last executing test programs:

1.874393957s ago: executing program 2 (id=2384):
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000001840), 0x802, 0x0)
write$UHID_INPUT2(r0, &(0x7f0000001880), 0x6)

1.862415549s ago: executing program 2 (id=2385):
syz_usb_connect(0x0, 0x4f, &(0x7f0000000140)=ANY=[@ANYBLOB="120100005e342608050b9117681d0102030109023d000204000006090400000279d57500090500000000000000080b6345d06b1104090500000000000000080b5bb25266c26b0904d8"], 0x0)
syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff)

1.642756696s ago: executing program 4 (id=2387):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, 0x0, &(0x7f0000000040)}, 0x20)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000001040)={0x0, 0x0, 0x0}, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x222}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe28, 0xfffffffffffffff5, &(0x7f0000000980)="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", 0x0, 0x2f, 0xe8034000, 0xf000, 0xfffffffffffffe2a, &(0x7f0000000000), &(0x7f00000000c0)="c6769e45b7c61302926682c7f9e9bb5ba2b3cdf023e8da0392a4cd62e2370f25ae5ba0dab896bcf5b774cd28bebbde39f796ae27d04582bb7c03e9fe830ea22c9fd03f6d2779515fdad3f5d0de07b7b70996102fdb67b1e77a34a5b7136a212fa2c0ea502588309dc3e42c55a6f93e6ba5e1b492f9db48f0fdd2f9fb937b3e8a63dcf9dd855837433998ba579da27559", 0x5dc}, 0x28)

1.623501938s ago: executing program 4 (id=2388):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000011c00)={0x0, 0x0, &(0x7f0000011bc0)={&(0x7f0000000000)=@newnexthop={0x2c, 0x68, 0xf2ae8231d9cb333f, 0x0, 0x0, {}, [@NHA_ID={0x8, 0x1, 0x2}, @NHA_GROUP={0xc, 0x2, [{0x0, 0x4}]}]}, 0x2c}}, 0x0)
openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1b, 0x8, &(0x7f0000000a40)=ANY=[@ANYBLOB="7a0af8ff7525707cbfa100000000000007010000f8ffffffb702000009000000bf130000000000008500000006000000b700000000000000950000ff00a6ead0169191d54f8196217fc563e2fc91f6da4dad4fdc2eb1b5986fc4a3f611a7c80000040000000000b1a297cfddd73f30f2382f6cda4bfdd45be583823c0f092248875daf45006a4c4ea5e15b2f9618d547244a22000000000800db583620ce7243d1ae9f2cfe401dbef6619358399aa9c2acd068c03efefd8bc77edf2d34b12cd48a1b20fb7dd843267e0331759f4ec6b5b0af58e604f494eff289026d5045ef08000000000000007718a09f480003c26abba34635d0e8b598a51bc742135a6e1d33fe226c944bc70bb30d435aa8b5202db761014b1b999a12df6bee431a665d080000433b6233e1c0fe30e384c3cb07b74a72291a1a2b523dd81b6651b1ee48e999bb004823ebcd8c65743f31f84b263ab9b3426692f01ad194f302d7a658e90000000001000000b6b2f25ddb8c640ab321a402058c9221b6870814cf4ee23d0279fff5eb156e0a000000000000f2bd1d4a178d86d6935eb8b75bc4eb680d10e8b6a54c5c5b011cf63ff76622939a20d4aadf85db40179c2cf83ee07e30a279d8f9f3bc282deb53a03409f8e6972f3f720d045923702cede0f3e91411f3f1b16f065624f280a7dcce8db910f93c49b9e0aa390d0da6972ed719d7e0efb2bb71f38f6b9fc39fc829dcfe4af8ac5fbb7314a7a433e0182767d1376eda2b9c66200349e62d4d0ab1a1dc51907c980000000000000000000000000000000000000000000000000000000000c9062cbaa49e5e1f03bb98c1c129de1bd71408169e48a6f742f256d2fce4da8658b65bd0d3bc949a5c60fc65d54038d6af495464eb9f640c1ecf2b7e6a8fa585ec7ecd7fbad297613812251f0000000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x200000e, 0xe, 0x55, &(0x7f0000000140)="a06ad876d56a0064d082778c3938", &(0x7f0000000380)=""/85, 0x600, 0x4000000}, 0x28)
accept4$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000080)=0x14, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x0, r2}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10)
syz_open_procfs(0x0, &(0x7f0000000440)='attr/exec\x00')
write$cgroup_int(r2, &(0x7f0000000100), 0x12)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
syz_open_procfs(0x0, 0x0)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r5}, 0x10)
r6 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000900), 0x801, 0x0)
write$cgroup_int(r6, &(0x7f0000004ec0), 0x12)
prctl$PR_MCE_KILL(0x27, 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x112})

1.572926492s ago: executing program 4 (id=2391):
r0 = inotify_init()
timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000000))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0)
readv(r0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/148, 0x94}], 0x1)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x0, 0x0)

1.423427545s ago: executing program 0 (id=2392):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r3 = getpid()
r4 = inotify_init1(0x0)
fcntl$setown(r4, 0x8, 0xffffffffffffffff)
fcntl$getownex(r4, 0x10, &(0x7f0000000040)={0x0, <r5=>0x0})
kcmp(r3, r5, 0x300, 0xffffffffffffffff, 0xffffffffffffffff)

914.548536ms ago: executing program 4 (id=2393):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20, @loopback}, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r1, 0x5}, 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, &(0x7f0000000340), &(0x7f0000000040)=@tcp=r0}, 0x20)
sendto$inet(r0, &(0x7f00000000c0)='+', 0x1, 0x11, 0x0, 0x0)

861.93975ms ago: executing program 4 (id=2394):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
mkdirat(r0, &(0x7f0000000180)='./bus\x00', 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x0, 0x4, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x90)
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, 0x0, 0x0)
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
bind$bt_l2cap(r6, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe)
bind$bt_l2cap(r5, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000700)=ANY=[@ANYBLOB="18002539c9a5e5c2950c000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000090002000000b7080000b3a3164c8f85da5122ba0da1000500007b8af8ff933a53e98db1f3dd0001464d4d94a203a2b3eab46e6aed2c0000000702002200b70406000000000085e2fc32e320d97d49d2678f7321002f000000c30000fd843d682ee42f499f1ec25bfdc6cd1073c62307743177008edaf7e4759c9b2d4b00"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r8 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x8, 0x3, 0x498, 0x320, 0xa, 0x148, 0x368, 0x60, 0x400, 0x2a8, 0x2a8, 0x400, 0x2a8, 0x3, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0x2f8, 0x368, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_team\x00', {0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x8601, 0x6, './file0\x00'}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f2f7b9f28413d9d8ad470ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc2d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x4f8)

861.82822ms ago: executing program 3 (id=2395):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
syz_read_part_table(0x104f, &(0x7f0000001080)="$eJzsz7ENwjAABMAPsSCpIjEJHQUFBTMwCQMABcuwZJAhpKJFCOmu8Ev+d+HwW/vDIiXLoU1KWdWbph7bV3tOPy+v5RnjmF2bDOu56KY3H1yarsbm1E/D5Na+y7E53r/xJQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4N48AAAD//+w8CB8=")

861.62469ms ago: executing program 1 (id=2396):
open(0x0, 0x4008040, 0x0)
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
munmap(&(0x7f0000001000/0x1000)=nil, 0x1000)
syz_emit_ethernet(0x34e, &(0x7f0000000780)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00ed00", 0x318, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x600, 0x0, 0x0, [{0x0, 0xa, "a78c000005dc8080a2030003004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34060600000000000000dac15084dbaf736b41e5af0502"}, {0x0, 0x1, "00000500000000de25000400"}, {0x0, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf3915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x0, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f005"}, {0xe, 0x7, "b8a3e10000a3e1100000006f00ffc0ffff00000000600000ff0bc0fe000000000000000000000000d9a0274400"/55}, {0x0, 0xc, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d180610027628cf9ef083611c9f68e2e1eb3d8bf9c6ab2642c4808298e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c"}]}}}}}}, 0x0)

844.114672ms ago: executing program 1 (id=2397):
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0xf4240, &(0x7f0000000b00)=ANY=[@ANYBLOB="b40800000000000073114200000000008510000002000000b7000000000000009500c200000000009500001200000000e753b7e711d398f1d5dbdece896b2c35f697e24f"], &(0x7f0000000080)='GPL\x00', 0x0, 0xc3, &(0x7f000000cf3d)=""/195}, 0x70)

814.075524ms ago: executing program 1 (id=2398):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000005180)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000000)="8252", 0x2}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="18000e"], 0x18}}], 0x2, 0x4404c000)

749.851599ms ago: executing program 3 (id=2399):
syz_open_dev$tty1(0xc, 0x4, 0x1)
dup(0xffffffffffffffff)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000020340)={0x3c, r1, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_COALESCE_RULE_DELAY={0x8}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}]}, 0x3c}}, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
socket$inet_icmp(0x2, 0x2, 0x1)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wlan1\x00'})
creat(&(0x7f0000000000)='./file0\x00', 0x0)
r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001b40)={&(0x7f0000000080)='jbd2_handle_stats\x00', r4}, 0x10)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000000c0))
r5 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0)
syz_usb_control_io$hid(r5, &(0x7f0000000240)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r5, 0x0, 0x0)
syz_usb_control_io(r5, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f00000012c0)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0})

749.731289ms ago: executing program 1 (id=2400):
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000940)='./file1\x00', 0x3000010, &(0x7f0000000000), 0x41, 0x51b, &(0x7f0000000100)="$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")
r0 = open(&(0x7f0000000040)='./bus\x00', 0x1ed37e, 0x0)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000980)='./bus\x00', 0x0, 0x81000, 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0)
syz_mount_image$vfat(&(0x7f0000000800), &(0x7f00000007c0)='./bus\x00', 0x2081080, &(0x7f0000000900)=ANY=[@ANYRESDEC=r0, @ANYRESHEX], 0x1, 0x37f, &(0x7f0000000440)="$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")
openat(0xffffffffffffff9c, &(0x7f0000002540)='./file1\x00', 0x0, 0x0)

579.567213ms ago: executing program 0 (id=2401):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0x1b8, 0x65, 0x0, 0x0, 0x0, {}, [@TCA_CHAIN={0x8}, @filter_kind_options=@f_flow={{0x9}, {0xcc, 0x2, [@TCA_FLOW_KEYS={0x8}, @TCA_FLOW_ACT={0x70, 0x9, 0x0, 0x1, [@m_tunnel_key={0x3c, 0x0, 0x0, 0x0, {{0xf}, {0xc, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_KEY_ID={0x8}]}, {0x4}, {0xc}, {0xc}}}, @m_skbedit={0x30, 0x0, 0x0, 0x0, {{0xc}, {0x4}, {0x4}, {0xc}, {0xc}}}]}, @TCA_FLOW_ACT={0x34, 0x9, 0x0, 0x1, [@m_gact={0x30, 0x0, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}]}, @TCA_FLOW_XOR={0x8}, @TCA_FLOW_EMATCHES={0xc, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}]}, @TCA_FLOW_RSHIFT={0x8}]}}, @TCA_CHAIN={0x8}, @filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ARP_OP={0x5}, @TCA_FLOWER_KEY_TCP_DST_MASK={0x6}, @TCA_FLOWER_KEY_UDP_SRC_MASK={0x6}, @TCA_FLOWER_KEY_ICMPV6_TYPE={0x5}]}}, @filter_kind_options=@f_route={{0xa}, {0x70, 0x2, [@TCA_ROUTE4_ACT={0x6c, 0x6, [@m_sample={0x68, 0x0, 0x0, 0x0, {{0xb}, {0x3c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_TRUNC_SIZE={0x8}, @TCA_SAMPLE_TRUNC_SIZE={0x8}, @TCA_SAMPLE_TRUNC_SIZE={0x8}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_TRUNC_SIZE={0x8}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x1b8}}, 0x0)
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0xf30}, {&(0x7f00000007c0)=""/154, 0x60}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400})

570.342174ms ago: executing program 0 (id=2402):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000000000850000007200000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000240)='kfree\x00', r0}, 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x17, 0x0, 0x8400, 0x1}, 0x48)
bpf$MAP_DELETE_ELEM(0x15, &(0x7f0000000400)={r1, 0x0, 0x20000000}, 0x20)

473.023412ms ago: executing program 0 (id=2403):
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffb5, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x49, 0x1}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, <r1=>0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10)
syz_clone(0x8020000, 0x0, 0x0, 0x0, 0x0, 0x0)

472.589902ms ago: executing program 0 (id=2404):
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000940)='tlb_flush\x00', r0}, 0x10)

413.840257ms ago: executing program 0 (id=2405):
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x3, 0x87ab03)
ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000000)={0x0, 0x8, &(0x7f00000010c0)="f39561fc17b7f981"})
write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250)
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0xf)
ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000100)={{}, 'syz0\x00'})
ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x15)
ioctl$UI_DEV_CREATE(r1, 0x5501)
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x6a, 0x2}, @cond})
r2 = syz_usb_connect$cdc_ecm(0x0, 0x156, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0)
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000002380)={0x8, {"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", 0x1000}}, 0x1006)
syz_usb_control_io$cdc_ecm(r2, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)
r3 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_open_dev$usbmon(&(0x7f0000000200), 0x0, 0x10202)
r4 = socket(0x10, 0x3, 0x4)
sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=@newqdisc={0x68, 0x14, 0xf0b, 0x0, 0x0, {0x2}, [@TCA_STAB={0x44, 0x8, 0x0, 0x1, [{{0x1c}, {0x4}}, {{0x1c, 0x1, {0x8, 0x0, 0x0, 0x7f}}, {0x4}}]}]}, 0x68}}, 0x0)
pread64(r3, &(0x7f00000000c0)=""/83, 0x4da, 0x4dd)
syz_mount_image$erofs(&(0x7f0000000040), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00058639aa6f0bfbe4b28434ef119376977b00fffbcec7a5fc1f5a72d4fe24156a9f971990e4f372b7"], 0x0, 0x17d, &(0x7f0000001ac0)="$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")
chdir(&(0x7f0000000140)='./file0\x00')
open(&(0x7f0000000500)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="240000002100010000000000000000000a8a107900000000000008fea94976dbb1ea004e204e24dd00d8a836fbd8fbaf08656556346de10bb39afd7d4cd8bb568dd8e9718ed69e6e7e1156db3006d656047cea7089fe1ad24fbc0a7f4d47117e03a0a8c15a16ceeb6fa81eff776f82bc0265ca4a5793ee358baed9ef589b95"], 0x24}}, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(r5, 0x10e, 0x3, &(0x7f0000000340)=0x8, 0x4)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000240)={'wlan0\x00'})
syz_usb_ep_write(r2, 0x82, 0x5, &(0x7f0000000280)='hello')
r6 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
ioctl$EVIOCSMASK(r6, 0x40104593, &(0x7f0000000180)={0x1, 0x68, &(0x7f0000000100)="f13b8716bcfdcca0c8af3538908cd9249f533b44e0242eab855e96f55b9ffada39f62d8b23dd050e4bd47c6e12e3bd98840d9ae70008ed417a94f6c6b2fccb3a3bcb625653302c9301e4fe75a70cdee4c457f97a50895e6577df2340fb458bd55be572ac782da8b5"})

413.640007ms ago: executing program 1 (id=2406):
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r0, 0x8913, &(0x7f0000000900)={'bridge0\x00', @broadcast})
socket$nl_route(0x10, 0x3, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x16}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001100)={{}, &(0x7f0000001080), &(0x7f00000010c0)='%pI4   \x00'}, 0x20)
r4 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8)
close(r4)
r5 = inotify_init1(0x0)
fcntl$setstatus(r4, 0x4, 0x2c00)
ioctl$int_in(r5, 0x5452, &(0x7f0000000300))
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r6}, &(0x7f0000000180), &(0x7f00000004c0)=r7}, 0x20)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r8}, 0x10)
copy_file_range(r8, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000100)='net/if_inet6\x00')

252.48435ms ago: executing program 3 (id=2407):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x18, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b00000000001b000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000006ffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0x0, &(0x7f0000000140)={0x88, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c)
sendto$inet6(r1, 0x0, 0x0, 0x4098000, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c)
setsockopt$sock_int(r1, 0x1, 0x2a, &(0x7f0000000040), 0x4)
recvmmsg(r1, &(0x7f0000008880), 0x45b, 0x44000102, 0x0)
sendto$inet6(r1, &(0x7f0000000000)='2', 0x1, 0x0, 0x0, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)

192.716705ms ago: executing program 2 (id=2408):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000ffff0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000080)='task_rename\x00', r1}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0x6, 0x5}, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r2, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20)

167.670476ms ago: executing program 2 (id=2409):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
pipe(&(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
write$binfmt_aout(r3, 0x0, 0x6a)
splice(r0, 0x0, r3, 0x0, 0x8ec3, 0x0)
readv(r2, &(0x7f0000000080)=[{&(0x7f00000078c0)=""/110, 0x6e}], 0x1)
write$binfmt_elf64(r1, 0x0, 0x0)
close(r3)

111.063291ms ago: executing program 3 (id=2410):
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0)
ioctl$EXT4_IOC_SWAP_BOOT(r0, 0xc0f85403)

61.916816ms ago: executing program 3 (id=2411):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000280)=ANY=[@ANYRES8=0x0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x90)
syz_emit_ethernet(0xaa, &(0x7f0000000380)={@link_local, @dev, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x70, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, "508359", 0x0, 0x0, 0x0, @private1, @empty, [@hopopts={0x3a, 0x6, '\x00', [@calipso={0x7, 0x30, {0x0, 0xa, 0x0, 0x0, [0x8, 0x81, 0x5, 0x8, 0xfffffffffffffffc]}}]}]}}}}}}}, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x20001400)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x10, r1, 0x0)
write$UHID_INPUT(r1, &(0x7f0000001940)={0x8, {"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", 0x1000}}, 0x1006)
ftruncate(r1, 0xc17a)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newsa={0x158, 0x10, 0x1, 0x0, 0x0, {{@in6=@remote, @in6=@loopback}, {@in=@empty, 0x0, 0x32}, @in6=@loopback, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @replay_esn_val={0x20, 0x17, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0]}}]}, 0x158}}, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000001c0), 0x4)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000440)={'syztnl1\x00', &(0x7f0000000540)={'syztnl2\x00', <r2=>0x0, 0x2f, 0x81, 0xa, 0x7, 0x60, @empty, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7800, 0x8, 0x4, 0x8}})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000005c0)=@bridge_delneigh={0x2c, 0x1d, 0x4, 0x70bd2a, 0x25dfdbfe, {0x7, 0x0, 0x0, r2, 0x4, 0x80, 0x9}, [@NDA_VNI={0x8, 0x7, 0x4}, @NDA_SRC_VNI={0x8, 0xb, 0x7}]}, 0x28}}, 0x0)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r4 = dup(r3)
ioctl$TIOCL_SETSEL(r4, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0x0, 0x0, 0x7ff, 0x100}})

61.508735ms ago: executing program 3 (id=2412):
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, <r1=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f}}, 0x50)
syz_fuse_handle_req(r0, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0, 0x0)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r4}, 0x10)
syz_mount_image$fuse(&(0x7f0000002040), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
close(r2)
syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f00000004c0)={&(0x7f0000000bc0)={0x50}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

58.711836ms ago: executing program 1 (id=2413):
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000300)={{0xffffffffffffffff, <r0=>0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000180)='%pS    \x00'}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r0}, 0x4)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1a, 0x18, &(0x7f0000000940)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000140)='file_check_and_advance_wb_err\x00', r1}, 0x10)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r2 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'xfrm0\x00'})
r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$UI_DEV_SETUP(r3, 0x405c5503, &(0x7f0000000280)={{}, 'syz1\x00', 0x10})
ioctl$UI_DEV_CREATE(r3, 0x5501)
r4 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0)
ioctl$EVIOCSFF(r4, 0x40044581, &(0x7f0000000180)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @cond=[{0x0, 0x0, 0x0, 0x0, 0x5}, {0x0, 0xd53}]})

15.758009ms ago: executing program 2 (id=2415):
ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, 0x0)
creat(&(0x7f0000000340)='./file0\x00', 0x0)
r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301)
ioctl$USBDEVFS_CLEAR_HALT(r0, 0x80045518, &(0x7f0000000340))

15.428779ms ago: executing program 4 (id=2416):
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1810714, &(0x7f00000000c0)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x200000}}, {@user_xattr}, {@grpjquota_path}, {@resuid}, {@prjquota}, {@usrjquota}, {@usrjquota}, {@min_batch_time={'min_batch_time', 0x3d, 0x409e}}, {@nodiscard}]}, 0xff, 0x468, &(0x7f0000000780)="$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")
open(&(0x7f0000000180)='./bus\x00', 0x14d27e, 0x0)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
r0 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0)

0s ago: executing program 2 (id=2417):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES16], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220f000000a3013500cc"], 0x0}, 0x0)

kernel console output (not intermixed with test programs):

r 109 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  211.945607][ T2906] Buffer I/O error on dev loop3p2, logical block 9, async page read
[  211.952468][ T2746] Buffer I/O error on dev loop3p3, logical block 9, async page read
[  211.962425][ T2906] blk_update_request: I/O error, dev loop3, sector 60 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  211.968146][  T313] Buffer I/O error on dev loop3p1, logical block 9, async page read
[  211.979186][ T2906] Buffer I/O error on dev loop3p2, logical block 10, async page read
[  211.987101][ T2746] Buffer I/O error on dev loop3p3, logical block 10, async page read
[  211.994892][ T2906] Buffer I/O error on dev loop3p2, logical block 11, async page read
[  212.002650][  T313] Buffer I/O error on dev loop3p1, logical block 10, async page read
[  212.131444][ T6345] incfs: Can't find or create .index dir in ./file0
[  212.138119][ T6345] incfs: mount failed -14
[  212.258271][ T6364] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1936'.
[  212.267269][ T6364] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1936'.
[  212.276133][ T6364] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1936'.
[  212.295835][   T15] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  212.306944][   T15] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  212.318198][   T15] usb 5-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00
[  212.327291][   T15] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  212.336732][   T15] usb 5-1: config 0 descriptor??
[  212.343147][ T6368] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue
[  212.352119][ T6368] ext4 filesystem being mounted at /16/mnt supports timestamps until 2038 (0x7fffffff)
[  212.638973][ T6372] F2FS-fs (loop1): Unrecognized mount option "��������" or missing value
[  212.655623][ T1178] usb 4-1: new high-speed USB device number 27 using dummy_hcd
[  212.816570][   T15] lg-g15 0003:046D:C222.003C: unknown main item tag 0x0
[  212.823513][   T15] lg-g15 0003:046D:C222.003C: unknown main item tag 0x0
[  212.830442][   T15] lg-g15 0003:046D:C222.003C: unknown main item tag 0x0
[  212.837514][   T15] lg-g15 0003:046D:C222.003C: unknown main item tag 0x0
[  212.845796][  T317] usb 1-1: new high-speed USB device number 27 using dummy_hcd
[  213.023644][   T15] lg-g15 0003:046D:C222.003C: hidraw0: USB HID v0.00 Device [HID 046d:c222] on usb-dummy_hcd.4-1/input0
[  213.035622][   T15] usb 5-1: USB disconnect, device number 27
[  213.065572][ T1178] usb 4-1: Using ep0 maxpacket: 8
[  213.105559][  T317] usb 1-1: Using ep0 maxpacket: 8
[  213.185647][ T1178] usb 4-1: config 37 has an invalid interface number: 79 but max is 0
[  213.193933][ T1178] usb 4-1: config 37 has an invalid interface number: 6 but max is 0
[  213.201842][ T1178] usb 4-1: config 37 has an invalid descriptor of length 1, skipping remainder of the config
[  213.211850][ T1178] usb 4-1: config 37 has 2 interfaces, different from the descriptor's value: 1
[  213.220963][ T1178] usb 4-1: config 37 has no interface number 0
[  213.227014][ T1178] usb 4-1: config 37 has no interface number 1
[  213.232944][ T1178] usb 4-1: config 37 interface 79 altsetting 48 has 0 endpoint descriptors, different from the interface descriptor's value: 10
[  213.246270][ T1178] usb 4-1: too many endpoints for config 37 interface 6 altsetting 2: 204, using maximum allowed: 30
[  213.254377][  T317] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[  213.263049][ T1178] usb 4-1: config 37 interface 6 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 204
[  213.266660][  T317] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  213.280288][ T1178] usb 4-1: config 37 interface 79 has no altsetting 0
[  213.287837][  T317] usb 1-1: config 0 descriptor??
[  213.295777][ T1178] usb 4-1: config 37 interface 6 has no altsetting 0
[  213.315666][   T15] Bluetooth: hci0: command 0x1003 tx timeout
[  213.321543][  T966] Bluetooth: hci0: sending frame failed (-49)
[  213.455639][ T1178] usb 4-1: New USB device found, idVendor=0664, idProduct=0309, bcdDevice=65.5c
[  213.464542][ T1178] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  213.472310][ T1178] usb 4-1: Product: ࠓ
[  213.476338][ T1178] usb 4-1: Manufacturer: చ
[  213.480691][ T1178] usb 4-1: SerialNumber: syz
[  213.555824][ T3163] usb 2-1: new high-speed USB device number 36 using dummy_hcd
[  213.595708][  T317] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32
[  213.605429][  T317] asix 1-1:0.0 (unnamed net_device) (uninitialized): Error reading PHYID register: ffffffe0
[  213.655589][  T317] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32
[  213.886794][ T1178] usb 4-1: USB disconnect, device number 27
[  213.935644][ T3163] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  213.946369][ T3163] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  213.955960][ T3163] usb 2-1: New USB device found, idVendor=0925, idProduct=0005, bcdDevice= 0.00
[  213.964703][ T3163] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  213.973385][ T3163] usb 2-1: config 0 descriptor??
[  214.505908][ T6378] udc-core: couldn't find an available UDC or it's busy
[  214.512856][ T6378] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  214.535662][  T317] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  214.564137][  T317] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write Medium Mode mode to 0x0336: ffffffb9
[  214.587500][  T317] asix: probe of 1-1:0.0 failed with error -71
[  214.628633][  T317] usb 1-1: USB disconnect, device number 27
[  214.682790][ T6410] serio: Serial port ptm0
[  214.812014][   T24] kauditd_printk_skb: 103 callbacks suppressed
[  214.812025][   T24] audit: type=1326 audit(2000000841.106:1166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6399 comm="syz.0.1947" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2fd24eebd9 code=0x0
[  214.847320][ T3163] usbhid 2-1:0.0: can't add hid device: -71
[  214.853271][ T3163] usbhid: probe of 2-1:0.0 failed with error -71
[  214.860529][ T3163] usb 2-1: USB disconnect, device number 36
[  215.405558][ T1178] Bluetooth: hci0: command 0x1001 tx timeout
[  215.411391][  T966] Bluetooth: hci0: sending frame failed (-49)
[  215.624351][ T6424] F2FS-fs (loop1): Unrecognized mount option "��������" or missing value
[  215.646360][ T6430] fuse: Unknown parameter '0x0000000000000007'
[  215.825629][ T3163] usb 1-1: new high-speed USB device number 28 using dummy_hcd
[  215.846231][ T6446] EXT4-fs error (device loop3): ext4_ext_check_inode:500: inode #11: comm syz.3.1959: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512)
[  215.865843][ T6446] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.1959: couldn't read orphan inode 11 (err -117)
[  215.877987][ T6446] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue
[  216.146293][ T6446] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:476: comm syz.3.1959: Invalid block bitmap block 0 in block_group 0
[  216.244469][ T6446] Quota error (device loop3): write_blk: dquota write failed
[  216.254350][ T6446] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota
[  216.265630][ T3163] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  216.397549][ T6457] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1961'.
[  216.602885][ T3163] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2
[  216.611634][ T6446] EXT4-fs error (device loop3): ext4_acquire_dquot:6219: comm syz.3.1959: Failed to acquire dquot type 0
[  216.622657][ T3163] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  216.845632][ T3163] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  216.855961][ T3163] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  216.863814][ T3163] usb 1-1: Product: syz
[  216.868198][ T3163] usb 1-1: Manufacturer: syz
[  216.872735][ T3163] usb 1-1: SerialNumber: syz
[  216.927234][ T3163] cdc_ncm 1-1:1.0: bind() failure
[  217.212436][ T6474] device veth1_macvtap left promiscuous mode
[  217.218310][ T6474] device macsec0 entered promiscuous mode
[  217.225071][ T6474] device veth1_macvtap entered promiscuous mode
[  217.231294][ T6474] device macsec0 left promiscuous mode
[  217.236992][  T317] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  217.254438][ T6476] serio: Serial port ptm0
[  217.435562][    T5] usb 2-1: new high-speed USB device number 37 using dummy_hcd
[  217.475597][   T15] Bluetooth: hci0: command 0x1009 tx timeout
[  217.637104][  T313] print_req_error: 233 callbacks suppressed
[  217.637120][  T313] blk_update_request: I/O error, dev loop3, sector 108 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0
[  217.656687][ T2906] blk_update_request: I/O error, dev loop3, sector 58 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0
[  217.664983][  T313] blk_update_request: I/O error, dev loop3, sector 108 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  217.669528][ T2746] blk_update_request: I/O error, dev loop3, sector 1008 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0
[  217.690184][  T313] buffer_io_error: 206 callbacks suppressed
[  217.690196][  T313] Buffer I/O error on dev loop3p1, logical block 8, async page read
[  217.691929][ T2906] blk_update_request: I/O error, dev loop3, sector 58 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  217.714564][  T313] blk_update_request: I/O error, dev loop3, sector 109 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  217.715206][ T2746] blk_update_request: I/O error, dev loop3, sector 1008 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  217.736418][  T313] Buffer I/O error on dev loop3p1, logical block 9, async page read
[  217.736471][  T313] blk_update_request: I/O error, dev loop3, sector 110 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  217.744854][ T2906] Buffer I/O error on dev loop3p2, logical block 8, async page read
[  217.755252][  T313] Buffer I/O error on dev loop3p1, logical block 10, async page read
[  217.763055][ T2746] Buffer I/O error on dev loop3p3, logical block 8, async page read
[  217.770949][  T313] blk_update_request: I/O error, dev loop3, sector 111 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  217.778818][ T2906] blk_update_request: I/O error, dev loop3, sector 59 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  217.789915][  T313] Buffer I/O error on dev loop3p1, logical block 11, async page read
[  217.800681][ T2746] Buffer I/O error on dev loop3p3, logical block 9, async page read
[  217.808320][  T313] Buffer I/O error on dev loop3p1, logical block 12, async page read
[  217.816144][ T2746] Buffer I/O error on dev loop3p3, logical block 10, async page read
[  217.823939][  T313] Buffer I/O error on dev loop3p1, logical block 13, async page read
[  217.839813][    T5] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  217.850678][    T5] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  217.860507][    T5] usb 2-1: New USB device found, idVendor=0925, idProduct=0005, bcdDevice= 0.00
[  217.870464][    T5] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  217.879836][    T5] usb 2-1: config 0 descriptor??
[  218.233683][ T6489] xt_CT: No such helper "netbios-ns"
[  218.424622][ T6493] xt_TCPMSS: Only works on TCP SYN packets
[  218.525329][ T6499] tipc: Failed to remove local publication {66,1,1}/4141282432
[  218.533112][ T6499] tipc: Failed to remove local publication {66,1,1}/4141282432
[  218.687638][    T5] usbhid 2-1:0.0: can't add hid device: -71
[  218.694312][    T5] usbhid: probe of 2-1:0.0 failed with error -71
[  218.733308][    T5] usb 2-1: USB disconnect, device number 37
[  218.978337][ T6506] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm syz.4.1974: bg 0: block 5: invalid block bitmap
[  218.990741][ T6506] EXT4-fs error (device loop4) in ext4_mb_clear_bb:5646: Corrupt filesystem
[  218.999754][ T6506] EXT4-fs error (device loop4): ext4_free_branches:1026: inode #11: comm syz.4.1974: invalid indirect mapped block 3 (level 2)
[  219.013051][ T6506] EXT4-fs (loop4): 1 orphan inode deleted
[  219.018621][ T6506] EXT4-fs (loop4): 1 truncate cleaned up
[  219.024095][ T6506] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue
[  219.043360][   T24] audit: type=1326 audit(2000000845.336:1167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6505 comm="syz.4.1974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdda6aa9bd9 code=0x7ffc0000
[  219.066621][   T24] audit: type=1326 audit(2000000845.336:1168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6505 comm="syz.4.1974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdda6aa9bd9 code=0x7ffc0000
[  219.090015][   T24] audit: type=1326 audit(2000000845.336:1169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6505 comm="syz.4.1974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7fdda6aa9bd9 code=0x7ffc0000
[  219.113175][   T24] audit: type=1326 audit(2000000845.346:1170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6505 comm="syz.4.1974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdda6aa9bd9 code=0x7ffc0000
[  219.136432][   T24] audit: type=1326 audit(2000000845.346:1171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6505 comm="syz.4.1974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdda6aa9bd9 code=0x7ffc0000
[  219.159671][   T24] audit: type=1326 audit(2000000845.346:1172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6505 comm="syz.4.1974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdda6aa9bd9 code=0x7ffc0000
[  219.182823][   T24] audit: type=1326 audit(2000000845.346:1173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6505 comm="syz.4.1974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fdda6aa9bd9 code=0x7ffc0000
[  219.225859][ T6512] tc_dump_action: action bad kind
[  219.233302][ T6512] syz.4.1975[6512] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  219.233350][ T6512] syz.4.1975[6512] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  219.247611][ T6512] syz.4.1975[6512] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  219.259275][ T6512] syz.4.1975[6512] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  219.280205][ T6512] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended
[  219.280744][ T6516] binder: 6515:6516 ioctl c018620c 20000000 returned -22
[  219.301805][ T6512] EXT4-fs (loop4): orphan cleanup on readonly fs
[  219.313859][ T6512] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #17: comm syz.4.1975: iget: bad i_size value: -6917529027641081756
[  219.327513][ T6512] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.1975: couldn't read orphan inode 17 (err -117)
[  219.339743][ T6512] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue
[  219.423904][ T6227] usb 1-1: USB disconnect, device number 28
[  219.430740][ T6529] EXT4-fs (loop3): Mount option "nouser_xattr" will be removed by 3.5
[  219.430740][ T6529] Contact linux-ext4@vger.kernel.org if you think we should keep it.
[  219.430740][ T6529] 
[  219.470578][ T6529] EXT4-fs error (device loop3) in ext4_do_update_inode:5275: error 27
[  219.485332][ T6529] EXT4-fs (loop3): Remounting filesystem read-only
[  219.497510][ T6529] EXT4-fs error (device loop3): ext4_dirty_inode:6079: inode #3: comm syz.3.1982: mark_inode_dirty error
[  219.510197][ T6529] EXT4-fs error (device loop3) in ext4_do_update_inode:5275: error 27
[  219.518472][ T6529] EXT4-fs error (device loop3): __ext4_ext_dirty:182: inode #3: comm syz.3.1982: mark_inode_dirty error
[  219.529958][ T6529] EXT4-fs error (device loop3): ext4_acquire_dquot:6219: comm syz.3.1982: Failed to acquire dquot type 0
[  219.541511][ T6529] EXT4-fs (loop3): 1 truncate cleaned up
[  219.547151][ T6529] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,nouser_xattr,
[  219.557684][ T6529] ext4 filesystem being mounted at /199/file1 supports timestamps until 2038 (0x7fffffff)
[  219.605043][ T6539] EXT4-fs error (device loop0): ext4_validate_block_bitmap:429: comm syz.0.1985: bg 0: block 5: invalid block bitmap
[  219.617585][ T6539] EXT4-fs error (device loop0) in ext4_mb_clear_bb:5646: Corrupt filesystem
[  219.625409][ T6529] EXT4-fs error (device loop3): ext4_find_dest_de:2076: inode #12: block 13: comm syz.3.1982: bad entry in directory: inode out of bounds - offset=24, inode=33554445, rec_len=16, size=4096 fake=0
[  219.626271][ T6539] EXT4-fs error (device loop0): ext4_free_branches:1026: inode #11: comm syz.0.1985: invalid indirect mapped block 3 (level 2)
[  219.645744][ T6529] EXT4-fs (loop3): Remounting filesystem read-only
[  219.663893][ T6539] EXT4-fs (loop0): 1 orphan inode deleted
[  219.675052][ T6539] EXT4-fs (loop0): 1 truncate cleaned up
[  219.680759][ T6539] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue
[  219.735603][  T317] usb 2-1: new high-speed USB device number 38 using dummy_hcd
[  220.055694][   T15] usb 1-1: new high-speed USB device number 29 using dummy_hcd
[  220.125694][  T317] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  220.136411][  T317] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  220.145200][  T317] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  220.153688][  T317] usb 2-1: config 0 descriptor??
[  220.174515][ T6557] binder: 6556:6557 ioctl c018620c 20000000 returned -22
[  220.309158][ T6559] incfs_lookup_dentry err:-14
[  220.313718][ T6559] incfs: Can't find or create .index dir in ./file0
[  220.320277][ T6559] incfs: mount failed -14
[  220.396255][ T6522] udc-core: couldn't find an available UDC or it's busy
[  220.403025][ T6522] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  220.410570][ T6522] udc-core: couldn't find an available UDC or it's busy
[  220.417367][ T6522] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  220.424724][ T6522] udc-core: couldn't find an available UDC or it's busy
[  220.431658][ T6522] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  220.439192][ T6522] udc-core: couldn't find an available UDC or it's busy
[  220.446081][   T15] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  220.446148][ T6522] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  220.456984][   T15] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  220.464591][ T6522] udc-core: couldn't find an available UDC or it's busy
[  220.473614][   T15] usb 1-1: New USB device found, idVendor=0925, idProduct=0005, bcdDevice= 0.00
[  220.480947][ T6522] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  220.489412][   T15] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  220.504524][ T6227] usb 5-1: new high-speed USB device number 28 using dummy_hcd
[  220.512746][   T15] usb 1-1: config 0 descriptor??
[  220.608749][ T6572] EXT4-fs (loop1): Mount option "nouser_xattr" will be removed by 3.5
[  220.608749][ T6572] Contact linux-ext4@vger.kernel.org if you think we should keep it.
[  220.608749][ T6572] 
[  220.626926][  T317] usbhid 2-1:0.0: can't add hid device: -71
[  220.632674][  T317] usbhid: probe of 2-1:0.0 failed with error -71
[  220.637874][ T6572] EXT4-fs error (device loop1) in ext4_do_update_inode:5275: error 27
[  220.638857][   T20] usb 4-1: new high-speed USB device number 28 using dummy_hcd
[  220.647294][ T6572] EXT4-fs (loop1): Remounting filesystem read-only
[  220.654877][  T317] usb 2-1: USB disconnect, device number 38
[  220.663107][ T6572] EXT4-fs error (device loop1): ext4_dirty_inode:6079: inode #3: comm syz.1.1996: mark_inode_dirty error
[  220.677822][ T6572] EXT4-fs error (device loop1) in ext4_do_update_inode:5275: error 27
[  220.686065][ T6572] EXT4-fs error (device loop1): __ext4_ext_dirty:182: inode #3: comm syz.1.1996: mark_inode_dirty error
[  220.697394][ T6572] __quota_error: 17 callbacks suppressed
[  220.697402][ T6572] Quota error (device loop1): write_blk: dquota write failed
[  220.710188][ T6572] Quota error (device loop1): qtree_write_dquot: Error -27 occurred while creating quota
[  220.719852][ T6572] EXT4-fs error (device loop1): ext4_acquire_dquot:6219: comm syz.1.1996: Failed to acquire dquot type 0
[  220.731186][ T6572] EXT4-fs (loop1): 1 truncate cleaned up
[  220.736660][ T6572] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,nouser_xattr,
[  220.747062][ T6572] ext4 filesystem being mounted at /44/file1 supports timestamps until 2038 (0x7fffffff)
[  220.823663][ T6572] EXT4-fs error (device loop1): ext4_find_dest_de:2076: inode #12: block 13: comm syz.1.1996: bad entry in directory: inode out of bounds - offset=24, inode=33554445, rec_len=16, size=4096 fake=0
[  220.842921][ T6572] EXT4-fs (loop1): Remounting filesystem read-only
[  220.875641][ T6227] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  220.885970][ T6227] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2
[  220.894661][ T6227] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  220.981014][ T6578] bridge0: port 1(bridge_slave_0) entered blocking state
[  220.988156][ T6578] bridge0: port 1(bridge_slave_0) entered disabled state
[  220.990359][ T6580] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm syz.1.1997: bg 0: block 5: invalid block bitmap
[  220.999673][ T6578] device bridge_slave_0 entered promiscuous mode
[  221.007948][ T6580] EXT4-fs error (device loop1) in ext4_mb_clear_bb:5646: Corrupt filesystem
[  221.022201][ T6580] EXT4-fs error (device loop1): ext4_free_branches:1026: inode #11: comm syz.1.1997: invalid indirect mapped block 3 (level 2)
[  221.023293][ T6578] bridge0: port 2(bridge_slave_1) entered blocking state
[  221.035651][ T6580] EXT4-fs (loop1): 1 orphan inode deleted
[  221.042778][ T6578] bridge0: port 2(bridge_slave_1) entered disabled state
[  221.047804][   T15] usbhid 1-1:0.0: can't add hid device: -71
[  221.055133][ T6578] device bridge_slave_1 entered promiscuous mode
[  221.060344][   T15] usbhid: probe of 1-1:0.0 failed with error -71
[  221.066717][   T20] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  221.072568][ T6227] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  221.092192][ T6580] EXT4-fs (loop1): 1 truncate cleaned up
[  221.092271][   T20] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  221.098812][   T15] usb 1-1: USB disconnect, device number 29
[  221.107419][ T6580] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue
[  221.112913][ T6227] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  221.130224][ T6227] usb 5-1: Product: syz
[  221.134685][ T6227] usb 5-1: Manufacturer: syz
[  221.139152][ T6227] usb 5-1: SerialNumber: syz
[  221.148775][   T20] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  221.159207][   T24] audit: type=1326 audit(2000000847.456:1189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6579 comm="syz.1.1997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53a0f8cbd9 code=0x7ffc0000
[  221.159821][   T20] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  221.183055][ T6227] cdc_ncm 5-1:1.0: bind() failure
[  221.196524][   T24] audit: type=1326 audit(2000000847.456:1190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6579 comm="syz.1.1997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f53a0f8cbd9 code=0x7ffc0000
[  221.203600][ T6578] bridge0: port 2(bridge_slave_1) entered blocking state
[  221.219708][   T24] audit: type=1326 audit(2000000847.456:1191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6579 comm="syz.1.1997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53a0f8cbd9 code=0x7ffc0000
[  221.226456][ T6578] bridge0: port 2(bridge_slave_1) entered forwarding state
[  221.249761][   T24] audit: type=1326 audit(2000000847.456:1192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6579 comm="syz.1.1997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f53a0f8cbd9 code=0x7ffc0000
[  221.256733][ T6578] bridge0: port 1(bridge_slave_0) entered blocking state
[  221.280242][   T24] audit: type=1326 audit(2000000847.456:1193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6579 comm="syz.1.1997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53a0f8cbd9 code=0x7ffc0000
[  221.286699][ T6578] bridge0: port 1(bridge_slave_0) entered forwarding state
[  221.290177][   T20] usb 4-1: config 0 descriptor??
[  221.310128][   T24] audit: type=1326 audit(2000000847.456:1194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6579 comm="syz.1.1997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f53a0f8cbd9 code=0x7ffc0000
[  221.345005][   T24] audit: type=1326 audit(2000000847.456:1195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6579 comm="syz.1.1997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53a0f8cbd9 code=0x7ffc0000
[  221.368293][  T317] bridge0: port 1(bridge_slave_0) entered disabled state
[  221.368601][   T24] audit: type=1326 audit(2000000847.456:1196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6579 comm="syz.1.1997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f53a0f8cbd9 code=0x7ffc0000
[  221.399795][  T317] bridge0: port 2(bridge_slave_1) entered disabled state
[  221.421638][  T317] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  221.428986][  T317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  221.446245][ T3163] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  221.454210][ T3163] bridge0: port 1(bridge_slave_0) entered blocking state
[  221.461066][ T3163] bridge0: port 1(bridge_slave_0) entered forwarding state
[  221.469528][ T3163] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  221.477707][ T3163] bridge0: port 2(bridge_slave_1) entered blocking state
[  221.484546][ T3163] bridge0: port 2(bridge_slave_1) entered forwarding state
[  221.537147][ T6596] binder: 6595:6596 ioctl c018620c 20000000 returned -22
[  221.568256][  T734] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  221.577021][  T734] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  221.592109][ T6578] device veth0_vlan entered promiscuous mode
[  221.599436][  T317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  221.608129][  T317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  221.615930][  T317] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  221.623919][  T317] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  221.688060][  T317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  221.703125][ T6578] device veth1_macvtap entered promiscuous mode
[  221.833531][ T1178] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  221.845658][ T6227] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  221.881196][ T6604] binder: 6603:6604 ioctl c0306201 200001c0 returned -14
[  222.216223][   T48] device bridge_slave_1 left promiscuous mode
[  222.222221][   T48] bridge0: port 2(bridge_slave_1) entered disabled state
[  222.229486][   T48] device bridge_slave_0 left promiscuous mode
[  222.235457][   T48] bridge0: port 1(bridge_slave_0) entered disabled state
[  222.243037][   T48] device veth1_macvtap left promiscuous mode
[  222.249000][   T48] device veth0_vlan left promiscuous mode
[  222.579604][ T6614] incfs_lookup_dentry err:-14
[  222.590736][ T6614] incfs: Can't find or create .index dir in ./file0
[  222.598085][ T6614] incfs: mount failed -14
[  222.655762][  T734] usb 2-1: new high-speed USB device number 39 using dummy_hcd
[  222.795619][   T20] uclogic 0003:256C:006D.003D: failed retrieving Huion firmware version: -71
[  222.806087][   T20] uclogic 0003:256C:006D.003D: failed probing parameters: -71
[  222.813587][   T20] uclogic: probe of 0003:256C:006D.003D failed with error -71
[  222.827133][   T20] usb 4-1: USB disconnect, device number 28
[  222.925544][  T734] usb 2-1: device descriptor read/64, error -71
[  223.106143][ T6617] F2FS-fs (loop0): QUOTA feature is enabled, so ignore qf_name
[  223.115025][ T6617] F2FS-fs (loop0): invalid crc value
[  223.121617][ T6617] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (15359802341028777995, 275811881701387)
[  223.141435][ T6617] F2FS-fs (loop0): Mounted with checkpoint version = 753bd00b
[  223.145597][ T6227] usb 3-1: new high-speed USB device number 28 using dummy_hcd
[  223.251631][ T6627] bridge0: port 1(bridge_slave_0) entered blocking state
[  223.258610][ T6627] bridge0: port 1(bridge_slave_0) entered disabled state
[  223.266125][ T6627] device bridge_slave_0 entered promiscuous mode
[  223.276905][ T6627] bridge0: port 2(bridge_slave_1) entered blocking state
[  223.283875][ T6627] bridge0: port 2(bridge_slave_1) entered disabled state
[  223.291397][ T6627] device bridge_slave_1 entered promiscuous mode
[  223.341231][ T6627] bridge0: port 2(bridge_slave_1) entered blocking state
[  223.348122][ T6627] bridge0: port 2(bridge_slave_1) entered forwarding state
[  223.355301][ T6627] bridge0: port 1(bridge_slave_0) entered blocking state
[  223.362084][ T6627] bridge0: port 1(bridge_slave_0) entered forwarding state
[  223.369651][  T734] usb 2-1: device descriptor read/64, error -71
[  223.393612][   T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  223.395833][ T6227] usb 3-1: Using ep0 maxpacket: 16
[  223.405838][   T20] bridge0: port 1(bridge_slave_0) entered disabled state
[  223.413211][   T20] bridge0: port 2(bridge_slave_1) entered disabled state
[  223.415698][ T6632] EXT4-fs error (device loop0): ext4_validate_block_bitmap:429: comm syz.0.2008: bg 0: block 5: invalid block bitmap
[  223.432742][ T6632] EXT4-fs error (device loop0) in ext4_mb_clear_bb:5646: Corrupt filesystem
[  223.441571][ T6632] EXT4-fs error (device loop0): ext4_free_branches:1026: inode #11: comm syz.0.2008: invalid indirect mapped block 3 (level 2)
[  223.454796][ T6632] EXT4-fs (loop0): 1 orphan inode deleted
[  223.460568][ T6632] EXT4-fs (loop0): 1 truncate cleaned up
[  223.466552][ T6632] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue
[  223.490381][  T317] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  223.498821][  T317] bridge0: port 1(bridge_slave_0) entered blocking state
[  223.505879][  T317] bridge0: port 1(bridge_slave_0) entered forwarding state
[  223.513541][  T317] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  223.521950][  T317] bridge0: port 2(bridge_slave_1) entered blocking state
[  223.528806][  T317] bridge0: port 2(bridge_slave_1) entered forwarding state
[  223.546851][   T15] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  223.555271][   T15] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  223.563199][   T15] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  223.578621][  T317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  223.589236][ T6627] device veth0_vlan entered promiscuous mode
[  223.595333][  T317] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  223.602715][  T317] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  223.614055][ T6627] device veth1_macvtap entered promiscuous mode
[  223.621055][   T15] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  223.635449][  T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  223.645671][  T734] usb 2-1: new high-speed USB device number 40 using dummy_hcd
[  223.645864][  T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  223.665705][ T6227] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  223.674564][ T6227] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  223.682700][ T6227] usb 3-1: Product: syz
[  223.687156][ T6227] usb 3-1: Manufacturer: syz
[  223.692449][ T6227] usb 3-1: config 0 descriptor??
[  223.701081][  T313] print_req_error: 331 callbacks suppressed
[  223.701095][  T313] blk_update_request: I/O error, dev loop3, sector 108 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0
[  223.704035][ T2746] blk_update_request: I/O error, dev loop3, sector 58 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0
[  223.707973][  T313] blk_update_request: I/O error, dev loop3, sector 108 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  223.729793][ T2746] blk_update_request: I/O error, dev loop3, sector 58 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  223.742640][  T310] blk_update_request: I/O error, dev loop3, sector 1008 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0
[  223.763011][  T310] blk_update_request: I/O error, dev loop3, sector 1008 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  223.763542][ T2746] buffer_io_error: 293 callbacks suppressed
[  223.763552][ T2746] Buffer I/O error on dev loop3p2, logical block 8, async page read
[  223.774368][  T310] Buffer I/O error on dev loop3p3, logical block 8, async page read
[  223.780732][  T313] Buffer I/O error on dev loop3p1, logical block 8, async page read
[  223.788163][  T310] blk_update_request: I/O error, dev loop3, sector 1009 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  223.795309][ T2746] blk_update_request: I/O error, dev loop3, sector 59 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  223.803437][  T310] Buffer I/O error on dev loop3p3, logical block 9, async page read
[  223.814626][  T313] blk_update_request: I/O error, dev loop3, sector 109 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  223.828600][  T310] blk_update_request: I/O error, dev loop3, sector 1010 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  223.834238][ T2746] Buffer I/O error on dev loop3p2, logical block 9, async page read
[  223.844468][  T310] Buffer I/O error on dev loop3p3, logical block 10, async page read
[  223.855896][  T313] Buffer I/O error on dev loop3p1, logical block 9, async page read
[  223.862942][  T310] Buffer I/O error on dev loop3p3, logical block 11, async page read
[  223.870471][  T313] Buffer I/O error on dev loop3p1, logical block 10, async page read
[  223.878789][  T310] Buffer I/O error on dev loop3p3, logical block 12, async page read
[  223.906637][ T1389] usb 5-1: USB disconnect, device number 28
[  223.945687][  T734] usb 2-1: device descriptor read/64, error -71
[  223.966222][   T48] device veth1_macvtap left promiscuous mode
[  223.972102][   T48] device veth0_vlan left promiscuous mode
[  223.977755][ T6227] r8152 3-1:0.0: Unknown version 0x0000
[  224.095632][ T1178] usb 4-1: new high-speed USB device number 29 using dummy_hcd
[  224.179918][   T20] usb 3-1: USB disconnect, device number 28
[  224.255642][ T1389] usb 5-1: new high-speed USB device number 29 using dummy_hcd
[  224.365558][  T734] usb 2-1: device descriptor read/64, error -71
[  224.412380][ T6646] binder: 6645:6646 ioctl c018620c 20000000 returned -22
[  224.455670][ T1178] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  224.466350][ T1178] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  224.487029][  T734] usb usb2-port1: attempt power cycle
[  224.495647][ T1389] usb 5-1: Using ep0 maxpacket: 32
[  224.545608][ T1178] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  224.554503][ T1178] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  224.562387][ T1178] usb 4-1: SerialNumber: syz
[  224.615679][ T1389] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  224.627539][ T1389] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  224.638338][ T1389] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 2304, setting to 1024
[  224.649308][ T1389] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024
[  224.659120][ T1389] usb 5-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  225.062351][ T1389] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  225.076444][ T1389] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  225.076523][  T734] usb 2-1: new high-speed USB device number 41 using dummy_hcd
[  225.092939][ T1389] usb 5-1: Product: syz
[  225.097335][ T1389] usb 5-1: Manufacturer: syz
[  225.101772][ T1389] usb 5-1: SerialNumber: syz
[  225.295660][  T734] usb 2-1: device descriptor read/8, error -71
[  225.450666][ T6648] F2FS-fs (loop0): Found nat_bits in checkpoint
[  225.481291][ T6648] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  225.515575][  T734] usb 2-1: device descriptor read/8, error -71
[  225.518916][ T6661] incfs_lookup_dentry err:-14
[  225.539487][ T6644] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=30768 sclass=netlink_route_socket pid=6644 comm=syz.4.2010
[  225.553416][ T6661] incfs: Can't find or create .index dir in ./file0
[  225.561177][ T6661] incfs: mount failed -14
[  226.056321][ T6676] FAULT_INJECTION: forcing a failure.
[  226.056321][ T6676] name fail_page_alloc, interval 1, probability 0, space 0, times 1
[  226.069481][ T6676] CPU: 0 PID: 6676 Comm: syz.0.2016 Tainted: G        W         5.10.218-syzkaller-00638-g3feee789f446 #0
[  226.080557][ T6676] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
[  226.090447][ T6676] Call Trace:
[  226.093581][ T6676]  dump_stack_lvl+0x1e2/0x24b
[  226.098090][ T6676]  ? bfq_pos_tree_add_move+0x43b/0x43b
[  226.103392][ T6676]  dump_stack+0x15/0x17
[  226.107375][ T6676]  should_fail+0x3c6/0x510
[  226.111629][ T6676]  should_fail_alloc_page+0x52/0x60
[  226.116663][ T6676]  __alloc_pages_nodemask+0x1b3/0xaf0
[  226.121872][ T6676]  ? gfp_pfmemalloc_allowed+0x120/0x120
[  226.127252][ T6676]  ? perf_event_namespaces_output+0x520/0x520
[  226.133153][ T6676]  ? _raw_write_lock+0xa4/0x170
[  226.137934][ T6676]  pte_alloc_one+0x1f/0xc0
[  226.142179][ T6676]  __pte_alloc+0x75/0x2c0
[  226.146350][ T6676]  ? free_pgtables+0x3c0/0x3c0
[  226.150949][ T6676]  ? __vma_link_rb+0x592/0x5b0
[  226.155547][ T6676]  handle_pte_fault+0x3451/0x3e30
[  226.160404][ T6676]  ? __handle_speculative_fault+0x491/0x1ec0
[  226.166224][ T6676]  ? vmf_allows_speculation+0x6f0/0x6f0
[  226.171602][ T6676]  ? __this_cpu_preempt_check+0x13/0x20
[  226.176990][ T6676]  handle_mm_fault+0x11d6/0x1a10
[  226.181756][ T6676]  ? can_reuse_spf_vma+0xe0/0xe0
[  226.186533][ T6676]  ? __kasan_check_write+0x14/0x20
[  226.191477][ T6676]  ? down_read_trylock+0x179/0x1d0
[  226.196508][ T6676]  ? __kasan_check_write+0x14/0x20
[  226.201456][ T6676]  ? put_vma+0x8f/0xb0
[  226.205363][ T6676]  ? can_reuse_spf_vma+0xc5/0xe0
[  226.210155][ T6676]  exc_page_fault+0x2a6/0x5b0
[  226.214649][ T6676]  ? asm_exc_page_fault+0x8/0x30
[  226.219421][ T6676]  asm_exc_page_fault+0x1e/0x30
[  226.224108][ T6676] RIP: 0033:0x7f2fd23b44f6
[  226.228362][ T6676] Code: f0 72 6e 48 63 cd 48 01 c1 49 39 4f 08 72 4c 8d 4d ff 85 ed 74 33 66 0f 1f 44 00 00 48 39 f0 72 1b 4d 8b 07 49 89 c1 49 29 f1 <47> 0f b6 0c 08 45 84 c9 74 08 45 88 0c 00 49 8b 47 10 48 83 c0 01
[  226.247802][ T6676] RSP: 002b:00007f2fd176f4b0 EFLAGS: 00010246
[  226.253702][ T6676] RAX: 0000000000000001 RBX: 00007f2fd176f550 RCX: 0000000000000101
[  226.261512][ T6676] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 00007f2fd176f5f0
[  226.269324][ T6676] RBP: 0000000000000102 R08: 00007f2fc9350000 R09: 0000000000000000
[  226.277135][ T6676] R10: 0000000000000000 R11: 00007f2fd176f560 R12: 0000000000000001
[  226.284946][ T6676] R13: 00007f2fd256ef80 R14: 0000000000000000 R15: 00007f2fd176f5f0
[  226.294003][ T6227] usb 3-1: new high-speed USB device number 29 using dummy_hcd
[  226.295837][ T6676] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF
[  226.308894][ T1389] cdc_ncm 5-1:1.0: bind() failure
[  226.314719][ T1389] cdc_ncm 5-1:1.1: bind() failure
[  226.324682][ T1389] usb 5-1: USB disconnect, device number 29
[  226.565607][ T6227] usb 3-1: Using ep0 maxpacket: 32
[  226.581600][ T6679] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm syz.1.2019: bg 0: block 5: invalid block bitmap
[  226.596945][ T6679] EXT4-fs error (device loop1) in ext4_mb_clear_bb:5646: Corrupt filesystem
[  226.605725][ T6679] EXT4-fs error (device loop1): ext4_free_branches:1026: inode #11: comm syz.1.2019: invalid indirect mapped block 3 (level 2)
[  226.618915][ T6679] EXT4-fs (loop1): 1 orphan inode deleted
[  226.624444][ T6679] EXT4-fs (loop1): 1 truncate cleaned up
[  226.636972][ T6679] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue
[  226.654656][   T24] kauditd_printk_skb: 48 callbacks suppressed
[  226.654668][   T24] audit: type=1326 audit(2000000852.946:1245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6678 comm="syz.1.2019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53a0f8cbd9 code=0x7ffc0000
[  226.684882][   T24] audit: type=1326 audit(2000000852.946:1246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6678 comm="syz.1.2019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f53a0f8cbd9 code=0x7ffc0000
[  226.708423][ T6227] usb 3-1: config 0 has an invalid descriptor of length 179, skipping remainder of the config
[  226.719154][ T6227] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  226.732507][ T6227] usb 3-1: New USB device found, idVendor=06cb, idProduct=73f5, bcdDevice= 0.00
[  226.745611][ T6227] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  226.775676][   T24] audit: type=1326 audit(2000000852.946:1247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6678 comm="syz.1.2019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53a0f8cbd9 code=0x7ffc0000
[  226.808528][ T6227] usb 3-1: config 0 descriptor??
[  226.826193][ T1178] usb 4-1: 0:2 : does not exist
[  226.831357][ T1178] usb 4-1: unit 5 not found!
[  226.846310][ T6227] usbhid 3-1:0.0: couldn't find an input interrupt endpoint
[  226.868803][ T1178] usb 4-1: USB disconnect, device number 29
[  226.885560][   T24] audit: type=1326 audit(2000000852.986:1248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6678 comm="syz.1.2019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f53a0f8cbd9 code=0x7ffc0000
[  226.933914][   T24] audit: type=1326 audit(2000000852.986:1249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6678 comm="syz.1.2019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53a0f8cbd9 code=0x7ffc0000
[  226.963659][ T6684] bridge0: port 1(bridge_slave_0) entered blocking state
[  226.970849][ T6684] bridge0: port 1(bridge_slave_0) entered disabled state
[  226.981831][   T24] audit: type=1326 audit(2000000852.986:1250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6678 comm="syz.1.2019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f53a0f8cbd9 code=0x7ffc0000
[  226.985810][  T313] udevd[313]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  227.016851][ T6686] EXT4-fs error (device loop3): ext4_orphan_get:1417: comm syz.3.2021: bad orphan inode 8192
[  227.021076][   T24] audit: type=1326 audit(2000000852.986:1251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6678 comm="syz.1.2019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53a0f8cbd9 code=0x7ffc0000
[  227.035438][ T6684] device bridge_slave_0 entered promiscuous mode
[  227.056365][   T24] audit: type=1326 audit(2000000852.986:1252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6678 comm="syz.1.2019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f53a0f8cbd9 code=0x7ffc0000
[  227.085837][ T6686] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue
[  227.100521][ T6694] binder: 6693:6694 ioctl c018620c 20000000 returned -22
[  227.169163][ T6684] bridge0: port 2(bridge_slave_1) entered blocking state
[  227.185786][ T6684] bridge0: port 2(bridge_slave_1) entered disabled state
[  227.202990][   T24] audit: type=1326 audit(2000000853.006:1253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6678 comm="syz.1.2019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53a0f8cbd9 code=0x7ffc0000
[  227.226385][   T24] audit: type=1326 audit(2000000853.006:1254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6678 comm="syz.1.2019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53a0f8cbd9 code=0x7ffc0000
[  227.236706][ T6684] device bridge_slave_1 entered promiscuous mode
[  227.551276][ T6684] bridge0: port 2(bridge_slave_1) entered blocking state
[  227.558161][ T6684] bridge0: port 2(bridge_slave_1) entered forwarding state
[  227.565229][ T6684] bridge0: port 1(bridge_slave_0) entered blocking state
[  227.572049][ T6684] bridge0: port 1(bridge_slave_0) entered forwarding state
[  227.615054][  T317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  227.623251][  T317] bridge0: port 1(bridge_slave_0) entered disabled state
[  227.635685][  T317] bridge0: port 2(bridge_slave_1) entered disabled state
[  227.740444][  T734] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  227.748743][  T734] bridge0: port 1(bridge_slave_0) entered blocking state
[  227.755606][  T734] bridge0: port 1(bridge_slave_0) entered forwarding state
[  227.762980][  T734] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  227.771395][  T734] bridge0: port 2(bridge_slave_1) entered blocking state
[  227.778243][  T734] bridge0: port 2(bridge_slave_1) entered forwarding state
[  227.812445][  T734] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  227.821619][  T734] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  227.884472][  T734] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  227.895230][  T734] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  227.968398][  T317] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  227.976590][  T317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  227.999104][  T317] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  228.007836][  T317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  228.016503][  T317] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  228.023874][  T317] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  228.035281][ T6684] device veth0_vlan entered promiscuous mode
[  228.036241][ T6676] F2FS-fs (loop0): Found nat_bits in checkpoint
[  228.078400][ T6676] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  228.081758][ T6227] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  228.094220][ T6227] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  228.104025][ T6684] device veth1_macvtap entered promiscuous mode
[  228.115258][  T442] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  228.123156][  T442] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  228.131673][  T442] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  228.140957][    T7] device bridge_slave_1 left promiscuous mode
[  228.147154][    T7] bridge0: port 2(bridge_slave_1) entered disabled state
[  228.154564][    T7] device bridge_slave_0 left promiscuous mode
[  228.160854][    T7] bridge0: port 1(bridge_slave_0) entered disabled state
[  228.169227][    T7] device veth1_macvtap left promiscuous mode
[  228.175073][    T7] device veth0_vlan left promiscuous mode
[  228.280039][ T6227] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  228.288352][ T6227] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  228.355572][  T317] usb 4-1: new high-speed USB device number 30 using dummy_hcd
[  228.452368][ T6730] incfs_lookup_dentry err:-14
[  228.459517][ T6730] incfs: Can't find or create .index dir in ./file0
[  228.535879][ T6730] incfs: mount failed -14
[  228.819317][ T6738] erofs: (device loop1): mounted with root inode @ nid 36.
[  228.895569][  T317] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  228.905539][  T317] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  228.918590][  T317] usb 4-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=4e.53
[  228.927614][  T317] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  228.939135][  T317] usb 4-1: config 0 descriptor??
[  228.963349][ T6227] usb 3-1: USB disconnect, device number 29
[  229.178718][ T6720] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2026'.
[  229.299719][  T317] usb 4-1: USB disconnect, device number 30
[  229.365553][ T6227] usb 3-1: new high-speed USB device number 30 using dummy_hcd
[  229.457552][ T6744] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm syz.1.2032: bg 0: block 5: invalid block bitmap
[  229.471796][ T6744] EXT4-fs error (device loop1) in ext4_mb_clear_bb:5646: Corrupt filesystem
[  229.481089][ T6744] EXT4-fs error (device loop1): ext4_free_branches:1026: inode #11: comm syz.1.2032: invalid indirect mapped block 3 (level 2)
[  229.496572][ T6744] EXT4-fs (loop1): 1 orphan inode deleted
[  229.502106][ T6744] EXT4-fs (loop1): 1 truncate cleaned up
[  229.507693][ T6744] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue
[  229.535806][ T6749] binder: 6748:6749 ioctl c018620c 20000000 returned -22
[  229.605579][ T6227] usb 3-1: Using ep0 maxpacket: 16
[  229.692367][ T6758] SELinux: security_context_str_to_sid(user_u) failed for (dev incremental-fs, type incremental-fs) errno=-22
[  229.725679][ T6227] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024
[  229.746128][ T6227] usb 3-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00
[  229.765164][ T6227] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  229.785817][ T6227] usb 3-1: config 0 descriptor??
[  229.850971][ T6767] EXT4-fs error (device loop3): ext4_ext_check_inode:500: inode #15: comm syz.3.2039: pblk 0 bad header/extent: invalid eh_entries - magic f30a, entries 24833, max 4(4), depth 0(0)
[  229.947621][ T6767] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.2039: couldn't read orphan inode 15 (err -117)
[  229.976538][ T6771] incfs_lookup_dentry err:-14
[  229.987600][ T6771] incfs: Can't find or create .index dir in ./file0
[  229.994448][ T6767] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue
[  229.994834][ T6771] incfs: mount failed -14
[  230.003426][ T6767] ext4 filesystem being mounted at /4/file0 supports timestamps until 2038 (0x7fffffff)
[  230.060273][ T6755] F2FS-fs (loop4): invalid crc value
[  230.067124][ T6767] overlayfs: upper fs needs to support d_type.
[  230.086916][ T6755] F2FS-fs (loop4): Found nat_bits in checkpoint
[  230.131124][ T6755] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4
[  230.162904][ T6684] attempt to access beyond end of device
[  230.162904][ T6684] loop4: rw=2049, want=45112, limit=40427
[  230.367728][ T6741] udc-core: couldn't find an available UDC or it's busy
[  230.398257][ T6741] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  230.473981][ T6784] erofs: (device loop1): mounted with root inode @ nid 36.
[  230.477171][ T1178] usb 1-1: new high-speed USB device number 30 using dummy_hcd
[  230.497882][ T6227] hid (null): unknown global tag 0xa5
[  230.503902][ T6227] hid (null): unknown global tag 0xd
[  230.509514][ T6227] hid (null): unknown global tag 0xc
[  230.515227][ T6227] hid-generic 0003:0158:0100.003E: unknown main item tag 0x1
[  230.522480][ T6227] hid-generic 0003:0158:0100.003E: unexpected long global item
[  230.530039][ T6227] hid-generic: probe of 0003:0158:0100.003E failed with error -22
[  230.637002][ T6788] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm syz.3.2044: bg 0: block 5: invalid block bitmap
[  230.653297][ T6788] EXT4-fs error (device loop3) in ext4_mb_clear_bb:5646: Corrupt filesystem
[  230.662494][ T6788] EXT4-fs error (device loop3): ext4_free_branches:1026: inode #11: comm syz.3.2044: invalid indirect mapped block 3 (level 2)
[  230.676196][ T6788] EXT4-fs (loop3): 1 orphan inode deleted
[  230.681725][ T6788] EXT4-fs (loop3): 1 truncate cleaned up
[  230.687262][ T6788] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue
[  230.708106][   T15] usb 3-1: USB disconnect, device number 30
[  230.725568][ T1178] usb 1-1: Using ep0 maxpacket: 32
[  230.764125][ T6796] binder: 6795:6796 ioctl c018620c 20000000 returned -22
[  230.766341][ T2906] print_req_error: 98 callbacks suppressed
[  230.766356][ T2906] blk_update_request: I/O error, dev loop3, sector 58 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0
[  230.789362][  T313] blk_update_request: I/O error, dev loop3, sector 108 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0
[  230.789409][ T2746] blk_update_request: I/O error, dev loop3, sector 1008 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  230.800757][  T313] blk_update_request: I/O error, dev loop3, sector 108 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  230.822722][ T2906] blk_update_request: I/O error, dev loop3, sector 58 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  230.833508][ T2746] buffer_io_error: 86 callbacks suppressed
[  230.833519][ T2746] Buffer I/O error on dev loop3p3, logical block 8, async page read
[  230.833584][ T2746] blk_update_request: I/O error, dev loop3, sector 1009 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  230.839526][ T2906] Buffer I/O error on dev loop3p2, logical block 8, async page read
[  230.858059][ T2746] Buffer I/O error on dev loop3p3, logical block 9, async page read
[  230.858117][ T2746] blk_update_request: I/O error, dev loop3, sector 1010 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  230.866634][ T2906] blk_update_request: I/O error, dev loop3, sector 59 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  230.884912][  T313] Buffer I/O error on dev loop3p1, logical block 8, async page read
[  230.884972][  T313] blk_update_request: I/O error, dev loop3, sector 109 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  230.895997][ T1178] usb 1-1: config 0 has an invalid descriptor of length 179, skipping remainder of the config
[  230.914476][ T2746] Buffer I/O error on dev loop3p3, logical block 10, async page read
[  230.933950][  T313] Buffer I/O error on dev loop3p1, logical block 9, async page read
[  230.937329][ T2906] Buffer I/O error on dev loop3p2, logical block 9, async page read
[  230.949717][ T1178] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  230.962584][ T2906] blk_update_request: I/O error, dev loop3, sector 60 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  230.973495][  T313] Buffer I/O error on dev loop3p1, logical block 10, async page read
[  230.974246][ T2906] Buffer I/O error on dev loop3p2, logical block 10, async page read
[  230.982001][  T313] Buffer I/O error on dev loop3p1, logical block 11, async page read
[  230.990122][ T1178] usb 1-1: New USB device found, idVendor=06cb, idProduct=73f5, bcdDevice= 0.00
[  231.009537][ T1178] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  231.018550][ T1178] usb 1-1: config 0 descriptor??
[  231.056097][ T1178] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[  231.111150][ T6802] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue
[  231.121721][ T6802] ext4 filesystem being mounted at /7/mnt supports timestamps until 2038 (0x7fffffff)
[  231.139678][ T6802] incfs: Error accessing: ./file0/file0.
[  231.145346][ T6802] incfs: mount failed -20
[  231.423422][ T6808] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2049'.
[  231.432756][ T6808] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=6808 comm=syz.2.2049
[  231.467653][ T6810] ������: renamed from vlan0
[  231.474761][ T6810] 9pnet: Insufficient options for proto=fd
[  231.741805][ T6821] incfs_lookup_dentry err:-14
[  231.755518][ T6821] incfs: Can't find or create .index dir in ./file0
[  231.765905][ T6821] incfs: mount failed -14
[  231.926666][ T6828] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm syz.4.2055: bg 0: block 5: invalid block bitmap
[  231.959045][ T6828] EXT4-fs error (device loop4) in ext4_mb_clear_bb:5646: Corrupt filesystem
[  231.975722][ T6828] EXT4-fs error (device loop4): ext4_free_branches:1026: inode #11: comm syz.4.2055: invalid indirect mapped block 3 (level 2)
[  231.998522][ T6834] binder: 6833:6834 ioctl c018620c 20000000 returned -22
[  232.011089][ T6828] EXT4-fs (loop4): 1 orphan inode deleted
[  232.025567][ T6828] EXT4-fs (loop4): 1 truncate cleaned up
[  232.031062][ T6828] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue
[  232.068577][   T24] kauditd_printk_skb: 148 callbacks suppressed
[  232.068589][   T24] audit: type=1326 audit(2000000858.366:1403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6827 comm="syz.4.2055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa130615bd9 code=0x7ffc0000
[  232.128094][   T24] audit: type=1326 audit(2000000858.366:1404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6827 comm="syz.4.2055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7fa130615bd9 code=0x7ffc0000
[  232.162342][   T24] audit: type=1326 audit(2000000858.366:1405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6827 comm="syz.4.2055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa130615bd9 code=0x7ffc0000
[  232.191319][   T24] audit: type=1326 audit(2000000858.366:1406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6827 comm="syz.4.2055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa130615bd9 code=0x7ffc0000
[  232.223004][   T15] usb 1-1: USB disconnect, device number 30
[  232.267522][  T442] usb 2-1: new high-speed USB device number 43 using dummy_hcd
[  232.275925][   T24] audit: type=1326 audit(2000000858.366:1407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6827 comm="syz.4.2055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa130615bd9 code=0x7ffc0000
[  232.299875][   T24] audit: type=1326 audit(2000000858.366:1408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6827 comm="syz.4.2055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa130615bd9 code=0x7ffc0000
[  232.323535][   T24] audit: type=1326 audit(2000000858.366:1409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6827 comm="syz.4.2055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa130615bd9 code=0x7ffc0000
[  232.347041][   T24] audit: type=1326 audit(2000000858.366:1410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6827 comm="syz.4.2055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa130615bd9 code=0x7ffc0000
[  232.569827][   T24] audit: type=1326 audit(2000000858.366:1411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6827 comm="syz.4.2055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa130615bd9 code=0x7ffc0000
[  232.593433][   T24] audit: type=1326 audit(2000000858.366:1412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6827 comm="syz.4.2055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa130615bd9 code=0x7ffc0000
[  232.593754][ T6838] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue
[  232.650878][ T6838] ext4 filesystem being mounted at /11/mnt supports timestamps until 2038 (0x7fffffff)
[  232.731880][ T6838] incfs: Error accessing: ./file0/file0.
[  232.743732][ T6838] incfs: mount failed -20
[  232.756068][  T442] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  232.778631][  T442] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  232.818753][  T442] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  232.856048][  T442] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  232.868358][  T442] usb 2-1: config 0 descriptor??
[  233.134171][ T6855] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm syz.4.2062: bg 0: block 5: invalid block bitmap
[  233.148927][ T6855] EXT4-fs error (device loop4) in ext4_mb_clear_bb:5646: Corrupt filesystem
[  233.157844][ T6855] EXT4-fs error (device loop4): ext4_free_branches:1026: inode #11: comm syz.4.2062: invalid indirect mapped block 3 (level 2)
[  233.176067][ T6855] EXT4-fs (loop4): 1 orphan inode deleted
[  233.181644][ T6855] EXT4-fs (loop4): 1 truncate cleaned up
[  233.187322][ T6855] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue
[  233.225532][  T317] usb 4-1: new high-speed USB device number 31 using dummy_hcd
[  233.487732][  T317] usb 4-1: Using ep0 maxpacket: 32
[  233.506139][ T6863] incfs: Can't find or create .index dir in ./file0
[  233.512990][ T6863] incfs: mount failed -14
[  233.655683][  T317] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  233.666462][  T317] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  233.677475][  T317] usb 4-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00
[  233.687378][  T317] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  233.756560][  T317] usb 4-1: config 0 descriptor??
[  233.875659][  T442] usb 2-1: string descriptor 0 read error: -71
[  233.895783][  T442] uclogic 0003:256C:006D.003F: failed retrieving string descriptor #200: -71
[  233.904555][  T442] uclogic 0003:256C:006D.003F: failed retrieving pen parameters: -71
[  233.912448][  T442] uclogic 0003:256C:006D.003F: failed probing pen v2 parameters: -71
[  233.920427][  T442] uclogic 0003:256C:006D.003F: failed probing parameters: -71
[  233.927789][  T442] uclogic: probe of 0003:256C:006D.003F failed with error -71
[  233.935996][  T442] usb 2-1: USB disconnect, device number 43
[  234.155609][  T317] usbhid 4-1:0.0: can't add hid device: -71
[  234.161606][  T317] usbhid: probe of 4-1:0.0 failed with error -71
[  234.169236][  T317] usb 4-1: USB disconnect, device number 31
[  234.240720][ T6879] EXT4-fs error (device loop0): ext4_validate_block_bitmap:429: comm syz.0.2068: bg 0: block 5: invalid block bitmap
[  234.253038][ T6879] EXT4-fs error (device loop0) in ext4_mb_clear_bb:5646: Corrupt filesystem
[  234.262216][ T6879] EXT4-fs error (device loop0): ext4_free_branches:1026: inode #11: comm syz.0.2068: invalid indirect mapped block 3 (level 2)
[  234.275800][ T6879] EXT4-fs (loop0): 1 orphan inode deleted
[  234.276940][ T6883] binder: 6882:6883 ioctl c018620c 20000000 returned -22
[  234.281338][ T6879] EXT4-fs (loop0): 1 truncate cleaned up
[  234.281351][ T6879] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue
[  234.353948][ T6888] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2071'.
[  234.363436][ T6888] IPv6: NLM_F_CREATE should be specified when creating new route
[  234.535559][  T317] usb 4-1: new high-speed USB device number 32 using dummy_hcd
[  234.617509][ T6912] incfs: Can't find or create .index dir in ./file0
[  234.623987][ T6912] incfs: mount failed -14
[  234.795572][  T317] usb 4-1: Using ep0 maxpacket: 8
[  235.095590][  T317] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  235.135577][ T1178] usb 1-1: new high-speed USB device number 31 using dummy_hcd
[  235.218282][ T6930] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm syz.1.2080: bg 0: block 5: invalid block bitmap
[  235.230690][ T6930] EXT4-fs error (device loop1) in ext4_mb_clear_bb:5646: Corrupt filesystem
[  235.239467][ T6930] EXT4-fs error (device loop1): ext4_free_branches:1026: inode #11: comm syz.1.2080: invalid indirect mapped block 3 (level 2)
[  235.252968][ T6930] EXT4-fs (loop1): 1 orphan inode deleted
[  235.258613][ T6930] EXT4-fs (loop1): 1 truncate cleaned up
[  235.264035][ T6930] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue
[  235.295968][  T317] usb 4-1: New USB device found, idVendor=8086, idProduct=0b03, bcdDevice=f4.28
[  235.308335][  T317] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  235.319443][  T317] usb 4-1: Product: syz
[  235.326171][  T317] usb 4-1: Manufacturer: syz
[  235.333248][  T317] usb 4-1: SerialNumber: syz
[  235.354511][  T317] usb 4-1: config 0 descriptor??
[  235.367893][ T6935] binder: 6934:6935 ioctl c018620c 20000000 returned -22
[  235.375527][ T1178] usb 1-1: Using ep0 maxpacket: 8
[  235.420870][ T6937] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm syz.1.2082: bg 0: block 5: invalid block bitmap
[  235.433984][ T6937] EXT4-fs error (device loop1) in ext4_mb_clear_bb:5646: Corrupt filesystem
[  235.442959][ T6937] EXT4-fs error (device loop1): ext4_free_branches:1026: inode #11: comm syz.1.2082: invalid indirect mapped block 3 (level 2)
[  235.456127][ T6937] EXT4-fs (loop1): 1 orphan inode deleted
[  235.461681][ T6937] EXT4-fs (loop1): 1 truncate cleaned up
[  235.467175][ T6937] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue
[  235.495595][ T1178] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  235.585640][ T1178] usb 1-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d
[  235.604819][ T1178] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105
[  235.625671][ T1178] usb 1-1: SerialNumber: syz
[  235.648951][ T1178] usb 1-1: config 0 descriptor??
[  235.685609][ T1389] usb 3-1: new high-speed USB device number 31 using dummy_hcd
[  235.890111][ T6924] 9pnet: Insufficient options for proto=fd
[  235.951282][ T6924] udc-core: couldn't find an available UDC or it's busy
[  235.994573][ T1178] uvcvideo: Found UVC 0.00 device <unnamed> (05ac:8501)
[  236.002856][ T1178] uvcvideo: Failed to create links for entity 255
[  236.009156][ T1178] uvcvideo: Failed to register entities (-22).
[  236.009428][ T6924] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  236.054029][   T25] usb 1-1: USB disconnect, device number 31
[  236.213710][ T6954] incfs: Can't find or create .index dir in ./file0
[  236.220408][ T6954] incfs: mount failed -14
[  236.336100][ T6877] 9pnet: Could not find request transport: f
[  236.365615][ T1389] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  236.376374][ T1389] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  236.385888][  T317] uvcvideo: Found UVC 0.00 device syz (8086:0b03)
[  236.385907][  T317] uvcvideo: No valid video chain found.
[  236.392443][ T1389] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  236.399420][  T317] usb 4-1: USB disconnect, device number 32
[  236.408968][ T1389] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  236.421313][ T1389] usb 3-1: config 0 descriptor??
[  236.485726][ T6967] erofs: Unknown parameter 'nouser'
[  236.765537][  T734] usb 5-1: new high-speed USB device number 30 using dummy_hcd
[  236.911111][  T313] print_req_error: 151 callbacks suppressed
[  236.911127][  T313] blk_update_request: I/O error, dev loop3, sector 108 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0
[  236.924054][ T6975] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm syz.3.2092: bg 0: block 5: invalid block bitmap
[  236.941464][ T6975] EXT4-fs error (device loop3) in ext4_mb_clear_bb:5646: Corrupt filesystem
[  236.951380][ T6975] EXT4-fs error (device loop3): ext4_free_branches:1026: inode #11: comm syz.3.2092: invalid indirect mapped block 3 (level 2)
[  236.964616][ T6975] EXT4-fs (loop3): 1 orphan inode deleted
[  236.970343][ T6975] EXT4-fs (loop3): 1 truncate cleaned up
[  236.976476][ T6975] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue
[  237.035544][  T734] usb 5-1: Using ep0 maxpacket: 16
[  237.195747][  T734] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024
[  237.207381][  T734] usb 5-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00
[  237.218016][  T734] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  237.255290][  T734] usb 5-1: config 0 descriptor??
[  237.406092][   T25] usb 2-1: new high-speed USB device number 44 using dummy_hcd
[  237.415581][ T1389] usb 3-1: string descriptor 0 read error: -71
[  237.435576][ T1389] uclogic 0003:256C:006D.0040: failed retrieving string descriptor #200: -71
[  237.444250][ T1389] uclogic 0003:256C:006D.0040: failed retrieving pen parameters: -71
[  237.452465][ T1389] uclogic 0003:256C:006D.0040: failed probing pen v2 parameters: -71
[  237.460535][ T1389] uclogic 0003:256C:006D.0040: failed probing parameters: -71
[  237.467960][ T1389] uclogic: probe of 0003:256C:006D.0040 failed with error -71
[  237.477292][ T1389] usb 3-1: USB disconnect, device number 31
[  237.506309][ T6967] udc-core: couldn't find an available UDC or it's busy
[  237.513087][ T6967] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  237.577392][ T6967] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpid,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue
[  237.590970][ T6967] ext4 filesystem being mounted at /19/bus supports timestamps until 2038 (0x7fffffff)
[  237.675153][ T7000] 9pnet: Insufficient options for proto=fd
[  237.835920][   T25] usb 2-1: config 45 has too many interfaces: 194, using maximum allowed: 32
[  237.845253][   T25] usb 2-1: config 45 has 1 interface, different from the descriptor's value: 194
[  237.865100][   T25] usb 2-1: config 45 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  237.876016][   T25] usb 2-1: config 45 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  237.885659][   T25] usb 2-1: New USB device found, idVendor=5543, idProduct=0042, bcdDevice= 0.00
[  237.894487][   T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  237.960539][  T313] blk_update_request: I/O error, dev loop3, sector 108 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0
[  237.961566][ T2906] blk_update_request: I/O error, dev loop3, sector 58 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0
[  237.974229][  T313] blk_update_request: I/O error, dev loop3, sector 108 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  237.983598][ T2746] blk_update_request: I/O error, dev loop3, sector 1008 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0
[  237.994099][  T313] buffer_io_error: 134 callbacks suppressed
[  237.994108][  T313] Buffer I/O error on dev loop3p1, logical block 8, async page read
[  238.005794][ T7002] xt_bpf: check failed: parse error
[  238.010848][  T313] blk_update_request: I/O error, dev loop3, sector 109 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  238.034658][ T2746] blk_update_request: I/O error, dev loop3, sector 1008 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  238.044856][   T24] kauditd_printk_skb: 306 callbacks suppressed
[  238.044869][   T24] audit: type=1326 audit(2000000864.326:1719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7001 comm="syz.3.2097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65629c9bd9 code=0x7ffc0000
[  238.046393][ T6967] udc-core: couldn't find an available UDC or it's busy
[  238.051747][   T24] audit: type=1326 audit(2000000864.326:1720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7001 comm="syz.3.2097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65629c9bd9 code=0x7ffc0000
[  238.090353][ T2906] blk_update_request: I/O error, dev loop3, sector 58 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  238.116352][ T2746] Buffer I/O error on dev loop3p3, logical block 8, async page read
[  238.124263][  T313] Buffer I/O error on dev loop3p1, logical block 9, async page read
[  238.128913][ T7012] erofs: Unknown parameter '����'
[  238.132238][ T6967] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  238.155619][ T2906] Buffer I/O error on dev loop3p2, logical block 8, async page read
[  238.207134][  T734] hid (null): invalid report_count 1198337595
[  238.213349][  T734] hid (null): unknown global tag 0xc
[  238.218832][  T734] hid (null): unknown global tag 0xc
[  238.223935][  T734] hid (null): invalid report_size 8322
[  238.230153][ T2746] blk_update_request: I/O error, dev loop3, sector 1008 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0
[  238.233365][  T734] hid-generic 0003:0158:0100.0041: unknown main item tag 0x0
[  238.245278][  T313] blk_update_request: I/O error, dev loop3, sector 108 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0
[  238.250788][ T2906] Buffer I/O error on dev loop3p2, logical block 8, async page read
[  238.266565][ T2746] Buffer I/O error on dev loop3p3, logical block 8, async page read
[  238.282359][  T734] hid-generic 0003:0158:0100.0041: unexpected long global item
[  238.290981][  T734] hid-generic: probe of 0003:0158:0100.0041 failed with error -22
[  238.298968][ T2906] Buffer I/O error on dev loop3p2, logical block 9, async page read
[  238.313813][ T2906] Buffer I/O error on dev loop3p2, logical block 10, async page read
[  238.333147][ T2906] Buffer I/O error on dev loop3p2, logical block 11, async page read
[  238.346472][ T2906] Buffer I/O error on dev loop3p2, logical block 12, async page read
[  238.478034][ T6982] udc-core: couldn't find an available UDC or it's busy
[  238.484813][ T6982] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  238.506920][   T25] uclogic 0003:5543:0042.0042: unknown main item tag 0x0
[  238.514210][  T287] usb 5-1: USB disconnect, device number 30
[  238.520074][   T25] uclogic 0003:5543:0042.0042: unknown main item tag 0x0
[  238.528778][   T25] uclogic 0003:5543:0042.0042: unknown main item tag 0x0
[  238.535672][   T25] uclogic 0003:5543:0042.0042: unknown main item tag 0x0
[  238.542505][   T25] uclogic 0003:5543:0042.0042: unknown main item tag 0x0
[  238.549700][   T25] uclogic 0003:5543:0042.0042: No inputs registered, leaving
[  238.557333][   T25] uclogic 0003:5543:0042.0042: hidraw0: USB HID v0.00 Device [HID 5543:0042] on usb-dummy_hcd.1-1/input0
[  238.580829][ T7021]  loop0: p2 < >
[  238.696458][ T6078] __loop_clr_fd: partition scan of loop0 failed (rc=-16)
[  238.715613][   T25] usb 2-1: USB disconnect, device number 44
[  238.745888][ T7025] 9pnet: Insufficient options for proto=fd
[  238.765852][ T7027] EXT4-fs error (device loop0): ext4_validate_block_bitmap:429: comm syz.0.2103: bg 0: block 5: invalid block bitmap
[  238.778177][ T7027] EXT4-fs error (device loop0) in ext4_mb_clear_bb:5646: Corrupt filesystem
[  238.787053][ T7027] EXT4-fs error (device loop0): ext4_free_branches:1026: inode #11: comm syz.0.2103: invalid indirect mapped block 3 (level 2)
[  238.800502][ T1389] usb 4-1: new high-speed USB device number 33 using dummy_hcd
[  238.808356][ T7027] EXT4-fs (loop0): 1 orphan inode deleted
[  238.813941][ T7027] EXT4-fs (loop0): 1 truncate cleaned up
[  238.819431][ T7027] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue
[  238.830756][   T24] audit: type=1326 audit(2000000865.126:1721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7026 comm="syz.0.2103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fd24eebd9 code=0x7ffc0000
[  238.855709][   T24] audit: type=1326 audit(2000000865.136:1722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7026 comm="syz.0.2103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fd24eebd9 code=0x7ffc0000
[  238.879179][   T24] audit: type=1326 audit(2000000865.146:1723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7026 comm="syz.0.2103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f2fd24eebd9 code=0x7ffc0000
[  238.902797][   T24] audit: type=1326 audit(2000000865.146:1724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7026 comm="syz.0.2103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fd24eebd9 code=0x7ffc0000
[  238.926222][   T24] audit: type=1326 audit(2000000865.146:1725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7026 comm="syz.0.2103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2fd24eebd9 code=0x7ffc0000
[  238.949562][   T24] audit: type=1326 audit(2000000865.146:1726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7026 comm="syz.0.2103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fd24eebd9 code=0x7ffc0000
[  238.972842][   T24] audit: type=1326 audit(2000000865.146:1727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7026 comm="syz.0.2103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2fd24eebd9 code=0x7ffc0000
[  238.996356][   T24] audit: type=1326 audit(2000000865.146:1728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7026 comm="syz.0.2103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fd24eebd9 code=0x7ffc0000
[  239.054147][ T7035] fuse: Bad value for 'fd'
[  239.166988][ T1389] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  239.178096][ T1389] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  239.188035][ T1389] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  239.196938][ T1389] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  239.205342][ T1389] usb 4-1: config 0 descriptor??
[  239.355542][ T6227] usb 1-1: new high-speed USB device number 32 using dummy_hcd
[  239.445545][   T25] usb 5-1: new high-speed USB device number 31 using dummy_hcd
[  239.515530][  T306] usb 2-1: new high-speed USB device number 45 using dummy_hcd
[  239.715794][ T6227] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  239.726581][ T6227] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  239.736212][ T6227] usb 1-1: New USB device found, idVendor=056a, idProduct=0031, bcdDevice= 0.00
[  239.744978][ T6227] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  239.753369][ T6227] usb 1-1: config 0 descriptor??
[  239.865598][   T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  239.875677][  T306] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  239.876367][   T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  239.887518][  T306] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  239.897437][   T25] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00
[  239.906679][  T306] usb 2-1: New USB device found, idVendor=258a, idProduct=6a88, bcdDevice= 0.00
[  239.915248][   T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  239.924254][  T306] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  239.932702][   T25] usb 5-1: config 0 descriptor??
[  239.939708][ T1389] usb 4-1: language id specifier not provided by device, defaulting to English
[  239.945605][  T306] usb 2-1: config 0 descriptor??
[  239.998068][   T25] usbhid 5-1:0.0: can't add hid device: -22
[  240.000112][ T7038] tc_dump_action: action bad kind
[  240.003910][   T25] usbhid: probe of 5-1:0.0 failed with error -22
[  240.375677][ T6227] usbhid 1-1:0.0: can't add hid device: -71
[  240.382089][ T6227] usbhid: probe of 1-1:0.0 failed with error -71
[  240.393600][ T6227] usb 1-1: USB disconnect, device number 32
[  240.415634][ T1389] uclogic 0003:256C:006D.0043: failed retrieving Huion firmware version: -71
[  240.424285][ T1389] uclogic 0003:256C:006D.0043: failed probing parameters: -71
[  240.431777][ T1389] uclogic: probe of 0003:256C:006D.0043 failed with error -71
[  240.443660][ T1389] usb 4-1: USB disconnect, device number 33
[  240.745533][ T6227] usb 1-1: new high-speed USB device number 33 using dummy_hcd
[  240.950711][ T7072] bridge0: port 1(bridge_slave_0) entered blocking state
[  240.957669][ T7072] bridge0: port 1(bridge_slave_0) entered disabled state
[  240.964649][ T7072] device bridge_slave_0 entered promiscuous mode
[  240.971553][ T7072] bridge0: port 2(bridge_slave_1) entered blocking state
[  240.978702][ T7072] bridge0: port 2(bridge_slave_1) entered disabled state
[  240.985982][ T7072] device bridge_slave_1 entered promiscuous mode
[  241.310588][ T7072] bridge0: port 2(bridge_slave_1) entered blocking state
[  241.317466][ T7072] bridge0: port 2(bridge_slave_1) entered forwarding state
[  241.324555][ T7072] bridge0: port 1(bridge_slave_0) entered blocking state
[  241.331362][ T7072] bridge0: port 1(bridge_slave_0) entered forwarding state
[  241.353237][ T1389] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  241.361002][ T1389] bridge0: port 1(bridge_slave_0) entered disabled state
[  241.369725][ T1389] bridge0: port 2(bridge_slave_1) entered disabled state
[  241.376935][ T6227] usb 1-1: config 0 has an invalid interface number: 18 but max is 0
[  241.384817][ T6227] usb 1-1: config 0 has no interface number 0
[  241.391520][ T6227] usb 1-1: config 0 interface 18 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11
[  241.402819][ T6227] usb 1-1: config 0 interface 18 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024
[  241.431684][ T1178] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  241.439885][ T1178] bridge0: port 1(bridge_slave_0) entered blocking state
[  241.446752][ T1178] bridge0: port 1(bridge_slave_0) entered forwarding state
[  241.454149][ T1178] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  241.462193][ T1178] bridge0: port 2(bridge_slave_1) entered blocking state
[  241.469101][ T1178] bridge0: port 2(bridge_slave_1) entered forwarding state
[  241.476888][ T1178] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  241.485144][ T1178] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  241.504758][ T7072] device veth0_vlan entered promiscuous mode
[  241.510708][ T6227] usb 1-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.10
[  241.519919][ T6227] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0
[  241.527799][ T6227] usb 1-1: Manufacturer: syz
[  241.532971][ T6227] usb 1-1: config 0 descriptor??
[  241.539464][ T1389] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  241.547628][ T1389] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  241.555324][ T1389] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  241.562501][ T7064] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  241.569688][ T1389] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  241.582803][  T287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  241.591736][ T7072] device veth1_macvtap entered promiscuous mode
[  241.601043][ T1389] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  241.613097][ T1389] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  241.644403][ T7081] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm syz.3.2114: bg 0: block 5: invalid block bitmap
[  241.657872][    T9] device bridge_slave_1 left promiscuous mode
[  241.663789][    T9] bridge0: port 2(bridge_slave_1) entered disabled state
[  241.670987][ T7081] EXT4-fs error (device loop3) in ext4_mb_clear_bb:5646: Corrupt filesystem
[  241.682077][ T7081] EXT4-fs error (device loop3): ext4_free_branches:1026: inode #11: comm syz.3.2114: invalid indirect mapped block 3 (level 2)
[  241.686295][    T9] device bridge_slave_0 left promiscuous mode
[  241.701385][ T7081] EXT4-fs (loop3): 1 orphan inode deleted
[  241.701719][    T9] bridge0: port 1(bridge_slave_0) entered disabled state
[  241.707347][ T7081] EXT4-fs (loop3): 1 truncate cleaned up
[  241.719406][ T7081] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue
[  241.728965][    T9] device veth1_macvtap left promiscuous mode
[  241.877462][ T7090] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer.
[  242.180373][ T6227] input: syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.18/0003:054C:03D5.0044/input/input52
[  242.181675][ T2906] print_req_error: 138 callbacks suppressed
[  242.181689][ T2906] blk_update_request: I/O error, dev loop3, sector 108 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0
[  242.191783][ T6227] sony 0003:054C:03D5.0044: input,hidraw0: USB HID v0.00 Joystick [syz] on usb-dummy_hcd.0-1/input18
[  242.199315][ T2746] blk_update_request: I/O error, dev loop3, sector 58 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0
[  242.234050][  T310] blk_update_request: I/O error, dev loop3, sector 1008 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0
[  242.238675][  T287] usb 1-1: USB disconnect, device number 33
[  242.253801][ T2906] blk_update_request: I/O error, dev loop3, sector 108 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  242.265030][ T2906] blk_update_request: I/O error, dev loop3, sector 109 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  242.276959][ T2746] blk_update_request: I/O error, dev loop3, sector 58 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  242.287976][  T310] blk_update_request: I/O error, dev loop3, sector 1008 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  242.299371][ T2906] blk_update_request: I/O error, dev loop3, sector 110 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  242.310861][ T2746] blk_update_request: I/O error, dev loop3, sector 59 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  242.321897][  T310] blk_update_request: I/O error, dev loop3, sector 1009 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  242.415672][  T306] usbhid 2-1:0.0: can't add hid device: -71
[  242.421756][  T306] usbhid: probe of 2-1:0.0 failed with error -71
[  242.443612][  T306] usb 2-1: USB disconnect, device number 45
[  242.468293][ T7105] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d)
[  242.487516][ T7105] incfs: ino conflict with backing FS 1
[  242.547591][  T442] usb 5-1: USB disconnect, device number 31
[  242.795557][  T306] usb 2-1: new high-speed USB device number 46 using dummy_hcd
[  242.815646][   T25] usb 4-1: new high-speed USB device number 34 using dummy_hcd
[  242.905627][  T734] usb 3-1: new high-speed USB device number 32 using dummy_hcd
[  242.965631][  T442] usb 5-1: new high-speed USB device number 32 using dummy_hcd
[  243.095536][   T25] usb 4-1: Using ep0 maxpacket: 16
[  243.195562][  T306] usb 2-1: Using ep0 maxpacket: 16
[  243.195590][  T734] usb 3-1: Using ep0 maxpacket: 16
[  243.225531][  T442] usb 5-1: Using ep0 maxpacket: 8
[  243.236395][   T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024
[  243.247469][   T25] usb 4-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00
[  243.256377][   T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  243.264688][   T25] usb 4-1: config 0 descriptor??
[  243.335624][  T306] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  243.346198][  T306] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  243.355731][  T306] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  243.385590][  T442] usb 5-1: unable to get BOS descriptor or descriptor too short
[  243.396245][  T734] usb 3-1: config 1 interface 0 altsetting 213 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  243.409763][  T734] usb 3-1: config 1 interface 0 has no altsetting 0
[  243.465581][  T442] usb 5-1: config 0 has no interfaces?
[  243.506241][   T24] kauditd_printk_skb: 86 callbacks suppressed
[  243.506252][   T24] audit: type=1400 audit(2000000869.806:1815): avc:  denied  { write } for  pid=7104 comm="syz.3.2121" name="net" dev="proc" ino=45497 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1
[  243.533559][   T24] audit: type=1400 audit(2000000869.806:1816): avc:  denied  { add_name } for  pid=7104 comm="syz.3.2121" name="pfkey" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1
[  243.550487][  T306] usb 2-1: New USB device found, idVendor=046d, idProduct=08f0, bcdDevice=50.0d
[  243.553683][   T24] audit: type=1400 audit(2000000869.806:1817): avc:  denied  { create } for  pid=7104 comm="syz.3.2121" name="pfkey" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=file permissive=1
[  243.564071][  T306] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  243.590109][   T24] audit: type=1400 audit(2000000869.806:1818): avc:  denied  { associate } for  pid=7104 comm="syz.3.2121" name="pfkey" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[  243.590511][  T306] usb 2-1: Product: syz
[  243.615036][  T306] usb 2-1: Manufacturer: syz
[  243.619759][  T306] usb 2-1: SerialNumber: syz
[  243.624468][  T734] usb 3-1: New USB device found, idVendor=1e7d, idProduct=31ce, bcdDevice= 0.40
[  243.633485][  T734] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  243.641372][  T734] usb 3-1: Product: 鷇뭾咆䑑곕䴫躜翄콫묕㓘髳랠跣ᖇ
[  243.649272][  T734] usb 3-1: Manufacturer: 歐㥺懟Ğ㤭ꚳ㟀⬧逷૗＃鷥䥚萄≣幸䞓䐊ꅺ㍧艴శﾞ鳕៙因觷阥챥垬頷隇獅櫮☊飏ꑇ姌豶⺘ꋁ握쓡鞂Ǵᮙ采聆臞藝䍡ꦸ因袢᩺
[  243.663773][  T306] usb 2-1: config 0 descriptor??
[  243.677742][ T2906] buffer_io_error: 170 callbacks suppressed
[  243.677753][ T2906] Buffer I/O error on dev loop0p2, logical block 0, async page read
[  243.693316][  T734] usb 3-1: SerialNumber: А
[  243.697150][ T2906] Buffer I/O error on dev loop0p2, logical block 0, async page read
[  243.708259][ T2906] Buffer I/O error on dev loop0p2, logical block 0, async page read
[  243.716615][ T2906] Buffer I/O error on dev loop0p2, logical block 0, async page read
[  243.724577][ T2906] Buffer I/O error on dev loop0p2, logical block 0, async page read
[  243.748397][  T442] usb 5-1: string descriptor 0 read error: -22
[  243.754412][  T442] usb 5-1: New USB device found, idVendor=05ab, idProduct=0060, bcdDevice=11.0e
[  243.763439][  T442] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  243.772659][ T7121] EXT4-fs error (device loop0): ext4_validate_block_bitmap:429: comm syz.0.2126: bg 0: block 5: invalid block bitmap
[  243.777397][  T442] usb 5-1: config 0 descriptor??
[  243.785228][ T7121] EXT4-fs error (device loop0) in ext4_mb_clear_bb:5646: Corrupt filesystem
[  243.799191][ T7121] EXT4-fs error (device loop0): ext4_free_branches:1026: inode #11: comm syz.0.2126: invalid indirect mapped block 3 (level 2)
[  243.812469][ T7121] EXT4-fs (loop0): 1 orphan inode deleted
[  243.818119][   T25] usbhid 4-1:0.0: can't add hid device: -71
[  243.818146][ T7121] EXT4-fs (loop0): 1 truncate cleaned up
[  243.823790][   T25] usbhid: probe of 4-1:0.0 failed with error -71
[  243.829724][ T7121] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue
[  243.852659][   T24] audit: type=1326 audit(2000000870.146:1819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7120 comm="syz.0.2126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fd24eebd9 code=0x7ffc0000
[  243.876773][   T25] usb 4-1: USB disconnect, device number 34
[  243.883747][   T24] audit: type=1326 audit(2000000870.146:1820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7120 comm="syz.0.2126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f2fd24eebd9 code=0x7ffc0000
[  243.907096][   T24] audit: type=1326 audit(2000000870.146:1821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7120 comm="syz.0.2126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fd24eebd9 code=0x7ffc0000
[  243.930481][   T24] audit: type=1326 audit(2000000870.146:1822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7120 comm="syz.0.2126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2fd24eebd9 code=0x7ffc0000
[  243.953995][   T24] audit: type=1326 audit(2000000870.146:1823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7120 comm="syz.0.2126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fd24eebd9 code=0x7ffc0000
[  243.954574][  T306] usb 2-1: USB disconnect, device number 46
[  243.985138][   T24] audit: type=1326 audit(2000000870.146:1824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7120 comm="syz.0.2126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2fd24eebd9 code=0x7ffc0000
[  244.050112][  T442] usb 5-1: USB disconnect, device number 32
[  244.223677][ T7131] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2128'.
[  244.234387][  T734] usbhid 3-1:1.0: can't add hid device: -71
[  244.241946][  T734] usbhid: probe of 3-1:1.0 failed with error -71
[  244.326488][  T734] usb 3-1: USB disconnect, device number 32
[  244.441235][ T7133] bridge0: port 1(bridge_slave_0) entered blocking state
[  244.448150][ T7133] bridge0: port 1(bridge_slave_0) entered disabled state
[  244.455991][ T7133] device bridge_slave_0 entered promiscuous mode
[  244.465029][ T7133] bridge0: port 2(bridge_slave_1) entered blocking state
[  244.471943][ T7133] bridge0: port 2(bridge_slave_1) entered disabled state
[  244.479040][ T7133] device bridge_slave_1 entered promiscuous mode
[  244.512646][ T7133] bridge0: port 2(bridge_slave_1) entered blocking state
[  244.519504][ T7133] bridge0: port 2(bridge_slave_1) entered forwarding state
[  244.526604][ T7133] bridge0: port 1(bridge_slave_0) entered blocking state
[  244.533380][ T7133] bridge0: port 1(bridge_slave_0) entered forwarding state
[  244.561623][  T734] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  244.569938][  T734] bridge0: port 1(bridge_slave_0) entered disabled state
[  244.577748][  T734] bridge0: port 2(bridge_slave_1) entered disabled state
[  244.595088][   T25] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  244.619663][   T25] bridge0: port 1(bridge_slave_0) entered blocking state
[  244.626537][   T25] bridge0: port 1(bridge_slave_0) entered forwarding state
[  244.633989][   T25] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  244.642648][   T25] bridge0: port 2(bridge_slave_1) entered blocking state
[  244.649515][   T25] bridge0: port 2(bridge_slave_1) entered forwarding state
[  245.501503][   T25] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  245.516267][  T442] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  245.536171][ T1178] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  245.536696][ T7154] EXT4-fs error (device loop0): ext4_validate_block_bitmap:429: comm syz.0.2137: bg 0: block 5: invalid block bitmap
[  245.548021][ T1178] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  245.558671][ T7154] EXT4-fs error (device loop0) in ext4_mb_clear_bb:5646: Corrupt filesystem
[  245.573623][ T7154] EXT4-fs error (device loop0): ext4_free_branches:1026: inode #11: comm syz.0.2137: invalid indirect mapped block 3 (level 2)
[  245.586994][ T7154] EXT4-fs (loop0): 1 orphan inode deleted
[  245.592585][ T7154] EXT4-fs (loop0): 1 truncate cleaned up
[  245.601619][ T7133] device veth0_vlan entered promiscuous mode
[  245.641162][ T7154] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue
[  245.657823][   T15] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  245.665553][  T306] usb 5-1: new high-speed USB device number 33 using dummy_hcd
[  245.716500][   T15] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  245.724828][   T15] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  245.732504][   T15] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  245.780113][ T7164] x_tables: duplicate underflow at hook 1
[  245.789462][ T7164] devpts: called with bogus options
[  245.826039][ T7165] 9pnet: Insufficient options for proto=fd
[  245.919382][ T7133] device veth1_macvtap entered promiscuous mode
[  245.973980][  T734] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  245.982125][  T734] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  245.990179][  T734] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  246.004695][  T734] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  246.013078][  T734] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  246.021553][  T734] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  246.029865][  T734] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  246.119282][  T313] Buffer I/O error on dev loop0p2, logical block 0, async page read
[  246.127198][  T313] Buffer I/O error on dev loop0p2, logical block 0, async page read
[  246.134943][  T313] Buffer I/O error on dev loop0p2, logical block 0, async page read
[  246.143013][  T313] Buffer I/O error on dev loop0p2, logical block 0, async page read
[  246.151128][  T313] Buffer I/O error on dev loop0p2, logical block 0, async page read
[  246.351633][  T306] usb 5-1: Using ep0 maxpacket: 32
[  246.376127][    T9] device bridge_slave_1 left promiscuous mode
[  246.382235][    T9] bridge0: port 2(bridge_slave_1) entered disabled state
[  246.389569][    T9] device bridge_slave_0 left promiscuous mode
[  246.395576][  T442] usb 1-1: new high-speed USB device number 34 using dummy_hcd
[  246.395805][    T9] bridge0: port 1(bridge_slave_0) entered disabled state
[  246.410670][    T9] device veth1_macvtap left promiscuous mode
[  246.416754][    T9] device veth0_vlan left promiscuous mode
[  246.825805][  T442] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  246.837593][  T442] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  246.842361][  T306] usb 5-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed
[  246.847318][  T442] usb 1-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00
[  246.865145][  T442] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  246.872969][  T306] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  246.872984][  T306] usb 5-1: Product: syz
[  246.885011][  T306] usb 5-1: Manufacturer: syz
[  246.888296][  T442] usb 1-1: config 0 descriptor??
[  246.889625][  T306] usb 5-1: SerialNumber: syz
[  246.899409][  T306] usb 5-1: config 0 descriptor??
[  247.055762][  T304] usb 3-1: new full-speed USB device number 33 using dummy_hcd
[  247.198014][ T7185] udc-core: couldn't find an available UDC or it's busy
[  247.204998][ T7185] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  247.215611][ T1178] usb 4-1: new high-speed USB device number 35 using dummy_hcd
[  247.366627][ T7173] udc-core: couldn't find an available UDC or it's busy
[  247.373421][ T7173] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  247.425169][  T442] arvo 0003:1E7D:30D4.0045: unknown main item tag 0x0
[  247.432940][  T442] arvo 0003:1E7D:30D4.0045: unknown main item tag 0x0
[  247.442871][  T442] arvo 0003:1E7D:30D4.0045: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.0-1/input0
[  247.453730][  T304] usb 3-1: config 0 interface 0 altsetting 255 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  247.453744][  T304] usb 3-1: config 0 interface 0 altsetting 255 endpoint 0x81 has invalid wMaxPacketSize 0
[  247.453755][  T304] usb 3-1: config 0 interface 0 has no altsetting 0
[  247.453776][  T304] usb 3-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.00
[  247.490225][  T304] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  247.498595][  T304] usb 3-1: config 0 descriptor??
[  247.645929][ T1178] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  247.656783][ T1178] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  247.735589][ T1389] usb 2-1: new high-speed USB device number 47 using dummy_hcd
[  247.755603][ T1178] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00
[  247.767326][ T1178] usb 4-1: New USB device strings: Mfr=0, Product=9, SerialNumber=0
[  247.784403][ T1178] usb 4-1: Product: syz
[  247.793312][ T1178] usb 4-1: config 0 descriptor??
[  247.877405][  T287] usb 1-1: USB disconnect, device number 34
[  248.017994][ T1389] usb 2-1: Using ep0 maxpacket: 8
[  248.296418][ T1178] konepure 0003:1E7D:2DB4.0046: unknown main item tag 0x0
[  248.303448][ T1178] konepure 0003:1E7D:2DB4.0046: collection stack underflow
[  248.310680][ T1178] konepure 0003:1E7D:2DB4.0046: item 0 2 0 12 parsing failed
[  248.318186][ T1389] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  248.327097][ T1178] konepure 0003:1E7D:2DB4.0046: parse failed
[  248.332926][ T1389] usb 2-1: config 1 has no interface number 1
[  248.338950][ T1178] konepure: probe of 0003:1E7D:2DB4.0046 failed with error -22
[  248.346365][ T1389] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  248.499427][ T1178] usb 4-1: USB disconnect, device number 35
[  248.515658][ T1389] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  248.524511][ T1389] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  248.532595][ T1389] usb 2-1: Product: syz
[  248.536904][ T1389] usb 2-1: Manufacturer: syz
[  248.541312][ T1389] usb 2-1: SerialNumber: syz
[  248.925734][   T15] usb 1-1: new high-speed USB device number 35 using dummy_hcd
[  249.046359][ T1389] usb 2-1: 2:1 : no or invalid class specific endpoint descriptor
[  249.054159][ T1389] usb 2-1: 2:1 : format type 0 is detected, processed as PCM
[  249.120002][ T1389] usb 2-1: USB disconnect, device number 47
[  249.185556][   T15] usb 1-1: Using ep0 maxpacket: 32
[  249.305540][   T25] usb 4-1: new high-speed USB device number 36 using dummy_hcd
[  249.325728][   T15] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  249.336712][   T15] usb 1-1: New USB device found, idVendor=0dfc, idProduct=0101, bcdDevice= 0.00
[  249.345792][   T15] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  249.354250][   T15] usb 1-1: config 0 descriptor??
[  249.765861][   T25] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  249.873112][   T25] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  249.882109][   T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  249.890150][   T25] usb 4-1: SerialNumber: syz
[  249.898485][   T24] kauditd_printk_skb: 87 callbacks suppressed
[  249.898497][   T24] audit: type=1326 audit(2000000876.196:1912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7206 comm="syz.2.2149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff353a8dbd9 code=0x7ffc0000
[  249.928039][   T24] audit: type=1326 audit(2000000876.196:1913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7206 comm="syz.2.2149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff353a8dbd9 code=0x7ffc0000
[  249.951321][   T15] usbhid 1-1:0.0: can't add hid device: -71
[  249.951398][   T15] usbhid: probe of 1-1:0.0 failed with error -71
[  249.958751][   T25] usb 4-1: bad CDC descriptors
[  249.963208][  T304] usbhid 3-1:0.0: can't add hid device: -71
[  249.974628][   T15] usb 1-1: USB disconnect, device number 35
[  249.980652][  T304] usbhid: probe of 3-1:0.0 failed with error -71
[  249.983886][   T24] audit: type=1326 audit(2000000876.196:1914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7206 comm="syz.2.2149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7ff353a8dbd9 code=0x7ffc0000
[  249.988703][  T304] usb 3-1: USB disconnect, device number 33
[  250.012960][   T24] audit: type=1326 audit(2000000876.196:1915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7206 comm="syz.2.2149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff353a8dbd9 code=0x7ffc0000
[  250.039163][   T24] audit: type=1326 audit(2000000876.196:1916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7206 comm="syz.2.2149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff353a8dbd9 code=0x7ffc0000
[  250.062964][   T24] audit: type=1326 audit(2000000876.196:1917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7206 comm="syz.2.2149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff353a8dbd9 code=0x7ffc0000
[  250.087095][   T24] audit: type=1326 audit(2000000876.196:1918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7206 comm="syz.2.2149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff353a8dbd9 code=0x7ffc0000
[  250.110679][   T24] audit: type=1326 audit(2000000876.196:1919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7206 comm="syz.2.2149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff353a8dbd9 code=0x7ffc0000
[  250.134242][   T24] audit: type=1326 audit(2000000876.196:1920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7206 comm="syz.2.2149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff353a8dbd9 code=0x7ffc0000
[  250.158791][ T7200] udc-core: couldn't find an available UDC or it's busy
[  250.167682][ T7200] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  250.175036][   T24] audit: type=1326 audit(2000000876.196:1921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7206 comm="syz.2.2149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff353a8dbd9 code=0x7ffc0000
[  250.268919][ T1389] usb 4-1: USB disconnect, device number 36
[  250.399662][ T7223] x_tables: duplicate underflow at hook 1
[  250.406431][ T7223] devpts: called with bogus options
[  250.575580][  T306] rtl8150 5-1:0.0: couldn't reset the device
[  250.581567][  T306] rtl8150: probe of 5-1:0.0 failed with error -5
[  250.832558][  T442] usb 5-1: USB disconnect, device number 33
[  250.947650][ T7258] netlink: 'syz.2.2164': attribute type 8 has an invalid length.
[  250.973006][ T7266] ������: renamed from bond_slave_0
[  251.043973][ T7282] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2176'.
[  251.078864][ T7289] bridge0: port 2(bridge_slave_1) entered disabled state
[  251.085833][ T7289] bridge0: port 1(bridge_slave_0) entered disabled state
[  251.097739][ T7289] device bridge_slave_1 left promiscuous mode
[  251.103765][ T7289] bridge0: port 2(bridge_slave_1) entered disabled state
[  251.111192][ T7289] device bridge_slave_0 left promiscuous mode
[  251.133482][ T7289] bridge0: port 1(bridge_slave_0) entered disabled state
[  251.156326][ T7300] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2179'.
[  251.295685][ T7307] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2185'.
[  251.528792][ T7340] bridge0: port 2(bridge_slave_1) entered disabled state
[  251.535783][ T7340] bridge0: port 1(bridge_slave_0) entered disabled state
[  251.546035][ T7340] device bridge_slave_1 left promiscuous mode
[  251.546103][ T7340] bridge0: port 2(bridge_slave_1) entered disabled state
[  251.562774][ T7340] device bridge_slave_0 left promiscuous mode
[  251.569029][ T7340] bridge0: port 1(bridge_slave_0) entered disabled state
[  251.597683][ T7349] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2199'.
[  252.175955][ T7365] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2207'.
[  252.434270][ T7385] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2215'.
[  252.550663][ T7398] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2221'.
[  252.618869][ T7402] netlink: 3 bytes leftover after parsing attributes in process `syz.1.2222'.
[  253.237056][ T7451] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #15: comm syz.4.2243: casefold flag without casefold feature
[  253.253708][ T7451] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: inode #12: comm syz.4.2243: missing EA_INODE flag
[  253.268786][ T7451] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.2243: error while reading EA inode 12 err=-117
[  253.281222][ T7451] EXT4-fs (loop4): 1 orphan inode deleted
[  253.286951][ T7451] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue
[  253.337272][ T7464] hub 6-0:1.0: USB hub found
[  253.341825][ T7464] hub 6-0:1.0: 1 port detected
[  253.358522][ T7470] input: syz1 as /devices/virtual/input/input54
[  253.444092][ T7485] hub 6-0:1.0: USB hub found
[  253.448804][ T7485] hub 6-0:1.0: 1 port detected
[  253.655535][  T317] usb 2-1: new high-speed USB device number 48 using dummy_hcd
[  253.807745][ T7514] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  253.863355][ T6684] FAT-fs (loop4): error, corrupted directory (invalid entries)
[  253.870910][ T6684] FAT-fs (loop4): Filesystem has been set read-only
[  253.877786][ T6684] FAT-fs (loop4): error, corrupted directory (invalid entries)
[  253.895527][  T317] usb 2-1: Using ep0 maxpacket: 16
[  254.016091][  T317] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping
[  254.017863][ T7534] bridge0: port 1(bridge_slave_0) entered blocking state
[  254.033339][ T7534] bridge0: port 1(bridge_slave_0) entered disabled state
[  254.041789][ T7534] device bridge_slave_0 entered promiscuous mode
[  254.051729][ T7534] bridge0: port 2(bridge_slave_1) entered blocking state
[  254.058799][ T7534] bridge0: port 2(bridge_slave_1) entered disabled state
[  254.066065][ T7534] device bridge_slave_1 entered promiscuous mode
[  254.114823][ T7534] bridge0: port 2(bridge_slave_1) entered blocking state
[  254.121720][ T7534] bridge0: port 2(bridge_slave_1) entered forwarding state
[  254.128791][ T7534] bridge0: port 1(bridge_slave_0) entered blocking state
[  254.135573][ T7534] bridge0: port 1(bridge_slave_0) entered forwarding state
[  254.154453][  T287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  254.162030][  T287] bridge0: port 1(bridge_slave_0) entered disabled state
[  254.171552][  T287] bridge0: port 2(bridge_slave_1) entered disabled state
[  254.185868][   T15] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  254.193994][   T15] bridge0: port 1(bridge_slave_0) entered blocking state
[  254.195359][ T7558] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2290'.
[  254.200865][   T15] bridge0: port 1(bridge_slave_0) entered forwarding state
[  254.201349][   T15] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  254.215602][  T317] usb 2-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e
[  254.216859][   T15] bridge0: port 2(bridge_slave_1) entered blocking state
[  254.224665][  T317] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  254.233424][   T15] bridge0: port 2(bridge_slave_1) entered forwarding state
[  254.255663][  T317] usb 2-1: Product: syz
[  254.259666][  T317] usb 2-1: Manufacturer: syz
[  254.264047][  T317] usb 2-1: SerialNumber: syz
[  254.271331][  T317] usb 2-1: config 0 descriptor??
[  254.276384][   T15] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  254.284238][   T15] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  254.302926][   T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  254.311463][   T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  254.323779][ T7534] device veth0_vlan entered promiscuous mode
[  254.331904][ T1389] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  254.340233][ T1389] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  254.348549][ T1389] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  254.355994][ T1389] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  254.369535][ T7534] device veth1_macvtap entered promiscuous mode
[  254.376621][  T317] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  254.384612][  T317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  254.392645][  T317] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  254.403840][ T1389] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  254.412169][ T1389] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  254.426876][ T1389] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  254.436093][ T1389] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  254.492618][   T48] device veth1_macvtap left promiscuous mode
[  254.501783][   T48] device veth0_vlan left promiscuous mode
[  254.534582][  T317] usb 2-1: USB disconnect, device number 48
[  254.635581][ T7566] loop_set_status: loop3 () has still dirty pages (nrpages=3)
[  254.915555][   T25] usb 1-1: new high-speed USB device number 36 using dummy_hcd
[  255.065401][ T7639] overlayfs: conflicting lowerdir path
[  255.087781][ T7641] tipc: Failed to remove local publication {66,1,1}/2148355747
[  255.096275][ T7641] tipc: Failed to remove local publication {66,1,1}/2148355747
[  255.156890][   T25] usb 1-1: Using ep0 maxpacket: 32
[  255.180067][ T7659] device vlan0 entered promiscuous mode
[  255.189548][ T7659] device vlan0 left promiscuous mode
[  255.275613][   T25] usb 1-1: config index 0 descriptor too short (expected 156, got 27)
[  255.284061][   T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  255.295047][   T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid wMaxPacketSize 0
[  255.415616][  T442] usb 2-1: new high-speed USB device number 49 using dummy_hcd
[  255.455636][   T25] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  255.465089][   T25] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  255.473791][   T25] usb 1-1: Product: syz
[  255.478351][   T25] usb 1-1: Manufacturer: syz
[  255.482959][   T25] usb 1-1: SerialNumber: syz
[  255.488288][   T25] usb 1-1: config 0 descriptor??
[  255.686965][  T442] usb 2-1: Using ep0 maxpacket: 8
[  255.728156][   T25] usb 1-1: USB disconnect, device number 36
[  255.745548][ T1389] usb 4-1: new high-speed USB device number 37 using dummy_hcd
[  255.805675][  T442] usb 2-1: New USB device found, idVendor=10b8, idProduct=0bb9, bcdDevice=2f.22
[  255.814882][  T442] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  255.823900][  T442] usb 2-1: config 0 descriptor??
[  256.005542][ T1389] usb 4-1: Using ep0 maxpacket: 8
[  256.084264][   T25] usb 2-1: USB disconnect, device number 49
[  256.135594][ T1389] usb 4-1: config index 0 descriptor too short (expected 301, got 45)
[  256.143769][ T1389] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  256.153886][ T1389] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  256.164298][ T1389] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  256.174339][ T1389] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  256.187752][ T1389] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  256.197227][ T1389] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  256.281293][ T7711] netlink: 'syz.0.2359': attribute type 12 has an invalid length.
[  256.295754][ T7711] netlink: 'syz.0.2359': attribute type 29 has an invalid length.
[  256.315549][ T7711] netlink: 'syz.0.2359': attribute type 2 has an invalid length.
[  256.323087][ T7711] netlink: 'syz.0.2359': attribute type 2 has an invalid length.
[  256.335526][ T7711] netlink: 'syz.0.2359': attribute type 1 has an invalid length.
[  256.343256][ T7711] netlink: 'syz.0.2359': attribute type 2 has an invalid length.
[  256.351186][ T7711] bridge0: port 1(bridge_slave_0) entered disabled state
[  256.366761][   T24] kauditd_printk_skb: 111 callbacks suppressed
[  256.366771][   T24] audit: type=1107 audit(2000000882.666:2033): pid=7712 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='�R�\4���M�'
[  256.410905][   T24] audit: type=1400 audit(2000000882.706:2034): avc:  denied  { bind } for  pid=7716 comm="syz.0.2362" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  256.566545][ T7734] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2370'.
[  256.665316][ T7739] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue
[  256.685684][ T7739] EXT4-fs error (device loop4): ext4_mb_generate_buddy:808: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  256.827187][ T7758] EXT4-fs error (device loop4): __ext4_iget:4958: inode #14: block 1886221359: comm syz.4.2379: invalid block
[  256.838985][ T7758] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.2379: couldn't read orphan inode 14 (err -117)
[  256.850946][ T7758] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue
[  256.859831][ T7758] ext4 filesystem being mounted at /16/file1 supports timestamps until 2038 (0x7fffffff)
[  256.945933][ T7766] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2380'.
[  257.085575][   T25] usb 2-1: new high-speed USB device number 50 using dummy_hcd
[  257.408354][ T7774] device pim6reg1 entered promiscuous mode
[  257.445609][   T25] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[  257.454516][   T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  257.463267][   T25] usb 2-1: config 0 descriptor??
[  257.474991][   T24] audit: type=1400 audit(2000000883.766:2035): avc:  denied  { write } for  pid=7775 comm="syz.2.2384" name="uhid" dev="devtmpfs" ino=169 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[  257.730534][   T24] audit: type=1400 audit(2000000884.026:2036): avc:  denied  { accept } for  pid=7783 comm="syz.4.2388" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1
[  257.751072][  T306] usb 3-1: new high-speed USB device number 34 using dummy_hcd
[  257.955686][   T25] usb 2-1: Cannot set MAC address
[  257.960626][   T25] MOSCHIP usb-ethernet driver: probe of 2-1:0.0 failed with error -71
[  257.969658][   T25] usb 2-1: USB disconnect, device number 50
[  258.005527][  T306] usb 3-1: Using ep0 maxpacket: 8
[  258.135577][  T306] usb 3-1: config 4 has an invalid interface number: 216 but max is 1
[  258.153664][  T306] usb 3-1: config 4 has no interface number 1
[  258.159838][  T306] usb 3-1: config 4 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping
[  258.170297][  T306] usb 3-1: config 4 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping
[  258.335606][  T306] usb 3-1: New USB device found, idVendor=0b05, idProduct=1791, bcdDevice=1d.68
[  258.344556][  T306] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  258.352585][  T306] usb 3-1: Product: syz
[  258.357110][  T306] usb 3-1: Manufacturer: syz
[  258.361611][  T306] usb 3-1: SerialNumber: syz
[  258.471083][  T306] usb 4-1: USB disconnect, device number 37
[  258.608030][  T442] usb 3-1: USB disconnect, device number 34
[  258.636749][ T7814] EXT4-fs error (device loop1) in ext4_do_update_inode:5275: error 27
[  258.644990][ T7814] EXT4-fs error (device loop1): ext4_dirty_inode:6079: inode #16: comm syz.1.2400: mark_inode_dirty error
[  258.656555][ T7814] EXT4-fs error (device loop1) in ext4_do_update_inode:5275: error 27
[  258.664673][ T7814] EXT4-fs error (device loop1): __ext4_ext_dirty:182: inode #16: comm syz.1.2400: mark_inode_dirty error
[  258.682120][ T7814] EXT4-fs error (device loop1) in ext4_do_update_inode:5275: error 27
[  258.690517][ T7814] EXT4-fs error (device loop1) in ext4_orphan_del:3246: error 27
[  258.698381][ T7814] EXT4-fs error (device loop1) in ext4_do_update_inode:5275: error 27
[  258.707048][ T7814] EXT4-fs error (device loop1): ext4_truncate:4361: inode #16: comm syz.1.2400: mark_inode_dirty error
[  258.718265][ T7814] EXT4-fs error (device loop1) in ext4_orphan_cleanup:3108: error 27
[  258.726694][ T7814] EXT4-fs (loop1): 1 truncate cleaned up
[  258.732210][ T7814] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue
[  258.741130][ T7814] ext4 filesystem being mounted at /110/file1 supports timestamps until 2038 (0x7fffffff)
[  258.797474][ T7814] EXT4-fs error (device loop1): ext4_xattr_block_get:546: inode #15: comm syz.1.2400: corrupted xattr block 19
[  258.810820][ T7814] SELinux: inode_doinit_use_xattr:  getxattr returned 74 for dev=loop1 ino=15
[  258.826276][ T7814] EXT4-fs error (device loop1): ext4_xattr_block_get:546: inode #15: comm syz.1.2400: corrupted xattr block 19
[  258.841245][ T7814] SELinux: inode_doinit_use_xattr:  getxattr returned 74 for dev=loop1 ino=15
[  258.850283][ T7814] EXT4-fs error (device loop1): ext4_xattr_block_get:546: inode #15: comm syz.1.2400: corrupted xattr block 19
[  258.875081][ T7814] SELinux: inode_doinit_use_xattr:  getxattr returned 74 for dev=loop1 ino=15
[  258.901763][ T5750] EXT4-fs warning (device loop1): ext4_dirblock_csum_set:424: inode #2: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D.
[  258.917125][ T5750] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2915: inode #18: comm syz-executor: corrupted xattr block 14
[  258.929734][ T5750] EXT4-fs warning (device loop1): ext4_evict_inode:303: xattr delete (err -74)
[  258.938856][ T5750] EXT4-fs warning (device loop1): ext4_dirblock_csum_set:424: inode #2: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D.
[  258.954142][ T5750] EXT4-fs error (device loop1): ext4_xattr_block_get:546: inode #15: comm syz-executor: corrupted xattr block 19
[  258.966068][ T5750] SELinux: inode_doinit_use_xattr:  getxattr returned 74 for dev=loop1 ino=15
[  258.974851][ T5750] EXT4-fs error (device loop1): ext4_xattr_block_get:546: inode #15: comm syz-executor: corrupted xattr block 19
[  258.986821][ T5750] SELinux: inode_doinit_use_xattr:  getxattr returned 74 for dev=loop1 ino=15
[  258.996212][ T5750] EXT4-fs warning (device loop1): ext4_dirblock_csum_set:424: inode #2: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D.
[  259.011727][ T5750] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2915: inode #15: comm syz-executor: corrupted xattr block 19
[  259.024150][ T5750] EXT4-fs warning (device loop1): ext4_evict_inode:303: xattr delete (err -74)
[  259.033293][ T5750] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:403: inode #12: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D.
[  259.048787][ T5750] EXT4-fs error (device loop1): htree_dirblock_to_tree:1062: inode #12: comm syz-executor: Directory block failed checksum
[  259.061698][ T5750] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:403: inode #12: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D.
[  259.077262][ T5750] EXT4-fs error (device loop1): ext4_empty_dir:3031: inode #12: comm syz-executor: Directory block failed checksum
[  259.089617][ T5750] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:403: inode #12: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D.
[  259.105324][ T5750] EXT4-fs error (device loop1): htree_dirblock_to_tree:1062: inode #12: comm syz-executor: Directory block failed checksum
[  259.119217][ T5750] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:403: inode #12: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D.
[  259.135496][ T5750] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:403: inode #12: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D.
[  259.156207][  T442] usb 1-1: new high-speed USB device number 37 using dummy_hcd
[  259.364482][ T7849] EXT4-fs error (device loop4): ext4_find_inline_data_nolock:163: inode #12: comm syz.4.2416: inline data xattr refers to an external xattr inode
[  259.385384][ T7849] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.2416: couldn't read orphan inode 12 (err -117)
[  259.394735][ T7853] bridge0: port 1(bridge_slave_0) entered blocking state
[  259.397344][ T7849] EXT4-fs (loop4): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000200000,user_xattr,grpjquota=,resuid=0x0000000000000000,prjquota,usrjquota=,usrjquota=,min_batch_time=0x000000000000409e,nodiscard,,errors=continue
[  259.403972][ T7853] bridge0: port 1(bridge_slave_0) entered disabled state
[  259.432648][ T7849] ------------[ cut here ]------------
[  259.439060][ T7849] kernel BUG at fs/ext4/inode.c:5246!
[  259.439674][ T7853] device bridge_slave_0 entered promiscuous mode
[  259.444265][ T7849] invalid opcode: 0000 [#1] PREEMPT SMP KASAN
[  259.456302][ T7849] CPU: 1 PID: 7849 Comm: syz.4.2416 Tainted: G        W         5.10.218-syzkaller-00638-g3feee789f446 #0
[  259.467400][ T7849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
[  259.477304][ T7849] RIP: 0010:ext4_mark_iloc_dirty+0x3e51/0x3e60
[  259.483289][ T7849] Code: 6f ca ff e9 0f f1 ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 21 f1 ff ff 48 89 df e8 49 70 ca ff e9 14 f1 ff ff e8 0f dc 8c ff <0f> 0b 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 55 48 89 e5 41 57 41
[  259.502728][ T7849] RSP: 0018:ffffc900010f7280 EFLAGS: 00010287
[  259.508629][ T7849] RAX: ffffffff81ddce71 RBX: 0000000000000000 RCX: 0000000000040000
[  259.516443][ T7849] RDX: ffffc9000313b000 RSI: 0000000000000527 RDI: 0000000000000528
[  259.524250][ T7849] RBP: ffffc900010f7390 R08: ffffffff81ddaa8d R09: ffffed10251e1e67
[  259.532062][ T7849] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000
[  259.539870][ T7849] R13: 00000000ffffffff R14: 0000000000000000 R15: ffff888119025000
[  259.547686][ T7849] FS:  00007fca748c86c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000
[  259.556451][ T7849] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  259.562873][ T7849] CR2: 0000000000000000 CR3: 000000011294c000 CR4: 00000000003506a0
[  259.570770][ T7849] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  259.578593][ T7849] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  259.586389][ T7849] Call Trace:
[  259.589531][ T7849]  ? __die_body+0x62/0xb0
[  259.593685][ T7849]  ? die+0x88/0xb0
[  259.597243][ T7849]  ? do_trap+0x1a4/0x310
[  259.601323][ T7849]  ? ext4_mark_iloc_dirty+0x3e51/0x3e60
[  259.606790][ T7849]  ? handle_invalid_op+0x95/0xc0
[  259.611560][ T7849]  ? ext4_mark_iloc_dirty+0x3e51/0x3e60
[  259.616944][ T7849]  ? exc_invalid_op+0x32/0x50
[  259.621458][ T7849]  ? asm_exc_invalid_op+0x12/0x20
[  259.626316][ T7849]  ? ext4_mark_iloc_dirty+0x1a6d/0x3e60
[  259.631696][ T7849]  ? ext4_mark_iloc_dirty+0x3e51/0x3e60
[  259.637081][ T7849]  ? ext4_mark_iloc_dirty+0x3e51/0x3e60
[  259.642467][ T7849]  __ext4_mark_inode_dirty+0x4fc/0x7b0
[  259.647761][ T7849]  ? sb_end_intwrite+0x110/0x110
[  259.652529][ T7849]  ? current_time+0x1af/0x2f0
[  259.657045][ T7849]  ? atime_needs_update+0x5a0/0x5a0
[  259.662077][ T7849]  ? add_dirent_to_buf+0x423/0x780
[  259.667023][ T7849]  add_dirent_to_buf+0x64c/0x780
[  259.671799][ T7849]  ? ext4_dx_add_entry+0x1600/0x1600
[  259.676921][ T7849]  ext4_add_entry+0x921/0x1280
[  259.681523][ T7849]  ? ext4_inc_count+0x190/0x190
[  259.686207][ T7849]  ? dquot_initialize+0x20/0x20
[  259.690889][ T7849]  ? ext4_lookup+0x549/0xaa0
[  259.695316][ T7849]  ext4_add_nondir+0x97/0x270
[  259.699920][ T7849]  ext4_create+0x348/0x530
[  259.704170][ T7849]  ? ext4_lookup+0xaa0/0xaa0
[  259.708597][ T7849]  ? selinux_inode_create+0x22/0x30
[  259.713637][ T7849]  ? security_inode_create+0xbc/0x100
[  259.718837][ T7849]  ? ext4_lookup+0xaa0/0xaa0
[  259.723263][ T7849]  path_openat+0x1377/0x3000
[  259.727699][ T7849]  ? do_filp_open+0x460/0x460
[  259.732205][ T7849]  do_filp_open+0x21c/0x460
[  259.736546][ T7849]  ? vfs_tmpfile+0x2b0/0x2b0
[  259.740973][ T7849]  ? get_unused_fd_flags+0x94/0xa0
[  259.745916][ T7849]  do_sys_openat2+0x13f/0x6f0
[  259.750429][ T7849]  ? __kasan_check_write+0x14/0x20
[  259.755376][ T7849]  ? do_sys_open+0x220/0x220
[  259.759806][ T7849]  ? account_locked_vm+0x1a0/0x1a0
[  259.764751][ T7849]  __x64_sys_openat+0x243/0x290
[  259.769436][ T7849]  ? __ia32_sys_open+0x270/0x270
[  259.774210][ T7849]  ? __kasan_check_read+0x11/0x20
[  259.779071][ T7849]  do_syscall_64+0x34/0x70
[  259.783410][ T7849]  entry_SYSCALL_64_after_hwframe+0x61/0xcb
[  259.789137][ T7849] RIP: 0033:0x7fca75646bd9
[  259.793393][ T7849] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  259.812976][ T7849] RSP: 002b:00007fca748c8048 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  259.821325][ T7849] RAX: ffffffffffffffda RBX: 00007fca757d4f60 RCX: 00007fca75646bd9
[  259.829128][ T7849] RDX: 00000000000026e1 RSI: 0000000020000240 RDI: ffffffffffffff9c
[  259.836938][ T7849] RBP: 00007fca756b5e60 R08: 0000000000000000 R09: 0000000000000000
[  259.844836][ T7849] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  259.852654][ T7849] R13: 000000000000000b R14: 00007fca757d4f60 R15: 00007fffd40e7f98
[  259.861035][ T7849] Modules linked in:
[  259.864885][ T7849] ---[ end trace 6841f112ce68451b ]---
[  259.870792][ T7849] RIP: 0010:ext4_mark_iloc_dirty+0x3e51/0x3e60
[  259.877131][ T7849] Code: 6f ca ff e9 0f f1 ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 21 f1 ff ff 48 89 df e8 49 70 ca ff e9 14 f1 ff ff e8 0f dc 8c ff <0f> 0b 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 55 48 89 e5 41 57 41
[  259.896691][ T7849] RSP: 0018:ffffc900010f7280 EFLAGS: 00010287
[  259.902912][ T7849] RAX: ffffffff81ddce71 RBX: 0000000000000000 RCX: 0000000000040000
SYZFAIL: failed to recv rpc
fd=3 want=4 sent=0 n=0 (errno 9: Bad file descriptor)
[  259.910827][ T7849] RDX: ffffc9000313b000 RSI: 0000000000000527 RDI: 0000000000000528
[  259.918656][ T7849] RBP: ffffc900010f7390 R08: ffffffff81ddaa8d R09: ffffed10251e1e67
[  259.926816][ T7849] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000
[  259.934977][ T7849] R13: 00000000ffffffff R14: 0000000000000000 R15: ffff888119025000
[  259.938931][ T7853] bridge0: port 2(bridge_slave_1) entered blocking state
[  259.942907][ T7849] FS:  00007fca748c86c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000
[  259.949930][ T7853] bridge0: port 2(bridge_slave_1) entered disabled state
[  259.958621][ T7849] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  259.958630][ T7849] CR2: 0000000000000000 CR3: 000000011294c000 CR4: 00000000003506a0
[  259.958640][ T7849] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  259.958646][ T7849] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  259.958665][ T7849] Kernel panic - not syncing: Fatal exception
[  259.966107][ T7853] device bridge_slave_1 entered promiscuous mode
[  259.980055][ T7849] Kernel Offset: disabled
[  260.011949][ T7849] Rebooting in 86400 seconds..