last executing test programs:

6.510335323s ago: executing program 0 (id=422):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000c00)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="4c00000010004b0422000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800b00010062726964676500001c00028008000400000000000800150000000000050016"], 0x4c}, 0x1, 0x0, 0x0, 0x200400a0}, 0x0)

6.377631724s ago: executing program 0 (id=429):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000400000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sys_enter\x00', r0}, 0x10)
syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x1809049, 0x0, 0xff, 0x0, 0x0)
setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0)
lsetxattr$security_capability(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), &(0x7f0000000180)=@v2={0x2000000, [{0x7, 0xec75}, {0x10, 0x5}]}, 0x14, 0x0)
lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x0)

6.345290064s ago: executing program 0 (id=431):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="080000000400000004000000a4"], 0x48)
r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r2 = fsmount(r1, 0x0, 0x4)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r0}, &(0x7f00000002c0), &(0x7f0000000300)=r2}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000380), &(0x7f0000000200)=r2}, 0x20)

6.324177784s ago: executing program 0 (id=432):
syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000600)=ANY=[], 0x2, 0x14fe, &(0x7f0000002180)="$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")
mount$incfs(&(0x7f00000000c0)='./file2\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x10000, 0x0)
chdir(&(0x7f0000000540)='./file0\x00')
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x809411, 0x0, 0x1, 0x0, &(0x7f0000000040))
socket$nl_route(0x10, 0x3, 0x0)
rename(&(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000004c0)='./file1\x00')

6.262246604s ago: executing program 0 (id=433):
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf)
ioctl$TCFLSH(r0, 0x400455c8, 0x40000000004)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
write(r1, &(0x7f0000000000)="07000000010000", 0x7)

6.155113335s ago: executing program 0 (id=437):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{}, {}, {0x3, 0x0, 0x0, 0x1000000}, {}, {}, {}, {0x6}]}, @TCA_ACT_BPF_PARMS={0x18}]}, {}, {0xc}, {0xc}}}]}]}, 0xa0}}, 0x0)

6.148159975s ago: executing program 32 (id=437):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{}, {}, {0x3, 0x0, 0x0, 0x1000000}, {}, {}, {}, {0x6}]}, @TCA_ACT_BPF_PARMS={0x18}]}, {}, {0xc}, {0xc}}}]}]}, 0xa0}}, 0x0)

5.867775247s ago: executing program 2 (id=449):
syz_mount_image$f2fs(&(0x7f00000004c0), &(0x7f0000000040)='./bus\x00', 0x2008410, &(0x7f0000001f80)=ANY=[@ANYBLOB="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", @ANYRES64], 0x1, 0x553b, &(0x7f000000ac00)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x141842, 0x9)
ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f0000000000)=0x201)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x1, 0xc32a4cddd557707a)
fallocate(r1, 0x0, 0x0, 0x9000f4)
symlink(&(0x7f0000000dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000cc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')

5.47048769s ago: executing program 2 (id=450):
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8)
setsockopt$inet6_int(r0, 0x29, 0x38, &(0x7f0000000040)=0x8, 0x4)
recvmmsg(r0, &(0x7f0000004300)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x2, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)

5.265947102s ago: executing program 2 (id=456):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x4, 0x7fdf, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040), &(0x7f0000001340), 0x2931b90f, r0}, 0x38)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfe}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r2 = dup2(r1, r0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r2}, 0x10)
clock_settime(0x7, 0x0)

5.238539642s ago: executing program 2 (id=458):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000300)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)

5.222935132s ago: executing program 2 (id=459):
syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000810087406d040e0a759400000001090212"], 0x0)
madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe)
ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xdaca7de7fe4502d4, 0xa2071, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000ffc000/0x4000)=nil)
mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ffa000/0x1000)=nil)

5.099053972s ago: executing program 2 (id=461):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000600)='sys_enter\x00', r1}, 0x10)
r2 = gettid()
rt_sigqueueinfo(r2, 0x21, &(0x7f00000002c0)={0xb, 0x4})

5.097981993s ago: executing program 33 (id=461):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000600)='sys_enter\x00', r1}, 0x10)
r2 = gettid()
rt_sigqueueinfo(r2, 0x21, &(0x7f00000002c0)={0xb, 0x4})

3.124364437s ago: executing program 4 (id=510):
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x278, 0xffffffff, 0xb0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x1a8, 0x2a8, 0x2a8, 0xffffffff, 0x4, 0x0, {[{{@ip={@rand_addr=0x64010102, @local, 0xff, 0x0, 'sit0\x00', 'batadv_slave_0\x00', {}, {0xff}, 0x32}, 0x0, 0x70, 0xb0, 0x0, {0x100000000000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x1}}}, {{@ip={@broadcast, @rand_addr, 0x0, 0x3b71d9255d7691a1, 'pimreg\x00', 'syz_tun\x00', {0xff}}, 0x0, 0x70, 0x98}, @REJECT={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2d8)
r0 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000340)=0x63ba, 0x4)
setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4)
sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000b00)={0xa, 0x4e23, 0x0, @dev={0xfe, 0x80, '\x00', 0x39}}, 0x1c, 0x0}}], 0x1, 0x0)
recvmmsg(r0, &(0x7f0000000040), 0x1, 0x2043, 0x0)

3.060624568s ago: executing program 4 (id=511):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="05000000040000000800000008"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r1}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
readahead(r2, 0x0, 0x101)

3.060325318s ago: executing program 4 (id=512):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r1}, 0x10)
syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0)

3.005238398s ago: executing program 4 (id=514):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000080)={0xfffffffffffffc70, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220f00000007c9c0d224d324b9a7abb3"], 0x0}, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f0000000180), 0x0, 0x80200)
ioctl$HIDIOCSREPORT(r1, 0x400c4808, &(0x7f0000000100)={0x3, 0x100, 0x2})

2.454971222s ago: executing program 6 (id=521):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800800040000000000050017"], 0x44}}, 0x0)

2.284031863s ago: executing program 6 (id=523):
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001860000000000000e9ff00000400000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000001800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffd4, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000e41621eb70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r1}, 0x10)
syz_open_procfs$namespace(0x0, 0xfffffffffffffffe)

2.227157544s ago: executing program 5 (id=524):
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x26, 0x0, 0x0, @void, @value}, 0x10)
unshare(0x22040400)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000040)={@map=r1, 0x26, 0x0, 0xf51, &(0x7f0000001440)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40)

2.193055924s ago: executing program 5 (id=526):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x5, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
request_key(&(0x7f0000000100)='asymmetric\x00', &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0)

2.176638084s ago: executing program 6 (id=527):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='io_uring_register\x00', r0}, 0x10)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a000020095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='io_uring_register\x00', r1}, 0x10)
r2 = io_uring_setup(0x1de0, &(0x7f0000000440))
io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0)

2.159841294s ago: executing program 5 (id=529):
syz_open_dev$tty20(0xc, 0x4, 0x1)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x181040, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002220207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000006000000850000000400000085000000d000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000017c0)={&(0x7f0000000280)='tlb_flush\x00', r1}, 0x18)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)

2.137951184s ago: executing program 6 (id=531):
openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103000, 0x0)
socket$can_bcm(0x1d, 0x2, 0x2)
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = creat(&(0x7f0000000040)='./file0\x00', 0x10e)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x600, 0x0)
syz_usb_connect$uac1(0x0, 0xa4, &(0x7f00000000c0)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3", @ANYRES8=r0, @ANYRES32=r1], 0x0)

2.050041835s ago: executing program 5 (id=532):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = dup(r2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x58, 0x0, 0x0)
ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f00000001c0)=ANY=[@ANYBLOB="01000000050000f58a04"])

1.967203846s ago: executing program 3 (id=533):
mount_setattr(0xffffffffffffff9c, 0x0, 0x8000, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x2, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000800)={{r0}, &(0x7f0000000780), &(0x7f00000007c0)}, 0x20)
syz_usb_connect$uac1(0x0, 0xa4, &(0x7f00000000c0)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5"], 0x0)

1.590045398s ago: executing program 5 (id=544):
symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00')
mkdir(&(0x7f0000000040)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]})
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00')
read$FUSE(r0, &(0x7f0000002140)={0x2020}, 0x2100)

1.541190019s ago: executing program 5 (id=535):
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x2, 0x96, 0xd1, 0xca, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0xd, 0x0, 0x6}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, &(0x7f00000003c0)={0x0, 0x5, 0x4, "abe763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000340)={0x1c, &(0x7f0000000400)={0x40, 0xc, 0x4, 'Rg~p'}, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000f00)={0x84, &(0x7f0000000ac0)={0x0, 0x3, 0x4, "b2161890"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

895.840893ms ago: executing program 6 (id=538):
prctl$PR_SET_SECUREBITS(0x1c, 0x2c)
setuid(0xee00)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r1, &(0x7f00000001c0), 0x12)

843.148514ms ago: executing program 6 (id=539):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00)
sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$TIPC_CMD_GET_NODES(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r3, 0x1, 0x0, 0x0, {{}, {0x0, 0x6}}}, 0xfd53}}, 0x0)

717.684174ms ago: executing program 3 (id=540):
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
connect$inet6(r0, &(0x7f00000003c0)={0xa, 0x3, 0x0, @mcast2, 0x5}, 0x1c)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000000)=ANY=[], 0x10)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10)
write(r0, &(0x7f00000000c0)="8f2a0a65bd8c022b0304000e0580a7b6070d63e286a5cefe", 0x5ac)

707.168354ms ago: executing program 3 (id=541):
r0 = io_uring_setup(0x1fc4, &(0x7f0000000bc0)={0x0, 0x0, 0x12, 0x0, 0x320})
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xf, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @cgroup_device, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x20)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r1, r2, 0x6, 0x0, @void}, 0x10)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r1, r2, 0x6, 0x0, @val=@tracing}, 0x40)
close_range(r0, 0xffffffffffffffff, 0x0)

662.809925ms ago: executing program 3 (id=542):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002980)={0x6, 0x4, &(0x7f0000000340)=@raw=[@ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}], 0x0, 0x1000, 0x0, 0x0, 0x41000, 0x42, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe5bd, @void, @value}, 0x94)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x20000006, &(0x7f0000002ac0)={[{@data_err_abort}, {@noblock_validity}, {@nogrpid}, {@orlov}, {@data_err_abort}, {@grpjquota, 0x2e}, {@sb={'sb', 0x3d, 0x2}}, {@noinit_itable}, {@jqfmt_vfsold}, {@stripe}], [{@obj_type={'obj_type', 0x3d, '-.'}}, {@hash}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@smackfsroot={'smackfsroot', 0x3d, '\\{\'%\xea'}}, {@obj_type={'obj_type', 0x3d, '{%*c:'}}, {@fsname={'fsname', 0x3d, 'jqfmt=vfsold'}}, {@euid_lt}], 0x2c}, 0x0, 0x4c0, &(0x7f00000004c0)="$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")
r0 = socket$inet6(0xa, 0x80001, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88)
setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000e0ff00000000000000bd0000000000000000000000e4ec010000000040000000000000000000000000000000000000013da51fd47aa2e2f70000000000000000000000000000000000000000000000000000000000000067ff0000000000000005"], 0x310)
setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000005c0)={0x1, {{0xa, 0x0, 0x0, @mcast1, 0xfffffffe}}, 0x0, 0x2, [{{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @mcast2}}]}, 0x190)

587.036455ms ago: executing program 3 (id=543):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10)
r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
fchmod(r2, 0x1)

574.052526ms ago: executing program 3 (id=545):
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'gre0\x00', <r1=>0x0})
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000080)=0xc, 0x4)
sendto$packet(r0, &(0x7f0000000040)="c0000000e8fe091c6202a0fffffeff006003180000007f010034e3bd190f5f61a7c6", 0x22, 0x4c0c0, &(0x7f0000000000)={0x11, 0x8100, r1, 0x1, 0x0, 0x6, @remote}, 0x14)
modify_ldt$write(0x2000, 0x0, 0x0)
syz_usb_connect(0x5, 0x36, &(0x7f0000000a00)={{0x12, 0x1, 0x0, 0x36, 0xdb, 0x98, 0x10, 0x6cd, 0x108, 0xb0a1, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x4, 0xe0, 0x12, 0x2, 0xe9, 0xcb, 0xc3, 0x71, [], [{{0x9, 0x5, 0xb, 0x8, 0x200, 0x5, 0x7, 0x9}}, {{0x9, 0x5, 0x1, 0x0, 0x20, 0x4, 0xd}}]}}]}}]}}, 0x0)

215.437238ms ago: executing program 1 (id=560):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000208500000004"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000008c0)='sys_enter\x00', r0}, 0x10)
sysinfo(&(0x7f0000000580)=""/84)

215.008558ms ago: executing program 1 (id=561):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0x5}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10)
syz_mount_image$fuse(0x0, &(0x7f0000000580)='./file0\x00', 0x0, 0x0, 0x8, 0x0, 0x0)
open(&(0x7f00000002c0)='./file0/file0\x00', 0x141840, 0x0)
mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x0, 0x0)
open(&(0x7f0000000200)='./file0/file0\x00', 0x0, 0x0)

159.166398ms ago: executing program 1 (id=562):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x10)
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x800, &(0x7f0000000240)={[{@gid}, {@time_offset={'time_offset', 0x3d, 0x3}}, {@iocharset={'iocharset', 0x3d, 'cp949'}}, {@errors_remount}, {}, {@keep_last_dots}, {@gid}, {@errors_remount}, {@discard}, {@errors_continue}]}, 0x5, 0x1510, &(0x7f00000037c0)="$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")
r2 = openat(0xffffffffffffff9c, &(0x7f0000000640)='.\x00', 0x0, 0x0)
renameat2(r2, &(0x7f00000001c0)='./file0\x00', r2, &(0x7f0000000200)='.\x02\x00', 0x0)

153.829069ms ago: executing program 1 (id=563):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8000}, [@call={0x85, 0x0, 0x0, 0x75}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r1}, 0x1d)
syz_emit_ethernet(0x5e, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x28, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @dev, @dev}}}}}}, 0x0)

144.486299ms ago: executing program 4 (id=564):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f0000000200)={[{@max_batch_time={'max_batch_time', 0x3d, 0x358}}, {@resuid}, {@stripe={'stripe', 0x3d, 0x9}}]}, 0x3, 0x44b, &(0x7f00000004c0)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0)
munmap(&(0x7f0000002000/0x1000)=nil, 0x1000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9)

76.757369ms ago: executing program 1 (id=565):
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0)
ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f})
write$uinput_user_dev(r0, &(0x7f0000000c80)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200]}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
ioctl$UI_DEV_CREATE(r0, 0x5501)
ioctl$UI_SET_PHYS(r0, 0x4008556c, 0x0)

1.33411ms ago: executing program 1 (id=566):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000001c0)='mm_page_alloc\x00', r1}, 0x18)
madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe)
mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000)
syz_clone(0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0)

0s ago: executing program 4 (id=567):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00220f000000540b4550182195f58584b3"], 0x0}, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0)
ioctl$HIDIOCSUSAGE(r1, 0x4018480c, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x84, &(0x7f0000000300)={0x20, 0xe, 0x1, "87"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.212' (ED25519) to the list of known hosts.
[   18.746375][   T28] audit: type=1400 audit(1741714474.000:66): avc:  denied  { mounton } for  pid=280 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[   18.747335][  T280] cgroup: Unknown subsys name 'net'
[   18.749440][   T28] audit: type=1400 audit(1741714474.000:67): avc:  denied  { mount } for  pid=280 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   18.753032][   T28] audit: type=1400 audit(1741714474.000:68): avc:  denied  { unmount } for  pid=280 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   18.753156][  T280] cgroup: Unknown subsys name 'devices'
[   18.848178][  T280] cgroup: Unknown subsys name 'hugetlb'
[   18.853575][  T280] cgroup: Unknown subsys name 'rlimit'
[   18.986210][   T28] audit: type=1400 audit(1741714474.230:69): avc:  denied  { setattr } for  pid=280 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   19.009212][   T28] audit: type=1400 audit(1741714474.240:70): avc:  denied  { mounton } for  pid=280 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1
[   19.033694][   T28] audit: type=1400 audit(1741714474.240:71): avc:  denied  { mount } for  pid=280 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1
[   19.061119][  T282] SELinux:  Context root:object_r:swapfile_t is not valid (left unmapped).
Setting up swapspace version 1, size = 127995904 bytes
[   19.069960][   T28] audit: type=1400 audit(1741714474.320:72): avc:  denied  { relabelto } for  pid=282 comm="mkswap" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   19.095229][   T28] audit: type=1400 audit(1741714474.320:73): avc:  denied  { write } for  pid=282 comm="mkswap" path="/root/swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   19.121535][   T28] audit: type=1400 audit(1741714474.370:74): avc:  denied  { read } for  pid=280 comm="syz-executor" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   19.146862][   T28] audit: type=1400 audit(1741714474.370:75): avc:  denied  { open } for  pid=280 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   19.146911][  T280] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   19.716146][  T289] bridge0: port 1(bridge_slave_0) entered blocking state
[   19.723058][  T289] bridge0: port 1(bridge_slave_0) entered disabled state
[   19.730457][  T289] device bridge_slave_0 entered promiscuous mode
[   19.737956][  T289] bridge0: port 2(bridge_slave_1) entered blocking state
[   19.744787][  T289] bridge0: port 2(bridge_slave_1) entered disabled state
[   19.752079][  T289] device bridge_slave_1 entered promiscuous mode
[   19.814996][  T292] bridge0: port 1(bridge_slave_0) entered blocking state
[   19.821882][  T292] bridge0: port 1(bridge_slave_0) entered disabled state
[   19.829271][  T292] device bridge_slave_0 entered promiscuous mode
[   19.845016][  T290] bridge0: port 1(bridge_slave_0) entered blocking state
[   19.851901][  T290] bridge0: port 1(bridge_slave_0) entered disabled state
[   19.859155][  T290] device bridge_slave_0 entered promiscuous mode
[   19.865562][  T292] bridge0: port 2(bridge_slave_1) entered blocking state
[   19.872511][  T292] bridge0: port 2(bridge_slave_1) entered disabled state
[   19.879619][  T292] device bridge_slave_1 entered promiscuous mode
[   19.893807][  T291] bridge0: port 1(bridge_slave_0) entered blocking state
[   19.900768][  T291] bridge0: port 1(bridge_slave_0) entered disabled state
[   19.907890][  T291] device bridge_slave_0 entered promiscuous mode
[   19.914232][  T290] bridge0: port 2(bridge_slave_1) entered blocking state
[   19.921130][  T290] bridge0: port 2(bridge_slave_1) entered disabled state
[   19.928344][  T290] device bridge_slave_1 entered promiscuous mode
[   19.944835][  T291] bridge0: port 2(bridge_slave_1) entered blocking state
[   19.951707][  T291] bridge0: port 2(bridge_slave_1) entered disabled state
[   19.958963][  T291] device bridge_slave_1 entered promiscuous mode
[   20.025748][  T293] bridge0: port 1(bridge_slave_0) entered blocking state
[   20.032618][  T293] bridge0: port 1(bridge_slave_0) entered disabled state
[   20.039923][  T293] device bridge_slave_0 entered promiscuous mode
[   20.048398][  T293] bridge0: port 2(bridge_slave_1) entered blocking state
[   20.055235][  T293] bridge0: port 2(bridge_slave_1) entered disabled state
[   20.062564][  T293] device bridge_slave_1 entered promiscuous mode
[   20.187730][  T290] bridge0: port 2(bridge_slave_1) entered blocking state
[   20.194581][  T290] bridge0: port 2(bridge_slave_1) entered forwarding state
[   20.201739][  T290] bridge0: port 1(bridge_slave_0) entered blocking state
[   20.208590][  T290] bridge0: port 1(bridge_slave_0) entered forwarding state
[   20.218569][  T292] bridge0: port 2(bridge_slave_1) entered blocking state
[   20.225411][  T292] bridge0: port 2(bridge_slave_1) entered forwarding state
[   20.232539][  T292] bridge0: port 1(bridge_slave_0) entered blocking state
[   20.239315][  T292] bridge0: port 1(bridge_slave_0) entered forwarding state
[   20.265423][  T289] bridge0: port 2(bridge_slave_1) entered blocking state
[   20.272288][  T289] bridge0: port 2(bridge_slave_1) entered forwarding state
[   20.279385][  T289] bridge0: port 1(bridge_slave_0) entered blocking state
[   20.286156][  T289] bridge0: port 1(bridge_slave_0) entered forwarding state
[   20.315007][  T293] bridge0: port 2(bridge_slave_1) entered blocking state
[   20.321880][  T293] bridge0: port 2(bridge_slave_1) entered forwarding state
[   20.328968][  T293] bridge0: port 1(bridge_slave_0) entered blocking state
[   20.335861][  T293] bridge0: port 1(bridge_slave_0) entered forwarding state
[   20.344812][  T291] bridge0: port 2(bridge_slave_1) entered blocking state
[   20.351669][  T291] bridge0: port 2(bridge_slave_1) entered forwarding state
[   20.358771][  T291] bridge0: port 1(bridge_slave_0) entered blocking state
[   20.365540][  T291] bridge0: port 1(bridge_slave_0) entered forwarding state
[   20.386699][    T8] bridge0: port 1(bridge_slave_0) entered disabled state
[   20.393899][    T8] bridge0: port 2(bridge_slave_1) entered disabled state
[   20.400952][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   20.408450][    T8] bridge0: port 1(bridge_slave_0) entered disabled state
[   20.415422][    T8] bridge0: port 2(bridge_slave_1) entered disabled state
[   20.422495][    T8] bridge0: port 1(bridge_slave_0) entered disabled state
[   20.429768][    T8] bridge0: port 2(bridge_slave_1) entered disabled state
[   20.437028][    T8] bridge0: port 1(bridge_slave_0) entered disabled state
[   20.444160][    T8] bridge0: port 2(bridge_slave_1) entered disabled state
[   20.451316][    T8] bridge0: port 1(bridge_slave_0) entered disabled state
[   20.458506][    T8] bridge0: port 2(bridge_slave_1) entered disabled state
[   20.485047][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   20.493077][    T8] bridge0: port 1(bridge_slave_0) entered blocking state
[   20.499927][    T8] bridge0: port 1(bridge_slave_0) entered forwarding state
[   20.509187][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   20.517565][    T8] bridge0: port 2(bridge_slave_1) entered blocking state
[   20.524397][    T8] bridge0: port 2(bridge_slave_1) entered forwarding state
[   20.542376][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   20.549718][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   20.557932][    T8] bridge0: port 1(bridge_slave_0) entered blocking state
[   20.564771][    T8] bridge0: port 1(bridge_slave_0) entered forwarding state
[   20.587174][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   20.595294][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   20.602675][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   20.610149][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   20.618387][    T8] bridge0: port 1(bridge_slave_0) entered blocking state
[   20.625214][    T8] bridge0: port 1(bridge_slave_0) entered forwarding state
[   20.632617][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   20.640471][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   20.648550][    T8] bridge0: port 1(bridge_slave_0) entered blocking state
[   20.655366][    T8] bridge0: port 1(bridge_slave_0) entered forwarding state
[   20.662644][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   20.671349][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   20.679419][    T8] bridge0: port 2(bridge_slave_1) entered blocking state
[   20.686262][    T8] bridge0: port 2(bridge_slave_1) entered forwarding state
[   20.720785][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   20.739199][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   20.748278][    T8] bridge0: port 2(bridge_slave_1) entered blocking state
[   20.755105][    T8] bridge0: port 2(bridge_slave_1) entered forwarding state
[   20.762492][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   20.770604][    T8] bridge0: port 2(bridge_slave_1) entered blocking state
[   20.777459][    T8] bridge0: port 2(bridge_slave_1) entered forwarding state
[   20.785095][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   20.793037][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   20.800895][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   20.808663][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   20.816480][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   20.824198][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   20.832051][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   20.839354][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   20.846556][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   20.854569][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   20.862619][    T8] bridge0: port 1(bridge_slave_0) entered blocking state
[   20.869449][    T8] bridge0: port 1(bridge_slave_0) entered forwarding state
[   20.876795][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   20.884859][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   20.893185][    T8] bridge0: port 2(bridge_slave_1) entered blocking state
[   20.900044][    T8] bridge0: port 2(bridge_slave_1) entered forwarding state
[   20.910963][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   20.919201][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   20.928953][  T290] device veth0_vlan entered promiscuous mode
[   20.948805][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   20.958173][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   20.965833][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   20.973709][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   20.982031][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   20.989936][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   20.997871][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   21.005559][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   21.013861][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   21.024730][  T292] device veth0_vlan entered promiscuous mode
[   21.034038][  T293] device veth0_vlan entered promiscuous mode
[   21.040421][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   21.047780][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   21.054982][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   21.062995][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   21.071040][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   21.080507][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   21.087907][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   21.095090][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   21.102589][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   21.117308][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   21.125511][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   21.133587][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   21.143104][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   21.151255][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   21.160936][  T292] device veth1_macvtap entered promiscuous mode
[   21.167719][  T289] device veth0_vlan entered promiscuous mode
[   21.174235][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   21.182061][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   21.189457][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   21.199727][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   21.207848][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   21.222217][  T290] device veth1_macvtap entered promiscuous mode
[   21.229348][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   21.236904][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   21.244889][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   21.253295][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   21.261545][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   21.275717][  T291] device veth0_vlan entered promiscuous mode
[   21.282592][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   21.290580][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   21.297979][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   21.314123][  T292] request_module fs-gadgetfs succeeded, but still no fs?
[   21.317157][  T293] device veth1_macvtap entered promiscuous mode
[   21.333681][  T291] device veth1_macvtap entered promiscuous mode
[   21.346026][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   21.355480][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   21.364082][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   21.372841][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   21.375532][  T317] tipc: Subscription rejected, illegal request
[   21.381570][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   21.399312][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   21.400953][  T320] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   21.407534][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   21.431370][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   21.440364][  T289] device veth1_macvtap entered promiscuous mode
[   21.461730][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   21.469637][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   21.478724][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   21.487449][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   21.495575][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   21.504055][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   21.512403][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   21.521124][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   21.529366][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   21.563902][  T311] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   21.575666][  T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   21.591288][  T311] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   21.603710][  T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   21.635726][  T329] device dummy0 entered promiscuous mode
[   21.660841][  T329] device dummy0 left promiscuous mode
[   21.731275][  T329] syz.3.8 (329) used greatest stack depth: 20456 bytes left
[   21.869758][  T364] loop3: detected capacity change from 0 to 256
[   21.884174][  T364] =======================================================
[   21.884174][  T364] WARNING: The mand mount option has been deprecated and
[   21.884174][  T364]          and is ignored by this kernel. Remove the mand
[   21.884174][  T364]          option from the mount to silence this warning.
[   21.884174][  T364] =======================================================
[   21.924269][  T371] IPv6: addrconf: prefix option has invalid lifetime
[   21.938078][  T371] IPv6: addrconf: prefix option has invalid lifetime
[   21.946800][  T364] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d)
[   21.977844][  T377] tmpfs: Unknown parameter ''
[   21.996289][    T6] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   22.027619][  T381] netlink: 'syz.3.30': attribute type 4 has an invalid length.
[   22.044767][  T381] netlink: 'syz.3.30': attribute type 4 has an invalid length.
[   22.061421][  T381] syz.3.30 (381) used greatest stack depth: 20104 bytes left
[   22.186273][    T6] usb 1-1: Using ep0 maxpacket: 16
[   22.192348][    T6] usb 1-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30
[   22.203798][    T6] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[   22.224019][    T6] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[   22.235573][    T6] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8
[   22.253460][  T413] loop2: detected capacity change from 0 to 512
[   22.259847][    T6] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255
[   22.268449][  T413] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem
[   22.286510][  T413] EXT4-fs (loop2): invalid journal inode
[   22.292012][  T413] EXT4-fs (loop2): can't get journal size
[   22.301768][    T6] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   22.320894][    T6] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[   22.330621][  T413] EXT4-fs (loop2): 1 truncate cleaned up
[   22.335561][    T6] usb 1-1: SerialNumber: syz
[   22.346289][  T413] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[   22.358162][  T340] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[   22.377180][    T6] cdc_acm 1-1:1.0: Control and data interfaces are not separated!
[   22.389813][    T6] cdc_acm: probe of 1-1:1.0 failed with error -12
[   22.403046][  T289] EXT4-fs (loop2): unmounting filesystem.
[   22.440986][  T430] loop2: detected capacity change from 0 to 2048
[   22.461684][  T435] Illegal XDP return value 4294967274 on prog  (id 31) dev N/A, expect packet loss!
[   22.498290][  T430] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[   22.518702][  T441] netlink: 12 bytes leftover after parsing attributes in process `syz.3.56'.
[   22.554066][  T311] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters
[   22.568719][  T311] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 34 with error 28
[   22.580900][  T311] EXT4-fs (loop2): This should not happen!! Data will be lost
[   22.580900][  T311] 
[   22.590926][  T311] EXT4-fs (loop2): Total free blocks count 0
[   22.604871][  T311] EXT4-fs (loop2): Free/Dirty block details
[   22.611567][  T311] EXT4-fs (loop2): free_blocks=2415919504
[   22.617952][  T311] EXT4-fs (loop2): dirty_blocks=48
[   22.623011][  T311] EXT4-fs (loop2): Block reservation details
[   22.631417][  T311] EXT4-fs (loop2): i_reserved_data_blocks=3
[   22.636506][    T6] usb 1-1: USB disconnect, device number 2
[   22.638626][  T289] EXT4-fs (loop2): unmounting filesystem.
[   22.716284][  T323] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   22.809527][  T466] input: syz1 as /devices/virtual/input/input4
[   22.900883][  T480] loop4: detected capacity change from 0 to 512
[   22.907810][  T480] EXT4-fs: Ignoring removed oldalloc option
[   22.914003][  T323] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   22.933511][  T480] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   22.946607][  T323] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   22.947565][  T486] 9pnet: p9_errstr2errno: server reported unknown error �@�
[   22.956349][  T480] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[   22.973490][  T323] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[   22.982660][  T323] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   22.996583][  T323] usb 2-1: config 0 descriptor??
[   23.007073][  T480] EXT4-fs (loop4): 1 truncate cleaned up
[   23.013176][  T480] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[   23.039835][  T492] loop2: detected capacity change from 0 to 512
[   23.046893][  T492] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   23.055768][  T290] EXT4-fs (loop4): unmounting filesystem.
[   23.078254][  T492] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[   23.088817][  T492] ext4 filesystem being mounted at /19/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   23.136718][  T289] EXT4-fs (loop2): unmounting filesystem.
[   23.330767][  T538] overlayfs: overlay with incompat feature 'volatile' cannot be mounted
[   23.352820][  T541] loop2: detected capacity change from 0 to 512
[   23.362357][  T541] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.100: invalid indirect mapped block 256 (level 1)
[   23.375756][  T541] EXT4-fs (loop2): Remounting filesystem read-only
[   23.382666][  T541] EXT4-fs (loop2): 1 truncate cleaned up
[   23.388238][  T541] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[   23.401452][  T541] EXT4-fs (loop2): re-mounted. Quota mode: none.
[   23.412948][  T289] EXT4-fs (loop2): unmounting filesystem.
[   23.608515][  T323] usb 2-1: string descriptor 0 read error: -22
[   23.718686][  T561] capability: warning: `syz.2.108' uses 32-bit capabilities (legacy support in use)
[   23.738528][  T563] loop2: detected capacity change from 0 to 16
[   23.745254][  T563] erofs: (device loop2): mounted with root inode @ nid 36.
[   23.755273][  T563] erofs: (device loop2): erofs_readdir: invalid de[0].nameoff 0 @ nid 36
[   23.958709][  T575] binder: 574:575 ioctl c0306201 4000000003c0 returned -14
[   23.999315][   T28] kauditd_printk_skb: 151 callbacks suppressed
[   23.999331][   T28] audit: type=1400 audit(1741714479.250:227): avc:  denied  { create } for  pid=582 comm="syz.3.118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   24.025246][  T323] uclogic 0003:256C:006D.0001: failed retrieving string descriptor #100: -71
[   24.033179][   T28] audit: type=1400 audit(1741714479.250:228): avc:  denied  { connect } for  pid=582 comm="syz.3.118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   24.037744][  T323] uclogic 0003:256C:006D.0001: failed retrieving pen parameters: -71
[   24.061206][  T323] uclogic 0003:256C:006D.0001: failed probing pen v1 parameters: -71
[   24.069504][  T323] uclogic 0003:256C:006D.0001: failed probing parameters: -71
[   24.074238][   T28] audit: type=1400 audit(1741714479.320:229): avc:  denied  { write } for  pid=586 comm="syz.3.119" name="001" dev="devtmpfs" ino=181 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[   24.078202][  T323] uclogic: probe of 0003:256C:006D.0001 failed with error -71
[   24.121885][  T323] usb 2-1: USB disconnect, device number 2
[   24.198268][   T28] audit: type=1400 audit(1741714479.450:230): avc:  denied  { compute_member } for  pid=599 comm="syz.0.125" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1
[   24.257740][  T606] 9pnet: p9_errstr2errno: server reported unknown error �@b
[   24.287058][  T610] loop4: detected capacity change from 0 to 1024
[   24.294017][  T610] EXT4-fs: Ignoring removed orlov option
[   24.304080][  T610] EXT4-fs (loop4): Test dummy encryption mode enabled
[   24.312694][  T610] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[   24.334911][   T28] audit: type=1400 audit(1741714479.580:231): avc:  denied  { create } for  pid=609 comm="syz.4.130" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1
[   24.338908][  T610] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni"
[   24.387359][  T610] fscrypt: AES-256-XTS using implementation "xts-aes-aesni"
[   24.390217][   T28] audit: type=1400 audit(1741714479.630:232): avc:  denied  { write } for  pid=609 comm="syz.4.130" name="bus" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1
[   24.415702][   T28] audit: type=1400 audit(1741714479.640:233): avc:  denied  { add_name } for  pid=609 comm="syz.4.130" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1
[   24.417400][  T290] EXT4-fs (loop4): unmounting filesystem.
[   24.436708][   T28] audit: type=1400 audit(1741714479.640:234): avc:  denied  { write open } for  pid=609 comm="syz.4.130" path="/17/file0/bus/file0" dev="loop4" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   24.465079][   T28] audit: type=1400 audit(1741714479.690:235): avc:  denied  { execute } for  pid=623 comm="syz.3.136" path="/40/cgroup.stat" dev="tmpfs" ino=228 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[   24.506269][  T294] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[   24.530374][   T28] audit: type=1400 audit(1741714479.780:236): avc:  denied  { map } for  pid=631 comm="syz.3.139" path="socket:[17689]" dev="sockfs" ino=17689 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   24.563293][  T635] xt_bpf: check failed: parse error
[   24.607059][  T644] 9pnet: p9_errstr2errno: server reported unknown error �@�΂�(���o�N	����QhQI����������
[   24.696280][  T294] usb 1-1: Using ep0 maxpacket: 32
[   24.702350][  T294] usb 1-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   24.723716][  T294] usb 1-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[   24.751091][  T294] usb 1-1: config 0 interface 0 has no altsetting 0
[   24.767667][  T294] usb 1-1: New USB device found, idVendor=056a, idProduct=0094, bcdDevice= 0.00
[   24.786252][  T294] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   24.805884][  T294] usb 1-1: config 0 descriptor??
[   24.812218][  T666] af_packet: tpacket_rcv: packet too big, clamped from 1 to 4294967272. macoff=96
[   25.110147][  T706] loop3: detected capacity change from 0 to 128
[   25.117334][  T706] EXT4-fs (loop3): Test dummy encryption mode enabled
[   25.125008][  T706] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[   25.133796][  T706] ext4 filesystem being mounted at /56/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   25.213443][  T294] wacom 0003:056A:0094.0002: Using device in hidraw-only mode
[   25.221212][  T294] wacom 0003:056A:0094.0002: hidraw0: USB HID v0.05 Device [HID 056a:0094] on usb-dummy_hcd.0-1/input0
[   25.236317][    T6] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   25.249689][  T293] EXT4-fs (loop3): unmounting filesystem.
[   25.263743][  T710] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[   25.279850][  T712] loop3: detected capacity change from 0 to 512
[   25.297531][  T712] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[   25.306282][  T322] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[   25.306756][  T712] ext4 filesystem being mounted at /58/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   25.332356][  T712] EXT4-fs error (device loop3): ext4_do_update_inode:5226: inode #2: comm syz.3.173: corrupted inode contents
[   25.344076][  T712] EXT4-fs error (device loop3): ext4_dirty_inode:6091: inode #2: comm syz.3.173: mark_inode_dirty error
[   25.355962][  T712] EXT4-fs error (device loop3): ext4_do_update_inode:5226: inode #2: comm syz.3.173: corrupted inode contents
[   25.367662][  T712] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #2: comm syz.3.173: mark_inode_dirty error
[   25.381910][  T712] EXT4-fs error (device loop3): ext4_get_first_dir_block:3594: inode #18: comm syz.3.173: directory missing '.'
[   25.397833][  T293] EXT4-fs (loop3): unmounting filesystem.
[   25.419780][    T6] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   25.433607][   T24] usb 1-1: USB disconnect, device number 3
[   25.434503][    T6] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   25.450180][    T6] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[   25.460301][    T6] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   25.468919][    T6] usb 5-1: config 0 descriptor??
[   25.487380][  T322] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   25.498334][  T322] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   25.508837][  T322] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[   25.521772][  T322] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   25.530836][  T322] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   25.539432][  T322] usb 2-1: config 0 descriptor??
[   25.739428][  T729] loop2: detected capacity change from 0 to 256
[   25.750223][  T729] FAT-fs (loop2): Unrecognized mount option "�������" or missing value
[   25.951312][  T322] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving
[   25.964879][  T322] plantronics 0003:047F:FFFF.0004: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0
[   26.004545][  T740] loop2: detected capacity change from 0 to 1024
[   26.011072][  T740] EXT4-fs: Ignoring removed orlov option
[   26.018667][  T740] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[   26.038478][  T289] EXT4-fs (loop2): unmounting filesystem.
[   26.076679][    T6] usb 5-1: string descriptor 0 read error: -71
[   26.083052][    T6] uclogic 0003:256C:006D.0003: failed retrieving string descriptor #200: -71
[   26.092060][    T6] uclogic 0003:256C:006D.0003: failed retrieving pen parameters: -71
[   26.100061][    T6] uclogic 0003:256C:006D.0003: failed probing pen v2 parameters: -71
[   26.108012][    T6] uclogic 0003:256C:006D.0003: failed probing parameters: -71
[   26.115295][    T6] uclogic: probe of 0003:256C:006D.0003 failed with error -71
[   26.123623][    T6] usb 5-1: USB disconnect, device number 2
[   26.316279][  T322] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   26.496279][  T322] usb 3-1: Using ep0 maxpacket: 32
[   26.502211][  T322] usb 3-1: config 0 has an invalid interface number: 184 but max is 0
[   26.510439][  T322] usb 3-1: config 0 has no interface number 0
[   26.516352][  T322] usb 3-1: config 0 interface 184 has no altsetting 0
[   26.524311][  T322] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[   26.533222][  T322] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   26.540986][  T322] usb 3-1: Product: syz
[   26.544982][  T322] usb 3-1: Manufacturer: syz
[   26.549793][  T322] usb 3-1: SerialNumber: syz
[   26.555083][  T322] usb 3-1: config 0 descriptor??
[   26.560713][  T322] smsc75xx v1.0.0
[   26.686294][  T323] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   26.754029][  T753] loop4: detected capacity change from 0 to 40427
[   26.763329][  T753] F2FS-fs (loop4): Invalid log blocks per segment (83886089)
[   26.770740][  T753] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock
[   26.779057][  T753] F2FS-fs (loop4): Unrecognized mount option "e" or missing value
[   26.868468][  T323] usb 4-1: config 0 has an invalid interface number: 64 but max is 0
[   26.877924][  T323] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   26.888021][  T323] usb 4-1: config 0 has no interface number 0
[   26.895463][  T323] usb 4-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48
[   26.905564][  T323] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   26.913435][  T323] usb 4-1: Product: syz
[   26.917473][  T323] usb 4-1: Manufacturer: syz
[   26.921877][  T323] usb 4-1: SerialNumber: syz
[   26.938129][  T323] usb 4-1: config 0 descriptor??
[   26.940426][  T758] loop0: detected capacity change from 0 to 512
[   26.958989][  T758] loop0: detected capacity change from 0 to 512
[   26.965782][  T758] EXT4-fs (loop0): Test dummy encryption mode enabled
[   26.973213][  T758] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[   26.984262][  T758] EXT4-fs error (device loop0): ext4_orphan_get:1426: comm syz.0.190: bad orphan inode 131083
[   26.994851][  T758] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[   27.007795][  T758] EXT4-fs error (device loop0): __ext4_iget:5057: inode #15: block 1803188595: comm syz.0.190: invalid block
[   27.019511][  T758] overlayfs: failed to resolve './file1': -117
[   27.032386][  T292] EXT4-fs (loop0): unmounting filesystem.
[   27.129897][  T769] loop0: detected capacity change from 0 to 128
[   27.138405][  T769] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[   27.144671][  T323] usb 4-1: Found UVC 0.00 device syz (046d:0823)
[   27.147305][  T769] ext4 filesystem being mounted at /22/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   27.152915][  T323] usb 4-1: No valid video chain found.
[   27.232527][  T292] EXT4-fs (loop0): unmounting filesystem.
[   27.246480][    C0] plantronics 0003:047F:FFFF.0004: usb_submit_urb(ctrl) failed: -1
[   27.361770][   T24] usb 4-1: USB disconnect, device number 2
[   27.557868][  T787] loop4: detected capacity change from 0 to 40427
[   27.564601][  T787] F2FS-fs (loop4): Insane cp_payload (553648128 >= 504)
[   27.568160][  T322] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): EEPROM read operation timeout
[   27.571908][  T787] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[   27.589212][  T787] F2FS-fs (loop4): fault_injection options not supported
[   27.596043][  T787] F2FS-fs (loop4): fault_type options not supported
[   27.603365][  T787] F2FS-fs (loop4): invalid crc value
[   27.609916][  T787] F2FS-fs (loop4): Found nat_bits in checkpoint
[   27.626282][  T294] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[   27.640562][  T787] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[   27.647427][  T787] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[   27.675283][  T787] syz.4.201: attempt to access beyond end of device
[   27.675283][  T787] loop4: rw=2049, sector=45096, nr_sectors = 16 limit=40427
[   27.689630][  T787] syz.4.201: attempt to access beyond end of device
[   27.689630][  T787] loop4: rw=2049, sector=45112, nr_sectors = 16 limit=40427
[   27.707303][  T290] syz-executor: attempt to access beyond end of device
[   27.707303][  T290] loop4: rw=2049, sector=45128, nr_sectors = 8 limit=40427
[   27.769539][  T322] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[   27.782902][  T793] tipc: Started in network mode
[   27.788523][  T793] tipc: Node identity ac1414aa, cluster identity 4711
[   27.792201][  T322] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71
[   27.797025][  T793] tipc: New replicast peer: 100.1.1.1
[   27.805026][  T322] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset
[   27.810827][  T793] tipc: Enabled bearer <udp:syz2>, priority 10
[   27.820123][  T322] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71
[   27.827357][  T294] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[   27.835386][  T322] smsc75xx: probe of 3-1:0.184 failed with error -71
[   27.856284][  T294] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   27.861524][  T322] usb 3-1: USB disconnect, device number 2
[   27.874825][  T294] usb 1-1: config 0 descriptor??
[   27.967067][  T809] loop4: detected capacity change from 0 to 256
[   27.975740][  T809] exFAT-fs (loop4): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d)
[   27.992079][  T809] exFAT-fs (loop4): hint_cluster is invalid (17)
[   28.025041][  T813] loop4: detected capacity change from 0 to 256
[   28.226282][   T60] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[   28.358545][  T323] usb 2-1: USB disconnect, device number 3
[   28.369070][  T820] netlink: 40 bytes leftover after parsing attributes in process `syz.2.215'.
[   28.405740][  T824] input: syz0 as /devices/virtual/input/input5
[   28.411849][   T60] usb 4-1: Using ep0 maxpacket: 16
[   28.418463][   T60] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   28.428687][   T60] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[   28.436274][  T783] usb 5-1: new full-speed USB device number 3 using dummy_hcd
[   28.439236][   T60] usb 4-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e
[   28.453821][   T60] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   28.461762][   T60] usb 4-1: Product: syz
[   28.465829][   T60] usb 4-1: Manufacturer: syz
[   28.470351][   T60] usb 4-1: SerialNumber: syz
[   28.475371][   T60] usb 4-1: config 0 descriptor??
[   28.516293][  T323] usb 2-1: new full-speed USB device number 4 using dummy_hcd
[   28.617366][  T783] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   28.627385][  T783] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[   28.639716][  T783] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   28.648681][  T783] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   28.656895][  T783] usb 5-1: Product: syz
[   28.660913][  T783] usb 5-1: Manufacturer: syz
[   28.665324][  T783] usb 5-1: SerialNumber: syz
[   28.691372][   T60] usb 4-1: USB disconnect, device number 3
[   28.727326][  T323] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   28.737301][  T323] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[   28.752752][  T323] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   28.761729][  T323] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   28.769536][  T323] usb 2-1: Product: syz
[   28.773456][  T323] usb 2-1: Manufacturer: syz
[   28.777917][  T323] usb 2-1: SerialNumber: syz
[   28.836320][   T39] tipc: Node number set to 2886997162
[   28.874572][  T783] usb 5-1: 0:2 : does not exist
[   28.883073][  T783] usb 5-1: 5:0: failed to get current value for ch 0 (-22)
[   28.895087][  T849] syz.2.228[849] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   28.895142][  T849] syz.2.228[849] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   28.897760][  T783] usb 5-1: USB disconnect, device number 3
[   28.935690][  T849] netlink: 8 bytes leftover after parsing attributes in process `syz.2.228'.
[   28.988579][  T323] usb 2-1: 0:2 : does not exist
[   28.995204][  T323] usb 2-1: 5:0: failed to get current value for ch 0 (-22)
[   29.011028][   T28] kauditd_printk_skb: 45 callbacks suppressed
[   29.011041][   T28] audit: type=1400 audit(1741714484.260:282): avc:  denied  { create } for  pid=854 comm="syz.2.231" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   29.011927][  T323] usb 2-1: USB disconnect, device number 4
[   29.037273][   T28] audit: type=1400 audit(1741714484.270:283): avc:  denied  { ioctl } for  pid=854 comm="syz.2.231" path="socket:[17331]" dev="sockfs" ino=17331 ioctlcmd=0x48d4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   29.092233][  T294] usb 1-1: Cannot set autoneg
[   29.098447][  T294] MOSCHIP usb-ethernet driver: probe of 1-1:0.0 failed with error -71
[   29.107610][  T294] usb 1-1: USB disconnect, device number 4
[   29.237571][  T433] udevd[433]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory
[   29.237754][  T847] udevd[847]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   29.318934][   T28] audit: type=1400 audit(1741714484.570:284): avc:  denied  { append } for  pid=876 comm="syz.2.241" name="001" dev="devtmpfs" ino=160 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[   29.347014][  T877] usb usb1: usbfs: process 877 (syz.2.241) did not claim interface 63 before use
[   29.374232][  T881] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22
[   29.436850][   T28] audit: type=1400 audit(1741714484.690:285): avc:  denied  { relabelfrom } for  pid=886 comm="syz.4.246" name="NETLINK" dev="sockfs" ino=17408 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   29.477690][   T28] audit: type=1400 audit(1741714484.690:286): avc:  denied  { relabelto } for  pid=886 comm="syz.4.246" name="NETLINK" dev="sockfs" ino=17408 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=netlink_netfilter_socket permissive=1
[   29.593380][  T915] serio: Serial port ptm1
[   29.666487][  T929] IPv6: Can't replace route, no match found
[   29.672689][  T930] loop0: detected capacity change from 0 to 512
[   29.686770][  T930] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[   29.709763][  T930] EXT4-fs (loop0): 1 truncate cleaned up
[   29.720446][  T930] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[   29.738730][  T943] netlink: 'syz.4.271': attribute type 4 has an invalid length.
[   29.764589][  T943] netlink: 'syz.4.271': attribute type 4 has an invalid length.
[   29.785323][   T28] audit: type=1400 audit(1741714485.030:287): avc:  denied  { unmount } for  pid=293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[   29.814179][  T950] process 'syz.1.275' launched './file0' with NULL argv: empty string added
[   29.818374][   T28] audit: type=1400 audit(1741714485.060:288): avc:  denied  { mounton } for  pid=954 comm="syz.3.276" path="/81/file0" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1
[   29.844807][   T28] audit: type=1400 audit(1741714485.080:289): avc:  denied  { execute_no_trans } for  pid=949 comm="syz.1.275" path="/33/file0" dev="tmpfs" ino=187 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[   29.875179][  T959] loop3: detected capacity change from 0 to 1024
[   29.881787][  T959] EXT4-fs: Ignoring removed orlov option
[   29.887294][  T959] EXT4-fs: Ignoring removed oldalloc option
[   29.893498][  T959] EXT4-fs (loop3): Test dummy encryption mode enabled
[   29.902044][  T959] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[   29.974904][  T965] syz.1.280[965] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   29.974956][  T965] syz.1.280[965] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   29.987942][  T965] netem: incorrect gi model size
[   30.003656][  T965] netem: change failed
[   30.018920][  T967] netlink: 4 bytes leftover after parsing attributes in process `syz.1.281'.
[   30.096301][  T783] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[   30.126968][  T977] x_tables: duplicate underflow at hook 4
[   30.186289][  T294] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[   30.276260][  T783] usb 5-1: Using ep0 maxpacket: 32
[   30.282243][  T783] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   30.293078][  T783] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   30.302649][  T783] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[   30.311484][  T783] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   30.320854][  T783] hub 5-1:4.0: USB hub found
[   30.386243][  T294] usb 4-1: Using ep0 maxpacket: 32
[   30.392199][  T294] usb 4-1: config 0 has an invalid interface number: 184 but max is 0
[   30.400202][  T294] usb 4-1: config 0 has no interface number 0
[   30.406074][  T294] usb 4-1: config 0 interface 184 has no altsetting 0
[   30.413959][  T294] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[   30.422804][  T294] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   30.430653][  T294] usb 4-1: Product: syz
[   30.434613][  T294] usb 4-1: Manufacturer: syz
[   30.439077][  T323] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[   30.446346][  T294] usb 4-1: SerialNumber: syz
[   30.455620][  T294] usb 4-1: config 0 descriptor??
[   30.465066][  T984] 9pnet: p9_errstr2errno: server reported unknown error �@�L��	
[   30.465377][  T294] smsc75xx v1.0.0
[   30.476818][  T294] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22
[   30.488144][  T294] smsc75xx: probe of 4-1:0.184 failed with error -22
[   30.488267][   T28] audit: type=1400 audit(1741714485.740:290): avc:  denied  { append } for  pid=985 comm="syz.2.289" name="kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[   30.524988][  T783] hub 5-1:4.0: config failed, can't read hub descriptor (err -22)
[   30.556543][  T783] usb 5-1: USB disconnect, device number 4
[   30.615427][   T28] audit: type=1400 audit(1741714485.860:291): avc:  denied  { setopt } for  pid=992 comm="syz.2.292" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   30.615458][  T993] xt_hashlimit: size too large, truncated to 1048576
[   30.642120][  T323] usb 2-1: Using ep0 maxpacket: 32
[   30.648189][  T323] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   30.659148][  T323] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   30.681876][  T323] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[   30.691073][  T323] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   30.699990][  T323] usb 2-1: config 0 descriptor??
[   30.704994][  T294] usb 4-1: USB disconnect, device number 4
[   30.712125][  T323] hub 2-1:0.0: USB hub found
[   30.816656][  T996] netlink: 96 bytes leftover after parsing attributes in process `syz.2.293'.
[   30.912103][  T323] hub 2-1:0.0: 1 port detected
[   31.159196][ T1025] loop2: detected capacity change from 0 to 128
[   31.198256][  T293] EXT4-fs (loop3): unmounting filesystem.
[   31.236842][  T292] EXT4-fs (loop0): unmounting filesystem.
[   31.506312][   T60] usb 5-1: new full-speed USB device number 5 using dummy_hcd
[   31.516202][  T323] hub 2-1:0.0: activate --> -90
[   31.646540][  T294] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[   31.700129][   T60] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   31.710182][   T60] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[   31.737022][   T60] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   31.745923][   T60] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   31.753823][   T60] usb 5-1: Product: syz
[   31.757966][   T60] usb 5-1: Manufacturer: syz
[   31.762793][   T60] usb 5-1: SerialNumber: syz
[   31.826309][  T294] usb 4-1: Using ep0 maxpacket: 32
[   31.832286][  T294] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   31.843061][  T294] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   31.852551][  T294] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[   31.861421][  T294] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   31.870033][  T294] usb 4-1: config 0 descriptor??
[   31.875851][  T294] hub 4-1:0.0: USB hub found
[   31.919844][  T783] usb 2-1: USB disconnect, device number 5
[   31.943209][ T1062] loop2: detected capacity change from 0 to 256
[   31.973640][   T60] usb 5-1: 0:2 : does not exist
[   31.980841][   T60] usb 5-1: 5:0: failed to get current value for ch 0 (-22)
[   31.991872][   T60] usb 5-1: USB disconnect, device number 5
[   32.076808][  T294] hub 4-1:0.0: 1 port detected
[   32.196842][  T847] udevd[847]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   32.236410][  T322] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[   32.416269][  T322] usb 3-1: Using ep0 maxpacket: 16
[   32.422365][  T322] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[   32.435617][  T322] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   32.445600][  T322] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[   32.455845][  T322] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   32.493153][  T322] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   32.502526][  T322] usb 3-1: Product: syz
[   32.507037][  T322] usb 3-1: Manufacturer: syz
[   32.516271][  T322] usb 3-1: SerialNumber: syz
[   32.554903][ T1073] overlayfs: failed to resolve './file0': -2
[   32.600251][ T1067] loop1: detected capacity change from 0 to 40427
[   32.600852][ T1077] loop4: detected capacity change from 0 to 128
[   32.607386][ T1067] F2FS-fs (loop1): fault_injection options not supported
[   32.620481][ T1077] EXT4-fs: Ignoring removed nobh option
[   32.629279][ T1067] F2FS-fs (loop1): invalid crc value
[   32.636463][ T1067] F2FS-fs (loop1): Found nat_bits in checkpoint
[   32.646538][ T1077] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[   32.655011][ T1077] ext4 filesystem being mounted at /59/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   32.655917][ T1082] loop0: detected capacity change from 0 to 256
[   32.676871][ T1082] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   32.681451][  T294] hub 4-1:0.0: hub_ext_port_status failed (err = -71)
[   32.693954][  T323] usb 4-1: USB disconnect, device number 5
[   32.701038][ T1082] exFAT-fs (loop0): Medium has reported failures. Some data may be lost.
[   32.712314][  T290] EXT4-fs (loop4): unmounting filesystem.
[   32.719458][ T1067] F2FS-fs (loop1): Start checkpoint disabled!
[   32.732067][ T1082] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[   32.732848][ T1067] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6
[   32.879363][    T8] kworker/u4:0: attempt to access beyond end of device
[   32.879363][    T8] loop1: rw=2049, sector=40960, nr_sectors = 8 limit=40427
[   32.923814][ T1100] xt_hashlimit: size too large, truncated to 1048576
[   32.930537][  T322] usb 3-1: 0:2 : does not exist
[   33.209040][ T1117] kvm: vcpu 2: requested 128 ns lapic timer period limited to 200000 ns
[   33.218071][ T1117] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer.
[   33.254449][ T1111] loop1: detected capacity change from 0 to 40427
[   33.261289][ T1111] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[   33.269934][ T1111] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[   33.280950][ T1111] F2FS-fs (loop1): Found nat_bits in checkpoint
[   33.332121][ T1111] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[   33.339186][ T1111] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[   33.508645][ T1145] user requested TSC rate below hardware speed
[   33.548920][ T1151] netlink: 'syz.0.355': attribute type 16 has an invalid length.
[   33.556544][ T1151] netlink: 'syz.0.355': attribute type 17 has an invalid length.
[   33.567447][ T1151] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[   33.574541][ T1151] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[   33.602352][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready
[   33.611148][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   33.619617][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready
[   33.627779][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   33.636048][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   33.644252][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   33.652808][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   33.660966][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   33.735359][  T322] usb 3-1: 1:0: failed to get current value for ch 0 (-22)
[   33.762613][  T322] usb 3-1: USB disconnect, device number 3
[   33.959424][ T1195] loop0: detected capacity change from 0 to 1024
[   33.965785][ T1195] EXT4-fs: Ignoring removed orlov option
[   33.972109][ T1195] EXT4-fs: Ignoring removed nomblk_io_submit option
[   33.984235][ T1195] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   33.998031][ T1195] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[   34.030270][  T292] EXT4-fs (loop0): unmounting filesystem.
[   34.089985][   T28] kauditd_printk_skb: 24 callbacks suppressed
[   34.089999][   T28] audit: type=1400 audit(1741714489.340:316): avc:  denied  { read write } for  pid=293 comm="syz-executor" name="loop3" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[   34.120600][   T28] audit: type=1400 audit(1741714489.340:317): avc:  denied  { open } for  pid=292 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=114 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[   34.147223][   T28] audit: type=1400 audit(1741714489.340:318): avc:  denied  { ioctl } for  pid=292 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=114 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[   34.173395][   T28] audit: type=1400 audit(1741714489.370:319): avc:  denied  { append } for  pid=85 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   34.200164][   T28] audit: type=1400 audit(1741714489.380:320): avc:  denied  { bpf } for  pid=1208 comm="syz.3.378" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[   34.220571][   T28] audit: type=1400 audit(1741714489.380:321): avc:  denied  { map_create } for  pid=1208 comm="syz.3.378" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[   34.239566][   T28] audit: type=1400 audit(1741714489.380:322): avc:  denied  { map_read map_write } for  pid=1208 comm="syz.3.378" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[   34.267568][   T28] audit: type=1400 audit(1741714489.380:323): avc:  denied  { prog_load } for  pid=1208 comm="syz.3.378" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[   34.287295][   T28] audit: type=1400 audit(1741714489.380:324): avc:  denied  { perfmon } for  pid=1208 comm="syz.3.378" capability=38  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[   34.309692][   T28] audit: type=1400 audit(1741714489.380:325): avc:  denied  { prog_run } for  pid=1208 comm="syz.3.378" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[   34.409631][ T1209] loop3: detected capacity change from 0 to 40427
[   34.427000][ T1209] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[   34.434708][ T1209] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[   34.443658][ T1209] F2FS-fs (loop3): invalid crc value
[   34.451889][ T1227] syz.1.387 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[   34.474437][ T1209] F2FS-fs (loop3): Found nat_bits in checkpoint
[   34.520595][ T1209] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[   34.533865][ T1209] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[   34.577225][  T322] kernel write not supported for file bpf-prog (pid: 322 comm: kworker/0:3)
[   34.616362][  T783] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[   34.635202][ T1252] loop0: detected capacity change from 0 to 512
[   34.672609][ T1252] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[   34.696622][ T1252] ext4 filesystem being mounted at /70/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   34.702963][ T1257] loop3: detected capacity change from 0 to 512
[   34.733746][ T1252] EXT4-fs error (device loop0): ext4_empty_dir:3136: inode #12: comm syz.0.399: invalid size
[   34.746560][ T1252] EXT4-fs (loop0): Remounting filesystem read-only
[   34.759704][ T1257] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[   34.768612][ T1257] ext4 filesystem being mounted at /103/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   34.781723][  T292] EXT4-fs (loop0): unmounting filesystem.
[   34.782434][ T1257] EXT4-fs (loop3): unmounting filesystem.
[   34.796317][  T783] usb 3-1: Using ep0 maxpacket: 16
[   34.804067][  T783] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[   34.822783][  T783] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   34.840680][  T783] usb 3-1: Product: syz
[   34.841009][ T1272] loop4: detected capacity change from 0 to 1024
[   34.845498][  T783] usb 3-1: Manufacturer: syz
[   34.855782][  T783] usb 3-1: SerialNumber: syz
[   34.860962][  T783] r8152-cfgselector 3-1: config 0 descriptor??
[   34.893626][ T1272] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[   34.904138][ T1272] ext4 filesystem being mounted at /72/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   34.937123][  T290] EXT4-fs (loop4): unmounting filesystem.
[   34.967450][ T1284] loop4: detected capacity change from 0 to 512
[   35.006457][ T1284] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[   35.016387][ T1284] ext4 filesystem being mounted at /73/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   35.058505][ T1284] overlayfs: conflicting lowerdir path
[   35.078511][  T290] EXT4-fs (loop4): unmounting filesystem.
[   35.226505][ T1300] loop0: detected capacity change from 0 to 256
[   35.262210][ T1298] loop4: detected capacity change from 0 to 40427
[   35.269859][ T1300] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d)
[   35.282433][  T783] r8152-cfgselector 3-1: Unknown version 0x0000
[   35.290061][ T1298] F2FS-fs (loop4): fault_injection options not supported
[   35.291564][  T783] r8152-cfgselector 3-1: bad CDC descriptors
[   35.304833][ T1298] F2FS-fs (loop4): invalid crc value
[   35.311367][  T783] r8152-cfgselector 3-1: Unknown version 0x0000
[   35.327531][  T783] r8152-cfgselector 3-1: USB disconnect, device number 4
[   35.344357][ T1298] F2FS-fs (loop4): Found nat_bits in checkpoint
[   35.400012][ T1298] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[   35.446814][  T290] syz-executor: attempt to access beyond end of device
[   35.446814][  T290] loop4: rw=2049, sector=45096, nr_sectors = 32 limit=40427
[   35.491564][ T1332] netlink: 12 bytes leftover after parsing attributes in process `syz.1.430'.
[   35.520044][ T1332] loop1: detected capacity change from 0 to 2048
[   35.535555][ T1336] loop0: detected capacity change from 0 to 256
[   35.542323][ T1336] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   35.553114][ T1336] exFAT-fs (loop0): Medium has reported failures. Some data may be lost.
[   35.563191][ T1336] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[   35.619513][ T1340] input: syz0 as /devices/virtual/input/input6
[   35.686353][  T322] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[   35.711219][ T1349] input: syz1 as /devices/virtual/input/input7
[   35.792765][ T1355] device bond_slave_1 entered promiscuous mode
[   35.799113][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready
[   35.807450][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   35.876339][  T322] usb 4-1: Using ep0 maxpacket: 32
[   35.883562][  T322] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   35.884735][ T1368] skbuff: bad partial csum: csum=65506/2 headroom=144 headlen=65526
[   35.898435][  T322] usb 4-1: New USB device found, idVendor=1630, idProduct=0042, bcdDevice=5b.13
[   35.911674][ T1353] bridge0: port 1(bridge_slave_0) entered blocking state
[   35.918618][ T1353] bridge0: port 1(bridge_slave_0) entered disabled state
[   35.925739][  T322] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   35.934289][ T1353] device bridge_slave_0 entered promiscuous mode
[   35.941155][ T1353] bridge0: port 2(bridge_slave_1) entered blocking state
[   35.941935][  T322] usb 4-1: Product: syz
[   35.949413][ T1353] bridge0: port 2(bridge_slave_1) entered disabled state
[   35.959681][ T1353] device bridge_slave_1 entered promiscuous mode
[   35.959959][  T322] usb 4-1: Manufacturer: syz
[   35.970711][  T322] usb 4-1: SerialNumber: syz
[   35.979878][  T322] usb 4-1: config 0 descriptor??
[   35.991831][  T322] usb 4-1: bad CDC descriptors
[   36.026255][  T783] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[   36.058383][ T1353] bridge0: port 2(bridge_slave_1) entered blocking state
[   36.065263][ T1353] bridge0: port 2(bridge_slave_1) entered forwarding state
[   36.072374][ T1353] bridge0: port 1(bridge_slave_0) entered blocking state
[   36.079150][ T1353] bridge0: port 1(bridge_slave_0) entered forwarding state
[   36.107030][   T10] bridge0: port 1(bridge_slave_0) entered disabled state
[   36.114334][   T10] bridge0: port 2(bridge_slave_1) entered disabled state
[   36.119714][ T1373] loop2: detected capacity change from 0 to 40427
[   36.127892][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   36.135487][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   36.143670][ T1373] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[   36.151328][ T1373] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[   36.159786][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   36.167861][   T10] bridge0: port 1(bridge_slave_0) entered blocking state
[   36.168428][ T1373] F2FS-fs (loop2): Found nat_bits in checkpoint
[   36.174689][   T10] bridge0: port 1(bridge_slave_0) entered forwarding state
[   36.197872][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   36.207345][  T783] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   36.223532][  T783] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   36.226278][ T1373] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[   36.233818][   T10] bridge0: port 2(bridge_slave_1) entered blocking state
[   36.240028][ T1373] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[   36.246807][   T10] bridge0: port 2(bridge_slave_1) entered forwarding state
[   36.256678][  T783] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[   36.270188][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   36.278103][  T783] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   36.287219][  T323] usb 4-1: USB disconnect, device number 6
[   36.293583][  T783] usb 2-1: config 0 descriptor??
[   36.298845][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   36.307716][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   36.329210][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   36.337214][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   36.344539][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   36.353250][ T1353] device veth0_vlan entered promiscuous mode
[   36.365261][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   36.375950][ T1353] device veth1_macvtap entered promiscuous mode
[   36.388360][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   36.399818][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   36.489941][ T1384] loop9: detected capacity change from 0 to 8
[   36.547039][ T1392] loop5: detected capacity change from 0 to 128
[   36.694358][ T1403] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[   36.713052][ T1403] device bridge_slave_0 left promiscuous mode
[   36.726608][ T1403] bridge0: port 1(bridge_slave_0) entered disabled state
[   36.747251][ T1403] device bridge_slave_1 left promiscuous mode
[   36.753217][ T1403] bridge0: port 2(bridge_slave_1) entered disabled state
[   36.784055][ T1407] bridge0: port 2(bridge_slave_1) entered disabled state
[   36.810526][ T1407] device bridge_slave_1 left promiscuous mode
[   36.836247][ T1407] bridge0: port 2(bridge_slave_1) entered disabled state
[   36.934233][ T1408] bridge0: port 1(bridge_slave_0) entered blocking state
[   36.941350][ T1408] bridge0: port 1(bridge_slave_0) entered disabled state
[   36.949351][ T1408] device bridge_slave_0 entered promiscuous mode
[   36.958990][ T1408] bridge0: port 2(bridge_slave_1) entered blocking state
[   36.965912][ T1408] bridge0: port 2(bridge_slave_1) entered disabled state
[   36.973315][ T1408] device bridge_slave_1 entered promiscuous mode
[   37.040595][ T1408] bridge0: port 2(bridge_slave_1) entered blocking state
[   37.047495][ T1408] bridge0: port 2(bridge_slave_1) entered forwarding state
[   37.054579][ T1408] bridge0: port 1(bridge_slave_0) entered blocking state
[   37.061378][ T1408] bridge0: port 1(bridge_slave_0) entered forwarding state
[   37.089681][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   37.097722][    T8] bridge0: port 1(bridge_slave_0) entered disabled state
[   37.104865][    T8] bridge0: port 2(bridge_slave_1) entered disabled state
[   37.123417][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   37.132064][    T8] bridge0: port 1(bridge_slave_0) entered blocking state
[   37.138939][    T8] bridge0: port 1(bridge_slave_0) entered forwarding state
[   37.147272][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   37.155493][    T8] bridge0: port 2(bridge_slave_1) entered blocking state
[   37.162361][    T8] bridge0: port 2(bridge_slave_1) entered forwarding state
[   37.176921][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   37.184882][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   37.193366][   T43] device bridge_slave_1 left promiscuous mode
[   37.199584][   T43] bridge0: port 2(bridge_slave_1) entered disabled state
[   37.207021][   T43] device bridge_slave_0 left promiscuous mode
[   37.212946][   T43] bridge0: port 1(bridge_slave_0) entered disabled state
[   37.220943][   T43] device veth1_macvtap left promiscuous mode
[   37.227672][   T43] device veth0_vlan left promiscuous mode
[   37.313886][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   37.322775][  T783] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.0005/input/input8
[   37.335756][  T783] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.0005/input/input9
[   37.339285][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   37.355277][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   37.355932][  T783] input: HID 256c:006d Touch Strip as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.0005/input/input10
[   37.366887][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   37.377194][  T783] input: HID 256c:006d Dial as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.0005/input/input11
[   37.383801][ T1408] device veth0_vlan entered promiscuous mode
[   37.402231][  T783] uclogic 0003:256C:006D.0005: input,hiddev96,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.1-1/input0
[   37.405947][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   37.430376][ T1408] device veth1_macvtap entered promiscuous mode
[   37.456842][  T771] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   37.478173][  T771] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   37.505648][ T1421] netlink: 96 bytes leftover after parsing attributes in process `syz.6.471'.
[   37.559384][ T1423] loop6: detected capacity change from 0 to 2048
[   37.575797][  T730] usb 2-1: USB disconnect, device number 6
[   37.598178][ T1427] loop5: detected capacity change from 0 to 512
[   37.598844][ T1423] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[   37.628213][ T1427] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[   37.637188][ T1427] ext4 filesystem being mounted at /9/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   37.660405][ T1408] EXT4-fs (loop6): unmounting filesystem.
[   37.667595][ T1353] EXT4-fs (loop5): unmounting filesystem.
[   37.693507][ T1435] loop5: detected capacity change from 0 to 512
[   37.703034][ T1435] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem
[   37.711132][  T322] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[   37.719016][ T1435] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c118, mo2=0002]
[   37.730820][ T1435] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2186: inode #15: comm syz.5.469: corrupted in-inode xattr
[   37.743085][ T1435] EXT4-fs error (device loop5): ext4_orphan_get:1405: comm syz.5.469: couldn't read orphan inode 15 (err -117)
[   37.755098][ T1435] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[   37.788701][ T1443] loop3: detected capacity change from 0 to 512
[   37.799389][ T1443] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[   37.815329][ T1353] EXT4-fs (loop5): unmounting filesystem.
[   37.831945][ T1443] EXT4-fs (loop3): 1 truncate cleaned up
[   37.838831][ T1443] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[   37.907303][  T322] usb 5-1: Using ep0 maxpacket: 16
[   37.914244][  T322] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   37.928584][  T322] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[   37.941968][  T322] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[   37.951035][  T322] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   37.951764][  T293] EXT4-fs (loop3): unmounting filesystem.
[   37.981103][  T322] usb 5-1: config 0 descriptor??
[   38.050930][ T1469] loop6: detected capacity change from 0 to 512
[   38.083223][ T1474] __vm_enough_memory: pid: 1474, comm: syz.5.487, no enough memory for the allocation
[   38.114948][ T1469] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[   38.126626][   T43] device bridge_slave_1 left promiscuous mode
[   38.132589][   T43] bridge0: port 2(bridge_slave_1) entered disabled state
[   38.140577][   T43] device bridge_slave_0 left promiscuous mode
[   38.146990][   T43] bridge0: port 1(bridge_slave_0) entered disabled state
[   38.155693][   T43] device veth1_macvtap left promiscuous mode
[   38.161666][   T43] device veth0_vlan left promiscuous mode
[   38.176313][ T1469] ext4 filesystem being mounted at /5/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   38.220136][  T322] usbhid 5-1:0.0: can't add hid device: -71
[   38.225998][  T322] usbhid: probe of 5-1:0.0 failed with error -71
[   38.243872][  T322] usb 5-1: USB disconnect, device number 6
[   38.267440][ T1486] loop5: detected capacity change from 0 to 16
[   38.271091][ T1408] EXT4-fs (loop6): unmounting filesystem.
[   38.281620][ T1486] erofs: (device loop5): erofs_fc_fill_super: rootino(nid 36) is not a directory(i_mode 66300)
[   38.339185][ T1419] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[   38.445281][ T1503] netlink: 104 bytes leftover after parsing attributes in process `syz.6.498'.
[   38.469448][ T1505] input: syz0 as /devices/virtual/input/input12
[   39.096305][   T60] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[   39.141661][ T1548] loop5: detected capacity change from 0 to 512
[   39.148355][ T1548] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[   39.159865][ T1548] EXT4-fs (loop5): 1 truncate cleaned up
[   39.165375][ T1548] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[   39.176347][  T322] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[   39.216534][ T1353] EXT4-fs (loop5): unmounting filesystem.
[   39.237096][ T1552] loop5: detected capacity change from 0 to 512
[   39.257889][ T1552] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[   39.267142][ T1552] ext4 filesystem being mounted at /28/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   39.286924][   T60] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   39.300748][   T28] kauditd_printk_skb: 131 callbacks suppressed
[   39.300763][   T28] audit: type=1400 audit(1741714494.550:457): avc:  denied  { append } for  pid=1551 comm="syz.5.519" name="file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   39.303363][   T60] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   39.316272][   T28] audit: type=1400 audit(1741714494.550:458): avc:  denied  { open } for  pid=1551 comm="syz.5.519" path="/28/file1/file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   39.338227][   T60] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[   39.376285][  T322] usb 2-1: Using ep0 maxpacket: 16
[   39.382418][ T1353] EXT4-fs (loop5): unmounting filesystem.
[   39.382732][  T322] usb 2-1: config 0 has an invalid interface number: 224 but max is 0
[   39.398581][   T28] audit: type=1400 audit(1741714494.580:459): avc:  denied  { write } for  pid=1551 comm="syz.5.519" name="file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   39.405123][  T322] usb 2-1: config 0 has no interface number 0
[   39.426447][   T60] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   39.435220][   T60] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   39.443091][  T322] usb 2-1: config 0 interface 224 altsetting 18 endpoint 0xB has invalid maxpacket 512, setting to 64
[   39.454235][  T322] usb 2-1: config 0 interface 224 has no altsetting 0
[   39.461071][   T60] usb 5-1: config 0 descriptor??
[   39.470885][  T322] usb 2-1: New USB device found, idVendor=06cd, idProduct=0108, bcdDevice=b0.a1
[   39.479961][  T322] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   39.488976][  T322] usb 2-1: Product: syz
[   39.493966][  T322] usb 2-1: Manufacturer: syz
[   39.498612][  T322] usb 2-1: SerialNumber: syz
[   39.507716][  T322] usb 2-1: config 0 descriptor??
[   39.571426][   T28] audit: type=1400 audit(1741714494.820:460): avc:  denied  { watch watch_reads } for  pid=1559 comm="syz.5.522" path="/30" dev="tmpfs" ino=174 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[   39.597075][   T28] audit: type=1400 audit(1741714494.840:461): avc:  denied  { watch } for  pid=1559 comm="syz.5.522" path="/30/file0" dev="tmpfs" ino=179 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[   39.722358][   T28] audit: type=1400 audit(1741714494.970:462): avc:  denied  { append } for  pid=1577 comm="syz.6.531" name="kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[   39.749686][  T322] usb 2-1: USB disconnect, device number 7
[   39.869695][   T60] plantronics 0003:047F:FFFF.0006: unknown main item tag 0xd
[   39.877252][   T60] plantronics 0003:047F:FFFF.0006: No inputs registered, leaving
[   39.886273][   T60] plantronics 0003:047F:FFFF.0006: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0
[   40.006272][  T856] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[   40.176360][  T783] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[   40.197335][  T856] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   40.207257][  T856] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3
[   40.216690][  T856] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[   40.225674][  T856] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[   40.233574][  T856] usb 7-1: SerialNumber: syz
[   40.266923][ T1588] loop1: detected capacity change from 0 to 512
[   40.268675][   T28] audit: type=1400 audit(1741714495.520:463): avc:  denied  { unlink } for  pid=1589 comm="syz.5.544" name="#9" dev="tmpfs" ino=211 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[   40.273665][ T1588] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem
[   40.303988][ T1588] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c118, mo2=0002]
[   40.312684][ T1588] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2186: inode #15: comm syz.1.534: corrupted in-inode xattr
[   40.324683][ T1588] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.534: couldn't read orphan inode 15 (err -117)
[   40.336711][ T1588] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[   40.367387][  T783] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   40.377649][  T783] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 3
[   40.387496][  T291] EXT4-fs (loop1): unmounting filesystem.
[   40.393102][  T783] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[   40.402025][  T783] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[   40.409868][  T783] usb 4-1: SerialNumber: syz
[   40.441948][  T856] usb 7-1: 0:2 : does not exist
[   40.448402][  T856] usb 7-1: USB disconnect, device number 2
[   40.490887][ T1598] loop1: detected capacity change from 0 to 512
[   40.536519][  T336] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[   40.586287][   T60] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[   40.624012][  T783] usb 4-1: USB disconnect, device number 7
[   40.666820][ T1419] udevd[1419]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   40.766273][   T60] usb 6-1: Using ep0 maxpacket: 32
[   40.772240][   T60] usb 6-1: config 0 has an invalid interface number: 184 but max is 0
[   40.780438][   T60] usb 6-1: config 0 has no interface number 0
[   40.786369][   T60] usb 6-1: config 0 interface 184 has no altsetting 0
[   40.794268][   T60] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[   40.803353][   T60] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   40.811204][   T60] usb 6-1: Product: syz
[   40.815150][   T60] usb 6-1: Manufacturer: syz
[   40.819599][   T60] usb 6-1: SerialNumber: syz
[   40.824672][   T60] usb 6-1: config 0 descriptor??
[   40.830195][   T60] smsc75xx v1.0.0
[   40.973174][   T28] audit: type=1400 audit(1741714496.220:464): avc:  denied  { read } for  pid=1601 comm="syz.6.539" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   41.151341][   T28] audit: type=1400 audit(1741714496.400:465): avc:  denied  { sqpoll } for  pid=1607 comm="syz.3.541" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[   41.197382][ T1611] loop3: detected capacity change from 0 to 512
[   41.203719][ T1611] EXT4-fs: Ignoring removed orlov option
[   41.209466][ T1611] ext4: Unknown parameter 'obj_type'
[   41.310078][ T1623] loop1: detected capacity change from 0 to 16
[   41.316925][ T1623] erofs: (device loop1): mounted with root inode @ nid 36.
[   41.324922][   T28] audit: type=1400 audit(1741714496.570:466): avc:  denied  { read } for  pid=1622 comm="syz.1.547" name="file1" dev="loop1" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   41.355317][ T1625] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check.
[   41.404613][ T1631] loop1: detected capacity change from 0 to 512
[   41.411433][ T1631] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   41.422184][ T1631] EXT4-fs (loop1): 1 truncate cleaned up
[   41.428480][ T1631] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[   41.464007][  T291] EXT4-fs (loop1): unmounting filesystem.
[   41.546410][  T730] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[   41.569761][ T1645] loop1: detected capacity change from 0 to 1024
[   41.588257][ T1645] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[   41.606513][  T291] EXT4-fs (loop1): unmounting filesystem.
[   41.668546][ T1655] loop1: detected capacity change from 0 to 256
[   41.677392][ T1655] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d)
[   41.716184][ T1657] loop4: detected capacity change from 0 to 512
[   41.722933][ T1657] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[   41.733679][  T730] usb 4-1: Using ep0 maxpacket: 16
[   41.742398][ T1657] EXT4-fs (loop4): 1 truncate cleaned up
[   41.742818][  T730] usb 4-1: config 0 has an invalid interface number: 224 but max is 0
[   41.748074][ T1657] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[   41.768424][  T730] usb 4-1: config 0 has no interface number 0
[   41.783806][ T1662] input: syz0 as /devices/virtual/input/input13
[   41.800209][  T730] usb 4-1: config 0 interface 224 altsetting 18 endpoint 0xB has invalid maxpacket 512, setting to 64
[   41.833076][   T60] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): EEPROM read operation timeout
[   41.844722][  T730] usb 4-1: config 0 interface 224 has no altsetting 0
[   41.852894][  T290] EXT4-fs (loop4): unmounting filesystem.
[   41.859341][    C0] ==================================================================
[   41.867220][    C0] BUG: KASAN: use-after-free in dev_map_generic_redirect+0x9f/0x7d0
[   41.875029][    C0] Read of size 8 at addr ffff8881194ba600 by task kworker/0:1/19
[   41.882578][    C0] 
[   41.884760][    C0] CPU: 0 PID: 19 Comm: kworker/0:1 Not tainted 6.1.128-syzkaller-00006-g9bcabbda673a #0
[   41.894297][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[   41.904192][    C0] Workqueue: wg-crypt-wg0 wg_packet_tx_worker
[   41.910104][    C0] Call Trace:
[   41.913218][    C0]  <IRQ>
[   41.915915][    C0]  dump_stack_lvl+0x151/0x1b7
[   41.920424][    C0]  ? nf_tcp_handle_invalid+0x3f1/0x3f1
[   41.925716][    C0]  ? _printk+0xd1/0x111
[   41.929711][    C0]  ? __virt_addr_valid+0x242/0x2f0
[   41.934659][    C0]  print_report+0x158/0x4e0
[   41.938995][    C0]  ? __virt_addr_valid+0x242/0x2f0
[   41.943944][    C0]  ? kasan_complete_mode_report_info+0x90/0x1b0
[   41.950018][    C0]  ? dev_map_generic_redirect+0x9f/0x7d0
[   41.955487][    C0]  kasan_report+0x13c/0x170
[   41.959826][    C0]  ? dev_map_generic_redirect+0x9f/0x7d0
[   41.965296][    C0]  __asan_report_load8_noabort+0x14/0x20
[   41.970763][    C0]  dev_map_generic_redirect+0x9f/0x7d0
[   41.976060][    C0]  ? kasan_quarantine_put+0x34/0x1a0
[   41.981178][    C0]  ? kfree+0x7a/0xf0
[   41.984911][    C0]  ? bq_enqueue+0x3e0/0x3e0
[   41.989252][    C0]  ? bpf_prog_run_generic_xdp+0xa35/0x1200
[   41.994900][    C0]  xdp_do_generic_redirect+0x42e/0xb40
[   42.000188][    C0]  do_xdp_generic+0x53e/0x800
[   42.004701][    C0]  ? generic_xdp_tx+0x560/0x560
[   42.009387][    C0]  ? _raw_spin_lock_irqsave+0xf9/0x210
[   42.014683][    C0]  ? migrate_disable+0xd9/0x190
[   42.019368][    C0]  __netif_receive_skb_core+0x19ae/0x43d0
[   42.024925][    C0]  ? _raw_spin_unlock_irqrestore+0x5b/0x80
[   42.030563][    C0]  ? hrtimer_start_range_ns+0xa35/0xb70
[   42.035945][    C0]  ? qdisc_run+0x260/0x260
[   42.040198][    C0]  ? _raw_spin_unlock_irqrestore+0x5b/0x80
[   42.045838][    C0]  ? dummy_timer+0x2e8a/0x2ff0
[   42.050438][    C0]  ? resched_curr+0xc9/0x4f0
[   42.054870][    C0]  __netif_receive_skb+0x11c/0x530
[   42.059813][    C0]  ? blake2s_update+0x242/0x420
[   42.064498][    C0]  ? __netif_receive_skb_list_core+0x890/0x890
[   42.070490][    C0]  ? __kasan_check_write+0x14/0x20
[   42.075434][    C0]  ? _raw_spin_lock_irq+0xa5/0x1b0
[   42.080383][    C0]  ? _raw_spin_lock_irqsave+0x210/0x210
[   42.085767][    C0]  process_backlog+0x32c/0x630
[   42.090368][    C0]  __napi_poll+0xbe/0x5c0
[   42.094532][    C0]  net_rx_action+0x595/0xdd0
[   42.098959][    C0]  ? net_tx_action+0x560/0x560
[   42.103558][    C0]  ? hrtimer_reprogram+0x389/0x430
[   42.108506][    C0]  ? irqtime_account_irq+0x79/0x260
[   42.113539][    C0]  handle_softirqs+0x1db/0x650
[   42.118143][    C0]  __do_softirq+0xb/0xd
[   42.122129][    C0]  do_softirq+0xf6/0x150
[   42.126213][    C0]  </IRQ>
[   42.128987][    C0]  <TASK>
[   42.131764][    C0]  ? __local_bh_enable_ip+0x80/0x80
[   42.136802][    C0]  __local_bh_enable_ip+0x75/0x80
[   42.141660][    C0]  _raw_read_unlock_bh+0x29/0x30
[   42.146434][    C0]  wg_socket_send_skb_to_peer+0x178/0x1d0
[   42.151987][    C0]  wg_packet_tx_worker+0x1d7/0x520
[   42.156937][    C0]  process_one_work+0x73d/0xcb0
[   42.161624][    C0]  worker_thread+0xa60/0x1260
[   42.166139][    C0]  kthread+0x26d/0x300
[   42.170088][    C0]  ? worker_clr_flags+0x1a0/0x1a0
[   42.174905][    C0]  ? kthread_blkcg+0xd0/0xd0
[   42.179330][    C0]  ret_from_fork+0x1f/0x30
[   42.183587][    C0]  </TASK>
[   42.186446][    C0] 
[   42.188616][    C0] Allocated by task 1408:
[   42.192783][    C0]  kasan_set_track+0x4b/0x70
[   42.197297][    C0]  kasan_save_alloc_info+0x1f/0x30
[   42.202244][    C0]  __kasan_kmalloc+0x9c/0xb0
[   42.206669][    C0]  __kmalloc+0xb4/0x1e0
[   42.210693][    C0]  tnode_new+0xca/0x2e0
[   42.214657][    C0]  resize+0x2d0/0x1d60
[   42.218561][    C0]  fib_insert_alias+0xb20/0x1060
[   42.223334][    C0]  fib_table_insert+0xa01/0x20a0
[   42.228111][    C0]  fib_add_ifaddr+0x43f/0x15e0
[   42.232706][    C0]  fib_inetaddr_event+0x159/0x310
[   42.237566][    C0]  blocking_notifier_call_chain+0xbb/0x140
[   42.243208][    C0]  __inet_insert_ifa+0x8fb/0xb10
[   42.247982][    C0]  inet_rtm_newaddr+0x8f7/0x1780
[   42.252756][    C0]  rtnetlink_rcv_msg+0x9a5/0xca0
[   42.257534][    C0]  netlink_rcv_skb+0x1cd/0x410
[   42.262130][    C0]  rtnetlink_rcv+0x1c/0x20
[   42.266382][    C0]  netlink_unicast+0x906/0xab0
[   42.270985][    C0]  netlink_sendmsg+0xa15/0xd30
[   42.275582][    C0]  __sys_sendto+0x480/0x600
[   42.279923][    C0]  __x64_sys_sendto+0xe5/0x100
[   42.284524][    C0]  x64_sys_call+0x15c/0x9a0
[   42.288861][    C0]  do_syscall_64+0x3b/0xb0
[   42.293115][    C0]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   42.298846][    C0] 
[   42.301013][    C0] Freed by task 60:
[   42.304661][    C0]  kasan_set_track+0x4b/0x70
[   42.309085][    C0]  kasan_save_free_info+0x2b/0x40
[   42.313944][    C0]  ____kasan_slab_free+0x131/0x180
[   42.318896][    C0]  __kasan_slab_free+0x11/0x20
[   42.323494][    C0]  __kmem_cache_free+0x21d/0x410
[   42.328266][    C0]  kfree+0x7a/0xf0
[   42.331825][    C0]  kvfree+0x35/0x40
[   42.335470][    C0]  __node_free_rcu+0x49/0x80
[   42.339900][    C0]  rcu_do_batch+0x552/0xbe0
[   42.344236][    C0]  rcu_core+0x502/0xf40
[   42.348230][    C0]  rcu_core_si+0x9/0x10
[   42.352221][    C0]  handle_softirqs+0x1db/0x650
[   42.356823][    C0]  __do_softirq+0xb/0xd
[   42.360813][    C0] 
[   42.362985][    C0] Last potentially related work creation:
[   42.368540][    C0]  kasan_save_stack+0x3b/0x60
[   42.373051][    C0]  __kasan_record_aux_stack+0xb4/0xc0
[   42.378261][    C0]  kasan_record_aux_stack_noalloc+0xb/0x10
[   42.383904][    C0]  call_rcu+0xdc/0x10f0
[   42.387896][    C0]  replace+0x19b/0x4b0
[   42.391800][    C0]  resize+0xbaf/0x1d60
[   42.395707][    C0]  fib_insert_alias+0xb20/0x1060
[   42.400488][    C0]  fib_table_insert+0xa01/0x20a0
[   42.405260][    C0]  fib_add_ifaddr+0x43f/0x15e0
[   42.409854][    C0]  fib_inetaddr_event+0x159/0x310
[   42.414727][    C0]  blocking_notifier_call_chain+0xbb/0x140
[   42.420355][    C0]  __inet_insert_ifa+0x8fb/0xb10
[   42.425130][    C0]  inet_rtm_newaddr+0x8f7/0x1780
[   42.429903][    C0]  rtnetlink_rcv_msg+0x9a5/0xca0
[   42.434674][    C0]  netlink_rcv_skb+0x1cd/0x410
[   42.439276][    C0]  rtnetlink_rcv+0x1c/0x20
[   42.443529][    C0]  netlink_unicast+0x906/0xab0
[   42.448128][    C0]  netlink_sendmsg+0xa15/0xd30
[   42.452728][    C0]  __sys_sendto+0x480/0x600
[   42.457069][    C0]  __x64_sys_sendto+0xe5/0x100
[   42.461670][    C0]  x64_sys_call+0x15c/0x9a0
[   42.466008][    C0]  do_syscall_64+0x3b/0xb0
[   42.470261][    C0]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   42.475991][    C0] 
[   42.478159][    C0] Second to last potentially related work creation:
[   42.484583][    C0]  kasan_save_stack+0x3b/0x60
[   42.489095][    C0]  __kasan_record_aux_stack+0xb4/0xc0
[   42.494303][    C0]  kasan_record_aux_stack_noalloc+0xb/0x10
[   42.499945][    C0]  kvfree_call_rcu+0x9f/0x800
[   42.504459][    C0]  kernfs_unlink_open_file+0x327/0x3d0
[   42.509753][    C0]  kernfs_fop_release+0x253/0x310
[   42.514614][    C0]  __fput+0x1e5/0x870
[   42.518433][    C0]  ____fput+0x15/0x20
[   42.522250][    C0]  task_work_run+0x24d/0x2e0
[   42.526678][    C0]  exit_to_user_mode_loop+0x94/0xa0
[   42.531711][    C0]  exit_to_user_mode_prepare+0x5a/0xa0
[   42.537007][    C0]  syscall_exit_to_user_mode+0x26/0x130
[   42.542388][    C0]  do_syscall_64+0x47/0xb0
[   42.546642][    C0]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   42.552370][    C0] 
[   42.554538][    C0] The buggy address belongs to the object at ffff8881194ba600
[   42.554538][    C0]  which belongs to the cache kmalloc-96 of size 96
[   42.568254][    C0] The buggy address is located 0 bytes inside of
[   42.568254][    C0]  96-byte region [ffff8881194ba600, ffff8881194ba660)
[   42.581104][    C0] 
[   42.583269][    C0] The buggy address belongs to the physical page:
[   42.589518][    C0] page:ffffea0004652e80 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1194ba
[   42.599584][    C0] flags: 0x4000000000000200(slab|zone=1)
[   42.605062][    C0] raw: 4000000000000200 ffffea00044ed740 dead000000000005 ffff888100042900
[   42.613477][    C0] raw: 0000000000000000 0000000000200020 00000001ffffffff 0000000000000000
[   42.621893][    C0] page dumped because: kasan: bad access detected
[   42.628153][    C0] page_owner tracks the page as allocated
[   42.633694][    C0] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x12cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY), pid 114, tgid 114 (udevd), ts 4965230062, free_ts 0
[   42.650100][    C0]  post_alloc_hook+0x213/0x220
[   42.654708][    C0]  prep_new_page+0x1b/0x110
[   42.659041][    C0]  get_page_from_freelist+0x3a98/0x3b10
[   42.664419][    C0]  __alloc_pages+0x234/0x610
[   42.668847][    C0]  alloc_slab_page+0x6c/0xf0
[   42.673271][    C0]  new_slab+0x90/0x3e0
[   42.677179][    C0]  ___slab_alloc+0x6f9/0xb80
[   42.681604][    C0]  __slab_alloc+0x5d/0xa0
[   42.685771][    C0]  __kmem_cache_alloc_node+0x207/0x2a0
[   42.691067][    C0]  kmalloc_trace+0x2a/0xa0
[   42.695319][    C0]  kernfs_fop_open+0x70e/0xb10
[   42.699918][    C0]  do_dentry_open+0x891/0x1250
[   42.704519][    C0]  vfs_open+0x73/0x80
[   42.708340][    C0]  path_openat+0x2532/0x2d60
[   42.712764][    C0]  do_filp_open+0x230/0x480
[   42.717105][    C0]  do_sys_openat2+0x151/0x870
[   42.721619][    C0] page_owner free stack trace missing
[   42.726827][    C0] 
[   42.728994][    C0] Memory state around the buggy address:
[   42.734467][    C0]  ffff8881194ba500: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc
[   42.742366][    C0]  ffff8881194ba580: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc
[   42.750264][    C0] >ffff8881194ba600: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc
[   42.758158][    C0]                    ^
[   42.762066][    C0]  ffff8881194ba680: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc
[   42.769965][    C0]  ffff8881194ba700: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc
[   42.777860][    C0] ==================================================================
[   42.785833][    C0] Disabling lock debugging due to kernel taint
[   42.797702][   T60] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[   42.808383][   T60] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71
[   42.818108][   T60] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset
[   42.828190][   T60] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71
[   42.837439][   T60] smsc75xx: probe of 6-1:0.184 failed with error -71
[   42.844453][    T6] usb 5-1: USB disconnect, device number 7
[   42.850959][   T60] usb 6-1: USB disconnect, device number 2
[   42.863537][  T730] usb 4-1: New USB device found, idVendor=06cd, idProduct=0108, bcdDevice=b0.a1
[   42.872701][  T730] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   42.880525][  T730] usb 4-1: Product: syz
[   42.884478][  T730] usb 4-1: Manufacturer: syz
[   42.888929][  T730] usb 4-1: SerialNumber: syz
[   42.894400][  T730] usb 4-1: config 0 descriptor??
[   43.104261][  T730] usb 4-1: USB disconnect, device number 8
[   43.246282][    T6] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[   43.427315][    T6] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   43.438039][    T6] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   43.447597][    T6] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[   43.460264][    T6] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   43.469112][    T6] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   43.477418][    T6] usb 5-1: config 0 descriptor??
[   43.884880][    T6] plantronics 0003:047F:FFFF.0007: No inputs registered, leaving
[   43.893527][    T6] plantronics 0003:047F:FFFF.0007: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0
[   44.408338][  T783] usb 5-1: USB disconnect, device number 8