last executing test programs:

25.185683873s ago: executing program 0:
syz_mount_image$f2fs(&(0x7f0000000300), &(0x7f0000000040)='./bus\x00', 0x2008410, &(0x7f0000000600)=ANY=[], 0x1, 0x553b, &(0x7f000000ac00)="$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")
r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
mkdirat(r1, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
renameat2(r1, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f0000000180)='./file1\x00', 0x4)
renameat2(r0, &(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f00000002c0)='./file0\x00', 0x0)

24.954365879s ago: executing program 0:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413ec50000000f00200095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='netlink_extack\x00', r0}, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@ipv4_delroute={0x2c, 0x19, 0xb25, 0x0, 0x0, {}, [@RTA_FLOW={0x8}, @RTA_NH_ID={0x8, 0x1e, 0x1}]}, 0x2c}}, 0x0)

24.832278388s ago: executing program 0:
syz_emit_ethernet(0x6a, &(0x7f0000000000)={@random="c16d473d990c", @local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x29, 0x0, @private, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x8, 0x4, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x11}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [0x0, 0x0]}}}}}}, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x11, 0x5, &(0x7f0000000040)=@framed={{0x25, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x6c}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80)
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000006700), 0x0, 0x0)
read$usbmon(r0, &(0x7f0000006740)=""/11, 0xb)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='erofs_fill_inode\x00', r0}, 0x10)
socket$packet(0x11, 0x3, 0x300)
socket$packet(0x11, 0x3, 0x300)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x4, 0xdb, &(0x7f00000002c0)=""/219}, 0x80)

24.82115994s ago: executing program 0:
r0 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000340)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108)
r1 = socket$inet6(0xa, 0x80001, 0x0)
setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = syz_open_procfs$pagemap(0x0, &(0x7f00000008c0))
lseek(r2, 0x0, 0x2)
r3 = socket$netlink(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x5, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000184b00001bd6fdffffff00000000000000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='ext4_request_inode\x00'}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x9, 0xb, 0x3ff, 0x1}, 0x48)
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
mremap(&(0x7f0000a01000/0x4000)=nil, 0x4000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
munmap(&(0x7f0000ba0000/0x2000)=nil, 0x2000)
mremap(&(0x7f000075e000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f00006a3000/0x1000)=nil)
mremap(&(0x7f0000d04000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffd000/0x2000)=nil)
mremap(&(0x7f00001c8000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000fe1000/0x4000)=nil)
mremap(&(0x7f000054d000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f00003af000/0x2000)=nil)
munmap(&(0x7f0000652000/0x1000)=nil, 0x1000)
mremap(&(0x7f000070b000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f00004d1000/0x3000)=nil)
socket$packet(0x11, 0x2, 0x300)
mremap(&(0x7f00005fe000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f0000000380)}, 0x20)
writev(r3, &(0x7f0000000240)=[{&(0x7f0000000080)="390000001300034700bb5be1c3fbfeff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1)
getrusage(0xffffffffffffffff, &(0x7f0000000480))

24.771751348s ago: executing program 0:
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x7, 0x1}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='net_dev_xmit\x00', r1}, 0x10)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"/2566], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000100)="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", 0x0, 0x8, 0x60000000}, 0x1e)

24.76100155s ago: executing program 0:
ptrace(0x10, 0x1)
r0 = inotify_init1(0x0)
fcntl$setown(r0, 0x8, 0xffffffffffffffff)
fcntl$getownex(r0, 0x10, &(0x7f0000000380)={0x0, <r1=>0x0})
ptrace$cont(0x4202, r1, 0x0, 0x800000000000)

15.813541556s ago: executing program 1:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000003df0000000000000000850000000500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='mm_page_alloc\x00', r0}, 0x10)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
r2 = syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002280)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0)
read$FUSE(r1, &(0x7f0000006340)={0x2020, 0x0, <r3=>0x0}, 0x2058)
write$FUSE_INIT(r1, &(0x7f0000002200)={0x50, 0x0, r3, {0x7, 0x27}}, 0x50)
read$FUSE(r1, &(0x7f0000000100)={0x2020, 0x0, <r4=>0x0}, 0x2020)
write$FUSE_IOCTL(r1, &(0x7f0000002140)={0x20, 0x0, r4}, 0x20)
read$FUSE(r1, &(0x7f0000002300)={0x2020, 0x0, <r5=>0x0}, 0x2020)
getdents64(r2, 0x0, 0x300)
write$FUSE_INTERRUPT(r1, &(0x7f0000000080)={0x10, 0x0, r5}, 0x10)

15.615530546s ago: executing program 1:
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x24, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x51}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x23000000}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}, @printk={@d, {0x3, 0x3, 0x3, 0x4, 0x9}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

15.511684423s ago: executing program 1:
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='qdisc_create\x00', r0}, 0x10)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @broadcast})

15.400239371s ago: executing program 1:
socket(0x20, 0x0, 0x0)

15.388142262s ago: executing program 1:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='block_bio_remap\x00', r0}, 0x10)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='block_bio_remap\x00', r2}, 0x10)
write$cgroup_type(r1, &(0x7f0000000000), 0x9)

15.320573003s ago: executing program 1:
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[], 0x4b0}}, 0x0)
ptrace(0x10, 0x1)
r0 = inotify_init1(0x0)
fcntl$setown(r0, 0x8, 0xffffffffffffffff)
fcntl$getownex(r0, 0x10, &(0x7f0000000380)={0x0, <r1=>0x0})
ptrace$getenv(0x4205, r1, 0x2, &(0x7f0000000000))

3.335664976s ago: executing program 4:
r0 = socket(0xa, 0x2, 0x0)
getsockopt$bt_BT_SECURITY(r0, 0x29, 0x3a, 0x0, 0x20000000)

3.324341978s ago: executing program 4:
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000280), &(0x7f00000002c0)=r1}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r2}, 0x10)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r3}, 0x10)
bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000280)=@base={0x6, 0x4, 0x8000, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48)

3.274442555s ago: executing program 4:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x52)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000004000001d8500000007000000440000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xb, 0x7, 0x2, 0xff22, 0x1}, 0x48)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r1, &(0x7f0000000000), &(0x7f0000000180)=@tcp}, 0x20)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r1, &(0x7f0000000200), &(0x7f0000000540)}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000040)={r1, &(0x7f0000000040), &(0x7f0000002100)=""/4096}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x3, &(0x7f0000000100)={r1, &(0x7f0000000100), 0x0}, 0x20)

3.265756547s ago: executing program 4:
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000180)=@framed={{}, [@ldst={0x3, 0x2, 0x3, 0x1, 0x0, 0x3f}]}, &(0x7f0000000240)='GPL\x00', 0x4, 0x8f, &(0x7f0000000000)=""/143}, 0x80)

3.260379798s ago: executing program 4:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000011c0)=ANY=[@ANYBLOB="12010001090003206d0414c340000000000109022400010000a000090400000103010100092100", @ANYRES64], 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10)
quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f00000000c0)=@sg0, 0x0, &(0x7f0000000180)='./file0\x00')
syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, &(0x7f0000001180)=ANY=[@ANYBLOB="00020c0000000c0002"], 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10)
socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8)
r3 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x0)
sendmsg$key(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x12, 0x0, 0x0, 0x2}, 0x10}}, 0x0)
close_range(r3, 0xffffffffffffffff, 0x0)

1.2746372s ago: executing program 3:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000200)={0x38, 0x1, 0x1, 0x201, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x10, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}]}, @CTA_FILTER={0x14, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x8}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x108}]}]}, 0x38}}, 0x0)

1.265025431s ago: executing program 3:
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000006000000000000000000000300000000030000000100000081000000020000000000000a"], 0x0, 0x42}, 0x20)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x401, 0x0, 0x0, 0xb998, 0x0, "194f2f83c2e798c3584770116cddc8819592b1"})
write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100))
r1 = syz_open_pts(r0, 0x0)
ioctl$TCSETS(r1, 0x5402, &(0x7f0000000040)={0x0, 0x80000001, 0x0, 0x0, 0x0, "0ea4fc7b9ff53acfc3b072570d9763d021c778"})

1.008467022s ago: executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x1000, 0x0)
mkdir(&(0x7f0000000540)='./file0\x00', 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000073117a000000000085ffeb000000000095000000000000009500a50500000000"], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x90)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10)
connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0)
sendto$inet(r4, &(0x7f00000004c0)="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", 0x109e8, 0x805, 0x0, 0x6)
ioctl$sock_inet_tcp_SIOCINQ(r4, 0x541b, &(0x7f00000012c0))
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
dup3(0xffffffffffffffff, r5, 0x0)
r6 = fcntl$dupfd(r5, 0x0, r5)
connect$unix(r6, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e)
sendmsg$nl_route(r6, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=@ipv6_getaddr={0x20, 0x16, 0x200, 0x70bd29, 0x25dfdbfd, {0xa, 0x38, 0x7}, [@IFA_RT_PRIORITY={0x8, 0x9, 0x3}]}, 0x20}}, 0x10)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}})

596.311896ms ago: executing program 2:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x4, 0x4, 0x4, 0x0, 0x1}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='ext4_ext_remove_space_done\x00', r1}, 0x10)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='ext4_ext_remove_space_done\x00', r3}, 0x10)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.current\x00', 0x7a05, 0x1700)
write$cgroup_pid(r4, &(0x7f0000000340), 0xfdef)

585.792378ms ago: executing program 2:
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0xa0, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffed5}, 0x15)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x0, 0xe, 0x2000000, &(0x7f00000000c0)="61df712bc884fed5722780b6c2a7", 0x0, 0x2d23}, 0x28)

574.81393ms ago: executing program 2:
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
r2 = socket(0x1e, 0x805, 0x0)
connect$tipc(r2, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{}, 0x2}}, 0x10)
connect$tipc(r2, &(0x7f0000000000)=@id, 0x10)
close(r2)

365.264783ms ago: executing program 3:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
ustat(0x1, &(0x7f0000000040))

318.35613ms ago: executing program 3:
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='ext4_es_find_extent_range_enter\x00', r1}, 0x10)
mkdir(&(0x7f0000000080)='./file1\x00', 0x0)

200.234899ms ago: executing program 3:
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000280)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@errors_continue}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f0000000680)="$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")
chdir(&(0x7f0000000000)='./file0\x00')
creat(&(0x7f0000000040)='./bus\x00', 0x0)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
r0 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2, 0x28011, r0, 0x0)
readv(0xffffffffffffffff, &(0x7f0000001f80)=[{0x0}, {0x0}, {0xffffffffffffffff}], 0x3)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)

21.482217ms ago: executing program 2:
r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000000)=@urb_type_interrupt={0x1, {}, 0x0, 0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

15.896717ms ago: executing program 4:
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003580)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0)
write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a)
fallocate(r1, 0x3, 0x0, 0x2c2)
ioctl$FIBMAP(r1, 0x1, &(0x7f0000000080))

11.926578ms ago: executing program 2:
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000200)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x5}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10)
r3 = dup3(r1, r0, 0x0)
sendmsg$key(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)={0x2, 0xa, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1, 0x7}]}, 0x18}}, 0x0)

0s ago: executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = dup(r1)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x8413, &(0x7f0000000000), 0x0, 0x517, &(0x7f0000000f80)="$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")
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_NMI(r3, 0xae9a)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2004840, &(0x7f0000000f80)={[{@abort}, {@i_version}, {@errors_remount}], [{@obj_type={'obj_type', 0x3d, '\x00\x00\x00\xe3^\x1b\xbc\x9a\xe6>\xaeYtK\xc0\xde\x04j\xe8\x00'}}, {@audit}, {@context={'context', 0x3d, 'staff_u'}}, {@fowner_eq={'fowner', 0x3d, 0xee01}}, {@euid_eq}, {@euid_gt}]}, 0x1, 0x503, &(0x7f0000000a40)="$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")
ioctl$KVM_RUN(r3, 0xae80, 0x0)

kernel console output (not intermixed with test programs):

s: bogus dirent @ nid 36
[  843.294230][T31961] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36
[  843.299510][T28536] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  843.306803][T31961] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36
[  843.315209][T28536] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  843.322755][T31961] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36
[  843.330352][T28536] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  843.338110][T31961] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36
[  843.345945][T28536] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  843.361556][T31961] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36
[  843.361741][T28536] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  843.369683][T31961] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36
[  843.377195][  T616] F2FS-fs (loop2): Found nat_bits in checkpoint
[  843.385159][T31961] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36
[  843.391253][T28536] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  843.399053][T31961] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36
[  843.414923][T31961] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36
[  843.422869][T31961] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36
[  843.428390][T28536] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  843.430820][T31961] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36
[  843.441305][T28536] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  843.446700][T31961] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36
[  843.456015][T28536] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  843.462160][T31961] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36
[  843.470718][T28536] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  843.477771][T31961] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36
[  843.486014][T28536] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  843.493849][T31961] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36
[  843.501242][T28536] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  843.509277][T31961] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36
[  843.516579][  T616] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  843.531590][T31961] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36
[  843.531852][T28536] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  843.539703][T31961] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36
[  843.547311][T28536] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  843.555202][T31961] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36
[  843.562849][  T616] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4
[  843.570825][T31961] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36
[  843.578102][T28536] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  843.585793][ T1334] usb 2-1: new high-speed USB device number 75 using dummy_hcd
[  843.594033][T28536] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  843.608928][T28536] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  843.610381][T31961] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36
[  843.617167][T28536] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  843.625002][T31961] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36
[  843.634265][T28536] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  843.640792][T31961] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36
[  843.648676][T28536] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  843.656295][T31961] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36
[  843.663965][T28536] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  843.671804][T31961] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36
[  843.679657][T28536] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  843.687580][T31961] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36
[  843.695577][T28536] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  843.703337][T31961] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36
[  843.711033][T28536] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  843.718740][T31961] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36
[  843.726705][T28536] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  843.734384][T31961] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36
[  843.742199][T28536] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  843.749918][T31961] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36
[  843.761003][T28536] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  843.766278][T31961] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36
[  843.773337][T28536] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  843.781342][T31961] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36
[  843.789091][T28536] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  843.804512][T28536] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  843.812797][T28536] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  843.813665][T31961] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36
[  843.821318][T28536] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  843.828973][T31961] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36
[  843.836707][T28536] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  843.852190][T28536] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  843.859997][T31961] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36
[  843.860146][T31961] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36
[  843.867977][T28536] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  843.883669][T28536] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  843.891619][T28536] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  843.899663][T28536] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  843.902741][T31961] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36
[  843.907649][T28536] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  843.915808][T31961] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36
[  843.931168][T28536] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  843.939607][T28536] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  843.939686][T31961] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36
[  843.948527][T28536] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  843.955363][T31961] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36
[  843.963261][T28536] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  843.971218][T31961] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36
[  843.978849][T28536] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  843.986600][T31961] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36
[  843.994442][T28536] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  844.002531][T31961] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36
[  844.010212][T28536] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  844.018083][T31961] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36
[  844.025860][T28536] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  844.041432][T28536] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  844.049412][T28536] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  844.052352][T31961] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36
[  844.057392][T28536] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  844.073044][T28536] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  844.073875][T31961] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36
[  844.081210][T28536] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  844.095087][ T1334] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  844.096814][T28536] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  844.107754][ T1334] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  844.125349][T31961] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36
[  844.126501][T28536] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  844.133323][T31961] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36
[  844.148898][ T1334] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  844.151975][T28536] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  844.157729][ T1334] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  844.173566][T31961] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36
[  844.181544][T28536] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  844.181573][T31961] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36
[  844.198020][T28536] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  844.198053][ T1334] usb 2-1: config 0 descriptor??
[  844.210824][T31961] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36
[  844.217104][T28536] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  844.219374][T31961] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36
[  844.234623][T28536] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  844.234626][T31961] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36
[  844.234796][T28536] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  844.242536][T31961] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36
[  844.266159][T28536] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  844.266707][T31961] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36
[  844.281936][T31961] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36
[  844.284880][T28536] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  844.289908][T31961] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36
[  844.297912][T28536] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  844.307068][T31961] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36
[  844.313513][T28536] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  844.321535][T31961] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36
[  844.329119][T28536] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  844.336882][T31961] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36
[  844.344981][T28536] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  844.352773][T31961] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36
[  844.368300][T31961] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36
[  844.376296][T31961] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36
[  844.376296][T28536] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  844.376434][T28536] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  844.384251][T31961] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36
[  844.392214][T28536] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  844.408464][T31961] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36
[  844.415704][T28536] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  844.431210][T28536] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  844.431241][T31961] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36
[  844.439548][T28536] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  844.454841][T28536] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  844.462836][T31961] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36
[  844.462856][T28536] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  844.470828][T31961] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36
[  844.478657][T28536] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  844.494426][T28536] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  844.501483][T31961] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36
[  844.502404][T28536] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  844.510185][T31961] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36
[  844.519393][T28536] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  844.526574][T31961] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36
[  844.534387][T28536] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  844.541432][T31961] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36
[  844.549281][T28536] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  844.557068][T31961] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36
[  844.565245][T28536] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  844.573285][T31961] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36
[  844.580644][T28536] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  844.588560][T31961] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36
[  844.596434][T28536] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  844.604250][T31961] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36
[  844.611905][T28536] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  844.620114][T31961] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36
[  844.627627][T28536] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  844.635544][T31961] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36
[  844.643365][T28536] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  844.651128][T31961] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36
[  844.658964][T28536] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  844.666987][T31961] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36
[  844.674609][T28536] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  844.682515][T31961] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36
[  844.690235][T28536] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  844.698104][T31961] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36
[  844.713643][T31961] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36
[  844.721689][T28536] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  844.736868][T28536] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  844.745984][T28536] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  844.754241][T28536] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  844.762525][T28536] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  844.770511][T28536] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  844.770893][ T1334] hid (null): bogus close delimiter
[  844.778488][T28536] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  844.791667][T28536] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  844.799874][T28536] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  844.807960][T28536] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  844.816062][T28536] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  844.824192][T28536] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  844.832204][T28536] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  844.843131][T28536] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  844.851181][T28536] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  844.859283][T28536] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  844.867775][T28536] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  844.875927][T28536] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  844.884028][T28536] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  844.892293][T28536] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  844.908696][T28536] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  844.916823][T28536] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  844.924824][T28536] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  844.932792][T28536] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  844.943889][T28536] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  845.119287][T28536] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  845.148329][T28536] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  845.173902][T28536] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  845.226327][T28536] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  845.236836][  T611] Bluetooth: hci0: command 0x1009 tx timeout
[  845.244074][T28536] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  845.252101][T28536] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  845.260053][T28536] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  845.268176][T28536] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  845.276328][T28536] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  845.284304][T28536] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  845.292313][T28536] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  845.300256][T28536] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  845.308252][T28536] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  845.316261][T28536] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  845.324238][T28536] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  845.332339][T28536] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  845.340326][T28536] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  845.348334][T28536] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  845.356696][T28536] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  845.364695][T28536] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  845.373921][T28536] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  845.377882][ T1334] uclogic 0003:256C:006D.007B: failed retrieving Huion firmware version: -71
[  845.381936][T28536] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  845.390437][ T1334] uclogic 0003:256C:006D.007B: failed probing parameters: -71
[  845.398932][T28536] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  845.405733][ T1334] uclogic: probe of 0003:256C:006D.007B failed with error -71
[  845.413467][T28536] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  845.421999][ T1334] usb 2-1: USB disconnect, device number 75
[  845.428719][T28536] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  845.442318][T28536] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  845.450200][  T637] bridge0: port 1(bridge_slave_0) entered blocking state
[  845.450309][T28536] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  845.456975][  T637] bridge0: port 1(bridge_slave_0) entered disabled state
[  845.457425][  T637] device bridge_slave_0 entered promiscuous mode
[  845.474469][T28536] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  845.478703][  T637] bridge0: port 2(bridge_slave_1) entered blocking state
[  845.485938][T28536] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  845.492616][  T637] bridge0: port 2(bridge_slave_1) entered disabled state
[  845.500677][T28536] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  845.507641][  T637] device bridge_slave_1 entered promiscuous mode
[  845.515123][T28536] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  845.529113][T28536] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  845.537109][T28536] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  845.545188][T28536] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  845.553199][T28536] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  845.561461][T28536] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  845.569486][T28536] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  845.578221][T28536] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  845.586444][T28536] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  845.595037][T28536] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  845.603066][T28536] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  845.611051][T28536] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  845.619128][T28536] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  845.627233][T28536] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  845.635244][T28536] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  845.643199][T28536] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  845.651751][T28536] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  845.659874][T28536] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  845.667897][T28536] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  845.676144][T28536] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  845.684189][T28536] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  845.703709][T28536] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  845.717465][T28536] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  845.732821][  T642] loop2: detected capacity change from 0 to 256
[  845.734882][T28536] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  845.747008][T28536] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  845.755893][T28084] device bridge_slave_1 left promiscuous mode
[  845.756215][T28536] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  845.761912][T28084] bridge0: port 2(bridge_slave_1) entered disabled state
[  845.769871][T28536] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  845.784560][T28084] device bridge_slave_0 left promiscuous mode
[  845.784579][T28536] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  845.790490][T28084] bridge0: port 1(bridge_slave_0) entered disabled state
[  845.798479][T28536] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  845.809260][  T642] FAT-fs (loop2): Directory bread(block 64) failed
[  845.813173][T28536] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  845.819391][  T642] FAT-fs (loop2): Directory bread(block 65) failed
[  845.827473][T28536] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  845.833770][  T642] FAT-fs (loop2): Directory bread(block 66) failed
[  845.841469][T28536] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  845.848330][  T642] FAT-fs (loop2): Directory bread(block 67) failed
[  845.855591][T28536] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  845.861941][T28084] device veth1_macvtap left promiscuous mode
[  845.869972][T28536] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  845.875413][  T642] FAT-fs (loop2): Directory bread(block 68) failed
[  845.883421][T28536] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  845.889525][T28084] device veth0_vlan left promiscuous mode
[  845.897516][T28536] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  845.902887][  T642] FAT-fs (loop2): Directory bread(block 69) failed
[  845.910914][T28536] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  845.917186][  T642] FAT-fs (loop2): Directory bread(block 70) failed
[  845.925041][T28536] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  845.931449][  T642] FAT-fs (loop2): Directory bread(block 71) failed
[  845.945300][T28536] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  845.945446][T28536] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  845.945614][T28536] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  845.955480][  T642] FAT-fs (loop2): Directory bread(block 72) failed
[  845.964251][T28536] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  845.970054][  T642] FAT-fs (loop2): Directory bread(block 73) failed
[  845.975836][T28536] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  845.997444][T28536] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  846.008562][T28536] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  846.017233][T28536] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  846.025458][T28536] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  846.033603][T28536] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  846.147097][  T611] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  846.154702][  T611] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  846.169004][  T611] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  846.177230][  T611] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  846.185307][  T611] bridge0: port 1(bridge_slave_0) entered blocking state
[  846.192156][  T611] bridge0: port 1(bridge_slave_0) entered forwarding state
[  846.199780][  T611] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  846.208015][  T611] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  846.216123][  T611] bridge0: port 2(bridge_slave_1) entered blocking state
[  846.222990][  T611] bridge0: port 2(bridge_slave_1) entered forwarding state
[  846.234612][  T611] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  846.260109][  T611] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  846.268825][  T611] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  846.330108][  T611] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  846.338277][  T611] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  846.360881][  T611] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  846.369102][  T611] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  846.384263][  T637] device veth0_vlan entered promiscuous mode
[  846.392102][ T1334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  846.400936][ T1334] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  846.408836][ T1334] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  846.480360][  T637] device veth1_macvtap entered promiscuous mode
[  846.522507][ T1334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  846.613715][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  846.622198][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  846.643006][ T1334] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  846.651055][ T1334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  846.680886][  T657] bridge0: port 1(bridge_slave_0) entered blocking state
[  846.688209][  T657] bridge0: port 1(bridge_slave_0) entered disabled state
[  846.695848][  T657] device bridge_slave_0 entered promiscuous mode
[  846.705089][  T671] loop3: detected capacity change from 0 to 256
[  846.707799][  T657] bridge0: port 2(bridge_slave_1) entered blocking state
[  846.718054][  T657] bridge0: port 2(bridge_slave_1) entered disabled state
[  846.725298][  T657] device bridge_slave_1 entered promiscuous mode
[  846.728237][  T671] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011f41, chksum : 0xf6e84b2e, utbl_chksum : 0xe619d30d)
[  846.795451][  T657] bridge0: port 2(bridge_slave_1) entered blocking state
[  846.802329][  T657] bridge0: port 2(bridge_slave_1) entered forwarding state
[  846.809506][  T657] bridge0: port 1(bridge_slave_0) entered blocking state
[  846.816295][  T657] bridge0: port 1(bridge_slave_0) entered forwarding state
[  846.835268][  T675] SELinux: security_context_str_to_sid(sysadm_u) failed for (dev ?, type ?) errno=-22
[  846.845092][  T675] SELinux: security_context_str_to_sid(sysadm_u) failed for (dev bpf, type bpf) errno=-22
[  846.846249][  T781] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  846.863022][  T781] bridge0: port 1(bridge_slave_0) entered disabled state
[  846.870680][  T781] bridge0: port 2(bridge_slave_1) entered disabled state
[  846.889700][  T781] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  846.898022][  T781] bridge0: port 1(bridge_slave_0) entered blocking state
[  846.904883][  T781] bridge0: port 1(bridge_slave_0) entered forwarding state
[  846.912109][  T781] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  846.920199][  T781] bridge0: port 2(bridge_slave_1) entered blocking state
[  846.927046][  T781] bridge0: port 2(bridge_slave_1) entered forwarding state
[  846.945833][   T20] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  846.953684][   T20] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  846.967630][  T611] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  846.981492][  T657] device veth0_vlan entered promiscuous mode
[  846.987695][ T3251] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  846.995626][ T3251] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  847.002896][ T3251] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  847.018226][  T657] device veth1_macvtap entered promiscuous mode
[  847.024803][ T3251] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  847.035927][   T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  847.045704][ T3251] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  847.090287][  T685] netlink: 'syz-executor.4': attribute type 12 has an invalid length.
[  847.185784][T28084] device bridge_slave_1 left promiscuous mode
[  847.192989][T28084] bridge0: port 2(bridge_slave_1) entered disabled state
[  847.201576][T28084] device bridge_slave_0 left promiscuous mode
[  847.207581][T28084] bridge0: port 1(bridge_slave_0) entered disabled state
[  847.216846][T28084] device veth1_macvtap left promiscuous mode
[  847.227428][ T1334] usb 4-1: new high-speed USB device number 69 using dummy_hcd
[  847.235864][T28084] device veth0_vlan left promiscuous mode
[  847.245621][  T697] loop1: detected capacity change from 0 to 256
[  847.270537][  T701] SELinux: security_context_str_to_sid(sysadm_u) failed for (dev ?, type ?) errno=-22
[  847.280208][   T30] kauditd_printk_skb: 44 callbacks suppressed
[  847.280221][   T30] audit: type=1326 audit(2000000675.515:45026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=702 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10919c8f29 code=0x7ffc0000
[  847.281424][  T701] SELinux: security_context_str_to_sid(sysadm_u) failed for (dev bpf, type bpf) errno=-22
[  847.295201][   T30] audit: type=1326 audit(2000000675.524:45027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=702 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f10919c8f29 code=0x7ffc0000
[  847.322754][  T697] exFAT-fs (loop1): failed to load upcase table (idx : 0x00011f41, chksum : 0xf6e84b2e, utbl_chksum : 0xe619d30d)
[  847.370546][   T30] audit: type=1326 audit(2000000675.599:45028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=702 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10919c8f29 code=0x7ffc0000
[  847.395768][   T30] audit: type=1326 audit(2000000675.599:45029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=702 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10919c8f29 code=0x7ffc0000
[  847.431971][   T30] audit: type=1326 audit(2000000675.599:45030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=702 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f10919c8f29 code=0x7ffc0000
[  847.458097][   T30] audit: type=1326 audit(2000000675.599:45031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=702 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10919c8f29 code=0x7ffc0000
[  847.482175][   T30] audit: type=1326 audit(2000000675.599:45032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=702 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10919c8f29 code=0x7ffc0000
[  847.483961][ T1334] usb 4-1: Using ep0 maxpacket: 8
[  847.506006][   T30] audit: type=1326 audit(2000000675.599:45033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=702 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f10919c8f29 code=0x7ffc0000
[  847.540065][   T30] audit: type=1326 audit(2000000675.599:45034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=702 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10919c8f29 code=0x7ffc0000
[  847.570591][   T30] audit: type=1326 audit(2000000675.599:45035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=702 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10919c8f29 code=0x7ffc0000
[  847.690290][ T1334] usb 4-1: config 135 has an invalid interface number: 230 but max is 0
[  847.698514][ T1334] usb 4-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config
[  847.708726][ T1334] usb 4-1: config 135 has no interface number 0
[  847.715006][ T1334] usb 4-1: config 135 interface 230 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  847.736285][  T709] netlink: 'syz-executor.2': attribute type 12 has an invalid length.
[  848.039888][ T1334] usb 4-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a
[  848.049155][ T1334] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  848.057362][ T1334] usb 4-1: Product: syz
[  848.061388][ T1334] usb 4-1: Manufacturer: syz
[  848.065846][ T1334] usb 4-1: SerialNumber: syz
[  848.104915][  T734] SELinux: security_context_str_to_sid(sysadm_u) failed for (dev ?, type ?) errno=-22
[  848.105316][ T1334] usb 4-1: Found UVC 0.00 device syz (18ec:3288)
[  848.114547][  T734] SELinux: security_context_str_to_sid(sysadm_u) failed for (dev bpf, type bpf) errno=-22
[  848.120586][ T1334] usb 4-1: No valid video chain found.
[  848.324959][  T781] usb 4-1: USB disconnect, device number 69
[  848.424670][ T1334] usb 3-1: new high-speed USB device number 66 using dummy_hcd
[  848.573045][  T738] netlink: 164 bytes leftover after parsing attributes in process `syz-executor.4'.
[  848.583884][  T738] netlink: 160 bytes leftover after parsing attributes in process `syz-executor.4'.
[  848.586120][  T740] loop1: detected capacity change from 0 to 256
[  848.593150][  T738] tc_dump_action: action bad kind
[  848.630507][  T740] exFAT-fs (loop1): failed to load upcase table (idx : 0x00011f41, chksum : 0xf6e84b2e, utbl_chksum : 0xe619d30d)
[  848.702638][ T1334] usb 3-1: Using ep0 maxpacket: 16
[  848.831084][ T1334] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  848.842056][ T1334] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  848.851636][ T1334] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  848.935889][  T748] loop1: detected capacity change from 0 to 1024
[  848.970681][ T1334] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  848.994281][ T1334] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  849.003702][ T1334] usb 3-1: config 0 descriptor??
[  849.008502][  T750] netlink: 'syz-executor.3': attribute type 12 has an invalid length.
[  849.017549][  T748] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  849.066106][  T781] usb 5-1: new high-speed USB device number 68 using dummy_hcd
[  849.145204][  T760] loop3: detected capacity change from 0 to 4096
[  849.197223][  T760] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  849.493838][  T781] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  849.503459][    T6] usb 4-1: new high-speed USB device number 70 using dummy_hcd
[  849.510891][  T781] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  849.519808][  T781] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  849.528202][  T781] usb 5-1: config 0 descriptor??
[  849.537071][ T1334] microsoft 0003:045E:07DA.007C: unknown main item tag 0x0
[  849.544368][ T1334] microsoft 0003:045E:07DA.007C: No inputs registered, leaving
[  849.552150][ T1334] microsoft 0003:045E:07DA.007C: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0
[  849.563377][ T1334] microsoft 0003:045E:07DA.007C: no inputs found
[  849.569489][ T1334] microsoft 0003:045E:07DA.007C: could not initialize ff, continuing anyway
[  849.579604][  T781] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[  849.754267][ T1334] usb 3-1: USB disconnect, device number 66
[  849.760993][    T6] usb 4-1: Using ep0 maxpacket: 8
[  850.060467][    T6] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  850.070172][    T6] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0
[  850.079541][    T6] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  850.089064][    T6] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  850.098458][    T6] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  850.107987][    T6] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0
[  850.117417][    T6] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0
[  850.126883][    T6] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0
[  850.136298][    T6] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0
[  850.145764][    T6] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 0, changing to 7
[  850.156425][    T6] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0
[  850.370609][    T6] usb 4-1: New USB device found, idVendor=0471, idProduct=0326, bcdDevice=b2.08
[  850.379476][    T6] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  850.387301][    T6] usb 4-1: Product: syz
[  850.391245][    T6] usb 4-1: Manufacturer: syz
[  850.395715][    T6] usb 4-1: SerialNumber: syz
[  850.400707][    T6] usb 4-1: config 0 descriptor??
[  851.079970][    T6] usbhid 4-1:0.0: couldn't find an input interrupt endpoint
[  851.112925][  T781] usb 4-1: USB disconnect, device number 70
[  852.087787][  T802] loop1: detected capacity change from 0 to 1024
[  852.170488][  T802] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  852.349096][  T611] usb 5-1: USB disconnect, device number 68
[  852.452684][  T822] loop4: detected capacity change from 0 to 512
[  852.500224][  T822] EXT4-fs (loop4): revision level too high, forcing read-only mode
[  852.508617][  T822] EXT4-fs (loop4): orphan cleanup on readonly fs
[  853.297093][  T822] __quota_error: 19 callbacks suppressed
[  853.297129][  T822] Quota error (device loop4): do_check_range: Getting dqdh_prev_free 16777216 out of range 0-5
[  853.436375][  T822] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota
[  853.465807][  T822] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz-executor.4: bg 0: block 40: padding at end of block bitmap is not set
[  853.482271][  T822] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6153: Corrupt filesystem
[  853.491456][  T822] EXT4-fs (loop4): 1 truncate cleaned up
[  853.513751][  T822] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  853.588806][  T858] netlink: 'syz-executor.2': attribute type 12 has an invalid length.
[  853.612008][   T30] audit: type=1326 audit(2000000681.445:45055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=853 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa82c730f29 code=0x7ffc0000
[  853.643839][   T30] audit: type=1326 audit(2000000681.473:45056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=853 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa82c730f29 code=0x7ffc0000
[  853.667991][   T30] audit: type=1326 audit(2000000681.473:45057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=853 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=106 compat=0 ip=0x7fa82c730f29 code=0x7ffc0000
[  853.691854][   T30] audit: type=1326 audit(2000000681.473:45058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=853 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa82c730f29 code=0x7ffc0000
[  853.734482][   T30] audit: type=1326 audit(2000000681.473:45059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=853 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa82c730f29 code=0x7ffc0000
[  854.180789][  T889] loop2: detected capacity change from 0 to 512
[  854.200756][   T30] audit: type=1326 audit(2000000681.997:45060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=894 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10919c8f29 code=0x7ffc0000
[  854.224697][  T889] EXT4-fs (loop2): revision level too high, forcing read-only mode
[  854.235155][  T889] EXT4-fs (loop2): orphan cleanup on readonly fs
[  854.245950][   T30] audit: type=1326 audit(2000000682.016:45061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=894 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=106 compat=0 ip=0x7f10919c8f29 code=0x7ffc0000
[  854.270585][  T889] Quota error (device loop2): do_check_range: Getting dqdh_prev_free 16777216 out of range 0-5
[  854.286734][  T889] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz-executor.2: bg 0: block 40: padding at end of block bitmap is not set
[  854.304547][  T889] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6153: Corrupt filesystem
[  854.324489][  T889] EXT4-fs (loop2): 1 truncate cleaned up
[  854.335798][  T897] loop1: detected capacity change from 0 to 40427
[  854.342260][  T889] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  854.357975][   T20] usb 1-1: new high-speed USB device number 64 using dummy_hcd
[  854.367543][  T905] netlink: 'syz-executor.4': attribute type 12 has an invalid length.
[  854.381742][  T897] F2FS-fs (loop1): invalid crc value
[  854.388088][  T897] F2FS-fs (loop1): Found nat_bits in checkpoint
[  854.443093][  T897] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  854.574848][  T925] loop4: detected capacity change from 0 to 512
[  854.640200][  T929] attempt to access beyond end of device
[  854.640200][  T929] loop1: rw=10241, want=45104, limit=40427
[  854.658024][  T929] attempt to access beyond end of device
[  854.658024][  T929] loop1: rw=2049, want=45112, limit=40427
[  854.785789][  T925] EXT4-fs (loop4): 1 orphan inode deleted
[  854.791328][  T925] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,init_itable,stripe=0x0000000000000079,resgid=0x0000000000000000,sysvgroups,delalloc,usrquota,. Quota mode: writeback.
[  854.812187][   T20] usb 1-1: Using ep0 maxpacket: 8
[  854.812321][  T925] ext4 filesystem being mounted at /root/syzkaller-testdir3668458886/syzkaller.lBbWGk/28/file1 supports timestamps until 2038 (0x7fffffff)
[  854.881831][ T3251] usb 3-1: new high-speed USB device number 67 using dummy_hcd
[  854.885909][  T935] xt_CT: You must specify a L4 protocol and not use inversions on it
[  854.942700][  T942] netlink: 'syz-executor.3': attribute type 12 has an invalid length.
[  855.210763][   T20] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  855.220506][   T20] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0
[  855.231336][T30021] attempt to access beyond end of device
[  855.231336][T30021] loop1: rw=2049, want=45128, limit=40427
[  855.250870][   T20] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  855.267067][   T20] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  855.276610][   T20] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  855.287467][   T20] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0
[  855.297126][   T20] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0
[  855.306735][   T20] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0
[  855.316265][   T20] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0
[  855.325880][   T20] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 0, changing to 7
[  855.336529][   T20] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0
[  855.427102][ T3251] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  855.439306][ T3251] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  855.449143][ T3251] usb 3-1: New USB device found, idVendor=056a, idProduct=00d0, bcdDevice= 0.00
[  855.458136][ T3251] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  855.466848][ T3251] usb 3-1: config 0 descriptor??
[  855.542334][  T657] EXT4-fs warning (device loop4): __ext4_unlink:3289: inode #16: comm syz-executor.4: Deleting file 'file3' with no links
[  855.603309][  T657] EXT4-fs error (device loop4): ext4_ext_check_inode:501: inode #17: comm syz-executor.4: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0)
[  855.621761][  T657] EXT4-fs (loop4): Remounting filesystem read-only
[  855.703903][  T657] EXT4-fs error (device loop4): ext4_ext_check_inode:501: inode #17: comm syz-executor.4: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0)
[  855.737243][   T20] usb 1-1: New USB device found, idVendor=0471, idProduct=0326, bcdDevice=b2.08
[  855.746163][   T20] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  855.753949][   T20] usb 1-1: Product: syz
[  855.757933][   T20] usb 1-1: Manufacturer: syz
[  855.762342][   T20] usb 1-1: SerialNumber: syz
[  855.767612][   T20] usb 1-1: config 0 descriptor??
[  855.822979][   T20] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[  855.930842][  T965] bridge0: port 1(bridge_slave_0) entered blocking state
[  855.937937][  T965] bridge0: port 1(bridge_slave_0) entered disabled state
[  855.945548][  T965] device bridge_slave_0 entered promiscuous mode
[  855.954750][  T965] bridge0: port 2(bridge_slave_1) entered blocking state
[  855.961696][  T965] bridge0: port 2(bridge_slave_1) entered disabled state
[  855.968876][  T965] device bridge_slave_1 entered promiscuous mode
[  855.984466][ T3251] wacom 0003:056A:00D0.007D: Unknown device_type for 'HID 056a:00d0'. Assuming pen.
[  855.996525][ T3251] wacom 0003:056A:00D0.007D: hidraw0: USB HID v0.00 Device [HID 056a:00d0] on usb-dummy_hcd.2-1/input0
[  856.007965][ T3251] input: Wacom Bamboo 2FG Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:056A:00D0.007D/input/input127
[  856.042147][   T26] usb 1-1: USB disconnect, device number 64
[  856.045509][  T965] bridge0: port 2(bridge_slave_1) entered blocking state
[  856.054719][  T965] bridge0: port 2(bridge_slave_1) entered forwarding state
[  856.061857][  T965] bridge0: port 1(bridge_slave_0) entered blocking state
[  856.068619][  T965] bridge0: port 1(bridge_slave_0) entered forwarding state
[  856.091904][  T781] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  856.099395][  T781] bridge0: port 1(bridge_slave_0) entered disabled state
[  856.106717][  T781] bridge0: port 2(bridge_slave_1) entered disabled state
[  856.117643][ T3251] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  856.125695][ T3251] bridge0: port 1(bridge_slave_0) entered blocking state
[  856.132523][ T3251] bridge0: port 1(bridge_slave_0) entered forwarding state
[  856.143723][  T781] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  856.151741][  T781] bridge0: port 2(bridge_slave_1) entered blocking state
[  856.158571][  T781] bridge0: port 2(bridge_slave_1) entered forwarding state
[  856.172121][ T3251] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  856.180222][ T3251] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  856.196623][  T965] device veth0_vlan entered promiscuous mode
[  856.203822][   T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  856.209166][ T3251] usb 3-1: USB disconnect, device number 67
[  856.213437][   T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  856.225341][   T20] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  856.232618][   T20] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  856.247186][  T965] device veth1_macvtap entered promiscuous mode
[  856.254283][  T781] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  856.276125][ T1334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  856.289841][  T611] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  856.317140][  T972] device bridge1 entered promiscuous mode
[  856.338383][  T977] netlink: 'syz-executor.4': attribute type 12 has an invalid length.
[  856.445123][   T10] device bridge_slave_1 left promiscuous mode
[  856.451144][   T10] bridge0: port 2(bridge_slave_1) entered disabled state
[  856.458631][   T10] device bridge_slave_0 left promiscuous mode
[  856.464650][   T10] bridge0: port 1(bridge_slave_0) entered disabled state
[  856.472465][   T10] device veth1_macvtap left promiscuous mode
[  856.478397][   T10] device veth0_vlan left promiscuous mode
[  856.806970][ T1014] netlink: 'syz-executor.1': attribute type 12 has an invalid length.
[  856.934839][ T1033] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3
[  857.001755][ T1029] loop3: detected capacity change from 0 to 4096
[  857.062713][ T1029] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  857.085443][ T1037] bridge0: port 1(bridge_slave_0) entered blocking state
[  857.097275][ T1037] bridge0: port 1(bridge_slave_0) entered disabled state
[  857.104628][ T1037] device bridge_slave_0 entered promiscuous mode
[  857.114959][ T1047] netlink: 'syz-executor.1': attribute type 12 has an invalid length.
[  857.125172][ T1037] bridge0: port 2(bridge_slave_1) entered blocking state
[  857.138450][ T1037] bridge0: port 2(bridge_slave_1) entered disabled state
[  857.146137][ T1037] device bridge_slave_1 entered promiscuous mode
[  857.236962][ T1037] bridge0: port 2(bridge_slave_1) entered blocking state
[  857.243832][ T1037] bridge0: port 2(bridge_slave_1) entered forwarding state
[  857.250954][ T1037] bridge0: port 1(bridge_slave_0) entered blocking state
[  857.257719][ T1037] bridge0: port 1(bridge_slave_0) entered forwarding state
[  857.312751][  T301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  857.325053][  T301] bridge0: port 1(bridge_slave_0) entered disabled state
[  857.335857][  T301] bridge0: port 2(bridge_slave_1) entered disabled state
[  857.368845][   T20] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  857.377139][   T20] bridge0: port 1(bridge_slave_0) entered blocking state
[  857.384005][   T20] bridge0: port 1(bridge_slave_0) entered forwarding state
[  857.391391][  T781] usb 4-1: new high-speed USB device number 71 using dummy_hcd
[  857.401895][   T20] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  857.410603][   T20] bridge0: port 2(bridge_slave_1) entered blocking state
[  857.417452][   T20] bridge0: port 2(bridge_slave_1) entered forwarding state
[  857.425345][   T20] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  857.447040][   T20] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  857.455141][ T1036] loop2: detected capacity change from 0 to 131072
[  857.465577][  T611] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  857.473409][  T611] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  857.481076][  T611] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  857.488328][  T611] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  857.498011][ T1037] device veth0_vlan entered promiscuous mode
[  857.510887][ T1036] F2FS-fs (loop2): invalid crc value
[  857.524437][   T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  857.536813][ T1036] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (15359802341028777995, 275811881701387)
[  857.542753][ T1037] device veth1_macvtap entered promiscuous mode
[  857.565872][  T611] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  857.590386][ T3251] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  857.603105][ T1036] F2FS-fs (loop2): Mounted with checkpoint version = 753bd00b
[  857.683254][  T781] usb 4-1: Using ep0 maxpacket: 8
[  857.693799][ T1079] overlayfs: invalid redirect ((null))
[  858.025068][  T781] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  858.038460][  T781] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0
[  858.047958][  T781] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  858.057568][  T781] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  858.067056][  T781] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  858.076545][  T781] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0
[  858.085974][  T781] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0
[  858.095479][  T781] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0
[  858.105633][  T781] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0
[  858.130446][  T781] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 0, changing to 7
[  858.141478][  T781] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0
[  858.165144][   T10] device bridge_slave_1 left promiscuous mode
[  858.171249][   T10] bridge0: port 2(bridge_slave_1) entered disabled state
[  858.178625][   T10] device bridge_slave_0 left promiscuous mode
[  858.184618][   T10] bridge0: port 1(bridge_slave_0) entered disabled state
[  858.192752][   T10] device veth1_macvtap left promiscuous mode
[  858.198671][   T10] device veth0_vlan left promiscuous mode
[  858.313593][  T781] usb 4-1: New USB device found, idVendor=0471, idProduct=0326, bcdDevice=b2.08
[  858.322515][  T781] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  858.330586][  T781] usb 4-1: Product: syz
[  858.334557][  T781] usb 4-1: Manufacturer: syz
[  858.339028][  T781] usb 4-1: SerialNumber: syz
[  858.345077][  T781] usb 4-1: config 0 descriptor??
[  858.388695][  T781] usbhid 4-1:0.0: couldn't find an input interrupt endpoint
[  858.397424][ T1105] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3
[  858.608723][ T3251] usb 4-1: USB disconnect, device number 71
[  859.017904][ T1125] loop1: detected capacity change from 0 to 256
[  859.214195][ T1133] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'.
[  859.223548][ T1133] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'.
[  859.578186][ T1145] overlayfs: invalid redirect ((null))
[  859.596075][   T30] kauditd_printk_skb: 4 callbacks suppressed
[  859.596089][   T30] audit: type=1326 audit(2000000687.039:45065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1150 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2fb0e45f29 code=0x0
[  859.792886][ T1160] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  859.809037][ T1160] overlayfs: option "index=on" is useless in a non-upper mount, ignore
[  859.824842][ T1160] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  860.072147][ T1159] loop1: detected capacity change from 0 to 131072
[  860.129017][ T1159] F2FS-fs (loop1): invalid crc value
[  860.153615][ T1159] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (15359802341028777995, 275811881701387)
[  860.164904][   T30] audit: type=1400 audit(2000000687.581:45066): avc:  denied  { mount } for  pid=1166 comm="syz-executor.0" name="/" dev="bdev" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bdev_t tclass=filesystem permissive=1
[  860.198961][ T1159] F2FS-fs (loop1): Mounted with checkpoint version = 753bd00b
[  860.260585][ T1173] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'.
[  860.269699][ T1173] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'.
[  860.436149][ T1181] overlayfs: invalid redirect ((null))
[  860.472972][  T781] usb 1-1: new high-speed USB device number 65 using dummy_hcd
[  860.719867][ T1187] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.4'.
[  860.731608][ T1187] loop4: detected capacity change from 0 to 512
[  860.777343][ T1187] EXT4-fs (loop4): Test dummy encryption mode enabled
[  860.788489][ T1187] EXT4-fs error (device loop4): __ext4_iget:4892: inode #11: block 1: comm syz-executor.4: invalid block
[  860.799849][ T1187] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz-executor.4: couldn't read orphan inode 11 (err -117)
[  860.812122][ T1187] EXT4-fs (loop4): mounted filesystem without journal. Opts: noauto_da_alloc,user_xattr,max_dir_size_kb=0x0000000000000009,inode_readahead_blks=0x0000000000010000,jqfmt=vfsv0,delalloc,inode_readahead_blks=0x0000000000400000,noauto_da_alloc,test_dummy_encryption,,errors=continue. Quota mode: none.
[  861.307031][  T781] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  861.317155][ T1204] loop2: detected capacity change from 0 to 512
[  861.323272][  T781] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  861.371948][ T1204] EXT4-fs (loop2): Mount option "journal_ioprio=0x0000000000000002" incompatible with ext2
[  861.413827][  T781] usb 1-1: New USB device found, idVendor=44b7, idProduct=0000, bcdDevice= 0.00
[  861.422815][  T781] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  861.430898][  T781] usb 1-1: SerialNumber: syz
[  861.500361][   T10] device vlan2 left promiscuous mode
[  861.505632][   T10] bridge0: port 3(vlan2) entered disabled state
[  861.512318][   T10] device bridge_slave_1 left promiscuous mode
[  861.518449][   T10] bridge0: port 2(bridge_slave_1) entered disabled state
[  861.525901][   T10] device bridge_slave_0 left promiscuous mode
[  861.531960][   T10] bridge0: port 1(bridge_slave_0) entered disabled state
[  861.540024][   T10] device veth1_macvtap left promiscuous mode
[  861.546025][   T10] device veth0_vlan left promiscuous mode
[  861.581880][ T1202] loop4: detected capacity change from 0 to 131072
[  861.618496][ T1202] F2FS-fs (loop4): invalid crc value
[  861.624978][ T1202] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (15359802341028777995, 275811881701387)
[  861.657734][ T1202] F2FS-fs (loop4): Mounted with checkpoint version = 753bd00b
[  861.745228][T19768] usb 3-1: new high-speed USB device number 68 using dummy_hcd
[  861.769720][  T781] usb 1-1: 0:12 : does not exist
[  861.776999][  T781] usb 1-1: USB disconnect, device number 65
[  862.206179][ T1223] overlayfs: invalid redirect ((null))
[  862.218537][ T1221] loop3: detected capacity change from 0 to 40427
[  862.249765][ T1221] F2FS-fs (loop3): invalid crc value
[  862.255903][ T1221] F2FS-fs (loop3): Found nat_bits in checkpoint
[  862.276401][   T30] audit: type=1326 audit(2000000689.546:45067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1225 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fb0e45f29 code=0x7ffc0000
[  862.300315][   T30] audit: type=1326 audit(2000000689.555:45068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1225 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fb0e45f29 code=0x7ffc0000
[  862.324309][ T1221] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  862.324471][   T30] audit: type=1326 audit(2000000689.555:45069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1225 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2fb0e45f29 code=0x7ffc0000
[  862.355455][T19768] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11
[  862.355486][T19768] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024
[  862.355511][T19768] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  862.400791][T19768] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  862.409695][   T30] audit: type=1326 audit(2000000689.602:45070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1225 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fb0e45f29 code=0x7ffc0000
[  862.409867][T19768] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  862.441919][   T30] audit: type=1326 audit(2000000689.602:45071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1225 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fb0e45f29 code=0x7ffc0000
[  862.466097][   T30] audit: type=1326 audit(2000000689.611:45072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1225 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2fb0e45f29 code=0x7ffc0000
[  862.493108][   T30] audit: type=1326 audit(2000000689.751:45073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1225 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fb0e45f29 code=0x7ffc0000
[  862.517549][T19768] usb 3-1: config 0 descriptor??
[  862.517738][   T30] audit: type=1326 audit(2000000689.770:45074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1225 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2fb0e436a7 code=0x7ffc0000
[  862.557784][ T1204] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  862.733205][ T1234] attempt to access beyond end of device
[  862.733205][ T1234] loop3: rw=10241, want=45104, limit=40427
[  862.769200][ T1234] attempt to access beyond end of device
[  862.769200][ T1234] loop3: rw=2049, want=45112, limit=40427
[  862.866555][ T1237] sch_tbf: burst 0 is lower than device lo mtu (11337746) !
[  862.946323][  T637] attempt to access beyond end of device
[  862.946323][  T637] loop3: rw=2049, want=45128, limit=40427
[  863.307811][ T1204] loop2: detected capacity change from 0 to 128
[  863.349072][ T1246] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  863.357652][ T1246] overlayfs: option "index=on" is useless in a non-upper mount, ignore
[  863.366067][ T1246] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  863.403289][T19768] plantronics 0003:047F:FFFF.007E: unknown main item tag 0xd
[  863.411449][T19768] plantronics 0003:047F:FFFF.007E: No inputs registered, leaving
[  863.419943][T19768] plantronics 0003:047F:FFFF.007E: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0
[  863.477105][  T781] usb 5-1: new high-speed USB device number 69 using dummy_hcd
[  863.587371][ T1254] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'.
[  863.691737][  T611] usb 3-1: USB disconnect, device number 68
[  863.862081][  T781] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  863.874890][  T781] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  863.883742][  T781] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  863.892052][  T781] usb 5-1: config 0 descriptor??
[  863.937145][  T781] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[  864.153383][  T611] usb 5-1: USB disconnect, device number 69
[  865.019256][ T1287] loop4: detected capacity change from 0 to 512
[  865.060144][ T1287] EXT4-fs (loop4): Mount option "journal_ioprio=0x0000000000000002" incompatible with ext2
[  865.166581][ T1289] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  865.175248][ T1289] overlayfs: option "index=on" is useless in a non-upper mount, ignore
[  865.191018][ T1289] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  865.497103][T19768] usb 5-1: new high-speed USB device number 70 using dummy_hcd
[  865.893214][T19768] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11
[  865.904289][   T20] usb 3-1: new high-speed USB device number 69 using dummy_hcd
[  865.911689][T19768] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024
[  865.922972][T19768] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  865.936223][T19768] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  865.945099][T19768] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  865.953629][T19768] usb 5-1: config 0 descriptor??
[  865.978706][ T1287] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  866.016272][ T1320] loop1: detected capacity change from 0 to 40427
[  866.078491][ T1320] F2FS-fs (loop1): Found nat_bits in checkpoint
[  866.102041][ T1320] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  866.299544][   T20] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  866.313909][   T20] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  866.322834][   T20] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  866.331365][   T20] usb 3-1: config 0 descriptor??
[  866.371682][ T1338] loop3: detected capacity change from 0 to 512
[  866.407561][ T1338] EXT4-fs (loop3): Ignoring removed mblk_io_submit option
[  866.407590][   T20] usbhid 3-1:0.0: couldn't find an input interrupt endpoint
[  866.421847][ T1338] EXT4-fs (loop3): bad geometry: block count 2164261120 exceeds size of device (256 blocks)
[  866.490442][ T1287] loop4: detected capacity change from 0 to 128
[  866.651728][T19768] plantronics 0003:047F:FFFF.007F: unknown main item tag 0xd
[  866.660838][T19768] plantronics 0003:047F:FFFF.007F: No inputs registered, leaving
[  866.669200][ T1338] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'.
[  866.669449][T19768] plantronics 0003:047F:FFFF.007F: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0
[  866.707590][   T26] usb 3-1: USB disconnect, device number 69
[  866.725925][ T1349] loop3: detected capacity change from 0 to 256
[  866.742180][   T30] kauditd_printk_skb: 37 callbacks suppressed
[  866.742193][   T30] audit: type=1400 audit(2000000693.722:45112): avc:  denied  { ioctl } for  pid=1348 comm="syz-executor.3" path="socket:[175643]" dev="sockfs" ino=175643 ioctlcmd=0x8919 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  866.891960][ T1353] binder: 1352:1353 ioctl c0306201 20000380 returned -14
[  866.973935][   T20] usb 5-1: USB disconnect, device number 70
[  867.027048][ T1334] usb 1-1: new high-speed USB device number 66 using dummy_hcd
[  867.388176][   T30] audit: type=1326 audit(2000000694.326:45113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1367 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85aa2a9f29 code=0x7ffc0000
[  867.412150][   T30] audit: type=1326 audit(2000000694.326:45114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1367 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85aa2a9f29 code=0x7ffc0000
[  867.436458][   T30] audit: type=1326 audit(2000000694.326:45115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1367 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f85aa2a9f29 code=0x7ffc0000
[  867.460570][   T30] audit: type=1326 audit(2000000694.326:45116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1367 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85aa2a9f29 code=0x7ffc0000
[  867.484724][ T1334] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  867.496073][   T30] audit: type=1326 audit(2000000694.326:45117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1367 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85aa2a9f29 code=0x7ffc0000
[  867.520060][ T1334] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  867.529033][   T30] audit: type=1326 audit(2000000694.326:45118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1367 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f85aa2a9f29 code=0x7ffc0000
[  867.553155][   T30] audit: type=1326 audit(2000000694.326:45119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1367 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85aa2a9f29 code=0x7ffc0000
[  867.577415][   T30] audit: type=1326 audit(2000000694.326:45120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1367 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85aa2a9f29 code=0x7ffc0000
[  867.602574][   T30] audit: type=1326 audit(2000000694.326:45121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1367 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=292 compat=0 ip=0x7f85aa2a9f29 code=0x7ffc0000
[  867.635778][ T1334] usb 1-1: New USB device found, idVendor=44b7, idProduct=0000, bcdDevice= 0.00
[  867.644807][ T1334] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  867.653040][ T1334] usb 1-1: SerialNumber: syz
[  867.770654][ T1384] fuse: Unknown parameter 'grou00000000000000000000'
[  868.122173][ T1383] loop3: detected capacity change from 0 to 40427
[  868.140667][ T1334] usb 1-1: 0:12 : does not exist
[  868.145626][ T1383] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[  868.156373][ T1383] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  868.167411][ T1334] usb 1-1: USB disconnect, device number 66
[  868.175851][ T1383] F2FS-fs (loop3): invalid crc value
[  868.182203][T24063] tipc: Disabling bearer <udp:s>
[  868.187746][T24063] tipc: Left network mode
[  868.200642][ T1383] F2FS-fs (loop3): Found nat_bits in checkpoint
[  868.274773][ T1383] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  868.281722][ T1383] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  868.336116][ T1403] bridge0: port 1(bridge_slave_0) entered blocking state
[  868.343725][ T1403] bridge0: port 1(bridge_slave_0) entered disabled state
[  868.343848][ T1383] overlayfs: invalid redirect (./file1)
[  868.350988][ T1403] device bridge_slave_0 entered promiscuous mode
[  868.366340][ T1403] bridge0: port 2(bridge_slave_1) entered blocking state
[  868.379765][ T1403] bridge0: port 2(bridge_slave_1) entered disabled state
[  868.387177][ T1403] device bridge_slave_1 entered promiscuous mode
[  868.399277][   T10] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix.
[  868.408158][   T10] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix.
[  868.448498][ T1413] loop1: detected capacity change from 0 to 8192
[  868.480814][ T1403] bridge0: port 2(bridge_slave_1) entered blocking state
[  868.487771][ T1403] bridge0: port 2(bridge_slave_1) entered forwarding state
[  868.494827][ T1403] bridge0: port 1(bridge_slave_0) entered blocking state
[  868.501629][ T1403] bridge0: port 1(bridge_slave_0) entered forwarding state
[  868.509135][ T1413]  loop1: p2 p3 p4
[  868.519335][ T1413] loop1: p2 start 4293394690 is beyond EOD, truncated
[  868.528932][ T1334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  868.536137][ T1413] loop1: p3 size 14090496 extends beyond EOD, truncated
[  868.544043][ T1334] bridge0: port 1(bridge_slave_0) entered disabled state
[  868.551768][ T1413] loop1: p4 size 50331904 extends beyond EOD, truncated
[  868.559211][ T1334] bridge0: port 2(bridge_slave_1) entered disabled state
[  868.576915][T19768] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  868.584912][T19768] bridge0: port 1(bridge_slave_0) entered blocking state
[  868.591749][T19768] bridge0: port 1(bridge_slave_0) entered forwarding state
[  868.599487][T19768] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  868.607499][T19768] bridge0: port 2(bridge_slave_1) entered blocking state
[  868.614366][T19768] bridge0: port 2(bridge_slave_1) entered forwarding state
[  868.644890][T19768] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  868.680920][ T1334] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  868.700885][ T1334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  868.721804][ T1403] device veth0_vlan entered promiscuous mode
[  868.738271][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  868.749156][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  868.759796][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  868.777758][ T1403] device veth1_macvtap entered promiscuous mode
[  868.785251][ T1334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  868.799178][ T1334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  868.817990][ T1334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  868.834062][T24063] device bridge_slave_1 left promiscuous mode
[  868.842451][T24063] bridge0: port 2(bridge_slave_1) entered disabled state
[  868.854613][T24063] device bridge_slave_0 left promiscuous mode
[  868.862141][T24063] bridge0: port 1(bridge_slave_0) entered disabled state
[  868.870721][T24063] device veth1_macvtap left promiscuous mode
[  868.877097][T24063] device veth0_vlan left promiscuous mode
[  869.038871][ T1441] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'.
[  869.634838][   T26] usb 2-1: new high-speed USB device number 76 using dummy_hcd
[  870.073208][   T26] usb 2-1: Using ep0 maxpacket: 16
[  870.087622][  T301] usb 4-1: new high-speed USB device number 72 using dummy_hcd
[  870.287912][ T1501] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'.
[  870.359893][ T1504] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'.
[  870.404616][   T26] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=d8.08
[  870.413503][   T26] usb 2-1: New USB device strings: Mfr=40, Product=98, SerialNumber=3
[  870.421474][   T26] usb 2-1: Product: syz
[  870.425453][   T26] usb 2-1: Manufacturer: syz
[  870.429887][   T26] usb 2-1: SerialNumber: syz
[  870.434849][   T26] usb 2-1: config 0 descriptor??
[  870.479426][  T301] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  870.489356][  T301] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2
[  870.490733][   T26] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected
[  870.498043][  T301] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  870.505686][   T26] usb 2-1: Detected FT-X
[  870.682582][  T301] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  870.691417][  T301] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  870.699745][  T301] usb 4-1: Product: syz
[  870.703702][  T301] usb 4-1: Manufacturer: syz
[  870.708142][  T301] usb 4-1: SerialNumber: syz
[  870.714623][   T26] ftdi_sio ttyUSB0: Unable to read latency timer: -32
[  870.747218][  T301] cdc_ncm 4-1:1.0: CDC Union missing and no IAD found
[  870.753808][  T301] cdc_ncm 4-1:1.0: bind() failure
[  871.017367][  T611] usb 4-1: USB disconnect, device number 72
[  871.270608][   T26] ftdi_sio 2-1:0.0: GPIO initialisation failed: -71
[  871.278259][   T26] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  871.287147][   T26] usb 2-1: USB disconnect, device number 76
[  871.294796][   T26] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  871.304049][   T26] ftdi_sio 2-1:0.0: device disconnected
[  872.861886][ T1577] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'.
[  875.008973][ T1617] loop3: detected capacity change from 0 to 1024
[  875.056104][ T1617] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled
[  875.098776][ T1617] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,journal_ioprio=0x0000000000000003,resuid=0x0000000000000000,i_version,data=ordered,jqfmt=vfsold,barrier=0x0000000000000648,barrier=0x0000000000000007,,errors=continue. Quota mode: writeback.
[  875.130027][ T1617] EXT4-fs error (device loop3): ext4_read_inline_dir:1610: inode #12: block 16: comm syz-executor.3: path /root/syzkaller-testdir3008099862/syzkaller.q2mXY7/77/file0/file0: bad entry in directory: rec_len is smaller than minimal - offset=40, inode=301989902, rec_len=0, size=916 fake=0
[  875.539533][ T1639] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'.
[  876.429194][ T1671] loop2: detected capacity change from 0 to 256
[  876.455815][   T30] kauditd_printk_skb: 50 callbacks suppressed
[  876.455829][   T30] audit: type=1107 audit(2000000702.817:45172): pid=1675 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg=''
[  876.514400][ T1682] loop1: detected capacity change from 0 to 256
[  876.552676][ T1672] loop3: detected capacity change from 0 to 40427
[  876.564484][ T1682] FAT-fs (loop1): Directory bread(block 64) failed
[  876.570816][ T1682] FAT-fs (loop1): Directory bread(block 65) failed
[  876.577239][ T1682] FAT-fs (loop1): Directory bread(block 66) failed
[  876.583490][ T1682] FAT-fs (loop1): Directory bread(block 67) failed
[  876.589958][ T1682] FAT-fs (loop1): Directory bread(block 68) failed
[  876.596412][ T1682] FAT-fs (loop1): Directory bread(block 69) failed
[  876.603959][ T1672] F2FS-fs (loop3): invalid crc value
[  876.605007][ T1682] FAT-fs (loop1): Directory bread(block 70) failed
[  876.609115][ T1672] F2FS-fs (loop3): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root
[  876.617266][ T1682] FAT-fs (loop1): Directory bread(block 71) failed
[  876.629890][ T1682] FAT-fs (loop1): Directory bread(block 72) failed
[  876.631825][ T1672] F2FS-fs (loop3): Found nat_bits in checkpoint
[  876.636235][ T1682] FAT-fs (loop1): Directory bread(block 73) failed
[  876.671179][ T1672] F2FS-fs (loop3): recover fsync data on readonly fs
[  876.677982][ T1672] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  876.703649][ T1684] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'.
[  876.853586][   T30] audit: type=1107 audit(2000000703.191:45173): pid=1699 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg=''
[  876.976565][ T1710] loop1: detected capacity change from 0 to 8192
[  877.012665][ T1710] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  877.044997][   T30] audit: type=1107 audit(2000000703.368:45174): pid=1726 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg=''
[  877.061219][   T30] audit: type=1326 audit(2000000703.378:45175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1728 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fba2e33ef29 code=0x0
[  877.127012][ T1736] bridge0: port 2(bridge_slave_1) entered listening state
[  877.304460][ T1738] loop0: detected capacity change from 0 to 40427
[  877.368102][ T1738] F2FS-fs (loop0): Found nat_bits in checkpoint
[  877.406329][ T1738] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  877.430891][ T1738] attempt to access beyond end of device
[  877.430891][ T1738] loop0: rw=2049, want=53312, limit=40427
[  878.294460][ T1783] Â: renamed from pim6reg1
[  878.332246][ T1777] loop3: detected capacity change from 0 to 40427
[  878.379443][ T1785] bpf_get_probe_write_proto: 14 callbacks suppressed
[  878.379457][ T1785] syz-executor.2[1785] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  878.386365][ T1785] syz-executor.2[1785] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  878.399984][ T1777] F2FS-fs (loop3): invalid crc value
[  878.430483][ T1777] F2FS-fs (loop3): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root
[  878.453061][ T1777] F2FS-fs (loop3): Found nat_bits in checkpoint
[  878.521278][ T1777] F2FS-fs (loop3): recover fsync data on readonly fs
[  878.528332][ T1777] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  878.559928][ T1785] loop2: detected capacity change from 0 to 32768
[  878.615683][ T1785]  loop2: p1 p3 < p5 p6 >
[  879.748158][ T1334] usb 3-1: new high-speed USB device number 70 using dummy_hcd
[  879.768736][ T1828] syz-executor.1[1828] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  879.768804][ T1828] syz-executor.1[1828] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  879.843627][ T1828] loop1: detected capacity change from 0 to 32768
[  879.887767][ T1828]  loop1: p1 p3 < p5 p6 >
[  880.026104][ T1334] usb 3-1: Using ep0 maxpacket: 16
[  880.123554][ T1855] loop0: detected capacity change from 0 to 512
[  880.175814][ T1334] usb 3-1: config 183 has too many interfaces: 145, using maximum allowed: 32
[  880.183931][ T1855] EXT4-fs (loop0): 1 orphan inode deleted
[  880.184894][ T1334] usb 3-1: config 183 has an invalid interface association descriptor of length 5, skipping
[  880.190810][ T1855] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,init_itable,stripe=0x0000000000000079,resgid=0x0000000000000000,sysvgroups,delalloc,usrquota,. Quota mode: writeback.
[  880.218499][ T1334] usb 3-1: config 183 has an invalid descriptor of length 0, skipping remainder of the config
[  880.221138][ T1855] ext4 filesystem being mounted at /root/syzkaller-testdir4035319314/syzkaller.3sUMCg/79/file1 supports timestamps until 2038 (0x7fffffff)
[  880.241628][ T1334] usb 3-1: config 183 has 0 interfaces, different from the descriptor's value: 145
[  880.486095][ T1334] usb 3-1: New USB device found, idVendor=0582, idProduct=0005, bcdDevice= f.88
[  880.495175][ T1334] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  880.503242][ T1334] usb 3-1: Product: syz
[  880.532682][ T1334] usb 3-1: Manufacturer: syz
[  880.537283][ T1334] usb 3-1: SerialNumber: syz
[  880.861176][ T1334] usb 3-1: USB disconnect, device number 70
[  880.945493][  T611] usb 2-1: new high-speed USB device number 77 using dummy_hcd
[  881.056683][ T1037] EXT4-fs warning (device loop0): __ext4_unlink:3289: inode #16: comm syz-executor.0: Deleting file 'file3' with no links
[  881.069527][ T1037] EXT4-fs error (device loop0): ext4_ext_check_inode:501: inode #17: comm syz-executor.0: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0)
[  881.087038][ T1037] EXT4-fs (loop0): Remounting filesystem read-only
[  881.093511][ T1037] EXT4-fs error (device loop0): ext4_ext_check_inode:501: inode #17: comm syz-executor.0: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0)
[  881.302891][ T1915] bridge0: port 1(bridge_slave_0) entered blocking state
[  881.310356][ T1915] bridge0: port 1(bridge_slave_0) entered disabled state
[  881.317596][ T1915] device bridge_slave_0 entered promiscuous mode
[  881.324655][ T1915] bridge0: port 2(bridge_slave_1) entered blocking state
[  881.331513][ T1915] bridge0: port 2(bridge_slave_1) entered disabled state
[  881.338838][ T1915] device bridge_slave_1 entered promiscuous mode
[  881.385212][ T1915] bridge0: port 2(bridge_slave_1) entered blocking state
[  881.392047][ T1915] bridge0: port 2(bridge_slave_1) entered forwarding state
[  881.399177][ T1915] bridge0: port 1(bridge_slave_0) entered blocking state
[  881.406025][ T1915] bridge0: port 1(bridge_slave_0) entered forwarding state
[  881.413567][  T611] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  881.423695][  T611] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2
[  881.432579][  T611] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  881.629002][    T6] bridge0: port 1(bridge_slave_0) entered disabled state
[  881.637240][    T6] bridge0: port 2(bridge_slave_1) entered disabled state
[  881.653608][ T1334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  881.661059][ T1334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  881.678127][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  881.686318][  T611] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  881.695530][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  881.703354][  T611] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  881.707105][  T781] kernel read not supported for file inotify (pid: 781 comm: kworker/0:6)
[  881.711818][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[  881.726607][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[  881.733810][  T611] usb 2-1: Product: syz
[  881.737861][  T611] usb 2-1: Manufacturer: syz
[  881.742267][  T611] usb 2-1: SerialNumber: syz
[  881.747580][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  881.756132][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  881.764288][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[  881.771136][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[  881.778418][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  881.786354][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  881.794389][  T611] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found
[  881.801041][  T611] cdc_ncm 2-1:1.0: bind() failure
[  881.806158][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  881.815084][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  881.832347][  T611] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  881.840715][  T611] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  881.850109][ T1915] device veth0_vlan entered promiscuous mode
[  881.856625][  T611] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  881.864282][  T611] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  881.872695][   T10] device bridge_slave_1 left promiscuous mode
[  881.880658][   T10] bridge0: port 2(bridge_slave_1) entered disabled state
[  881.888333][   T10] device bridge_slave_0 left promiscuous mode
[  881.894301][   T10] bridge0: port 1(bridge_slave_0) entered disabled state
[  881.902469][   T10] device veth1_macvtap left promiscuous mode
[  881.908345][   T10] device veth0_vlan left promiscuous mode
[  882.007586][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  882.010990][  T781] usb 2-1: USB disconnect, device number 77
[  882.020619][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  882.033762][ T1915] device veth1_macvtap entered promiscuous mode
[  882.040739][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  882.049496][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  882.057569][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  882.075679][ T3251] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  882.083857][ T3251] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  882.092107][ T3251] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  882.100282][ T3251] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  882.280867][   T30] audit: type=1400 audit(2000000708.261:45176): avc:  denied  { create } for  pid=1964 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=tcp_socket permissive=1
[  882.375077][ T1971] loop3: detected capacity change from 0 to 2048
[  882.415055][ T1971] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  882.556112][ T1980] bridge0: port 1(bridge_slave_0) entered blocking state
[  882.563049][ T1980] bridge0: port 1(bridge_slave_0) entered disabled state
[  882.570380][ T1980] device bridge_slave_0 entered promiscuous mode
[  882.583060][ T1980] bridge0: port 2(bridge_slave_1) entered blocking state
[  882.589965][ T1980] bridge0: port 2(bridge_slave_1) entered disabled state
[  882.597390][ T1980] device bridge_slave_1 entered promiscuous mode
[  882.785659][ T1985] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'.
[  882.901571][ T2001] loop3: detected capacity change from 0 to 512
[  882.911572][    T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  882.919170][    T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  882.929535][ T3251] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  882.937712][ T3251] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  882.939964][ T2001] EXT4-fs (loop3): 1 truncate cleaned up
[  882.945698][ T3251] bridge0: port 1(bridge_slave_0) entered blocking state
[  882.952008][ T2001] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  882.957829][ T3251] bridge0: port 1(bridge_slave_0) entered forwarding state
[  882.958131][ T3251] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  882.992465][  T781] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  883.000661][  T781] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  883.008849][  T781] bridge0: port 2(bridge_slave_1) entered blocking state
[  883.015681][  T781] bridge0: port 2(bridge_slave_1) entered forwarding state
[  883.028698][    T6] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  883.041153][   T54] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  883.062017][    T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  883.078153][  T781] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  883.088525][  T781] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  883.097453][  T781] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  883.104855][ T1980] device veth0_vlan entered promiscuous mode
[  883.128729][  T781] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  883.138883][ T1980] device veth1_macvtap entered promiscuous mode
[  883.150023][  T781] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  883.162789][    T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  883.218021][ T2019] loop2: detected capacity change from 0 to 256
[  883.225493][   T10] device bridge_slave_1 left promiscuous mode
[  883.231514][   T10] bridge0: port 2(bridge_slave_1) entered disabled state
[  883.239221][   T10] device bridge_slave_0 left promiscuous mode
[  883.245460][   T10] bridge0: port 1(bridge_slave_0) entered disabled state
[  883.253565][   T10] device veth1_macvtap left promiscuous mode
[  883.259479][   T10] device veth0_vlan left promiscuous mode
[  883.399798][ T2019] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  883.412874][ T2019] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe622a5da, utbl_chksum : 0xe619d30d)
[  883.570101][ T2030] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'.
[  883.804291][ T2038] loop2: detected capacity change from 0 to 128
[  884.104700][ T2046] loop1: detected capacity change from 0 to 256
[  884.121973][ T2044] bridge0: port 1(bridge_slave_0) entered blocking state
[  884.128807][ T2044] bridge0: port 1(bridge_slave_0) entered disabled state
[  884.136068][ T2044] device bridge_slave_0 entered promiscuous mode
[  884.143169][ T2044] bridge0: port 2(bridge_slave_1) entered blocking state
[  884.144649][ T2046] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  884.150055][ T2044] bridge0: port 2(bridge_slave_1) entered disabled state
[  884.176680][ T2046] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe622a5da, utbl_chksum : 0xe619d30d)
[  884.198916][ T2044] device bridge_slave_1 entered promiscuous mode
[  884.450398][ T2064] loop1: detected capacity change from 0 to 2048
[  884.500200][ T2044] bridge0: port 2(bridge_slave_1) entered blocking state
[  884.507069][ T2044] bridge0: port 2(bridge_slave_1) entered forwarding state
[  884.514163][ T2044] bridge0: port 1(bridge_slave_0) entered blocking state
[  884.517168][ T2064] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  884.520954][ T2044] bridge0: port 1(bridge_slave_0) entered forwarding state
[  884.542659][ T2058] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'.
[  884.598066][ T2044] device veth0_vlan entered promiscuous mode
[  884.610655][ T2044] device veth1_macvtap entered promiscuous mode
[  884.637675][    T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  884.654141][    T6] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  884.664903][    T6] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  884.678317][    T6] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  884.768781][ T2081] loop0: detected capacity change from 0 to 256
[  884.906798][    T6] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  884.914867][    T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  884.923100][    T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  884.930883][    T6] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  884.938131][    T6] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  884.945390][    T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  884.966689][ T1334] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  884.977510][ T1334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  884.988731][ T3251] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  884.996876][ T3251] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  885.063517][ T2091] loop2: detected capacity change from 0 to 16
[  885.075643][ T2091] erofs: (device loop2): mounted with root inode @ nid 36.
[  885.084032][ T2091] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  885.093692][ T2091] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -35 in[64, 4032] out[1851]
[  885.105562][ T2091] erofs: (device loop2): z_erofs_readpage: failed to read, err [-117]
[  885.161968][   T10] device bridge_slave_1 left promiscuous mode
[  885.282008][   T10] bridge0: port 2(bridge_slave_1) entered disabled state
[  885.300604][   T10] device bridge_slave_0 left promiscuous mode
[  885.313184][   T10] bridge0: port 1(bridge_slave_0) entered disabled state
[  885.353284][   T10] device veth1_macvtap left promiscuous mode
[  885.367328][   T10] device veth0_vlan left promiscuous mode
[  885.595692][ T2136] netlink: 'syz-executor.3': attribute type 4 has an invalid length.
[  885.705806][ T2136] netlink: 'syz-executor.3': attribute type 4 has an invalid length.
[  886.103292][ T2159] loop0: detected capacity change from 0 to 40427
[  886.163379][ T2159] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[  886.170923][ T2159] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  886.173202][   T20] usb 4-1: new high-speed USB device number 73 using dummy_hcd
[  886.182974][ T2159] F2FS-fs (loop0): Found nat_bits in checkpoint
[  886.213697][ T2159] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  886.220663][ T2159] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  886.377833][ T2174] netlink: 'syz-executor.0': attribute type 4 has an invalid length.
[  886.403934][ T2174] netlink: 'syz-executor.0': attribute type 4 has an invalid length.
[  886.461841][   T20] usb 4-1: Using ep0 maxpacket: 8
[  886.490638][ T2189] loop1: detected capacity change from 0 to 256
[  886.516366][ T2189] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  886.529076][ T2189] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe622a5da, utbl_chksum : 0xe619d30d)
[  886.547410][   T20] usb 4-1: unable to get BOS descriptor or descriptor too short
[  886.632937][   T20] usb 4-1: config index 0 descriptor too short (expected 16914, got 18)
[  886.641338][   T20] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  886.651308][   T20] usb 4-1: config 0 has no interfaces?
[  886.686448][   T26] usb 3-1: new high-speed USB device number 71 using dummy_hcd
[  886.827206][   T20] usb 4-1: New USB device found, idVendor=0bb4, idProduct=0a9b, bcdDevice=30.9b
[  886.836471][   T20] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  886.844293][   T20] usb 4-1: Product: syz
[  886.848326][   T20] usb 4-1: Manufacturer: syz
[  886.852713][   T20] usb 4-1: SerialNumber: syz
[  886.857944][   T20] usb 4-1: config 0 descriptor??
[  886.964450][   T26] usb 3-1: Using ep0 maxpacket: 8
[  887.124719][   T26] usb 3-1: config 135 has an invalid interface number: 230 but max is 0
[  887.132992][   T26] usb 3-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config
[  887.143296][   T26] usb 3-1: config 135 has no interface number 0
[  887.149369][   T26] usb 3-1: config 135 interface 230 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  887.223600][ T3251] usb 4-1: USB disconnect, device number 73
[  887.359963][   T26] usb 3-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a
[  887.368944][   T26] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  887.376838][   T26] usb 3-1: Product: syz
[  887.380807][   T26] usb 3-1: Manufacturer: syz
[  887.387044][   T26] usb 3-1: SerialNumber: syz
[  887.445917][   T26] usb 3-1: Found UVC 0.00 device syz (18ec:3288)
[  887.452084][   T26] usb 3-1: No valid video chain found.
[  887.472238][ T2229] loop1: detected capacity change from 0 to 40427
[  887.531647][ T2229] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[  887.539178][ T2229] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  887.549777][ T2229] F2FS-fs (loop1): Found nat_bits in checkpoint
[  887.572374][ T2229] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  887.579253][ T2229] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  887.662471][ T3251] usb 3-1: USB disconnect, device number 71
[  887.986852][ T2240] loop1: detected capacity change from 0 to 256
[  889.619214][ T2281] loop2: detected capacity change from 0 to 40427
[  889.659123][ T2281] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[  889.666676][ T2281] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  889.678125][ T2281] F2FS-fs (loop2): Found nat_bits in checkpoint
[  889.701677][ T2281] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  889.708520][ T2281] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  889.797336][   T20] usb 2-1: new high-speed USB device number 78 using dummy_hcd
[  890.171537][   T20] usb 2-1: Using ep0 maxpacket: 8
[  890.300158][   T20] usb 2-1: config 135 has an invalid interface number: 230 but max is 0
[  890.308392][   T20] usb 2-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config
[  890.318480][   T20] usb 2-1: config 135 has no interface number 0
[  890.324504][   T20] usb 2-1: config 135 interface 230 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  890.531397][   T20] usb 2-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a
[  890.551268][   T20] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  890.559194][   T20] usb 2-1: Product: syz
[  890.563236][   T20] usb 2-1: Manufacturer: syz
[  890.567646][   T20] usb 2-1: SerialNumber: syz
[  890.610205][   T20] usb 2-1: Found UVC 0.00 device syz (18ec:3288)
[  890.616385][   T20] usb 2-1: No valid video chain found.
[  890.830717][   T20] usb 2-1: USB disconnect, device number 78
[  890.883144][ T2326] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'.
[  891.009180][ T2339] syz-executor.3[2339] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  891.009235][ T2339] syz-executor.3[2339] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  891.397025][ T2367] syz-executor.1[2367] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  891.408641][ T2367] syz-executor.1[2367] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  891.425331][ T2361] loop3: detected capacity change from 0 to 40427
[  891.476439][ T2361] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[  891.484073][ T2361] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  891.494484][ T2361] F2FS-fs (loop3): Found nat_bits in checkpoint
[  891.525542][ T2361] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix.
[  891.536457][ T2361] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  891.543863][ T2361] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  891.564206][ T2361] attempt to access beyond end of device
[  891.564206][ T2361] loop3: rw=2049, want=45104, limit=40427
[  891.578496][  T637] attempt to access beyond end of device
[  891.578496][  T637] loop3: rw=2049, want=40976, limit=40427
[  891.829288][ T2397] syz-executor.3[2397] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  891.829360][ T2397] syz-executor.3[2397] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  891.836535][ T2398] loop2: detected capacity change from 0 to 2048
[  891.860636][ T3251] usb 2-1: new high-speed USB device number 79 using dummy_hcd
[  891.894318][ T2398] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  891.904916][ T2398] ext4 filesystem being mounted at /root/syzkaller-testdir573250383/syzkaller.khcY6Y/24/file0 supports timestamps until 2038 (0x7fffffff)
[  892.244024][ T2425] loop3: detected capacity change from 0 to 256
[  892.309713][ T3251] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  892.320485][ T3251] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  892.329963][ T3251] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  892.338824][ T3251] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  892.347099][ T3251] usb 2-1: config 0 descriptor??
[  892.442180][ T2431] syz-executor.3[2431] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  892.442232][ T2431] syz-executor.3[2431] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  893.438449][ T2469] netlink: 'syz-executor.3': attribute type 1 has an invalid length.
[  893.463872][   T30] audit: type=1400 audit(2000000718.718:45177): avc:  denied  { create } for  pid=2470 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=iucv_socket permissive=1
[  893.571911][ T2480] loop3: detected capacity change from 0 to 4096
[  893.626944][ T2480] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  893.870678][ T3251] uclogic 0003:256C:006D.0080: v1 buttonpad probing failed: -71
[  893.878143][ T3251] uclogic 0003:256C:006D.0080: failed probing parameters: -71
[  893.885464][ T3251] uclogic: probe of 0003:256C:006D.0080 failed with error -71
[  893.893651][ T3251] usb 2-1: USB disconnect, device number 79
[  893.923913][   T26] usb 4-1: new high-speed USB device number 74 using dummy_hcd
[  894.191206][   T26] usb 4-1: Using ep0 maxpacket: 8
[  894.340926][   T26] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  894.350391][   T26] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0
[  894.359860][   T26] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  894.369339][   T26] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  894.379087][   T26] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  894.388709][   T26] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0
[  894.398332][   T26] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0
[  894.407879][   T26] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0
[  894.417251][   T26] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0
[  894.426708][   T26] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 0, changing to 7
[  894.437627][   T26] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0
[  894.473359][ T2496] netlink: 'syz-executor.2': attribute type 1 has an invalid length.
[  894.521764][ T2505] syz-executor.2[2505] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  894.521809][ T2505] syz-executor.2[2505] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  894.535374][ T2505] loop2: detected capacity change from 0 to 256
[  894.582427][ T2505] FAT-fs (loop2): Directory bread(block 64) failed
[  894.588874][ T2505] FAT-fs (loop2): Directory bread(block 65) failed
[  894.595379][ T2505] FAT-fs (loop2): Directory bread(block 66) failed
[  894.601813][ T2505] FAT-fs (loop2): Directory bread(block 67) failed
[  894.608087][ T2505] FAT-fs (loop2): Directory bread(block 68) failed
[  894.614363][ T2505] FAT-fs (loop2): Directory bread(block 69) failed
[  894.620831][ T2505] FAT-fs (loop2): Directory bread(block 70) failed
[  894.627193][ T2505] FAT-fs (loop2): Directory bread(block 71) failed
[  894.633737][ T2505] FAT-fs (loop2): Directory bread(block 72) failed
[  894.639992][ T2505] FAT-fs (loop2): Directory bread(block 73) failed
[  894.684342][   T26] usb 4-1: New USB device found, idVendor=0471, idProduct=0326, bcdDevice=b2.08
[  894.693207][   T26] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  894.701218][   T26] usb 4-1: Product: syz
[  894.705267][   T26] usb 4-1: Manufacturer: syz
[  894.709720][   T26] usb 4-1: SerialNumber: syz
[  894.714602][   T26] usb 4-1: config 0 descriptor??
[  894.758242][   T26] usbhid 4-1:0.0: couldn't find an input interrupt endpoint
[  895.357306][   T20] usb 4-1: USB disconnect, device number 74
[  895.535140][ T2513] bridge0: port 1(bridge_slave_0) entered blocking state
[  895.542227][ T2513] bridge0: port 1(bridge_slave_0) entered disabled state
[  895.549512][ T2513] device bridge_slave_0 entered promiscuous mode
[  895.556430][ T2513] bridge0: port 2(bridge_slave_1) entered blocking state
[  895.563853][ T2513] bridge0: port 2(bridge_slave_1) entered disabled state
[  895.571193][ T2513] device bridge_slave_1 entered promiscuous mode
[  895.649935][ T2513] bridge0: port 2(bridge_slave_1) entered blocking state
[  895.656815][ T2513] bridge0: port 2(bridge_slave_1) entered forwarding state
[  895.663890][ T2513] bridge0: port 1(bridge_slave_0) entered blocking state
[  895.670698][ T2513] bridge0: port 1(bridge_slave_0) entered forwarding state
[  895.691389][ T2526] device pim6reg1 entered promiscuous mode
[  895.715215][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  895.722831][   T26] bridge0: port 1(bridge_slave_0) entered disabled state
[  895.729988][   T26] bridge0: port 2(bridge_slave_1) entered disabled state
[  895.741880][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  895.749890][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[  895.756728][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[  895.763934][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  895.771853][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[  895.778686][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[  895.791806][    T6] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  895.813769][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  895.820846][ T2534] loop2: detected capacity change from 0 to 256
[  895.827715][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  895.841716][ T2513] device veth0_vlan entered promiscuous mode
[  895.850644][   T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  895.858565][   T20] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  895.872416][   T20] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  895.884456][ T2513] device veth1_macvtap entered promiscuous mode
[  895.891332][   T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  895.905546][T22995] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  895.915080][   T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  895.966714][T24092] device bridge_slave_1 left promiscuous mode
[  895.973579][T24092] bridge0: port 2(bridge_slave_1) entered disabled state
[  895.981316][T24092] device bridge_slave_0 left promiscuous mode
[  895.987590][T24092] bridge0: port 1(bridge_slave_0) entered disabled state
[  896.007720][T24092] device veth1_macvtap left promiscuous mode
[  896.015214][T24092] device veth0_vlan left promiscuous mode
[  896.261471][ T2546] loop2: detected capacity change from 0 to 256
[  896.329300][ T2546] FAT-fs (loop2): Directory bread(block 64) failed
[  896.335637][ T2546] FAT-fs (loop2): Directory bread(block 65) failed
[  896.342129][ T2546] FAT-fs (loop2): Directory bread(block 66) failed
[  896.348469][ T2546] FAT-fs (loop2): Directory bread(block 67) failed
[  896.354916][ T2546] FAT-fs (loop2): Directory bread(block 68) failed
[  896.361235][ T2546] FAT-fs (loop2): Directory bread(block 69) failed
[  896.368076][ T2546] FAT-fs (loop2): Directory bread(block 70) failed
[  896.375473][ T2546] FAT-fs (loop2): Directory bread(block 71) failed
[  896.382385][ T2546] FAT-fs (loop2): Directory bread(block 72) failed
[  896.391205][ T2546] FAT-fs (loop2): Directory bread(block 73) failed
[  896.875178][ T2563] device pim6reg1 entered promiscuous mode
[  896.917340][   T20] usb 4-1: new high-speed USB device number 75 using dummy_hcd
[  896.980046][ T2567] loop4: detected capacity change from 0 to 8192
[  896.994743][ T2567] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  897.072616][ T2571] loop2: detected capacity change from 0 to 2048
[  897.164955][ T2571] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  897.173815][   T20] usb 4-1: Using ep0 maxpacket: 32
[  897.302255][   T20] usb 4-1: config 0 has no interfaces?
[  897.459602][ T2582] loop2: detected capacity change from 0 to 1024
[  897.473846][   T20] usb 4-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed
[  897.482801][   T20] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  897.490630][   T20] usb 4-1: Product: syz
[  897.494684][   T20] usb 4-1: Manufacturer: syz
[  897.499070][   T20] usb 4-1: SerialNumber: syz
[  897.508481][   T20] usb 4-1: config 0 descriptor??
[  897.528012][ T2582] EXT4-fs (loop2): Test dummy encryption mode enabled
[  897.534760][ T2582] EXT4-fs (loop2): Ignoring removed orlov option
[  897.543099][ T2582] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption,debug_want_extra_isize=0x0000000000000084,stripe=0x0000000000000007,commit=0x0000000000000005,orlov,barrier=0x0000000000000005,max_batch_time=0x0000000000000000,data_err=abort,,errors=continue. Quota mode: writeback.
[  898.630438][ T2593] device pim6reg1 entered promiscuous mode
[  898.666239][ T2597] SELinux: security_context_str_to_sid(unconfined_u) failed for (dev ?, type ?) errno=-22
[  898.676671][ T2597] SELinux: security_context_str_to_sid(unconfined_u) failed for (dev incremental-fs, type incremental-fs) errno=-22
[  898.750220][ T2609] bpf_get_probe_write_proto: 2 callbacks suppressed
[  898.750237][ T2609] syz-executor.2[2609] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  898.757627][ T2609] syz-executor.2[2609] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  899.675858][   T26] usb 4-1: USB disconnect, device number 75
[  902.582709][ T2629] device pim6reg1 entered promiscuous mode
[  902.593487][ T2627] loop3: detected capacity change from 0 to 8192
[  902.633279][ T2627] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  903.010896][    T6] usb 3-1: new high-speed USB device number 72 using dummy_hcd
[  903.267467][    T6] usb 3-1: Using ep0 maxpacket: 8
[  903.353030][    T6] usb 3-1: unable to get BOS descriptor or descriptor too short
[  903.438576][    T6] usb 3-1: config index 0 descriptor too short (expected 16914, got 18)
[  903.447089][    T6] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  903.460297][    T6] usb 3-1: config 0 has no interfaces?
[  903.504248][ T2647] syz-executor.4[2647] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  903.504324][ T2647] syz-executor.4[2647] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  903.518421][ T2647] loop4: detected capacity change from 0 to 256
[  903.590527][ T2647] FAT-fs (loop4): Directory bread(block 64) failed
[  903.596879][ T2647] FAT-fs (loop4): Directory bread(block 65) failed
[  903.603291][ T2647] FAT-fs (loop4): Directory bread(block 66) failed
[  903.609703][ T2647] FAT-fs (loop4): Directory bread(block 67) failed
[  903.616033][ T2647] FAT-fs (loop4): Directory bread(block 68) failed
[  903.622303][ T2647] FAT-fs (loop4): Directory bread(block 69) failed
[  903.628694][ T2647] FAT-fs (loop4): Directory bread(block 70) failed
[  903.635066][    T6] usb 3-1: New USB device found, idVendor=0bb4, idProduct=0a9b, bcdDevice=30.9b
[  903.643889][ T2647] FAT-fs (loop4): Directory bread(block 71) failed
[  903.650175][ T2647] FAT-fs (loop4): Directory bread(block 72) failed
[  903.656545][    T6] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  903.664315][    T6] usb 3-1: Product: syz
[  903.668339][ T2647] FAT-fs (loop4): Directory bread(block 73) failed
[  903.674640][    T6] usb 3-1: Manufacturer: syz
[  903.679086][    T6] usb 3-1: SerialNumber: syz
[  903.687073][    T6] usb 3-1: config 0 descriptor??
[  904.051411][ T2550] usb 3-1: USB disconnect, device number 72
[  904.712443][ T2666] loop4: detected capacity change from 0 to 1024
[  904.754619][ T2666] EXT4-fs (loop4): Test dummy encryption mode enabled
[  904.761247][ T2666] EXT4-fs (loop4): Ignoring removed orlov option
[  904.881889][ T2550] usb 3-1: new high-speed USB device number 73 using dummy_hcd
[  904.900119][ T2666] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption,debug_want_extra_isize=0x0000000000000084,stripe=0x0000000000000007,commit=0x0000000000000005,orlov,barrier=0x0000000000000005,max_batch_time=0x0000000000000000,data_err=abort,,errors=continue. Quota mode: writeback.
[  905.092587][ T2685] loop4: detected capacity change from 0 to 8192
[  905.150416][ T2685] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  905.160763][ T2550] usb 3-1: Using ep0 maxpacket: 32
[  905.288087][ T2550] usb 3-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config
[  905.300404][ T2550] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  905.316693][ T2550] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  905.325693][ T2550] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  905.341330][ T2550] usb 3-1: config 0 descriptor??
[  905.384783][ T2550] hub 3-1:0.0: bad descriptor, ignoring hub
[  905.390592][ T2550] hub: probe of 3-1:0.0 failed with error -5
[  905.396593][ T2550] usbhid 3-1:0.0: couldn't find an input interrupt endpoint
[  906.608639][ T2700] loop3: detected capacity change from 0 to 1024
[  906.657569][ T2700] EXT4-fs (loop3): Test dummy encryption mode enabled
[  906.664281][ T2700] EXT4-fs (loop3): Ignoring removed orlov option
[  906.672637][ T2700] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,debug_want_extra_isize=0x0000000000000084,stripe=0x0000000000000007,commit=0x0000000000000005,orlov,barrier=0x0000000000000005,max_batch_time=0x0000000000000000,data_err=abort,,errors=continue. Quota mode: writeback.
[  906.806476][ T2714] input: syz1 as /devices/virtual/input/input132
[  907.744604][ T2728] loop3: detected capacity change from 0 to 1024
[  907.758468][ T2728] EXT4-fs (loop3): Test dummy encryption mode enabled
[  907.765108][ T2728] EXT4-fs (loop3): Ignoring removed orlov option
[  907.773211][ T2728] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,debug_want_extra_isize=0x0000000000000084,stripe=0x0000000000000007,commit=0x0000000000000005,orlov,barrier=0x0000000000000005,max_batch_time=0x0000000000000000,data_err=abort,,errors=continue. Quota mode: writeback.
[  907.939377][T11254] usb 3-1: USB disconnect, device number 73
[  908.228034][T11254] usb 5-1: new high-speed USB device number 71 using dummy_hcd
[  908.495272][T11254] usb 5-1: Using ep0 maxpacket: 32
[  908.741172][T11254] usb 5-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config
[  908.751330][T11254] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  908.764225][T11254] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  908.773102][T11254] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  908.788640][T11254] usb 5-1: config 0 descriptor??
[  908.852717][T11254] hub 5-1:0.0: bad descriptor, ignoring hub
[  908.858441][T11254] hub: probe of 5-1:0.0 failed with error -5
[  908.864537][T11254] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[  909.044692][ T2799] loop2: detected capacity change from 0 to 131072
[  909.104189][ T2799] F2FS-fs (loop2): QUOTA feature is enabled, so ignore jquota_fmt
[  909.113311][ T2799] F2FS-fs (loop2): invalid crc value
[  909.120664][ T2799] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (15359802341028777995, 275811881701387)
[  909.141308][ T2799] F2FS-fs (loop2): Mounted with checkpoint version = 753bd00b
[  910.041984][ T2845] loop2: detected capacity change from 0 to 131072
[  910.099819][ T2845] F2FS-fs (loop2): QUOTA feature is enabled, so ignore jquota_fmt
[  910.108424][ T2845] F2FS-fs (loop2): invalid crc value
[  910.115068][ T2845] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (15359802341028777995, 275811881701387)
[  910.135451][ T2845] F2FS-fs (loop2): Mounted with checkpoint version = 753bd00b
[  910.694673][ T2870] bridge0: port 1(bridge_slave_0) entered blocking state
[  910.701555][ T2870] bridge0: port 1(bridge_slave_0) entered disabled state
[  910.708922][ T2870] device bridge_slave_0 entered promiscuous mode
[  910.715624][ T2870] bridge0: port 2(bridge_slave_1) entered blocking state
[  910.722545][ T2870] bridge0: port 2(bridge_slave_1) entered disabled state
[  910.729747][ T2870] device bridge_slave_1 entered promiscuous mode
[  910.781976][ T2870] bridge0: port 2(bridge_slave_1) entered blocking state
[  910.788819][ T2870] bridge0: port 2(bridge_slave_1) entered forwarding state
[  910.795933][ T2870] bridge0: port 1(bridge_slave_0) entered blocking state
[  910.802695][ T2870] bridge0: port 1(bridge_slave_0) entered forwarding state
[  910.828780][   T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  910.838790][   T20] bridge0: port 1(bridge_slave_0) entered disabled state
[  910.845695][   T30] audit: type=1326 audit(2000000734.976:45178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2874 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba2e33ef29 code=0x7ffc0000
[  910.871240][   T20] bridge0: port 2(bridge_slave_1) entered disabled state
[  910.875313][   T30] audit: type=1326 audit(2000000734.976:45179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2874 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=136 compat=0 ip=0x7fba2e33ef29 code=0x7ffc0000
[  910.902715][   T30] audit: type=1326 audit(2000000734.976:45180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2874 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba2e33ef29 code=0x7ffc0000
[  910.930150][    T6] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  910.938330][    T6] bridge0: port 1(bridge_slave_0) entered blocking state
[  910.945182][    T6] bridge0: port 1(bridge_slave_0) entered forwarding state
[  910.953000][    T6] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  910.961031][    T6] bridge0: port 2(bridge_slave_1) entered blocking state
[  910.967871][    T6] bridge0: port 2(bridge_slave_1) entered forwarding state
[  910.980074][ T2550] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  910.997645][  T611] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  910.998395][ T2879] loop3: detected capacity change from 0 to 1024
[  911.006072][  T611] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  911.025487][ T2870] device veth0_vlan entered promiscuous mode
[  911.030498][ T2879] EXT4-fs (loop3): Ignoring removed orlov option
[  911.032224][ T2550] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  911.037500][ T2879] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option
[  911.045528][ T2550] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  911.059277][ T2550] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  911.071371][ T2870] device veth1_macvtap entered promiscuous mode
[  911.073652][ T2879] EXT4-fs (loop3): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,errors=continue,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none.
[  911.078778][  T611] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  911.118487][  T611] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  911.123295][ T2879] EXT4-fs error (device loop3): get_max_inline_xattr_value_size:69: inode #12: comm syz-executor.3: corrupt xattr in inline inode
[  911.127169][  T611] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  911.139865][ T2879] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2213: inode #12: comm syz-executor.3: corrupted in-inode xattr
[  911.193086][  T637] ==================================================================
[  911.200963][  T637] BUG: KASAN: use-after-free in ext4_xattr_delete_inode+0xcd0/0xce0
[  911.208772][  T637] Read of size 4 at addr ffff8881382ae000 by task syz-executor.3/637
[  911.216672][  T637] 
[  911.218868][  T637] CPU: 0 PID: 637 Comm: syz-executor.3 Tainted: G        W         5.15.149-syzkaller-00165-g85445b5a2107 #0
[  911.230213][  T637] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024
[  911.240111][  T637] Call Trace:
[  911.243229][  T637]  <TASK>
[  911.246009][  T637]  dump_stack_lvl+0x151/0x1b7
[  911.250522][  T637]  ? io_uring_drop_tctx_refs+0x190/0x190
[  911.255990][  T637]  ? panic+0x751/0x751
[  911.259896][  T637]  print_address_description+0x87/0x3b0
[  911.265278][  T637]  kasan_report+0x179/0x1c0
[  911.269617][  T637]  ? ext4_xattr_delete_inode+0xcd0/0xce0
[  911.275082][  T637]  ? ext4_xattr_delete_inode+0xcd0/0xce0
[  911.280550][  T637]  __asan_report_load4_noabort+0x14/0x20
[  911.286017][  T637]  ext4_xattr_delete_inode+0xcd0/0xce0
[  911.291312][  T637]  ? sb_end_intwrite+0x120/0x120
[  911.296086][  T637]  ? ext4_expand_extra_isize_ea+0x1bb0/0x1bb0
[  911.301986][  T637]  ? ext4_journal_check_start+0x16c/0x230
[  911.307544][  T637]  ? __kasan_check_read+0x11/0x20
[  911.312404][  T637]  ? ext4_inode_is_fast_symlink+0x295/0x3d0
[  911.318132][  T637]  ? ext4_evict_inode+0xb8d/0x14e0
[  911.323077][  T637]  ext4_evict_inode+0xea1/0x14e0
[  911.327852][  T637]  ? _raw_spin_unlock+0x4d/0x70
[  911.332539][  T637]  ? ext4_inode_is_fast_symlink+0x3d0/0x3d0
[  911.338267][  T637]  ? _raw_spin_unlock+0x4d/0x70
[  911.342955][  T637]  ? inode_io_list_del+0x18b/0x1a0
[  911.347902][  T637]  ? ext4_inode_is_fast_symlink+0x3d0/0x3d0
[  911.353637][  T637]  evict+0x2a3/0x630
[  911.357361][  T637]  iput+0x63b/0x7e0
[  911.361008][  T637]  vfs_rmdir+0x359/0x470
[  911.365086][  T637]  do_rmdir+0x3ab/0x630
[  911.369080][  T637]  ? d_delete_notify+0x160/0x160
[  911.373941][  T637]  __x64_sys_unlinkat+0xdf/0xf0
[  911.378624][  T637]  do_syscall_64+0x3d/0xb0
[  911.382880][  T637]  entry_SYSCALL_64_after_hwframe+0x61/0xcb
[  911.388605][  T637] RIP: 0033:0x7fba2e33e707
[  911.392859][  T637] Code: 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 07 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
[  911.412298][  T637] RSP: 002b:00007fff349a92d8 EFLAGS: 00000207 ORIG_RAX: 0000000000000107
[  911.420545][  T637] RAX: ffffffffffffffda RBX: 0000000000000065 RCX: 00007fba2e33e707
[  911.428355][  T637] RDX: 0000000000000200 RSI: 00007fff349aa480 RDI: 00000000ffffff9c
[  911.436166][  T637] RBP: 00007fba2e39b6c6 R08: 0000000000000000 R09: 0000000000000000
[  911.443983][  T637] R10: 0000000000000100 R11: 0000000000000207 R12: 00007fff349aa480
[  911.451789][  T637] R13: 00007fba2e39b6c6 R14: 00000000000d55d0 R15: 0000000000000008
[  911.459604][  T637]  </TASK>
[  911.462463][  T637] 
[  911.464635][  T637] The buggy address belongs to the page:
[  911.470206][  T637] page:ffffea0004e0ab80 refcount:0 mapcount:0 mapping:0000000000000000 index:0x1 pfn:0x1382ae
[  911.480256][  T637] flags: 0x4000000000000000(zone=1)
[  911.485297][  T637] raw: 4000000000000000 ffffea0004b614c8 ffffea0004867c48 0000000000000000
[  911.493714][  T637] raw: 0000000000000001 0000000000000000 00000000ffffffff 0000000000000000
[  911.502127][  T637] page dumped because: kasan: bad access detected
[  911.508383][  T637] page_owner tracks the page as freed
[  911.513585][  T637] page last allocated via order 0, migratetype Movable, gfp_mask 0x100cca(GFP_HIGHUSER_MOVABLE), pid 2860, ts 910305051331, free_ts 910582336108
[  911.528084][  T637]  post_alloc_hook+0x1a3/0x1b0
[  911.532680][  T637]  prep_new_page+0x1b/0x110
[  911.537017][  T637]  get_page_from_freelist+0x3550/0x35d0
[  911.542401][  T637]  __alloc_pages+0x27e/0x8f0
[  911.546823][  T637]  shmem_alloc_and_acct_page+0x4bd/0xa80
[  911.552293][  T637]  shmem_getpage_gfp+0x1388/0x23c0
[  911.557241][  T637]  shmem_fault+0x1b8/0x6c0
[  911.561508][  T637]  __do_fault+0x273/0x300
[  911.565658][  T637]  handle_pte_fault+0x167b/0x24d0
[  911.570520][  T637]  do_handle_mm_fault+0x1ea9/0x23a0
[  911.575552][  T637]  __get_user_pages+0x379/0xee0
[  911.580239][  T637]  __mm_populate+0x38d/0x560
[  911.584664][  T637]  vm_mmap_pgoff+0x271/0x450
[  911.589093][  T637]  ksys_mmap_pgoff+0xed/0x1e0
[  911.593606][  T637]  __x64_sys_mmap+0x103/0x120
[  911.598118][  T637]  do_syscall_64+0x3d/0xb0
[  911.602373][  T637] page last free stack trace:
[  911.606886][  T637]  free_unref_page_prepare+0x7c8/0x7d0
[  911.612179][  T637]  free_unref_page_list+0x14b/0xa60
[  911.617212][  T637]  release_pages+0x1310/0x1370
[  911.621811][  T637]  __pagevec_release+0x84/0x100
[  911.626498][  T637]  shmem_undo_range+0x604/0x1560
[  911.631272][  T637]  shmem_evict_inode+0x215/0x9d0
[  911.636046][  T637]  evict+0x2a3/0x630
[  911.639778][  T637]  iput+0x63b/0x7e0
[  911.643423][  T637]  dentry_unlink_inode+0x34f/0x440
[  911.648370][  T637]  __dentry_kill+0x447/0x660
[  911.652798][  T637]  dentry_kill+0xc0/0x2a0
[  911.656964][  T637]  dput+0x45/0x80
[  911.660434][  T637]  __fput+0x662/0x910
[  911.664253][  T637]  ____fput+0x15/0x20
[  911.668073][  T637]  task_work_run+0x129/0x190
[  911.672500][  T637]  do_exit+0xc48/0x2ca0
[  911.676491][  T637] 
[  911.678660][  T637] Memory state around the buggy address:
[  911.684134][  T637]  ffff8881382adf00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
2033/05/18 03:45:35 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF
[  911.692031][  T637]  ffff8881382adf80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  911.699928][  T637] >ffff8881382ae000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[  911.707822][  T637]                    ^
[  911.711729][  T637]  ffff8881382ae080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[  911.719628][  T637]  ffff8881382ae100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[  911.727525][  T637] ==================================================================
[  911.735421][  T637] Disabling lock debugging due to kernel taint
[  911.766051][   T26] usb 5-1: USB disconnect, device number 71