last executing test programs:

39.909533919s ago: executing program 3 (id=181):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
r1 = eventfd(0xfffffff9)
ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, 0x0)
ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000040)=r1)

39.90925173s ago: executing program 3 (id=182):
mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='dev\x00', 0x1ff)
syz_usb_connect(0x3, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040f905ffff0001010203010902200001010080fa0904000002ff00000007058102"], 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='dev/ttyUSB0\x00', 0x2, 0x0)
ioctl(r0, 0x542a, 0x0)

38.451276395s ago: executing program 3 (id=189):
fsopen(&(0x7f00000001c0)='bpf\x00', 0x2000000)

38.427093186s ago: executing program 3 (id=190):
r0 = socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.kill\x00', 0x275a, 0x0)
write$binfmt_script(r2, 0x0, 0x0)
write$cgroup_pid(r2, &(0x7f0000000240), 0x12)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r0, 0x8982, &(0x7f0000000080))
socket$inet_tcp(0x2, 0x1, 0x0)
epoll_create1(0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0))
r5 = socket$inet(0x2, 0x2, 0x0)
shutdown(r5, 0x0)
recvmmsg(r5, &(0x7f00000066c0), 0xa0d, 0x0, 0x0)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x121503, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f})
ioctl$TUNSETQUEUE(r7, 0x400454d9, &(0x7f0000000140)={'gre0\x00', 0x400})
ioctl$TUNSETQUEUE(r7, 0x400454d9, &(0x7f00000001c0)={'ip6erspan0\x00', 0x200})
ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000040)={'ip6gre0\x00', &(0x7f0000000300)=@ethtool_eee={0x45, 0x6, 0x7, 0x8, 0x8, 0x3, 0x80000000, 0x0, [0x0, 0x401]}})

37.491500158s ago: executing program 3 (id=198):
r0 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
syz_open_dev$evdev(&(0x7f0000000000), 0x20000000000000, 0x0) (async)
r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x20000000000000, 0x0)
syz_usb_disconnect(r1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) (async)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000000c0)={[{@redirect_dir_follow, 0x3a}], [], 0x2f}) (async)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000000c0)={[{@redirect_dir_follow, 0x3a}], [], 0x2f})
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
chdir(&(0x7f0000000100)='./file0\x00')
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x8, &(0x7f0000000600), 0x5, 0x50f, &(0x7f0000001b80)="$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")
syz_usb_connect$rtl8150(0x0, 0x2e, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0)
ioctl$EVIOCRMFF(r1, 0xc0085508, 0x0) (async)
ioctl$EVIOCRMFF(r1, 0xc0085508, 0x0)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, 0x0, 0x0) (async)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, 0x0, 0x0)
socket(0x80000000000000a, 0x2, 0x0)
r2 = fsopen(&(0x7f0000002240)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f00000004c0)='j\x95\'\x8aC\x16\xca\\', &(0x7f0000000c40)='\xe6usek\v\xf6u%\x9b\x00\x00\xad\xeb\x00\x00\x00\x00\x01\x80\x00\x00\xcf\x9b\x9f\b\xb6\xfe\xc8\xda~-\x83w\xf9Z\xd2\xcb\xcdF\xd0#N7\x17\xfc\x1e\xf1\x97\xffxi\xe0KE}]\x8e\xca\xe3+\xc8\x98\x03\x91\x88(\bn\x7f\x0e\x85\xa5\xb4\n?^\xc9\xef\xe0Q\x01\xb6\xa5\x81t\x06\xda\x95\x935\xf1\x18\xac\x00\xf0\xff\xff\x80\x1a\xa1\x06\xfd\x01\x00\x00\x00\x0f\xf8\xe3\x8a\x1f\x9c\xf3\xc5\x1f\xf9\xbf?\xc1\rv\xd3j\r6\x7f\x00'/141, 0x0)
fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000140)='{:\'@-\x00', &(0x7f0000000240)='$*\xa3\t\x1f\x9be\x9a\xd0y\xb8\xba\xb2.\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f00000003c0)='\x00', &(0x7f0000000400)='(!\xef(.(\\-]\x00', 0x0) (async)
fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f00000003c0)='\x00', &(0x7f0000000400)='(!\xef(.(\\-]\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000200)='^](*\r\\!\x00', &(0x7f0000000500)='{:\'@-\x00', 0x0)
fsconfig$FSCONFIG_SET_BINARY(r2, 0x2, &(0x7f00000001c0)='\xe6\xd2=(L\x9f\x1c&\xda\xfa\xf3}\x18\xdckL<\xa5-#\xc8\xb7\x98\f\x87\xcf', &(0x7f0000000540)="82", 0x1) (async)
fsconfig$FSCONFIG_SET_BINARY(r2, 0x2, &(0x7f00000001c0)='\xe6\xd2=(L\x9f\x1c&\xda\xfa\xf3}\x18\xdckL<\xa5-#\xc8\xb7\x98\f\x87\xcf', &(0x7f0000000540)="82", 0x1)
fsconfig$FSCONFIG_SET_BINARY(r2, 0x2, &(0x7f0000000440)='.!@*\x00', &(0x7f0000000740)="e5", 0x1)
fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000b80)='\xe0\"\xef\xb1\xea\xe6\x9c\xe6\xc8M\xdb\x86\xb3\x8b\xbe\xd5\xbdB\x92\xa0\x19-+a\x13qQ\xd5f39hSr\xafbB\xe2\xe8\xcd\x1bf\x18\x7f\xf27E#\"\xab\x99\xec\x88\x8d\xd8C\x0f\x95\xff\xfeG\xf9t\xb1 \xcc\xc5\xbb\x88\xb6\xd2\xf2Jwq\xf8oG<v\xb8\x18\x80\xe1Kf\xf8R\xdd\x06\xe8\xfbl\v\xb0\xdd\x05\x05\xd8\xdb\xfd`\xf9\xf8\x915\b\x8c\xad\xc8\x9d=\xfeN\x8b\x1eR\x1e\xf8\x9dn\x19H\xd2aE\xa0\x06\xb0Yv\xf9^\x8c\x8f\xc3\xa5\x985\x85U\x8cZ/\'\xbd\xe2\xdc\xe3\xb9\x8e$Z\xef\xa8\xe5(Mt\xd3\xd9\xf6X\x1a\x9b\t$N\xd0U\xe2z\xeb\x01\x80!0\xe8\xc3\xce\xf8\x03\xde\x92s\xf9', &(0x7f0000000ac0)='fuseblk\x00M\x13k\x92#\x05z)\xe0c\\35\xdf%\xa3\xac!zoO\xf8\xcex\xb3\f\xad@\x853o\x0f0\x1a\xc0\"\xf7\x11Z\x01\xc1\xd9\x9fbJ7\xd1\xad\xe1\xed\x87\xae\x11-s\xb4\xbd\x1e\x9a\xd7\xc1crt\x88%\x92\x8fL\x8d\xb3-\xb60O \xc5\xd1q\xcc\x97\xe0\xe8\xb0\n\v\xa9V\xfa\xeb\x1e|M\x98W\x81\xa2@{_\xba^\xa2\x82k\x10G\xfc\xd4\x99Pl\xfa\xe8\x7f\xc9 h\xd0\xfd\x04\x95\x8c\xb1\xe7', 0x0)
fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000080)='$,\x00', &(0x7f0000000100)=',\x10-\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000a40)='^,/\x00', &(0x7f0000000a80)='fuseblk\x00', 0x0) (async)
fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000a40)='^,/\x00', &(0x7f0000000a80)='fuseblk\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000280)='\x1c@\\\x00', &(0x7f00000002c0)='\x00', 0x0)
fsconfig$FSCONFIG_SET_BINARY(r2, 0x2, &(0x7f0000000580)='\xe6usek\v\xf6u%\x9b\x00\x00\xad\xeb\x00\x00\x00\x00\x01\x80\x00\x00\xcf\x9b\x9f\b\xb6\xfe\xc8\xda~-\xf5S>\xb8\x86\xfc\x9cVR\x82\x9a\xbdp\xbd\x83w\xf9Z\xd2\xcb\xcdF\xd0#N7\x17\xfc\x1e\xf1\x97\xffxi\xe0KE}]\x8e\xca\xe3+\xc8\x98\x03\x91\x88(\bn\x7f\x0e\x85\xa5\xb4\n?_\xc9\xef\xe0Q\xdb\xb6\xa5\x81t\x06\xda\x95\x935\xf1\x18\xac\x00\xf0\xff\xff\xbd\xb5\xa1\x06\xfd\x01\x00\x00\x00\x0f\xf8\xe3\x8a\x1f\x9c\xf3\xc5\x1f\xf9\xbf[\xd13\xb3\xd3j\r6\x7f', &(0x7f0000000380)='y', 0x1)
fsconfig$FSCONFIG_SET_BINARY(r2, 0x2, &(0x7f0000000300)='(\xed\xef(.(\\-]\x00', &(0x7f0000000340)="0f", 0x1)
fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000002200)='\x05\x00\x00\x00\x00\x8d]\x00', &(0x7f0000000780)='f\xf0p\xce\x96\xbb\xd2dH\xdf\xbd\x18\x9baE\xef\x90\x90\x00\x00\x00j\xab\x04\x00G\xa3rLs\xff\x1f\xea!E\x90;\x06\x00\x00\x00\x00\x00\x00\x00\x02\xca\x0f\xee\xc9B\xb5`\x9b\xf5.\x86\xa8s\xf9\xe1\x12\xb1\xa6\x02\xd8\x93=\xc4\xeb\"\xff*\a\x976&\xcc\xd5\x0e\xae\xe7e\x82\xd48j\x04H\x93~\xd5\x11rP\xef+t:U0\x17D\xba8^\xf6\xd7X\x96b\x93\xea\x12Y\x10\xfa:F\x89W\xbe\xb17I\x12\xf2\x94g\xb2\x10\xdc\xeeu6\x9c\vb', 0x0) (async)
fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000002200)='\x05\x00\x00\x00\x00\x8d]\x00', &(0x7f0000000780)='f\xf0p\xce\x96\xbb\xd2dH\xdf\xbd\x18\x9baE\xef\x90\x90\x00\x00\x00j\xab\x04\x00G\xa3rLs\xff\x1f\xea!E\x90;\x06\x00\x00\x00\x00\x00\x00\x00\x02\xca\x0f\xee\xc9B\xb5`\x9b\xf5.\x86\xa8s\xf9\xe1\x12\xb1\xa6\x02\xd8\x93=\xc4\xeb\"\xff*\a\x976&\xcc\xd5\x0e\xae\xe7e\x82\xd48j\x04H\x93~\xd5\x11rP\xef+t:U0\x17D\xba8^\xf6\xd7X\x96b\x93\xea\x12Y\x10\xfa:F\x89W\xbe\xb17I\x12\xf2\x94g\xb2\x10\xdc\xeeu6\x9c\vb', 0x0)
read(r2, 0x0, 0xfffffea1)

35.78537908s ago: executing program 3 (id=205):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7)
munmap(&(0x7f0000002000/0x4000)=nil, 0x4000)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x10, &(0x7f0000000000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1000000}, {0x85, 0x0, 0x0, 0x86}}, {}, [@jmp={0x5, 0x0, 0x3, 0x9, 0x0, 0xffffffffffffffff, 0xfffffffffffffff0}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x2a}, {0x7, 0x0, 0xb, 0x0, 0x0, 0x0, 0x7000000}}}, &(0x7f0000000680)='syzkaller\x00', 0x3, 0x1016, &(0x7f0000001880)=""/4118, 0x41100, 0x28}, 0x94)
chdir(0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
setsockopt$CAN_RAW_ERR_FILTER(0xffffffffffffffff, 0x65, 0x2, 0x0, 0x0)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0)
r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TCSETAW(r4, 0x5407, 0x0)
openat$ttyS3(0xffffff9c, &(0x7f0000000280), 0x1a9140, 0x0)
r5 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="840100001800ff0300000000fbdbe0251d010900500012804c00f88046004680acc71d958e7a34640dcf53c7ef4014e029622ecea4265925177a480e4e3d23180fbf878b1957d36c5250d315341fdcb2b86bfb163bbaaf7381a195d01c3051bc9d300000200106801c"], 0x184}, 0x1, 0x0, 0x0, 0x5}, 0x0)
syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81)
mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0xf)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
r6 = syz_open_dev$usbfs(&(0x7f0000000200), 0x76, 0x103901)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$USBDEVFS_CLEAR_HALT(r6, 0x80045515, &(0x7f0000000000)={0x1, 0x1})
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)

20.772222065s ago: executing program 32 (id=205):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7)
munmap(&(0x7f0000002000/0x4000)=nil, 0x4000)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x10, &(0x7f0000000000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1000000}, {0x85, 0x0, 0x0, 0x86}}, {}, [@jmp={0x5, 0x0, 0x3, 0x9, 0x0, 0xffffffffffffffff, 0xfffffffffffffff0}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x2a}, {0x7, 0x0, 0xb, 0x0, 0x0, 0x0, 0x7000000}}}, &(0x7f0000000680)='syzkaller\x00', 0x3, 0x1016, &(0x7f0000001880)=""/4118, 0x41100, 0x28}, 0x94)
chdir(0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
setsockopt$CAN_RAW_ERR_FILTER(0xffffffffffffffff, 0x65, 0x2, 0x0, 0x0)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0)
r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TCSETAW(r4, 0x5407, 0x0)
openat$ttyS3(0xffffff9c, &(0x7f0000000280), 0x1a9140, 0x0)
r5 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="840100001800ff0300000000fbdbe0251d010900500012804c00f88046004680acc71d958e7a34640dcf53c7ef4014e029622ecea4265925177a480e4e3d23180fbf878b1957d36c5250d315341fdcb2b86bfb163bbaaf7381a195d01c3051bc9d300000200106801c"], 0x184}, 0x1, 0x0, 0x0, 0x5}, 0x0)
syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81)
mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0xf)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
r6 = syz_open_dev$usbfs(&(0x7f0000000200), 0x76, 0x103901)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$USBDEVFS_CLEAR_HALT(r6, 0x80045515, &(0x7f0000000000)={0x1, 0x1})
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)

10.572556563s ago: executing program 0 (id=329):
r0 = socket$pptp(0x18, 0x1, 0x2)
connect$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0x3, @local}}, 0x13)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB], 0x54}, 0x1, 0x0, 0x0, 0x8014}, 0x54)
r2 = socket(0x10, 0x3, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, 0x0)
ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, 0x0)
syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="636865636b706f696e743d64697361626c652c6261636b67726f756e645f67633d73796e632c61636c2c616c6c6f635f6d6f64653d72657573652c696e6c696e655f78617474722c6e6f666c7573685f6d657267652c6d6f64653d6c66732c6e6f757365725f78617474722c636865636b706f696e743d64697361626c652c757365725f78617474722c6673796e635f6d6f64653d7374726963742c6167655f657874656e745f63616368652c646973636172642c6e6f696e6c696e655f64656e7472792c008bfb3c1e4b1b12ae77c937da8858", @ANYBLOB="13381f1a42a7d4b39f5fbeb72d8e2fcc845965ecf02f1aebc7b164ba1f2bcedc5e1d48c53c3dff65a89b1d5b891f654b24b4e69a7f31cca9e32e3c9b435bea8bd0ff2eddce2ccff8c5f02635d1a4df4a7f233101d247d239229e196e2b4b1c2f2185e4c0336c905fb1e4bde135cac8278f0c836c9068257293552611484d5aecdcd6f744bebf81fbfca81fc9dbf1a8bb5f863d5466ef1d4466e153feb9d722167bc090abb9635b1ef2e34e5cd7dd5d95b07bf24d2ae8f3d0b2576a06e0ffd94ba28af029f8f151fd261269359b0712431724c4b90aa95fa5e10ce69b460f281922f30900750cb41ce1521c4aa3da82368c9504", @ANYRES8, @ANYBLOB="0c322d422fae2a242ddafe0424df7e326f9ca30e708fc66dd4fcdfb2ee08000000473106f28cfb33562517c081a814c28c0d5722d6da0fe935629d599cf383df9dd5f3d5d0143f2ffb3bfcb13683921e9fffb39b4fd331d8262662cf2bb19eefb5e5bb95c797a11a738336a63f2aea0469cee5332d44", @ANYRES32, @ANYRESDEC, @ANYRES16, @ANYRES32, @ANYRES16], 0x1, 0x5507, &(0x7f000000cf00)="$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")
socket$inet_tcp(0x2, 0x1, 0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r3, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10)
connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10)
sendto$inet(r3, 0x0, 0x0, 0x0, 0x0, 0x0)
recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2141, 0x4)
pwrite64(r4, &(0x7f0000000140)="f6", 0xffffff07, 0x8000c61)

9.05447835s ago: executing program 0 (id=332):
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x5, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0xe}, [@call={0x85, 0x0, 0x0, 0x8}, @call={0x85, 0x0, 0x0, 0x23}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000003f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x15)
add_key$keyring(0x0, &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$join(0x1, &(0x7f00000000c0)={'syz', 0x3})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0)
pipe(&(0x7f0000000000)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = open(&(0x7f0000000000)='./bus\x00', 0x141b42, 0x8)
pipe(&(0x7f0000000080)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
write$binfmt_script(r4, 0x0, 0xb)
splice(r6, 0x0, r5, 0x0, 0x1000, 0x0)
splice(r3, 0x0, r7, 0x0, 0x80, 0x0)
write$binfmt_aout(r4, 0x0, 0x20)
close_range(r2, 0xffffffffffffffff, 0x0)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007008500000073"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r9}, 0xc)
ioctl$PTP_ENABLE_PPS(0xffffffffffffffff, 0x40043d04, 0x1)
r10 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0)
r12 = syz_open_procfs$pagemap(0x0, &(0x7f0000000300))
ioctl(r12, 0x7, &(0x7f0000000340)="7537a04b9255ed39f280c29b5cfdffa60a4f0948f8071f4b8292e36c164880eb98333ff5d9bd848955bb690a3922b3a385dfe6256040d34af6ad2e678b9a98681d26d1f162333f86174409af9f84c826c4e038868c9974e1b0042db35ff21c8efaa814d794a4aac9a1260c5512e608695ff62853d04bdf555a9ac7d4910df3f19c023da46fe969e79d9f534dc61e5feb78aeb4abdd300739a279ae9a6e37c8672a77c52faa43f24743205648633373975212e13ede06519b9c051ae008c56d221f1f49adbea3a91840abc49c8591")
ioctl$XFS_IOC_OPEN_BY_HANDLE(r11, 0xc038586b, &(0x7f0000000200)={r11, &(0x7f0000000000)='/dev/kvm\x00', 0x488001, &(0x7f0000000040)={@align=0x3ff, {0x5, 0x6, 0x3d1, 0x5}}, 0x9437, &(0x7f00000000c0)={@_ha_fsid}, &(0x7f0000000140)=0x8})

9.05375668s ago: executing program 1 (id=333):
mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='dev\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='dev\x00', &(0x7f0000000500)='dev\x00', 0x0, 0x0, 0x0)
syz_usb_connect(0x3, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040f905ffff0001010203010902200001010080fa0904000002ff00000007058102"], 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000200)='dev/ttyUSB0\x00', 0x2, 0x0)

9.05333926s ago: executing program 2 (id=334):
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x1000040, &(0x7f0000000180)={[{@jqfmt_vfsv0}, {@nouid32}, {@noblock_validity}, {@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0x7}}, {@nouid32}, {@nomblk_io_submit}, {@noinit_itable}, {@usrquota}]}, 0x1, 0x5a3, &(0x7f00000002c0)="$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")
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x180, 0x0)
close(r2)
socket$netlink(0x10, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x7fffe, {0x0, 0x0, 0x0, 0x0, {0x0, 0xf}, {0xb, 0xb}, {0x0, 0x8}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x1, 0x9, 0x1, 0x8}, 0x0, 0xfffffffc, 0x32, 0x5, 0x9, 0x7, 0x9, 0x1d, 0x1, 0xffffff5c, {0xffff1c76, 0x1f, 0x3, 0x1008, 0xfffffffe, 0x7583}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x404c800}, 0x400c000)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', <r5=>0x0})
sendto$packet(r0, &(0x7f00000002c0)="05031620d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14)

9.05278947s ago: executing program 4 (id=335):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, 0x0, 0x0)
bind$inet(r0, 0x0, 0x0)
setsockopt$inet_int(r0, 0x0, 0x13, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
syz_emit_ethernet(0x2a, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x300f401, 0x0, 0x2, 0x0, 0x0)
r1 = inotify_init1(0x80800)
inotify_add_watch(r1, &(0x7f0000000040)='./file0\x00', 0x610003d5)
mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f00000027c0), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
chdir(0x0)
openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x32)
unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0)

7.441544599s ago: executing program 0 (id=336):
syz_usb_connect(0x3, 0x63, &(0x7f0000000080)=ANY=[@ANYBLOB="12010002000000404c17aa5500010102030109025100010100c032090400000208065000070501020002000705820200020009040001040806620007"], 0x0)

7.440667289s ago: executing program 1 (id=337):
syz_usb_connect(0x3, 0x63, &(0x7f0000000080)=ANY=[@ANYBLOB="12010002000000404c17aa5500010102030109025100010100c032090400000208065000070501020002000705820200020009"], 0x0)

7.439892969s ago: executing program 2 (id=338):
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x94)
sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x20014890}, 0x40000)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='freezer.state\x00', 0x0, 0x0)
syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000080)={0x0, &(0x7f00000001c0)=[@wrmsr={0x65, 0x20, {0x40000000, 0x3}}], 0x20})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0)
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x1fd, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil})
ioctl$KVM_NMI(r2, 0xae9a)
syz_mount_image$fuse(&(0x7f0000000240), 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x67cc, 0x100000000, 0x0, 0x7e, 0x100003, 0x0, 0x2004cc, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x8, 0x2, 0xffffffffffffffff], 0x0, 0x200})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

7.439502959s ago: executing program 4 (id=339):
syz_io_uring_setup(0x141c, &(0x7f0000000080)={0x0, 0x5d90, 0x800, 0x1, 0x3}, &(0x7f0000000440)=<r0=>0x0, &(0x7f0000000140)=<r1=>0x0, &(0x7f0000000180)=<r2=>0x0)
syz_io_uring_submit$UBLK(r0, r1, r2, 0x0)
r3 = gettid()
r4 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffffb]}, 0x8, 0x0)
readv(r4, &(0x7f0000000580)=[{&(0x7f00000003c0)=""/234, 0xea}], 0x1)
rt_sigqueueinfo(r3, 0x21, &(0x7f0000000180)={0x33, 0x40000020, 0xfffffffb})
syz_io_uring_submit$UBLK(r0, r1, r2, &(0x7f00000001c0)=@ublk_get_params_sqe={0x2e, 0x9, 0x0, <r5=>0xffffffffffffffff, 0x80207509, 0x0, 0x0, 0x0, 0x1, 0xfa, 0x0, 0x0, '\x00', {0x0, 0xffff, 0x0, 0x0}})
syz_ublk_add_dev(0xffffffffffffffff, r0, r1, r2, &(0x7f0000000240)={0x2e, 0x11, 0x0, r5, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000000)=@any_dev={0x3, 0xec4, 0x0, 0x0, 0x1000, 0xd, r3, 0x0, 0x1e1}}}, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r6, 0x0, 0x0, 0x2, 0x0)
syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x200000, &(0x7f0000000040)=ANY=[@ANYBLOB="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", @ANYRES8], 0x1, 0x232, &(0x7f0000000640)="$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")
mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000200), 0x0, 0x0)
chdir(&(0x7f0000000180)='./file0\x00')
syz_mount_image$fuse(0x0, &(0x7f0000000a80)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x846048, 0x0, 0x0, 0x0, 0x0)
r8 = syz_ublk_setup_io_uring(0x791b, &(0x7f00000003c0)={0x0, 0xef18, 0x1, 0x3, 0x30f}, &(0x7f0000000440), 0x0, 0x0)
r9 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158, 0x0, r8}, &(0x7f0000000100)=<r10=>0x0, &(0x7f0000000280)=<r11=>0x0, &(0x7f0000000140)=<r12=>0x0)
syz_ublk_add_dev(r9, r10, r11, r12, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=<r13=>0x0)
r14 = socket$inet6_tcp(0xa, 0x1, 0x0)
r15 = dup(r14)
bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x17, 0x4, 0x8, 0xc, 0x0, 0xffffffffffffffff, 0x8}, 0x50)
syz_ublk_setup_queues(r15, r13, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255, 0x0, r9}, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x2000, 0x10000004, 0x0, r15}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed80, 0x1, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x1, 0x401f0, 0x0, r15}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00'], 0x48)

5.730130411s ago: executing program 0 (id=340):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x50}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x20000000)

5.729652851s ago: executing program 1 (id=341):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x77, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
r1 = fcntl$dupfd(r0, 0x406, r0)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfd, 0x0, 0xe4}]}, 0x10)
syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r1)
write$binfmt_elf64(r1, &(0x7f0000000f80)=ANY=[], 0x540)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r1)
shutdown(r0, 0x1)

5.728976951s ago: executing program 2 (id=342):
syz_io_uring_setup(0x141c, &(0x7f0000000080)={0x0, 0x5d90, 0x800, 0x1, 0x3}, &(0x7f0000000440)=<r0=>0x0, &(0x7f0000000140)=<r1=>0x0, &(0x7f0000000180)=<r2=>0x0)
syz_io_uring_submit$UBLK(r0, r1, r2, 0x0)
r3 = gettid()
r4 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffffb]}, 0x8, 0x0)
readv(r4, &(0x7f0000000580)=[{&(0x7f00000003c0)=""/234, 0xea}], 0x1)
rt_sigqueueinfo(r3, 0x21, &(0x7f0000000180)={0x33, 0x40000020, 0xfffffffb})
syz_io_uring_submit$UBLK(r0, r1, r2, &(0x7f00000001c0)=@ublk_get_params_sqe={0x2e, 0x9, 0x0, <r5=>0xffffffffffffffff, 0x80207509, 0x0, 0x0, 0x0, 0x1, 0xfa, 0x0, 0x0, '\x00', {0x0, 0xffff, 0x0, 0x0}})
syz_ublk_add_dev(0xffffffffffffffff, r0, r1, r2, &(0x7f0000000240)={0x2e, 0x11, 0x0, r5, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000000)=@any_dev={0x3, 0xec4, 0x0, 0x0, 0x1000, 0xd, r3, 0x0, 0x1e1}}}, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r6, 0x0, 0x0, 0x2, 0x0)
syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x200000, &(0x7f0000000040)=ANY=[@ANYBLOB="636865636b3d7374726963742c757466383d312c757466383d302c757466383d312c6e66732c6572726f72733d72656d6f756e742d726f2c73686f72746e616d653d77696e6e742c00043518f9aad8a4f2c1cdb3e993cf0444d9d2d40bb509d4da042c2c85e3650de97db42c38cafa7a9d7503c3c985486cf7fdb62fb1fc80515e9bef7e9e56fb346de370b3eb3ecbc59d343c36bf04efc3d68033308b0014b0c677ae5ef2932cc05f566112668fa4f6844dcf823618a2993da771384e8fc12467a56b33e3b00030dbfd82ea2f8ddbeb1d04bac86815ebe0b9d084d60edf56b15e74589892dce80700000000000000b738dddfd38d20b443570197dc795020ecf541601ef9a5618869febf769dd50261849a47e170ba166b97e76a0261d0dc1fb3e2646595f1c8b49057d94f10f7b5e35ead0a38", @ANYRES8], 0x1, 0x232, &(0x7f0000000640)="$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")
mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000200), 0x0, 0x0)
chdir(&(0x7f0000000180)='./file0\x00')
syz_mount_image$fuse(0x0, &(0x7f0000000a80)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x846048, 0x0, 0x0, 0x0, 0x0)
r8 = syz_ublk_setup_io_uring(0x791b, &(0x7f00000003c0)={0x0, 0xef18, 0x1, 0x3, 0x30f}, &(0x7f0000000440), 0x0, 0x0)
r9 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158, 0x0, r8}, &(0x7f0000000100)=<r10=>0x0, &(0x7f0000000280)=<r11=>0x0, &(0x7f0000000140)=<r12=>0x0)
syz_ublk_add_dev(r9, r10, r11, r12, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=<r13=>0x0)
r14 = socket$inet6_tcp(0xa, 0x1, 0x0)
r15 = dup(r14)
bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x17, 0x4, 0x8, 0xc, 0x0, 0xffffffffffffffff, 0x8}, 0x50)
syz_ublk_setup_queues(r15, r13, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255, 0x0, r9}, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x2000, 0x10000004, 0x0, r15}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed80, 0x1, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x1, 0x401f0, 0x0, r15}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00'], 0x48)

5.728505351s ago: executing program 4 (id=343):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, 0x0, 0x0)
bind$inet(r0, 0x0, 0x0)
setsockopt$inet_int(r0, 0x0, 0x13, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
syz_emit_ethernet(0x2a, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x300f401, 0x0, 0x2, 0x0, 0x0)
r1 = inotify_init1(0x80800)
inotify_add_watch(r1, &(0x7f0000000040)='./file0\x00', 0x610003d5)
mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f00000027c0), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
chdir(&(0x7f00000003c0)='./bus\x00')
openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x32)
unlinkat(0xffffffffffffff9c, 0x0, 0x0)

3.921794065s ago: executing program 0 (id=344):
r0 = syz_usb_connect$cdc_ncm(0x0, 0x7a, &(0x7f0000000440)=ANY=[], 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000000)={0x44, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x20, 0x80, 0x1c, {0x5, 0xad0b, 0x800, 0xfff9, 0x3f8, 0x4, 0x8002, 0x0, 0xb, 0x5, 0x7, 0x703}}, 0x0, 0x0, 0x0, 0x0})

3.921554885s ago: executing program 1 (id=345):
r0 = socket$pptp(0x18, 0x1, 0x2)
connect$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0x3, @local}}, 0x13)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB], 0x54}, 0x1, 0x0, 0x0, 0x8014}, 0x54)
r2 = socket(0x10, 0x3, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, 0x0)
ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, 0x0)
syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="636865636b706f696e743d64697361626c652c6261636b67726f756e645f67633d73796e632c61636c2c616c6c6f635f6d6f64653d72657573652c696e6c696e655f78617474722c6e6f666c7573685f6d657267652c6d6f64653d6c66732c6e6f757365725f78617474722c636865636b706f696e743d64697361626c652c757365725f78617474722c6673796e635f6d6f64653d7374726963742c6167655f657874656e745f63616368652c646973636172642c6e6f696e6c696e655f64656e7472792c008bfb3c1e4b1b12ae77c937da8858", @ANYBLOB="13381f1a42a7d4b39f5fbeb72d8e2fcc845965ecf02f1aebc7b164ba1f2bcedc5e1d48c53c3dff65a89b1d5b891f654b24b4e69a7f31cca9e32e3c9b435bea8bd0ff2eddce2ccff8c5f02635d1a4df4a7f233101d247d239229e196e2b4b1c2f2185e4c0336c905fb1e4bde135cac8278f0c836c9068257293552611484d5aecdcd6f744bebf81fbfca81fc9dbf1a8bb5f863d5466ef1d4466e153feb9d722167bc090abb9635b1ef2e34e5cd7dd5d95b07bf24d2ae8f3d0b2576a06e0ffd94ba28af029f8f151fd261269359b0712431724c4b90aa95fa5e10ce69b460f281922f30900750cb41ce1521c4aa3da82368c9504", @ANYRES8, @ANYBLOB="0c322d422fae2a242ddafe0424df7e326f9ca30e708fc66dd4fcdfb2ee08000000473106f28cfb33562517c081a814c28c0d5722d6da0fe935629d599cf383df9dd5f3d5d0143f2ffb3bfcb13683921e9fffb39b4fd331d8262662cf2bb19eefb5e5bb95c797a11a738336a63f2aea0469cee5332d44", @ANYRES32, @ANYRESDEC, @ANYRES16, @ANYRES32, @ANYRES16], 0x1, 0x5507, &(0x7f000000cf00)="$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")
socket$inet_tcp(0x2, 0x1, 0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r3, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10)
connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10)
sendto$inet(r3, 0x0, 0x0, 0x0, 0x0, 0x0)
recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2141, 0x4)
pwrite64(r4, &(0x7f0000000140)="f6", 0xffffff07, 0x8000c61)

3.920376425s ago: executing program 2 (id=346):
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x5, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0xe}, [@call={0x85, 0x0, 0x0, 0x8}, @call={0x85, 0x0, 0x0, 0x23}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000003f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x15)
add_key$keyring(0x0, &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$join(0x1, &(0x7f00000000c0)={'syz', 0x3})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0)
pipe(&(0x7f0000000000)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = open(&(0x7f0000000000)='./bus\x00', 0x141b42, 0x8)
pipe(&(0x7f0000000080)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
write$binfmt_script(r4, 0x0, 0xb)
splice(r6, 0x0, r5, 0x0, 0x1000, 0x0)
splice(r3, 0x0, r7, 0x0, 0x80, 0x0)
write$binfmt_aout(r4, 0x0, 0x20)
close_range(r2, 0xffffffffffffffff, 0x0)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007008500000073"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r9}, 0xc)
ioctl$PTP_ENABLE_PPS(0xffffffffffffffff, 0x40043d04, 0x1)
r10 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0)
r11 = syz_open_procfs$pagemap(0x0, &(0x7f0000000300))
ioctl(r11, 0x7, &(0x7f0000000340)="7537a04b9255ed39f280c29b5cfdffa60a4f0948f8071f4b8292e36c164880eb98333ff5d9bd848955bb690a3922b3a385dfe6256040d34af6ad2e678b9a98681d26d1f162333f86174409af9f84c826c4e038868c9974e1b0042db35ff21c8efaa814d794a4aac9a1260c5512e608695ff62853d04bdf555a9ac7d4910df3f19c023da46fe969e79d9f534dc61e5feb78aeb4abdd300739a279ae9a6e37c8672a77c52faa43f24743205648633373975212e13ede06519b9c051ae008c56d221f1f49adbea3a91840abc49c8591")

3.919849505s ago: executing program 4 (id=347):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001680))
r1 = eventfd2(0x1, 0x80001)
ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000001c0)={0x0, r1})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000001d00)=""/176, 0x0, 0xffff1000})
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, 0x0)
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000140)={@my=0x1})
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10)

2.009174551s ago: executing program 1 (id=348):
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x1000040, &(0x7f0000000180)={[{@jqfmt_vfsv0}, {@nouid32}, {@noblock_validity}, {@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0x7}}, {@nouid32}, {@nomblk_io_submit}, {@noinit_itable}, {@usrquota}]}, 0x1, 0x5a3, &(0x7f00000002c0)="$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")
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x180, 0x0)
close(r2)
socket$netlink(0x10, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x7fffe, {0x0, 0x0, 0x0, 0x0, {0x0, 0xf}, {0xb, 0xb}, {0x0, 0x8}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x1, 0x9, 0x1, 0x8}, 0x0, 0xfffffffc, 0x32, 0x5, 0x9, 0x7, 0x9, 0x1d, 0x1, 0xffffff5c, {0xffff1c76, 0x1f, 0x3, 0x1008, 0xfffffffe, 0x7583}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x404c800}, 0x400c000)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', <r5=>0x0})
sendto$packet(r0, &(0x7f00000002c0)="05031620d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14)

2.008612061s ago: executing program 2 (id=349):
syz_io_uring_setup(0x141c, &(0x7f0000000080)={0x0, 0x5d90, 0x800, 0x1, 0x3}, &(0x7f0000000440)=<r0=>0x0, &(0x7f0000000140)=<r1=>0x0, &(0x7f0000000180)=<r2=>0x0)
syz_io_uring_submit$UBLK(r0, r1, r2, 0x0)
r3 = gettid()
r4 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffffb]}, 0x8, 0x0)
readv(r4, &(0x7f0000000580)=[{&(0x7f00000003c0)=""/234, 0xea}], 0x1)
rt_sigqueueinfo(r3, 0x21, &(0x7f0000000180)={0x33, 0x40000020, 0xfffffffb})
syz_io_uring_submit$UBLK(r0, r1, r2, &(0x7f00000001c0)=@ublk_get_params_sqe={0x2e, 0x9, 0x0, <r5=>0xffffffffffffffff, 0x80207509, 0x0, 0x0, 0x0, 0x1, 0xfa, 0x0, 0x0, '\x00', {0x0, 0xffff, 0x0, 0x0}})
syz_ublk_add_dev(0xffffffffffffffff, r0, r1, r2, &(0x7f0000000240)={0x2e, 0x11, 0x0, r5, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000000)=@any_dev={0x3, 0xec4, 0x0, 0x0, 0x1000, 0xd, r3, 0x0, 0x1e1}}}, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r6, 0x0, 0x0, 0x2, 0x0)
syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x200000, &(0x7f0000000040)=ANY=[@ANYBLOB="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", @ANYRES8], 0x1, 0x232, &(0x7f0000000640)="$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")
mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000200), 0x0, 0x0)
chdir(&(0x7f0000000180)='./file0\x00')
syz_mount_image$vfat(&(0x7f00000006c0), &(0x7f0000000580)='./bus\x00', 0x0, 0x0, 0x1, 0x0, &(0x7f0000000080))
r8 = syz_ublk_setup_io_uring(0x791b, &(0x7f00000003c0)={0x0, 0xef18, 0x1, 0x3, 0x30f}, &(0x7f0000000440), 0x0, 0x0)
r9 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158, 0x0, r8}, &(0x7f0000000100)=<r10=>0x0, &(0x7f0000000280)=<r11=>0x0, &(0x7f0000000140)=<r12=>0x0)
syz_ublk_add_dev(r9, r10, r11, r12, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=<r13=>0x0)
r14 = socket$inet6_tcp(0xa, 0x1, 0x0)
r15 = dup(r14)
bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x17, 0x4, 0x8, 0xc, 0x0, 0xffffffffffffffff, 0x8}, 0x50)
syz_ublk_setup_queues(r15, r13, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255, 0x0, r9}, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x2000, 0x10000004, 0x0, r15}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed80, 0x1, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x1, 0x401f0, 0x0, r15}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00'], 0x48)

2.008390611s ago: executing program 4 (id=350):
mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='dev\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='dev\x00', &(0x7f0000000500)='dev\x00', 0x0, 0x0, 0x0)
syz_usb_connect(0x3, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040f905ffff0001010203010902200001010080fa0904000002ff00000007058102"], 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000200)='dev/ttyUSB0\x00', 0x2, 0x0)

1.69758ms ago: executing program 0 (id=351):
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x94)
sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x20014890}, 0x40000)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000080)={0x0, &(0x7f00000001c0)=[@wrmsr={0x65, 0x20, {0x40000000, 0x3}}], 0x20})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0)
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x1fd, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil})
ioctl$KVM_NMI(r2, 0xae9a)
syz_mount_image$fuse(&(0x7f0000000240), 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x67cc, 0x100000000, 0x0, 0x7e, 0x100003, 0x0, 0x2004cc, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x8, 0x2, 0xffffffffffffffff], 0x0, 0x200})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

1.30715ms ago: executing program 1 (id=352):
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x180, 0x0)
close(r2)
socket$netlink(0x10, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', <r3=>0x0})
sendto$packet(r0, &(0x7f00000002c0)="05031620d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14)

302.55µs ago: executing program 2 (id=353):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000400)={<r1=>0x0, <r2=>0x0})
setitimer(0x0, &(0x7f0000000500)={{0x0, 0xea60}, {r1, r2/1000+60000}}, 0x0)
r3 = signalfd(0xffffffffffffffff, &(0x7f00000003c0), 0x8)
mkdir(&(0x7f0000000140)='./control\x00', 0x5)
close(r3)
r4 = inotify_init1(0x800)
fcntl$setstatus(r3, 0x4, 0x2c00)
r5 = gettid()
fcntl$setown(r3, 0x8, r5)
rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8)
rt_sigtimedwait(&(0x7f0000000040)={[0xffffffffffff7ff8]}, 0x0, 0x0, 0x8)
inotify_add_watch(r4, &(0x7f0000000180)='./control\x00', 0xa400080a)
rmdir(&(0x7f0000000100)='./control\x00')

0s ago: executing program 4 (id=354):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x50}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x20000000)

kernel console output (not intermixed with test programs):

="loop4" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   27.560922][   T28] audit: type=1400 audit(1785216651.703:143): avc:  denied  { create } for  pid=367 comm="syz.2.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   27.580420][   T28] audit: type=1400 audit(1785216651.773:144): avc:  denied  { setopt } for  pid=367 comm="syz.2.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   27.599967][   T28] audit: type=1400 audit(1785216651.773:145): avc:  denied  { ioctl } for  pid=367 comm="syz.2.16" path="socket:[16093]" dev="sockfs" ino=16093 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   27.624652][   T28] audit: type=1400 audit(1785216651.773:146): avc:  denied  { write } for  pid=367 comm="syz.2.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   27.657380][   T41] kworker/u4:2: attempt to access beyond end of device
[   27.657380][   T41] loop4: rw=1, sector=77824, nr_sectors = 8 limit=40427
[   27.678919][   T41] kworker/u4:2: attempt to access beyond end of device
[   27.678919][   T41] loop4: rw=1, sector=77832, nr_sectors = 4088 limit=40427
[   27.693698][   T41] kworker/u4:2: attempt to access beyond end of device
[   27.693698][   T41] loop4: rw=1, sector=49152, nr_sectors = 8 limit=40427
[   27.714837][  T294] EXT4-fs (loop2): unmounting filesystem.
[   27.717319][   T41] kworker/u4:2: attempt to access beyond end of device
[   27.717319][   T41] loop4: rw=1, sector=49160, nr_sectors = 4088 limit=40427
[   27.734547][   T24] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   27.735872][   T41] kworker/u4:2: attempt to access beyond end of device
[   27.735872][   T41] loop4: rw=1, sector=57344, nr_sectors = 8 limit=40427
[   27.764934][  T376] netlink: 52 bytes leftover after parsing attributes in process `syz.2.20'.
[   27.770887][   T41] kworker/u4:2: attempt to access beyond end of device
[   27.770887][   T41] loop4: rw=1, sector=57352, nr_sectors = 4064 limit=40427
[   27.833048][   T41] kworker/u4:2: attempt to access beyond end of device
[   27.833048][   T41] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[   27.897397][  T376] loop2: detected capacity change from 0 to 40427
[   27.918370][  T376] F2FS-fs (loop2): invalid crc value
[   27.927755][   T24] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   27.940329][   T24] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   27.945133][  T376] F2FS-fs (loop2): Found nat_bits in checkpoint
[   27.954809][   T24] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0
[   27.966409][   T24] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   27.980685][   T24] usb 2-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice= 1.00
[   27.988473][  T376] F2FS-fs (loop2): Start checkpoint disabled!
[   27.989785][   T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   27.996388][  T376] F2FS-fs (loop2): f2fs_disable_checkpoint() finish, err:0
[   28.003871][   T24] usb 2-1: Product: syz
[   28.003886][   T24] usb 2-1: Manufacturer: syz
[   28.011647][  T376] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6
[   28.015263][   T24] usb 2-1: SerialNumber: syz
[   28.049085][   T24] usbserial_generic 2-1:1.0: The "generic" usb-serial driver is only for testing and one-off prototypes.
[   28.060298][   T24] usbserial_generic 2-1:1.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver.
[   28.072117][   T24] usbserial_generic 2-1:1.0: generic converter detected
[   28.080099][   T24] usb 2-1: generic converter now attached to ttyUSB0
[   28.217779][  T344] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   28.255917][   T19] usb 2-1: USB disconnect, device number 2
[   28.262286][   T19] generic ttyUSB0: generic converter now disconnected from ttyUSB0
[   28.270568][   T19] usbserial_generic 2-1:1.0: device disconnected
[   28.397720][  T344] usb 5-1: Using ep0 maxpacket: 16
[   28.403934][  T344] usb 5-1: config 0 has no interfaces?
[   28.410701][  T344] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a
[   28.419760][  T344] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   28.427819][  T344] usb 5-1: Product: syz
[   28.431976][  T344] usb 5-1: Manufacturer: syz
[   28.436549][  T344] usb 5-1: SerialNumber: syz
[   28.441650][  T344] usb 5-1: config 0 descriptor??
[   28.612199][  T386] IPv6: addrconf: prefix option has invalid lifetime
[   28.621549][  T308] kworker/u4:3: attempt to access beyond end of device
[   28.621549][  T308] loop2: rw=1, sector=77824, nr_sectors = 8 limit=40427
[   28.621651][  T386] loop3: detected capacity change from 0 to 512
[   28.641845][   T28] audit: type=1400 audit(1785216652.853:147): avc:  denied  { mounton } for  pid=385 comm="syz.3.23" path="/4/file0" dev="tmpfs" ino=38 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[   28.667284][  T308] kworker/u4:3: attempt to access beyond end of device
[   28.667284][  T308] loop2: rw=1, sector=77832, nr_sectors = 4088 limit=40427
[   28.672506][  T386] EXT4-fs warning (device loop3): dx_probe:869: inode #2: comm syz.3.23: Unimplemented hash flags: 0x0001
[   28.682717][  T308] kworker/u4:3: attempt to access beyond end of device
[   28.682717][  T308] loop2: rw=1, sector=49152, nr_sectors = 8 limit=40427
[   28.697742][  T386] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.23: Corrupt directory, running e2fsck is recommended
[   28.719487][  T381] tap0: tun_chr_ioctl cmd 1074025678
[   28.724795][  T381] tap0: group set to 802
[   28.734689][  T386] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117
[   28.742966][  T386] EXT4-fs error (device loop3): ext4_iget_extra_inode:4765: inode #15: comm syz.3.23: corrupted in-inode xattr
[   28.755000][  T386] EXT4-fs error (device loop3): ext4_orphan_get:1410: comm syz.3.23: couldn't read orphan inode 15 (err -117)
[   28.766850][  T386] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[   28.773381][    T6] snd-usb-audio: probe of 1-1:1.0 failed with error -71
[   28.779307][  T386] EXT4-fs (loop3): unmounting filesystem.
[   28.788210][    T6] usb 1-1: USB disconnect, device number 2
[   28.830432][  T344] usb 5-1: USB disconnect, device number 2
[   28.959175][  T399] overlayfs: "xino" feature enabled using 3 upper inode bits.
[   29.436752][  T412] netlink: 52 bytes leftover after parsing attributes in process `syz.4.29'.
[   29.839466][  T412] loop4: detected capacity change from 0 to 40427
[   29.856134][  T412] F2FS-fs (loop4): invalid crc value
[   29.893056][  T412] F2FS-fs (loop4): Found nat_bits in checkpoint
[   30.003738][  T412] F2FS-fs (loop4): Start checkpoint disabled!
[   30.016736][  T412] F2FS-fs (loop4): f2fs_disable_checkpoint() finish, err:0
[   30.037412][  T412] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6
[   30.115805][  T435] loop3: detected capacity change from 0 to 1024
[   30.123590][  T435] EXT4-fs: Ignoring removed orlov option
[   30.360046][  T435] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[   31.083692][  T287] EXT4-fs (loop3): unmounting filesystem.
[   31.149773][  T450] loop1: detected capacity change from 0 to 128
[   31.327663][  T461] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   31.402578][  T298] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   31.457777][  T408] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[   31.687785][  T408] usb 1-1: Using ep0 maxpacket: 8
[   31.703888][  T408] usb 1-1: unable to get BOS descriptor or descriptor too short
[   31.722935][  T408] usb 1-1: config 1 has an invalid interface number: 1 but max is 0
[   31.741106][  T408] usb 1-1: config 1 has no interface number 0
[   31.752547][  T408] usb 1-1: New USB device found, idVendor=1a86, idProduct=752d, bcdDevice= 0.40
[   31.767731][  T408] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   31.791177][  T408] usb 1-1: Product: syz
[   31.795359][  T408] usb 1-1: Manufacturer: syz
[   31.800333][  T408] usb 1-1: SerialNumber: syz
[   31.808835][  T298] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   31.819048][  T298] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   31.830074][  T298] usb 4-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[   31.845371][  T458] loop2: detected capacity change from 0 to 131072
[   31.853074][  T298] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   31.859528][  T458] F2FS-fs (loop2): invalid crc value
[   31.872469][  T298] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   31.887645][  T298] usb 4-1: Product: syz
[   31.892696][  T298] usb 4-1: Manufacturer: syz
[   31.898211][  T298] usb 4-1: SerialNumber: syz
[   31.903310][  T458] F2FS-fs (loop2): Found nat_bits in checkpoint
[   31.909752][  T298] cdc_mbim 4-1:1.0: skipping garbage
[   31.942676][  T458] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4
[   31.960398][  T458] netlink: 4 bytes leftover after parsing attributes in process `syz.2.42'.
[   32.017352][  T451] Zero length message leads to an empty skb
[   32.202035][  T408] usb 1-1: USB disconnect, device number 3
[   32.257775][   T24] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   32.267318][  T497] netlink: 52 bytes leftover after parsing attributes in process `syz.1.52'.
[   32.349025][  T497] loop1: detected capacity change from 0 to 40427
[   32.356603][  T497] F2FS-fs (loop1): invalid crc value
[   32.363024][  T497] F2FS-fs (loop1): Found nat_bits in checkpoint
[   32.390519][  T497] F2FS-fs (loop1): Start checkpoint disabled!
[   32.396966][  T497] F2FS-fs (loop1): f2fs_disable_checkpoint() finish, err:0
[   32.404442][  T497] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6
[   32.447733][   T24] usb 3-1: Using ep0 maxpacket: 16
[   32.453919][   T24] usb 3-1: config 1 has an invalid descriptor of length 188, skipping remainder of the config
[   32.466231][   T24] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0014, bcdDevice= 0.40
[   32.475320][   T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   32.483406][   T24] usb 3-1: Product: syz
[   32.487604][   T24] usb 3-1: Manufacturer: syz
[   32.492339][   T24] usb 3-1: SerialNumber: syz
[   32.507121][  T298] cdc_mbim 4-1:1.0: failed GET_NTB_PARAMETERS
[   32.515709][  T298] cdc_mbim 4-1:1.0: bind() failure
[   32.530876][  T298] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found
[   32.537836][  T298] cdc_ncm 4-1:1.1: bind() failure
[   32.549176][  T298] usb 4-1: USB disconnect, device number 2
[   32.717712][   T28] kauditd_printk_skb: 38 callbacks suppressed
[   32.717725][   T28] audit: type=1400 audit(1785216656.923:186): avc:  denied  { prog_run } for  pid=457 comm="syz.2.42" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[   32.757395][   T24] usb 3-1: Can't get UAC3 power state for id 10
[   32.764566][   T24] usb 3-1: 0:3 : does not exist
[   32.769655][   T24] usb 3-1: 0:4 : does not exist
[   32.774546][   T24] usb 3-1: 0:5 : does not exist
[   32.789698][   T24] snd-usb-audio: probe of 3-1:1.0 failed with error -22
[   32.804629][  T311] udevd[311]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   32.823592][   T24] usb 3-1: USB disconnect, device number 2
[   32.829560][  T408] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[   32.982482][  T508] loop0: detected capacity change from 0 to 131072
[   32.989607][  T508] F2FS-fs (loop0): Image doesn't support compression
[   32.996320][  T508] F2FS-fs (loop0): QUOTA feature is enabled, so ignore qf_name
[   33.004034][  T508] F2FS-fs (loop0): Test dummy encryption mode enabled
[   33.010913][  T508] F2FS-fs (loop0): QUOTA feature is enabled, so ignore jquota_fmt
[   33.026073][  T408] usb 5-1: unable to get BOS descriptor or descriptor too short
[   33.034789][  T508] F2FS-fs (loop0): Found nat_bits in checkpoint
[   33.037338][  T408] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   33.068580][  T508] F2FS-fs (loop0): sanity_check_inode: corrupted inode ino=3, run fsck to fix.
[   33.078157][  T508] F2FS-fs (loop0): Failed to read root inode
[   33.084657][  T408] usb 5-1: string descriptor 0 read error: -22
[   33.090973][  T408] usb 5-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40
[   33.100012][  T408] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   33.112790][   T28] audit: type=1400 audit(1785216657.323:187): avc:  denied  { unmount } for  pid=288 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[   33.144503][    T8] bio_check_eod: 11 callbacks suppressed
[   33.144515][    T8] kworker/u4:0: attempt to access beyond end of device
[   33.144515][    T8] loop1: rw=1, sector=77824, nr_sectors = 8 limit=40427
[   33.184212][    T8] kworker/u4:0: attempt to access beyond end of device
[   33.184212][    T8] loop1: rw=1, sector=77832, nr_sectors = 4088 limit=40427
[   33.200211][    T8] kworker/u4:0: attempt to access beyond end of device
[   33.200211][    T8] loop1: rw=1, sector=49152, nr_sectors = 8 limit=40427
[   33.224433][    T8] kworker/u4:0: attempt to access beyond end of device
[   33.224433][    T8] loop1: rw=1, sector=49160, nr_sectors = 4088 limit=40427
[   33.239625][    T8] kworker/u4:0: attempt to access beyond end of device
[   33.239625][    T8] loop1: rw=1, sector=57344, nr_sectors = 8 limit=40427
[   33.278748][    T8] kworker/u4:0: attempt to access beyond end of device
[   33.278748][    T8] loop1: rw=1, sector=57352, nr_sectors = 4064 limit=40427
[   33.295614][    T8] kworker/u4:0: attempt to access beyond end of device
[   33.295614][    T8] loop1: rw=2049, sector=40960, nr_sectors = 24 limit=40427
[   33.336925][   T28] audit: type=1400 audit(1785216657.543:188): avc:  denied  { set_context_mgr } for  pid=505 comm="syz.4.55" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1
[   33.337537][  T506] binder: 505:506 ioctl c018620c 2000000005c0 returned -1
[   33.377751][  T508] tipc: Started in network mode
[   33.393716][  T508] tipc: Node identity 887766554433221100ffeeddccbbaa99, cluster identity 4711
[   33.441598][   T28] audit: type=1400 audit(1785216657.653:189): avc:  denied  { mount } for  pid=525 comm="syz.1.59" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1
[   33.465428][  T526] fuse: Bad value for 'fd'
[   33.472678][   T28] audit: type=1400 audit(1785216657.673:190): avc:  denied  { mounton } for  pid=525 comm="syz.1.59" path="/20/sys" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1
[   33.503145][    T8] device offline error, dev sda, sector 1163574 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2
[   33.521496][    T8] EXT4-fs warning (device sda1): ext4_end_bio:347: I/O error 17 writing to inode 2030 starting block 145446)
[   33.533273][    T8] Buffer I/O error on device sda1, logical block 145408
[   33.540345][   T28] audit: type=1400 audit(1785216657.703:191): avc:  denied  { mount } for  pid=507 comm="syz.0.56" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1
[   33.559233][    T8] device offline error, dev sda, sector 1171718 op 0x1:(WRITE) flags 0x0 phys_seg 2 prio class 2
[   33.572066][    T8] EXT4-fs warning (device sda1): ext4_end_bio:347: I/O error 17 writing to inode 2030 starting block 146464)
[   33.583638][    T8] EXT4-fs warning (device sda1): ext4_end_bio:347: I/O error 17 writing to inode 2030 starting block 146465)
[   33.595185][    T8] device offline error, dev sda, sector 1171750 op 0x1:(WRITE) flags 0x0 phys_seg 2 prio class 2
[   33.605685][    T8] EXT4-fs warning (device sda1): ext4_end_bio:347: I/O error 17 writing to inode 2030 starting block 146468)
[   33.617228][    T8] device offline error, dev sda, sector 1175678 op 0x1:(WRITE) flags 0x0 phys_seg 5 prio class 2
[   33.627721][    T8] EXT4-fs warning (device sda1): ext4_end_bio:347: I/O error 17 writing to inode 2030 starting block 146959)
[   33.639261][    T8] EXT4-fs warning (device sda1): ext4_end_bio:347: I/O error 17 writing to inode 2030 starting block 146960)
[   33.650805][    T8] device offline error, dev sda, sector 1179958 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2
[   33.661309][    T8] EXT4-fs warning (device sda1): ext4_end_bio:347: I/O error 17 writing to inode 2032 starting block 147494)
[   33.672856][    T8] Buffer I/O error on device sda1, logical block 147456
[   33.679809][    T8] device offline error, dev sda, sector 1188142 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2
[   33.690303][    T8] EXT4-fs warning (device sda1): ext4_end_bio:347: I/O error 17 writing to inode 2032 starting block 148517)
[   33.701850][    T8] device offline error, dev sda, sector 1192054 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2
[   33.712348][    T8] EXT4-fs warning (device sda1): ext4_end_bio:347: I/O error 17 writing to inode 2032 starting block 149006)
[   33.723891][    T8] Buffer I/O error on device sda1, logical block 148968
[   33.730823][    T8] Buffer I/O error on device sda1, logical block 148969
[   33.737748][    T8] Buffer I/O error on device sda1, logical block 148970
[   33.744664][    T8] Buffer I/O error on device sda1, logical block 148971
[   33.751588][    T8] Buffer I/O error on device sda1, logical block 148972
[   33.758530][    T8] device offline error, dev sda, sector 1192150 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2
[   33.769033][    T8] EXT4-fs warning (device sda1): ext4_end_bio:347: I/O error 17 writing to inode 2032 starting block 149018)
[   33.780670][    T8] Buffer I/O error on device sda1, logical block 148980
[   33.787592][    T8] Buffer I/O error on device sda1, logical block 148981
[   33.794518][    T8] Buffer I/O error on device sda1, logical block 148982
[   33.801481][    T8] device offline error, dev sda, sector 1196342 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2
[   33.811997][    T8] device offline error, dev sda, sector 1196846 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2
[   33.856362][  T526] Buffer I/O error on dev sda1, logical block 33721, lost async page write
[   33.856496][   T66] Buffer I/O error on dev sda1, logical block 131199, lost sync page write
[   33.871079][  T537] loop0: detected capacity change from 0 to 1024
[   33.875705][   T66] Aborting journal on device sda1-8.
[   33.881242][  T537] EXT4-fs: Ignoring removed nomblk_io_submit option
[   33.886264][  T538] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.66: Detected aborted journal
[   33.892820][   T66] Buffer I/O error on dev sda1, logical block 131072, lost sync page write
[   33.907661][  T527] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.63: Detected aborted journal
[   33.911649][  T279] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal
[   33.933797][   T66] JBD2: I/O error when updating journal superblock for sda1-8.
[   33.934508][  T537] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[   33.950379][  T538] Buffer I/O error on dev sda1, logical block 0, lost sync page write
[   33.958662][  T527] EXT4-fs (sda1): previous I/O error to superblock detected
[   33.964259][  T537] ext4 filesystem being mounted at /7/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   33.966258][  T527] Buffer I/O error on dev sda1, logical block 0, lost sync page write
[   33.984613][  T279] EXT4-fs (sda1): previous I/O error to superblock detected
[   33.994579][  T279] Buffer I/O error on dev sda1, logical block 0, lost sync page write
[   34.001188][  T536] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.65: Detected aborted journal
[   34.005308][  T279] EXT4-fs (sda1): I/O error while writing superblock
[   34.013822][  T538] EXT4-fs (sda1): I/O error while writing superblock
[   34.022350][  T279] EXT4-fs (sda1): Remounting filesystem read-only
[   34.033321][  T538] EXT4-fs (sda1): Remounting filesystem read-only
[   34.035675][  T526] sd 0:0:1:0: [sda] Synchronizing SCSI cache
[   34.040216][  T527] EXT4-fs (sda1): Remounting filesystem read-only
[   34.045788][  T505] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.55: Detected aborted journal
[   34.053025][  T527] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.63: Detected aborted journal
[   34.063010][  T536] EXT4-fs (sda1): Remounting filesystem read-only
[   34.073761][  T527] EXT4-fs (sda1): Remounting filesystem read-only
[   34.083106][  T505] EXT4-fs (sda1): Remounting filesystem read-only
[   34.087250][  T279] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal
[   34.093402][  T505] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.55: Detected aborted journal
[   34.104332][  T527] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.63: Detected aborted journal
[   34.126146][  T536] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.65: Detected aborted journal
[   34.160155][  T103] udevd[103]: worker [313] terminated by signal 7 (Bus error)
[   34.175286][  T103] udevd[103]: worker [313] failed while handling '/devices/platform/dummy_hcd.4/usb5/5-1'
[   34.208623][  T289] EXT4-fs (loop0): unmounting filesystem.
[   34.211531][  T103] udevd[103]: worker [382] terminated by signal 7 (Bus error)
[   34.221867][  T103] udevd[103]: worker [382] failed while handling '/devices/platform/dummy_hcd.4/usb5/5-1'
[   34.246835][  T103] udevd[103]: worker [311] terminated by signal 7 (Bus error)
[   34.255818][  T103] udevd[103]: worker [311] failed while handling '/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0'
[   34.262057][   T28] audit: type=1400 audit(1785216658.473:192): avc:  denied  { unmount } for  pid=288 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1
[   34.270589][  T546] loop0: detected capacity change from 0 to 1024
[   34.286689][  T103] udevd[103]: worker [332] terminated by signal 7 (Bus error)
[   34.292874][  T546] EXT4-fs: Ignoring removed nomblk_io_submit option
[   34.303827][  T103] udevd[103]: worker [332] failed while handling '/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.1'
[   34.317722][  T344] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[   34.325681][  T103] udevd[103]: worker [388] terminated by signal 7 (Bus error)
[   34.329720][  T550] loop1: detected capacity change from 0 to 256
[   34.340942][  T546] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[   34.349970][  T546] ext4 filesystem being mounted at /8/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   34.386891][   T28] audit: type=1400 audit(1785216658.593:193): avc:  denied  { create } for  pid=505 comm="syz.4.55" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   34.409339][  T506] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   34.442174][  T506] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   34.450365][   T28] audit: type=1400 audit(1785216658.623:194): avc:  denied  { getopt } for  pid=505 comm="syz.4.55" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   34.470866][   T28] audit: type=1400 audit(1785216658.623:195): avc:  denied  { ioctl } for  pid=505 comm="syz.4.55" path="socket:[17562]" dev="sockfs" ino=17562 ioctlcmd=0x5518 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   34.506647][  T344] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   34.508066][  T289] EXT4-fs (loop0): unmounting filesystem.
[   34.536389][  T344] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   34.546464][  T344] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0
[   34.556476][  T344] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   34.594333][  T506] loop4: detected capacity change from 0 to 40427
[   34.598511][  T344] usb 3-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice= 1.00
[   34.603599][  T506] F2FS-fs (loop4): invalid crc value
[   34.610014][  T344] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   34.624365][  T344] usb 3-1: Product: syz
[   34.629497][  T344] usb 3-1: Manufacturer: syz
[   34.629630][  T506] F2FS-fs (loop4): Found nat_bits in checkpoint
[   34.634154][  T344] usb 3-1: SerialNumber: syz
[   34.647450][  T344] usbserial_generic 3-1:1.0: The "generic" usb-serial driver is only for testing and one-off prototypes.
[   34.667765][  T408] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[   34.667789][  T344] usbserial_generic 3-1:1.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver.
[   34.690559][  T344] usbserial_generic 3-1:1.0: generic converter detected
[   34.690571][  T506] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[   34.730025][  T344] usb 3-1: generic converter now attached to ttyUSB0
[   34.747431][    T6] usb 5-1: USB disconnect, device number 3
[   34.793359][  T575] loop0: detected capacity change from 0 to 128
[   34.857709][  T408] usb 2-1: Using ep0 maxpacket: 8
[   34.864439][  T408] usb 2-1: config index 0 descriptor too short (expected 5924, got 36)
[   34.897727][  T408] usb 2-1: config 250 has an invalid interface number: 228 but max is -1
[   34.916325][  T408] usb 2-1: config 250 has 1 interface, different from the descriptor's value: 0
[   34.918358][  T344] usb 3-1: USB disconnect, device number 3
[   34.933771][  T344] generic ttyUSB0: generic converter now disconnected from ttyUSB0
[   34.939048][  T408] usb 2-1: config 250 has no interface number 0
[   34.942894][  T344] usbserial_generic 3-1:1.0: device disconnected
[   34.956994][  T408] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024
[   34.968787][  T408] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024
[   34.979637][  T408] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid maxpacket 20648, setting to 1024
[   34.991551][  T408] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 1024
[   35.008162][  T408] usb 2-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17
[   35.021759][  T408] usb 2-1: config 250 interface 228 has no altsetting 0
[   35.030824][  T408] usb 2-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07
[   35.039956][  T408] usb 2-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59
[   35.048236][  T408] usb 2-1: Product: syz
[   35.052521][  T408] usb 2-1: SerialNumber: syz
[   35.064320][  T408] hub 2-1:250.228: bad descriptor, ignoring hub
[   35.070706][  T408] hub: probe of 2-1:250.228 failed with error -5
[   35.265217][  T408] usblp 2-1:250.228: usblp0: USB Bidirectional printer dev 3 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292
[   35.281704][  T586] loop3: detected capacity change from 0 to 131072
[   35.291746][  T586] F2FS-fs (loop3): Segment count (31) mismatch with total segments from devices (0)
[   35.301628][  T586] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[   35.328434][  T586] F2FS-fs (loop3): invalid crc value
[   35.341610][  T586] F2FS-fs (loop3): Found nat_bits in checkpoint
[   35.376222][  T586] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[   35.383382][  T586] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4
[   35.412910][  T586] F2FS-fs (loop3): sanity_check_inode: inode (ino=4) has corrupted i_inline_xattr_size: 0, max: 903
[   35.430687][  T586] F2FS-fs (loop3): sanity_check_inode: inode (ino=4) has corrupted i_inline_xattr_size: 0, max: 903
[   35.442610][  T586] F2FS-fs (loop3): checksum invalid, nid = 7, ino_of_node = 7, 32dd6215 vs. 1de10dc4
[   35.519322][  T598] tipc: Started in network mode
[   35.524209][  T598] tipc: Node identity ac14140f, cluster identity 4711
[   35.548070][  T598] tipc: Enabled bearer <udp:syz2>, priority 10
[   35.577831][  T598] netlink: 72 bytes leftover after parsing attributes in process `syz.1.69'.
[   35.598287][    C1] usblp0: nonzero read bulk status received: -71
[   35.607855][  T598] netem: invalid attributes len -24
[   35.617934][  T598] netem: change failed
[   35.622051][  T550] sch_tbf: burst 6 is lower than device ip6gre0 mtu (1448) !
[   35.671907][  T591] F2FS-fs (loop4): invalid crc value
[   35.688101][  T344] usb 2-1: USB disconnect, device number 3
[   35.708041][  T344] usblp0: removed
[   35.713983][  T591] F2FS-fs (loop4): Found nat_bits in checkpoint
[   35.753769][  T591] F2FS-fs (loop4): Start checkpoint disabled!
[   35.762419][  T591] F2FS-fs (loop4): f2fs_disable_checkpoint() finish, err:0
[   35.784247][  T609] netlink: 52 bytes leftover after parsing attributes in process `syz.3.79'.
[   35.793156][  T591] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6
[   36.017990][  T609] F2FS-fs (loop3): invalid crc value
[   36.028528][  T609] F2FS-fs (loop3): Found nat_bits in checkpoint
[   36.133482][  T609] F2FS-fs (loop3): Start checkpoint disabled!
[   36.173065][  T609] F2FS-fs (loop3): f2fs_disable_checkpoint() finish, err:0
[   36.368190][  T609] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6
[   36.992768][  T344] tipc: Node number set to 2886997007
[   37.187378][    T8] kworker/u4:0: attempt to access beyond end of device
[   37.187378][    T8] loop4: rw=1, sector=77824, nr_sectors = 8 limit=40427
[   37.206066][    T8] kworker/u4:0: attempt to access beyond end of device
[   37.206066][    T8] loop4: rw=1, sector=77832, nr_sectors = 2136 limit=40427
[   37.224365][    T8] kworker/u4:0: attempt to access beyond end of device
[   37.224365][    T8] loop4: rw=1, sector=79968, nr_sectors = 1952 limit=40427
[   37.275184][  T635] SELinux:  policydb magic number 0x5 does not match expected magic number 0xf97cff8c
[   37.284849][  T635] SELinux: failed to load policy
[   37.496149][  T639] set_capacity_and_notify: 2 callbacks suppressed
[   37.496174][  T639] loop1: detected capacity change from 0 to 128
[   37.687721][   T39] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[   37.741604][   T28] kauditd_printk_skb: 10 callbacks suppressed
[   37.741612][   T28] audit: type=1400 audit(1785216661.953:206): avc:  denied  { create } for  pid=651 comm="syz.3.94" name="#7" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[   37.767891][   T28] audit: type=1400 audit(1785216661.953:207): avc:  denied  { link } for  pid=651 comm="syz.3.94" name="#7" dev="tmpfs" ino=156 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[   37.789670][   T28] audit: type=1400 audit(1785216661.953:208): avc:  denied  { rename } for  pid=651 comm="syz.3.94" name="#8" dev="tmpfs" ino=156 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[   37.818079][  T654] loop3: detected capacity change from 0 to 512
[   37.827002][  T654] EXT4-fs error (device loop3): ext4_orphan_get:1405: inode #15: comm syz.3.95: iget: bad i_size value: 38620345925642
[   37.839573][  T298] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[   37.839755][  T654] EXT4-fs error (device loop3): ext4_orphan_get:1410: comm syz.3.95: couldn't read orphan inode 15 (err -117)
[   37.858914][  T654] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[   37.872872][   T28] audit: type=1400 audit(1785216662.083:209): avc:  denied  { read append } for  pid=653 comm="syz.3.95" path="/24/file0/cpuset.effective_mems" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   37.897190][   T39] usb 1-1: Using ep0 maxpacket: 16
[   37.904939][   T39] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40
[   37.914094][   T39] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   37.922128][   T39] usb 1-1: Product: syz
[   37.926366][   T39] usb 1-1: Manufacturer: syz
[   37.931479][   T39] usb 1-1: SerialNumber: syz
[   37.984259][   T28] audit: type=1400 audit(1785216662.193:210): avc:  denied  { map } for  pid=653 comm="syz.3.95" path="/24/file0/cpuset.effective_mems" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   38.007845][    T6] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[   38.038879][  T298] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   38.049008][  T298] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   38.059313][  T298] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0
[   38.073697][  T298] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   38.087637][   T41] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm kworker/u4:2: bg 0: block 5: invalid block bitmap
[   38.100418][   T41] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28
[   38.113061][   T41] EXT4-fs (loop3): This should not happen!! Data will be lost
[   38.113061][   T41] 
[   38.123420][   T41] EXT4-fs (loop3): Total free blocks count 0
[   38.129537][   T41] EXT4-fs (loop3): Free/Dirty block details
[   38.135489][   T41] EXT4-fs (loop3): free_blocks=0
[   38.140028][  T298] usb 3-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice= 1.00
[   38.151480][   T41] EXT4-fs (loop3): dirty_blocks=5132
[   38.153866][  T298] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   38.160415][   T41] EXT4-fs (loop3): Block reservation details
[   38.171096][   T41] EXT4-fs (loop3): i_reserved_data_blocks=5132
[   38.171977][  T298] usb 3-1: Product: syz
[   38.181559][  T298] usb 3-1: Manufacturer: syz
[   38.186351][  T298] usb 3-1: SerialNumber: syz
[   38.189276][   T41] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 2048 with error 28
[   38.193303][  T298] usbserial_generic 3-1:1.0: The "generic" usb-serial driver is only for testing and one-off prototypes.
[   38.215989][  T298] usbserial_generic 3-1:1.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver.
[   38.227164][  T298] usbserial_generic 3-1:1.0: generic converter detected
[   38.234174][    T6] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   38.244692][    T6] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   38.255806][  T298] usb 3-1: generic converter now attached to ttyUSB0
[   38.269131][    T6] usb 5-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[   38.283373][    T6] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   38.293205][    T6] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   38.301310][    T6] usb 5-1: Product: syz
[   38.305466][    T6] usb 5-1: Manufacturer: syz
[   38.310090][    T6] usb 5-1: SerialNumber: syz
[   38.315972][    T6] cdc_mbim 5-1:1.0: skipping garbage
[   38.403286][  T640] usb 3-1: USB disconnect, device number 4
[   38.409826][  T640] generic ttyUSB0: generic converter now disconnected from ttyUSB0
[   38.418001][  T640] usbserial_generic 3-1:1.0: device disconnected
[   38.701671][  T637] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   38.710403][  T637] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   38.909051][  T279] EXT4-fs error: 162 callbacks suppressed
[   38.909067][  T279] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal
[   38.918994][    T6] cdc_mbim 5-1:1.0: failed GET_NTB_PARAMETERS
[   38.926306][  T279] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal
[   38.932114][    T6] cdc_mbim 5-1:1.0: bind() failure
[   38.943598][  T636] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.90: Detected aborted journal
[   38.949093][    T6] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found
[   38.963995][  T279] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal
[   38.968058][    T6] cdc_ncm 5-1:1.1: bind() failure
[   38.977951][  T279] EXT4-fs: 145 callbacks suppressed
[   38.977960][  T279] EXT4-fs (sda1): Remounting filesystem read-only
[   38.986873][  T557] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #264: comm udevd: reading directory lblock 0
[   38.989141][  T279] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal
[   38.994570][  T557] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #264: comm udevd: reading directory lblock 0
[   39.006073][  T279] EXT4-fs (sda1): Remounting filesystem read-only
[   39.019102][  T649] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.93: Detected aborted journal
[   39.028584][  T279] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal
[   39.034826][    T6] usb 5-1: USB disconnect, device number 4
[   39.045623][  T279] EXT4-fs (sda1): Remounting filesystem read-only
[   39.056553][  T649] EXT4-fs (sda1): Remounting filesystem read-only
[   39.062550][  T279] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal
[   39.075865][  T649] EXT4-fs (sda1): Remounting filesystem read-only
[   39.087049][  T279] EXT4-fs (sda1): Remounting filesystem read-only
[   39.101112][  T649] EXT4-fs (sda1): Remounting filesystem read-only
[   39.111043][  T649] EXT4-fs (sda1): Remounting filesystem read-only
[   39.112595][  T672] EXT4-fs (sda1): Remounting filesystem read-only
[   39.129425][  T673] EXT4-fs (sda1): Remounting filesystem read-only
[   39.131658][   T28] audit: type=1400 audit(1785216663.343:211): avc:  denied  { nlmsg_write } for  pid=672 comm="syz.2.100" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1
[   39.144300][  T675] loop1: detected capacity change from 0 to 1024
[   39.158036][   T28] audit: type=1400 audit(1785216663.373:212): avc:  denied  { mount } for  pid=672 comm="syz.2.100" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1
[   39.164011][  T675] EXT4-fs: Ignoring removed nomblk_io_submit option
[   39.187135][   T28] audit: type=1400 audit(1785216663.373:213): avc:  denied  { search } for  pid=672 comm="syz.2.100" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1
[   39.214580][   T28] audit: type=1400 audit(1785216663.373:214): avc:  denied  { read } for  pid=672 comm="syz.2.100" name="trace" dev="tracefs" ino=12988 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1
[   39.237025][   T28] audit: type=1400 audit(1785216663.373:215): avc:  denied  { open } for  pid=672 comm="syz.2.100" path="/16/trace/trace" dev="tracefs" ino=12988 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1
[   39.268944][  T675] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[   39.277888][  T675] ext4 filesystem being mounted at /28/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   39.330068][  T680] loop3: detected capacity change from 0 to 512
[   39.348093][  T680] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   39.362015][  T680] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[   39.371184][  T680] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem
[   39.371655][  T288] EXT4-fs (loop1): unmounting filesystem.
[   39.385942][  T680] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended
[   39.395411][  T680] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006]
[   39.402439][  T674] loop2: detected capacity change from 0 to 40427
[   39.404109][  T680] System zones: 
[   39.413198][  T674] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[   39.424606][  T674] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[   39.432660][  T683] netlink: 72 bytes leftover after parsing attributes in process `syz.1.103'.
[   39.432989][  T680] 0-2, 18-18, 34-35
[   39.446306][  T680] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[   39.447879][  T674] F2FS-fs (loop2): invalid crc value
[   39.474385][  T287] EXT4-fs (loop3): unmounting filesystem.
[   39.499045][  T674] F2FS-fs (loop2): Found nat_bits in checkpoint
[   39.558326][  T674] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[   39.571809][  T674] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[   39.668590][  T674] bio_check_eod: 13 callbacks suppressed
[   39.668605][  T674] syz.2.100: attempt to access beyond end of device
[   39.668605][  T674] loop2: rw=10241, sector=45096, nr_sectors = 8 limit=40427
[   40.086368][  T712] loop3: detected capacity change from 0 to 128
[   40.215507][  T720] loop2: detected capacity change from 0 to 1024
[   40.222308][  T720] EXT4-fs: Ignoring removed nomblk_io_submit option
[   40.249199][  T720] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[   40.258199][  T720] ext4 filesystem being mounted at /19/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   40.276895][  T294] EXT4-fs (loop2): unmounting filesystem.
[   40.308130][  T728] netlink: 72 bytes leftover after parsing attributes in process `syz.2.116'.
[   40.410085][   T39] snd-usb-audio: probe of 1-1:1.0 failed with error -71
[   40.420269][   T39] usb 1-1: USB disconnect, device number 4
[   40.493191][  T747] loop0: detected capacity change from 0 to 16
[   40.539979][  T754] loop3: detected capacity change from 0 to 1024
[   40.546677][  T754] EXT4-fs: Ignoring removed nomblk_io_submit option
[   40.567644][  T563] blk_print_req_error: 55 callbacks suppressed
[   40.567657][  T563] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[   40.579159][  T760] xt_hashlimit: size too large, truncated to 1048576
[   40.588246][  T759] IPv6: NLM_F_REPLACE set, but no existing node found!
[   40.609784][  T754] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[   40.615293][  T762] netlink: 72 bytes leftover after parsing attributes in process `syz.4.128'.
[   40.623483][  T754] ext4 filesystem being mounted at /31/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   40.657737][  T640] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[   40.659024][  T287] EXT4-fs (loop3): unmounting filesystem.
[   40.849230][  T640] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   40.859602][  T640] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   40.930805][  T640] usb 3-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[   41.490595][  T788] loop3: detected capacity change from 0 to 128
[   41.581692][  T563] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[   41.604392][  T640] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   41.613595][  T640] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   41.621949][  T640] usb 3-1: Product: syz
[   41.626277][  T640] usb 3-1: Manufacturer: syz
[   41.631294][  T640] usb 3-1: SerialNumber: syz
[   41.668791][  T640] cdc_mbim 3-1:1.0: skipping garbage
[   45.424910][  T279] EXT4-fs error: 85 callbacks suppressed
[   45.424925][  T279] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal
[   45.434680][  T103] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #259: comm udevd: reading directory lblock 0
[   45.443892][  T279] EXT4-fs: 67 callbacks suppressed
[   45.443904][  T279] EXT4-fs (sda1): Remounting filesystem read-only
[   45.453586][  T103] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #264: comm udevd: reading directory lblock 0
[   45.458306][  T640] cdc_mbim 3-1:1.0: bind() failure
[   45.464953][  T103] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #264: comm udevd: reading directory lblock 0
[   45.476717][  T640] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found
[   45.481153][  T279] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal
[   45.492725][  T103] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #264: comm udevd: reading directory lblock 0
[   45.500247][  T279] EXT4-fs (sda1): Remounting filesystem read-only
[   45.510419][  T640] cdc_ncm 3-1:1.1: bind() failure
[   45.521622][  T279] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal
[   45.528179][  T103] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #1642: comm udevd: reading directory lblock 0
[   45.533037][  T279] EXT4-fs (sda1): Remounting filesystem read-only
[   45.546484][  T640] usb 3-1: USB disconnect, device number 5
[   45.560076][  T279] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal
[   45.562977][  T801] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.139: Detected aborted journal
[   45.567786][  T279] EXT4-fs (sda1): Remounting filesystem read-only
[   45.595714][  T801] EXT4-fs (sda1): Remounting filesystem read-only
[   45.597100][  T279] EXT4-fs (sda1): Remounting filesystem read-only
[   45.606273][  T801] EXT4-fs (sda1): Remounting filesystem read-only
[   45.609025][  T279] EXT4-fs (sda1): Remounting filesystem read-only
[   45.616586][   T28] kauditd_printk_skb: 13 callbacks suppressed
[   45.616596][   T28] audit: type=1400 audit(1785216669.823:229): avc:  denied  { watch_reads } for  pid=801 comm="syz.4.139" path="/22/file0" dev="tmpfs" ino=136 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[   45.624756][  T803] EXT4-fs (sda1): Remounting filesystem read-only
[   45.641408][  T279] EXT4-fs (sda1): Remounting filesystem read-only
[   45.733047][  T815] netlink: 72 bytes leftover after parsing attributes in process `syz.1.144'.
[   45.851679][   T28] audit: type=1400 audit(1785216670.063:230): avc:  denied  { accept } for  pid=829 comm="syz.3.148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   45.895725][   T28] audit: type=1400 audit(1785216670.103:231): avc:  denied  { read write } for  pid=829 comm="syz.3.148" name="event0" dev="devtmpfs" ino=260 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[   45.923211][   T28] audit: type=1400 audit(1785216670.103:232): avc:  denied  { open } for  pid=829 comm="syz.3.148" path="/dev/input/event0" dev="devtmpfs" ino=260 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[   46.157789][  T640] usb 4-1: new low-speed USB device number 3 using dummy_hcd
[   46.317745][  T640] usb 4-1: device descriptor read/64, error -71
[   46.597804][  T640] usb 4-1: device descriptor read/64, error -71
[   47.038006][  T640] usb 4-1: new low-speed USB device number 4 using dummy_hcd
[   47.117819][  T408] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[   47.187743][  T640] usb 4-1: device descriptor read/64, error -71
[   47.299334][  T408] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   47.309888][  T408] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   47.321186][  T408] usb 3-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[   47.336789][  T408] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   47.345949][  T408] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   47.354003][  T408] usb 3-1: Product: syz
[   47.358486][  T408] usb 3-1: Manufacturer: syz
[   47.363145][  T408] usb 3-1: SerialNumber: syz
[   47.374294][  T408] cdc_mbim 3-1:1.0: skipping garbage
[   47.477772][  T640] usb 4-1: device descriptor read/64, error -71
[   47.669102][  T640] usb usb4-port1: attempt power cycle
[   49.286522][  T866] netlink: 16 bytes leftover after parsing attributes in process `syz.3.148'.
[   49.436747][  T871] netlink: 72 bytes leftover after parsing attributes in process `syz.1.161'.
[   49.474324][  T408] cdc_mbim 3-1:1.0: failed GET_NTB_PARAMETERS
[   49.486568][  T408] cdc_mbim 3-1:1.0: bind() failure
[   49.498532][  T408] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found
[   49.505311][  T408] cdc_ncm 3-1:1.1: bind() failure
[   49.528440][  T408] usb 3-1: USB disconnect, device number 6
[   49.573336][  T880] loop4: detected capacity change from 0 to 128
[   49.577730][  T640] usb 4-1: new low-speed USB device number 5 using dummy_hcd
[   49.618708][  T640] usb 4-1: device descriptor read/8, error -71
[   49.768718][  T640] usb 4-1: device descriptor read/8, error -71
[   49.857726][  T792] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[   50.037889][  T640] usb 4-1: new low-speed USB device number 6 using dummy_hcd
[   50.039059][  T792] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   50.055443][  T792] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   50.065170][  T792] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0
[   50.068789][  T640] usb 4-1: device descriptor read/8, error -71
[   50.074916][  T792] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   50.095066][  T792] usb 2-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice= 1.00
[   50.104227][  T792] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   50.112220][  T792] usb 2-1: Product: syz
[   50.116357][  T792] usb 2-1: Manufacturer: syz
[   50.120938][  T792] usb 2-1: SerialNumber: syz
[   50.126869][  T792] usbserial_generic 2-1:1.0: The "generic" usb-serial driver is only for testing and one-off prototypes.
[   50.138075][  T792] usbserial_generic 2-1:1.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver.
[   50.148749][  T792] usbserial_generic 2-1:1.0: generic converter detected
[   50.156300][  T792] usb 2-1: generic converter now attached to ttyUSB0
[   50.228708][  T640] usb 4-1: device descriptor read/8, error -71
[   50.267728][   T19] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[   50.337239][   T24] usb 2-1: USB disconnect, device number 4
[   50.352379][   T24] generic ttyUSB0: generic converter now disconnected from ttyUSB0
[   50.357309][  T898] loop0: detected capacity change from 0 to 1024
[   50.360669][  T640] usb usb4-port1: unable to enumerate USB device
[   50.367452][  T898] EXT4-fs: Ignoring removed nomblk_io_submit option
[   50.377562][   T24] usbserial_generic 2-1:1.0: device disconnected
[   50.408865][  T898] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[   50.417820][  T898] ext4 filesystem being mounted at /28/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   50.428935][  T897] EXT4-fs error: 95 callbacks suppressed
[   50.428946][  T897] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.170: Detected aborted journal
[   50.447137][  T897] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.170: Detected aborted journal
[   50.458088][  T897] EXT4-fs: 69 callbacks suppressed
[   50.458098][  T897] EXT4-fs (sda1): Remounting filesystem read-only
[   50.470251][  T897] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.170: Detected aborted journal
[   50.470665][   T19] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   50.481387][  T897] EXT4-fs (sda1): Remounting filesystem read-only
[   50.491323][   T19] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   50.498011][  T897] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.170: Detected aborted journal
[   50.507403][   T19] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0
[   50.518315][  T897] EXT4-fs (sda1): Remounting filesystem read-only
[   50.527906][   T19] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   50.534537][  T897] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.170: Detected aborted journal
[   50.548628][   T19] usb 3-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice= 1.00
[   50.557994][  T897] EXT4-fs (sda1): Remounting filesystem read-only
[   50.566968][   T19] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   50.574193][  T897] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.170: Detected aborted journal
[   50.581600][   T19] usb 3-1: Product: syz
[   50.592144][  T897] EXT4-fs (sda1): Remounting filesystem read-only
[   50.592535][  T897] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.170: Detected aborted journal
[   50.596523][   T19] usb 3-1: Manufacturer: syz
[   50.602703][  T897] EXT4-fs (sda1): Remounting filesystem read-only
[   50.610677][  T897] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.170: Detected aborted journal
[   50.613791][   T19] usb 3-1: SerialNumber: syz
[   50.618154][  T897] EXT4-fs (sda1): Remounting filesystem read-only
[   50.626816][   T19] usbserial_generic 3-1:1.0: The "generic" usb-serial driver is only for testing and one-off prototypes.
[   50.635387][  T897] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.170: Detected aborted journal
[   50.640163][   T19] usbserial_generic 3-1:1.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver.
[   50.646361][  T897] EXT4-fs (sda1): Remounting filesystem read-only
[   50.649288][  T897] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.170: Detected aborted journal
[   50.659108][   T19] usbserial_generic 3-1:1.0: generic converter detected
[   50.668431][  T897] EXT4-fs (sda1): Remounting filesystem read-only
[   50.680172][   T19] usb 3-1: generic converter now attached to ttyUSB0
[   50.685520][  T897] EXT4-fs (sda1): Remounting filesystem read-only
[   50.723508][  T898] device syzkaller0 entered promiscuous mode
[   50.771891][  T289] EXT4-fs (loop0): unmounting filesystem.
[   50.785977][  T903] xt_hashlimit: size too large, truncated to 1048576
[   50.845722][  T904] loop0: detected capacity change from 0 to 256
[   50.870915][  T904] FAT-fs (loop0): Unrecognized mount option "shortna" or missing value
[   50.888488][   T19] usb 3-1: USB disconnect, device number 7
[   50.908734][   T19] generic ttyUSB0: generic converter now disconnected from ttyUSB0
[   50.917616][   T19] usbserial_generic 3-1:1.0: device disconnected
[   52.781291][  T928] 9pnet_fd: Insufficient options for proto=fd
[   52.889960][   T28] audit: type=1400 audit(1785216677.103:233): avc:  denied  { mount } for  pid=938 comm="syz.0.178" name="/" dev="configfs" ino=14120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1
[   52.914292][  T939] netlink: 12 bytes leftover after parsing attributes in process `syz.0.178'.
[   52.928894][  T939] loop0: detected capacity change from 0 to 512
[   52.929737][  T932] loop1: detected capacity change from 0 to 128
[   52.941595][   T28] audit: type=1400 audit(1785216677.123:234): avc:  denied  { read } for  pid=938 comm="syz.0.178" name="/" dev="configfs" ino=14120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[   52.976450][   T28] audit: type=1400 audit(1785216677.123:235): avc:  denied  { open } for  pid=938 comm="syz.0.178" path="/" dev="configfs" ino=14120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[   52.999659][   T28] audit: type=1400 audit(1785216677.213:236): avc:  denied  { ioctl } for  pid=941 comm="syz.0.183" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=18827 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[   53.028680][  T563] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[   53.167725][  T309] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[   53.185987][  T943] loop0: detected capacity change from 0 to 40427
[   53.193183][  T943] F2FS-fs (loop0): Fix alignment : done, start(4096) end(16896) block(12288)
[   53.202443][  T943] F2FS-fs (loop0): invalid crc value
[   53.207984][  T943] F2FS-fs (loop0): invalid crc value
[   53.217346][  T943] F2FS-fs (loop0): Failed to get valid F2FS checkpoint
[   53.286853][   T28] audit: type=1326 audit(1785216677.493:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=941 comm="syz.0.183" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa7fd9de99 code=0x7ffc0000
[   53.311457][   T28] audit: type=1326 audit(1785216677.493:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=941 comm="syz.0.183" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa7fd9de99 code=0x7ffc0000
[   53.336154][   T28] audit: type=1326 audit(1785216677.493:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=941 comm="syz.0.183" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7ffa7fd9de99 code=0x7ffc0000
[   53.360684][   T28] audit: type=1326 audit(1785216677.493:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=941 comm="syz.0.183" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa7fd9de99 code=0x7ffc0000
[   53.361839][  T309] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   53.385325][   T28] audit: type=1326 audit(1785216677.493:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=941 comm="syz.0.183" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa7fd9de99 code=0x7ffc0000
[   53.395385][  T309] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   53.420012][   T28] audit: type=1326 audit(1785216677.493:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=941 comm="syz.0.183" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ffa7fd9f707 code=0x7ffc0000
[   53.429611][  T309] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0
[   53.463584][  T309] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   53.480162][  T309] usb 4-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice= 1.00
[   53.483882][  T945] device syzkaller0 entered promiscuous mode
[   53.489307][  T309] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   53.503332][  T309] usb 4-1: Product: syz
[   53.507543][  T309] usb 4-1: Manufacturer: syz
[   53.512250][  T309] usb 4-1: SerialNumber: syz
[   53.519397][  T309] usbserial_generic 4-1:1.0: The "generic" usb-serial driver is only for testing and one-off prototypes.
[   53.530641][  T309] usbserial_generic 4-1:1.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver.
[   53.541388][  T309] usbserial_generic 4-1:1.0: generic converter detected
[   53.548928][  T309] usb 4-1: generic converter now attached to ttyUSB0
[   53.567756][  T849] usb 1-1: new full-speed USB device number 5 using dummy_hcd
[   53.759303][  T849] usb 1-1: not running at top speed; connect to a high speed hub
[   53.771323][  T849] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[   53.803157][  T849] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2
[   53.820979][  T849] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[   53.834628][  T310] usb 4-1: USB disconnect, device number 7
[   53.843424][  T849] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   53.855592][  T310] generic ttyUSB0: generic converter now disconnected from ttyUSB0
[   53.865779][  T310] usbserial_generic 4-1:1.0: device disconnected
[   53.883530][  T849] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   53.913048][  T849] usb 1-1: Product: Ќ
[   53.925325][  T849] usb 1-1: Manufacturer: 霹梔⎗䵯Šⱽ氀Ҥ׶䈷顤륳푕䗒ባ薕絺麴ჽ낇쨏ᯌ趾뾭ꝭ홦Ꞛ
[   53.961473][  T849] usb 1-1: SerialNumber: 욀쏖閌쓙㏄臩ŻⳲ᭘瀊뭞搷쑼﹙垍詍扵폑㖍獂䡮꒠⮡㦎䯐俎準
[   54.741415][  T957] loop1: detected capacity change from 0 to 131072
[   54.749289][  T957] F2FS-fs (loop1): Zoned block device path is missing
[   54.756149][  T957] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[   54.770384][  T957] F2FS-fs (loop1): invalid crc value
[   54.777046][  T957] F2FS-fs (loop1): SIT is corrupted data# 5 7 vs 11
[   54.784120][  T957] F2FS-fs (loop1): Failed to initialize F2FS segment manager (-117)
[   54.907394][  T957] loop1: detected capacity change from 0 to 512
[   54.919391][  T957] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[   54.928399][  T957] ext4 filesystem being mounted at /45/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   54.941166][  T957] netem: unknown loss type 0
[   54.945808][  T957] netem: change failed
[   54.955328][  T957] xt_limit: Overflow, try lower: 167772/2147483648
[   54.972893][  T288] EXT4-fs (loop1): unmounting filesystem.
[   54.988100][  T976] netlink: 72 bytes leftover after parsing attributes in process `syz.1.193'.
[   55.117733][  T792] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[   55.267722][  T792] usb 3-1: device descriptor read/64, error -71
[   55.277728][  T309] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[   55.291009][  T995] loop1: detected capacity change from 0 to 128
[   55.478765][  T309] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   55.489009][  T309] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   55.498908][  T309] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0
[   55.499161][  T998] overlayfs: bad mount option "redirect_dir=follow:/"
[   55.508816][  T309] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   55.515648][  T999] overlayfs: bad mount option "redirect_dir=follow:/"
[   55.529737][  T309] usb 5-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice= 1.00
[   55.544114][  T309] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   55.552227][  T309] usb 5-1: Product: syz
[   55.552312][  T997] loop3: detected capacity change from 0 to 512
[   55.556426][  T309] usb 5-1: Manufacturer: syz
[   55.563538][  T103] EXT4-fs error: 78 callbacks suppressed
[   55.563548][  T103] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #259: comm udevd: reading directory lblock 0
[   55.567242][  T792] usb 3-1: device descriptor read/64, error -71
[   55.573194][  T103] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #264: comm udevd: reading directory lblock 0
[   55.584235][  T309] usb 5-1: SerialNumber: syz
[   55.590811][  T103] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #264: comm udevd: reading directory lblock 0
[   55.604054][  T309] usbserial_generic 5-1:1.0: The "generic" usb-serial driver is only for testing and one-off prototypes.
[   55.606428][  T103] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #264: comm udevd: reading directory lblock 0
[   55.617863][  T309] usbserial_generic 5-1:1.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver.
[   55.617887][  T309] usbserial_generic 5-1:1.0: generic converter detected
[   55.618497][  T309] usb 5-1: generic converter now attached to ttyUSB0
[   55.629654][  T103] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #1642: comm udevd: reading directory lblock 0
[   55.644769][  T997] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[   55.651448][  T103] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #1480: comm udevd: reading directory lblock 0
[   55.676398][  T997] ext4 filesystem being mounted at /44/file0/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   55.710546][  T557] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #264: comm udevd: reading directory lblock 0
[   55.722022][  T557] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #264: comm udevd: reading directory lblock 0
[   55.733602][  T557] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #264: comm udevd: reading directory lblock 0
[   55.812658][   T24] usb 5-1: USB disconnect, device number 5
[   55.819038][   T24] generic ttyUSB0: generic converter now disconnected from ttyUSB0
[   55.827143][   T24] usbserial_generic 5-1:1.0: device disconnected
[   55.867738][  T792] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[   55.941357][ T1003] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.199: Detected aborted journal
[   55.952273][ T1003] EXT4-fs: 65 callbacks suppressed
[   55.952297][ T1003] EXT4-fs (sda1): Remounting filesystem read-only
[   55.964991][ T1003] EXT4-fs (sda1): Remounting filesystem read-only
[   55.977726][  T309] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[   55.987591][  T279] EXT4-fs (sda1): Remounting filesystem read-only
[   55.994651][  T849] cdc_ncm 1-1:1.0: CDC Union missing and no IAD found
[   55.997275][ T1005] EXT4-fs (sda1): Remounting filesystem read-only
[   56.001655][  T849] cdc_ncm 1-1:1.0: bind() failure
[   56.009483][ T1005] EXT4-fs (sda1): Remounting filesystem read-only
[   56.016527][  T849] usb 1-1: USB disconnect, device number 5
[   56.020242][  T792] usb 3-1: device descriptor read/64, error -71
[   56.028991][ T1005] EXT4-fs (sda1): Remounting filesystem read-only
[   56.039477][ T1005] EXT4-fs (sda1): Remounting filesystem read-only
[   56.048523][ T1005] EXT4-fs (sda1): Remounting filesystem read-only
[   56.158707][  T309] usb 4-1: config index 0 descriptor too short (expected 45, got 28)
[   56.166842][  T309] usb 4-1: config 1 descriptor has 1 excess byte, ignoring
[   56.174067][  T309] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[   56.188269][  T309] usb 4-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00
[   56.197334][  T309] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   56.205338][  T309] usb 4-1: Product: syz
[   56.209525][  T309] usb 4-1: Manufacturer: syz
[   56.214100][  T309] usb 4-1: SerialNumber: syz
[   56.220108][  T309] rtl8150 4-1:1.0: couldn't find required endpoints
[   56.226745][  T309] rtl8150: probe of 4-1:1.0 failed with error -5
[   56.238723][  T103] udevd[103]: worker [563] terminated by signal 7 (Bus error)
[   56.246208][  T103] udevd[103]: worker [563] failed while handling '/devices/platform/dummy_hcd.3/usb4/4-1'
[   56.256142][  T344] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[   56.297730][  T792] usb 3-1: device descriptor read/64, error -71
[   56.334251][ T1008] EXT4-fs (sda1): Remounting filesystem read-only
[   56.337854][  T103] udevd[103]: worker [557] terminated by signal 7 (Bus error)
[   56.343865][ T1008] EXT4-fs (sda1): Remounting filesystem read-only
[   56.348317][  T103] udevd[103]: worker [557] failed while handling '/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0'
[   56.368593][  T103] udevd[103]: worker [560] terminated by signal 7 (Bus error)
[   56.376123][  T103] udevd[103]: worker [560] failed while handling '/devices/platform/dummy_hcd.3/usb4/4-1'
[   56.417783][  T792] usb usb3-port1: attempt power cycle
[   56.424901][  T849] usb 4-1: USB disconnect, device number 8
[   56.438713][  T344] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   56.448844][  T344] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   56.458656][  T344] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0
[   56.468654][  T344] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   56.482684][  T344] usb 2-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice= 1.00
[   56.491716][  T344] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   56.499696][  T344] usb 2-1: Product: syz
[   56.503861][  T344] usb 2-1: Manufacturer: syz
[   56.508447][  T344] usb 2-1: SerialNumber: syz
[   56.514443][  T344] usbserial_generic 2-1:1.0: The "generic" usb-serial driver is only for testing and one-off prototypes.
[   56.525669][  T344] usbserial_generic 2-1:1.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver.
[   56.536362][  T344] usbserial_generic 2-1:1.0: generic converter detected
[   56.543943][  T344] usb 2-1: generic converter now attached to ttyUSB0
[   56.716446][  T849] usb 2-1: USB disconnect, device number 5
[   56.722919][  T849] generic ttyUSB0: generic converter now disconnected from ttyUSB0
[   56.731472][  T849] usbserial_generic 2-1:1.0: device disconnected
[   56.827728][  T792] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[   56.860984][  T792] usb 3-1: device descriptor read/8, error -71
[   57.008721][  T792] usb 3-1: device descriptor read/8, error -71
[   57.187741][  T310] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[   57.190542][ T1020] netlink: 72 bytes leftover after parsing attributes in process `syz.4.206'.
[   57.277800][  T792] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[   57.313795][  T792] usb 3-1: device descriptor read/8, error -71
[   57.357818][  T310] usb 1-1: device descriptor read/64, error -71
[   57.431614][ T1035] loop1: detected capacity change from 0 to 128
[   57.503959][  T561] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[   57.519051][  T792] usb 3-1: device descriptor read/8, error -71
[   57.607731][   T24] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[   57.637813][  T792] usb usb3-port1: unable to enumerate USB device
[   57.647730][  T310] usb 1-1: device descriptor read/64, error -71
[   57.808844][   T24] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   57.818994][   T24] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   57.828781][   T24] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0
[   57.853505][   T24] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   57.925282][  T310] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[   57.933100][   T24] usb 5-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice= 1.00
[   57.942232][   T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   57.950309][   T24] usb 5-1: Product: syz
[   57.954562][   T24] usb 5-1: Manufacturer: syz
[   57.959229][   T24] usb 5-1: SerialNumber: syz
[   57.971910][   T24] usbserial_generic 5-1:1.0: The "generic" usb-serial driver is only for testing and one-off prototypes.
[   57.983197][   T24] usbserial_generic 5-1:1.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver.
[   58.001063][   T24] usbserial_generic 5-1:1.0: generic converter detected
[   58.008757][   T24] usb 5-1: generic converter now attached to ttyUSB0
[   58.107843][  T310] usb 1-1: device descriptor read/64, error -71
[   58.378788][  T849] usb 5-1: USB disconnect, device number 6
[   58.462650][ T1041] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[   58.487783][  T310] usb 1-1: device descriptor read/64, error -71
[   58.500897][  T849] generic ttyUSB0: generic converter now disconnected from ttyUSB0
[   58.532802][  T849] usbserial_generic 5-1:1.0: device disconnected
[   58.548320][ T1041] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[   58.607913][  T310] usb usb1-port1: attempt power cycle
[   59.267771][  T310] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[   59.298786][  T310] usb 1-1: device descriptor read/8, error -71
[   59.448775][  T310] usb 1-1: device descriptor read/8, error -71
[   59.529616][ T1057] loop2: detected capacity change from 0 to 512
[   59.544825][ T1057] FAT-fs (loop2): Invalid FSINFO signature: 0x41613352, 0x61417272 (sector = 1)
[   59.717845][  T310] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[   59.767045][  T310] usb 1-1: device descriptor read/8, error -71
[   59.880137][ T1075] loop2: detected capacity change from 0 to 512
[   59.918694][  T310] usb 1-1: device descriptor read/8, error -71
[   59.934355][ T1075] EXT4-fs (loop2): 1 truncate cleaned up
[   59.941470][ T1075] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[   59.984467][   T28] kauditd_printk_skb: 43 callbacks suppressed
[   59.984479][   T28] audit: type=1400 audit(1785216684.193:286): avc:  denied  { create } for  pid=1074 comm="syz.2.225" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1
[   60.000685][ T1071] loop1: detected capacity change from 0 to 40427
[   60.019241][ T1071] F2FS-fs (loop1): invalid crc value
[   60.021157][ T1075] overlayfs: upper fs needs to support d_type.
[   60.037788][  T310] usb usb1-port1: unable to enumerate USB device
[   60.038891][ T1071] F2FS-fs (loop1): Found nat_bits in checkpoint
[   60.050411][   T28] audit: type=1400 audit(1785216684.233:287): avc:  denied  { mounton } for  pid=1074 comm="syz.2.225" path="/40/file1/bus" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1
[   60.073971][   T28] audit: type=1400 audit(1785216684.233:288): avc:  denied  { write } for  pid=1074 comm="syz.2.225" name="bus" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1
[   60.121678][   T28] audit: type=1400 audit(1785216684.233:289): avc:  denied  { add_name } for  pid=1074 comm="syz.2.225" name="work" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1
[   60.141862][   T28] audit: type=1400 audit(1785216684.233:290): avc:  denied  { setattr } for  pid=1074 comm="syz.2.225" name="work" dev="loop2" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1
[   60.159451][ T1071] F2FS-fs (loop1): Start checkpoint disabled!
[   60.176938][   T28] audit: type=1400 audit(1785216684.243:291): avc:  denied  { remove_name } for  pid=1074 comm="syz.2.225" name="#9" dev="loop2" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1
[   60.196602][ T1071] F2FS-fs (loop1): f2fs_disable_checkpoint() finish, err:0
[   60.204874][   T28] audit: type=1400 audit(1785216684.243:292): avc:  denied  { rename } for  pid=1074 comm="syz.2.225" name="#9" dev="loop2" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   60.216156][ T1071] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6
[   60.256099][   T28] audit: type=1400 audit(1785216684.243:293): avc:  denied  { unlink } for  pid=1074 comm="syz.2.225" name="#9" dev="loop2" ino=22 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1
[   60.305719][ T1095] loop4: detected capacity change from 0 to 128
[   60.358456][   T28] audit: type=1400 audit(1785216684.243:294): avc:  denied  { unlink } for  pid=1074 comm="syz.2.225" name="#a" dev="loop2" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   60.388010][  T561] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[   60.416366][   T28] audit: type=1400 audit(1785216684.253:295): avc:  denied  { write } for  pid=1074 comm="syz.2.225" name="/" dev="overlay" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   60.457716][  T310] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[   60.623448][ T1070] EXT4-fs error: 80 callbacks suppressed
[   60.623466][ T1070] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.223: Detected aborted journal
[   60.648794][  T310] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   60.663261][  T310] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[   60.664390][ T1070] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.223: Detected aborted journal
[   60.693246][  T310] usb 1-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.00
[   60.713595][  T310] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   60.727583][  T279] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal
[   60.740870][  T310] usb 1-1: Product: syz
[   60.746330][  T310] usb 1-1: Manufacturer: syz
[   60.754113][  T310] usb 1-1: SerialNumber: syz
[   60.762558][  T310] usb-storage 1-1:1.0: USB Mass Storage device detected
[   60.765749][   T41] kworker/u4:2: attempt to access beyond end of device
[   60.765749][   T41] loop1: rw=1, sector=77824, nr_sectors = 8 limit=40427
[   60.788137][  T310] usb-storage 1-1:1.0: Quirks match for vid 174c pid 55aa: 400000
[   60.799322][ T1074] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.225: Detected aborted journal
[   60.810457][ T1074] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.225: Detected aborted journal
[   60.821514][ T1074] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.225: Detected aborted journal
[   60.827060][   T41] kworker/u4:2: attempt to access beyond end of device
[   60.827060][   T41] loop1: rw=1, sector=77832, nr_sectors = 2048 limit=40427
[   60.851810][  T561] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #264: comm udevd: reading directory lblock 0
[   60.855193][  T294] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz-executor: invalid indirect mapped block 4294901760 (level 0)
[   60.863217][  T279] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal
[   60.882668][   T41] kworker/u4:2: attempt to access beyond end of device
[   60.882668][   T41] loop1: rw=1, sector=79880, nr_sectors = 2040 limit=40427
[   60.898054][  T561] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #264: comm udevd: reading directory lblock 0
[   60.902402][  T294] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz-executor: invalid indirect mapped block 4294967295 (level 1)
[   60.928941][   T41] kworker/u4:2: attempt to access beyond end of device
[   60.928941][   T41] loop1: rw=1, sector=49152, nr_sectors = 8 limit=40427
[   60.931036][  T561] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #264: comm udevd: reading directory lblock 0
[   60.942761][  T294] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz-executor: invalid indirect mapped block 65535 (level 2)
[   60.968425][ T1078] EXT4-fs: 63 callbacks suppressed
[   60.968437][ T1078] EXT4-fs (sda1): Remounting filesystem read-only
[   60.984985][   T41] kworker/u4:2: attempt to access beyond end of device
[   60.984985][   T41] loop1: rw=1, sector=49160, nr_sectors = 2072 limit=40427
[   60.999019][ T1078] EXT4-fs (sda1): Remounting filesystem read-only
[   61.007843][ T1078] EXT4-fs (sda1): Remounting filesystem read-only
[   61.017897][ T1078] EXT4-fs (sda1): Remounting filesystem read-only
[   61.026689][   T41] kworker/u4:2: attempt to access beyond end of device
[   61.026689][   T41] loop1: rw=1, sector=51232, nr_sectors = 2016 limit=40427
[   61.041079][ T1078] EXT4-fs (sda1): Remounting filesystem read-only
[   61.051574][ T1104] EXT4-fs (sda1): Remounting filesystem read-only
[   61.054404][   T19] usb 1-1: USB disconnect, device number 10
[   61.065885][   T41] kworker/u4:2: attempt to access beyond end of device
[   61.065885][   T41] loop1: rw=1, sector=57344, nr_sectors = 8 limit=40427
[   61.068732][  T294] EXT4-fs (loop2): unmounting filesystem.
[   61.089160][   T41] kworker/u4:2: attempt to access beyond end of device
[   61.089160][   T41] loop1: rw=1, sector=57352, nr_sectors = 4064 limit=40427
[   61.103792][ T1104] EXT4-fs (sda1): Remounting filesystem read-only
[   61.104855][   T41] kworker/u4:2: attempt to access beyond end of device
[   61.104855][   T41] loop1: rw=2049, sector=40960, nr_sectors = 24 limit=40427
[   61.134986][ T1104] EXT4-fs (sda1): Remounting filesystem read-only
[   61.141504][ T1104] EXT4-fs (sda1): Remounting filesystem read-only
[   61.230835][ T1104] EXT4-fs (sda1): Remounting filesystem read-only
[   61.878137][ T1111] netlink: 72 bytes leftover after parsing attributes in process `syz.1.230'.
[   63.467723][  T849] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[   63.617784][  T849] usb 2-1: device descriptor read/64, error -71
[   63.625347][ T1135] loop0: detected capacity change from 0 to 1024
[   63.639229][ T1135] EXT4-fs: Ignoring removed nomblk_io_submit option
[   63.649137][ T1135] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[   63.658132][ T1135] ext4 filesystem being mounted at /40/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   63.713665][  T289] EXT4-fs (loop0): unmounting filesystem.
[   63.876358][ T1146] overlayfs: missing 'lowerdir'
[   63.887793][  T849] usb 2-1: device descriptor read/64, error -71
[   64.177800][  T849] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[   64.347772][  T849] usb 2-1: device descriptor read/64, error -71
[   64.896819][  T849] usb 2-1: device descriptor read/64, error -71
[   65.027905][  T849] usb usb2-port1: attempt power cycle
[   65.076862][ T1153] loop2: detected capacity change from 0 to 128
[   65.118506][  T561] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[   65.217842][   T19] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[   65.464552][   T19] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   65.468329][  T849] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[   65.491576][   T19] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[   65.518930][  T849] usb 2-1: device descriptor read/8, error -71
[   65.552537][   T19] usb 5-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.00
[   65.575080][   T19] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   65.583670][   T19] usb 5-1: Product: syz
[   65.588339][   T19] usb 5-1: Manufacturer: syz
[   65.592988][   T19] usb 5-1: SerialNumber: syz
[   65.641666][   T19] usb-storage 5-1:1.0: USB Mass Storage device detected
[   65.647561][ T1157] EXT4-fs error: 60 callbacks suppressed
[   65.647573][ T1157] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.248: Detected aborted journal
[   65.679092][  T849] usb 2-1: device descriptor read/8, error -71
[   65.694606][ T1157] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.248: Detected aborted journal
[   65.698022][   T19] usb-storage 5-1:1.0: Quirks match for vid 174c pid 55aa: 400000
[   65.832301][ T1148] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.245: Detected aborted journal
[   65.835409][  T103] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #259: comm udevd: reading directory lblock 0
[   65.843561][ T1148] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.245: Detected aborted journal
[   65.866250][ T1161] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.249: Detected aborted journal
[   65.874824][  T103] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #264: comm udevd: reading directory lblock 0
[   65.878230][ T1161] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.249: Detected aborted journal
[   65.889075][ T1148] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.245: Detected aborted journal
[   65.913086][  T103] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #264: comm udevd: reading directory lblock 0
[   65.925484][ T1162] Write-error on swap-device (8:0:787782)
[   65.978099][ T1148] EXT4-fs: 48 callbacks suppressed
[   65.978113][ T1148] EXT4-fs (sda1): Remounting filesystem read-only
[   65.982664][  T849] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[   65.990593][ T1148] EXT4-fs (sda1): Remounting filesystem read-only
Jul 28 05:31:30 syzkaller kern.alert kernel: [   65.925484][ T11[   66.008997][ T1148] EXT4-fs (sda1): Remounting filesystem read-only
62] Write-error [   66.016208][   T19] usb 5-1: USB disconnect, device number 7
on swap-device (8:0:787782)
[   66.028800][  T849] usb 2-1: device descriptor read/8, error -71
[   66.206813][ T1167] input: syz1 as /devices/virtual/input/input4
[   66.247762][   T28] kauditd_printk_skb: 8 callbacks suppressed
[   66.247776][   T28] audit: type=1400 audit(1785216690.453:304): avc:  denied  { read } for  pid=88 comm="acpid" name="event3" dev="devtmpfs" ino=862 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   66.283133][  T849] usb 2-1: device descriptor read/8, error -71
[   66.283479][ T1168] EXT4-fs (sda1): Remounting filesystem read-only
[   66.303293][ T1169] EXT4-fs (sda1): Remounting filesystem read-only
[   66.308248][   T28] audit: type=1400 audit(1785216690.453:305): avc:  denied  { open } for  pid=88 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=862 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   66.310508][ T1168] EXT4-fs (sda1): Remounting filesystem read-only
[   66.333011][   T28] audit: type=1400 audit(1785216690.453:306): avc:  denied  { ioctl } for  pid=88 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=862 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   66.340797][ T1169] EXT4-fs (sda1): Remounting filesystem read-only
[   66.396336][ T1171] overlayfs: missing 'workdir'
[   66.407944][  T849] usb usb2-port1: unable to enumerate USB device
[   66.420094][ T1172] EXT4-fs (sda1): Remounting filesystem read-only
[   66.433691][  T279] EXT4-fs (sda1): Remounting filesystem read-only
[   66.443728][  T279] EXT4-fs (sda1): Remounting filesystem read-only
[   66.452031][ T1176] loop0: detected capacity change from 0 to 1024
[   66.461280][ T1176] EXT4-fs: Ignoring removed nomblk_io_submit option
[   66.480922][ T1176] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[   66.490573][ T1176] ext4 filesystem being mounted at /45/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   66.594092][  T289] EXT4-fs (loop0): unmounting filesystem.
[   66.681831][ T1185] device syzkaller0 entered promiscuous mode
[   66.869485][ T1194] device syzkaller0 entered promiscuous mode
[   67.621765][ T1205] overlayfs: missing 'workdir'
[   68.062387][ T1207] loop4: detected capacity change from 0 to 1024
[   68.088020][ T1207] EXT4-fs: Ignoring removed nomblk_io_submit option
[   68.117538][ T1207] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[   68.126536][ T1207] ext4 filesystem being mounted at /55/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   68.192394][  T292] EXT4-fs (loop4): unmounting filesystem.
[   68.218053][ T1219] device syzkaller0 entered promiscuous mode
[   68.290475][ T1221] overlayfs: missing 'lowerdir'
[   68.377746][   T19] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[   68.464582][  T287] EXT4-fs (loop3): unmounting filesystem.
[   68.558788][   T19] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   68.574417][   T19] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[   68.608370][   T19] usb 2-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.00
[   68.617414][   T19] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   68.625657][   T19] usb 2-1: Product: syz
[   68.629952][   T19] usb 2-1: Manufacturer: syz
[   68.634546][   T19] usb 2-1: SerialNumber: syz
[   68.658038][   T19] usb-storage 2-1:1.0: USB Mass Storage device detected
[   68.669080][   T19] usb-storage 2-1:1.0: Quirks match for vid 174c pid 55aa: 400000
[   68.856030][   T19] usb 2-1: USB disconnect, device number 10
[   69.181545][ T1242] overlayfs: missing 'workdir'
[   69.243412][ T1246] loop4: detected capacity change from 0 to 1024
[   69.266171][ T1246] EXT4-fs: Ignoring removed nomblk_io_submit option
[   69.284885][ T1246] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[   69.309291][ T1246] ext4 filesystem being mounted at /62/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   69.342231][ T1251] device syzkaller0 entered promiscuous mode
[   69.409334][  T292] EXT4-fs (loop4): unmounting filesystem.
[   69.592683][ T1267] netlink: 72 bytes leftover after parsing attributes in process `syz.2.285'.
[   70.665737][ T1276] EXT4-fs error: 113 callbacks suppressed
[   70.665751][ T1276] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.288: Detected aborted journal
[   70.684261][  T279] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal
[   70.698664][ T1278] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.289: Detected aborted journal
[   70.710183][ T1276] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.288: Detected aborted journal
[   70.735548][ T1279] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.290: Detected aborted journal
[   70.735919][ T1278] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.289: Detected aborted journal
[   70.769428][ T1279] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.290: Detected aborted journal
[   70.793730][ T1282] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.291: Detected aborted journal
[   71.038162][  T279] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal
[   71.073689][  T279] EXT4-fs: 95 callbacks suppressed
[   71.073708][  T279] EXT4-fs (sda1): Remounting filesystem read-only
[   71.465202][ T1287] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.292: Detected aborted journal
[   71.514149][ T1287] EXT4-fs (sda1): Remounting filesystem read-only
[   71.598290][ T1288] loop4: detected capacity change from 0 to 1024
[   71.723209][ T1288] EXT4-fs: Ignoring removed nomblk_io_submit option
[   71.814675][ T1288] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[   71.826707][ T1288] ext4 filesystem being mounted at /64/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   71.850947][ T1292] EXT4-fs (sda1): Remounting filesystem read-only
[   71.853664][ T1287] EXT4-fs (sda1): Remounting filesystem read-only
[   71.862280][ T1292] EXT4-fs (sda1): Remounting filesystem read-only
[   71.898734][ T1292] EXT4-fs (sda1): Remounting filesystem read-only
[   71.957745][  T792] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[   71.969389][  T292] EXT4-fs (loop4): unmounting filesystem.
[   71.987449][  T279] EXT4-fs (sda1): Remounting filesystem read-only
[   72.005234][ T1295] EXT4-fs (sda1): Remounting filesystem read-only
[   72.018737][ T1295] EXT4-fs (sda1): Remounting filesystem read-only
[   72.167761][   T19] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[   72.198967][  T792] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   72.210404][  T792] usb 2-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.00
[   72.219543][  T792] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   72.227531][  T792] usb 2-1: Product: syz
[   72.231714][  T792] usb 2-1: Manufacturer: syz
[   72.236330][  T792] usb 2-1: SerialNumber: syz
[   72.242410][  T792] usb-storage 2-1:1.0: USB Mass Storage device detected
[   72.251039][  T792] usb-storage 2-1:1.0: Quirks match for vid 174c pid 55aa: 400000
[   72.259037][  T792] scsi host1: usb-storage 2-1:1.0
[   72.368699][   T19] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   72.378794][   T19] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   72.388540][   T19] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0
[   72.398275][   T19] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   72.412531][   T19] usb 3-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice= 1.00
[   72.421615][   T19] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   72.429613][   T19] usb 3-1: Product: syz
[   72.433793][   T19] usb 3-1: Manufacturer: syz
[   72.438426][   T19] usb 3-1: SerialNumber: syz
[   72.443598][ T1282] EXT4-fs (sda1): Remounting filesystem read-only
[   72.452438][  T408] usb 2-1: USB disconnect, device number 11
[   72.454214][   T19] usbserial_generic 3-1:1.0: The "generic" usb-serial driver is only for testing and one-off prototypes.
[   72.472014][   T19] usbserial_generic 3-1:1.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver.
[   72.486908][   T19] usbserial_generic 3-1:1.0: generic converter detected
[   72.495050][   T19] usb 3-1: generic converter now attached to ttyUSB0
[   72.664423][   T19] usb 3-1: USB disconnect, device number 12
[   72.672297][   T19] generic ttyUSB0: generic converter now disconnected from ttyUSB0
[   72.680763][   T19] usbserial_generic 3-1:1.0: device disconnected
[   72.708745][  T430] device bridge_slave_1 left promiscuous mode
[   72.714853][  T430] bridge0: port 2(bridge_slave_1) entered disabled state
[   72.722373][  T430] device bridge_slave_0 left promiscuous mode
[   72.728664][  T430] bridge0: port 1(bridge_slave_0) entered disabled state
[   72.736332][  T430] device veth1_macvtap left promiscuous mode
[   72.742393][  T430] device veth0_vlan left promiscuous mode
[   72.995679][ T1312] netlink: 72 bytes leftover after parsing attributes in process `syz.0.298'.
[   73.601528][ T1331] FAULT_INJECTION: forcing a failure.
[   73.601528][ T1331] name fail_usercopy, interval 1, probability 0, space 0, times 1
[   73.614697][ T1331] CPU: 0 PID: 1331 Comm: syz.2.303 Not tainted syzkaller #0
[   73.621977][ T1331] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[   73.632018][ T1331] Call Trace:
[   73.635276][ T1331]  <TASK>
[   73.638183][ T1331]  __dump_stack+0x21/0x24
[   73.642507][ T1331]  dump_stack_lvl+0x110/0x170
[   73.647162][ T1331]  ? __cfi_dump_stack_lvl+0x8/0x8
[   73.652166][ T1331]  ? __asan_set_shadow_00+0xe/0x10
[   73.657257][ T1331]  ? do_vfs_ioctl+0x1b68/0x1cd0
[   73.662106][ T1331]  dump_stack+0x15/0x24
[   73.666244][ T1331]  should_fail_ex+0x3bf/0x510
[   73.670895][ T1331]  should_fail+0xb/0x10
[   73.675025][ T1331]  should_fail_usercopy+0x1a/0x20
[   73.680023][ T1331]  _copy_from_user+0x1e/0xc0
[   73.684589][ T1331]  inet6_ioctl+0x1b8/0x290
[   73.688983][ T1331]  ? __cfi_inet6_ioctl+0x10/0x10
[   73.693895][ T1331]  sock_do_ioctl+0x114/0x330
[   73.698464][ T1331]  ? sock_show_fdinfo+0xb0/0xb0
[   73.703298][ T1331]  ? selinux_file_ioctl+0x3ad/0x4c0
[   73.708475][ T1331]  sock_ioctl+0x475/0x700
[   73.712785][ T1331]  ? __cfi_sock_ioctl+0x10/0x10
[   73.717616][ T1331]  ? __fget_files+0x2d1/0x330
[   73.722272][ T1331]  ? security_file_ioctl+0x95/0xc0
[   73.727359][ T1331]  ? __cfi_sock_ioctl+0x10/0x10
[   73.732189][ T1331]  __se_sys_ioctl+0x12f/0x1b0
[   73.736841][ T1331]  __x64_sys_ioctl+0x7b/0x90
[   73.741407][ T1331]  x64_sys_call+0x58b/0x9a0
[   73.745886][ T1331]  do_syscall_64+0x4c/0xa0
[   73.750279][ T1331]  ? clear_bhb_loop+0x30/0x80
[   73.754955][ T1331]  ? clear_bhb_loop+0x30/0x80
[   73.759607][ T1331]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   73.765491][ T1331] RIP: 0033:0x7f2b3259de99
[   73.769886][ T1331] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   73.789475][ T1331] RSP: 002b:00007f2b33518028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   73.797864][ T1331] RAX: ffffffffffffffda RBX: 00007f2b32825fa0 RCX: 00007f2b3259de99
[   73.805813][ T1331] RDX: 00002000000004c0 RSI: 000000000000890b RDI: 0000000000000008
[   73.813758][ T1331] RBP: 00007f2b33518090 R08: 0000000000000000 R09: 0000000000000000
[   73.821705][ T1331] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   73.829664][ T1331] R13: 00007f2b32826038 R14: 00007f2b32825fa0 R15: 00007ffd0412f8c8
[   73.837613][ T1331]  </TASK>
[   73.987738][   T19] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[   74.137749][   T19] usb 2-1: device descriptor read/64, error -71
[   74.312311][ T1340] syz.2.305 uses obsolete (PF_INET,SOCK_PACKET)
[   74.320603][   T28] audit: type=1400 audit(1785216698.533:307): avc:  denied  { getopt } for  pid=1339 comm="syz.2.305" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   74.323166][ T1344] loop4: detected capacity change from 0 to 256
[   74.407743][   T19] usb 2-1: device descriptor read/64, error -71
[   74.677720][   T19] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[   74.827739][   T19] usb 2-1: device descriptor read/64, error -71
[   75.097745][   T19] usb 2-1: device descriptor read/64, error -71
[   75.129311][ T1353] loop0: detected capacity change from 0 to 1024
[   75.136658][ T1353] EXT4-fs: Ignoring removed nomblk_io_submit option
[   75.148948][ T1353] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[   75.157931][ T1353] ext4 filesystem being mounted at /57/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   75.211189][  T289] EXT4-fs (loop0): unmounting filesystem.
[   75.217771][   T19] usb usb2-port1: attempt power cycle
[   75.627734][   T19] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[   75.658666][   T19] usb 2-1: device descriptor read/8, error -71
[   75.808685][   T19] usb 2-1: device descriptor read/8, error -71
[   76.032441][ T1359] EXT4-fs error: 72 callbacks suppressed
[   76.032456][ T1359] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #1265: comm syz-executor: reading directory lblock 0
[   76.033106][ T1361] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.312: Detected aborted journal
[   76.043038][ T1362] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.310: Detected aborted journal
[   76.051510][ T1361] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.312: Detected aborted journal
[   76.061709][ T1360] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.311: Detected aborted journal
[   76.073323][ T1362] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.310: Detected aborted journal
[   76.082804][   T19] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[   76.093745][ T1362] EXT4-fs: 34 callbacks suppressed
[   76.093756][ T1362] EXT4-fs (sda1): Remounting filesystem read-only
[   76.104688][ T1360] EXT4-fs (sda1): Remounting filesystem read-only
[   76.112404][ T1361] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.312: Detected aborted journal
[   76.118069][ T1360] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.311: Detected aborted journal
[   76.123644][ T1361] EXT4-fs (sda1): Remounting filesystem read-only
[   76.129893][ T1360] EXT4-fs (sda1): Remounting filesystem read-only
[   76.141124][ T1362] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.310: Detected aborted journal
[   76.175355][ T1361] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.312: Detected aborted journal
[   76.175628][   T19] usb 2-1: device descriptor read/8, error -71
[   76.186373][ T1361] EXT4-fs (sda1): Remounting filesystem read-only
[   76.199968][ T1361] EXT4-fs (sda1): Remounting filesystem read-only
[   76.206560][ T1362] EXT4-fs (sda1): Remounting filesystem read-only
[   76.213358][ T1362] EXT4-fs (sda1): Remounting filesystem read-only
[   76.286108][ T1365] loop0: detected capacity change from 0 to 40427
[   76.295616][ T1365] F2FS-fs (loop0): invalid crc value
[   76.301923][ T1365] F2FS-fs (loop0): Found nat_bits in checkpoint
[   76.326306][ T1365] F2FS-fs (loop0): Start checkpoint disabled!
[   76.332765][ T1365] F2FS-fs (loop0): f2fs_disable_checkpoint() finish, err:0
[   76.340314][ T1365] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6
[   76.349612][   T19] usb 2-1: device descriptor read/8, error -71
[   76.369642][ T1362] EXT4-fs (sda1): Remounting filesystem read-only
[   76.394803][ T1362] EXT4-fs (sda1): Remounting filesystem read-only
[   76.434540][  T430] kworker/u4:7: attempt to access beyond end of device
[   76.434540][  T430] loop0: rw=1, sector=77824, nr_sectors = 8 limit=40427
[   76.451125][  T430] kworker/u4:7: attempt to access beyond end of device
[   76.451125][  T430] loop0: rw=1, sector=77832, nr_sectors = 2056 limit=40427
[   76.468334][  T430] kworker/u4:7: attempt to access beyond end of device
[   76.468334][  T430] loop0: rw=1, sector=79888, nr_sectors = 2032 limit=40427
[   76.482259][  T344] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[   76.483087][  T430] kworker/u4:7: attempt to access beyond end of device
[   76.483087][  T430] loop0: rw=1, sector=49152, nr_sectors = 8 limit=40427
[   76.489840][   T19] usb usb2-port1: unable to enumerate USB device
[   76.508729][  T430] kworker/u4:7: attempt to access beyond end of device
[   76.508729][  T430] loop0: rw=1, sector=49160, nr_sectors = 2080 limit=40427
[   76.526817][  T430] kworker/u4:7: attempt to access beyond end of device
[   76.526817][  T430] loop0: rw=1, sector=51240, nr_sectors = 2008 limit=40427
[   76.541155][  T430] kworker/u4:7: attempt to access beyond end of device
[   76.541155][  T430] loop0: rw=1, sector=57344, nr_sectors = 8 limit=40427
[   76.559782][  T430] kworker/u4:7: attempt to access beyond end of device
[   76.559782][  T430] loop0: rw=1, sector=57352, nr_sectors = 3232 limit=40427
[   76.575414][  T430] kworker/u4:7: attempt to access beyond end of device
[   76.575414][  T430] loop0: rw=1, sector=60584, nr_sectors = 832 limit=40427
[   76.589781][  T430] kworker/u4:7: attempt to access beyond end of device
[   76.589781][  T430] loop0: rw=2049, sector=40960, nr_sectors = 24 limit=40427
[   76.688793][  T344] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   76.698897][  T344] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   76.708717][  T344] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0
[   76.718453][  T344] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   76.732592][  T344] usb 3-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice= 1.00
[   76.741648][  T344] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   76.749652][  T344] usb 3-1: Product: syz
[   76.753791][  T344] usb 3-1: Manufacturer: syz
[   76.758375][  T344] usb 3-1: SerialNumber: syz
[   76.764213][  T344] usbserial_generic 3-1:1.0: The "generic" usb-serial driver is only for testing and one-off prototypes.
[   76.775433][  T344] usbserial_generic 3-1:1.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver.
[   76.786113][  T344] usbserial_generic 3-1:1.0: generic converter detected
[   76.793591][  T344] usb 3-1: generic converter now attached to ttyUSB0
[   76.971237][  T344] usb 3-1: USB disconnect, device number 13
[   76.978793][  T344] generic ttyUSB0: generic converter now disconnected from ttyUSB0
[   76.986837][  T344] usbserial_generic 3-1:1.0: device disconnected
[   77.215143][ T1380] loop1: detected capacity change from 0 to 40427
[   77.224974][ T1380] F2FS-fs (loop1): invalid crc value
[   77.231200][ T1380] F2FS-fs (loop1): Found nat_bits in checkpoint
[   77.261690][ T1380] F2FS-fs (loop1): Start checkpoint disabled!
[   77.268121][ T1380] F2FS-fs (loop1): f2fs_disable_checkpoint() finish, err:0
[   77.275466][ T1380] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6
[   78.253946][ T1391] loop2: detected capacity change from 0 to 1024
[   78.260735][ T1391] EXT4-fs: Ignoring removed nomblk_io_submit option
[   78.278849][ T1391] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[   78.287855][ T1391] ext4 filesystem being mounted at /60/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   78.307218][ T1391] device syzkaller0 entered promiscuous mode
[   78.355213][  T294] EXT4-fs (loop2): unmounting filesystem.
[   78.361702][ T1396] loop1: detected capacity change from 0 to 128
[   78.379641][   T28] audit: type=1400 audit(1785216702.583:308): avc:  denied  { mounton } for  pid=1386 comm="syz.1.319" path="/78/file1/file0" dev="loop1" ino=1048601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1
[   78.410283][   T28] audit: type=1400 audit(1785216702.583:309): avc:  denied  { write } for  pid=1386 comm="syz.1.319" name="/" dev="incremental-fs" ino=1048601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   78.433185][   T28] audit: type=1400 audit(1785216702.583:310): avc:  denied  { add_name } for  pid=1386 comm="syz.1.319" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   78.453685][   T28] audit: type=1400 audit(1785216702.583:311): avc:  denied  { associate } for  pid=1386 comm="syz.1.319" name="bus" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[   79.136606][   T28] audit: type=1400 audit(1785216703.343:312): avc:  denied  { unmount } for  pid=288 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[   79.704544][ T1412] loop1: detected capacity change from 0 to 128
[   79.717731][  T344] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[   79.725464][   T19] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[   79.778578][ T1413] loop4: detected capacity change from 0 to 128
[   79.888009][  T344] usb 3-1: device descriptor read/64, error -71
[   79.918734][   T19] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   79.938835][   T19] usb 1-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.00
[   79.957703][   T19] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   79.967833][   T19] usb 1-1: Product: syz
[   79.971991][   T19] usb 1-1: Manufacturer: syz
[   79.986708][   T19] usb 1-1: SerialNumber: syz
[   79.997309][   T19] usb-storage 1-1:1.0: USB Mass Storage device detected
[   80.005182][   T19] usb-storage 1-1:1.0: Quirks match for vid 174c pid 55aa: 400000
[   80.014057][   T19] scsi host1: usb-storage 1-1:1.0
[   80.167732][  T344] usb 3-1: device descriptor read/64, error -71
[   80.197188][  T408] usb 1-1: USB disconnect, device number 11
[   80.437730][  T344] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[   80.597795][  T344] usb 3-1: device descriptor read/64, error -71
[   80.776559][ T1422] netlink: 52 bytes leftover after parsing attributes in process `syz.1.327'.
[   80.852562][ T1422] loop1: detected capacity change from 0 to 40427
[   80.862445][ T1422] F2FS-fs (loop1): invalid crc value
[   80.867724][  T344] usb 3-1: device descriptor read/64, error -71
[   80.875586][ T1422] F2FS-fs (loop1): Found nat_bits in checkpoint
[   80.897239][ T1422] F2FS-fs (loop1): Start checkpoint disabled!
[   80.903708][ T1422] F2FS-fs (loop1): f2fs_disable_checkpoint() finish, err:0
[   80.911259][ T1422] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6
[   80.998549][  T344] usb usb3-port1: attempt power cycle
[   81.038707][ T1419] EXT4-fs error: 67 callbacks suppressed
[   81.038717][ T1419] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.327: Detected aborted journal
[   81.055354][ T1419] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.327: Detected aborted journal
[   81.067355][ T1419] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.327: Detected aborted journal
[   81.094832][ T1419] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.327: Detected aborted journal
[   81.105699][ T1419] EXT4-fs: 50 callbacks suppressed
[   81.105709][ T1419] EXT4-fs (sda1): Remounting filesystem read-only
[   81.117219][ T1419] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.327: Detected aborted journal
[   81.128157][ T1419] EXT4-fs (sda1): Remounting filesystem read-only
[   81.417726][  T344] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[   81.448721][  T344] usb 3-1: device descriptor read/8, error -71
[   81.598951][  T344] usb 3-1: device descriptor read/8, error -71
[   81.609802][ T1423] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.328: Detected aborted journal
[   81.613154][ T1419] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.327: Detected aborted journal
[   81.620716][ T1423] EXT4-fs (sda1): Remounting filesystem read-only
[   81.631537][ T1419] EXT4-fs (sda1): Remounting filesystem read-only
[   81.644408][ T1419] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.327: Detected aborted journal
[   81.652949][  T103] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #259: comm udevd: reading directory lblock 0
[   81.655341][ T1419] EXT4-fs (sda1): Remounting filesystem read-only
[   81.667931][  T103] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #264: comm udevd: reading directory lblock 0
[   81.877759][  T344] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[   81.908644][  T344] usb 3-1: device descriptor read/8, error -71
[   82.058650][  T344] usb 3-1: device descriptor read/8, error -71
[   82.173975][  T279] EXT4-fs (sda1): Remounting filesystem read-only
[   82.176827][ T1430] EXT4-fs (sda1): Remounting filesystem read-only
[   82.180521][  T344] usb usb3-port1: unable to enumerate USB device
[   82.195499][ T1430] EXT4-fs (sda1): Remounting filesystem read-only
[   82.196195][ T1432] EXT4-fs (sda1): Remounting filesystem read-only
[   82.202231][ T1430] EXT4-fs (sda1): Remounting filesystem read-only
[   82.221449][ T1435] loop4: detected capacity change from 0 to 256
[   82.228206][ T1435] exfat: Bad value for 'time_offset'
[   82.268338][  T561] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[   82.493140][ T1431] loop0: detected capacity change from 0 to 40427
[   82.509743][ T1431] F2FS-fs (loop0): invalid crc value
[   82.520388][ T1431] F2FS-fs (loop0): Found nat_bits in checkpoint
[   82.553898][ T1431] F2FS-fs (loop0): Start checkpoint disabled!
[   82.561444][ T1431] F2FS-fs (loop0): f2fs_disable_checkpoint() finish, err:0
[   82.568962][ T1431] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6
[   82.627753][  T849] usb 5-1: new full-speed USB device number 8 using dummy_hcd
[   82.808689][  T849] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[   82.819689][  T849] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64
[   82.830461][  T849] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22
[   82.844057][  T849] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   82.853089][  T849] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[   82.861065][  T849] usb 5-1: SerialNumber: syz
[   82.866592][ T1437] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[   82.874233][  T849] cdc_acm 5-1:1.0: Control and data interfaces are not separated!
[   83.040427][  T429] bio_check_eod: 10 callbacks suppressed
[   83.040438][  T429] kworker/u4:6: attempt to access beyond end of device
[   83.040438][  T429] loop0: rw=1, sector=77824, nr_sectors = 8 limit=40427
[   83.062962][  T429] kworker/u4:6: attempt to access beyond end of device
[   83.062962][  T429] loop0: rw=1, sector=77832, nr_sectors = 2064 limit=40427
[   83.082807][  T429] kworker/u4:6: attempt to access beyond end of device
[   83.082807][  T429] loop0: rw=1, sector=79896, nr_sectors = 2024 limit=40427
[   83.097710][  T429] kworker/u4:6: attempt to access beyond end of device
[   83.097710][  T429] loop0: rw=1, sector=49152, nr_sectors = 8 limit=40427
[   83.111768][  T849] cdc_acm 5-1:1.0: ttyACM0: USB ACM device
[   83.119613][  T849] usb 5-1: USB disconnect, device number 8
[   83.122603][  T429] kworker/u4:6: attempt to access beyond end of device
[   83.122603][  T429] loop0: rw=1, sector=49160, nr_sectors = 3648 limit=40427
[   83.140540][  T429] kworker/u4:6: attempt to access beyond end of device
[   83.140540][  T429] loop0: rw=1, sector=52808, nr_sectors = 440 limit=40427
[   83.154487][  T429] kworker/u4:6: attempt to access beyond end of device
[   83.154487][  T429] loop0: rw=1, sector=57344, nr_sectors = 8 limit=40427
[   83.173856][  T429] kworker/u4:6: attempt to access beyond end of device
[   83.173856][  T429] loop0: rw=1, sector=57352, nr_sectors = 4064 limit=40427
[   83.188740][  T429] kworker/u4:6: attempt to access beyond end of device
[   83.188740][  T429] loop0: rw=2049, sector=40960, nr_sectors = 24 limit=40427
[   83.721698][ T1447] loop2: detected capacity change from 0 to 1024
[   83.730869][ T1447] EXT4-fs: Ignoring removed nomblk_io_submit option
[   83.748891][ T1447] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[   83.758203][ T1447] ext4 filesystem being mounted at /62/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   83.772892][ T1447] device syzkaller0 entered promiscuous mode
[   83.831350][  T294] EXT4-fs (loop2): unmounting filesystem.
[   83.997787][  T344] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[   84.178752][  T344] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   84.188887][  T344] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   84.198605][  T344] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0
[   84.208323][  T344] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   84.222373][  T344] usb 2-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice= 1.00
[   84.231439][  T344] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   84.239433][  T344] usb 2-1: Product: syz
[   84.243580][  T344] usb 2-1: Manufacturer: syz
[   84.248178][  T344] usb 2-1: SerialNumber: syz
[   84.254195][  T344] usbserial_generic 2-1:1.0: The "generic" usb-serial driver is only for testing and one-off prototypes.
[   84.265419][  T344] usbserial_generic 2-1:1.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver.
[   84.276100][  T344] usbserial_generic 2-1:1.0: generic converter detected
[   84.283692][  T344] usb 2-1: generic converter now attached to ttyUSB0
[   84.461433][  T344] usb 2-1: USB disconnect, device number 16
[   84.468311][  T344] generic ttyUSB0: generic converter now disconnected from ttyUSB0
[   84.476341][  T344] usbserial_generic 2-1:1.0: device disconnected
[   85.438335][ T1467] loop4: detected capacity change from 0 to 128
[   85.597734][  T640] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[   85.607727][  T344] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[   85.788784][  T344] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   85.788791][  T640] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   85.790212][  T640] usb 2-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.00
[   85.798940][  T344] usb 1-1: config 1 interface 0 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 4
[   85.809262][  T640] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   85.819471][  T344] usb 1-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.00
[   85.830873][  T640] usb 2-1: Product: syz
[   85.838862][  T344] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   85.848046][  T640] usb 2-1: Manufacturer: syz
[   85.852025][  T344] usb 1-1: Product: syz
[   85.860100][  T640] usb 2-1: SerialNumber: syz
[   85.864577][  T344] usb 1-1: Manufacturer: syz
[   85.870708][  T640] usb-storage 2-1:1.0: USB Mass Storage device detected
[   85.873234][  T344] usb 1-1: SerialNumber: syz
[   85.875117][  T344] usb-storage 1-1:1.0: USB Mass Storage device detected
[   85.878698][  T640] usb-storage 2-1:1.0: Quirks match for vid 174c pid 55aa: 400000
[   85.886289][  T344] usb-storage 1-1:1.0: Quirks match for vid 174c pid 55aa: 400000
[   85.890502][  T640] scsi host1: usb-storage 2-1:1.0
[   85.896516][  T344] scsi host2: usb-storage 1-1:1.0
[   86.070846][ T1460] EXT4-fs error: 65 callbacks suppressed
[   86.070857][ T1460] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.337: Detected aborted journal
[   86.077346][ T1457] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.336: Detected aborted journal
[   86.098767][ T1460] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.337: Detected aborted journal
[   86.099221][ T1457] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.336: Detected aborted journal
[   86.120471][ T1460] EXT4-fs: 37 callbacks suppressed
[   86.120480][ T1460] EXT4-fs (sda1): Remounting filesystem read-only
[   86.120504][ T1457] EXT4-fs (sda1): Remounting filesystem read-only
[   86.125599][ T1460] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.337: Detected aborted journal
[   86.136406][ T1457] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.336: Detected aborted journal
[   86.149254][ T1460] EXT4-fs (sda1): Remounting filesystem read-only
[   86.160101][ T1457] EXT4-fs (sda1): Remounting filesystem read-only
[   86.166603][ T1460] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.337: Detected aborted journal
[   86.184300][  T640] usb 1-1: USB disconnect, device number 12
[   86.194546][ T1460] EXT4-fs (sda1): Remounting filesystem read-only
[   86.201637][ T1460] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.337: Detected aborted journal
[   86.212579][ T1460] EXT4-fs (sda1): Remounting filesystem read-only
[   86.278927][ T1460] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.337: Detected aborted journal
[   86.289847][ T1460] EXT4-fs (sda1): Remounting filesystem read-only
[   86.297159][  T344] usb 2-1: USB disconnect, device number 17
[   86.399966][ T1460] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.337: Detected aborted journal
[   86.410899][ T1460] EXT4-fs (sda1): Remounting filesystem read-only
[   86.494796][ T1457] EXT4-fs (sda1): Remounting filesystem read-only
[   86.501334][ T1457] EXT4-fs (sda1): Remounting filesystem read-only
[   87.154311][ T1492] loop2: detected capacity change from 0 to 128
[   88.925235][ T1508] loop1: detected capacity change from 0 to 40427
[   88.932587][ T1508] F2FS-fs (loop1): invalid crc value
[   88.938991][ T1508] F2FS-fs (loop1): Found nat_bits in checkpoint
[   88.969617][ T1508] F2FS-fs (loop1): Start checkpoint disabled!
[   88.976045][ T1508] F2FS-fs (loop1): f2fs_disable_checkpoint() finish, err:0
[   88.983865][ T1508] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6
[   89.117726][  T344] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[   89.267724][  T344] usb 1-1: device descriptor read/64, error -71
[   89.537732][  T344] usb 1-1: device descriptor read/64, error -71
[   89.700917][  T430] kworker/u4:7: attempt to access beyond end of device
[   89.700917][  T430] loop1: rw=1, sector=77824, nr_sectors = 8 limit=40427
[   89.720403][  T430] kworker/u4:7: attempt to access beyond end of device
[   89.720403][  T430] loop1: rw=1, sector=77832, nr_sectors = 4088 limit=40427
[   89.735167][  T430] kworker/u4:7: attempt to access beyond end of device
[   89.735167][  T430] loop1: rw=1, sector=49152, nr_sectors = 8 limit=40427
[   89.754540][  T430] kworker/u4:7: attempt to access beyond end of device
[   89.754540][  T430] loop1: rw=1, sector=49160, nr_sectors = 4088 limit=40427
[   89.769235][  T430] kworker/u4:7: attempt to access beyond end of device
[   89.769235][  T430] loop1: rw=1, sector=57344, nr_sectors = 8 limit=40427
[   89.788453][  T430] kworker/u4:7: attempt to access beyond end of device
[   89.788453][  T430] loop1: rw=1, sector=57352, nr_sectors = 4064 limit=40427
[   89.803222][  T430] kworker/u4:7: attempt to access beyond end of device
[   89.803222][  T430] loop1: rw=2049, sector=40960, nr_sectors = 24 limit=40427
[   89.837754][  T344] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[   89.987739][  T344] usb 1-1: device descriptor read/64, error -71
[   90.257740][  T344] usb 1-1: device descriptor read/64, error -71
[   90.377769][  T344] usb usb1-port1: attempt power cycle
[   90.769428][ T1524] loop1: detected capacity change from 0 to 1024
[   90.776114][ T1524] EXT4-fs: Ignoring removed nomblk_io_submit option
[   90.789004][ T1524] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[   90.797803][  T344] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[   90.798357][ T1524] ext4 filesystem being mounted at /86/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   90.825882][ T1524] device syzkaller0 entered promiscuous mode
[   90.838685][  T344] usb 1-1: device descriptor read/8, error -71
[   90.871353][ T1528] loop2: detected capacity change from 0 to 128
[   90.896327][  T288] EXT4-fs (loop1): unmounting filesystem.
[   91.008779][  T344] usb 1-1: device descriptor read/8, error -71
[   91.027727][  T408] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[   91.208690][  T408] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   91.218794][  T408] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   91.228530][  T408] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0
[   91.238261][  T408] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   91.252302][  T408] usb 5-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice= 1.00
[   91.261338][  T408] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   91.269320][  T408] usb 5-1: Product: syz
[   91.273462][  T408] usb 5-1: Manufacturer: syz
[   91.278057][  T408] usb 5-1: SerialNumber: syz
[   91.283773][  T408] usbserial_generic 5-1:1.0: The "generic" usb-serial driver is only for testing and one-off prototypes.
[   91.287766][  T344] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[   91.295007][  T408] usbserial_generic 5-1:1.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver.
[   91.313209][  T408] usbserial_generic 5-1:1.0: generic converter detected
[   91.320759][  T408] usb 5-1: generic converter now attached to ttyUSB0
[   91.328925][  T344] usb 1-1: device descriptor read/8, error -71
[   91.332098][  T561] EXT4-fs error: 46 callbacks suppressed
[   91.332110][  T561] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #264: comm udevd: reading directory lblock 0
[   91.352070][  T561] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #264: comm udevd: reading directory lblock 0
[   91.363565][  T561] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #264: comm udevd: reading directory lblock 0
[   91.478687][  T344] usb 1-1: device descriptor read/8, error -71
[   91.485360][ T1519] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.350: Detected aborted journal
[   91.496242][ T1519] EXT4-fs: 35 callbacks suppressed
[   91.496252][ T1519] EXT4-fs (sda1): Remounting filesystem read-only
[   91.507831][ T1519] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.350: Detected aborted journal
[   91.518698][ T1519] EXT4-fs (sda1): Remounting filesystem read-only
[   91.525160][ T1519] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.350: Detected aborted journal
[   91.536018][ T1519] EXT4-fs (sda1): Remounting filesystem read-only
[   91.542562][ T1519] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.350: Detected aborted journal
[   91.553423][ T1519] EXT4-fs (sda1): Remounting filesystem read-only
[   91.560679][ T1519] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.350: Detected aborted journal
[   91.571542][ T1519] EXT4-fs (sda1): Remounting filesystem read-only
[   91.580143][ T1519] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.350: Detected aborted journal
[   91.591006][ T1519] EXT4-fs (sda1): Remounting filesystem read-only
[   91.597807][  T344] usb usb1-port1: unable to enumerate USB device
[   91.616533][ T1519] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.350: Detected aborted journal
[   91.628706][ T1519] EXT4-fs (sda1): Remounting filesystem read-only
[   91.635154][ T1519] EXT4-fs (sda1): Remounting filesystem read-only
[   91.642705][ T1519] EXT4-fs (sda1): Remounting filesystem read-only
[   91.649813][ T1519] EXT4-fs (sda1): Remounting filesystem read-only
[   91.657520][  T408] usb 5-1: USB disconnect, device number 9
[   91.685330][  T408] generic ttyUSB0: generic converter now disconnected from ttyUSB0
[   91.698043][  T408] usbserial_generic 5-1:1.0: device disconnected
SYZFAIL: failed to mkdtemp
 (errno 5: Input/output error)
SYZFAIL: failed to mkdtemp
 (errno 5: Input/output error)
SYZFAIL: failed to mkdtemp
 (errno 5: Input/output error)
SYZFAIL: failed to mkdtemp
 (errno 5: Input/output error)
SYZFAIL: failed to mkdtemp
 (errno 5: Input/output error)
SYZFAIL: failed to mkdtemp
 (errno 5: Input/output error)
SYZFAIL: failed to mkdtemp
 (errno 5: Input/output error)
SYZFAIL: failed to mkdtemp
 (errno 5: Input/output error)
SYZFAIL: failed to mkdtemp
 (errno 5: Input/output error)
SYZFAIL: failed to mkdtemp
 (errno 5: Input/output error)
SYZFAIL: failed to mkdtemp
 (errno 5: Input/output error)
SYZFAIL: failed to mkdtemp
 (errno 5: Input/output error)
SYZFAIL: failed to mkdtemp
 (errno 5: Input/output error)
SYZFAIL: failed to mkdtemp
 (errno 5: Input/output error)
SYZFAIL: failed to mkdtemp
 (errno 5: Input/output error)
SYZFAIL: failed to mkdtemp
 (errno 5: Input/output error)
SYZFAIL: failed to mkdtemp
 (errno 5: Input/output error)
SYZFAIL: failed to mkdtemp
 (errno 5: Input/output error)
SYZFAIL: failed to mkdtemp
 (errno 5: Input/output error)
SYZFAIL: failed to mkdtemp
 (errno 5: Input/output error)
SYZFAIL: failed to mkdtemp
 (errno 5: Input/output error)
SYZFAIL: repeatedly failed to execute the program
proc=5 req=294 state=1 status=67 (errno 9: Bad file descriptor)
[   92.772075][   T28] audit: type=1400 audit(1785216716.983:313): avc:  denied  { write } for  pid=279 comm="syz-executor" path="pipe:[15426]" dev="pipefs" ino=15426 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1
[   93.468978][  T429] device bridge_slave_1 left promiscuous mode
[   93.475081][  T429] bridge0: port 2(bridge_slave_1) entered disabled state
[   93.482462][  T429] device bridge_slave_0 left promiscuous mode
[   93.488608][  T429] bridge0: port 1(bridge_slave_0) entered disabled state
[   93.496146][  T429] device veth1_macvtap left promiscuous mode
[   93.502170][  T429] device veth0_vlan left promiscuous mode
[   93.779205][  T429] tipc: Left network mode
[   93.783667][  T429] tipc: Disabling bearer <udp:syz2>
[   93.789059][  T429] tipc: Left network mode
[   94.298455][  T429] device bridge_slave_1 left promiscuous mode
[   94.304555][  T429] bridge0: port 2(bridge_slave_1) entered disabled state
[   94.311981][  T429] device bridge_slave_0 left promiscuous mode
[   94.318144][  T429] bridge0: port 1(bridge_slave_0) entered disabled state
[   94.325708][  T429] device bridge_slave_1 left promiscuous mode
[   94.331841][  T429] bridge0: port 2(bridge_slave_1) entered disabled state
[   94.339134][  T429] device bridge_slave_0 left promiscuous mode
[   94.345218][  T429] bridge0: port 1(bridge_slave_0) entered disabled state
[   94.352950][  T429] device bridge_slave_1 left promiscuous mode
[   94.359067][  T429] bridge0: port 2(bridge_slave_1) entered disabled state
[   94.366253][  T429] device bridge_slave_0 left promiscuous mode
[   94.372412][  T429] bridge0: port 1(bridge_slave_0) entered disabled state
[   94.380278][  T429] device veth1_macvtap left promiscuous mode
[   94.386269][  T429] device veth0_vlan left promiscuous mode
[   94.392356][  T429] device veth1_macvtap left promiscuous mode
[   94.398356][  T429] device veth0_vlan left promiscuous mode
[   94.404291][  T429] device veth1_macvtap left promiscuous mode
[   94.410325][  T429] device veth0_vlan left promiscuous mode