last executing test programs:

3m20.92545168s ago: executing program 0 (id=292):
socket$inet6_tcp(0xa, 0x1, 0x0)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/pm_async', 0x402, 0x4)
socket$inet_tcp(0x2, 0x1, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$key(0xf, 0x3, 0x2)
socket$packet(0x11, 0x3, 0x300)
socket$nl_route(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
socket$key(0xf, 0x3, 0x2)
socket$nl_xfrm(0x10, 0x3, 0x6)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0xffe, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0)

3m20.746930707s ago: executing program 0 (id=293):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
open(&(0x7f00009e1000)='./file0\x00', 0x149040, 0x40)
syz_open_procfs(0x0, &(0x7f0000000200)='uid_map\x00')
bpf$MAP_CREATE(0x0, &(0x7f0000001700)=ANY=[@ANYBLOB="160000000000000061b1000002"], 0x48)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/fscaps', 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r2, &(0x7f00000012c0)=ANY=[@ANYRES8=r2], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x12, r2, 0x0)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_GETKMSGREDIRECT(r3, 0x541c, &(0x7f0000000000))

3m20.37824772s ago: executing program 0 (id=296):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000080)={[{@quota}, {@quota}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@orlov}, {@test_dummy_encryption_v1}, {@jqfmt_vfsv1}]}, 0x3, 0x452, &(0x7f00000008c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x8042, 0x60)
pwrite64(r0, &(0x7f0000000040)="0e", 0x1, 0x8080c61)
memfd_create(&(0x7f0000000000)='-&:{-\xaa]{\x00', 0x2)
syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='smaps_rollup\x00')
fchdir(r1)
r2 = inotify_init()
inotify_add_watch(r2, &(0x7f0000000000)='./file0\x00', 0x80000006)
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x32, r1, 0xfffff000)
r3 = memfd_create(&(0x7f00000005c0)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10`\xee\xa9\x8b\x06%\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xa96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xd9Jx\xaa\x8f~\xb94a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xd6m\xf7@]iNP\xf1\x1d\xab\x13\xce\x152s\xb8\x85\x98\x84\xbf\x8c\x80{\x16\t\xd6\x17P3\xe9\xebGKL\xd3\x88\xd2\rLG\x8e\xd6\xa72\xf4\x92\xeb&\xa5\xcc\x14FZN\x98%[p\x989\xf6\xf5\xb6\xedk\xe6\xb0\xa1\x8f\x90\xdb\xd6h)\x0f6\x88\x03P\x8ak\xf9\xc9\x82`\xa7Ku\x99\xab\xd4\xb2\xaa1\x99O\x8b\x99-\xe3', 0x1)
r4 = dup(r3)
write$binfmt_elf64(r4, &(0x7f0000000140)=ANY=[@ANYBLOB="7f454c4606ff78b3050000000000000002003e00cd000000c9030000000000004000000000000000ea0200000000000002000100050038000101"], 0x178)
execveat(r4, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
r5 = open(&(0x7f0000000240)='./file1\x00', 0xcd042, 0x0)
sendfile(r5, r0, 0x0, 0x80000000c)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
ioctl$TCSETAF(r6, 0x5408, &(0x7f0000000080)={0x7f, 0x4, 0x0, 0x9, 0xb})
write$binfmt_aout(r6, &(0x7f00000000c0)=ANY=[], 0xbfb3)
ioctl$TCSETS(r6, 0x40045431, &(0x7f0000000280)={0x0, 0xfffffffd, 0x0, 0x0, 0xff, "0000000000000400f7ff00"})
r7 = socket$netlink(0x10, 0x3, 0x4)
bind$netlink(r7, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfc, 0x80000000}, 0xc)
r8 = syz_open_pts(r6, 0x101000)
ioctl$TCSETS2(r6, 0x402c542b, &(0x7f0000000100)={0x80000000, 0x9, 0xb, 0x1, 0x81, "be2559f077d8ae0ef59d0652d446475f022fa2", 0x4, 0x3ff})
r9 = dup3(r8, r6, 0x0)
ioctl$TIOCSTI(r9, 0x5412, &(0x7f0000000000)=0x17)
ioctl$KVM_TDX_GET_CPUID(r0, 0xc008aeba, &(0x7f00000002c0)={0x5, 0x0, &(0x7f0000000100)={0x6, 0x0, [{0x7, 0x727, 0x2, 0xc0000000, 0xfffffff7, 0x8, 0xfffffff7}, {0xa, 0x4, 0x4, 0x1, 0x1665, 0xae, 0x7}, {0xc0000000, 0x8, 0x1, 0x8, 0x448e860e, 0x50d, 0xd}, {0x40000000, 0x2, 0x5, 0x5f2, 0x8001, 0x9, 0xc}, {0xa, 0x3cde, 0x4, 0x58, 0x68b, 0x0, 0x1}, {0xc0000001, 0x2d8bb36c, 0x2, 0x94, 0x1, 0x80000000, 0x8}]}})

3m19.442850249s ago: executing program 0 (id=298):
socket$inet6_tcp(0xa, 0x1, 0x0)
openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/uevent_helper', 0x4c241, 0x106)
socket$inet_tcp(0x2, 0x1, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$key(0xf, 0x3, 0x2)
socket$packet(0x11, 0x3, 0x300)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="240000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="3b2c27ac3b74f1f3beb0a7d2048965e7bdd73412401b6e7e42a3760e11b32211e19b185eaca2e6bfaa77471c4f0213077073e54537057fbc0f326dd6d7f43f348b95d2af13"], 0x24}}, 0x0)
socket(0x10, 0x803, 0x0)
socket$key(0xf, 0x3, 0x2)
socket$nl_xfrm(0x10, 0x3, 0x6)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$nl_route(0x10, 0x3, 0x0)
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'bridge_slave_0\x00', <r4=>0x0})
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@bridge_setlink={0x24, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r4}, [@IFLA_AF_SPEC={0x4, 0xc, 0x0, 0x0}]}, 0x24}, 0x1, 0x0, 0x0, 0x20004814}, 0x40000)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0)
mount$bpf(0x0, &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x84000, 0x0)
mount$bpf(0x0, &(0x7f0000000ac0)='./file0/../file0\x00', 0x0, 0x244000, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0xffe, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0)

3m19.300444253s ago: executing program 0 (id=301):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
open(&(0x7f00009e1000)='./file0\x00', 0x149040, 0x40)
syz_open_procfs(0x0, &(0x7f0000000200)='uid_map\x00')
bpf$MAP_CREATE(0x0, &(0x7f0000001700)=ANY=[@ANYBLOB="160000000000000061b1000002"], 0x48)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/fscaps', 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='auxv\x00')
pipe2$9p(&(0x7f0000000240), 0x0)
socket$inet6(0xa, 0x2, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r3, &(0x7f00000012c0)=ANY=[@ANYRES8=r3], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x12, r3, 0x0)
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_GETKMSGREDIRECT(r4, 0x541c, 0x0)

3m19.292927511s ago: executing program 0 (id=303):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000106a053103000000000001090224000100008000090400101c0300010009210000000122f80409058103"], 0x0)
mount$9p_fd(0x0, 0x0, 0x0, 0x40c8, &(0x7f0000000240))
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)

3m19.129397022s ago: executing program 32 (id=303):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000106a053103000000000001090224000100008000090400101c0300010009210000000122f80409058103"], 0x0)
mount$9p_fd(0x0, 0x0, 0x0, 0x40c8, &(0x7f0000000240))
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)

2m27.875603188s ago: executing program 4 (id=474):
r0 = socket$packet(0x11, 0x3, 0x300)
setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
listxattr(&(0x7f0000000240)='./file0/file3\x00', &(0x7f0000000300)=""/36, 0x24)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0\x00'})
syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f0000000040), 0x3, 0x5eb, &(0x7f0000000c00)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x0, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r5, 0x0, 0x0)
connect$inet6(r5, &(0x7f0000000100)={0xa, 0x4e24, 0x0, @rand_addr, 0x1}, 0x1c)
sendmmsg(r5, 0x0, 0x0, 0x0)
splice(r5, 0x0, r4, 0x0, 0x7ffff000, 0x6)
request_key(&(0x7f0000000180)='keyring\x00', &(0x7f0000000380)={'syz', 0x0}, &(0x7f00000001c0)='q\xa9', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0/file3\x00', 0x1d0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYBLOB="8111000000000000140003006272696467655f736c6176655f30000008000400d400000008000a00285d"], 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x0)

2m24.382583789s ago: executing program 4 (id=485):
mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1)
r0 = socket$unix(0x1, 0x5, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x101042, 0x15)
ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000100)=@ethtool_regs={0x12, 0x0, 0xbb, "95285394a3bccb8e76a0fafeb86ebb06073afe87e1a66d96373284b01cfcaa6c18294a600a82889652ef560742e547e586622276acc219a0a74147c99c41b056972f18ce268ad4118ebde0b206e3f1c8d2db4d966e47ac6505b1c9e2b6e648a07782f1c2a57050320194450906ff5ae4eaaa516bb05470f9548ae8d8f1b82ee957d6f2fda8e6e054b9adb2406a22a877ba60d8baf9e72db3d67d4c59ee8ac5827d6e728ba1b8a7070fd4bf6be98010cd170762ab63ed927662f193"}})

2m24.366609676s ago: executing program 4 (id=486):
prctl$PR_MCE_KILL(0x35, 0x1, 0x0)
socket(0x10, 0x803, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
r3 = getpgid(r0)
sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x2)
recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x120)
syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x20020, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]})
umount2(&(0x7f00000002c0)='./file0\x00', 0x9)

2m22.860900691s ago: executing program 4 (id=491):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94)
r1 = socket(0x1e, 0x1, 0x0)
shutdown(r1, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c10, &(0x7f0000000400), 0xff, 0x23f, &(0x7f0000000540)="$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")
setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000002b40), 0x24, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc0)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x10, 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000000280)='./file0/file0\x00', 0x400a8, 0x0, 0x5, 0x0, 0x0)
mremap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000, 0x7, &(0x7f0000ffc000/0x2000)=nil)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x104000, 0x0)
mount$bind(&(0x7f0000000480)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0/../file0\x00', 0x0, 0xa1c08, 0x0)
mount$fuse(0x0, &(0x7f00000005c0)='./file0/file0\x00', 0x0, 0x88000, 0x0)
mount$bind(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0/file0/../file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0)
sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x840}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x40001)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x88840, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1)
syz_kvm_setup_cpu$x86(r5, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x3, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000ce000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000200)="66450fc7746e0a0fb51ef2ab400f79ac680080000066bba100ed0fc77310c4427d988c170500000074495470fb70190c190c75a854ff048fa800b6c3f9", 0x3d}], 0x1, 0x8, 0x0, 0x0)
ioctl$KVM_SET_NESTED_STATE(r5, 0x4080aebf, &(0x7f0000003680)=@vmx={0x3, 0x0, 0x2080, {0x0, 0x3000}, {'\x00', "00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008bc584c800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f6f38740000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a4900"}})
ioctl$KVM_RUN(r5, 0xae80, 0x0)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x2, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000b80), 0x200008, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './cgroup'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})

2m19.754788914s ago: executing program 4 (id=501):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r0, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x120)
mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8c, 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x20020, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]})
umount2(&(0x7f00000002c0)='./file0\x00', 0x9)
mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@index_on}]})

2m19.602387596s ago: executing program 4 (id=503):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000010024bd7000fc0ddf2500000000", @ANYRES32=0x0, @ANYBLOB="1b0b04000300000008001b"], 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0)
r1 = syz_pidfd_open(0x0, 0x0)
r2 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f00000000c0)={0x9}, 0x10)
sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@gettaction={0x1c, 0x5a, 0xc6b747b6bf1c6b95, 0x0, 0x0, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8}]}, 0x1c}}, 0x0)
r3 = open$dir(&(0x7f0000000040)='./file0\x00', 0x400000, 0x40)
r4 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r6 = socket$inet6(0xa, 0x3, 0xff)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r8 = openat$selinux_policy(0xffffff9c, &(0x7f0000000180), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x1, &(0x7f0000000200)=@raw=[@exit], &(0x7f0000000180)='GPL\x00', 0x2, 0xe9, &(0x7f0000000240)=""/233, 0x0, 0x28}, 0x94)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r8, 0x0)
write$tun(r7, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x3a)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r9 = syz_genetlink_get_family_id$mptcp(&(0x7f00000012c0), r8)
sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r2, &(0x7f0000001480)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001440)={&(0x7f0000001300)={0x140, r9, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x9b}, @MPTCP_PM_ATTR_ADDR={0x4c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x18}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x48, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1c}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010102}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xe}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xe}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x14, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x8}, @MPTCP_PM_ATTR_ADDR={0x44, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x30, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x94}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x9}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00'}]}]}, 0x140}, 0x1, 0x0, 0x0, 0x8080}, 0x2000c804)
sendto(r6, 0x0, 0x40, 0x810, &(0x7f00000008c0)=@nl=@unspec={0x0, 0x700, 0x0, 0x80fe}, 0x80)
r10 = openat$zero(0xffffffffffffff9c, &(0x7f0000000240), 0x8202, 0x0)
mmap$binder(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1, 0x11, r10, 0x8000000000000000)
r11 = memfd_create(&(0x7f0000000000)='-&:{-\xaa]{\x00', 0x2)
writev(r11, &(0x7f0000000400)=[{&(0x7f0000000080)="4f7229ef3e12", 0x6}, {&(0x7f0000001900)="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", 0x1e7}], 0x2)
poll(&(0x7f0000000100)=[{r0, 0x1014}, {r1, 0x560c}, {r3, 0x16}, {r4, 0x5000}], 0x4, 0x1ff)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xa, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48)

2m19.363829163s ago: executing program 33 (id=503):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000010024bd7000fc0ddf2500000000", @ANYRES32=0x0, @ANYBLOB="1b0b04000300000008001b"], 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0)
r1 = syz_pidfd_open(0x0, 0x0)
r2 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f00000000c0)={0x9}, 0x10)
sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@gettaction={0x1c, 0x5a, 0xc6b747b6bf1c6b95, 0x0, 0x0, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8}]}, 0x1c}}, 0x0)
r3 = open$dir(&(0x7f0000000040)='./file0\x00', 0x400000, 0x40)
r4 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r6 = socket$inet6(0xa, 0x3, 0xff)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r8 = openat$selinux_policy(0xffffff9c, &(0x7f0000000180), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x1, &(0x7f0000000200)=@raw=[@exit], &(0x7f0000000180)='GPL\x00', 0x2, 0xe9, &(0x7f0000000240)=""/233, 0x0, 0x28}, 0x94)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r8, 0x0)
write$tun(r7, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x3a)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r9 = syz_genetlink_get_family_id$mptcp(&(0x7f00000012c0), r8)
sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r2, &(0x7f0000001480)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001440)={&(0x7f0000001300)={0x140, r9, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x9b}, @MPTCP_PM_ATTR_ADDR={0x4c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x18}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x48, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1c}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010102}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xe}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xe}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x14, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x8}, @MPTCP_PM_ATTR_ADDR={0x44, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x30, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x94}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x9}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00'}]}]}, 0x140}, 0x1, 0x0, 0x0, 0x8080}, 0x2000c804)
sendto(r6, 0x0, 0x40, 0x810, &(0x7f00000008c0)=@nl=@unspec={0x0, 0x700, 0x0, 0x80fe}, 0x80)
r10 = openat$zero(0xffffffffffffff9c, &(0x7f0000000240), 0x8202, 0x0)
mmap$binder(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1, 0x11, r10, 0x8000000000000000)
r11 = memfd_create(&(0x7f0000000000)='-&:{-\xaa]{\x00', 0x2)
writev(r11, &(0x7f0000000400)=[{&(0x7f0000000080)="4f7229ef3e12", 0x6}, {&(0x7f0000001900)="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", 0x1e7}], 0x2)
poll(&(0x7f0000000100)=[{r0, 0x1014}, {r1, 0x560c}, {r3, 0x16}, {r4, 0x5000}], 0x4, 0x1ff)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xa, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48)

7.77272627s ago: executing program 3 (id=1055):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000106a053103000000000001090224000100008000090400101c0300010009210000000122f80409058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f000000da40)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)}, {0x0}, {&(0x7f00000002c0)='VBq', 0x3}], 0x3, &(0x7f0000000300)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x7}}], 0x18}}], 0x1, 0x4040810)
syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0)

5.404956907s ago: executing program 3 (id=1068):
socket$tipc(0x1e, 0x2, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
socket$packet(0x11, 0x3, 0x300)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x723080, 0x0)
syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000017c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r0, @ANYBLOB], 0x0)

4.985826881s ago: executing program 6 (id=1070):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file2\x00', 0x1010051, &(0x7f0000000800)={[{@errors_remount}, {@noload}, {@noblock_validity}, {@dioread_lock}, {@nouid32}, {@nomblk_io_submit}]}, 0x1, 0x546, &(0x7f0000000180)="$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")
lstat(&(0x7f0000000b80)='./file2\x00', 0x0)

4.880334692s ago: executing program 6 (id=1071):
r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0x7, {[@local=@item_4={0x3, 0x2, 0x2, "e8ff916b"}, @global=@item_012={0x1, 0x1, 0x3, "ae"}]}}, 0x0}, 0x0)

4.861148598s ago: executing program 1 (id=1072):
socket(0xf, 0xa, 0x5)
socket$inet_udp(0x2, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x218}}, 0x0)
getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040020000010000000", @ANYRES32=r4, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="3c0000001800010000000000000000000a00000000000000000000000c00090008000080", @ANYRES32=r4, @ANYBLOB="14000500fe80"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000010c0)=ANY=[@ANYBLOB="3c0000001800010000000000000000000a00000000000000000000000c00090008000000", @ANYRES32=r4, @ANYBLOB="14000500fe80"], 0x3c}}, 0x0)
socket$nl_audit(0x10, 0x3, 0x9)
socket$inet(0x2, 0x4000000000000001, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0)
write$binfmt_script(r7, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r7, 0x0)
getsockopt$netlink(r7, 0x10e, 0x4, &(0x7f0000000300)=""/239, &(0x7f0000000200)=0xef)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYRES64, @ANYRESOCT=r7], 0x44}}, 0x0)
preadv(r7, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x1fe, 0x0, 0xb000, 0x2000, &(0x7f0000000000/0x2000)=nil})
r8 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0)
keyctl$join(0x1, &(0x7f0000000100)={'syz', 0x2})
ioctl$KVM_RUN(r8, 0xae80, 0x0)

4.832451513s ago: executing program 3 (id=1073):
syz_mount_image$f2fs(&(0x7f0000000100), &(0x7f00000000c0)='./file2\x00', 0x0, &(0x7f0000000240)={[{@noextent_cache}, {@four_active_logs}, {@checkpoint_merge}, {@nocheckpoint_merge}, {@gc_merge}, {@background_gc_off}, {@noinline_xattr}, {@fastboot}, {@prjquota={'prjquota', 0x3d, '-'}}, {@discard_unit_section}, {}, {@disable_ext_identify}, {@extent_cache}, {@resgid}, {@user_xattr}]}, 0x21, 0x552d, &(0x7f000000abc0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x143042, 0x80)
pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfe}], 0x1, 0x5405, 0x0, 0x0)
sendfile(r0, r0, 0x0, 0x7a680000)

4.38039045s ago: executing program 3 (id=1077):
socket$tipc(0x1e, 0x2, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
socket$packet(0x11, 0x3, 0x300)
openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180))
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x723080, 0x0)
syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000017c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYBLOB='\a'], 0x0)

4.367803258s ago: executing program 1 (id=1078):
bpf$PROG_LOAD(0x5, &(0x7f0000001040)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000010000000000000000000000711816000000000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@loopback, 0x800, 0x0, 0x1, 0x1, 0x0, 0x2}, 0x20)
ioctl$FIOCLEX(r0, 0x5451)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000400)=@filter={'filter\x00', 0xe, 0x4, 0x4e8, 0xffffffff, 0x320, 0x320, 0x320, 0xffffffff, 0xffffffff, 0x418, 0x418, 0x418, 0xffffffff, 0x4, &(0x7f0000000100), {[{{@ipv6={@empty, @private2={0xfc, 0x2, '\x00', 0x1}, [0xff, 0xff, 0xffffffff, 0xff000000], [0xffffffff, 0xff, 0xffffffff, 0xff], 'ip_vti0\x00', 'gretap0\x00', {}, {}, 0x3c, 0x4, 0x3}, 0x0, 0x228, 0x250, 0x0, {}, [@common=@inet=@policy={{0x158}, {[{@ipv6=@loopback, [0xffffffff, 0xff000000, 0xffffffff, 0xff], @ipv4=@broadcast, [0xff, 0xffffffff, 0xffffffff, 0xff], 0x4d6, 0x3507, 0x73, 0x1, 0x8, 0x18}, {@ipv4=@local, [0xff000000, 0xff000000], @ipv4=@dev={0xac, 0x14, 0x14, 0x2b}, [0xffffff00, 0x0, 0xffffff00], 0x4d2, 0x3507, 0x6c, 0x1, 0x12, 0x4}, {@ipv6=@rand_addr=' \x01\x00', [0xff000000, 0xffffff00, 0xff000000, 0xff000000], @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0xff000000, 0xffffff00, 0xffff00, 0xff000000], 0x4d4, 0x3503, 0x88, 0x1}, {@ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2b}}, [0x0, 0xff, 0xffffff00, 0xff0000ff], @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xffffffff, 0xffffff00, 0xff000000, 0xff000000], 0x4d6, 0x3505, 0xc, 0x1, 0x3, 0xe}], 0x1, 0x1}}, @common=@inet=@socket1={{0x28}, 0x1}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x4}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2, [0xffffffff, 0x0, 0xffffff00, 0xffffff00], [0xff, 0x807fffff, 0xffffff00, 0xff], '\x00', 'veth0_to_bond\x00', {0xff}, {0xff}, 0xbc, 0x7, 0x4, 0x46c48ed18c5fab45}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@icmp6={{0x28}, {0x12, "53a9"}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x548)
r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
recvmsg$can_bcm(r2, &(0x7f0000000ec0)={&(0x7f0000000180)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, &(0x7f0000000d80)=[{&(0x7f0000000200)=""/143, 0x8f}, {&(0x7f00000002c0)=""/135, 0x87}, {&(0x7f0000000980)=""/101, 0x65}, {&(0x7f0000000a00)=""/168, 0xa8}, {&(0x7f0000000380)=""/30, 0x1e}, {&(0x7f0000002540)=""/151, 0x97}, {&(0x7f0000000b80)=""/226, 0xe2}, {&(0x7f0000000c80)=""/130, 0x82}, {&(0x7f0000000d40)=""/31, 0x1f}, {&(0x7f0000001100)=""/4096, 0x1000}], 0xa, &(0x7f0000000e40)=""/92, 0x5c}, 0x10000)
pipe2(&(0x7f0000000040)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
sendto$packet(0xffffffffffffffff, &(0x7f0000000000)="11", 0x1, 0x2404c081, &(0x7f0000000200)={0x11, 0x88a8, r5, 0x1, 0x4, 0x6, @local}, 0x14)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000f40)={'wg0\x00', <r6=>0x0})
r7 = socket(0x11, 0x3, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'wg0\x00', <r9=>0x0})
bind$packet(r7, &(0x7f00000001c0)={0x11, 0x0, r9, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}}, 0x14)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000f80)={'wg0\x00', <r10=>0x0})
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000002100)={'ip6tnl0\x00', &(0x7f0000000fc0)={'ip6_vti0\x00', <r11=>0x0, 0x4, 0x8, 0x9, 0x4, 0x64, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7800, 0x1, 0x0, 0x3}})
sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f0000002500)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000024c0)={&(0x7f0000002600)=ANY=[@ANYBLOB="74030000", @ANYRES16=0x0, @ANYBLOB="020028bd7000fddbdf2501000000b40002804c0001800800010005000000080001000000000008000100030000000800010004000000080001000700000008000100060000000800010007000000080001000400000008000100030000001c00018008000100070000000800010008000000080001000300000014000180080001000100000008000100000000003400018008000100010000000800010007000000080001000a0000000800010003000000080001000700000008000100040000003c0001800800030001000000140002006970366772653000000000000000000008000300030000001400020076657468305f746f5f62617461647600d8000280140001800800010004000000080001000100000014000180080001000500000008000100060000000c00018008000100050000000c0001800800010002000000340001800800010005000000080001000100000008000100060000000800010008000000080001000600000008000100080000000c000180080001000400000054000180080001000a000000080001000300000008000100080000000800010006000000080001000500000008000100080000000800010008000000080001000700000008000100070000000800010008000000a0000280340001800800010000000000080001000000000008000100040000000800010002000000080001000000000008000100070000004c00018008000100080000000800010004000000080001000200000008000100000000000800010002000000080001000800000008000100030000000800010002000000080001000f0000001c000180080001000100000008000100030000000800010006000000480001800800010040511d24a6ebd76a64571ff9785ef4dd3e27d71e", @ANYRES32=r5, @ANYBLOB="080003000300000008000100", @ANYRES32=r6, @ANYBLOB="1400020065727370616e30000000000000000000080003000200000008000100", @ANYRES32=r9, @ANYBLOB="0800030000000000600001801400020070696d72656700000000000000000000080003000300000008000100", @ANYRES32=r10, @ANYBLOB="0800030003000000140002006970366772653000000000000000000008000100", @ANYRES32=r11, @ANYBLOB="1400020068737230000000000000000000000000040003004800028044000180080001000300000008000100219d15b008000100070000000800010003000000080001000600000008000100000000000800010000000000080001000200000004000300"], 0x374}, 0x1, 0x0, 0x0, 0x20000800}, 0x1)
prlimit64(0x0, 0xb, &(0x7f0000000000), 0x0)
rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8)
r12 = gettid()
tkill(r12, 0x14)
syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000080)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r3, @ANYBLOB="05"], 0x0)

3.468431334s ago: executing program 2 (id=1083):
prlimit64(0x0, 0xf, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x40001f9, 0x2, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = dup(r4)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
writev(r3, &(0x7f0000000440)=[{&(0x7f0000000700)="b00c7037e07686acd2c8dd812560e8ae88a8", 0x12}, {&(0x7f0000000580)="32de034f646b", 0x6}], 0x2)
timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100))
r6 = socket$inet(0x2, 0x5, 0x2)
setsockopt$inet_buf(r6, 0x0, 0x20, &(0x7f00000001c0)="d02f89e1a51432427b57d456330ce42d7dea4dd9a3925830660af314993501d14f4b756eaafbfe92c432a6dc97a44b6180177f485b88c0947fd25306b30f5eeea3d285c2db80de4622d195a5d66e6e1a11c11777b6c961be6b50128edbcc0df0136b72ed50942e0cbd7aee4d41386daed52eb9f8f2785f286c93a31e38550ceb", 0x80)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
nanosleep(&(0x7f0000000340)={0x0, 0x3938700}, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
r7 = syz_open_procfs(0x0, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_clone3(&(0x7f0000000540)={0x4000000, 0x0, &(0x7f0000000180), 0x0, {0x1f}, &(0x7f0000000880)=""/92, 0x5c, 0x0, 0x0, 0x0, {r7}}, 0x58)
syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x8080, &(0x7f0000000b80)=ANY=[@ANYBLOB="636865636b3d7374726963742c757466383d312c757466383d302c757466383d312c6e66732c6572726f72733d72656d6f756e742d726f2c73686f72746e616d653d77696e6e742c00043518f9aad8a4f2c1cdb3e993cf0444d9d2d40bb509d4da042c2c85e3650de97db42c38cafa7a9d7503c3c985486cf7fc80515e9bef7e9e56fb346de370b3eb3ecbc59d343c36bf04efc3d68033308b0014b0c677ae5ef2932cc05f566112668fa4f6844dcf823618a2993da771384e8fc12467a56b33e3b00030dbfd82ea2f8ddbeb1d04bac86815ebe0b9d084d60edf56b15e74589892dce86962f611a4313120b738dddfd38d20b443570197dc795020ecf541601ef9a5618869febf769dd50261849a47e170ba166b97e76a0261d0dc1fb3e2646595f1c8b49057d94f10f7b5e35ead0a38", @ANYRES8=0x0], 0x3, 0x232, &(0x7f0000000640)="$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")
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
prctl$PR_SET_THP_DISABLE(0x29, 0x1)
r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00')
preadv(r8, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080))

2.406527199s ago: executing program 1 (id=1084):
syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x1000052, &(0x7f0000000b80)=ANY=[], 0x3, 0x240, &(0x7f00000002c0)="$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")
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000000)='source', &(0x7f00000000c0)='%(:2', 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000003c0)=@filter={'filter\x00', 0x4, 0x4, 0x36c, 0xffffffff, 0xec, 0x0, 0x0, 0xfeffffff, 0xffffffff, 0x2a4, 0x2a4, 0x2a4, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0xa4, 0xec}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x35, {0x3}}}}, {{@uncond, 0x0, 0xa4, 0xec}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x14865e40, {0x6}}}}, {{@ipv6={@mcast1, @loopback, [0xffffffff, 0xff000000, 0xffffff00, 0xffffff00], [0xff000000, 0x0, 0x0, 0xffffffff], 'ip6tnl0\x00', 'veth0_vlan\x00', {0xff}, {}, 0x5c, 0x3a, 0x5, 0x5}, 0x0, 0xa4, 0xcc}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x10, 0x8, 0x1}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x3c8)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, &(0x7f0000000040)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
getdents64(0xffffffffffffffff, &(0x7f0000000400)=""/4096, 0x1000)
r4 = open(&(0x7f0000000080)='./bus\x00', 0x147c7c, 0x0)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
r5 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x389b0d52417bb351)
read$FUSE(r4, &(0x7f0000000600)={0x2020, 0x0, <r6=>0x0}, 0x2020)
write$FUSE_GETXATTR(r5, &(0x7f00000000c0)={0x18, 0x0, r6, {0x8}}, 0x18)

2.008835957s ago: executing program 5 (id=1085):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
ioctl$TCSETAF(r0, 0x5408, 0x0)
write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0xfffffff9, 0x7fff, 0x16, "0062007d82000000000000002240f7ffffff00"})
r1 = syz_open_pts(r0, 0x0)
dup3(r1, r1, 0x80000)
r2 = dup3(r1, r0, 0x0)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
read$FUSE(r3, 0x0, 0x0)
ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000200)=0x17)

1.960776868s ago: executing program 1 (id=1086):
r0 = socket$inet6(0xa, 0x2, 0x0)
mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0)
mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil)
syz_clone3(&(0x7f00000004c0)={0x169a40080, 0x0, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r1 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c)
sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c)
recvmmsg(r1, &(0x7f0000008980)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x0, 0x0)
ioctl$SIOCGSTAMPNS(r1, 0x8907, &(0x7f00000000c0))
r2 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r2)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x22, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x4c, 0x10, 0x403, 0x300, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0xffc}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x4c}}, 0x8000)
getsockname$packet(r2, &(0x7f0000000440)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$ARPT_SO_GET_INFO(r7, 0x0, 0x60, 0x0, &(0x7f0000000540)=0x44)
sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="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", @ANYRES32=r6, @ANYBLOB="971406001b14bf262000128008000100736974001400028008000100", @ANYRES32=r6, @ANYBLOB="06000d00820f0000"], 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x1400c091)
sendmmsg$inet(r0, &(0x7f00000018c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880)

1.813091181s ago: executing program 6 (id=1087):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0)
ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000000))
ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000300)=0x1a)
r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x2)
ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000100)={0xff, 0x4, 0x2, 0x7fffffff, 0x2, "179187997e5937adaf8559904cc10c44d67cfa"})

1.812509801s ago: executing program 6 (id=1088):
r0 = syz_usb_connect$hid(0x6, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x44f, 0xb324, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0xf, 0x70, 0x4, "", [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x3, 0x1, 0x1, 0x0, {0x9, 0x21, 0x12b, 0xf, 0x1, {0x22, 0xbb1}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x38, 0x3, 0x1}}, [{{0x9, 0x5, 0x2, 0x3, 0x3ff, 0xa, 0x3, 0xb0}}]}}}]}}]}}, &(0x7f00000001c0)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x250, 0x2, 0xdc, 0x23, 0x10, 0x3}, 0x24, &(0x7f0000000080)={0x5, 0xf, 0x24, 0x2, [@wireless={0xb, 0x10, 0x1, 0x5e3acd9d16326ec4, 0x40, 0x4, 0x0, 0xff20, 0x9}, @ss_container_id={0x14, 0x10, 0x4, 0x40, "4c51226bcdda8432312c650853eb2d95"}]}, 0x3, [{0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x44a}}, {0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x2809}}, {0x73, &(0x7f0000000140)=@string={0x73, 0x3, "67159fb51dc693f658ba2e60015122638a80d826c98347350c214857769f7a0f9ecb316626cdd90defccaffb69962f948a2cd6a0c3405452cb56fa9193bc3cf420590c24a22f883bc4c76a44304b8cf42bbb49b80e245d72e1f7b8645c4bba0b3a9a589e9adb83a45e4b76ab93578c26a1"}}]})
syz_usb_ep_read(r0, 0x7, 0xad, &(0x7f0000000200)=""/173)
syz_emit_ethernet(0x86, &(0x7f0000000600)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x43}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x50, 0x6, 0x0, @remote, @local, {[@hopopts={0x3b, 0x4, '\x00', [@ra={0x5, 0x2, 0x100}, @jumbo={0xc2, 0x4, 0x5}, @ra={0x5, 0x2, 0x7}, @generic={0x8, 0x11, "c3f206f237ae75fe09048837232672d704"}]}], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x95, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}]}}}}}}}}, 0x0)

1.647335281s ago: executing program 5 (id=1089):
socket$nl_generic(0x10, 0x3, 0x10)
lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140))
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r1=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000d40)=ANY=[@ANYBLOB="840100001900010000000000fcdbdf251d010900500010804900482100c9a7befe6f6d645a1a11b81b2c4b101c7510e19feecb90ee6bb49f6cc7a2c5"], 0x184}, 0x1, 0x0, 0x0, 0x805}, 0x0)

1.580381098s ago: executing program 5 (id=1090):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000000a000000000200000700000001"], 0x50)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000140)={r0, &(0x7f0000000a40)='&', &(0x7f0000000040)=""/98}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000140)={r0, &(0x7f0000000000), &(0x7f0000000040)=""/89}, 0x20)

1.540979251s ago: executing program 5 (id=1091):
creat(&(0x7f0000000140)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10)
socket$unix(0x1, 0x2, 0x0)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/power/disk', 0x20202, 0x112)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000140)=ANY=[@ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x12, r1, 0x0)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_GETKMSGREDIRECT(r2, 0x541c, &(0x7f0000000000))

1.486939131s ago: executing program 5 (id=1092):
syz_mount_image$fuse(0x0, &(0x7f0000000180)='./bus\x00', 0x3000408, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000b80), 0x204008, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './bus'}}]})

1.451349875s ago: executing program 5 (id=1093):
socket$tipc(0x1e, 0x2, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
socket$packet(0x11, 0x3, 0x300)
openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x723080, 0x0)
syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000017c0)=ANY=[@ANYRES8=r0, @ANYBLOB='\a'], 0x0)

1.224701623s ago: executing program 6 (id=1094):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000080)={[{@quota}, {@quota}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@orlov}, {@test_dummy_encryption_v1}, {@jqfmt_vfsv1}]}, 0x3, 0x448, &(0x7f0000000440)="$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")
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f0000000300), 0x4008, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
r0 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528)
r1 = socket$inet6(0xa, 0x3, 0x3a)
connect$inet6(r1, &(0x7f0000000a40)={0xa, 0x4e25, 0x8, @local, 0x9}, 0x1c)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000000000000000000000000008500000011000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000080)='GPL\x00'}, 0x94)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000069000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
pipe2(&(0x7f0000000140)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x84000)
write$P9_RGETLOCK(r5, &(0x7f00000000c0)=ANY=[], 0xffffff6a)
pipe2(&(0x7f0000000240)={0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x4800)
tee(r4, r6, 0xffffbffffffffc01, 0x0)
tee(r4, r6, 0x60000000000, 0x0)
close(0x3)
bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mount(&(0x7f0000000040)=@sg0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000340)='exofs\x00', 0x800, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xa5bc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendmsg(r1, &(0x7f00000000c0)={0x0, 0x953a, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xfff2}], 0x1, 0x0, 0x0, 0x2c}, 0x44004)

1.101173931s ago: executing program 3 (id=1095):
r0 = syz_open_dev$usbfs(&(0x7f00000001c0), 0xcd, 0x60002)
ioctl$USBDEVFS_DISCSIGNAL(r0, 0x8010550e, &(0x7f00000004c0)={0x9, &(0x7f0000000540)="cf7bb80b18d96d2dc36a3ffd8d7653d92106e9ea67d19b2c34581a248aefe2b06ebfeb0be100c683c8f392a0808340a2106e66897d3c482322e38dc2356966fdad7068e3f2750911692b68f0a2385ff6acdd3cfd7b6df0891733aa720ddc494ec4f07d045a74f212bfa80984ea93ee539ab98c1f2095e2"})
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000380)={'pimreg\x00', 0x5005})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000010024bd7000fc0ddf2500000000", @ANYRES32=0x0, @ANYBLOB="1b0b04000300000008001b"], 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0)
r3 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000040)={0x6, 0x6}, 0x4)
write$tun(r2, &(0x7f0000002400)={@void, @val={0x1, 0x0, 0x8, 0x6ed, 0x19, 0xc}, @ipv4=@tcp={{0x5, 0x4, 0x1, 0x1, 0x28, 0x67, 0x0, 0x4a, 0x6, 0x0, @empty, @multicast1}, {{0x4e23, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x20, 0x8}}}}, 0x32)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r4=>0x0})
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'team_slave_1\x00', <r6=>0x0})
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000c00), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x14, r8, 0xf0106b2f9946af23, 0x70bd2d, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4010}, 0x800)
sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f0000000440)={0x64, 0x0, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@ETHTOOL_A_PAUSE_RX={0x5}, @ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}, @ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}, @ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}, @ETHTOOL_A_PAUSE_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}, @ETHTOOL_A_PAUSE_HEADER={0x4}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000040}, 0x4)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r5, r4, 0x25, 0x0, @val=@perf_event={0x200}}, 0x18)
r9 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f0000000180)={'vlan0\x00', &(0x7f00000001c0)=@ethtool_drvinfo={0x3, "979d3101925d368394ba4f98d036ca59319add3ff41b2248dd568fa6aef21fd2", "4f5a1d5087420d1ea92fe831a94d203b9289fad293eba9f6923c050080b9d6ca", "0cc745e828fabdaf0524377c45e84e9aa3ea198973a5fc3b97347529e5d255cb", "9452ed0223b13472630c9f13fb0265faa1cf93fde267d76377af4487e72dacf4", "7aadf39f68bf62fb7afb4425e04a64f000c61554b55e4bfe09305f932af8e4c2", "7a0ef6f1f3e2311a50fcaef1", 0x0, 0x6, 0x0, 0x8, 0x2}})
bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, &(0x7f0000000240)=ANY=[@ANYRES64=r1], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2b, '\x00', r4, @cgroup_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x185, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffe6}, 0x48)
getsockopt$inet_mreq(r1, 0x0, 0x24, &(0x7f00000003c0)={@initdev, @broadcast}, &(0x7f0000000400)=0x8)

979.601049ms ago: executing program 3 (id=1096):
bpf$PROG_LOAD(0x5, &(0x7f0000001040)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000010000000000000000000000711816"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_xfrm(0x10, 0x3, 0x6)
openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
pipe2(&(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000080)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r0, @ANYBLOB="05"], 0x0)

900.416994ms ago: executing program 1 (id=1097):
prctl$PR_MCE_KILL(0x35, 0x1, 0x0)
socket(0x10, 0x803, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
r3 = getpgid(r0)
sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x2)
recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x120)
mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8c, 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x20020, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]})
umount2(&(0x7f00000002c0)='./file0\x00', 0x9)

291.433583ms ago: executing program 6 (id=1098):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r1 = creat(&(0x7f0000000340)='./file0\x00', 0x28)
close(r1)
socket$packet(0x11, 0x2, 0x300)
r2 = socket$packet(0x11, 0x2, 0x300)
r3 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f0000000000)={0x1e57, 0x0, 0xffff7000, 0x26, 0x2, "04ad7d2ed56d7f7f598da7590de9d3001d00", 0x402002, 0x205})
ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000040)=0xa)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'syz_tun\x00', <r4=>0x0})
bind$packet(r2, &(0x7f0000000400)={0x11, 0xf8, r4, 0x1, 0xc, 0x6, @broadcast}, 0x14)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0)
chroot(&(0x7f0000000100)='./file0\x00')
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0xa1, 0x0)
r5 = getpid()
r6 = syz_pidfd_open(r5, 0x0)
mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000000), 0x48, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r6])
bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff}, 0x6)
setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000040)={0x37f, [0x3], 0x1}, 0x10)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@ipv4_newroute={0x2c, 0x1a, 0x1, 0x70bd2c, 0x0, {0x2, 0x20, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000}, [@RTA_IIF={0x38}, @RTA_OIF={0x8}]}, 0x2c}}, 0x10)
r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r8, 0x5423, &(0x7f00000000c0)=0xf)

196.392286ms ago: executing program 2 (id=1099):
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000071183b"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @cgroup_sock=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c000000220001012dbd7000fedbdf2504000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x20044840)

173.152272ms ago: executing program 2 (id=1100):
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
r0 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e04, 0x9, @dev={0xfe, 0x80, '\x00', 0x25}, 0x23}, 0x1c) (async)
sendmmsg$inet6(r0, &(0x7f0000001980)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x64}, 0x10}, 0x1c, 0x0}}], 0x40000000000024e, 0x20002040) (async)
openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x8000, 0x0, 0x0)
setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000140), 0x4)

86.942686ms ago: executing program 2 (id=1101):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000000a000000000200000700000001"], 0x50)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000140)={r0, &(0x7f0000000a40)='&', &(0x7f0000000040)=""/98}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000140)={r0, &(0x7f0000000000), &(0x7f0000000040)=""/89}, 0x20)

86.592215ms ago: executing program 2 (id=1102):
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800"/13], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @cgroup_sock=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c000000220001012dbd7000fedbdf2504000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x20044840)

67.589342ms ago: executing program 2 (id=1103):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r0, @ANYBLOB=',rootmode=00000000000000000040000,u'])
setxattr$incfs_metadata(0x0, &(0x7f00000000c0), 0x0, 0x0, 0x1)
sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x4, 0x1, 0x301, 0x0, 0x0, {0x2, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x830}, 0x20000040)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004004}, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0)
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_NMI(r3, 0xae9a)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200})
getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0xc8bc1d91284f99e0, &(0x7f0000000100), &(0x7f0000000380)=0x8)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x100, 0x5, 0x6, 0x4002, 0x5, 0x37, 0xefffffffffffffff, 0x0, 0x0, 0x2000005, 0xfffffffface6e3cd, 0x40000000001c, 0x1, 0xffffffffffffffff, 0xfd]})
ioctl$KVM_RUN(r3, 0xae80, 0x0)

0s ago: executing program 1 (id=1104):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000080), 0x1, 0x574, &(0x7f00000003c0)="$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")
setxattr$incfs_metadata(&(0x7f0000000240)='./file1\x00', &(0x7f0000000280), &(0x7f0000000380)="30573472b621739984c336124406e8a5c812ca847e3bf1b82ec91d46ab", 0x1d, 0x1)
lsetxattr$trusted_overlay_upper(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000180), &(0x7f0000000000)=ANY=[], 0x361, 0x0)
lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000000)=ANY=[], 0xfe37, 0x0)
syz_usb_connect$cdc_ecm(0x2, 0x56, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020900102505a1a44000000001010902440001fd00000009040000ff0202ffff052406000005240000000d240f0100000000000000000009e6ed71c02ca9086e090582022000000000090503020815ce9ea62d6fa985c5845ae9db6de35ab251351347b6c94ff2e1ed442286b2ef638214daa6caf95fbbd7bdde66a17cd40267f06a9ec3dd5c6a9f48b88398ecac11fb"], 0x0)

kernel console output (not intermixed with test programs):

e 0 for nid 36
[  231.081337][ T3131] loop3: detected capacity change from 0 to 128
[  231.087814][ T3128] erofs: (device loop5): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 65535
[  231.119441][ T3131] syz.3.783: attempt to access beyond end of device
[  231.119441][ T3131] loop3: rw=2049, sector=138, nr_sectors = 112 limit=128
[  231.138830][ T3128] erofs: (device loop5): z_erofs_do_map_blocks: inconsistent algorithmtype 0 for nid 36
[  231.151518][ T3128] erofs: (device loop5): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 65535
[  231.169387][ T3131] syz.3.783: attempt to access beyond end of device
[  231.169387][ T3131] loop3: rw=2049, sector=138, nr_sectors = 8 limit=128
[  231.199704][ T3128] erofs: (device loop5): z_erofs_read_folio: failed to read, err [-117]
[  231.297470][  T522] hid (null): unknown global tag 0xc
[  231.302988][  T522] hid (null): unknown global tag 0xe
[  231.308441][  T522] hid (null): bogus close delimiter
[  231.320932][ T2012] usb 6-1: USB disconnect, device number 14
[  231.334016][  T522] usb 2-1: USB disconnect, device number 38
[  231.528746][ T2179] EXT4-fs (loop6): unmounting filesystem.
[  233.065481][ T3143] 9pnet_virtio: no channels available for device syz
[  234.136436][ T3147] overlayfs: missing 'lowerdir'
[  235.943286][   T28] audit: type=1400 audit(1773209863.249:378): avc:  denied  { read } for  pid=3137 comm="syz.1.786" path="socket:[31634]" dev="sockfs" ino=31634 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  236.441291][ T3156] overlayfs: './file0' not a directory
[  236.502434][ T3158] netlink: 16 bytes leftover after parsing attributes in process `syz.1.790'.
[  236.697884][ T3152] loop2: detected capacity change from 0 to 512
[  236.704670][ T3152] EXT4-fs: Ignoring removed bh option
[  236.739550][ T3152] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem
[  236.789060][ T3152] EXT4-fs (loop2): 1 truncate cleaned up
[  236.794815][ T3152] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  237.043256][ T2031] usb 4-1: new high-speed USB device number 38 using dummy_hcd
[  237.133862][  T286] EXT4-fs (loop2): unmounting filesystem.
[  237.193263][  T382] usb 7-1: new high-speed USB device number 7 using dummy_hcd
[  237.244332][ T2031] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[  237.259942][ T2031] usb 4-1: config 0 has no interface number 0
[  237.336304][ T2031] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  237.349124][ T2031] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  237.359116][ T2031] usb 4-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  237.373334][  T382] usb 7-1: Using ep0 maxpacket: 16
[  237.380957][  T382] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  237.385412][ T2031] usb 4-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00
[  237.400431][ T2031] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  237.401872][  T382] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3
[  237.418467][ T2031] usb 4-1: config 0 descriptor??
[  237.526040][ T3177] netlink: 16 bytes leftover after parsing attributes in process `syz.5.794'.
[  237.733714][  T382] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  237.742814][  T382] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  237.750895][  T382] usb 7-1: Product: syz
[  237.763255][  T382] usb 7-1: Manufacturer: syz
[  237.767909][  T382] usb 7-1: SerialNumber: syz
[  237.799535][ T3180] loop2: detected capacity change from 0 to 128
[  237.824357][ T3180] syz.2.795: attempt to access beyond end of device
[  237.824357][ T3180] loop2: rw=2049, sector=138, nr_sectors = 112 limit=128
[  237.855913][ T3180] syz.2.795: attempt to access beyond end of device
[  237.855913][ T3180] loop2: rw=2049, sector=138, nr_sectors = 8 limit=128
[  237.870075][ T3163] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  237.881720][ T3163] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  237.980417][  T382] usb 7-1: 0:2 : does not exist
[  237.989172][  T382] usb 7-1: 5:0: failed to get current value for ch 0 (-22)
[  238.025724][  T382] usb 7-1: USB disconnect, device number 7
[  238.049865][ T3182] loop2: detected capacity change from 0 to 1024
[  238.077183][ T3182] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  238.130289][ T2031] uclogic 0003:28BD:0042.0015: failed retrieving string descriptor #100: -71
[  238.148475][ T2031] uclogic 0003:28BD:0042.0015: failed retrieving pen parameters: -71
[  238.158291][ T2031] uclogic 0003:28BD:0042.0015: pen probing failed: -71
[  238.275727][ T2031] uclogic 0003:28BD:0042.0015: failed probing parameters: -71
[  238.283310][ T2031] uclogic: probe of 0003:28BD:0042.0015 failed with error -71
[  238.293774][ T2031] usb 4-1: USB disconnect, device number 38
[  238.586138][ T3193] 9pnet_virtio: no channels available for device syz
[  238.609744][ T3193] overlayfs: missing 'lowerdir'
[  238.648224][ T3192] netlink: 36 bytes leftover after parsing attributes in process `syz.2.797'.
[  239.211393][ T3200] FAULT_INJECTION: forcing a failure.
[  239.211393][ T3200] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  239.225172][ T3200] CPU: 1 PID: 3200 Comm: syz.6.800 Not tainted syzkaller #0
[  239.232494][ T3200] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  239.242583][ T3200] Call Trace:
[  239.245884][ T3200]  <TASK>
[  239.248835][ T3200]  __dump_stack+0x21/0x24
[  239.253199][ T3200]  dump_stack_lvl+0x110/0x170
[  239.257911][ T3200]  ? __cfi_dump_stack_lvl+0x8/0x8
[  239.262988][ T3200]  dump_stack+0x15/0x24
[  239.267179][ T3200]  should_fail_ex+0x3d4/0x520
[  239.271893][ T3200]  should_fail+0xb/0x10
[  239.276077][ T3200]  should_fail_usercopy+0x1a/0x20
[  239.281143][ T3200]  _copy_to_user+0x1e/0x90
[  239.285597][ T3200]  simple_read_from_buffer+0xe9/0x160
[  239.291014][ T3200]  proc_fail_nth_read+0x1a6/0x220
[  239.296069][ T3200]  ? __cfi_proc_fail_nth_read+0x10/0x10
[  239.301641][ T3200]  ? security_file_permission+0x94/0xb0
[  239.307218][ T3200]  ? __cfi_proc_fail_nth_read+0x10/0x10
[  239.312830][ T3200]  vfs_read+0x27a/0x910
[  239.317137][ T3200]  ? __cfi_vfs_read+0x10/0x10
[  239.321850][ T3200]  ? __kasan_check_write+0x14/0x20
[  239.326986][ T3200]  ? mutex_lock+0x93/0x1b0
[  239.331423][ T3200]  ? __cfi_mutex_lock+0x10/0x10
[  239.336298][ T3200]  ? __fdget_pos+0x2cd/0x380
[  239.340920][ T3200]  ? ksys_read+0x71/0x250
[  239.345276][ T3200]  ksys_read+0x149/0x250
[  239.349540][ T3200]  ? __cfi_ksys_read+0x10/0x10
[  239.354417][ T3200]  ? debug_smp_processor_id+0x17/0x20
[  239.359821][ T3200]  __x64_sys_read+0x7b/0x90
[  239.364355][ T3200]  x64_sys_call+0x2f/0x9a0
[  239.368806][ T3200]  do_syscall_64+0x4c/0xa0
[  239.373259][ T3200]  ? clear_bhb_loop+0x30/0x80
[  239.377989][ T3200]  ? clear_bhb_loop+0x30/0x80
[  239.382699][ T3200]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  239.388632][ T3200] RIP: 0033:0x7f7531b5cfce
[  239.393081][ T3200] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  239.412724][ T3200] RSP: 002b:00007f75329bbfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  239.421173][ T3200] RAX: ffffffffffffffda RBX: 00007f75329bc6c0 RCX: 00007f7531b5cfce
[  239.429175][ T3200] RDX: 000000000000000f RSI: 00007f75329bc0a0 RDI: 0000000000000005
[  239.437200][ T3200] RBP: 00007f75329bc090 R08: 0000000000000000 R09: 0000000000000000
[  239.445209][ T3200] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  239.453209][ T3200] R13: 00007f7531e16218 R14: 00007f7531e16180 R15: 00007ffc8098fc58
[  239.461221][ T3200]  </TASK>
[  239.750061][ T3204] overlayfs: './file0' not a directory
[  239.813058][ T3205] netlink: 16 bytes leftover after parsing attributes in process `syz.5.802'.
[  240.195848][ T3207] loop5: detected capacity change from 0 to 128
[  240.319478][ T3212] loop6: detected capacity change from 0 to 1024
[  240.337405][ T3212] EXT4-fs: Ignoring removed orlov option
[  240.345330][ T3212] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (52289!=20869)
[  240.356466][ T3212] EXT4-fs (loop6): invalid journal inode
[  240.362199][ T3212] EXT4-fs (loop6): can't get journal size
[  240.368671][ T3210] overlayfs: filesystem on './file0' not supported
[  240.379616][ T3212] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  240.410725][ T2179] EXT4-fs (loop6): unmounting filesystem.
[  240.428631][ T2012] usb 2-1: new high-speed USB device number 39 using dummy_hcd
[  240.447836][ T3216] loop3: detected capacity change from 0 to 128
[  240.470367][ T3216] syz.3.807: attempt to access beyond end of device
[  240.470367][ T3216] loop3: rw=2049, sector=138, nr_sectors = 112 limit=128
[  240.499570][ T3216] syz.3.807: attempt to access beyond end of device
[  240.499570][ T3216] loop3: rw=2049, sector=138, nr_sectors = 8 limit=128
[  240.880645][ T2012] usb 2-1: Using ep0 maxpacket: 16
[  240.887082][ T2012] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  240.901108][ T2012] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0
[  240.913269][ T2012] usb 2-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28
[  240.929530][ T2012] usb 2-1: config 0 interface 0 has no altsetting 0
[  240.936430][ T2012] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[  240.945880][ T2012] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  240.958519][ T2012] usb 2-1: config 0 descriptor??
[  241.049379][  T286] EXT4-fs (loop2): unmounting filesystem.
[  241.129067][ T3231] loop3: detected capacity change from 0 to 1024
[  241.178097][ T3231] EXT4-fs (loop3): INFO: recovery required on readonly filesystem
[  241.210083][ T3231] EXT4-fs (loop3): write access will be enabled during recovery
[  241.236799][ T3231] JBD2: no valid journal superblock found
[  241.242747][ T3231] EXT4-fs (loop3): error loading journal
[  241.270232][ T3236] 9pnet_virtio: no channels available for device syz
[  241.279574][ T3236] overlayfs: failed to resolve './file1': -2
[  241.394096][ T3237] overlayfs: missing 'lowerdir'
[  241.503367][   T28] audit: type=1400 audit(1773209871.929:379): avc:  denied  { name_bind } for  pid=3233 comm="syz.5.811" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1
[  242.366111][ T3244] 9pnet_virtio: no channels available for device syz
[  242.511103][ T3244] overlayfs: missing 'lowerdir'
[  243.048397][ T3246] loop2: detected capacity change from 0 to 128
[  243.194604][ T3250] FAULT_INJECTION: forcing a failure.
[  243.194604][ T3250] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  243.223287][ T3250] CPU: 1 PID: 3250 Comm: syz.1.816 Not tainted syzkaller #0
[  243.230641][ T3250] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  243.240740][ T3250] Call Trace:
[  243.244047][ T3250]  <TASK>
[  243.247089][ T3250]  __dump_stack+0x21/0x24
[  243.251452][ T3250]  dump_stack_lvl+0x110/0x170
[  243.256170][ T3250]  ? __cfi_dump_stack_lvl+0x8/0x8
[  243.261233][ T3250]  dump_stack+0x15/0x24
[  243.265423][ T3250]  should_fail_ex+0x3d4/0x520
[  243.270137][ T3250]  should_fail+0xb/0x10
[  243.274328][ T3250]  should_fail_usercopy+0x1a/0x20
[  243.279397][ T3250]  _copy_from_user+0x1e/0xc0
[  243.284031][ T3250]  ___sys_sendmsg+0x1c3/0x360
[  243.288804][ T3250]  ? __sys_sendmsg+0x290/0x290
[  243.293618][ T3250]  ? kstrtouint+0x74/0xe0
[  243.297997][ T3250]  ? __fdget+0x19c/0x220
[  243.302263][ T3250]  __sys_sendmmsg+0x2cc/0x4e0
[  243.306971][ T3250]  ? __cfi___sys_sendmmsg+0x10/0x10
[  243.312210][ T3250]  ? __cfi_ksys_write+0x10/0x10
[  243.317094][ T3250]  __x64_sys_sendmmsg+0xa0/0xb0
[  243.321979][ T3250]  x64_sys_call+0x3f5/0x9a0
[  243.326511][ T3250]  do_syscall_64+0x4c/0xa0
[  243.330962][ T3250]  ? clear_bhb_loop+0x30/0x80
[  243.335668][ T3250]  ? clear_bhb_loop+0x30/0x80
[  243.340398][ T3250]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  243.346326][ T3250] RIP: 0033:0x7f1acf79c799
[  243.350764][ T3250] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  243.370420][ T3250] RSP: 002b:00007f1ad05ea028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  243.378866][ T3250] RAX: ffffffffffffffda RBX: 00007f1acfa15fa0 RCX: 00007f1acf79c799
[  243.386877][ T3250] RDX: 0000000000000300 RSI: 0000200000004d00 RDI: 0000000000000005
[  243.394879][ T3250] RBP: 00007f1ad05ea090 R08: 0000000000000000 R09: 0000000000000000
[  243.402876][ T3250] R10: 0000000000000f1c R11: 0000000000000246 R12: 0000000000000001
[  243.410881][ T3250] R13: 00007f1acfa16038 R14: 00007f1acfa15fa0 R15: 00007ffcfb736f98
[  243.418892][ T3250]  </TASK>
[  243.581430][ T3253] FAULT_INJECTION: forcing a failure.
[  243.581430][ T3253] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  243.721220][ T3253] CPU: 1 PID: 3253 Comm: syz.5.815 Not tainted syzkaller #0
[  243.728567][ T3253] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  243.738646][ T3253] Call Trace:
[  243.741952][ T3253]  <TASK>
[  243.744903][ T3253]  __dump_stack+0x21/0x24
[  243.749269][ T3253]  dump_stack_lvl+0x110/0x170
[  243.753973][ T3253]  ? __cfi_dump_stack_lvl+0x8/0x8
[  243.759032][ T3253]  dump_stack+0x15/0x24
[  243.763219][ T3253]  should_fail_ex+0x3d4/0x520
[  243.767930][ T3253]  should_fail+0xb/0x10
[  243.772118][ T3253]  should_fail_usercopy+0x1a/0x20
[  243.777174][ T3253]  _copy_from_user+0x1e/0xc0
[  243.781803][ T3253]  seccomp_notify_ioctl+0x66b/0x12d0
[  243.787115][ T3253]  ? __cfi_seccomp_notify_ioctl+0x10/0x10
[  243.792858][ T3253]  ? selinux_file_ioctl+0x391/0x4d0
[  243.798096][ T3253]  ? __cfi_preempt_schedule_irq+0x10/0x10
[  243.803849][ T3253]  ? __switch_to_asm+0x3a/0x60
[  243.808653][ T3253]  ? __cfi_selinux_file_ioctl+0x10/0x10
[  243.814224][ T3253]  ? raw_irqentry_exit_cond_resched+0x29/0x30
[  243.820313][ T3253]  ? irqentry_exit+0x37/0x40
[  243.824926][ T3253]  ? sysvec_reschedule_ipi+0x78/0x80
[  243.830233][ T3253]  ? asm_sysvec_reschedule_ipi+0x1b/0x20
[  243.835909][ T3253]  ? __cfi_seccomp_notify_ioctl+0x10/0x10
[  243.841660][ T3253]  ? __se_sys_ioctl+0x114/0x1b0
[  243.846534][ T3253]  ? __cfi_seccomp_notify_ioctl+0x10/0x10
[  243.852374][ T3253]  __se_sys_ioctl+0x12f/0x1b0
[  243.857080][ T3253]  __x64_sys_ioctl+0x7b/0x90
[  243.861700][ T3253]  x64_sys_call+0x58b/0x9a0
[  243.866231][ T3253]  do_syscall_64+0x4c/0xa0
[  243.870677][ T3253]  ? clear_bhb_loop+0x30/0x80
[  243.875381][ T3253]  ? clear_bhb_loop+0x30/0x80
[  243.880168][ T3253]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  243.886094][ T3253] RIP: 0033:0x7f78c0b9c799
[  243.890538][ T3253] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  243.910345][ T3253] RSP: 002b:00007f78c197a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  243.918800][ T3253] RAX: ffffffffffffffda RBX: 00007f78c0e16090 RCX: 00007f78c0b9c799
[  243.926819][ T3253] RDX: 0000200000000100 RSI: 0000000040182103 RDI: 0000000000000004
[  243.934814][ T3253] RBP: 00007f78c197a090 R08: 0000000000000000 R09: 0000000000000000
[  243.942813][ T3253] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  243.950802][ T3253] R13: 00007f78c0e16128 R14: 00007f78c0e16090 R15: 00007ffefffcdd88
[  243.958813][ T3253]  </TASK>
[  244.058190][ T3255] loop6: detected capacity change from 0 to 1024
[  244.105575][ T3255] ext4: Unknown parameter 'nouser_xattr'
[  244.204923][ T2012] hid (null): unknown global tag 0xc
[  244.210316][ T2012] hid (null): unknown global tag 0xe
[  244.216754][ T2012] hid (null): bogus close delimiter
[  244.231061][ T2012] usb 2-1: USB disconnect, device number 39
[  244.478384][ T3260] loop1: detected capacity change from 0 to 128
[  244.646344][ T3264] loop6: detected capacity change from 0 to 128
[  244.659373][ T3264] EXT4-fs: Ignoring removed nobh option
[  244.677802][ T3264] EXT4-fs (loop6): Test dummy encryption mode enabled
[  244.703746][ T3264] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[  244.744396][ T3264] ext4 filesystem being mounted at /62/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  244.783259][   T39] usb 3-1: new high-speed USB device number 31 using dummy_hcd
[  244.826241][   T28] audit: type=1400 audit(1773209875.279:380): avc:  denied  { setattr } for  pid=3263 comm="syz.6.821" path="/62/mnt/file1" dev="loop6" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[  244.864322][ T2179] EXT4-fs (loop6): unmounting filesystem.
[  244.929963][ T3270] netlink: 20 bytes leftover after parsing attributes in process `syz.6.822'.
[  244.984342][   T39] usb 3-1: config 0 has an invalid interface number: 1 but max is 0
[  244.992418][   T39] usb 3-1: config 0 has no interface number 0
[  245.024235][   T39] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  245.089875][ T3258] loop3: detected capacity change from 0 to 131072
[  245.106393][ T3258] F2FS-fs (loop3): invalid crc value
[  245.139860][ T3258] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (15359802341028777995, 275811881701387)
[  245.176059][ T3277] loop5: detected capacity change from 0 to 1024
[  245.196236][   T39] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  245.206405][ T3277] EXT4-fs (loop5): INFO: recovery required on readonly filesystem
[  245.214335][ T3277] EXT4-fs (loop5): write access will be enabled during recovery
[  245.220298][ T3258] F2FS-fs (loop3): Mounted with checkpoint version = 753bd00b
[  245.222000][ T3277] JBD2: no valid journal superblock found
[  245.222014][ T3277] EXT4-fs (loop5): error loading journal
[  245.264148][   T39] usb 3-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  245.297527][ T3280] 9pnet_virtio: no channels available for device syz
[  245.307561][ T3280] overlayfs: failed to resolve './file1': -2
[  245.316592][ T3280] overlayfs: missing 'lowerdir'
[  245.382586][   T39] usb 3-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00
[  245.585648][   T39] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  245.727736][   T39] usb 3-1: config 0 descriptor??
[  246.151578][ T3284] loop5: detected capacity change from 0 to 512
[  246.191330][ T3284] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  246.217168][ T3262] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  246.234909][ T3262] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  246.253679][ T3284] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002]
[  246.261751][ T3284] System zones: 1-12
[  246.274975][ T3284] EXT4-fs warning (device loop5): ext4_expand_extra_isize_ea:2800: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  246.308558][ T3284] EXT4-fs (loop5): 1 truncate cleaned up
[  246.318515][ T3284] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  246.472856][   T39] uclogic 0003:28BD:0042.0017: failed retrieving string descriptor #100: -71
[  246.493286][   T39] uclogic 0003:28BD:0042.0017: failed retrieving pen parameters: -71
[  246.501435][   T39] uclogic 0003:28BD:0042.0017: pen probing failed: -71
[  246.524389][   T39] uclogic 0003:28BD:0042.0017: failed probing parameters: -71
[  246.531928][   T39] uclogic: probe of 0003:28BD:0042.0017 failed with error -71
[  246.540270][   T28] audit: type=1400 audit(1773209876.989:381): avc:  denied  { setopt } for  pid=3282 comm="syz.5.826" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  246.562657][ T3284] netlink: 68 bytes leftover after parsing attributes in process `syz.5.826'.
[  246.572754][   T39] usb 3-1: USB disconnect, device number 31
[  246.606152][ T3297] input: syz1 as /devices/virtual/input/input43
[  246.810535][ T3304] loop6: detected capacity change from 0 to 1024
[  246.859627][ T3304] ext4: Unknown parameter 'nouser_xattr'
[  246.934910][ T1515] EXT4-fs (loop5): unmounting filesystem.
[  247.000510][ T3309] netlink: 20 bytes leftover after parsing attributes in process `syz.2.833'.
[  247.073073][ T3314] netlink: 40 bytes leftover after parsing attributes in process `syz.2.835'.
[  247.073584][  T522] usb 4-1: new full-speed USB device number 40 using dummy_hcd
[  247.114129][ T3316] x_tables: duplicate underflow at hook 2
[  247.121146][ T3316] netlink: 8 bytes leftover after parsing attributes in process `syz.2.836'.
[  247.249994][ T2012] usb 6-1: new high-speed USB device number 15 using dummy_hcd
[  247.284342][  T522] usb 4-1: config 1 has an invalid interface number: 33 but max is 2
[  247.292848][  T522] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  247.357091][ T3321] 9pnet_virtio: no channels available for device syz
[  247.379473][ T3321] overlayfs: missing 'lowerdir'
[  248.174324][ T3323] loop1: detected capacity change from 0 to 512
[  248.192165][ T3323] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  248.219909][ T3323] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  248.252599][ T3325] loop6: detected capacity change from 0 to 128
[  248.357191][  T522] usb 4-1: config 1 has no interface number 2
[  248.363396][  T522] usb 4-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  248.376365][  T522] usb 4-1: config 1 interface 1 has no altsetting 0
[  248.394333][ T3323] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:477: comm syz.1.838: Invalid block bitmap block 0 in block_group 0
[  248.409264][  T522] usb 4-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40
[  248.421925][ T3323] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6181: Corrupt filesystem
[  248.423716][ T3329] loop2: detected capacity change from 0 to 1024
[  248.437660][ T3323] EXT4-fs error (device loop1): ext4_clear_blocks:883: inode #11: comm syz.1.838: attempt to clear invalid blocks 983261 len 1
[  248.445428][  T522] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  248.606017][ T3323] EXT4-fs error (device loop1): __ext4_get_inode_loc:4515: comm syz.1.838: Invalid inode table block 0 in block_group 0
[  248.644107][ T3329] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  248.670731][ T3323] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5935: Corrupt filesystem
[  248.863153][ T3323] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem
[  250.063316][ T3337] netlink: 36 bytes leftover after parsing attributes in process `syz.2.840'.
[  250.247333][ T2012] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  250.265847][ T3323] EXT4-fs error (device loop1): __ext4_get_inode_loc:4515: comm syz.1.838: Invalid inode table block 0 in block_group 0
[  250.291181][ T2012] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  250.306557][ T3323] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5935: Corrupt filesystem
[  250.318111][ T3323] EXT4-fs error (device loop1): ext4_truncate:4320: inode #11: comm syz.1.838: mark_inode_dirty error
[  250.334859][  T522] usb 4-1: Product: syz
[  250.339157][ T2012] usb 6-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.01
[  250.340387][ T3323] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem
[  250.357997][ T3323] EXT4-fs error (device loop1): __ext4_get_inode_loc:4515: comm syz.1.838: Invalid inode table block 0 in block_group 0
[  250.370202][ T3342] loop6: detected capacity change from 0 to 128
[  250.377450][  T522] usb 4-1: Manufacturer: syz
[  250.383558][  T522] usb 4-1: SerialNumber: syz
[  250.388699][ T2012] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  250.395007][ T3323] EXT4-fs (loop1): 1 truncate cleaned up
[  250.404546][  T522] usb 4-1: can't set config #1, error -71
[  250.411148][  T522] usb 4-1: USB disconnect, device number 40
[  250.418054][ T2012] usb 6-1: config 0 descriptor??
[  250.433475][ T3323] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  250.497871][ T3323] futex_wake_op: syz.1.838 tries to shift op by 32; fix this program
[  250.527320][  T285] EXT4-fs (loop1): unmounting filesystem.
[  250.813334][  T221] usb 2-1: new high-speed USB device number 40 using dummy_hcd
[  251.015294][  T221] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[  251.023707][  T221] usb 2-1: config 0 has no interface number 0
[  251.030221][  T221] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  251.042999][  T221] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  251.054051][  T221] usb 2-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  251.068148][  T221] usb 2-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00
[  251.078284][  T221] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  251.112807][  T221] usb 2-1: config 0 descriptor??
[  251.452718][ T2012] usbhid 6-1:0.0: can't add hid device: -71
[  251.461750][ T2012] usbhid: probe of 6-1:0.0 failed with error -71
[  251.463379][  T286] EXT4-fs (loop2): unmounting filesystem.
[  251.474430][ T2012] usb 6-1: USB disconnect, device number 15
[  251.722747][  T221] uclogic 0003:28BD:0042.0018: failed retrieving string descriptor #100: -71
[  251.733528][  T221] uclogic 0003:28BD:0042.0018: failed retrieving pen parameters: -71
[  251.741806][  T221] uclogic 0003:28BD:0042.0018: pen probing failed: -71
[  251.749120][  T221] uclogic 0003:28BD:0042.0018: failed probing parameters: -71
[  251.753309][  T522] usb 4-1: new high-speed USB device number 41 using dummy_hcd
[  251.757338][  T221] uclogic: probe of 0003:28BD:0042.0018 failed with error -71
[  251.777246][  T221] usb 2-1: USB disconnect, device number 40
[  251.843294][ T2012] usb 6-1: new high-speed USB device number 16 using dummy_hcd
[  251.874802][ T3357] loop2: detected capacity change from 0 to 131072
[  251.885132][ T3357] F2FS-fs (loop2): Found nat_bits in checkpoint
[  251.920666][ T3357] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  251.943676][ T3357] F2FS-fs (loop2): lookup inode (7) has corrupted xattr
[  251.951703][ T3357] F2FS-fs (loop2): lookup inode (7) has corrupted xattr
[  251.958986][  T522] usb 4-1: Using ep0 maxpacket: 16
[  251.966859][  T522] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  251.977169][  T522] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  251.988535][  T522] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  251.998078][  T522] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  252.006279][  T522] usb 4-1: Product: syz
[  252.010571][  T522] usb 4-1: Manufacturer: syz
[  252.015242][  T522] usb 4-1: SerialNumber: syz
[  252.033298][ T2012] usb 6-1: Using ep0 maxpacket: 16
[  252.039533][ T2012] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  252.049846][ T2012] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  252.060174][ T2012] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  252.069294][ T2012] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  252.077453][ T2012] usb 6-1: Product: syz
[  252.081658][ T2012] usb 6-1: Manufacturer: syz
[  252.086311][ T2012] usb 6-1: SerialNumber: syz
[  252.222710][  T522] usb 4-1: 0:2 : does not exist
[  252.236682][  T522] usb 4-1: 5:0: failed to get current value for ch 0 (-22)
[  252.246690][ T3367] loop1: detected capacity change from 0 to 128
[  252.253410][  T221] usb 3-1: new full-speed USB device number 32 using dummy_hcd
[  252.266245][  T522] usb 4-1: USB disconnect, device number 41
[  252.276434][ T3367] syz.1.849: attempt to access beyond end of device
[  252.276434][ T3367] loop1: rw=2049, sector=138, nr_sectors = 112 limit=128
[  252.298336][ T3367] syz.1.849: attempt to access beyond end of device
[  252.298336][ T3367] loop1: rw=2049, sector=138, nr_sectors = 8 limit=128
[  252.312493][ T2012] usb 6-1: 0:2 : does not exist
[  252.320780][ T2012] usb 6-1: 5:0: failed to get current value for ch 0 (-22)
[  252.336855][ T2012] usb 6-1: USB disconnect, device number 16
[  252.454869][  T221] usb 3-1: not running at top speed; connect to a high speed hub
[  252.467781][  T221] usb 3-1: string descriptor 0 read error: -22
[  252.483311][  T221] usb 3-1: New USB device found, idVendor=15ca, idProduct=1806, bcdDevice= 0.40
[  252.502516][  T221] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  252.526463][  T221] usb 3-1: MIDIStreaming interface descriptor not found
[  252.544150][  T343] udevd[343]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory
[  252.555844][ T3369] loop1: detected capacity change from 0 to 1024
[  252.565345][  T337] udevd[337]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  252.581944][ T3369] ext4: Unknown parameter 'nouser_xattr'
[  252.868708][ T3374] loop5: detected capacity change from 0 to 128
[  252.997965][ T3379] x_tables: duplicate underflow at hook 2
[  253.004790][ T3379] netlink: 8 bytes leftover after parsing attributes in process `syz.6.854'.
[  254.072703][ T2031] usb 3-1: USB disconnect, device number 32
[  254.293287][  T446] usb 2-1: new high-speed USB device number 41 using dummy_hcd
[  254.383750][ T3372] loop3: detected capacity change from 0 to 131072
[  254.445548][ T3372] F2FS-fs (loop3): Found nat_bits in checkpoint
[  254.493259][  T446] usb 2-1: Using ep0 maxpacket: 16
[  254.499650][  T446] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  254.500805][ T3383] loop6: detected capacity change from 0 to 131072
[  254.516422][ T2012] usb 6-1: new high-speed USB device number 17 using dummy_hcd
[  254.520562][  T446] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  254.546457][ T3383] F2FS-fs (loop6): invalid crc value
[  254.557115][  T446] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  254.566330][ T3372] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  254.584011][ T3383] F2FS-fs (loop6): Found nat_bits in checkpoint
[  254.597153][ T3397] loop2: detected capacity change from 0 to 1024
[  254.613421][  T446] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  254.632597][  T446] usb 2-1: Product: syz
[  254.647729][ T3397] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  254.661578][  T446] usb 2-1: Manufacturer: syz
[  254.676947][  T446] usb 2-1: SerialNumber: syz
[  254.711447][ T3372] F2FS-fs (loop3): lookup inode (7) has corrupted xattr
[  254.720208][ T3372] F2FS-fs (loop3): lookup inode (7) has corrupted xattr
[  254.727323][ T2012] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  254.739115][ T2012] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  254.752142][ T2012] usb 6-1: New USB device found, idVendor=0582, idProduct=d728, bcdDevice=a0.a7
[  254.761226][ T2012] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  254.770301][ T2012] usb 6-1: config 0 descriptor??
[  254.783950][ T3383] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[  254.891963][  T446] usb 2-1: 0:2 : does not exist
[  254.925408][  T446] usb 2-1: 5:0: failed to get current value for ch 0 (-22)
[  254.971000][ T3404] netlink: 36 bytes leftover after parsing attributes in process `syz.2.858'.
[  255.125018][  T446] usb 2-1: USB disconnect, device number 41
[  255.190604][  T343] udevd[343]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/sound/card1/controlC1/../uevent} for writing: No such file or directory
[  255.217734][  T337] udevd[337]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  255.323286][    T6] usb 4-1: new full-speed USB device number 42 using dummy_hcd
[  255.368795][ T3408] loop6: detected capacity change from 0 to 1024
[  255.377090][ T3408] EXT4-fs: Ignoring removed orlov option
[  255.394793][ T3408] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[  255.410734][   T28] audit: type=1400 audit(1773209885.859:382): avc:  denied  { rename } for  pid=3407 comm="syz.6.860" name="file1" dev="loop6" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  255.436260][   T28] audit: type=1400 audit(1773209885.859:383): avc:  denied  { unlink } for  pid=3407 comm="syz.6.860" name="file0" dev="loop6" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  255.459977][ T2179] EXT4-fs (loop6): unmounting filesystem.
[  255.482809][ T3412] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  255.493736][ T3414] loop6: detected capacity change from 0 to 128
[  255.512384][    T6] usb 4-1: not running at top speed; connect to a high speed hub
[  255.527031][  T448] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready
[  255.536158][  T448] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  255.544993][  T448] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready
[  255.556338][    T6] usb 4-1: string descriptor 0 read error: -22
[  255.562582][    T6] usb 4-1: New USB device found, idVendor=15ca, idProduct=1806, bcdDevice= 0.40
[  255.574552][  T448] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  255.583031][  T448] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  255.591131][    T6] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  255.599865][  T448] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  255.611268][    T6] usb 4-1: MIDIStreaming interface descriptor not found
[  255.618573][  T448] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  255.629535][  T448] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  255.783090][ T2031] usb 4-1: USB disconnect, device number 42
[  255.793862][ T3420] overlayfs: filesystem on './file0' not supported
[  255.864516][ T3421] 9pnet_virtio: no channels available for device syz
[  256.919168][ T3427] input: syz1 as /devices/virtual/input/input44
[  257.078400][  T405] usb 6-1: USB disconnect, device number 17
[  257.154908][ T3434] loop3: detected capacity change from 0 to 1024
[  257.193728][ T3434] EXT4-fs (loop3): INFO: recovery required on readonly filesystem
[  257.223875][ T3434] EXT4-fs (loop3): write access will be enabled during recovery
[  257.263056][ T3434] JBD2: no valid journal superblock found
[  257.273323][ T3434] EXT4-fs (loop3): error loading journal
[  257.313245][  T522] usb 2-1: new high-speed USB device number 42 using dummy_hcd
[  257.514703][  T522] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  257.530715][  T522] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  257.546368][  T522] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  257.569825][  T522] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  257.584631][  T522] usb 2-1: SerialNumber: syz
[  257.629101][  T286] EXT4-fs (loop2): unmounting filesystem.
[  257.798042][  T522] usb 2-1: 0:2 : does not exist
[  257.817485][  T522] usb 2-1: USB disconnect, device number 42
[  257.862227][ T3442] x_tables: duplicate underflow at hook 2
[  257.868685][ T3442] netlink: 8 bytes leftover after parsing attributes in process `syz.3.871'.
[  257.890726][ T3433] loop5: detected capacity change from 0 to 131072
[  257.927629][ T3433] F2FS-fs (loop5): Found nat_bits in checkpoint
[  257.943393][  T405] usb 3-1: new high-speed USB device number 33 using dummy_hcd
[  257.986953][ T3433] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  258.030391][ T3433] F2FS-fs (loop5): lookup inode (7) has corrupted xattr
[  258.038163][ T3433] F2FS-fs (loop5): lookup inode (7) has corrupted xattr
[  258.133237][  T405] usb 3-1: Using ep0 maxpacket: 16
[  258.144064][  T405] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  258.154291][  T405] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  258.174477][  T405] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  258.183769][  T405] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  258.191846][  T405] usb 3-1: Product: syz
[  258.196111][  T405] usb 3-1: Manufacturer: syz
[  258.200785][  T405] usb 3-1: SerialNumber: syz
[  258.323270][  T522] usb 6-1: new full-speed USB device number 18 using dummy_hcd
[  258.349364][ T3453] loop1: detected capacity change from 0 to 128
[  258.433568][  T405] usb 3-1: 0:2 : does not exist
[  258.441485][  T405] usb 3-1: 5:0: failed to get current value for ch 0 (-22)
[  258.453866][  T405] usb 3-1: USB disconnect, device number 33
[  258.666026][  T337] udevd[337]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  258.894382][ T3459] overlayfs: './file0' not a directory
[  258.904988][ T3459] netlink: 16 bytes leftover after parsing attributes in process `syz.3.875'.
[  259.306744][ T3462] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  259.331150][ T3465] overlayfs: './file0' not a directory
[  259.339029][ T3462] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  259.358578][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready
[  259.367361][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  259.377464][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready
[  259.387622][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  259.396178][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  259.405039][ T3467] netlink: 16 bytes leftover after parsing attributes in process `syz.2.878'.
[  259.419922][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  259.430261][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  259.439016][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  259.540199][  T522] usb 6-1: not running at top speed; connect to a high speed hub
[  259.565714][  T522] usb 6-1: string descriptor 0 read error: -22
[  259.572316][  T522] usb 6-1: New USB device found, idVendor=15ca, idProduct=1806, bcdDevice= 0.40
[  259.581816][  T522] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  259.594560][  T522] usb 6-1: MIDIStreaming interface descriptor not found
[  259.669359][ T3474] loop3: detected capacity change from 0 to 1024
[  259.683320][    T6] usb 7-1: new high-speed USB device number 8 using dummy_hcd
[  259.723095][ T3474] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  259.847797][ T3473] netlink: 112 bytes leftover after parsing attributes in process `syz.1.879'.
[  259.894328][    T6] usb 7-1: config 1 has an invalid descriptor of length 32, skipping remainder of the config
[  259.907862][    T6] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3
[  259.919002][ T3480] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3480 comm=syz.1.879
[  259.945816][    T6] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  260.002230][    T6] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  260.037700][    T6] usb 7-1: SerialNumber: syz
[  260.074589][ T3482] netlink: 36 bytes leftover after parsing attributes in process `syz.3.881'.
[  260.265910][    T6] usb 7-1: 0:2 : does not exist
[  260.274906][ T3469] 9pnet_virtio: no channels available for device syz
[  260.291363][    T6] usb 7-1: USB disconnect, device number 8
[  260.342370][ T2012] usb 6-1: USB disconnect, device number 18
[  260.534670][ T3486] loop1: detected capacity change from 0 to 128
[  260.613336][  T522] usb 3-1: new high-speed USB device number 34 using dummy_hcd
[  260.774614][ T3488] overlayfs: filesystem on './file0' not supported
[  261.223951][   T28] audit: type=1400 audit(1773209891.669:384): avc:  denied  { accept } for  pid=3490 comm="syz.6.884" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1
[  261.291334][ T3491] netlink: 52 bytes leftover after parsing attributes in process `syz.6.884'.
[  261.707017][ T3500] overlayfs: './file0' not a directory
[  261.713382][ T2031] usb 6-1: new high-speed USB device number 19 using dummy_hcd
[  261.720554][ T3500] netlink: 16 bytes leftover after parsing attributes in process `syz.1.888'.
[  261.731144][  T522] usb 3-1: config 0 has an invalid interface number: 1 but max is 0
[  261.739659][  T522] usb 3-1: config 0 has no interface number 0
[  261.746191][  T522] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  261.757227][  T522] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  261.767037][  T522] usb 3-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  261.780160][  T522] usb 3-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00
[  261.789395][  T522] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  261.798162][  T522] usb 3-1: config 0 descriptor??
[  261.803472][  T405] usb 7-1: new high-speed USB device number 9 using dummy_hcd
[  261.825658][ T3504] loop1: detected capacity change from 0 to 128
[  261.923516][ T2031] usb 6-1: Using ep0 maxpacket: 16
[  261.930201][ T2031] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  261.940507][ T2031] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  261.951216][ T2031] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  261.960504][ T2031] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  261.968822][ T2031] usb 6-1: Product: syz
[  261.973166][ T2031] usb 6-1: Manufacturer: syz
[  261.977944][ T2031] usb 6-1: SerialNumber: syz
[  261.993282][  T405] usb 7-1: Using ep0 maxpacket: 16
[  261.999965][  T405] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  262.010175][  T405] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3
[  262.020746][  T405] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  262.029925][  T405] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  262.038013][  T405] usb 7-1: Product: syz
[  262.042243][  T405] usb 7-1: Manufacturer: syz
[  262.046937][  T405] usb 7-1: SerialNumber: syz
[  262.186978][ T2031] usb 6-1: 0:2 : does not exist
[  262.194615][ T2031] usb 6-1: 5:0: failed to get current value for ch 0 (-22)
[  262.206093][ T2031] usb 6-1: USB disconnect, device number 19
[  262.223054][  T522] usbhid 3-1:0.1: can't add hid device: -71
[  262.229208][  T522] usbhid: probe of 3-1:0.1 failed with error -71
[  262.236749][  T522] usb 3-1: USB disconnect, device number 34
[  262.254731][  T405] usb 7-1: 0:2 : does not exist
[  262.261995][  T405] usb 7-1: 5:0: failed to get current value for ch 0 (-22)
[  262.275476][  T405] usb 7-1: USB disconnect, device number 9
[  262.483756][  T337] udevd[337]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  262.718848][  T283] EXT4-fs (loop3): unmounting filesystem.
[  262.743750][ T3511] input: syz1 as /devices/virtual/input/input45
[  262.758672][ T3507] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  262.797648][ T3515] netlink: 36 bytes leftover after parsing attributes in process `syz.3.893'.
[  262.819625][ T3517] loop6: detected capacity change from 0 to 1024
[  262.830638][ T3515] xt_TPROXY: Can be used only with -p tcp or -p udp
[  262.849254][ T3517] ext4: Unknown parameter 'nouser_xattr'
[  262.890106][ T3522] loop5: detected capacity change from 0 to 128
[  262.932485][ T3525] loop1: detected capacity change from 0 to 128
[  264.174074][ T3528] overlayfs: filesystem on './file0' not supported
[  264.696152][ T3534] overlayfs: './file0' not a directory
[  264.712700][ T3534] netlink: 16 bytes leftover after parsing attributes in process `syz.1.900'.
[  264.771368][ T3539] loop5: detected capacity change from 0 to 128
[  264.868405][ T2031] usb 7-1: new high-speed USB device number 10 using dummy_hcd
[  264.917095][   T28] audit: type=1400 audit(1773209895.369:385): avc:  denied  { append } for  pid=3541 comm="syz.1.903" name="hwrng" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1
[  264.940635][ T3543] loop1: detected capacity change from 0 to 512
[  264.955898][ T3513] loop2: detected capacity change from 0 to 131072
[  264.963443][   T28] audit: type=1400 audit(1773209895.369:386): avc:  denied  { append } for  pid=3541 comm="syz.1.903" name="hwrng" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1
[  264.990525][ T3543] ext4: Unknown parameter 'smackfsdef'
[  265.000342][ T3513] F2FS-fs (loop2): Found nat_bits in checkpoint
[  265.037863][ T3549] loop1: detected capacity change from 0 to 1024
[  265.055596][ T2031] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  265.076971][ T2031] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3
[  265.086858][ T3549] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  265.096732][ T2031] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  265.107037][ T2031] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  265.113304][ T3513] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  265.174200][ T3513] F2FS-fs (loop2): lookup inode (7) has corrupted xattr
[  265.181776][ T3513] F2FS-fs (loop2): lookup inode (7) has corrupted xattr
[  265.188866][ T2031] usb 7-1: SerialNumber: syz
[  265.408475][ T3560] netlink: 36 bytes leftover after parsing attributes in process `syz.1.904'.
[  265.435070][ T2031] usb 7-1: 0:2 : does not exist
[  265.466058][ T2031] usb 7-1: USB disconnect, device number 10
[  265.483266][  T221] usb 3-1: new full-speed USB device number 35 using dummy_hcd
[  265.633384][  T382] usb 4-1: new high-speed USB device number 43 using dummy_hcd
[  265.648062][ T3562] input: syz1 as /devices/virtual/input/input46
[  265.674706][  T221] usb 3-1: not running at top speed; connect to a high speed hub
[  265.685490][  T221] usb 3-1: string descriptor 0 read error: -22
[  265.691746][  T221] usb 3-1: New USB device found, idVendor=15ca, idProduct=1806, bcdDevice= 0.40
[  265.701132][  T221] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  265.701602][  T337] udevd[337]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  265.719889][  T221] usb 3-1: MIDIStreaming interface descriptor not found
[  265.834581][  T382] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[  265.842669][  T382] usb 4-1: config 0 has no interface number 0
[  265.848891][  T382] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  265.863060][  T382] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  265.872871][  T382] usb 4-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  265.885691][  T382] usb 4-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00
[  265.894806][  T382] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  265.903508][  T382] usb 4-1: config 0 descriptor??
[  266.033304][  T221] usb 6-1: new high-speed USB device number 20 using dummy_hcd
[  266.213288][ T2031] usb 7-1: new high-speed USB device number 11 using dummy_hcd
[  266.220975][  T221] usb 6-1: Using ep0 maxpacket: 16
[  266.227480][  T221] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  266.237639][  T221] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  266.248414][  T221] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  266.257653][  T221] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  266.265743][  T221] usb 6-1: Product: syz
[  266.269930][  T221] usb 6-1: Manufacturer: syz
[  266.274594][  T221] usb 6-1: SerialNumber: syz
[  266.312197][  T382] usbhid 4-1:0.1: can't add hid device: -71
[  266.318375][  T382] usbhid: probe of 4-1:0.1 failed with error -71
[  266.326254][  T382] usb 4-1: USB disconnect, device number 43
[  266.414390][ T2031] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  266.425388][ T2031] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  266.435232][ T2031] usb 7-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.01
[  266.444480][ T2031] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  266.445604][  T522] usb 3-1: USB disconnect, device number 35
[  266.464062][ T2031] usb 7-1: config 0 descriptor??
[  266.483370][  T221] usb 6-1: 0:2 : does not exist
[  266.490771][  T221] usb 6-1: 5:0: failed to get current value for ch 0 (-22)
[  266.504494][  T221] usb 6-1: USB disconnect, device number 20
[  266.677824][ T3569] loop2: detected capacity change from 0 to 128
[  266.748529][  T343] udevd[343]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory
[  266.856071][ T3571] overlayfs: filesystem on './file0' not supported
[  266.881927][ T2031] arvo 0003:1E7D:30D4.0019: unknown main item tag 0x0
[  266.897181][ T2031] arvo 0003:1E7D:30D4.0019: unknown main item tag 0x0
[  266.938429][ T2031] arvo 0003:1E7D:30D4.0019: unknown main item tag 0x0
[  266.977276][ T2031] arvo 0003:1E7D:30D4.0019: unknown main item tag 0x0
[  266.985672][ T2031] arvo 0003:1E7D:30D4.0019: unknown main item tag 0x0
[  266.992784][ T2031] arvo 0003:1E7D:30D4.0019: unknown main item tag 0x0
[  267.001229][ T2031] arvo 0003:1E7D:30D4.0019: unknown main item tag 0x0
[  267.095650][ T2031] arvo 0003:1E7D:30D4.0019: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.6-1/input0
[  267.221380][ T2031] arvo 0003:1E7D:30D4.0019: couldn't init struct arvo_device
[  267.252096][ T3576] loop5: detected capacity change from 0 to 128
[  267.258731][ T2031] arvo 0003:1E7D:30D4.0019: couldn't install keyboard
[  267.324553][ T2031] arvo: probe of 0003:1E7D:30D4.0019 failed with error -71
[  267.418628][ T2031] usb 7-1: USB disconnect, device number 11
[  267.645246][ T3579] overlayfs: './file0' not a directory
[  267.651999][ T3577] fido_id[3577]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory
[  267.674213][ T3579] 9pnet_fd: Insufficient options for proto=fd
[  267.691028][ T3579] netlink: 16 bytes leftover after parsing attributes in process `syz.6.913'.
[  267.763303][  T221] usb 4-1: new high-speed USB device number 44 using dummy_hcd
[  267.953300][  T221] usb 4-1: Using ep0 maxpacket: 16
[  267.960419][  T221] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  267.987399][   T28] audit: type=1400 audit(1773209898.439:387): avc:  denied  { map } for  pid=3588 comm="syz.2.917" path="socket:[34556]" dev="sockfs" ino=34556 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  268.015942][  T221] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0
[  268.048383][  T221] usb 4-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28
[  268.073050][  T285] EXT4-fs (loop1): unmounting filesystem.
[  268.113268][   T28] audit: type=1400 audit(1773209898.439:388): avc:  denied  { read } for  pid=3588 comm="syz.2.917" path="socket:[34556]" dev="sockfs" ino=34556 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  268.146802][  T221] usb 4-1: config 0 interface 0 has no altsetting 0
[  268.167033][  T221] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[  268.186518][  T221] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  268.207817][  T221] usb 4-1: config 0 descriptor??
[  268.243532][ T3593] input: syz1 as /devices/virtual/input/input47
[  268.288009][ T3595] loop2: detected capacity change from 0 to 128
[  268.543600][ T3584] loop6: detected capacity change from 0 to 131072
[  268.553794][ T3584] F2FS-fs (loop6): Corrupted extension count (6192421 + 1 > 64)
[  268.561598][ T3584] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock
[  268.570639][ T3584] F2FS-fs (loop6): invalid crc value
[  268.576397][ T3584] F2FS-fs (loop6): invalid crc value
[  268.581868][ T3584] F2FS-fs (loop6): Failed to get valid F2FS checkpoint
[  268.592171][ T3584] futex_wake_op: syz.6.915 tries to shift op by 36; fix this program
[  268.619898][  T221] hid (null): unknown global tag 0xc
[  268.628416][  T221] hid (null): unknown global tag 0xe
[  268.645275][  T221] hid (null): bogus close delimiter
[  268.662040][  T221] hid (null): unknown global tag 0x95
[  268.665943][ T3600] loop6: detected capacity change from 0 to 256
[  268.714226][ T3600] exFAT-fs (loop6): failed to load upcase table (idx : 0x0001ff53, chksum : 0xd72bb7d8, utbl_chksum : 0xe619d30d)
[  268.743297][  T522] usb 2-1: new high-speed USB device number 43 using dummy_hcd
[  268.768958][   T28] audit: type=1400 audit(1773209899.219:389): avc:  denied  { read write } for  pid=3583 comm="syz.6.915" path="/88/file0/file1" dev="loop6" ino=1049371 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  268.826269][ T2012] usb 4-1: USB disconnect, device number 44
[  268.934801][  T522] usb 2-1: config 1 has an invalid descriptor of length 32, skipping remainder of the config
[  268.950912][  T522] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  268.983630][  T522] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  268.992753][  T522] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  269.013529][  T522] usb 2-1: SerialNumber: syz
[  269.241875][  T522] usb 2-1: 0:2 : does not exist
[  269.266849][  T522] usb 2-1: USB disconnect, device number 43
[  269.363955][ T3608] overlayfs: missing 'lowerdir'
[  269.553284][  T446] usb 6-1: new high-speed USB device number 21 using dummy_hcd
[  269.783277][  T446] usb 6-1: Using ep0 maxpacket: 16
[  269.801860][  T446] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  269.903082][ T3612] loop3: detected capacity change from 0 to 1024
[  270.188707][ T3612] EXT4-fs (loop3): INFO: recovery required on readonly filesystem
[  270.196845][ T3612] EXT4-fs (loop3): write access will be enabled during recovery
[  270.205188][ T3612] JBD2: no valid journal superblock found
[  270.211050][ T3612] EXT4-fs (loop3): error loading journal
[  270.255379][ T3614] x_tables: duplicate underflow at hook 2
[  270.271413][  T446] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  270.281302][ T3614] netlink: 8 bytes leftover after parsing attributes in process `syz.1.925'.
[  270.301842][  T446] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  270.321383][  T446] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  270.331479][  T446] usb 6-1: Product: syz
[  270.345898][  T446] usb 6-1: Manufacturer: syz
[  270.354707][  T446] usb 6-1: SerialNumber: syz
[  270.458502][ T3602] loop6: detected capacity change from 0 to 131072
[  270.489804][ T3602] F2FS-fs (loop6): Found nat_bits in checkpoint
[  270.542402][ T3602] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[  270.582512][  T446] usb 6-1: 0:2 : does not exist
[  270.662357][  T446] usb 6-1: 5:0: failed to get current value for ch 0 (-22)
[  270.679698][  T446] usb 6-1: USB disconnect, device number 21
[  271.317435][ T3628] loop2: detected capacity change from 0 to 1024
[  271.369956][ T3628] EXT4-fs (loop2): INFO: recovery required on readonly filesystem
[  271.377916][ T3628] EXT4-fs (loop2): write access will be enabled during recovery
[  271.388268][ T3628] JBD2: no valid journal superblock found
[  271.394150][ T3628] EXT4-fs (loop2): error loading journal
[  271.473330][ T2031] usb 7-1: new full-speed USB device number 12 using dummy_hcd
[  271.556779][ T3634] input: syz1 as /devices/virtual/input/input48
[  271.664835][ T2031] usb 7-1: not running at top speed; connect to a high speed hub
[  271.675777][ T2031] usb 7-1: string descriptor 0 read error: -22
[  271.682002][ T2031] usb 7-1: New USB device found, idVendor=15ca, idProduct=1806, bcdDevice= 0.40
[  271.691339][ T2031] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  271.701804][ T2031] usb 7-1: MIDIStreaming interface descriptor not found
[  271.753354][ T2589] usb 4-1: new high-speed USB device number 45 using dummy_hcd
[  271.783302][  T522] usb 2-1: new high-speed USB device number 44 using dummy_hcd
[  271.869551][ T2031] usb 7-1: USB disconnect, device number 12
[  271.893299][  T221] usb 3-1: new high-speed USB device number 36 using dummy_hcd
[  271.913346][  T446] usb 6-1: new high-speed USB device number 22 using dummy_hcd
[  271.934429][ T2589] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  271.945400][ T2589] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  271.955445][ T2589] usb 4-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.01
[  271.964833][ T2589] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  271.973236][  T522] usb 2-1: Using ep0 maxpacket: 16
[  271.975024][ T2589] usb 4-1: config 0 descriptor??
[  271.984616][  T522] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  271.995058][  T522] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  272.015104][  T522] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  272.033255][  T522] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  272.041312][  T522] usb 2-1: Product: syz
[  272.045697][  T522] usb 2-1: Manufacturer: syz
[  272.050323][  T522] usb 2-1: SerialNumber: syz
[  272.073316][  T221] usb 3-1: Using ep0 maxpacket: 16
[  272.079957][  T221] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  272.091585][  T221] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0
[  272.102011][  T221] usb 3-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28
[  272.115411][  T221] usb 3-1: config 0 interface 0 has no altsetting 0
[  272.122203][  T221] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[  272.131745][  T221] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  272.140297][  T446] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  272.155344][  T221] usb 3-1: config 0 descriptor??
[  272.160532][  T446] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  272.181944][  T446] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  272.193284][  T446] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  272.201455][  T446] usb 6-1: SerialNumber: syz
[  272.267419][  T522] usb 2-1: 0:2 : does not exist
[  272.281184][  T522] usb 2-1: 5:0: failed to get current value for ch 0 (-22)
[  272.298541][  T522] usb 2-1: USB disconnect, device number 44
[  272.402497][ T2589] arvo 0003:1E7D:30D4.001B: unknown main item tag 0x0
[  272.409573][ T2589] arvo 0003:1E7D:30D4.001B: unknown main item tag 0x0
[  272.417253][  T446] usb 6-1: 0:2 : does not exist
[  272.422788][ T2589] arvo 0003:1E7D:30D4.001B: unknown main item tag 0x0
[  272.430688][  T446] usb 6-1: USB disconnect, device number 22
[  272.436793][ T2589] arvo 0003:1E7D:30D4.001B: unknown main item tag 0x0
[  272.443694][ T2589] arvo 0003:1E7D:30D4.001B: unknown main item tag 0x0
[  272.450774][ T2589] arvo 0003:1E7D:30D4.001B: unknown main item tag 0x0
[  272.458833][ T2589] arvo 0003:1E7D:30D4.001B: unknown main item tag 0x0
[  272.467949][ T2589] arvo 0003:1E7D:30D4.001B: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.3-1/input0
[  272.553425][  T382] usb 7-1: new high-speed USB device number 13 using dummy_hcd
[  272.564187][  T221] hid (null): unknown global tag 0xc
[  272.569663][  T221] hid (null): unknown global tag 0xe
[  272.575149][  T221] hid (null): bogus close delimiter
[  272.602314][ T2589] arvo 0003:1E7D:30D4.001B: couldn't init struct arvo_device
[  272.609852][ T2589] arvo 0003:1E7D:30D4.001B: couldn't install keyboard
[  272.617382][ T2589] arvo: probe of 0003:1E7D:30D4.001B failed with error -71
[  272.626093][ T2589] usb 4-1: USB disconnect, device number 45
[  272.647757][ T3642] fido_id[3642]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory
[  272.734419][  T382] usb 7-1: config 1 has an invalid descriptor of length 32, skipping remainder of the config
[  272.744706][  T382] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3
[  272.754392][  T382] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  272.763546][  T382] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  272.769698][  T446] usb 3-1: USB disconnect, device number 36
[  272.779356][  T382] usb 7-1: SerialNumber: syz
[  272.803566][ T3644] FAULT_INJECTION: forcing a failure.
[  272.803566][ T3644] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  272.816809][ T3644] CPU: 0 PID: 3644 Comm: syz.1.934 Not tainted syzkaller #0
[  272.824137][ T3644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  272.834279][ T3644] Call Trace:
[  272.837564][ T3644]  <TASK>
[  272.840496][ T3644]  __dump_stack+0x21/0x24
[  272.844839][ T3644]  dump_stack_lvl+0x110/0x170
[  272.849522][ T3644]  ? __cfi_dump_stack_lvl+0x8/0x8
[  272.854641][ T3644]  ? vmx_read_guest_seg_ar+0x164/0x380
[  272.860121][ T3644]  dump_stack+0x15/0x24
[  272.864301][ T3644]  should_fail_ex+0x3d4/0x520
[  272.868997][ T3644]  should_fail+0xb/0x10
[  272.873375][ T3644]  should_fail_usercopy+0x1a/0x20
[  272.878453][ T3644]  __kvm_read_guest_page+0x14c/0x1d0
[  272.883757][ T3644]  kvm_vcpu_read_guest_page+0x318/0x3f0
[  272.889316][ T3644]  kvm_fetch_guest_virt+0x13f/0x180
[  272.894527][ T3644]  ? __cfi_kvm_fetch_guest_virt+0x10/0x10
[  272.900261][ T3644]  __do_insn_fetch_bytes+0x2d1/0x6c0
[  272.905575][ T3644]  ? x86_decode_insn+0x4cc0/0x4cc0
[  272.910693][ T3644]  ? kvm_tdp_mmu_map+0xcaf/0x10b0
[  272.915818][ T3644]  x86_decode_insn+0x2e9/0x4cc0
[  272.920687][ T3644]  ? folio_mark_accessed+0x194/0x4d0
[  272.926013][ T3644]  ? vmx_read_guest_seg_ar+0x1c1/0x380
[  272.931518][ T3644]  ? memset+0x35/0x40
[  272.935553][ T3644]  ? __cfi_x86_decode_insn+0x10/0x10
[  272.940945][ T3644]  x86_decode_emulated_instruction+0x62/0x180
[  272.947027][ T3644]  x86_emulate_instruction+0x1fb/0x1c10
[  272.952591][ T3644]  handle_ud+0x4c3/0x530
[  272.956850][ T3644]  ? __stack_depot_save+0x36/0x480
[  272.961984][ T3644]  ? __cfi_handle_ud+0x10/0x10
[  272.966767][ T3644]  ? __cfi_rcu_note_context_switch+0x10/0x10
[  272.972771][ T3644]  ? __kasan_check_read+0x11/0x20
[  272.977811][ T3644]  handle_exception_nmi+0x124/0xde0
[  272.983022][ T3644]  ? __cfi_handle_exception_nmi+0x10/0x10
[  272.988756][ T3644]  vmx_handle_exit+0xc92/0x1b30
[  272.993635][ T3644]  ? kvm_deliver_exception_payload+0xd3/0x1f0
[  272.999800][ T3644]  ? __kasan_check_read+0x11/0x20
[  273.004913][ T3644]  ? vmx_get_intr_info+0xac/0x190
[  273.009956][ T3644]  ? vmx_handle_exit_irqoff+0x435/0x6a0
[  273.015604][ T3644]  vcpu_enter_guest+0x30b4/0x6f80
[  273.020658][ T3644]  ? push+0x690/0x690
[  273.024672][ T3644]  ? pvclock_gtod_update_fn+0x280/0x280
[  273.030235][ T3644]  ? __kasan_check_read+0x11/0x20
[  273.035278][ T3644]  ? emulate_pop+0x31f/0x6f0
[  273.039901][ T3644]  ? em_sti+0x220/0x220
[  273.044070][ T3644]  ? 0xffffffffa0003de4
[  273.048237][ T3644]  ? is_bpf_text_address+0x177/0x190
[  273.053558][ T3644]  ? kernel_text_address+0xa0/0xd0
[  273.058680][ T3644]  ? __kernel_text_address+0xd/0x30
[  273.063888][ T3644]  ? em_pop_sreg+0xd7/0x6e0
[  273.068402][ T3644]  ? arch_stack_walk+0xfc/0x150
[  273.073272][ T3644]  ? __cfi_em_pop_sreg+0x10/0x10
[  273.078326][ T3644]  ? vmx_vcpu_pi_load+0x144/0x880
[  273.083396][ T3644]  ? __kasan_check_write+0x14/0x20
[  273.088517][ T3644]  ? kvm_multiple_exception+0x63d/0xa50
[  273.094093][ T3644]  ? __kasan_check_read+0x11/0x20
[  273.099132][ T3644]  ? vmx_get_rflags+0xfb/0x200
[  273.103902][ T3644]  ? vmx_get_interrupt_shadow+0x1b/0xc0
[  273.109460][ T3644]  ? x86_emulate_instruction+0x14e2/0x1c10
[  273.115286][ T3644]  ? complete_emulated_mmio+0x4f7/0x780
[  273.120941][ T3644]  kvm_arch_vcpu_ioctl_run+0xec4/0x1fa0
[  273.126527][ T3644]  kvm_vcpu_ioctl+0x8f2/0xc00
[  273.131217][ T3644]  ? __cfi_kvm_vcpu_ioctl+0x10/0x10
[  273.136537][ T3644]  ? selinux_file_ioctl+0x3a0/0x4d0
[  273.141759][ T3644]  ? __cfi_selinux_file_ioctl+0x10/0x10
[  273.147316][ T3644]  ? mutex_unlock+0x8f/0x230
[  273.151909][ T3644]  ? __cfi_mutex_unlock+0x10/0x10
[  273.156939][ T3644]  ? __fget_files+0x2d5/0x330
[  273.161622][ T3644]  ? security_file_ioctl+0x95/0xc0
[  273.166740][ T3644]  ? __cfi_kvm_vcpu_ioctl+0x10/0x10
[  273.171957][ T3644]  __se_sys_ioctl+0x12f/0x1b0
[  273.176676][ T3644]  __x64_sys_ioctl+0x7b/0x90
[  273.181386][ T3644]  x64_sys_call+0x58b/0x9a0
[  273.185898][ T3644]  do_syscall_64+0x4c/0xa0
[  273.190342][ T3644]  ? clear_bhb_loop+0x30/0x80
[  273.195022][ T3644]  ? clear_bhb_loop+0x30/0x80
[  273.199749][ T3644]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  273.205662][ T3644] RIP: 0033:0x7f1acf79c799
[  273.210081][ T3644] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  273.229691][ T3644] RSP: 002b:00007f1ad05ea028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  273.238125][ T3644] RAX: ffffffffffffffda RBX: 00007f1acfa15fa0 RCX: 00007f1acf79c799
[  273.246286][ T3644] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006
[  273.254356][ T3644] RBP: 00007f1ad05ea090 R08: 0000000000000000 R09: 0000000000000000
[  273.262344][ T3644] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  273.270326][ T3644] R13: 00007f1acfa16038 R14: 00007f1acfa15fa0 R15: 00007ffcfb736f98
[  273.278339][ T3644]  </TASK>
[  273.293345][  T382] usb 7-1: 0:2 : does not exist
[  273.304254][  T382] usb 7-1: USB disconnect, device number 13
[  273.321921][  T343] udevd[343]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  273.356270][  T343] udevd[343]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  273.437510][   T28] audit: type=1400 audit(1773209903.889:390): avc:  denied  { setattr } for  pid=3651 comm="syz.1.937" name="file1" dev="overlay" ino=1185 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[  273.469172][ T3652] FAULT_INJECTION: forcing a failure.
[  273.469172][ T3652] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  273.483234][ T3652] CPU: 1 PID: 3652 Comm: syz.1.937 Not tainted syzkaller #0
[  273.490610][ T3652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  273.500797][ T3652] Call Trace:
[  273.504112][ T3652]  <TASK>
[  273.507078][ T3652]  __dump_stack+0x21/0x24
[  273.511459][ T3652]  dump_stack_lvl+0x110/0x170
[  273.516171][ T3652]  ? __cfi_dump_stack_lvl+0x8/0x8
[  273.521261][ T3652]  dump_stack+0x15/0x24
[  273.525458][ T3652]  should_fail_ex+0x3d4/0x520
[  273.530175][ T3652]  should_fail+0xb/0x10
[  273.534363][ T3652]  should_fail_usercopy+0x1a/0x20
[  273.539423][ T3652]  strncpy_from_user+0x24/0x2d0
[  273.544301][ T3652]  ? getname_flags+0xb9/0x500
[  273.549033][ T3652]  getname_flags+0xf4/0x500
[  273.553584][ T3652]  __x64_sys_renameat2+0xb4/0xf0
[  273.558564][ T3652]  x64_sys_call+0x6b8/0x9a0
[  273.563219][ T3652]  do_syscall_64+0x4c/0xa0
[  273.567675][ T3652]  ? clear_bhb_loop+0x30/0x80
[  273.572465][ T3652]  ? clear_bhb_loop+0x30/0x80
[  273.577170][ T3652]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  273.583122][ T3652] RIP: 0033:0x7f1acf79c799
[  273.587581][ T3652] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  273.607314][ T3652] RSP: 002b:00007f1ad05ea028 EFLAGS: 00000246 ORIG_RAX: 000000000000013c
[  273.615933][ T3652] RAX: ffffffffffffffda RBX: 00007f1acfa15fa0 RCX: 00007f1acf79c799
[  273.623931][ T3652] RDX: ffffffffffffff9c RSI: 0000200000000000 RDI: ffffffffffffff9c
[  273.631928][ T3652] RBP: 00007f1ad05ea090 R08: 0000000000000002 R09: 0000000000000000
[  273.639926][ T3652] R10: 00002000000004c0 R11: 0000000000000246 R12: 0000000000000001
[  273.647923][ T3652] R13: 00007f1acfa16038 R14: 00007f1acfa15fa0 R15: 00007ffcfb736f98
[  273.655927][ T3652]  </TASK>
[  273.666222][ T3653] overlayfs: missing 'lowerdir'
[  273.711786][   T28] audit: type=1400 audit(1773209903.889:391): avc:  denied  { rename } for  pid=3651 comm="syz.1.937" name="#5f" dev="tmpfs" ino=1192 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[  274.342617][ T3655] loop3: detected capacity change from 0 to 128
[  274.473147][ T3665] loop6: detected capacity change from 0 to 1024
[  274.688352][ T3665] EXT4-fs (loop6): INFO: recovery required on readonly filesystem
[  274.696278][ T3665] EXT4-fs (loop6): write access will be enabled during recovery
[  274.704208][ T3665] JBD2: no valid journal superblock found
[  274.710057][ T3665] EXT4-fs (loop6): error loading journal
[  274.723687][  T343] udevd[343]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  274.747276][ T3667] input: syz1 as /devices/virtual/input/input49
[  274.805588][ T3669] overlayfs: missing 'lowerdir'
[  274.824331][  T522] usb 3-1: new high-speed USB device number 37 using dummy_hcd
[  275.033317][  T522] usb 3-1: Using ep0 maxpacket: 32
[  275.040139][  T522] usb 3-1: config 0 has an invalid interface number: 196 but max is 0
[  275.074430][  T522] usb 3-1: config 0 has no interface number 0
[  275.086850][  T522] usb 3-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528
[  275.113459][  T522] usb 3-1: config 0 interface 196 has no altsetting 0
[  275.132056][  T522] usb 3-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a
[  275.151642][  T522] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  275.183247][  T522] usb 3-1: Product: syz
[  275.187764][  T522] usb 3-1: Manufacturer: syz
[  275.192403][  T522] usb 3-1: SerialNumber: syz
[  275.208536][  T522] usb 3-1: config 0 descriptor??
[  275.228365][ T3647] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  275.393252][    T6] usb 4-1: new high-speed USB device number 46 using dummy_hcd
[  275.415856][ T3674] loop5: detected capacity change from 0 to 131072
[  275.433721][ T3674] F2FS-fs (loop5): invalid crc value
[  275.438328][ T3647] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  275.455956][ T3674] F2FS-fs (loop5): Disable nat_bits due to incorrect cp_ver (15359802341028777995, 275811881701387)
[  275.461361][ T3647] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  275.483288][ T2589] usb 7-1: new high-speed USB device number 14 using dummy_hcd
[  275.520552][ T3674] F2FS-fs (loop5): Mounted with checkpoint version = 753bd00b
[  275.559995][   T28] audit: type=1400 audit(1773209906.009:392): avc:  denied  { ioctl } for  pid=3673 comm="syz.5.944" path="socket:[33761]" dev="sockfs" ino=33761 ioctlcmd=0x8916 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  275.583916][    T6] usb 4-1: Using ep0 maxpacket: 16
[  275.594036][    T6] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  275.605913][    T6] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0
[  275.607534][ T3671] loop1: detected capacity change from 0 to 131072
[  275.635229][    T6] usb 4-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28
[  275.656634][    T6] usb 4-1: config 0 interface 0 has no altsetting 0
[  275.668782][ T3671] F2FS-fs (loop1): Found nat_bits in checkpoint
[  275.672234][    T6] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[  275.694634][ T2589] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  275.697508][    T6] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  275.713751][ T2589] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3
[  275.724426][    T6] usb 4-1: config 0 descriptor??
[  275.753664][ T2589] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  275.762762][ T2589] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  275.775308][ T2589] usb 7-1: SerialNumber: syz
[  275.785600][ T3671] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  275.845152][ T3671] F2FS-fs (loop1): lookup inode (7) has corrupted xattr
[  275.852762][ T3671] F2FS-fs (loop1): lookup inode (7) has corrupted xattr
[  275.944938][ T3691] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  275.953946][ T3691] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  275.985868][ T2589] usb 7-1: 0:2 : does not exist
[  275.993085][ T2589] usb 7-1: USB disconnect, device number 14
[  276.031549][ T3693] overlayfs: './file0' not a directory
[  276.037971][ T3693] 9pnet_fd: Insufficient options for proto=fd
[  276.045551][ T3693] netlink: 16 bytes leftover after parsing attributes in process `syz.5.949'.
[  276.058011][  T522] ipheth 3-1:0.196: Apple iPhone USB Ethernet device attached
[  276.082603][ T3695] input: syz1 as /devices/virtual/input/input50
[  276.135044][    T6] hid (null): unknown global tag 0xc
[  276.142913][    T6] hid (null): unknown global tag 0xe
[  276.148656][    T6] hid (null): bogus close delimiter
[  276.163271][  T382] usb 2-1: new full-speed USB device number 45 using dummy_hcd
[  276.185736][ T3705] loop5: detected capacity change from 0 to 128
[  276.210331][  T337] udevd[337]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  276.345535][    T6] usb 4-1: USB disconnect, device number 46
[  276.544921][ T2589] usb 3-1: USB disconnect, device number 37
[  277.251573][  T382] usb 2-1: not running at top speed; connect to a high speed hub
[  277.273174][  T382] usb 2-1: string descriptor 0 read error: -22
[  277.279479][  T382] usb 2-1: New USB device found, idVendor=15ca, idProduct=1806, bcdDevice= 0.40
[  277.289091][ T2589] ipheth 3-1:0.196: Apple iPhone USB Ethernet now disconnected
[  277.302645][  T382] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  277.310834][ T3723] overlayfs: missing 'lowerdir'
[  277.318020][  T382] usb 2-1: MIDIStreaming interface descriptor not found
[  277.362251][ T3726] input: syz1 as /devices/virtual/input/input51
[  277.379809][ T3730] loop6: detected capacity change from 0 to 512
[  277.388856][ T3730] EXT4-fs: Ignoring removed mblk_io_submit option
[  277.406098][ T3730] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  277.425679][ T3730] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  277.434891][ T3730] ext4 filesystem being mounted at /94/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  277.503560][ T3741] loop5: detected capacity change from 0 to 128
[  277.525579][ T3741] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  277.534480][ T3741] ext4 filesystem being mounted at /134/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  277.563801][ T1515] EXT4-fs (loop5): unmounting filesystem.
[  277.593297][    T6] usb 4-1: new high-speed USB device number 47 using dummy_hcd
[  277.603006][ T3749] loop5: detected capacity change from 0 to 1024
[  277.614467][ T3749] ext4: Unknown parameter 'nouser_xattr'
[  277.772139][ T3752] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  277.781446][ T3752] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  277.790503][    T6] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  277.806960][    T6] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  277.824765][    T6] usb 4-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.01
[  277.833994][    T6] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  277.843113][    T6] usb 4-1: config 0 descriptor??
[  277.853383][ T2589] usb 7-1: new high-speed USB device number 15 using dummy_hcd
[  277.889780][ T3754] x_tables: duplicate underflow at hook 2
[  277.896316][ T3754] netlink: 8 bytes leftover after parsing attributes in process `syz.2.960'.
[  278.003282][ T2589] usb 7-1: device descriptor read/64, error -71
[  278.033773][ T2012] usb 2-1: USB disconnect, device number 45
[  278.252699][    T6] arvo 0003:1E7D:30D4.001E: unknown main item tag 0x0
[  278.260326][    T6] arvo 0003:1E7D:30D4.001E: unknown main item tag 0x0
[  278.267530][    T6] arvo 0003:1E7D:30D4.001E: unknown main item tag 0x0
[  278.273619][ T2589] usb 7-1: device descriptor read/64, error -71
[  278.278280][    T6] arvo 0003:1E7D:30D4.001E: unknown main item tag 0x0
[  278.288355][    T6] arvo 0003:1E7D:30D4.001E: unknown main item tag 0x0
[  278.295536][    T6] arvo 0003:1E7D:30D4.001E: unknown main item tag 0x0
[  278.303421][    T6] arvo 0003:1E7D:30D4.001E: unknown main item tag 0x0
[  278.312767][    T6] arvo 0003:1E7D:30D4.001E: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.3-1/input0
[  278.453103][    T6] arvo 0003:1E7D:30D4.001E: couldn't init struct arvo_device
[  278.461246][ T3758] input: syz1 as /devices/virtual/input/input52
[  278.470613][    T6] arvo 0003:1E7D:30D4.001E: couldn't install keyboard
[  278.485323][    T6] arvo: probe of 0003:1E7D:30D4.001E failed with error -71
[  278.494679][    T6] usb 4-1: USB disconnect, device number 47
[  278.526843][ T3759] fido_id[3759]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory
[  278.543335][ T2589] usb 7-1: new high-speed USB device number 16 using dummy_hcd
[  278.703315][ T2589] usb 7-1: device descriptor read/64, error -71
[  278.889983][ T3770] 9pnet_virtio: no channels available for device syz
[  278.900632][ T3770] overlayfs: failed to resolve './bus': -2
[  278.933575][  T391] usb 2-1: new high-speed USB device number 46 using dummy_hcd
[  278.953437][ T2011] usb 6-1: new high-speed USB device number 23 using dummy_hcd
[  278.983368][ T2589] usb 7-1: device descriptor read/64, error -71
[  279.113322][  T391] usb 2-1: Using ep0 maxpacket: 16
[  279.120840][  T391] usb 2-1: config index 0 descriptor too short (expected 67, got 36)
[  279.130067][ T2589] usb usb7-port1: attempt power cycle
[  279.143326][ T2011] usb 6-1: Using ep0 maxpacket: 16
[  279.150554][ T2011] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  279.189446][  T391] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  279.200656][ T2011] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  279.210874][  T391] usb 2-1: New USB device found, idVendor=05ac, idProduct=0247, bcdDevice= 0.00
[  279.221449][  T391] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  279.232489][ T2011] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  279.244928][ T2011] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  279.254770][ T2011] usb 6-1: Product: syz
[  279.259081][ T2011] usb 6-1: Manufacturer: syz
[  279.265133][ T2011] usb 6-1: SerialNumber: syz
[  279.288524][  T391] usb 2-1: config 0 descriptor??
[  279.302370][  T391] usbhid 2-1:0.0: couldn't find an input interrupt endpoint
[  279.526365][ T2011] usb 6-1: 0:2 : does not exist
[  279.533318][  T446] usb 4-1: new high-speed USB device number 48 using dummy_hcd
[  279.543277][ T2589] usb 7-1: new high-speed USB device number 17 using dummy_hcd
[  279.569144][ T2011] usb 6-1: 5:0: failed to get current value for ch 0 (-22)
[  279.673721][ T2011] usb 6-1: USB disconnect, device number 23
[  279.810248][ T2589] usb 7-1: device descriptor read/8, error -71
[  279.893772][ T3777] netlink: 288 bytes leftover after parsing attributes in process `syz.2.967'.
[  279.903357][  T446] usb 4-1: Using ep0 maxpacket: 16
[  279.909785][  T446] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  279.920378][  T446] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  279.931303][  T446] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  279.935072][ T3779] loop2: detected capacity change from 0 to 128
[  279.941787][  T446] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  279.954875][  T446] usb 4-1: Product: syz
[  279.959088][  T446] usb 4-1: Manufacturer: syz
[  279.963814][  T446] usb 4-1: SerialNumber: syz
[  279.965563][ T3779] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  279.978043][ T3779] ext4 filesystem being mounted at /203/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  279.989099][ T2589] usb 7-1: device descriptor read/8, error -71
[  280.055890][  T286] EXT4-fs (loop2): unmounting filesystem.
[  280.070471][ T3784] loop2: detected capacity change from 0 to 128
[  280.109051][ T3786] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  280.120642][ T3786] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  280.175394][  T446] usb 4-1: 0:2 : does not exist
[  280.182337][  T446] usb 4-1: 5:0: failed to get current value for ch 0 (-22)
[  280.196094][  T446] usb 4-1: USB disconnect, device number 48
[  280.318410][ T3790] loop5: detected capacity change from 0 to 1024
[  280.619350][ T2589] usb 7-1: new high-speed USB device number 18 using dummy_hcd
[  280.739177][ T2179] EXT4-fs (loop6): unmounting filesystem.
[  280.768272][  T337] udevd[337]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  280.788453][ T2589] usb 7-1: device descriptor read/8, error -71
[  280.811051][ T3790] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  281.036537][ T3798] input: syz1 as /devices/virtual/input/input53
[  281.046376][ T3799] x_tables: duplicate underflow at hook 2
[  281.061232][ T3799] netlink: 8 bytes leftover after parsing attributes in process `syz.3.973'.
[  282.283305][ T3806] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  282.383346][  T382] usb 2-1: USB disconnect, device number 46
[  282.424593][ T2589] usb 7-1: device descriptor read/8, error -71
[  282.452312][ T3810] overlayfs: missing 'lowerdir'
[  282.489445][ T3815] loop3: detected capacity change from 0 to 512
[  282.543160][ T3815] Quota error (device loop3): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0
[  282.543570][ T2589] usb usb7-port1: unable to enumerate USB device
[  282.560503][ T3815] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0
[  282.569998][ T3815] EXT4-fs error (device loop3): ext4_acquire_dquot:6822: comm syz.3.977: Failed to acquire dquot type 0
[  282.582758][ T3815] Quota error (device loop3): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0
[  282.595799][ T3823] netlink: 288 bytes leftover after parsing attributes in process `syz.1.979'.
[  282.647789][ T3824] 9pnet_virtio: no channels available for device syz
[  282.658416][ T3824] overlayfs: failed to resolve './bus': -2
[  282.693937][ T3815] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0
[  282.813006][ T3815] EXT4-fs error (device loop3): ext4_acquire_dquot:6822: comm syz.3.977: Failed to acquire dquot type 0
[  282.853780][ T3827] loop1: detected capacity change from 0 to 128
[  282.901537][ T3815] Quota error (device loop3): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0
[  282.931829][ T3827] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  282.942009][ T3827] ext4 filesystem being mounted at /197/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  282.954455][ T3815] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0
[  282.965049][ T3815] EXT4-fs error (device loop3): ext4_acquire_dquot:6822: comm syz.3.977: Failed to acquire dquot type 0
[  283.101462][ T3815] EXT4-fs (loop3): 1 orphan inode deleted
[  283.108234][ T3815] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  283.118673][ T3815] ext4 filesystem being mounted at /180/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  283.250801][ T3814] 9pnet_fd: Insufficient options for proto=fd
[  283.284383][ T3815] 9pnet_fd: Insufficient options for proto=fd
[  283.599081][ T1515] EXT4-fs (loop5): unmounting filesystem.
[  283.616794][ T3832] loop5: detected capacity change from 0 to 128
[  283.628661][  T283] EXT4-fs (loop3): unmounting filesystem.
[  283.631868][ T3835] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=3835 comm=syz.6.983
[  283.636545][ T3832] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  283.650816][ T3835] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=3835 comm=syz.6.983
[  283.674636][ T3832] ext4 filesystem being mounted at /139/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  283.686725][  T285] EXT4-fs (loop1): unmounting filesystem.
[  283.745080][ T1515] EXT4-fs (loop5): unmounting filesystem.
[  283.765477][ T3844] overlayfs: './file0' not a directory
[  283.784709][ T3844] 9pnet_fd: Insufficient options for proto=fd
[  283.804440][ T3846] loop5: detected capacity change from 0 to 128
[  283.811965][ T3844] netlink: 16 bytes leftover after parsing attributes in process `syz.1.984'.
[  284.079003][ T3855] loop2: detected capacity change from 0 to 1024
[  284.098672][ T3855] EXT4-fs (loop2): INFO: recovery required on readonly filesystem
[  284.130841][ T3855] EXT4-fs (loop2): write access will be enabled during recovery
[  284.147059][ T3855] JBD2: no valid journal superblock found
[  284.161490][ T3855] EXT4-fs (loop2): error loading journal
[  284.321799][ T3864] loop6: detected capacity change from 0 to 128
[  284.798485][ T3871] loop3: detected capacity change from 0 to 128
[  284.809382][ T3871] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  284.818609][ T3871] ext4 filesystem being mounted at /182/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  284.884321][ T3876] 9pnet_virtio: no channels available for device syz
[  284.894287][ T3876] overlayfs: failed to resolve './bus': -2
[  285.931080][ T3883] loop6: detected capacity change from 0 to 40427
[  285.943498][ T3883] F2FS-fs (loop6): Found nat_bits in checkpoint
[  285.970238][  T283] EXT4-fs (loop3): unmounting filesystem.
[  286.000249][ T3892] loop3: detected capacity change from 0 to 128
[  286.036864][ T3883] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[  286.087338][ T3898] loop2: detected capacity change from 0 to 1024
[  286.124216][ T3898] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  286.446620][ T3907] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  286.474907][ T2179] syz-executor: attempt to access beyond end of device
[  286.474907][ T2179] loop6: rw=2049, sector=45096, nr_sectors = 16 limit=40427
[  286.604114][    T6] usb 6-1: new high-speed USB device number 24 using dummy_hcd
[  286.673263][  T382] usb 2-1: new high-speed USB device number 47 using dummy_hcd
[  286.793225][    T6] usb 6-1: Using ep0 maxpacket: 16
[  286.799591][    T6] usb 6-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  286.817692][    T6] usb 6-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0
[  286.833264][  T382] usb 2-1: device descriptor read/64, error -71
[  286.841737][    T6] usb 6-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28
[  286.860971][    T6] usb 6-1: config 0 interface 0 has no altsetting 0
[  286.870916][    T6] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[  286.887310][    T6] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  286.899323][    T6] usb 6-1: config 0 descriptor??
[  287.044577][ T3913] EXT4-fs (loop6): INFO: recovery required on readonly filesystem
[  287.052455][ T3913] EXT4-fs (loop6): write access will be enabled during recovery
[  287.098776][ T3913] JBD2: no valid journal superblock found
[  287.103374][  T382] usb 2-1: device descriptor read/64, error -71
[  287.106539][ T3913] EXT4-fs (loop6): error loading journal
[  287.383238][  T382] usb 2-1: new high-speed USB device number 48 using dummy_hcd
[  287.544009][  T382] usb 2-1: device descriptor read/64, error -71
[  287.616149][ T3918] overlayfs: './file0' not a directory
[  287.674149][ T3919] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1005'.
[  287.813273][  T382] usb 2-1: device descriptor read/64, error -71
[  287.933340][  T382] usb usb2-port1: attempt power cycle
[  288.029347][ T3921] overlayfs: missing 'lowerdir'
[  288.343318][  T382] usb 2-1: new high-speed USB device number 49 using dummy_hcd
[  288.374388][  T382] usb 2-1: device descriptor read/8, error -71
[  288.559314][ T3928] set_capacity_and_notify: 2 callbacks suppressed
[  288.559348][ T3928] loop3: detected capacity change from 0 to 1024
[  288.580357][ T3928] EXT4-fs (loop3): INFO: recovery required on readonly filesystem
[  288.588298][ T3928] EXT4-fs (loop3): write access will be enabled during recovery
[  288.597001][ T3928] JBD2: no valid journal superblock found
[  288.602837][ T3928] EXT4-fs (loop3): error loading journal
[  288.765625][  T382] usb 2-1: device descriptor read/8, error -71
[  288.924986][ T2012] usb 6-1: USB disconnect, device number 24
[  289.033249][  T382] usb 2-1: new high-speed USB device number 50 using dummy_hcd
[  289.200513][ T3934] 9pnet_virtio: no channels available for device syz
[  289.208072][ T3934] overlayfs: failed to resolve './file1': -2
[  289.251002][ T3934] overlayfs: missing 'lowerdir'
[  289.303065][  T286] EXT4-fs (loop2): unmounting filesystem.
[  289.323358][  T446] usb 7-1: new high-speed USB device number 19 using dummy_hcd
[  289.545115][  T446] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  289.572260][  T446] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3
[  289.622357][  T446] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  289.673358][ T2589] usb 4-1: new high-speed USB device number 49 using dummy_hcd
[  289.709678][  T446] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  289.741607][ T3940] input: syz1 as /devices/virtual/input/input54
[  289.749564][  T446] usb 7-1: SerialNumber: syz
[  289.893316][ T2589] usb 4-1: Using ep0 maxpacket: 16
[  289.899789][ T2589] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  289.927246][ T3944] loop1: detected capacity change from 0 to 128
[  289.934076][ T2589] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  289.969958][ T2589] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  289.989518][ T2589] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  290.004384][ T2589] usb 4-1: Product: syz
[  290.013440][ T2589] usb 4-1: Manufacturer: syz
[  290.018124][ T2589] usb 4-1: SerialNumber: syz
[  290.157525][  T382] usb 2-1: device descriptor read/8, error -71
[  290.167460][ T3947] x_tables: duplicate underflow at hook 2
[  290.173896][ T3947] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1016'.
[  290.192892][ T3950] loop2: detected capacity change from 0 to 128
[  290.239355][ T3950] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  290.256409][ T2589] usb 4-1: 0:2 : does not exist
[  290.269252][ T3953] loop5: detected capacity change from 0 to 1024
[  290.277116][ T2589] usb 4-1: 5:0: failed to get current value for ch 0 (-22)
[  290.293510][ T3953] EXT4-fs: quotafile must be on filesystem root
[  290.300128][ T3950] ext4 filesystem being mounted at /212/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  290.314974][  T446] usb 7-1: 0:2 : does not exist
[  290.323932][ T2589] usb 4-1: USB disconnect, device number 49
[  290.331736][  T382] usb 2-1: device descriptor read/8, error -71
[  290.350118][  T446] usb 7-1: USB disconnect, device number 19
[  290.358950][ T3953] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1017'.
[  290.382774][  T286] EXT4-fs (loop2): unmounting filesystem.
[  290.394357][ T3953] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready
[  290.423747][ T3958] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  290.434573][ T3958] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  290.453312][  T382] usb usb2-port1: unable to enumerate USB device
[  290.495434][ T3960] loop5: detected capacity change from 0 to 128
[  290.614998][  T343] udevd[343]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  290.816406][ T3968] af_packet: tpacket_rcv: packet too big, clamped from 176 to 4294967272. macoff=96
[  290.845557][ T3970] loop3: detected capacity change from 0 to 1024
[  290.867999][ T3970] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  290.933233][  T382] usb 7-1: new high-speed USB device number 20 using dummy_hcd
[  291.188267][ T3975] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  291.443274][  T382] usb 7-1: Using ep0 maxpacket: 16
[  291.481889][  T382] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  291.492167][  T382] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3
[  291.502871][  T382] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  291.512925][  T382] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  291.521269][  T382] usb 7-1: Product: syz
[  291.525770][  T382] usb 7-1: Manufacturer: syz
[  291.530459][  T382] usb 7-1: SerialNumber: syz
[  291.708674][ T3983] 9pnet_virtio: no channels available for device syz
[  291.717987][ T3983] overlayfs: failed to resolve './file1': -2
[  291.726141][ T3983] overlayfs: missing 'lowerdir'
[  291.734499][ T2589] usb 6-1: new high-speed USB device number 25 using dummy_hcd
[  291.923337][ T2589] usb 6-1: device descriptor read/64, error -71
[  292.213292][ T2589] usb 6-1: device descriptor read/64, error -71
[  292.410980][ T3985] x_tables: duplicate underflow at hook 2
[  292.419395][ T3985] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1027'.
[  292.512988][  T522] usb 2-1: new high-speed USB device number 51 using dummy_hcd
[  292.522385][  T382] usb 7-1: 0:2 : does not exist
[  292.532603][  T382] usb 7-1: 5:0: failed to get current value for ch 0 (-22)
[  292.552937][  T382] usb 7-1: USB disconnect, device number 20
[  292.594331][ T2589] usb 6-1: new high-speed USB device number 26 using dummy_hcd
[  292.712077][ T3991] 9pnet_virtio: no channels available for device syz
[  292.743286][ T3991] overlayfs: missing 'lowerdir'
[  292.756835][ T2589] usb 6-1: device descriptor read/64, error -71
[  293.053337][ T2589] usb 6-1: device descriptor read/64, error -71
[  293.173560][ T2589] usb usb6-port1: attempt power cycle
[  293.449427][ T3993] loop6: detected capacity change from 0 to 128
[  293.475315][ T3993] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[  293.485139][ T3993] ext4 filesystem being mounted at /110/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  293.577085][   T28] audit: type=1400 audit(1773209924.039:393): avc:  denied  { getopt } for  pid=3996 comm="syz.2.1030" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  293.596699][  T522] usb 2-1: Using ep0 maxpacket: 16
[  293.598357][  T522] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  293.605335][ T3997] loop2: detected capacity change from 0 to 256
[  293.614020][  T522] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  293.618857][ T2589] usb 6-1: new high-speed USB device number 27 using dummy_hcd
[  293.629466][ T3997] exfat: Unknown parameter ''
[  293.646916][ T2179] EXT4-fs (loop6): unmounting filesystem.
[  293.654031][  T522] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  293.673813][ T3997] loop2: detected capacity change from 0 to 256
[  293.680428][  T522] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  293.682157][ T2589] usb 6-1: device descriptor read/8, error -71
[  293.694828][  T522] usb 2-1: Product: syz
[  293.694850][  T522] usb 2-1: Manufacturer: syz
[  293.694865][  T522] usb 2-1: SerialNumber: syz
[  293.709307][ T3999] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  293.717020][ T3997] exfat: Deprecated parameter 'namecase'
[  293.720445][ T3999] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  293.733874][ T3997] exfat: Deprecated parameter 'namecase'
[  293.744817][ T3997] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d)
[  293.789032][   T28] audit: type=1400 audit(1773209924.239:394): avc:  denied  { map } for  pid=3996 comm="syz.2.1030" path="/217/file0/file1" dev="loop2" ino=1049459 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  293.812706][ T3997] syz.2.1030: attempt to access beyond end of device
[  293.812706][ T3997] loop2: rw=524288, sector=34225520824, nr_sectors = 1 limit=256
[  293.827153][ T3997] syz.2.1030: attempt to access beyond end of device
[  293.827153][ T3997] loop2: rw=0, sector=34225520824, nr_sectors = 1 limit=256
[  293.841245][ T3997] syz.2.1030: attempt to access beyond end of device
[  293.841245][ T3997] loop2: rw=0, sector=34225520824, nr_sectors = 1 limit=256
[  293.855440][ T3997] syz.2.1030: attempt to access beyond end of device
[  293.855440][ T3997] loop2: rw=0, sector=34225520824, nr_sectors = 1 limit=256
[  293.884661][ T3997] syz.2.1030: attempt to access beyond end of device
[  293.884661][ T3997] loop2: rw=0, sector=34225520824, nr_sectors = 1 limit=256
[  293.904791][  T522] usb 2-1: 0:2 : does not exist
[  293.914538][ T4003] syz.2.1030: attempt to access beyond end of device
[  293.914538][ T4003] loop2: rw=0, sector=34225520824, nr_sectors = 1 limit=256
[  293.921428][  T522] usb 2-1: 5:0: failed to get current value for ch 0 (-22)
[  293.937993][ T4005] loop6: detected capacity change from 0 to 1024
[  293.942900][  T283] EXT4-fs (loop3): unmounting filesystem.
[  293.945824][ T2589] usb 6-1: device descriptor read/8, error -71
[  293.957215][ T4005] ext4: Unknown parameter 'nouser_xattr'
[  293.963064][ T3996] syz.2.1030: attempt to access beyond end of device
[  293.963064][ T3996] loop2: rw=0, sector=34225520824, nr_sectors = 1 limit=256
[  293.977333][ T3996] Buffer I/O error on dev loop2, logical block 34225520824, async page read
[  293.986438][ T3997] syz.2.1030: attempt to access beyond end of device
[  293.986438][ T3997] loop2: rw=0, sector=34225520824, nr_sectors = 1 limit=256
[  294.004036][  T337] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  294.011542][  T522] usb 2-1: USB disconnect, device number 51
[  294.032649][ T3997] Buffer I/O error on dev loop2, logical block 34225520824, async page read
[  294.042699][  T343] udevd[343]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  294.045290][ T3997] syz.2.1030: attempt to access beyond end of device
[  294.045290][ T3997] loop2: rw=0, sector=34225520824, nr_sectors = 1 limit=256
[  294.072881][ T3997] Buffer I/O error on dev loop2, logical block 34225520824, async page read
[  294.082093][ T3996] syz.2.1030: attempt to access beyond end of device
[  294.082093][ T3996] loop2: rw=0, sector=34225520824, nr_sectors = 1 limit=256
[  294.096904][ T3996] Buffer I/O error on dev loop2, logical block 34225520824, async page read
[  294.105995][ T3997] Buffer I/O error on dev loop2, logical block 34225520824, async page read
[  294.115152][ T3996] Buffer I/O error on dev loop2, logical block 34225520824, async page read
[  294.124250][ T3997] Buffer I/O error on dev loop2, logical block 34225520824, async page read
[  294.133060][ T4003] Buffer I/O error on dev loop2, logical block 34225520824, async page read
[  294.141932][ T4003] Buffer I/O error on dev loop2, logical block 34225520824, async page read
[  294.150910][ T4003] Buffer I/O error on dev loop2, logical block 34225520824, async page read
[  294.243241][ T2589] usb 6-1: new high-speed USB device number 28 using dummy_hcd
[  294.274368][ T2589] usb 6-1: device descriptor read/8, error -71
[  294.293268][   T19] usb 4-1: new high-speed USB device number 50 using dummy_hcd
[  294.428140][ T2589] usb 6-1: device descriptor read/8, error -71
[  294.439507][ T4010] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1034'.
[  294.470536][   T28] audit: type=1400 audit(1773209924.919:395): avc:  denied  { read write } for  pid=4009 comm="syz.5.1034" name="ptp0" dev="devtmpfs" ino=264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  294.473427][   T19] usb 4-1: Using ep0 maxpacket: 16
[  294.504123][ T4012] loop1: detected capacity change from 0 to 4096
[  294.515420][   T28] audit: type=1400 audit(1773209924.919:396): avc:  denied  { open } for  pid=4009 comm="syz.5.1034" path="/dev/ptp0" dev="devtmpfs" ino=264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  294.541240][   T19] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  294.554141][   T19] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  294.563067][ T2589] usb usb6-port1: unable to enumerate USB device
[  294.582856][   T28] audit: type=1400 audit(1773209924.949:397): avc:  denied  { ioctl } for  pid=4009 comm="syz.5.1034" path="/dev/ptp0" dev="devtmpfs" ino=264 ioctlcmd=0x3d01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  294.614068][   T19] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  294.623266][   T19] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  294.631301][   T19] usb 4-1: Product: syz
[  294.636336][   T19] usb 4-1: Manufacturer: syz
[  294.640965][   T19] usb 4-1: SerialNumber: syz
[  294.689255][ T4012] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  294.718059][ T4012] fs-verity: sha256 using implementation "sha256-avx2"
[  294.723518][   T28] audit: type=1400 audit(1773209925.169:398): avc:  denied  { watch watch_reads } for  pid=4011 comm="syz.1.1035" path="/207/file1/file3" dev="loop1" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  294.751053][ T4017] netlink: 112 bytes leftover after parsing attributes in process `syz.5.1036'.
[  294.802223][ T4020] loop6: detected capacity change from 0 to 128
[  294.852559][   T19] usb 4-1: 0:2 : does not exist
[  294.887771][   T19] usb 4-1: 5:0: failed to get current value for ch 0 (-22)
[  294.915002][   T19] usb 4-1: USB disconnect, device number 50
[  295.438592][ T4026] input: syz1 as /devices/virtual/input/input55
[  295.570552][ T4024] 9pnet_virtio: no channels available for device syz
[  295.578222][ T4024] overlayfs: failed to resolve './file1': -2
[  295.584820][ T4024] overlayfs: missing 'lowerdir'
[  295.612755][ T4031] loop3: detected capacity change from 0 to 128
[  295.650082][ T4034] syzkaller0: tun_chr_ioctl cmd 2147767517
[  295.657345][   T28] audit: type=1400 audit(1773209926.119:399): avc:  denied  { append } for  pid=4028 comm="syz.5.1040" name="usbmon5" dev="devtmpfs" ino=174 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  295.682558][ T4034] 9pnet_fd: Insufficient options for proto=fd
[  295.702286][  T285] EXT4-fs (loop1): unmounting filesystem.
[  295.755248][ T4037] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  295.893294][   T19] usb 7-1: new high-speed USB device number 21 using dummy_hcd
[  296.023299][  T522] usb 3-1: new high-speed USB device number 38 using dummy_hcd
[  296.073332][   T19] usb 7-1: Using ep0 maxpacket: 16
[  296.079749][   T19] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  296.089990][   T19] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3
[  296.093325][  T391] usb 2-1: new high-speed USB device number 52 using dummy_hcd
[  296.102261][   T19] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  296.115707][   T19] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  296.123746][   T19] usb 7-1: Product: syz
[  296.127927][   T19] usb 7-1: Manufacturer: syz
[  296.132535][   T19] usb 7-1: SerialNumber: syz
[  296.183303][  T522] usb 3-1: device descriptor read/64, error -71
[  296.293262][  T391] usb 2-1: Using ep0 maxpacket: 16
[  296.299643][  T391] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  296.309848][  T391] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  296.320260][  T391] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  296.329443][  T391] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  296.337550][  T391] usb 2-1: Product: syz
[  296.341816][  T391] usb 2-1: Manufacturer: syz
[  296.346957][  T391] usb 2-1: SerialNumber: syz
[  296.348681][   T19] usb 7-1: 0:2 : does not exist
[  296.359425][   T19] usb 7-1: 5:0: failed to get current value for ch 0 (-22)
[  296.373925][   T19] usb 7-1: USB disconnect, device number 21
[  296.453264][  T522] usb 3-1: device descriptor read/64, error -71
[  296.504933][   T28] audit: type=1400 audit(1773209926.959:400): avc:  denied  { bind } for  pid=4045 comm="syz.3.1047" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  296.524472][   T28] audit: type=1400 audit(1773209926.959:401): avc:  denied  { listen } for  pid=4045 comm="syz.3.1047" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  296.524508][   T28] audit: type=1400 audit(1773209926.959:402): avc:  denied  { read } for  pid=4045 comm="syz.3.1047" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  296.568776][  T391] usb 2-1: 0:2 : does not exist
[  296.580430][  T391] usb 2-1: 5:0: failed to get current value for ch 0 (-22)
[  296.606973][ T4049] loop3: detected capacity change from 0 to 1024
[  296.618689][  T391] usb 2-1: USB disconnect, device number 52
[  296.625125][ T4049] ext4: Unknown parameter 'nouser_xattr'
[  296.723507][  T522] usb 3-1: new high-speed USB device number 39 using dummy_hcd
[  296.824028][  T337] udevd[337]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  296.834809][  T343] udevd[343]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory
[  296.883328][  T522] usb 3-1: device descriptor read/64, error -71
[  296.963405][  T446] usb 6-1: new high-speed USB device number 29 using dummy_hcd
[  297.131433][ T4056] netlink: 112 bytes leftover after parsing attributes in process `syz.1.1051'.
[  297.140673][  T391] usb 7-1: new high-speed USB device number 22 using dummy_hcd
[  297.153262][  T522] usb 3-1: device descriptor read/64, error -71
[  297.182296][  T446] usb 6-1: config 1 has an invalid descriptor of length 32, skipping remainder of the config
[  297.191139][ T4058] loop1: detected capacity change from 0 to 128
[  297.198945][  T446] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  297.257291][  T446] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  297.266526][  T446] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  297.274753][  T446] usb 6-1: SerialNumber: syz
[  297.276538][  T522] usb usb3-port1: attempt power cycle
[  297.456927][ T4060] x_tables: duplicate underflow at hook 2
[  297.463142][ T4060] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1053'.
[  297.694846][  T522] usb 3-1: new high-speed USB device number 40 using dummy_hcd
[  297.751945][  T522] usb 3-1: device descriptor read/8, error -71
[  297.833610][  T391] usb 7-1: Using ep0 maxpacket: 16
[  297.840208][  T446] usb 6-1: 0:2 : does not exist
[  297.846105][  T391] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  297.857439][  T446] usb 6-1: USB disconnect, device number 29
[  297.864222][  T391] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3
[  297.886772][ T4068] loop1: detected capacity change from 0 to 128
[  297.893273][  T391] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  297.902339][  T391] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  297.905516][  T522] usb 3-1: device descriptor read/8, error -71
[  297.916710][  T391] usb 7-1: Product: syz
[  297.921060][  T391] usb 7-1: Manufacturer: syz
[  297.926014][  T391] usb 7-1: SerialNumber: syz
[  298.015960][ T4070] loop5: detected capacity change from 0 to 128
[  298.084093][  T337] udevd[337]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  298.093618][   T19] usb 4-1: new high-speed USB device number 51 using dummy_hcd
[  298.193289][  T522] usb 3-1: new high-speed USB device number 41 using dummy_hcd
[  298.224371][  T522] usb 3-1: device descriptor read/8, error -71
[  298.283238][   T19] usb 4-1: Using ep0 maxpacket: 16
[  298.289723][   T19] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  298.301049][   T19] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0
[  298.311175][   T19] usb 4-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28
[  298.324406][   T19] usb 4-1: config 0 interface 0 has no altsetting 0
[  298.331057][   T19] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[  298.340453][   T19] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  298.352542][   T19] usb 4-1: config 0 descriptor??
[  298.384345][  T522] usb 3-1: device descriptor read/8, error -71
[  298.513329][  T522] usb usb3-port1: unable to enumerate USB device
[  298.678958][  T391] usb 7-1: 0:2 : does not exist
[  298.694341][  T391] usb 7-1: 5:0: failed to get current value for ch 0 (-22)
[  298.758231][  T391] usb 7-1: USB disconnect, device number 22
[  298.829251][ T4090] overlayfs: missing 'lowerdir'
[  298.918750][ T4097] x_tables: duplicate underflow at hook 2
[  298.925009][ T4097] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1065'.
[  298.932244][ T4098] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1064'.
[  298.972906][   T19] usb 4-1: USB disconnect, device number 51
[  299.014476][ T4103] 9pnet_virtio: no channels available for device syz
[  299.027375][ T4103] overlayfs: missing 'lowerdir'
[  299.080206][ T4105] loop6: detected capacity change from 0 to 128
[  299.641319][ T4109] loop5: detected capacity change from 0 to 128
[  299.763317][   T19] usb 4-1: new high-speed USB device number 52 using dummy_hcd
[  299.943250][   T19] usb 4-1: Using ep0 maxpacket: 16
[  299.949768][   T19] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  299.960232][   T19] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  299.971077][   T19] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  299.980491][   T19] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  299.988662][   T19] usb 4-1: Product: syz
[  299.992971][   T19] usb 4-1: Manufacturer: syz
[  299.997772][   T19] usb 4-1: SerialNumber: syz
[  300.205274][  T337] udevd[337]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  300.220229][   T19] usb 4-1: 0:2 : does not exist
[  300.230419][   T19] usb 4-1: 5:0: failed to get current value for ch 0 (-22)
[  300.242964][   T19] usb 4-1: USB disconnect, device number 52
[  300.260253][  T337] udevd[337]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  300.434276][ T4111] loop6: detected capacity change from 0 to 512
[  300.451873][ T4111] EXT4-fs: Ignoring removed nomblk_io_submit option
[  300.467525][ T4111] EXT4-fs (loop6): revision level too high, forcing read-only mode
[  300.476117][ T4111] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c000e128, mo2=0002]
[  300.484943][ T4111] EXT4-fs (loop6): orphan cleanup on readonly fs
[  300.491478][ T4111] __quota_error: 1 callbacks suppressed
[  300.491499][ T4111] Quota error (device loop6): v2_read_header: Failed header read: expected=8 got=0
[  300.506926][ T4111] EXT4-fs warning (device loop6): ext4_enable_quotas:7074: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[  300.522408][ T4111] EXT4-fs (loop6): Cannot turn on quotas: error -22
[  300.529563][ T4111] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm syz.6.1070: bg 0: block 40: padding at end of block bitmap is not set
[  300.545428][ T4111] EXT4-fs (loop6): Remounting filesystem read-only
[  300.552325][ T4111] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6181: Corrupt filesystem
[  300.561582][ T4111] EXT4-fs (loop6): Remounting filesystem read-only
[  300.568369][ T4111] EXT4-fs (loop6): 1 truncate cleaned up
[  300.574358][ T4111] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  300.607554][ T4111] EXT4-fs error (device loop6): ext4_encrypted_get_link:46: inode #16: comm syz.6.1070: bad symlink.
[  300.626848][ T2179] EXT4-fs (loop6): unmounting filesystem.
[  300.763886][ T4116] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1072'.
[  300.776875][ T4116] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  300.784149][ T4116] IPv6: NLM_F_CREATE should be set when creating new route
[  300.801316][ T4116] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  300.822477][ T4120] binder: 4119:4120 ioctl 400445a0 200000000280 returned -22
[  300.914951][ T4120] binder: 4119:4120 ioctl c0306201 200000000180 returned -14
[  300.923253][  T446] usb 3-1: new high-speed USB device number 42 using dummy_hcd
[  300.931939][ T4120] binder: 4119:4120 ioctl c0306201 200000004a40 returned -14
[  300.972445][   T28] audit: type=1400 audit(1773209931.419:404): avc:  denied  { create } for  pid=4122 comm="syz.5.1075" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  300.993249][   T19] usb 7-1: new high-speed USB device number 23 using dummy_hcd
[  301.006358][ T4118] loop3: detected capacity change from 0 to 40427
[  301.013623][   T28] audit: type=1400 audit(1773209931.459:405): avc:  denied  { read } for  pid=4122 comm="syz.5.1075" name="file0" dev="tmpfs" ino=951 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  301.036231][ T4118] F2FS-fs (loop3): Insane cp_payload (553648128 >= 504)
[  301.040646][   T28] audit: type=1400 audit(1773209931.459:406): avc:  denied  { open } for  pid=4122 comm="syz.5.1075" path="/158/file0" dev="tmpfs" ino=951 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  301.044379][ T4118] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  301.079271][ T4118] F2FS-fs (loop3): Unrecognized mount option "checkpoint=merge" or missing value
[  301.094368][   T28] audit: type=1400 audit(1773209931.459:407): avc:  denied  { ioctl } for  pid=4122 comm="syz.5.1075" path="/158/file0" dev="tmpfs" ino=951 ioctlcmd=0x125d scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  301.103407][  T446] usb 3-1: Using ep0 maxpacket: 16
[  301.119278][   T28] audit: type=1326 audit(1773209931.459:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4122 comm="syz.5.1075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78c0b9c799 code=0x7ffc0000
[  301.148136][  T446] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  301.158763][ T4125] loop5: detected capacity change from 0 to 1024
[  301.165292][   T19] usb 7-1: device descriptor read/64, error -71
[  301.175964][  T446] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  301.183404][   T28] audit: type=1326 audit(1773209931.459:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4122 comm="syz.5.1075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=318 compat=0 ip=0x7f78c0b9c799 code=0x7ffc0000
[  301.207901][  T446] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  301.232925][  T446] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  301.251275][  T446] usb 3-1: Product: syz
[  301.255290][ T4125] EXT4-fs error (device loop5): ext4_map_blocks:635: inode #3: block 2: comm syz.5.1076: lblock 2 mapped to illegal pblock 2 (length 1)
[  301.269627][   T28] audit: type=1326 audit(1773209931.459:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4122 comm="syz.5.1075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78c0b9c799 code=0x7ffc0000
[  301.271764][ T4125] Quota error (device loop5): qtree_write_dquot: dquota write failed
[  301.301204][  T446] usb 3-1: Manufacturer: syz
[  301.301925][ T4125] EXT4-fs error (device loop5): ext4_map_blocks:635: inode #3: block 48: comm syz.5.1076: lblock 0 mapped to illegal pblock 48 (length 1)
[  301.313328][  T446] usb 3-1: SerialNumber: syz
[  301.321016][ T4125] Quota error (device loop5): v2_write_file_info: Can't write info structure
[  301.333479][ T4125] EXT4-fs error (device loop5): ext4_acquire_dquot:6822: comm syz.5.1076: Failed to acquire dquot type 0
[  301.344883][ T4125] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5935: Corrupt filesystem
[  301.354649][ T4125] EXT4-fs error (device loop5): ext4_evict_inode:279: inode #11: comm syz.5.1076: mark_inode_dirty error
[  301.373244][ T4125] EXT4-fs warning (device loop5): ext4_evict_inode:282: couldn't mark inode dirty (err -117)
[  301.393464][ T4125] EXT4-fs (loop5): 1 orphan inode deleted
[  301.403430][ T4125] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  301.413673][ T1163] EXT4-fs error (device loop5): ext4_map_blocks:635: inode #3: block 1: comm kworker/u4:7: lblock 1 mapped to illegal pblock 1 (length 1)
[  301.442594][ T1163] EXT4-fs error (device loop5): ext4_release_dquot:6858: comm kworker/u4:7: Failed to release dquot type 0
[  301.454893][ T4125] EXT4-fs (loop5): re-mounted. Quota mode: none.
[  301.463232][   T19] usb 7-1: device descriptor read/64, error -71
[  301.471481][ T4125] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended
[  301.481025][ T4125] EXT4-fs error (device loop5): ext4_map_blocks:635: inode #3: block 48: comm syz.5.1076: lblock 0 mapped to illegal pblock 48 (length 1)
[  301.495493][ T4125] EXT4-fs (loop5): re-mounted. Quota mode: none.
[  301.509014][ T1515] EXT4-fs (loop5): unmounting filesystem.
[  301.538624][ T4135] overlayfs: missing 'lowerdir'
[  301.571350][  T446] usb 3-1: 0:2 : does not exist
[  301.579771][  T446] usb 3-1: 5:0: failed to get current value for ch 0 (-22)
[  301.631130][  T391] usb 4-1: new high-speed USB device number 53 using dummy_hcd
[  301.645681][  T446] usb 3-1: USB disconnect, device number 42
[  301.713248][  T522] usb 2-1: new high-speed USB device number 53 using dummy_hcd
[  301.745091][ T4142] 9pnet_virtio: no channels available for device syz
[  301.756483][ T4142] overlayfs: missing 'lowerdir'
[  301.763238][   T19] usb 7-1: new high-speed USB device number 24 using dummy_hcd
[  301.894459][  T522] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  301.904846][  T522] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  301.913928][   T19] usb 7-1: device descriptor read/64, error -71
[  301.921243][  T522] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  301.930767][  T522] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  301.939051][  T522] usb 2-1: SerialNumber: syz
[  302.151590][  T522] usb 2-1: 0:2 : does not exist
[  302.167094][  T522] usb 2-1: USB disconnect, device number 53
[  302.183401][   T19] usb 7-1: device descriptor read/64, error -71
[  302.303463][   T19] usb usb7-port1: attempt power cycle
[  302.699401][ T4149] loop1: detected capacity change from 0 to 128
[  302.743365][   T19] usb 7-1: new high-speed USB device number 25 using dummy_hcd
[  302.804462][   T19] usb 7-1: device descriptor read/8, error -71
[  302.954236][   T19] usb 7-1: device descriptor read/8, error -71
[  303.243220][   T19] usb 7-1: new high-speed USB device number 26 using dummy_hcd
[  303.284246][   T19] usb 7-1: device descriptor read/8, error -71
[  303.434436][   T19] usb 7-1: device descriptor read/8, error -71
[  303.553303][   T19] usb usb7-port1: unable to enumerate USB device
[  303.645562][  T391] usb 4-1: Using ep0 maxpacket: 16
[  303.652099][  T391] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  303.673208][  T391] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  303.683620][  T391] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  303.692704][  T391] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  303.701995][  T337] udevd[337]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  303.723971][  T391] usb 4-1: Product: syz
[  303.728183][  T391] usb 4-1: Manufacturer: syz
[  303.732802][  T391] usb 4-1: SerialNumber: syz
[  303.741251][  T354] udevd[354]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  303.966262][  T391] usb 4-1: 0:2 : does not exist
[  303.974975][ T4161] netlink: 288 bytes leftover after parsing attributes in process `syz.5.1089'.
[  304.020655][  T391] usb 4-1: 5:0: failed to get current value for ch 0 (-22)
[  304.038808][  T391] usb 4-1: USB disconnect, device number 53
[  304.132722][ T4168] overlayfs: missing 'workdir'
[  304.263599][  T337] udevd[337]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  304.354483][ T4173] loop6: detected capacity change from 0 to 512
[  304.380631][ T4173] EXT4-fs: Ignoring removed orlov option
[  304.403525][ T4173] EXT4-fs (loop6): Test dummy encryption mode enabled
[  304.410548][ T4173] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  304.445079][ T4173] EXT4-fs (loop6): 1 truncate cleaned up
[  304.450794][ T4173] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  304.473223][  T446] usb 6-1: new high-speed USB device number 30 using dummy_hcd
[  304.535797][ T4173] xt_hashlimit: size too large, truncated to 1048576
[  304.633391][  T446] usb 6-1: device descriptor read/64, error -71
[  304.913260][  T446] usb 6-1: device descriptor read/64, error -71
[  304.920273][ T4185] 9pnet_virtio: no channels available for device syz
[  305.213226][  T446] usb 6-1: new high-speed USB device number 31 using dummy_hcd
[  305.332992][ T2179] EXT4-fs error (device loop6): mb_free_blocks:1826: group 0, inode 16: block 35:freeing already freed block (bit 34); block bitmap corrupt.
[  305.371244][ T2179] EXT4-fs (loop6): unmounting filesystem.
[  305.377350][  T446] usb 6-1: device descriptor read/64, error -71
[  305.628235][ T4201] overlayfs: './file0' not a directory
[  305.635593][ T4203] loop1: detected capacity change from 0 to 1024
[  305.653281][  T446] usb 6-1: device descriptor read/64, error -71
[  305.657460][ T4203] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  305.671964][ T4203] ==================================================================
[  305.680080][ T4203] BUG: KASAN: out-of-bounds in ext4_xattr_set_entry+0x979/0x21d0
[  305.687858][ T4203] Read of size 18446744073709551588 at addr ffff88812fbc1840 by task syz.1.1104/4203
[  305.690450][ T4206] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1098'.
[  305.697350][ T4203] 
[  305.697372][ T4203] CPU: 0 PID: 4203 Comm: syz.1.1104 Not tainted syzkaller #0
[  305.697395][ T4203] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  305.697409][ T4203] Call Trace:
[  305.697417][ T4203]  <TASK>
[  305.732409][ T4203]  __dump_stack+0x21/0x24
[  305.736793][ T4203]  dump_stack_lvl+0x110/0x170
[  305.741483][ T4203]  ? __cfi_dump_stack_lvl+0x8/0x8
[  305.746529][ T4203]  ? kasan_save_alloc_info+0x25/0x30
[  305.751857][ T4203]  ? ext4_xattr_block_set+0x9d5/0x3260
[  305.757342][ T4203]  ? ext4_xattr_set+0x242/0x320
[  305.762319][ T4203]  ? ext4_xattr_trusted_set+0x3c/0x50
[  305.767711][ T4203]  ? ext4_xattr_set_entry+0x979/0x21d0
[  305.773194][ T4203]  print_address_description+0x71/0x200
[  305.773565][  T446] usb usb6-port1: attempt power cycle
[  305.778777][ T4203]  print_report+0x4a/0x60
[  305.778808][ T4203]  kasan_report+0x122/0x150
[  305.793036][ T4203]  ? ext4_xattr_set_entry+0x979/0x21d0
[  305.798553][ T4203]  ? ext4_xattr_set_entry+0x979/0x21d0
[  305.804053][ T4203]  kasan_check_range+0x249/0x2a0
[  305.809012][ T4203]  ? ext4_xattr_set_entry+0x979/0x21d0
[  305.814499][ T4203]  memmove+0x2d/0x70
[  305.818409][ T4203]  ext4_xattr_set_entry+0x979/0x21d0
[  305.823729][ T4203]  ext4_xattr_block_set+0xad3/0x3260
[  305.829085][ T4203]  ? __kasan_check_write+0x14/0x20
[  305.834249][ T4203]  ? iput+0x620/0x670
[  305.838249][ T4203]  ? ext4_xattr_block_find+0x310/0x310
[  305.843758][ T4203]  ext4_xattr_set_handle+0x1338/0x1570
[  305.849237][ T4203]  ? __cfi_ext4_xattr_set_handle+0x10/0x10
[  305.855059][ T4203]  ? __kasan_check_read+0x11/0x20
[  305.860099][ T4203]  ? __ext4_journal_start_sb+0x2ed/0x4a0
[  305.865776][ T4203]  ext4_xattr_set+0x242/0x320
[  305.870510][ T4203]  ? __kasan_kmalloc+0x95/0xb0
[  305.875310][ T4203]  ? __kmalloc_node+0xb2/0x1e0
[  305.880098][ T4203]  ? __cfi_ext4_xattr_set+0x10/0x10
[  305.885320][ T4203]  ? selinux_inode_setxattr+0x5cf/0xbf0
[  305.890894][ T4203]  ext4_xattr_trusted_set+0x3c/0x50
[  305.896138][ T4203]  ? __cfi_ext4_xattr_trusted_set+0x10/0x10
[  305.902048][ T4203]  __vfs_setxattr+0x3f2/0x440
[  305.906764][ T4203]  __vfs_setxattr_noperm+0x12a/0x5e0
[  305.912061][ T4203]  __vfs_setxattr_locked+0x212/0x230
[  305.917366][ T4203]  vfs_setxattr+0x167/0x2e0
[  305.921892][ T4203]  ? __cfi_vfs_setxattr+0x10/0x10
[  305.926938][ T4203]  ? __kasan_check_write+0x14/0x20
[  305.932073][ T4203]  setxattr+0x346/0x360
[  305.936265][ T4203]  ? path_setxattr+0x290/0x290
[  305.941081][ T4203]  ? __mnt_want_write+0x1e6/0x260
[  305.946125][ T4203]  ? mnt_want_write+0x220/0x300
[  305.950992][ T4203]  path_setxattr+0x147/0x290
[  305.955606][ T4203]  ? simple_xattr_list_add+0x120/0x120
[  305.961085][ T4203]  ? __kasan_check_write+0x14/0x20
[  305.966207][ T4203]  ? fpregs_restore_userregs+0x128/0x260
[  305.971854][ T4203]  __x64_sys_lsetxattr+0xc2/0xe0
[  305.976812][ T4203]  x64_sys_call+0x8b7/0x9a0
[  305.981338][ T4203]  do_syscall_64+0x4c/0xa0
[  305.985782][ T4203]  ? clear_bhb_loop+0x30/0x80
[  305.990503][ T4203]  ? clear_bhb_loop+0x30/0x80
[  305.995212][ T4203]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  306.001122][ T4203] RIP: 0033:0x7f1acf79c799
[  306.005569][ T4203] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  306.025193][ T4203] RSP: 002b:00007f1ad05ea028 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd
[  306.033665][ T4203] RAX: ffffffffffffffda RBX: 00007f1acfa15fa0 RCX: 00007f1acf79c799
[  306.041671][ T4203] RDX: 0000200000000000 RSI: 0000200000000180 RDI: 00002000000001c0
[  306.049684][ T4203] RBP: 00007f1acf832c99 R08: 0000000000000000 R09: 0000000000000000
[  306.057662][ T4203] R10: 0000000000000361 R11: 0000000000000246 R12: 0000000000000000
[  306.065635][ T4203] R13: 00007f1acfa16038 R14: 00007f1acfa15fa0 R15: 00007ffcfb736f98
[  306.073626][ T4203]  </TASK>
[  306.076664][ T4203] 
[  306.079007][ T4203] Allocated by task 4203:
[  306.083340][ T4203]  kasan_set_track+0x4b/0x70
[  306.087953][ T4203]  kasan_save_alloc_info+0x25/0x30
[  306.093083][ T4203]  __kasan_kmalloc+0x95/0xb0
[  306.097688][ T4203]  __kmalloc_node_track_caller+0xb1/0x1e0
[  306.103425][ T4203]  kmemdup+0x2b/0x60
[  306.107342][ T4203]  ext4_xattr_block_set+0x9d5/0x3260
[  306.112651][ T4203]  ext4_xattr_set_handle+0x1338/0x1570
[  306.118130][ T4203]  ext4_xattr_set+0x242/0x320
[  306.122823][ T4203]  ext4_xattr_trusted_set+0x3c/0x50
[  306.128043][ T4203]  __vfs_setxattr+0x3f2/0x440
[  306.132741][ T4203]  __vfs_setxattr_noperm+0x12a/0x5e0
[  306.138042][ T4203]  __vfs_setxattr_locked+0x212/0x230
[  306.143342][ T4203]  vfs_setxattr+0x167/0x2e0
[  306.147865][ T4203]  setxattr+0x346/0x360
[  306.152051][ T4203]  path_setxattr+0x147/0x290
[  306.156661][ T4203]  __x64_sys_lsetxattr+0xc2/0xe0
[  306.161621][ T4203]  x64_sys_call+0x8b7/0x9a0
[  306.166151][ T4203]  do_syscall_64+0x4c/0xa0
[  306.170590][ T4203]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  306.176505][ T4203] 
[  306.178844][ T4203] The buggy address belongs to the object at ffff88812fbc1800
[  306.178844][ T4203]  which belongs to the cache kmalloc-1k of size 1024
[  306.192912][ T4203] The buggy address is located 64 bytes inside of
[  306.192912][ T4203]  1024-byte region [ffff88812fbc1800, ffff88812fbc1c00)
[  306.206205][ T4203] 
[  306.208545][ T4203] The buggy address belongs to the physical page:
[  306.214966][ T4203] page:ffffea0004bef000 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x12fbc0
[  306.225225][ T4203] head:ffffea0004bef000 order:3 compound_mapcount:0 compound_pincount:0
[  306.233561][ T4203] flags: 0x4000000000010200(slab|head|zone=1)
[  306.239659][ T4203] raw: 4000000000010200 ffffea0004500600 dead000000000002 ffff888100043080
[  306.248251][ T4203] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000
[  306.256839][ T4203] page dumped because: kasan: bad access detected
[  306.263270][ T4203] page_owner tracks the page as allocated
[  306.269023][ T4203] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 284, tgid 284 (syz-executor), ts 23475114480, free_ts 0
[  306.289356][ T4203]  post_alloc_hook+0x1f5/0x210
[  306.294145][ T4203]  prep_new_page+0x1c/0x110
[  306.298669][ T4203]  get_page_from_freelist+0x2d12/0x2d80
[  306.304237][ T4203]  __alloc_pages+0x1d9/0x480
[  306.308843][ T4203]  alloc_slab_page+0x6e/0xf0
[  306.313450][ T4203]  new_slab+0x98/0x3d0
[  306.317540][ T4203]  ___slab_alloc+0x6bd/0xb20
[  306.322158][ T4203]  __slab_alloc+0x5e/0xa0
[  306.326508][ T4203]  __kmem_cache_alloc_node+0x203/0x2c0
[  306.331984][ T4203]  __kmalloc_node_track_caller+0xa0/0x1e0
[  306.337713][ T4203]  __alloc_skb+0x236/0x4b0
[  306.342145][ T4203]  alloc_uevent_skb+0x85/0x240
[  306.346923][ T4203]  kobject_uevent_net_broadcast+0x1b4/0x5b0
[  306.352829][ T4203]  kobject_uevent_env+0x54f/0x730
[  306.357870][ T4203]  kobject_uevent+0x1d/0x30
[  306.362385][ T4203]  netdev_queue_update_kobjects+0x22c/0x470
[  306.368301][ T4203] page_owner free stack trace missing
[  306.373673][ T4203] 
[  306.376003][ T4203] Memory state around the buggy address:
[  306.381643][ T4203]  ffff88812fbc1700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  306.389725][ T4203]  ffff88812fbc1780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  306.397802][ T4203] >ffff88812fbc1800: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  306.405878][ T4203]                                            ^
[  306.412034][ T4203]  ffff88812fbc1880: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  306.420128][ T4203]  ffff88812fbc1900: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  306.428196][ T4203] ==================================================================
[  306.436369][  T391] usb 2-1: new full-speed USB device number 54 using dummy_hcd
[  306.440071][  T522] usb 4-1: new high-speed USB device number 54 using dummy_hcd
[  306.444177][ T4203] Disabling lock debugging due to kernel taint
[  306.523300][  T446] usb 6-1: new high-speed USB device number 32 using dummy_hcd
[  306.554291][  T446] usb 6-1: device descriptor read/8, error -71
[  306.634365][  T522] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  306.644542][  T522] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  306.644948][  T391] usb 2-1: too many endpoints for config 253 interface 0 altsetting 0: 255, using maximum allowed: 30
[  306.655752][  T522] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  306.664531][  T391] usb 2-1: config 253 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 5384, setting to 64
[  306.674392][  T522] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  306.684599][  T391] usb 2-1: config 253 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 255
[  306.693393][  T522] usb 4-1: SerialNumber: syz
[  306.708770][  T391] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  306.719789][  T391] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  306.727934][  T391] usb 2-1: SerialNumber: syz
[  306.733363][  T446] usb 6-1: device descriptor read/8, error -71
[  306.740103][ T4208] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22
[  306.927477][  T522] usb 4-1: 0:2 : does not exist
[  306.938436][  T522] usb 4-1: USB disconnect, device number 54
[  306.954951][  T391] rndis_host 2-1:253.0: skipping garbage
[  306.964607][  T391] usb 2-1: USB disconnect, device number 54
[  307.003356][  T446] usb 6-1: new high-speed USB device number 33 using dummy_hcd
[  307.034312][  T446] usb 6-1: device descriptor read/8, error -71
[  307.143952][  T337] udevd[337]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  307.190532][  T446] usb 6-1: device descriptor read/8, error -71
[  307.313375][  T446] usb usb6-port1: unable to enumerate USB device
[  307.467226][  T285] EXT4-fs (loop1): unmounting filesystem.