239569][T29937] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2204.249791][T29937] device bridge_slave_0 entered promiscuous mode
[ 2204.267582][T29937] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2204.277830][T29937] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2204.285534][T29937] device bridge_slave_1 entered promiscuous mode
[ 2204.293676][T29947] fuse: Bad value for 'fd'
[ 2204.469542][ T5208] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 2204.477042][ T5208] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 2205.210550][T29950] fuse: Bad value for 'fd'
[ 2205.216817][ T5208] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 2205.230626][ T5208] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 2205.239662][ T5208] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2205.246954][ T5208] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2205.254571][ T5208] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 2205.264100][ T5208] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 2205.273741][ T5208] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2205.280627][ T5208] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2205.677949][T29937] device veth0_vlan entered promiscuous mode
[ 2205.714724][ T5208] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 2205.724049][ T5208] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 2205.733217][ T5208] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 2205.746265][ T5208] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 2205.754036][ T5208] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 2205.762469][ T5208] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 2205.770414][ T5208] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 2205.778502][ T5208] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 2206.855914][T29965] fuse: Bad value for 'fd'
[ 2206.999537][T29937] device veth1_macvtap entered promiscuous mode
[ 2207.031915][T29977] loop5: detected capacity change from 0 to 1024
[ 2207.090979][ T5208] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 2207.105472][ T5208] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 2207.114670][ T5208] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 2207.124425][ T5208] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 2207.133784][T29977] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[ 2207.239204][T25036] tipc: Disabling bearer <udp:syz2>
[ 2207.244468][T25036] tipc: Left network mode
[ 2207.621360][T29892] EXT4-fs (loop5): unmounting filesystem.
[ 2208.029808][T25036] device veth1_to_batadv left promiscuous mode
[ 2208.035901][T25036] device veth1_macvtap left promiscuous mode
[ 2208.041691][T25036] device veth0_vlan left promiscuous mode
[ 2219.350314][T30017] fuse: Bad value for 'fd'
[ 2219.493727][T30018] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2219.500726][T30018] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2219.508597][T30018] device bridge_slave_0 entered promiscuous mode
[ 2219.743481][T30018] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2219.751794][T30018] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2220.046431][T30022] fuse: Bad value for 'fd'
[ 2220.080531][T30018] device bridge_slave_1 entered promiscuous mode
[ 2220.219804][T30040] loop3: detected capacity change from 0 to 1024
[ 2220.334783][T30018] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2220.341693][T30018] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2220.348816][T30018] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2220.355666][T30018] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2220.406574][T25036] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 2220.416114][T25036] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2220.423524][T25036] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2220.433348][T30040] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[ 2220.473419][ T5208] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 2220.482040][ T5208] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 2220.490286][ T5208] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2220.497182][ T5208] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2220.512396][ T5208] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 2220.522035][ T5208] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 2220.537081][ T5208] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2220.544038][ T5208] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2221.232727][T29809] EXT4-fs (loop3): unmounting filesystem.
[ 2221.241468][T25036] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 2221.290665][T25036] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 2221.300389][T25036] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 2221.318358][T25036] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 2221.340235][ T5208] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 2221.350451][ T5208] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 2221.441132][T29178] device bridge_slave_1 left promiscuous mode
[ 2221.514379][T29178] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2221.601673][T30056] fuse: Bad value for 'fd'
[ 2221.601706][T30059] fuse: Bad value for 'fd'
[ 2221.621585][T29178] device bridge_slave_0 left promiscuous mode
[ 2221.640070][T29178] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2221.648370][T29178] device veth1_macvtap left promiscuous mode
[ 2221.654318][T29178] device veth0_vlan left promiscuous mode
[ 2221.797102][T30018] device veth0_vlan entered promiscuous mode
[ 2221.825872][T25036] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 2221.833972][T25036] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 2221.842230][T25036] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 2221.850474][T25036] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 2221.858639][T25036] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 2221.866029][T25036] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 2221.875522][T30018] device veth1_macvtap entered promiscuous mode
[ 2221.890316][T25036] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 2221.899410][T25036] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 2221.909661][T25036] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 2221.917954][T25036] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 2224.480418][T30081] fuse: Bad value for 'fd'
[ 2225.256981][T30110] loop5: detected capacity change from 0 to 1024
[ 2225.369334][T30110] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[ 2226.707023][T29892] EXT4-fs (loop5): unmounting filesystem.
[ 2227.509952][T30147] netlink: 292 bytes leftover after parsing attributes in process `syz.4.6975'.
[ 2227.519811][T30147] loop4: detected capacity change from 0 to 16
[ 2227.526086][T30147] erofs: Unknown parameter '����'
[ 2227.813556][T30142] fuse: Bad value for 'fd'
[ 2230.625141][T30176] netlink: 276 bytes leftover after parsing attributes in process `syz.4.6981'.
[ 2230.671382][T30175] loop4: detected capacity change from 0 to 16
[ 2230.677668][T30175] erofs: Unknown parameter '����'
[ 2231.061576][T30183] loop1: detected capacity change from 0 to 1024
[ 2232.215845][T30187] loop5: detected capacity change from 0 to 1024
[ 2232.497112][T30183] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[ 2232.513494][T30187] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[ 2232.817920][T29937] EXT4-fs (loop1): unmounting filesystem.
[ 2232.825355][T29892] EXT4-fs (loop5): unmounting filesystem.
[ 2232.854285][T30201] fuse: Bad value for 'fd'
[ 2234.119398][T30230] fuse: Bad value for 'fd'
[ 2234.480034][T30244] loop4: detected capacity change from 0 to 1024
[ 2234.858631][T30244] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[ 2235.383760][T30261] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior.
[ 2235.440756][T29753] EXT4-fs (loop4): unmounting filesystem.
[ 2235.463108][T30261] overlayfs: overlapping lowerdir path
[ 2235.528870][T30268] loop6: detected capacity change from 0 to 1024
[ 2236.394871][T30268] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[ 2236.697318][T30018] EXT4-fs (loop6): unmounting filesystem.
[ 2236.797664][T30281] fuse: Bad value for 'fd'
[ 2236.819689][T30282] fuse: Bad value for 'fd'
[ 2238.682996][T30326] loop1: detected capacity change from 0 to 2048
[ 2238.706962][T30326] SELinux: security_context_str_to_sid (root) failed with errno=-22
[ 2238.924970][T30331] loop6: detected capacity change from 0 to 16
[ 2238.991933][T30331] erofs: (device loop6): mounted with root inode @ nid 36.
[ 2239.143263][   T28] audit: type=1400 audit(1738260585.321:2692): avc:  denied  { ioctl } for  pid=30330 comm="syz.6.7014" path="/10/file0/file2" dev="loop6" ino=89 ioctlcmd=0x660b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[ 2239.461923][T30353] loop5: detected capacity change from 0 to 512
[ 2239.473693][T30353] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[ 2239.485209][T30353] EXT4-fs (loop5): 1 truncate cleaned up
[ 2239.490797][T30353] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[ 2240.168811][T30358] loop4: detected capacity change from 0 to 40427
[ 2240.184923][T30358] F2FS-fs (loop4): fault_injection options not supported
[ 2240.195799][T30358] F2FS-fs (loop4): invalid crc value
[ 2240.304151][T30358] F2FS-fs (loop4): Found nat_bits in checkpoint
[ 2240.396532][T30358] F2FS-fs (loop4): Start checkpoint disabled!
[ 2240.442848][T30358] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6
[ 2240.501440][T30358] overlayfs: missing 'lowerdir'
[ 2240.686516][T29892] EXT4-fs (loop5): unmounting filesystem.
[ 2240.854157][ T6354] kworker/u4:15: attempt to access beyond end of device
[ 2240.854157][ T6354] loop4: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[ 2240.906751][   T28] audit: type=1400 audit(1738260587.081:2693): avc:  denied  { mounton } for  pid=30381 comm="syz.3.7034" path="/24/file0" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1
[ 2240.958843][T30386] loop3: detected capacity change from 0 to 128
[ 2241.098053][T25388] usb 6-1: new high-speed USB device number 59 using dummy_hcd
[ 2241.118076][T30365] usb 7-1: new high-speed USB device number 50 using dummy_hcd
[ 2241.162289][T30393] loop4: detected capacity change from 0 to 40427
[ 2241.174556][T30393] F2FS-fs (loop4): Unrecognized mount option "errors=continue" or missing value
[ 2241.281481][T23783] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[ 2241.299548][T25388] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2241.309616][T25388] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 2241.328412][T30365] usb 7-1: config 220 interface 0 has no altsetting 0
[ 2241.335143][T25388] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[ 2241.344418][T25388] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[ 2241.468132][T23783] usb 4-1: Using ep0 maxpacket: 16
[ 2241.479047][T23783] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[ 2241.519065][T23783] usb 4-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e
[ 2241.556194][T23783] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2241.590497][T23783] usb 4-1: Product: syz
[ 2241.607973][T23783] usb 4-1: Manufacturer: syz
[ 2241.613663][T25388] usb 6-1: SerialNumber: syz
[ 2241.620484][T23783] usb 4-1: SerialNumber: syz
[ 2241.627498][T23783] usb 4-1: config 0 descriptor??
[ 2241.633458][T30365] usb 7-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[ 2241.642758][T30365] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2241.642979][T23783] hub 4-1:0.0: bad descriptor, ignoring hub
[ 2241.650941][T30365] usb 7-1: Product: syz
[ 2241.660519][T30365] usb 7-1: Manufacturer: syz
[ 2241.664917][T30365] usb 7-1: SerialNumber: syz
[ 2241.672829][T23783] hub: probe of 4-1:0.0 failed with error -5
[ 2241.838430][T30389] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2241.845428][T25388] usb 6-1: 0:2 : does not exist
[ 2241.847657][T30389] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2241.860759][T25388] usb 6-1: 5:0: failed to get current value for ch 0 (-22)
[ 2241.875405][T30365] usb 7-1: Found Unit with invalid ID 0.
[ 2241.885715][T30365] usb 7-1: USB disconnect, device number 50
[ 2241.894845][T25388] usb 6-1: USB disconnect, device number 59
[ 2241.986641][T29911] usb 4-1: USB disconnect, device number 6
[ 2242.028150][T23783] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[ 2242.076882][T30405] raw_sendmsg: syz.4.7041 forgot to set AF_INET. Fix it!
[ 2242.094965][   T28] audit: type=1400 audit(1738260588.271:2694): avc:  denied  { create } for  pid=30406 comm="syz.4.7042" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[ 2242.115071][T30027] udevd[30027]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[ 2242.208125][T23783] usb 2-1: Using ep0 maxpacket: 8
[ 2242.215601][T23783] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2
[ 2242.224560][T23783] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2242.232320][T23783] usb 2-1: Product: syz
[ 2242.236412][T23783] usb 2-1: Manufacturer: syz
[ 2242.240804][T23783] usb 2-1: SerialNumber: syz
[ 2242.245796][T23783] usb 2-1: config 0 descriptor??
[ 2242.458082][T25388] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[ 2242.592075][T30420] loop3: detected capacity change from 0 to 40427
[ 2242.601446][T30420] F2FS-fs (loop3): Found nat_bits in checkpoint
[ 2242.636976][T30420] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[ 2242.728403][T23783] usb 6-1: new high-speed USB device number 60 using dummy_hcd
[ 2242.950308][T23783] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2242.975854][T23783] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2242.986006][T23783] usb 6-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00
[ 2242.995130][T23783] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2243.007298][T23783] usb 6-1: config 0 descriptor??
[ 2243.008125][T25388] usb 5-1: Using ep0 maxpacket: 32
[ 2243.021335][T25388] usb 5-1: config 0 interface 0 has no altsetting 0
[ 2243.029512][T25388] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[ 2243.038449][T25388] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2243.046195][T25388] usb 5-1: Product: syz
[ 2243.050288][T25388] usb 5-1: Manufacturer: syz
[ 2243.054708][T25388] usb 5-1: SerialNumber: syz
[ 2243.059996][T25388] usb 5-1: config 0 descriptor??
[ 2243.244102][T30454] loop3: detected capacity change from 0 to 40427
[ 2243.250990][T30454] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[ 2243.259211][T30454] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[ 2243.268720][T30454] F2FS-fs (loop3): invalid crc value
[ 2243.275507][T30454] F2FS-fs (loop3): Found nat_bits in checkpoint
[ 2243.317763][T30454] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[ 2243.324776][T30454] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[ 2243.464135][T30454] syz.3.7060: attempt to access beyond end of device
[ 2243.464135][T30454] loop3: rw=2049, sector=40424, nr_sectors = 8 limit=40427
[ 2243.477187][T23783] hid-thrustmaster 0003:044F:B65D.0004: unknown main item tag 0x0
[ 2243.485959][T23783] hid-thrustmaster 0003:044F:B65D.0004: unknown main item tag 0x0
[ 2243.494053][T23783] hid-thrustmaster 0003:044F:B65D.0004: unknown main item tag 0x0
[ 2243.501956][T23783] hid-thrustmaster 0003:044F:B65D.0004: unknown main item tag 0x0
[ 2243.509860][T23783] hid-thrustmaster 0003:044F:B65D.0004: unknown main item tag 0x0
[ 2243.518711][T23783] hid-thrustmaster 0003:044F:B65D.0004: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.5-1/input0
[ 2243.530627][T23783] hid-thrustmaster 0003:044F:B65D.0004: Wrong number of endpoints?
[ 2243.643193][    C1] hid-thrustmaster 0003:044F:B65D.0004: Unknown packet type 0xe518, unable to proceed further with wheel init
[ 2243.787784][T30470] loop3: detected capacity change from 0 to 256
[ 2243.795428][T30470] exfat: Deprecated parameter 'namecase'
[ 2243.812758][T30470] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x36bd6320, utbl_chksum : 0xe619d30d)
[ 2243.844465][T30365] usb 6-1: USB disconnect, device number 60
[ 2243.978406][T30475] loop3: detected capacity change from 0 to 256
[ 2244.004941][T30475] FAT-fs (loop3): Directory bread(block 64) failed
[ 2244.011622][T30475] FAT-fs (loop3): Directory bread(block 65) failed
[ 2244.018452][T30475] FAT-fs (loop3): Directory bread(block 66) failed
[ 2244.024957][T30475] FAT-fs (loop3): Directory bread(block 67) failed
[ 2244.031620][T30475] FAT-fs (loop3): Directory bread(block 68) failed
[ 2244.038212][T30475] FAT-fs (loop3): Directory bread(block 69) failed
[ 2244.045048][T30475] FAT-fs (loop3): Directory bread(block 70) failed
[ 2244.051888][T30475] FAT-fs (loop3): Directory bread(block 71) failed
[ 2244.058416][T30475] FAT-fs (loop3): Directory bread(block 72) failed
[ 2244.064925][T30475] FAT-fs (loop3): Directory bread(block 73) failed
[ 2244.455507][T29178] kworker/u4:10: attempt to access beyond end of device
[ 2244.455507][T29178] loop3: rw=1, sector=1224, nr_sectors = 608 limit=256
[ 2244.478738][T29178] kworker/u4:10: attempt to access beyond end of device
[ 2244.478738][T29178] loop3: rw=1, sector=1864, nr_sectors = 3408 limit=256
[ 2244.496159][T29178] kworker/u4:10: attempt to access beyond end of device
[ 2244.496159][T29178] loop3: rw=1, sector=5272, nr_sectors = 3392 limit=256
[ 2244.514739][T29178] kworker/u4:10: attempt to access beyond end of device
[ 2244.514739][T29178] loop3: rw=1, sector=8664, nr_sectors = 3232 limit=256
[ 2244.534001][T29178] kworker/u4:10: attempt to access beyond end of device
[ 2244.534001][T29178] loop3: rw=1, sector=11896, nr_sectors = 3472 limit=256
[ 2244.552846][T29178] kworker/u4:10: attempt to access beyond end of device
[ 2244.552846][T29178] loop3: rw=1, sector=15368, nr_sectors = 3496 limit=256
[ 2244.576752][T29178] kworker/u4:10: attempt to access beyond end of device
[ 2244.576752][T29178] loop3: rw=1, sector=18864, nr_sectors = 2528 limit=256
[ 2244.595367][T30480] loop6: detected capacity change from 0 to 40427
[ 2244.596977][T29178] kworker/u4:10: attempt to access beyond end of device
[ 2244.596977][T29178] loop3: rw=1, sector=21392, nr_sectors = 3064 limit=256
[ 2244.620438][T30480] F2FS-fs (loop6): Unrecognized mount option "errors=continue" or missing value
[ 2244.639110][T30493] loop5: detected capacity change from 0 to 128
[ 2244.661300][T30493] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[ 2244.690623][T30493] ext4 filesystem being mounted at /32/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[ 2244.742927][   T28] audit: type=1400 audit(1738260590.921:2695): avc:  denied  { watch watch_reads } for  pid=30492 comm="syz.5.7072" path="/32/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[ 2244.802038][T30500] loop3: detected capacity change from 0 to 256
[ 2244.808803][T30500] exfat: Deprecated parameter 'namecase'
[ 2244.820424][T29892] EXT4-fs (loop5): unmounting filesystem.
[ 2244.831132][T30500] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x36bd6320, utbl_chksum : 0xe619d30d)
[ 2244.927506][T30365] usb 2-1: USB disconnect, device number 5
[ 2245.012757][T30515] input: syz1 as /devices/virtual/input/input16
[ 2245.145260][T30516] loop5: detected capacity change from 0 to 512
[ 2245.153333][T30516] SELinux: security_context_str_to_sid (system_u) failed with errno=-22
[ 2245.228221][   T28] audit: type=1400 audit(1738260591.291:2696): avc:  denied  { mounton } for  pid=30507 comm="syz.5.7074" path="/33/file0" dev="tmpfs" ino=209 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[ 2245.378034][ T8124] usb 5-1: USB disconnect, device number 7
[ 2245.399622][T30518] loop1: detected capacity change from 0 to 512
[ 2245.420356][T30518] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[ 2245.441207][T30518] EXT4-fs (loop1): 1 truncate cleaned up
[ 2245.451510][T30518] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[ 2245.492488][T29937] EXT4-fs (loop1): unmounting filesystem.
[ 2245.547357][T30527] loop1: detected capacity change from 0 to 128
[ 2245.554586][T30527] EXT4-fs (loop1): Test dummy encryption mode enabled
[ 2245.563894][T30527] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[ 2245.586247][T30527] ext4 filesystem being mounted at /25/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[ 2245.666698][T29937] EXT4-fs (loop1): unmounting filesystem.
[ 2246.258445][T29911] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[ 2246.341238][T30564] loop6: detected capacity change from 0 to 40427
[ 2246.348731][T30564] F2FS-fs (loop6): Invalid Fs Meta Ino: node(1) meta(2) root(0)
[ 2246.356461][T30564] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock
[ 2246.364850][T30564] F2FS-fs (loop6): fault_injection options not supported
[ 2246.372795][T30564] F2FS-fs (loop6): invalid crc value
[ 2246.379169][T30564] F2FS-fs (loop6): Found nat_bits in checkpoint
[ 2246.414435][T30564] F2FS-fs (loop6): Start checkpoint disabled!
[ 2246.421844][T30564] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0
[ 2246.428818][T30564] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6
[ 2246.458070][T29911] usb 5-1: Using ep0 maxpacket: 16
[ 2246.464238][T29911] usb 5-1: config 0 has an invalid interface number: 17 but max is 0
[ 2246.472368][T29911] usb 5-1: config 0 has no interface number 0
[ 2246.480698][T29911] usb 5-1: New USB device found, idVendor=0408, idProduct=4034, bcdDevice=dd.cd
[ 2246.490141][T29911] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2246.498325][T29911] usb 5-1: Product: syz
[ 2246.502403][T29911] usb 5-1: Manufacturer: syz
[ 2246.506825][T29911] usb 5-1: SerialNumber: syz
[ 2246.518340][T29911] usb 5-1: config 0 descriptor??
[ 2246.538075][T23783] usb 2-1: new low-speed USB device number 6 using dummy_hcd
[ 2246.662432][T30581] loop3: detected capacity change from 0 to 256
[ 2246.679944][T30581] FAT-fs (loop3): Directory bread(block 64) failed
[ 2246.686402][T30581] FAT-fs (loop3): Directory bread(block 65) failed
[ 2246.694865][T30581] FAT-fs (loop3): Directory bread(block 66) failed
[ 2246.739998][T23783] usb 2-1: config 0 has an invalid interface number: 134 but max is 0
[ 2246.806426][T29911] usb 5-1: Found UVC 0.00 device syz (0408:4034)
[ 2246.827838][T29911] usb 5-1: No valid video chain found.
[ 2246.848864][T23783] usb 2-1: config 0 has no interface number 0
[ 2246.858207][T30581] FAT-fs (loop3): Directory bread(block 67) failed
[ 2246.868082][T30581] FAT-fs (loop3): Directory bread(block 68) failed
[ 2246.897862][T29911] usb 5-1: USB disconnect, device number 8
[ 2246.905283][T23783] usb 2-1: New USB device found, idVendor=04f2, idProduct=b6ba, bcdDevice=fd.15
[ 2246.941915][T30581] FAT-fs (loop3): Directory bread(block 69) failed
[ 2246.948401][T30581] FAT-fs (loop3): Directory bread(block 70) failed
[ 2246.955013][T30581] FAT-fs (loop3): Directory bread(block 71) failed
[ 2246.961455][T30581] FAT-fs (loop3): Directory bread(block 72) failed
[ 2246.965934][T23783] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2246.968154][T30581] FAT-fs (loop3): Directory bread(block 73) failed
[ 2246.992262][T23783] usb 2-1: config 0 descriptor??
[ 2247.179665][T30589] loop3: detected capacity change from 0 to 40427
[ 2247.203677][T30589] F2FS-fs (loop3): Wrong MAIN_AREA boundary, start(4096) end(12800) block(12288)
[ 2247.205194][T29911] usb 2-1: USB disconnect, device number 6
[ 2247.214584][T30589] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[ 2247.226794][T30589] F2FS-fs (loop3): Fix alignment : done, start(4096) end(16896) block(12288)
[ 2247.239531][T30589] F2FS-fs (loop3): invalid crc value
[ 2247.246241][T30589] F2FS-fs (loop3): Found nat_bits in checkpoint
[ 2247.302575][T30589] F2FS-fs (loop3): Start checkpoint disabled!
[ 2247.310350][T30589] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[ 2247.317296][T30589] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6
[ 2247.458568][T25036] bio_check_eod: 3 callbacks suppressed
[ 2247.458587][T25036] kworker/u4:4: attempt to access beyond end of device
[ 2247.458587][T25036] loop3: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[ 2247.505346][   T28] audit: type=1400 audit(1738260593.681:2697): avc:  denied  { create } for  pid=30597 comm="syz.6.7109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[ 2247.652524][T30602] loop3: detected capacity change from 0 to 256
[ 2247.677878][   T28] audit: type=1400 audit(1738260593.851:2698): avc:  denied  { mounton } for  pid=30601 comm="syz.3.7107" path="/45/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1
[ 2247.704589][T30602] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d)
[ 2247.819741][T30606] loop3: detected capacity change from 0 to 512
[ 2247.865402][T30606] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[ 2247.878627][T30606] ext4 filesystem being mounted at /46/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[ 2247.923134][   T28] audit: type=1400 audit(1738260594.101:2699): avc:  denied  { setattr } for  pid=30605 comm="syz.3.7110" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[ 2247.947466][T29809] EXT4-fs (loop3): unmounting filesystem.
[ 2248.184740][T30618] tipc: Started in network mode
[ 2248.189543][T30618] tipc: Node identity 7, cluster identity 4711
[ 2248.195464][T30618] tipc: Node number set to 7
[ 2248.238231][T30618] tipc: Cannot configure node identity twice
[ 2248.304338][T30624] loop6: detected capacity change from 0 to 16
[ 2248.328727][T30624] erofs: (device loop6): mounted with root inode @ nid 36.
[ 2248.349697][T30624] erofs: (device loop6): erofs_fill_dentries: bogus dirent @ nid 46
[ 2248.358417][T30620] loop1: detected capacity change from 0 to 8192
[ 2248.461776][T30615] loop3: detected capacity change from 0 to 40427
[ 2248.468136][   T28] audit: type=1400 audit(1738260594.641:2700): avc:  denied  { mounton } for  pid=30625 comm="syz.6.7119" path="/proc/103/task" dev="proc" ino=86745 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1
[ 2248.528152][T25388] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[ 2248.530761][T30615] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[ 2248.543377][T30615] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[ 2248.555016][T30615] F2FS-fs (loop3): invalid crc value
[ 2248.563526][T30615] F2FS-fs (loop3): Found nat_bits in checkpoint
[ 2248.662291][T30615] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[ 2248.669376][T30615] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[ 2248.708199][T23783] usb 6-1: new high-speed USB device number 61 using dummy_hcd
[ 2248.719950][T25388] usb 5-1: config 0 has no interfaces?
[ 2248.732649][T25388] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 2248.741599][T25388] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2248.749599][T25388] usb 5-1: Product: syz
[ 2248.753592][T25388] usb 5-1: Manufacturer: syz
[ 2248.757791][   T28] audit: type=1400 audit(1738260594.931:2701): avc:  denied  { write open } for  pid=30614 comm="syz.3.7114" path=2F202864656C6574656429 dev="loop3" ino=460 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[ 2248.758355][T25388] usb 5-1: SerialNumber: syz
[ 2248.790740][T25388] usb 5-1: config 0 descriptor??
[ 2248.802554][   T28] audit: type=1400 audit(1738260594.961:2702): avc:  denied  { create } for  pid=30614 comm="syz.3.7114" name="#cc" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[ 2248.830696][T25036] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix.
[ 2248.833404][   T28] audit: type=1400 audit(1738260594.961:2703): avc:  denied  { rename } for  pid=30614 comm="syz.3.7114" name="#cc" dev="loop3" ino=461 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[ 2248.852852][T25036] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix.
[ 2248.866057][   T28] audit: type=1400 audit(1738260594.971:2704): avc:  denied  { unlink } for  pid=30614 comm="syz.3.7114" name="#cd" dev="loop3" ino=461 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[ 2248.899530][T23783] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2248.909335][T23783] usb 6-1: New USB device found, idVendor=172f, idProduct=0500, bcdDevice= 0.00
[ 2248.918462][T23783] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2248.936775][T23783] usb 6-1: config 0 descriptor??
[ 2249.046952][ T8124] usb 5-1: USB disconnect, device number 9
[ 2249.128084][T23443] usb 2-1: new low-speed USB device number 7 using dummy_hcd
[ 2249.211201][T30648] loop6: detected capacity change from 0 to 2048
[ 2249.230219][T30648] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[ 2249.257542][T30018] EXT4-fs (loop6): unmounting filesystem.
[ 2249.529011][T30657] loop6: detected capacity change from 0 to 512
[ 2249.639962][T23443] usb 2-1: LPM exit latency is zeroed, disabling LPM.
[ 2249.663902][T23783] waltop 0003:172F:0500.0005: unknown main item tag 0x0
[ 2249.693251][T23443] usb 2-1: config 1 interface 0 altsetting 60 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 2249.733504][T23783] waltop 0003:172F:0500.0005: unknown main item tag 0x0
[ 2249.745969][T30657] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[ 2249.755505][T30657] ext4 filesystem being mounted at /36/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[ 2249.782240][   T28] kauditd_printk_skb: 2 callbacks suppressed
[ 2249.782268][   T28] audit: type=1400 audit(1738260595.961:2707): avc:  denied  { append } for  pid=30652 comm="syz.6.7127" path="/36/file0/cgroup.controllers" dev="loop6" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[ 2249.861211][T23783] waltop 0003:172F:0500.0005: unknown main item tag 0x0
[ 2249.910850][T23443] usb 2-1: config 1 interface 0 has no altsetting 0
[ 2249.931252][T23783] waltop 0003:172F:0500.0005: unknown main item tag 0x0
[ 2250.457986][T23783] waltop 0003:172F:0500.0005: unknown main item tag 0x0
[ 2250.467183][T23443] usb 2-1: string descriptor 0 read error: -22
[ 2250.475548][T23443] usb 2-1: New USB device found, idVendor=17ef, idProduct=60b5, bcdDevice= 0.40
[ 2250.485196][T23783] waltop 0003:172F:0500.0005: unknown main item tag 0x0
[ 2250.498177][T23783] waltop 0003:172F:0500.0005: unknown main item tag 0x0
[ 2250.505303][T23443] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2250.614420][T23783] waltop 0003:172F:0500.0005: unknown main item tag 0x0
[ 2252.735546][T30669] loop4: detected capacity change from 0 to 40427
[ 2252.766434][T30669] F2FS-fs (loop4): fault_injection options not supported
[ 2252.775234][T30018] EXT4-fs (loop6): unmounting filesystem.
[ 2252.781463][T30669] F2FS-fs (loop4): invalid crc value
[ 2252.828195][T30669] F2FS-fs (loop4): Found nat_bits in checkpoint
[ 2252.876044][T30669] F2FS-fs (loop4): Start checkpoint disabled!
[ 2252.891990][T30669] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6
[ 2252.969643][T30668] overlayfs: missing 'lowerdir'
[ 2252.975386][T23783] waltop 0003:172F:0500.0005: unknown main item tag 0x0
[ 2252.982281][T23443] usb 2-1: can't set config #1, error -71
[ 2252.988353][T23783] waltop 0003:172F:0500.0005: unknown main item tag 0x0
[ 2252.995229][T23443] usb 2-1: USB disconnect, device number 7
[ 2253.001131][T23783] waltop 0003:172F:0500.0005: unknown main item tag 0x0
[ 2253.007943][T23783] waltop 0003:172F:0500.0005: unknown main item tag 0x0
[ 2253.029233][T30678] loop1: detected capacity change from 0 to 512
[ 2253.035648][T23783] waltop 0003:172F:0500.0005: unknown main item tag 0x0
[ 2253.202089][T30678] EXT4-fs (loop1): 1 orphan inode deleted
[ 2253.210512][T30678] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[ 2253.219679][ T6354] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14
[ 2253.232329][ T2899] kworker/u4:8: attempt to access beyond end of device
[ 2253.232329][ T2899] loop4: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[ 2253.246325][ T6354] EXT4-fs error (device loop1): ext4_release_dquot:6804: comm kworker/u4:15: Failed to release dquot type 1
[ 2253.258146][T30678] ext4 filesystem being mounted at /36/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 2253.303394][   T28] audit: type=1400 audit(1738260599.481:2708): avc:  denied  { setattr } for  pid=30674 comm="syz.1.7133" path="/36/file1/cgroup.events" dev="loop1" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[ 2253.386727][T29937] EXT4-fs (loop1): unmounting filesystem.
[ 2253.439074][T23783] waltop 0003:172F:0500.0005: hidraw0: USB HID v0.00 Device [HID 172f:0500] on usb-dummy_hcd.5-1/input0
[ 2253.452767][T23783] usb 6-1: USB disconnect, device number 61
[ 2253.484880][T30692] loop6: detected capacity change from 0 to 256
[ 2253.949198][T30704] loop6: detected capacity change from 0 to 1024
[ 2254.004662][T30704] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[ 2254.019013][T30704] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters
[ 2254.034244][T30704] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 4 with error 28
[ 2254.046508][T30704] EXT4-fs (loop6): This should not happen!! Data will be lost
[ 2254.046508][T30704] 
[ 2254.056096][T30704] EXT4-fs (loop6): Total free blocks count 0
[ 2254.062440][T30704] EXT4-fs (loop6): Free/Dirty block details
[ 2254.076586][T30704] EXT4-fs (loop6): free_blocks=68451041280
[ 2254.086496][T30704] EXT4-fs (loop6): dirty_blocks=64
[ 2254.097063][T30704] EXT4-fs (loop6): Block reservation details
[ 2254.107423][T30704] EXT4-fs (loop6): i_reserved_data_blocks=4
[ 2254.140513][ T2899] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 4 with max blocks 60 with error 28
[ 2254.142817][   T28] audit: type=1400 audit(1738260600.321:2709): avc:  denied  { mount } for  pid=30688 comm="syz.5.7138" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1
[ 2254.178703][T30699] loop1: detected capacity change from 0 to 40427
[ 2254.262640][T30699] F2FS-fs (loop1): Unrecognized mount option "errors=continue" or missing value
[ 2254.314307][T30712] kvm: vcpu 2: requested 128 ns lapic timer period limited to 200000 ns
[ 2254.328888][T30718] loop6: detected capacity change from 0 to 128
[ 2254.353291][T30712] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer.
[ 2256.376710][T30759] loop1: detected capacity change from 0 to 40427
[ 2256.387378][T30759] F2FS-fs (loop1): fault_injection options not supported
[ 2256.401843][T30759] F2FS-fs (loop1): invalid crc value
[ 2256.530248][T30759] F2FS-fs (loop1): Found nat_bits in checkpoint
[ 2256.603409][T30759] F2FS-fs (loop1): Start checkpoint disabled!
[ 2256.677811][T30759] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6
[ 2257.077830][T30772] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[ 2257.119689][T30772] kvm: pic: non byte read
[ 2257.124379][T30772] kvm: pic: non byte read
[ 2257.146235][T30772] kvm: pic: single mode not supported
[ 2257.146253][T30772] kvm: pic: level sensitive irq not supported
[ 2257.174746][T30772] kvm: pic: non byte read
[ 2257.226955][T30772] kvm: pic: non byte read
[ 2257.231957][T30772] kvm: pic: non byte read
[ 2257.308416][T30772] kvm: pic: level sensitive irq not supported
[ 2257.308486][T30772] kvm: pic: non byte read
[ 2257.342221][T30772] kvm: pic: non byte read
[ 2257.355937][T30772] kvm: pic: non byte read
[ 2257.361169][T30772] kvm: pic: non byte read
[ 2257.396200][T30772] kvm: pic: non byte read
[ 2258.408712][T30807] loop5: detected capacity change from 0 to 40427
[ 2258.419354][T30807] F2FS-fs (loop5): fault_injection options not supported
[ 2258.430334][T30807] F2FS-fs (loop5): invalid crc value
[ 2258.443661][T30807] F2FS-fs (loop5): Found nat_bits in checkpoint
[ 2258.522537][T30807] F2FS-fs (loop5): Start checkpoint disabled!
[ 2258.610702][T30807] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6
[ 2259.018558][T30824] device pim6reg1 entered promiscuous mode
[ 2259.052645][T30830] syz.6.7191[30830] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2259.052723][T30830] syz.6.7191[30830] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2259.065137][T30830] device pim6reg1 entered promiscuous mode
[ 2259.469241][T30832] loop1: detected capacity change from 0 to 40427
[ 2259.488502][T30832] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[ 2259.514572][T30832] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[ 2259.560718][T30832] F2FS-fs (loop1): invalid crc value
[ 2259.587371][T30832] F2FS-fs (loop1): Found nat_bits in checkpoint
[ 2259.685882][T30832] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[ 2259.693020][T30832] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[ 2259.886765][T30870] syz.1.7192: attempt to access beyond end of device
[ 2259.886765][T30870] loop1: rw=2049, sector=40424, nr_sectors = 8 limit=40427
[ 2259.965253][T30873] 9pnet_fd: Insufficient options for proto=fd
[ 2260.189576][   T28] audit: type=1107 audit(1738260606.161:2710): pid=30867 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='����Z���Í���3��5ZL���<ꪵ�
[ 2260.189576][   T28] ���A���V��	��Uc�7Uf����ՙ��������x!YH>�bŸ>?��sm�_�a�wJ��z/�g'
[ 2260.499562][T30892] device wg2 entered promiscuous mode
[ 2261.561886][T30900] loop4: detected capacity change from 0 to 40427
[ 2261.575597][T30900] F2FS-fs (loop4): fault_injection options not supported
[ 2261.587217][T30900] F2FS-fs (loop4): invalid crc value
[ 2261.736134][T30900] F2FS-fs (loop4): Found nat_bits in checkpoint
[ 2261.809832][T30900] F2FS-fs (loop4): Start checkpoint disabled!
[ 2261.868480][T30900] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6
[ 2262.058050][T30900] overlayfs: missing 'lowerdir'
[ 2262.598376][ T5208] kworker/u4:13: attempt to access beyond end of device
[ 2262.598376][ T5208] loop4: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[ 2263.346100][T23783] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[ 2263.358036][T30014] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[ 2263.905696][T30952] device pim6reg1 entered promiscuous mode
[ 2263.979088][T23783] usb 2-1: config 0 has no interfaces?
[ 2263.984415][T23783] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[ 2264.004086][T23783] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2264.028614][T23783] usb 2-1: config 0 descriptor??
[ 2264.068045][T30014] usb 5-1: Using ep0 maxpacket: 16
[ 2264.074136][T30014] usb 5-1: config 250 has an invalid interface number: 219 but max is 0
[ 2264.089781][T30014] usb 5-1: config 250 has no interface number 0
[ 2264.095975][T30014] usb 5-1: config 250 interface 219 has no altsetting 0
[ 2264.119203][T30014] usb 5-1: New USB device found, idVendor=0c72, idProduct=0011, bcdDevice=a3.ab
[ 2264.128122][T30014] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2264.130498][T30956] loop5: detected capacity change from 0 to 40427
[ 2264.135893][T30014] usb 5-1: Product: syz
[ 2264.146507][T30014] usb 5-1: Manufacturer: syz
[ 2264.151101][T30014] usb 5-1: SerialNumber: syz
[ 2264.156760][T30956] F2FS-fs (loop5): fault_injection options not supported
[ 2264.165058][T30956] F2FS-fs (loop5): invalid crc value
[ 2264.176782][T30956] F2FS-fs (loop5): Found nat_bits in checkpoint
[ 2264.238138][T30930] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2264.246909][T30930] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2264.265901][T30956] F2FS-fs (loop5): Start checkpoint disabled!
[ 2264.272853][T23783] usb 2-1: USB disconnect, device number 8
[ 2264.276224][T30956] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6
[ 2264.368856][T30014] usb 5-1: USB disconnect, device number 10
[ 2264.943443][T23783] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[ 2265.337259][T23783] usb 2-1: Using ep0 maxpacket: 16
[ 2265.360404][T23783] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2265.371420][T23783] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 2265.388195][T23783] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 1.40
[ 2266.080104][T31007] loop6: detected capacity change from 0 to 40427
[ 2266.090316][T31007] F2FS-fs (loop6): fault_injection options not supported
[ 2266.101348][T31007] F2FS-fs (loop6): invalid crc value
[ 2266.283431][T31007] F2FS-fs (loop6): Found nat_bits in checkpoint
[ 2266.436966][T31007] F2FS-fs (loop6): Start checkpoint disabled!
[ 2266.514704][T31007] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6
[ 2266.573426][T31007] overlayfs: missing 'lowerdir'
[ 2266.806695][T23783] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2266.815471][T23783] usb 2-1: Product: syz
[ 2266.819602][T23783] usb 2-1: Manufacturer: syz
[ 2266.825587][T23783] usb 2-1: SerialNumber: syz
[ 2266.831415][T23783] usb 2-1: can't set config #1, error -71
[ 2266.837481][T23783] usb 2-1: USB disconnect, device number 9
[ 2266.848292][ T5208] kworker/u4:13: attempt to access beyond end of device
[ 2266.848292][ T5208] loop6: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[ 2267.078337][T31029] syz.6.7265[31029] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2267.078421][T31029] syz.6.7265[31029] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2267.173909][T31040] loop6: detected capacity change from 0 to 2048
[ 2267.190680][T31042] device syzkaller0 entered promiscuous mode
[ 2267.229393][T31040] SELinux: security_context_str_to_sid (root) failed with errno=-22
[ 2267.462923][T31056] loop5: detected capacity change from 0 to 256
[ 2267.471668][T31056] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[ 2267.590196][T31056] FAT-fs (loop5): Directory bread(block 64) failed
[ 2267.596632][T31056] FAT-fs (loop5): Directory bread(block 65) failed
[ 2267.603261][T31056] FAT-fs (loop5): Directory bread(block 66) failed
[ 2267.609752][T31056] FAT-fs (loop5): Directory bread(block 67) failed
[ 2267.616461][T31056] FAT-fs (loop5): Directory bread(block 68) failed
[ 2267.622897][T31056] FAT-fs (loop5): Directory bread(block 69) failed
[ 2267.629541][T31056] FAT-fs (loop5): Directory bread(block 70) failed
[ 2267.636250][T31056] FAT-fs (loop5): Directory bread(block 71) failed
[ 2267.643041][T31056] FAT-fs (loop5): Directory bread(block 72) failed
[ 2267.649665][T31056] FAT-fs (loop5): Directory bread(block 73) failed
[ 2268.539207][T30365] usb 7-1: new high-speed USB device number 51 using dummy_hcd
[ 2268.557594][T31077] device pim6reg1 entered promiscuous mode
[ 2268.653756][T31082] device wg2 left promiscuous mode
[ 2268.664118][T31082] device wg2 entered promiscuous mode
[ 2268.728459][T30365] usb 7-1: Using ep0 maxpacket: 16
[ 2268.742135][T30365] usb 7-1: config 32 has an invalid descriptor of length 0, skipping remainder of the config
[ 2268.775237][T30365] usb 7-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4
[ 2268.801179][T30365] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2268.810801][T30365] usb 7-1: Product: syz
[ 2268.815235][T30365] usb 7-1: Manufacturer: syz
[ 2268.820051][T30365] usb 7-1: SerialNumber: syz
[ 2268.826787][T30365] asix: probe of 7-1:32.0 failed with error -22
[ 2269.048587][T31104] loop4: detected capacity change from 0 to 40427
[ 2269.056271][T31104] F2FS-fs (loop4): fault_injection options not supported
[ 2269.067113][T31104] F2FS-fs (loop4): invalid crc value
[ 2269.105632][T31104] F2FS-fs (loop4): Found nat_bits in checkpoint
[ 2269.183795][T31104] F2FS-fs (loop4): Start checkpoint disabled!
[ 2269.228083][T12637] usb 6-1: new high-speed USB device number 62 using dummy_hcd
[ 2269.271683][T31104] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6
[ 2269.330899][T31104] overlayfs: missing 'lowerdir'
[ 2269.343403][T30365] usb 7-1: USB disconnect, device number 51
[ 2270.001439][T31111] loop3: detected capacity change from 0 to 256
[ 2270.010289][T12637] usb 6-1: Using ep0 maxpacket: 16
[ 2270.027466][T12637] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2270.044982][T31111] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d)
[ 2270.070211][T12637] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2270.080129][T12637] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 2270.086832][T25036] kworker/u4:4: attempt to access beyond end of device
[ 2270.086832][T25036] loop4: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[ 2270.093539][T12637] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[ 2270.116777][T12637] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2270.184933][T12637] usb 6-1: config 0 descriptor??
[ 2270.449632][   T28] audit: type=1400 audit(1738260616.631:2711): avc:  denied  { ioctl } for  pid=31112 comm="syz.6.7302" path="socket:[87787]" dev="sockfs" ino=87787 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[ 2270.615141][T12637] microsoft 0003:045E:07DA.0006: ignoring exceeding usage max
[ 2270.646313][T12637] input: HID 045e:07da as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:045E:07DA.0006/input/input17
[ 2270.754025][T12637] microsoft 0003:045E:07DA.0006: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0
[ 2270.831396][T30365] usb 6-1: USB disconnect, device number 62
[ 2270.898067][  T317] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[ 2270.928658][T31144] device wg2 entered promiscuous mode
[ 2270.958281][T12637] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[ 2273.011112][T31146] loop6: detected capacity change from 0 to 40427
[ 2273.079983][T31146] F2FS-fs (loop6): fault_injection options not supported
[ 2273.092784][T31146] F2FS-fs (loop6): invalid crc value
[ 2273.138140][T12637] usb 5-1: Using ep0 maxpacket: 32
[ 2273.169820][T12637] usb 5-1: config 0 has an invalid interface number: 230 but max is 0
[ 2273.240620][T31146] F2FS-fs (loop6): Found nat_bits in checkpoint
[ 2273.317408][T31146] F2FS-fs (loop6): Start checkpoint disabled!
[ 2273.392787][T31146] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6
[ 2273.531311][T12637] usb 5-1: config 0 has no interface number 0
[ 2273.545515][T12637] usb 5-1: config 0 interface 230 has no altsetting 0
[ 2273.565966][T12637] usb 5-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05
[ 2273.603654][T12637] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2273.611746][T12637] usb 5-1: Product: syz
[ 2273.634038][T12637] usb 5-1: Manufacturer: syz
[ 2273.642099][T12637] usb 5-1: SerialNumber: syz
[ 2273.652557][T12637] usb 5-1: config 0 descriptor??
[ 2273.673151][T12637] usb 5-1: can't set config #0, error -71
[ 2273.705123][T12637] usb 5-1: USB disconnect, device number 11
[ 2273.780845][T31170] device pim6reg1 entered promiscuous mode
[ 2273.906069][T31175] loop5: detected capacity change from 0 to 256
[ 2273.967714][T31175] exFAT-fs (loop5): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d)
[ 2274.068096][T12637] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[ 2274.098154][T18765] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[ 2274.268080][T12637] usb 5-1: Using ep0 maxpacket: 8
[ 2274.275603][T12637] usb 5-1: unable to get BOS descriptor or descriptor too short
[ 2274.288068][T18765] usb 4-1: Using ep0 maxpacket: 32
[ 2274.295248][T18765] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2274.335232][T12637] usb 5-1: string descriptor 0 read error: -22
[ 2274.354329][T18765] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2274.373690][T12637] usb 5-1: New USB device found, idVendor=0789, idProduct=0160, bcdDevice=82.fe
[ 2274.442026][T18765] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[ 2274.461841][T12637] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2274.543689][T18765] usb 4-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00
[ 2274.587703][T18765] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2274.721319][T18765] usb 4-1: config 0 descriptor??
[ 2274.728266][T12637] asix 5-1:7.0 (unnamed net_device) (uninitialized): invalid hw address, using random
[ 2274.906314][  T317] usb 2-1: device not accepting address 10, error -71
[ 2274.950020][T31173] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2274.958393][T31173] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2274.978102][T23783] usb 7-1: new high-speed USB device number 52 using dummy_hcd
[ 2275.168065][T23783] usb 7-1: Using ep0 maxpacket: 8
[ 2275.168099][T18765] hid (null): unknown global tag 0xd
[ 2275.174416][T23783] usb 7-1: config 0 has an invalid interface number: 1 but max is 0
[ 2275.183944][T18765] kye 0003:0458:5011.0007: unknown main item tag 0x0
[ 2275.188185][T23783] usb 7-1: config 0 has no interface number 0
[ 2275.193442][T18765] kye 0003:0458:5011.0007: unknown main item tag 0x0
[ 2275.199169][T23783] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 2275.205712][T18765] kye 0003:0458:5011.0007: unknown main item tag 0x0
[ 2275.222922][T18765] kye 0003:0458:5011.0007: unknown main item tag 0x0
[ 2275.223733][T23443] usb 6-1: new high-speed USB device number 63 using dummy_hcd
[ 2275.229732][T18765] kye 0003:0458:5011.0007: unknown main item tag 0x0
[ 2275.243499][T23783] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[ 2275.243603][T18765] kye 0003:0458:5011.0007: unknown main item tag 0x0
[ 2275.252682][T23783] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2275.259229][T18765] kye 0003:0458:5011.0007: unknown main item tag 0x0
[ 2275.267899][T23783] usb 7-1: config 0 descriptor??
[ 2275.273638][T18765] kye 0003:0458:5011.0007: unknown main item tag 0x0
[ 2275.284642][T18765] kye 0003:0458:5011.0007: unknown main item tag 0x0
[ 2275.291179][T18765] kye 0003:0458:5011.0007: unknown main item tag 0x0
[ 2275.297659][T18765] kye 0003:0458:5011.0007: unknown main item tag 0x0
[ 2275.304180][T18765] kye 0003:0458:5011.0007: unknown main item tag 0x0
[ 2275.308081][  T317] usb 2-1: new full-speed USB device number 11 using dummy_hcd
[ 2275.310742][T18765] kye 0003:0458:5011.0007: unknown main item tag 0x0
[ 2275.324548][T18765] kye 0003:0458:5011.0007: unknown main item tag 0x0
[ 2275.331116][T18765] kye 0003:0458:5011.0007: unknown main item tag 0x0
[ 2275.337565][T18765] kye 0003:0458:5011.0007: unknown main item tag 0x0
[ 2275.344136][T12637] asix 5-1:7.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[ 2275.353909][T18765] kye 0003:0458:5011.0007: unknown main item tag 0x0
[ 2275.360405][T12637] asix 5-1:7.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9
[ 2275.368129][T31173] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2275.370406][T18765] kye 0003:0458:5011.0007: unknown main item tag 0x0
[ 2275.379064][T31173] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2275.385056][T18765] kye 0003:0458:5011.0007: unknown main item tag 0x0
[ 2275.399285][T18765] kye 0003:0458:5011.0007: unknown main item tag 0x0
[ 2275.405813][T18765] kye 0003:0458:5011.0007: unknown main item tag 0x0
[ 2275.412358][T18765] kye 0003:0458:5011.0007: unknown main item tag 0x0
[ 2275.418846][T18765] kye 0003:0458:5011.0007: unknown main item tag 0x0
[ 2275.425331][T18765] kye 0003:0458:5011.0007: unknown main item tag 0x0
[ 2275.429185][T23443] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2275.431891][T18765] kye 0003:0458:5011.0007: unknown main item tag 0x0
[ 2275.442352][T23443] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[ 2275.448275][T18765] kye 0003:0458:5011.0007: unknown main item tag 0x0
[ 2275.457473][T23443] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2275.463657][T18765] kye 0003:0458:5011.0007: unknown main item tag 0x0
[ 2275.472679][T23443] usb 6-1: config 0 descriptor??
[ 2275.477936][T18765] kye 0003:0458:5011.0007: unknown main item tag 0x0
[ 2275.488954][T30014] usb 7-1: USB disconnect, device number 52
[ 2275.489296][T18765] kye 0003:0458:5011.0007: unknown main item tag 0x0
[ 2275.501528][T18765] kye 0003:0458:5011.0007: unknown main item tag 0x0
[ 2275.507974][T18765] kye 0003:0458:5011.0007: unknown main item tag 0x0
[ 2275.509345][  T317] usb 2-1: config 36 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping
[ 2275.514496][T18765] kye 0003:0458:5011.0007: unknown main item tag 0x0
[ 2275.526455][  T317] usb 2-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29
[ 2275.531425][T18765] kye 0003:0458:5011.0007: unknown main item tag 0x0
[ 2275.540824][  T317] usb 2-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16
[ 2275.546770][T18765] kye 0003:0458:5011.0007: unknown main item tag 0x0
[ 2275.546801][T18765] kye 0003:0458:5011.0007: unknown main item tag 0x0
[ 2275.554958][  T317] usb 2-1: Manufacturer: syz
[ 2275.563800][T12637] asix 5-1:7.0 eth1: register 'asix' at usb-dummy_hcd.4-1, ASIX AX88178 USB 2.0 Ethernet, 2a:e2:8a:85:38:5a
[ 2275.567946][  T317] usb 2-1: SerialNumber: syz
[ 2275.573764][T12637] usb 5-1: USB disconnect, device number 12
[ 2275.593745][T18765] kye 0003:0458:5011.0007: unknown main item tag 0x0
[ 2275.599943][T31173] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2275.600272][T18765] kye 0003:0458:5011.0007: unknown main item tag 0x0
[ 2275.609038][T31173] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2275.615059][T12637] asix 5-1:7.0 eth1: unregister 'asix' usb-dummy_hcd.4-1, ASIX AX88178 USB 2.0 Ethernet
[ 2275.628441][T31173] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2275.632043][T18765] kye 0003:0458:5011.0007: unknown main item tag 0x0
[ 2275.640857][T31173] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2275.646746][T18765] kye 0003:0458:5011.0007: unknown main item tag 0x0
[ 2275.662644][T18765] kye 0003:0458:5011.0007: unknown main item tag 0x0
[ 2275.669211][T18765] kye 0003:0458:5011.0007: unknown main item tag 0x0
[ 2275.675723][T18765] kye 0003:0458:5011.0007: unknown main item tag 0x0
[ 2275.682226][T18765] kye 0003:0458:5011.0007: unknown main item tag 0x0
[ 2275.688744][T18765] kye 0003:0458:5011.0007: unknown main item tag 0x0
[ 2275.695312][T18765] kye 0003:0458:5011.0007: unknown main item tag 0x0
[ 2275.701881][T30014] usb 6-1: USB disconnect, device number 63
[ 2275.702140][T18765] kye 0003:0458:5011.0007: unknown main item tag 0x0
[ 2275.714446][T18765] kye 0003:0458:5011.0007: unknown main item tag 0x0
[ 2275.720935][T18765] kye 0003:0458:5011.0007: unknown main item tag 0x0
[ 2275.727403][T18765] kye 0003:0458:5011.0007: unknown main item tag 0x0
[ 2275.734146][T18765] kye 0003:0458:5011.0007: unknown main item tag 0x0
[ 2275.740633][T18765] kye 0003:0458:5011.0007: unknown main item tag 0x0
[ 2275.747111][T18765] kye 0003:0458:5011.0007: unknown main item tag 0x0
[ 2275.753649][T18765] kye 0003:0458:5011.0007: unknown main item tag 0x0
[ 2275.760167][T18765] kye 0003:0458:5011.0007: unknown main item tag 0x0
[ 2275.766646][T18765] kye 0003:0458:5011.0007: unknown main item tag 0x0
[ 2275.773179][T18765] kye 0003:0458:5011.0007: unknown main item tag 0x0
[ 2275.779680][T18765] kye 0003:0458:5011.0007: unknown main item tag 0x0
[ 2275.786173][T18765] kye 0003:0458:5011.0007: unknown main item tag 0x0
[ 2275.788272][  T317] usbhid 2-1:36.0: couldn't find an input interrupt endpoint
[ 2275.792723][T18765] kye 0003:0458:5011.0007: unknown main item tag 0x0
[ 2275.802354][  T317] usb 2-1: USB disconnect, device number 11
[ 2275.806398][T18765] kye 0003:0458:5011.0007: unknown main item tag 0x0
[ 2275.818833][T18765] kye 0003:0458:5011.0007: unknown main item tag 0x0
[ 2275.825306][T18765] kye 0003:0458:5011.0007: unknown main item tag 0x0
[ 2275.831846][T18765] kye 0003:0458:5011.0007: unknown main item tag 0x0
[ 2275.838447][T18765] kye 0003:0458:5011.0007: unknown main item tag 0x0
[ 2275.844928][T18765] kye 0003:0458:5011.0007: unknown main item tag 0x0
[ 2275.851472][T18765] kye 0003:0458:5011.0007: unknown main item tag 0x0
[ 2275.857946][T18765] kye 0003:0458:5011.0007: unknown main item tag 0x0
[ 2275.864488][T18765] kye 0003:0458:5011.0007: unknown main item tag 0x0
[ 2275.870982][T18765] kye 0003:0458:5011.0007: unknown main item tag 0x0
[ 2275.877470][T18765] kye 0003:0458:5011.0007: unknown main item tag 0x0
[ 2275.884038][T18765] kye 0003:0458:5011.0007: unknown main item tag 0x0
[ 2275.890525][T18765] kye 0003:0458:5011.0007: unknown main item tag 0x0
[ 2275.897029][T18765] kye 0003:0458:5011.0007: unknown main item tag 0x0
[ 2275.903595][T18765] kye 0003:0458:5011.0007: unknown main item tag 0x0
[ 2275.910659][T18765] kye 0003:0458:5011.0007: unknown main item tag 0x0
[ 2275.917668][T18765] kye 0003:0458:5011.0007: unknown main item tag 0x0
[ 2275.924292][T18765] kye 0003:0458:5011.0007: unknown main item tag 0x0
[ 2275.930843][T18765] kye 0003:0458:5011.0007: unknown main item tag 0x0
[ 2275.937335][T18765] kye 0003:0458:5011.0007: unknown main item tag 0x0
[ 2275.944108][T18765] kye 0003:0458:5011.0007: unknown main item tag 0x0
[ 2275.950665][T18765] kye 0003:0458:5011.0007: unknown main item tag 0x0
[ 2275.957202][T18765] kye 0003:0458:5011.0007: unknown main item tag 0x0
[ 2275.963695][T18765] kye 0003:0458:5011.0007: unknown main item tag 0x0
[ 2275.970331][T18765] kye 0003:0458:5011.0007: unknown main item tag 0x0
[ 2275.976868][T18765] kye 0003:0458:5011.0007: unknown main item tag 0x0
[ 2275.983442][T18765] kye 0003:0458:5011.0007: unknown main item tag 0x0
[ 2275.989896][T18765] kye 0003:0458:5011.0007: unknown main item tag 0x2
[ 2275.996450][T18765] kye 0003:0458:5011.0007: unknown main item tag 0x0
[ 2276.002943][T18765] kye 0003:0458:5011.0007: unknown main item tag 0x0
[ 2276.009489][T18765] kye 0003:0458:5011.0007: unknown main item tag 0x0
[ 2276.019604][T18765] kye 0003:0458:5011.0007: unknown main item tag 0x0
[ 2276.026573][T18765] kye 0003:0458:5011.0007: unknown main item tag 0x0
[ 2276.033657][T18765] kye 0003:0458:5011.0007: unknown main item tag 0x0
[ 2276.040289][T18765] kye 0003:0458:5011.0007: unknown main item tag 0x0
[ 2276.046900][T18765] kye 0003:0458:5011.0007: unknown main item tag 0x0
[ 2276.053477][T18765] kye 0003:0458:5011.0007: unknown main item tag 0x0
[ 2276.060136][T18765] kye 0003:0458:5011.0007: unknown main item tag 0x0
[ 2276.066747][T18765] kye 0003:0458:5011.0007: unknown main item tag 0x0
[ 2276.073410][T18765] kye 0003:0458:5011.0007: unknown main item tag 0x0
[ 2276.079991][T18765] kye 0003:0458:5011.0007: unknown main item tag 0x0
[ 2276.086510][T18765] kye 0003:0458:5011.0007: unknown main item tag 0x0
[ 2276.092086][T31201] device pim6reg1 entered promiscuous mode
[ 2276.093288][T18765] kye 0003:0458:5011.0007: unknown main item tag 0x0
[ 2276.105521][T18765] kye 0003:0458:5011.0007: unknown main item tag 0x0
[ 2276.112136][T18765] kye 0003:0458:5011.0007: unknown main item tag 0x0
[ 2276.119199][T18765] kye 0003:0458:5011.0007: unknown main item tag 0x0
[ 2276.125768][T18765] kye 0003:0458:5011.0007: unknown main item tag 0x0
[ 2276.132297][T18765] kye 0003:0458:5011.0007: unknown main item tag 0x0
[ 2276.138936][T18765] kye 0003:0458:5011.0007: unknown main item tag 0x0
[ 2276.145422][T18765] kye 0003:0458:5011.0007: unknown main item tag 0x0
[ 2276.151959][T18765] kye 0003:0458:5011.0007: unknown main item tag 0x1
[ 2276.158446][T18765] kye 0003:0458:5011.0007: unknown main item tag 0x0
[ 2276.164945][T18765] kye 0003:0458:5011.0007: unknown global tag 0xd
[ 2276.171293][T18765] kye 0003:0458:5011.0007: item 0 0 1 13 parsing failed
[ 2276.178242][T18765] kye 0003:0458:5011.0007: parse failed
[ 2276.183734][T18765] kye: probe of 0003:0458:5011.0007 failed with error -22
[ 2276.200820][T18765] usb 4-1: USB disconnect, device number 7
[ 2276.207699][T12637] ==================================================================
[ 2276.215611][T12637] BUG: KASAN: use-after-free in worker_thread+0xa36/0x1260
[ 2276.222618][T12637] Read of size 8 at addr ffff8881301c0ce0 by task kworker/0:3/12637
[ 2276.230429][T12637] 
[ 2276.232616][T12637] CPU: 0 PID: 12637 Comm: kworker/0:3 Tainted: G        W          6.1.124-syzkaller-00113-g554eb9d61ac0 #0
[ 2276.244140][T12637] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[ 2276.254224][T12637] Workqueue:  0x0 (usb_hub_wq)
[ 2276.258813][T12637] Call Trace:
[ 2276.261935][T12637]  <TASK>
[ 2276.264712][T12637]  dump_stack_lvl+0x151/0x1b7
[ 2276.269307][T12637]  ? nf_tcp_handle_invalid+0x3f1/0x3f1
[ 2276.274631][T12637]  ? _printk+0xd1/0x111
[ 2276.278592][T12637]  ? __virt_addr_valid+0x242/0x2f0
[ 2276.283544][T12637]  print_report+0x158/0x4e0
[ 2276.287967][T12637]  ? __virt_addr_valid+0x242/0x2f0
[ 2276.292911][T12637]  ? kasan_complete_mode_report_info+0x90/0x1b0
[ 2276.299001][T12637]  ? worker_thread+0xa36/0x1260
[ 2276.303680][T12637]  kasan_report+0x13c/0x170
[ 2276.308013][T12637]  ? worker_thread+0xa36/0x1260
[ 2276.312702][T12637]  __asan_report_load8_noabort+0x14/0x20
[ 2276.318171][T12637]  worker_thread+0xa36/0x1260
[ 2276.322694][T12637]  kthread+0x26d/0x300
[ 2276.326618][T12637]  ? worker_clr_flags+0x1a0/0x1a0
[ 2276.331448][T12637]  ? kthread_blkcg+0xd0/0xd0
[ 2276.335901][T12637]  ret_from_fork+0x1f/0x30
[ 2276.340129][T12637]  </TASK>
[ 2276.342993][T12637] 
[ 2276.345163][T12637] Allocated by task 12637:
[ 2276.349506][T12637]  kasan_set_track+0x4b/0x70
[ 2276.353933][T12637]  kasan_save_alloc_info+0x1f/0x30
[ 2276.358882][T12637]  __kasan_kmalloc+0x9c/0xb0
[ 2276.363302][T12637]  __kmalloc_node+0xb4/0x1e0
[ 2276.367727][T12637]  kvmalloc_node+0x221/0x640
[ 2276.372156][T12637]  alloc_netdev_mqs+0x8c/0xf90
[ 2276.376862][T12637]  alloc_etherdev_mqs+0x36/0x40
[ 2276.381545][T12637]  usbnet_probe+0x213/0x28a0
[ 2276.385972][T12637]  usb_probe_interface+0x5b6/0xa90
[ 2276.390923][T12637]  really_probe+0x2b8/0x920
[ 2276.395262][T12637]  __driver_probe_device+0x1a0/0x310
[ 2276.400391][T12637]  driver_probe_device+0x54/0x3d0
[ 2276.405242][T12637]  __device_attach_driver+0x2e3/0x490
[ 2276.410448][T12637]  bus_for_each_drv+0x183/0x200
[ 2276.415137][T12637]  __device_attach+0x312/0x510
[ 2276.419738][T12637]  device_initial_probe+0x1a/0x20
[ 2276.424603][T12637]  bus_probe_device+0xbe/0x1e0
[ 2276.429207][T12637]  device_add+0xb60/0xf10
[ 2276.433450][T12637]  usb_set_configuration+0x190f/0x1e80
[ 2276.438745][T12637]  usb_generic_driver_probe+0x8b/0x150
[ 2276.444036][T12637]  usb_probe_device+0x144/0x260
[ 2276.448724][T12637]  really_probe+0x2b8/0x920
[ 2276.453067][T12637]  __driver_probe_device+0x1a0/0x310
[ 2276.458187][T12637]  driver_probe_device+0x54/0x3d0
[ 2276.463047][T12637]  __device_attach_driver+0x2e3/0x490
[ 2276.468253][T12637]  bus_for_each_drv+0x183/0x200
[ 2276.472940][T12637]  __device_attach+0x312/0x510
[ 2276.477538][T12637]  device_initial_probe+0x1a/0x20
[ 2276.482401][T12637]  bus_probe_device+0xbe/0x1e0
[ 2276.487003][T12637]  device_add+0xb60/0xf10
[ 2276.491168][T12637]  usb_new_device+0xf2f/0x1820
[ 2276.495878][T12637]  hub_event+0x2db1/0x4830
[ 2276.500173][T12637]  process_one_work+0x73d/0xcb0
[ 2276.504911][T12637]  worker_thread+0xd71/0x1260
[ 2276.509417][T12637]  kthread+0x26d/0x300
[ 2276.513345][T12637]  ret_from_fork+0x1f/0x30
[ 2276.517930][T12637] 
[ 2276.520095][T12637] Freed by task 12637:
[ 2276.524002][T12637]  kasan_set_track+0x4b/0x70
[ 2276.528430][T12637]  kasan_save_free_info+0x2b/0x40
[ 2276.533288][T12637]  ____kasan_slab_free+0x131/0x180
[ 2276.538254][T12637]  __kasan_slab_free+0x11/0x20
[ 2276.542834][T12637]  __kmem_cache_free+0x21d/0x410
[ 2276.547610][T12637]  kfree+0x7a/0xf0
[ 2276.551166][T12637]  kvfree+0x35/0x40
[ 2276.554812][T12637]  netdev_freemem+0x3f/0x60
[ 2276.559160][T12637]  netdev_release+0x7f/0xb0
[ 2276.563500][T12637]  device_release+0x95/0x1c0
[ 2276.567922][T12637]  kobject_put+0x178/0x260
[ 2276.572260][T12637]  put_device+0x1f/0x30
[ 2276.576496][T12637]  free_netdev+0x393/0x480
[ 2276.580743][T12637]  usbnet_disconnect+0x25f/0x3b0
[ 2276.585611][T12637]  usb_unbind_interface+0x1fa/0x8c0
[ 2276.590819][T12637]  device_release_driver_internal+0x53e/0x870
[ 2276.596824][T12637]  device_release_driver+0x19/0x20
[ 2276.601773][T12637]  bus_remove_device+0x2fa/0x360
[ 2276.606558][T12637]  device_del+0x663/0xe90
[ 2276.610718][T12637]  usb_disable_device+0x380/0x720
[ 2276.615681][T12637]  usb_disconnect+0x32a/0x890
[ 2276.620274][T12637]  hub_event+0x1ed8/0x4830
[ 2276.624524][T12637]  process_one_work+0x73d/0xcb0
[ 2276.629211][T12637]  worker_thread+0xd71/0x1260
[ 2276.633725][T12637]  kthread+0x26d/0x300
[ 2276.637632][T12637]  ret_from_fork+0x1f/0x30
[ 2276.641883][T12637] 
[ 2276.644053][T12637] Last potentially related work creation:
[ 2276.649613][T12637]  kasan_save_stack+0x3b/0x60
[ 2276.654122][T12637]  __kasan_record_aux_stack+0xb4/0xc0
[ 2276.659420][T12637]  kasan_record_aux_stack_noalloc+0xb/0x10
[ 2276.665067][T12637]  insert_work+0x56/0x310
[ 2276.669231][T12637]  __queue_work+0x9b6/0xd70
[ 2276.673999][T12637]  queue_work_on+0x105/0x170
[ 2276.678428][T12637]  usbnet_link_change+0x182/0x1a0
[ 2276.683287][T12637]  usbnet_probe+0x1e1e/0x28a0
[ 2276.687800][T12637]  usb_probe_interface+0x5b6/0xa90
[ 2276.692995][T12637]  really_probe+0x2b8/0x920
[ 2276.697330][T12637]  __driver_probe_device+0x1a0/0x310
[ 2276.702449][T12637]  driver_probe_device+0x54/0x3d0
[ 2276.707311][T12637]  __device_attach_driver+0x2e3/0x490
[ 2276.712516][T12637]  bus_for_each_drv+0x183/0x200
[ 2276.717217][T12637]  __device_attach+0x312/0x510
[ 2276.721804][T12637]  device_initial_probe+0x1a/0x20
[ 2276.726664][T12637]  bus_probe_device+0xbe/0x1e0
[ 2276.731265][T12637]  device_add+0xb60/0xf10
[ 2276.735643][T12637]  usb_set_configuration+0x190f/0x1e80
[ 2276.740932][T12637]  usb_generic_driver_probe+0x8b/0x150
[ 2276.746229][T12637]  usb_probe_device+0x144/0x260
[ 2276.750916][T12637]  really_probe+0x2b8/0x920
[ 2276.755253][T12637]  __driver_probe_device+0x1a0/0x310
[ 2276.760373][T12637]  driver_probe_device+0x54/0x3d0
[ 2276.765326][T12637]  __device_attach_driver+0x2e3/0x490
[ 2276.770531][T12637]  bus_for_each_drv+0x183/0x200
[ 2276.775305][T12637]  __device_attach+0x312/0x510
[ 2276.779904][T12637]  device_initial_probe+0x1a/0x20
[ 2276.784761][T12637]  bus_probe_device+0xbe/0x1e0
[ 2276.789368][T12637]  device_add+0xb60/0xf10
[ 2276.793625][T12637]  usb_new_device+0xf2f/0x1820
[ 2276.798218][T12637]  hub_event+0x2db1/0x4830
[ 2276.802469][T12637]  process_one_work+0x73d/0xcb0
[ 2276.807157][T12637]  worker_thread+0xd71/0x1260
[ 2276.811667][T12637]  kthread+0x26d/0x300
[ 2276.815659][T12637]  ret_from_fork+0x1f/0x30
[ 2276.819919][T12637] 
[ 2276.822084][T12637] The buggy address belongs to the object at ffff8881301c0000
[ 2276.822084][T12637]  which belongs to the cache kmalloc-4k of size 4096
[ 2276.835997][T12637] The buggy address is located 3296 bytes inside of
[ 2276.835997][T12637]  4096-byte region [ffff8881301c0000, ffff8881301c1000)
[ 2276.849287][T12637] 
[ 2276.851418][T12637] The buggy address belongs to the physical page:
[ 2276.857831][T12637] page:ffffea0004c07000 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1301c0
[ 2276.868155][T12637] head:ffffea0004c07000 order:3 compound_mapcount:0 compound_pincount:0
[ 2276.876304][T12637] flags: 0x4000000000010200(slab|head|zone=1)
[ 2276.882230][T12637] raw: 4000000000010200 0000000000000000 dead000000000001 ffff888100043380
[ 2276.890628][T12637] raw: 0000000000000000 0000000000040004 00000001ffffffff 0000000000000000
[ 2276.899059][T12637] page dumped because: kasan: bad access detected
[ 2276.905312][T12637] page_owner tracks the page as allocated
[ 2276.910851][T12637] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd60c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_RETRY_MAYFAIL|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 295, tgid 295 (syz-executor), ts 27929707173, free_ts 0
[ 2276.932723][T12637]  post_alloc_hook+0x213/0x220
[ 2276.937404][T12637]  prep_new_page+0x1b/0x110
[ 2276.941864][T12637]  get_page_from_freelist+0x2f41/0x2fc0
[ 2276.947659][T12637]  __alloc_pages+0x234/0x610
[ 2276.952110][T12637]  alloc_slab_page+0x6c/0xf0
[ 2276.956684][T12637]  new_slab+0x90/0x3e0
[ 2276.960587][T12637]  ___slab_alloc+0x6f9/0xb80
[ 2276.965017][T12637]  __slab_alloc+0x5d/0xa0
[ 2276.969181][T12637]  __kmem_cache_alloc_node+0x207/0x2a0
[ 2276.974474][T12637]  __kmalloc_node+0xa3/0x1e0
[ 2276.978903][T12637]  kvmalloc_node+0x221/0x640
[ 2276.983341][T12637]  alloc_netdev_mqs+0x8c/0xf90
[ 2276.987928][T12637]  rtnl_create_link+0x2e1/0xad0
[ 2276.992628][T12637]  veth_newlink+0x29e/0xc70
[ 2276.997043][T12637]  rtnl_newlink+0x14c6/0x2030
[ 2277.001558][T12637]  rtnetlink_rcv_msg+0x9a5/0xca0
[ 2277.006339][T12637] page_owner free stack trace missing
[ 2277.011538][T12637] 
[ 2277.013707][T12637] Memory state around the buggy address:
[ 2277.019180][T12637]  ffff8881301c0b80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 2277.027141][T12637]  ffff8881301c0c00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 2277.034985][T12637] >ffff8881301c0c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 2277.042871][T12637]                                                        ^
[ 2277.049905][T12637]  ffff8881301c0d00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 2277.057932][T12637]  ffff8881301c0d80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 2277.065807][T12637] ==================================================================
[ 2277.073695][T12637] Disabling lock debugging due to kernel taint
[ 2277.080919][T30014] usb 6-1: new high-speed USB device number 64 using dummy_hcd
[ 2277.168113][  T317] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[ 2277.269206][T30014] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2277.279724][T30014] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[ 2277.288516][T30014] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2277.297270][T30014] usb 6-1: config 0 descriptor??
[ 2277.348072][T30365] usb 7-1: new high-speed USB device number 53 using dummy_hcd
[ 2277.369121][  T317] usb 2-1: config 36 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping
[ 2277.380858][  T317] usb 2-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29
[ 2277.389753][  T317] usb 2-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16
[ 2277.397891][  T317] usb 2-1: Manufacturer: syz
[ 2277.402408][  T317] usb 2-1: SerialNumber: syz
[ 2277.428089][T18765] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[ 2277.528074][T30365] usb 7-1: Using ep0 maxpacket: 32
[ 2277.534191][T30365] usb 7-1: config 0 has an invalid interface number: 67 but max is 0
[ 2277.542329][T30365] usb 7-1: config 0 has no interface number 0
[ 2277.548203][T30365] usb 7-1: config 0 interface 67 altsetting 0 endpoint 0x82 has invalid maxpacket 21760, setting to 1024
[ 2277.559306][T30365] usb 7-1: config 0 interface 67 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024
[ 2277.570813][T30365] usb 7-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[ 2277.580010][T30365] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2277.587885][T30365] usb 7-1: Product: syz
[ 2277.591849][T30365] usb 7-1: Manufacturer: syz
[ 2277.596243][T30365] usb 7-1: SerialNumber: syz
[ 2277.601495][T30365] usb 7-1: config 0 descriptor??
[ 2277.606559][T31197] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22
[ 2277.609763][T18765] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2277.625011][T30365] smsc95xx v2.0.0
[ 2277.626921][  T317] usbhid 2-1:36.0: couldn't find an input interrupt endpoint
[ 2277.628601][T18765] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2277.645287][T18765] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 2277.657966][T18765] usb 4-1: New USB device found, idVendor=1223, idProduct=3f07, bcdDevice= 0.00
[ 2277.666900][T18765] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2277.675506][T18765] usb 4-1: config 0 descriptor??
[ 2277.826189][T31197] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22
[ 2278.033811][T30365] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[ 2278.044547][T30365] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[ 2278.127174][T18765] ortek 0003:1223:3F07.0008: unknown main item tag 0x0
[ 2278.134128][T18765] ortek 0003:1223:3F07.0008: unknown main item tag 0x0
[ 2278.140936][T18765] ortek 0003:1223:3F07.0008: unknown main item tag 0x0
[ 2278.147761][T18765] ortek 0003:1223:3F07.0008: unknown main item tag 0x0
[ 2278.154703][T18765] ortek 0003:1223:3F07.0008: unknown main item tag 0x0
[ 2278.161464][T18765] ortek 0003:1223:3F07.0008: unknown main item tag 0x0
[ 2278.168218][T18765] ortek 0003:1223:3F07.0008: unknown main item tag 0x0
[ 2278.174926][T18765] ortek 0003:1223:3F07.0008: unknown main item tag 0x0
[ 2278.181682][T18765] ortek 0003:1223:3F07.0008: unknown main item tag 0x0
[ 2278.188571][T18765] ortek 0003:1223:3F07.0008: unknown main item tag 0x0
[ 2278.195506][T18765] ortek 0003:1223:3F07.0008: unknown main item tag 0x0
[ 2278.202296][T18765] ortek 0003:1223:3F07.0008: unknown main item tag 0x0
[ 2278.208988][T18765] ortek 0003:1223:3F07.0008: unknown main item tag 0x0
[ 2278.215636][T18765] ortek 0003:1223:3F07.0008: unknown main item tag 0x0
[ 2278.222397][T18765] ortek 0003:1223:3F07.0008: unknown main item tag 0x0
[ 2278.229142][T18765] ortek 0003:1223:3F07.0008: unknown main item tag 0x0
[ 2278.235811][T18765] ortek 0003:1223:3F07.0008: unknown main item tag 0x0
[ 2278.242546][T18765] ortek 0003:1223:3F07.0008: unknown main item tag 0x0
[ 2278.249188][T18765] ortek 0003:1223:3F07.0008: unknown main item tag 0x0
[ 2278.256155][T18765] ortek 0003:1223:3F07.0008: unknown main item tag 0x0
[ 2278.262919][T18765] ortek 0003:1223:3F07.0008: unknown main item tag 0x0
[ 2278.269652][T18765] ortek 0003:1223:3F07.0008: unknown main item tag 0x0
[ 2278.276312][T18765] ortek 0003:1223:3F07.0008: unknown main item tag 0x0
[ 2278.283022][T18765] ortek 0003:1223:3F07.0008: unknown main item tag 0x0
[ 2278.289689][T18765] ortek 0003:1223:3F07.0008: unknown main item tag 0x0
[ 2278.296361][T18765] ortek 0003:1223:3F07.0008: unknown main item tag 0x0
[ 2278.303078][T18765] ortek 0003:1223:3F07.0008: unknown main item tag 0x0
[ 2278.309740][T18765] ortek 0003:1223:3F07.0008: unknown main item tag 0x0
[ 2278.316405][T18765] ortek 0003:1223:3F07.0008: unknown main item tag 0x0
[ 2278.323119][T18765] ortek 0003:1223:3F07.0008: unknown main item tag 0x0
[ 2278.330314][T18765] ortek 0003:1223:3F07.0008: unknown main item tag 0x0
[ 2278.337045][T18765] ortek 0003:1223:3F07.0008: unknown main item tag 0x0
[ 2278.343774][T18765] ortek 0003:1223:3F07.0008: unknown main item tag 0x0
[ 2278.350442][T18765] ortek 0003:1223:3F07.0008: unknown main item tag 0x0
[ 2278.357087][T18765] ortek 0003:1223:3F07.0008: unknown main item tag 0x0
[ 2278.363812][T18765] ortek 0003:1223:3F07.0008: unknown main item tag 0x0
[ 2278.370529][T18765] ortek 0003:1223:3F07.0008: unknown main item tag 0x0
[ 2278.377177][T18765] ortek 0003:1223:3F07.0008: unknown main item tag 0x0
[ 2278.383897][T18765] ortek 0003:1223:3F07.0008: unknown main item tag 0x0
[ 2278.390530][T18765] ortek 0003:1223:3F07.0008: unknown main item tag 0x0
[ 2278.397196][T18765] ortek 0003:1223:3F07.0008: unknown main item tag 0x0
[ 2278.403906][T18765] ortek 0003:1223:3F07.0008: unknown main item tag 0x0
[ 2278.410761][T18765] ortek 0003:1223:3F07.0008: unknown main item tag 0x0
[ 2278.417455][T18765] ortek 0003:1223:3F07.0008: unknown main item tag 0x0
[ 2278.424200][T18765] ortek 0003:1223:3F07.0008: unknown main item tag 0x0
[ 2278.430831][T18765] ortek 0003:1223:3F07.0008: unknown main item tag 0x0
[ 2278.437499][T18765] ortek 0003:1223:3F07.0008: unknown main item tag 0x0
[ 2278.444241][T18765] ortek 0003:1223:3F07.0008: unknown main item tag 0x0
[ 2278.451073][T18765] ortek 0003:1223:3F07.0008: unknown main item tag 0x0
[ 2278.457876][T18765] ortek 0003:1223:3F07.0008: unknown main item tag 0x0
[ 2278.464654][T18765] ortek 0003:1223:3F07.0008: unknown main item tag 0x0
[ 2278.471367][T18765] ortek 0003:1223:3F07.0008: unknown main item tag 0x0
[ 2278.478060][T18765] ortek 0003:1223:3F07.0008: unknown main item tag 0x0
[ 2278.484720][T18765] ortek 0003:1223:3F07.0008: unknown main item tag 0x0
[ 2278.491433][T18765] ortek 0003:1223:3F07.0008: unknown main item tag 0x0
[ 2278.499535][T18765] ortek 0003:1223:3F07.0008: hidraw0: USB HID v0.00 Device [HID 1223:3f07] on usb-dummy_hcd.3-1/input0
[ 2278.512529][T18765] usb 4-1: USB disconnect, device number 8
[ 2278.521178][  T317] usb 6-1: USB disconnect, device number 64
[ 2278.644038][T25388] usb 2-1: USB disconnect, device number 12
[ 2281.035577][T30365] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000000: -71
[ 2281.046847][T30365] smsc95xx: probe of 7-1:0.67 failed with error -71
[ 2281.056897][T30365] usb 7-1: USB disconnect, device number 53