last executing test programs:

46.396987501s ago: executing program 1 (id=324):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x54, r2, 0x1, 0x0, 0x25dfdbfc, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2f}}}, {0x14, 0x2, @in={0x2, 0x0, @empty}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0)
sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000d00)={0x60, r2, 0x4c1dad3e3d6a7499, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x4c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x4, @empty, 0x4}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000080}, 0x20000000)
sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB="a0", @ANYRES16=r2, @ANYBLOB="000828bd7000ffdbdf25080000002c000980080002000e0000000800020008000000020001000300000008000100000000000006ab00c70d00006000068008000600020000004c00040067636d28616573290000000000000000000000000000000000000000000000002400000037f7cdb2217a332d366abf7a3bf3ee5917d143c6ecb56c499c04d728de1578619128209d0800010003000000"], 0xa0}, 0x1, 0x0, 0x0, 0x8840}, 0x0)

46.337712622s ago: executing program 1 (id=326):
r0 = userfaultfd(0x80801)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1})

46.310474602s ago: executing program 1 (id=329):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = dup(r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x4, 0x0, 0x0)

46.258955313s ago: executing program 1 (id=330):
syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000000c0)='./file2\x00', 0x3000cd0, &(0x7f0000000440)=ANY=[], 0x1, 0x1509, &(0x7f0000002d40)="$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")
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0)
mount_setattr(0xffffffffffffff9c, 0x0, 0x9000, &(0x7f0000000200)={0x76, 0x66}, 0x20)
mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0)
mount$bind(&(0x7f00000001c0)='./file0/file0\x00', &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x2480, 0x0)

46.061803604s ago: executing program 1 (id=336):
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000d80)=[{{&(0x7f0000000940)=@abs={0x1, 0x0, 0x4e22}, 0x6e, 0x0}}], 0x1, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x1, 0x4)
setsockopt$inet6_udp_int(r0, 0x11, 0x66, &(0x7f0000000100)=0xc6, 0x4)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x7d)
syz_emit_ethernet(0xd2, &(0x7f0000000900)=ANY=[@ANYBLOB="ffffffffbfff00000000000086dd600489f1009c1100fc010000000000000025030000000000ff02000000000000000000000000000100000e22"], 0x0)

45.880195225s ago: executing program 1 (id=343):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000340)='kfree\x00', r1}, 0x10)
creat(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000a40)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@version_u}]}})

45.808013716s ago: executing program 32 (id=343):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000340)='kfree\x00', r1}, 0x10)
creat(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000a40)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@version_u}]}})

2.384294482s ago: executing program 3 (id=1195):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3"], 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r1}, 0x10)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000940))

2.311335633s ago: executing program 3 (id=1197):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffd98, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000fc0f00000a"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r1}, 0x10)
syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0)

2.243668033s ago: executing program 3 (id=1200):
r0 = socket$pptp(0x18, 0x1, 0x2)
bind$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e)
connect$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0x0, @rand_addr=0x64010102}}, 0x1e)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000015c0), 0x2300, 0x0)
ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000040)=0x1)
ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000140)=0x4)

2.091586584s ago: executing program 3 (id=1201):
r0 = socket$inet6(0xa, 0x3, 0x7)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@dev, 0x800, 0x0, 0x2000000000903, 0x1}, 0x20)
setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4)
setsockopt$inet6_int(r0, 0x29, 0x24, &(0x7f0000000100)=0x40, 0x4)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380000, @loopback}, 0x1c)
sendmsg$inet6(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[], 0xf}, 0x6b87bd76ddbcbbe)

1.968462805s ago: executing program 3 (id=1204):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a500850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r0}, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r1}, 0xd)
syz_open_procfs$namespace(0x0, 0xfffffffffffffffe)

1.921289096s ago: executing program 3 (id=1206):
r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000404c05f20dafd60000000109022400010000000009040000010300010009210101000122050009058103"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="000657"], 0x0, 0x0, 0x0, 0x0}, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000340), 0x0})

1.842210106s ago: executing program 4 (id=1207):
r0 = socket(0x10, 0x3, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800800040000000000050017"], 0x44}}, 0x0)

1.766127247s ago: executing program 4 (id=1208):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000004500000002"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10)
sendto$inet6(r0, &(0x7f00000000c0)="e9", 0x1, 0x20008045, &(0x7f00000001c0)={0xa, 0x2, 0x1000, @empty}, 0x1c)

1.746436947s ago: executing program 4 (id=1211):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x10)
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x800, &(0x7f0000000240)={[{@gid}, {@time_offset={'time_offset', 0x3d, 0x3}}, {@iocharset={'iocharset', 0x3d, 'cp949'}}, {@errors_remount}, {}, {@keep_last_dots}, {@gid}, {@errors_remount}, {@discard}, {@errors_continue}]}, 0x5, 0x1510, &(0x7f00000037c0)="$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")
r2 = openat(0xffffffffffffff9c, &(0x7f0000000640)='.\x00', 0x0, 0x0)
renameat2(r2, &(0x7f00000001c0)='./file0\x00', r2, &(0x7f0000000200)='.\x02\x00', 0x0)

1.614636858s ago: executing program 4 (id=1214):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10)
r2 = getpid()
process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)

1.144528422s ago: executing program 4 (id=1221):
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff})
pipe(&(0x7f0000002480)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
splice(r1, 0x0, r2, 0x0, 0x7, 0x9)

944.440193ms ago: executing program 5 (id=1227):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x33)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000dc0)={{r0, <r1=>0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000e00)='%pS    \x00'}, 0x20)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000880)={{r1}, &(0x7f0000000800), &(0x7f0000000840)='%pI4   \x00'}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000003c0)={r1}, 0x4)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b70800000000e1ff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r2, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x900, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

860.580023ms ago: executing program 5 (id=1228):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
keyctl$search(0xa, 0x0, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000280)={'syz', 0x2}, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', <r1=>0x0})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@getnexthop={0x20, 0x6a, 0x501, 0xfffffdfe, 0x25dfdbfd, {}, [@NHA_OIF={0x8, 0x5, r1}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000090}, 0x20008000)

822.472244ms ago: executing program 5 (id=1229):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x5, &(0x7f0000000700)=ANY=[@ANYBLOB="18020000fffd3fff0000000000000000850000004100000085000000d000000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x11, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)

727.719064ms ago: executing program 5 (id=1231):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x9, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000009500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='sys_enter\x00', r1}, 0x10)
timer_create(0x1, 0x0, &(0x7f0000000080)=<r2=>0x0)
timer_delete(r2)

697.063525ms ago: executing program 5 (id=1233):
r0 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), 0x0, 0x0, 0xfffffffffffffffd)
keyctl$set_timeout(0xf, r0, 0x1)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000000c0))
ioctl$PPPIOCSMAXCID(r1, 0x4010744d, &(0x7f0000000000)=0x20000002)
syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000000)='./file2\x00', 0x4001, &(0x7f0000000600)=ANY=[@ANYBLOB='nouser_xattr,jqfmt=vfsv0,active_logs=4,data_flush,heap,nouser_xattr,quota,resuid=', @ANYRESHEX=0xee01, @ANYBLOB="2c7573726a71756f74073d6e6f666c7573685f6d657267652c636865636b706f696e743d64697361626c652c6e6f696e6c696e655f646174612c6772706a71756f74613d2b7e4e7e5e055b1b3d5e001ee10686a2ecc1396c68a6b184e27fe013bd4854788e79d5353a90e5209bbcbe9d2fac504ebe64b084d7fdff922a51e826d81d8c350d9649c90e7101d13b7424e05856551cbf844cd3f3f433d1b7220a6e0ceb799ddfcb5ccce65a6be6f65dd92fe3c56b1704ee2c00"], 0x0, 0x550a, &(0x7f0000006200)="$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")

444.853986ms ago: executing program 2 (id=1238):
r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x0)
fchdir(r1)
getdents(0xffffffffffffffff, 0x0, 0x58)
fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0)

399.721937ms ago: executing program 2 (id=1241):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x10)
r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
tkill(r2, 0x12)

356.376878ms ago: executing program 2 (id=1243):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, 0x0, &(0x7f0000000040)}, 0x20)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x10)
getgroups(0x0, 0x0)

320.997578ms ago: executing program 2 (id=1244):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', <r3=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newqdisc={0xf8, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0xc8, 0x2, {{}, [@TCA_NETEM_LOSS={0x8c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0x101, 0xfffffffc, 0x2, 0x5}}, @NETEM_LOSS_GI={0x18, 0x1, {0x8, 0x80000001, 0x3, 0x1, 0x1ff}}, @NETEM_LOSS_GE={0xd, 0x2, {0x2, 0x3, 0x3, 0x7}}, @NETEM_LOSS_GI={0x18, 0x1, {0x7ff, 0x3, 0xfffeffff, 0xc5, 0x401}}, @NETEM_LOSS_GI={0x18, 0x1, {0xffff, 0xb1, 0x7fffffff, 0xde9, 0x42}}, @NETEM_LOSS_GI={0x18, 0x1, {0xc, 0x4, 0x1, 0x0, 0x1000}}]}, @TCA_NETEM_RATE={0x14, 0xd}, @TCA_NETEM_CORRUPT={0xc, 0x2}]}}}]}, 0xf8}}, 0x0)

276.116488ms ago: executing program 4 (id=1245):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0x0, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080)
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES8], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0)
ioctl$HIDIOCGUSAGE(r1, 0xd01c4813, &(0x7f00000000c0)={0x2, 0x0, 0x0, 0x2, 0xfffffffd, 0x2})

272.403608ms ago: executing program 2 (id=1246):
r0 = epoll_create1(0x80000)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000240))
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100))
shutdown(r2, 0x1)
epoll_wait(r0, &(0x7f0000000180)=[{}], 0x1, 0x0)

249.325548ms ago: executing program 2 (id=1247):
r0 = creat(&(0x7f00000005c0)='./file0\x00', 0x0)
close(r0)
r1 = socket(0x10, 0x3, 0x4)
sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newqdisc={0x24, 0x14, 0xf0b, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, {0x0, 0x3}, {}, {0x0, 0xa}}}, 0x24}}, 0x0)
r2 = socket$xdp(0x2c, 0x3, 0x0)
mount$9p_fd(0x0, &(0x7f0000000800)='./file0\x00', &(0x7f00000007c0), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}})

166.022239ms ago: executing program 5 (id=1248):
prlimit64(0x0, 0xe, 0x0, 0x0)
ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, 0x0)
syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./bus\x00', 0x0, &(0x7f00000001c0)={[{@nodiscard}, {@disable_ext_identify}, {@noheap}, {@alloc_mode_reuse}, {@noquota}, {@gc_merge}, {@background_gc_on}, {@nouser_xattr}, {@checkpoint_diasble}, {@user_xattr}, {@quota}, {@adaptive_mode}, {@noinline_dentry}, {@noinline_dentry}]}, 0x1, 0x5505, &(0x7f0000002480)="$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")
r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000140)='.pending_reads\x00', 0x1a10c1, 0x9c37611dc13d0d83)
capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000040)={0x200000, 0x200000, 0x1})
fchown(r0, 0xee01, 0x0)

88.070739ms ago: executing program 0 (id=1250):
r0 = getpid()
r1 = syz_pidfd_open(r0, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000005000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10)
setns(r1, 0x24020000)
syz_clone3(&(0x7f00000008c0)={0x10860000, 0x0, 0x0, 0x0, {0x28}, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[r0], 0x1}, 0x58)

87.546549ms ago: executing program 0 (id=1251):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413ec5000000d500000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r2}, 0x10)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', <r3=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000009c0)=@newqdisc={0x24, 0x25, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x8, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x2004c000}, 0x0)

85.057779ms ago: executing program 0 (id=1252):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000840)='tasks\x00', 0x2, 0x0)
write$cgroup_pid(r1, &(0x7f0000000140), 0x12)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0, 0x0)
read$FUSE(r2, &(0x7f0000000ac0)={0x2020}, 0x2020)

65.187199ms ago: executing program 0 (id=1253):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x3, 0x100005, 0xb, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)

36.74918ms ago: executing program 0 (id=1254):
creat(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r2 = dup(r1)
write$P9_RLERRORu(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="5300000007000046009d40edce82", @ANYRESDEC=r1], 0x53)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x800000, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}})

0s ago: executing program 0 (id=1255):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c)
shutdown(r0, 0x0)
sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c)
setsockopt$inet6_tcp_int(r0, 0x6, 0xc, &(0x7f00000000c0)=0x6, 0x4)
read(r0, &(0x7f0000000000)=""/76, 0x4c)

kernel console output (not intermixed with test programs):

adv_slave_0: link becomes ready
[   30.036127][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   30.049480][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   30.067062][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   30.082498][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   30.098164][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   30.121212][  T290] device veth0_vlan entered promiscuous mode
[   30.136241][  T291] device veth1_macvtap entered promiscuous mode
[   30.162073][   T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   30.181140][   T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   30.181490][  T289] request_module fs-gadgetfs succeeded, but still no fs?
[   30.196195][   T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   30.218940][   T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   30.235016][   T38] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   30.246118][   T38] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   30.256582][   T38] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   30.275061][  T292] device veth1_macvtap entered promiscuous mode
[   30.296291][  T293] device veth1_macvtap entered promiscuous mode
[   30.306074][   T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   30.320259][   T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   30.334718][   T38] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   30.344379][   T10] tipc: Subscription rejected, illegal request
[   30.352628][   T38] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   30.370793][   T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   30.384109][   T38] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   30.403875][   T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   30.422473][   T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   30.434480][   T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   30.445337][   T38] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   30.486742][   T38] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   30.497752][   T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   30.516366][   T38] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   30.535699][   T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   30.551789][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   30.562869][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   30.575745][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   30.585926][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   30.588413][   T28] kauditd_printk_skb: 36 callbacks suppressed
[   30.588431][   T28] audit: type=1400 audit(1741908100.043:112): avc:  denied  { create } for  pid=327 comm="syz.0.10" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[   30.670130][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   30.684819][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   30.708940][  T290] device veth1_macvtap entered promiscuous mode
[   30.748769][  T329] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   30.764980][  T336] loop4: detected capacity change from 0 to 256
[   30.768170][  T329] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   30.782844][  T329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   30.799711][   T28] audit: type=1400 audit(1741908100.253:113): avc:  denied  { mounton } for  pid=334 comm="syz.4.5" path="/0/file0" dev="tmpfs" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[   30.830552][   T28] audit: type=1400 audit(1741908100.293:114): avc:  denied  { name_bind } for  pid=337 comm="syz.1.2" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1
[   30.872776][  T329] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   30.896428][  T329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   30.913697][  T341] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   30.913882][   T28] audit: type=1400 audit(1741908100.293:115): avc:  denied  { mount } for  pid=334 comm="syz.4.5" name="/" dev="loop4" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1
[   30.984950][   T28] audit: type=1400 audit(1741908100.343:116): avc:  denied  { read } for  pid=340 comm="syz.3.4" name="kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[   31.043094][   T28] audit: type=1400 audit(1741908100.343:117): avc:  denied  { open } for  pid=340 comm="syz.3.4" path="/dev/kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[   31.073131][   T28] audit: type=1400 audit(1741908100.363:118): avc:  denied  { ioctl } for  pid=340 comm="syz.3.4" path="/dev/kvm" dev="devtmpfs" ino=83 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[   31.131972][  T353] syz.1.15[353] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   31.132059][  T353] syz.1.15[353] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   31.146188][   T28] audit: type=1400 audit(1741908100.393:119): avc:  denied  { unmount } for  pid=293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1
[   31.146540][  T351] overlayfs: upper fs does not support file handles, falling back to index=off.
[   31.184306][   T28] audit: type=1400 audit(1741908100.433:120): avc:  denied  { mount } for  pid=290 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[   31.184341][   T28] audit: type=1400 audit(1741908100.493:121): avc:  denied  { mounton } for  pid=290 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=528 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1
[   31.205059][  T351] overlayfs: NFS export requires "index=on", falling back to nfs_export=off.
[   31.269797][  T351] overlayfs: conflicting lowerdir path
[   31.278562][  T355] Driver unsupported XDP return value 0 on prog  (id 11) dev N/A, expect packet loss!
[   31.303639][  T353] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15'.
[   31.397683][  T369] syz.3.21 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[   31.503626][  T381] process 'syz.4.26' launched './file1' with NULL argv: empty string added
[   31.963341][  T427] netlink: 96 bytes leftover after parsing attributes in process `syz.3.46'.
[   32.047277][   T24] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   32.237171][   T24] usb 3-1: Using ep0 maxpacket: 16
[   32.243462][   T24] usb 3-1: config 0 has an invalid interface number: 41 but max is 0
[   32.268630][   T24] usb 3-1: config 0 has no interface number 0
[   32.278836][   T24] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[   32.297336][  T443] SELinux: failed to load policy
[   32.303409][   T24] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[   32.312587][  T451] loop4: detected capacity change from 0 to 2048
[   32.336796][   T24] usb 3-1: config 0 interface 41 has no altsetting 0
[   32.350128][   T24] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a
[   32.361602][   T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   32.369579][  T451] GPT:first_usable_lbas don't match.
[   32.371944][   T24] usb 3-1: Product: syz
[   32.379300][  T451] GPT:34 != 290
[   32.384896][   T24] usb 3-1: Manufacturer: syz
[   32.396070][   T24] usb 3-1: SerialNumber: syz
[   32.404978][   T24] usb 3-1: config 0 descriptor??
[   32.411018][  T451] GPT: Use GNU Parted to correct GPT errors.
[   32.422076][  T408] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[   32.433012][  T451]  loop4: p1 p2 p3
[   32.436768][  T408] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[   32.460906][  T102] GPT:first_usable_lbas don't match.
[   32.466308][  T102] GPT:34 != 290
[   32.487425][  T102] GPT: Use GNU Parted to correct GPT errors.
[   32.495887][  T102]  loop4: p1 p2 p3
[   32.531858][  T339] udevd[339]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory
[   32.555581][  T339] udevd[339]: failed to send result of seq 4328 to main daemon: Connection refused
[   32.655112][  T408] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[   32.665979][  T408] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[   32.789996][  T484] loop1: detected capacity change from 0 to 256
[   32.798930][  T484] exfat: Deprecated parameter 'namecase'
[   32.810112][  T484] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d)
[   32.883365][   T24] Error reading MAC address
[   32.889901][   T24] sr9700: probe of 3-1:0.41 failed with error -71
[   32.908867][   T24] usb 3-1: USB disconnect, device number 2
[   32.923033][  T486] binder: 485:486 ioctl c0306201 4000000003c0 returned -14
[   32.943004][  T315] udevd[315]: failed to send result of seq 4321 to main daemon: Transport endpoint is not connected
[   33.191455][  T510] netlink: 96 bytes leftover after parsing attributes in process `syz.0.83'.
[   33.231073][  T515] input: syz0 as /devices/virtual/input/input4
[   33.436344][  T529] SELinux:  Context � is not valid (left unmapped).
[   33.577655][  T548] syz.0.100[548] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   33.577747][  T548] syz.0.100[548] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   33.599963][  T546] loop1: detected capacity change from 0 to 512
[   33.680927][  T546] =======================================================
[   33.680927][  T546] WARNING: The mand mount option has been deprecated and
[   33.680927][  T546]          and is ignored by this kernel. Remove the mand
[   33.680927][  T546]          option from the mount to silence this warning.
[   33.680927][  T546] =======================================================
[   33.715086][  T554] loop2: detected capacity change from 0 to 256
[   33.784197][  T554] exfat: Unknown parameter '18446744073709551615�01777777777777777777777'
[   33.813212][  T559] tmpfs: Unknown parameter '�'
[   33.820314][  T546] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   33.839641][  T556] SELinux: ebitmap: start bit 0 comes after start bit 0
[   33.869022][  T556] SELinux: failed to load policy
[   33.886994][  T554] loop2: detected capacity change from 0 to 256
[   33.902827][  T554] exfat: Deprecated parameter 'utf8'
[   33.921525][  T554] exfat: Deprecated parameter 'namecase'
[   33.922656][  T546] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[   33.938981][  T546] ext4 filesystem being mounted at /25/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   33.950054][  T554] exfat: Deprecated parameter 'utf8'
[   33.968188][  T572] SELinux: security_context_str_to_sid (E�) failed with errno=-22
[   33.992929][  T292] EXT4-fs (loop1): unmounting filesystem.
[   34.001595][  T554] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d)
[   34.050731][  T575] loop0: detected capacity change from 0 to 512
[   34.080334][  T575] EXT4-fs error (device loop0): ext4_expand_extra_isize_ea:2759: inode #11: comm syz.0.112: corrupted xattr block 95
[   34.106703][  T575] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2809: Unable to expand inode 11. Delete some EAs or run e2fsck.
[   34.123259][  T575] EXT4-fs error (device loop0): ext4_validate_block_bitmap:429: comm syz.0.112: bg 0: block 7: invalid block bitmap
[   34.124847][  T590] loop1: detected capacity change from 0 to 256
[   34.145426][  T575] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6170: Corrupt filesystem
[   34.158925][  T590] exfat: Unknown parameter '��������'
[   34.165621][  T575] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2925: inode #11: comm syz.0.112: corrupted xattr block 95
[   34.186157][  T575] EXT4-fs warning (device loop0): ext4_evict_inode:299: xattr delete (err -117)
[   34.196148][  T575] EXT4-fs (loop0): 1 orphan inode deleted
[   34.202774][  T575] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[   34.254244][  T289] EXT4-fs (loop0): unmounting filesystem.
[   34.463728][  T631] netlink: 32 bytes leftover after parsing attributes in process `syz.2.137'.
[   34.485466][  T631] netem: unknown loss type 13
[   34.491513][  T631] netem: change failed
[   34.519685][  T634] syz.0.138[634] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   34.519806][  T634] syz.0.138[634] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   34.612507][  T647] tipc: Started in network mode
[   34.634864][  T647] tipc: Node identity ac1414aa, cluster identity 4711
[   34.647204][  T647] tipc: New replicast peer: 100.1.1.1
[   34.654682][  T647] tipc: Enabled bearer <udp:syz2>, priority 10
[   35.094975][  T667] loop2: detected capacity change from 0 to 512
[   35.102071][  T667] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   35.119305][  T667] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[   35.129831][  T667] ext4 filesystem being mounted at /17/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   35.145662][  T667] SELinux:  Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped).
[   35.166032][  T667] syz.2.153 (667) used greatest stack depth: 22088 bytes left
[   35.177844][  T290] EXT4-fs (loop2): unmounting filesystem.
[   35.247302][  T296] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   35.437263][  T296] usb 4-1: Using ep0 maxpacket: 8
[   35.447677][  T296] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   35.467389][  T296] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   35.490269][  T296] usb 4-1: New USB device found, idVendor=056a, idProduct=00b9, bcdDevice= 0.00
[   35.508335][  T296] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   35.519423][  T296] usb 4-1: config 0 descriptor??
[   35.520239][  T689] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check.
[   35.767257][  T332] tipc: Node number set to 2886997162
[   35.837438][  T720] loop4: detected capacity change from 0 to 1024
[   35.846282][   T28] kauditd_printk_skb: 97 callbacks suppressed
[   35.846299][   T28] audit: type=1400 audit(1741908361.295:219): avc:  denied  { mounton } for  pid=719 comm="syz.4.175" path="/45/file1" dev="tmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[   35.880297][   T24] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   35.892919][  T720] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[   35.902888][  T720] EXT4-fs (loop4): unmounting filesystem.
[   35.946653][  T725] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=725 comm=syz.1.176
[   35.974189][  T296] wacom 0003:056A:00B9.0001: ignoring exceeding usage max
[   36.000595][  T296] wacom 0003:056A:00B9.0001: Unknown device_type for 'HID 056a:00b9'. Assuming pen.
[   36.022971][  T296] wacom 0003:056A:00B9.0001: hidraw0: USB HID v0.00 Device [HID 056a:00b9] on usb-dummy_hcd.3-1/input0
[   36.048707][  T296] input: Wacom Intuos4 6x9 Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:056A:00B9.0001/input/input5
[   36.071443][   T24] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[   36.093722][   T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   36.106947][   T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   36.119714][   T24] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[   36.121361][  T728] syz.1.178 (728) used greatest stack depth: 21456 bytes left
[   36.145826][   T24] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[   36.186976][   T24] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[   36.209803][   T24] usb 1-1: Manufacturer: syz
[   36.215717][   T24] usb 1-1: config 0 descriptor??
[   36.233675][   T37] usb 4-1: USB disconnect, device number 2
[   36.239815][  T742] syz.2.183 (742) used greatest stack depth: 19752 bytes left
[   36.289212][  T751] binder: 750:751 ioctl c0306201 4000000001c0 returned -22
[   36.443104][   T28] audit: type=1400 audit(1741908361.895:220): avc:  denied  { read } for  pid=766 comm="syz.1.194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   36.502691][   T28] audit: type=1400 audit(1741908361.955:221): avc:  denied  { read } for  pid=770 comm="syz.1.196" name="ppp" dev="devtmpfs" ino=154 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[   36.553338][   T28] audit: type=1400 audit(1741908361.995:222): avc:  denied  { open } for  pid=770 comm="syz.1.196" path="/dev/ppp" dev="devtmpfs" ino=154 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[   36.582792][   T28] audit: type=1400 audit(1741908361.995:223): avc:  denied  { ioctl } for  pid=770 comm="syz.1.196" path="/dev/ppp" dev="devtmpfs" ino=154 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[   36.614907][   T28] audit: type=1400 audit(1741908362.005:224): avc:  denied  { create } for  pid=770 comm="syz.1.196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[   36.637970][   T28] audit: type=1400 audit(1741908362.035:225): avc:  denied  { create } for  pid=773 comm="syz.4.197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   36.654341][   T24] appleir 0003:05AC:8243.0002: unknown main item tag 0x0
[   36.673819][   T24] appleir 0003:05AC:8243.0002: No inputs registered, leaving
[   36.707671][   T24] appleir 0003:05AC:8243.0002: hiddev96,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0
[   36.863102][   T28] audit: type=1400 audit(1741908362.315:226): avc:  denied  { append } for  pid=697 comm="syz.0.165" name="hiddev0" dev="devtmpfs" ino=544 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   36.925359][   T28] audit: type=1400 audit(1741908362.375:227): avc:  denied  { read write } for  pid=804 comm="syz.2.211" name="uhid" dev="devtmpfs" ino=263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[   36.963055][   T28] audit: type=1400 audit(1741908362.375:228): avc:  denied  { open } for  pid=804 comm="syz.2.211" path="/dev/uhid" dev="devtmpfs" ino=263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[   37.179252][  T825] binder: 823:825 ioctl 400c620e 400000000580 returned -22
[   37.441274][  T844] __vm_enough_memory: pid: 844, comm: syz.1.228, no enough memory for the allocation
[   37.752803][  T876] loop2: detected capacity change from 0 to 16
[   37.763419][  T876] erofs: (device loop2): mounted with root inode @ nid 36.
[   37.780864][  T874] SELinux: failed to load policy
[   37.845776][  T884] overlayfs: overlay with incompat feature 'volatile' cannot be mounted
[   37.950643][  T890] xt_hashlimit: size too large, truncated to 1048576
[   38.107174][   T37] usb 1-1: reset high-speed USB device number 2 using dummy_hcd
[   38.326492][  T927] netlink: 4 bytes leftover after parsing attributes in process `syz.3.265'.
[   38.395953][  T933] loop2: detected capacity change from 0 to 128
[   38.452292][  T936] SELinux: failed to load policy
[   38.618672][  T963] device batadv_slave_1 entered promiscuous mode
[   38.633899][  T963] device batadv_slave_1 left promiscuous mode
[   38.779666][  T990] capability: warning: `syz.0.295' uses deprecated v2 capabilities in a way that may be insecure
[   38.916446][ T1002] loop0: detected capacity change from 0 to 2048
[   38.947693][   T24] usb 1-1: USB disconnect, device number 2
[   38.980260][ T1002] Alternate GPT is invalid, using primary GPT.
[   38.992961][ T1002]  loop0: p2 p3 p7
[   39.305702][ T1043] netlink: 8 bytes leftover after parsing attributes in process `syz.4.316'.
[   39.424045][ T1061] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[   39.433483][ T1061] tipc: New replicast peer: 0000:0000:0000:0000:0000:0000:0000:0000
[   39.498722][ T1067] loop0: detected capacity change from 0 to 16
[   39.512678][ T1067] erofs: (device loop0): mounted with root inode @ nid 36.
[   39.525043][ T1067] erofs: (device loop0): z_erofs_readahead: readahead error at page 12 @ nid 36
[   39.544457][ T1067] erofs: (device loop0): z_erofs_readahead: readahead error at page 9 @ nid 36
[   39.559888][ T1067] erofs: (device loop0): z_erofs_readahead: readahead error at page 8 @ nid 36
[   39.578803][ T1075] loop1: detected capacity change from 0 to 256
[   39.586389][ T1067] erofs: (device loop0): z_erofs_pcluster_readmore: readmore error at page 8 @ nid 36
[   39.601442][ T1067] syz.0.327: attempt to access beyond end of device
[   39.601442][ T1067] loop0: rw=524288, sector=67108872, nr_sectors = 16 limit=16
[   39.620833][ T1067] syz.0.327: attempt to access beyond end of device
[   39.620833][ T1067] loop0: rw=524288, sector=720, nr_sectors = 8 limit=16
[   39.641787][ T1075] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d)
[   39.733498][ T1082] netem: incorrect ge model size
[   39.767176][ T1082] netem: change failed
[   39.781326][ T1089] loop4: detected capacity change from 0 to 256
[   39.826078][ T1089] FAT-fs (loop4): bogus number of FAT sectors
[   39.836781][ T1089] FAT-fs (loop4): Can't find a valid FAT filesystem
[   40.023677][ T1103] SELinux:  policydb version 0 does not match my version range 15-33
[   40.094220][ T1103] SELinux: failed to load policy
[   40.435394][ T1118] bridge0: port 1(bridge_slave_0) entered blocking state
[   40.461937][ T1118] bridge0: port 1(bridge_slave_0) entered disabled state
[   40.485049][ T1118] device bridge_slave_0 entered promiscuous mode
[   40.500569][ T1118] bridge0: port 2(bridge_slave_1) entered blocking state
[   40.516720][ T1118] bridge0: port 2(bridge_slave_1) entered disabled state
[   40.535007][ T1118] device bridge_slave_1 entered promiscuous mode
[   40.608439][  T329] tipc: Disabling bearer <udp:syz2>
[   40.620420][  T329] tipc: Left network mode
[   40.660687][ T1139] loop2: detected capacity change from 0 to 4096
[   40.677731][ T1139] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[   40.703937][ T1139] fs-verity: sha256 using implementation "sha256-avx2"
[   40.716379][ T1118] bridge0: port 2(bridge_slave_1) entered blocking state
[   40.724023][ T1118] bridge0: port 2(bridge_slave_1) entered forwarding state
[   40.733102][ T1118] bridge0: port 1(bridge_slave_0) entered blocking state
[   40.740716][ T1118] bridge0: port 1(bridge_slave_0) entered forwarding state
[   40.752801][ T1139] fs-verity (loop2, inode 16): fs-verity keyring is empty, rejecting signed file!
[   40.767167][  T332] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   40.794953][  T290] EXT4-fs (loop2): unmounting filesystem.
[   40.804266][  T409] bridge0: port 1(bridge_slave_0) entered disabled state
[   40.814473][  T409] bridge0: port 2(bridge_slave_1) entered disabled state
[   40.831967][  T409] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   40.853580][  T409] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   40.878032][  T409] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   40.896480][  T409] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   40.909045][  T409] bridge0: port 1(bridge_slave_0) entered blocking state
[   40.919399][  T409] bridge0: port 1(bridge_slave_0) entered forwarding state
[   40.940249][  T409] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   40.953415][  T409] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   40.966169][  T409] bridge0: port 2(bridge_slave_1) entered blocking state
[   40.976226][  T409] bridge0: port 2(bridge_slave_1) entered forwarding state
[   40.985844][  T332] usb 5-1: Using ep0 maxpacket: 8
[   40.986682][   T28] kauditd_printk_skb: 104 callbacks suppressed
[   40.986700][   T28] audit: type=1400 audit(1741908366.425:333): avc:  denied  { create } for  pid=1162 comm="syz.2.369" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   41.032548][  T332] usb 5-1: config index 0 descriptor too short (expected 5924, got 36)
[   41.032700][ T1164] futex_wake_op: syz.0.370 tries to shift op by 32; fix this program
[   41.066311][  T332] usb 5-1: config 250 has an invalid interface number: 228 but max is -1
[   41.077466][   T28] audit: type=1400 audit(1741908366.425:334): avc:  denied  { connect } for  pid=1162 comm="syz.2.369" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   41.117590][ T1166] loop2: detected capacity change from 0 to 512
[   41.117614][  T409] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   41.117997][  T409] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   41.125683][  T332] usb 5-1: config 250 has 1 interface, different from the descriptor's value: 0
[   41.142593][  T409] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   41.150977][   T28] audit: type=1400 audit(1741908366.565:335): avc:  denied  { map } for  pid=1165 comm="syz.2.371" path="socket:[20549]" dev="sockfs" ino=20549 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   41.162247][  T409] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   41.169898][  T332] usb 5-1: config 250 has no interface number 0
[   41.222390][  T332] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024
[   41.223891][ T1166] EXT4-fs (loop2): revision level too high, forcing read-only mode
[   41.241027][  T332] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024
[   41.256466][ T1166] EXT4-fs (loop2): orphan cleanup on readonly fs
[   41.274848][ T1118] device veth0_vlan entered promiscuous mode
[   41.282843][  T409] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   41.287315][  T332] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0
[   41.294018][ T1166] EXT4-fs warning (device loop2): ext4_enable_quotas:7017: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[   41.305102][  T332] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0
[   41.323953][  T409] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   41.335660][  T332] usb 5-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17
[   41.345643][  T409] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   41.362535][  T332] usb 5-1: config 250 interface 228 has no altsetting 0
[   41.382765][ T1166] EXT4-fs (loop2): Cannot turn on quotas: error -22
[   41.385464][  T332] usb 5-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07
[   41.407909][ T1166] EXT4-fs error (device loop2): ext4_orphan_get:1400: inode #16: comm syz.2.371: iget: immutable or append flags not allowed on symlinks
[   41.409169][  T332] usb 5-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59
[   41.431052][  T409] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   41.441175][  T332] usb 5-1: Product: syz
[   41.450672][ T1166] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.371: couldn't read orphan inode 16 (err -117)
[   41.454168][  T332] usb 5-1: SerialNumber: syz
[   41.473004][ T1166] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[   41.480632][  T332] hub 5-1:250.228: bad descriptor, ignoring hub
[   41.499300][  T332] hub: probe of 5-1:250.228 failed with error -5
[   41.506329][  T409] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   41.519114][  T409] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   41.527622][   T28] audit: type=1400 audit(1741908366.975:336): avc:  denied  { accept } for  pid=1165 comm="syz.2.371" path="socket:[20549]" dev="sockfs" ino=20549 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   41.537377][   T37] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[   41.574324][  T290] EXT4-fs (loop2): unmounting filesystem.
[   41.575201][  T409] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   41.589482][  T294] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[   41.601876][  T409] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   41.605407][ T1175] loop2: detected capacity change from 0 to 512
[   41.631703][ T1118] device veth1_macvtap entered promiscuous mode
[   41.647874][ T1175] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[   41.663218][  T409] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   41.667549][ T1175] ext4 filesystem being mounted at /83/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   41.683878][  T332] usblp 5-1:250.228: usblp0: USB Bidirectional printer dev 2 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292
[   41.699249][  T409] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   41.725322][  T409] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   41.740178][   T28] audit: type=1400 audit(1741908367.185:337): avc:  denied  { create } for  pid=1174 comm="syz.2.374" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1
[   41.775003][   T28] audit: type=1400 audit(1741908367.205:338): avc:  denied  { mounton } for  pid=1174 comm="syz.2.374" path="/83/file0/bus" dev="loop2" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1
[   41.787217][   T37] usb 4-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[   41.808369][   T28] audit: type=1400 audit(1741908367.205:339): avc:  denied  { write } for  pid=1174 comm="syz.2.374" name="bus" dev="loop2" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1
[   41.817302][   T37] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   41.851273][   T28] audit: type=1400 audit(1741908367.205:340): avc:  denied  { add_name } for  pid=1174 comm="syz.2.374" name="work" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1
[   41.865483][  T294] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   41.892077][   T28] audit: type=1400 audit(1741908367.205:341): avc:  denied  { setattr } for  pid=1174 comm="syz.2.374" name="work" dev="loop2" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1
[   41.904259][  T294] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   41.947378][   T37] usb 4-1: config 0 descriptor??
[   41.957346][   T28] audit: type=1400 audit(1741908367.205:342): avc:  denied  { write open } for  pid=1174 comm="syz.2.374" path=2F202864656C6574656429 dev="loop2" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   41.987270][  T294] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[   42.006856][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   42.017472][  T290] EXT4-fs (loop2): unmounting filesystem.
[   42.024386][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   42.046716][  T294] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   42.065946][  T294] usb 1-1: config 0 descriptor??
[   42.113000][  T329] device bridge_slave_1 left promiscuous mode
[   42.125430][  T329] bridge0: port 2(bridge_slave_1) entered disabled state
[   42.134394][  T332] usb 5-1: USB disconnect, device number 2
[   42.151966][  T329] device bridge_slave_0 left promiscuous mode
[   42.159802][  T332] usblp0: removed
[   42.160655][  T329] bridge0: port 1(bridge_slave_0) entered disabled state
[   42.176859][  T329] device veth1_macvtap left promiscuous mode
[   42.184836][  T329] device veth0_vlan left promiscuous mode
[   42.477286][  T332] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[   42.667816][  T332] usb 5-1: Using ep0 maxpacket: 8
[   42.675686][  T332] usb 5-1: config 0 has no interfaces?
[   42.685293][  T332] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[   42.690698][  T294] usb 1-1: string descriptor 0 read error: -22
[   42.698456][  T332] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   42.723470][  T332] usb 5-1: config 0 descriptor??
[   42.907201][ T1172] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[   42.990536][  T296] usb 5-1: USB disconnect, device number 3
[   43.087518][ T1172] usb 6-1: Using ep0 maxpacket: 32
[   43.093243][  T294] uclogic 0003:256C:006D.0003: failed retrieving string descriptor #100: -71
[   43.105432][  T294] uclogic 0003:256C:006D.0003: failed retrieving pen parameters: -71
[   43.116592][  T294] uclogic 0003:256C:006D.0003: failed probing pen v1 parameters: -71
[   43.132999][  T294] uclogic 0003:256C:006D.0003: failed probing parameters: -71
[   43.151697][ T1172] usb 6-1: config 35 has too many interfaces: 255, using maximum allowed: 32
[   43.165960][  T294] uclogic: probe of 0003:256C:006D.0003 failed with error -71
[   43.176746][ T1172] usb 6-1: config 35 has 0 interfaces, different from the descriptor's value: 255
[   43.195767][  T294] usb 1-1: USB disconnect, device number 3
[   43.204505][ T1172] usb 6-1: New USB device found, idVendor=0b95, idProduct=2791, bcdDevice= d.2d
[   43.208733][ T1243] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[   43.215602][   T37] usb 4-1: Cannot set autoneg
[   43.230921][   T37] MOSCHIP usb-ethernet driver: probe of 4-1:0.0 failed with error -71
[   43.239449][ T1172] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   43.256104][ T1172] usb 6-1: Product: syz
[   43.263840][ T1172] usb 6-1: Manufacturer: syz
[   43.269697][   T37] usb 4-1: USB disconnect, device number 3
[   43.278408][ T1172] usb 6-1: SerialNumber: syz
[   43.494566][ T1222] netlink: 20 bytes leftover after parsing attributes in process `syz.5.393'.
[   43.515321][ T1172] usb 6-1: USB disconnect, device number 2
[   43.530501][ T1258] netlink: 4 bytes leftover after parsing attributes in process `syz.4.408'.
[   43.550641][ T1258] device bridge_slave_1 left promiscuous mode
[   43.557743][ T1258] bridge0: port 2(bridge_slave_1) entered disabled state
[   43.574420][ T1258] device bridge_slave_0 left promiscuous mode
[   43.583302][ T1258] bridge0: port 1(bridge_slave_0) entered disabled state
[   43.666100][ T1264] netlink: 'syz.4.411': attribute type 16 has an invalid length.
[   43.674526][ T1264] netlink: 'syz.4.411': attribute type 17 has an invalid length.
[   43.690659][ T1264] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[   43.699974][ T1264] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[   43.755035][  T329] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready
[   43.785181][  T329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   43.810092][  T329] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready
[   43.832601][  T329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   43.849013][  T329] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   43.863380][  T329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   43.877403][  T329] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   43.893161][  T329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   43.907552][  T296] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[   44.029255][ T1283] loop0: detected capacity change from 0 to 256
[   44.046968][ T1283] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001034b, chksum : 0x6322ccb6, utbl_chksum : 0xe619d30d)
[   44.107181][  T296] usb 3-1: Using ep0 maxpacket: 16
[   44.115857][  T296] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[   44.137039][  T296] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   44.155346][  T296] usb 3-1: Product: syz
[   44.161608][  T296] usb 3-1: Manufacturer: syz
[   44.173094][  T296] usb 3-1: SerialNumber: syz
[   44.189831][  T296] r8152-cfgselector 3-1: config 0 descriptor??
[   44.332419][ T1318] loop5: detected capacity change from 0 to 512
[   44.368236][ T1318] EXT4-fs (loop5): revision level too high, forcing read-only mode
[   44.386977][ T1318] EXT4-fs (loop5): orphan cleanup on readonly fs
[   44.394903][ T1318] EXT4-fs warning (device loop5): ext4_enable_quotas:7017: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[   44.413152][ T1318] EXT4-fs (loop5): Cannot turn on quotas: error -117
[   44.423388][ T1318] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.437: bg 0: block 40: padding at end of block bitmap is not set
[   44.442221][ T1318] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6170: Corrupt filesystem
[   44.444293][ T1331] loop4: detected capacity change from 0 to 256
[   44.456541][ T1318] EXT4-fs (loop5): 1 truncate cleaned up
[   44.473483][ T1318] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[   44.493299][ T1318] netlink: 20 bytes leftover after parsing attributes in process `syz.5.437'.
[   44.516379][ T1333] netlink: 8 bytes leftover after parsing attributes in process `syz.0.443'.
[   44.518567][ T1318] netlink: 8 bytes leftover after parsing attributes in process `syz.5.437'.
[   44.531029][ T1333] netlink: 8 bytes leftover after parsing attributes in process `syz.0.443'.
[   44.556323][ T1318] netlink: 8 bytes leftover after parsing attributes in process `syz.5.437'.
[   44.570866][ T1333] netlink: 2 bytes leftover after parsing attributes in process `syz.0.443'.
[   44.609330][  T296] r8152-cfgselector 3-1: Unknown version 0x0000
[   44.636448][ T1118] EXT4-fs (loop5): unmounting filesystem.
[   44.654400][  T296] r8152-cfgselector 3-1: bad CDC descriptors
[   44.665968][  T296] r8152-cfgselector 3-1: Unknown version 0x0000
[   44.687943][  T296] r8152-cfgselector 3-1: USB disconnect, device number 3
[   44.738255][ T1343] netlink: 20 bytes leftover after parsing attributes in process `syz.4.448'.
[   44.817318][ T1354] netlink: 'syz.0.453': attribute type 4 has an invalid length.
[   44.845896][ T1354] netlink: 'syz.0.453': attribute type 4 has an invalid length.
[   45.032956][ T1383] futex_wake_op: syz.3.465 tries to shift op by -1; fix this program
[   45.137166][  T332] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[   45.338305][  T332] usb 6-1: config index 0 descriptor too short (expected 3133, got 61)
[   45.350760][  T332] usb 6-1: config 0 has an invalid interface number: 156 but max is 1
[   45.365909][  T332] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   45.382777][  T332] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2
[   45.394763][  T332] usb 6-1: config 0 has no interface number 0
[   45.412743][  T332] usb 6-1: config 0 interface 156 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0
[   45.434048][  T332] usb 6-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[   45.448659][  T332] usb 6-1: config 0 interface 156 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[   45.461185][  T332] usb 6-1: config 0 interface 156 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[   45.478744][  T332] usb 6-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9
[   45.489195][  T332] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   45.501723][  T332] usb 6-1: config 0 descriptor??
[   45.510010][  T332] usb 6-1: MIDIStreaming interface descriptor not found
[   45.606192][ T1416] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check.
[   45.715355][  T332] usb 6-1: USB disconnect, device number 3
[   45.724541][ T1420] serio: Serial port ptm0
[   45.958384][ T1439] tmpfs: Unknown parameter ''
[   46.004348][   T28] kauditd_printk_skb: 120 callbacks suppressed
[   46.004368][   T28] audit: type=1400 audit(1741908371.455:462): avc:  denied  { mount } for  pid=1443 comm="syz.2.492" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   46.278590][ T1461] loop5: detected capacity change from 0 to 256
[   46.302285][ T1461] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d)
[   46.407458][ T1472] syz.4.504[1472] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   46.407555][ T1472] syz.4.504[1472] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   46.428703][   T28] audit: type=1400 audit(1741908371.885:463): avc:  denied  { name_bind } for  pid=1473 comm="syz.5.505" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1
[   46.482221][   T28] audit: type=1400 audit(1741908371.905:464): avc:  denied  { write } for  pid=84 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   46.518167][   T28] audit: type=1400 audit(1741908371.905:465): avc:  denied  { remove_name } for  pid=84 comm="syslogd" name="messages" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   46.556456][   T28] audit: type=1400 audit(1741908371.905:466): avc:  denied  { rename } for  pid=84 comm="syslogd" name="messages" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   46.607216][   T28] audit: type=1400 audit(1741908371.905:467): avc:  denied  { add_name } for  pid=84 comm="syslogd" name="messages.0" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   46.654912][   T28] audit: type=1400 audit(1741908371.905:468): avc:  denied  { create } for  pid=84 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   46.686067][   T28] audit: type=1400 audit(1741908371.925:469): avc:  denied  { connect } for  pid=1473 comm="syz.5.505" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   46.744845][   T28] audit: type=1400 audit(1741908372.195:470): avc:  denied  { read write } for  pid=1490 comm="syz.4.513" name="uinput" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[   46.779889][ T1491] input: syz1 as /devices/virtual/input/input8
[   46.785358][   T28] audit: type=1400 audit(1741908372.235:471): avc:  denied  { open } for  pid=1490 comm="syz.4.513" path="/dev/uinput" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[   47.278916][  T332] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[   47.477170][  T332] usb 6-1: Using ep0 maxpacket: 8
[   47.489173][  T332] usb 6-1: config index 0 descriptor too short (expected 5924, got 36)
[   47.511832][  T332] usb 6-1: config 250 has an invalid interface number: 228 but max is -1
[   47.533553][  T332] usb 6-1: config 250 has 1 interface, different from the descriptor's value: 0
[   47.557258][  T332] usb 6-1: config 250 has no interface number 0
[   47.565071][  T332] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024
[   47.605745][  T332] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024
[   47.625092][  T332] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0
[   47.637188][  T332] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0
[   47.649671][  T332] usb 6-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17
[   47.666141][  T332] usb 6-1: config 250 interface 228 has no altsetting 0
[   47.679326][  T332] usb 6-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07
[   47.689470][  T332] usb 6-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59
[   47.699193][  T332] usb 6-1: Product: syz
[   47.703764][  T332] usb 6-1: SerialNumber: syz
[   47.715709][  T332] hub 6-1:250.228: bad descriptor, ignoring hub
[   47.723192][  T332] hub: probe of 6-1:250.228 failed with error -5
[   47.761877][ T1519] xt_hashlimit: size too large, truncated to 1048576
[   47.916074][  T332] usblp 6-1:250.228: usblp0: USB Bidirectional printer dev 4 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292
[   48.102877][ T1533] netlink: 104 bytes leftover after parsing attributes in process `syz.4.533'.
[   48.257335][  T332] usb 6-1: USB disconnect, device number 4
[   48.278773][  T332] usblp0: removed
[   48.334650][ T1550] loop3: detected capacity change from 0 to 256
[   48.398594][ T1550] exfat: Unknown parameter '18446744073709551615�01777777777777777777777'
[   48.472246][ T1550] loop3: detected capacity change from 0 to 256
[   48.488758][ T1550] exfat: Deprecated parameter 'utf8'
[   48.489741][  T329] Bluetooth: hci0: Frame reassembly failed (-84)
[   48.507167][ T1550] exfat: Deprecated parameter 'namecase'
[   48.517210][ T1550] exfat: Deprecated parameter 'utf8'
[   48.541987][ T1550] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d)
[   48.774336][ T1588] device batadv_slave_1 entered promiscuous mode
[   48.798123][ T1587] device batadv_slave_1 left promiscuous mode
[   48.977057][ T1606] loop5: detected capacity change from 0 to 1024
[   48.989063][ T1606] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[   49.009446][ T1609] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[   49.937338][  T332] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[   49.957636][ T1118] EXT4-fs (loop5): unmounting filesystem.
[   49.987514][ T1629] loop5: detected capacity change from 0 to 2048
[   50.009552][ T1629]  loop5: p1 < > p2 p3 < p5 > p4
[   50.018926][ T1629] loop5: partition table partially beyond EOD, truncated
[   50.035417][ T1629] loop5: p1 start 4278190080 is beyond EOD, truncated
[   50.043099][ T1629] loop5: p2 start 16908800 is beyond EOD, truncated
[   50.050707][ T1629] loop5: p4 start 11326 is beyond EOD, truncated
[   50.060412][ T1629] loop5: p5 start 16908800 is beyond EOD, truncated
[   50.127156][  T332] usb 1-1: Using ep0 maxpacket: 32
[   50.138379][  T332] usb 1-1: config 0 has an invalid interface number: 184 but max is 0
[   50.160487][  T332] usb 1-1: config 0 has no interface number 0
[   50.167647][  T332] usb 1-1: config 0 interface 184 has no altsetting 0
[   50.179218][  T332] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[   50.189641][  T332] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   50.200653][  T332] usb 1-1: Product: syz
[   50.205299][  T332] usb 1-1: Manufacturer: syz
[   50.216565][  T332] usb 1-1: SerialNumber: syz
[   50.223630][  T332] usb 1-1: config 0 descriptor??
[   50.237157][  T332] smsc75xx v1.0.0
[   50.421445][ T1669] input: syz0 as /devices/virtual/input/input9
[   50.480983][ T1677] netlink: 20 bytes leftover after parsing attributes in process `syz.5.598'.
[   50.517230][  T513] Bluetooth: hci0: Opcode 0x1003 failed: -110
[   50.517350][ T1560] Bluetooth: hci0: command 0x1003 tx timeout
[   50.662477][ T1694] SELinux: failed to load policy
[   50.701888][ T1702] futex_wake_op: syz.5.609 tries to shift op by -1; fix this program
[   50.717290][  T296] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[   50.907138][  T296] usb 4-1: Using ep0 maxpacket: 32
[   50.914458][  T296] usb 4-1: config 0 has an invalid interface number: 184 but max is 0
[   50.943560][  T296] usb 4-1: config 0 has no interface number 0
[   50.968248][  T296] usb 4-1: config 0 interface 184 has no altsetting 0
[   50.992883][  T296] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[   51.028285][  T296] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   51.062092][  T296] usb 4-1: Product: syz
[   51.128998][  T296] usb 4-1: Manufacturer: syz
[   51.135494][  T296] usb 4-1: SerialNumber: syz
[   51.143409][  T296] usb 4-1: config 0 descriptor??
[   51.157833][  T296] smsc75xx v1.0.0
[   51.248049][   T28] kauditd_printk_skb: 50 callbacks suppressed
[   51.248066][   T28] audit: type=1326 audit(1741908376.705:522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1725 comm="syz.2.619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25aaf8d169 code=0x7ffc0000
[   51.282707][  T332] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): EEPROM read operation timeout
[   51.315488][   T28] audit: type=1326 audit(1741908376.755:523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1725 comm="syz.2.619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f25aaf8d169 code=0x7ffc0000
[   51.343720][   T28] audit: type=1326 audit(1741908376.755:524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1725 comm="syz.2.619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25aaf8d169 code=0x7ffc0000
[   51.371210][   T28] audit: type=1326 audit(1741908376.755:525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1725 comm="syz.2.619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=333 compat=0 ip=0x7f25aaf8d169 code=0x7ffc0000
[   51.401066][   T28] audit: type=1326 audit(1741908376.755:526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1725 comm="syz.2.619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25aaf8d169 code=0x7ffc0000
[   51.430823][   T28] audit: type=1326 audit(1741908376.755:527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1725 comm="syz.2.619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f25aaf8d169 code=0x7ffc0000
[   51.465420][   T28] audit: type=1400 audit(1741908376.755:528): avc:  denied  { sqpoll } for  pid=1725 comm="syz.2.619" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[   51.496886][  T332] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[   51.528859][  T332] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71
[   51.545668][   T28] audit: type=1326 audit(1741908376.755:529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1725 comm="syz.2.619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f25aaf8d1a3 code=0x7ffc0000
[   51.568185][ T1737] mmap: syz.4.623 (1737) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[   51.581987][  T332] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset
[   51.607348][   T28] audit: type=1326 audit(1741908376.755:530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1725 comm="syz.2.619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25aaf8d169 code=0x7ffc0000
[   51.607734][  T332] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71
[   51.655892][   T28] audit: type=1326 audit(1741908376.755:531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1725 comm="syz.2.619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f25aaf8d169 code=0x7ffc0000
[   51.664782][  T332] smsc75xx: probe of 1-1:0.184 failed with error -71
[   51.706324][  T332] usb 1-1: USB disconnect, device number 4
[   52.017821][ T1773] netlink: 'syz.2.640': attribute type 4 has an invalid length.
[   52.173846][ T1791] loop4: detected capacity change from 0 to 1024
[   52.188214][ T1791] EXT4-fs: Ignoring removed i_version option
[   52.195832][ T1791] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   52.247666][ T1791] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[   52.263604][ T1791] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:3841: comm syz.4.649: Allocating blocks 481-513 which overlap fs metadata
[   52.296540][ T1791] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:3841: comm syz.4.649: Allocating blocks 497-513 which overlap fs metadata
[   52.314875][ T1791] EXT4-fs (loop4): pa ffff88811a845000: logic 352, phys. 465, len 3
[   52.324307][ T1791] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:4881: group 0, free 0, pa_free 1
[   52.366475][  T293] EXT4-fs (loop4): unmounting filesystem.
[   52.384689][  T296] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000044: -71
[   52.405789][  T296] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_DATA
[   52.416919][  T296] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[   52.430193][  T296] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71
[   52.457587][  T296] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset
[   52.477188][  T296] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71
[   52.492684][  T296] smsc75xx: probe of 4-1:0.184 failed with error -71
[   52.508279][  T296] usb 4-1: USB disconnect, device number 4
[   52.549919][ T1823] user requested TSC rate below hardware speed
[   52.717644][ T1849] serio: Serial port ptm0
[   52.755550][ T1853] netlink: 28 bytes leftover after parsing attributes in process `syz.0.673'.
[   52.785709][ T1853] netlink: 28 bytes leftover after parsing attributes in process `syz.0.673'.
[   52.790544][  T294] kernel write not supported for file bpf-prog (pid: 294 comm: kworker/1:2)
[   52.958912][ T1877] tmpfs: Unknown parameter 'nolazytime��'
[   53.028473][ T1883] syz.5.688[1883] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   53.028560][ T1883] syz.5.688[1883] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   53.208633][  T296] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[   53.477196][  T296] usb 5-1: Using ep0 maxpacket: 16
[   53.482499][ T1895] loop2: detected capacity change from 0 to 40427
[   53.488001][  T296] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   53.507665][ T1895] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[   53.527957][  T296] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   53.540476][ T1895] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[   53.557175][  T296] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[   53.582928][  T296] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[   53.594434][  T296] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   53.607357][ T1895] F2FS-fs (loop2): invalid crc value
[   53.618818][  T296] usb 5-1: config 0 descriptor??
[   53.647969][ T1895] F2FS-fs (loop2): Found nat_bits in checkpoint
[   53.747604][ T1895] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[   53.755334][ T1895] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[   53.919100][ T1918] loop5: detected capacity change from 0 to 40427
[   53.928424][ T1918] F2FS-fs (loop5): invalid crc value
[   53.948464][ T1918] F2FS-fs (loop5): Found nat_bits in checkpoint
[   54.024434][ T1918] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[   54.028289][  T296] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0
[   54.067154][  T296] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0
[   54.085499][  T296] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0
[   54.101423][  T296] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0
[   54.111111][ T1936] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1936 comm=syz.0.708
[   54.117272][  T296] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0
[   54.134775][ T1118] syz-executor: attempt to access beyond end of device
[   54.134775][ T1118] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[   54.147185][  T296] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0
[   54.177233][  T296] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0
[   54.205128][  T296] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.0004/input/input10
[   54.240251][  T296] microsoft 0003:045E:07DA.0004: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0
[   54.262870][ T1895] F2FS-fs (loop2): Start checkpoint disabled!
[   54.271264][ T1895] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix.
[   54.279536][  T296] usb 5-1: USB disconnect, device number 4
[   54.284508][ T1895] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix.
[   54.347893][ T1895] VFS:Filesystem freeze failed
[   54.497311][  T332] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[   54.657198][ T1172] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[   54.687186][  T332] usb 1-1: Using ep0 maxpacket: 32
[   54.694715][  T332] usb 1-1: config 0 interface 0 has no altsetting 0
[   54.702934][  T332] usb 1-1: New USB device found, idVendor=056a, idProduct=4004, bcdDevice= 0.00
[   54.716962][  T332] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   54.729364][  T332] usb 1-1: config 0 descriptor??
[   54.737542][  T294] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[   54.850487][ T1172] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   54.866084][ T1172] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   54.880401][ T1172] usb 6-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00
[   54.892170][ T1172] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   54.905018][ T1172] usb 6-1: config 0 descriptor??
[   54.938772][  T294] usb 3-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0
[   54.955346][  T294] usb 3-1: config 0 interface 0 has no altsetting 0
[   54.965323][  T294] usb 3-1: New USB device found, idVendor=17ef, idProduct=6085, bcdDevice= 0.00
[   54.977505][  T294] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   54.987834][  T294] usb 3-1: config 0 descriptor??
[   55.224439][ T1957] loop4: detected capacity change from 0 to 40427
[   55.240427][ T1957] F2FS-fs (loop4): fault_injection options not supported
[   55.252306][ T1957] F2FS-fs (loop4): invalid crc value
[   55.264506][  T332] wacom 0003:056A:4004.0005: item fetching failed at offset 2/5
[   55.283321][ T1957] F2FS-fs (loop4): Found nat_bits in checkpoint
[   55.317587][ T1172] hid-steam 0003:28DE:1142.0006: item fetching failed at offset 3/5
[   55.326832][ T1172] hid-steam 0003:28DE:1142.0006: steam_probe:parse of hid interface failed
[   55.333700][  T332] wacom 0003:056A:4004.0005: parse failed
[   55.336904][ T1172] hid-steam: probe of 0003:28DE:1142.0006 failed with error -22
[   55.344848][  T332] wacom: probe of 0003:056A:4004.0005 failed with error -22
[   55.363413][  T332] usb 1-1: USB disconnect, device number 5
[   55.378372][ T1957] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[   55.397822][  T294] hid-rmi 0003:17EF:6085.0007: item fetching failed at offset 0/3
[   55.406402][  T294] hid-rmi 0003:17EF:6085.0007: parse failed
[   55.414657][  T294] hid-rmi: probe of 0003:17EF:6085.0007 failed with error -22
[   55.424674][ T1957] syz.4.718: attempt to access beyond end of device
[   55.424674][ T1957] loop4: rw=2049, sector=77824, nr_sectors = 256 limit=40427
[   55.456250][  T293] syz-executor: attempt to access beyond end of device
[   55.456250][  T293] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[   55.545341][  T296] usb 6-1: USB disconnect, device number 5
[   55.602595][  T332] usb 3-1: USB disconnect, device number 4
[   55.887190][  T294] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[   55.960534][   T45] Bluetooth: hci0: command 0x1003 tx timeout
[   55.967236][ T1684] Bluetooth: hci0: Opcode 0x1003 failed: -110
[   56.098627][  T294] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   56.128203][ T1975] device gre0 entered promiscuous mode
[   56.134997][  T294] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   56.145429][ T1975] device vlan2 entered promiscuous mode
[   56.152780][  T294] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[   56.168677][ T1975] device gre0 left promiscuous mode
[   56.179444][ T1985] netlink: 'syz.2.726': attribute type 27 has an invalid length.
[   56.179452][  T294] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   56.179484][  T294] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   56.217750][  T294] usb 5-1: config 0 descriptor??
[   56.259722][ T1985] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.267475][ T1985] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.401220][ T1979] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[   56.509196][ T1979] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[   56.531617][   T28] kauditd_printk_skb: 29 callbacks suppressed
[   56.531664][   T28] audit: type=1400 audit(1741908381.985:561): avc:  denied  { bind } for  pid=2014 comm="syz.0.735" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   56.564319][   T28] audit: type=1400 audit(1741908381.985:562): avc:  denied  { setopt } for  pid=2014 comm="syz.0.735" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   56.588825][   T28] audit: type=1400 audit(1741908381.985:563): avc:  denied  { write } for  pid=2014 comm="syz.0.735" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   56.615999][ T1979] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.626779][ T1979] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.629733][  T294] plantronics 0003:047F:FFFF.0008: No inputs registered, leaving
[   56.649240][  T294] plantronics 0003:047F:FFFF.0008: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0
[   56.653682][ T1979] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.673832][ T1979] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.714137][ T1979] device veth0_vlan left promiscuous mode
[   56.727323][ T1979] device veth0_vlan entered promiscuous mode
[   56.748475][ T1979] device veth1_macvtap left promiscuous mode
[   56.768292][ T1979] device veth1_macvtap entered promiscuous mode
[   56.777594][  T409] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   56.787572][  T409] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   56.808098][  T409] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   56.823004][  T409] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   56.834288][  T409] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   56.847684][  T409] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   56.865712][  T409] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   56.880274][ T1979] syz.2.726 (1979) used greatest stack depth: 19112 bytes left
[   56.894928][  T409] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   56.906450][  T409] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   56.918639][  T409] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   56.933151][  T409] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   56.943331][  T409] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready
[   56.954604][  T409] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   56.972056][  T409] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready
[   56.985089][  T409] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   56.988460][  T294] usb 5-1: USB disconnect, device number 5
[   56.996808][  T409] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   57.003044][ T2025] loop2: detected capacity change from 0 to 512
[   57.016353][  T409] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   57.036493][  T409] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   57.046526][ T2025] EXT4-fs (loop2): revision level too high, forcing read-only mode
[   57.046586][  T409] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   57.057388][ T2025] EXT4-fs (loop2): orphan cleanup on readonly fs
[   57.081893][ T2025] Quota error (device loop2): find_block_dqentry: Quota for id 0 referenced but not present
[   57.096485][ T2025] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0
[   57.112323][ T2025] EXT4-fs error (device loop2): ext4_acquire_dquot:6782: comm syz.2.738: Failed to acquire dquot type 1
[   57.129997][ T2025] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.738: bg 0: block 40: padding at end of block bitmap is not set
[   57.148330][ T2025] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6170: Corrupt filesystem
[   57.153426][   T28] audit: type=1400 audit(1741908382.605:564): avc:  denied  { write } for  pid=2027 comm="syz.5.739" name="ppp" dev="devtmpfs" ino=154 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[   57.159543][ T2025] EXT4-fs (loop2): 1 truncate cleaned up
[   57.198405][ T2025] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[   57.255971][  T290] EXT4-fs (loop2): unmounting filesystem.
[   57.335230][ T2039] loop5: detected capacity change from 0 to 256
[   57.358708][ T2039] FAT-fs (loop5): Directory bread(block 64) failed
[   57.366016][ T2039] FAT-fs (loop5): Directory bread(block 65) failed
[   57.378045][ T2039] FAT-fs (loop5): Directory bread(block 66) failed
[   57.386580][ T2039] FAT-fs (loop5): Directory bread(block 67) failed
[   57.398106][ T2039] FAT-fs (loop5): Directory bread(block 68) failed
[   57.406540][ T2039] FAT-fs (loop5): Directory bread(block 69) failed
[   57.419847][ T2039] FAT-fs (loop5): Directory bread(block 70) failed
[   57.428008][ T2039] FAT-fs (loop5): Directory bread(block 71) failed
[   57.437401][ T2039] FAT-fs (loop5): Directory bread(block 72) failed
[   57.444883][ T2039] FAT-fs (loop5): Directory bread(block 73) failed
[   57.547333][ T1994] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[   57.624697][ T2050] SELinux: failed to load policy
[   57.747279][ T1994] usb 3-1: Using ep0 maxpacket: 16
[   57.759745][ T1994] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[   57.771290][ T1994] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   57.786549][ T1994] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[   57.816594][ T1994] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   57.824872][ T2072] 9pnet: p9_errstr2errno: server reported unknown error �@�Nd
[   57.834288][ T1994] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   57.843870][   T28] audit: type=1400 audit(1741908383.285:565): avc:  denied  { create } for  pid=2073 comm="syz.3.757" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   57.883510][ T1994] usb 3-1: Product: syz
[   57.888707][ T1994] usb 3-1: Manufacturer: syz
[   57.894072][ T1994] usb 3-1: SerialNumber: syz
[   57.909701][   T28] audit: type=1400 audit(1741908383.325:566): avc:  denied  { bind } for  pid=2073 comm="syz.3.757" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   57.946466][   T28] audit: type=1400 audit(1741908383.325:567): avc:  denied  { name_bind } for  pid=2073 comm="syz.3.757" src=28196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1
[   57.976481][   T28] audit: type=1400 audit(1741908383.325:568): avc:  denied  { node_bind } for  pid=2073 comm="syz.3.757" src=28196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1
[   58.159283][ T2097] netlink: 96 bytes leftover after parsing attributes in process `syz.5.768'.
[   58.339628][ T2112] loop4: detected capacity change from 0 to 16
[   58.351270][ T1994] usb 3-1: 0:2 : does not exist
[   58.358145][ T2112] erofs: (device loop4): mounted with root inode @ nid 36.
[   58.377031][  T294] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[   58.567462][  T294] usb 1-1: Using ep0 maxpacket: 8
[   58.575235][  T294] usb 1-1: config index 0 descriptor too short (expected 5924, got 36)
[   58.586091][  T294] usb 1-1: config 250 has an invalid interface number: 228 but max is -1
[   58.606230][  T294] usb 1-1: config 250 has 1 interface, different from the descriptor's value: 0
[   58.607232][  T296] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[   58.618786][  T294] usb 1-1: config 250 has no interface number 0
[   58.649228][  T294] usb 1-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024
[   58.673397][  T294] usb 1-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024
[   58.685455][  T294] usb 1-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0
[   58.697987][  T294] usb 1-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0
[   58.716628][  T294] usb 1-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17
[   58.737429][  T294] usb 1-1: config 250 interface 228 has no altsetting 0
[   58.754643][  T294] usb 1-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07
[   58.769932][  T294] usb 1-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59
[   58.783021][  T294] usb 1-1: Product: syz
[   58.790990][  T294] usb 1-1: SerialNumber: syz
[   58.801967][  T294] hub 1-1:250.228: bad descriptor, ignoring hub
[   58.810060][  T296] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   58.813271][  T294] hub: probe of 1-1:250.228 failed with error -5
[   58.830292][  T296] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[   58.856497][  T296] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[   58.874431][  T296] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[   58.893856][  T296] usb 4-1: SerialNumber: syz
[   58.983143][ T1994] usb 3-1: 1:0: failed to get current value for ch 0 (-22)
[   59.013162][  T294] usblp 1-1:250.228: usblp0: USB Bidirectional printer dev 6 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292
[   59.021575][ T1994] usb 3-1: USB disconnect, device number 5
[   59.112673][  T296] usb 4-1: 0:2 : does not exist
[   59.121373][  T296] usb 4-1: USB disconnect, device number 5
[   59.270821][ T2131] loop4: detected capacity change from 0 to 2048
[   59.291105][ T2131] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[   59.311990][ T2138] syz.5.784[2138] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   59.312096][ T2138] syz.5.784[2138] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   59.333632][  T293] EXT4-fs (loop4): unmounting filesystem.
[   59.356118][  T294] usb 1-1: USB disconnect, device number 6
[   59.383693][  T294] usblp0: removed
[   59.506495][  T296] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[   59.517869][  T296] hid-generic 0000:0000:0000.0009: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[   59.553079][ T2148] loop4: detected capacity change from 0 to 256
[   59.563122][ T2148] exfat: Bad value for 'uid'
[   59.639691][ T2157] loop2: detected capacity change from 0 to 2048
[   59.670572][ T2157] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[   59.683838][ T2157] netlink: 140 bytes leftover after parsing attributes in process `syz.2.792'.
[   59.694434][ T2157] netlink: 140 bytes leftover after parsing attributes in process `syz.2.792'.
[   59.704541][ T2157] netlink: 140 bytes leftover after parsing attributes in process `syz.2.792'.
[   59.727836][  T290] EXT4-fs (loop2): unmounting filesystem.
[   59.860138][ T2180] loop2: detected capacity change from 0 to 8192
[   59.867435][  T296] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[   59.883953][ T2182] loop3: detected capacity change from 0 to 1024
[   59.895277][ T2182] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[   59.907515][ T2182] EXT4-fs (loop3): The Hurd can't support 64-bit file systems
[   60.068341][  T296] usb 5-1: Using ep0 maxpacket: 16
[   60.083735][  T296] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   60.098659][  T296] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[   60.119395][  T296] usb 5-1: config 0 interface 0 has no altsetting 0
[   60.128468][  T296] usb 5-1: New USB device found, idVendor=060b, idProduct=430a, bcdDevice= 0.00
[   60.138315][  T296] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   60.171512][ T2194] loop5: detected capacity change from 0 to 1024
[   60.174123][  T296] usb 5-1: config 0 descriptor??
[   60.218898][ T2194] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[   60.250791][ T2194] ext4 filesystem being mounted at /96/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   61.233498][  T296] hid (null): global environment stack underflow
[   61.483781][  T296] hid-generic 0003:060B:430A.000A: unexpected long global item
[   61.575723][  T296] hid-generic: probe of 0003:060B:430A.000A failed with error -22
[   61.595628][ T1118] EXT4-fs (loop5): unmounting filesystem.
[   61.643420][  T296] usb 5-1: USB disconnect, device number 6
[   61.708977][   T28] kauditd_printk_skb: 9 callbacks suppressed
[   61.708996][   T28] audit: type=1400 audit(1741908387.165:578): avc:  denied  { mount } for  pid=2211 comm="syz.0.811" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1
[   61.817513][   T28] audit: type=1400 audit(1741908387.225:579): avc:  denied  { unmount } for  pid=289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1
[   61.847667][ T2206] loop5: detected capacity change from 0 to 40427
[   61.900088][ T2206] F2FS-fs (loop5): heap/no_heap options were deprecated
[   61.937549][ T2206] F2FS-fs (loop5): invalid crc value
[   61.963428][ T2206] F2FS-fs (loop5): Found nat_bits in checkpoint
[   62.036892][   T28] audit: type=1400 audit(1741908387.485:580): avc:  denied  { ioctl } for  pid=2222 comm="syz.3.815" path="socket:[24858]" dev="sockfs" ino=24858 ioctlcmd=0x89f1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[   62.097718][ T2206] F2FS-fs (loop5): Start checkpoint disabled!
[   62.121852][ T2206] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6
[   62.147185][   T28] audit: type=1400 audit(1741908387.575:581): avc:  denied  { ioctl } for  pid=2228 comm="syz.0.819" path="/dev/usbmon7" dev="devtmpfs" ino=176 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[   62.196539][ T2235] netlink: 20 bytes leftover after parsing attributes in process `syz.4.822'.
[   62.238941][ T2235] netlink: 20 bytes leftover after parsing attributes in process `syz.4.822'.
[   62.284464][   T28] audit: type=1400 audit(1741908387.735:582): avc:  denied  { append } for  pid=2228 comm="syz.0.819" name="001" dev="devtmpfs" ino=178 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[   62.319934][ T2241] netlink: 1036 bytes leftover after parsing attributes in process `syz.4.823'.
[   62.347148][   T28] audit: type=1400 audit(1741908387.775:583): avc:  denied  { remove_name } for  pid=2204 comm="syz.5.808" name="file0" dev="loop5" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   62.377339][ T2241] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[   62.407286][    T8] kworker/u4:0: attempt to access beyond end of device
[   62.407286][    T8] loop5: rw=2049, sector=40960, nr_sectors = 8 limit=40427
[   62.437367][   T28] audit: type=1400 audit(1741908387.775:584): avc:  denied  { rename } for  pid=2204 comm="syz.5.808" name="file0" dev="loop5" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   62.497173][   T28] audit: type=1400 audit(1741908387.795:585): avc:  denied  { create } for  pid=2204 comm="syz.5.808" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1
[   62.702597][ T2275] netlink: 'syz.2.839': attribute type 3 has an invalid length.
[   62.745850][   T28] audit: type=1400 audit(1741908388.195:586): avc:  denied  { getopt } for  pid=2280 comm="syz.2.842" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   62.749975][ T2282] loop5: detected capacity change from 0 to 1024
[   62.778749][ T2282] EXT4-fs: Ignoring removed i_version option
[   62.785885][ T2282] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   62.816277][ T2282] EXT4-fs (loop5): Test dummy encryption mode enabled
[   62.827146][ T2282] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[   62.846570][ T2282] fscrypt: AES-256-XTS using blk-crypto-fallback
[   62.896424][ T1118] EXT4-fs (loop5): unmounting filesystem.
[   62.947164][  T294] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[   63.158996][  T294] usb 1-1: New USB device found, idVendor=11c0, idProduct=5506, bcdDevice= 0.00
[   63.169597][  T294] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   63.181169][  T294] usb 1-1: config 0 descriptor??
[   63.592004][  T294] betop 0003:11C0:5506.000B: unknown main item tag 0x0
[   63.601598][  T294] betop 0003:11C0:5506.000B: item fetching failed at offset 3/5
[   63.616649][  T294] betop 0003:11C0:5506.000B: parse failed
[   63.624055][  T294] betop: probe of 0003:11C0:5506.000B failed with error -22
[   63.795507][  T294] usb 1-1: USB disconnect, device number 7
[   63.853327][ T2337] device vlan2 entered promiscuous mode
[   63.862567][ T2337] netlink: 4 bytes leftover after parsing attributes in process `syz.2.862'.
[   64.056366][   T28] audit: type=1400 audit(1741908389.505:587): avc:  denied  { read write } for  pid=2347 comm="syz.2.867" name="binder1" dev="binder" ino=17 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[   64.057188][ T2348] binder: 2347:2348 ioctl 8982 0 returned -22
[   64.163658][ T2350] SELinux: failed to load policy
[   64.305807][ T2367] netlink: 20 bytes leftover after parsing attributes in process `syz.5.874'.
[   64.317907][ T1994] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[   64.336800][ T2367] netlink: 20 bytes leftover after parsing attributes in process `syz.5.874'.
[   64.366893][  T296] hid-generic 0000:0008:0001.000C: unknown main item tag 0x0
[   64.377427][  T296] hid-generic 0000:0008:0001.000C: unknown main item tag 0x0
[   64.392811][  T296] hid-generic 0000:0008:0001.000C: unknown main item tag 0x0
[   64.401380][  T296] hid-generic 0000:0008:0001.000C: unknown main item tag 0x0
[   64.412776][  T296] hid-generic 0000:0008:0001.000C: hidraw0: <UNKNOWN> HID v0.80 Device [] on 
[   64.431706][ T2380] Zero length message leads to an empty skb
[   64.447176][  T294] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[   64.507185][ T1994] usb 5-1: Using ep0 maxpacket: 16
[   64.518048][ T1994] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   64.561527][ T1994] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   64.588574][ T1994] usb 5-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00
[   64.740964][  T294] usb 3-1: Using ep0 maxpacket: 16
[   64.749843][  T294] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   64.772865][  T294] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   64.860141][  T294] usb 3-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00
[   64.905686][  T294] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   65.177498][  T294] usb 3-1: config 0 descriptor??
[   66.687090][    C0] sched: RT throttling activated
[   66.687308][ T1994] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   66.802611][  T294] hid-multitouch 0003:1FD2:6007.000D: unknown main item tag 0x0
[   66.843785][  T294] hid-multitouch 0003:1FD2:6007.000D: unknown main item tag 0x0
[   66.888509][ T1994] usb 5-1: config 0 descriptor??
[   66.897670][  T294] hid-multitouch 0003:1FD2:6007.000D: unknown main item tag 0x0
[   66.914071][  T294] hid-multitouch 0003:1FD2:6007.000D: unknown main item tag 0x0
[   66.937279][  T294] hid-multitouch 0003:1FD2:6007.000D: unknown main item tag 0x0
[   66.946708][  T294] hid-multitouch 0003:1FD2:6007.000D: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.2-1/input0
[   67.006420][  T294] usb 3-1: USB disconnect, device number 6
[   67.018321][   T28] kauditd_printk_skb: 5 callbacks suppressed
[   67.018340][   T28] audit: type=1400 audit(1741908392.475:593): avc:  denied  { watch watch_reads } for  pid=2400 comm="syz.5.889" path="/112/file0" dev="tmpfs" ino=603 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[   67.074898][ T1994] usbhid 5-1:0.0: can't add hid device: -71
[   67.087920][ T1994] usbhid: probe of 5-1:0.0 failed with error -71
[   67.103265][ T1994] usb 5-1: USB disconnect, device number 7
[   67.141283][   T28] audit: type=1400 audit(1741908392.595:594): avc:  denied  { bind } for  pid=2404 comm="syz.4.891" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[   67.302132][ T2422] loop4: detected capacity change from 0 to 128
[   67.370768][   T28] audit: type=1400 audit(1741908392.825:595): avc:  denied  { map } for  pid=2426 comm="syz.4.901" path="socket:[25268]" dev="sockfs" ino=25268 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   67.435165][   T28] audit: type=1400 audit(1741908392.885:596): avc:  denied  { ioctl } for  pid=2428 comm="syz.4.902" path="socket:[25272]" dev="sockfs" ino=25272 ioctlcmd=0x7437 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   67.477281][  T335] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[   67.669212][  T335] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   67.689866][  T335] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 3
[   67.708051][  T335] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[   67.719359][  T335] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[   67.729017][  T335] usb 4-1: SerialNumber: syz
[   67.760115][   T28] audit: type=1400 audit(1741908393.215:597): avc:  denied  { setattr } for  pid=2448 comm="syz.4.911" name="ppp" dev="devtmpfs" ino=154 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[   67.806772][ T2451] loop4: detected capacity change from 0 to 512
[   67.816928][ T2451] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   67.839654][ T2451] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[   67.854782][ T2451] EXT4-fs error (device loop4): ext4_orphan_get:1400: inode #15: comm syz.4.912: iget: bad extended attribute block 9
[   67.870274][ T2451] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.912: couldn't read orphan inode 15 (err -117)
[   67.883910][ T2451] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[   67.913216][  T293] EXT4-fs (loop4): unmounting filesystem.
[   67.940408][  T335] usb 4-1: USB disconnect, device number 6
[   67.997276][  T294] usb 3-1: new full-speed USB device number 7 using dummy_hcd
[   68.187258][ T2467] usb usb1: usbfs: process 2467 (syz.5.918) did not claim interface 63 before use
[   68.199941][  T294] usb 3-1: config 5 has an invalid interface number: 75 but max is 0
[   68.217363][  T294] usb 3-1: config 5 has no interface number 0
[   68.229501][  T294] usb 3-1: config 5 interface 75 has no altsetting 0
[   68.248599][  T294] usb 3-1: New USB device found, idVendor=17cc, idProduct=1010, bcdDevice=c0.db
[   68.276565][  T294] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   68.287868][ T2469] overlayfs: missing 'lowerdir'
[   68.291824][  T294] usb 3-1: Product: syz
[   68.309603][  T294] usb 3-1: Manufacturer: syz
[   68.320079][  T294] usb 3-1: SerialNumber: syz
[   68.414848][ T2465] loop4: detected capacity change from 0 to 40427
[   68.426138][ T2465] F2FS-fs (loop4): fault_injection options not supported
[   68.435534][ T2465] F2FS-fs (loop4): Image doesn't support compression
[   68.462670][ T2465] F2FS-fs (loop4): Image doesn't support compression
[   68.475500][ T2465] F2FS-fs (loop4): fault_type options not supported
[   68.495590][ T2465] F2FS-fs (loop4): invalid crc value
[   68.521656][ T2486] I/O error, dev loop11, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   68.535855][ T2465] F2FS-fs (loop4): Found nat_bits in checkpoint
[   68.547662][ T2486] F2FS-fs (loop11): Unable to read 1th superblock
[   68.565242][ T2486] I/O error, dev loop11, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   68.579133][  T294] snd-usb-audio: probe of 3-1:5.75 failed with error -71
[   68.599938][  T294] usb 3-1: USB disconnect, device number 7
[   68.617734][ T2486] F2FS-fs (loop11): Unable to read 2th superblock
[   68.664051][   T28] audit: type=1400 audit(1741908394.115:598): avc:  denied  { bind } for  pid=2491 comm="syz.0.930" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   68.686561][ T2465] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[   68.780542][  T329] kworker/u4:4: attempt to access beyond end of device
[   68.780542][  T329] loop4: rw=2049, sector=40960, nr_sectors = 24 limit=40427
[   68.800046][ T2465] VFS:Filesystem freeze failed
[   68.939686][   T28] audit: type=1400 audit(1741908394.395:599): avc:  denied  { setopt } for  pid=2515 comm="syz.4.939" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   69.170473][ T2531] loop2: detected capacity change from 0 to 512
[   69.195037][ T2531] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   69.241046][ T2531] EXT4-fs (loop2): 1 truncate cleaned up
[   69.251629][ T2531] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[   69.278698][   T28] audit: type=1400 audit(1741908394.735:600): avc:  denied  { rename } for  pid=2530 comm="syz.2.945" name="file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   69.327271][   T28] audit: type=1400 audit(1741908394.755:601): avc:  denied  { create } for  pid=2530 comm="syz.2.945" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1
[   69.358849][  T290] EXT4-fs (loop2): unmounting filesystem.
[   69.456685][   T28] audit: type=1400 audit(1741908394.905:602): avc:  denied  { append } for  pid=2544 comm="syz.2.950" name="rtc0" dev="devtmpfs" ino=259 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[   69.727137][  T294] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[   69.907301][   T24] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[   69.937152][  T294] usb 4-1: Using ep0 maxpacket: 32
[   69.944074][  T294] usb 4-1: config 32 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   69.964630][  T294] usb 4-1: config 32 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   69.982561][  T294] usb 4-1: config 32 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[   70.007768][  T294] usb 4-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00
[   70.025703][  T294] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   70.098734][   T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   70.117693][   T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   70.140373][   T24] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[   70.168923][   T24] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   70.196962][   T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   70.219745][   T24] usb 1-1: config 0 descriptor??
[   70.442642][  T294] usbhid 4-1:32.0: can't add hid device: -71
[   70.457190][  T294] usbhid: probe of 4-1:32.0 failed with error -71
[   70.477792][  T294] usb 4-1: USB disconnect, device number 7
[   70.636445][   T24] plantronics 0003:047F:FFFF.000E: No inputs registered, leaving
[   70.668261][   T24] plantronics 0003:047F:FFFF.000E: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0
[   70.758448][ T2567] syz.2.961[2567] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   70.758563][ T2567] syz.2.961[2567] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   70.783275][ T2567] netem: incorrect gi model size
[   70.807628][ T2567] netem: change failed
[   70.961110][  T294] usb 1-1: USB disconnect, device number 8
[   71.397151][   T24] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[   71.478620][ T2610] loop5: detected capacity change from 0 to 128
[   71.487374][ T2610] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[   71.512623][ T2610] ext4 filesystem being mounted at /126/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   71.537797][ T2610] EXT4-fs (loop5): unmounting filesystem.
[   71.554518][    C1] operation not supported error, dev loop5, sector 0 op 0x9:(WRITE_ZEROES) flags 0x8000800 phys_seg 0 prio class 2
[   71.594200][ T2625] loop2: detected capacity change from 0 to 512
[   71.607308][   T24] usb 4-1: Using ep0 maxpacket: 16
[   71.607384][ T2625] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   71.616203][   T24] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[   71.623739][ T2630] netlink: 'syz.5.988': attribute type 27 has an invalid length.
[   71.632509][   T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   71.650332][   T24] usb 4-1: Product: syz
[   71.655225][   T24] usb 4-1: Manufacturer: syz
[   71.660786][   T24] usb 4-1: SerialNumber: syz
[   71.668605][ T2625] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[   71.678994][   T24] r8152-cfgselector 4-1: config 0 descriptor??
[   71.686321][ T2625] ext4 filesystem being mounted at /225/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   71.735160][  T290] EXT4-fs (loop2): unmounting filesystem.
[   71.798436][ T2630] bridge0: port 2(bridge_slave_1) entered disabled state
[   71.806325][ T2630] bridge0: port 1(bridge_slave_0) entered disabled state
[   72.088597][   T24] r8152-cfgselector 4-1: Unknown version 0x0000
[   72.095517][   T24] r8152-cfgselector 4-1: bad CDC descriptors
[   72.097190][ T2633] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[   72.166737][   T24] r8152-cfgselector 4-1: Unknown version 0x0000
[   72.179888][   T24] r8152-cfgselector 4-1: USB disconnect, device number 8
[   72.187310][ T2633] bridge0: port 1(bridge_slave_0) entered blocking state
[   72.195223][ T2633] bridge0: port 1(bridge_slave_0) entered forwarding state
[   72.268261][ T2633] bridge0: port 2(bridge_slave_1) entered blocking state
[   72.276363][ T2633] bridge0: port 2(bridge_slave_1) entered forwarding state
[   72.307707][ T2633] device veth0_vlan left promiscuous mode
[   72.316768][ T2633] device veth0_vlan entered promiscuous mode
[   72.325190][ T2633] device veth1_macvtap left promiscuous mode
[   72.333793][ T2633] device veth1_macvtap entered promiscuous mode
[   72.342483][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   72.352892][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   72.362320][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   72.394088][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   72.405443][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   72.422518][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   72.435779][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   72.446187][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   72.456487][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   72.466750][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   72.477232][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   72.486999][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready
[   72.498212][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   72.507476][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready
[   72.516619][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   72.535127][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   72.553558][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   72.568065][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   72.580193][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   72.644515][ T2671] IPv6: addrconf: prefix option has invalid lifetime
[   72.652750][ T2674] 9pnet: p9_errstr2errno: server reported unknown error �@�L��	
[   72.657683][ T2671] IPv6: addrconf: prefix option has invalid lifetime
[   72.749693][   T28] kauditd_printk_skb: 8 callbacks suppressed
[   72.749712][   T28] audit: type=1400 audit(1741908398.205:611): avc:  denied  { set_context_mgr } for  pid=2685 comm="syz.2.1010" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1
[   72.797650][   T28] audit: type=1400 audit(1741908398.235:612): avc:  denied  { map } for  pid=2685 comm="syz.2.1010" path="/dev/binderfs/binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[   72.885074][ T2694] netlink: 'syz.0.1013': attribute type 27 has an invalid length.
[   73.007207][ T2694] bridge0: port 2(bridge_slave_1) entered disabled state
[   73.015275][ T2694] bridge0: port 1(bridge_slave_0) entered disabled state
[   73.056697][   T28] audit: type=1400 audit(1741908398.505:613): avc:  denied  { setopt } for  pid=2706 comm="syz.4.1017" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   73.165328][ T2698] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[   73.202368][ T2698] bridge0: port 1(bridge_slave_0) entered blocking state
[   73.212005][ T2698] bridge0: port 1(bridge_slave_0) entered forwarding state
[   73.247477][ T2698] bridge0: port 2(bridge_slave_1) entered blocking state
[   73.266088][ T2698] bridge0: port 2(bridge_slave_1) entered forwarding state
[   73.291383][ T2698] device veth0_vlan left promiscuous mode
[   73.299187][ T2698] device veth0_vlan entered promiscuous mode
[   73.308776][ T2698] device veth1_macvtap left promiscuous mode
[   73.321438][ T2698] device veth1_macvtap entered promiscuous mode
[   73.339919][ T2703] netlink: 'syz.3.1015': attribute type 4 has an invalid length.
[   73.358857][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   73.367860][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   73.378779][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   73.389204][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   73.399738][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   73.412184][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   73.425319][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   73.442255][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   73.456432][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   73.466624][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   73.476857][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   73.487054][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready
[   73.498120][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   73.508105][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready
[   73.519364][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   73.533036][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   73.545928][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   73.561701][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   73.577790][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   73.604345][ T2713] netlink: 'syz.5.1019': attribute type 12 has an invalid length.
[   73.622441][ T2713] netlink: 'syz.5.1019': attribute type 29 has an invalid length.
[   73.646356][ T2713] netlink: 148 bytes leftover after parsing attributes in process `syz.5.1019'.
[   73.657259][ T2713] netlink: 'syz.5.1019': attribute type 1 has an invalid length.
[   73.690095][ T2721] device bridge0 entered promiscuous mode
[   73.699181][ T2723] syz.5.1024[2723] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   73.700120][ T2723] syz.5.1024[2723] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   73.702690][ T2721] bridge0: port 3(macsec1) entered blocking state
[   73.736164][ T2721] bridge0: port 3(macsec1) entered disabled state
[   73.753488][ T2721] device bridge0 left promiscuous mode
[   73.790494][   T28] audit: type=1400 audit(1741908399.245:614): avc:  denied  { lock } for  pid=2730 comm="syz.5.1027" path="socket:[26964]" dev="sockfs" ino=26964 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1
[   73.971479][ T2745] netlink: 'syz.3.1032': attribute type 27 has an invalid length.
[   74.003577][ T2745] bridge0: port 2(bridge_slave_1) entered disabled state
[   74.012961][ T2745] bridge0: port 1(bridge_slave_0) entered disabled state
[   74.121736][ T2750] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[   74.149097][ T2750] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[   74.168016][ T2750] bridge0: port 1(bridge_slave_0) entered blocking state
[   74.176686][ T2750] bridge0: port 1(bridge_slave_0) entered forwarding state
[   74.188165][ T2750] bridge0: port 2(bridge_slave_1) entered blocking state
[   74.197450][ T2750] bridge0: port 2(bridge_slave_1) entered forwarding state
[   74.217320][ T2750] device veth0_vlan left promiscuous mode
[   74.225912][ T2750] device veth0_vlan entered promiscuous mode
[   74.239666][ T2750] device veth1_macvtap left promiscuous mode
[   74.247768][ T2750] device veth1_macvtap entered promiscuous mode
[   74.259385][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   74.287502][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   74.307411][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   74.318478][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   74.328402][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   74.337734][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   74.347785][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   74.357914][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   74.367112][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   74.377607][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   74.386788][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   74.395878][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready
[   74.395983][ T2758] loop2: detected capacity change from 0 to 40427
[   74.405031][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   74.413173][ T2758] F2FS-fs (loop2): Insane cp_payload (553648128 >= 504)
[   74.421677][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready
[   74.428192][ T2758] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[   74.438518][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   74.447535][ T2758] F2FS-fs (loop2): heap/no_heap options were deprecated
[   74.471585][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   74.479827][ T2758] F2FS-fs (loop2): invalid crc value
[   74.488238][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   74.507699][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   74.521903][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   74.522565][ T2758] F2FS-fs (loop2): Found nat_bits in checkpoint
[   74.580018][ T2765] device bridge0 entered promiscuous mode
[   74.586838][ T2765] bridge0: port 3(macsec1) entered blocking state
[   74.597695][ T2765] bridge0: port 3(macsec1) entered disabled state
[   74.609419][ T2767] SELinux:  Context : is not valid (left unmapped).
[   74.618032][   T28] audit: type=1400 audit(1741908400.075:615): avc:  denied  { relabelto } for  pid=2766 comm="syz.3.1042" name="rdma.current" dev="tmpfs" ino=815 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=":"
[   74.633100][ T2758] F2FS-fs (loop2): Start checkpoint disabled!
[   74.654823][ T2765] device bridge0 left promiscuous mode
[   74.675350][ T2758] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[   74.694159][ T2758] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6
[   74.706133][   T28] audit: type=1400 audit(1741908400.115:616): avc:  denied  { associate } for  pid=2766 comm="syz.3.1042" name="rdma.current" dev="tmpfs" ino=815 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon=":"
[   74.796122][ T2758] syz.2.1039: attempt to access beyond end of device
[   74.796122][ T2758] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[   74.810650][   T28] audit: type=1400 audit(1741908400.145:617): avc:  denied  { unlink } for  pid=291 comm="syz-executor" name="rdma.current" dev="tmpfs" ino=815 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=":"
[   74.863800][   T28] audit: type=1400 audit(1741908400.305:618): avc:  denied  { rename } for  pid=2757 comm="syz.2.1039" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop2" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1
[   74.932699][   T28] audit: type=1400 audit(1741908400.305:619): avc:  denied  { rmdir } for  pid=2757 comm="syz.2.1039" name=131377C5FC35D41454D5D41D29AD1A6029598146E6BE166E41AD0DBD4054033C9F33BBDA8224A2F3D772E7636E48B33CBF708372E8F1B9933EC5127743BE2206209EF02DF9CBF2F6E880D338 dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1
[   74.953445][    T8] kworker/u4:0: attempt to access beyond end of device
[   74.953445][    T8] loop2: rw=2049, sector=40960, nr_sectors = 24 limit=40427
[   74.987444][   T28] audit: type=1400 audit(1741908400.305:620): avc:  denied  { rename } for  pid=2757 comm="syz.2.1039" name=131377C5FC35D41454D5D41D29AD1A6029598146E6BE166E41AD0DBD4054033C9F33BBDA8224A2F3D772E7636E48B33CBF708372E8F1B9933EC5127743BE2206209EF02DF9CBF2F6E880D338 dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1
[   75.077154][  T513] Bluetooth: hci0: command 0x1003 tx timeout
[   75.077166][ T1684] Bluetooth: hci0: Opcode 0x1003 failed: -110
[   75.228344][ T2805] loop3: detected capacity change from 0 to 1024
[   75.235530][ T2805] EXT4-fs: Ignoring removed nobh option
[   75.236969][ T2801] loop4: detected capacity change from 0 to 2048
[   75.243597][ T2805] EXT4-fs: Ignoring removed bh option
[   75.254981][ T2805] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   75.279841][ T2805] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[   75.280308][ T2801] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[   75.330852][  T291] EXT4-fs (loop3): unmounting filesystem.
[   75.358832][    T8] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm kworker/u4:0: bg 0: block 234: padding at end of block bitmap is not set
[   75.381174][    T8] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 117
[   75.400938][    T8] EXT4-fs (loop4): This should not happen!! Data will be lost
[   75.400938][    T8] 
[   75.417950][  T293] EXT4-fs (loop4): unmounting filesystem.
[   75.482315][ T2819] loop3: detected capacity change from 0 to 512
[   75.498582][ T2819] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[   75.518926][ T2819] EXT4-fs (loop3): 1 truncate cleaned up
[   75.521417][ T2822] netlink: 1347 bytes leftover after parsing attributes in process `syz.4.1062'.
[   75.525541][ T2819] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[   75.600511][ T2824] netlink: 'syz.4.1063': attribute type 4 has an invalid length.
[   75.645777][  T291] EXT4-fs (loop3): unmounting filesystem.
[   75.782220][  T329] Bluetooth: hci0: Frame reassembly failed (-84)
[   76.287702][ T2009] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[   76.478351][ T2009] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   76.504734][ T2009] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   76.537152][ T2009] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00
[   76.557234][ T2009] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   76.588126][ T2009] usb 5-1: config 0 descriptor??
[   76.998295][ T2009] cp2112 0003:10C4:EA90.000F: unknown main item tag 0x0
[   77.012287][ T2009] cp2112 0003:10C4:EA90.000F: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0
[   77.197533][ T2009] cp2112 0003:10C4:EA90.000F: Part Number: 0x82 Device Version: 0xFE
[   77.324714][ T2904] loop5: detected capacity change from 0 to 131072
[   77.335291][ T2904] F2FS-fs (loop5): invalid crc value
[   77.344240][ T2904] F2FS-fs (loop5): Disable nat_bits due to incorrect cp_ver (15359802341028777995, 275811881701387)
[   77.379314][ T2904] F2FS-fs (loop5): Mounted with checkpoint version = 753bd00b
[   77.427563][ T2914] tmpfs: Unknown parameter 'nolazytimeun'
[   77.598566][ T2009] cp2112 0003:10C4:EA90.000F: error setting SMBus config
[   77.611971][ T2009] cp2112: probe of 0003:10C4:EA90.000F failed with error -71
[   77.621999][ T2009] usb 5-1: USB disconnect, device number 8
[   77.677357][ T2923] SELinux: failed to load policy
[   77.750118][ T2931] loop5: detected capacity change from 0 to 512
[   77.761679][ T2931] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[   77.780171][ T2931] EXT4-fs (loop5): 1 truncate cleaned up
[   77.786234][ T2931] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[   77.806361][ T1684] Bluetooth: hci0: Opcode 0x1003 failed: -110
[   77.829103][ T1118] EXT4-fs (loop5): unmounting filesystem.
[   77.881832][ T2936] bridge0: port 3(vlan2) entered blocking state
[   77.889280][ T2936] bridge0: port 3(vlan2) entered disabled state
[   78.040429][ T2941] kvm: MONITOR instruction emulated as NOP!
[   78.131209][ T2944] raw_sendmsg: syz.4.1103 forgot to set AF_INET. Fix it!
[   78.265265][ T2963] loop5: detected capacity change from 0 to 1024
[   78.275417][ T2963] EXT4-fs: Ignoring removed nobh option
[   78.283095][ T2963] EXT4-fs: Ignoring removed bh option
[   78.291251][ T2963] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   78.338607][ T2963] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[   78.356812][   T28] kauditd_printk_skb: 9 callbacks suppressed
[   78.356830][   T28] audit: type=1400 audit(1741908403.805:630): avc:  denied  { bpf } for  pid=2971 comm="syz.2.1116" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[   78.362739][ T2974] loop4: detected capacity change from 0 to 512
[   78.371462][   T28] audit: type=1400 audit(1741908403.815:631): avc:  denied  { read write } for  pid=2973 comm="syz.4.1117" name="loop4" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[   78.442927][ T2974] EXT4-fs error (device loop4): ext4_orphan_get:1426: comm syz.4.1117: bad orphan inode 15
[   78.513573][   T28] audit: type=1400 audit(1741908403.815:632): avc:  denied  { open } for  pid=2973 comm="syz.4.1117" path="/dev/loop4" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[   78.518540][ T1118] EXT4-fs (loop5): unmounting filesystem.
[   78.542438][ T2974] ext4_test_bit(bit=14, block=5) = 0
[   78.559401][ T2974] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[   78.571066][   T28] audit: type=1400 audit(1741908403.815:633): avc:  denied  { ioctl } for  pid=2973 comm="syz.4.1117" path="/dev/loop4" dev="devtmpfs" ino=118 ioctlcmd=0x4c00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[   78.601817][   T28] audit: type=1400 audit(1741908403.815:634): avc:  denied  { append } for  pid=84 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=6 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   78.632292][   T28] audit: type=1400 audit(1741908403.815:635): avc:  denied  { map_create } for  pid=2971 comm="syz.2.1116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[   78.655457][ T2974] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 7987 vs 220 free clusters
[   78.673495][   T28] audit: type=1400 audit(1741908403.815:636): avc:  denied  { perfmon } for  pid=2971 comm="syz.2.1116" capability=38  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[   78.714035][ T2974] EXT4-fs error (device loop4): ext4_free_inode:355: comm syz.4.1117: bit already cleared for inode 13
[   78.731496][ T2984] EXT4-fs error (device loop4): __ext4_new_inode:1075: comm syz.4.1117: reserved inode found cleared - inode=1
[   78.736187][   T28] audit: type=1400 audit(1741908403.815:637): avc:  denied  { map_read map_write } for  pid=2971 comm="syz.2.1116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[   78.772897][   T28] audit: type=1400 audit(1741908403.815:638): avc:  denied  { prog_load } for  pid=2971 comm="syz.2.1116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[   78.821503][   T28] audit: type=1400 audit(1741908403.815:639): avc:  denied  { prog_run } for  pid=2971 comm="syz.2.1116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[   78.855852][  T293] EXT4-fs (loop4): unmounting filesystem.
[   78.954232][ T3008] loop3: detected capacity change from 0 to 2048
[   78.972963][ T3008] EXT4-fs: Ignoring removed bh option
[   79.005753][ T3008] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[   79.087930][  T291] EXT4-fs (loop3): unmounting filesystem.
[   79.108259][ T3018] syz.4.1134[3018] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   79.108362][ T3018] syz.4.1134[3018] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   79.150879][ T3005] loop5: detected capacity change from 0 to 40427
[   79.186601][ T3005] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12
[   79.196250][ T3005] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[   79.214348][ T3005] F2FS-fs (loop5): invalid crc value
[   79.239657][ T3005] F2FS-fs (loop5): Found nat_bits in checkpoint
[   79.315077][ T3005] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0
[   79.323957][ T3005] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[   80.917268][ T1684] Bluetooth: hci0: Opcode 0x1003 failed: -110
[   80.917297][   T45] Bluetooth: hci0: command 0x1003 tx timeout
[   81.135710][ T3072] loop7: detected capacity change from 0 to 16384
[   81.210348][   T42] I/O error, dev loop7, sector 1792 op 0x1:(WRITE) flags 0x800 phys_seg 12 prio class 2
[   81.222158][   T42] Buffer I/O error on dev loop7, logical block 224, lost async page write
[   81.234411][   T42] Buffer I/O error on dev loop7, logical block 225, lost async page write
[   81.244566][   T42] Buffer I/O error on dev loop7, logical block 226, lost async page write
[   81.254778][   T42] Buffer I/O error on dev loop7, logical block 227, lost async page write
[   81.263790][   T42] Buffer I/O error on dev loop7, logical block 228, lost async page write
[   81.272484][   T42] Buffer I/O error on dev loop7, logical block 229, lost async page write
[   81.282941][   T42] Buffer I/O error on dev loop7, logical block 230, lost async page write
[   81.292092][   T42] Buffer I/O error on dev loop7, logical block 231, lost async page write
[   81.300907][   T42] Buffer I/O error on dev loop7, logical block 232, lost async page write
[   81.309720][   T42] Buffer I/O error on dev loop7, logical block 233, lost async page write
[   81.334621][   T42] I/O error, dev loop7, sector 1888 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2
[   81.372741][ T3087] loop4: detected capacity change from 0 to 1024
[   81.397455][ T3087] EXT4-fs: Ignoring removed orlov option
[   81.455590][ T3087] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[   81.477044][ T3087] EXT4-fs error (device loop4): ext4_check_all_de:663: inode #12: block 7: comm syz.4.1161: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=124 fake=0
[   81.487056][ T3102] loop2: detected capacity change from 0 to 2048
[   81.510927][ T3087] EXT4-fs (loop4): Remounting filesystem read-only
[   81.528927][  T293] EXT4-fs (loop4): unmounting filesystem.
[   81.548955][ T3102] GPT:first_usable_lbas don't match.
[   81.554188][ T3102] GPT:34 != 290
[   81.557766][ T3102] GPT: Use GNU Parted to correct GPT errors.
[   81.564466][ T3102]  loop2: p1 p2 p3
[   81.657194][ T2009] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[   81.718084][ T3117] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1174'.
[   81.857137][ T2009] usb 6-1: Using ep0 maxpacket: 16
[   81.865110][ T2009] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   81.887522][ T2009] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[   81.923563][ T2009] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[   81.947123][ T2009] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   81.978013][ T2009] usb 6-1: config 0 descriptor??
[   82.112620][ T3123] loop4: detected capacity change from 0 to 40427
[   82.127125][ T1172] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[   82.146099][ T3123] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[   82.165768][ T3123] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[   82.187351][ T3123] F2FS-fs (loop4): invalid crc value
[   82.228877][ T3123] F2FS-fs (loop4): Found nat_bits in checkpoint
[   82.328417][ T1172] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   82.365068][ T1172] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[   82.388798][ T2009] HID 045e:07da: Invalid code 65791 type 1
[   82.408475][ T1172] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[   82.419577][ T3123] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[   82.430705][ T2009] input: HID 045e:07da as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:045E:07DA.0010/input/input11
[   82.443799][ T3123] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[   82.454948][ T1172] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[   82.477710][ T1172] usb 3-1: SerialNumber: syz
[   82.484205][ T2009] microsoft 0003:045E:07DA.0010: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0
[   82.702875][ T1172] usb 3-1: 0:2 : does not exist
[   82.721363][ T1172] usb 3-1: USB disconnect, device number 8
[   82.871359][ T3146] capability: warning: `syz.4.1185' uses 32-bit capabilities (legacy support in use)
[   83.218037][ T2640] usb 6-1: USB disconnect, device number 6
[   83.382591][   T28] kauditd_printk_skb: 1097 callbacks suppressed
[   83.382615][   T28] audit: type=1326 audit(1741908408.825:1737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3107 comm="syz.3.1170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7a39929359 code=0x7ffc0000
[   83.440955][   T28] audit: type=1326 audit(1741908408.835:1738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3107 comm="syz.3.1170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7a39929359 code=0x7ffc0000
[   83.493030][   T28] audit: type=1326 audit(1741908408.835:1739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3107 comm="syz.3.1170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a3998d169 code=0x7ffc0000
[   83.560533][   T28] audit: type=1326 audit(1741908408.835:1740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3107 comm="syz.3.1170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7a39929359 code=0x7ffc0000
[   83.592813][ T2012] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[   83.621853][   T28] audit: type=1326 audit(1741908408.835:1741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3107 comm="syz.3.1170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7a39929359 code=0x7ffc0000
[   83.673908][   T28] audit: type=1326 audit(1741908408.835:1742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3107 comm="syz.3.1170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7a39929359 code=0x7ffc0000
[   83.721528][   T28] audit: type=1326 audit(1741908408.835:1743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3107 comm="syz.3.1170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7a39929359 code=0x7ffc0000
[   83.782800][   T28] audit: type=1326 audit(1741908408.835:1744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3107 comm="syz.3.1170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7a39929359 code=0x7ffc0000
[   83.811594][ T2012] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   83.833573][ T2012] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   83.864289][ T2012] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[   83.887134][   T28] audit: type=1326 audit(1741908408.835:1745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3107 comm="syz.3.1170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7a39929359 code=0x7ffc0000
[   83.924754][ T2012] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   83.946355][ T2012] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   83.966658][   T28] audit: type=1326 audit(1741908408.835:1746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3107 comm="syz.3.1170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7a39929359 code=0x7ffc0000
[   83.995188][ T2012] usb 3-1: config 0 descriptor??
[   84.079386][ T3204] loop4: detected capacity change from 0 to 256
[   84.123900][ T3204] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d)
[   84.157168][ T2640] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[   84.213816][ T3209] netlink: 'syz.5.1213': attribute type 13 has an invalid length.
[   84.234379][ T3209] gretap0: refused to change device tx_queue_len
[   84.252961][ T3213] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1215'.
[   84.254444][ T3209] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[   84.378639][ T2640] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   84.402689][ T2640] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   84.411234][ T2012] plantronics 0003:047F:FFFF.0011: unknown main item tag 0xd
[   84.429752][ T2640] usb 4-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af
[   84.431090][ T2012] plantronics 0003:047F:FFFF.0011: No inputs registered, leaving
[   84.459550][ T2640] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   84.469928][ T2012] plantronics 0003:047F:FFFF.0011: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0
[   84.557406][ T2640] usb 4-1: config 0 descriptor??
[   84.708156][ T2012] usb 3-1: USB disconnect, device number 9
[   84.968486][ T2640] playstation 0003:054C:0DF2.0012: unknown main item tag 0x0
[   84.980926][ T2640] playstation 0003:054C:0DF2.0012: unknown main item tag 0x0
[   84.991250][ T2640] playstation 0003:054C:0DF2.0012: unknown main item tag 0x0
[   85.005394][ T2640] playstation 0003:054C:0DF2.0012: unknown main item tag 0x0
[   85.029347][ T2640] playstation 0003:054C:0DF2.0012: unknown main item tag 0x0
[   85.038135][ T2640] playstation 0003:054C:0DF2.0012: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.3-1/input0
[   85.157892][ T3252] netlink: 'syz.0.1232': attribute type 12 has an invalid length.
[   85.169202][ T2640] playstation 0003:054C:0DF2.0012: Invalid byte count transferred, expected 20 got 0
[   85.183815][ T2640] playstation 0003:054C:0DF2.0012: Failed to retrieve DualSense pairing info: -22
[   85.200543][ T2640] playstation 0003:054C:0DF2.0012: Failed to get MAC address from DualSense
[   85.215302][ T2640] playstation 0003:054C:0DF2.0012: Failed to create dualsense.
[   85.241589][ T2640] playstation: probe of 0003:054C:0DF2.0012 failed with error -22
[   85.259516][ T3254] device pim6reg1 entered promiscuous mode
[   85.387467][ T1994] usb 4-1: USB disconnect, device number 9
[   85.438116][ T3251] loop5: detected capacity change from 0 to 40427
[   85.448328][ T3251] F2FS-fs (loop5): heap/no_heap options were deprecated
[   85.459276][ T3251] F2FS-fs (loop5): Unrecognized mount option "usrjquot=noflush_merge" or missing value
[   85.491111][ T3278] netem: incorrect ge model size
[   85.500529][ T3278] netem: change failed
[   85.777732][ T3298] 9pnet: p9_errstr2errno: server reported unknown error �@�΂00000000000000000005
[   85.813915][    C1] ==================================================================
[   85.817829][ T1992] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[   85.823753][    C1] BUG: KASAN: use-after-free in dev_map_generic_redirect+0x9f/0x7d0
[   85.840187][    C1] Read of size 8 at addr ffff88810020b600 by task syz.0.1255/3300
[   85.843562][ T3286] loop5: detected capacity change from 0 to 40427
[   85.848795][    C1] 
[   85.848817][    C1] CPU: 1 PID: 3300 Comm: syz.0.1255 Not tainted 6.1.128-syzkaller-00009-g70d032fba5f4 #0
[   85.848842][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[   85.858578][ T3286] F2FS-fs (loop5): heap/no_heap options were deprecated
[   85.858614][    C1] Call Trace:
[   85.858626][    C1]  <IRQ>
[   85.869876][ T3286] F2FS-fs (loop5): invalid crc value
[   85.880618][    C1]  dump_stack_lvl+0x151/0x1b7
[   85.880669][    C1]  ? nf_tcp_handle_invalid+0x3f1/0x3f1
[   85.880694][    C1]  ? _printk+0xd1/0x111
[   85.880714][    C1]  ? __virt_addr_valid+0x242/0x2f0
[   85.892661][ T3286] F2FS-fs (loop5): Found nat_bits in checkpoint
[   85.893512][    C1]  print_report+0x158/0x4e0
[   85.941702][    C1]  ? __do_softirq+0xb/0xd
[   85.946498][    C1]  ? __virt_addr_valid+0x242/0x2f0
[   85.955184][    C1]  ? kasan_complete_mode_report_info+0x90/0x1b0
[   85.961861][    C1]  ? dev_map_generic_redirect+0x9f/0x7d0
[   85.962073][ T3286] F2FS-fs (loop5): Start checkpoint disabled!
[   85.969071][    C1]  kasan_report+0x13c/0x170
[   85.969121][    C1]  ? dev_map_generic_redirect+0x9f/0x7d0
[   85.969147][    C1]  __asan_report_load8_noabort+0x14/0x20
[   85.969169][    C1]  dev_map_generic_redirect+0x9f/0x7d0
[   85.986305][ T3304] sock: sock_set_timeout: `syz.3.1256' (pid 3304) tries to set negative timeout
[   85.988849][    C1]  ? bq_enqueue+0x3e0/0x3e0
[   85.989288][    C1]  ? bpf_prog_run_generic_xdp+0xa35/0x1200
[   85.989320][    C1]  xdp_do_generic_redirect+0x42e/0xb40
[   85.989351][    C1]  do_xdp_generic+0x53e/0x800
[   85.989377][    C1]  ? generic_xdp_tx+0x560/0x560
[   86.011128][ T3286] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6
[   86.011842][    C1]  ? migrate_disable+0xd9/0x190
[   86.055943][    C1]  __netif_receive_skb_core+0x19ae/0x43d0
[   86.062728][    C1]  ? cpudl_cleanup+0x40/0x40
[   86.067703][    C1]  ? qdisc_run+0x260/0x260
[   86.072857][    C1]  ? __update_load_avg_cfs_rq+0xb1/0x2f0
[   86.080386][    C1]  ? update_load_avg+0x513/0x1530
[   86.086244][    C1]  __netif_receive_skb+0x11c/0x530
[   86.091636][    C1]  ? __netif_receive_skb_list_core+0x890/0x890
[   86.098550][    C1]  ? __kasan_check_write+0x14/0x20
[   86.103974][    C1]  ? _raw_spin_lock_irq+0xa5/0x1b0
[   86.109125][    C1]  ? _raw_spin_lock_irqsave+0x210/0x210
[   86.116289][    C1]  process_backlog+0x32c/0x630
[   86.121687][    C1]  __napi_poll+0xbe/0x5c0
[   86.126880][    C1]  net_rx_action+0x595/0xdd0
[   86.132026][    C1]  ? net_tx_action+0x560/0x560
[   86.137688][    C1]  ? kvm_sched_clock_read+0x18/0x40
[   86.145447][    C1]  ? sched_clock+0x9/0x10
[   86.150139][    C1]  ? irqtime_account_irq+0x79/0x260
[   86.158422][    C1]  handle_softirqs+0x1db/0x650
[   86.165056][    C1]  __do_softirq+0xb/0xd
[   86.169396][    C1]  do_softirq+0xf6/0x150
[   86.174749][    C1]  </IRQ>
[   86.179597][    C1]  <TASK>
[   86.183015][    C1]  ? __local_bh_enable_ip+0x80/0x80
[   86.188427][    C1]  __local_bh_enable_ip+0x75/0x80
[   86.195380][    C1]  __dev_queue_xmit+0x156c/0x3730
[   86.200796][    C1]  ? __dev_queue_xmit+0x2ab/0x3730
[   86.208331][    C1]  ? netdev_core_pick_tx+0x350/0x350
[   86.217628][    C1]  ? __kasan_check_read+0x11/0x20
[   86.224525][    C1]  ? selinux_ip_postroute+0x2d5/0x13d0
[   86.232009][    C1]  ? selinux_nf_unregister+0x30/0x30
[   86.239927][    C1]  ? memcpy+0x56/0x70
[   86.244720][    C1]  ip6_finish_output2+0x1200/0x1850
[   86.254954][    C1]  ? ip6_make_skb+0x7a0/0x7a0
[   86.262619][    C1]  ? ip6t_do_table+0x1643/0x1830
[   86.268024][    C1]  ? ip6table_mangle_hook+0x246/0x790
[   86.274402][    C1]  ip6_finish_output+0x50f/0xa60
[   86.279793][    C1]  ip6_output+0x1f7/0x4c0
[   86.284847][    C1]  ? ac6_seq_show+0xf0/0xf0
[   86.289744][    C1]  ? ip6_output+0x4c0/0x4c0
[   86.294843][    C1]  ip6_xmit+0xc5d/0x1650
[   86.300060][    C1]  ? ip6_autoflowlabel+0xd0/0xd0
[   86.305531][    C1]  ? NF_HOOK+0x270/0x270
[   86.311688][    C1]  ? __sk_dst_check+0xd2/0x1b0
[   86.317166][    C1]  ? inet6_csk_route_socket+0x44a/0x970
[   86.323279][    C1]  ? inet6_csk_xmit+0x4e0/0x4e0
[   86.328966][    C1]  ? inet6_csk_xmit+0x2a5/0x4e0
[   86.336539][    C1]  inet6_csk_xmit+0x341/0x4e0
[   86.341771][    C1]  ? inet6_csk_addr2sockaddr+0x210/0x210
[   86.347950][    C1]  __tcp_transmit_skb+0x1e9e/0x35a0
[   86.355114][    C1]  ? tcp_update_metrics+0x1020/0x1020
[   86.361252][    C1]  ? __tcp_send_ack+0x6c0/0x6c0
[   86.366827][    C1]  ? tcp_fastopen_cookie_check+0x3be/0x530
[   86.373564][    C1]  tcp_connect+0x2e27/0x5210
[   86.379629][    C1]  ? bpf_skops_write_hdr_opt+0x590/0x590
[   86.386169][    C1]  ? __inet_hash_connect+0x1db/0x1f10
[   86.392173][    C1]  ? __siphash_unaligned+0x24f/0x3c0
[   86.401629][    C1]  ? memset+0x35/0x40
[   86.406477][    C1]  ? tcp_fastopen_active_should_disable+0x240/0x240
[   86.416833][    C1]  ? inet6_hash_connect+0x90/0xd0
[   86.423702][    C1]  tcp_v6_connect+0x1251/0x1b10
[   86.428759][    C1]  ? __stack_depot_save+0x36/0x480
[   86.434491][    C1]  ? tcp_v6_pre_connect+0x60/0x60
[   86.440049][    C1]  ? kmalloc_trace+0x44/0xa0
[   86.445688][    C1]  ? tcp_sendmsg+0x2f/0x50
[   86.450431][    C1]  ? inet6_sendmsg+0xa1/0xc0
[   86.456106][    C1]  __inet_stream_connect+0x254/0xe50
[   86.462238][    C1]  ? inet_dgram_connect+0x410/0x410
[   86.468010][    C1]  ? tcp_sendmsg_fastopen+0x1d1/0x5d0
[   86.474037][    C1]  ? kasan_save_alloc_info+0x1f/0x30
[   86.480703][    C1]  ? __kasan_kmalloc+0x9c/0xb0
[   86.485533][    C1]  ? kmalloc_trace+0x44/0xa0
[   86.491178][    C1]  tcp_sendmsg_fastopen+0x38c/0x5d0
[   86.496832][    C1]  tcp_sendmsg_locked+0x39d8/0x4000
[   86.503930][    C1]  ? avc_has_perm+0x16f/0x260
[   86.508824][    C1]  ? __kasan_check_write+0x14/0x20
[   86.514080][    C1]  ? _raw_spin_lock_bh+0xa4/0x1b0
[   86.519506][    C1]  ? _raw_spin_lock_irq+0x1b0/0x1b0
[   86.525257][    C1]  ? __local_bh_enable_ip+0x58/0x80
[   86.530295][    C1]  ? _raw_spin_unlock_bh+0x50/0x60
[   86.535860][    C1]  ? selinux_socket_accept+0x5b0/0x5b0
[   86.542406][    C1]  ? tcp_set_state+0x750/0x750
[   86.547504][    C1]  ? check_stack_object+0x114/0x130
[   86.553226][    C1]  tcp_sendmsg+0x2f/0x50
[   86.557585][    C1]  inet6_sendmsg+0xa1/0xc0
[   86.562531][    C1]  ? inet6_compat_ioctl+0x4e0/0x4e0
[   86.568454][    C1]  __sys_sendto+0x480/0x600
[   86.574510][    C1]  ? __ia32_sys_getpeername+0x90/0x90
[   86.581580][    C1]  ? fpregs_restore_userregs+0x130/0x290
[   86.587273][    C1]  __x64_sys_sendto+0xe5/0x100
[   86.592599][    C1]  x64_sys_call+0x15c/0x9a0
[   86.598132][    C1]  do_syscall_64+0x3b/0xb0
[   86.602790][    C1]  ? clear_bhb_loop+0x55/0xb0
[   86.607684][    C1]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   86.615387][    C1] RIP: 0033:0x7f620818d169
[   86.620924][    C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   86.647193][    C1] RSP: 002b:00007f6208f25038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[   86.657227][    C1] RAX: ffffffffffffffda RBX: 00007f62083a5fa0 RCX: 00007f620818d169
[   86.666213][    C1] RDX: fffffffffffffea7 RSI: 0000400000f6f000 RDI: 0000000000000003
[   86.676080][    C1] RBP: 00007f620820e2a0 R08: 0000400000b63fe4 R09: 000000000000001c
[   86.686050][    C1] R10: 0000000020000004 R11: 0000000000000246 R12: 0000000000000000
[   86.695533][    C1] R13: 0000000000000000 R14: 00007f62083a5fa0 R15: 00007ffc4d20ad18
[   86.704736][    C1]  </TASK>
[   86.708181][    C1] 
[   86.710645][    C1] Allocated by task 3264:
[   86.715983][    C1]  kasan_set_track+0x4b/0x70
[   86.721872][    C1]  kasan_save_alloc_info+0x1f/0x30
[   86.727569][    C1]  __kasan_kmalloc+0x9c/0xb0
[   86.733114][    C1]  __kmalloc_node+0xb4/0x1e0
[   86.738207][    C1]  bpf_map_kmalloc_node+0xd0/0x2c0
[   86.743520][    C1]  __dev_map_alloc_node+0x5c/0x4e0
[   86.748686][    C1]  dev_map_hash_update_elem+0x32b/0x7b0
[   86.756382][    C1]  bpf_map_update_value+0x23a/0x410
[   86.761909][    C1]  map_update_elem+0x500/0x680
[   86.767314][    C1]  __sys_bpf+0x460/0x7f0
[   86.772136][    C1]  __x64_sys_bpf+0x7c/0x90
[   86.777586][    C1]  x64_sys_call+0x87f/0x9a0
[   86.782194][    C1]  do_syscall_64+0x3b/0xb0
[   86.787043][    C1]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   86.793044][    C1] 
[   86.795471][    C1] Freed by task 10:
[   86.800012][    C1]  kasan_set_track+0x4b/0x70
[   86.806934][    C1]  kasan_save_free_info+0x2b/0x40
[   86.812718][    C1]  ____kasan_slab_free+0x131/0x180
[   86.818160][    C1]  __kasan_slab_free+0x11/0x20
[   86.823554][    C1]  __kmem_cache_free+0x21d/0x410
[   86.828573][    C1]  kfree+0x7a/0xf0
[   86.832935][    C1]  dev_map_free+0x39a/0x6c0
[   86.838340][    C1]  bpf_map_free_deferred+0xf7/0x1b0
[   86.844485][    C1]  process_one_work+0x73d/0xcb0
[   86.849246][    C1]  worker_thread+0xa60/0x1260
[   86.854354][    C1]  kthread+0x26d/0x300
[   86.858580][    C1]  ret_from_fork+0x1f/0x30
[   86.863366][    C1] 
[   86.865621][    C1] The buggy address belongs to the object at ffff88810020b600
[   86.865621][    C1]  which belongs to the cache kmalloc-96 of size 96
[   86.882224][    C1] The buggy address is located 0 bytes inside of
[   86.882224][    C1]  96-byte region [ffff88810020b600, ffff88810020b660)
[   86.897429][    C1] 
[   86.899928][    C1] The buggy address belongs to the physical page:
[   86.906866][    C1] page:ffffea00040082c0 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x10020b
[   86.918010][    C1] flags: 0x4000000000000200(slab|zone=1)
[   86.924719][    C1] raw: 4000000000000200 ffffea0004599880 dead000000000006 ffff888100042900
[   86.934186][    C1] raw: 0000000000000000 0000000000200020 00000001ffffffff 0000000000000000
[   86.944703][    C1] page dumped because: kasan: bad access detected
[   86.952774][    C1] page_owner tracks the page as allocated
[   86.959266][    C1] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x12cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY), pid 1, tgid 1 (swapper/0), ts 2212353547, free_ts 2115943744
[   86.979288][    C1]  post_alloc_hook+0x213/0x220
[   86.984260][    C1]  prep_new_page+0x1b/0x110
[   86.988895][    C1]  get_page_from_freelist+0x3a98/0x3b10
[   86.994648][    C1]  __alloc_pages+0x234/0x610
[   86.999968][    C1]  alloc_slab_page+0x6c/0xf0
[   87.004796][    C1]  new_slab+0x90/0x3e0
[   87.009043][    C1]  ___slab_alloc+0x6f9/0xb80
[   87.014186][    C1]  __slab_alloc+0x5d/0xa0
[   87.019026][    C1]  __kmem_cache_alloc_node+0x207/0x2a0
[   87.024690][    C1]  kmalloc_trace+0x2a/0xa0
[   87.029633][    C1]  acpi_ut_evaluate_object+0x104/0x490
[   87.035519][    C1]  acpi_ut_execute_power_methods+0x10e/0x270
[   87.042538][    C1]  acpi_get_object_info+0x622/0x1060
[   87.048312][    C1]  acpi_init_device_object+0x609/0x34f0
[   87.055428][    C1]  acpi_add_single_object+0x105/0x1be0
[   87.061500][    C1]  acpi_bus_check_add+0x404/0x970
[   87.066666][    C1] page last free stack trace:
[   87.072226][    C1]  free_unref_page_prepare+0x9f1/0xa00
[   87.079748][    C1]  free_unref_page+0xb2/0x5c0
[   87.084868][    C1]  __free_pages+0x61/0xf0
[   87.089291][    C1]  __free_slab+0xce/0x1a0
[   87.094949][    C1]  discard_slab+0x29/0x40
[   87.099649][    C1]  __slab_free+0x205/0x280
[   87.104315][    C1]  ___cache_free+0xc6/0xd0
[   87.109681][    C1]  qlist_free_all+0xc5/0x140
[   87.114956][    C1]  kasan_quarantine_remove_cache+0x1a2/0x1c0
[   87.121685][    C1]  kasan_cache_shrink+0x9/0x10
[   87.126706][    C1]  kmem_cache_shrink+0xd/0x20
[   87.132622][    C1]  acpi_os_purge_cache+0x15/0x20
[   87.138121][    C1]  acpi_purge_cached_objects+0x8f/0xc0
[   87.144172][    C1]  acpi_initialize_objects+0x2e/0x9b
[   87.149722][    C1]  acpi_bus_init+0xd6/0xa4c
[   87.154526][    C1]  acpi_init+0x88/0x1f9
[   87.158903][    C1] 
[   87.161401][    C1] Memory state around the buggy address:
[   87.167781][    C1]  ffff88810020b500: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc
[   87.176222][    C1]  ffff88810020b580: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc
[   87.185324][    C1] >ffff88810020b600: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc
[   87.193960][    C1]                    ^
[   87.198832][    C1]  ffff88810020b680: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc
[   87.207551][    C1]  ffff88810020b700: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc
[   87.217084][    C1] ==================================================================
[   87.226600][    C1] Disabling lock debugging due to kernel taint
[   87.249718][ T1992] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   87.264525][ T3309] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1257'.
[   87.275057][ T1992] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   87.275567][  T329] kworker/u4:4: attempt to access beyond end of device
[   87.275567][  T329] loop5: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[   87.304660][ T1992] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[   87.331790][ T1992] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   87.348287][ T1992] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   87.374646][ T1992] usb 5-1: config 0 descriptor??
[   87.790906][ T1992] plantronics 0003:047F:FFFF.0013: unknown main item tag 0xd
[   87.801638][ T1992] plantronics 0003:047F:FFFF.0013: No inputs registered, leaving
[   87.811832][ T1992] plantronics 0003:047F:FFFF.0013: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0
[   88.058196][ T1992] usb 5-1: USB disconnect, device number 9