last executing test programs:

18.917975602s ago: executing program 4 (id=826):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@bridge_delneigh={0x28, 0x1c, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r1, 0x80, 0xf2, 0x4}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}}]}, 0x28}, 0x1, 0x1000000}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[], 0x38}}, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0)

18.861565023s ago: executing program 4 (id=827):
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$tipc(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000a40)="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", 0x5a9}], 0x1}, 0x0)
setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000540), 0x4)
clock_gettime(0x2, &(0x7f0000000040))
sendmsg$tipc(r1, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0)
sendmsg$tipc(r0, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0)

18.794608034s ago: executing program 4 (id=830):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000020000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10)
r2 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6tnl0\x00', <r3=>0x0})
sendto$packet(r2, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @dev}, 0x14)

18.759352815s ago: executing program 4 (id=832):
syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000040)={[{@norecovery}, {@grpquota}, {@debug}, {@discard}]}, 0xee, 0x498, &(0x7f0000001b40)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x42842, 0x10e)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x131)
io_setup(0x3, &(0x7f0000000200)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f00000001c0)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r0, 0x0, 0x43b445d454f3fc0, 0xa00}])

18.268227992s ago: executing program 4 (id=842):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000fd"], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r2}, 0x10)
ioctl$HCIINQUIRY(r0, 0x800448d4, &(0x7f0000000000)={0x3, 0x200, "fe0140", 0x0, 0xf})

18.097714374s ago: executing program 3 (id=847):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d00000085"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
pipe(&(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
pipe(&(0x7f0000000300)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r4])
splice(r3, 0x0, r2, 0x0, 0xffffffffffff8000, 0x0)

18.019405385s ago: executing program 4 (id=850):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a5df"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r0}, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r1}, 0x10)

18.019218985s ago: executing program 32 (id=850):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a5df"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r0}, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r1}, 0x10)

17.178183788s ago: executing program 3 (id=873):
r0 = creat(&(0x7f0000000080)='./file0\x00', 0x8d)
close(r0)
socket$xdp(0x2c, 0x3, 0x0)
r1 = socket$tipc(0x1e, 0x5, 0x0)
listen(r1, 0x7)
mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

17.159426737s ago: executing program 2 (id=874):
r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r2, <r3=>0xffffffffffffffff}, 0x0, &(0x7f00000002c0)}, 0x20)
bpf$MAP_DELETE_ELEM(0x15, &(0x7f0000000500)={r3, 0x0, 0x20000000}, 0x20)

17.093825399s ago: executing program 2 (id=876):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x80000, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10)
r2 = socket$nl_generic(0x11, 0x3, 0x10)
sendmsg(r2, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x11000000}, 0x0)

17.04714398s ago: executing program 2 (id=878):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x17, 0x8, 0x40, 0x42, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r3}, 0x38)

16.948841391s ago: executing program 2 (id=880):
syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000040)={[{@norecovery}, {@grpquota}, {@debug}, {@discard}]}, 0xee, 0x498, &(0x7f0000001b40)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x42842, 0x10e)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x131)
io_setup(0x3, &(0x7f0000000200)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f00000001c0)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r0, 0x0, 0x43b445d454f3fc0, 0xa00}])

16.721980054s ago: executing program 2 (id=887):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r1}, 0x10)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000140)="5500000018007f5f00fe01b2a4a2809302060000ff41fd01020400000a00120002002800000019002d007fffffff0022de1330d54400009b84136ef75afb83de066a5900e1baac968300000000f2ff000001000000", 0x55}], 0x1, 0x0, 0x0, 0x7a000000}, 0x4000884)

16.571413787s ago: executing program 2 (id=893):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000004000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmmsg$unix(r2, &(0x7f0000000300)=[{{&(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4000010}}], 0x1, 0x20048000)

16.571254876s ago: executing program 33 (id=893):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000004000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmmsg$unix(r2, &(0x7f0000000300)=[{{&(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4000010}}], 0x1, 0x20048000)

16.31119566s ago: executing program 3 (id=895):
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000100000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
pipe2$9p(&(0x7f0000001900)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='writeback_bdi_register\x00', r0}, 0x18)
r3 = dup(r2)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[], [], 0x6b}})

16.104482093s ago: executing program 3 (id=898):
syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000040)={[{@norecovery}, {@grpquota}, {@debug}, {@discard}]}, 0xee, 0x498, &(0x7f0000001b40)="$eJzs3E1sFFUcAPD/bL/5kIr4AYJW8YOotLR8yMGLRhMPmpjoAeOplkKQQg2tiZBG0QMeDYl349HEu4knvRj1YEy86t2QENML6GnMzM4s23a3n0sX3N8v2e17M7N97z9vXuf1vd0NoGMNZU9JxLaI+CMidlSzCw8Yqv64OT838c/83EQSafrm30l+3I35uYny0PJ1W6uZNI3oy5J9Dcq98k7E+NTU5IUiPzJ77v2RmYuXDp45N3568vTk+bHjx48c3td7bOxovj9dZ3yV4mcW1409H03v3f3q21dfnzhx9d2fv8nqu63YXx/HuqRLazhUPbuLPZo9Pbmhwu4ov2ZP2+s2JN3NDx7ehAqxel0RkTVXT55LoisGavt2xCuftrFqwG2Wpmna6P4cdfftFPifSvRv6FDlvT77/7d8bM7I485w/cWIOFhk5ucmbtbi767NHfQs+v+2lYYi4sTlf7/MHtGKeQgAgBV8n41/nms0/qvEA3XH3VOsoQxGxL0RsTMi7ouIXRFxf0R+7IMR5x5aY/mLV0iWjn8q19YV2Cpl478XirWtmwvGf+XoLwa7itz2PP6e5NSZqclDxTk5ED19WX50mTJ+ePn3z8t0/6J99eO/7JGVX44Fi3pc6140QXdyfHY8T6Rp+vHGwo/rn0Ts6W4UfxLlMk4SEbsjYs86yzjzzNd7m+1bOf5lLLPOtFrpVxFPV9v/8sLx/62mSurXJwciorY+Ofr8sbGjI/0xNXlopLwqlvrltytvNCt/Q/G3QNb+Wxpe/7VV4MGkP2Lm4qWz+XrtzNrLuPLnZ3V9esHqchZ/5duINV//vclbebq32Pbh+OzshdGI3uS1pdvHbr22zJfHZ/Ef2N+4/++sq/HDEZFdxPsi4pFiETdru8ci4vGI2L9M/D+99MR7zfY1b/9ms/Ktdb04Ucu2f9S3/9oTXWd//K5Z+UPFGmQU56Fx+x/JUweKLbW/f8tYbQXXddIAAADgLlPJ3wOfVIZr6UpleLj6Hv5dsaUyNT0z++yp6Q/On6y+V34weirlTNeOuvnQ0WJuuMyPLcofLuaNv+gayPPDE9NTJ9sdPHS4rU36f+avrnbXDrjtWrCOBtyl9H/oXPo/dC79HzqX/g+dq1H/3+gHC4C7g/s/dK68/z91ud3VANrA/R86l/4PHanpZ+MrG/rIf9NE0upf2DBRfnfCZpS1cqL8LopNL31g3S/vX/nURaW9Z7VjEt1L2iK6W1pEX8NdbfyjBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0EL/BQAA///5etKr")
openat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x42842, 0x10e)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x131)
io_setup(0x3, &(0x7f0000000200)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f00000001c0)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r0, 0x0, 0x43b445d454f3fc0, 0xa00}])

15.684009179s ago: executing program 3 (id=903):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000002e80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x18)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x9, 0x0, 0x0)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0)
getegid()

15.271274456s ago: executing program 3 (id=909):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0x202, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000001200)=[@text32={0x20, 0x0}], 0x1, 0x48, 0x0, 0x0)
ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000180)=0x80a0000)

15.261714005s ago: executing program 34 (id=909):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0x202, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000001200)=[@text32={0x20, 0x0}], 0x1, 0x48, 0x0, 0x0)
ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000180)=0x80a0000)

8.546319854s ago: executing program 1 (id=1007):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r0}, &(0x7f0000000000), &(0x7f0000000080)=r1}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000013c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000000180)="76389e147583ddd0569ba56a655855", 0x0, 0x4, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)

8.502247615s ago: executing program 1 (id=1009):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff0000001100a200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r0}, 0x10)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"})

8.468594246s ago: executing program 1 (id=1011):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000140)=@x86={0x0, 0x0, 0x0, 0x0, 0xc4aa, 0x1, 0x0, 0x0, 0x0, 0x1})
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000880)={0x2, 0x0, @ioapic={0x0, 0x0, 0x20003, 0x10020f5b, 0x0, [{}, {0x0, 0x0, 0x1}, {0x0, 0x8}, {0x0, 0x35, 0x3}, {0x20}, {}, {}, {0x1, 0x6, 0x3}, {0x26, 0x9}, {0xf, 0x2, 0x2}, {0x0, 0x0, 0x9}, {0x0, 0x0, 0x3, '\x00', 0x4}, {0xfe, 0x0, 0x0, '\x00', 0x9}, {0x0, 0x80, 0x2}, {0x7, 0x0, 0x0, '\x00', 0x39}, {0x0, 0x0, 0x0, '\x00', 0x8}, {0x0, 0x0, 0x0, '\x00', 0xfe}, {0x3, 0xff, 0xfa, '\x00', 0x5}, {0x0, 0x2}, {}, {0x0, 0x0, 0x0, '\x00', 0x1}, {}, {0x0, 0x0, 0x3}]}})
ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000180)={0x4, 0x401})

8.396874956s ago: executing program 1 (id=1016):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)

8.370549247s ago: executing program 1 (id=1018):
syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x0, &(0x7f0000000000), 0x0, 0x248, &(0x7f0000000c80)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='mnt/encrypted_dir\x00', 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x800, 0x0)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f00000006c0)=@v2={0x2, @adiantum, 0x4, '\x00', @a})
ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, 0x0)
syz_open_dev$MSR(0x0, 0x7ff, 0x0)

8.298315598s ago: executing program 1 (id=1022):
syz_open_dev$evdev(0x0, 0x0, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
timer_create(0x8, &(0x7f00000002c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
ustat(0xfffffffffffffffa, 0x0)

8.249560679s ago: executing program 35 (id=1022):
syz_open_dev$evdev(0x0, 0x0, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
timer_create(0x8, &(0x7f00000002c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
ustat(0xfffffffffffffffa, 0x0)

3.102390935s ago: executing program 7 (id=1176):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfd6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='workqueue_queue_work\x00', r1}, 0x10)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r2, 0x1, 0x1d, &(0x7f00000001c0), 0x4)

2.934875667s ago: executing program 7 (id=1179):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b7030000000000de850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10)
r1 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e24, 0x3, @mcast1, 0x5}, 0x1c)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0)
writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000100)="88", 0xfdef}], 0x1)

2.916683697s ago: executing program 7 (id=1180):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f00000003c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc0006}]})
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000002000000e27f000001"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0}, &(0x7f0000000080), &(0x7f00000001c0)}, 0x20)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10)
setreuid(0x0, 0x0)

2.901564147s ago: executing program 7 (id=1181):
r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x20000009, 0x80, &(0x7f0000000240)={0x0, 0x0, 0xfffc, 0x4360}, 0x8, 0x10000007, 0x80, 0x0, 0x1, 0x101, 0x0})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x9, 0x8031, 0xffffffffffffffff, 0xffffe000)
ioctl$KVM_REINJECT_CONTROL(0xffffffffffffffff, 0xae71, 0x0)
ioctl$USBDEVFS_REAPURBNDELAY(r0, 0x4008550d, 0x0)

2.588713272s ago: executing program 7 (id=1184):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000012c0)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4739}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@norecovery}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x60840, 0x8)
io_setup(0x2e, &(0x7f0000000200)=<r1=>0x0)
r2 = inotify_init()
inotify_add_watch(r2, &(0x7f00000002c0)='./file1\x00', 0x82000804)
io_submit(r1, 0x1, &(0x7f0000000440)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xf00f, 0x4000000, 0x0, 0x0, r0}])

2.373650775s ago: executing program 7 (id=1189):
r0 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f0000000c40)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x64, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6, 0x24, 0x1a, 0x4}, [@mbim_extended={0x8, 0x24, 0x1c, 0x3, 0x5, 0xfff}]}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)

1.298002381s ago: executing program 5 (id=1228):
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1d, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
creat(&(0x7f0000000040)='./file0\x00', 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r0}, 0x10)
pipe2$9p(&(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000a40)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@version_u}]}})

1.275998281s ago: executing program 0 (id=1229):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x40, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000180)="0f20e035004000000f22e0f2411c040f01df420f01cbc4437905eecc66ba210068400f7807410f01ca1766b98fcf5acf5ad8f4", 0x33}], 0x1, 0x77, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x40, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

1.163125033s ago: executing program 5 (id=1231):
r0 = socket$inet6(0x10, 0x3, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r2}, 0x10)
sendto$inet6(r0, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0)

1.136191993s ago: executing program 0 (id=1232):
pipe(&(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002, 0x2000}, 0x1c)
sendto$inet6(r1, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c)
sendto$inet6(r1, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0)
splice(r1, 0x0, r0, 0x0, 0x406f413, 0x0)

1.089441104s ago: executing program 5 (id=1233):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10)
r1 = socket$packet(0x11, 0xa, 0x300)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x80000006}]}, 0x10)
syz_emit_ethernet(0x2a, &(0x7f0000000400)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x3, 0x1c, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x8}}}}}, 0x0)

1.062599524s ago: executing program 5 (id=1235):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000001000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x18)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r1, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={<r2=>0xffffffffffffffff})
close_range(r2, 0xffffffffffffffff, 0x0)

1.025852795s ago: executing program 5 (id=1237):
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0)
unshare(0x2000400)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
bind$802154_raw(r1, &(0x7f0000000000)={0x24, @short={0x2, 0x1, 0xaaa2}}, 0x14)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0)

1.004942355s ago: executing program 5 (id=1238):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$TCFLSH(r0, 0x400455c8, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r1, &(0x7f0000000200), 0x6)
ioctl$sock_bt_hci(r1, 0x400448e7, 0x0)

543.111522ms ago: executing program 6 (id=1256):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20)
r2 = socket$inet(0x2, 0x1, 0x0)
setsockopt$inet_opts(r2, 0x0, 0x4, 0x0, 0x0)

540.382562ms ago: executing program 6 (id=1257):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180), &(0x7f0000000200), 0x3, r0}, 0x38)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
syz_emit_ethernet(0xfdef, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xfde1, 0x300, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0xfdcd, 0x0, @wg=@data}}}}}, 0x0)

520.953673ms ago: executing program 6 (id=1258):
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00', r0}, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00', r1}, 0x10)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)

496.213183ms ago: executing program 6 (id=1260):
r0 = socket(0x10, 0x803, 0x0)
sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0)
getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=@newlink={0x54, 0x10, 0x437, 0x1, 0x25dfdbff, {0x0, 0x0, 0x0, r1, 0x40c89}, [@IFLA_OPERSTATE={0x5, 0x10, 0x5}, @IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_DIR={0x5}, @IFLA_GRE_IKEY={0x8, 0x4, 0x3}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x80}]}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x44801}, 0x0)
r2 = socket$inet(0x2, 0x2, 0x0)
sendmmsg$inet(r2, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000004c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @empty, @loopback}}}], 0x20}}], 0x1, 0x4040880)

450.591233ms ago: executing program 6 (id=1262):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000020000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x18)
r2 = socket$nl_route(0x10, 0x3, 0x0)
connect$netlink(r2, &(0x7f0000000280)=@proc={0x10, 0x0, 0x25dfdbf8, 0x2000}, 0xc)
sendmsg$nl_route(r2, &(0x7f0000000300)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c00000021000f0000f909000000210002"], 0x1c}}, 0x0)

449.962203ms ago: executing program 6 (id=1264):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x3, 0x8000000003c)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588)
r1 = socket$inet6(0xa, 0x3, 0x8000000003c)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c)
sendmsg(r1, &(0x7f00000000c0)={0x0, 0x9511, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0x5dc}], 0x1, 0x0, 0x0, 0x2c}, 0x44004)

429.541414ms ago: executing program 8 (id=1265):
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', <r2=>0x0})
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff000800034000000038540000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000002800038024000080040002800400078004000180"], 0xe8}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r2, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x8015}, 0x4)
sendmmsg(r0, &(0x7f0000000000), 0x400000000000235, 0x0)

368.617204ms ago: executing program 8 (id=1266):
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r0}, 0x10)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0)
write$cgroup_type(r1, &(0x7f0000000180), 0x40010)

351.177604ms ago: executing program 8 (id=1267):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='netlink_extack\x00', r0}, 0x10)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r1}, 0x10)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r2, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000040)={0x14, 0x12, 0x1, 0x0, 0x0, "", [@nested={0x4, 0x3ffd, 0x0, 0x0}]}, 0x14}], 0x1}, 0x0)

319.903515ms ago: executing program 8 (id=1268):
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x181942, 0x0)
r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
mkdirat(r1, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
renameat2(r1, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f0000000180)='./file1\x00', 0x4)
renameat2(r0, &(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f00000002c0)='./file0\x00', 0x2)

261.057736ms ago: executing program 0 (id=1269):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20)
r2 = socket$inet(0x2, 0x1, 0x0)
setsockopt$inet_opts(r2, 0x0, 0x4, 0x0, 0x0)

245.388396ms ago: executing program 8 (id=1270):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10)
r2 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4)
close(r2)

230.069136ms ago: executing program 0 (id=1271):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000002c0)={'veth0\x00', 0xe00})

215.482887ms ago: executing program 8 (id=1272):
syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./file1\x00', 0x101880a, &(0x7f0000005a80)=ANY=[@ANYBLOB="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"], 0x1, 0x550b, &(0x7f0000000540)="$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")
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
mkdir(&(0x7f00000004c0)='./bus\x00', 0x0)
r0 = open(&(0x7f0000000100)='./file1\x00', 0x129042, 0x88)
truncate(&(0x7f0000000080)='./file1\x00', 0x8000008)
fallocate(r0, 0x10, 0x0, 0x7000000)

71.380569ms ago: executing program 0 (id=1273):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000cc0)='mmap_lock_acquire_returned\x00', r0}, 0x10)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0)
write$cgroup_int(r1, &(0x7f0000000200), 0x43451)

0s ago: executing program 0 (id=1274):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0x240540c7, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, &(0x7f0000000000)="04", 0x1, 0x44001, 0x0, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r1)

kernel console output (not intermixed with test programs):

4] SELinux:  Context system_u:object_r:updpwd_exec_t:s0 is not valid (left unmapped).
[   31.762968][  T417] overlayfs: upper fs does not support tmpfile.
[   31.789697][   T26] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   31.981427][  T430] xt_hashlimit: size too large, truncated to 1048576
[   32.029328][   T26] usb 5-1: Using ep0 maxpacket: 32
[   32.149200][   T26] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   32.160707][   T26] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   32.289408][   T26] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[   32.299697][   T26] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[   32.309296][   T26] usb 5-1: Product: syz
[   32.314137][   T26] usb 5-1: Manufacturer: syz
[   32.355382][  T438] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   32.380301][   T26] hub 5-1:4.0: USB hub found
[   32.522991][  T447] loop2: detected capacity change from 0 to 1024
[   32.569783][  T447] EXT4-fs (loop2): Ignoring removed orlov option
[   32.578497][  T447] EXT4-fs (loop2): mounted filesystem without journal. Opts: orlov,min_batch_time=0x0000000000000004,,errors=continue. Quota mode: writeback.
[   32.599179][   T26] hub 5-1:4.0: 2 ports detected
[   32.709119][   T39] usb 4-1: new full-speed USB device number 2 using dummy_hcd
[   32.899476][   T26] hub 5-1:4.0: hub_hub_status failed (err = -71)
[   32.911840][   T26] hub 5-1:4.0: config failed, can't get hub status (err -71)
[   32.949968][   T26] usb 5-1: USB disconnect, device number 2
[   33.089224][  T289] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   33.092540][  T458] syz.0.61 (458) used greatest stack depth: 20944 bytes left
[   33.105917][   T39] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[   33.121806][   T39] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   33.144306][   T39] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   33.170036][   T39] usb 4-1: New USB device found, idVendor=1b96, idProduct=0009, bcdDevice= 0.00
[   33.183061][   T39] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   33.208012][   T39] usb 4-1: config 0 descriptor??
[   33.217799][  T462] x_tables: duplicate underflow at hook 4
[   33.460508][  T475] loop4: detected capacity change from 0 to 256
[   33.479747][  T289] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   33.502084][  T289] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   33.523770][  T289] usb 2-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00
[   33.540559][  T289] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   33.555638][  T289] usb 2-1: config 0 descriptor??
[   33.701027][   T39] ntrig 0003:1B96:0009.0001: invalid report_count 903462111
[   33.715367][   T39] ntrig 0003:1B96:0009.0001: item 0 4 1 9 parsing failed
[   33.723749][   T39] ntrig 0003:1B96:0009.0001: parse failed
[   33.730664][   T39] ntrig: probe of 0003:1B96:0009.0001 failed with error -22
[   33.916965][    T6] hid-generic 0000:0004:0000.0002: unknown main item tag 0x0
[   33.928934][    T6] hid-generic 0000:0004:0000.0002: unknown main item tag 0x0
[   33.940201][    T6] hid-generic 0000:0004:0000.0002: unknown main item tag 0x0
[   33.951279][    T6] hid-generic 0000:0004:0000.0002: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz1
[   33.978646][    T6] usb 4-1: USB disconnect, device number 2
[   34.015153][  T501] fido_id[501]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[   34.061452][  T289] hid-steam 0003:28DE:1142.0003: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.1-1/input0
[   34.088584][  T289] hid-steam 0003:28DE:1142.0004: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.1-1/input0
[   34.179208][  T289] hid-steam 0003:28DE:1142.0003: Steam wireless receiver connected
[   34.213527][  T511] loop0: detected capacity change from 0 to 128
[   34.223079][  T477] loop4: detected capacity change from 0 to 131072
[   34.241237][  T477] F2FS-fs (loop4): Test dummy encryption mode enabled
[   34.257481][  T511] =======================================================
[   34.257481][  T511] WARNING: The mand mount option has been deprecated and
[   34.257481][  T511]          and is ignored by this kernel. Remove the mand
[   34.257481][  T511]          option from the mount to silence this warning.
[   34.257481][  T511] =======================================================
[   34.310346][  T477] F2FS-fs (loop4): invalid crc value
[   34.325888][   T39] usb 2-1: USB disconnect, device number 2
[   34.338982][   T39] hid-steam 0003:28DE:1142.0003: Steam wireless receiver disconnected
[   34.344102][  T477] F2FS-fs (loop4): Found nat_bits in checkpoint
[   34.351843][  T511] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[   34.370911][  T511] ext4 filesystem being mounted at /27/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   34.393875][  T511] syz.0.86 (pid 511) is setting deprecated v1 encryption policy; recommend upgrading to v2.
[   34.431004][  T477] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[   34.452780][  T526] loop2: detected capacity change from 0 to 512
[   34.535220][  T532] loop3: detected capacity change from 0 to 512
[   34.542885][  T526] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpjquota=,stripe=0x0000000000000002,,errors=continue. Quota mode: writeback.
[   34.560316][  T532] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem
[   34.571073][  T528] SELinux: failed to load policy
[   34.577147][  T526] ext4 filesystem being mounted at /21/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   34.620147][  T532] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c119, mo2=0002]
[   34.631131][  T532] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2228: inode #15: comm syz.3.91: corrupted in-inode xattr
[   34.640285][  T477] fscrypt: AES-256-XTS using implementation "xts-aes-aesni"
[   34.654420][  T532] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.91: couldn't read orphan inode 15 (err -117)
[   34.670372][  T532] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsold,max_batch_time=0x0000000000000001,debug,noload,nombcache,noblock_validity,init_itable=0x0000000000000601,inode_readahead_blks=0x0000000000008000,,errors=continue. Quota mode: none.
[   34.973902][  T547] SELinux: ebitmap: truncated map
[   35.027783][  T547] SELinux: failed to load policy
[   35.049178][    T6] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   35.319354][    T6] usb 3-1: Using ep0 maxpacket: 32
[   35.439193][    T6] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   35.472818][    T6] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   35.494048][    T6] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0
[   35.510156][    T6] usb 3-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[   35.523834][    T6] usb 3-1: config 0 interface 0 has no altsetting 0
[   35.531260][    T6] usb 3-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00
[   35.541330][    T6] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   35.550531][    T6] usb 3-1: config 0 descriptor??
[   35.570190][  T588] binfmt_misc: register: failed to install interpreter file ./file1
[   35.606071][  T596] xt_bpf: check failed: parse error
[   35.763396][   T30] kauditd_printk_skb: 167 callbacks suppressed
[   35.763411][   T30] audit: type=1400 audit(1748862924.445:279): avc:  denied  { unmount } for  pid=281 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1
[   35.830222][   T30] audit: type=1326 audit(1748862924.515:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=612 comm="syz.3.127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09d4d89969 code=0x7ffc0000
[   35.866232][   T30] audit: type=1326 audit(1748862924.535:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=612 comm="syz.3.127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09d4d89969 code=0x7ffc0000
[   35.932617][   T30] audit: type=1400 audit(1748862924.615:282): avc:  denied  { map } for  pid=621 comm="syz.1.131" path="/dev/ashmem" dev="devtmpfs" ino=265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   36.040257][    T6] hid-thrustmaster 0003:044F:B65D.0005: unknown main item tag 0x0
[   36.052264][    T6] hid-thrustmaster 0003:044F:B65D.0005: unknown main item tag 0x0
[   36.071381][    T6] hid-thrustmaster 0003:044F:B65D.0005: item fetching failed at offset 2/5
[   36.097674][   T30] audit: type=1400 audit(1748862924.775:283): avc:  denied  { read } for  pid=633 comm="syz.1.136" dev="nsfs" ino=4026532632 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[   36.131578][    T6] hid-thrustmaster 0003:044F:B65D.0005: parse failed with error -22
[   36.140737][    T6] hid-thrustmaster: probe of 0003:044F:B65D.0005 failed with error -22
[   36.159123][   T30] audit: type=1400 audit(1748862924.775:284): avc:  denied  { open } for  pid=633 comm="syz.1.136" path="net:[4026532632]" dev="nsfs" ino=4026532632 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[   36.262323][  T363] usb 3-1: USB disconnect, device number 2
[   36.404423][  T647] loop0: detected capacity change from 0 to 40427
[   36.456129][  T647] F2FS-fs (loop0): Unrecognized mount option "oll_forward" or missing value
[   36.472081][   T30] audit: type=1400 audit(1748862925.155:285): avc:  denied  { unlink } for  pid=646 comm="syz.0.141" name="#2" dev="tmpfs" ino=210 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[   36.530503][  T666] sch_fq: defrate 0 ignored.
[   36.565413][   T30] audit: type=1326 audit(1748862925.245:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=667 comm="syz.1.151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2694416969 code=0x7ffc0000
[   36.596629][   T30] audit: type=1326 audit(1748862925.275:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=667 comm="syz.1.151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=123 compat=0 ip=0x7f2694416969 code=0x7ffc0000
[   36.622200][   T30] audit: type=1326 audit(1748862925.275:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=667 comm="syz.1.151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2694416969 code=0x7ffc0000
[   36.849964][  T693] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[   36.860133][  T693] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready
[   36.869282][  T693] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready
[   36.877895][  T693] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready
[   36.887039][  T693] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready
[   36.896937][  T693] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready
[   36.906214][  T693] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready
[   36.987078][  T703] loop2: detected capacity change from 0 to 256
[   37.080995][  T715] IPv6: Can't replace route, no match found
[   37.154175][  T723] loop3: detected capacity change from 0 to 512
[   37.231567][  T723] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option
[   37.258360][  T723] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2
[   37.280437][  T723] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2
[   37.322914][  T723] EXT4-fs (loop3): 1 truncate cleaned up
[   37.339140][  T723] EXT4-fs (loop3): mounted filesystem without journal. Opts: nomblk_io_submit,usrjquota="errors=continue,noload,grpjquota="data_err=ignore,errors=continue,errors=remount-ro,jqfmt=vfsv1,. Quota mode: writeback.
[   37.443651][  T723] EXT4-fs error (device loop3): ext4_map_blocks:630: inode #2: block 4: comm syz.3.178: lblock 0 mapped to illegal pblock 4 (length 1)
[   37.496514][  T723] EXT4-fs (loop3): Remounting filesystem read-only
[   37.720643][  T751] loop3: detected capacity change from 0 to 8192
[   37.759346][  T751] FAT-fs (loop3): error, fat_free_clusters: deleting FAT entry beyond EOF
[   37.786493][  T765] loop0: detected capacity change from 0 to 256
[   37.788658][  T751] FAT-fs (loop3): Filesystem has been set read-only
[   37.859465][  T749] loop1: detected capacity change from 0 to 40427
[   37.876795][  T721] loop4: detected capacity change from 0 to 131072
[   37.905045][  T749] F2FS-fs (loop1): invalid crc value
[   37.934671][  T721] F2FS-fs (loop4): invalid crc value
[   37.965364][  T749] F2FS-fs (loop1): Found nat_bits in checkpoint
[   37.998204][  T721] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (15359802341028777995, 275811881701387)
[   38.048526][   T39] kernel write not supported for file bpf-prog (pid: 39 comm: kworker/1:1)
[   38.095387][  T721] F2FS-fs (loop4): Mounted with checkpoint version = 753bd00b
[   38.116187][  T749] F2FS-fs (loop1): Cannot turn on quotas: -2 on 0
[   38.137344][  T749] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4
[   38.268768][  T800] loop3: detected capacity change from 0 to 256
[   38.270099][  T749] attempt to access beyond end of device
[   38.270099][  T749] loop1: rw=2049, want=45104, limit=40427
[   38.483766][  T813] loop0: detected capacity change from 0 to 2048
[   38.636713][  T813] EXT4-fs (loop0): mounted filesystem without journal. Opts: barrier=0x0000000000000009,,errors=continue. Quota mode: none.
[   38.744639][  T832] loop1: detected capacity change from 0 to 1024
[   38.785243][  T832] EXT4-fs (loop1): Ignoring removed orlov option
[   38.804892][  T832] EXT4-fs (loop1): mounted filesystem without journal. Opts: orlov,min_batch_time=0x0000000000000004,,errors=continue. Quota mode: writeback.
[   38.899143][  T363] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[   39.168239][  T834] loop4: detected capacity change from 0 to 40427
[   39.200730][  T834] F2FS-fs (loop4): invalid crc value
[   39.215180][  T834] F2FS-fs (loop4): Found nat_bits in checkpoint
[   39.224988][  T815] loop2: detected capacity change from 0 to 131072
[   39.249190][  T815] F2FS-fs (loop2): invalid crc value
[   39.259218][  T363] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   39.284804][  T363] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   39.296800][  T815] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (15359802341028777995, 275811881701387)
[   39.318359][  T363] usb 4-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00
[   39.339099][  T363] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   39.358745][  T834] F2FS-fs (loop4): Cannot turn on quotas: -2 on 0
[   39.370618][  T363] usb 4-1: config 0 descriptor??
[   39.379633][  T834] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4
[   39.408402][  T815] F2FS-fs (loop2): Mounted with checkpoint version = 753bd00b
[   39.444446][  T834] attempt to access beyond end of device
[   39.444446][  T834] loop4: rw=2049, want=45104, limit=40427
[   39.850736][  T363] hid-steam 0003:28DE:1142.0006: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.3-1/input0
[   39.868929][  T363] hid-steam 0003:28DE:1142.0007: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.3-1/input0
[   39.949195][  T363] hid-steam 0003:28DE:1142.0006: Steam wireless receiver connected
[   40.029221][    T6] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[   40.070310][   T60] usb 4-1: USB disconnect, device number 3
[   40.077236][   T60] hid-steam 0003:28DE:1142.0006: Steam wireless receiver disconnected
[   40.269211][    T6] usb 5-1: Using ep0 maxpacket: 32
[   40.399217][    T6] usb 5-1: config 0 has an invalid interface number: 184 but max is 0
[   40.407481][    T6] usb 5-1: config 0 has no interface number 0
[   40.413866][    T6] usb 5-1: config 0 interface 184 has no altsetting 0
[   40.579673][    T6] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[   40.589411][    T6] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   40.604773][    T6] usb 5-1: Product: syz
[   40.609267][    T6] usb 5-1: Manufacturer: syz
[   40.614088][    T6] usb 5-1: SerialNumber: syz
[   40.636915][    T6] usb 5-1: config 0 descriptor??
[   40.704194][    T6] smsc75xx v1.0.0
[   40.780944][   T30] kauditd_printk_skb: 62 callbacks suppressed
[   40.780959][   T30] audit: type=1326 audit(1748862929.465:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=873 comm="syz.1.246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2694416969 code=0x7ffc0000
[   40.874631][  T870] loop0: detected capacity change from 0 to 40427
[   40.881429][   T30] audit: type=1326 audit(1748862929.465:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=873 comm="syz.1.246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2694416969 code=0x7ffc0000
[   40.909204][    T6] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71
[   40.924296][  T870] F2FS-fs (loop0): invalid crc value
[   40.937799][   T30] audit: type=1326 audit(1748862929.465:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=873 comm="syz.1.246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7f2694416969 code=0x7ffc0000
[   40.939217][    T6] smsc75xx: probe of 5-1:0.184 failed with error -71
[   40.962165][   T30] audit: type=1326 audit(1748862929.465:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=873 comm="syz.1.246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2694416969 code=0x7ffc0000
[   41.006809][  T870] F2FS-fs (loop0): Found nat_bits in checkpoint
[   41.011895][    T6] usb 5-1: USB disconnect, device number 3
[   41.038854][   T30] audit: type=1326 audit(1748862929.465:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=873 comm="syz.1.246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2694416969 code=0x7ffc0000
[   41.083745][  T870] F2FS-fs (loop0): Cannot turn on quotas: -2 on 0
[   41.094220][   T30] audit: type=1326 audit(1748862929.465:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=873 comm="syz.1.246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=89 compat=0 ip=0x7f2694416969 code=0x7ffc0000
[   41.122870][   T30] audit: type=1326 audit(1748862929.465:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=873 comm="syz.1.246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2694416969 code=0x7ffc0000
[   41.146416][  T870] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4
[   41.149893][   T30] audit: type=1326 audit(1748862929.465:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=873 comm="syz.1.246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2694416969 code=0x7ffc0000
[   41.177955][   T30] audit: type=1400 audit(1748862929.525:359): avc:  denied  { write } for  pid=879 comm="syz.2.238" name="kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[   41.208500][  T870] attempt to access beyond end of device
[   41.208500][  T870] loop0: rw=2049, want=45104, limit=40427
[   41.292551][  T289] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[   41.669192][  T289] usb 3-1: config 1 has an invalid descriptor of length 118, skipping remainder of the config
[   41.679901][  T289] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[   41.759952][   T30] audit: type=1400 audit(1748862930.445:360): avc:  denied  { create } for  pid=903 comm="syz.0.257" name="file2" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[   41.780649][  T289] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[   41.796367][  T289] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[   41.810398][  T289] usb 3-1: SerialNumber: syz
[   41.819092][   T60] usb 5-1: new full-speed USB device number 4 using dummy_hcd
[   42.100119][  T289] usb 3-1: 0:2 : does not exist
[   42.105326][  T289] usb 3-1: unit 255 not found!
[   42.189223][   T60] usb 5-1: config 0 has an invalid interface number: 184 but max is 0
[   42.197968][   T60] usb 5-1: config 0 has no interface number 0
[   42.204280][   T60] usb 5-1: config 0 interface 184 altsetting 7 endpoint 0x6 has invalid maxpacket 512, setting to 64
[   42.215853][   T60] usb 5-1: config 0 interface 184 altsetting 7 endpoint 0x82 has invalid maxpacket 512, setting to 64
[   42.227272][   T60] usb 5-1: config 0 interface 184 has no altsetting 0
[   42.309255][  T289] usb 3-1: 5:0: cannot get min/max values for control 3 (id 5)
[   42.352570][  T289] usb 3-1: USB disconnect, device number 3
[   42.399196][   T60] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[   42.408548][   T60] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   42.416664][   T60] usb 5-1: Product: syz
[   42.420863][   T60] usb 5-1: Manufacturer: syz
[   42.425451][   T60] usb 5-1: SerialNumber: syz
[   42.430946][   T60] usb 5-1: config 0 descriptor??
[   42.449322][  T849] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[   42.456525][  T849] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[   42.469708][   T60] smsc75xx v1.0.0
[   42.559499][  T306] udevd[306]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   42.670694][  T849] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[   42.689140][  T849] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[   42.757622][  T925] SELinux: ebitmap: truncated map
[   42.769626][  T925] SELinux: failed to load policy
[   42.882544][  T945] loop3: detected capacity change from 0 to 2048
[   42.915479][  T919] loop2: detected capacity change from 0 to 40427
[   42.949277][   T60] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[   42.950732][  T945] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[   42.966062][   T60] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71
[   42.983965][  T919] F2FS-fs (loop2): Unrecognized mount option "oll_forward" or missing value
[   42.993276][   T60] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind
[   43.004114][   T60] smsc75xx: probe of 5-1:0.184 failed with error -71
[   43.012610][   T60] usb 5-1: USB disconnect, device number 4
[   43.443428][ T1005] loop3: detected capacity change from 0 to 256
[   43.485947][ T1005] exfat: Deprecated parameter 'utf8'
[   43.492793][ T1005] exfat: Unknown parameter 'sys_tz'
[   43.619132][  T289] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[   43.661610][ T1025] loop3: detected capacity change from 0 to 512
[   43.715133][ T1033] loop0: detected capacity change from 0 to 256
[   43.725885][ T1025] EXT4-fs (loop3): Ignoring removed nobh option
[   43.740055][ T1025] EXT4-fs (loop3): mounted filesystem without journal. Opts: nobh,stripe=0x0000000000010000,dioread_nolock,,errors=continue. Quota mode: none.
[   43.859147][  T289] usb 2-1: Using ep0 maxpacket: 16
[   43.873324][ T1047] netlink: 20 bytes leftover after parsing attributes in process `syz.4.309'.
[   43.979281][  T289] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[   44.002853][  T289] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0
[   44.024210][  T289] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[   44.109127][  T500] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[   44.154496][ T1051] loop4: detected capacity change from 0 to 40427
[   44.177353][ T1051] F2FS-fs (loop4): invalid crc value
[   44.193933][ T1051] F2FS-fs (loop4): Found nat_bits in checkpoint
[   44.209201][  T289] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   44.219194][  T289] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   44.227817][  T289] usb 2-1: Product: syz
[   44.242380][  T289] usb 2-1: Manufacturer: syz
[   44.247033][  T289] usb 2-1: SerialNumber: syz
[   44.254487][ T1051] F2FS-fs (loop4): Start checkpoint disabled!
[   44.261936][ T1051] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6
[   44.359888][  T500] usb 4-1: Using ep0 maxpacket: 32
[   44.371365][ T1056] loop2: detected capacity change from 0 to 256
[   44.378491][    T8] attempt to access beyond end of device
[   44.378491][    T8] loop4: rw=2049, want=45104, limit=40427
[   44.397980][ T1040] loop0: detected capacity change from 0 to 131072
[   44.409882][ T1056] exfat: Deprecated parameter 'utf8'
[   44.415439][ T1056] exfat: Unknown parameter 'sys_tz'
[   44.425014][ T1040] F2FS-fs (loop0): Test dummy encryption mode enabled
[   44.460683][ T1040] F2FS-fs (loop0): invalid crc value
[   44.467792][ T1040] F2FS-fs (loop0): Found nat_bits in checkpoint
[   44.489178][  T500] usb 4-1: config 0 has an invalid interface number: 184 but max is 0
[   44.497627][  T500] usb 4-1: config 0 has no interface number 0
[   44.518684][  T500] usb 4-1: config 0 interface 184 has no altsetting 0
[   44.556035][ T1040] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[   44.639794][ T1075] netem: change failed
[   44.680067][ T1078] Dead loop on virtual device ip6_vti0, fix it urgently!
[   44.696212][ T1078] Dead loop on virtual device ip6_vti0, fix it urgently!
[   44.699311][  T500] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[   44.707274][ T1078] Dead loop on virtual device ip6_vti0, fix it urgently!
[   44.723716][ T1078] Dead loop on virtual device ip6_vti0, fix it urgently!
[   44.729331][  T289] usb 2-1: 2:1 : format type 0 is detected, processed as PCM
[   44.741198][ T1078] Dead loop on virtual device ip6_vti0, fix it urgently!
[   44.757841][  T500] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   44.764225][ T1078] Dead loop on virtual device ip6_vti0, fix it urgently!
[   44.776803][  T500] usb 4-1: Product: syz
[   44.784083][  T500] usb 4-1: Manufacturer: syz
[   44.789220][  T500] usb 4-1: SerialNumber: syz
[   44.799865][  T500] usb 4-1: config 0 descriptor??
[   44.801240][ T1084] loop4: detected capacity change from 0 to 2048
[   44.839537][  T500] smsc75xx v1.0.0
[   44.885205][ T1084] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[   44.998090][ T1099] loop4: detected capacity change from 0 to 512
[   45.059190][  T500] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71
[   45.071764][ T1099] EXT4-fs (loop4): Ignoring removed nobh option
[   45.080513][  T500] smsc75xx: probe of 4-1:0.184 failed with error -71
[   45.093042][ T1099] EXT4-fs (loop4): mounted filesystem without journal. Opts: nobh,stripe=0x0000000000010000,dioread_nolock,,errors=continue. Quota mode: none.
[   45.125954][  T500] usb 4-1: USB disconnect, device number 4
[   45.133999][ T1102] SELinux:  Context system_u:object_r:crond_var_run_t:s0 is not valid (left unmapped).
[   45.179272][   T20] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[   45.375611][ T1115] netlink: 20 bytes leftover after parsing attributes in process `syz.0.333'.
[   45.406472][ T1114] loop4: detected capacity change from 0 to 8192
[   45.415748][ T1117] kvm [1116]: vcpu0, guest rIP: 0xfff0 Hyper-V unhandled rdmsr: 0x4000008d
[   45.599283][  T289] usb 2-1: 2:1: cannot get freq at ep 0x82
[   45.622383][  T289] usb 2-1: USB disconnect, device number 3
[   45.719210][   T20] usb 3-1: New USB device found, idVendor=6189, idProduct=182d, bcdDevice= 1.73
[   45.729944][   T20] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   45.738230][   T20] usb 3-1: Product: syz
[   45.742498][   T20] usb 3-1: Manufacturer: syz
[   45.747105][   T20] usb 3-1: SerialNumber: syz
[   45.752620][   T20] usb 3-1: config 0 descriptor??
[   45.809137][   T39] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   45.830305][  T311] udevd[311]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   45.919127][  T941] usb 4-1: new full-speed USB device number 5 using dummy_hcd
[   46.049114][   T39] usb 1-1: Using ep0 maxpacket: 32
[   46.165980][   T30] kauditd_printk_skb: 41 callbacks suppressed
[   46.165997][   T30] audit: type=1326 audit(1748862934.845:402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1144 comm="syz.1.348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2694416969 code=0x7ffc0000
[   46.173557][   T39] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   46.202063][   T30] audit: type=1326 audit(1748862934.845:403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1144 comm="syz.1.348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2694416969 code=0x7ffc0000
[   46.214890][   T39] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   46.250060][   T30] audit: type=1326 audit(1748862934.845:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1144 comm="syz.1.348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2694416969 code=0x7ffc0000
[   46.273986][   T30] audit: type=1326 audit(1748862934.935:405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1144 comm="syz.1.348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2694416969 code=0x7ffc0000
[   46.280380][   T39] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[   46.299801][   T30] audit: type=1326 audit(1748862934.935:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1144 comm="syz.1.348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2694416969 code=0x7ffc0000
[   46.307910][   T39] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   46.341657][   T39] usb 1-1: config 0 descriptor??
[   46.359792][   T30] audit: type=1326 audit(1748862935.045:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1144 comm="syz.1.348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=109 compat=0 ip=0x7f2694416969 code=0x7ffc0000
[   46.386828][   T39] hub 1-1:0.0: USB hub found
[   46.391775][   T30] audit: type=1326 audit(1748862935.045:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1144 comm="syz.1.348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2694416969 code=0x7ffc0000
[   46.416265][  T941] usb 4-1: config 0 has an invalid interface number: 184 but max is 0
[   46.424578][   T30] audit: type=1326 audit(1748862935.045:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1144 comm="syz.1.348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2694416969 code=0x7ffc0000
[   46.436595][  T941] usb 4-1: config 0 has no interface number 0
[   46.455663][   T30] audit: type=1326 audit(1748862935.045:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1144 comm="syz.1.348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=247 compat=0 ip=0x7f2694416969 code=0x7ffc0000
[   46.463849][  T941] usb 4-1: config 0 interface 184 altsetting 7 endpoint 0x6 has invalid maxpacket 512, setting to 64
[   46.490147][   T30] audit: type=1326 audit(1748862935.135:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1144 comm="syz.1.348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2694416969 code=0x7ffc0000
[   46.520909][  T941] usb 4-1: config 0 interface 184 altsetting 7 endpoint 0x82 has invalid maxpacket 512, setting to 64
[   46.544330][  T941] usb 4-1: config 0 interface 184 has no altsetting 0
[   46.659174][   T39] hub 1-1:0.0: config failed, can't read hub descriptor (err -22)
[   46.689815][ T1162] netlink: 96 bytes leftover after parsing attributes in process `syz.1.355'.
[   46.709898][  T941] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[   46.720047][  T941] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   46.728866][  T941] usb 4-1: Product: syz
[   46.733576][  T941] usb 4-1: Manufacturer: syz
[   46.740059][  T941] usb 4-1: SerialNumber: syz
[   46.750126][  T941] usb 4-1: config 0 descriptor??
[   46.760092][   T39] usbhid 1-1:0.0: can't add hid device: -71
[   46.766091][   T39] usbhid: probe of 1-1:0.0 failed with error -71
[   46.789180][ T1042] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[   46.800404][ T1042] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[   46.807930][   T39] usb 1-1: USB disconnect, device number 2
[   46.829578][  T941] smsc75xx v1.0.0
[   46.849157][  T941] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71
[   46.869712][  T941] smsc75xx: probe of 4-1:0.184 failed with error -71
[   46.881436][  T941] usb 4-1: USB disconnect, device number 5
[   46.949315][   T20] asix 3-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random
[   46.966617][ T1175] APIC base relocation is unsupported by KVM
[   46.966926][ T1175] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4161288919 (266322490816 ns) > initial count (137746076160 ns). Using initial count to start timer.
[   47.118635][ T1198] loop1: detected capacity change from 0 to 512
[   47.159901][   T20] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[   47.170397][   T20] asix 3-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9
[   47.180974][   T20] asix: probe of 3-1:0.0 failed with error -71
[   47.188070][   T20] usb 3-1: USB disconnect, device number 4
[   47.195128][ T1198] EXT4-fs (loop1): Unrecognized mount option "fsname=[&!#" or missing value
[   47.219014][ T1198] netlink: 16 bytes leftover after parsing attributes in process `syz.1.371'.
[   47.260097][ T1205] loop0: detected capacity change from 0 to 512
[   47.295632][ T1205] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem
[   47.310306][ T1205] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c119, mo2=0002]
[   47.323702][ T1205] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2228: inode #15: comm syz.0.375: corrupted in-inode xattr
[   47.325824][ T1214] loop3: detected capacity change from 0 to 256
[   47.336649][ T1205] EXT4-fs error (device loop0): ext4_orphan_get:1406: comm syz.0.375: couldn't read orphan inode 15 (err -117)
[   47.354616][ T1205] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsold,max_batch_time=0x0000000000000001,debug,noload,nombcache,noblock_validity,init_itable=0x0000000000000601,inode_readahead_blks=0x0000000000008000,,errors=continue. Quota mode: none.
[   47.361702][ T1214] exfat: Deprecated parameter 'utf8'
[   47.436542][ T1214] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xc61f63e4, utbl_chksum : 0xe619d30d)
[   47.582191][ T1233] loop1: detected capacity change from 0 to 2048
[   47.611828][ T1242] input: syz1 as /devices/virtual/input/input5
[   47.635621][ T1245] loop3: detected capacity change from 0 to 512
[   47.647176][ T1233] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[   47.658268][ T1233] ext4 filesystem being mounted at /89/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   47.671984][ T1245] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem
[   47.721812][ T1245] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c119, mo2=0002]
[   47.739250][ T1245] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2228: inode #15: comm syz.3.391: corrupted in-inode xattr
[   47.775336][ T1245] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.391: couldn't read orphan inode 15 (err -117)
[   47.806901][ T1245] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsold,max_batch_time=0x0000000000000001,debug,noload,nombcache,noblock_validity,init_itable=0x0000000000000601,inode_readahead_blks=0x0000000000008000,,errors=continue. Quota mode: none.
[   47.870424][ T1270] loop4: detected capacity change from 0 to 512
[   47.878986][ T1270] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem
[   47.889692][ T1270] EXT4-fs (loop4): invalid journal inode
[   47.895412][ T1270] EXT4-fs (loop4): can't get journal size
[   47.916338][ T1270] EXT4-fs (loop4): 1 truncate cleaned up
[   47.932958][ T1270] EXT4-fs (loop4): mounted filesystem without journal. Opts: norecovery,,errors=continue. Quota mode: none.
[   47.992289][ T1283] binfmt_misc: register: failed to install interpreter file ./file2
[   48.119191][   T20] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[   48.145818][ T1305] netlink: 96 bytes leftover after parsing attributes in process `syz.4.417'.
[   48.178540][ T1311] loop4: detected capacity change from 0 to 16
[   48.216473][ T1315] ip_tunnel: non-ECT from 172.20.20.35 with TOS=0x3
[   48.223513][ T1311] erofs: (device loop4): mounted with root inode @ nid 36.
[   48.271667][ T1321] input: syz1 as /devices/virtual/input/input6
[   48.289390][    T6] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[   48.369576][ T1330] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4161288919 (266322490816 ns) > initial count (137746076160 ns). Using initial count to start timer.
[   48.489193][   T20] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[   48.500814][   T20] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   48.512299][   T20] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   48.522339][   T20] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[   48.620072][   T20] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[   48.629298][   T20] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[   48.637911][   T20] usb 1-1: Manufacturer: syz
[   48.639319][ T1356] loop2: detected capacity change from 0 to 256
[   48.646184][   T20] usb 1-1: config 0 descriptor??
[   48.659162][    T6] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   48.669791][    T6] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[   48.669885][ T1356] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d)
[   48.739232][  T500] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[   48.749476][    T6] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[   48.758893][    T6] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67
[   48.767443][    T6] usb 2-1: SerialNumber: syz
[   49.049806][    T6] usb 2-1: 0:2 : does not exist
[   49.082494][ T1367] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4161288919 (266322490816 ns) > initial count (137746076160 ns). Using initial count to start timer.
[   49.091042][    T6] usb 2-1: USB disconnect, device number 4
[   49.130083][   T20] appleir 0003:05AC:8243.0008: unknown main item tag 0x0
[   49.137512][   T20] appleir 0003:05AC:8243.0008: No inputs registered, leaving
[   49.146862][ T1370] capability: warning: `syz.3.447' uses 32-bit capabilities (legacy support in use)
[   49.153141][   T20] appleir 0003:05AC:8243.0008: hiddev96,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0
[   49.259488][  T500] usb 5-1: New USB device found, idVendor=6189, idProduct=182d, bcdDevice= 1.73
[   49.268812][  T500] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   49.277102][  T500] usb 5-1: Product: syz
[   49.281413][  T500] usb 5-1: Manufacturer: syz
[   49.286355][  T500] usb 5-1: SerialNumber: syz
[   49.292124][  T500] usb 5-1: config 0 descriptor??
[   49.310242][  T306] udevd[306]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   49.329597][ T1378] loop3: detected capacity change from 0 to 32768
[   49.360539][  T311]  loop3: p1 p2 p3 < p5 p6 >
[   49.365332][  T311] loop3: p1 size 242222080 extends beyond EOD, truncated
[   49.373696][  T311] loop3: p2 start 4294967295 is beyond EOD, truncated
[   49.384393][ T1378]  loop3: p1 p2 p3 < p5 p6 >
[   49.389707][ T1378] loop3: p1 size 242222080 extends beyond EOD, truncated
[   49.397409][ T1378] loop3: p2 start 4294967295 is beyond EOD, truncated
[   49.410216][    T6] usb 1-1: USB disconnect, device number 3
[   49.495883][  T303] udevd[303]: inotify_add_watch(7, /dev/loop3p5, 10) failed: No such file or directory
[   49.506829][  T772] udevd[772]: inotify_add_watch(7, /dev/loop3p6, 10) failed: No such file or directory
[   49.512972][  T311] udevd[311]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory
[   49.518935][  T306] udevd[306]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory
[   49.548526][  T303] udevd[303]: inotify_add_watch(7, /dev/loop3p5, 10) failed: No such file or directory
[   49.559667][  T772] udevd[772]: inotify_add_watch(7, /dev/loop3p6, 10) failed: No such file or directory
[   49.570764][  T306] udevd[306]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory
[   49.581875][  T311] udevd[311]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory
[   49.731408][ T1397] loop1: detected capacity change from 0 to 512
[   49.802814][ T1407] loop3: detected capacity change from 0 to 16
[   49.815141][ T1397] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem
[   49.829332][ T1397] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c119, mo2=0002]
[   49.838266][ T1397] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2228: inode #15: comm syz.1.458: corrupted in-inode xattr
[   49.849211][ T1407] erofs: (device loop3): mounted with root inode @ nid 36.
[   49.881157][ T1397] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.458: couldn't read orphan inode 15 (err -117)
[   49.893313][ T1397] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsold,max_batch_time=0x0000000000000001,debug,noload,nombcache,noblock_validity,init_itable=0x0000000000000601,inode_readahead_blks=0x0000000000008000,,errors=continue. Quota mode: none.
[   49.978667][ T1422] loop0: detected capacity change from 0 to 512
[   50.065403][ T1422] EXT4-fs (loop0): Unrecognized mount option "audit" or missing value
[   50.132436][ T1442] ip_tunnel: non-ECT from 172.20.20.35 with TOS=0x3
[   50.240543][ T1451] loop3: detected capacity change from 0 to 8192
[   50.419207][  T500] asix 5-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random
[   50.446238][ T1465] loop3: detected capacity change from 0 to 256
[   50.456005][ T1465] exfat: Deprecated parameter 'utf8'
[   50.461759][ T1465] exfat: Deprecated parameter 'namecase'
[   50.467604][ T1465] exfat: Deprecated parameter 'utf8'
[   50.489073][ T1465] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x389acbd6, utbl_chksum : 0xe619d30d)
[   50.629164][  T500] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[   50.639649][  T500] asix 5-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9
[   50.650143][  T500] asix: probe of 5-1:0.0 failed with error -71
[   50.658026][  T500] usb 5-1: USB disconnect, device number 5
[   50.858882][ T1482] loop1: detected capacity change from 0 to 512
[   50.880727][ T1482] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem
[   50.889392][ T1482] EXT4-fs (loop1): invalid journal inode
[   50.895179][ T1482] EXT4-fs (loop1): can't get journal size
[   50.903756][ T1482] EXT4-fs (loop1): 1 truncate cleaned up
[   50.910063][ T1482] EXT4-fs (loop1): mounted filesystem without journal. Opts: norecovery,,errors=continue. Quota mode: none.
[   51.074748][ T1494] xt_bpf: check failed: parse error
[   51.150776][ T1500] netlink: 96 bytes leftover after parsing attributes in process `syz.2.504'.
[   51.209943][   T30] kauditd_printk_skb: 102 callbacks suppressed
[   51.209957][   T30] audit: type=1326 audit(1748862939.895:514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1510 comm="syz.1.509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2694416969 code=0x7ffc0000
[   51.239959][   T30] audit: type=1326 audit(1748862939.895:515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1510 comm="syz.1.509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=125 compat=0 ip=0x7f2694416969 code=0x7ffc0000
[   51.263979][   T30] audit: type=1326 audit(1748862939.895:516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1510 comm="syz.1.509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2694416969 code=0x7ffc0000
[   51.288166][   T30] audit: type=1326 audit(1748862939.895:517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1510 comm="syz.1.509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2694416969 code=0x7ffc0000
[   51.404547][ T1513] netlink: 8 bytes leftover after parsing attributes in process `syz.1.511'.
[   51.459123][  T500] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[   51.514883][   T30] audit: type=1400 audit(1748862940.195:518): avc:  denied  { read write } for  pid=1529 comm="syz.3.529" name="rtc0" dev="devtmpfs" ino=259 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[   51.544156][   T30] audit: type=1400 audit(1748862940.225:519): avc:  denied  { open } for  pid=1529 comm="syz.3.529" path="/dev/rtc0" dev="devtmpfs" ino=259 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[   51.615189][   T30] audit: type=1326 audit(1748862940.295:520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1537 comm="syz.1.521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2694416969 code=0x7ffc0000
[   51.649861][   T30] audit: type=1326 audit(1748862940.295:521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1537 comm="syz.1.521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2694416969 code=0x7ffc0000
[   51.680185][   T30] audit: type=1326 audit(1748862940.295:522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1537 comm="syz.1.521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=61 compat=0 ip=0x7f2694416969 code=0x7ffc0000
[   51.709641][  T500] usb 3-1: Using ep0 maxpacket: 32
[   51.738841][   T30] audit: type=1326 audit(1748862940.295:523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1537 comm="syz.1.521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2694416969 code=0x7ffc0000
[   51.745739][ T1548] loop0: detected capacity change from 0 to 512
[   51.767560][ T1542] loop4: detected capacity change from 0 to 8192
[   51.777787][ T1548] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem
[   51.786926][ T1548] EXT4-fs (loop0): invalid journal inode
[   51.792912][ T1548] EXT4-fs (loop0): can't get journal size
[   51.800591][ T1548] EXT4-fs (loop0): 1 truncate cleaned up
[   51.806671][ T1548] EXT4-fs (loop0): mounted filesystem without journal. Opts: norecovery,,errors=continue. Quota mode: none.
[   51.839196][  T500] usb 3-1: config 0 has an invalid interface number: 184 but max is 0
[   51.853870][  T500] usb 3-1: config 0 has no interface number 0
[   51.861019][  T500] usb 3-1: config 0 interface 184 has no altsetting 0
[   51.876867][ T1553] xt_bpf: check failed: parse error
[   51.980155][ T1567] syz.4.534 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[   52.030291][ T1576] netlink: 8 bytes leftover after parsing attributes in process `syz.0.538'.
[   52.049219][  T500] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[   52.059286][  T500] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   52.067489][  T500] usb 3-1: Product: syz
[   52.072088][  T500] usb 3-1: Manufacturer: syz
[   52.076767][  T500] usb 3-1: SerialNumber: syz
[   52.087479][  T500] usb 3-1: config 0 descriptor??
[   52.105305][ T1582] xt_bpf: check failed: parse error
[   52.140891][  T500] smsc75xx v1.0.0
[   52.359163][  T500] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71
[   52.379253][  T500] smsc75xx: probe of 3-1:0.184 failed with error -71
[   52.397717][  T500] usb 3-1: USB disconnect, device number 5
[   52.633099][ T1637] loop0: detected capacity change from 0 to 2048
[   52.662616][ T1637] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[   52.729116][ T1350] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[   52.969156][ T1350] usb 5-1: Using ep0 maxpacket: 32
[   53.089148][ T1350] usb 5-1: config 0 has an invalid interface number: 184 but max is 0
[   53.098344][ T1350] usb 5-1: config 0 has no interface number 0
[   53.105206][ T1350] usb 5-1: config 0 interface 184 has no altsetting 0
[   53.219189][  T941] usb 3-1: new full-speed USB device number 6 using dummy_hcd
[   53.279279][ T1350] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[   53.289538][ T1350] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   53.297961][ T1350] usb 5-1: Product: syz
[   53.302415][ T1350] usb 5-1: Manufacturer: syz
[   53.307018][ T1350] usb 5-1: SerialNumber: syz
[   53.312652][ T1350] usb 5-1: config 0 descriptor??
[   53.349777][ T1350] smsc75xx v1.0.0
[   53.589206][  T941] usb 3-1: config 0 has an invalid interface number: 184 but max is 0
[   53.597791][  T941] usb 3-1: config 0 has no interface number 0
[   53.605039][  T941] usb 3-1: config 0 interface 184 altsetting 7 endpoint 0x6 has invalid maxpacket 512, setting to 64
[   53.616697][  T941] usb 3-1: config 0 interface 184 altsetting 7 endpoint 0x82 has invalid maxpacket 512, setting to 64
[   53.628964][  T941] usb 3-1: config 0 interface 184 has no altsetting 0
[   53.742108][ T1682] netlink: 20 bytes leftover after parsing attributes in process `syz.3.587'.
[   53.789518][   T26] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[   53.809392][  T941] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[   53.820143][  T941] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   53.828847][  T941] usb 3-1: Product: syz
[   53.833384][  T941] usb 3-1: Manufacturer: syz
[   53.838220][  T941] usb 3-1: SerialNumber: syz
[   53.843272][   T60] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[   53.852734][  T941] usb 3-1: config 0 descriptor??
[   53.869355][ T1509] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[   53.876850][ T1509] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[   53.889683][  T941] smsc75xx v1.0.0
[   54.095215][ T1509] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[   54.102460][   T60] usb 1-1: Using ep0 maxpacket: 16
[   54.102595][ T1509] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[   54.169230][   T26] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[   54.180424][   T26] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   54.191713][   T26] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   54.201814][   T26] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[   54.219287][   T60] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[   54.230558][   T60] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0
[   54.240693][   T60] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[   54.289279][   T26] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[   54.298539][   T26] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[   54.306799][   T26] usb 2-1: Manufacturer: syz
[   54.312345][   T26] usb 2-1: config 0 descriptor??
[   54.339198][  T941] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[   54.351077][  T941] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71
[   54.360882][  T941] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind
[   54.371322][  T941] smsc75xx: probe of 3-1:0.184 failed with error -71
[   54.379337][  T941] usb 3-1: USB disconnect, device number 6
[   54.409385][   T60] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   54.418702][   T60] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   54.427335][   T60] usb 1-1: Product: syz
[   54.432206][   T60] usb 1-1: Manufacturer: syz
[   54.436826][   T60] usb 1-1: SerialNumber: syz
[   54.659234][ T1350] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000044: -71
[   54.670382][ T1350] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_DATA
[   54.699268][ T1350] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[   54.710198][ T1350] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71
[   54.719916][ T1350] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset
[   54.730506][ T1350] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71
[   54.740188][ T1350] smsc75xx: probe of 5-1:0.184 failed with error -71
[   54.748173][ T1350] usb 5-1: USB disconnect, device number 6
[   54.790073][   T26] appleir 0003:05AC:8243.0009: unknown main item tag 0x0
[   54.797620][   T26] appleir 0003:05AC:8243.0009: No inputs registered, leaving
[   54.806704][   T26] appleir 0003:05AC:8243.0009: hiddev96,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0
[   54.919268][   T60] usb 1-1: 2:1 : format type 0 is detected, processed as PCM
[   54.983248][ T1715] loop2: detected capacity change from 0 to 256
[   55.010010][ T1715] exfat: Deprecated parameter 'utf8'
[   55.015617][ T1715] exfat: Deprecated parameter 'namecase'
[   55.021815][ T1715] exfat: Deprecated parameter 'utf8'
[   55.045880][ T1715] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x389acbd6, utbl_chksum : 0xe619d30d)
[   55.063489][ T1717] syz.3.603 uses obsolete (PF_INET,SOCK_PACKET)
[   55.071435][  T289] usb 2-1: USB disconnect, device number 5
[   55.368157][ T1743] loop4: detected capacity change from 0 to 256
[   55.379334][ T1743] exfat: Deprecated parameter 'utf8'
[   55.384757][ T1743] exfat: Deprecated parameter 'namecase'
[   55.390787][ T1743] exfat: Deprecated parameter 'utf8'
[   55.412939][ T1743] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x389acbd6, utbl_chksum : 0xe619d30d)
[   55.789300][   T60] usb 1-1: 2:1: cannot get freq at ep 0x82
[   55.812415][   T60] usb 1-1: USB disconnect, device number 4
[   55.859133][  T289] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[   55.899133][  T941] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[   56.060126][  T311] udevd[311]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   56.229214][  T289] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   56.236001][ T1772] loop1: detected capacity change from 0 to 131072
[   56.241613][  T289] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0
[   56.258503][  T289] usb 3-1: config 0 interface 0 has no altsetting 0
[   56.265572][  T289] usb 3-1: New USB device found, idVendor=046d, idProduct=c534, bcdDevice= 0.00
[   56.275034][  T289] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   56.284303][  T289] usb 3-1: config 0 descriptor??
[   56.289295][  T941] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[   56.309959][  T941] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   56.325077][ T1772] F2FS-fs (loop1): Test dummy encryption mode enabled
[   56.334647][  T941] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   56.345181][  T941] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[   56.359377][ T1772] F2FS-fs (loop1): invalid crc value
[   56.381717][ T1772] F2FS-fs (loop1): Found nat_bits in checkpoint
[   56.392507][   T30] kauditd_printk_skb: 149 callbacks suppressed
[   56.392525][   T30] audit: type=1400 audit(1748862945.075:673): avc:  denied  { ioctl } for  pid=1796 comm="syz.3.638" path="socket:[21909]" dev="sockfs" ino=21909 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   56.437697][ T1772] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[   56.446817][   T30] audit: type=1400 audit(1748862945.125:674): avc:  denied  { mount } for  pid=1771 comm="syz.1.627" name="/" dev="loop1" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[   56.472986][  T941] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[   56.510363][  T941] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[   56.518720][  T941] usb 5-1: Manufacturer: syz
[   56.523165][ T1804] loop3: detected capacity change from 0 to 1024
[   56.541061][   T30] audit: type=1400 audit(1748862945.215:675): avc:  denied  { module_request } for  pid=1805 comm="syz.0.642" kmod="netdev-syz_tun" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[   56.572500][ T1804] EXT4-fs (loop3): Ignoring removed nobh option
[   56.576882][  T941] usb 5-1: config 0 descriptor??
[   56.581487][ T1804] EXT4-fs (loop3): Ignoring removed bh option
[   56.590646][ T1804] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   56.614167][   T30] audit: type=1400 audit(1748862945.295:676): avc:  denied  { write } for  pid=1771 comm="syz.1.627" name="/" dev="loop1" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   56.616376][ T1804] EXT4-fs (loop3): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000003,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback.
[   56.636028][   T30] audit: type=1400 audit(1748862945.295:677): avc:  denied  { add_name } for  pid=1771 comm="syz.1.627" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   56.689105][   T30] audit: type=1400 audit(1748862945.295:678): avc:  denied  { create } for  pid=1771 comm="syz.1.627" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1
[   56.730071][   T30] audit: type=1400 audit(1748862945.415:679): avc:  denied  { watch watch_reads } for  pid=1803 comm="syz.3.641" path="/159/file1" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   56.755389][   T30] audit: type=1400 audit(1748862945.435:680): avc:  denied  { create } for  pid=1803 comm="syz.3.641" name="control" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1
[   56.778633][  T289] logitech-djreceiver 0003:046D:C534.000A: unknown main item tag 0x0
[   56.787011][  T289] logitech-djreceiver 0003:046D:C534.000A: unknown main item tag 0x0
[   56.795548][  T289] logitech-djreceiver 0003:046D:C534.000A: unknown main item tag 0x0
[   56.805294][   T30] audit: type=1400 audit(1748862945.485:681): avc:  denied  { unmount } for  pid=285 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[   56.826554][  T289] logitech-djreceiver 0003:046D:C534.000A: unknown main item tag 0x0
[   56.838158][ T1816] incfs: Options parsing error. -22
[   56.846761][ T1816] incfs: mount failed -22
[   56.864370][   T30] audit: type=1400 audit(1748862945.545:682): avc:  denied  { create } for  pid=1817 comm="syz.0.650" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   56.881284][ T1818] xt_hashlimit: size too large, truncated to 1048576
[   57.001923][ T1350] usb 3-1: USB disconnect, device number 7
[   57.130501][  T941] appleir 0003:05AC:8243.000B: unknown main item tag 0x0
[   57.139566][  T941] appleir 0003:05AC:8243.000B: No inputs registered, leaving
[   57.167822][  T941] appleir 0003:05AC:8243.000B: hiddev96,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0
[   57.182592][ T1827] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=1827 comm=syz.0.652
[   57.195202][   T20] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[   57.376159][ T1851] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3
[   57.422050][   T26] usb 5-1: USB disconnect, device number 7
[   57.439127][   T20] usb 4-1: Using ep0 maxpacket: 16
[   57.559163][   T20] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[   57.576815][   T20] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0
[   57.586970][   T20] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[   57.703317][ T1884] tipc: Started in network mode
[   57.708491][ T1884] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711
[   57.718306][ T1884] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[   57.769290][   T20] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   57.780537][   T20] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   57.789775][   T20] usb 4-1: Product: syz
[   57.803618][   T20] usb 4-1: Manufacturer: syz
[   57.809396][   T20] usb 4-1: SerialNumber: syz
[   57.830768][ T1892] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3
[   57.984982][ T1903] loop2: detected capacity change from 0 to 2048
[   58.082931][ T1903] EXT4-fs (loop2): mounted filesystem without journal. Opts: delalloc,noload,acl,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none.
[   58.299259][   T20] usb 4-1: 2:1 : format type 0 is detected, processed as PCM
[   58.425071][ T1931] xt_hashlimit: size too large, truncated to 1048576
[   58.508560][ T1939] loop0: detected capacity change from 0 to 512
[   58.632775][ T1939] EXT4-fs (loop0): mounted filesystem without journal. Opts: quota,barrier=0x0000000000000007,grpjquota=,norecovery,usrquota,,errors=continue. Quota mode: writeback.
[   58.669213][ T1939] ext4 filesystem being mounted at /156/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   58.678541][ T1913] loop4: detected capacity change from 0 to 131072
[   58.701335][ T1939] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters
[   58.704042][ T1913] F2FS-fs (loop4): Test dummy encryption mode enabled
[   58.730081][ T1939] EXT4-fs error (device loop0): ext4_acquire_dquot:6195: comm syz.0.700: Failed to acquire dquot type 1
[   58.739634][ T1913] F2FS-fs (loop4): invalid crc value
[   58.750054][  T289] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[   58.758541][ T1913] F2FS-fs (loop4): Found nat_bits in checkpoint
[   58.800864][ T1913] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[   59.109145][  T289] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[   59.128890][  T289] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   59.169168][   T20] usb 4-1: 2:1: cannot get freq at ep 0x82
[   59.180162][  T289] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   59.201450][   T20] usb 4-1: USB disconnect, device number 6
[   59.220452][  T289] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[   59.349208][  T289] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[   59.358309][  T289] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[   59.386998][  T289] usb 3-1: Manufacturer: syz
[   59.403564][  T289] usb 3-1: config 0 descriptor??
[   59.439798][  T311] udevd[311]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   59.519787][ T1965] netlink: 4 bytes leftover after parsing attributes in process `syz.4.708'.
[   59.779907][ T1974] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=1974 comm=syz.4.711
[   59.826823][ T1984] loop3: detected capacity change from 0 to 16
[   59.840236][ T1988] tmpfs: Unknown parameter 'я'
[   59.879538][ T1984] erofs: (device loop3): mounted with root inode @ nid 36.
[   59.899940][  T289] appleir 0003:05AC:8243.000C: unknown main item tag 0x0
[   59.908013][ T1984] erofs: (device loop3): z_erofs_readahead: readahead error at page 2 @ nid 89
[   59.921167][  T289] appleir 0003:05AC:8243.000C: No inputs registered, leaving
[   59.932051][   T48] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress 6887 in[4096, 0] out[8192]
[   59.978211][  T289] appleir 0003:05AC:8243.000C: hiddev96,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0
[   60.188042][ T2020] loop3: detected capacity change from 0 to 2048
[   60.202936][  T289] usb 3-1: USB disconnect, device number 8
[   60.253383][ T2020] EXT4-fs (loop3): mounted filesystem without journal. Opts: delalloc,noload,acl,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none.
[   60.401608][ T2037] loop1: detected capacity change from 0 to 2048
[   60.526336][ T2037] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[   60.855782][ T2063] loop2: detected capacity change from 0 to 512
[   60.966752][ T2063] EXT4-fs (loop2): mounted filesystem without journal. Opts: quota,barrier=0x0000000000000007,grpjquota=,norecovery,usrquota,,errors=continue. Quota mode: writeback.
[   61.069177][ T2063] ext4 filesystem being mounted at /132/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   61.109242][ T2063] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters
[   61.139326][ T2063] EXT4-fs error (device loop2): ext4_acquire_dquot:6195: comm syz.2.749: Failed to acquire dquot type 1
[   61.147106][ T2057] loop1: detected capacity change from 0 to 40427
[   61.218882][ T2081] netlink: 28 bytes leftover after parsing attributes in process `syz.0.756'.
[   61.234535][ T2057] F2FS-fs (loop1): fault_injection options not supported
[   61.249947][ T2057] F2FS-fs (loop1): invalid crc value
[   61.274701][ T2057] F2FS-fs (loop1): Found nat_bits in checkpoint
[   61.357577][ T2057] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[   61.403848][ T2057] attempt to access beyond end of device
[   61.403848][ T2057] loop1: rw=2049, want=45104, limit=40427
[   61.479429][  T289] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[   61.545903][   T30] kauditd_printk_skb: 77 callbacks suppressed
[   61.545917][   T30] audit: type=1400 audit(1748862950.225:756): avc:  denied  { bind } for  pid=2102 comm="syz.0.779" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   61.581666][   T30] audit: type=1400 audit(1748862950.255:757): avc:  denied  { node_bind } for  pid=2102 comm="syz.0.779" saddr=172.20.20.170 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1
[   61.790942][   T30] audit: type=1400 audit(1748862950.475:758): avc:  denied  { read write } for  pid=2120 comm="syz.1.775" name="fuse" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1
[   61.817110][   T30] audit: type=1400 audit(1748862950.495:759): avc:  denied  { open } for  pid=2120 comm="syz.1.775" path="/dev/fuse" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1
[   61.841092][   T30] audit: type=1400 audit(1748862950.495:760): avc:  denied  { mount } for  pid=2120 comm="syz.1.775" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1
[   61.889154][  T289] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[   61.900469][  T289] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   61.911715][  T289] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   61.921877][  T289] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[   62.009196][  T289] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[   62.019540][  T289] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[   62.027750][  T289] usb 4-1: Manufacturer: syz
[   62.037399][  T289] usb 4-1: config 0 descriptor??
[   62.239612][ T2124] loop4: detected capacity change from 0 to 40427
[   62.284600][ T2124] F2FS-fs (loop4): fault_injection options not supported
[   62.293808][ T2124] F2FS-fs (loop4): invalid crc value
[   62.300916][ T2124] F2FS-fs (loop4): Found nat_bits in checkpoint
[   62.331063][ T2124] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[   62.349735][ T2124] attempt to access beyond end of device
[   62.349735][ T2124] loop4: rw=2049, want=77960, limit=40427
[   62.367305][  T282] attempt to access beyond end of device
[   62.367305][  T282] loop4: rw=2049, want=45104, limit=40427
[   62.413155][   T30] audit: type=1400 audit(1748862951.095:761): avc:  denied  { read } for  pid=2128 comm="syz.2.789" name="kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[   62.438688][   T30] audit: type=1400 audit(1748862951.095:762): avc:  denied  { open } for  pid=2128 comm="syz.2.789" path="/dev/kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[   62.473004][   T30] audit: type=1400 audit(1748862951.095:763): avc:  denied  { ioctl } for  pid=2128 comm="syz.2.789" path="/dev/kvm" dev="devtmpfs" ino=82 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[   62.500110][  T289] appleir 0003:05AC:8243.000D: unknown main item tag 0x0
[   62.520063][  T289] appleir 0003:05AC:8243.000D: No inputs registered, leaving
[   62.539483][  T289] appleir 0003:05AC:8243.000D: hiddev96,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0
[   62.633093][   T30] audit: type=1400 audit(1748862951.315:764): avc:  denied  { unmount } for  pid=285 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1
[   62.662213][ T2141] loop4: detected capacity change from 0 to 2048
[   62.704740][   T30] audit: type=1400 audit(1748862951.385:765): avc:  denied  { execute } for  pid=2144 comm="syz.1.783" name="file0" dev="tmpfs" ino=934 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[   62.783001][ T2141] EXT4-fs (loop4): mounted filesystem without journal. Opts: delalloc,noload,acl,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none.
[   62.800107][  T289] usb 4-1: USB disconnect, device number 7
[   62.830739][ T2155] loop1: detected capacity change from 0 to 512
[   62.930345][ T2155] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   62.973330][ T2155] ext4 filesystem being mounted at /174/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   63.081867][ T2165] loop2: detected capacity change from 0 to 512
[   63.166039][ T2165] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   63.203511][ T2165] ext4 filesystem being mounted at /138/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   63.270141][ T2165] EXT4-fs error (device loop2): ext4_do_update_inode:5234: inode #2: comm syz.2.791: corrupted inode contents
[   63.369372][ T2165] EXT4-fs error (device loop2): ext4_dirty_inode:6070: inode #2: comm syz.2.791: mark_inode_dirty error
[   63.402914][ T2165] EXT4-fs error (device loop2): ext4_do_update_inode:5234: inode #2: comm syz.2.791: corrupted inode contents
[   63.484379][ T2195] EXT4-fs error (device loop2): ext4_do_update_inode:5234: inode #2: comm syz.2.791: corrupted inode contents
[   63.537696][ T2195] EXT4-fs error (device loop2): ext4_setattr:5495: inode #2: comm syz.2.791: mark_inode_dirty error
[   63.713547][ T2223] loop0: detected capacity change from 0 to 512
[   63.721600][ T2226] netlink: 104 bytes leftover after parsing attributes in process `syz.1.819'.
[   63.728623][ T2227] loop2: detected capacity change from 0 to 512
[   63.760151][ T2223] EXT4-fs (loop0): Ignoring removed mblk_io_submit option
[   63.767816][ T2223] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended
[   63.803240][ T2227] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback.
[   63.826165][ T2227] ext4 filesystem being mounted at /139/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   63.866894][ T2223] EXT4-fs error (device loop0): ext4_acquire_dquot:6195: comm syz.0.820: Failed to acquire dquot type 1
[   63.880717][ T2205] loop3: detected capacity change from 0 to 40427
[   63.908683][ T2223] EXT4-fs (loop0): Remounting filesystem read-only
[   63.908694][ T2240] loop1: detected capacity change from 0 to 512
[   63.933772][ T2205] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[   63.947358][ T2205] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[   63.957677][ T2223] EXT4-fs error (device loop0): mb_free_blocks:1865: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt.
[   63.974823][ T2223] EXT4-fs (loop0): Remounting filesystem read-only
[   63.993298][ T2223] EXT4-fs error (device loop0): ext4_do_update_inode:5234: inode #12: comm syz.0.820: corrupted inode contents
[   64.010476][ T2240] loop1: detected capacity change from 0 to 512
[   64.016886][ T2223] EXT4-fs (loop0): Remounting filesystem read-only
[   64.024377][ T2223] EXT4-fs error (device loop0): ext4_dirty_inode:6070: inode #12: comm syz.0.820: mark_inode_dirty error
[   64.039265][ T2205] F2FS-fs (loop3): Found nat_bits in checkpoint
[   64.059365][ T2223] EXT4-fs (loop0): Remounting filesystem read-only
[   64.066284][ T2223] EXT4-fs error (device loop0): ext4_do_update_inode:5234: inode #12: comm syz.0.820: corrupted inode contents
[   64.078773][ T2223] EXT4-fs (loop0): Remounting filesystem read-only
[   64.079818][ T2240] EXT4-fs error (device loop1): ext4_orphan_get:1401: inode #15: comm syz.1.824: casefold flag without casefold feature
[   64.085429][ T2223] EXT4-fs error (device loop0): __ext4_ext_dirty:183: inode #12: comm syz.0.820: mark_inode_dirty error
[   64.110125][ T2240] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.824: couldn't read orphan inode 15 (err -117)
[   64.123095][ T2223] EXT4-fs (loop0): Remounting filesystem read-only
[   64.129876][ T2223] EXT4-fs error (device loop0): ext4_do_update_inode:5234: inode #12: comm syz.0.820: corrupted inode contents
[   64.142326][ T2223] EXT4-fs (loop0): Remounting filesystem read-only
[   64.150357][ T2223] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem
[   64.162559][ T2223] EXT4-fs (loop0): Remounting filesystem read-only
[   64.169190][ T2223] EXT4-fs error (device loop0): ext4_do_update_inode:5234: inode #12: comm syz.0.820: corrupted inode contents
[   64.181740][ T2240] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[   64.193015][ T2223] EXT4-fs (loop0): Remounting filesystem read-only
[   64.196543][ T2205] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[   64.199611][ T2223] EXT4-fs error (device loop0): ext4_truncate:4304: inode #12: comm syz.0.820: mark_inode_dirty error
[   64.229919][ T2223] EXT4-fs (loop0): Remounting filesystem read-only
[   64.242372][ T2223] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem
[   64.251700][ T2223] EXT4-fs (loop0): Remounting filesystem read-only
[   64.258568][ T2223] EXT4-fs (loop0): 1 truncate cleaned up
[   64.264440][ T2205] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[   64.275938][ T2223] EXT4-fs (loop0): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000000200,noblock_validity,mblk_io_submit,nodiscard,noinit_itable,abort,nouid32,errors=remount-ro,resgid=0x000000000000ee002. Quota mode: writeback.
[   64.343595][ T2264] loop1: detected capacity change from 0 to 512
[   64.366743][ T2266] loop4: detected capacity change from 0 to 512
[   64.400703][ T2270] xt_hashlimit: size too large, truncated to 1048576
[   64.420742][ T2264] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   64.438547][ T2264] ext4 filesystem being mounted at /188/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   64.451801][ T2274] xt_hashlimit: size too large, truncated to 1048576
[   64.487387][ T2264] EXT4-fs error (device loop1): ext4_do_update_inode:5234: inode #2: comm syz.1.828: corrupted inode contents
[   64.536806][ T2266] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem
[   64.572047][ T2264] EXT4-fs error (device loop1): ext4_dirty_inode:6070: inode #2: comm syz.1.828: mark_inode_dirty error
[   64.587129][ T2266] EXT4-fs (loop4): invalid journal inode
[   64.599136][ T2266] EXT4-fs (loop4): can't get journal size
[   64.605950][ T2264] EXT4-fs error (device loop1): ext4_do_update_inode:5234: inode #2: comm syz.1.828: corrupted inode contents
[   64.618574][ T2266] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e016c118, mo2=0002]
[   64.629333][ T2266] System zones: 1-12, 13-13
[   64.634734][ T2280] EXT4-fs error (device loop1): ext4_do_update_inode:5234: inode #2: comm syz.1.828: corrupted inode contents
[   64.652777][ T2266] EXT4-fs (loop4): 1 truncate cleaned up
[   64.658567][ T2266] EXT4-fs (loop4): mounted filesystem without journal. Opts: norecovery,grpquota,debug,discard,,errors=continue. Quota mode: writeback.
[   64.693518][ T2280] EXT4-fs error (device loop1): ext4_setattr:5495: inode #2: comm syz.1.828: mark_inode_dirty error
[   64.802964][  T282] EXT4-fs error (device loop4): __ext4_iget:4924: inode #11: block 1828716567: comm syz-executor: invalid block
[   64.862843][  T282] EXT4-fs error (device loop4): __ext4_iget:4924: inode #11: block 1828716567: comm syz-executor: invalid block
[   65.243171][ T2309] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.246733][ T2304] loop1: detected capacity change from 0 to 40427
[   65.257503][ T2309] bridge0: port 1(bridge_slave_0) entered disabled state
[   65.268746][ T2309] device bridge_slave_0 entered promiscuous mode
[   65.276191][ T2309] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.283496][ T2309] bridge0: port 2(bridge_slave_1) entered disabled state
[   65.291903][ T2304] F2FS-fs (loop1): fault_injection options not supported
[   65.299645][ T2309] device bridge_slave_1 entered promiscuous mode
[   65.304561][ T2304] F2FS-fs (loop1): invalid crc value
[   65.330029][ T2304] F2FS-fs (loop1): Found nat_bits in checkpoint
[   65.404931][ T2304] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[   65.446885][ T2304] attempt to access beyond end of device
[   65.446885][ T2304] loop1: rw=2049, want=77960, limit=40427
[   65.469983][  T285] attempt to access beyond end of device
[   65.469983][  T285] loop1: rw=2049, want=45104, limit=40427
[   65.555571][ T2309] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.562777][ T2309] bridge0: port 2(bridge_slave_1) entered forwarding state
[   65.570263][ T2309] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.578203][ T2309] bridge0: port 1(bridge_slave_0) entered forwarding state
[   65.600903][    T8] device bridge_slave_1 left promiscuous mode
[   65.607577][    T8] bridge0: port 2(bridge_slave_1) entered disabled state
[   65.615722][    T8] device bridge_slave_0 left promiscuous mode
[   65.623516][    T8] bridge0: port 1(bridge_slave_0) entered disabled state
[   65.632606][    T8] device veth1_macvtap left promiscuous mode
[   65.847257][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   65.860910][   T10] bridge0: port 1(bridge_slave_0) entered disabled state
[   65.868509][   T10] bridge0: port 2(bridge_slave_1) entered disabled state
[   65.930435][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   65.947005][   T10] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.955422][   T10] bridge0: port 1(bridge_slave_0) entered forwarding state
[   65.965782][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   65.989876][   T10] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.996972][   T10] bridge0: port 2(bridge_slave_1) entered forwarding state
[   66.006069][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   66.014392][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   66.038129][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   66.057514][ T2309] device veth0_vlan entered promiscuous mode
[   66.065200][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   66.074293][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   66.092616][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   66.101071][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   66.129279][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   66.138683][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   66.153455][ T2309] device veth1_macvtap entered promiscuous mode
[   66.161296][ T2377] loop2: detected capacity change from 0 to 512
[   66.166458][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   66.182964][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   66.192640][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   66.197450][ T2377] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem
[   66.212948][ T2377] EXT4-fs (loop2): invalid journal inode
[   66.218384][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   66.218807][ T2377] EXT4-fs (loop2): can't get journal size
[   66.228128][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   66.236901][ T2377] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e016c118, mo2=0002]
[   66.250547][ T2377] System zones: 1-12, 13-13
[   66.255935][ T2377] EXT4-fs (loop2): 1 truncate cleaned up
[   66.278028][ T2377] EXT4-fs (loop2): mounted filesystem without journal. Opts: norecovery,grpquota,debug,discard,,errors=continue. Quota mode: writeback.
[   66.322424][ T2385] netlink: 27 bytes leftover after parsing attributes in process `syz.5.851'.
[   66.375907][  T284] EXT4-fs error (device loop2): __ext4_iget:4924: inode #11: block 1828716567: comm syz-executor: invalid block
[   66.388657][  T284] EXT4-fs error (device loop2): __ext4_iget:4924: inode #11: block 1828716567: comm syz-executor: invalid block
[   66.631007][ T2406] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.638689][ T2406] bridge0: port 1(bridge_slave_0) entered disabled state
[   66.646595][ T2406] device bridge_slave_0 entered promiscuous mode
[   66.656723][ T2406] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.664192][ T2406] bridge0: port 2(bridge_slave_1) entered disabled state
[   66.671850][ T2406] device bridge_slave_1 entered promiscuous mode
[   66.728106][ T2406] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.735291][ T2406] bridge0: port 2(bridge_slave_1) entered forwarding state
[   66.742716][ T2406] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.749946][ T2406] bridge0: port 1(bridge_slave_0) entered forwarding state
[   66.773671][ T2356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   66.782234][ T2356] bridge0: port 1(bridge_slave_0) entered disabled state
[   66.794806][ T2356] bridge0: port 2(bridge_slave_1) entered disabled state
[   66.813524][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   66.822979][    T8] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.830167][    T8] bridge0: port 1(bridge_slave_0) entered forwarding state
[   66.849233][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   66.858359][    T8] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.865476][    T8] bridge0: port 2(bridge_slave_1) entered forwarding state
[   66.880576][ T2414] netlink: 27 bytes leftover after parsing attributes in process `syz.0.896'.
[   66.896659][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   66.905557][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   66.934287][ T2416] loop0: detected capacity change from 0 to 2048
[   66.943570][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   66.958829][ T2418] loop3: detected capacity change from 0 to 512
[   66.964396][   T30] kauditd_printk_skb: 70 callbacks suppressed
[   66.964416][   T30] audit: type=1400 audit(1748862955.635:834): avc:  denied  { mount } for  pid=2415 comm="syz.0.897" name="/" dev="loop0" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1
[   66.974295][ T2406] device veth0_vlan entered promiscuous mode
[   67.002829][ T2356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   67.013327][ T2356] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   67.018267][   T30] audit: type=1400 audit(1748862955.695:835): avc:  denied  { unmount } for  pid=281 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1
[   67.021739][ T2356] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   67.056088][ T2356] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   67.064496][ T2356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   67.074451][ T2406] device veth1_macvtap entered promiscuous mode
[   67.087571][ T2356] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   67.099382][ T2418] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem
[   67.117846][ T2356] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   67.127537][ T2418] EXT4-fs (loop3): invalid journal inode
[   67.131901][ T2424] loop0: detected capacity change from 0 to 512
[   67.134680][ T2418] EXT4-fs (loop3): can't get journal size
[   67.146450][ T2356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   67.149654][ T2418] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e016c118, mo2=0002]
[   67.163373][ T2418] System zones: 1-12, 13-13
[   67.168381][   T45] device bridge_slave_1 left promiscuous mode
[   67.174803][ T2418] EXT4-fs (loop3): 1 truncate cleaned up
[   67.174999][   T45] bridge0: port 2(bridge_slave_1) entered disabled state
[   67.188890][   T45] device bridge_slave_0 left promiscuous mode
[   67.189757][ T2418] EXT4-fs (loop3): mounted filesystem without journal. Opts: norecovery,grpquota,debug,discard,,errors=continue. Quota mode: writeback.
[   67.196173][   T45] bridge0: port 1(bridge_slave_0) entered disabled state
[   67.216482][ T2424] EXT4-fs error (device loop0): ext4_init_orphan_info:586: comm syz.0.901: inode #0: comm syz.0.901: iget: illegal inode #
[   67.237576][   T45] device veth1_macvtap left promiscuous mode
[   67.248112][ T2424] EXT4-fs (loop0): get orphan inode failed
[   67.254338][   T45] device veth0_vlan left promiscuous mode
[   67.256782][ T2424] EXT4-fs (loop0): mount failed
[   67.269139][   T30] audit: type=1326 audit(1748862955.945:836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2395 comm="syz.1.889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2694416969 code=0x7fc00000
[   67.297120][   T30] audit: type=1326 audit(1748862955.945:837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2395 comm="syz.1.889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2694416969 code=0x7fc00000
[   67.329801][   T30] audit: type=1326 audit(1748862955.945:838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2395 comm="syz.1.889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2694416969 code=0x7fc00000
[   67.356492][   T30] audit: type=1326 audit(1748862955.945:839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2395 comm="syz.1.889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2694416969 code=0x7fc00000
[   67.388547][   T30] audit: type=1326 audit(1748862955.945:840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2395 comm="syz.1.889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2694416969 code=0x7fc00000
[   67.422583][  T283] EXT4-fs error (device loop3): __ext4_iget:4924: inode #11: block 1828716567: comm syz-executor: invalid block
[   67.456825][  T283] EXT4-fs error (device loop3): __ext4_iget:4924: inode #11: block 1828716567: comm syz-executor: invalid block
[   67.480626][   T30] audit: type=1326 audit(1748862955.945:841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2395 comm="syz.1.889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2694416969 code=0x7fc00000
[   67.482409][ T2433] input: syz0 as /devices/virtual/input/input7
[   67.506549][   T30] audit: type=1326 audit(1748862955.945:842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2395 comm="syz.1.889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2694416969 code=0x7fc00000
[   67.540666][   T30] audit: type=1326 audit(1748862955.945:843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2395 comm="syz.1.889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2694416969 code=0x7fc00000
[   67.611415][ T2437] capability: warning: `syz.5.906' uses deprecated v2 capabilities in a way that may be insecure
[   67.645266][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   67.659867][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   67.662789][ T2439] loop5: detected capacity change from 0 to 512
[   67.698614][ T2439] EXT4-fs error (device loop5): ext4_xattr_inode_iget:404: comm syz.5.907: inode #1: comm syz.5.907: iget: illegal inode #
[   67.715967][  T941] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[   67.720503][ T2439] EXT4-fs error (device loop5): ext4_xattr_inode_iget:409: comm syz.5.907: error while reading EA inode 1 err=-117
[   67.742597][ T2439] EXT4-fs warning (device loop5): ext4_expand_extra_isize_ea:2825: Unable to expand inode 15. Delete some EAs or run e2fsck.
[   67.756381][ T2439] EXT4-fs error (device loop5): ext4_xattr_inode_iget:404: comm syz.5.907: inode #1: comm syz.5.907: iget: illegal inode #
[   67.770005][ T2439] EXT4-fs error (device loop5): ext4_xattr_inode_iget:409: comm syz.5.907: error while reading EA inode 1 err=-117
[   67.784379][ T2439] EXT4-fs (loop5): 1 orphan inode deleted
[   67.791623][ T2439] EXT4-fs (loop5): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,nogrpid,debug_want_extra_isize=0x000000000000005c,minixdf,resgid=0x0000000000000000,sysvgroups,usrjquota=,,errors=continue. Quota mode: none.
[   67.892904][ T2451] xt_bpf: check failed: parse error
[   68.034692][ T2457] bridge0: port 1(bridge_slave_0) entered blocking state
[   68.042645][ T2457] bridge0: port 1(bridge_slave_0) entered disabled state
[   68.050834][ T2457] device bridge_slave_0 entered promiscuous mode
[   68.066405][ T2457] bridge0: port 2(bridge_slave_1) entered blocking state
[   68.073701][ T2457] bridge0: port 2(bridge_slave_1) entered disabled state
[   68.081687][ T2457] device bridge_slave_1 entered promiscuous mode
[   68.109180][  T941] usb 1-1: config 1 has an invalid descriptor of length 141, skipping remainder of the config
[   68.164738][  T941] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[   68.279154][  T941] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[   68.292928][  T941] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[   68.310239][  T941] usb 1-1: SerialNumber: syz
[   68.363126][  T413] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   68.372988][  T413] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   68.389683][ T2496] netlink: 8 bytes leftover after parsing attributes in process `syz.1.930'.
[   68.410070][  T413] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   68.420481][  T413] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   68.428928][  T413] bridge0: port 1(bridge_slave_0) entered blocking state
[   68.436953][  T413] bridge0: port 1(bridge_slave_0) entered forwarding state
[   68.455352][  T413] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   68.473650][  T413] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   68.480447][ T2489] loop6: detected capacity change from 0 to 40427
[   68.482338][  T413] bridge0: port 2(bridge_slave_1) entered blocking state
[   68.495928][  T413] bridge0: port 2(bridge_slave_1) entered forwarding state
[   68.500513][ T2489] F2FS-fs (loop6): fault_type options not supported
[   68.510122][  T413] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   68.513081][ T2489] F2FS-fs (loop6): invalid crc value
[   68.518852][  T413] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   68.525802][ T2489] F2FS-fs (loop6): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109)
[   68.540581][ T2500] netlink: 40 bytes leftover after parsing attributes in process `syz.5.932'.
[   68.562325][  T413] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   68.576159][ T2489] F2FS-fs (loop6): Start checkpoint disabled!
[   68.586870][  T413] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   68.598583][ T2457] device veth0_vlan entered promiscuous mode
[   68.605954][  T413] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   68.606058][ T2489] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6
[   68.615436][  T941] usb 1-1: 0:2 : does not exist
[   68.631902][  T413] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   68.640223][  T413] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   68.658218][ T2504] 9pnet: p9_errstr2errno: server reported unknown error ќ@ня0x0000000000000005
[   68.669428][  T941] usb 1-1: unit 214 not found!
[   68.694138][ T2356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   68.703590][  T941] usb 1-1: USB disconnect, device number 5
[   68.716358][ T2457] device veth1_macvtap entered promiscuous mode
[   68.730940][ T1136] udevd[1136]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   68.767893][ T2356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   68.787910][ T2509] loop1: detected capacity change from 0 to 8192
[   68.789826][ T2356] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   68.840448][   T45] device bridge_slave_1 left promiscuous mode
[   68.851485][ T2509] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF
[   68.861841][   T45] bridge0: port 2(bridge_slave_1) entered disabled state
[   68.870083][ T2509] FAT-fs (loop1): Filesystem has been set read-only
[   68.878214][   T45] device bridge_slave_0 left promiscuous mode
[   68.886135][   T45] bridge0: port 1(bridge_slave_0) entered disabled state
[   68.895117][   T45] device veth1_macvtap left promiscuous mode
[   68.901799][   T45] device veth0_vlan left promiscuous mode
[   69.158062][ T2547] loop1: detected capacity change from 0 to 1024
[   69.171489][ T2542] loop6: detected capacity change from 0 to 512
[   69.203393][ T2547] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[   69.254701][ T2542] EXT4-fs error (device loop6): ext4_xattr_inode_iget:404: comm syz.6.948: inode #1: comm syz.6.948: iget: illegal inode #
[   69.281431][ T2542] EXT4-fs error (device loop6): ext4_xattr_inode_iget:409: comm syz.6.948: error while reading EA inode 1 err=-117
[   69.285962][ T2547] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:3876: comm syz.1.951: Allocating blocks 497-513 which overlap fs metadata
[   69.329720][ T2542] EXT4-fs error (device loop6): ext4_xattr_inode_iget:404: comm syz.6.948: inode #1: comm syz.6.948: iget: illegal inode #
[   69.339273][ T2547] EXT4-fs (loop1): pa ffff8881119a50a8: logic 256, phys. 385, len 8
[   69.350674][ T2547] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:4893: group 0, free 0, pa_free 1
[   69.361233][ T2542] EXT4-fs error (device loop6): ext4_xattr_inode_iget:409: comm syz.6.948: error while reading EA inode 1 err=-117
[   69.374387][ T2542] EXT4-fs (loop6): 1 orphan inode deleted
[   69.380856][ T2542] EXT4-fs (loop6): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,nogrpid,debug_want_extra_isize=0x000000000000005c,minixdf,resgid=0x0000000000000000,sysvgroups,usrjquota=,,errors=continue. Quota mode: none.
[   69.417495][ T2566] EXT4-fs error (device loop1): mb_free_blocks:1865: group 0, inode 15: block 129:freeing already freed block (bit 8); block bitmap corrupt.
[   69.536084][ T2580] loop5: detected capacity change from 0 to 512
[   69.558608][ T2583] loop1: detected capacity change from 0 to 256
[   69.584378][ T2580] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem
[   69.642982][ T2580] EXT4-fs (loop5): invalid journal inode
[   69.648841][ T2580] EXT4-fs (loop5): can't get journal size
[   69.809423][ T2580] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e016c118, mo2=0002]
[   69.817457][ T2580] System zones: 1-12, 13-13
[   69.899222][ T2580] EXT4-fs (loop5): 1 truncate cleaned up
[   69.904909][ T2580] EXT4-fs (loop5): mounted filesystem without journal. Opts: norecovery,grpquota,debug,discard,,errors=continue. Quota mode: writeback.
[   70.109602][ T2583] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   70.289066][ T2583] exFAT-fs (loop1): Medium has reported failures. Some data may be lost.
[   70.501746][ T2583] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[   72.939996][   T30] kauditd_printk_skb: 40 callbacks suppressed
[   72.940012][   T30] audit: type=1400 audit(1748862961.625:884): avc:  denied  { rename } for  pid=2581 comm="syz.1.963" name="file1" dev="loop1" ino=1048636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   73.189542][   T30] audit: type=1400 audit(1748862961.655:885): avc:  denied  { unlink } for  pid=2581 comm="syz.1.963" name="file0" dev="loop1" ino=1048637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   73.374801][ T2596] xt_hashlimit: size too large, truncated to 1048576
[   73.386302][ T2583] exFAT-fs (loop1): error, failed to bmap (inode : ffff888111beb8e0 iblock : 0, err : -5)
[   73.399283][ T2583] exFAT-fs (loop1): Filesystem has been set read-only
[   73.474101][ T2606] SELinux:  Context system_u:object_r:dhcp_state_t:s0 is not valid (left unmapped).
[   73.487485][ T2608] xt_hashlimit: size too large, truncated to 1048576
[   73.499396][   T30] audit: type=1400 audit(1748862962.185:886): avc:  denied  { relabelto } for  pid=2605 comm="syz.5.974" name="vcsa" dev="devtmpfs" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:dhcp_state_t:s0"
[   73.568288][   T30] audit: type=1400 audit(1748862962.185:887): avc:  denied  { associate } for  pid=2605 comm="syz.5.974" name="vcsa" dev="devtmpfs" ino=15 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 srawcon="system_u:object_r:dhcp_state_t:s0"
[   73.606241][ T2615] loop5: detected capacity change from 0 to 512
[   73.727828][ T2615] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   73.742302][ T2615] ext4 filesystem being mounted at /26/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   73.807938][   T30] audit: type=1326 audit(1748862962.485:888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2622 comm="syz.1.990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2694416969 code=0x7ffc0000
[   73.869202][   T30] audit: type=1326 audit(1748862962.515:889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2622 comm="syz.1.990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2694416969 code=0x7ffc0000
[   73.899093][   T20] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[   73.927703][ T2627] netlink: 8 bytes leftover after parsing attributes in process `syz.5.980'.
[   73.955184][   T30] audit: type=1326 audit(1748862962.515:890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2622 comm="syz.1.990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2694416969 code=0x7ffc0000
[   74.025882][   T30] audit: type=1326 audit(1748862962.515:891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2622 comm="syz.1.990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2694416969 code=0x7ffc0000
[   74.079084][   T30] audit: type=1326 audit(1748862962.515:892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2622 comm="syz.1.990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2694416969 code=0x7ffc0000
[   74.129075][   T30] audit: type=1326 audit(1748862962.515:893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2622 comm="syz.1.990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2694416969 code=0x7ffc0000
[   74.269239][   T20] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   74.287276][   T20] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   74.317614][   T20] usb 8-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00
[   74.333736][   T20] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   74.346260][   T20] usb 8-1: config 0 descriptor??
[   74.360727][ T2650] binfmt_misc: register: failed to install interpreter file ./file0
[   74.591282][ T2662] overlayfs: conflicting options: nfs_export=on,metacopy=on
[   74.831937][   T20] arvo 0003:1E7D:30D4.000E: unknown main item tag 0x0
[   74.838879][   T20] arvo 0003:1E7D:30D4.000E: unknown main item tag 0x0
[   74.849838][   T20] arvo 0003:1E7D:30D4.000E: unknown main item tag 0x0
[   74.856679][   T20] arvo 0003:1E7D:30D4.000E: unknown main item tag 0x0
[   74.864326][   T20] arvo 0003:1E7D:30D4.000E: unknown main item tag 0x0
[   74.918500][   T20] arvo 0003:1E7D:30D4.000E: unknown main item tag 0x0
[   74.926588][   T20] arvo 0003:1E7D:30D4.000E: unknown main item tag 0x0
[   74.936463][   T20] arvo 0003:1E7D:30D4.000E: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.7-1/input0
[   75.036922][ T2721] loop5: detected capacity change from 0 to 512
[   75.087620][ T2721] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   75.123253][ T2715] bridge0: port 1(bridge_slave_0) entered blocking state
[   75.131417][ T2715] bridge0: port 1(bridge_slave_0) entered disabled state
[   75.140214][ T2715] device bridge_slave_0 entered promiscuous mode
[   75.147730][ T2715] bridge0: port 2(bridge_slave_1) entered blocking state
[   75.155828][ T2715] bridge0: port 2(bridge_slave_1) entered disabled state
[   75.164207][ T2715] device bridge_slave_1 entered promiscuous mode
[   75.179782][ T2721] EXT4-fs (loop5): 1 orphan inode deleted
[   75.186172][ T2721] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   75.209577][ T2721] ext4 filesystem being mounted at /38/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   75.255259][   T20] usb 8-1: USB disconnect, device number 2
[   75.308809][ T2742] loop5: detected capacity change from 0 to 512
[   75.347180][ T2742] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   75.359451][   T39] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[   75.367696][ T2742] ext4 filesystem being mounted at /40/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   75.386436][ T2742] EXT4-fs error (device loop5): ext4_do_update_inode:5234: inode #2: comm syz.5.1034: corrupted inode contents
[   75.404528][ T2742] EXT4-fs error (device loop5): ext4_dirty_inode:6070: inode #2: comm syz.5.1034: mark_inode_dirty error
[   75.409200][ T2715] bridge0: port 2(bridge_slave_1) entered blocking state
[   75.424124][ T2742] EXT4-fs error (device loop5): ext4_do_update_inode:5234: inode #2: comm syz.5.1034: corrupted inode contents
[   75.428640][ T2715] bridge0: port 2(bridge_slave_1) entered forwarding state
[   75.442359][ T2742] EXT4-fs error (device loop5): __ext4_ext_dirty:183: inode #2: comm syz.5.1034: mark_inode_dirty error
[   75.449471][ T2715] bridge0: port 1(bridge_slave_0) entered blocking state
[   75.468129][ T2715] bridge0: port 1(bridge_slave_0) entered forwarding state
[   75.480015][   T45] tipc: Left network mode
[   75.502745][ T2742] SELinux:  Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped).
[   75.504497][ T2356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   75.522059][ T2742] EXT4-fs error (device loop5): ext4_do_update_inode:5234: inode #2: comm syz.5.1034: corrupted inode contents
[   75.532726][ T2356] bridge0: port 1(bridge_slave_0) entered disabled state
[   75.539591][ T2742] EXT4-fs error (device loop5): ext4_dirty_inode:6070: inode #2: comm syz.5.1034: mark_inode_dirty error
[   75.554544][ T2356] bridge0: port 2(bridge_slave_1) entered disabled state
[   75.554808][ T2742] EXT4-fs error (device loop5): ext4_do_update_inode:5234: inode #2: comm syz.5.1034: corrupted inode contents
[   75.574976][ T2751] EXT4-fs error (device loop5): ext4_do_update_inode:5234: inode #2: comm syz.5.1034: corrupted inode contents
[   75.588238][ T2751] EXT4-fs error (device loop5): ext4_setent:3709: inode #2: comm syz.5.1034: mark_inode_dirty error
[   75.603922][ T2750] tipc: Enabling <eth:lo> not permitted
[   75.609705][ T2750] tipc: Enabling of bearer <eth:lo> rejected, failed to enable media
[   75.620599][ T2356] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   75.629261][ T2356] bridge0: port 1(bridge_slave_0) entered blocking state
[   75.636340][ T2356] bridge0: port 1(bridge_slave_0) entered forwarding state
[   75.650978][ T2754] loop0: detected capacity change from 0 to 256
[   75.658424][ T2356] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   75.667082][ T2356] bridge0: port 2(bridge_slave_1) entered blocking state
[   75.674358][ T2356] bridge0: port 2(bridge_slave_1) entered forwarding state
[   75.708853][ T2356] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   75.709266][ T2754] incfs: Can't find or create .incomplete dir in ./bus
[   75.727033][ T2356] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   75.733776][ T2754] incfs: mount failed -28
[   75.739229][   T39] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   75.759089][   T39] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   75.769610][   T39] usb 7-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af
[   75.771397][ T2715] device veth0_vlan entered promiscuous mode
[   75.779616][   T39] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   75.801055][ T2356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   75.826283][ T2356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   75.838981][   T39] usb 7-1: config 0 descriptor??
[   75.855948][ T2356] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   75.856973][ T2760] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1041'.
[   75.872970][ T2356] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   75.897945][ T2356] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   75.909479][ T2356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   75.936267][ T2715] device veth1_macvtap entered promiscuous mode
[   75.957519][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   75.971778][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   76.010237][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   76.043562][ T2758] loop5: detected capacity change from 0 to 40427
[   76.053245][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   76.069435][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   76.122060][ T2758] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12
[   76.152660][ T2758] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[   76.199816][ T2758] F2FS-fs (loop5): Found nat_bits in checkpoint
[   76.289154][ T2758] F2FS-fs (loop5): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix.
[   76.308504][ T2758] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0
[   76.316441][ T2758] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[   76.399140][   T39] usbhid 7-1:0.0: can't add hid device: -71
[   76.406306][   T39] usbhid: probe of 7-1:0.0 failed with error -71
[   76.417414][   T39] usb 7-1: USB disconnect, device number 2
[   76.472421][   T45] device bridge_slave_1 left promiscuous mode
[   76.488521][   T45] bridge0: port 2(bridge_slave_1) entered disabled state
[   76.508006][   T45] device bridge_slave_0 left promiscuous mode
[   76.523970][   T45] bridge0: port 1(bridge_slave_0) entered disabled state
[   76.530849][ T2816] loop8: detected capacity change from 0 to 2048
[   76.553359][   T45] device veth1_macvtap left promiscuous mode
[   76.559878][   T45] device veth0_vlan left promiscuous mode
[   76.675673][ T2818] sch_fq: defrate 2048 ignored.
[   76.893329][ T2833] loop5: detected capacity change from 0 to 1024
[   76.996328][ T2833] EXT4-fs error (device loop5): ext4_ext_check_inode:501: inode #11: comm syz.5.1071: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512)
[   77.039220][ T2833] EXT4-fs error (device loop5): ext4_orphan_get:1406: comm syz.5.1071: couldn't read orphan inode 11 (err -117)
[   77.058251][ T2855] input: syz0 as /devices/virtual/input/input8
[   77.066462][ T2833] EXT4-fs (loop5): mounted filesystem without journal. Opts: mb_optimize_scan=0x0000000000000001,nodiscard,nodelalloc,usrquota,nolazytime,noblock_validity,block_validity,barrier,,errors=continue. Quota mode: writeback.
[   77.133547][ T2833] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:476: comm syz.5.1071: Invalid block bitmap block 0 in block_group 0
[   77.161805][ T2833] EXT4-fs error (device loop5): ext4_acquire_dquot:6195: comm syz.5.1071: Failed to acquire dquot type 0
[   77.189590][ T2868] loop0: detected capacity change from 0 to 1024
[   77.211739][   T45] EXT4-fs error (device loop5): ext4_release_dquot:6231: comm kworker/u4:2: Failed to release dquot type 0
[   77.243719][ T2868] EXT4-fs (loop0): Ignoring removed orlov option
[   77.256937][ T2868] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option
[   77.282063][ T2880] device syz_tun entered promiscuous mode
[   77.284438][ T2868] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   77.317580][ T2880] device macsec1 entered promiscuous mode
[   77.337496][ T2880] device syz_tun left promiscuous mode
[   77.347645][ T2868] EXT4-fs (loop0): mounted filesystem without journal. Opts: noblock_validity,noquota,block_validity,norecovery,dioread_nolock,orlov,noquota,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none.
[   77.525614][ T2912] loop0: detected capacity change from 0 to 1024
[   77.539117][   T60] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[   77.554432][ T2912] EXT4-fs (loop0): Ignoring removed orlov option
[   77.582412][ T2912] EXT4-fs (loop0): mounted filesystem without journal. Opts: orlov,min_batch_time=0x0000000000000004,,errors=continue. Quota mode: writeback.
[   77.691151][ T2924] loop8: detected capacity change from 0 to 1024
[   77.707933][ T2924] EXT4-fs (loop8): Ignoring removed orlov option
[   77.718345][ T2924] EXT4-fs (loop8): Ignoring removed nomblk_io_submit option
[   77.743597][ T2924] EXT4-fs (loop8): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none.
[   77.860965][ T2934] netlink: 72 bytes leftover after parsing attributes in process `syz.8.1113'.
[   77.871488][ T2934] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1113'.
[   77.892365][ T2936] xt_bpf: check failed: parse error
[   77.919229][   T60] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   77.943718][   T60] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   77.971035][   T60] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[   77.985396][   T60] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   77.995174][   T60] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   78.022876][   T60] usb 7-1: config 0 descriptor??
[   78.062051][   T30] kauditd_printk_skb: 184 callbacks suppressed
[   78.062066][   T30] audit: type=1400 audit(1748862966.745:1075): avc:  denied  { write } for  pid=2945 comm="syz.5.1120" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   78.123441][   T30] audit: type=1400 audit(1748862966.795:1076): avc:  denied  { write } for  pid=2947 comm="syz.5.1121" name="kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[   78.214820][   T30] audit: type=1326 audit(1748862966.875:1077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2950 comm="syz.8.1122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0706e24969 code=0x7ffc0000
[   78.255571][   T30] audit: type=1326 audit(1748862966.875:1078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2950 comm="syz.8.1122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0706e24969 code=0x7ffc0000
[   78.283086][   T30] audit: type=1326 audit(1748862966.875:1079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2950 comm="syz.8.1122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=226 compat=0 ip=0x7f0706e24969 code=0x7ffc0000
[   78.312884][   T30] audit: type=1326 audit(1748862966.875:1080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2950 comm="syz.8.1122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0706e24969 code=0x7ffc0000
[   78.350248][   T30] audit: type=1326 audit(1748862966.875:1081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2950 comm="syz.8.1122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0706e24969 code=0x7ffc0000
[   78.426689][   T30] audit: type=1400 audit(1748862967.095:1082): avc:  denied  { wake_alarm } for  pid=2965 comm="syz.7.1129" capability=35  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[   78.502887][   T30] audit: type=1400 audit(1748862967.185:1083): avc:  denied  { load_policy } for  pid=2967 comm="syz.8.1130" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1
[   78.510013][ T2968] SELinux: failed to load policy
[   78.540516][   T60] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x6
[   78.544207][ T2972] loop7: detected capacity change from 0 to 1024
[   78.562834][   T60] plantronics 0003:047F:FFFF.000F: No inputs registered, leaving
[   78.582553][   T60] plantronics 0003:047F:FFFF.000F: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0
[   78.669997][   T30] audit: type=1326 audit(1748862967.355:1084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2977 comm="syz.5.1135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafd5ec1969 code=0x7ffc0000
[   78.699967][ T2972] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[   78.740094][ T2972] EXT4-fs error (device loop7): __ext4_new_inode:1076: comm syz.7.1132: reserved inode found cleared - inode=18
[   78.831716][   T60] usb 7-1: USB disconnect, device number 3
[   78.842471][ T2993] loop0: detected capacity change from 0 to 512
[   78.867437][ T2997] loop5: detected capacity change from 0 to 512
[   78.905336][ T2993] EXT4-fs (loop0): mounted filesystem without journal. Opts: data_err=ignore,barrier,nojournal_checksum,nombcache,barrier=0x0000000000000003,,errors=continue. Quota mode: writeback.
[   78.929215][  T500] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[   78.942349][ T2993] ext4 filesystem being mounted at /249/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   78.956106][ T2997] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   78.968430][ T2997] ext4 filesystem being mounted at /70/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   79.179194][  T500] usb 9-1: Using ep0 maxpacket: 32
[   79.299220][  T500] usb 9-1: config 0 has an invalid interface number: 67 but max is 0
[   79.307515][  T500] usb 9-1: config 0 has no interface number 0
[   79.339069][   T60] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[   79.436927][ T3054] loop0: detected capacity change from 0 to 1024
[   79.475000][ T3054] EXT4-fs (loop0): Ignoring removed oldalloc option
[   79.489179][  T500] usb 9-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[   79.499156][ T3054] EXT4-fs (loop0): Ignoring removed bh option
[   79.505887][ T3054] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   79.520768][  T500] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   79.529578][  T500] usb 9-1: Product: syz
[   79.533772][  T500] usb 9-1: Manufacturer: syz
[   79.538396][  T500] usb 9-1: SerialNumber: syz
[   79.545611][  T500] usb 9-1: config 0 descriptor??
[   79.565099][ T3054] EXT4-fs (loop0): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,usrquota,data_err=ignore,mb_optimize_scan=0x0000000000000001,oldalloc,grpquota,noload,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback.
[   79.609602][  T500] smsc95xx v2.0.0
[   79.629089][   T60] usb 6-1: Using ep0 maxpacket: 16
[   79.703494][ T3066] loop6: detected capacity change from 0 to 512
[   79.749528][   T60] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   79.749662][ T3066] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[   79.783615][   T60] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   79.794514][   T60] usb 6-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00
[   79.803431][ T3066] EXT4-fs (loop6): 1 truncate cleaned up
[   79.829449][ T3066] EXT4-fs (loop6): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,user_xattr,errors=remount-ro,quota,. Quota mode: writeback.
[   79.850829][   T60] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   79.869765][   T60] usb 6-1: config 0 descriptor??
[   79.884274][ T3073] loop0: detected capacity change from 0 to 1024
[   79.950609][ T3073] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[   80.059157][  T500] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[   80.070844][  T500] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[   80.217747][ T3094] loop0: detected capacity change from 0 to 512
[   80.301484][ T3094] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem
[   80.313618][ T3094] EXT4-fs (loop0): orphan cleanup on readonly fs
[   80.321947][ T3094] EXT4-fs (loop0): 1 truncate cleaned up
[   80.328783][ T3094] EXT4-fs (loop0): mounted filesystem without journal. Opts: nodiscard,resgid=0x0000000000000000,init_itable,noload,minixdf,usrjquota=,,errors=continue. Quota mode: none.
[   80.361993][   T60] input: HID 05ac:8241 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:05AC:8241.0010/input/input9
[   80.441200][   T60] appleir 0003:05AC:8241.0010: input,hiddev96,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.5-1/input0
[   80.519673][ T3100] loop7: detected capacity change from 0 to 512
[   80.535179][ T3102] loop0: detected capacity change from 0 to 2048
[   80.561153][ T3102] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[   80.571306][ T1350] usb 6-1: USB disconnect, device number 2
[   80.603064][ T3100] EXT4-fs (loop7): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000004739,inode_readahead_blks=0x0000000000000800,norecovery,,errors=continue. Quota mode: writeback.
[   80.628813][ T3100] ext4 filesystem being mounted at /57/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   80.769295][  T500] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000020: -71
[   80.771539][ T3120] loop0: detected capacity change from 0 to 2048
[   80.786187][  T500] smsc95xx: probe of 9-1:0.67 failed with error -71
[   80.805362][  T500] usb 9-1: USB disconnect, device number 2
[   80.850897][ T3120] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[   80.865422][ T3120] ext4 filesystem being mounted at /268/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   80.891854][ T3120] fs-verity: sha512 using implementation "sha512-avx2"
[   80.960838][ T3128] netlink: 96 bytes leftover after parsing attributes in process `syz.6.1194'.
[   81.019117][   T20] usb 8-1: new high-speed USB device number 3 using dummy_hcd
[   81.110047][ T3120] fs-verity (loop0, inode 13): Error -28 writing Merkle tree block 332944
[   81.122958][ T3120] fs-verity (loop0, inode 13): Error -28 building Merkle tree
[   81.399733][   T20] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   81.579156][   T20] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   81.599907][   T20] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   81.620077][   T20] usb 8-1: Product: syz
[   81.635153][   T20] usb 8-1: Manufacturer: syz
[   81.646697][   T20] usb 8-1: SerialNumber: syz
[   81.791741][ T3200] loop8: detected capacity change from 0 to 256
[   81.834599][ T3200] exFAT-fs (loop8): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x18b10316, utbl_chksum : 0xe619d30d)
[   81.885611][ T3209] loop6: detected capacity change from 0 to 16
[   81.898801][ T3200] exFAT-fs (loop8): bogus allocation bitmap size(need : 2, cur : 17179869186)
[   81.940342][ T3209] erofs: (device loop6): mounted with root inode @ nid 36.
[   81.967306][ T3211] netlink: 96 bytes leftover after parsing attributes in process `syz.5.1231'.
[   82.176695][ T3231] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1240'.
[   82.218637][ T3243] netlink: 'syz.6.1246': attribute type 10 has an invalid length.
[   82.681548][ T3282] netlink: 'syz.8.1265': attribute type 12 has an invalid length.
[   82.691379][ T3282] netlink: 'syz.8.1265': attribute type 29 has an invalid length.
[   82.700399][ T3282] netlink: 148 bytes leftover after parsing attributes in process `syz.8.1265'.
[   82.711028][ T3282] netlink: 'syz.8.1265': attribute type 1 has an invalid length.
[   82.789201][   T20] cdc_ncm 8-1:1.0: MAC-Address: 42:42:42:42:42:42
[   82.791471][ T3280] xt_hashlimit: size too large, truncated to 1048576
[   82.797848][   T20] cdc_ncm 8-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048
[   82.825780][   T20] cdc_ncm 8-1:1.0: setting rx_max = 2048
[   82.999122][   T20] cdc_ncm 8-1:1.0: setting tx_max = 88
[   83.010587][   T20] cdc_ncm 8-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.7-1, CDC NCM, 42:42:42:42:42:42
[   83.041282][   T20] usb 8-1: USB disconnect, device number 3
[   83.060792][   T20] cdc_ncm 8-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.7-1, CDC NCM
[   83.100768][ T3297] loop8: detected capacity change from 0 to 40427
[   83.121316][  T500] ==================================================================
[   83.130298][  T500] BUG: KASAN: use-after-free in __list_del_entry_valid+0xa6/0x120
[   83.138652][  T500] Read of size 8 at addr ffff88810dfc6c70 by task kworker/0:4/500
[   83.146795][  T500] 
[   83.149140][  T500] CPU: 0 PID: 500 Comm: kworker/0:4 Not tainted 5.15.184-syzkaller-00129-g4032a894ccb2 #0
[   83.159748][  T500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[   83.170528][  T500] Workqueue: wg-crypt-wg1 wg_packet_decrypt_worker
[   83.177411][  T500] Call Trace:
[   83.179716][   T30] kauditd_printk_skb: 138 callbacks suppressed
[   83.179732][   T30] audit: type=1400 audit(1748862971.865:1223): avc:  denied  { read } for  pid=140 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1
[   83.180697][  T500]  <TASK>
[   83.180706][  T500]  __dump_stack+0x21/0x30
[   83.217722][  T500]  dump_stack_lvl+0xee/0x150
[   83.222431][  T500]  ? show_regs_print_info+0x20/0x20
[   83.227991][  T500]  ? load_image+0x3a0/0x3a0
[   83.232605][  T500]  ? __queue_delayed_work+0x173/0x200
[   83.238443][  T500]  print_address_description+0x7f/0x2c0
[   83.244691][  T500]  ? __list_del_entry_valid+0xa6/0x120
[   83.251295][  T500]  kasan_report+0xf1/0x140
[   83.256075][  T500]  ? __list_del_entry_valid+0xa6/0x120
[   83.261797][  T500]  __asan_report_load8_noabort+0x14/0x20
[   83.267442][  T500]  __list_del_entry_valid+0xa6/0x120
[   83.272884][  T500]  process_one_work+0x453/0xba0
[   83.277832][  T500]  worker_thread+0xa59/0x1200
[   83.282518][  T500]  ? _raw_spin_lock_irqsave+0xb0/0x110
[   83.288098][  T500]  kthread+0x411/0x500
[   83.292258][  T500]  ? worker_clr_flags+0x190/0x190
[   83.297316][  T500]  ? kthread_blkcg+0xd0/0xd0
[   83.301996][  T500]  ret_from_fork+0x1f/0x30
[   83.306437][  T500]  </TASK>
[   83.309457][  T500] 
[   83.311771][  T500] Allocated by task 20:
[   83.315909][  T500]  __kasan_kmalloc+0xda/0x110
[   83.320581][  T500]  __kmalloc+0x13d/0x2c0
[   83.324941][  T500]  kvmalloc_node+0x242/0x330
[   83.329927][  T500]  alloc_netdev_mqs+0x8d/0xc90
[   83.334702][  T500]  alloc_etherdev_mqs+0x34/0x40
[   83.340058][  T500]  usbnet_probe+0x219/0x2860
[   83.344677][  T500]  usb_probe_interface+0x5ff/0xae0
[   83.350090][  T500]  really_probe+0x285/0x970
[   83.354597][  T500]  __driver_probe_device+0x198/0x280
[   83.360211][  T500]  driver_probe_device+0x54/0x3e0
[   83.365863][  T500]  __device_attach_driver+0x2a6/0x460
[   83.371246][  T500]  bus_for_each_drv+0x175/0x200
[   83.376288][  T500]  __device_attach+0x2a2/0x400
[   83.381055][  T500]  device_initial_probe+0x1a/0x20
[   83.386068][  T500]  bus_probe_device+0xc0/0x1e0
[   83.390859][  T500]  device_add+0xb31/0xed0
[   83.395580][  T500]  usb_set_configuration+0x19c2/0x1f10
[   83.401282][  T500]  usb_generic_driver_probe+0x91/0x150
[   83.406956][  T500]  usb_probe_device+0x148/0x260
[   83.412713][  T500]  really_probe+0x285/0x970
[   83.417350][  T500]  __driver_probe_device+0x198/0x280
[   83.422982][  T500]  driver_probe_device+0x54/0x3e0
[   83.428091][  T500]  __device_attach_driver+0x2a6/0x460
[   83.433462][  T500]  bus_for_each_drv+0x175/0x200
[   83.438720][  T500]  __device_attach+0x2a2/0x400
[   83.443668][  T500]  device_initial_probe+0x1a/0x20
[   83.448878][  T500]  bus_probe_device+0xc0/0x1e0
[   83.453742][  T500]  device_add+0xb31/0xed0
[   83.458529][  T500]  usb_new_device+0xd06/0x1620
[   83.463317][  T500]  hub_event+0x27d8/0x42c0
[   83.468140][  T500]  process_one_work+0x6be/0xba0
[   83.473903][  T500]  worker_thread+0xa59/0x1200
[   83.479219][  T500]  kthread+0x411/0x500
[   83.483295][  T500]  ret_from_fork+0x1f/0x30
[   83.487799][  T500] 
[   83.490174][  T500] Freed by task 20:
[   83.494564][  T500]  kasan_set_track+0x4a/0x70
[   83.499280][  T500]  kasan_set_free_info+0x23/0x40
[   83.511005][  T500]  ____kasan_slab_free+0x125/0x160
[   83.524194][  T500]  __kasan_slab_free+0x11/0x20
[   83.529177][  T500]  slab_free_freelist_hook+0xc2/0x190
[   83.534585][  T500]  kfree+0xc4/0x270
[   83.538487][  T500]  kvfree+0x35/0x40
[   83.542640][  T500]  netdev_freemem+0x3f/0x60
[   83.547370][  T500]  netdev_release+0x7f/0xb0
[   83.552817][  T500]  device_release+0x96/0x1c0
[   83.558154][  T500]  kobject_put+0x18a/0x270
[   83.563385][  T500]  put_device+0x1f/0x30
[   83.567685][  T500]  free_netdev+0x34b/0x450
[   83.572279][  T500]  usbnet_disconnect+0x24b/0x3a0
[   83.577213][  T500]  usb_unbind_interface+0x212/0x8c0
[   83.582798][  T500]  device_release_driver_internal+0x4c1/0x760
[   83.589142][  T500]  device_release_driver+0x19/0x20
[   83.594431][  T500]  bus_remove_device+0x2dd/0x340
[   83.599463][  T500]  device_del+0x696/0xe90
[   83.603980][  T500]  usb_disable_device+0x3a8/0x750
[   83.609022][  T500]  usb_disconnect+0x31e/0x850
[   83.613789][  T500]  hub_event+0x190c/0x42c0
[   83.618226][  T500]  process_one_work+0x6be/0xba0
[   83.623508][  T500]  worker_thread+0xd7b/0x1200
[   83.628402][  T500]  kthread+0x411/0x500
[   83.632511][  T500]  ret_from_fork+0x1f/0x30
[   83.636933][  T500] 
[   83.639253][  T500] Last potentially related work creation:
[   83.645069][  T500]  kasan_save_stack+0x3a/0x60
[   83.650202][  T500]  __kasan_record_aux_stack+0xd2/0x100
[   83.655900][  T500]  kasan_record_aux_stack_noalloc+0xb/0x10
[   83.662558][  T500]  insert_work+0x51/0x310
[   83.667445][  T500]  __queue_work+0x8e5/0xc60
[   83.672455][  T500]  queue_work_on+0xd2/0x140
[   83.677042][  T500]  usbnet_link_change+0x176/0x1a0
[   83.682800][  T500]  usbnet_probe+0x1dfd/0x2860
[   83.687584][  T500]  usb_probe_interface+0x5ff/0xae0
[   83.693031][  T500]  really_probe+0x285/0x970
[   83.697831][  T500]  __driver_probe_device+0x198/0x280
[   83.703246][  T500]  driver_probe_device+0x54/0x3e0
[   83.710063][  T500]  __device_attach_driver+0x2a6/0x460
[   83.715562][  T500]  bus_for_each_drv+0x175/0x200
[   83.720699][  T500]  __device_attach+0x2a2/0x400
[   83.725728][  T500]  device_initial_probe+0x1a/0x20
[   83.731886][  T500]  bus_probe_device+0xc0/0x1e0
[   83.736852][  T500]  device_add+0xb31/0xed0
[   83.741346][  T500]  usb_set_configuration+0x19c2/0x1f10
[   83.747006][  T500]  usb_generic_driver_probe+0x91/0x150
[   83.752475][  T500]  usb_probe_device+0x148/0x260
[   83.757467][  T500]  really_probe+0x285/0x970
[   83.762191][  T500]  __driver_probe_device+0x198/0x280
[   83.767474][  T500]  driver_probe_device+0x54/0x3e0
[   83.772664][  T500]  __device_attach_driver+0x2a6/0x460
[   83.778223][  T500]  bus_for_each_drv+0x175/0x200
[   83.783078][  T500]  __device_attach+0x2a2/0x400
[   83.787835][  T500]  device_initial_probe+0x1a/0x20
[   83.792860][  T500]  bus_probe_device+0xc0/0x1e0
[   83.797866][  T500]  device_add+0xb31/0xed0
[   83.802287][  T500]  usb_new_device+0xd06/0x1620
[   83.807060][  T500]  hub_event+0x27d8/0x42c0
[   83.811498][  T500]  process_one_work+0x6be/0xba0
[   83.816441][  T500]  worker_thread+0xa59/0x1200
[   83.821124][  T500]  kthread+0x411/0x500
[   83.825196][  T500]  ret_from_fork+0x1f/0x30
[   83.830011][  T500] 
[   83.832573][  T500] The buggy address belongs to the object at ffff88810dfc6000
[   83.832573][  T500]  which belongs to the cache kmalloc-4k of size 4096
[   83.847860][  T500] The buggy address is located 3184 bytes inside of
[   83.847860][  T500]  4096-byte region [ffff88810dfc6000, ffff88810dfc7000)
[   83.861963][  T500] The buggy address belongs to the page:
[   83.867813][  T500] page:ffffea000437f000 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x10dfc0
[   83.878437][  T500] head:ffffea000437f000 order:3 compound_mapcount:0 compound_pincount:0
[   83.886757][  T500] flags: 0x4000000000010200(slab|head|zone=1)
[   83.893018][  T500] raw: 4000000000010200 dead000000000100 dead000000000122 ffff888100043380
[   83.901684][  T500] raw: 0000000000000000 0000000000040004 00000001ffffffff 0000000000000000
[   83.910547][  T500] page dumped because: kasan: bad access detected
[   83.916951][  T500] page_owner tracks the page as allocated
[   83.922739][  T500] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 2457, ts 68290783865, free_ts 67992543425
[   83.943786][  T500]  post_alloc_hook+0x192/0x1b0
[   83.948672][  T500]  prep_new_page+0x1c/0x110
[   83.953176][  T500]  get_page_from_freelist+0x2cc5/0x2d50
[   83.958802][  T500]  __alloc_pages+0x18f/0x440
[   83.963481][  T500]  new_slab+0xa1/0x4d0
[   83.967658][  T500]  ___slab_alloc+0x381/0x810
[   83.972243][  T500]  __slab_alloc+0x49/0x90
[   83.976599][  T500]  __kmalloc_track_caller+0x169/0x2c0
[   83.982051][  T500]  kmemdup+0x26/0x60
[   83.985939][  T500]  __addrconf_sysctl_register+0xad/0x3d0
[   83.991659][  T500]  addrconf_sysctl_register+0x147/0x1a0
[   83.997193][  T500]  ipv6_add_dev+0xc03/0x1150
[   84.001787][  T500]  addrconf_notify+0x582/0xde0
[   84.006744][  T500]  raw_notifier_call_chain+0x90/0x100
[   84.012479][  T500]  call_netdevice_notifiers+0x111/0x190
[   84.018175][  T500]  register_netdevice+0x1039/0x13a0
[   84.023857][  T500] page last free stack trace:
[   84.028719][  T500]  free_unref_page_prepare+0x542/0x550
[   84.034274][  T500]  free_unref_page+0xa2/0x550
[   84.040548][  T500]  __free_pages+0x6c/0x100
[   84.047617][  T500]  __free_slab+0xe8/0x1e0
[   84.057662][  T500]  __unfreeze_partials+0x160/0x190
[   84.064291][  T500]  put_cpu_partial+0xc6/0x120
[   84.070076][  T500]  __slab_free+0x1d4/0x290
[   84.075048][  T500]  ___cache_free+0x104/0x120
[   84.079676][  T500]  qlink_free+0x4d/0x90
[   84.084984][  T500]  qlist_free_all+0x5f/0xb0
[   84.090695][  T500]  kasan_quarantine_reduce+0x14a/0x170
[   84.096373][  T500]  __kasan_slab_alloc+0x2f/0xf0
[   84.101692][  T500]  slab_post_alloc_hook+0x4f/0x2b0
[   84.106995][  T500]  kmem_cache_alloc+0xf7/0x260
[   84.112865][  T500]  security_file_alloc+0x33/0x120
[   84.117919][  T500]  __alloc_file+0xb5/0x2a0
[   84.122529][  T500] 
[   84.125117][  T500] Memory state around the buggy address:
[   84.131279][  T500]  ffff88810dfc6b00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   84.141124][  T500]  ffff88810dfc6b80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   84.150054][  T500] >ffff88810dfc6c00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   84.159616][  T500]                                                              ^
[   84.168102][  T500]  ffff88810dfc6c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   84.176275][  T500]  ffff88810dfc6d00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   84.184858][  T500] ==================================================================
[   84.193404][  T500] Disabling lock debugging due to kernel taint
[   84.204659][  T289] Bluetooth: hci0: command 0x1003 tx timeout
[   84.218031][ T3229] Bluetooth: hci0: sending frame failed (-49)
[   84.225566][ T3297] F2FS-fs (loop8): fault_injection options not supported
[   84.249126][   T30] audit: type=1400 audit(1748862972.915:1224): avc:  denied  { read } for  pid=83 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1
[   84.274976][   T30] audit: type=1400 audit(1748862972.925:1225): avc:  denied  { search } for  pid=83 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   84.292114][ T3297] F2FS-fs (loop8): invalid crc value
[   84.299000][   T30] audit: type=1400 audit(1748862972.925:1226): avc:  denied  { write } for  pid=83 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   84.325379][   T30] audit: type=1400 audit(1748862972.925:1227): avc:  denied  { add_name } for  pid=83 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   84.345557][ T3297] F2FS-fs (loop8): Found nat_bits in checkpoint
[   84.346332][   T30] audit: type=1400 audit(1748862972.925:1228): avc:  denied  { create } for  pid=83 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   84.373364][   T30] audit: type=1400 audit(1748862972.925:1229): avc:  denied  { append open } for  pid=83 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   84.399730][   T30] audit: type=1400 audit(1748862972.925:1230): avc:  denied  { getattr } for  pid=83 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   84.429524][ T3297] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5
[   84.496026][ T2715] attempt to access beyond end of device
[   84.496026][ T2715] loop8: rw=2049, want=45120, limit=40427
[   86.269141][  T500] Bluetooth: hci0: command 0x1001 tx timeout
[   86.275390][ T3229] Bluetooth: hci0: sending frame failed (-49)
[   88.349767][  T500] Bluetooth: hci0: command 0x1009 tx timeout