last executing test programs:

1m2.233143398s ago: executing program 0 (id=104):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xe, 0x4, 0x4, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000080)='task_rename\x00', r1}, 0x10)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r2, &(0x7f00000006c0), &(0x7f0000000000), 0x2}, 0x20)

1m2.178061889s ago: executing program 0 (id=109):
syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f00000000c0)='mnt\x00', 0x1008c1c, &(0x7f0000000000), 0x0, 0x236, &(0x7f0000000300)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='mnt/encrypted_dir\x00', 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x800, 0x0)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f00000006c0)=@v2={0x2, @aes256, 0x0, '\x00', @a})
chdir(&(0x7f00000002c0)='mnt/encrypted_dir\x00')
creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)

1m1.965512502s ago: executing program 0 (id=113):
syz_usb_connect(0x5, 0x44, &(0x7f0000000000)=ANY=[@ANYBLOB="12014101a7147440d1121f1c18ef0102030109023200010000102017046507000202ff"], 0x0)
syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000406a0504400000000000"], 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00C\x00'], 0x20}}, 0x20004000)
r0 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b)

1m1.779256795s ago: executing program 32 (id=115):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x1, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0x2}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78)
bpf$PROG_BIND_MAP(0x23, &(0x7f0000000040)={r3, r0}, 0xc)

1m0.511166634s ago: executing program 0 (id=124):
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x20081e, &(0x7f00000020c0), 0x1, 0x4fb, &(0x7f0000000500)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x141842, 0x0)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
r1 = open(&(0x7f0000000500)='./bus\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x4, 0x205a2, 0x0, 0x0, 0x19, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5c9d000ff8ee09e737ff0edf110ff4117639c2eb4b78c66ee677df701905b9aafab4afaaf755a3f6a004", "cba3d625780820d1cbf7db71038259ca171ce1a311ef97e4298d1e14ef01060000e9009600fdff00000000000000000000000000000000000400", "d300e6d6ae9ef30bea2a004000", [0x0, 0x2]})
write$hidraw(r0, 0x0, 0x1a)

1m0.17687921s ago: executing program 0 (id=128):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r1}, 0x10)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=@newlink={0x40, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4048b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FLAGS={0x6, 0x8, 0x3f}, @IFLA_IPTUN_LOCAL={0x8, 0x2, @loopback}]}}}]}, 0x40}}, 0x4048084)

1m0.071020271s ago: executing program 2 (id=132):
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2004de, &(0x7f0000000500)={[{@minixdf}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x203}}, {@mblk_io_submit}, {@noblock_validity}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6}}]}, 0x3, 0x451, &(0x7f0000000f80)="$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")
r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0)
io_setup(0x2, &(0x7f0000000000)=<r1=>0x0)
io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00, 0xc00}])
r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x141800, 0x0)
ioctl$FS_IOC_ENABLE_VERITY(r2, 0x8004587d, &(0x7f0000000140)={0x2, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0})

59.999814552s ago: executing program 0 (id=133):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x800810, &(0x7f0000000180)={[{@nobh}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x2}}]}, 0xff, 0x23f, &(0x7f0000000540)="$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")
mknod$loop(&(0x7f00000009c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1)
creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1)
creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1d3)
creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)

59.945148503s ago: executing program 33 (id=133):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x800810, &(0x7f0000000180)={[{@nobh}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x2}}]}, 0xff, 0x23f, &(0x7f0000000540)="$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")
mknod$loop(&(0x7f00000009c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1)
creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1)
creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1d3)
creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)

59.806381705s ago: executing program 2 (id=135):
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0)
creat(&(0x7f00000000c0)='./file0\x00', 0xc9028ba210c11f88)
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
creat(&(0x7f0000000200)='./file0\x00', 0x90)

57.381605912s ago: executing program 2 (id=137):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000300000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10)
syz_clone(0xc0001480, 0x0, 0x0, &(0x7f0000000a00), 0x0, 0x0)

57.050123627s ago: executing program 2 (id=141):
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x20081e, &(0x7f00000020c0), 0x1, 0x4fb, &(0x7f0000000500)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x141842, 0x0)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
r1 = open(&(0x7f0000000500)='./bus\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x4, 0x205a2, 0x0, 0x0, 0x19, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5c9d000ff8ee09e737ff0edf110ff4117639c2eb4b78c66ee677df701905b9aafab4afaaf755a3f6a004", "cba3d625780820d1cbf7db71038259ca171ce1a311ef97e4298d1e14ef01060000e9009600fdff00000000000000000000000000000000000400", "d300e6d6ae9ef30bea2a004000", [0x0, 0x2]})
write$hidraw(r0, 0x0, 0x1a)

56.87521885s ago: executing program 2 (id=143):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18)
sync()
flock(0xffffffffffffffff, 0x9d77734ed0a70dd1)
sync()

56.655114104s ago: executing program 2 (id=144):
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50)
syz_clone(0x60002080, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0xffff0000, 0xf0, 0xe200, &(0x7f0000001a40)="2b206d074843b397737ea49da2aa", 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x48)

56.618556294s ago: executing program 34 (id=144):
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50)
syz_clone(0x60002080, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0xffff0000, 0xf0, 0xe200, &(0x7f0000001a40)="2b206d074843b397737ea49da2aa", 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x48)

47.485879374s ago: executing program 1 (id=226):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge0\x00', <r1=>0x0})
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413ec50000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r3}, 0x10)
sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001c000100000000000000000007000000", @ANYRES32=r1, @ANYBLOB="4000a6000a000200aaaaaaaaaabb0000040005"], 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x0)

47.427285494s ago: executing program 1 (id=229):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c0000000400000001"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000001040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kfree\x00', r2}, 0x10)
syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000600)={0x0, 0x22, 0xf, {[@main=@item_012={0x2, 0x0, 0xa, "39a7"}, @local=@item_4={0x3, 0x2, 0x0, "89d48617"}, @main=@item_012={0x1, 0x0, 0xc, "e0"}, @main=@item_4={0x3, 0x0, 0xb, "51b1c180"}]}}, 0x0}, 0x0)

45.692493731s ago: executing program 1 (id=251):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKINFO_GET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x2c, r3, 0x1, 0x0, 0x0, {0x1a}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}]}]}, 0x2c}}, 0x0)

45.607932112s ago: executing program 1 (id=253):
syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x840, &(0x7f0000000080)={[{@test_dummy_encryption_v1}, {@test_dummy_encryption_v1}]}, 0x1, 0x241, &(0x7f0000000540)="$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")
open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x200]})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0)

45.400971485s ago: executing program 1 (id=258):
r0 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', <r1=>0x0})
bind$can_raw(r0, &(0x7f00000005c0), 0x10)
read(r0, &(0x7f00000027c0)=""/4073, 0xfe9)
setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f0000000580)=0x1, 0x4)
sendmsg$can_raw(r0, &(0x7f0000000200)={&(0x7f0000000780)={0x1d, r1}, 0x10, &(0x7f00000009c0)={&(0x7f00000007c0)=@can={{0x2, 0x0, 0x1, 0x1}, 0x1, 0x2, 0x0, 0x0, "d97003b8750e5566"}, 0x10}, 0x1, 0x0, 0x0, 0x20008050}, 0x0)

45.317585947s ago: executing program 1 (id=259):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = socket$inet6(0x10, 0x3, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r1}, 0x10)
sendto$inet6(r0, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0)

45.245849588s ago: executing program 35 (id=259):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = socket$inet6(0x10, 0x3, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r1}, 0x10)
sendto$inet6(r0, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0)

12.202737713s ago: executing program 6 (id=747):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
open(&(0x7f00000002c0)='./file0/file0\x00', 0x141840, 0x0)
mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, 0x0)
open(&(0x7f0000000200)='./file0/file0\x00', 0x0, 0x0)

12.174765274s ago: executing program 6 (id=748):
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e0000000400000008"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r1}, 0x10)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000007300)=@newtaction={0x488, 0x30, 0x12f, 0x0, 0x0, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0xb, 0x2, 0x4, 0x434, 0x6, 0x4, 0xffffdfa5, 0x4, 0xfff, 0x70, 0x7, 0xfffffffb, 0x0, 0x1, 0x400, 0x9, 0x998, 0x3, 0xff, 0x0, 0xc, 0x7, 0x80000000, 0x0, 0xffff, 0x2, 0x0, 0x2, 0x10, 0x1, 0x4dfc56a4, 0x3e67, 0x3, 0x9, 0x0, 0x1, 0x9, 0x9, 0xa, 0x10001, 0x7, 0x5, 0x4, 0x9, 0x1ff, 0xffffffed, 0x0, 0x0, 0x3, 0xb5a, 0x9, 0x2, 0x1ff, 0x4000, 0x0, 0x9, 0x800, 0x10000, 0x80, 0x8, 0x1, 0x2, 0x40, 0x4, 0x0, 0x7, 0x9, 0xac3, 0x3, 0x8767, 0x8, 0x3, 0x7, 0xffffff01, 0x3613, 0x10000, 0x7e, 0x5, 0x2dd4, 0x3, 0x81, 0x4, 0x6, 0x4, 0x4, 0x4, 0x9, 0x3, 0x2, 0x8, 0x0, 0x6, 0x3, 0x3, 0x1, 0xb, 0x9, 0xbc, 0xe, 0x5, 0x9, 0x5, 0x1, 0x7fff, 0x1, 0x4, 0x8, 0x7, 0x7, 0x4, 0x3, 0x7, 0x5f, 0x6, 0xfffffff7, 0x1000000, 0x48, 0x7, 0x81, 0x400, 0x1, 0x1, 0xe, 0x7, 0x7, 0x6, 0x3ce1, 0xffffffc0, 0x1, 0x5, 0x6, 0x100, 0xb7a1f420, 0x0, 0x8, 0x4, 0x7, 0x10, 0x4, 0x2, 0x3, 0x7, 0x3ff, 0x4, 0xf79, 0x9, 0x82, 0x7fffffff, 0x9, 0x7495, 0x3, 0x1000, 0x2, 0xe000000, 0x6039c791, 0xffffffff, 0xff, 0x3, 0x8, 0x10, 0x7, 0x100, 0x10, 0x3, 0x80000000, 0x7, 0x8, 0x2, 0x3, 0x4, 0x5, 0x8, 0x1ff, 0x6, 0x6, 0x6, 0x0, 0x8, 0x2, 0xffff106e, 0x1cccf7d2, 0x4, 0x8, 0x8, 0x80000001, 0x8000, 0x0, 0x3, 0x200, 0x8001, 0x7, 0x9, 0x5, 0x2, 0x727, 0xc, 0xc495, 0x0, 0x3ff, 0x1000000, 0xffff, 0xe, 0x8000, 0xfffffff9, 0x2, 0x10001, 0x4, 0x9, 0x0, 0x5, 0x2, 0x10001, 0x1, 0x80000000, 0x9, 0x8, 0x100, 0x8, 0x3, 0xf8, 0x8, 0x2, 0xd, 0x8000, 0x3, 0x6, 0x200, 0x2, 0x3, 0x2, 0x1, 0xd, 0x100, 0x2, 0x9, 0xfffffff8, 0x7, 0x1000, 0x5, 0x3, 0x4, 0x2, 0x45, 0xa, 0x7fff, 0x9, 0x618, 0x6, 0x1, 0x5, 0x4, 0x5ace, 0x8, 0x3, 0x48d, 0x5f1]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x8, 0x8, 0x9, 0x4, {0x3, 0x0, 0x53d, 0x5, 0x1ea, 0xe0000000}, {0x4, 0x1, 0x5, 0x7f, 0xc, 0x800}, 0x6, 0x40000, 0x5}}]]}, {0x4}, {0xc, 0xb, {0x1}}, {0xc, 0xa, {0x2}}}}]}]}, 0x488}}, 0x0)

12.077519715s ago: executing program 6 (id=750):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r1}, 0x18)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x42)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r2, 0x2000012, 0xd80, 0x2, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

12.076885895s ago: executing program 6 (id=751):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x408e, &(0x7f0000000240)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@min_batch_time={'min_batch_time', 0x3d, 0xfff}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40}}, {@stripe={'stripe', 0x3d, 0x4000}}, {@errors_remount}, {@minixdf}]}, 0x3, 0x43a, &(0x7f0000000340)="$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")
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x185641, 0x0)
r1 = open(&(0x7f00000003c0)='./bus\x00', 0x84902, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x11, r1, 0x0)
write$FUSE_ATTR(r0, &(0x7f0000000440)={0x78, 0x0, 0x0, {0x2000000000000000, 0x0, 0x0, {0xffffffffff7ffffe, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x6, 0x4, 0x6288f666, 0x0, 0xc000}}}, 0x6f)

11.956650947s ago: executing program 6 (id=755):
r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0)
syz_genetlink_get_family_id$team(&(0x7f0000000000), r0)
sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000040)=@gettaction={0x30, 0x32, 0x20, 0x0, 0x25dfdbfc, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x1}, @action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000800}, 0x0)
write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0x6000)

11.729430151s ago: executing program 6 (id=760):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="05000000040000000800000008"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r1}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20)
r2 = timerfd_create(0x8, 0x800)
timerfd_gettime(r2, &(0x7f0000000080))

11.673846492s ago: executing program 36 (id=760):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="05000000040000000800000008"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r1}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20)
r2 = timerfd_create(0x8, 0x800)
timerfd_gettime(r2, &(0x7f0000000080))

9.665478862s ago: executing program 9 (id=810):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x7, 0x0, 0x0)
bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_int(r0, 0x6, 0x12, &(0x7f0000000240)=0xf, 0x4)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
sendto$inet(r0, &(0x7f0000000740)="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"/737, 0xfffffd44, 0x200400b1, 0x0, 0x28)

9.664533632s ago: executing program 9 (id=812):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008bd6000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000090000000000000000000000c50000000ea20000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='mm_page_alloc\x00', r2}, 0x10)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df12c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)

9.640831152s ago: executing program 9 (id=814):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r1}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0, @void, @value, @void, @value}, 0x50)

9.540893484s ago: executing program 9 (id=815):
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount$bind(0x0, &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x20000, 0x0)
mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x18d811, 0x0)
open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)

9.539541094s ago: executing program 9 (id=817):
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000e09d7040460a2196324f01020301090224000100000000090400000206d3450009050102100000000009058b0240"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f00000023c0)={0x34, &(0x7f0000002240)=ANY=[@ANYBLOB="400e06"], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000a40)={0x84, &(0x7f0000000380)=ANY=[@ANYBLOB="00171300000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

9.484613925s ago: executing program 9 (id=819):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000980)=[@textreal={0x8, 0x0}], 0x1, 0x51, 0x0, 0x0)
ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0xd000)

9.432019266s ago: executing program 37 (id=819):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000980)=[@textreal={0x8, 0x0}], 0x1, 0x51, 0x0, 0x0)
ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0xd000)

5.525557085s ago: executing program 5 (id=934):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002e00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000180)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="05"], 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20)
sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3)

5.415836567s ago: executing program 5 (id=935):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000400)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0x1b3a, 0x4)
sendto$inet(r0, &(0x7f0000000080)='m', 0x1, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000005800)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2001, 0x0)

5.012976423s ago: executing program 7 (id=948):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]})
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0)
fcntl$setlease(r1, 0x400, 0x1)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0)
pread64(r2, &(0x7f0000001440)=""/126, 0x7e, 0x41)
close_range(r0, 0xffffffffffffffff, 0x0)

5.006882914s ago: executing program 8 (id=949):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @mcast2, 0x7}, 0x1c)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10)
sendmmsg$inet6(r0, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="82", 0x1}, {&(0x7f0000000280)="91", 0x1}], 0x2}}], 0x1, 0x4400c800)
sendto$inet6(r0, &(0x7f0000000140)="1b220f76b7aaf325bb6c17f8", 0x18, 0x800, 0x0, 0x0)

4.984137444s ago: executing program 7 (id=950):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0b00000005000000050000000900000001000000e2dc634242301e376919dc9dca13ce082a0d74233e499b8a9b"], 0x48)

2.57944054s ago: executing program 8 (id=951):
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0)
ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000080)=0xb309)
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000080)=ANY=[])
syz_usb_connect$printer(0x3, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="fb01"], 0x0)
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, "d40665ee", {0x1, 0x6, 0x2, 0xb9, 0x8}})
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f00000000c0)=ANY=[])

2.56884736s ago: executing program 7 (id=953):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000004080)={{r0}, &(0x7f0000004000), &(0x7f0000004040)}, 0x20)
io_setup(0x8, &(0x7f0000004200)=<r2=>0x0)
io_pgetevents(r2, 0x3, 0x3, &(0x7f0000000440)=[{}, {}, {}], &(0x7f00000004c0)={0x0, 0x3938700}, 0x0)

2.546715171s ago: executing program 5 (id=954):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, 0x0, &(0x7f0000000040)}, 0x20)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x10)
uname(0x0)

2.487856622s ago: executing program 5 (id=957):
r0 = socket$can_raw(0x1d, 0x3, 0x1)
r1 = gettid()
timer_create(0x0, &(0x7f00000005c0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
read(r0, &(0x7f00000027c0)=""/4073, 0xfe9)
syz_mount_image$ext4(&(0x7f0000000480)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1000040, &(0x7f0000000580)={[{@max_batch_time={'max_batch_time', 0x3d, 0xe}}, {@nombcache}, {@nodelalloc}, {@errors_remount}, {@noblock_validity}, {@errors_remount}, {@noload}]}, 0x1, 0x461, &(0x7f0000001840)="$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")

2.379608084s ago: executing program 7 (id=971):
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='hrtimer_init\x00', r0}, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='hrtimer_init\x00', r1}, 0x10)
socketpair(0xa, 0x1, 0x0, &(0x7f0000000000))

2.290214295s ago: executing program 7 (id=963):
r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000400620180100000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000f"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000380)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="203108000000e09ae70ab3"], 0x0, 0x0, 0x0, 0x0}, 0x0)

2.150005697s ago: executing program 3 (id=966):
rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8)
r0 = getpid()
r1 = gettid()
rt_tgsigqueueinfo(r0, r1, 0xb, &(0x7f0000000080)={0x0, 0x0, 0x3})
r2 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffc]}, 0x8)
read(r2, &(0x7f0000000740)=""/377, 0x179)

2.135984727s ago: executing program 3 (id=967):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r0, 0x0)
capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140))
r1 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r1, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001400add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1)

2.124174968s ago: executing program 3 (id=968):
bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000180)={@multicast2, @loopback}, 0xc)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000040)={'lo\x00'})
setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)=ANY=[@ANYBLOB="e00000027f"], 0x18)

2.109908508s ago: executing program 3 (id=969):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x8000000, 0x1000, &(0x7f0000000000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000000)=0x8000000)

1.922874481s ago: executing program 3 (id=970):
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000000c0)='./file2\x00', 0x280880f, &(0x7f0000000080), 0x2f, 0x4fd, &(0x7f0000000100)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r0, &(0x7f0000000180)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0)
r1 = socket(0x10, 0x803, 0x0)
getsockname$packet(r1, 0x0, &(0x7f00000000c0))

1.881023271s ago: executing program 3 (id=972):
r0 = syz_usb_connect$cdc_ncm(0x0, 0x8f, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109027d0002010080000904000001020d0000052406000105240000000d240f0103000000fd0000000406241aff072908241c0101090000142413099f33760bf14377323063f9c8a04d113905241510000905810300020800040904010000020d00000904010102020d0000090582020002e1ad00090503020002"], 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000000)={0x44, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x20, 0x80, 0x1c, {0xfe, 0x70, 0x0, 0x1ff, 0x7, 0x9000, 0x1c6, 0x3ff, 0x4, 0x576, 0x8000, 0x40}}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000100)={0x14, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)

1.641561235s ago: executing program 5 (id=973):
socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020000838500000071000000850000002a00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4)
setsockopt$packet_int(r0, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4)
syz_emit_ethernet(0x36, &(0x7f0000000200)={@broadcast, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, @timestamp}}}}, 0x0)

1.610914565s ago: executing program 5 (id=976):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x22, 0xf, {[@global=@item_012={0x0, 0x1, 0x5}, @local=@item_4={0x3, 0x2, 0x0, "45501821"}, @global=@item_012={0x1, 0x1, 0x9, "f5"}, @global=@item_012={0x1, 0x1, 0x7, "84"}, @main=@item_4={0x3, 0x0, 0xb, "9e3ce079"}]}}, 0x0}, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0)
ioctl$HIDIOCGPHYS(r1, 0x80404812, &(0x7f00000000c0))
ioctl$HIDIOCSUSAGE(r1, 0x4018480c, &(0x7f0000000040)={0x1, 0x200, 0xf9c0, 0x80000001, 0x7, 0x3})

639.85213ms ago: executing program 7 (id=977):
writev(0xffffffffffffffff, 0x0, 0x0)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10)
syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a010000190581"], 0x0)

616.52343ms ago: executing program 4 (id=979):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffe24, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', <r3=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000840)=@newqdisc={0x80, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x50, 0x2, {{}, [@TCA_NETEM_LOSS={0x34, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18}, @NETEM_LOSS_GI={0x4}]}]}}}]}, 0x80}}, 0x0)

596.856871ms ago: executing program 8 (id=980):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
pipe(&(0x7f0000005880)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
fsetxattr$security_selinux(r2, &(0x7f00000000c0), &(0x7f0000000180)='system_u:object_r:dhcpd_exec_t:s0\x00', 0x22, 0x0)

566.711531ms ago: executing program 8 (id=981):
syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./file1\x00', 0x101880a, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x1, 0x550b, &(0x7f00000079c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x183341, 0x0)
ioctl$F2FS_IOC_START_ATOMIC_WRITE(r0, 0xf501, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x641, 0x1c3)
fallocate(r1, 0x10, 0x8, 0x807c27)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x36)

328.906525ms ago: executing program 8 (id=982):
syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f0000001100)='./file0\x00', 0x3000490, &(0x7f0000000240)={[{@nombcache}, {@usrjquota}, {@user_xattr}, {@norecovery}, {@auto_da_alloc}, {@usrquota}, {@minixdf}, {@barrier_val}, {@grpjquota}, {}]}, 0x0, 0x7b1, &(0x7f00000004c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
close_range(r1, 0xffffffffffffffff, 0x0)
fadvise64(r0, 0xfcff, 0x0, 0x3)

328.536045ms ago: executing program 4 (id=983):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r0}, 0x10)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0)

222.423737ms ago: executing program 4 (id=984):
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000440)='./file1\x00', 0x1a0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600700, 0x19)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x2000000, 0x12, r0, 0x0)
mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188)

165.442817ms ago: executing program 4 (id=985):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0xfffe, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4)
sendto$inet(r0, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10)
socket$packet(0x11, 0xa, 0x300)
sendto$inet(r0, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00)

124.485798ms ago: executing program 4 (id=986):
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r1}, 0x10)
bpf$MAP_CREATE(0x2000000000000000, &(0x7f00000005c0)=ANY=[@ANYBLOB="0600000004000000be7000005c00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000002"], 0x50)

42.379409ms ago: executing program 4 (id=987):
prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x751, &(0x7f00000000c0)={[{@usrquota}, {@nobarrier}], [], 0x2c}, 0x0, 0x4f6, &(0x7f00000002c0)="$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")
mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)={[{@subsystem='cpuset'}, {@subsystem='memory'}, {@subsystem='cpuacct'}]})
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.cpu_exclusive\x00', 0x2, 0x0)
write$cgroup_int(r1, &(0x7f00000000c0)=0x7, 0x12)

0s ago: executing program 8 (id=988):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000001480)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b40)={&(0x7f0000000380)='kfree\x00', r0}, 0x18)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x2000081, &(0x7f0000000540)=ANY=[@ANYRES32=0x0, @ANYBLOB="8e29b5c6d59d9a8fa9f1222c", @ANYRES32, @ANYBLOB="d90f55b2fe87bccaae179697e871353358a10c2f9b664f24e6a9112c9e2e2e3003fa09469b1b", @ANYRES8], 0x0, 0x23e, &(0x7f0000000bc0)="$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")
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
setsockopt$ARPT_SO_SET_REPLACE(r1, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3e8, 0x218, 0x218, 0x0, 0x300, 0x300, 0x300, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0x0, 0x0, 0x0, 0x0, {@empty, {[0x0, 0x0, 0xff]}}, {@mac=@local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'pimreg1\x00'}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f67b23ffdfa27f907a03732da3acbc6518e62a77ca06f258762e88c0d9f9d2f413b94a105f4bdf01425ce81c5d000000000000000500ffffffff00"}}}, {{@arp={@multicast2, @empty, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438)

kernel console output (not intermixed with test programs):

mp_invalid_vmcs=1 to dump internal KVM state.
[   49.794031][  T997] loop6: detected capacity change from 0 to 40427
[   49.798457][   T60] usb 5-1: USB disconnect, device number 3
[   49.820044][  T997] F2FS-fs (loop6): Invalid SB checksum offset: 0
[   49.826439][  T997] F2FS-fs (loop6): Can't find valid F2FS filesystem in 2th superblock
[   49.867962][  T997] F2FS-fs (loop6): invalid crc value
[   49.877931][ T1002] netlink: 4 bytes leftover after parsing attributes in process `syz.1.226'.
[   49.911238][  T997] F2FS-fs (loop6): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437)
[   49.950210][  T997] F2FS-fs (loop6): Try to recover 2th superblock, ret: 0
[   49.957426][  T997] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[   50.093167][ T1022] netlink: 176 bytes leftover after parsing attributes in process `syz.7.232'.
[   50.177397][  T308] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[   50.197420][    T6] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[   50.324585][ T1024] loop4: detected capacity change from 0 to 512
[   50.331359][ T1024] EXT4-fs: Ignoring removed mblk_io_submit option
[   50.338533][ T1024] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[   50.349568][ T1024] EXT4-fs (loop4): 1 truncate cleaned up
[   50.355327][ T1024] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[   50.357597][   T60] usb 7-1: new full-speed USB device number 4 using dummy_hcd
[   50.373160][  T308] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   50.388536][    T6] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   50.399909][    T6] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   50.401339][  T308] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[   50.410104][    T6] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[   50.418942][  T308] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   50.440324][  T308] usb 6-1: Product: syz
[   50.440615][ T1026] EXT4-fs (loop4): shut down requested (2)
[   50.444515][  T308] usb 6-1: Manufacturer: syz
[   50.444532][  T308] usb 6-1: SerialNumber: syz
[   50.459715][    T6] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   50.468863][    T6] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   50.479009][    T6] usb 2-1: config 0 descriptor??
[   50.548440][   T60] usb 7-1: config 0 has no interfaces?
[   50.554042][   T60] usb 7-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58
[   50.563165][   T60] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   50.574522][   T60] usb 7-1: config 0 descriptor??
[   50.582625][  T472] EXT4-fs (loop4): unmounting filesystem.
[   50.652472][  T308] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 3 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[   50.786963][  T308] usb 7-1: USB disconnect, device number 4
[   50.867859][   T60] usb 6-1: USB disconnect, device number 3
[   50.885656][   T60] usblp0: removed
[   50.891823][    T6] plantronics 0003:047F:FFFF.0008: No inputs registered, leaving
[   50.906045][ T1033] netlink: 4 bytes leftover after parsing attributes in process `syz.7.236'.
[   50.918580][    T6] plantronics 0003:047F:FFFF.0008: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0
[   51.104867][    T6] usb 2-1: USB disconnect, device number 6
[   51.344011][ T1041] loop6: detected capacity change from 0 to 8192
[   51.487375][  T303] usb 8-1: new high-speed USB device number 3 using dummy_hcd
[   51.493695][ T1057] netlink: 4 bytes leftover after parsing attributes in process `syz.4.246'.
[   51.525314][ T1056] netlink: 'syz.6.245': attribute type 12 has an invalid length.
[   51.533647][ T1056] netlink: 'syz.6.245': attribute type 29 has an invalid length.
[   51.541881][ T1056] netlink: 148 bytes leftover after parsing attributes in process `syz.6.245'.
[   51.551385][ T1056] netlink: 'syz.6.245': attribute type 1 has an invalid length.
[   51.566287][ T1056] netlink: 47 bytes leftover after parsing attributes in process `syz.6.245'.
[   51.579142][ T1063] netlink: 'syz.6.245': attribute type 12 has an invalid length.
[   51.586911][ T1063] netlink: 'syz.6.245': attribute type 29 has an invalid length.
[   51.602922][ T1063] netlink: 148 bytes leftover after parsing attributes in process `syz.6.245'.
[   51.612382][ T1063] netlink: 'syz.6.245': attribute type 1 has an invalid length.
[   51.636712][ T1063] netlink: 47 bytes leftover after parsing attributes in process `syz.6.245'.
[   51.669096][ T1073] loop1: detected capacity change from 0 to 128
[   51.677103][ T1071] syz.6.252[1071] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   51.677208][ T1071] syz.6.252[1071] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   51.689855][  T303] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   51.713012][ T1073] EXT4-fs (loop1): Test dummy encryption mode enabled
[   51.730757][  T303] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   51.744053][ T1073] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[   51.766213][ T1073] ext4 filesystem being mounted at /42/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   51.776730][  T303] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[   51.797461][  T303] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   51.806683][  T303] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   51.812786][ T1073] fscrypt: AES-256-XTS using implementation "xts-aes-aesni"
[   51.823071][  T303] usb 8-1: config 0 descriptor??
[   51.848144][ T1073] loop1: detected capacity change from 128 to 64
[   51.862880][ T1073] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5916: Out of memory
[   51.872396][ T1073] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5916: Out of memory
[   51.881690][ T1073] EXT4-fs error (device loop1): ext4_evict_inode:279: inode #13: comm syz.1.253: mark_inode_dirty error
[   51.893593][ T1073] EXT4-fs warning (device loop1): ext4_evict_inode:282: couldn't mark inode dirty (err -12)
[   51.897403][   T60] usb 6-1: new full-speed USB device number 4 using dummy_hcd
[   51.933398][  T758] EXT4-fs (loop1): unmounting filesystem.
[   52.037373][  T308] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[   52.098416][   T60] usb 6-1: config 0 has no interfaces?
[   52.103967][   T60] usb 6-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58
[   52.123194][   T60] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   52.144059][   T60] usb 6-1: config 0 descriptor??
[   52.231884][  T308] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   52.243241][  T303] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0
[   52.246868][  T308] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   52.255614][  T303] plantronics 0003:047F:FFFF.0009: No inputs registered, leaving
[   52.261583][  T308] usb 5-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00
[   52.278154][ T1090] bridge0: port 1(bridge_slave_0) entered blocking state
[   52.285447][ T1090] bridge0: port 1(bridge_slave_0) entered disabled state
[   52.287817][  T303] plantronics 0003:047F:FFFF.0009: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0
[   52.293175][ T1090] device bridge_slave_0 entered promiscuous mode
[   52.311429][  T308] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   52.320368][  T308] usb 5-1: config 0 descriptor??
[   52.332478][ T1090] bridge0: port 2(bridge_slave_1) entered blocking state
[   52.339684][ T1090] bridge0: port 2(bridge_slave_1) entered disabled state
[   52.347348][ T1090] device bridge_slave_1 entered promiscuous mode
[   52.356561][  T303] usb 6-1: USB disconnect, device number 4
[   52.459512][ T1090] bridge0: port 2(bridge_slave_1) entered blocking state
[   52.466621][ T1090] bridge0: port 2(bridge_slave_1) entered forwarding state
[   52.473963][ T1090] bridge0: port 1(bridge_slave_0) entered blocking state
[   52.481039][ T1090] bridge0: port 1(bridge_slave_0) entered forwarding state
[   52.519116][  T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   52.530208][  T304] bridge0: port 1(bridge_slave_0) entered disabled state
[   52.538083][  T304] bridge0: port 2(bridge_slave_1) entered disabled state
[   52.561832][  T304] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   52.570724][  T304] bridge0: port 1(bridge_slave_0) entered blocking state
[   52.577816][  T304] bridge0: port 1(bridge_slave_0) entered forwarding state
[   52.585504][  T304] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   52.595575][  T304] bridge0: port 2(bridge_slave_1) entered blocking state
[   52.602697][  T304] bridge0: port 2(bridge_slave_1) entered forwarding state
[   52.610473][  T304] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   52.631513][  T304] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   52.647824][  T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   52.656685][  T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   52.667233][  T304] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   52.675072][  T304] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   52.684701][ T1090] device veth0_vlan entered promiscuous mode
[   52.711119][  T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   52.721984][ T1090] device veth1_macvtap entered promiscuous mode
[   52.730754][  T308] hkems 0003:2006:0118.000A: unknown main item tag 0xe
[   52.739076][  T308] hkems 0003:2006:0118.000A: item fetching failed at offset 4/7
[   52.750438][  T308] hkems 0003:2006:0118.000A: parse failed
[   52.756233][  T308] hkems: probe of 0003:2006:0118.000A failed with error -22
[   52.764334][  T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   52.772689][    T6] usb 8-1: USB disconnect, device number 3
[   52.789291][  T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   52.933508][ T1088] usb 5-1: USB disconnect, device number 4
[   52.936234][ T1109] loop5: detected capacity change from 0 to 16
[   52.949338][ T1109] erofs: (device loop5): mounted with root inode @ nid 36.
[   52.972621][   T28] kauditd_printk_skb: 6 callbacks suppressed
[   52.972637][   T28] audit: type=1400 audit(1750080653.666:226): avc:  denied  { mounton } for  pid=1106 comm="syz.5.265" path="/31/file0/file0" dev="loop5" ino=46 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   53.002402][   T28] audit: type=1400 audit(1750080653.686:227): avc:  denied  { read } for  pid=1106 comm="syz.5.265" name="file0" dev="overlay" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   53.025134][   T28] audit: type=1400 audit(1750080653.686:228): avc:  denied  { open } for  pid=1106 comm="syz.5.265" path="/31/file0/file0/file0" dev="overlay" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   53.050259][   T28] audit: type=1400 audit(1750080653.686:229): avc:  denied  { ioctl } for  pid=1106 comm="syz.5.265" path="/31/file0/file0/file0" dev="overlay" ino=49 ioctlcmd=0x660b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   53.080606][   T43] device bridge_slave_1 left promiscuous mode
[   53.086764][   T43] bridge0: port 2(bridge_slave_1) entered disabled state
[   53.094724][   T43] device bridge_slave_0 left promiscuous mode
[   53.101152][   T43] bridge0: port 1(bridge_slave_0) entered disabled state
[   53.110013][   T43] device veth1_macvtap left promiscuous mode
[   53.116068][   T43] device veth0_vlan left promiscuous mode
[   53.167580][  T308] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[   53.237909][   T28] audit: type=1400 audit(1750080653.936:230): avc:  denied  { setopt } for  pid=1118 comm=ACED scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   53.238327][ T1119] netlink: 8 bytes leftover after parsing attributes in process `’'.
[   53.258851][   T28] audit: type=1400 audit(1750080653.936:231): avc:  denied  { nlmsg_read } for  pid=1118 comm=ACED scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   53.360491][  T308] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   53.371580][   T60] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[   53.379228][  T308] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   53.390065][  T308] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[   53.403229][  T308] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   53.412894][  T308] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   53.424993][  T308] usb 7-1: config 0 descriptor??
[   53.564486][ T1134] loop7: detected capacity change from 0 to 16
[   53.586219][ T1134] erofs: (device loop7): mounted with root inode @ nid 36.
[   53.590072][   T60] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   53.610723][   T60] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   53.619170][   T60] usb 9-1: Product: syz
[   53.623392][   T60] usb 9-1: Manufacturer: syz
[   53.628258][   T60] usb 9-1: SerialNumber: syz
[   53.777432][ T1088] usb 5-1: new full-speed USB device number 5 using dummy_hcd
[   53.836603][  T308] plantronics 0003:047F:FFFF.000B: No inputs registered, leaving
[   53.848892][  T308] plantronics 0003:047F:FFFF.000B: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0
[   53.947364][    T6] usb 8-1: new high-speed USB device number 4 using dummy_hcd
[   53.968464][ T1088] usb 5-1: config 0 has no interfaces?
[   53.974169][ T1088] usb 5-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58
[   53.983379][ T1088] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   53.992399][ T1088] usb 5-1: config 0 descriptor??
[   54.056298][ T1088] usb 7-1: USB disconnect, device number 5
[   54.138433][    T6] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   54.149534][    T6] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   54.160061][    T6] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[   54.173245][    T6] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   54.182693][    T6] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   54.196239][   T28] audit: type=1400 audit(1750080654.886:232): avc:  denied  { name_bind } for  pid=1140 comm="syz.5.278" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1
[   54.197136][    T6] usb 8-1: config 0 descriptor??
[   54.227664][   T24] usb 5-1: USB disconnect, device number 5
[   54.323591][ T1148] loop5: detected capacity change from 0 to 512
[   54.333852][ T1148] EXT4-fs (loop5): ea_inode feature is not supported for Hurd
[   54.358523][  T322] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[   54.368210][   T28] audit: type=1400 audit(1750080655.056:233): avc:  denied  { execute } for  pid=1147 comm="syz.5.281" path="/38/cpu.stat" dev="tmpfs" ino=225 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[   54.629996][    T6] plantronics 0003:047F:FFFF.000C: No inputs registered, leaving
[   54.639367][    T6] plantronics 0003:047F:FFFF.000C: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0
[   54.648017][   T60] cdc_ncm 9-1:1.0: MAC-Address: 42:42:42:42:42:42
[   54.658358][   T60] cdc_ncm 9-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048
[   54.665774][   T60] cdc_ncm 9-1:1.0: setting rx_max = 2048
[   54.861648][   T60] cdc_ncm 9-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.8-1, CDC NCM (NO ZLP), 42:42:42:42:42:42
[   54.875363][   T60] usb 9-1: USB disconnect, device number 2
[   54.881415][   T28] audit: type=1400 audit(1750080655.576:234): avc:  denied  { read } for  pid=142 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1
[   54.888063][   T60] cdc_ncm 9-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.8-1, CDC NCM (NO ZLP)
[   54.911642][   T28] audit: type=1400 audit(1750080655.576:235): avc:  denied  { search } for  pid=142 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   55.385308][ T1182] syz.5.285 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[   55.647381][   T60] usb 9-1: new high-speed USB device number 3 using dummy_hcd
[   55.687377][  T303] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[   55.828544][   T60] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   55.839644][   T60] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   55.849755][   T60] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[   55.862904][   T60] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   55.872082][   T60] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   55.877363][  T303] usb 5-1: Using ep0 maxpacket: 8
[   55.881563][   T60] usb 9-1: config 0 descriptor??
[   55.891503][  T303] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   55.901816][  T303] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2
[   55.910746][  T303] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   55.920584][  T303] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[   55.929670][  T303] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   55.939413][  T303] hub 5-1:1.0: bad descriptor, ignoring hub
[   55.945351][  T303] hub: probe of 5-1:1.0 failed with error -5
[   55.951580][  T303] cdc_wdm 5-1:1.0: skipping garbage
[   55.956817][  T303] cdc_wdm 5-1:1.0: skipping garbage
[   55.962109][  T303] cdc_wdm: probe of 5-1:1.0 failed with error -22
[   56.257494][  T303] usb 5-1: USB disconnect, device number 6
[   56.292958][   T60] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0
[   56.300861][   T60] plantronics 0003:047F:FFFF.000D: No inputs registered, leaving
[   56.309852][   T60] plantronics 0003:047F:FFFF.000D: hiddev97,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0
[   56.747762][  T308] usb 8-1: USB disconnect, device number 4
[   58.383344][   T24] usb 9-1: USB disconnect, device number 3
[   58.394894][ T1193] netem: incorrect gi model size
[   58.402173][   T28] kauditd_printk_skb: 13 callbacks suppressed
[   58.402189][   T28] audit: type=1400 audit(1750080659.096:249): avc:  denied  { read } for  pid=1190 comm="syz.7.290" name="file0" dev="incremental-fs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   58.426484][ T1193] netem: change failed
[   58.444851][ T1197] SELinux:  Context system_u:object_r:dhcpd_exec_t:s0 is not valid (left unmapped).
[   58.456329][   T28] audit: type=1400 audit(1750080659.096:250): avc:  denied  { open } for  pid=1190 comm="syz.7.290" path="/28/file0/file0" dev="incremental-fs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   58.456364][   T28] audit: type=1400 audit(1750080659.136:251): avc:  denied  { relabelfrom } for  pid=1196 comm="syz.4.292" name="" dev="pipefs" ino=20556 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1
[   58.456399][   T28] audit: type=1400 audit(1750080659.146:252): avc:  denied  { relabelto } for  pid=1196 comm="syz.4.292" name="" dev="pipefs" ino=20556 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=fifo_file permissive=1 trawcon="system_u:object_r:dhcpd_exec_t:s0"
[   58.664422][ T1211] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[   58.696820][ T1205] loop4: detected capacity change from 0 to 40427
[   58.707377][   T60] usb 7-1: new full-speed USB device number 6 using dummy_hcd
[   58.711829][ T1205] F2FS-fs (loop4): fault_injection options not supported
[   58.732976][ T1205] F2FS-fs (loop4): invalid crc value
[   58.751644][  T303] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[   58.768824][ T1205] F2FS-fs (loop4): Found nat_bits in checkpoint
[   58.814742][ T1205] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[   58.854304][  T472] bio_check_eod: 5 callbacks suppressed
[   58.854322][  T472] syz-executor: attempt to access beyond end of device
[   58.854322][  T472] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[   58.898441][   T60] usb 7-1: config 0 has an invalid interface number: 67 but max is 0
[   58.909825][   T60] usb 7-1: config 0 has no interface number 0
[   58.922442][   T60] usb 7-1: config 0 interface 67 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64
[   58.945717][   T60] usb 7-1: config 0 interface 67 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64
[   58.959050][  T303] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   58.970269][   T60] usb 7-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[   58.977360][  T303] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   58.988069][   T60] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   59.006262][   T60] usb 7-1: Product: syz
[   59.014892][   T60] usb 7-1: Manufacturer: syz
[   59.017358][  T303] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[   59.025339][   T60] usb 7-1: SerialNumber: syz
[   59.057751][   T60] usb 7-1: config 0 descriptor??
[   59.063363][  T303] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   59.067491][ T1195] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[   59.086367][ T1224] loop4: detected capacity change from 0 to 2048
[   59.087360][  T303] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   59.092928][ T1195] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[   59.118334][ T1224] EXT4-fs: Mount option(s) incompatible with ext2
[   59.126469][  T303] usb 6-1: config 0 descriptor??
[   59.137786][   T60] smsc95xx v2.0.0
[   59.244126][   T28] audit: type=1400 audit(1750080659.936:253): avc:  denied  { setattr } for  pid=1229 comm="syz.4.304" name="ptmx" dev="devtmpfs" ino=94 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ptmx_t tclass=chr_file permissive=1
[   59.346459][ T1195] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[   59.354329][ T1195] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[   59.497386][  T326] usb 8-1: new high-speed USB device number 5 using dummy_hcd
[   59.542838][  T303] plantronics 0003:047F:FFFF.000E: No inputs registered, leaving
[   59.557378][    T6] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[   59.565427][   T60] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[   59.576494][   T60] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[   59.576499][  T303] plantronics 0003:047F:FFFF.000E: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0
[   59.646131][ T1235] loop8: detected capacity change from 0 to 512
[   59.652955][ T1235] EXT4-fs: Ignoring removed i_version option
[   59.662125][ T1235] EXT4-fs (loop8): orphan cleanup on readonly fs
[   59.668829][ T1235] EXT4-fs error (device loop8): ext4_validate_block_bitmap:438: comm syz.8.306: bg 0: block 131: padding at end of block bitmap is not set
[   59.683417][ T1235] EXT4-fs (loop8): Remounting filesystem read-only
[   59.690166][ T1235] EXT4-fs error (device loop8) in ext4_mb_clear_bb:6170: Corrupt filesystem
[   59.698593][  T326] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   59.699596][ T1235] EXT4-fs (loop8): Remounting filesystem read-only
[   59.709965][  T326] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   59.716912][ T1235] EXT4-fs (loop8): 1 truncate cleaned up
[   59.726352][  T326] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[   59.732299][ T1235] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback.
[   59.745062][  T326] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   59.767346][    T6] usb 5-1: Using ep0 maxpacket: 32
[   59.774008][    T6] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   59.775086][ T1090] EXT4-fs (loop8): unmounting filesystem.
[   59.792348][    T6] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   59.802609][   T60] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[   59.802894][  T326] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   59.823722][   T60] smsc95xx: probe of 7-1:0.67 failed with error -71
[   59.834024][    T6] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[   59.834508][   T24] usb 6-1: USB disconnect, device number 5
[   59.852738][   T60] usb 7-1: USB disconnect, device number 6
[   59.858844][    T6] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   59.869125][  T326] usb 8-1: config 0 descriptor??
[   59.877286][    T6] usb 5-1: config 0 descriptor??
[   59.884027][    T6] hub 5-1:0.0: USB hub found
[   60.084265][    T6] hub 5-1:0.0: 1 port detected
[   60.127395][ T1088] usb 9-1: new high-speed USB device number 4 using dummy_hcd
[   60.277112][  T326] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0
[   60.284997][  T326] plantronics 0003:047F:FFFF.000F: No inputs registered, leaving
[   60.293406][    T6] hub 5-1:0.0: hub_hub_status failed (err = -71)
[   60.300316][    T6] hub 5-1:0.0: config failed, can't get hub status (err -71)
[   60.308610][  T326] plantronics 0003:047F:FFFF.000F: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0
[   60.308758][ T1088] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   60.322684][    T6] usbhid 5-1:0.0: can't add hid device: -71
[   60.332609][ T1088] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   60.346862][    T6] usbhid: probe of 5-1:0.0 failed with error -71
[   60.354261][ T1088] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[   60.388048][ T1088] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   60.398720][    T6] usb 5-1: USB disconnect, device number 7
[   60.405841][ T1088] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   60.430727][ T1088] usb 9-1: config 0 descriptor??
[   60.450074][ T1248] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[   60.457725][ T1248] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[   60.485302][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready
[   60.504552][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   60.525155][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready
[   60.540025][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   60.549471][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   60.568524][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   60.587281][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   60.602465][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   60.612488][   T28] audit: type=1400 audit(1750080661.306:254): avc:  denied  { watch } for  pid=1257 comm="syz.5.316" path="/47" dev="tmpfs" ino=268 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[   60.650019][   T28] audit: type=1400 audit(1750080661.346:255): avc:  denied  { setattr } for  pid=1257 comm="syz.5.316" name="file0" dev="incremental-fs" ino=274 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   60.762181][   T28] audit: type=1400 audit(1750080661.456:256): avc:  denied  { write } for  pid=1269 comm="syz.5.321" name="ip6_flowlabel" dev="proc" ino=4026532686 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1
[   60.843881][ T1088] plantronics 0003:047F:FFFF.0010: No inputs registered, leaving
[   60.868885][ T1088] plantronics 0003:047F:FFFF.0010: hiddev97,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0
[   60.901321][   T28] audit: type=1400 audit(1750080661.596:257): avc:  denied  { read } for  pid=1278 comm="syz.4.325" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[   60.926285][ T1279] binder: 1278:1279 ioctl c0306201 200000000640 returned -22
[   60.933943][    T6] usb 8-1: USB disconnect, device number 5
[   60.957424][   T28] audit: type=1400 audit(1750080661.616:258): avc:  denied  { open } for  pid=1278 comm="syz.4.325" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[   61.257553][  T303] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[   61.764918][   T24] usb 9-1: USB disconnect, device number 4
[   61.926145][ T1293] loop7: detected capacity change from 0 to 512
[   61.933535][ T1293] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[   61.944186][ T1293] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a80ce01c, mo2=0002]
[   61.952962][ T1293] System zones: 1-12
[   61.958232][ T1293] EXT4-fs (loop7): orphan cleanup on readonly fs
[   61.964742][ T1293] EXT4-fs error (device loop7): ext4_free_branches:1030: inode #11: comm syz.7.331: invalid indirect mapped block 12 (level 1)
[   61.986528][ T1293] EXT4-fs error (device loop7): ext4_free_branches:1030: inode #11: comm syz.7.331: invalid indirect mapped block 2 (level 2)
[   62.006506][ T1293] EXT4-fs (loop7): 1 truncate cleaned up
[   62.012870][ T1293] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[   62.107362][  T326] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[   62.298442][  T326] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   62.314947][  T326] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[   62.324704][  T326] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   62.344074][  T326] usb 6-1: config 0 descriptor??
[   62.447393][   T24] usb 7-1: new high-speed USB device number 7 using dummy_hcd
[   62.579022][ T1314] loop4: detected capacity change from 0 to 256
[   62.589754][ T1314] FAT-fs (loop4): bogus number of FAT sectors
[   62.596044][ T1314] FAT-fs (loop4): Can't find a valid FAT filesystem
[   62.629333][   T24] usb 7-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[   62.639782][   T24] usb 7-1: config 220 has 1 interface, different from the descriptor's value: 3
[   62.649092][   T24] usb 7-1: config 220 interface 0 has no altsetting 0
[   62.667165][   T24] usb 7-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[   62.676322][   T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   62.684369][   T24] usb 7-1: Product: syz
[   62.688606][   T24] usb 7-1: Manufacturer: syz
[   62.693222][   T24] usb 7-1: SerialNumber: syz
[   62.715206][  T776] EXT4-fs (loop7): unmounting filesystem.
[   62.747564][ T1316] loop7: detected capacity change from 0 to 1024
[   62.751245][  T326] keytouch 0003:0926:3333.0011: fixing up Keytouch IEC report descriptor
[   62.768112][ T1316] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e000c01c, mo2=0002]
[   62.768370][  T326] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0926:3333.0011/input/input5
[   62.788177][ T1316] System zones: 0-1, 3-36
[   62.799509][ T1316] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[   62.871199][  T326] keytouch 0003:0926:3333.0011: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0
[   62.900015][ T1296] process 'syz.6.332' launched './file0' with NULL argv: empty string added
[   62.941460][   T24] usb 7-1: Found UVC 0.00 device syz (8086:0b07)
[   62.951312][   T24] usb 7-1: No valid video chain found.
[   62.967660][   T24] usb 7-1: USB disconnect, device number 7
[   63.107381][   T60] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[   63.165551][  T326] usb 6-1: USB disconnect, device number 6
[   63.288459][   T60] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   63.299850][   T60] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   63.309786][   T60] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[   63.322888][   T60] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   63.332052][   T60] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   63.343915][   T60] usb 5-1: config 0 descriptor??
[   63.517384][    T6] usb 9-1: new high-speed USB device number 5 using dummy_hcd
[   63.708651][    T6] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   63.720868][ T1357] loop5: detected capacity change from 0 to 128
[   63.729910][    T6] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   63.747349][    T6] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   63.758283][   T60] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0
[   63.765019][ T1362] loop6: detected capacity change from 0 to 256
[   63.769310][   T60] plantronics 0003:047F:FFFF.0012: No inputs registered, leaving
[   63.773833][    T6] usb 9-1: Product: syz
[   63.781588][   T60] plantronics 0003:047F:FFFF.0012: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0
[   63.797106][ T1357] ext4 filesystem being mounted at /59/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   63.808352][    T6] usb 9-1: Manufacturer: syz
[   63.816206][   T28] kauditd_printk_skb: 11 callbacks suppressed
[   63.816221][   T28] audit: type=1400 audit(1750080664.506:270): avc:  denied  { create } for  pid=1356 comm="syz.5.358" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1
[   63.870798][    T6] usb 9-1: SerialNumber: syz
[   63.879062][   T28] audit: type=1400 audit(1750080664.546:271): avc:  denied  { read } for  pid=1356 comm="syz.5.358" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop5" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1
[   63.939281][   T28] audit: type=1400 audit(1750080664.636:272): avc:  denied  { mount } for  pid=1366 comm="syz.6.362" name="/" dev="configfs" ino=12965 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1
[   63.950587][ T1363] loop7: detected capacity change from 0 to 256
[   63.963213][   T28] audit: type=1400 audit(1750080664.636:273): avc:  denied  { search } for  pid=1366 comm="syz.6.362" name="/" dev="configfs" ino=12965 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[   63.983311][ T1363] FAT-fs (loop7): bogus number of FAT sectors
[   63.996926][   T28] audit: type=1400 audit(1750080664.636:274): avc:  denied  { read } for  pid=1366 comm="syz.6.362" name="/" dev="configfs" ino=12965 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[   64.010995][ T1363] FAT-fs (loop7): Can't find a valid FAT filesystem
[   64.024662][   T28] audit: type=1400 audit(1750080664.636:275): avc:  denied  { open } for  pid=1366 comm="syz.6.362" path="/" dev="configfs" ino=12965 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[   64.208508][ T1385] loop5: detected capacity change from 0 to 512
[   64.234784][ T1385] EXT4-fs: Ignoring removed mblk_io_submit option
[   64.249681][ T1385] EXT4-fs: Ignoring removed bh option
[   64.255651][ T1385] EXT4-fs (loop5): Test dummy encryption mode enabled
[   64.262816][ T1385] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[   64.292299][ T1385] EXT4-fs (loop5): 1 truncate cleaned up
[   64.312171][   T28] audit: type=1400 audit(1750080665.006:276): avc:  denied  { setopt } for  pid=1392 comm="syz.7.370" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   64.334315][   T24] usb 5-1: USB disconnect, device number 9
[   64.341404][ T1385] EXT4-fs (loop5): shut down requested (0)
[   64.347377][   T28] audit: type=1400 audit(1750080665.006:277): avc:  denied  { getopt } for  pid=1392 comm="syz.7.370" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   64.392830][ T1398] loop7: detected capacity change from 0 to 1024
[   64.400055][ T1398] SELinux: security_context_str_to_sid (user_u) failed with errno=-22
[   64.424466][   T28] audit: type=1400 audit(1750080665.116:278): avc:  denied  { write } for  pid=1400 comm="syz.5.374" name="001" dev="devtmpfs" ino=185 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[   64.452545][ T1401] loop5: detected capacity change from 0 to 512
[   64.469917][ T1401] ext4 filesystem being mounted at /65/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   64.471287][ T1239] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[   64.532749][   T28] audit: type=1400 audit(1750080665.226:279): avc:  denied  { read write } for  pid=1410 comm="syz.7.379" name="uhid" dev="devtmpfs" ino=267 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[   64.558851][  T326] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0
[   64.577164][  T326] hid-generic 0000:0000:0000.0013: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[   64.763448][ T1431] loop6: detected capacity change from 0 to 512
[   64.772475][ T1433] loop5: detected capacity change from 0 to 512
[   64.782202][ T1433] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended
[   64.797828][ T1431] EXT4-fs error (device loop6): ext4_orphan_get:1426: comm syz.6.387: bad orphan inode 13
[   64.808624][ T1431] ext4_test_bit(bit=12, block=4) = 1
[   64.827423][ T1431] is_bad_inode(inode)=0
[   64.834800][ T1431] NEXT_ORPHAN(inode)=0
[   64.840659][ T1433] EXT4-fs error (device loop5): ext4_acquire_dquot:6789: comm syz.5.389: Failed to acquire dquot type 0
[   64.843429][ T1431] max_ino=32
[   64.857661][ T1431] i_nlink=1
[   64.867094][ T1433] EXT4-fs warning (device loop5): ext4_update_dynamic_rev:1087: updating to rev 1 because of new feature flag, running e2fsck is recommended
[   64.872244][ T1431] EXT4-fs mount: 7 callbacks suppressed
[   64.872268][ T1431] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[   64.894262][ T1446] input: syz1 as /devices/virtual/input/input7
[   64.902229][ T1433] EXT4-fs (loop5): 1 truncate cleaned up
[   64.909092][ T1433] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[   64.924212][ T1431] EXT4-fs warning (device loop6): dx_probe:833: inode #2: comm syz.6.387: Unrecognised inode hash code 20
[   64.931292][    T6] cdc_ncm 9-1:1.0: MAC-Address: 42:42:42:42:42:42
[   64.936066][ T1431] EXT4-fs warning (device loop6): dx_probe:966: inode #2: comm syz.6.387: Corrupt directory, running e2fsck is recommended
[   64.956218][ T1431] EXT4-fs warning (device loop6): dx_probe:833: inode #2: comm syz.6.387: Unrecognised inode hash code 20
[   64.967350][    T6] cdc_ncm 9-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048
[   64.967919][ T1431] EXT4-fs warning (device loop6): dx_probe:966: inode #2: comm syz.6.387: Corrupt directory, running e2fsck is recommended
[   64.974973][    T6] cdc_ncm 9-1:1.0: setting rx_max = 2048
[   64.988144][ T1431] EXT4-fs error (device loop6): ext4_xattr_ibody_find:2195: inode #15: comm syz.6.387: corrupted in-inode xattr
[   65.020553][ T1450] Invalid ELF header len 8
[   65.025292][ T1431] EXT4-fs warning (device loop6): dx_probe:833: inode #2: comm syz.6.387: Unrecognised inode hash code 20
[   65.047636][ T1431] EXT4-fs warning (device loop6): dx_probe:966: inode #2: comm syz.6.387: Corrupt directory, running e2fsck is recommended
[   65.061149][ T1431] EXT4-fs error (device loop6): ext4_xattr_ibody_find:2195: inode #15: comm syz.6.387: corrupted in-inode xattr
[   65.086457][ T1455] EXT4-fs warning (device loop6): dx_probe:833: inode #2: comm syz.6.387: Unrecognised inode hash code 20
[   65.097977][ T1455] EXT4-fs warning (device loop6): dx_probe:966: inode #2: comm syz.6.387: Corrupt directory, running e2fsck is recommended
[   65.118614][ T1455] EXT4-fs error (device loop6): ext4_xattr_ibody_find:2195: inode #15: comm syz.6.387: corrupted in-inode xattr
[   65.137445][    T6] cdc_ncm 9-1:1.0: setting tx_max = 184
[   65.143644][ T1431] EXT4-fs warning (device loop6): dx_probe:833: inode #2: comm syz.6.387: Unrecognised inode hash code 20
[   65.156890][    T6] cdc_ncm 9-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.8-1, CDC NCM (NO ZLP), 42:42:42:42:42:42
[   65.167883][ T1431] EXT4-fs warning (device loop6): dx_probe:966: inode #2: comm syz.6.387: Corrupt directory, running e2fsck is recommended
[   65.168120][ T1431] EXT4-fs error (device loop6): ext4_find_dest_de:2115: inode #2: block 13: comm syz.6.387: bad entry in directory: rec_len % 4 != 0 - offset=108, inode=4294901777, rec_len=65535, size=1024 fake=0
[   65.205845][    T6] usb 9-1: USB disconnect, device number 5
[   65.213256][    T6] cdc_ncm 9-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.8-1, CDC NCM (NO ZLP)
[   65.227635][  T669] EXT4-fs (loop5): unmounting filesystem.
[   65.242938][  T720] EXT4-fs (loop6): unmounting filesystem.
[   65.278831][ T1466] loop5: detected capacity change from 0 to 256
[   65.317032][ T1466] exFAT-fs (loop5): failed to load upcase table (idx : 0x00011e9c, chksum : 0xc4be4e3b, utbl_chksum : 0xe619d30d)
[   65.597363][   T19] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[   65.781898][   T19] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   65.796398][   T19] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   65.839508][   T19] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[   65.852848][   T19] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   65.862150][   T19] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   65.877541][   T19] usb 5-1: config 0 descriptor??
[   65.917201][ T1538] loop8: detected capacity change from 0 to 256
[   65.933064][ T1538] exfat: Deprecated parameter 'utf8'
[   65.951661][ T1538] exfat: Deprecated parameter 'utf8'
[   65.961221][ T1538] exFAT-fs (loop8): failed to load upcase table (idx : 0x00011f41, chksum : 0x3150c3aa, utbl_chksum : 0xe619d30d)
[   66.047063][ T1551] capability: warning: `syz.8.423' uses 32-bit capabilities (legacy support in use)
[   66.145825][ T1555] netlink: 4 bytes leftover after parsing attributes in process `syz.6.426'.
[   66.298288][   T19] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0
[   66.316166][   T19] plantronics 0003:047F:FFFF.0014: No inputs registered, leaving
[   66.341507][   T19] plantronics 0003:047F:FFFF.0014: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0
[   66.399490][ T1581] netlink: 'syz.7.438': attribute type 4 has an invalid length.
[   66.411345][ T1581] netlink: 'syz.7.438': attribute type 4 has an invalid length.
[   66.422116][ T1581] syz.7.438 (1581) used greatest stack depth: 20704 bytes left
[   66.637416][ T1110] usb 7-1: new high-speed USB device number 8 using dummy_hcd
[   66.818577][ T1110] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   66.820014][    T6] usb 5-1: USB disconnect, device number 10
[   66.831321][ T1110] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3
[   66.837362][   T19] usb 8-1: new high-speed USB device number 6 using dummy_hcd
[   66.870108][ T1110] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[   66.957345][ T1110] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[   66.965391][ T1110] usb 7-1: SerialNumber: syz
[   67.037372][   T19] usb 8-1: Using ep0 maxpacket: 16
[   68.257733][   T19] usb 8-1: device descriptor read/all, error -71
[   68.870559][ T1110] usb 7-1: can't set config #1, error -71
[   68.876998][ T1110] usb 7-1: USB disconnect, device number 8
[   71.877069][ T1596] input: syz0 as /devices/virtual/input/input8
[   71.902799][ T1598] incfs: Options parsing error. -22
[   71.931768][ T1598] incfs: mount failed -22
[   71.995594][ T1611] IPv6: Can't replace route, no match found
[   72.069222][   T28] kauditd_printk_skb: 25 callbacks suppressed
[   72.069239][   T28] audit: type=1400 audit(1750080672.756:303): avc:  denied  { create } for  pid=1618 comm="syz.7.456" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   72.101880][   T28] audit: type=1400 audit(1750080672.756:304): avc:  denied  { write } for  pid=1618 comm="syz.7.456" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   72.209951][ T1631] loop6: detected capacity change from 0 to 16
[   72.217357][   T19] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[   72.249572][ T1631] erofs: (device loop6): erofs_read_superblock: invalid sb_extslots 4160 (more than a fs block)
[   72.360891][ T1635] input: syz0 as /devices/virtual/input/input10
[   72.397583][   T24] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[   72.407338][   T19] usb 5-1: Using ep0 maxpacket: 16
[   72.414034][   T19] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 8
[   72.472128][   T19] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00
[   72.491674][   T19] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   72.504226][   T19] usb 5-1: Product: syz
[   72.508861][   T19] usb 5-1: Manufacturer: syz
[   72.513816][   T19] usb 5-1: SerialNumber: syz
[   72.527902][   T19] usb 5-1: config 0 descriptor??
[   72.541677][   T19] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected
[   72.554437][ T1644] IPv6: Can't replace route, no match found
[   72.555197][   T19] usb 5-1: Detected FT232R
[   72.597392][   T24] usb 6-1: Using ep0 maxpacket: 16
[   72.603663][   T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   72.625069][   T24] usb 6-1: New USB device found, idVendor=056a, idProduct=0037, bcdDevice= 0.00
[   72.631970][ T1647] loop6: detected capacity change from 0 to 8192
[   72.654725][ T1647] syz.6.466: attempt to access beyond end of device
[   72.654725][ T1647] loop6: rw=0, sector=57847, nr_sectors = 1 limit=8192
[   72.655449][   T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   72.677000][ T1647] Buffer I/O error on dev loop6, logical block 57847, async page read
[   72.691554][   T24] usb 6-1: config 0 descriptor??
[   72.696772][ T1647] syz.6.466: attempt to access beyond end of device
[   72.696772][ T1647] loop6: rw=0, sector=57847, nr_sectors = 1 limit=8192
[   72.712029][ T1647] Buffer I/O error on dev loop6, logical block 57847, async page read
[   72.725979][ T1647] syz.6.466: attempt to access beyond end of device
[   72.725979][ T1647] loop6: rw=0, sector=57847, nr_sectors = 1 limit=8192
[   72.740900][ T1647] Buffer I/O error on dev loop6, logical block 57847, async page read
[   72.752325][   T19] ftdi_sio ttyUSB0: Unable to read latency timer: -32
[   72.752370][ T1647] syz.6.466: attempt to access beyond end of device
[   72.752370][ T1647] loop6: rw=0, sector=57847, nr_sectors = 1 limit=8192
[   72.772643][ T1647] Buffer I/O error on dev loop6, logical block 57847, async page read
[   72.781182][ T1647] syz.6.466: attempt to access beyond end of device
[   72.781182][ T1647] loop6: rw=0, sector=57847, nr_sectors = 1 limit=8192
[   72.794649][ T1647] Buffer I/O error on dev loop6, logical block 57847, async page read
[   72.802961][ T1647] syz.6.466: attempt to access beyond end of device
[   72.802961][ T1647] loop6: rw=0, sector=57847, nr_sectors = 1 limit=8192
[   72.816555][ T1647] Buffer I/O error on dev loop6, logical block 57847, async page read
[   72.824871][ T1647] syz.6.466: attempt to access beyond end of device
[   72.824871][ T1647] loop6: rw=0, sector=57847, nr_sectors = 1 limit=8192
[   72.838341][ T1647] Buffer I/O error on dev loop6, logical block 57847, async page read
[   72.846611][ T1647] syz.6.466: attempt to access beyond end of device
[   72.846611][ T1647] loop6: rw=0, sector=57847, nr_sectors = 1 limit=8192
[   72.860050][ T1647] Buffer I/O error on dev loop6, logical block 57847, async page read
[   72.868345][ T1647] syz.6.466: attempt to access beyond end of device
[   72.868345][ T1647] loop6: rw=0, sector=57847, nr_sectors = 1 limit=8192
[   72.881942][ T1647] Buffer I/O error on dev loop6, logical block 57847, async page read
[   72.890253][ T1647] syz.6.466: attempt to access beyond end of device
[   72.890253][ T1647] loop6: rw=0, sector=57847, nr_sectors = 1 limit=8192
[   72.903751][ T1647] Buffer I/O error on dev loop6, logical block 57847, async page read
[   72.966019][   T19] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0
[   73.115051][   T24] wacom 0003:056A:0037.0015: hidraw0: USB HID v0.05 Device [HID 056a:0037] on usb-dummy_hcd.5-1/input0
[   73.184337][    T6] usb 5-1: USB disconnect, device number 11
[   73.196819][    T6] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[   73.218214][    T6] ftdi_sio 5-1:0.0: device disconnected
[   73.327261][   T24] usb 6-1: USB disconnect, device number 7
[   73.353175][ T1658] loop7: detected capacity change from 0 to 128
[   73.438692][ T1664] input: syz0 as /devices/virtual/input/input14
[   73.508241][   T28] audit: type=1400 audit(1750080674.206:305): avc:  denied  { watch watch_reads } for  pid=1667 comm="syz.7.477" path="/72/file1" dev="tmpfs" ino=397 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[   74.527453][ T1672] Illegal XDP return value 4162770706 on prog  (id 204) dev N/A, expect packet loss!
[   74.566212][ T1685] netlink: 4 bytes leftover after parsing attributes in process `syz.6.483'.
[   74.697559][   T28] audit: type=1400 audit(1750080675.396:306): avc:  denied  { setopt } for  pid=1701 comm="syz.8.491" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[   74.747694][   T28] audit: type=1400 audit(1750080675.416:307): avc:  denied  { map } for  pid=1701 comm="syz.8.491" path="socket:[22700]" dev="sockfs" ino=22700 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[   74.790914][   T28] audit: type=1400 audit(1750080675.416:308): avc:  denied  { read accept } for  pid=1701 comm="syz.8.491" path="socket:[22700]" dev="sockfs" ino=22700 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[   74.894034][ T1697] loop6: detected capacity change from 0 to 40427
[   74.911653][ T1697] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12
[   74.927409][ T1697] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock
[   74.966250][ T1698] loop7: detected capacity change from 0 to 40427
[   74.973881][ T1697] F2FS-fs (loop6): Found nat_bits in checkpoint
[   74.980743][ T1698] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12
[   74.987615][ T1110] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[   74.988920][ T1698] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock
[   75.015163][ T1698] F2FS-fs (loop7): invalid crc value
[   75.036660][ T1698] F2FS-fs (loop7): Found nat_bits in checkpoint
[   75.053461][ T1697] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0
[   75.067397][ T1697] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[   75.094594][   T28] audit: type=1400 audit(1750080675.786:309): avc:  denied  { read open } for  pid=1696 comm="syz.6.487" path="/80/bus/bus" dev="loop6" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   75.121064][   T28] audit: type=1400 audit(1750080675.816:310): avc:  denied  { write } for  pid=1696 comm="syz.6.487" name="bus" dev="loop6" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   75.144171][ T1698] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0
[   75.151460][ T1698] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5
[   75.180163][ T1698] F2FS-fs (loop7): Inconsistent error blkaddr:5663, sit bitmap:0
[   75.188046][ T1698] CPU: 1 PID: 1698 Comm: syz.7.489 Not tainted 6.1.138-syzkaller-00009-g6246d345f550 #0
[   75.197809][ T1698] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[   75.207905][ T1698] Call Trace:
[   75.211214][ T1698]  <TASK>
[   75.214167][ T1698]  __dump_stack+0x21/0x24
[   75.218544][ T1698]  dump_stack_lvl+0xee/0x150
[   75.223176][ T1698]  ? __cfi_dump_stack_lvl+0x8/0x8
[   75.228244][ T1698]  ? __cfi_f2fs_get_dnode_of_data+0x10/0x10
[   75.234175][ T1698]  dump_stack+0x15/0x24
[   75.238373][ T1698]  __f2fs_is_valid_blkaddr+0xce6/0x1460
[   75.243956][ T1698]  f2fs_is_valid_blkaddr+0x23/0x30
[   75.249111][ T1698]  f2fs_map_blocks+0xc93/0x3a60
[   75.254014][ T1698]  ? __cfi_f2fs_map_blocks+0x10/0x10
[   75.259357][ T1698]  ? xas_start+0x31e/0x3e0
[   75.263807][ T1698]  ? xas_load+0x390/0x3b0
[   75.268173][ T1698]  ? xa_load+0xad/0xd0
[   75.272279][ T1698]  f2fs_mpage_readpages+0xa3a/0x1b70
[   75.277597][ T1698]  ? cgroup_rstat_updated+0xf5/0x370
[   75.282933][ T1698]  ? dquot_release_reservation_block+0xa0/0xa0
[   75.289123][ T1698]  ? cgroup_rstat_updated+0xf5/0x370
[   75.294467][ T1698]  ? xas_nomem+0x6b/0x1f0
[   75.298847][ T1698]  f2fs_readahead+0xfc/0x240
[   75.303469][ T1698]  ? __cfi_f2fs_readahead+0x10/0x10
[   75.308698][ T1698]  read_pages+0x1b0/0xdd0
[   75.313059][ T1698]  ? __cfi___filemap_add_folio+0x10/0x10
[   75.318730][ T1698]  ? page_cache_ra_unbounded+0x720/0x720
[   75.324399][ T1698]  ? folio_add_lru+0x260/0x390
[   75.329204][ T1698]  ? filemap_add_folio+0x105/0x150
[   75.334356][ T1698]  page_cache_ra_unbounded+0x5d1/0x720
[   75.340030][ T1698]  ? __cfi_page_cache_ra_unbounded+0x10/0x10
[   75.346045][ T1698]  ? do_futex+0x2dc/0x420
[   75.350418][ T1698]  ? putname+0x111/0x160
[   75.354712][ T1698]  force_page_cache_ra+0x2c4/0x320
[   75.359921][ T1698]  generic_fadvise+0x3f8/0x6f0
[   75.364722][ T1698]  ? __cfi_generic_fadvise+0x10/0x10
[   75.370047][ T1698]  ? __fdget+0x19c/0x220
[   75.374330][ T1698]  __x64_sys_fadvise64+0x14a/0x190
[   75.379481][ T1698]  x64_sys_call+0x863/0x9a0
[   75.384024][ T1698]  do_syscall_64+0x4c/0xa0
[   75.388477][ T1698]  ? clear_bhb_loop+0x15/0x70
[   75.393184][ T1698]  ? clear_bhb_loop+0x15/0x70
[   75.397892][ T1698]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   75.403846][ T1698] RIP: 0033:0x7f08eeb8e929
[   75.408282][ T1698] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   75.427926][ T1698] RSP: 002b:00007f08efa7a038 EFLAGS: 00000246 ORIG_RAX: 00000000000000dd
[   75.436383][ T1698] RAX: ffffffffffffffda RBX: 00007f08eedb5fa0 RCX: 00007f08eeb8e929
[   75.444386][ T1698] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005
[   75.452384][ T1698] RBP: 00007f08eec10b39 R08: 0000000000000000 R09: 0000000000000000
[   75.460387][ T1698] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000
[   75.468385][ T1698] R13: 0000000000000000 R14: 00007f08eedb5fa0 R15: 00007ffe61c38bb8
[   75.476393][ T1698]  </TASK>
[   75.485137][ T1110] usb 5-1: Using ep0 maxpacket: 16
[   75.492362][ T1110] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   75.508268][ T1110] usb 5-1: New USB device found, idVendor=056a, idProduct=0037, bcdDevice= 0.00
[   75.517849][ T1110] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   75.547743][ T1110] usb 5-1: config 0 descriptor??
[   75.772399][ T1741] loop6: detected capacity change from 0 to 2048
[   75.789823][ T1741] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[   75.808607][ T1741] SELinux:  Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped).
[   75.818556][   T28] audit: type=1400 audit(1750080676.516:311): avc:  denied  { relabelto } for  pid=1740 comm="syz.6.504" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0"
[   75.818624][ T1741] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[   75.870018][  T720] EXT4-fs (loop6): unmounting filesystem.
[   75.887762][ T1749] usb usb8: usbfs: process 1749 (syz.6.505) did not claim interface 0 before use
[   75.918717][ T1752] loop6: detected capacity change from 0 to 128
[   75.924325][ T1754] loop7: detected capacity change from 0 to 512
[   75.934661][ T1754] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[   75.971865][ T1754] EXT4-fs error (device loop7): ext4_do_update_inode:5255: inode #3: comm syz.7.507: corrupted inode contents
[   75.987073][ T1110] wacom 0003:056A:0037.0016: hidraw0: USB HID v0.05 Device [HID 056a:0037] on usb-dummy_hcd.4-1/input0
[   75.987756][ T1754] EXT4-fs error (device loop7): ext4_dirty_inode:6120: inode #3: comm syz.7.507: mark_inode_dirty error
[   76.009648][    T6] usb 6-1: new full-speed USB device number 8 using dummy_hcd
[   76.055762][   T28] audit: type=1400 audit(1750080676.746:312): avc:  denied  { setopt } for  pid=1761 comm="syz.6.510" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[   76.056821][ T1754] EXT4-fs error (device loop7): ext4_do_update_inode:5255: inode #3: comm syz.7.507: corrupted inode contents
[   76.095614][ T1754] EXT4-fs error (device loop7): __ext4_ext_dirty:202: inode #3: comm syz.7.507: mark_inode_dirty error
[   76.130914][ T1754] EXT4-fs error (device loop7): ext4_acquire_dquot:6789: comm syz.7.507: Failed to acquire dquot type 0
[   76.157893][ T1754] EXT4-fs error (device loop7): ext4_do_update_inode:5255: inode #16: comm syz.7.507: corrupted inode contents
[   76.170202][ T1768] loop8: detected capacity change from 0 to 1024
[   76.177251][ T1768] EXT4-fs: Ignoring removed orlov option
[   76.183585][ T1768] EXT4-fs: Ignoring removed nomblk_io_submit option
[   76.190311][ T1754] EXT4-fs error (device loop7): ext4_dirty_inode:6120: inode #16: comm syz.7.507: mark_inode_dirty error
[   76.208667][    T6] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[   76.208680][ T1110] usb 5-1: USB disconnect, device number 12
[   76.223875][ T1754] EXT4-fs error (device loop7): ext4_do_update_inode:5255: inode #16: comm syz.7.507: corrupted inode contents
[   76.225648][    T6] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   76.238308][ T1754] EXT4-fs error (device loop7): __ext4_ext_dirty:202: inode #16: comm syz.7.507: mark_inode_dirty error
[   76.248171][    T6] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   76.259979][ T1754] EXT4-fs error (device loop7): ext4_do_update_inode:5255: inode #16: comm syz.7.507: corrupted inode contents
[   76.272195][    T6] usb 6-1: New USB device found, idVendor=1b96, idProduct=0009, bcdDevice= 0.00
[   76.284017][ T1754] EXT4-fs error (device loop7) in ext4_orphan_del:305: Corrupt filesystem
[   76.293683][    T6] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   76.308889][ T1768] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none.
[   76.319848][    T6] usb 6-1: config 0 descriptor??
[   76.325125][ T1754] EXT4-fs error (device loop7): ext4_do_update_inode:5255: inode #16: comm syz.7.507: corrupted inode contents
[   76.345157][ T1754] EXT4-fs error (device loop7): ext4_truncate:4314: inode #16: comm syz.7.507: mark_inode_dirty error
[   76.362107][ T1754] EXT4-fs error (device loop7) in ext4_process_orphan:347: Corrupt filesystem
[   76.376321][ T1754] EXT4-fs (loop7): 1 truncate cleaned up
[   76.383020][ T1754] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[   76.392115][ T1754] ext4 filesystem being mounted at /78/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   76.422398][ T1090] EXT4-fs (loop8): unmounting filesystem.
[   76.437964][  T776] EXT4-fs (loop7): unmounting filesystem.
[   76.688892][ T1790] loop7: detected capacity change from 0 to 40427
[   76.705622][ T1790] F2FS-fs (loop7): invalid crc value
[   76.738241][ T1790] F2FS-fs (loop7): Found nat_bits in checkpoint
[   76.748928][    T6] ntrig 0003:1B96:0009.0017: unknown main item tag 0x0
[   76.755849][    T6] ntrig 0003:1B96:0009.0017: unknown main item tag 0x0
[   76.757434][   T60] usb 9-1: new high-speed USB device number 6 using dummy_hcd
[   76.778101][    T6] ntrig 0003:1B96:0009.0017: unknown main item tag 0x0
[   76.798199][ T1790] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e4
[   76.817711][    T6] ntrig 0003:1B96:0009.0017: unknown main item tag 0x0
[   76.829802][    T6] ntrig 0003:1B96:0009.0017: unknown main item tag 0x0
[   76.845563][    T6] ntrig 0003:1B96:0009.0017: hidraw0: USB HID v0.00 Device [HID 1b96:0009] on usb-dummy_hcd.5-1/input0
[   76.869977][ T1819] loop4: detected capacity change from 0 to 16
[   76.878782][ T1819] erofs: (device loop4): mounted with root inode @ nid 36.
[   76.890722][ T1819] erofs: (device loop4): erofs_find_target_block: corrupted dir block 0 @ nid 36
[   76.948714][    T6] ntrig 0003:1B96:0009.0017: Firmware version: 7.12.10.0.6 (f1be 0e40)
[   76.963303][   T60] usb 9-1: Using ep0 maxpacket: 8
[   76.971154][   T60] usb 9-1: config 179 has an invalid interface number: 65 but max is 0
[   76.983512][   T60] usb 9-1: config 179 has no interface number 0
[   77.001808][   T60] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[   77.034076][   T60] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[   77.060237][   T60] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[   77.071758][   T60] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[   77.087498][   T60] usb 9-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[   77.095413][ T1836] loop7: detected capacity change from 0 to 256
[   77.115538][   T60] usb 9-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[   77.121023][ T1836] exFAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   77.124983][   T60] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   77.141004][ T1836] exFAT-fs (loop7): Medium has reported failures. Some data may be lost.
[   77.148204][ T1786] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22
[   77.153748][ T1836] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[   77.182585][   T60] usb 6-1: USB disconnect, device number 8
[   77.194718][   T28] kauditd_printk_skb: 8 callbacks suppressed
[   77.194733][   T28] audit: type=1400 audit(1750080677.886:319): avc:  denied  { write } for  pid=1833 comm="syz.7.541" name="file1" dev="loop7" ino=1048627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   77.195054][ T1836] exFAT-fs (loop7): hint_cluster is invalid (17)
[   77.248644][   T28] audit: type=1400 audit(1750080677.946:320): avc:  denied  { setopt } for  pid=1837 comm="syz.7.542" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   77.297425][    T6] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[   77.374037][ T1088] input: Generic X-Box pad as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:179.65/input/input18
[   77.384763][ T1843] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[   77.437364][   T24] usb 7-1: new high-speed USB device number 9 using dummy_hcd
[   77.488424][    T6] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   77.499944][    T6] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   77.510155][    T6] usb 5-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00
[   77.519795][    T6] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   77.537624][    T6] usb 5-1: config 0 descriptor??
[   77.574819][ T1786] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   77.583762][   T28] audit: type=1400 audit(1750080678.276:321): avc:  denied  { ioctl } for  pid=1849 comm="syz.7.547" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=24075 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[   77.605763][ T1786] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   77.647431][   T24] usb 7-1: Using ep0 maxpacket: 16
[   77.654795][   T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   77.666558][   T24] usb 7-1: New USB device found, idVendor=056a, idProduct=0037, bcdDevice= 0.00
[   77.675890][   T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   77.685241][   T24] usb 7-1: config 0 descriptor??
[   77.737465][ T1861] loop5: detected capacity change from 0 to 512
[   77.747741][ T1863] loop7: detected capacity change from 0 to 512
[   77.765603][ T1863] EXT4-fs error (device loop7): ext4_xattr_inode_iget:404: comm syz.7.553: inode #1: comm syz.7.553: iget: illegal inode #
[   77.779019][ T1863] EXT4-fs error (device loop7): ext4_xattr_inode_iget:409: comm syz.7.553: error while reading EA inode 1 err=-117
[   77.781764][ T1861] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[   77.792530][ T1863] EXT4-fs (loop7): 1 orphan inode deleted
[   77.800304][ T1861] ext4 filesystem being mounted at /89/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   77.806166][ T1863] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none.
[   77.827117][ T1088] usb 9-1: USB disconnect, device number 6
[   77.832985][ T1861] EXT4-fs error (device loop5): ext4_do_update_inode:5255: inode #2: comm syz.5.552: corrupted inode contents
[   77.833088][    C1] xpad 9-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[   77.853243][    C1] xpad 9-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[   77.863687][ T1861] EXT4-fs error (device loop5): ext4_dirty_inode:6120: inode #2: comm syz.5.552: mark_inode_dirty error
[   77.876039][   T28] audit: type=1400 audit(1750080678.566:322): avc:  denied  { create } for  pid=1862 comm="syz.7.553" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1
[   77.888361][ T1861] EXT4-fs error (device loop5): ext4_do_update_inode:5255: inode #2: comm syz.5.552: corrupted inode contents
[   77.900640][   T28] audit: type=1400 audit(1750080678.566:323): avc:  denied  { unlink } for  pid=1862 comm="syz.7.553" name="bus" dev="loop7" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1
[   77.910467][  T776] EXT4-fs (loop7): unmounting filesystem.
[   77.930436][ T1861] EXT4-fs error (device loop5): __ext4_ext_dirty:202: inode #2: comm syz.5.552: mark_inode_dirty error
[   77.955671][    T6] hid-steam 0003:28DE:1142.0018: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.4-1/input0
[   77.958032][ T1870] netlink: 'syz.7.554': attribute type 4 has an invalid length.
[   77.973697][    T6] hid-steam 0003:28DE:1142.0019: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.4-1/input0
[   77.981040][ T1861] EXT4-fs error (device loop5): ext4_do_update_inode:5255: inode #2: comm syz.5.552: corrupted inode contents
[   77.997691][ T1861] EXT4-fs error (device loop5): ext4_dirty_inode:6120: inode #2: comm syz.5.552: mark_inode_dirty error
[   78.000357][ T1870] netlink: 'syz.7.554': attribute type 4 has an invalid length.
[   78.009703][ T1861] EXT4-fs error (device loop5): ext4_do_update_inode:5255: inode #2: comm syz.5.552: corrupted inode contents
[   78.031880][   T28] audit: type=1400 audit(1750080678.726:324): avc:  denied  { rename } for  pid=1860 comm="syz.5.552" name="bus" dev="loop5" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   78.047411][    T6] hid-steam 0003:28DE:1142.0018: Steam wireless receiver connected
[   78.059039][   T28] audit: type=1400 audit(1750080678.736:325): avc:  denied  { rename } for  pid=1860 comm="syz.5.552" name="file0" dev="loop5" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1
[   78.085316][  T669] EXT4-fs (loop5): unmounting filesystem.
[   78.092593][   T28] audit: type=1400 audit(1750080678.736:326): avc:  denied  { unlink } for  pid=1860 comm="syz.5.552" name="bus" dev="loop5" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   78.123551][   T24] wacom 0003:056A:0037.001A: hidraw1: USB HID v0.05 Device [HID 056a:0037] on usb-dummy_hcd.6-1/input0
[   78.144488][ T1878] loop5: detected capacity change from 0 to 128
[   78.162688][   T28] audit: type=1400 audit(1750080678.736:327): avc:  denied  { read } for  pid=1871 comm="syz.7.555" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   78.189564][ T1878] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[   78.205067][ T1878] ext4 filesystem being mounted at /91/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   78.239218][  T669] EXT4-fs (loop5): unmounting filesystem.
[   78.274998][ T1882] loop5: detected capacity change from 0 to 128
[   78.301252][ T1882] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[   78.310085][ T1882] ext4 filesystem being mounted at /92/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[   78.354532][ T1088] usb 7-1: USB disconnect, device number 9
[   78.362304][  T669] EXT4-fs (loop5): unmounting filesystem.
[   78.390673][ T1887] loop8: detected capacity change from 0 to 256
[   78.402945][ T1887] exFAT-fs (loop8): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[   78.420422][   T28] audit: type=1400 audit(1750080679.116:328): avc:  denied  { remove_name } for  pid=1886 comm="syz.8.560" name="file1" dev="loop8" ino=1048633 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   78.870590][ T1909] loop6: detected capacity change from 0 to 1024
[   78.881189][ T1909] EXT4-fs: Ignoring removed nobh option
[   78.887403][ T1909] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   78.914946][ T1909] EXT4-fs error (device loop6): ext4_orphan_get:1426: comm syz.6.570: bad orphan inode 32767
[   78.925795][ T1909] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[   79.091818][  T720] EXT4-fs (loop6): unmounting filesystem.
[   79.127115][ T1922] loop6: detected capacity change from 0 to 512
[   79.153551][ T1922] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[   79.153638][ T1918] SELinux: failed to load policy
[   79.163264][ T1922] ext4 filesystem being mounted at /106/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   79.178886][ T1922] EXT4-fs (loop6): unmounting filesystem.
[   79.378525][ T1944] sch_fq: defrate 0 ignored.
[   79.452857][ T1953] loop6: detected capacity change from 0 to 512
[   79.466241][ T1953] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[   79.492731][ T1953] EXT4-fs (loop6): 1 truncate cleaned up
[   79.503855][ T1953] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[   79.524074][  T720] EXT4-fs (loop6): unmounting filesystem.
[   79.575749][ T1967] loop8: detected capacity change from 0 to 1024
[   79.614266][ T1967] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none.
[   79.666656][ T1090] EXT4-fs (loop8): unmounting filesystem.
[   79.925095][ T2000] loop8: detected capacity change from 0 to 40427
[   79.932341][   T24] usb 5-1: USB disconnect, device number 13
[   79.938338][ T2000] F2FS-fs (loop8): Invalid log_blocksize (268), supports only 12
[   79.946093][ T2000] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock
[   79.955142][ T2000] F2FS-fs (loop8): invalid crc value
[   79.965689][   T24] hid-steam 0003:28DE:1142.0018: Steam wireless receiver disconnected
[   79.990175][ T2000] F2FS-fs (loop8): Found nat_bits in checkpoint
[   80.043233][ T2000] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0
[   80.050366][ T2000] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5
[   80.103372][ T1994] loop7: detected capacity change from 0 to 40427
[   80.109905][ T1088] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[   80.126143][ T1994] F2FS-fs (loop7): Insane cp_payload (553648128 >= 504)
[   80.148698][ T1994] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock
[   80.157227][ T1994] F2FS-fs (loop7): fault_injection options not supported
[   80.174707][ T1994] F2FS-fs (loop7): fault_type options not supported
[   80.194053][ T1994] F2FS-fs (loop7): invalid crc value
[   80.214242][ T1994] F2FS-fs (loop7): Found nat_bits in checkpoint
[   80.276484][ T2030] syz.8.615[2030] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   80.276567][ T2030] syz.8.615[2030] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   80.293649][ T1994] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0
[   80.308719][ T2033] 9pnet: p9_errstr2errno: server reported unknown error 
[   80.325894][ T1994] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5
[   80.338412][ T1088] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   80.354571][ T2037] input: syz0 as /devices/virtual/input/input22
[   80.375740][ T1088] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   80.388218][ T1088] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[   80.401213][ T1088] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   80.421450][ T1088] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   80.430602][ T1088] usb 6-1: config 0 descriptor??
[   80.446222][  T776] bio_check_eod: 18072 callbacks suppressed
[   80.446239][  T776] syz-executor: attempt to access beyond end of device
[   80.446239][  T776] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[   80.459663][ T2047] loop8: detected capacity change from 0 to 128
[   80.707661][  T326] usb 7-1: new high-speed USB device number 10 using dummy_hcd
[   80.718984][ T2067] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[   80.747385][ T1110] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[   80.778346][   T24] usb 9-1: new high-speed USB device number 7 using dummy_hcd
[   80.816008][ T2072] loop7: detected capacity change from 0 to 1024
[   80.822916][ T2072] EXT4-fs: Ignoring removed nobh option
[   80.828963][ T2072] EXT4-fs: Ignoring removed bh option
[   80.834799][ T2072] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   80.848632][ T1088] plantronics 0003:047F:FFFF.001B: unknown main item tag 0x0
[   80.856450][ T1088] plantronics 0003:047F:FFFF.001B: No inputs registered, leaving
[   80.865777][ T1088] plantronics 0003:047F:FFFF.001B: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0
[   80.869067][ T2072] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[   80.906763][  T776] EXT4-fs (loop7): unmounting filesystem.
[   80.920234][  T326] usb 7-1: Using ep0 maxpacket: 8
[   80.927408][ T1110] usb 5-1: Using ep0 maxpacket: 8
[   80.931838][  T326] usb 7-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[   80.937071][ T1110] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   80.950102][  T326] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   80.956012][ T1110] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   80.973956][ T1110] usb 5-1: New USB device found, idVendor=046d, idProduct=c626, bcdDevice= 0.00
[   80.974596][  T326] usb 7-1: config 0 descriptor??
[   80.987486][ T1110] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   80.996295][   T24] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   81.007815][   T24] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   81.017956][ T1110] usb 5-1: config 0 descriptor??
[   81.026339][   T24] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[   81.039771][   T24] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   81.049037][   T24] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   81.062961][   T24] usb 9-1: config 0 descriptor??
[   81.426936][ T1110] logitech 0003:046D:C626.001C: collection stack underflow
[   81.434310][ T1110] logitech 0003:046D:C626.001C: item 0 4 0 12 parsing failed
[   81.441992][ T1110] logitech 0003:046D:C626.001C: parse failed
[   81.448075][ T1110] logitech: probe of 0003:046D:C626.001C failed with error -22
[   81.471186][   T24] plantronics 0003:047F:FFFF.001D: No inputs registered, leaving
[   81.480149][   T24] plantronics 0003:047F:FFFF.001D: hiddev97,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0
[   81.628677][   T24] usb 5-1: USB disconnect, device number 14
[   81.991552][ T2096] loop7: detected capacity change from 0 to 512
[   81.999734][  T326] asix 7-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[   82.010204][  T326] asix: probe of 7-1:0.0 failed with error -71
[   82.019349][  T326] usb 7-1: USB disconnect, device number 10
[   82.028805][ T2096] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[   82.037946][ T2096] ext4 filesystem being mounted at /124/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   82.063216][  T776] EXT4-fs (loop7): unmounting filesystem.
[   82.150489][ T1110] usb 9-1: USB disconnect, device number 7
[   82.204207][ T2113] loop7: detected capacity change from 0 to 16
[   82.211117][ T2113] erofs: (device loop7): mounted with root inode @ nid 36.
[   82.221636][ T2113] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop7 ino=46
[   82.230830][ T2113] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop7 ino=46
[   82.240166][ T2113] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop7 ino=46
[   82.249334][ T2113] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop7 ino=46
[   82.400934][   T28] kauditd_printk_skb: 37 callbacks suppressed
[   82.400951][   T28] audit: type=1400 audit(1750080683.096:366): avc:  denied  { map } for  pid=2118 comm="syz.7.656" path="/dev/ashmem" dev="devtmpfs" ino=269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   82.416952][ T2121] input: syz1 as /devices/virtual/input/input23
[   82.467386][    T6] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[   82.648524][    T6] usb 5-1: config 0 has an invalid interface number: 163 but max is 0
[   82.652418][   T28] audit: type=1400 audit(1750080683.346:367): avc:  denied  { write } for  pid=2136 comm="syz.6.664" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   82.676221][    T6] usb 5-1: config 0 has no interface number 0
[   82.676255][    T6] usb 5-1: config 0 interface 163 altsetting 100 has 0 endpoint descriptors, different from the interface descriptor's value: 23
[   82.676284][    T6] usb 5-1: config 0 interface 163 has no altsetting 0
[   82.718332][ T2141] loop8: detected capacity change from 0 to 16
[   82.727017][ T2141] erofs: (device loop8): mounted with root inode @ nid 36.
[   82.740373][ T2141] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop8 ino=46
[   82.749619][ T1110] usb 8-1: new high-speed USB device number 8 using dummy_hcd
[   82.753955][    T6] usb 5-1: New USB device found, idVendor=1235, idProduct=0018, bcdDevice=f0.ee
[   82.766587][    T6] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   82.767515][ T2141] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop8 ino=46
[   82.785288][ T2141] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop8 ino=46
[   82.794747][ T2141] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop8 ino=46
[   82.804139][    T6] usb 5-1: config 0 descriptor??
[   82.836395][ T2149] tipc: Started in network mode
[   82.844363][ T2149] tipc: Node identity ac1414aa, cluster identity 4711
[   82.853229][ T2149] tipc: Enabled bearer <udp:syz2>, priority 10
[   82.860293][ T2149] tipc: Disabling bearer <udp:syz2>
[   82.861726][   T28] audit: type=1400 audit(1750080683.556:368): avc:  denied  { create } for  pid=2150 comm="syz.5.671" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[   82.939027][ T2160] SELinux: failed to load policy
[   82.957400][ T1110] usb 8-1: Using ep0 maxpacket: 16
[   82.963777][ T1110] usb 8-1: config 1 has an invalid interface number: 105 but max is 0
[   82.972125][ T1110] usb 8-1: config 1 has no interface number 0
[   82.978519][   T24] usb 6-1: USB disconnect, device number 9
[   82.984495][ T1110] usb 8-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[   82.997203][ T1110] usb 8-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[   83.009830][ T1110] usb 8-1: config 1 interface 105 has no altsetting 0
[   83.018562][    T6] usb 5-1: string descriptor 0 read error: -71
[   83.018663][ T1110] usb 8-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d
[   83.033941][ T1110] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   83.040776][    T6] usb 5-1: USB disconnect, device number 15
[   83.042000][ T1110] usb 8-1: Product: syz
[   83.052108][ T1110] usb 8-1: Manufacturer: syz
[   83.056717][ T1110] usb 8-1: SerialNumber: syz
[   83.062525][ T2126] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22
[   83.070014][ T2126] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22
[   83.479169][ T2126] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22
[   83.486449][ T2126] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22
[   83.547167][   T28] audit: type=1400 audit(1750080684.236:369): avc:  denied  { compute_member } for  pid=2169 comm="syz.4.679" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1
[   83.603086][ T2176] netlink: 'syz.4.682': attribute type 4 has an invalid length.
[   83.727665][   T28] audit: type=1400 audit(1750080684.426:370): avc:  denied  { watch_reads } for  pid=2181 comm="syz.5.685" path="/106" dev="tmpfs" ino=580 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[   83.748135][ T2178] mmap: syz.4.683 (2178) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[   83.868256][ T2196] netlink: 8 bytes leftover after parsing attributes in process `syz.6.691'.
[   84.008440][ T2216] xt_hashlimit: size too large, truncated to 1048576
[   84.075397][ T2227] loop5: detected capacity change from 0 to 16
[   84.089225][ T2227] erofs: (device loop5): z_erofs_load_lz4_config: too large lz4 pclusterblks 16832
[   84.147394][   T24] usb 9-1: new high-speed USB device number 8 using dummy_hcd
[   84.243374][   T28] audit: type=1400 audit(1750080684.936:371): avc:  denied  { shutdown } for  pid=2238 comm="syz.5.712" lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   84.284221][   T28] audit: type=1400 audit(1750080684.936:372): avc:  denied  { read } for  pid=2238 comm="syz.5.712" lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   84.296900][ T1110] aqc111 8-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71
[   84.323713][ T1110] aqc111 8-1:1.105 eth1: register 'aqc111' at usb-dummy_hcd.7-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, 20:fc:94:45:3a:41
[   84.337803][   T24] usb 9-1: Using ep0 maxpacket: 8
[   84.359732][   T24] usb 9-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[   84.379514][ T1110] usb 8-1: USB disconnect, device number 8
[   84.389045][ T1110] aqc111 8-1:1.105 eth1: unregister 'aqc111' usb-dummy_hcd.7-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter
[   84.405046][   T24] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   84.416996][   T24] usb 9-1: config 0 descriptor??
[   84.450084][   T28] audit: type=1400 audit(1750080685.146:373): avc:  denied  { mount } for  pid=2253 comm="syz.6.717" name="/" dev="ramfs" ino=25606 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1
[   84.487405][ T1110] aqc111 8-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19
[   84.496829][ T1110] aqc111 8-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19
[   84.516133][   T28] audit: type=1400 audit(1750080685.146:374): avc:  denied  { execute } for  pid=2253 comm="syz.6.717" path="/145/file0/bus" dev="ramfs" ino=25607 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1
[   84.550765][ T2264] loop5: detected capacity change from 0 to 128
[   84.567372][ T1110] aqc111 8-1:1.105 eth1 (unregistered): Failed to write(0x61) reg index 0x0000: -19
[   84.579708][ T2266] overlayfs: failed to resolve './file0': -2
[   84.587739][   T28] audit: type=1400 audit(1750080685.166:375): avc:  denied  { unmount } for  pid=720 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1
[   84.618361][ T2264] FAT-fs (loop5): bogus number of reserved sectors
[   84.636697][   T24] asix 9-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random
[   84.638165][ T2264] FAT-fs (loop5): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero
[   84.661838][ T2276] bridge0: port 3(syz_tun) entered blocking state
[   84.668777][ T2276] bridge0: port 3(syz_tun) entered disabled state
[   84.675944][ T2264] FAT-fs (loop5): Can't find a valid FAT filesystem
[   84.693543][ T2276] device syz_tun entered promiscuous mode
[   84.704533][ T2276] bridge0: port 3(syz_tun) entered blocking state
[   84.711055][ T2276] bridge0: port 3(syz_tun) entered forwarding state
[   84.774449][ T2295] input: syz1 as /devices/virtual/input/input24
[   84.844440][ T2305] netlink: 204 bytes leftover after parsing attributes in process `syz.6.734'.
[   84.850908][ T2306] loop5: detected capacity change from 0 to 16
[   84.878036][ T2306] erofs: (device loop5): mounted with root inode @ nid 36.
[   85.163471][ T2340] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2618113072 (83779618304 ns) > initial count (2679166368 ns). Using initial count to start timer.
[   85.227194][ T2351] loop6: detected capacity change from 0 to 512
[   85.245871][ T2351] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[   85.263772][ T2351] EXT4-fs (loop6): 1 truncate cleaned up
[   85.272190][ T2351] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[   85.281221][ T2358] loop7: detected capacity change from 0 to 128
[   85.291869][ T2351] EXT4-fs error (device loop6): ext4_ind_map_blocks:604: inode #18: comm syz.6.751: Can't allocate blocks for non-extent mapped inodes with bigalloc
[   85.310472][ T2351] EXT4-fs (loop6): Remounting filesystem read-only
[   85.310470][ T2358] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none.
[   85.311672][ T2358] ext4 filesystem being mounted at /142/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[   85.336476][  T720] EXT4-fs error (device loop6): ext4_lookup:1858: inode #11: comm syz-executor: iget: bad extra_isize 46 (inode size 256)
[   85.371823][  T720] EXT4-fs (loop6): Remounting filesystem read-only
[   85.385068][  T720] EXT4-fs error (device loop6): ext4_lookup:1858: inode #11: comm syz-executor: iget: bad extra_isize 46 (inode size 256)
[   85.398262][  T720] EXT4-fs (loop6): Remounting filesystem read-only
[   85.412618][  T776] EXT4-fs (loop7): unmounting filesystem.
[   85.431698][  T720] bridge0: port 3(syz_tun) entered disabled state
[   85.442747][ T2366] loop7: detected capacity change from 0 to 512
[   85.450597][ T2366] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[   85.461994][  T720] device syz_tun left promiscuous mode
[   85.467656][  T720] bridge0: port 3(syz_tun) entered disabled state
[   85.475871][ T2366] EXT4-fs warning (device loop7): ext4_expand_extra_isize_ea:2818: Unable to expand inode 15. Delete some EAs or run e2fsck.
[   85.500317][ T2366] EXT4-fs (loop7): 1 truncate cleaned up
[   85.506304][ T2366] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[   85.539289][  T720] EXT4-fs (loop6): unmounting filesystem.
[   85.573155][ T2366] EXT4-fs error (device loop7): mb_free_blocks:1815: group 0, inode 16: block 33:freeing already freed block (bit 32); block bitmap corrupt.
[   85.604888][ T2366] EXT4-fs (loop7): Remounting filesystem read-only
[   85.611699][ T2366] EXT4-fs error (device loop7): ext4_free_branches:1030: inode #16: comm syz.7.757: invalid indirect mapped block 6 (level 1)
[   85.625664][ T2366] EXT4-fs (loop7): Remounting filesystem read-only
[   85.638418][   T24] asix 9-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[   85.653591][   T24] asix 9-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9
[   85.656909][  T776] EXT4-fs (loop7): unmounting filesystem.
[   85.663933][   T24] asix: probe of 9-1:0.0 failed with error -71
[   85.676952][   T24] usb 9-1: USB disconnect, device number 8
[   85.708986][ T2375] input: syz1 as /devices/virtual/input/input25
[   85.848370][ T2386] bridge0: port 1(bridge_slave_0) entered blocking state
[   85.855715][ T2386] bridge0: port 1(bridge_slave_0) entered disabled state
[   85.864125][ T2386] device bridge_slave_0 entered promiscuous mode
[   85.871537][ T2386] bridge0: port 2(bridge_slave_1) entered blocking state
[   85.879155][ T2386] bridge0: port 2(bridge_slave_1) entered disabled state
[   85.887916][ T2386] device bridge_slave_1 entered promiscuous mode
[   85.894667][ T2393] SELinux:  Context @ is not valid (left unmapped).
[   85.932306][ T2397] loop7: detected capacity change from 0 to 512
[   85.939317][ T2397] EXT4-fs: Ignoring removed i_version option
[   85.946269][ T2397] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[   85.950005][ T1088] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[   85.970383][ T2397] EXT4-fs (loop7): 1 truncate cleaned up
[   85.976099][ T2397] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none.
[   85.995465][  T776] EXT4-fs (loop7): unmounting filesystem.
[   86.007364][  T308] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[   86.040292][ T2386] bridge0: port 2(bridge_slave_1) entered blocking state
[   86.047401][ T2386] bridge0: port 2(bridge_slave_1) entered forwarding state
[   86.054714][ T2386] bridge0: port 1(bridge_slave_0) entered blocking state
[   86.061809][ T2386] bridge0: port 1(bridge_slave_0) entered forwarding state
[   86.090503][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   86.098433][   T43] bridge0: port 1(bridge_slave_0) entered disabled state
[   86.105847][   T43] bridge0: port 2(bridge_slave_1) entered disabled state
[   86.116241][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   86.124678][   T43] bridge0: port 1(bridge_slave_0) entered blocking state
[   86.131761][   T43] bridge0: port 1(bridge_slave_0) entered forwarding state
[   86.137386][ T1088] usb 6-1: Using ep0 maxpacket: 16
[   86.145059][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   86.155948][   T43] bridge0: port 2(bridge_slave_1) entered blocking state
[   86.163087][   T43] bridge0: port 2(bridge_slave_1) entered forwarding state
[   86.166936][ T1088] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[   86.185994][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   86.186875][ T1088] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   86.196111][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   86.202382][ T1088] usb 6-1: Product: syz
[   86.213985][  T308] usb 5-1: Using ep0 maxpacket: 16
[   86.217652][ T2407] netlink: 'syz.7.777': attribute type 4 has an invalid length.
[   86.219884][ T1088] usb 6-1: Manufacturer: syz
[   86.231988][ T1088] usb 6-1: SerialNumber: syz
[   86.237181][  T308] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   86.244506][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   86.248555][  T308] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   86.262418][ T2407] netlink: 'syz.7.777': attribute type 4 has an invalid length.
[   86.266244][ T1088] r8152-cfgselector 6-1: config 0 descriptor??
[   86.280512][  T308] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[   86.291927][ T2386] device veth0_vlan entered promiscuous mode
[   86.293810][  T308] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[   86.301277][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   86.308823][  T308] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   86.324789][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   86.332928][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   86.335088][  T308] usb 5-1: config 0 descriptor??
[   86.370734][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   86.385386][ T2386] device veth1_macvtap entered promiscuous mode
[   86.398167][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   86.431538][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   86.560496][ T2423] netlink: 4 bytes leftover after parsing attributes in process `syz.9.782'.
[   86.601464][ T2415] loop8: detected capacity change from 0 to 40427
[   86.616723][ T2415] F2FS-fs (loop8): Wrong NAT boundary, start(2560) end(462336) blocks(1024)
[   86.635608][ T2415] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock
[   86.639455][ T2421] loop7: detected capacity change from 0 to 40427
[   86.645331][ T2415] F2FS-fs (loop8): invalid crc value
[   86.656439][ T2421] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12
[   86.664629][ T2421] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock
[   86.674436][ T2421] F2FS-fs (loop7): invalid crc value
[   86.683220][ T2415] F2FS-fs (loop8): Found nat_bits in checkpoint
[   86.690048][ T2421] F2FS-fs (loop7): Found nat_bits in checkpoint
[   86.734043][ T2415] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0
[   86.741377][ T2415] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5
[   86.748988][ T2421] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0
[   86.756102][ T2421] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5
[   86.764577][ T1088] r8152-cfgselector 6-1: Unknown version 0x0000
[   86.770997][ T1088] r8152-cfgselector 6-1: bad CDC descriptors
[   86.777758][ T1088] r8152-cfgselector 6-1: Unknown version 0x0000
[   86.785407][  T308] microsoft 0003:045E:07DA.001E: unknown main item tag 0x0
[   86.798154][ T1088] r8152-cfgselector 6-1: USB disconnect, device number 10
[   86.805481][  T308] microsoft 0003:045E:07DA.001E: unknown main item tag 0x0
[   86.813332][  T308] microsoft 0003:045E:07DA.001E: unknown main item tag 0x0
[   86.821181][  T308] microsoft 0003:045E:07DA.001E: unknown main item tag 0x0
[   86.829124][  T308] microsoft 0003:045E:07DA.001E: unknown main item tag 0x0
[   86.837082][ T2421] syz.7.781: attempt to access beyond end of device
[   86.837082][ T2421] loop7: rw=2049, sector=45096, nr_sectors = 96 limit=40427
[   86.852237][ T2421] syz.7.781: attempt to access beyond end of device
[   86.852237][ T2421] loop7: rw=0, sector=45096, nr_sectors = 8 limit=40427
[   86.865896][  T308] microsoft 0003:045E:07DA.001E: unknown main item tag 0x0
[   86.879354][  T308] microsoft 0003:045E:07DA.001E: unknown main item tag 0x0
[   86.887182][  T308] microsoft 0003:045E:07DA.001E: unknown main item tag 0x0
[   86.905250][  T304] kworker/u4:3: attempt to access beyond end of device
[   86.905250][  T304] loop8: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[   86.911752][  T308] microsoft 0003:045E:07DA.001E: unknown main item tag 0x0
[   86.932307][  T308] microsoft 0003:045E:07DA.001E: unknown main item tag 0x0
[   86.939944][  T308] microsoft 0003:045E:07DA.001E: unknown main item tag 0x0
[   86.953866][  T308] microsoft 0003:045E:07DA.001E: unknown main item tag 0x0
[   86.969499][  T308] microsoft 0003:045E:07DA.001E: unknown main item tag 0x0
[   86.977095][  T308] microsoft 0003:045E:07DA.001E: unknown main item tag 0x0
[   86.984708][  T308] microsoft 0003:045E:07DA.001E: unknown main item tag 0x0
[   86.997151][  T308] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.001E/input/input26
[   87.017429][  T308] microsoft 0003:045E:07DA.001E: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0
[   87.032583][  T308] usb 5-1: USB disconnect, device number 16
[   87.102418][ T2446] loop9: detected capacity change from 0 to 512
[   87.113649][ T2442] fido_id[2442]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory
[   87.156862][ T2446] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback.
[   87.172031][ T2446] ext4 filesystem being mounted at /7/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   87.248814][ T2386] EXT4-fs (loop9): unmounting filesystem.
[   87.252064][ T2456] device pim6reg1 entered promiscuous mode
[   87.339327][ T2468] loop7: detected capacity change from 0 to 2048
[   87.346165][ T2469] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=27745 sclass=netlink_route_socket pid=2469 comm=syz.9.794
[   87.377564][ T2468] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none.
[   87.393404][ T2468] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters
[   87.408240][ T2468] EXT4-fs (loop7): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28
[   87.421657][ T2468] EXT4-fs (loop7): This should not happen!! Data will be lost
[   87.421657][ T2468] 
[   87.431594][ T2468] EXT4-fs (loop7): Total free blocks count 0
[   87.438646][ T2468] EXT4-fs (loop7): Free/Dirty block details
[   87.444742][ T2468] EXT4-fs (loop7): free_blocks=66060288
[   87.450628][ T2468] EXT4-fs (loop7): dirty_blocks=16
[   87.455877][ T2468] EXT4-fs (loop7): Block reservation details
[   87.462151][ T2468] EXT4-fs (loop7): i_reserved_data_blocks=1
[   87.476375][  T776] EXT4-fs (loop7): unmounting filesystem.
[   87.541193][    T6] usb 9-1: new high-speed USB device number 9 using dummy_hcd
[   87.603025][   T28] kauditd_printk_skb: 21 callbacks suppressed
[   87.603042][   T28] audit: type=1400 audit(1750080688.296:397): avc:  denied  { read } for  pid=2481 comm="syz.7.801" path="socket:[26269]" dev="sockfs" ino=26269 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[   87.664086][ T2507] netlink: 12 bytes leftover after parsing attributes in process `syz.4.813'.
[   87.739294][    T6] usb 9-1: Using ep0 maxpacket: 32
[   87.746579][   T28] audit: type=1400 audit(1750080688.436:398): avc:  denied  { view } for  pid=2512 comm="syz.4.816" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1
[   87.753486][    T6] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   87.781149][    T6] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   87.790995][    T6] usb 9-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[   87.791022][    T6] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   87.795534][    T6] usb 9-1: config 0 descriptor??
[   87.813829][ T1088] kernel write not supported for file /vcs (pid: 1088 comm: kworker/1:4)
[   87.815054][    T6] hub 9-1:0.0: USB hub found
[   87.845173][   T28] audit: type=1400 audit(1750080688.536:399): avc:  denied  { connect } for  pid=2516 comm="syz.4.820" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   87.895750][   T28] audit: type=1400 audit(1750080688.586:400): avc:  denied  { write } for  pid=2516 comm="syz.4.820" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   88.003355][ T2520] bridge0: port 1(bridge_slave_0) entered blocking state
[   88.010616][ T2520] bridge0: port 1(bridge_slave_0) entered disabled state
[   88.018305][ T2520] device bridge_slave_0 entered promiscuous mode
[   88.025693][ T2520] bridge0: port 2(bridge_slave_1) entered blocking state
[   88.027216][    T6] hub 9-1:0.0: config failed, can't read hub descriptor (err -22)
[   88.033406][ T2520] bridge0: port 2(bridge_slave_1) entered disabled state
[   88.048534][ T2520] device bridge_slave_1 entered promiscuous mode
[   88.048970][    T6] usbhid 9-1:0.0: can't add hid device: -71
[   88.060913][    T6] usbhid: probe of 9-1:0.0 failed with error -71
[   88.108539][    T6] usb 9-1: USB disconnect, device number 9
[   88.126159][ T2520] bridge0: port 2(bridge_slave_1) entered blocking state
[   88.133370][ T2520] bridge0: port 2(bridge_slave_1) entered forwarding state
[   88.140671][ T2520] bridge0: port 1(bridge_slave_0) entered blocking state
[   88.147720][ T2520] bridge0: port 1(bridge_slave_0) entered forwarding state
[   88.176929][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   88.185676][   T10] bridge0: port 1(bridge_slave_0) entered disabled state
[   88.193661][   T10] bridge0: port 2(bridge_slave_1) entered disabled state
[   88.204800][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   88.213206][   T10] bridge0: port 1(bridge_slave_0) entered blocking state
[   88.220274][   T10] bridge0: port 1(bridge_slave_0) entered forwarding state
[   88.229160][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   88.237604][   T10] bridge0: port 2(bridge_slave_1) entered blocking state
[   88.244658][   T10] bridge0: port 2(bridge_slave_1) entered forwarding state
[   88.260097][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   88.270168][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   88.284540][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   88.298445][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   88.306483][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   88.314212][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   88.325229][ T2520] device veth0_vlan entered promiscuous mode
[   88.337111][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   88.341404][   T28] audit: type=1326 audit(1750080689.026:401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2481 comm="syz.7.801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08eeb8e929 code=0x7fc00000
[   88.348087][ T2520] device veth1_macvtap entered promiscuous mode
[   88.389069][  T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   88.404059][  T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   88.405354][ T2527] SELinux: failed to load policy
[   88.418324][    T8] device bridge_slave_1 left promiscuous mode
[   88.425344][    T8] bridge0: port 2(bridge_slave_1) entered disabled state
[   88.433168][    T8] device bridge_slave_0 left promiscuous mode
[   88.440033][    T8] bridge0: port 1(bridge_slave_0) entered disabled state
[   88.447522][   T19] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[   88.450989][   T28] audit: type=1400 audit(1750080689.146:402): avc:  denied  { write } for  pid=2528 comm="syz.7.824" name="ppp" dev="devtmpfs" ino=158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[   88.478776][    T8] device veth1_macvtap left promiscuous mode
[   88.484890][    T8] device veth0_vlan left promiscuous mode
[   88.568739][ T2532] netlink: 360 bytes leftover after parsing attributes in process `syz.8.825'.
[   88.578593][ T2532] netlink: 24 bytes leftover after parsing attributes in process `syz.8.825'.
[   88.627396][   T19] usb 6-1: Using ep0 maxpacket: 8
[   88.636762][ T2538] loop8: detected capacity change from 0 to 256
[   88.647025][   T19] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   88.670979][ T2538] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d)
[   88.676673][   T19] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   88.698992][ T2544] input: syz1 as /devices/virtual/input/input27
[   88.736636][   T19] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   88.756093][   T19] usb 6-1: New USB device found, idVendor=0458, idProduct=4018, bcdDevice= 0.00
[   88.765438][   T19] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   88.784098][ T2550] syz.3.834[2550] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   88.784158][   T19] usb 6-1: config 0 descriptor??
[   88.784162][ T2550] syz.3.834[2550] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   88.803188][ T2552] SELinux: failed to load policy
[   88.947044][   T28] audit: type=1400 audit(1750080689.636:403): avc:  denied  { mounton } for  pid=2571 comm="syz.4.843" path="/120/file0" dev="tmpfs" ino=654 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1
[   89.204628][   T19] kye 0003:0458:4018.001F: item fetching failed at offset 1/5
[   89.219721][   T19] kye 0003:0458:4018.001F: parse failed
[   89.230458][   T19] kye: probe of 0003:0458:4018.001F failed with error -22
[   89.245097][   T28] audit: type=1400 audit(1750080689.936:404): avc:  denied  { mount } for  pid=2611 comm="syz.7.861" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1
[   89.291115][   T28] audit: type=1400 audit(1750080689.976:405): avc:  denied  { unmount } for  pid=776 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1
[   89.313470][ T2614] incfs: Options parsing error. -22
[   89.315201][ T2597] loop3: detected capacity change from 0 to 40427
[   89.319410][ T2614] incfs: mount failed -22
[   89.334872][ T2597] F2FS-fs (loop3): invalid crc value
[   89.358175][ T2597] F2FS-fs (loop3): Found nat_bits in checkpoint
[   89.368336][   T28] audit: type=1400 audit(1750080690.066:406): avc:  denied  { create } for  pid=2620 comm="syz.7.864" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   89.406864][  T308] usb 6-1: USB disconnect, device number 11
[   89.412312][ T2597] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[   89.429726][ T2597] syz.3.854: attempt to access beyond end of device
[   89.429726][ T2597] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[   89.449143][ T2520] syz-executor: attempt to access beyond end of device
[   89.449143][ T2520] loop3: rw=2049, sector=45104, nr_sectors = 8 limit=40427
[   90.099763][ T2661] loop8: detected capacity change from 0 to 512
[   90.129258][ T2661] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback.
[   90.138527][ T2661] ext4 filesystem being mounted at /92/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   90.147453][  T308] usb 8-1: new high-speed USB device number 9 using dummy_hcd
[   90.197421][  T503] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[   90.245533][ T1090] EXT4-fs (loop8): unmounting filesystem.
[   90.265654][ T2666] loop8: detected capacity change from 0 to 512
[   90.281197][ T2666] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback.
[   90.290286][ T2666] ext4 filesystem being mounted at /93/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   90.310260][ T1090] EXT4-fs (loop8): unmounting filesystem.
[   90.338986][  T308] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   90.350106][ T2672] netlink: 8 bytes leftover after parsing attributes in process `syz.8.882'.
[   90.350287][  T308] usb 8-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024
[   90.362287][ T2672] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready
[   90.370893][  T308] usb 8-1: New USB device found, idVendor=0525, idProduct=e4a1, bcdDevice= 0.40
[   90.378742][ T2672] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready
[   90.385878][  T308] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   90.394398][  T503] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   90.410362][  T308] usb 8-1: Product: syz
[   90.417494][  T308] usb 8-1: Manufacturer: syz
[   90.422437][  T308] usb 8-1: SerialNumber: syz
[   90.427928][  T503] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[   90.450147][  T503] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[   90.462010][  T503] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[   90.470394][  T503] usb 6-1: SerialNumber: syz
[   90.581954][ T2694] loop8: detected capacity change from 0 to 512
[   90.595183][ T2694] FAT-fs (loop8): bogus sectors per cluster 69
[   90.601705][ T2694] FAT-fs (loop8): Can't find a valid FAT filesystem
[   90.630389][ T2643] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22
[   90.679645][  T503] usb 6-1: 0:2 : does not exist
[   90.712525][  T503] usb 6-1: 5:0: failed to get current value for ch 0 (-22)
[   90.728872][  T503] usb 6-1: USB disconnect, device number 12
[   90.737093][  T321] udevd[321]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   90.829506][ T2718] loop3: detected capacity change from 0 to 512
[   90.847914][ T2718] EXT4-fs error (device loop3): ext4_orphan_get:1400: inode #15: comm syz.3.903: iget: bad extended attribute block 1
[   90.861747][ T2718] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.903: couldn't read orphan inode 15 (err -117)
[   90.873992][ T2718] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[   90.887091][ T2723] netlink: 4 bytes leftover after parsing attributes in process `syz.4.905'.
[   90.921449][ T2520] EXT4-fs (loop3): unmounting filesystem.
[   90.946903][ T2727] SELinux: failed to load policy
[   90.953758][ T2731] syz.8.908[2731] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   90.953856][ T2731] syz.8.908[2731] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   91.159692][ T2750] loop8: detected capacity change from 0 to 2048
[   91.188694][ T2755] netlink: 8 bytes leftover after parsing attributes in process `syz.4.922'.
[   91.199557][ T2755] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready
[   91.216455][ T2755] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready
[   91.231877][ T2757] syz.5.923[2757] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   91.231976][ T2757] syz.5.923[2757] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   91.233016][ T2750]  loop8: p2 p3 p7
[   91.246691][ T2643] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22
[   91.361793][  T317] udevd[317]: inotify_add_watch(7, /dev/loop8p7, 10) failed: No such file or directory
[   91.362040][  T321] udevd[321]: inotify_add_watch(7, /dev/loop8p2, 10) failed: No such file or directory
[   91.373424][  T322] udevd[322]: inotify_add_watch(7, /dev/loop8p3, 10) failed: No such file or directory
[   91.402107][  T321] udevd[321]: inotify_add_watch(7, /dev/loop8p2, 10) failed: No such file or directory
[   91.405993][  T322] udevd[322]: inotify_add_watch(7, /dev/loop8p3, 10) failed: No such file or directory
[   91.454549][  T321] udevd[321]: inotify_add_watch(7, /dev/loop8p7, 10) failed: No such file or directory
[   91.485343][  T308] cdc_ncm 8-1:1.0: MAC-Address: 42:42:42:42:42:42
[   91.494395][ T2751] loop3: detected capacity change from 0 to 40427
[   91.500349][  T308] cdc_ncm 8-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048
[   91.504934][ T2751] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[   91.516501][ T2751] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[   91.517895][  T308] cdc_ncm 8-1:1.0: setting rx_max = 2048
[   91.526171][ T2751] F2FS-fs (loop3): invalid crc value
[   91.559557][ T2751] F2FS-fs (loop3): Found nat_bits in checkpoint
[   91.560168][ T2780] loop5: detected capacity change from 0 to 2048
[   91.610235][ T2780] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[   91.631712][ T2751] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[   91.638860][ T2751] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[   91.639262][  T669] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set
[   91.662555][  T669] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6170: Corrupt filesystem
[   91.678405][  T669] EXT4-fs (loop5): unmounting filesystem.
[   91.687710][  T308] cdc_ncm 8-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.7-1, CDC NCM (NO ZLP), 42:42:42:42:42:42
[   91.726428][  T308] usb 8-1: USB disconnect, device number 9
[   91.743030][  T308] cdc_ncm 8-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.7-1, CDC NCM (NO ZLP)
[   91.757983][ T2520] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix.
[   91.758009][ T2520] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix.
[   91.765601][ T2520] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix.
[   91.797500][ T2520] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix.
[   91.805099][ T2520] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix.
[   91.829211][ T2520] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix.
[   91.837197][ T2520] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix.
[   92.147833][ T2825] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3
[   92.265046][ T2844] loop3: detected capacity change from 0 to 1024
[   92.295618][ T2844] EXT4-fs (loop3): Test dummy encryption mode enabled
[   92.341667][ T2844] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[   94.761438][ T2844] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni"
[   94.784691][   T28] kauditd_printk_skb: 21 callbacks suppressed
[   94.784707][   T28] audit: type=1400 audit(1750080695.476:428): avc:  denied  { remount } for  pid=2840 comm="syz.3.945" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[   94.814053][ T2844] EXT4-fs (loop3): re-mounted. Quota mode: writeback.
[   94.835585][ T2520] EXT4-fs (loop3): unmounting filesystem.
[   94.886711][ T2879] loop5: detected capacity change from 0 to 512
[   94.913367][ T2879] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters
[   94.935394][ T2879] EXT4-fs (loop5): Remounting filesystem read-only
[   94.950707][ T2879] EXT4-fs error (device loop5): ext4_clear_blocks:883: inode #13: comm syz.5.957: attempt to clear invalid blocks 1024 len 1
[   94.964742][ T2879] EXT4-fs (loop5): Remounting filesystem read-only
[   94.977669][ T2879] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.957: invalid indirect mapped block 1819239214 (level 0)
[   94.997125][ T2879] EXT4-fs (loop5): Remounting filesystem read-only
[   95.004103][ T2879] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.957: invalid indirect mapped block 33554432 (level 2)
[   95.007443][  T308] usb 9-1: new high-speed USB device number 10 using dummy_hcd
[   95.034288][ T2879] EXT4-fs (loop5): Remounting filesystem read-only
[   95.041116][ T2879] EXT4-fs (loop5): 1 truncate cleaned up
[   95.046864][ T2879] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[   95.138110][ T2894] loop3: detected capacity change from 0 to 16
[   95.145854][ T2894] erofs: (device loop3): mounted with root inode @ nid 36.
[   95.207371][  T308] usb 9-1: Using ep0 maxpacket: 8
[   95.214173][  T308] usb 9-1: config 179 has an invalid interface number: 65 but max is 0
[   95.222804][  T308] usb 9-1: config 179 has no interface number 0
[   95.230420][  T308] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[   95.241683][  T308] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[   95.253112][  T308] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[   95.264454][  T308] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[   95.275908][  T308] usb 9-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[   95.289250][  T308] usb 9-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[   95.298515][  T308] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   95.311130][ T2858] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22
[   95.318612][    T6] usb 8-1: new high-speed USB device number 10 using dummy_hcd
[   95.404594][ T2906] loop3: detected capacity change from 0 to 512
[   95.418343][ T2906] EXT4-fs (loop3): ea_inode feature is not supported for Hurd
[   95.508484][    T6] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   95.519502][    T6] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   95.529500][    T6] usb 8-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00
[   95.540031][    T6] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   95.549313][    T6] usb 8-1: config 0 descriptor??
[   95.555942][  T308] input: Generic X-Box pad as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:179.65/input/input28
[   95.676037][  T669] EXT4-fs (loop5): unmounting filesystem.
[   95.707372][   T24] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[   95.762559][ T2858] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   95.771364][ T2858] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   95.900299][   T24] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   95.909595][   T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   95.917699][   T24] usb 4-1: Product: syz
[   95.921936][   T24] usb 4-1: Manufacturer: syz
[   95.926589][   T24] usb 4-1: SerialNumber: syz
[   95.960103][    T6] hkems 0003:2006:0118.0020: unknown main item tag 0xe
[   95.967069][    T6] hkems 0003:2006:0118.0020: item fetching failed at offset 4/7
[   95.975061][    T6] hkems 0003:2006:0118.0020: parse failed
[   95.980912][    T6] hkems: probe of 0003:2006:0118.0020 failed with error -22
[   95.988405][  T503] usb 6-1: new high-speed USB device number 13 using dummy_hcd
[   96.165057][    T6] usb 8-1: USB disconnect, device number 10
[   96.178585][  T503] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   96.189684][  T503] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   96.196166][ T1110] usb 9-1: USB disconnect, device number 10
[   96.199917][    C1] xpad 9-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[   96.199954][    C1] xpad 9-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[   96.200246][  T503] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[   96.235692][  T503] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   96.244793][  T503] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   96.253504][  T503] usb 6-1: config 0 descriptor??
[   96.662041][  T503] plantronics 0003:047F:FFFF.0021: No inputs registered, leaving
[   96.687480][  T503] plantronics 0003:047F:FFFF.0021: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0
[   96.726720][ T2922] netem: incorrect gi model size
[   96.734488][ T2922] netem: change failed
[   96.879779][ T2927] loop8: detected capacity change from 0 to 40427
[   96.887090][ T2927] F2FS-fs (loop8): fault_injection options not supported
[   96.895000][ T2927] F2FS-fs (loop8): invalid crc value
[   96.902071][ T2927] F2FS-fs (loop8): Found nat_bits in checkpoint
[   96.938558][ T2927] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5
[   96.946457][   T24] cdc_ncm 4-1:1.0: MAC-Address: 42:42:42:42:42:42
[   96.968379][   T24] cdc_ncm 4-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048
[   96.975845][   T24] cdc_ncm 4-1:1.0: setting rx_max = 2048
[   96.981801][ T1088] usb 8-1: new high-speed USB device number 11 using dummy_hcd
[   96.989974][ T1090] syz-executor: attempt to access beyond end of device
[   96.989974][ T1090] loop8: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[   97.031545][  T309] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready
[   97.047770][  T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   97.058010][  T309] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready
[   97.081871][  T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   97.091890][  T309] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   97.100832][  T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   97.109866][  T309] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   97.122873][  T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   97.149490][   T24] cdc_ncm 4-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.3-1, CDC NCM (NO ZLP), 42:42:42:42:42:42
[   97.170308][   T24] usb 4-1: USB disconnect, device number 3
[   97.182545][   T24] cdc_ncm 4-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.3-1, CDC NCM (NO ZLP)
[   97.192025][ T1088] usb 8-1: Using ep0 maxpacket: 8
[   97.193822][ T2938] loop8: detected capacity change from 0 to 2048
[   97.198483][ T1088] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   97.230068][ T2938] EXT4-fs: Mount option(s) incompatible with ext2
[   97.239365][ T1088] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2
[   97.267480][ T1088] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   97.284280][ T1088] usb 8-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[   97.294264][ T1088] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   97.304528][   T28] audit: type=1326 audit(1750080697.996:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2944 comm="syz.4.987" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f91dfd8e929 code=0x0
[   97.332762][   T60] ==================================================================
[   97.340868][   T60] BUG: KASAN: use-after-free in __list_del_entry_valid+0xa6/0x130
[   97.348677][   T60] Read of size 8 at addr ffff88811f29ecf0 by task kworker/1:2/60
[   97.356383][   T60] 
[   97.358704][   T60] CPU: 1 PID: 60 Comm: kworker/1:2 Not tainted 6.1.138-syzkaller-00009-g6246d345f550 #0
[   97.368409][   T60] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[   97.378485][   T60] Workqueue: mld mld_ifc_work
[   97.383169][   T60] Call Trace:
[   97.386441][   T60]  <TASK>
[   97.389458][   T60]  __dump_stack+0x21/0x24
[   97.393792][   T60]  dump_stack_lvl+0xee/0x150
[   97.398381][   T60]  ? __cfi_dump_stack_lvl+0x8/0x8
[   97.403407][   T60]  ? __list_del_entry_valid+0xa6/0x130
[   97.408863][   T60]  print_address_description+0x71/0x210
[   97.414425][   T60]  print_report+0x4a/0x60
[   97.418752][   T60]  kasan_report+0x122/0x150
[   97.423259][   T60]  ? __list_del_entry_valid+0xa6/0x130
[   97.428717][   T60]  __asan_report_load8_noabort+0x14/0x20
[   97.434356][   T60]  __list_del_entry_valid+0xa6/0x130
[   97.439642][   T60]  process_one_work+0x4b9/0xc40
[   97.444496][   T60]  worker_thread+0xa29/0x11f0
[   97.449181][   T60]  kthread+0x281/0x320
[   97.453246][   T60]  ? __cfi_worker_thread+0x10/0x10
[   97.458353][   T60]  ? __cfi_kthread+0x10/0x10
[   97.462942][   T60]  ret_from_fork+0x1f/0x30
[   97.467361][   T60]  </TASK>
[   97.470376][   T60] 
[   97.472701][   T60] Allocated by task 24:
[   97.476842][   T60]  kasan_set_track+0x4b/0x70
[   97.481424][   T60]  kasan_save_alloc_info+0x25/0x30
[   97.486556][   T60]  __kasan_kmalloc+0x95/0xb0
[   97.491429][   T60]  __kmalloc_node+0xb2/0x1e0
[   97.496023][   T60]  kvmalloc_node+0x294/0x480
[   97.500615][   T60]  alloc_netdev_mqs+0x8d/0xf90
[   97.505372][   T60]  alloc_etherdev_mqs+0x37/0x40
[   97.510219][   T60]  usbnet_probe+0x20c/0x2780
[   97.514834][   T60]  usb_probe_interface+0x610/0xaf0
[   97.519945][   T60]  really_probe+0x2cb/0x960
[   97.524449][   T60]  __driver_probe_device+0x198/0x280
[   97.529752][   T60]  driver_probe_device+0x54/0x3e0
[   97.534776][   T60]  __device_attach_driver+0x2e9/0x4a0
[   97.540160][   T60]  bus_for_each_drv+0x183/0x210
[   97.545028][   T60]  __device_attach+0x2a2/0x400
[   97.549797][   T60]  device_initial_probe+0x1a/0x20
[   97.554864][   T60]  bus_probe_device+0xc0/0x1f0
[   97.559630][   T60]  device_add+0xb4d/0xef0
[   97.564066][   T60]  usb_set_configuration+0x19c2/0x1f10
[   97.569528][   T60]  usb_generic_driver_probe+0x91/0x150
[   97.574983][   T60]  usb_probe_device+0x159/0x270
[   97.579840][   T60]  really_probe+0x2cb/0x960
[   97.584347][   T60]  __driver_probe_device+0x198/0x280
[   97.589657][   T60]  driver_probe_device+0x54/0x3e0
[   97.594684][   T60]  __device_attach_driver+0x2e9/0x4a0
[   97.600060][   T60]  bus_for_each_drv+0x183/0x210
[   97.604908][   T60]  __device_attach+0x2a2/0x400
[   97.609673][   T60]  device_initial_probe+0x1a/0x20
[   97.614696][   T60]  bus_probe_device+0xc0/0x1f0
[   97.619456][   T60]  device_add+0xb4d/0xef0
[   97.623785][   T60]  usb_new_device+0xa70/0x1520
[   97.628665][   T60]  hub_event+0x2a5d/0x4680
[   97.633082][   T60]  process_one_work+0x71f/0xc40
[   97.637928][   T60]  worker_thread+0xa29/0x11f0
[   97.642598][   T60]  kthread+0x281/0x320
[   97.646671][   T60]  ret_from_fork+0x1f/0x30
[   97.651085][   T60] 
[   97.653436][   T60] Freed by task 24:
[   97.657230][   T60]  kasan_set_track+0x4b/0x70
[   97.661817][   T60]  kasan_save_free_info+0x31/0x50
[   97.666847][   T60]  ____kasan_slab_free+0x132/0x180
[   97.671965][   T60]  __kasan_slab_free+0x11/0x20
[   97.676725][   T60]  slab_free_freelist_hook+0xc2/0x190
[   97.682094][   T60]  __kmem_cache_free+0xb7/0x1b0
[   97.686942][   T60]  kfree+0x6f/0xf0
[   97.690665][   T60]  kvfree+0x35/0x40
[   97.694499][   T60]  netdev_freemem+0x3f/0x60
[   97.699013][   T60]  netdev_release+0x7f/0xb0
[   97.703513][   T60]  device_release+0xa4/0x1d0
[   97.708703][   T60]  kobject_put+0x19d/0x280
[   97.713113][   T60]  put_device+0x1f/0x30
[   97.720135][   T60]  free_netdev+0x392/0x490
[   97.724557][   T60]  usbnet_disconnect+0x25a/0x3b0
[   97.729498][   T60]  usb_unbind_interface+0x223/0x8d0
[   97.734710][   T60]  device_release_driver_internal+0x508/0x820
[   97.740796][   T60]  device_release_driver+0x19/0x20
[   97.745907][   T60]  bus_remove_device+0x2ee/0x350
[   97.750839][   T60]  device_del+0x6a4/0xeb0
[   97.755169][   T60]  usb_disable_device+0x3a8/0x750
[   97.760215][   T60]  usb_disconnect+0x31e/0x860
[   97.764891][   T60]  hub_event+0x1bd5/0x4680
[   97.769309][   T60]  process_one_work+0x71f/0xc40
[   97.774152][   T60]  worker_thread+0xd2e/0x11f0
[   97.778850][   T60]  kthread+0x281/0x320
[   97.782935][   T60]  ret_from_fork+0x1f/0x30
[   97.787446][   T60] 
[   97.789761][   T60] Last potentially related work creation:
[   97.795699][   T60]  kasan_save_stack+0x3a/0x60
[   97.800384][   T60]  __kasan_record_aux_stack+0xb6/0xc0
[   97.805757][   T60]  kasan_record_aux_stack_noalloc+0xb/0x10
[   97.811572][   T60]  insert_work+0x51/0x300
[   97.815906][   T60]  __queue_work+0x9b1/0xd30
[   97.820404][   T60]  queue_work_on+0xd2/0x140
[   97.824903][   T60]  usbnet_link_change+0x176/0x1a0
[   97.830015][   T60]  usbnet_probe+0x1d55/0x2780
[   97.834690][   T60]  usb_probe_interface+0x610/0xaf0
[   97.839801][   T60]  really_probe+0x2cb/0x960
[   97.844303][   T60]  __driver_probe_device+0x198/0x280
[   97.849585][   T60]  driver_probe_device+0x54/0x3e0
[   97.854610][   T60]  __device_attach_driver+0x2e9/0x4a0
[   97.859985][   T60]  bus_for_each_drv+0x183/0x210
[   97.864833][   T60]  __device_attach+0x2a2/0x400
[   97.869615][   T60]  device_initial_probe+0x1a/0x20
[   97.874647][   T60]  bus_probe_device+0xc0/0x1f0
[   97.879411][   T60]  device_add+0xb4d/0xef0
[   97.883740][   T60]  usb_set_configuration+0x19c2/0x1f10
[   97.889200][   T60]  usb_generic_driver_probe+0x91/0x150
[   97.894658][   T60]  usb_probe_device+0x159/0x270
[   97.899512][   T60]  really_probe+0x2cb/0x960
[   97.904018][   T60]  __driver_probe_device+0x198/0x280
[   97.909308][   T60]  driver_probe_device+0x54/0x3e0
[   97.914338][   T60]  __device_attach_driver+0x2e9/0x4a0
[   97.919741][   T60]  bus_for_each_drv+0x183/0x210
[   97.924588][   T60]  __device_attach+0x2a2/0x400
[   97.929352][   T60]  device_initial_probe+0x1a/0x20
[   97.934377][   T60]  bus_probe_device+0xc0/0x1f0
[   97.939136][   T60]  device_add+0xb4d/0xef0
[   97.943463][   T60]  usb_new_device+0xa70/0x1520
[   97.948224][   T60]  hub_event+0x2a5d/0x4680
[   97.952664][   T60]  process_one_work+0x71f/0xc40
[   97.957511][   T60]  worker_thread+0xa29/0x11f0
[   97.962179][   T60]  kthread+0x281/0x320
[   97.966240][   T60]  ret_from_fork+0x1f/0x30
[   97.970652][   T60] 
[   97.972998][   T60] The buggy address belongs to the object at ffff88811f29e000
[   97.972998][   T60]  which belongs to the cache kmalloc-4k of size 4096
[   97.987077][   T60] The buggy address is located 3312 bytes inside of
[   97.987077][   T60]  4096-byte region [ffff88811f29e000, ffff88811f29f000)
[   98.000527][   T60] 
[   98.002844][   T60] The buggy address belongs to the physical page:
[   98.009255][   T60] page:ffffea00047ca600 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x11f298
[   98.019489][   T60] head:ffffea00047ca600 order:3 compound_mapcount:0 compound_pincount:0
[   98.027809][   T60] flags: 0x4000000000010200(slab|head|zone=1)
[   98.033907][   T60] raw: 4000000000010200 0000000000000000 dead000000000001 ffff888100043380
[   98.042488][   T60] raw: 0000000000000000 0000000000040004 00000001ffffffff 0000000000000000
[   98.051072][   T60] page dumped because: kasan: bad access detected
[   98.057485][   T60] page_owner tracks the page as allocated
[   98.063200][   T60] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 2520, tgid 2520 (syz-executor), ts 88078734554, free_ts 83889776389
[   98.085957][   T60]  post_alloc_hook+0x1f5/0x210
[   98.090734][   T60]  prep_new_page+0x1c/0x110
[   98.095237][   T60]  get_page_from_freelist+0x2c7b/0x2cf0
[   98.100799][   T60]  __alloc_pages+0x19e/0x3a0
[   98.105415][   T60]  alloc_slab_page+0x6e/0xf0
[   98.110021][   T60]  new_slab+0x98/0x3d0
[   98.114100][   T60]  ___slab_alloc+0x6f6/0xb50
[   98.118692][   T60]  __slab_alloc+0x5e/0xa0
[   98.123024][   T60]  __kmem_cache_alloc_node+0x203/0x2c0
[   98.128479][   T60]  kmalloc_trace+0x29/0xb0
[   98.132896][   T60]  kobject_uevent_env+0x287/0x730
[   98.137915][   T60]  kobject_uevent+0x1d/0x30
[   98.142415][   T60]  __kobject_del+0xd7/0x2f0
[   98.146912][   T60]  kobject_put+0x1ee/0x280
[   98.151348][   T60]  netdev_queue_update_kobjects+0x3db/0x470
[   98.157288][   T60]  netif_set_real_num_tx_queues+0x17f/0x7f0
[   98.163178][   T60] page last free stack trace:
[   98.167840][   T60]  free_unref_page_prepare+0x742/0x750
[   98.173297][   T60]  free_unref_page+0x8f/0x530
[   98.177973][   T60]  __free_pages+0x67/0x100
[   98.182383][   T60]  __free_slab+0xca/0x1a0
[   98.186709][   T60]  __unfreeze_partials+0x160/0x190
[   98.191823][   T60]  put_cpu_partial+0xa9/0x100
[   98.196933][   T60]  __slab_free+0x1c4/0x280
[   98.201344][   T60]  ___cache_free+0xbf/0xd0
[   98.205757][   T60]  qlist_free_all+0xc6/0x140
[   98.210343][   T60]  kasan_quarantine_reduce+0x14a/0x170
[   98.215802][   T60]  __kasan_slab_alloc+0x24/0x80
[   98.220646][   T60]  slab_post_alloc_hook+0x4f/0x2d0
[   98.225755][   T60]  kmem_cache_alloc+0x16e/0x330
[   98.230616][   T60]  vm_area_dup+0x27/0x280
[   98.234944][   T60]  copy_mm+0xb45/0x1a10
[   98.239105][   T60]  copy_process+0x12a8/0x3470
[   98.243781][   T60] 
[   98.246090][   T60] Memory state around the buggy address:
[   98.251706][   T60]  ffff88811f29eb80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   98.259763][   T60]  ffff88811f29ec00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   98.267819][   T60] >ffff88811f29ec80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   98.275870][   T60]                                                              ^
[   98.283571][   T60]  ffff88811f29ed00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   98.291625][   T60]  ffff88811f29ed80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   98.299672][   T60] ==================================================================
[   98.307754][   T60] Disabling lock debugging due to kernel taint
[   98.316134][ T1088] hub 8-1:1.0: bad descriptor, ignoring hub
[   98.331566][ T2950] loop8: detected capacity change from 0 to 256
[   98.338173][ T1088] hub: probe of 8-1:1.0 failed with error -5
[   98.342367][   T28] audit: type=1400 audit(1750080699.026:430): avc:  denied  { search } for  pid=85 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   98.362807][ T1088] cdc_wdm 8-1:1.0: skipping garbage
[   98.366303][ T2950] FAT-fs (loop8): bogus number of FAT sectors
[   98.377073][ T2950] FAT-fs (loop8): Can't find a valid FAT filesystem
[   98.394037][ T1088] cdc_wdm 8-1:1.0: skipping garbage
[   98.403187][ T1088] cdc_wdm: probe of 8-1:1.0 failed with error -22
[   98.667468][ T1088] usb 8-1: USB disconnect, device number 11
[   99.267708][   T19] usb 6-1: USB disconnect, device number 13