last executing test programs:

1m49.491303624s ago: executing program 32 (id=71):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000180), 0x4)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0)
r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
bind$802154_raw(r1, &(0x7f0000000440)={0x24, @long}, 0x14)

1m26.423319695s ago: executing program 33 (id=716):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.state\x00', 0x275a, 0x0)
fcntl$lock(r2, 0x26, &(0x7f0000000000))
fcntl$lock(r2, 0x25, &(0x7f00000000c0)={0x2, 0x1, 0x7fff, 0x2e})

1m25.469719107s ago: executing program 34 (id=742):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x800714, &(0x7f0000000280)={[{@orlov}, {@nodelalloc}, {@errors_remount}, {@grpquota}, {@auto_da_alloc}, {@dioread_nolock}, {@quota}]}, 0xff, 0x493, &(0x7f0000000640)="$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")
mkdir(0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_sys\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000080)={'#! ', './file0'}, 0xb)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000000))

1m18.946732188s ago: executing program 35 (id=851):
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10)
syz_emit_ethernet(0x7e, &(0x7f0000000480)={@local, @random="7e4173edf6b3", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @empty, @rand_addr, {[@timestamp_addr={0x44, 0x1c, 0x0, 0x1, 0x0, [{@multicast2, 0x300}, {@empty}, {@loopback}]}, @cipso={0x86, 0x21, 0x0, [{0x0, 0x12, "0001632a3a835e9504005d8b00000000"}, {0x0, 0x9, "4ef661e96b4014"}]}]}}}}}}}, 0x0)

1m9.679310385s ago: executing program 36 (id=1110):
syz_usb_connect(0x0, 0x35, &(0x7f0000000100)=ANY=[@ANYBLOB="120100003215124099043e10184e0102030109022300010000000009040000"], 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r2}, 0x10)

1m7.725885678s ago: executing program 37 (id=1148):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
ioprio_set$uid(0x3, 0x0, 0x0)

1m5.485293012s ago: executing program 3 (id=1189):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]})
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000008c0))

1m4.609020344s ago: executing program 3 (id=1191):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r2 = memfd_create(&(0x7f0000000540)='\xdd#\x00\xe6Z\x00\xafq%\xa5\x83\xa6#\r\x83y\xf3\xb2\xe6b\x00\x00\x00\x00\x00\x00\x00\x01\x00\xf9\xff\xff\xff\x00\x17?$^\xe1Ob\xe1Y\x03\x00\x00\x00\x00\x00\x00\x00\xce\xe5\x19THP\xf4O\xe2\x9f\xd9\xae\xcf>/\xdc\xaa<\x96\xedE>{\x05\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xa2c\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0\xb04\xb7T5\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x06\xb5\x03\x8a\xc40\xbe\xe3\x93A\x15\xec\xdb\xaa\xdc\n\xcbC\x15\xfcp\x11\xdai\f{\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\x82t\x96\xf8\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83\x8e-k\x12\xdf\xb9\x87\xb6^r\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9w\xd2\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T[\xb7\xa4\xb0\bk&\xede\x8b\xc2\xb2\xcd\xef\xcf\x0fE\xc5\x86]\xc0]}\xdd^\xf6&\x16>c\x9d\x9c\xc9\x01\x04\x00\x00\xe9h\xbd\x10p\x8f\x14\x1f2\"\x1b;\xfda\x19\x8bo^\x96\x9a~Q\xce\x95\x02\xb8e\xbbG\xb0V[\xfe\x80\x94$y\x8a\\@\xa9^\x95!IJ\xcf\xf7\xafoX/qG\x97ITp\x01\xae\f\"n;%\xecT\xf6\xb6\xbf;\xde\xec\xb4z\xaa\xd9%\xa5;wy~\xcb\x9a\xd7\r\xe2\xcd\xf0C\x16\xbf0\x89\xb4\xf5\x86\xf3\x99\x9bq\xd3\x15\xe1:\x86\xe4\x14\x805K\xcf\xf6\xda\xd1A>\xf4r>\xfdyAH\x0f\x00'/426, 0x0)
fsetxattr$trusted_overlay_origin(r2, &(0x7f0000000180), 0x0, 0x0, 0x0)

1m4.597764704s ago: executing program 3 (id=1192):
unshare(0x6020400)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x4, 0x5, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000000)={r0, 0x0, 0x0}, 0x20)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x4a, 0x4, 0x8, 0x40, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x9, 0x0, r1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_DELETE_ELEM(0x2, &(0x7f00000003c0)={r2, &(0x7f0000000300), 0x20000000}, 0x20)

1m4.589350564s ago: executing program 3 (id=1193):
syz_mount_image$vfat(&(0x7f0000003880), &(0x7f0000000000)='./file0\x00', 0x14812, &(0x7f00000000c0)=ANY=[@ANYBLOB='iocharset=iso8859-%,utf8=1,shortname=lower,uni_xlate=1,shortname=win95,iocharset=cp775,uni_xlate=1,rodir,utf8=1,uni_xlate=0,tz=UTC,rodir,uni_xlate=0,utf8=0,codepage=1255,nonumtail=0,\x00'], 0x25, 0x2a1, &(0x7f0000002300)="$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")
open(&(0x7f0000000180)='./bus\x00', 0x14d27e, 0x0)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000340)='./bus\x00', 0x0, 0x1000, 0x0)
r0 = open(&(0x7f00000005c0)='./bus\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x4c02, &(0x7f0000000140))
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x109f43, 0x0)

1m4.511126114s ago: executing program 3 (id=1194):
r0 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488)
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=0x0, @ANYBLOB='\f'], 0x28}, 0x1, 0x0, 0x0, 0x4044}, 0x40810)
r1 = socket$inet6(0xa, 0x3, 0x8000000003c)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x1}, 0x1c)
sendmsg(r1, &(0x7f00000000c0)={0x0, 0x952f, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xfff2}], 0x1, 0x0, 0x0, 0x2c}, 0x44004)

1m4.466759295s ago: executing program 2 (id=1195):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xb, 0x5, 0xffff, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000170000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000feffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='kmem_cache_free\x00', r2}, 0x10)
bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6)
write$binfmt_misc(r0, &(0x7f0000000100), 0x6)

1m4.415352334s ago: executing program 2 (id=1196):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='kfree\x00', r0}, 0x10)
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000410, &(0x7f0000000080), 0x81, 0x7a5, &(0x7f0000000f80)="$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")
openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0)
r1 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0)

1m4.415195845s ago: executing program 3 (id=1197):
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x10)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@loopback, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x2}}, {{@in=@private=0xa010100, 0x0, 0x6c}, 0x0, @in6=@dev, 0x0, 0x4, 0x0, 0x0, 0xb7b0}}, 0xe8)
syz_emit_ethernet(0x3e, &(0x7f0000000200)={@broadcast, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @dev, @dev}}}}}}, 0x0)

1m4.401434995s ago: executing program 38 (id=1197):
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x10)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@loopback, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x2}}, {{@in=@private=0xa010100, 0x0, 0x6c}, 0x0, @in6=@dev, 0x0, 0x4, 0x0, 0x0, 0xb7b0}}, 0xe8)
syz_emit_ethernet(0x3e, &(0x7f0000000200)={@broadcast, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @dev, @dev}}}}}}, 0x0)

1m4.370062545s ago: executing program 2 (id=1199):
prctl$PR_SET_SECUREBITS(0x1c, 0x1d)
r0 = socket$unix(0x1, 0x2, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r1=>0x0}, &(0x7f0000cab000)=0xc)
setresuid(0x0, r1, 0x0)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/keys\x00', 0x0, 0x0)
preadv(r2, &(0x7f0000000740)=[{&(0x7f0000000440)=""/113, 0x71}], 0x1, 0x401, 0x0)

1m4.335915264s ago: executing program 2 (id=1200):
syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x400, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x1, 0x5514, &(0x7f0000005d80)="$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")
socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x17, 0x5, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
mkdir(&(0x7f0000000100)='./file0\x00', 0x1)
syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c})

1m4.022100585s ago: executing program 2 (id=1202):
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
connect$inet6(r0, &(0x7f0000000380)={0xa, 0x4e21, 0xffffffff, @local, 0x6}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000003900)=[{{0x0, 0x0, 0x0}}], 0x1, 0xc005)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="b80000001900674c0000000000000800fe8000000000000000000000000000bbe000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000101"], 0xb8}}, 0x0)
sendmmsg$inet6(r0, &(0x7f0000001e40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)

1m3.335335676s ago: executing program 2 (id=1212):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x10)
io_pgetevents(0x0, 0x8c3, 0x0, &(0x7f00000001c0), 0x0, 0x0)

1m3.335225797s ago: executing program 39 (id=1212):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x10)
io_pgetevents(0x0, 0x8c3, 0x0, &(0x7f00000001c0), 0x0, 0x0)

57.194511587s ago: executing program 1 (id=1319):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10)
removexattr(&(0x7f0000000080)='./file0\x00', 0x0)

57.183056938s ago: executing program 1 (id=1320):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="06000000040000000300000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000c00)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$ITER_CREATE(0x21, &(0x7f00000001c0)={r2}, 0x8)

57.167195967s ago: executing program 1 (id=1321):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x1, 0x2000, 0x2000, &(0x7f0000002000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000000000000034d564b0000000001"])
ioctl$KVM_RUN(r2, 0xae80, 0x0)

57.143209158s ago: executing program 1 (id=1322):
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000640)='./file1\x00', 0x3000010, &(0x7f0000000000), 0x3e, 0x51b, &(0x7f0000001200)="$eJzs3c9vI1cdAPDvTOLd7G6KU0CoVKJUtGi3grU3DW0jhKBc4FQJKPclJE4UxY6j2CmbqKKp+A8QEkicOHFB4g9AQj3wB6BKleCCOCBAIARbOCABHTTjsZp17CTQrJ3Gn4/04vfm1/e9sfw8M36ZCWBqPRkRL0bETEQ8ExHVcnpaprt54bC33Nv3X13NUxJZ9vJfk0jKaf1t5eXZiLjRWyXmIuJrX474ZnI8bmf/YGul2WzsluV6t7VT7+wf3N5srWw0NhrbS0uLzy+/sPzc8p2s9J7audDP/PhLn//5p7/1u7t/vvXtvFqf+0hUYqAd56nX9EqxL/ryfbT7MIJNwEzZnsqkKwIAwJnkx/gfjIhPFMf/1ZgpjuYGzEyiZgAAAMB5yb4wH/9OIjIAAADg0kojYj6StFaOBZiPNL1SXhv4cFxPm+1O91Pr7b3ttXxexEJU0vXNZuNOOVZ4ISpJXl4sx9j2y88OlJci4tGI+F71WlGurbabaxO+9gEAAADT4sbA+f8/qmmRP92Q/xMAAAAALq6FkQUAAADgsnDKDwAAAJff4Pm/+/0DAADApfKVl17KU9Z//vXaK/t7W+1Xbq81Olu11t5qbbW9u1PbaLc3inv2tU7bXrPd3vlMbO/dq3cbnW69s39wt9Xe2+7e3XzgEdgAAADAGD368Td+nUTE4WevFSnK+wACPOAPk64AcJ4M9YPp5S7eML0qk64AMHHJKfMN3gEAgPe/mx89/vt///n/rg3A5WasDwBMH7//w/SqGAEIU2u2vAbwgV7x6qjlRv7+/8uzRsqyiDerR6e4vggAAOM1X6QkrZXnAfORprVaxCMR6UJUkvXNZuNOeX7wq2rlal5eLNZMTh0zDAAAAAAAAAAAAAAAAAAAAAAAAAD0ZFkSGQAAAHCpRaR/Soq7+UfcrD49P3h94Eryz2r8sSz88OXv31vpdncX8+l/K57ldSUiuj8opz878vFhAAAAwHlLDkfO6p2nl6+LY60VAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFPg7fuvrvbTOOP+5YsRsTAs/mzMFa9zUYmI639PYvbIeklEzJxD/MPXI+KxYfGTeCfLXouyFsPiX3vI8ReKXTM8fhoRN84hPkyzN/L+58Vhn780nixeh3/+Zsv0Xo3u/9Iy8mNFPzes/3nk2NZaQ2M8/tZP671c5Xj81yMenx3e//T732RE/KeObe1fWZYdj/+Nrx8cjGp/9qOIm0O/f5IHYtW7rZ16Z//g9mZrZaOx0dheWlp8fvmF5eeW79TXN5uN8u/QGN/92M/eGRU/b//1IfF/+5te/3tS+58etdEB/3nr3v0P9bLH3oA8/q2nhn7/zsWI+Gn53ffJMp/Pv9nPH/byRz3xkzefOKn9ayP2/2nv/60ztv+Zr37n92dcFAAYg87+wdZKs9nYPSEzd4Zl3o+ZX8xdiGr8j5nstd47d1Hq8/9m8qPVd6f0W3UBKnYkk40l1tXieP6sa10ZU9sn2i0BAAAPwbsH/ZOuCQAAAAAAAAAAAAAAAAAAAEyvcdxKbTDm4WSaCgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwov8GAAD//3QT3Gw=")
open(&(0x7f0000000040)='./bus\x00', 0x1ed37e, 0x0)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
r0 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
write$selinux_validatetrans(r0, &(0x7f0000000280)={'system_u:object_r:sound_device_t:s0', 0x20, 'system_u:object_r:anacron_exec_t:s0', 0x20, 0x9, 0x20, '/usr/sbin/cups-browsed\x00'}, 0x74)

56.897890208s ago: executing program 1 (id=1324):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r1}, 0x10)
setitimer(0x2, 0x0, 0x0)

56.805140208s ago: executing program 1 (id=1326):
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000004c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
vmsplice(r0, &(0x7f0000000100)=[{&(0x7f0000000200)='=', 0x1}], 0x1, 0x5)

56.805041508s ago: executing program 40 (id=1326):
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000004c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
vmsplice(r0, &(0x7f0000000100)=[{&(0x7f0000000200)='=', 0x1}], 0x1, 0x5)

18.364927617s ago: executing program 5 (id=2188):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000200)={'veth0_to_team\x00', 0x400})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
close(0x3)

18.311605377s ago: executing program 5 (id=2191):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0xc9d7, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r0, <r1=>0xffffffffffffffff}, &(0x7f0000000440), &(0x7f00000005c0)}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
times(0x0)

18.280390707s ago: executing program 5 (id=2195):
r0 = syz_usb_connect$hid(0x2, 0xa5, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0xb05, 0x183d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x5, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x1}}, [{{0x9, 0x5, 0x2, 0x3, 0x3ff, 0x10, 0x7f}}]}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f00000004c0)={0x2c, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00\x00\a'], 0x0, 0x0, 0x0, 0x0}, 0x0)
creat(0x0, 0xecf86c37d53049cc)
openat$kvm(0xffffffffffffff9c, 0x0, 0x248400, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)

14.378984574s ago: executing program 5 (id=2215):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c})
mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x0, 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
getdents(r0, &(0x7f0000001080)=""/4096, 0x1000)

14.366455214s ago: executing program 5 (id=2216):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10)
bpf$TOKEN_CREATE(0x24, 0x0, 0x0)
rt_sigpending(0x0, 0x0)

14.303382625s ago: executing program 5 (id=2217):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x18, 0xb, &(0x7f0000000540)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x95}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10)
r1 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@private0, @in, 0x0, 0x0, 0xfffd, 0x0, 0x2}}, {{@in=@multicast1, 0x0, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x3}}, 0xe8)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0)

14.303260945s ago: executing program 41 (id=2217):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x18, 0xb, &(0x7f0000000540)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x95}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10)
r1 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@private0, @in, 0x0, 0x0, 0xfffd, 0x0, 0x2}}, {{@in=@multicast1, 0x0, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x3}}, 0xe8)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0)

8.151917306s ago: executing program 7 (id=2364):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10)
unshare(0x22020400)
unshare(0x22020400)
open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)

8.047757146s ago: executing program 7 (id=2368):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000003c0)='mm_page_alloc\x00', r0}, 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00')
r2 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x0)
mmap(&(0x7f000001a000/0x3000)=nil, 0x3000, 0xf, 0x11012, r2, 0x0)
pread64(r1, &(0x7f000001a240)=""/102400, 0x19000, 0x0)

7.946650516s ago: executing program 7 (id=2370):
syz_emit_ethernet(0x21a, &(0x7f0000000000)={@multicast, @random="777de85bf4dd", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x1e4, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030003004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "000000050000000026000400"}, {0x0, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc9"}, {0x0, 0x16, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907c"}]}}}}}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
sendmsg$key(r0, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e000000020013000200000000000000ff0800ed05000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c020001000000000000400002000000000500050000"], 0x80}}, 0x40088c0)
sendmmsg(r0, &(0x7f0000000180), 0x400008a, 0x0)

7.885804816s ago: executing program 7 (id=2372):
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000018"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = dup(r2)
ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="820000000000000083000040"])

7.769267636s ago: executing program 7 (id=2374):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x10)
epoll_create(0x8000)

7.728163936s ago: executing program 7 (id=2376):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$TCFLSH(r1, 0x400455c8, 0x4)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000040)=0x32)

3.137553935s ago: executing program 8 (id=2501):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', <r1=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=r1, @ANYBLOB="000000000000000024001280110001006272696467655f736c617665000000000c000580050019"], 0x4c}}, 0x0)
mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xc)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)

3.119791624s ago: executing program 8 (id=2502):
r0 = epoll_create1(0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/stat\x00', 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040))
epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f00000000c0)={0x60000005})
r2 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000180))

3.103233755s ago: executing program 8 (id=2503):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10)

3.092027325s ago: executing program 8 (id=2504):
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101090, 0x0)
chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00')
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00')
pivot_root(&(0x7f0000000280)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000240)='./file0\x00')

3.083980055s ago: executing program 8 (id=2505):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
syz_usb_connect(0x0, 0x10b, &(0x7f0000000280)=ANY=[@ANYBLOB="05010900b24b6a10e6040300770100000001090224000b0100000009040003"], 0x0)

3.050786555s ago: executing program 8 (id=2508):
r0 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000001540), 0x2, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10)
write$selinux_access(r0, &(0x7f0000001580)={'system_u:object_r:etc_mail_t:s0', 0x20, '/sbin/dhclient'}, 0x44)

3.032199255s ago: executing program 42 (id=2508):
r0 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000001540), 0x2, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10)
write$selinux_access(r0, &(0x7f0000001580)={'system_u:object_r:etc_mail_t:s0', 0x20, '/sbin/dhclient'}, 0x44)

1.981173087s ago: executing program 6 (id=2556):
r0 = socket$inet6(0xa, 0x3, 0xff)
connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r1}, 0x10)
r2 = dup2(r0, r0)
write$tun(r2, 0x0, 0x46)

1.935078587s ago: executing program 6 (id=2558):
setrlimit(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff})
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x42, 0x0)
pwrite64(r0, &(0x7f0000000140)='2', 0x1, 0x8000c61)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
copy_file_range(r2, 0x0, r1, 0x0, 0x6, 0x0)

1.916735836s ago: executing program 6 (id=2559):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
r1 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r0}, 0x8)
close(r1)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0)

1.916321147s ago: executing program 6 (id=2560):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000540)=@x86={0x3, 0x5, 0xbf, 0x0, 0xffff0001, 0x81, 0x4, 0x0, 0x18, 0x9, 0x9, 0x8, 0x0, 0x80000000, 0xc, 0x4, 0x5, 0xff, 0x7, '\x00', 0x7, 0x6})
ioctl$KVM_GET_MP_STATE(r2, 0x8004ae98, &(0x7f0000000040))

1.851389097s ago: executing program 6 (id=2561):
r0 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000100), 0x4)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @mcast2, 0x7}, 0x1c)
write(r0, &(0x7f0000000080)="89ba41c97928dec7cec15a160d3dba257872aed129d4b5247c9834550448a4f46c37425b873ec95db3d757e8b2333a64d9abf416fd83f942661c47bcdf71f7d07ba2b2f051829a7f66952e57962614db0d03474a4a4bce636ea8d2b882b2b49ef18e76edbec7302a96e41f206d930eda2769c56e6d5e3d541ce9a21c3ce5cb5f", 0xfdef)

1.851233507s ago: executing program 6 (id=2562):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000401e04012810000000000109022400010000000009040000020300000009210000000122050009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r2}, 0x10)
syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="0000f0"], 0x0, 0x0, 0x0, 0x0}, 0x0)

905.555208ms ago: executing program 4 (id=2569):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/uts\x00')
r2 = socket$packet(0x11, 0x3, 0x300)
unshare(0x2c020400)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'veth0_to_batadv\x00', <r3=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x403, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r3, 0x88adfda5, 0x4000}, [@IFLA_NET_NS_FD={0x8, 0x1c, r1}]}, 0x28}, 0x1, 0x0, 0x0, 0x50}, 0x24008000)

895.396999ms ago: executing program 4 (id=2570):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000009000000000000000020000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
getpgrp(0x0)
fcntl$lock(0xffffffffffffffff, 0x24, 0x0)

884.828769ms ago: executing program 4 (id=2571):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0}, &(0x7f0000000200), &(0x7f0000000300)=r2}, 0x20)
fsetxattr$security_selinux(r2, &(0x7f00000000c0), &(0x7f0000000040)='system_u:object_r:dhcp_state_t:s0\x00', 0x1e, 0x0)

874.185779ms ago: executing program 4 (id=2572):
r0 = gettid()
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r2 = dup(r1)
sendmsg$netlink(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000580)=ANY=[], 0x1f88}], 0x1}, 0x0)
read$eventfd(r2, &(0x7f0000000680), 0x8)
tkill(r0, 0x7)

160.12289ms ago: executing program 9 (id=2597):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10)
syz_emit_ethernet(0x86, &(0x7f00000000c0)={@multicast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "09f0c6564b6ac6413304000000d9f8f22f81ae81c2bd7edd9aeaf6fd91c25227", "60326eacce5de87bf00be86b3ebbb957", {"fcc68dd1b5242bdc6466eba8cab8d7b2", "05fef0e9b077b6c6639938f9db7c621b"}}}}}}}, 0x0)

133.24345ms ago: executing program 9 (id=2598):
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0xc9d7, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r1, <r2=>0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r3}, 0x10)
ptrace(0x10, r0)

105.93829ms ago: executing program 9 (id=2600):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0, 0x0)
mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000200)='./file0\x00', &(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x65000, 0x0)
move_mount(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', r0, &(0x7f0000000400)='./file0/file0\x00', 0x0)

80.49596ms ago: executing program 0 (id=2601):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x5, 0x2, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$tipc(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000280)="fb", 0x1}], 0x1}, 0x0)
recvmsg(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)=""/60, 0x3c}], 0x1}, 0x0)

78.78287ms ago: executing program 9 (id=2602):
r0 = socket$packet(0x11, 0x3, 0x300)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'veth1_vlan\x00', <r2=>0x0})
sendto$packet(r0, &(0x7f0000000000)="22030e00d3fc02000000ab5d71acedd7c9560385dcb18906", 0x18, 0x0, &(0x7f0000000140)={0x11, 0x0, r2, 0x1, 0x5, 0x6, @link_local}, 0x14)

67.2313ms ago: executing program 9 (id=2603):
r0 = socket$key(0xf, 0x3, 0x2)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000001600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000040002850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r2}, 0x10)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0)
sendmsg$key(r0, &(0x7f0000000140)={0x9, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}}, 0x0)

60.90334ms ago: executing program 0 (id=2604):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
r2 = fsopen(&(0x7f0000000000)='hugetlbfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)

54.85428ms ago: executing program 9 (id=2605):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000002880)={0x2, 0x0, @ioapic={0x0, 0x2, 0x0, 0xeffffdff, 0x0, [{}, {0x19, 0x5, 0xa9}, {0xf, 0x84}, {0x1, 0x0, 0x9, '\x00', 0x2}, {0x8, 0x0, 0x0, '\x00', 0xf}, {0xfd}, {0x0, 0x81, 0x0, '\x00', 0x1}, {0x0, 0x4, 0x0, '\x00', 0x8}, {0xff, 0x0, 0xfc}, {0x0, 0x6}, {0x0, 0x5}, {0x0, 0x4c, 0x0, '\x00', 0xff}, {}, {}, {0x0, 0x2, 0xff}, {0x20}, {0x1, 0x80, 0xfc}, {}, {0x0, 0x6, 0x8}, {0x6, 0x0, 0x0, '\x00', 0x40}, {}, {0x0, 0x0, 0x4, '\x00', 0xfe}, {0x3, 0x0, 0xc7}, {0x0, 0x3, 0xff}]}})

38.30155ms ago: executing program 0 (id=2606):
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x9, 0x8, 0x40, 0x42, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000000000), 0x86, r0}, 0x38)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001600)={r0, &(0x7f0000000580), &(0x7f0000000540)=""/96}, 0x20)

37.96855ms ago: executing program 0 (id=2607):
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000000), 0xfea7)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TCSETSW(r1, 0x4b49, &(0x7f00000000c0)={0x6, 0x401, 0xc, 0xffffffff, 0xff, "fd14f0ecffffff00"})

31.37334ms ago: executing program 4 (id=2608):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000540))
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000480)={0x8, 0x0, &(0x7f0000000580)=[@acquire={0x400c6313}], 0x0, 0x0, 0x0})

14.72272ms ago: executing program 0 (id=2609):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000dc0)={&(0x7f0000000300)='neigh_update\x00', r0}, 0x10)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000040)={{0x2, 0x0, @multicast2}, {0x0, @link_local}, 0x0, {0x2, 0x0, @multicast1}, 'team_slave_0\x00'})

3.57123ms ago: executing program 0 (id=2610):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000031c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10)
socketpair$tipc(0x1e, 0x5, 0x0, 0x0)
recvmsg(0xffffffffffffffff, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
getrandom(0x0, 0x0, 0x0)

0s ago: executing program 4 (id=2611):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000400)={r0, &(0x7f0000000180), 0x20000000}, 0x20)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
fcntl$setlease(r1, 0x400, 0x0)

kernel console output (not intermixed with test programs):

-1: 0:2 : does not exist
[   76.113599][   T54] usb 2-1: USB disconnect, device number 8
[   76.258817][  T487] usb 7-1: USB disconnect, device number 6
[   76.336317][ T1687] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[   76.367402][ T3348] netlink: 96 bytes leftover after parsing attributes in process `syz.8.1269'.
[   76.688520][ T3370] EXT4-fs error (device loop1): ext4_orphan_get:1395: inode #15: comm syz.1.1278: casefold flag without casefold feature
[   76.701117][ T1687] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   76.701246][ T3370] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: inode #12: comm syz.1.1278: missing EA_INODE flag
[   76.712174][ T1687] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   76.733648][ T1687] usb 1-1: New USB device found, idVendor=04e7, idProduct=0030, bcdDevice= 0.00
[   76.740821][ T3370] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.1278: error while reading EA inode 12 err=-117
[   76.742776][ T1687] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   76.754865][ T3370] EXT4-fs (loop1): 1 orphan inode deleted
[   76.763437][ T1687] usb 1-1: config 0 descriptor??
[   76.771164][ T3370] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue
[   77.257125][ T1687] elo 0003:04E7:0030.001A: item fetching failed at offset 5/7
[   77.267508][ T1687] elo 0003:04E7:0030.001A: parse failed
[   77.272981][ T1687] elo: probe of 0003:04E7:0030.001A failed with error -22
[   77.473634][  T487] usb 1-1: USB disconnect, device number 9
[   77.566384][ T1687] usb 9-1: new high-speed USB device number 7 using dummy_hcd
[   77.726400][  T553] usb 8-1: new high-speed USB device number 8 using dummy_hcd
[   77.926321][   T25] usb 7-1: new high-speed USB device number 7 using dummy_hcd
[   77.929948][ T1687] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 253, changing to 11
[   77.944768][ T1687] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   77.954427][ T1687] usb 9-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00
[   77.963302][ T1687] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   77.971354][  T553] usb 8-1: Using ep0 maxpacket: 16
[   77.977079][ T1687] usb 9-1: config 0 descriptor??
[   78.096379][  T553] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   78.107170][  T553] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   78.236461][  T553] usb 8-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00
[   78.245354][  T553] usb 8-1: New USB device strings: Mfr=236, Product=255, SerialNumber=0
[   78.253503][  T553] usb 8-1: Product: syz
[   78.257524][  T553] usb 8-1: Manufacturer: syz
[   78.262941][  T553] usb 8-1: config 0 descriptor??
[   78.326359][   T25] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   78.337078][  T472] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[   78.344447][   T25] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   78.354048][   T25] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   78.366772][   T25] usb 7-1: New USB device found, idVendor=11c2, idProduct=2208, bcdDevice= 0.00
[   78.375590][   T25] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   78.383992][   T25] usb 7-1: config 0 descriptor??
[   78.457609][ T1687] hid-steam 0003:28DE:1102.001B: unknown main item tag 0x0
[   78.467231][ T1687] hid-steam 0003:28DE:1102.001B: unknown main item tag 0x0
[   78.474247][ T1687] hid-steam 0003:28DE:1102.001B: unknown main item tag 0x0
[   78.481423][ T1687] hid-steam 0003:28DE:1102.001B: unknown main item tag 0x0
[   78.488690][ T1687] hid-steam 0003:28DE:1102.001B: unknown main item tag 0x0
[   78.496297][ T1687] hid-steam 0003:28DE:1102.001B: hidraw0: USB HID v0.00 Device [HID 28de:1102] on usb-dummy_hcd.8-1/input0
[   78.658317][ T1687] usb 9-1: USB disconnect, device number 7
[   78.706744][  T472] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   78.717512][  T472] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   78.727747][  T472] usb 1-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00
[   78.736625][  T472] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   78.755244][  T472] usb 1-1: config 0 descriptor??
[   78.777279][  T553] kovaplus 0003:1E7D:2D50.001C: item fetching failed at offset 5/7
[   78.789136][  T553] kovaplus 0003:1E7D:2D50.001C: parse failed
[   78.794984][  T553] kovaplus: probe of 0003:1E7D:2D50.001C failed with error -22
[   78.857638][   T25] betop 0003:11C2:2208.001D: item fetching failed at offset 4/5
[   78.865239][   T25] betop 0003:11C2:2208.001D: parse failed
[   78.871074][   T25] betop: probe of 0003:11C2:2208.001D failed with error -22
[   78.996974][ T1687] usb 8-1: USB disconnect, device number 8
[   79.058867][   T25] usb 7-1: USB disconnect, device number 7
[   79.070015][ T3471] EXT4-fs error (device loop1) in ext4_do_update_inode:5303: error 27
[   79.078342][ T3471] EXT4-fs error (device loop1): ext4_dirty_inode:6110: inode #16: comm syz.1.1322: mark_inode_dirty error
[   79.089744][ T3471] EXT4-fs error (device loop1) in ext4_do_update_inode:5303: error 27
[   79.098164][ T3471] EXT4-fs error (device loop1): __ext4_ext_dirty:182: inode #16: comm syz.1.1322: mark_inode_dirty error
[   79.109421][ T3471] EXT4-fs error (device loop1) in ext4_do_update_inode:5303: error 27
[   79.117606][ T3471] EXT4-fs error (device loop1) in ext4_orphan_del:3292: error 27
[   79.125244][ T3471] EXT4-fs error (device loop1) in ext4_do_update_inode:5303: error 27
[   79.133481][ T3471] EXT4-fs error (device loop1): ext4_truncate:4389: inode #16: comm syz.1.1322: mark_inode_dirty error
[   79.144561][ T3471] EXT4-fs error (device loop1) in ext4_orphan_cleanup:3108: error 27
[   79.153031][ T3471] EXT4-fs (loop1): 1 truncate cleaned up
[   79.158524][ T3471] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue
[   79.167668][ T3471] ext4 filesystem being mounted at /30/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   79.237747][  T472] lenovo 0003:17EF:6047.001E: unknown main item tag 0x0
[   79.244687][  T472] lenovo 0003:17EF:6047.001E: unknown main item tag 0x0
[   79.251543][  T472] lenovo 0003:17EF:6047.001E: unknown main item tag 0x0
[   79.258241][  T472] lenovo 0003:17EF:6047.001E: unknown main item tag 0x0
[   79.264974][  T472] lenovo 0003:17EF:6047.001E: unknown main item tag 0x0
[   79.272710][  T472] lenovo 0003:17EF:6047.001E: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.0-1/input0
[   79.393395][ T3486] bridge0: port 1(bridge_slave_0) entered blocking state
[   79.400490][ T3486] bridge0: port 1(bridge_slave_0) entered disabled state
[   79.407955][ T3486] device bridge_slave_0 entered promiscuous mode
[   79.414851][ T3486] bridge0: port 2(bridge_slave_1) entered blocking state
[   79.421968][ T3486] bridge0: port 2(bridge_slave_1) entered disabled state
[   79.429223][ T3486] device bridge_slave_1 entered promiscuous mode
[   79.493144][ T3486] bridge0: port 2(bridge_slave_1) entered blocking state
[   79.500012][ T3486] bridge0: port 2(bridge_slave_1) entered forwarding state
[   79.507137][ T3486] bridge0: port 1(bridge_slave_0) entered blocking state
[   79.513883][ T3486] bridge0: port 1(bridge_slave_0) entered forwarding state
[   79.557275][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   79.564967][    T9] bridge0: port 1(bridge_slave_0) entered disabled state
[   79.569067][   T24] kauditd_printk_skb: 161 callbacks suppressed
[   79.569078][   T24] audit: type=1400 audit(1733476600.709:20077): avc:  denied  { mount } for  pid=3500 comm="syz.7.1335" name="/" dev="ramfs" ino=30293 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1
[   79.600506][    T9] bridge0: port 2(bridge_slave_1) entered disabled state
[   79.639681][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   79.651516][   T24] audit: type=1400 audit(1733476600.759:20078): avc:  denied  { write } for  pid=3503 comm="syz.6.1337" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1
[   79.671060][    T9] bridge0: port 1(bridge_slave_0) entered blocking state
[   79.677921][    T9] bridge0: port 1(bridge_slave_0) entered forwarding state
[   79.686667][  T472] lenovo 0003:17EF:6047.001E: Failed to switch middle button: -71
[   79.692734][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   79.706159][    T9] bridge0: port 2(bridge_slave_1) entered blocking state
[   79.713024][    T9] bridge0: port 2(bridge_slave_1) entered forwarding state
[   79.720082][  T472] lenovo 0003:17EF:6047.001E: Fn-lock setting failed: -71
[   79.725552][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   79.734859][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   79.753280][ T3501] SELinux:  Context system_u:object_r:updpwd_exec_t:s0 is not valid (left unmapped).
[   79.756386][  T472] lenovo 0003:17EF:6047.001E: Sensitivity setting failed: -71
[   79.762685][   T24] audit: type=1400 audit(1733476600.889:20079): avc:  denied  { mac_admin } for  pid=3500 comm="syz.7.1335" capability=33  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[   79.775600][  T472] usb 1-1: USB disconnect, device number 10
[   79.808802][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   79.826630][   T24] audit: type=1400 audit(1733476600.949:20080): avc:  denied  { relabelto } for  pid=3500 comm="syz.7.1335" name="/" dev="ramfs" ino=30293 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:updpwd_exec_t:s0"
[   79.857582][ T3486] device veth0_vlan entered promiscuous mode
[   79.869672][  T307] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   79.874419][ T3514] syz.8.1341[3514] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   79.877917][ T3514] syz.8.1341[3514] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   79.894651][  T307] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   79.905804][   T24] audit: type=1400 audit(1733476600.949:20081): avc:  denied  { associate } for  pid=3500 comm="syz.7.1335" name="/" dev="ramfs" ino=30293 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:updpwd_exec_t:s0"
[   79.905819][   T24] audit: type=1400 audit(1733476600.959:20082): avc:  denied  { unmount } for  pid=2034 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1
[   79.961594][  T307] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   79.982378][ T3486] device veth1_macvtap entered promiscuous mode
[   79.988774][ T3516] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended
[   80.002075][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   80.018112][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   80.028394][ T3516] [EXT4 FS bs=4096, gc=1, bpg=3008, ipg=32, mo=8003e119, mo2=0000]
[   80.038081][ T3516] EXT4-fs (loop6): 1 truncate cleaned up
[   80.043578][ T3516] EXT4-fs (loop6): mounted filesystem without journal. Opts: journal_dev=0x0000000000000009,noblock_validity,nombcache,norecovery,barrier=0x000000000000000c,resgid=0x000000000000ee01,nodiscard,noauto_da_alloc,resgid=0x00000000000000002,errors=continue
[   80.051602][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   80.070210][    T7] Quota error (device loop6): free_dqentry: Quota structure has offset to other block (1) than it should (5)
[   80.104212][   T24] audit: type=1400 audit(1733476601.239:20083): avc:  denied  { mounton } for  pid=3486 comm="syz-executor" path="/root/syzkaller.fZDC9T/syz-tmp" dev="sda1" ino=1966 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1
[   80.107941][    T7] EXT4-fs error (device loop6): ext4_release_dquot:6242: comm kworker/u4:0: Failed to release dquot type 1
[   80.154099][   T24] audit: type=1400 audit(1733476601.239:20084): avc:  denied  { mount } for  pid=3486 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[   80.189272][ T3516] EXT4-fs (loop6): re-mounted. Opts: (null)
[   80.206298][   T24] audit: type=1400 audit(1733476601.239:20085): avc:  denied  { mount } for  pid=3486 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[   80.229321][ T3516] EXT4-fs (loop6): warning: mounting fs with errors, running e2fsck is recommended
[   80.239138][ T3516] [EXT4 FS bs=4096, gc=1, bpg=3008, ipg=32, mo=8003e119, mo2=0000]
[   80.249017][ T2042] device bridge_slave_1 left promiscuous mode
[   80.255132][ T2042] bridge0: port 2(bridge_slave_1) entered disabled state
[   80.262623][ T2042] device bridge_slave_0 left promiscuous mode
[   80.269191][ T2042] bridge0: port 1(bridge_slave_0) entered disabled state
[   80.276767][ T3516] EXT4-fs (loop6): re-mounted. Opts: (null)
[   80.282580][ T2042] device veth1_macvtap left promiscuous mode
[   80.294120][ T2042] device veth0_vlan left promiscuous mode
[   80.361095][    T7] Bluetooth: hci0: Frame reassembly failed (-84)
[   80.408470][ T3535] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1348'.
[   80.418559][ T3535] IPv6: Can't replace route, no match found
[   80.539134][ T3554] Bluetooth: received HCILL_WAKE_UP_ACK in state 2
[   81.036349][  T503] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[   81.276435][  T503] usb 1-1: Using ep0 maxpacket: 32
[   81.377574][ T3599] netlink: 104 bytes leftover after parsing attributes in process `syz.5.1375'.
[   81.396464][  T503] usb 1-1: config 0 has no interfaces?
[   81.412923][ T3603] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1377'.
[   81.556341][  T503] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[   81.565241][  T503] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[   81.573232][  T503] usb 1-1: Product: syz
[   81.577352][  T503] usb 1-1: Manufacturer: syz
[   81.581952][  T503] usb 1-1: SerialNumber: syz
[   81.587248][  T503] usb 1-1: config 0 descriptor??
[   81.696336][  T472] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[   81.777394][ T3626] 9pnet: p9_errstr2errno: server reported unknown error ��Fc�g�KIe��B
[   81.814296][ T3628] SELinux: security_context_str_to_sid(unconfined_u) failed for (dev tmpfs, type tmpfs) errno=-22
[   81.880766][ T3630] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[   81.892093][ T3630] EXT4-fs (loop7): 1 truncate cleaned up
[   81.897783][ T3630] EXT4-fs (loop7): mounted filesystem without journal. Opts: nogrpid,min_batch_time=0x0000000000000000,debug_want_extra_isize=0x0000000000000068,nobarrier,nodiscard,quota,,errors=continue
[   81.916817][  T503] usb 1-1: USB disconnect, device number 11
[   81.936297][  T472] usb 6-1: Using ep0 maxpacket: 16
[   82.017292][ T3636] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[   82.027659][ T3636] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c019, mo2=0002]
[   82.035435][ T3636] System zones: 1-12
[   82.039866][ T3636] EXT4-fs (loop7): 1 truncate cleaned up
[   82.045312][ T3636] EXT4-fs (loop7): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,resuid=0x000000000000ee01,debug,lazytime,nombcache,jqfmt=vfsv1,,errors=continue
[   82.062591][  T472] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   82.073280][  T472] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   82.083196][  T472] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[   82.096047][  T472] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[   82.105104][  T472] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   82.113583][  T472] usb 6-1: config 0 descriptor??
[   82.263459][ T3646] netlink: 'syz.7.1394': attribute type 4 has an invalid length.
[   82.366345][  T487] Bluetooth: hci0: command 0x1003 tx timeout
[   82.372248][ T3555] Bluetooth: hci0: sending frame failed (-49)
[   82.597039][  T472] microsoft 0003:045E:07DA.001F: unknown main item tag 0x0
[   82.604113][  T472] microsoft 0003:045E:07DA.001F: unbalanced delimiter at end of report description
[   82.613422][  T472] microsoft 0003:045E:07DA.001F: parse failed
[   82.619383][  T472] microsoft: probe of 0003:045E:07DA.001F failed with error -22
[   82.776317][  T487] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[   82.799447][  T472] usb 6-1: USB disconnect, device number 7
[   83.016319][  T487] usb 1-1: Using ep0 maxpacket: 16
[   83.136354][  T487] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   83.147097][  T487] usb 1-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00
[   83.155873][  T487] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   83.164595][  T487] usb 1-1: config 0 descriptor??
[   83.278615][ T3675] exFAT-fs (loop7): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d)
[   83.647448][  T487] hid-steam 0003:28DE:1102.0020: unknown main item tag 0x0
[   83.654539][  T487] hid-steam 0003:28DE:1102.0020: unknown main item tag 0x0
[   83.661817][  T487] hid-steam 0003:28DE:1102.0020: : USB HID v0.00 Device [HID 28de:1102] on usb-dummy_hcd.0-1/input0
[   83.672439][   T25] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[   83.680625][  T487] hid-steam 0003:28DE:1102.0021: unknown main item tag 0x0
[   83.687723][  T487] hid-steam 0003:28DE:1102.0021: unknown main item tag 0x0
[   83.695274][  T487] hid-steam 0003:28DE:1102.0021: hidraw0: USB HID v0.00 Device [HID 28de:1102] on usb-dummy_hcd.0-1/input0
[   83.776312][  T487] hid-steam 0003:28DE:1102.0020: Steam Controller 'XXXXXXXXXX' connected
[   83.785072][  T487] input: Steam Controller as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:28DE:1102.0020/input/input18
[   83.848255][ T2379] usb 1-1: USB disconnect, device number 12
[   83.859089][ T2379] hid-steam 0003:28DE:1102.0020: Steam Controller 'XXXXXXXXXX' disconnected
[   83.926299][   T25] usb 6-1: Using ep0 maxpacket: 16
[   84.046341][   T25] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   84.057095][   T25] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   84.066576][   T25] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[   84.079187][   T25] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[   84.088170][   T25] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   84.096586][   T25] usb 6-1: config 0 descriptor??
[   84.197955][ T3699] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1416'.
[   84.446435][ T1687] Bluetooth: hci0: command 0x1001 tx timeout
[   84.452281][ T3555] Bluetooth: hci0: sending frame failed (-49)
[   84.469160][ T3712] raw_sendmsg: syz.0.1422 forgot to set AF_INET. Fix it!
[   84.550208][ T3725] xt_hashlimit: size too large, truncated to 1048576
[   84.577114][   T25] microsoft 0003:045E:07DA.0022: unknown main item tag 0x0
[   84.586023][   T25] microsoft 0003:045E:07DA.0022: unknown main item tag 0x0
[   84.593239][   T25] microsoft 0003:045E:07DA.0022: unknown main item tag 0x0
[   84.600723][   T25] microsoft 0003:045E:07DA.0022: unknown main item tag 0x0
[   84.607910][   T25] microsoft 0003:045E:07DA.0022: unknown main item tag 0x0
[   84.615088][   T25] microsoft 0003:045E:07DA.0022: unknown main item tag 0x0
[   84.622130][   T24] kauditd_printk_skb: 135 callbacks suppressed
[   84.622141][   T24] audit: type=1400 audit(1733476605.059:20221): avc:  denied  { connect } for  pid=3724 comm="syz.0.1428" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   84.649072][   T25] microsoft 0003:045E:07DA.0022: unknown main item tag 0x0
[   84.656098][   T25] microsoft 0003:045E:07DA.0022: unknown main item tag 0x0
[   84.663696][   T25] microsoft 0003:045E:07DA.0022: unknown main item tag 0x0
[   84.666282][ T2379] usb 8-1: new high-speed USB device number 9 using dummy_hcd
[   84.670872][   T25] microsoft 0003:045E:07DA.0022: unknown main item tag 0x0
[   84.685193][   T25] microsoft 0003:045E:07DA.0022: unknown main item tag 0x0
[   84.692322][   T25] microsoft 0003:045E:07DA.0022: unknown main item tag 0x0
[   84.699542][   T25] microsoft 0003:045E:07DA.0022: unknown main item tag 0x0
[   84.706671][   T25] microsoft 0003:045E:07DA.0022: unknown main item tag 0x0
[   84.713779][   T25] microsoft 0003:045E:07DA.0022: unknown main item tag 0x0
[   84.720909][   T25] microsoft 0003:045E:07DA.0022: unknown main item tag 0x0
[   84.728170][   T25] microsoft 0003:045E:07DA.0022: unknown main item tag 0x0
[   84.735217][   T25] microsoft 0003:045E:07DA.0022: unknown main item tag 0x0
[   84.742553][   T25] microsoft 0003:045E:07DA.0022: unknown main item tag 0x0
[   84.749789][   T25] microsoft 0003:045E:07DA.0022: unknown main item tag 0x0
[   84.757098][   T25] microsoft 0003:045E:07DA.0022: unknown main item tag 0x0
[   84.764351][   T25] microsoft 0003:045E:07DA.0022: unknown main item tag 0x0
[   84.771484][   T25] microsoft 0003:045E:07DA.0022: unknown main item tag 0x0
[   84.778572][   T25] microsoft 0003:045E:07DA.0022: unknown main item tag 0x0
[   84.786035][   T25] microsoft 0003:045E:07DA.0022: unknown main item tag 0x0
[   84.793289][   T25] microsoft 0003:045E:07DA.0022: unknown main item tag 0x0
[   84.800344][   T25] microsoft 0003:045E:07DA.0022: unknown main item tag 0x0
[   84.807471][   T25] microsoft 0003:045E:07DA.0022: No inputs registered, leaving
[   84.815390][   T25] microsoft 0003:045E:07DA.0022: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0
[   84.826630][   T25] microsoft 0003:045E:07DA.0022: no inputs found
[   84.832729][   T25] microsoft 0003:045E:07DA.0022: could not initialize ff, continuing anyway
[   84.842679][   T25] usb 6-1: USB disconnect, device number 8
[   85.046306][   T54] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[   85.066355][ T2379] usb 8-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30
[   85.077037][ T2379] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   85.088222][ T2379] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   85.097782][ T2379] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255
[   85.110523][ T2379] usb 8-1: New USB device found, idVendor=044f, idProduct=b653, bcdDevice= 0.00
[   85.119374][ T2379] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   85.128003][ T2379] usb 8-1: config 0 descriptor??
[   85.286352][   T54] usb 1-1: Using ep0 maxpacket: 16
[   85.318423][   T24] audit: type=1326 audit(1733476605.769:20222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3734 comm="syz.5.1432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6d2440f19 code=0x7ffc0000
[   85.342204][   T24] audit: type=1326 audit(1733476605.769:20223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3734 comm="syz.5.1432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6d2440f19 code=0x7ffc0000
[   85.366023][   T24] audit: type=1326 audit(1733476605.769:20224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3734 comm="syz.5.1432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa6d2440f19 code=0x7ffc0000
[   85.390492][   T24] audit: type=1326 audit(1733476605.789:20225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3734 comm="syz.5.1432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6d2440f19 code=0x7ffc0000
[   85.416335][   T24] audit: type=1326 audit(1733476605.799:20226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3734 comm="syz.5.1432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6d2440f19 code=0x7ffc0000
[   85.439964][   T54] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   85.449907][   T24] audit: type=1326 audit(1733476605.809:20227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3734 comm="syz.5.1432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa6d2440f19 code=0x7ffc0000
[   85.473174][   T54] usb 1-1: config 0 has no interfaces?
[   85.478562][   T54] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[   85.487622][   T54] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   85.495841][   T24] audit: type=1326 audit(1733476605.809:20228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3734 comm="syz.5.1432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6d2440f19 code=0x7ffc0000
[   85.519356][   T54] usb 1-1: config 0 descriptor??
[   85.524164][   T24] audit: type=1326 audit(1733476605.809:20229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3734 comm="syz.5.1432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6d2440f19 code=0x7ffc0000
[   85.547813][   T24] audit: type=1326 audit(1733476605.819:20230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3734 comm="syz.5.1432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=326 compat=0 ip=0x7fa6d2440f19 code=0x7ffc0000
[   85.647715][ T2379] thrustmaster 0003:044F:B653.0023: unbalanced delimiter at end of report description
[   85.657356][ T2379] thrustmaster 0003:044F:B653.0023: parse failed
[   85.663703][ T2379] thrustmaster: probe of 0003:044F:B653.0023 failed with error -22
[   85.779044][  T503] usb 1-1: USB disconnect, device number 13
[   85.852700][ T2379] usb 8-1: USB disconnect, device number 9
[   85.946310][  T907] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[   86.316371][  T907] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   86.327297][  T907] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   86.337096][  T907] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   86.349756][  T907] usb 6-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.10
[   86.358546][  T907] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   86.367735][  T907] usb 6-1: config 0 descriptor??
[   86.378470][ T3760] input: syz0 as /devices/virtual/input/input19
[   86.490842][ T3771] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[   86.526349][   T54] Bluetooth: hci0: command 0x1009 tx timeout
[   86.666284][ T2379] usb 8-1: new high-speed USB device number 10 using dummy_hcd
[   86.837225][  T907] prodikeys 0003:041E:2801.0024: unknown main item tag 0x0
[   86.845518][  T907] prodikeys 0003:041E:2801.0024: unknown main item tag 0x0
[   86.852644][  T907] prodikeys 0003:041E:2801.0024: unknown main item tag 0x5
[   86.862431][  T907] prodikeys 0003:041E:2801.0024: item fetching failed at offset 3/5
[   86.873288][  T907] prodikeys 0003:041E:2801.0024: hid parse failed
[   86.879808][  T907] prodikeys: probe of 0003:041E:2801.0024 failed with error -22
[   86.906279][ T2379] usb 8-1: Using ep0 maxpacket: 16
[   87.026346][ T2379] usb 8-1: config 0 has an invalid interface number: 1 but max is 0
[   87.034580][ T2379] usb 8-1: config 0 has no interface number 0
[   87.040795][  T503] usb 6-1: USB disconnect, device number 9
[   87.046107][ T2379] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   87.057330][ T2379] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   87.067020][ T2379] usb 8-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00
[   87.075904][ T2379] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   87.087530][ T2379] usb 8-1: config 0 descriptor??
[   87.502425][ T3787] binder: 3786:3787 ioctl 40046205 0 returned -22
[   87.623941][ T3795] input: syz0 as /devices/virtual/input/input20
[   87.747787][ T3802] EXT4-fs (loop5): mounted filesystem without journal. Opts: nobarrier,grpquota,,errors=continue
[   87.758231][ T3802] ext4 filesystem being mounted at /33/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   87.769824][ T2379] input: HID 28bd:0071 Pen as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.1/0003:28BD:0071.0025/input/input21
[   87.783530][ T2379] input: HID 28bd:0071 Pad as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.1/0003:28BD:0071.0025/input/input22
[   87.801704][ T2379] uclogic 0003:28BD:0071.0025: input,hidraw0: USB HID v0.02 Keypad [HID 28bd:0071] on usb-dummy_hcd.7-1/input1
[   87.887511][ T3807] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue
[   87.970960][  T907] usb 8-1: USB disconnect, device number 10
[   87.979286][ T3820] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1468'.
[   88.211676][ T3835] input: syz1 as /devices/virtual/input/input23
[   88.217765][ T3835] input: failed to attach handler leds to device input23, error: -6
[   88.257038][ T3839] netlink: 'syz.5.1476': attribute type 6 has an invalid length.
[   88.286828][ T3843] netlink: 'syz.5.1478': attribute type 4 has an invalid length.
[   88.297937][ T3843] netlink: 'syz.5.1478': attribute type 4 has an invalid length.
[   88.357951][ T3851] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1482'.
[   88.367258][ T3851] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[   88.843875][ T3926] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue
[   88.920544][ T3948] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[   88.958706][ T3952] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1529'.
[   88.967882][ T3952] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[   89.016405][ T3963] overlayfs: failed to clone lowerpath
[   89.049012][ T3969] syz.7.1536[3969] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   89.049047][ T3969] syz.7.1536[3969] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   89.961547][   T24] kauditd_printk_skb: 173 callbacks suppressed
[   89.961557][   T24] audit: type=1400 audit(1733476610.409:20404): avc:  denied  { create } for  pid=3985 comm="syz.7.1543" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[   89.998004][   T24] audit: type=1400 audit(1733476610.409:20405): avc:  denied  { module_request } for  pid=3985 comm="syz.7.1543" kmod="net-pf-21" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[   90.019690][   T24] audit: type=1400 audit(1733476610.419:20406): avc:  denied  { read } for  pid=76 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1
[   90.041647][   T24] audit: type=1400 audit(1733476610.419:20407): avc:  denied  { search } for  pid=76 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   90.063501][   T24] audit: type=1400 audit(1733476610.419:20408): avc:  denied  { open } for  pid=76 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   90.087991][   T24] audit: type=1400 audit(1733476610.419:20409): avc:  denied  { getattr } for  pid=76 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   90.111782][   T24] audit: type=1400 audit(1733476610.429:20410): avc:  denied  { name_bind } for  pid=3987 comm="syz.7.1544" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1
[   90.218202][   T24] audit: type=1400 audit(1733476610.669:20411): avc:  denied  { read } for  pid=3998 comm="syz.7.1547" dev="nsfs" ino=4026532362 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[   90.246285][   T24] audit: type=1400 audit(1733476610.669:20412): avc:  denied  { open } for  pid=3998 comm="syz.7.1547" path="net:[4026532362]" dev="nsfs" ino=4026532362 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[   90.276336][   T24] audit: type=1400 audit(1733476610.669:20413): avc:  denied  { create } for  pid=3998 comm="syz.7.1547" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[   90.696312][  T907] usb 8-1: new high-speed USB device number 11 using dummy_hcd
[   90.876891][ T4028] xt_bpf: check failed: parse error
[   91.056414][  T907] usb 8-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 255, changing to 11
[   91.058132][ T4053] device bridge0 entered promiscuous mode
[   91.073469][  T907] usb 8-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 59391, setting to 1024
[   91.089789][ T4053] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1571'.
[   91.094687][  T907] usb 8-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00
[   91.108432][ T4053] device bridge_slave_1 left promiscuous mode
[   91.118571][ T4053] bridge0: port 2(bridge_slave_1) entered disabled state
[   91.121499][  T907] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   91.133851][ T4053] device bridge_slave_0 left promiscuous mode
[   91.147384][ T4053] bridge0: port 1(bridge_slave_0) entered disabled state
[   91.156411][ T4011] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[   91.416392][  T907] aiptek 8-1:17.0: Aiptek using 400 ms programming speed
[   91.433100][  T907] input: Aiptek as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:17.0/input/input24
[   91.451800][  T907] usb 8-1: USB disconnect, device number 11
[   91.457597][    C1] aiptek 8-1:17.0: aiptek_irq - usb_submit_urb failed with result -19
[   91.551745][ T4109] netlink: 'syz.6.1597': attribute type 6 has an invalid length.
[   91.981419][ T4142] xt_bpf: check failed: parse error
[   92.006312][ T2379] usb 7-1: new high-speed USB device number 8 using dummy_hcd
[   92.112195][ T4155] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue
[   92.121105][ T4155] ext4 filesystem being mounted at /201/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   92.134539][ T4155] syz.7.1616 (pid 4155) is setting deprecated v1 encryption policy; recommend upgrading to v2.
[   92.266291][ T2379] usb 7-1: Using ep0 maxpacket: 16
[   92.416337][ T2379] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   92.427054][ T2379] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[   92.439865][ T2379] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[   92.448896][ T2379] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   92.467806][ T4182] EXT4-fs (loop7): mounted filesystem without journal. Opts: acl,,errors=continue
[   92.477205][ T2379] usb 7-1: config 0 descriptor??
[   92.477271][ T4182] ext4 filesystem being mounted at /209/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   92.614711][ T4167] F2FS-fs (loop8): invalid crc value
[   92.627112][ T4167] F2FS-fs (loop8): Found nat_bits in checkpoint
[   92.671755][ T4167] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5
[   92.702027][ T4198] bridge0: port 2(bridge_slave_1) entered disabled state
[   92.709013][ T4198] bridge0: port 1(bridge_slave_0) entered disabled state
[   92.752708][ T4198] netlink: 'syz.5.1630': attribute type 4 has an invalid length.
[   92.817825][ T4200] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpquota,nouid32,minixdf,,errors=continue
[   92.828789][ T4200] ext4 filesystem being mounted at /114/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   92.957629][ T2379] HID 045e:07da: Invalid code 65791 type 1
[   92.965051][ T2379] input: HID 045e:07da as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:045E:07DA.0026/input/input25
[   92.976295][   T54] usb 9-1: new high-speed USB device number 8 using dummy_hcd
[   92.987973][ T2379] microsoft 0003:045E:07DA.0026: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.6-1/input0
[   93.246470][   T54] usb 9-1: Using ep0 maxpacket: 32
[   93.996339][   T54] usb 9-1: device descriptor read/all, error -71
[   94.019132][ T4217] serio: Serial port ptm0
[   94.362041][  T907] usb 7-1: USB disconnect, device number 8
[   94.576310][ T2379] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[   94.597537][ T4248] tipc: Started in network mode
[   94.602227][ T4248] tipc: Own node identity fe800000000000000000000000000013, cluster identity 4711
[   94.611726][ T4248] tipc: Enabled bearer <udp:syz0>, priority 10
[   94.747981][ T4263] netlink: 104 bytes leftover after parsing attributes in process `syz.8.1657'.
[   94.826339][ T2379] usb 6-1: Using ep0 maxpacket: 16
[   94.837591][ T4273] mmap: syz.8.1662 (4273) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst.
[   94.894726][ T4280] syz.6.1665[4280] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   94.894793][ T4280] syz.6.1665[4280] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   94.946458][ T2379] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   94.947079][ T4290] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=4290 comm=syz.6.1670
[   94.968338][ T2379] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8
[   94.990242][ T2379] usb 6-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22
[   95.003275][ T2379] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   95.017784][ T2379] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   95.046329][ T4246] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[   95.065958][   T24] kauditd_printk_skb: 204 callbacks suppressed
[   95.065971][   T24] audit: type=1400 audit(2000000001.029:20618): avc:  denied  { read } for  pid=4293 comm="syz.8.1672" name="event0" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[   95.096097][ T2379] cdc_acm 6-1:1.0: Control and data interfaces are not separated!
[   95.104577][   T24] audit: type=1400 audit(2000000001.029:20619): avc:  denied  { open } for  pid=4293 comm="syz.8.1672" path="/dev/input/event0" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[   95.115528][ T2379] cdc_acm 6-1:1.0: ttyACM0: USB ACM device
[   95.138178][   T24] audit: type=1400 audit(2000000001.059:20620): avc:  denied  { read } for  pid=4294 comm="syz.7.1673" name="ppp" dev="devtmpfs" ino=149 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[   95.161837][   T24] audit: type=1400 audit(2000000001.059:20621): avc:  denied  { open } for  pid=4294 comm="syz.7.1673" path="/dev/ppp" dev="devtmpfs" ino=149 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[   95.185049][   T24] audit: type=1400 audit(2000000001.059:20622): avc:  denied  { ioctl } for  pid=4294 comm="syz.7.1673" path="/dev/ppp" dev="devtmpfs" ino=149 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[   95.210096][   T24] audit: type=1400 audit(2000000001.129:20623): avc:  denied  { mounton } for  pid=4300 comm="syz.6.1675" path="/110/file0" dev="tmpfs" ino=579 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[   95.257426][   T24] audit: type=1326 audit(2000000001.229:20624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4305 comm="syz.6.1677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f014ed49f19 code=0x7ffc0000
[   95.284074][   T24] audit: type=1326 audit(2000000001.229:20625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4305 comm="syz.6.1677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f014ed49f19 code=0x7ffc0000
[   95.308450][   T24] audit: type=1326 audit(2000000001.229:20626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4305 comm="syz.6.1677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=63 compat=0 ip=0x7f014ed49f19 code=0x7ffc0000
[   95.339323][ T4312] netem: change failed
[   95.343637][ T2379] usb 6-1: USB disconnect, device number 10
[   95.350625][   T24] audit: type=1326 audit(2000000001.229:20627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4305 comm="syz.6.1677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f014ed49f19 code=0x7ffc0000
[   95.504860][ T4330] device wireguard0 entered promiscuous mode
[   95.636313][   T54] tipc: 32-bit node address hash set to 130080fe
[   95.713981][ T4345] input: syz1 as /devices/virtual/input/input26
[   95.806315][   T54] usb 7-1: new high-speed USB device number 9 using dummy_hcd
[   95.880625][ T4355] EXT4-fs (loop8): Ignoring removed orlov option
[   95.897604][ T4355] EXT4-fs (loop8): mounted filesystem without journal. Opts: orlov,errors=remount-ro,
[   96.018175][ T2042] EXT4-fs error (device loop8): ext4_mb_generate_buddy:808: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[   96.032976][ T2042] EXT4-fs (loop8): Remounting filesystem read-only
[   96.056364][   T54] usb 7-1: Using ep0 maxpacket: 32
[   96.146428][  T907] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[   96.186337][   T54] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   96.197176][   T54] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   96.211300][   T54] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[   96.220197][   T54] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   96.231153][   T54] usb 7-1: config 0 descriptor??
[   96.386323][  T907] usb 6-1: Using ep0 maxpacket: 32
[   96.556292][   T25] usb 9-1: new high-speed USB device number 10 using dummy_hcd
[   96.666414][  T907] usb 6-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed
[   96.675252][  T907] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   96.689045][  T907] usb 6-1: Product: syz
[   96.693001][  T907] usb 6-1: Manufacturer: syz
[   96.697549][  T907] usb 6-1: SerialNumber: syz
[   96.708360][  T907] usb 6-1: config 0 descriptor??
[   96.708640][   T54] savu 0003:1E7D:2D5A.0027: hiddev96,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.6-1/input0
[   96.758129][  T503] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0
[   96.765387][  T503] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0
[   96.773213][  T503] hid-generic 0000:0000:0000.0028: hidraw1: <UNKNOWN> HID v0.00 Device [syz0] on syz1
[   96.806349][   T25] usb 9-1: Using ep0 maxpacket: 16
[   96.977159][   T54] usb 7-1: USB disconnect, device number 9
[   97.086372][   T25] usb 9-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=d3.06
[   97.095421][   T25] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=67
[   97.103436][   T25] usb 9-1: Product: syz
[   97.107386][   T25] usb 9-1: Manufacturer: syz
[   97.111784][   T25] usb 9-1: SerialNumber: syz
[   97.117174][   T25] usb 9-1: config 0 descriptor??
[   97.406349][  T907] (unnamed net_device) (uninitialized): Assigned a random MAC address: 52:21:2e:4e:24:63
[   97.417565][  T907] rtl8150 6-1:0.0: eth1: rtl8150 is detected
[   97.425120][  T907] usb 6-1: USB disconnect, device number 11
[   97.492910][ T4407] netlink: 'syz.6.1715': attribute type 4 has an invalid length.
[   97.556963][ T4423] netlink: 'syz.6.1717': attribute type 4 has an invalid length.
[   97.564565][ T4423] netlink: 3657 bytes leftover after parsing attributes in process `syz.6.1717'.
[   97.579044][   T25] usb 9-1: USB disconnect, device number 10
[   97.657855][ T4436] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1722'.
[   97.837338][ T4450] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1728'.
[   97.846280][ T4450] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1728'.
[   97.855025][ T4450] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1728'.
[   98.050246][ T4475] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[   98.162041][   T25] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65380 sclass=netlink_route_socket pid=25 comm=kworker/1:1
[   98.221688][ T4499] netlink: 32 bytes leftover after parsing attributes in process `syz.8.1745'.
[   98.234039][ T4499] netem: unknown loss type 13
[   98.239437][ T4499] netem: change failed
[   98.317763][ T4514] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[   98.504983][ T4528] exFAT-fs (loop6): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d)
[   98.696823][ T4523] F2FS-fs (loop8): Invalid segment/section count (31, 24 x 150994945)
[   98.704888][ T4523] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock
[   98.713483][ T4523] F2FS-fs (loop8): invalid crc value
[   98.720067][ T4523] F2FS-fs (loop8): Found nat_bits in checkpoint
[   98.742269][ T4523] F2FS-fs (loop8): Cannot turn on quotas: -2 on 2
[   98.749134][ T4523] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0
[   98.755975][ T4523] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e4
[   99.576818][ T4580] exfat: Deprecated parameter 'utf8'
[   99.582009][ T4580] exfat: Deprecated parameter 'utf8'
[   99.587137][ T4580] exfat: Deprecated parameter 'utf8'
[   99.592226][ T4580] exfat: Deprecated parameter 'utf8'
[   99.619161][ T4580] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xac5c0b1f, utbl_chksum : 0xe619d30d)
[   99.626317][  T907] usb 9-1: new high-speed USB device number 11 using dummy_hcd
[   99.636528][ T4580] xt_hashlimit: size too large, truncated to 1048576
[   99.826780][ T4584] exfat: Deprecated parameter 'namecase'
[   99.832314][ T4584] exfat: Deprecated parameter 'namecase'
[   99.868509][ T4584] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x1fdf94bc, utbl_chksum : 0xe619d30d)
[   99.921522][ T4587] syz.6.1776[4587] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   99.921559][ T4587] syz.6.1776[4587] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   99.996524][  T907] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  100.018357][  T907] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  100.027885][  T907] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  100.040569][  T907] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  100.049393][  T907] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  100.057786][  T907] usb 9-1: config 0 descriptor??
[  100.082049][ T4591] futex_wake_op: syz.0.1778 tries to shift op by -1; fix this program
[  100.113032][ T4595] overlayfs: missing 'lowerdir'
[  100.152482][ T4599] bridge0: port 1(bridge_slave_0) entered blocking state
[  100.159362][ T4599] bridge0: port 1(bridge_slave_0) entered forwarding state
[  100.177842][   T24] kauditd_printk_skb: 230 callbacks suppressed
[  100.177854][   T24] audit: type=1326 audit(2000000006.149:20858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4605 comm="syz.5.1785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6d2440f19 code=0x7ffc0000
[  100.227819][ T1187] kernel write not supported for file bpf-prog (pid: 1187 comm: kworker/0:6)
[  100.247399][   T24] audit: type=1326 audit(2000000006.179:20859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4605 comm="syz.5.1785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa6d2440f19 code=0x7ffc0000
[  100.280781][   T24] audit: type=1326 audit(2000000006.179:20860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4605 comm="syz.5.1785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6d2440f19 code=0x7ffc0000
[  100.307437][   T24] audit: type=1326 audit(2000000006.179:20861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4605 comm="syz.5.1785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa6d2440f19 code=0x7ffc0000
[  100.338760][ T4622] syz.6.1792[4622] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  100.338815][ T4622] syz.6.1792[4622] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  100.345188][   T24] audit: type=1326 audit(2000000006.179:20862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4605 comm="syz.5.1785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6d2440f19 code=0x7ffc0000
[  100.389508][   T24] audit: type=1326 audit(2000000006.179:20863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4605 comm="syz.5.1785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa6d2440f19 code=0x7ffc0000
[  100.413362][   T24] audit: type=1326 audit(2000000006.179:20864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4605 comm="syz.5.1785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6d2440f19 code=0x7ffc0000
[  100.436706][   T24] audit: type=1326 audit(2000000006.179:20865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4605 comm="syz.5.1785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7fa6d2440f19 code=0x7ffc0000
[  100.460237][   T25] usb 8-1: new high-speed USB device number 12 using dummy_hcd
[  100.467837][   T24] audit: type=1326 audit(2000000006.179:20866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4605 comm="syz.5.1785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6d2440f19 code=0x7ffc0000
[  100.491356][   T24] audit: type=1326 audit(2000000006.179:20867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4605 comm="syz.5.1785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa6d2440f19 code=0x7ffc0000
[  100.547179][  T907] plantronics 0003:047F:FFFF.0029: No inputs registered, leaving
[  100.555977][  T907] plantronics 0003:047F:FFFF.0029: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0
[  100.636309][  T503] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  100.796615][ T4651] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  100.803652][ T4651] IPv6: NLM_F_CREATE should be set when creating new route
[  100.846473][   T25] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  100.857256][   T25] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  100.872840][   T25] usb 8-1: New USB device found, idVendor=172f, idProduct=0501, bcdDevice= 0.00
[  100.886078][   T25] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  100.897270][   T25] usb 8-1: config 0 descriptor??
[  100.996487][  T503] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  101.009676][  T503] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  101.019523][  T503] usb 1-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00
[  101.034449][  T503] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  101.045415][  T503] usb 1-1: config 0 descriptor??
[  101.156861][ T4673] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12
[  101.164506][ T4673] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock
[  101.173674][ T4673] F2FS-fs (loop6): invalid crc value
[  101.180075][ T4673] F2FS-fs (loop6): Found nat_bits in checkpoint
[  101.213682][ T4673] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0
[  101.220749][ T4673] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[  101.377967][   T25] waltop 0003:172F:0501.002A: hidraw1: USB HID v0.00 Device [HID 172f:0501] on usb-dummy_hcd.7-1/input0
[  101.476344][  T907] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[  101.506306][  T487] usb 7-1: new high-speed USB device number 10 using dummy_hcd
[  101.527316][  T503] logitech-hidpp-device 0003:046D:C086.002B: unknown main item tag 0x0
[  101.535440][  T503] logitech-hidpp-device 0003:046D:C086.002B: unknown main item tag 0x0
[  101.543644][  T503] logitech-hidpp-device 0003:046D:C086.002B: unknown main item tag 0x0
[  101.552634][  T503] logitech-hidpp-device 0003:046D:C086.002B: hidraw2: USB HID v0.00 Device [HID 046d:c086] on usb-dummy_hcd.0-1/input0
[  101.580471][  T503] usb 8-1: USB disconnect, device number 12
[  101.716365][  T907] usb 6-1: Using ep0 maxpacket: 8
[  101.727617][   T54] usb 1-1: USB disconnect, device number 14
[  101.746290][  T487] usb 7-1: Using ep0 maxpacket: 8
[  101.836366][  T907] usb 6-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[  101.845265][  T907] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  101.853707][  T907] usb 6-1: config 0 descriptor??
[  101.866342][  T487] usb 7-1: config 135 has an invalid interface number: 230 but max is 0
[  101.874502][  T487] usb 7-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config
[  101.884742][  T487] usb 7-1: config 135 has no interface number 0
[  101.890862][  T487] usb 7-1: too many endpoints for config 135 interface 230 altsetting 126: 53, using maximum allowed: 30
[  101.902265][  T487] usb 7-1: config 135 interface 230 altsetting 126 has 0 endpoint descriptors, different from the interface descriptor's value: 53
[  101.915572][  T487] usb 7-1: config 135 interface 230 has no altsetting 0
[  102.076396][  T487] usb 7-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a
[  102.085285][  T487] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  102.093449][  T487] usb 7-1: Product: syz
[  102.097819][  T487] usb 7-1: Manufacturer: syz
[  102.102656][  T487] usb 7-1: SerialNumber: syz
[  102.147051][  T487] uvcvideo: Found UVC 0.00 device syz (18ec:3288)
[  102.153577][  T487] uvcvideo: No valid video chain found.
[  102.256819][ T4695] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=4695 comm=syz.0.1821
[  102.336346][  T907] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32
[  102.346181][  T907] asix 6-1:0.0 (unnamed net_device) (uninitialized): Error reading PHYID register: ffffffe0
[  102.356435][  T390] usb 7-1: USB disconnect, device number 10
[  102.456378][   T54] usb 8-1: new high-speed USB device number 13 using dummy_hcd
[  102.602041][ T4712] syz.0.1828[4712] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  102.602079][ T4712] syz.0.1828[4712] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  102.616516][   T25] usb 9-1: USB disconnect, device number 11
[  102.763650][ T4731] syz.0.1837[4731] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  102.763689][ T4731] syz.0.1837[4731] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  102.816347][   T54] usb 8-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 255, changing to 11
[  102.836372][  T907] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  102.838827][   T54] usb 8-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 59391, setting to 1024
[  102.848979][  T907] asix: probe of 6-1:0.0 failed with error -71
[  102.864819][   T54] usb 8-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00
[  102.870926][  T907] usb 6-1: USB disconnect, device number 12
[  102.874547][   T54] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  102.889087][ T4690] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  102.945571][ T4744] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  102.970481][ T4746] FAT-fs (loop6): Directory bread(block 64) failed
[  102.976850][ T4746] FAT-fs (loop6): Directory bread(block 65) failed
[  102.983163][ T4746] FAT-fs (loop6): Directory bread(block 66) failed
[  102.989618][ T4746] FAT-fs (loop6): Directory bread(block 67) failed
[  102.995948][ T4746] FAT-fs (loop6): Directory bread(block 68) failed
[  103.002320][ T4746] FAT-fs (loop6): Directory bread(block 69) failed
[  103.008958][ T4746] FAT-fs (loop6): Directory bread(block 70) failed
[  103.015260][ T4746] FAT-fs (loop6): Directory bread(block 71) failed
[  103.021684][ T4746] FAT-fs (loop6): Directory bread(block 72) failed
[  103.027981][ T4746] FAT-fs (loop6): Directory bread(block 73) failed
[  103.126438][   T54] aiptek 8-1:17.0: Aiptek using 400 ms programming speed
[  103.133969][   T54] input: Aiptek as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:17.0/input/input27
[  103.144801][   T54] usb 8-1: USB disconnect, device number 13
[  103.183702][ T4754] devtmpfs: Unknown parameter 'posixacl'
[  103.356401][ T2383] usb 7-1: new high-speed USB device number 11 using dummy_hcd
[  103.496306][  T907] usb 9-1: new high-speed USB device number 12 using dummy_hcd
[  103.666996][ T4763] F2FS-fs (loop5): Wrong CP boundary, start(512) end(198144) blocks(1024)
[  103.675323][ T4763] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock
[  103.684060][ T4763] F2FS-fs (loop5): invalid crc value
[  103.690646][ T4763] F2FS-fs (loop5): Found nat_bits in checkpoint
[  103.713060][ T4763] F2FS-fs (loop5): Try to recover 2th superblock, ret: 0
[  103.720071][ T4763] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4
[  103.720096][ T2383] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  103.743423][ T2383] usb 7-1: config 0 has no interfaces?
[  103.748959][ T2383] usb 7-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  103.752136][ T4763] F2FS-fs (loop5): sanity_check_inode: inode (ino=8) has casefold flag, but casefold feature is off
[  103.768667][  T907] usb 9-1: Using ep0 maxpacket: 16
[  103.773637][ T2383] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  103.789729][ T2383] usb 7-1: config 0 descriptor??
[  103.906364][  T907] usb 9-1: config 0 has an invalid interface number: 117 but max is 0
[  103.914464][  T907] usb 9-1: config 0 has no interface number 0
[  103.920988][  T907] usb 9-1: config 0 interface 117 has no altsetting 0
[  104.042072][ T2383] usb 7-1: USB disconnect, device number 11
[  104.087549][ T4798] SELinux:  Context system_u:object_r:mouse_device_t:s0 is not valid (left unmapped).
[  104.097772][  T907] usb 9-1: New USB device found, idVendor=6914, idProduct=4496, bcdDevice=38.97
[  104.112606][  T907] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  104.125206][  T907] usb 9-1: Product: syz
[  104.129601][  T907] usb 9-1: Manufacturer: syz
[  104.134088][  T907] usb 9-1: SerialNumber: syz
[  104.148806][  T907] usb 9-1: config 0 descriptor??
[  104.578583][  T907] usb 9-1: USB disconnect, device number 12
[  104.589797][ T1240] udevd[1240]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.117/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  104.646332][  T472] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[  104.716307][   T54] usb 8-1: new high-speed USB device number 14 using dummy_hcd
[  104.940850][ T4856] EXT4-fs (loop8): Test dummy encryption mode enabled
[  104.947570][ T4856] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode
[  104.958286][ T4856] EXT4-fs (loop8): 1 truncate cleaned up
[  104.963789][ T4856] EXT4-fs (loop8): mounted filesystem without journal. Opts: quota,resuid=0x000000000000ee01,barrier,debug_want_extra_isize=0x0000000000000080,block_validity,test_dummy_encryption=v1,,errors=continue
[  105.016421][  T472] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  105.027308][  T472] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  105.036889][  T472] usb 1-1: New USB device found, idVendor=10cf, idProduct=ea90, bcdDevice= 0.00
[  105.045707][  T472] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  105.054033][  T472] usb 1-1: config 0 descriptor??
[  105.096566][   T54] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  105.107576][   T54] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  105.117438][   T54] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  105.130219][   T54] usb 8-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00
[  105.135302][ T4863] syz.8.1893[4863] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  105.139240][   T54] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  105.139343][ T4863] syz.8.1893[4863] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  105.158592][   T54] usb 8-1: config 0 descriptor??
[  105.186968][ T4863] overlayfs: conflicting options: nfs_export=on,metacopy=on
[  105.446895][   T24] kauditd_printk_skb: 198 callbacks suppressed
[  105.446907][   T24] audit: type=1326 audit(2000000011.419:21066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4876 comm="syz.6.1899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f014ed49f19 code=0x7ffc0000
[  105.477685][   T24] audit: type=1326 audit(2000000011.419:21067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4876 comm="syz.6.1899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f014ed49f19 code=0x7ffc0000
[  105.501149][  T487] usb 9-1: new high-speed USB device number 13 using dummy_hcd
[  105.508764][   T24] audit: type=1326 audit(2000000011.419:21068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4876 comm="syz.6.1899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=227 compat=0 ip=0x7f014ed49f19 code=0x7ffc0000
[  105.532467][   T24] audit: type=1326 audit(2000000011.419:21069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4876 comm="syz.6.1899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f014ed49f19 code=0x7ffc0000
[  105.627701][   T54] acrux 0003:1A34:0802.002C: hidraw0: USB HID v0.00 Device [HID 1a34:0802] on usb-dummy_hcd.7-1/input0
[  105.639000][   T54] acrux 0003:1A34:0802.002C: no inputs found
[  105.645073][   T54] acrux 0003:1A34:0802.002C: Failed to enable force feedback support, error: -19
[  105.756347][  T472] usbhid 1-1:0.0: can't add hid device: -71
[  105.762153][  T472] usbhid: probe of 1-1:0.0 failed with error -71
[  105.768427][  T487] usb 9-1: Using ep0 maxpacket: 16
[  105.773970][  T472] usb 1-1: USB disconnect, device number 15
[  106.006383][   T25] usb 7-1: new high-speed USB device number 12 using dummy_hcd
[  106.046423][  T487] usb 9-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  106.055374][  T487] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  106.063129][  T487] usb 9-1: Product: syz
[  106.067084][  T487] usb 9-1: Manufacturer: syz
[  106.071473][  T487] usb 9-1: SerialNumber: syz
[  106.076463][  T487] usb 9-1: config 0 descriptor??
[  106.088741][   T24] audit: type=1400 audit(2000000268.067:21070): avc:  denied  { ioctl } for  pid=4906 comm="syz.0.1913" path="socket:[36047]" dev="sockfs" ino=36047 ioctlcmd=0x7459 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  106.143430][   T24] audit: type=1326 audit(2000000268.117:21071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4912 comm="syz.0.1916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff642466f19 code=0x7ffc0000
[  106.166867][   T24] audit: type=1326 audit(2000000268.117:21072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4912 comm="syz.0.1916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff642466f19 code=0x7ffc0000
[  106.190506][   T24] audit: type=1326 audit(2000000268.117:21073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4912 comm="syz.0.1916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7ff642466f19 code=0x7ffc0000
[  106.220873][   T24] audit: type=1326 audit(2000000268.117:21074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4912 comm="syz.0.1916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff642466f19 code=0x7ffc0000
[  106.244233][   T24] audit: type=1326 audit(2000000268.117:21075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4912 comm="syz.0.1916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff642466f19 code=0x7ffc0000
[  106.326410][  T487] r8152 9-1:0.0: Unknown version 0x0000
[  106.366349][   T54] Bluetooth: hci0: command 0x1003 tx timeout
[  106.372175][ T2057] Bluetooth: hci0: sending frame failed (-49)
[  106.386342][   T25] usb 7-1: config 0 has an invalid interface number: 204 but max is 0
[  106.394446][   T25] usb 7-1: config 0 has no interface number 0
[  106.534150][  T487] usb 9-1: USB disconnect, device number 13
[  106.556385][   T25] usb 7-1: New USB device found, idVendor=0745, idProduct=1000, bcdDevice=54.42
[  106.565265][   T25] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  106.573187][   T25] usb 7-1: Product: syz
[  106.577186][   T25] usb 7-1: Manufacturer: syz
[  106.581562][   T25] usb 7-1: SerialNumber: syz
[  106.586994][   T25] usb 7-1: config 0 descriptor??
[  106.686323][  T472] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[  106.828852][   T25] usb 7-1: USB disconnect, device number 12
[  106.836376][  T553] usb 8-1: reset high-speed USB device number 14 using dummy_hcd
[  107.046344][  T472] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11
[  107.057392][  T472] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024
[  107.068960][  T472] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  107.082116][  T472] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  107.091366][  T472] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  107.100369][  T472] usb 1-1: config 0 descriptor??
[  107.116391][ T4926] raw-gadget.3 gadget: fail, usb_ep_enable returned -22
[  107.199113][ T4936] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  107.296780][ T4944] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3
[  107.408427][ T4959] blk_update_request: I/O error, dev loop13, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  107.421552][ T4959] F2FS-fs (loop13): Unable to read 1th superblock
[  107.428969][ T4959] blk_update_request: I/O error, dev loop13, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  107.441119][ T4959] F2FS-fs (loop13): Unable to read 2th superblock
[  107.577628][  T472] plantronics 0003:047F:FFFF.002D: unknown main item tag 0x0
[  107.593899][  T472] plantronics 0003:047F:FFFF.002D: No inputs registered, leaving
[  107.605370][  T472] plantronics 0003:047F:FFFF.002D: hiddev96,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0
[  107.716366][  T487] usb 9-1: new high-speed USB device number 14 using dummy_hcd
[  107.737808][ T4997] EXT4-fs (loop6): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000000,minixdf,,errors=continue
[  107.751777][ T4997] ext4 filesystem being mounted at /195/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  107.756682][   T54] usb 8-1: USB disconnect, device number 14
[  107.778549][ T5006] overlayfs: failed to resolve './file0': -2
[  107.847078][   T25] usb 1-1: USB disconnect, device number 16
[  108.076378][  T487] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  108.087306][  T487] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  108.097075][  T487] usb 9-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00
[  108.106629][  T487] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  108.115416][  T487] usb 9-1: config 0 descriptor??
[  108.446295][   T54] Bluetooth: hci0: command 0x1001 tx timeout
[  108.452204][ T2057] Bluetooth: hci0: sending frame failed (-49)
[  108.627107][  T487] petalynx 0003:18B1:0037.002E: collection stack underflow
[  108.634274][  T487] petalynx 0003:18B1:0037.002E: item 0 1 0 12 parsing failed
[  108.643537][  T487] petalynx 0003:18B1:0037.002E: parse failed
[  108.650018][  T487] petalynx: probe of 0003:18B1:0037.002E failed with error -22
[  108.830630][  T553] usb 9-1: USB disconnect, device number 14
[  108.986304][   T54] usb 8-1: new high-speed USB device number 15 using dummy_hcd
[  109.226361][   T54] usb 8-1: Using ep0 maxpacket: 16
[  109.346620][   T54] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7
[  109.361324][   T54] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0
[  109.371515][   T54] usb 8-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00
[  109.380887][   T54] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  109.396643][   T54] usb 8-1: config 0 descriptor??
[  109.859900][ T5062] udc-core: couldn't find an available UDC or it's busy
[  109.886619][ T5062] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  109.920053][   T54] hid-generic 0003:0158:0100.002F: unknown main item tag 0x1
[  109.935714][ T5108] syz.6.2003[5108] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  109.935821][ T5108] syz.6.2003[5108] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  109.939695][   T54] hid-generic 0003:0158:0100.002F: unexpected long global item
[  109.970361][ T5110] syz.8.2004[5110] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  109.970420][ T5110] syz.8.2004[5110] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  109.996485][   T54] hid-generic: probe of 0003:0158:0100.002F failed with error -22
[  110.138606][  T487] usb 8-1: USB disconnect, device number 15
[  110.447212][ T5135] syz.0.2015[5135] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  110.447270][ T5135] syz.0.2015[5135] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  110.526338][   T54] Bluetooth: hci0: command 0x1009 tx timeout
[  110.541793][ T5118] xt_hashlimit: size too large, truncated to 1048576
[  110.550648][   T24] kauditd_printk_skb: 280 callbacks suppressed
[  110.550660][   T24] audit: type=1326 audit(2000000003.139:21356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5144 comm="syz.6.2020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f014ed49f19 code=0x7ffc0000
[  110.606010][   T24] audit: type=1326 audit(2000000003.139:21357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5144 comm="syz.6.2020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f014ed49f19 code=0x7ffc0000
[  110.641309][   T24] audit: type=1326 audit(2000000003.169:21358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5144 comm="syz.6.2020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f014ed49f19 code=0x7ffc0000
[  110.671047][ T5151] input: syz1 as /devices/virtual/input/input28
[  110.707126][   T24] audit: type=1326 audit(2000000003.169:21359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5144 comm="syz.6.2020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f014ed49f19 code=0x7ffc0000
[  110.738751][   T24] audit: type=1326 audit(2000000003.169:21360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5144 comm="syz.6.2020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f014ed49f19 code=0x7ffc0000
[  110.768514][   T24] audit: type=1326 audit(2000000003.179:21361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5144 comm="syz.6.2020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f014ed49f19 code=0x7ffc0000
[  110.844405][   T24] audit: type=1326 audit(2000000003.179:21362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5144 comm="syz.6.2020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=155 compat=0 ip=0x7f014ed49f19 code=0x7ffc0000
[  110.869461][   T24] audit: type=1326 audit(2000000003.179:21363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5144 comm="syz.6.2020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f014ed49f19 code=0x7ffc0000
[  110.900874][   T24] audit: type=1326 audit(2000000003.179:21364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5144 comm="syz.6.2020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f014ed49f19 code=0x7ffc0000
[  110.932753][   T24] audit: type=1326 audit(2000000003.179:21365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5144 comm="syz.6.2020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=138 compat=0 ip=0x7f014ed49f19 code=0x7ffc0000
[  110.988080][ T5181] x_tables: duplicate underflow at hook 4
[  111.150313][ T5194] EXT4-fs error (device loop8): ext4_expand_extra_isize_ea:2756: inode #11: comm syz.8.2042: corrupted xattr block 95
[  111.163940][ T5194] EXT4-fs error (device loop8): ext4_validate_block_bitmap:429: comm syz.8.2042: bg 0: block 7: invalid block bitmap
[  111.176585][ T5194] EXT4-fs error (device loop8) in ext4_mb_clear_bb:5645: Corrupt filesystem
[  111.185200][ T5194] EXT4-fs error (device loop8): ext4_xattr_delete_inode:2921: inode #11: comm syz.8.2042: corrupted xattr block 95
[  111.197619][ T5194] EXT4-fs warning (device loop8): ext4_evict_inode:303: xattr delete (err -117)
[  111.206907][ T5194] EXT4-fs (loop8): 1 orphan inode deleted
[  111.212592][ T5194] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue
[  111.456308][ T1187] usb 8-1: new high-speed USB device number 16 using dummy_hcd
[  111.516965][ T5227] xt_bpf: check failed: parse error
[  111.532823][ T5229] sch_fq: defrate 0 ignored.
[  111.586298][  T390] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[  111.826344][ T1187] usb 8-1: config 0 has no interfaces?
[  111.836330][ T2383] usb 7-1: new high-speed USB device number 13 using dummy_hcd
[  111.906346][ T1187] usb 8-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  111.915353][ T1187] usb 8-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  111.923265][ T1187] usb 8-1: Manufacturer: syz
[  111.928370][ T1187] usb 8-1: config 0 descriptor??
[  111.956411][  T390] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  111.967946][  T390] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  112.066380][  T390] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00
[  112.075266][  T390] usb 1-1: New USB device strings: Mfr=0, Product=9, SerialNumber=0
[  112.083053][  T390] usb 1-1: Product: syz
[  112.087834][  T390] usb 1-1: config 0 descriptor??
[  112.169362][   T54] usb 8-1: USB disconnect, device number 16
[  112.246369][ T2383] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16
[  112.255906][ T2383] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64
[  112.446381][ T2383] usb 7-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32
[  112.455296][ T2383] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  112.463051][ T2383] usb 7-1: Product: syz
[  112.467095][ T2383] usb 7-1: Manufacturer: syz
[  112.471450][ T2383] usb 7-1: SerialNumber: syz
[  112.476608][ T2383] usb 7-1: config 0 descriptor??
[  112.496332][ T5235] raw-gadget.2 gadget: fail, usb_ep_enable returned -22
[  112.504907][ T5235] raw-gadget.2 gadget: fail, usb_ep_enable returned -22
[  112.586985][  T390] konepure 0003:1E7D:2DB4.0030: unknown main item tag 0x4
[  112.593938][  T390] konepure 0003:1E7D:2DB4.0030: item fetching failed at offset 9/11
[  112.601936][  T390] konepure 0003:1E7D:2DB4.0030: parse failed
[  112.608292][  T390] konepure: probe of 0003:1E7D:2DB4.0030 failed with error -22
[  112.717465][ T5235] raw-gadget.2 gadget: fail, usb_ep_enable returned -22
[  112.724272][ T5235] raw-gadget.2 gadget: fail, usb_ep_enable returned -22
[  112.789140][  T907] usb 1-1: USB disconnect, device number 17
[  112.887207][ T5259] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a802c01c, mo2=0002]
[  112.895040][ T5259] System zones: 0-2, 18-18, 34-35
[  112.900502][ T5259] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue
[  112.909284][ T5259] ext4 filesystem being mounted at /304/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  113.246427][   T54] usb 8-1: new high-speed USB device number 17 using dummy_hcd
[  113.372828][ T5281] bridge0: port 3(syz_tun) entered blocking state
[  113.379610][ T5281] bridge0: port 3(syz_tun) entered disabled state
[  113.386963][ T5281] device syz_tun entered promiscuous mode
[  113.392761][ T5281] bridge0: port 3(syz_tun) entered blocking state
[  113.399012][ T5281] bridge0: port 3(syz_tun) entered forwarding state
[  113.441852][ T5285] serio: Serial port ptm0
[  113.856460][   T54] usb 8-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d
[  113.865333][   T54] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  113.866292][  T907] usb 1-1: new high-speed USB device number 18 using dummy_hcd
[  113.873438][   T54] usb 8-1: Product: syz
[  113.884538][   T54] usb 8-1: Manufacturer: syz
[  113.889010][   T54] usb 8-1: SerialNumber: syz
[  113.894581][   T54] usb 8-1: config 0 descriptor??
[  113.976372][ T2383] dm9601 7-1:0.0 (unnamed net_device) (uninitialized): MDIO read error: -71
[  113.986486][ T2383] dm9601 7-1:0.0 eth1: register 'dm9601' at usb-dummy_hcd.6-1, Davicom DM96xx USB 10/100 Ethernet, 54:00:00:00:00:00
[  113.999436][ T2383] usb 7-1: USB disconnect, device number 13
[  114.005400][ T2383] dm9601 7-1:0.0 eth1: unregister 'dm9601' usb-dummy_hcd.6-1, Davicom DM96xx USB 10/100 Ethernet
[  114.176343][   T54] r8152 8-1:0.0: Unknown version 0x0000
[  114.236456][  T907] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  114.247778][  T907] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  114.257744][  T907] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  114.270765][  T907] usb 1-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00
[  114.280086][  T907] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  114.299776][  T907] usb 1-1: config 0 descriptor??
[  114.402029][   T54] usb 8-1: USB disconnect, device number 17
[  114.787337][  T907] gt683r_led 0003:1770:FF00.0031: item fetching failed at offset 1/5
[  114.798359][  T907] gt683r_led 0003:1770:FF00.0031: hid parsing failed
[  114.804978][  T907] gt683r_led: probe of 0003:1770:FF00.0031 failed with error -22
[  114.946327][   T54] usb 6-1: new high-speed USB device number 13 using dummy_hcd
[  114.960755][ T5380] device pim6reg1 entered promiscuous mode
[  114.989563][ T1187] usb 1-1: USB disconnect, device number 18
[  115.075316][ T5396] SELinux: security_context_str_to_sid(@) failed for (dev binder, type binder) errno=-22
[  115.229390][   T54] usb 6-1: Using ep0 maxpacket: 16
[  115.346334][   T54] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  115.356331][   T54] usb 6-1: config 0 has no interfaces?
[  115.361624][   T54] usb 6-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77
[  115.370775][   T54] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  115.379536][   T54] usb 6-1: config 0 descriptor??
[  115.438019][   T25] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0
[  115.445309][   T25] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0
[  115.454511][   T25] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0
[  115.461777][   T25] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0
[  115.468933][   T25] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0
[  115.476100][   T25] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0
[  115.483327][   T25] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0
[  115.490529][   T25] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0
[  115.497875][  T907] usb 9-1: new high-speed USB device number 15 using dummy_hcd
[  115.505583][   T25] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0
[  115.512983][   T25] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0
[  115.520091][   T25] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0
[  115.527416][   T25] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0
[  115.534602][   T25] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0
[  115.541843][   T25] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0
[  115.549295][   T25] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0
[  115.556736][   T25] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0
[  115.564063][   T25] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0
[  115.571276][   T25] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0
[  115.578467][   T25] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0
[  115.585650][   T25] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0
[  115.592879][   T25] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0
[  115.600085][   T25] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0
[  115.607473][   T25] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0
[  115.614900][   T25] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0
[  115.622067][   T25] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0
[  115.629417][   T25] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0
[  115.631046][   T24] kauditd_printk_skb: 207 callbacks suppressed
[  115.631056][   T24] audit: type=1400 audit(2000000008.219:21573): avc:  denied  { mounton } for  pid=5352 comm="syz.5.2111" path="/proc/355/task" dev="proc" ino=37248 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1
[  115.636650][   T25] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0
[  115.643476][   T54] usb 6-1: USB disconnect, device number 13
[  115.666042][   T25] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0
[  115.672555][   T24] audit: type=1400 audit(2000000008.219:21574): avc:  denied  { mount } for  pid=5352 comm="syz.5.2111" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[  115.678207][   T25] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0
[  115.714162][   T25] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0
[  115.721605][   T25] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0
[  115.729993][   T25] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0
[  115.730199][   T24] audit: type=1400 audit(2000000008.319:21575): avc:  denied  { read } for  pid=5438 comm="syz.0.2149" name="kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  115.737219][   T25] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0
[  115.760420][   T24] audit: type=1400 audit(2000000008.349:21576): avc:  denied  { open } for  pid=5438 comm="syz.0.2149" path="/dev/kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  115.766909][  T907] usb 9-1: Using ep0 maxpacket: 32
[  115.767739][   T25] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0
[  115.795141][   T24] audit: type=1400 audit(2000000008.379:21577): avc:  denied  { ioctl } for  pid=5438 comm="syz.0.2149" path="/dev/kvm" dev="devtmpfs" ino=82 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  115.802210][   T25] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0
[  115.834514][   T25] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0
[  115.841910][   T25] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0
[  115.849436][   T25] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0
[  115.856847][   T25] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0
[  115.864331][   T25] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0
[  115.871889][   T25] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0
[  115.879497][   T25] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0
[  115.886804][   T25] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0
[  115.895520][   T25] hid-generic 0000:0000:0000.0032: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz0
[  115.906825][  T907] usb 9-1: config index 0 descriptor too short (expected 29220, got 36)
[  115.918900][   T24] audit: type=1400 audit(2000000008.509:21578): avc:  denied  { read write } for  pid=5442 comm="syz.0.2150" name="raw-gadget" dev="devtmpfs" ino=249 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  115.923022][  T907] usb 9-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  115.950202][   T24] audit: type=1400 audit(2000000008.529:21579): avc:  denied  { open } for  pid=5442 comm="syz.0.2150" path="/dev/raw-gadget" dev="devtmpfs" ino=249 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  115.954294][  T907] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 81
[  115.983229][  T907] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  115.993305][  T907] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  115.993996][   T24] audit: type=1400 audit(2000000008.579:21580): avc:  denied  { unmount } for  pid=2034 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1
[  116.003036][  T907] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  116.035617][  T907] usb 9-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  116.045893][  T907] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  116.056651][  T907] usb 9-1: config 0 descriptor??
[  116.085128][   T24] audit: type=1400 audit(2000000008.669:21581): avc:  denied  { read } for  pid=5452 comm="syz.6.2154" name="usbmon0" dev="devtmpfs" ino=150 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  116.113003][   T24] audit: type=1400 audit(2000000008.669:21582): avc:  denied  { open } for  pid=5452 comm="syz.6.2154" path="/dev/usbmon0" dev="devtmpfs" ino=150 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  116.206288][   T54] usb 1-1: new high-speed USB device number 19 using dummy_hcd
[  116.327725][  T907] usblp 9-1:0.0: usblp0: USB Bidirectional printer dev 15 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  116.507324][ T5462] F2FS-fs (loop6): Unrecognized mount option "�est_dummy_encryption" or missing value
[  116.566882][  T907] usb 9-1: USB disconnect, device number 15
[  116.575507][  T907] usblp0: removed
[  116.606340][   T54] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  116.619688][   T54] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  116.629639][   T54] usb 1-1: New USB device found, idVendor=1345, idProduct=3008, bcdDevice= 0.00
[  116.639104][   T54] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  116.647819][   T54] usb 1-1: config 0 descriptor??
[  117.127591][ T5486] syz.8.2168[5486] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  117.127650][ T5486] syz.8.2168[5486] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  117.147264][   T54] sony 0003:1345:3008.0033: item fetching failed at offset 2/5
[  117.177309][   T54] sony 0003:1345:3008.0033: parse failed
[  117.182990][   T54] sony: probe of 0003:1345:3008.0033 failed with error -22
[  117.212974][ T5494] xt_hashlimit: size too large, truncated to 1048576
[  117.350266][   T54] usb 1-1: USB disconnect, device number 19
[  117.452314][ T5504] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12
[  117.465905][ T5504] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[  117.478660][ T5504] F2FS-fs (loop5): invalid crc value
[  117.513146][ T5511] kvm: pic: non byte write
[  117.517525][ T5504] F2FS-fs (loop5): Found nat_bits in checkpoint
[  117.517600][ T5511] kvm: pic: non byte write
[  117.528151][ T5511] kvm: pic: non byte write
[  117.532553][ T5511] kvm: pic: non byte write
[  117.537053][ T5511] kvm: pic: non byte write
[  117.541337][ T5511] kvm: pic: non byte write
[  117.545594][ T5511] kvm: pic: non byte write
[  117.550121][ T5511] kvm: pic: non byte write
[  117.554875][ T5511] kvm: pic: non byte write
[  117.559259][ T5511] kvm: pic: non byte write
[  117.573945][ T5504] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0
[  117.580848][ T5504] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  117.752811][ T5529] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 0)
[  117.762181][ T5529] FAT-fs (loop6): Filesystem has been set read-only
[  117.857467][ T5552] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=5552 comm=syz.8.2194
[  118.116277][   T54] usb 7-1: new high-speed USB device number 14 using dummy_hcd
[  118.123898][ T1187] usb 6-1: new full-speed USB device number 14 using dummy_hcd
[  118.136313][  T390] Bluetooth: hci0: command 0x1003 tx timeout
[  118.142143][ T2057] Bluetooth: hci0: sending frame failed (-49)
[  120.206271][  T390] Bluetooth: hci0: command 0x1001 tx timeout
[  120.214181][ T2057] Bluetooth: hci0: sending frame failed (-49)
[  121.183978][   T24] kauditd_printk_skb: 59 callbacks suppressed
[  121.183989][   T24] audit: type=1400 audit(2000000013.769:21642): avc:  denied  { create } for  pid=5577 comm="syz.0.2205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  121.237677][   T24] audit: type=1400 audit(2000000013.829:21643): avc:  denied  { write } for  pid=5577 comm="syz.0.2205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  121.268200][   T24] audit: type=1400 audit(2000000013.829:21644): avc:  denied  { nlmsg_write } for  pid=5577 comm="syz.0.2205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  121.290245][   T24] audit: type=1400 audit(2000000013.859:21645): avc:  denied  { create } for  pid=5582 comm="syz.8.2208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  121.310170][   T24] audit: type=1400 audit(2000000013.859:21646): avc:  denied  { setopt } for  pid=5582 comm="syz.8.2208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  121.356465][   T24] audit: type=1400 audit(2000000013.949:21647): avc:  denied  { create } for  pid=5586 comm="syz.8.2210" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  121.376064][ T5550] udc-core: couldn't find an available UDC or it's busy
[  121.385969][ T5550] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  121.406408][   T24] audit: type=1326 audit(2000000013.969:21648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5588 comm="syz.0.2211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff642466f19 code=0x7ffc0000
[  121.430785][   T24] audit: type=1400 audit(2000000013.969:21649): avc:  denied  { read } for  pid=5586 comm="syz.8.2210" name="ppp" dev="devtmpfs" ino=149 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  121.453760][   T24] audit: type=1400 audit(2000000013.969:21650): avc:  denied  { open } for  pid=5586 comm="syz.8.2210" path="/dev/ppp" dev="devtmpfs" ino=149 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  121.476989][   T24] audit: type=1400 audit(2000000013.969:21651): avc:  denied  { read } for  pid=5586 comm="syz.8.2210" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  121.827595][ T5603] bridge0: port 1(bridge_slave_0) entered blocking state
[  121.834472][ T5603] bridge0: port 1(bridge_slave_0) entered disabled state
[  121.841966][ T5603] device bridge_slave_0 entered promiscuous mode
[  121.849639][ T5603] bridge0: port 2(bridge_slave_1) entered blocking state
[  121.856510][ T5603] bridge0: port 2(bridge_slave_1) entered disabled state
[  121.863632][ T5603] device bridge_slave_1 entered promiscuous mode
[  121.895772][ T5603] bridge0: port 2(bridge_slave_1) entered blocking state
[  121.902642][ T5603] bridge0: port 2(bridge_slave_1) entered forwarding state
[  121.909854][ T5603] bridge0: port 1(bridge_slave_0) entered blocking state
[  121.916620][ T5603] bridge0: port 1(bridge_slave_0) entered forwarding state
[  121.933550][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  121.940952][    T9] bridge0: port 1(bridge_slave_0) entered disabled state
[  121.948048][    T9] bridge0: port 2(bridge_slave_1) entered disabled state
[  121.958019][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  121.966050][    T9] bridge0: port 1(bridge_slave_0) entered blocking state
[  121.972896][    T9] bridge0: port 1(bridge_slave_0) entered forwarding state
[  121.982218][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  121.990281][    T9] bridge0: port 2(bridge_slave_1) entered blocking state
[  121.997107][    T9] bridge0: port 2(bridge_slave_1) entered forwarding state
[  122.008814][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  122.017568][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  122.030434][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  122.042186][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  122.050008][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  122.057298][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  122.065176][ T5603] device veth0_vlan entered promiscuous mode
[  122.075270][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  122.085172][ T5603] device veth1_macvtap entered promiscuous mode
[  122.094048][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  122.103658][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  122.207180][ T2042] device bridge_slave_1 left promiscuous mode
[  122.216412][ T2042] bridge0: port 2(bridge_slave_1) entered disabled state
[  122.224336][ T2042] device bridge_slave_0 left promiscuous mode
[  122.234793][ T2042] bridge0: port 1(bridge_slave_0) entered disabled state
[  122.286330][  T390] Bluetooth: hci0: command 0x1009 tx timeout
[  122.423549][ T5655] tap0: tun_chr_ioctl cmd 1074025675
[  122.429254][ T5655] tap0: persist enabled
[  122.433377][ T5655] tap0: tun_chr_ioctl cmd 1074025675
[  122.438645][ T5655] tap0: persist disabled
[  122.586284][  T487] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  122.729553][ T5665] F2FS-fs (loop8): Insane cp_payload (553648128 >= 504)
[  122.744144][ T5665] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock
[  122.753720][ T5665] F2FS-fs (loop8): invalid crc value
[  122.763017][ T5665] F2FS-fs (loop8): Found nat_bits in checkpoint
[  122.801011][ T5665] F2FS-fs (loop8): Start checkpoint disabled!
[  122.812802][ T5665] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0
[  122.828030][ T5665] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e6
[  122.861017][ T5665] attempt to access beyond end of device
[  122.861017][ T5665] loop8: rw=0, want=45072, limit=40427
[  122.892165][ T5694] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5694 comm=syz.0.2252
[  122.893001][    T9] attempt to access beyond end of device
[  122.893001][    T9] loop8: rw=2049, want=40968, limit=40427
[  122.917203][ T5691] EXT4-fs (loop6): Ignoring removed bh option
[  122.923141][ T5691] EXT4-fs (loop6): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  122.942285][ T5691] EXT4-fs (loop6): mounted filesystem without journal. Opts: delalloc,data_err=abort,jqfmt=vfsv0,dioread_lock,noblock_validity,max_dir_size_kb=0x00000000004007b1,data_err=ignore,noinit_itable,max_batch_time=0x0000000000000002,data_err=abort,bh,dioread_nolock,,errors=continue
[  122.956465][  T487] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11
[  122.980220][  T487] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024
[  123.002499][  T487] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  123.015455][  T487] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  123.024329][  T487] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  123.035797][  T487] usb 5-1: config 0 descriptor??
[  123.056338][ T5631] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  123.091323][ T5708] SELinux:  Context system_u:object_r:hald_log_t:s0 is not valid (left unmapped).
[  123.166365][   T54] usb 1-1: new high-speed USB device number 20 using dummy_hcd
[  123.366315][  T472] usb 7-1: new high-speed USB device number 15 using dummy_hcd
[  123.426268][   T54] usb 1-1: Using ep0 maxpacket: 16
[  123.517071][  T487] plantronics 0003:047F:FFFF.0034: unknown main item tag 0x0
[  123.524441][  T487] plantronics 0003:047F:FFFF.0034: No inputs registered, leaving
[  123.533069][  T487] plantronics 0003:047F:FFFF.0034: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0
[  123.556421][   T54] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  123.726358][  T472] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  123.737044][  T472] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  123.746764][  T472] usb 7-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00
[  123.755583][  T472] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  123.764252][  T472] usb 7-1: config 0 descriptor??
[  123.767313][   T54] usb 1-1: New USB device found, idVendor=045e, idProduct=0721, bcdDevice=90.c4
[  123.777997][   T54] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  123.785767][   T54] usb 1-1: Product: syz
[  123.789963][   T54] usb 1-1: Manufacturer: syz
[  123.794363][   T54] usb 1-1: SerialNumber: syz
[  123.800309][ T2379] usb 5-1: USB disconnect, device number 12
[  123.808765][   T54] usb 1-1: config 0 descriptor??
[  124.067126][  T293] usb 1-1: USB disconnect, device number 20
[  124.446776][ T5710] syz.6.2258[5710] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  124.446834][ T5710] syz.6.2258[5710] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  124.571919][ T5778] F2FS-fs (loop8): invalid crc value
[  124.589301][ T5778] F2FS-fs (loop8): Found nat_bits in checkpoint
[  124.628357][ T5778] F2FS-fs (loop8): Start checkpoint disabled!
[  124.634897][ T5778] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e6
[  124.676398][  T472] hid-led: probe of 0003:27B8:01ED.0035 failed with error -71
[  124.697804][  T472] usb 7-1: USB disconnect, device number 15
[  124.729156][    T7] attempt to access beyond end of device
[  124.729156][    T7] loop8: rw=2049, want=40968, limit=40427
[  124.736302][ T2379] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  124.903332][ T5803] device batadv_slave_1 entered promiscuous mode
[  124.910040][ T5802] device batadv_slave_1 left promiscuous mode
[  124.996326][ T2379] usb 5-1: Using ep0 maxpacket: 16
[  125.126334][ T2379] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  125.136998][ T2379] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  125.146592][ T2379] usb 5-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00
[  125.155383][ T2379] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  125.164092][ T2379] usb 5-1: config 0 descriptor??
[  125.186320][  T472] usb 1-1: new high-speed USB device number 21 using dummy_hcd
[  125.426277][  T472] usb 1-1: Using ep0 maxpacket: 8
[  125.666546][   T25] usb 7-1: new high-speed USB device number 16 using dummy_hcd
[  125.677191][ T2379] hid-multitouch 0003:1FD2:6007.0036: unknown main item tag 0x2
[  125.686577][ T2379] hid-multitouch 0003:1FD2:6007.0036: item fetching failed at offset 4/5
[  125.694963][ T2379] hid-multitouch: probe of 0003:1FD2:6007.0036 failed with error -22
[  125.706354][  T472] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  125.715382][  T472] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  125.723357][  T472] usb 1-1: Product: syz
[  125.727551][  T472] usb 1-1: Manufacturer: syz
[  125.731945][  T472] usb 1-1: SerialNumber: syz
[  125.753169][ T5832] SELinux: security_context_str_to_sid(unconfined_u) failed for (dev incremental-fs, type incremental-fs) errno=-22
[  125.882080][  T503] usb 5-1: USB disconnect, device number 13
[  126.026327][   T25] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  126.037118][   T25] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  126.046853][   T25] usb 7-1: New USB device found, idVendor=05ac, idProduct=0269, bcdDevice= 0.00
[  126.055675][   T25] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  126.064330][   T25] usb 7-1: config 0 descriptor??
[  126.505669][   T24] kauditd_printk_skb: 176 callbacks suppressed
[  126.505680][   T24] audit: type=1326 audit(2000000019.089:21828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5855 comm="syz.4.2325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f580328cf19 code=0x7ffc0000
[  126.536604][   T24] audit: type=1326 audit(2000000019.089:21829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5855 comm="syz.4.2325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f580328cf19 code=0x7ffc0000
[  126.560674][   T24] audit: type=1326 audit(2000000019.089:21830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5855 comm="syz.4.2325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f580328cf19 code=0x7ffc0000
[  126.584456][   T24] audit: type=1326 audit(2000000019.119:21831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5855 comm="syz.4.2325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f580328cf19 code=0x7ffc0000
[  126.585136][   T25] hid-generic 0003:05AC:0269.0037: item fetching failed at offset 6/7
[  126.609992][   T24] audit: type=1326 audit(2000000019.119:21832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5855 comm="syz.4.2325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f580328cf19 code=0x7ffc0000
[  126.639231][   T24] audit: type=1326 audit(2000000019.119:21833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5855 comm="syz.4.2325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f580328cf19 code=0x7ffc0000
[  126.639654][   T25] hid-generic: probe of 0003:05AC:0269.0037 failed with error -22
[  126.662803][   T24] audit: type=1326 audit(2000000019.149:21834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5855 comm="syz.4.2325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f580328cf19 code=0x7ffc0000
[  126.710455][   T24] audit: type=1326 audit(2000000019.149:21835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5855 comm="syz.4.2325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=310 compat=0 ip=0x7f580328cf19 code=0x7ffc0000
[  126.735105][   T24] audit: type=1326 audit(2000000019.149:21836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5855 comm="syz.4.2325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f580328cf19 code=0x7ffc0000
[  126.758412][ T5841] Leaked POSIX lock on dev=0x0:0x2b ino=0x699  fl_owner=ffff888112ef5a00 fl_flags=0x81 fl_type=0x1 fl_pid=5839
[  126.771014][ T2302] Leaked locks on dev=0x0:0x2b ino=0x699:
[  126.776763][ T2302] POSIX: fl_owner=ffff888112ef5a00 fl_flags=0x81 fl_type=0x1 fl_pid=5839
[  126.806866][ T2379] usb 7-1: USB disconnect, device number 16
[  126.818136][   T24] audit: type=1326 audit(2000000019.199:21837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5855 comm="syz.4.2325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f580328cf19 code=0x7ffc0000
[  126.896374][  T472] cdc_ncm 1-1:1.0: SET_NTB_FORMAT failed
[  126.912865][ T5879] input: syz1 as /devices/virtual/input/input29
[  126.936547][  T472] cdc_ncm 1-1:1.0: bind() failure
[  126.951585][  T472] cdc_ncm 1-1:1.1: bind() failure
[  126.965053][  T472] usb 1-1: USB disconnect, device number 21
[  127.677338][ T5919] F2FS-fs (loop6): Found nat_bits in checkpoint
[  127.750717][ T5919] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[  128.002677][ T1970] attempt to access beyond end of device
[  128.002677][ T1970] loop6: rw=2049, want=45104, limit=40427
[  128.132990][ T5948] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.2362: bg 0: block 248: padding at end of block bitmap is not set
[  128.196733][ T5948] EXT4-fs error (device loop4): ext4_acquire_dquot:6219: comm syz.4.2362: Failed to acquire dquot type 1
[  128.237213][ T5948] EXT4-fs (loop4): 1 truncate cleaned up
[  128.264624][ T5948] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue
[  128.316367][ T5948] ext4 filesystem being mounted at /29/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  128.471127][ T2042] Bluetooth: hci0: Frame reassembly failed (-84)
[  128.481561][ T5982] Bluetooth: received HCILL_WAKE_UP_IND in state 2
[  128.531426][ T5990] tipc: Started in network mode
[  128.544989][ T5990] tipc: Own node identity ac1414aa, cluster identity 4711
[  128.553848][ T5990] tipc: New replicast peer: 100.1.1.1
[  128.560288][ T5990] tipc: Enabled bearer <udp:syz2>, priority 10
[  128.814255][ T6041] xt_hashlimit: max too large, truncated to 1048576
[  128.931992][ T6057] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  128.953419][ T6059] tipc: Started in network mode
[  128.958569][ T6059] tipc: Own node identity ac14140f, cluster identity 4711
[  128.965604][ T6059] tipc: New replicast peer: 255.255.255.5
[  128.971177][ T6059] tipc: Enabled bearer <udp:s>, priority 10
[  128.983614][ T6061] syz.0.2413[6061] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  128.983651][ T6061] syz.0.2413[6061] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  129.035272][ T6067] SELinux: failed to load policy
[  129.426359][  T553] usb 1-1: new high-speed USB device number 22 using dummy_hcd
[  129.497851][   T54] usb 9-1: new high-speed USB device number 16 using dummy_hcd
[  129.557894][ T6101] syz.4.2432[6101] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  129.557930][ T6101] syz.4.2432[6101] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  129.676321][   T25] tipc: 32-bit node address hash set to aa1414ac
[  129.686309][  T553] usb 1-1: Using ep0 maxpacket: 16
[  129.876368][ T2379] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  129.896375][   T54] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  129.907152][   T54] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  129.916743][   T54] usb 9-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  129.925569][   T54] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  129.934043][   T54] usb 9-1: config 0 descriptor??
[  130.036335][  T553] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  130.045228][  T553] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  130.053019][  T553] usb 1-1: Product: syz
[  130.056999][  T553] usb 1-1: Manufacturer: syz
[  130.061393][  T553] usb 1-1: SerialNumber: syz
[  130.066838][  T553] usb 1-1: config 0 descriptor??
[  130.086306][   T25] tipc: 32-bit node address hash set to f1414ac
[  130.266353][ T2379] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 255, changing to 11
[  130.277515][ T2379] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 59391, setting to 1024
[  130.288597][ T2379] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00
[  130.297530][ T2379] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  130.336472][ T6106] raw-gadget.2 gadget: fail, usb_ep_enable returned -22
[  130.526691][  T553] Bluetooth: hci0: command 0x1003 tx timeout
[  130.532587][ T2057] Bluetooth: hci0: sending frame failed (-49)
[  130.539567][ T2383] usb 1-1: USB disconnect, device number 22
[  130.566678][ T2379] aiptek 5-1:17.0: Aiptek using 400 ms programming speed
[  130.573987][ T2379] input: Aiptek as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:17.0/input/input30
[  130.584342][ T2379] usb 5-1: USB disconnect, device number 14
[  130.626649][   T54] usb 9-1: string descriptor 0 read error: -22
[  130.708503][ T6127] EXT4-fs (loop6): 1 truncate cleaned up
[  130.713947][ T6127] EXT4-fs (loop6): mounted filesystem without journal. Opts: bsdgroups,grpquota,debug_want_extra_isize=0x000000000000005c,noauto_da_alloc,nolazytime,discard,grpjquota=,errors=remount-ro,nobarrier,
[  130.887095][   T54] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:256C:006D.0038/input/input31
[  130.899887][   T54] uclogic 0003:256C:006D.0038: input,hidraw0: USB HID v0.00 Device [HID 256c:006d] on usb-dummy_hcd.8-1/input0
[  131.090101][   T54] usb 9-1: USB disconnect, device number 16
[  131.346327][   T25] usb 1-1: new high-speed USB device number 23 using dummy_hcd
[  131.596462][   T54] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  131.706349][   T25] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30
[  131.717789][   T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  131.728745][   T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  131.738491][   T25] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255
[  131.752466][   T25] usb 1-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00
[  131.771354][   T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  131.789228][   T25] usb 1-1: config 0 descriptor??
[  131.830203][   T24] kauditd_printk_skb: 172 callbacks suppressed
[  131.830216][   T24] audit: type=1400 audit(2000000024.419:22008): avc:  denied  { mount } for  pid=6177 comm="syz.6.2464" name="/" dev="loop6" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1
[  131.867738][   T24] audit: type=1400 audit(2000000024.449:22009): avc:  denied  { unmount } for  pid=1970 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1
[  131.915860][   T24] audit: type=1326 audit(2000000024.499:22010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6182 comm="syz.6.2466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f014ed49f19 code=0x7ffc0000
[  131.959432][   T24] audit: type=1326 audit(2000000024.499:22011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6182 comm="syz.6.2466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f014ed49f19 code=0x7ffc0000
[  131.984368][   T24] audit: type=1326 audit(2000000024.499:22012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6182 comm="syz.6.2466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f014ed49f19 code=0x7ffc0000
[  132.008556][   T24] audit: type=1326 audit(2000000024.499:22013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6182 comm="syz.6.2466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f014ed49f19 code=0x7ffc0000
[  132.033644][   T24] audit: type=1326 audit(2000000024.529:22014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6182 comm="syz.6.2466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f014ed49f19 code=0x7ffc0000
[  132.036399][   T54] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  132.057398][   T24] audit: type=1400 audit(2000000024.529:22015): avc:  denied  { connect } for  pid=6183 comm="syz.8.2467" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  132.069209][   T54] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  132.101973][   T24] audit: type=1326 audit(2000000024.539:22016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6182 comm="syz.6.2466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f014ed49f19 code=0x7ffc0000
[  132.125985][   T24] audit: type=1326 audit(2000000024.549:22017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6182 comm="syz.6.2466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f014ed49f19 code=0x7ffc0000
[  132.188928][ T6196] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  132.216391][   T54] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00
[  132.225321][   T54] usb 5-1: New USB device strings: Mfr=0, Product=9, SerialNumber=0
[  132.242358][   T54] usb 5-1: Product: syz
[  132.252373][   T54] usb 5-1: config 0 descriptor??
[  132.294933][ T6212] SELinux:  Context system_u:object_r:systemd_passwd_var_run_t:s0 is not valid (left unmapped).
[  132.327438][   T25] hid-picolcd 0003:04D8:C002.0039: item fetching failed at offset 3/7
[  132.335568][   T25] hid-picolcd 0003:04D8:C002.0039: device report parse failed
[  132.343045][   T25] hid-picolcd: probe of 0003:04D8:C002.0039 failed with error -22
[  132.529672][  T487] usb 1-1: USB disconnect, device number 23
[  132.606377][ T2383] Bluetooth: hci0: command 0x1001 tx timeout
[  132.614059][ T2057] Bluetooth: hci0: sending frame failed (-49)
[  132.746911][   T54] konepure 0003:1E7D:2DB4.003A: item fetching failed at offset 10/11
[  132.754921][   T54] konepure 0003:1E7D:2DB4.003A: parse failed
[  132.760684][   T54] konepure: probe of 0003:1E7D:2DB4.003A failed with error -22
[  132.926364][ T2383] usb 7-1: new high-speed USB device number 17 using dummy_hcd
[  132.959243][  T487] usb 5-1: USB disconnect, device number 15
[  132.979801][ T6258] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2501'.
[  133.148792][ T6278] bridge0: port 1(bridge_slave_0) entered blocking state
[  133.155620][ T6278] bridge0: port 1(bridge_slave_0) entered disabled state
[  133.163135][ T6278] device bridge_slave_0 entered promiscuous mode
[  133.169469][ T2383] usb 7-1: Using ep0 maxpacket: 8
[  133.170104][ T6278] bridge0: port 2(bridge_slave_1) entered blocking state
[  133.181526][ T6278] bridge0: port 2(bridge_slave_1) entered disabled state
[  133.188686][ T6278] device bridge_slave_1 entered promiscuous mode
[  133.219586][ T6278] bridge0: port 2(bridge_slave_1) entered blocking state
[  133.226433][ T6278] bridge0: port 2(bridge_slave_1) entered forwarding state
[  133.233493][ T6278] bridge0: port 1(bridge_slave_0) entered blocking state
[  133.240333][ T6278] bridge0: port 1(bridge_slave_0) entered forwarding state
[  133.257991][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  133.265380][    T9] bridge0: port 1(bridge_slave_0) entered disabled state
[  133.272699][    T9] bridge0: port 2(bridge_slave_1) entered disabled state
[  133.281403][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  133.289488][    T9] bridge0: port 1(bridge_slave_0) entered blocking state
[  133.296336][    T9] bridge0: port 1(bridge_slave_0) entered forwarding state
[  133.303515][ T2383] usb 7-1: New USB device found, idVendor=0403, idProduct=f0c8, bcdDevice= 2.56
[  133.313486][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  133.321415][ T2383] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  133.321667][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  133.337407][    T9] bridge0: port 2(bridge_slave_1) entered blocking state
[  133.344229][    T9] bridge0: port 2(bridge_slave_1) entered forwarding state
[  133.351669][ T2383] usb 7-1: config 0 descriptor??
[  133.358753][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  133.366623][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  133.374432][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  133.382340][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  133.394329][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  133.402650][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  133.404843][ T2383] ftdi_sio 7-1:0.0: FTDI USB Serial Device converter detected
[  133.415078][ T6278] device veth0_vlan entered promiscuous mode
[  133.424377][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  133.432500][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  133.441645][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  133.448980][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  133.464209][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  133.481797][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  133.493648][ T6278] device veth1_macvtap entered promiscuous mode
[  133.500949][ T6294] bridge0: port 3(syz_tun) entered disabled state
[  133.507322][ T6294] bridge0: port 2(bridge_slave_1) entered disabled state
[  133.514258][ T6294] bridge0: port 1(bridge_slave_0) entered disabled state
[  133.534414][ T6294] bridge0: port 3(syz_tun) entered blocking state
[  133.540660][ T6294] bridge0: port 3(syz_tun) entered forwarding state
[  133.547140][ T6294] bridge0: port 2(bridge_slave_1) entered blocking state
[  133.553919][ T6294] bridge0: port 2(bridge_slave_1) entered forwarding state
[  133.561031][ T6294] bridge0: port 1(bridge_slave_0) entered blocking state
[  133.567848][ T6294] bridge0: port 1(bridge_slave_0) entered forwarding state
[  133.568342][ T6294] device bridge0 entered promiscuous mode
[  133.582044][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  133.589617][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  133.604785][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  133.615436][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  133.623296][ T2383] usb 7-1: Detected FT8U232AM
[  133.628198][ T2383] usb 7-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  133.628562][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  133.650954][ T2383] usb 7-1: USB disconnect, device number 17
[  133.666827][ T2383] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  133.698690][ T2383] ftdi_sio 7-1:0.0: device disconnected
[  133.762665][ T6321] ������: renamed from vlan0
[  133.770658][ T6328] SELinux: failed to load policy
[  134.076683][ T6372] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  134.088673][ T6372] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  134.152459][ T6376] printk: syz.9.2555 (6376): Attempt to access syslog with CAP_SYS_ADMIN but no CAP_SYSLOG (deprecated).
[  134.456502][ T2383] usb 10-1: new high-speed USB device number 2 using dummy_hcd
[  134.496283][  T487] usb 7-1: new high-speed USB device number 18 using dummy_hcd
[  134.686319][   T54] Bluetooth: hci0: command 0x1009 tx timeout
[  134.726879][ T2383] usb 10-1: Using ep0 maxpacket: 8
[  134.856353][  T487] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  134.867248][  T487] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  134.876315][ T2383] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  134.877242][  T487] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  134.896300][ T2383] usb 10-1: New USB device found, idVendor=2801, idProduct=0201, bcdDevice=2a.d5
[  134.899919][  T487] usb 7-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.10
[  134.916253][ T2383] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  134.917683][  T487] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  134.933512][ T2383] usb 10-1: config 0 descriptor??
[  134.939384][  T487] usb 7-1: config 0 descriptor??
[  134.986812][ T2383] uvcvideo: Found UVC 0.00 device <unnamed> (2801:0201)
[  134.993566][ T2383] uvcvideo: No valid video chain found.
[  135.194380][ T2383] usb 10-1: USB disconnect, device number 2
[  135.401989][ T6420] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  135.410647][ T6420] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  135.417181][  T487] prodikeys 0003:041E:2801.003B: unknown main item tag 0x0
[  135.425781][  T487] prodikeys 0003:041E:2801.003B: unknown main item tag 0x0
[  135.432800][  T487] prodikeys 0003:041E:2801.003B: unknown main item tag 0x0
[  135.440265][  T487] prodikeys 0003:041E:2801.003B: unknown main item tag 0x0
[  135.448203][  T487] prodikeys 0003:041E:2801.003B: unknown main item tag 0x0
[  135.458212][  T487] prodikeys 0003:041E:2801.003B: hidraw0: USB HID v0.00 Device [HID 041e:2801] on usb-dummy_hcd.6-1/input0
[  135.521910][ T6434] syz.0.2581[6434] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  135.521944][ T6434] syz.0.2581[6434] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  135.564739][ T6438] fuse: Unexpected value for 'default_permissions'
[  135.676655][  T553] usb 7-1: USB disconnect, device number 18
[  135.725657][ T6453] syz.9.2590[6453] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  135.725729][ T6453] syz.9.2590[6453] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  135.816585][ T6459] bridge0: port 3(gretap1) entered blocking state
[  135.834097][ T6459] bridge0: port 3(gretap1) entered disabled state
[  135.841372][ T6459] device gretap1 entered promiscuous mode
[  135.847182][ T6459] bridge0: port 3(gretap1) entered blocking state
[  135.853423][ T6459] bridge0: port 3(gretap1) entered forwarding state
[  135.865565][ T6459] device bridge_slave_0 left promiscuous mode
[  135.871597][ T6459] bridge0: port 1(bridge_slave_0) entered disabled state
[  135.879791][ T6459] device bridge_slave_1 left promiscuous mode
[  135.885955][ T6459] bridge0: port 2(bridge_slave_1) entered disabled state
[  135.893614][    C1] bridge0: received packet on gretap1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  135.896481][    C0] bridge0: received packet on gretap1 with own address as source address (addr:b6:e3:3b:05:ed:f6, vlan:0)
[  135.918465][ T6459] device gretap1 left promiscuous mode
[  135.923767][ T6459] bridge0: port 3(gretap1) entered disabled state
[  136.115856][  T553] ==================================================================
[  136.123757][  T553] BUG: KASAN: use-after-free in __list_del_entry_valid+0x2f/0x120
[  136.131372][  T553] Read of size 8 at addr ffff8881108f5908 by task kworker/0:4/553
[  136.138998][  T553] 
[  136.141179][  T553] CPU: 0 PID: 553 Comm: kworker/0:4 Tainted: G        W         5.10.227-syzkaller-00554-g550d1177dc67 #0
[  136.152282][  T553] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  136.162185][  T553] Workqueue: events binder_deferred_func
[  136.167653][  T553] Call Trace:
[  136.170779][  T553]  dump_stack_lvl+0x1e2/0x24b
[  136.175285][  T553]  ? bfq_pos_tree_add_move+0x43b/0x43b
[  136.180578][  T553]  ? panic+0x812/0x812
[  136.184490][  T553]  print_address_description+0x81/0x3b0
[  136.189865][  T553]  ? ____kasan_slab_free+0x12c/0x160
[  136.194985][  T553]  kasan_report+0x179/0x1c0
[  136.199328][  T553]  ? __list_del_entry_valid+0x2f/0x120
[  136.204619][  T553]  ? __list_del_entry_valid+0x2f/0x120
[  136.209917][  T553]  __asan_report_load8_noabort+0x14/0x20
[  136.215384][  T553]  __list_del_entry_valid+0x2f/0x120
[  136.220505][  T553]  binder_release_work+0xcd/0x680
[  136.225365][  T553]  binder_deferred_func+0x1847/0x1bc0
[  136.230576][  T553]  ? read_word_at_a_time+0x12/0x20
[  136.235520][  T553]  process_one_work+0x6dc/0xbd0
[  136.240205][  T553]  worker_thread+0xaea/0x1510
[  136.244720][  T553]  ? _raw_spin_lock+0x1b0/0x1b0
[  136.249407][  T553]  kthread+0x34b/0x3d0
[  136.253308][  T553]  ? worker_clr_flags+0x180/0x180
[  136.258171][  T553]  ? kthread_blkcg+0xd0/0xd0
[  136.262600][  T553]  ret_from_fork+0x1f/0x30
[  136.266845][  T553] 
[  136.269015][  T553] Allocated by task 6493:
[  136.273186][  T553]  ____kasan_kmalloc+0xdb/0x110
[  136.277871][  T553]  __kasan_kmalloc+0x9/0x10
[  136.282212][  T553]  kmem_cache_alloc_trace+0x18a/0x2e0
[  136.287422][  T553]  binder_thread_write+0x9ce/0x6c70
[  136.292453][  T553]  binder_ioctl_write_read+0x216/0x6a80
[  136.297834][  T553]  binder_ioctl+0x314/0x1e00
[  136.302259][  T553]  __se_sys_ioctl+0x114/0x190
[  136.306772][  T553]  __x64_sys_ioctl+0x7b/0x90
[  136.311201][  T553]  do_syscall_64+0x34/0x70
[  136.315452][  T553]  entry_SYSCALL_64_after_hwframe+0x61/0xcb
[  136.321175][  T553] 
[  136.323349][  T553] Freed by task 553:
[  136.327084][  T553]  kasan_set_track+0x4b/0x70
[  136.331511][  T553]  kasan_set_free_info+0x23/0x40
[  136.336283][  T553]  ____kasan_slab_free+0x121/0x160
[  136.341228][  T553]  __kasan_slab_free+0x11/0x20
[  136.345829][  T553]  slab_free_freelist_hook+0xc0/0x190
[  136.351037][  T553]  kfree+0xc3/0x270
[  136.354682][  T553]  binder_free_ref+0x128/0x260
[  136.359288][  T553]  binder_deferred_func+0x171c/0x1bc0
[  136.364495][  T553]  process_one_work+0x6dc/0xbd0
[  136.369176][  T553]  worker_thread+0xaea/0x1510
[  136.373688][  T553]  kthread+0x34b/0x3d0
[  136.377595][  T553]  ret_from_fork+0x1f/0x30
[  136.381842][  T553] 
[  136.384010][  T553] Last potentially related work creation:
[  136.389573][  T553]  kasan_save_stack+0x3b/0x60
[  136.394083][  T553]  __kasan_record_aux_stack+0xd3/0x100
[  136.399381][  T553]  kasan_record_aux_stack_noalloc+0xb/0x10
[  136.405021][  T553]  call_rcu+0x135/0x11f0
[  136.409102][  T553]  resize+0x2293/0x25c0
[  136.413090][  T553]  replace+0x2ee/0x420
[  136.416995][  T553]  resize+0x1150/0x25c0
[  136.420991][  T553]  fib_insert_alias+0xaab/0xf80
[  136.425674][  T553]  fib_trie_unmerge+0x6ce/0x1450
[  136.430455][  T553]  fib_unmerge+0xc4/0x370
[  136.434615][  T553]  fib4_rule_delete+0x45/0x370
[  136.439217][  T553]  fib_nl_delrule+0x164f/0x1e20
[  136.443902][  T553]  rtnetlink_rcv_msg+0x955/0xc50
[  136.448677][  T553]  netlink_rcv_skb+0x1cf/0x410
[  136.453276][  T553]  rtnetlink_rcv+0x1c/0x20
[  136.457526][  T553]  netlink_unicast+0x8df/0xac0
[  136.462127][  T553]  netlink_sendmsg+0xa46/0xd00
[  136.466728][  T553]  ____sys_sendmsg+0x59e/0x8f0
[  136.471333][  T553]  ___sys_sendmsg+0x252/0x2e0
[  136.475841][  T553]  __se_sys_sendmsg+0x1b1/0x280
[  136.480529][  T553]  __x64_sys_sendmsg+0x7b/0x90
[  136.485129][  T553]  do_syscall_64+0x34/0x70
[  136.489390][  T553]  entry_SYSCALL_64_after_hwframe+0x61/0xcb
[  136.495105][  T553] 
[  136.497283][  T553] The buggy address belongs to the object at ffff8881108f5900
[  136.497283][  T553]  which belongs to the cache kmalloc-64 of size 64
[  136.510994][  T553] The buggy address is located 8 bytes inside of
[  136.510994][  T553]  64-byte region [ffff8881108f5900, ffff8881108f5940)
[  136.523833][  T553] The buggy address belongs to the page:
[  136.529332][  T553] page:ffffea0004423d40 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff8881108f5b80 pfn:0x1108f5
[  136.540683][  T553] flags: 0x4000000000000200(slab)
[  136.545538][  T553] raw: 4000000000000200 ffffea00042a6280 0000000e0000000e ffff888100043800
[  136.553958][  T553] raw: ffff8881108f5b80 000000008020001d 00000001ffffffff 0000000000000000
[  136.562369][  T553] page dumped because: kasan: bad access detected
[  136.568625][  T553] page_owner tracks the page as allocated
[  136.574181][  T553] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112cc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY), pid 334, ts 51875399982, free_ts 51179896915
[  136.589894][  T553]  prep_new_page+0x166/0x180
[  136.594315][  T553]  get_page_from_freelist+0x2d8c/0x2f30
[  136.599694][  T553]  __alloc_pages_nodemask+0x435/0xaf0
[  136.604907][  T553]  new_slab+0x80/0x400
[  136.608810][  T553]  ___slab_alloc+0x302/0x4b0
[  136.613230][  T553]  __slab_alloc+0x63/0xa0
[  136.617399][  T553]  __kmalloc+0x204/0x330
[  136.621478][  T553]  kvmalloc_node+0x82/0x130
[  136.625817][  T553]  simple_xattr_alloc+0x43/0xa0
[  136.630510][  T553]  shmem_initxattrs+0x8d/0x200
[  136.635106][  T553]  security_inode_init_security+0x252/0x390
[  136.640833][  T553]  shmem_mknod+0xb8/0x1c0
[  136.644996][  T553]  shmem_create+0x2b/0x40
[  136.649165][  T553]  path_openat+0x1377/0x3000
[  136.653598][  T553]  do_filp_open+0x21c/0x460
[  136.657934][  T553]  do_sys_openat2+0x13f/0x710
[  136.662437][  T553] page last free stack trace:
[  136.666958][  T553]  free_unref_page_prepare+0x2ae/0x2d0
[  136.672250][  T553]  free_unref_page_list+0x122/0xb20
[  136.677311][  T553]  release_pages+0xea0/0xef0
[  136.681713][  T553]  free_pages_and_swap_cache+0x8a/0xa0
[  136.687006][  T553]  tlb_finish_mmu+0x177/0x320
[  136.691517][  T553]  exit_mmap+0x312/0x5c0
[  136.695597][  T553]  __mmput+0x95/0x2d0
[  136.699415][  T553]  mmput+0x59/0x170
[  136.703060][  T553]  do_exit+0xbda/0x2a50
[  136.707052][  T553]  do_group_exit+0x141/0x310
[  136.711479][  T553]  __x64_sys_exit_group+0x3f/0x40
[  136.716344][  T553]  do_syscall_64+0x34/0x70
[  136.720594][  T553]  entry_SYSCALL_64_after_hwframe+0x61/0xcb
[  136.726316][  T553] 
[  136.728484][  T553] Memory state around the buggy address:
[  136.733961][  T553]  ffff8881108f5800: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc
[  136.741855][  T553]  ffff8881108f5880: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc
[  136.749756][  T553] >ffff8881108f5900: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc
[  136.757659][  T553]                       ^
[  136.761819][  T553]  ffff8881108f5980: 00 00 00 00 00 00 00 03 fc fc fc fc fc fc fc fc
[  136.769717][  T553]  ffff8881108f5a00: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc
[  136.777611][  T553] ==================================================================
[  136.785508][  T553] Disabling lock debugging due to kernel taint
[  136.792111][  T553] general protection fault, probably for non-canonical address 0xf1c7fc50e0000045: 0000 [#1] PREEMPT SMP KASAN
[  136.803627][  T553] KASAN: maybe wild-memory-access in range [0x8e40028700000228-0x8e4002870000022f]
[  136.812739][  T553] CPU: 0 PID: 553 Comm: kworker/0:4 Tainted: G    B   W         5.10.227-syzkaller-00554-g550d1177dc67 #0
[  136.823840][  T553] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  136.833742][  T553] Workqueue: events binder_deferred_func
[  136.839208][  T553] RIP: 0010:__list_del_entry_valid+0x75/0x120
[  136.845104][  T553] Code: 1e 48 85 db 74 68 4d 85 ff 74 74 48 ba 00 01 00 00 00 00 ad de 48 39 d3 74 76 48 83 c2 22 49 39 d7 74 7e 4c 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 ff e8 ac 90 51 ff 49 8b 17 4c 39 f2 75
[  136.864548][  T553] RSP: 0018:ffffc90000e47c20 EFLAGS: 00010a02
[  136.870447][  T553] RAX: 11c80050e0000045 RBX: ffff88810ba5e100 RCX: ffffffff8256c799
[  136.878259][  T553] RDX: dead000000000122 RSI: 0000000000000286 RDI: ffff8881108f5900
[  136.886077][  T553] RBP: ffffc90000e47c40 R08: ffffffff813e2a3b R09: 0000000000000003
[  136.893882][  T553] R10: fffffbfff0e11248 R11: dffffc0000000001 R12: dffffc0000000000
[  136.901698][  T553] R13: ffff8881108f5900 R14: ffff8881108f5900 R15: 8e40028700000229
[  136.909507][  T553] FS:  0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000
[  136.918272][  T553] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  136.924691][  T553] CR2: 00007ffd2af630c8 CR3: 0000000136290000 CR4: 00000000003526b0
[  136.932514][  T553] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  136.940318][  T553] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  136.948134][  T553] Call Trace:
[  136.951259][  T553]  ? __die_body+0x62/0xb0
[  136.955417][  T553]  ? die_addr+0x9f/0xd0
[  136.959413][  T553]  ? exc_general_protection+0x3ff/0x490
[  136.964797][  T553]  ? check_panic_on_warn+0x65/0xb0
[  136.969744][  T553]  ? asm_exc_general_protection+0x1e/0x30
[  136.975297][  T553]  ? check_panic_on_warn+0x5b/0xb0
[  136.980241][  T553]  ? __list_del_entry_valid+0x49/0x120
[  136.985538][  T553]  ? __list_del_entry_valid+0x75/0x120
[  136.990835][  T553]  binder_release_work+0xcd/0x680
[  136.995691][  T553]  binder_deferred_func+0x1847/0x1bc0
[  137.000912][  T553]  ? read_word_at_a_time+0x12/0x20
[  137.005844][  T553]  process_one_work+0x6dc/0xbd0
[  137.010535][  T553]  worker_thread+0xaea/0x1510
[  137.015047][  T553]  ? _raw_spin_lock+0x1b0/0x1b0
[  137.019734][  T553]  kthread+0x34b/0x3d0
[  137.023632][  T553]  ? worker_clr_flags+0x180/0x180
[  137.028494][  T553]  ? kthread_blkcg+0xd0/0xd0
[  137.032921][  T553]  ret_from_fork+0x1f/0x30
[  137.037172][  T553] Modules linked in:
[  137.041236][  T553] ---[ end trace 7ec9db51b2af22e3 ]---
[  137.047057][  T553] RIP: 0010:__list_del_entry_valid+0x75/0x120
[  137.052928][  T553] Code: 1e 48 85 db 74 68 4d 85 ff 74 74 48 ba 00 01 00 00 00 00 ad de 48 39 d3 74 76 48 83 c2 22 49 39 d7 74 7e 4c 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 ff e8 ac 90 51 ff 49 8b 17 4c 39 f2 75
[  137.072489][  T553] RSP: 0018:ffffc90000e47c20 EFLAGS: 00010a02
[  137.078346][  T553] RAX: 11c80050e0000045 RBX: ffff88810ba5e100 RCX: ffffffff8256c799
[  137.086088][  T553] RDX: dead000000000122 RSI: 0000000000000286 RDI: ffff8881108f5900
[  137.093924][  T553] RBP: ffffc90000e47c40 R08: ffffffff813e2a3b R09: 0000000000000003
[  137.101733][  T553] R10: fffffbfff0e11248 R11: dffffc0000000001 R12: dffffc0000000000
[  137.109577][  T553] R13: ffff8881108f5900 R14: ffff8881108f5900 R15: 8e40028700000229
[  137.109948][   T24] kauditd_printk_skb: 207 callbacks suppressed
[  137.109960][   T24] audit: type=1326 audit(2000000029.699:22225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6496 comm="syz.0.2610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff642466f19 code=0x7ffc0000
[  137.117337][  T553] FS:  0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000
[  137.117345][  T553] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  137.117352][  T553] CR2: 00007ffd2af630c8 CR3: 0000000136290000 CR4: 00000000003526b0
[  137.117362][  T553] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  137.117369][  T553] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  137.117390][  T553] Kernel panic - not syncing: Fatal exception
[  137.191394][  T553] Kernel Offset: disabled
[  137.195517][  T553] Rebooting in 86400 seconds..