last executing test programs:

37.51700682s ago: executing program 3 (id=54):
setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, 0x0, 0x0)
setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, 0x0, 0x0)
r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x0)
r2 = openat$cgroup_subtree(r1, &(0x7f0000000100), 0x2, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000980)={[{0x2d, 'pids'}]}, 0x6)

37.494124311s ago: executing program 3 (id=56):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000000, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, 0x0, &(0x7f00000002c0)}, 0x20)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="a800000000010904000500000000000002000000240001801400018008000100e000000108000200ac1e01010c00028005000100000009002400028014000180080001000000010908000200ac1e00010c000280050001000000000044000f800800014000000006080003400000002b080003400000000808000240000000400800014000000000fb0001400000000708000140000044f10800034000000003080007"], 0xa8}}, 0x0)

37.443771932s ago: executing program 3 (id=60):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000004000000000000000000008500000050000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='ext4_ext_remove_space_done\x00', r0}, 0x10)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='ext4_ext_remove_space_done\x00', r2}, 0x10)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10)
close(r1)

37.416503572s ago: executing program 3 (id=61):
syz_mount_image$ext4(&(0x7f0000000b00)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x1408e, &(0x7f0000000780)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@min_batch_time={'min_batch_time', 0x3d, 0xfff}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x80}}, {@stripe={'stripe', 0x3d, 0x4000}}, {@resgid}, {@max_batch_time={'max_batch_time', 0x3d, 0x4}}]}, 0x1, 0x43a, &(0x7f0000000340)="$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")
chdir(&(0x7f0000004340)='./file0\x00')
creat(&(0x7f0000000040)='./bus\x00', 0x0)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0)
write$binfmt_elf64(r0, &(0x7f0000000140)=ANY=[], 0xfd14)
mknod(&(0x7f00000005c0)='./file0\x00', 0x0, 0x0)

37.240326655s ago: executing program 3 (id=68):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0}, &(0x7f0000000000), &(0x7f0000000080)=r1}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r2}, 0x10)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000006000000000000000000008500000041000000850000007d00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x8, 0x0, 0x0, 0x0, 0x0, 0xffc5, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

36.990329789s ago: executing program 3 (id=74):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = memfd_create(&(0x7f0000000240)='+\x8b\x8a\xa9\x16\x11\x91J\xbc+  \x18\x17\xc2:}\xa3\x9bO\xdd\xdf\xdf\x92\xd5\xed\xb4\x17\xe5\xd6\x9a\xb2\xd8\x9ba\xde\xb2.F\xc0\x99}|\xaf\xd3\x1d\x84[*_\x9f\x9d\xb0rYP\x1b\x9f \xe0\x9cgq\x103\x89\x11\x87Rv\x169\xdf\xe3>B\x04\x00\x00\x00W\xd3\xec\xfb\xdf?\xa2\x90+\xa4!\xb2\xf2\xff\x90\a\xc3\x12\xc4;\xffh\xf1x=\xb9c\xce\x03h\xdap\x88U\x1788\x82\xd7\xfd\x83\x00Sx\x91%\x99_\xfe\xd4c\x83\x86\x0f\xa4a-\xaf\x9e\xd9\xef\xe0)]\x00F\xfa\x03\xbc4\xc4\x9a\v\x03\x8b\xa4\xf3\x8f\xf4\"\'\xd3\a9\x14H}j&~\xe9\x16\x83o\xbd\xab\xcd[\xbd\xcb\x04\xfc\xe7\xe3\x9e?\x12\xf0\xf4\x83M3\xd88\x92?@\v\xe6\xd1\xd2\xe4\xde\xdaUeJ\x9fR\xd1`\xfa\xc8\v\xed\xfd\x0e\xc8\x89W\x847\x88\x82\x94\x14\xe33\xb7H\xc8b\xd6@3F#\xb7\x04C\x8dm\t\x16a\x0fI\xf4\xfe\xf8\x06j\x19Pz&\xb8\x0f\x98`W\xdb\xc6\"81A\xa4\x8bT\xf1\xcb\xab\xa3\t\xef\xdf&\x0e\xad\x03\x123.\xc2V\xaa\xd5\xf8\xde\x8aV\xa4p{\xcez\xa2\x92\xdb8*wLO\f\x97X\x05\x9a\xc2\xe8\x85\x9d\xcb\xc8\xf0\xc4\x01\x03\xe3?\x9f1\xf4\xfb\xa5y`KB\xdf\xae#\x94C\a\x04\xea\xccG\xf2\b\x8f\xf7\xb1\xe96\x90\xf5P\xa4\'\xce\xe3\xa24\x196\xc5Q\xa1K\x95\xd6\xfal\xe9\xd1\\\r&\xb2c\xb3\x8d\xa7\xb7\xa8\x03S\xbd\xdd\b{\xae\f\x10\xc2\xbb\xd0\xdd*\xa3\xb4\fJ\x00X\xab`N; LF\xa5D\xee\xdf\x7f\x80p\xf6o\x1c\xbdXR\xf2\xa0\x81a\xa1\xe1B\x93Xn\xaf\xfc\x05?\xab\xac\x91x\xa8#\xe1\xbeQ\xd1^\x9b\xb9)\xd3\n\xf7(3!\x18\b\xc0\xaampRl\xfdQ\x03\x8c\xd5\xe4\\\xed\x9a\xd1?\xd21\xc8\x90\x1dl|\xd1\x14\xbc3\xe0\x1e\x0e\xe6\x88Y\x99K\x93\x1c@_P\x8c\xc7\x9eZ\xb74KT:\x8a\xdbJ#w\x18\x14\x00\x93\x86\xa5wo\xf6M\xe7D\xf4*\xe3X\x1d\x19\x83\xa7w\xc7+7\x89s\xed\x8a\xd7O\xdd\rhh`\xc0\xa8$\x06pu\xa0\xd0L\x0ez@I\xb8\x83\xb2f\x93j\a0I\xc8l\xe5\x9b\x06\xb5\xac`d\xa3\xcf/\x14\x10\xab\xab\t\xec\xc1c\fA\xaf\x14\xef\xbap@*7\x86\xdf\',\x03Y\xb1$\xf0\xb5}\xf0\x82%)9`\x8f\x04\x85m\x80\xd2\xcf@\x06}\xea\xe7w`\xa5\x11\x9f\x9b\x9e\x8f\xb7cb\x1a\xe1\xcf\x87\x1c\\\xf5\xc21\xf7\x82C*\xd5;\x00\x00\x00\x00\x03\xba\xe3\xdc\x92\'\x8e\xd5\x7fG\xfd.\x91\x89T\x99t\xd4d,\xd5\x92O\xf1\xafT!Y\x8e\\\xac\xf7\x11R\x05p\x1a\"\r\xe9\xe5\x8b&\x0f\x8c\xfb\xef\xf8\xd5\x18\xde\xeb\xe5\x19\xdd\xebQ8\xc5iS+\x06D\x16\xfe\xf5.\xe5\v\x89\xb0\"\xa3M\xe9\x81\x11P\xdb\xc4\xc2y\x14\x04\x06\xf6\f\xb0\xecz\x8d`\xb5\x9b\xb43\xcc1\xa7\x9e\xa8\xb5\'\xc6MAe\x0f\xd1\xfcG\xc2/\xe8\xe9t\xcaQ\xf1\fI\x1chM\xc1\x92\xe3\xc3\x01M\xc8/\xefJ\xcb\xd0]\f\xff\xf5\x92\xce\x97Z\xea\xe8\x99\xfa\x96\xce\xa7\x02\xad\xa2\xce\x955\xeaNg\x02\xcd\xfd\x1a}.\xd3\"x\x89/8H\xc2\x93B\na)\x86\xa9U\xa0\xb7\x18\xfb\xe9\xd1\x97', 0x3)
write$binfmt_misc(r1, &(0x7f0000000740), 0xff67)
sendfile(r0, r1, &(0x7f0000000000), 0xfffb)
fcntl$addseals(r1, 0x409, 0x8)
lseek(r1, 0x100000, 0x3)
write(r1, 0x0, 0x0)

36.983129949s ago: executing program 32 (id=74):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = memfd_create(&(0x7f0000000240)='+\x8b\x8a\xa9\x16\x11\x91J\xbc+  \x18\x17\xc2:}\xa3\x9bO\xdd\xdf\xdf\x92\xd5\xed\xb4\x17\xe5\xd6\x9a\xb2\xd8\x9ba\xde\xb2.F\xc0\x99}|\xaf\xd3\x1d\x84[*_\x9f\x9d\xb0rYP\x1b\x9f \xe0\x9cgq\x103\x89\x11\x87Rv\x169\xdf\xe3>B\x04\x00\x00\x00W\xd3\xec\xfb\xdf?\xa2\x90+\xa4!\xb2\xf2\xff\x90\a\xc3\x12\xc4;\xffh\xf1x=\xb9c\xce\x03h\xdap\x88U\x1788\x82\xd7\xfd\x83\x00Sx\x91%\x99_\xfe\xd4c\x83\x86\x0f\xa4a-\xaf\x9e\xd9\xef\xe0)]\x00F\xfa\x03\xbc4\xc4\x9a\v\x03\x8b\xa4\xf3\x8f\xf4\"\'\xd3\a9\x14H}j&~\xe9\x16\x83o\xbd\xab\xcd[\xbd\xcb\x04\xfc\xe7\xe3\x9e?\x12\xf0\xf4\x83M3\xd88\x92?@\v\xe6\xd1\xd2\xe4\xde\xdaUeJ\x9fR\xd1`\xfa\xc8\v\xed\xfd\x0e\xc8\x89W\x847\x88\x82\x94\x14\xe33\xb7H\xc8b\xd6@3F#\xb7\x04C\x8dm\t\x16a\x0fI\xf4\xfe\xf8\x06j\x19Pz&\xb8\x0f\x98`W\xdb\xc6\"81A\xa4\x8bT\xf1\xcb\xab\xa3\t\xef\xdf&\x0e\xad\x03\x123.\xc2V\xaa\xd5\xf8\xde\x8aV\xa4p{\xcez\xa2\x92\xdb8*wLO\f\x97X\x05\x9a\xc2\xe8\x85\x9d\xcb\xc8\xf0\xc4\x01\x03\xe3?\x9f1\xf4\xfb\xa5y`KB\xdf\xae#\x94C\a\x04\xea\xccG\xf2\b\x8f\xf7\xb1\xe96\x90\xf5P\xa4\'\xce\xe3\xa24\x196\xc5Q\xa1K\x95\xd6\xfal\xe9\xd1\\\r&\xb2c\xb3\x8d\xa7\xb7\xa8\x03S\xbd\xdd\b{\xae\f\x10\xc2\xbb\xd0\xdd*\xa3\xb4\fJ\x00X\xab`N; LF\xa5D\xee\xdf\x7f\x80p\xf6o\x1c\xbdXR\xf2\xa0\x81a\xa1\xe1B\x93Xn\xaf\xfc\x05?\xab\xac\x91x\xa8#\xe1\xbeQ\xd1^\x9b\xb9)\xd3\n\xf7(3!\x18\b\xc0\xaampRl\xfdQ\x03\x8c\xd5\xe4\\\xed\x9a\xd1?\xd21\xc8\x90\x1dl|\xd1\x14\xbc3\xe0\x1e\x0e\xe6\x88Y\x99K\x93\x1c@_P\x8c\xc7\x9eZ\xb74KT:\x8a\xdbJ#w\x18\x14\x00\x93\x86\xa5wo\xf6M\xe7D\xf4*\xe3X\x1d\x19\x83\xa7w\xc7+7\x89s\xed\x8a\xd7O\xdd\rhh`\xc0\xa8$\x06pu\xa0\xd0L\x0ez@I\xb8\x83\xb2f\x93j\a0I\xc8l\xe5\x9b\x06\xb5\xac`d\xa3\xcf/\x14\x10\xab\xab\t\xec\xc1c\fA\xaf\x14\xef\xbap@*7\x86\xdf\',\x03Y\xb1$\xf0\xb5}\xf0\x82%)9`\x8f\x04\x85m\x80\xd2\xcf@\x06}\xea\xe7w`\xa5\x11\x9f\x9b\x9e\x8f\xb7cb\x1a\xe1\xcf\x87\x1c\\\xf5\xc21\xf7\x82C*\xd5;\x00\x00\x00\x00\x03\xba\xe3\xdc\x92\'\x8e\xd5\x7fG\xfd.\x91\x89T\x99t\xd4d,\xd5\x92O\xf1\xafT!Y\x8e\\\xac\xf7\x11R\x05p\x1a\"\r\xe9\xe5\x8b&\x0f\x8c\xfb\xef\xf8\xd5\x18\xde\xeb\xe5\x19\xdd\xebQ8\xc5iS+\x06D\x16\xfe\xf5.\xe5\v\x89\xb0\"\xa3M\xe9\x81\x11P\xdb\xc4\xc2y\x14\x04\x06\xf6\f\xb0\xecz\x8d`\xb5\x9b\xb43\xcc1\xa7\x9e\xa8\xb5\'\xc6MAe\x0f\xd1\xfcG\xc2/\xe8\xe9t\xcaQ\xf1\fI\x1chM\xc1\x92\xe3\xc3\x01M\xc8/\xefJ\xcb\xd0]\f\xff\xf5\x92\xce\x97Z\xea\xe8\x99\xfa\x96\xce\xa7\x02\xad\xa2\xce\x955\xeaNg\x02\xcd\xfd\x1a}.\xd3\"x\x89/8H\xc2\x93B\na)\x86\xa9U\xa0\xb7\x18\xfb\xe9\xd1\x97', 0x3)
write$binfmt_misc(r1, &(0x7f0000000740), 0xff67)
sendfile(r0, r1, &(0x7f0000000000), 0xfffb)
fcntl$addseals(r1, 0x409, 0x8)
lseek(r1, 0x100000, 0x3)
write(r1, 0x0, 0x0)

11.400462884s ago: executing program 2 (id=640):
connect$tipc(0xffffffffffffffff, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x7, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000fcffffff18110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000100850000008600000095"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x18)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
syz_mount_image$f2fs(&(0x7f0000000240), &(0x7f0000000200)='./bus\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0xfe, 0x54f8, &(0x7f0000005980)="$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")
r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x20400, 0x0)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r2, 0xc0185879, &(0x7f0000000080)={@desc={0x1, 0x0, @desc4}})

11.103585818s ago: executing program 2 (id=641):
open(&(0x7f0000000040)='./bus\x00', 0x1c7c42, 0x18c)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000180)='./bus\x00', 0x0, 0x1000, 0x0)
r0 = creat(&(0x7f0000000300)='./bus\x00', 0x14)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x400c84, &(0x7f0000000340), 0x1, 0x786, &(0x7f0000001900)="$eJzs3c9rHGUfAPDvbJKmTfu+yQsvaL0YEDRQmpgaWwWFigcRLBT0bLtstqFmky3ZTWlCQIsIXgQVD4JeevLgj3rz6o+r/hcexFI1LVY8SGQ2s+2m2U03abIbzecDk32emdl8n+/Or2d3hpkA9qzh9E8u4nBEvJtEDGbjk4joq5V6I06uzndreamQDkmsrLz8a1Kb5+byUiEa3pM6mFUejIhv34o4klsft7KwOJ0vlYpzWX2sOnNhrLKwePT8TH6qOFWcPT4+MXHsxJMnjm9frr//sHjo2nsvPPbFyT/ffODqO98lcTIOZdMa89iyZ9dWh2M4+0z60o9wjefvO9juknS7AWxJumn2rG7lcTgGo6dWAgD+zV6PiBUAYI9JHP8BYI+p/w5wc3mpUB+6+4tEZ11/LiL2r+ZfP7+5OqU3O2e3v3YedOBmsubMSBIRQ9sQfzgiPv7q1c/SIbbrPCRAG964HBFnh4bX7/+TddcsbNbjG0zbl70O3zU+je8MNHTG12n/56lm/b/c7f5PNOn/9DfZdrei2fa/ZsSBbQiygeufRDzTcG3brYb8M0M9We0/tT5fX3LufKmY7tv+GxEj0def1sc3iDFy468braY19v9+e/+1T9P46eudOXI/9/avfc9kvpq/n5wbXb8c8VBvs/yT28s/adH/Pd1mjBeffvujVtPS/NN868P6/CO7OmlnrFyJeLTp8r9zRVuy4fWJY7XVYay+UjTx5Y8fDrSK37j80yGNX/8u0Anp8h/YOP+hpPF6zcrmY3x/ZfCbVtPunX/z9X9f8kqtXO9HXMpXq3PjEfuSl9aPP3bnvZfyD2el1fnT/Eceab79b7T+p98Jz7aZf++1Xz7fev47K81/clPLf/OFq7eme1rFb2/5T9RKI9mYdvZ/7Tbwfj47AAAAAAAAAAAAAAAAAAAAAAAAAGhXLiIORZIbvV3O5UZHV5/h/f8YyJXKleqRc+X52cmoPSt7KPpy9VtdDjbcD3U8ux9+vX7srvoTEfG/iPig/0BSv4/iZJdzBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIC6gy2e/5/6qb/brQMAdsz+bjcAAOg4x38A2Hsc/wFg72nv+N+z4+0AADrH938A2Hsc/wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANhhp0+dSoeVP5aXCml98uLC/HT54tHJYmV6dGa+MFooz10YnSqXp0rF0UJ55l7/r1QuX5iI2flLY9VipTpWWVg8M1Oen62eOT+TnyqeKfZ1JCsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2JzKwuJ0vlQqzilsobCyO5rR/UJPtjrtlvZ0tJDsjmZsc6HLOyYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAf4i/AwAA//+3ACFj")
fcntl$setstatus(r1, 0x4, 0x46c00)
r2 = dup3(r1, r0, 0x0)
read$FUSE(r2, &(0x7f000001a240)={0x2020}, 0x2020)

10.98916853s ago: executing program 2 (id=643):
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000040)={{{@in6=@mcast2, @in=@remote, 0xfffc, 0x0, 0xfffc, 0xfffe, 0xa, 0x0, 0x30}, {0xffff, 0x0, 0x0, 0x0, 0x0, 0x7, 0x336a083a}, {0x0, 0x0, 0x8}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0x33}, 0xa, @in=@empty}}, 0xe8)
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000040)=0x9, 0x4)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000000100)=0x1e79, 0x4)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)

10.844184082s ago: executing program 2 (id=648):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000001600), 0x1, 0x553, &(0x7f0000001080)="$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")
r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)
fallocate(r0, 0x0, 0x0, 0x1000f4)
r1 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
r2 = open(&(0x7f0000000100)='./bus\x00', 0x14113e, 0x0)
write$binfmt_script(r2, &(0x7f0000000080), 0x208e24b)
write$UHID_INPUT2(r1, 0x0, 0x6)

10.551275517s ago: executing program 2 (id=655):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000080000000000000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000700)='signal_generate\x00', r1}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r0}, 0x10)
r2 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4)
sendmsg$netlink(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="1c00000042000106"], 0x1c}], 0x1}, 0x0)

10.406409179s ago: executing program 2 (id=660):
socket$xdp(0x2c, 0x3, 0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
socket$xdp(0x2c, 0x3, 0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)

10.34352081s ago: executing program 33 (id=660):
socket$xdp(0x2c, 0x3, 0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
socket$xdp(0x2c, 0x3, 0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)

2.54092695s ago: executing program 6 (id=798):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000000500000008040000cd00000001"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r1}, 0x10)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x52)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r2}, 0x10)
syz_open_procfs$namespace(0x0, 0xfffffffffffffffe)

2.518382861s ago: executing program 6 (id=800):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r1}, 0x10)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r2}, 0x10)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000540))

2.462565082s ago: executing program 6 (id=801):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = io_uring_setup(0x177f, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0xfffffffd})
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10)
r3 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
close_range(r1, 0xffffffffffffffff, 0x0)

2.457998242s ago: executing program 6 (id=804):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="b702000007000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e01f3440cee51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cad32b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337602d3e5a815232f5e16c1b30c3a6abc85018e5ff2c91018afc9ffc2cc788bee1b47683db012469398685211dfbbae3e2ed0a50e7393bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d300006aca54183fb01c73f979ca9857399537f5dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7af22e30d46a9d26d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e48455b5a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977fb536a9caab37d9ac4cfc1c7b400000000000007ffc826b956ba859ac8e3c177b91bd7d5e41ff83ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d000069a16203a967c1bbe09315c29877a308bcc87dc3addb08142bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8240000e3428d2129369ee1b85af9ffffff0d0df414b315f651c8412392191fa83ee830548f11be359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92000000000f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb74d4ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905de328c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a978ee56c83a3466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342e0eaf6f330e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea95ec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf81700cd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be3827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f969369de47422604e2fc5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293b6c833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b612272d40f522d8c98c879aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbe71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd46dbd61627a2e0a74b5e6aefb7eee403502734137ff47a57f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d65a125e3af1130d66a7b66837ae7e7123dde7404a067ad0a6a2d6bec9411b61cad4121be3c72ff3a04713042253d438e7becf8120de3895b8ce974958bde39cb8da3427a2e9e2de936431e67fed5ab5684db07de39083d8948cc4c8a2608100000000000000000000aecb8b0b7941088f971ce17427eec32a012295cc0cdd32955176b6ad5a4bb953e58ccfa9428f452cfb5a48a9fda26db3985c8be3c2f99827da074825b01c4a3a71fb59d5798100000000000000c76b05a45d2dd8c20d971e2f3e4369168f5cb83d6ff3a18733fec726034fbfa95624135bee374414b2c8c61f52357a520efd6a10aff244bc8a62ed367981fb4d5d77f7bc093958ff46527499957da4934cd4b370cf76f72dd05fa80cdfb68c836fd81be7a58532e041a87f9222f157610a4bcdc05b2a55308c8e7568b90f7a338557e816a16972aea79dff5becefa6f9c5ce6c58fb38da9e7532dc53cfdc2e789b76f7d32aca1bfea2aa62621b78dded30fc07171866bf3d552900000000a32dda61eeda1750e157c2d569b9d08f583c0ee28daec2e8bb85f3c8e91c4448096ee953def18dc73e55cb30f9cd069d8780b00eaba382f0c3ae391c30a5f1b0f36dd0c2193b791995d2890327a10d7abac76d1202f72e97f0105184d7aaaab8d3e29c9a8d263f076b55cf53c5bb9c0662a3d19a6722d7f83ae4331d3256f90af0857788b380ccc3b266c418e66d1d756d5df6423dd0cea67bc235d3776d22270fc19301ead09f156893e9"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000000000000000000000000008500000050"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000c00)='net_dev_start_xmit\x00', r2}, 0x10)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0x24, 0x60000000}, 0x2c)

2.415861133s ago: executing program 6 (id=807):
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
clock_gettime(0xfffffffffffffffd, 0x0)
syz_pidfd_open(0x0, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
ioctl$SIOCGSTAMP(r0, 0x8906, 0x0)

2.384714413s ago: executing program 6 (id=809):
r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)
syz_usb_ep_write(r0, 0x82, 0x5, &(0x7f0000002340)='hello')

1.842606511s ago: executing program 4 (id=835):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
r2 = fsopen(&(0x7f0000000040)='devpts\x00', 0x0)
fsconfig$FSCONFIG_SET_FLAG(r2, 0x0, &(0x7f0000000000)='posixacl\x00', 0x0, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)

1.808468672s ago: executing program 4 (id=837):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0xa3500, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xd, &(0x7f0000000340)=ANY=[@ANYBLOB="18020000040000000000000000000000850000004100000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000180000850000008200000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x4}, 0x50)

1.777202003s ago: executing program 4 (id=838):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r2}, 0x10)
quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0)

1.732155273s ago: executing program 4 (id=840):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10)
r2 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000000000)=0x800, 0x4)
mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x6, 0x8012, r2, 0x0)
pipe2$9p(&(0x7f0000002480), 0x80000)

1.693212394s ago: executing program 4 (id=842):
r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x13ec, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x63, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
mount$bind(0x0, 0x0, 0x0, 0x101091, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x8, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10)
syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, &(0x7f0000000140)={0x0, 0x34, 0x7, {0x7, 0x23, "d9a31e4e4f"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)

1.094339693s ago: executing program 0 (id=852):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0b00000008000000020000000400000005000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r0, <r1=>0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000380)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x57)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x702, 0xe, 0xff0f, &(0x7f0000000540)="e460334470b8d480eb00c15286dd", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

1.077972923s ago: executing program 0 (id=853):
r0 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x633a, 0x4)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4)
setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7fe, 0xf83, 0x8}, 0x1c)
r2 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'veth0_to_hsr\x00', <r3=>0x0})
sendto$packet(r2, 0x0, 0x0, 0x4004, &(0x7f0000000200)={0x11, 0x8100, r3, 0x1, 0x7}, 0x14)

1.053199664s ago: executing program 0 (id=854):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000006c0f00000a"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='locks_get_lock_context\x00', r1}, 0x10)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='locks_get_lock_context\x00', r2}, 0x10)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0)
fcntl$lock(r3, 0x26, &(0x7f0000000000)={0x0, 0x1})

1.030864754s ago: executing program 0 (id=855):
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x7, 0x4, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil)
r1 = syz_open_procfs(0x0, &(0x7f0000002700)='cmdline\x00')
read$FUSE(r1, &(0x7f0000000000)={0x2020}, 0xfffffc7a)

657.71381ms ago: executing program 0 (id=865):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000800000003"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000840)={&(0x7f0000000800)='kfree_skb\x00', r1}, 0x10)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='kfree_skb\x00', r2}, 0x10)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$tipc(r3, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10, 0x0}, 0x0)

637.57804ms ago: executing program 0 (id=867):
r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
r1 = syz_usb_connect$uac1(0x1d32bff921c70dcd, 0x71, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x6, 0x10, 0x7, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x80, 0x1}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0xf6, 0xaa, 0x5, {0x7, 0x25, 0x1, 0x80, 0x4, 0x8e4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x6, 0x20, 0x4, {0x7, 0x25, 0x1, 0x0, 0x16, 0x1}}}}}}}]}}, 0x0)
syz_usb_control_io$uac1(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0})

615.39013ms ago: executing program 5 (id=868):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000de0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='netlink_extack\x00', r0}, 0x10)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r2)
getsockname$packet(r2, &(0x7f0000000340)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xf1d, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0)

538.357932ms ago: executing program 5 (id=869):
mkdir(&(0x7f0000000580)='./file0\x00', 0x0)
mkdir(&(0x7f00000008c0)='./bus\x00', 0x0)
mkdir(&(0x7f0000000400)='./file1\x00', 0xc0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f0000000140)='./bus\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000540)={0x7f, 0xfffffff9, 0xfc, 0x7e, 0x9})
ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8})

538.043132ms ago: executing program 1 (id=870):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff51, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r1}, 0x18)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r2}, 0x18)
r3 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r3, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10)

537.811021ms ago: executing program 5 (id=871):
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15)
r2 = dup(r1)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2])
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000006c59850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10)
mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1])

537.560781ms ago: executing program 1 (id=872):
syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x4, 0x0, 0x0, 0x0, 0x0)
pipe2$9p(&(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffffed"], 0x15)
r2 = dup(r1)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x5, 0x400, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2])

529.758832ms ago: executing program 5 (id=873):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000810018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r2}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)

503.201992ms ago: executing program 1 (id=874):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
pipe2$9p(&(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15)
r3 = dup(r2)
write$FUSE_BMAP(r3, &(0x7f0000000000)={0x18}, 0x18)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2])

489.278882ms ago: executing program 5 (id=875):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xffd, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000300)='qdisc_dequeue\x00', r1}, 0x10)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000300)='qdisc_dequeue\x00', r2}, 0x10)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"/2566], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xe40, 0xa00, &(0x7f0000000100)="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", 0x0, 0x8, 0x60000000}, 0x1e)

466.128883ms ago: executing program 5 (id=876):
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
write$UHID_CREATE(r0, &(0x7f0000002a00)={0x0, {'syz1\x00', 'syz0\x00', 'syz0\x00', &(0x7f00000000c0)=""/43, 0x2b, 0x0, 0x7f, 0xfffffffe}}, 0x120)
write$UHID_DESTROY(r0, &(0x7f0000000080), 0x4)
r1 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000140))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
write$UHID_INPUT(r0, &(0x7f0000001400)={0x8, {"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", 0x1000}}, 0x1006)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040000}, 0x0)

465.932442ms ago: executing program 1 (id=877):
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYBLOB="8fcacb7907051175f37538e486dd6300800701082c00db5b686158bbcfe8875a060300000023000000000000000000000000ac1414aa"], 0xfdef)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r1)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})
write$cgroup_subtree(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="8fedcb5d07081175f37538e486dd6372ce22fdb911"], 0xfdef)

230.209456ms ago: executing program 1 (id=878):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r2}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x4, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)

227.620696ms ago: executing program 1 (id=879):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r1}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb7030000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00'}, 0x18)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r2, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10)

0s ago: executing program 4 (id=880):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newqdisc={0x50, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x1000000, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x20, 0x2, {{}, [@TCA_NETEM_DELAY_DIST={0x4}]}}}]}, 0x50}}, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.1.183' (ED25519) to the list of known hosts.
[   20.710079][   T28] audit: type=1400 audit(1742772553.697:66): avc:  denied  { mounton } for  pid=281 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[   20.711484][  T281] cgroup: Unknown subsys name 'net'
[   20.732678][   T28] audit: type=1400 audit(1742772553.697:67): avc:  denied  { mount } for  pid=281 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   20.759775][   T28] audit: type=1400 audit(1742772553.727:68): avc:  denied  { unmount } for  pid=281 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   20.759984][  T281] cgroup: Unknown subsys name 'devices'
[   20.904778][  T281] cgroup: Unknown subsys name 'hugetlb'
[   20.910248][  T281] cgroup: Unknown subsys name 'rlimit'
[   21.015751][   T28] audit: type=1400 audit(1742772554.007:69): avc:  denied  { setattr } for  pid=281 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   21.039017][   T28] audit: type=1400 audit(1742772554.007:70): avc:  denied  { mounton } for  pid=281 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1
[   21.063883][   T28] audit: type=1400 audit(1742772554.007:71): avc:  denied  { mount } for  pid=281 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1
[   21.071190][  T284] SELinux:  Context root:object_r:swapfile_t is not valid (left unmapped).
Setting up swapspace version 1, size = 127995904 bytes
[   21.095758][   T28] audit: type=1400 audit(1742772554.087:72): avc:  denied  { relabelto } for  pid=284 comm="mkswap" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   21.121035][   T28] audit: type=1400 audit(1742772554.087:73): avc:  denied  { write } for  pid=284 comm="mkswap" path="/root/swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   21.147826][   T28] audit: type=1400 audit(1742772554.137:74): avc:  denied  { read } for  pid=281 comm="syz-executor" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   21.173260][   T28] audit: type=1400 audit(1742772554.137:75): avc:  denied  { open } for  pid=281 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   21.173326][  T281] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   21.827746][  T290] bridge0: port 1(bridge_slave_0) entered blocking state
[   21.834728][  T290] bridge0: port 1(bridge_slave_0) entered disabled state
[   21.841968][  T290] device bridge_slave_0 entered promiscuous mode
[   21.864066][  T291] bridge0: port 1(bridge_slave_0) entered blocking state
[   21.870920][  T291] bridge0: port 1(bridge_slave_0) entered disabled state
[   21.878386][  T291] device bridge_slave_0 entered promiscuous mode
[   21.885103][  T290] bridge0: port 2(bridge_slave_1) entered blocking state
[   21.891948][  T290] bridge0: port 2(bridge_slave_1) entered disabled state
[   21.899373][  T290] device bridge_slave_1 entered promiscuous mode
[   21.916799][  T291] bridge0: port 2(bridge_slave_1) entered blocking state
[   21.923738][  T291] bridge0: port 2(bridge_slave_1) entered disabled state
[   21.930883][  T291] device bridge_slave_1 entered promiscuous mode
[   21.946454][  T292] bridge0: port 1(bridge_slave_0) entered blocking state
[   21.953423][  T292] bridge0: port 1(bridge_slave_0) entered disabled state
[   21.960750][  T292] device bridge_slave_0 entered promiscuous mode
[   21.980948][  T292] bridge0: port 2(bridge_slave_1) entered blocking state
[   21.987841][  T292] bridge0: port 2(bridge_slave_1) entered disabled state
[   21.995298][  T292] device bridge_slave_1 entered promiscuous mode
[   22.008154][  T295] bridge0: port 1(bridge_slave_0) entered blocking state
[   22.015078][  T295] bridge0: port 1(bridge_slave_0) entered disabled state
[   22.022282][  T295] device bridge_slave_0 entered promiscuous mode
[   22.043786][  T295] bridge0: port 2(bridge_slave_1) entered blocking state
[   22.050771][  T295] bridge0: port 2(bridge_slave_1) entered disabled state
[   22.058115][  T295] device bridge_slave_1 entered promiscuous mode
[   22.078376][  T293] bridge0: port 1(bridge_slave_0) entered blocking state
[   22.085306][  T293] bridge0: port 1(bridge_slave_0) entered disabled state
[   22.092514][  T293] device bridge_slave_0 entered promiscuous mode
[   22.106963][  T293] bridge0: port 2(bridge_slave_1) entered blocking state
[   22.113907][  T293] bridge0: port 2(bridge_slave_1) entered disabled state
[   22.121078][  T293] device bridge_slave_1 entered promiscuous mode
[   22.306348][  T290] bridge0: port 2(bridge_slave_1) entered blocking state
[   22.313210][  T290] bridge0: port 2(bridge_slave_1) entered forwarding state
[   22.320286][  T290] bridge0: port 1(bridge_slave_0) entered blocking state
[   22.327137][  T290] bridge0: port 1(bridge_slave_0) entered forwarding state
[   22.354072][  T291] bridge0: port 2(bridge_slave_1) entered blocking state
[   22.360938][  T291] bridge0: port 2(bridge_slave_1) entered forwarding state
[   22.368063][  T291] bridge0: port 1(bridge_slave_0) entered blocking state
[   22.374836][  T291] bridge0: port 1(bridge_slave_0) entered forwarding state
[   22.396447][  T292] bridge0: port 2(bridge_slave_1) entered blocking state
[   22.403324][  T292] bridge0: port 2(bridge_slave_1) entered forwarding state
[   22.410410][  T292] bridge0: port 1(bridge_slave_0) entered blocking state
[   22.417480][  T292] bridge0: port 1(bridge_slave_0) entered forwarding state
[   22.448368][  T295] bridge0: port 2(bridge_slave_1) entered blocking state
[   22.455504][  T295] bridge0: port 2(bridge_slave_1) entered forwarding state
[   22.463152][  T295] bridge0: port 1(bridge_slave_0) entered blocking state
[   22.470084][  T295] bridge0: port 1(bridge_slave_0) entered forwarding state
[   22.487295][    T8] bridge0: port 1(bridge_slave_0) entered disabled state
[   22.494559][    T8] bridge0: port 2(bridge_slave_1) entered disabled state
[   22.501936][    T8] bridge0: port 1(bridge_slave_0) entered disabled state
[   22.509915][    T8] bridge0: port 2(bridge_slave_1) entered disabled state
[   22.517099][    T8] bridge0: port 1(bridge_slave_0) entered disabled state
[   22.524369][    T8] bridge0: port 2(bridge_slave_1) entered disabled state
[   22.531436][    T8] bridge0: port 1(bridge_slave_0) entered disabled state
[   22.538540][    T8] bridge0: port 2(bridge_slave_1) entered disabled state
[   22.547991][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   22.555504][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   22.613690][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   22.621170][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   22.629959][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   22.638228][    T8] bridge0: port 1(bridge_slave_0) entered blocking state
[   22.645096][    T8] bridge0: port 1(bridge_slave_0) entered forwarding state
[   22.653195][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   22.661173][    T8] bridge0: port 2(bridge_slave_1) entered blocking state
[   22.668030][    T8] bridge0: port 2(bridge_slave_1) entered forwarding state
[   22.675356][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   22.683164][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   22.690886][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   22.699327][    T8] bridge0: port 1(bridge_slave_0) entered blocking state
[   22.706205][    T8] bridge0: port 1(bridge_slave_0) entered forwarding state
[   22.713468][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   22.721424][    T8] bridge0: port 1(bridge_slave_0) entered blocking state
[   22.728277][    T8] bridge0: port 1(bridge_slave_0) entered forwarding state
[   22.735614][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   22.743828][    T8] bridge0: port 2(bridge_slave_1) entered blocking state
[   22.750671][    T8] bridge0: port 2(bridge_slave_1) entered forwarding state
[   22.760119][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   22.768329][    T8] bridge0: port 2(bridge_slave_1) entered blocking state
[   22.775213][    T8] bridge0: port 2(bridge_slave_1) entered forwarding state
[   22.799427][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   22.806818][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   22.814692][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   22.823549][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   22.831481][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   22.839780][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   22.848008][    T8] bridge0: port 1(bridge_slave_0) entered blocking state
[   22.854870][    T8] bridge0: port 1(bridge_slave_0) entered forwarding state
[   22.862088][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   22.870179][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   22.878076][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   22.886438][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   22.894624][    T8] bridge0: port 2(bridge_slave_1) entered blocking state
[   22.901460][    T8] bridge0: port 2(bridge_slave_1) entered forwarding state
[   22.934204][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   22.942368][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   22.950403][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   22.958607][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   22.966693][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   22.974181][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   22.981447][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   22.989921][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   22.998106][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   23.006251][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   23.014430][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   23.023286][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   23.031637][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   23.039452][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   23.050694][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   23.058147][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   23.067298][  T290] device veth0_vlan entered promiscuous mode
[   23.082362][  T291] device veth0_vlan entered promiscuous mode
[   23.101437][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   23.109708][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   23.118026][    T8] bridge0: port 1(bridge_slave_0) entered blocking state
[   23.124902][    T8] bridge0: port 1(bridge_slave_0) entered forwarding state
[   23.132989][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   23.141135][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   23.149518][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   23.157810][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   23.165866][    T8] bridge0: port 2(bridge_slave_1) entered blocking state
[   23.172724][    T8] bridge0: port 2(bridge_slave_1) entered forwarding state
[   23.180072][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   23.187936][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   23.195950][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   23.204333][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   23.212821][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   23.221032][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   23.229986][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   23.237650][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   23.245315][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   23.255478][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   23.263472][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   23.274035][  T292] device veth0_vlan entered promiscuous mode
[   23.289924][  T295] device veth0_vlan entered promiscuous mode
[   23.296557][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   23.304069][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   23.311348][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   23.319392][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   23.327574][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   23.336227][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   23.344272][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   23.352096][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   23.360205][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   23.367746][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   23.380607][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   23.389123][  T291] device veth1_macvtap entered promiscuous mode
[   23.401069][  T290] device veth1_macvtap entered promiscuous mode
[   23.408246][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   23.415989][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   23.424362][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   23.432336][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   23.443382][  T292] device veth1_macvtap entered promiscuous mode
[   23.455357][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   23.463533][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   23.471772][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   23.480107][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   23.498534][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   23.506857][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   23.515047][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   23.523616][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   23.531652][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   23.540068][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   23.548492][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   23.557141][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   23.565530][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   23.588908][  T293] device veth0_vlan entered promiscuous mode
[   23.604115][  T295] device veth1_macvtap entered promiscuous mode
[   23.604224][  T291] request_module fs-gadgetfs succeeded, but still no fs?
[   23.620484][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   23.631299][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   23.638888][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   23.646661][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   23.655111][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   23.663431][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   23.677805][  T293] device veth1_macvtap entered promiscuous mode
[   23.687936][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   23.700229][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   23.708722][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   23.742851][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   23.750991][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   23.770506][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   23.783672][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   23.822783][  T323] Illegal XDP return value 4294967274 on prog  (id 5) dev N/A, expect packet loss!
[   23.926268][  T339] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   23.937167][  T339] FAT-fs (loop5): unable to read boot sector
[   23.979554][  T341] loop4: detected capacity change from 0 to 8192
[   24.020925][  T346] loop1: detected capacity change from 0 to 256
[   24.021638][  T341] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 2074)
[   24.035958][  T341] FAT-fs (loop4): Filesystem has been set read-only
[   24.055250][  T346] FAT-fs (loop1): Unrecognized mount option "ÿÿÿÿÿÿÿ" or missing value
[   24.146738][  T338] syz.2.10 (338) used greatest stack depth: 21000 bytes left
[   24.264637][  T361] =======================================================
[   24.264637][  T361] WARNING: The mand mount option has been deprecated and
[   24.264637][  T361]          and is ignored by this kernel. Remove the mand
[   24.264637][  T361]          option from the mount to silence this warning.
[   24.264637][  T361] =======================================================
[   24.393109][  T376] loop4: detected capacity change from 0 to 1024
[   24.632521][   T19] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   24.729435][  T406] netlink: 8 bytes leftover after parsing attributes in process `syz.0.40'.
[   24.771030][  T415] syz.0.44[415] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   24.771085][  T415] syz.0.44[415] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   24.832517][   T19] usb 3-1: Using ep0 maxpacket: 16
[   24.871326][   T19] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   24.872280][  T424] loop0: detected capacity change from 0 to 2048
[   24.885604][   T19] usb 3-1: config 0 has no interfaces?
[   24.893684][   T19] usb 3-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4
[   24.908920][   T19] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   24.925063][   T19] usb 3-1: config 0 descriptor??
[   24.951754][  T424] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[   24.956203][  T436] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[   24.972914][  T436] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[   24.973740][  T424] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[   25.003199][  T424] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 1 with error 28
[   25.017768][  T424] EXT4-fs (loop0): This should not happen!! Data will be lost
[   25.017768][  T424] 
[   25.028098][  T424] EXT4-fs (loop0): Total free blocks count 0
[   25.034109][  T227] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   25.039105][  T437] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[   25.041986][  T424] EXT4-fs (loop0): Free/Dirty block details
[   25.065154][  T424] EXT4-fs (loop0): free_blocks=2415919104
[   25.070848][  T424] EXT4-fs (loop0): dirty_blocks=16
[   25.076125][  T424] EXT4-fs (loop0): Block reservation details
[   25.082066][  T424] EXT4-fs (loop0): i_reserved_data_blocks=1
[   25.150492][  T445] netlink: 24 bytes leftover after parsing attributes in process `syz.3.56'.
[   25.213052][  T455] loop3: detected capacity change from 0 to 512
[   25.237774][  T457] syz.0.62 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[   25.238270][  T455] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   25.261102][  T227] usb 2-1: Using ep0 maxpacket: 8
[   25.267311][  T455] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[   25.283808][  T227] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[   25.288986][  T455] EXT4-fs (loop3): 1 truncate cleaned up
[   25.293951][  T227] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   25.298363][  T455] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[   25.343559][  T227] usb 2-1: config 0 descriptor??
[   25.352740][  T455] EXT4-fs error (device loop3): __ext4_get_inode_loc:4508: comm syz.3.61: Invalid inode table block 0 in block_group 0
[   25.357670][  T467] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   25.375174][  T292] EXT4-fs error (device loop3): ext4_map_blocks:634: inode #2: block 13: comm syz-executor: lblock 0 mapped to illegal pblock 13 (length 1)
[   25.397438][  T292] EXT4-fs warning (device loop3): htree_dirblock_to_tree:1083: inode #2: lblock 0: comm syz-executor: error -117 reading directory block
[   25.411421][  T292] EXT4-fs error (device loop3): __ext4_get_inode_loc:4508: comm syz-executor: Invalid inode table block 0 in block_group 0
[   25.424608][  T292] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5887: Corrupt filesystem
[   25.434455][  T292] EXT4-fs error (device loop3): ext4_dirty_inode:6091: inode #2: comm syz-executor: mark_inode_dirty error
[   25.452120][   T10] EXT4-fs error (device loop3): __ext4_get_inode_loc:4508: comm kworker/u4:1: Invalid inode table block 0 in block_group 0
[   25.466965][  T292] EXT4-fs (loop3): unmounting filesystem.
[   25.556801][  T480] SELinux:  Context system_u:object_r:dhcpd_exec_t:s0 is not valid (left unmapped).
[   25.807288][  T491] bridge0: port 1(bridge_slave_0) entered blocking state
[   25.814313][  T491] bridge0: port 1(bridge_slave_0) entered disabled state
[   25.821755][  T491] device bridge_slave_0 entered promiscuous mode
[   25.829054][  T491] bridge0: port 2(bridge_slave_1) entered blocking state
[   25.836264][  T491] bridge0: port 2(bridge_slave_1) entered disabled state
[   25.844505][  T491] device bridge_slave_1 entered promiscuous mode
[   25.850690][   T28] kauditd_printk_skb: 106 callbacks suppressed
[   25.850705][   T28] audit: type=1326 audit(1742772558.837:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=371 comm="syz.2.25" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb818d8d169 code=0x50000
[   25.879259][   T28] audit: type=1326 audit(1742772558.837:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=371 comm="syz.2.25" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb818d8d169 code=0x50000
[   25.902143][   T28] audit: type=1326 audit(1742772558.837:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=371 comm="syz.2.25" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb818d8d169 code=0x50000
[   25.925136][   T28] audit: type=1326 audit(1742772558.837:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=371 comm="syz.2.25" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb818d8d169 code=0x50000
[   25.947801][   T28] audit: type=1326 audit(1742772558.837:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=371 comm="syz.2.25" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb818d8d169 code=0x50000
[   25.970632][   T28] audit: type=1326 audit(1742772558.837:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=371 comm="syz.2.25" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb818d8d169 code=0x50000
[   25.993420][   T28] audit: type=1326 audit(1742772558.837:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=371 comm="syz.2.25" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb818d8d169 code=0x50000
[   26.016368][   T28] audit: type=1326 audit(1742772558.837:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=371 comm="syz.2.25" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb818d8d169 code=0x50000
[   26.039621][   T28] audit: type=1326 audit(1742772558.837:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=371 comm="syz.2.25" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb818d8d169 code=0x50000
[   26.062607][   T28] audit: type=1326 audit(1742772558.837:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=371 comm="syz.2.25" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb818d8d169 code=0x50000
[   26.190094][  T491] bridge0: port 2(bridge_slave_1) entered blocking state
[   26.196981][  T491] bridge0: port 2(bridge_slave_1) entered forwarding state
[   26.204097][  T491] bridge0: port 1(bridge_slave_0) entered blocking state
[   26.210951][  T491] bridge0: port 1(bridge_slave_0) entered forwarding state
[   26.259756][  T321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   26.267576][  T321] bridge0: port 1(bridge_slave_0) entered disabled state
[   26.282927][  T321] bridge0: port 2(bridge_slave_1) entered disabled state
[   26.291130][  T313] device bridge_slave_1 left promiscuous mode
[   26.297568][  T313] bridge0: port 2(bridge_slave_1) entered disabled state
[   26.305499][  T313] device bridge_slave_0 left promiscuous mode
[   26.311629][  T313] bridge0: port 1(bridge_slave_0) entered disabled state
[   26.325074][  T313] device veth1_macvtap left promiscuous mode
[   26.334375][  T313] device veth0_vlan left promiscuous mode
[   26.540601][  T321] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   26.552777][  T321] bridge0: port 1(bridge_slave_0) entered blocking state
[   26.559668][  T321] bridge0: port 1(bridge_slave_0) entered forwarding state
[   26.577156][  T321] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   26.592732][  T321] bridge0: port 2(bridge_slave_1) entered blocking state
[   26.600088][  T321] bridge0: port 2(bridge_slave_1) entered forwarding state
[   26.620803][  T227] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[   26.633682][  T227] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9
[   26.644726][  T227] asix: probe of 2-1:0.0 failed with error -71
[   26.651158][  T321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   26.662932][  T227] usb 2-1: USB disconnect, device number 2
[   26.673205][  T321] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   26.685362][  T321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   26.693954][  T321] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   26.733457][  T321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   26.750991][  T321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   26.786239][  T321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   26.797921][  T321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   26.823389][  T321] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   26.840928][  T321] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   26.848709][  T491] device veth0_vlan entered promiscuous mode
[   26.883587][  T321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   26.892045][  T321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   26.901950][  T491] device veth1_macvtap entered promiscuous mode
[   26.921377][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   26.929995][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   26.939772][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   26.964171][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   26.979230][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   27.035515][  T529] loop5: detected capacity change from 0 to 512
[   27.060125][  T531] loop4: detected capacity change from 0 to 16
[   27.066295][  T529] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[   27.075959][  T531] erofs: Unknown parameter '18446744073709551615'
[   27.096741][  T529] EXT4-fs warning (device loop5): ext4_expand_extra_isize_ea:2809: Unable to expand inode 15. Delete some EAs or run e2fsck.
[   27.113090][  T529] EXT4-fs (loop5): 1 truncate cleaned up
[   27.118567][  T529] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[   27.148075][  T491] EXT4-fs (loop5): unmounting filesystem.
[   27.332634][  T553] bridge0: port 3(vlan2) entered blocking state
[   27.358458][  T553] bridge0: port 3(vlan2) entered disabled state
[   27.371714][  T557] netlink: 104 bytes leftover after parsing attributes in process `syz.1.103'.
[   27.375262][   T24] usb 3-1: USB disconnect, device number 2
[   27.399400][  T559] loop2: detected capacity change from 0 to 512
[   27.414819][  T559] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[   27.423825][  T559] ext4 filesystem being mounted at /8/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   27.464240][  T290] EXT4-fs (loop2): unmounting filesystem.
[   27.528840][  T574] loop1: detected capacity change from 0 to 512
[   27.535525][  T571] capability: warning: `syz.5.111' uses deprecated v2 capabilities in a way that may be insecure
[   27.539454][  T574] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   27.564724][  T579] syz.5.112[579] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   27.564825][  T579] syz.5.112[579] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   27.574971][  T574] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[   27.596860][  T574] ext4 filesystem being mounted at /17/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   27.644401][  T291] EXT4-fs error (device loop1): mb_free_blocks:1815: group 0, inode 15: block 32:freeing already freed block (bit 32); block bitmap corrupt.
[   27.665074][  T291] EXT4-fs (loop1): unmounting filesystem.
[   27.672174][  T585] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=585 comm=syz.5.112
[   27.743489][  T595] device veth1_to_team entered promiscuous mode
[   27.750060][  T594] device veth1_to_team left promiscuous mode
[   27.772359][  T598] process 'syz.4.119' launched './file1' with NULL argv: empty string added
[   27.962101][  T621] 9pnet: p9_errstr2errno: server reported unknown error �@í΂Í(@
[   28.011076][  T628] loop0: detected capacity change from 0 to 2048
[   28.024633][  T630] xt_bpf: check failed: parse error
[   28.060512][  T628] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[   28.080816][  T627] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters
[   28.096091][  T627] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 16 with error 28
[   28.108310][  T627] EXT4-fs (loop0): This should not happen!! Data will be lost
[   28.108310][  T627] 
[   28.117946][  T627] EXT4-fs (loop0): Total free blocks count 0
[   28.124018][  T627] EXT4-fs (loop0): Free/Dirty block details
[   28.129805][  T627] EXT4-fs (loop0): free_blocks=66060288
[   28.135512][  T627] EXT4-fs (loop0): dirty_blocks=16
[   28.140748][  T627] EXT4-fs (loop0): Block reservation details
[   28.146777][  T627] EXT4-fs (loop0): i_reserved_data_blocks=1
[   28.160822][  T293] EXT4-fs (loop0): unmounting filesystem.
[   28.222463][  T227] usb 2-1: new full-speed USB device number 3 using dummy_hcd
[   28.287181][  T652] loop5: detected capacity change from 0 to 512
[   28.296372][  T652] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[   28.305686][  T652] ext4 filesystem being mounted at /18/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   28.326709][  T491] EXT4-fs (loop5): unmounting filesystem.
[   28.413830][  T227] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   28.424137][  T227] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[   28.437861][  T227] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   28.447152][  T227] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   28.455310][  T227] usb 2-1: Product: syz
[   28.459382][  T227] usb 2-1: Manufacturer: syz
[   28.463969][  T374] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   28.471345][  T227] usb 2-1: SerialNumber: syz
[   28.632469][  T489] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[   28.653867][  T374] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   28.667839][  T374] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[   28.683152][  T374] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[   28.692240][  T374] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[   28.702714][  T227] usb 2-1: skipping empty audio interface (v1)
[   28.709174][  T374] usb 1-1: SerialNumber: syz
[   28.715189][  T227] snd-usb-audio: probe of 2-1:1.0 failed with error -22
[   28.736128][  T227] usb 2-1: USB disconnect, device number 3
[   28.745848][  T324] udevd[324]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   28.833675][  T489] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   28.845284][  T489] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   28.862814][  T489] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[   28.881212][  T489] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   28.890900][  T489] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   28.904623][  T489] usb 6-1: config 0 descriptor??
[   28.935766][  T374] usb 1-1: 0:2 : does not exist
[   28.945584][  T374] usb 1-1: USB disconnect, device number 2
[   29.152960][  T685] udevd[685]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   29.192529][  T314] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   29.313520][  T489] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving
[   29.322509][  T489] plantronics 0003:047F:FFFF.0001: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0
[   29.373735][  T314] usb 5-1: config 0 has no interfaces?
[   29.379392][  T314] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   29.388215][  T314] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   29.397584][  T314] usb 5-1: config 0 descriptor??
[   29.492477][  T374] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[   29.619792][  T489] usb 5-1: USB disconnect, device number 2
[   29.673509][  T374] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   29.683962][  T374] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[   29.693590][  T374] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[   29.702762][  T374] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[   29.710834][  T374] usb 2-1: SerialNumber: syz
[   29.777419][  T699] xt_hashlimit: size too large, truncated to 1048576
[   29.919160][  T374] usb 2-1: 0:2 : does not exist
[   29.939126][  T374] usb 2-1: USB disconnect, device number 4
[   30.143196][  T706] netlink: 12 bytes leftover after parsing attributes in process `syz.4.162'.
[   30.150796][  T704] loop2: detected capacity change from 0 to 40427
[   30.161010][  T704] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[   30.170985][  T704] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[   30.180471][  T704] F2FS-fs (loop2): invalid crc value
[   30.187777][  T704] F2FS-fs (loop2): Found nat_bits in checkpoint
[   30.242903][  T704] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[   30.249885][  T704] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[   30.302153][  T704] syz.2.161: attempt to access beyond end of device
[   30.302153][  T704] loop2: rw=2049, sector=45096, nr_sectors = 16 limit=40427
[   30.384122][  T722] syz.4.168[722] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   30.384204][  T722] syz.4.168[722] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   30.413479][  T722] netlink: 96 bytes leftover after parsing attributes in process `syz.4.168'.
[   30.435043][   T43] kworker/u4:2: attempt to access beyond end of device
[   30.435043][   T43] loop2: rw=1, sector=45096, nr_sectors = 8 limit=40427
[   30.509715][  T731] loop1: detected capacity change from 0 to 2048
[   30.544487][  T731] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[   30.612600][    C0] plantronics 0003:047F:FFFF.0001: usb_submit_urb(ctrl) failed: -1
[   30.762340][  T291] EXT4-fs (loop1): unmounting filesystem.
[   30.874454][   T28] kauditd_printk_skb: 10149 callbacks suppressed
[   30.874470][   T28] audit: type=1400 audit(1742772563.867:10341): avc:  denied  { bind } for  pid=772 comm="syz.2.186" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   30.901761][   T28] audit: type=1400 audit(1742772563.867:10342): avc:  denied  { setopt } for  pid=772 comm="syz.2.186" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   31.023402][   T28] audit: type=1400 audit(1742772564.017:10343): avc:  denied  { relabelfrom } for  pid=782 comm="syz.2.191" name="NETLINK" dev="sockfs" ino=17773 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   31.023415][  T783] SELinux:  Context system_u:object_r:dhcpd_initrc_exec_t:s0 is not valid (left unmapped).
[   31.057938][   T28] audit: type=1400 audit(1742772564.047:10344): avc:  denied  { relabelto } for  pid=782 comm="syz.2.191" name="NETLINK" dev="sockfs" ino=17773 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=netlink_netfilter_socket permissive=1 trawcon="system_u:object_r:dhcpd_initrc_exec_t:s0"
[   31.154589][   T28] audit: type=1400 audit(1742772564.147:10345): avc:  denied  { block_suspend } for  pid=791 comm="syz.5.195" capability=36  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[   31.171807][  T794] loop2: detected capacity change from 0 to 512
[   31.182668][  T794] EXT4-fs: Ignoring removed orlov option
[   31.188498][  T794] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   31.200801][  T794] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c028, mo2=0002]
[   31.210680][  T794] System zones: 1-12
[   31.216183][  T794] EXT4-fs (loop2): 1 truncate cleaned up
[   31.221740][  T794] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[   31.235468][   T28] audit: type=1400 audit(1742772564.227:10346): avc:  denied  { create } for  pid=793 comm="syz.2.196" name="control" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1
[   31.256705][   T28] audit: type=1400 audit(1742772564.227:10347): avc:  denied  { setattr } for  pid=793 comm="syz.2.196" name="control" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1
[   31.279293][   T28] audit: type=1400 audit(1742772564.227:10348): avc:  denied  { rmdir } for  pid=793 comm="syz.2.196" name="control" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1
[   31.414950][  T806] loop4: detected capacity change from 0 to 128
[   31.432768][  T297] usb 6-1: USB disconnect, device number 2
[   31.440449][  T806] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[   31.452298][  T806] ext4 filesystem being mounted at /53/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   31.456376][  T802] loop5: detected capacity change from 0 to 40427
[   31.472598][  T802] F2FS-fs (loop5): fault_injection options not supported
[   31.484217][   T28] audit: type=1400 audit(1742772564.477:10349): avc:  denied  { link } for  pid=805 comm="syz.4.201" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop4" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   31.488493][  T802] F2FS-fs (loop5): invalid crc value
[   31.533066][   T28] audit: type=1400 audit(1742772564.517:10350): avc:  denied  { create } for  pid=805 comm="syz.4.201" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1
[   31.543271][  T802] F2FS-fs (loop5): Found nat_bits in checkpoint
[   31.583499][  T295] EXT4-fs (loop4): unmounting filesystem.
[   31.672454][  T802] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[   31.736174][  T802] syz.5.199: attempt to access beyond end of device
[   31.736174][  T802] loop5: rw=2049, sector=77824, nr_sectors = 136 limit=40427
[   31.755408][  T802] syz.5.199: attempt to access beyond end of device
[   31.755408][  T802] loop5: rw=2049, sector=45096, nr_sectors = 88 limit=40427
[   31.786422][  T491] syz-executor: attempt to access beyond end of device
[   31.786422][  T491] loop5: rw=2049, sector=45184, nr_sectors = 8 limit=40427
[   31.813188][  T290] EXT4-fs (loop2): unmounting filesystem.
[   31.937369][  T852] syz.4.221[852] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   31.937449][  T852] syz.4.221[852] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   31.965147][  T854] loop1: detected capacity change from 0 to 2048
[   31.985446][  T854] EXT4-fs: Ignoring removed mblk_io_submit option
[   31.992783][  T852] syz.4.221[852] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   31.992861][  T852] syz.4.221[852] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   32.008888][  T850] device syzkaller0 entered promiscuous mode
[   32.043393][  T854] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[   32.053060][  T862] incfs: Options parsing error. -22
[   32.058387][  T862] incfs: mount failed -22
[   32.111887][  T865] loop5: detected capacity change from 0 to 512
[   32.132338][  T865] EXT4-fs: Ignoring removed orlov option
[   32.140422][  T865] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[   32.173121][  T865] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c028, mo2=0002]
[   32.187221][  T291] EXT4-fs (loop1): unmounting filesystem.
[   32.199983][  T865] System zones: 1-12
[   32.237240][  T865] EXT4-fs (loop5): 1 truncate cleaned up
[   32.249742][  T876] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready
[   32.257384][  T314] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[   32.265529][  T865] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[   32.275657][  T878] loop7: detected capacity change from 0 to 16384
[   32.301010][  T879] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready
[   32.336604][  T869] loop4: detected capacity change from 0 to 40427
[   32.360920][  T869] F2FS-fs (loop4): invalid crc value
[   32.371614][  T869] F2FS-fs (loop4): Found nat_bits in checkpoint
[   32.438344][  T869] F2FS-fs (loop4): Start checkpoint disabled!
[   32.445091][  T869] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6
[   32.462463][  T314] usb 1-1: Using ep0 maxpacket: 8
[   32.468452][  T314] usb 1-1: config index 0 descriptor too short (expected 30768, got 18)
[   32.472504][  T880] loop7: detected capacity change from 16384 to 0
[   32.477003][  T314] usb 1-1: config 102 has too many interfaces: 102, using maximum allowed: 32
[   32.493695][  T314] usb 1-1: config 102 has an invalid descriptor of length 102, skipping remainder of the config
[   32.510475][  T314] usb 1-1: config 102 has 0 interfaces, different from the descriptor's value: 102
[   32.519899][  T314] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[   32.529238][  T314] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   32.820734][  T491] EXT4-fs (loop5): unmounting filesystem.
[   32.840050][  T910] netem: change failed
[   32.847348][  T909] bridge0: port 3(syz_tun) entered blocking state
[   32.853824][  T909] bridge0: port 3(syz_tun) entered disabled state
[   32.860601][  T909] device syz_tun entered promiscuous mode
[   32.866353][  T909] bridge0: port 3(syz_tun) entered blocking state
[   32.872623][  T909] bridge0: port 3(syz_tun) entered forwarding state
[   32.950537][  T314] usb 1-1: string descriptor 0 read error: -71
[   32.978635][  T314] usb 1-1: USB disconnect, device number 3
[   33.179531][  T924] loop2: detected capacity change from 0 to 40427
[   33.188599][  T937] tmpfs: Unknown parameter 's'
[   33.206225][  T924] F2FS-fs (loop2): fault_injection options not supported
[   33.217724][  T924] F2FS-fs (loop2): invalid crc value
[   33.236818][  T944] netlink: 'syz.5.256': attribute type 4 has an invalid length.
[   33.245901][  T924] F2FS-fs (loop2): Found nat_bits in checkpoint
[   33.323849][  T924] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[   33.427477][  T963] bridge0: port 3(syz_tun) entered disabled state
[   33.449862][  T963] device syz_tun left promiscuous mode
[   33.455620][  T963] bridge0: port 3(syz_tun) entered disabled state
[   33.477602][  T967] loop4: detected capacity change from 0 to 256
[   33.487023][  T967] binder: 966:967 ioctl c0306201 2000000001c0 returned -14
[   33.646324][  T975] loop5: detected capacity change from 0 to 512
[   33.675421][  T924] syz.2.247: attempt to access beyond end of device
[   33.675421][  T924] loop2: rw=10241, sector=45096, nr_sectors = 8 limit=40427
[   33.708566][  T924] syz.2.247: attempt to access beyond end of device
[   33.708566][  T924] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[   33.774022][  T290] syz-executor: attempt to access beyond end of device
[   33.774022][  T290] loop2: rw=2049, sector=45104, nr_sectors = 24 limit=40427
[   33.815260][  T989] device veth1_macvtap left promiscuous mode
[   33.821141][  T989] device macsec0 entered promiscuous mode
[   33.869970][  T993] SELinux:  Context system_u:object_r:systemd_logind_var_run_t:s0 is not valid (left unmapped).
[   33.982470][  T374] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[   34.172510][  T374] usb 6-1: Using ep0 maxpacket: 16
[   34.183187][  T374] usb 6-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30
[   34.194174][  T374] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[   34.204026][  T374] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[   34.214059][  T374] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 30442, setting to 1024
[   34.225006][  T374] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024
[   34.234669][  T374] usb 6-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255
[   34.249227][  T374] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   34.258290][  T374] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[   34.266177][  T374] usb 6-1: SerialNumber: syz
[   34.274753][  T975] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[   34.283997][  T374] cdc_acm: probe of 6-1:1.0 failed with error -12
[   34.414062][  T489] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[   34.486061][  T297] usb 6-1: USB disconnect, device number 3
[   34.602535][  T489] usb 5-1: Using ep0 maxpacket: 16
[   34.608762][  T489] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   34.619031][  T489] usb 5-1: config 0 has no interfaces?
[   34.624848][  T489] usb 5-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4
[   34.636173][  T489] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   34.648250][  T489] usb 5-1: config 0 descriptor??
[   34.662744][ T1051] bridge0: port 1(bridge_slave_0) entered blocking state
[   34.669607][ T1051] bridge0: port 1(bridge_slave_0) entered forwarding state
[   35.035002][ T1096] device bridge0 entered promiscuous mode
[   35.041053][ T1096] bridge0: port 3(macsec1) entered blocking state
[   35.047494][ T1096] bridge0: port 3(macsec1) entered disabled state
[   35.054923][ T1096] device bridge0 left promiscuous mode
[   35.120274][ T1100] loop2: detected capacity change from 0 to 512
[   35.126694][ T1100] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22
[   35.232444][  T297] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[   35.422556][  T297] usb 1-1: Using ep0 maxpacket: 32
[   35.428829][  T297] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   35.439797][  T297] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   35.449399][  T297] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[   35.458312][  T297] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   35.467166][  T297] usb 1-1: config 0 descriptor??
[   35.473092][  T297] hub 1-1:0.0: USB hub found
[   35.582451][  T489] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[   35.674141][  T297] hub 1-1:0.0: 1 port detected
[   35.772460][  T489] usb 3-1: Using ep0 maxpacket: 16
[   35.778736][  T489] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 11
[   35.793685][  T489] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0
[   35.803510][  T489] usb 3-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0
[   35.815015][  T489] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0
[   35.824810][  T489] usb 3-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0
[   35.834436][  T489] usb 3-1: config 1 interface 0 has no altsetting 0
[   35.840940][  T489] usb 3-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77
[   35.851191][  T489] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   35.870296][  T489] ums-sddr09 3-1:1.0: USB Mass Storage device detected
[   35.887216][   T28] kauditd_printk_skb: 3619 callbacks suppressed
[   35.887232][   T28] audit: type=1326 audit(1742772568.877:13970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1023 comm="syz.4.291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36c018d169 code=0x50000
[   35.916926][   T28] audit: type=1326 audit(1742772568.887:13971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1023 comm="syz.4.291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f36c01bfa25 code=0x50000
[   35.940869][   T28] audit: type=1326 audit(1742772568.887:13972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1023 comm="syz.4.291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f36c01bfa25 code=0x50000
[   35.964370][   T28] audit: type=1326 audit(1742772568.887:13973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1023 comm="syz.4.291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f36c01bfa25 code=0x50000
[   35.987923][   T28] audit: type=1326 audit(1742772568.887:13974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1023 comm="syz.4.291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f36c01bfa25 code=0x50000
[   36.007883][ T1121] loop1: detected capacity change from 0 to 128
[   36.013355][   T28] audit: type=1326 audit(1742772568.887:13975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1023 comm="syz.4.291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f36c01bfa25 code=0x50000
[   36.040202][   T28] audit: type=1326 audit(1742772568.887:13976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1023 comm="syz.4.291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f36c01bfa25 code=0x50000
[   36.064954][ T1121] FAT-fs (loop1): Directory bread(block 162) failed
[   36.071638][ T1121] FAT-fs (loop1): Directory bread(block 163) failed
[   36.078292][ T1121] FAT-fs (loop1): Directory bread(block 164) failed
[   36.086487][ T1121] FAT-fs (loop1): Directory bread(block 165) failed
[   36.093051][ T1121] FAT-fs (loop1): Directory bread(block 166) failed
[   36.100146][   T28] audit: type=1326 audit(1742772568.887:13977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1023 comm="syz.4.291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f36c01bfa25 code=0x50000
[   36.123235][  T489] scsi host1: usb-storage 3-1:1.0
[   36.129674][ T1121] FAT-fs (loop1): Directory bread(block 167) failed
[   36.136247][ T1121] FAT-fs (loop1): Directory bread(block 168) failed
[   36.142794][ T1121] FAT-fs (loop1): Directory bread(block 169) failed
[   36.149374][   T28] audit: type=1326 audit(1742772568.887:13978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1023 comm="syz.4.291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f36c01bfa25 code=0x50000
[   36.165369][ T1121] FAT-fs (loop1): Directory bread(block 162) failed
[   36.172703][   T28] audit: type=1326 audit(1742772568.887:13979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1023 comm="syz.4.291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f36c01bfa25 code=0x50000
[   36.180849][ T1121] FAT-fs (loop1): Directory bread(block 163) failed
[   36.209671][ T1121] syz.1.333: attempt to access beyond end of device
[   36.209671][ T1121] loop1: rw=3, sector=226, nr_sectors = 6 limit=128
[   36.223025][ T1121] syz.1.333: attempt to access beyond end of device
[   36.223025][ T1121] loop1: rw=2051, sector=232, nr_sectors = 2 limit=128
[   36.287644][  T297] hub 1-1:0.0: activate --> -90
[   36.303618][  T374] usb 3-1: USB disconnect, device number 3
[   36.690212][  T297] hub 1-1:0.0: hub_ext_port_status failed (err = -71)
[   36.693109][  T374] usb 1-1: USB disconnect, device number 4
[   37.160710][  T489] usb 5-1: USB disconnect, device number 3
[   37.174585][ T1169] devpts: called with bogus options
[   37.222471][ T1177] tipc: Started in network mode
[   37.227321][ T1177] tipc: Node identity 7f000001, cluster identity 4711
[   37.236226][ T1177] tipc: Enabled bearer <udp:syz2>, priority 10
[   37.240688][ T1179] loop0: detected capacity change from 0 to 1024
[   37.269916][ T1183] loop5: detected capacity change from 0 to 512
[   37.278364][ T1183] EXT4-fs: Ignoring removed nobh option
[   37.289279][ T1179] EXT4-fs: Ignoring removed orlov option
[   37.295855][ T1179] EXT4-fs (loop0): Test dummy encryption mode enabled
[   37.304898][ T1183] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[   37.319993][ T1179] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[   37.342976][  T491] EXT4-fs (loop5): unmounting filesystem.
[   37.349186][ T1179] fscrypt: AES-256-XTS using implementation "xts-aes-aesni"
[   37.454058][  T293] EXT4-fs (loop0): unmounting filesystem.
[   37.682536][  T374] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[   37.761335][ T1253] netlink: 96 bytes leftover after parsing attributes in process `syz.2.388'.
[   37.793165][ T1257] xt_TPROXY: Can be used only with -p tcp or -p udp
[   37.872452][  T374] usb 6-1: Using ep0 maxpacket: 16
[   37.873538][  T374] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   37.873561][  T374] usb 6-1: config 0 has no interfaces?
[   37.873582][  T374] usb 6-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4
[   37.873606][  T374] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   37.874325][  T374] usb 6-1: config 0 descriptor??
[   38.210345][ T1293] netlink: 136 bytes leftover after parsing attributes in process `syz.2.406'.
[   38.288994][  T489] tipc: Node number set to 2130706433
[   38.302486][ T1293] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check.
[   40.052495][   T24] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[   40.232443][   T24] usb 1-1: Using ep0 maxpacket: 8
[   40.238579][   T24] usb 1-1: config index 0 descriptor too short (expected 5924, got 36)
[   40.246953][   T24] usb 1-1: config 250 has an invalid interface number: 228 but max is -1
[   40.263771][   T24] usb 1-1: config 250 has 1 interface, different from the descriptor's value: 0
[   40.278196][   T24] usb 1-1: config 250 has no interface number 0
[   40.288040][   T24] usb 1-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024
[   40.306106][   T24] usb 1-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024
[   40.322802][   T24] usb 1-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0
[   40.339029][   T24] usb 1-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0
[   40.355341][   T24] usb 1-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17
[   40.376561][   T24] usb 1-1: config 250 interface 228 has no altsetting 0
[   40.388653][   T24] usb 1-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07
[   40.411447][   T24] usb 1-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59
[   40.419860][   T24] usb 1-1: Product: syz
[   40.424072][   T24] usb 1-1: SerialNumber: syz
[   40.442878][   T24] hub 1-1:250.228: bad descriptor, ignoring hub
[   40.452756][   T24] hub: probe of 1-1:250.228 failed with error -5
[   40.640532][   T24] usblp 1-1:250.228: usblp0: USB Bidirectional printer dev 5 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292
[   40.684410][  T314] usb 6-1: USB disconnect, device number 4
[   40.963165][  T374] usb 1-1: USB disconnect, device number 5
[   40.971409][  T374] usblp0: removed
[   41.100506][ T1378] loop7: detected capacity change from 0 to 16384
[   41.272545][ T1378] loop7: detected capacity change from 16384 to 0
[   41.291318][ T1381] device wg2 entered promiscuous mode
[   41.325831][ T1383] loop1: detected capacity change from 0 to 1024
[   41.348089][ T1383] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[   41.356682][ T1383] ext4 filesystem being mounted at /100/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   41.394074][  T291] EXT4-fs (loop1): unmounting filesystem.
[   41.683885][ T1411] netlink: 96 bytes leftover after parsing attributes in process `syz.0.455'.
[   41.743193][ T1415] loop5: detected capacity change from 0 to 2048
[   41.763224][ T1417] loop7: detected capacity change from 0 to 16384
[   41.783455][ T1415] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[   41.800086][   T28] kauditd_printk_skb: 15683 callbacks suppressed
[   41.800101][   T28] audit: type=1400 audit(1742772574.787:29662): avc:  denied  { watch watch_reads } for  pid=1414 comm="syz.5.458" path="/65/file0" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   41.936691][  T491] EXT4-fs (loop5): unmounting filesystem.
[   42.002527][ T1420] loop7: detected capacity change from 16384 to 0
[   42.040624][ T1413] loop2: detected capacity change from 0 to 40427
[   42.069757][ T1413] F2FS-fs (loop2): fault_injection options not supported
[   42.073706][ T1417] I/O error, dev loop7, sector 11648 op 0x0:(READ) flags 0x80700 phys_seg 16 prio class 2
[   42.080157][ T1413] F2FS-fs (loop2): invalid crc value
[   42.102932][ T1413] F2FS-fs (loop2): Found nat_bits in checkpoint
[   42.181464][ T1413] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[   42.282103][ T1413] syz.2.456: attempt to access beyond end of device
[   42.282103][ T1413] loop2: rw=2049, sector=77824, nr_sectors = 136 limit=40427
[   42.318100][ T1413] syz.2.456: attempt to access beyond end of device
[   42.318100][ T1413] loop2: rw=2049, sector=45096, nr_sectors = 120 limit=40427
[   42.343488][  T290] syz-executor: attempt to access beyond end of device
[   42.343488][  T290] loop2: rw=2049, sector=45216, nr_sectors = 8 limit=40427
[   42.411649][   T28] audit: type=1400 audit(1742772575.397:29663): avc:  denied  { watch watch_reads } for  pid=1439 comm="syz.1.465" path="/104/file0" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1
[   42.463101][   T28] audit: type=1400 audit(1742772575.457:29664): avc:  denied  { unmount } for  pid=291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[   42.465662][ T1443] loop5: detected capacity change from 0 to 512
[   42.524300][ T1443] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[   42.536359][ T1443] EXT4-fs (loop5): 1 truncate cleaned up
[   42.541876][ T1443] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[   42.562514][  T374] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[   42.600921][  T491] EXT4-fs (loop5): unmounting filesystem.
[   42.638582][ T1456] loop5: detected capacity change from 0 to 256
[   42.660204][ T1456] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001e4a3, chksum : 0xe1cea053, utbl_chksum : 0x7319d30d)
[   42.715933][ T1466] device bridge0 entered promiscuous mode
[   42.722094][ T1466] bridge0: port 3(macsec1) entered blocking state
[   42.728657][ T1466] bridge0: port 3(macsec1) entered disabled state
[   42.735719][ T1466] device bridge0 left promiscuous mode
[   42.773556][  T374] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   42.784602][  T374] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[   42.800912][  T374] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   42.810006][  T374] usb 1-1: config 0 descriptor??
[   42.820415][   T28] audit: type=1400 audit(1742772575.807:29665): avc:  denied  { listen } for  pid=1471 comm="syz.1.477" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   42.899412][ T1479] loop1: detected capacity change from 0 to 16
[   42.919930][ T1479] erofs: (device loop1): EXPERIMENTAL compressed fragments feature in use. Use at your own risk!
[   42.930502][ T1479] erofs: (device loop1): EXPERIMENTAL global deduplication feature in use. Use at your own risk!
[   42.947123][ T1479] erofs: (device loop1): erofs_read_inode: bogus i_mode (0) @ nid 3072
[   42.994714][ T1486] netlink: 8 bytes leftover after parsing attributes in process `syz.2.483'.
[   43.030010][ T1490] syz.2.485[1490] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   43.030089][ T1490] syz.2.485[1490] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   43.062489][  T489] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[   43.213383][ T1503] devpts: called with bogus options
[   43.219793][  T374] keytouch 0003:0926:3333.0002: fixing up Keytouch IEC report descriptor
[   43.232211][  T374] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.0002/input/input4
[   43.277750][ T1511] loop1: detected capacity change from 0 to 1024
[   43.286622][  T489] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   43.302555][  T489] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[   43.317388][  T489] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[   43.327593][   T28] audit: type=1400 audit(1742772576.317:29666): avc:  denied  { read } for  pid=87 comm="acpid" name="event3" dev="devtmpfs" ino=613 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   43.329052][ T1511] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[   43.351101][  T374] keytouch 0003:0926:3333.0002: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0
[   43.373401][  T489] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[   43.375152][ T1511] ext4 filesystem being mounted at /117/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   43.394190][   T28] audit: type=1400 audit(1742772576.317:29667): avc:  denied  { open } for  pid=87 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=613 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   43.407860][  T489] usb 6-1: SerialNumber: syz
[   43.452040][   T28] audit: type=1400 audit(1742772576.317:29668): avc:  denied  { ioctl } for  pid=87 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=613 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   43.521964][  T291] EXT4-fs (loop1): unmounting filesystem.
[   43.592315][ T1515] loop2: detected capacity change from 0 to 40427
[   43.601777][ T1515] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[   43.609780][ T1515] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[   43.629321][ T1515] F2FS-fs (loop2): Found nat_bits in checkpoint
[   43.692793][  T489] usb 6-1: 0:2 : does not exist
[   43.697528][  T489] usb 6-1: usbmixer: too many channels (61) in unit 5
[   43.711517][  T489] usb 6-1: USB disconnect, device number 5
[   43.735645][  T685] udevd[685]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   43.739903][ T1515] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[   43.761483][ T1515] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[   43.841113][ T1541] loop7: detected capacity change from 0 to 16384
[   43.863808][ T1543] device wg2 entered promiscuous mode
[   43.910563][   T28] audit: type=1400 audit(1742772576.897:29669): avc:  denied  { read } for  pid=1545 comm="syz.4.507" name="usbmon0" dev="devtmpfs" ino=155 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[   43.974402][   T28] audit: type=1400 audit(1742772576.927:29670): avc:  denied  { open } for  pid=1545 comm="syz.4.507" path="/dev/usbmon0" dev="devtmpfs" ino=155 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[   44.023487][   T28] audit: type=1400 audit(1742772576.937:29671): avc:  denied  { ioctl } for  pid=1545 comm="syz.4.507" path="/dev/usbmon0" dev="devtmpfs" ino=155 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[   44.072735][ T1547] loop7: detected capacity change from 16384 to 0
[   44.127975][  T489] usb 1-1: USB disconnect, device number 6
[   44.183531][ T1560] SELinux: failed to load policy
[   44.426007][ T1580] loop1: detected capacity change from 0 to 256
[   44.438545][ T1580] FAT-fs (loop1): Unrecognized mount option "ÿÿÿÿÿÿÿ" or missing value
[   44.515827][ T1591] hub 6-0:1.0: USB hub found
[   44.526781][ T1591] hub 6-0:1.0: 1 port detected
[   44.664565][ T1603] loop2: detected capacity change from 0 to 1024
[   44.683424][ T1603] journal_path: not usable as path
[   44.691813][ T1603] EXT4-fs: error: could not find journal device path
[   44.967815][ T1637] loop1: detected capacity change from 0 to 1024
[   44.979510][ T1637] EXT4-fs: Ignoring removed orlov option
[   44.986508][ T1637] EXT4-fs (loop1): Test dummy encryption mode enabled
[   44.999053][   T10] Bluetooth: hci0: Frame reassembly failed (-84)
[   45.008863][ T1637] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[   45.052477][   T39] usb 1-1: new full-speed USB device number 7 using dummy_hcd
[   45.093521][  T291] EXT4-fs (loop1): unmounting filesystem.
[   45.195805][ T1653] netlink: 4 bytes leftover after parsing attributes in process `syz.1.551'.
[   45.207218][ T1655] loop5: detected capacity change from 0 to 128
[   45.214330][ T1653] netlink: 12 bytes leftover after parsing attributes in process `syz.1.551'.
[   45.245502][   T39] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[   45.266607][   T39] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   45.285839][   T39] usb 1-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00
[   45.300548][   T39] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   45.315910][   T39] usb 1-1: config 0 descriptor??
[   45.341528][ T1669] netlink: 16 bytes leftover after parsing attributes in process `syz.4.560'.
[   45.612449][  T489] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[   45.642432][   T19] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[   45.736534][   T39] zydacron 0003:13EC:0006.0003: item fetching failed at offset 5/7
[   45.744497][   T39] zydacron 0003:13EC:0006.0003: parse failed
[   45.750303][   T39] zydacron: probe of 0003:13EC:0006.0003 failed with error -22
[   45.792508][  T489] usb 2-1: Using ep0 maxpacket: 16
[   45.798765][  T489] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 11
[   45.807678][  T489] usb 2-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0
[   45.817174][  T489] usb 2-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0
[   45.826626][  T489] usb 2-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0
[   45.836174][  T489] usb 2-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0
[   45.845748][   T19] usb 6-1: Using ep0 maxpacket: 32
[   45.845763][  T489] usb 2-1: config 1 interface 0 has no altsetting 0
[   45.857187][  T489] usb 2-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77
[   45.866129][  T489] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   45.874161][   T19] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   45.877763][  T489] ums-sddr09 2-1:1.0: USB Mass Storage device detected
[   45.885394][   T19] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   45.901275][   T19] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[   45.910185][   T19] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   45.918808][   T19] usb 6-1: config 0 descriptor??
[   45.924754][   T19] hub 6-1:0.0: USB hub found
[   45.939713][ T1685] usb 1-1: USB disconnect, device number 7
[   46.081148][  T489] scsi host1: usb-storage 2-1:1.0
[   46.125242][   T19] hub 6-1:0.0: 1 port detected
[   46.288618][  T489] usb 2-1: USB disconnect, device number 5
[   46.491716][ T1696] netlink: 116 bytes leftover after parsing attributes in process `syz.4.570'.
[   46.596713][ T1702] loop0: detected capacity change from 0 to 512
[   46.603497][ T1702] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[   46.614492][ T1702] EXT4-fs (loop0): 1 truncate cleaned up
[   46.619966][ T1702] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[   46.729299][  T293] EXT4-fs (loop0): unmounting filesystem.
[   46.782538][ T1685] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[   46.962467][ T1685] usb 5-1: Using ep0 maxpacket: 8
[   46.968536][ T1685] usb 5-1: config index 0 descriptor too short (expected 5924, got 36)
[   46.976657][ T1685] usb 5-1: config 250 has an invalid interface number: 228 but max is -1
[   46.984900][ T1685] usb 5-1: config 250 has 1 interface, different from the descriptor's value: 0
[   46.993759][ T1685] usb 5-1: config 250 has no interface number 0
[   46.999792][ T1685] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024
[   47.011190][ T1685] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024
[   47.021420][ T1685] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0
[   47.031507][ T1685] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0
[   47.041565][ T1685] usb 5-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17
[   47.054858][ T1685] usb 5-1: config 250 interface 228 has no altsetting 0
[   47.062435][ T1641] Bluetooth: hci0: command 0x1003 tx timeout
[   47.062740][ T1400] Bluetooth: hci0: Opcode 0x1003 failed: -110
[   47.068397][ T1685] usb 5-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07
[   47.074286][  T314] hub 6-1:0.0: activate --> -90
[   47.083924][ T1685] usb 5-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59
[   47.097001][ T1685] usb 5-1: Product: syz
[   47.101036][ T1685] usb 5-1: SerialNumber: syz
[   47.107255][ T1685] hub 5-1:250.228: bad descriptor, ignoring hub
[   47.113376][ T1685] hub: probe of 5-1:250.228 failed with error -5
[   47.304119][   T24] usb 6-1: USB disconnect, device number 6
[   47.306587][  T314] usb 6-1-port1: config error
[   47.314851][ T1685] usblp 5-1:250.228: usblp0: USB Bidirectional printer dev 4 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292
[   47.632655][   T24] usb 5-1: USB disconnect, device number 4
[   47.639035][   T24] usblp0: removed
[   48.124563][ T1713] tmpfs: Unknown parameter 'nolazytimeun'
[   48.131527][ T1711] devtmpfs: Unknown parameter 'posixacl'
[   48.151267][ T1716] loop7: detected capacity change from 0 to 16384
[   48.241974][ T1728] loop5: detected capacity change from 0 to 128
[   48.298379][ T1728] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[   48.307551][ T1728] ext4 filesystem being mounted at /80/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   48.382530][ T1726] loop7: detected capacity change from 16384 to 0
[   48.404116][   T28] kauditd_printk_skb: 7 callbacks suppressed
[   48.404133][   T28] audit: type=1400 audit(1742772581.397:29679): avc:  denied  { write } for  pid=1727 comm="syz.5.582" name="encrypted_dir" dev="loop5" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1
[   48.404935][ T1716] I/O error, dev loop7, sector 15112 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 2
[   48.437333][   T28] audit: type=1400 audit(1742772581.417:29680): avc:  denied  { add_name } for  pid=1727 comm="syz.5.582" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1
[   48.472477][   T19] usb 1-1: new full-speed USB device number 8 using dummy_hcd
[   48.481142][  T491] EXT4-fs (loop5): unmounting filesystem.
[   48.597734][ T1747] netlink: 64 bytes leftover after parsing attributes in process `syz.2.591'.
[   48.617759][ T1749] xt_hashlimit: size too large, truncated to 1048576
[   48.673552][   T19] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   48.702433][   T19] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[   48.728274][   T19] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   48.758707][   T19] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   48.778664][   T19] usb 1-1: Product: syz
[   48.782931][   T19] usb 1-1: Manufacturer: syz
[   48.790732][   T19] usb 1-1: SerialNumber: syz
[   48.914918][ T1767] loop4: detected capacity change from 0 to 512
[   48.951405][ T1767] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.599: bg 0: block 35: padding at end of block bitmap is not set
[   48.982428][ T1767] EXT4-fs (loop4): Remounting filesystem read-only
[   48.983789][ T1751] loop1: detected capacity change from 0 to 40427
[   48.995193][ T1767] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6170: Corrupt filesystem
[   49.011105][   T19] usb 1-1: 0:2 : does not exist
[   49.016847][ T1767] EXT4-fs (loop4): Remounting filesystem read-only
[   49.026088][   T19] usb 1-1: 5:0: failed to get current value for ch 0 (-22)
[   49.036167][ T1751] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[   49.047059][ T1767] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.599: invalid indirect mapped block 4294967295 (level 1)
[   49.047106][ T1751] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[   49.069573][ T1751] F2FS-fs (loop1): invalid crc value
[   49.088128][   T19] usb 1-1: USB disconnect, device number 8
[   49.094171][ T1767] EXT4-fs (loop4): Remounting filesystem read-only
[   49.100611][ T1767] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.599: invalid indirect mapped block 4294967295 (level 2)
[   49.122650][ T1767] EXT4-fs (loop4): Remounting filesystem read-only
[   49.134475][ T1751] F2FS-fs (loop1): Found nat_bits in checkpoint
[   49.143822][ T1767] EXT4-fs (loop4): 1 truncate cleaned up
[   49.149529][ T1767] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[   49.198242][  T295] EXT4-fs (loop4): unmounting filesystem.
[   49.205114][ T1751] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[   49.211983][ T1751] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[   49.327843][   T10] kworker/u4:1: attempt to access beyond end of device
[   49.327843][   T10] loop1: rw=1, sector=45096, nr_sectors = 8 limit=40427
[   50.055423][ T1814] syz.2.615[1814] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   50.055496][ T1814] syz.2.615[1814] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   50.230634][ T1820] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[   50.247662][ T1823] hub 6-0:1.0: USB hub found
[   50.254362][ T1823] hub 6-0:1.0: 1 port detected
[   50.258985][   T28] audit: type=1400 audit(1742772583.247:29681): avc:  denied  { remount } for  pid=1821 comm="syz.5.620" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[   50.327593][ T1830] loop1: detected capacity change from 0 to 512
[   50.341389][ T1830] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   50.353731][ T1830] EXT4-fs (loop1): 1 truncate cleaned up
[   50.359351][ T1830] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[   50.439217][   T28] audit: type=1400 audit(1742772583.427:29682): avc:  denied  { unmount } for  pid=491 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[   50.479966][ T1846] netlink: 4 bytes leftover after parsing attributes in process `syz.5.629'.
[   50.488721][ T1846] device bridge_slave_1 left promiscuous mode
[   50.495514][ T1846] bridge0: port 2(bridge_slave_1) entered disabled state
[   50.503528][ T1846] device bridge_slave_0 left promiscuous mode
[   50.503939][  T291] EXT4-fs (loop1): unmounting filesystem.
[   50.509638][ T1846] bridge0: port 1(bridge_slave_0) entered disabled state
[   50.585307][   T28] audit: type=1400 audit(1742772583.577:29683): avc:  denied  { create } for  pid=1847 comm="syz.1.630" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:fusefs_t tclass=chr_file permissive=1
[   50.619257][   T28] audit: type=1400 audit(1742772583.607:29684): avc:  denied  { create } for  pid=1850 comm="syz.1.631" name="#c" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[   50.640014][   T28] audit: type=1400 audit(1742772583.607:29685): avc:  denied  { link } for  pid=1850 comm="syz.1.631" name="#c" dev="tmpfs" ino=772 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[   50.652467][   T19] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[   50.668928][   T28] audit: type=1400 audit(1742772583.607:29686): avc:  denied  { rename } for  pid=1850 comm="syz.1.631" name="#d" dev="tmpfs" ino=772 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[   50.713967][ T1855] loop5: detected capacity change from 0 to 1024
[   50.720750][ T1855] EXT4-fs: Ignoring removed mblk_io_submit option
[   50.731814][ T1855] EXT4-fs: Ignoring removed nobh option
[   50.737555][ T1855] EXT4-fs: Ignoring removed bh option
[   50.743760][ T1855] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   50.764400][ T1855] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[   50.786361][  T491] EXT4-fs (loop5): unmounting filesystem.
[   50.804090][   T28] audit: type=1400 audit(1742772583.797:29687): avc:  denied  { setattr } for  pid=1863 comm="syz.5.636" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   50.849306][   T28] audit: type=1400 audit(1742772583.837:29688): avc:  denied  { setopt } for  pid=1867 comm="syz.5.638" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   50.863674][   T19] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   50.881165][   T19] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   50.890538][   T19] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   50.898518][   T19] usb 5-1: Product: syz
[   50.902540][   T19] usb 5-1: Manufacturer: syz
[   50.906944][   T19] usb 5-1: SerialNumber: syz
[   51.348279][ T1874] loop2: detected capacity change from 0 to 40427
[   51.355814][ T1874] F2FS-fs (loop2): Invalid Fs Meta Ino: node(0) meta(2) root(0)
[   51.363671][ T1874] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[   51.372428][ T1874] F2FS-fs (loop2): invalid crc value
[   51.379141][ T1874] F2FS-fs (loop2): Found nat_bits in checkpoint
[   51.422201][ T1874] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[   51.429199][ T1874] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4
[   51.461924][ T1874] syz.2.640: attempt to access beyond end of device
[   51.461924][ T1874] loop2: rw=2051, sector=36912, nr_sectors = 8152 limit=40427
[   51.475932][ T1874] syz.2.640: attempt to access beyond end of device
[   51.475932][ T1874] loop2: rw=2051, sector=45096, nr_sectors = 85976 limit=40427
[   51.490001][ T1874] F2FS-fs (loop2): Issue discard(4614, 4614, 1019) failed, ret: -5
[   51.490033][ T1874] F2FS-fs (loop2): Issue discard(5637, 5637, 10747) failed, ret: -5
[   51.563243][ T1879] loop2: detected capacity change from 0 to 2048
[   51.585324][ T1879] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[   51.602439][ T1869] Bluetooth: hci0: command 0x1003 tx timeout
[   51.602559][ T1400] Bluetooth: hci0: Opcode 0x1003 failed: -110
[   51.629408][  T290] EXT4-fs (loop2): unmounting filesystem.
[   51.708996][ T1893] hub 9-0:1.0: USB hub found
[   51.713629][ T1893] hub 9-0:1.0: 1 port detected
[   51.750508][ T1895] sch_fq: defrate 0 ignored.
[   51.793163][ T1901] loop2: detected capacity change from 0 to 1024
[   51.822106][ T1901] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[   51.858195][ T1901] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3841: comm syz.2.648: Allocating blocks 481-513 which overlap fs metadata
[   51.896293][ T1907] netlink: 564 bytes leftover after parsing attributes in process `syz.1.651'.
[   51.913508][ T1901] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5887: Corrupt filesystem
[   51.925799][   T19] cdc_ncm 5-1:1.0: MAC-Address: 42:42:42:42:42:42
[   51.932095][   T19] cdc_ncm 5-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048
[   51.940558][   T19] cdc_ncm 5-1:1.0: setting rx_max = 2048
[   51.949161][ T1901] EXT4-fs error (device loop2): ext4_dirty_inode:6091: inode #18: comm syz.2.648: mark_inode_dirty error
[   51.961511][ T1901] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5887: Corrupt filesystem
[   51.971919][ T1901] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #18: comm syz.2.648: mark_inode_dirty error
[   51.992839][ T1901] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5887: Corrupt filesystem
[   52.008580][ T1901] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #18: comm syz.2.648: mark_inode_dirty error
[   52.029560][  T290] EXT4-fs error (device loop2): ext4_map_blocks:634: inode #2: block 16: comm syz-executor: lblock 0 mapped to illegal pblock 16 (length 1)
[   52.044340][  T290] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5887: Corrupt filesystem
[   52.054450][  T290] EXT4-fs error (device loop2): ext4_dirty_inode:6091: inode #2: comm syz-executor: mark_inode_dirty error
[   52.113560][  T366] EXT4-fs (loop2): unmounting filesystem.
[   52.185846][  T290] syz-executor (290) used greatest stack depth: 20328 bytes left
[   52.194107][ T1887] tipc: Disabling bearer <udp:syz2>
[   52.199388][ T1887] tipc: Left network mode
[   52.324553][   T19] cdc_ncm 5-1:1.0: setting tx_max = 88
[   52.331561][ T1922] loop1: detected capacity change from 0 to 40427
[   52.340095][   T19] cdc_ncm 5-1:1.0 eth1: register 'cdc_ncm' at usb-dummy_hcd.4-1, CDC NCM (NO ZLP), 42:42:42:42:42:42
[   52.354167][ T1922] F2FS-fs (loop1): Insane cp_payload (553648128 >= 504)
[   52.366994][ T1922] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[   52.376320][ T1922] F2FS-fs (loop1): fault_injection options not supported
[   52.386471][ T1922] F2FS-fs (loop1): fault_type options not supported
[   52.400187][   T19] usb 5-1: USB disconnect, device number 5
[   52.416574][   T19] cdc_ncm 5-1:1.0 eth1: unregister 'cdc_ncm' usb-dummy_hcd.4-1, CDC NCM (NO ZLP)
[   52.432947][ T1922] F2FS-fs (loop1): invalid crc value
[   52.449758][ T1922] F2FS-fs (loop1): Found nat_bits in checkpoint
[   52.547137][ T1922] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[   52.558737][ T1922] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[   52.596547][ T1930] syz.0.663 (1930) used greatest stack depth: 20144 bytes left
[   52.604571][ T1938] bridge0: port 1(bridge_slave_0) entered blocking state
[   52.611457][ T1938] bridge0: port 1(bridge_slave_0) entered disabled state
[   52.629172][ T1938] device bridge_slave_0 entered promiscuous mode
[   52.634675][ T1922] syz.1.658: attempt to access beyond end of device
[   52.634675][ T1922] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[   52.660575][ T1938] bridge0: port 2(bridge_slave_1) entered blocking state
[   52.663366][ T1922] syz.1.658: attempt to access beyond end of device
[   52.663366][ T1922] loop1: rw=2049, sector=45104, nr_sectors = 136 limit=40427
[   52.669043][ T1938] bridge0: port 2(bridge_slave_1) entered disabled state
[   52.713235][ T1938] device bridge_slave_1 entered promiscuous mode
[   52.713694][ T1922] syz.1.658: attempt to access beyond end of device
[   52.713694][ T1922] loop1: rw=2049, sector=45240, nr_sectors = 8 limit=40427
[   52.762567][  T291] syz-executor: attempt to access beyond end of device
[   52.762567][  T291] loop1: rw=2049, sector=45248, nr_sectors = 8 limit=40427
[   52.848094][ T1887] device bridge_slave_1 left promiscuous mode
[   52.861402][ T1887] bridge0: port 2(bridge_slave_1) entered disabled state
[   52.879110][ T1887] device bridge_slave_0 left promiscuous mode
[   52.882483][ T1400] Bluetooth: hci1: command 0x1003 tx timeout
[   52.890893][   T45] Bluetooth: hci1: Opcode 0x1003 failed: -110
[   52.897101][ T1887] bridge0: port 1(bridge_slave_0) entered disabled state
[   52.944121][ T1887] device veth1_macvtap left promiscuous mode
[   52.950199][ T1887] device veth0_vlan left promiscuous mode
[   53.083009][ T1989] loop1: detected capacity change from 0 to 512
[   53.115316][ T1989] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   53.127862][ T1989] EXT4-fs (loop1): 1 truncate cleaned up
[   53.134916][ T1989] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[   53.164136][ T1989] IPv6: sit1: Disabled Multicast RS
[   53.195464][ T1938] bridge0: port 2(bridge_slave_1) entered blocking state
[   53.202355][ T1938] bridge0: port 2(bridge_slave_1) entered forwarding state
[   53.209509][ T1938] bridge0: port 1(bridge_slave_0) entered blocking state
[   53.216378][ T1938] bridge0: port 1(bridge_slave_0) entered forwarding state
[   53.224714][    T8] bridge0: port 1(bridge_slave_0) entered disabled state
[   53.232190][    T8] bridge0: port 2(bridge_slave_1) entered disabled state
[   53.267948][  T291] EXT4-fs (loop1): unmounting filesystem.
[   53.288873][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   53.299582][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   53.321779][  T808] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   53.330220][  T808] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   53.339237][  T808] bridge0: port 1(bridge_slave_0) entered blocking state
[   53.346150][  T808] bridge0: port 1(bridge_slave_0) entered forwarding state
[   53.354101][  T808] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   53.363275][  T808] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   53.371495][  T808] bridge0: port 2(bridge_slave_1) entered blocking state
[   53.378413][  T808] bridge0: port 2(bridge_slave_1) entered forwarding state
[   53.390945][  T808] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   53.399076][  T808] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   53.417067][  T808] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   53.441846][  T808] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   53.487335][ T1938] device veth0_vlan entered promiscuous mode
[   53.494700][  T808] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   53.507384][  T808] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   53.516831][  T808] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   53.525698][  T808] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   53.539147][  T808] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   53.547106][  T808] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   53.568370][ T1938] device veth1_macvtap entered promiscuous mode
[   53.582890][ T1887] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   53.596950][ T1887] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   53.605535][ T1887] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   53.633559][ T1887] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   53.643530][ T1887] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   53.652093][ T1887] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   53.661225][ T1887] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   55.052382][    C0] sched: RT throttling activated
[   55.071280][ T2023] loop5: detected capacity change from 0 to 1024
[   55.088227][ T2023] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
[   55.108976][ T2023] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869)
[   56.069812][ T2023] EXT4-fs error (device loop5): ext4_get_journal_inode:5710: inode #5: comm syz.5.687: unexpected bad inode w/o EXT4_IGET_BAD
[   56.120863][ T2023] EXT4-fs (loop5): no journal found
[   56.132064][ T2030] Zero length message leads to an empty skb
[   56.144427][ T2023] EXT4-fs (loop5): can't get journal size
[   56.182050][ T2023] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[   56.199065][ T2034] device pim6reg1 entered promiscuous mode
[   56.226926][ T2023] EXT4-fs (loop5): ext4_remount: Checksum for group 0 failed (42152!=20869)
[   56.319614][ T2042] netlink: 4 bytes leftover after parsing attributes in process `syz.6.695'.
[   56.333842][  T491] EXT4-fs (loop5): unmounting filesystem.
[   56.343959][ T2042] device bridge_slave_1 left promiscuous mode
[   56.353379][ T2042] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.361879][ T2042] device bridge_slave_0 left promiscuous mode
[   56.368341][ T2042] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.387901][ T2047] loop5: detected capacity change from 0 to 512
[   56.451052][ T2047] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[   56.463650][ T2047] ext4 filesystem being mounted at /103/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   56.490990][   T28] kauditd_printk_skb: 7 callbacks suppressed
[   56.491005][   T28] audit: type=1400 audit(1742772589.477:29696): avc:  denied  { create } for  pid=2046 comm="syz.5.696" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=blk_file permissive=1
[   56.518664][ T2047] EXT4-fs error (device loop5): ext4_do_update_inode:5226: inode #2: comm syz.5.696: corrupted inode contents
[   56.530546][ T2047] EXT4-fs error (device loop5): ext4_dirty_inode:6091: inode #2: comm syz.5.696: mark_inode_dirty error
[   56.542687][ T2047] EXT4-fs error (device loop5): ext4_do_update_inode:5226: inode #2: comm syz.5.696: corrupted inode contents
[   56.554708][ T2047] EXT4-fs error (device loop5): __ext4_ext_dirty:202: inode #2: comm syz.5.696: mark_inode_dirty error
[   56.568266][   T28] audit: type=1400 audit(1742772589.557:29697): avc:  denied  { rename } for  pid=2046 comm="syz.5.696" name="file0" dev="loop5" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   56.616082][   T28] audit: type=1400 audit(1742772589.587:29698): avc:  denied  { rename } for  pid=2046 comm="syz.5.696" name="bus" dev="loop5" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1
[   56.646798][  T491] EXT4-fs (loop5): unmounting filesystem.
[   56.704398][ T2061] loop4: detected capacity change from 0 to 512
[   56.718681][ T2061] EXT4-fs: Ignoring removed orlov option
[   56.733650][ T2061] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   56.751100][ T2061] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[   56.782708][ T2061] EXT4-fs (loop4): 1 orphan inode deleted
[   56.789251][ T2061] EXT4-fs (loop4): 1 truncate cleaned up
[   56.794881][ T2061] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[   56.821233][   T28] audit: type=1400 audit(1742772589.807:29699): avc:  denied  { remove_name } for  pid=2060 comm="syz.4.701" name="file0" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1
[   56.839515][ T2070] syz.1.704[2070] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   56.844719][  T295] EXT4-fs (loop4): unmounting filesystem.
[   56.849055][ T2070] syz.1.704[2070] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   56.856574][   T28] audit: type=1400 audit(1742772589.807:29700): avc:  denied  { reparent } for  pid=2060 comm="syz.4.701" name="file0" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1
[   56.894582][   T28] audit: type=1400 audit(1742772589.807:29701): avc:  denied  { rename } for  pid=2060 comm="syz.4.701" name="file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   56.917939][   T28] audit: type=1400 audit(1742772589.807:29702): avc:  denied  { reparent } for  pid=2060 comm="syz.4.701" name="file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   57.021296][ T2082] netlink: 4 bytes leftover after parsing attributes in process `syz.4.710'.
[   57.030044][ T2082] device bridge_slave_1 left promiscuous mode
[   57.036397][ T2082] bridge0: port 2(bridge_slave_1) entered disabled state
[   57.049966][ T2082] device bridge_slave_0 left promiscuous mode
[   57.056126][ T2082] bridge0: port 1(bridge_slave_0) entered disabled state
[   57.068762][ T2084] serio: Serial port ptm0
[   57.148164][ T2088] loop1: detected capacity change from 0 to 2048
[   57.148314][ T2076] loop5: detected capacity change from 0 to 40427
[   57.172997][ T2076] F2FS-fs (loop5): invalid crc value
[   57.184964][ T2076] F2FS-fs (loop5): Found nat_bits in checkpoint
[   57.207023][ T2088]  loop1: p1 < > p4
[   57.214226][ T2088] loop1: p4 size 8388608 extends beyond EOD, truncated
[   57.229341][   T28] audit: type=1400 audit(1742772590.217:29703): avc:  denied  { getattr } for  pid=2092 comm="syz.4.714" name="/" dev="incremental-fs" ino=839 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[   57.252305][ T2076] F2FS-fs (loop5): Start checkpoint disabled!
[   57.270245][ T2096] loop4: detected capacity change from 0 to 128
[   57.280646][ T2076] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6
[   57.298111][ T2096] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[   57.316702][  T102]  loop1: p1 < > p4
[   57.322487][  T102] loop1: p4 size 8388608 extends beyond EOD, truncated
[   57.329428][ T2096] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[   57.363197][   T28] audit: type=1400 audit(1742772590.357:29704): avc:  denied  { watch watch_reads } for  pid=2094 comm="syz.4.715" path="/159/file0/file0" dev="loop4" ino=1048615 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=file permissive=1
[   57.373138][ T1887] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[   57.396340][ T1689] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[   57.416512][ T2098] loop1: detected capacity change from 0 to 512
[   57.424456][ T1689] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   57.434479][ T1689] Buffer I/O error on dev loop1, logical block 0, async page read
[   57.459935][  T685] udevd[685]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory
[   57.467067][ T1689] udevd[1689]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory
[   57.482984][ T2098] EXT4-fs error (device loop1): ext4_get_branch:178: inode #13: block 2: comm syz.1.716: invalid block
[   57.489585][   T28] audit: type=1400 audit(1742772590.477:29705): avc:  denied  { getopt } for  pid=2075 comm="syz.5.707" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   57.494093][    T8] kworker/u4:0: attempt to access beyond end of device
[   57.494093][    T8] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[   57.514911][ T2098] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.716: invalid indirect mapped block 10 (level 1)
[   57.572145][ T2111] netlink: 96 bytes leftover after parsing attributes in process `syz.0.720'.
[   57.573764][ T2098] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.716: invalid indirect mapped block 8 (level 1)
[   57.611633][ T2098] EXT4-fs (loop1): 1 truncate cleaned up
[   57.618056][ T2098] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[   57.637161][ T2117] netlink: 4 bytes leftover after parsing attributes in process `syz.4.722'.
[   57.671030][  T291] EXT4-fs (loop1): unmounting filesystem.
[   57.701035][ T2121] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2121 comm=syz.6.726
[   57.850192][ T2133] syz.1.730 (2133) used greatest stack depth: 19976 bytes left
[   57.902497][   T24] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[   58.082864][   T24] usb 1-1: Using ep0 maxpacket: 16
[   58.089771][   T24] usb 1-1: unable to get BOS descriptor or descriptor too short
[   58.117792][   T24] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[   58.132280][   T24] usb 1-1: config 1 has no interface number 1
[   58.138655][   T24] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[   58.138977][ T2165] netlink: 4 bytes leftover after parsing attributes in process `syz.1.742'.
[   58.152529][   T24] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 255, changing to 7
[   58.191033][   T24] usb 1-1: string descriptor 0 read error: -22
[   58.192556][ T2165] device bridge_slave_1 left promiscuous mode
[   58.205083][   T24] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   58.215145][   T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   58.215723][ T2165] bridge0: port 2(bridge_slave_1) entered disabled state
[   58.230680][ T2165] device bridge_slave_0 left promiscuous mode
[   58.237533][ T2165] bridge0: port 1(bridge_slave_0) entered disabled state
[   58.251976][   T24] usb 1-1: 2:1: invalid format type 0x1002 is detected, processed as PCM
[   58.261873][   T24] usb 1-1: 2:1 : sample bitwidth 136 in over sample bytes 2
[   58.269611][   T24] usb 1-1: 2:1 : invalid UAC_FORMAT_TYPE desc
[   58.413979][ T2179] netlink: 22 bytes leftover after parsing attributes in process `syz.1.749'.
[   58.423254][ T2181] netlink: 4 bytes leftover after parsing attributes in process `syz.6.750'.
[   58.989039][ T2218] netlink: 96 bytes leftover after parsing attributes in process `syz.4.766'.
[   59.274112][ T2237] netlink: 96 bytes leftover after parsing attributes in process `syz.5.774'.
[   59.323112][ T2240] netlink: 96 bytes leftover after parsing attributes in process `syz.1.775'.
[   59.399979][ T2244] loop1: detected capacity change from 0 to 2048
[   59.417814][ T2244] EXT4-fs: Ignoring removed bh option
[   59.453493][ T2244] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[   59.467404][ T2257] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2257 comm=syz.4.783
[   59.720504][    T8] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[   59.735497][    T8] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[   59.748332][    T8] EXT4-fs (loop1): This should not happen!! Data will be lost
[   59.748332][    T8] 
[   59.765271][    T8] EXT4-fs (loop1): Total free blocks count 0
[   59.771541][    T8] EXT4-fs (loop1): Free/Dirty block details
[   59.777402][    T8] EXT4-fs (loop1): free_blocks=2415919104
[   59.781857][ T2284] loop4: detected capacity change from 0 to 1024
[   59.783422][    T8] EXT4-fs (loop1): dirty_blocks=8224
[   59.794761][    T8] EXT4-fs (loop1): Block reservation details
[   59.809448][    T8] EXT4-fs (loop1): i_reserved_data_blocks=514
[   59.820124][    T8] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 2048 with error 28
[   59.835224][ T2284] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:477: comm syz.4.793: Invalid block bitmap block 0 in block_group 0
[   59.848964][ T2284] EXT4-fs (loop4): Remounting filesystem read-only
[   59.855782][ T2284] EXT4-fs error (device loop4): ext4_acquire_dquot:6782: comm syz.4.793: Failed to acquire dquot type 0
[   59.867176][ T2284] EXT4-fs (loop4): Remounting filesystem read-only
[   59.874371][ T2284] EXT4-fs error (device loop4): ext4_free_blocks:6210: comm syz.4.793: Freeing blocks not in datazone - block = 0, count = 4096
[   59.887926][ T2284] EXT4-fs (loop4): Remounting filesystem read-only
[   59.894515][ T2284] EXT4-fs error (device loop4): ext4_read_inode_bitmap:140: comm syz.4.793: Invalid inode bitmap blk 0 in block_group 0
[   59.907186][ T2284] EXT4-fs (loop4): Remounting filesystem read-only
[   59.913724][    T8] EXT4-fs error (device loop4): ext4_release_dquot:6805: comm kworker/u4:0: Failed to release dquot type 0
[   59.925472][ T2284] EXT4-fs error (device loop4) in ext4_free_inode:362: Corrupt filesystem
[   59.934925][    T8] EXT4-fs (loop4): Remounting filesystem read-only
[   59.941486][ T2284] EXT4-fs (loop4): Remounting filesystem read-only
[   59.947969][ T2284] EXT4-fs (loop4): 1 orphan inode deleted
[   59.953766][ T2284] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[   59.989286][  T295] EXT4-fs (loop4): unmounting filesystem.
[   60.003507][ T2291] loop1: detected capacity change from 0 to 4096
[   60.025761][ T2291] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[   60.124909][  T291] EXT4-fs (loop1): unmounting filesystem.
[   60.272146][ T2329] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only
[   60.502491][  T374] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[   60.523269][ T2358] syz.4.823[2358] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   60.523344][ T2358] syz.4.823[2358] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   60.535722][ T2358] syz.4.823[2358] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   60.551782][ T2358] syz.4.823[2358] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   60.624508][ T1685] usb 1-1: USB disconnect, device number 9
[   60.696817][  T374] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   60.714409][ T2386] loop0: detected capacity change from 0 to 1024
[   60.725343][  T374] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   60.734727][ T2386] EXT4-fs: Ignoring removed nobh option
[   60.744970][  T374] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   60.753237][  T374] usb 7-1: Product: syz
[   60.757281][ T2386] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   60.774431][  T374] usb 7-1: Manufacturer: syz
[   60.779071][  T374] usb 7-1: SerialNumber: syz
[   60.780779][ T2388] devpts: called with bogus options
[   60.812815][ T2386] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[   60.855988][  T293] EXT4-fs (loop0): unmounting filesystem.
[   60.891435][ T2398] netlink: 'syz.0.839': attribute type 4 has an invalid length.
[   61.192438][ T1685] usb 5-1: new full-speed USB device number 6 using dummy_hcd
[   61.373703][ T1685] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[   61.384762][ T1685] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   61.394378][ T1685] usb 5-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00
[   61.410845][ T1685] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   61.434131][ T1685] usb 5-1: config 0 descriptor??
[   61.626723][   T28] kauditd_printk_skb: 17 callbacks suppressed
[   61.626739][   T28] audit: type=1400 audit(1742772594.617:29720): avc:  denied  { write } for  pid=2435 comm="syz.1.856" name="/" dev="9p" ino=1694025360095192279 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   61.700425][   T28] audit: type=1400 audit(1742772594.647:29721): avc:  denied  { add_name } for  pid=2435 comm="syz.1.856" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   61.739979][   T28] audit: type=1400 audit(1742772594.647:29722): avc:  denied  { associate } for  pid=2435 comm="syz.1.856" name="bus" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[   61.774039][   T28] audit: type=1400 audit(1742772594.767:29723): avc:  denied  { write } for  pid=2437 comm="syz.5.858" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   61.801762][ T2442] netem: change failed
[   61.811481][  T374] cdc_ncm 7-1:1.0: MAC-Address: 42:42:42:42:42:42
[   61.817956][   T28] audit: type=1400 audit(1742772594.767:29724): avc:  denied  { accept } for  pid=2437 comm="syz.5.858" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   61.819850][  T374] cdc_ncm 7-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048
[   61.856342][  T374] cdc_ncm 7-1:1.0: setting rx_max = 2048
[   61.860115][   T28] audit: type=1400 audit(1742772594.767:29725): avc:  denied  { read } for  pid=2437 comm="syz.5.858" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   61.885227][ T1685] zydacron 0003:13EC:0006.0004: item fetching failed at offset 5/7
[   61.904108][ T1685] zydacron 0003:13EC:0006.0004: parse failed
[   61.924123][ T1685] zydacron: probe of 0003:13EC:0006.0004 failed with error -22
[   61.984576][ T2456] devpts: called with bogus options
[   62.004912][ T2460] __nla_validate_parse: 5 callbacks suppressed
[   62.004930][ T2460] netlink: 24 bytes leftover after parsing attributes in process `syz.5.868'.
[   62.093834][  T297] usb 5-1: USB disconnect, device number 6
[   62.161492][   T28] audit: type=1400 audit(1742772595.147:29726): avc:  denied  { read write } for  pid=2479 comm="syz.5.876" name="uhid" dev="devtmpfs" ino=263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[   62.164629][   T19] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0
[   62.192583][   T19] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0
[   62.200190][   T19] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0
[   62.208379][   T19] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0
[   62.211461][   T28] audit: type=1400 audit(1742772595.147:29727): avc:  denied  { open } for  pid=2479 comm="syz.5.876" path="/dev/uhid" dev="devtmpfs" ino=263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[   62.216666][  T374] cdc_ncm 7-1:1.0: setting tx_max = 88
[   62.245062][   T19] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0
[   62.252691][   T19] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0
[   62.260189][   T19] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0
[   62.262450][ T1685] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[   62.270787][   T19] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0
[   62.283335][   T19] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0
[   62.292255][   T19] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0
[   62.299976][  T374] cdc_ncm 7-1:1.0 eth1: register 'cdc_ncm' at usb-dummy_hcd.6-1, CDC NCM (NO ZLP), 42:42:42:42:42:42
[   62.310791][   T19] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0
[   62.320404][   T19] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0
[   62.328134][  T374] usb 7-1: USB disconnect, device number 2
[   62.334110][  T374] cdc_ncm 7-1:1.0 eth1: unregister 'cdc_ncm' usb-dummy_hcd.6-1, CDC NCM (NO ZLP)
[   62.343120][   T19] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0
[   62.350630][   T19] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0
[   62.359843][   T19] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0
[   62.367597][   T19] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0
[   62.375420][   T19] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0
[   62.383165][   T19] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0
[   62.390912][   T19] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0
[   62.398593][   T19] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0
[   62.407547][   T19] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0
[   62.415552][   T19] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0
[   62.432497][   T19] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0
[   62.440128][   T19] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0
[   62.447671][   T19] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0
[   62.455278][   T19] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0
[   62.462946][   T19] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0
[   62.470525][   T19] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0
[   62.472440][ T1685] usb 1-1: Using ep0 maxpacket: 32
[   62.478145][   T19] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0
[   62.484782][ T1685] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   62.490619][   T19] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0
[   62.501790][ T1685] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   62.509118][   T19] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0
[   62.518684][ T1685] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[   62.526114][   T19] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0
[   62.535111][ T1685] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   62.542465][   T19] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0
[   62.551541][ T1685] usb 1-1: config 0 descriptor??
[   62.557813][   T19] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0
[   62.570489][   T19] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0
[   62.571091][ T1685] hub 1-1:0.0: USB hub found
[   62.578320][   T19] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0
[   62.590174][   T19] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0
[   62.597875][   T19] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0
[   62.605651][   T19] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0
[   62.613311][   T19] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0
[   62.620935][   T19] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0
[   62.628737][   T19] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0
[   62.636452][   T19] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0
[   62.644479][  T374] ==================================================================
[   62.652385][  T374] BUG: KASAN: use-after-free in __list_del_entry_valid+0xa6/0x130
[   62.660605][  T374] Read of size 8 at addr ffff88812fdc2cf0 by task kworker/0:4/374
[   62.668240][  T374] 
[   62.670422][  T374] CPU: 0 PID: 374 Comm: kworker/0:4 Not tainted 6.1.128-syzkaller-00029-g5145d157731f #0
[   62.680137][  T374] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[   62.690033][  T374] Workqueue: rcu_gp process_srcu
[   62.694817][  T374] Call Trace:
[   62.697927][  T374]  <TASK>
[   62.700703][  T374]  dump_stack_lvl+0x151/0x1b7
[   62.705219][  T374]  ? nf_tcp_handle_invalid+0x3f1/0x3f1
[   62.710514][  T374]  ? _printk+0xd1/0x111
[   62.714507][  T374]  ? __virt_addr_valid+0x242/0x2f0
[   62.719450][  T374]  print_report+0x158/0x4e0
[   62.723791][  T374]  ? __virt_addr_valid+0x242/0x2f0
[   62.728738][  T374]  ? kasan_complete_mode_report_info+0x90/0x1b0
[   62.734811][  T374]  ? __list_del_entry_valid+0xa6/0x130
[   62.740106][  T374]  kasan_report+0x13c/0x170
[   62.744452][  T374]  ? __list_del_entry_valid+0xa6/0x130
[   62.749840][  T374]  __asan_report_load8_noabort+0x14/0x20
[   62.755304][  T374]  __list_del_entry_valid+0xa6/0x130
[   62.760416][  T374]  process_one_work+0x4d7/0xcb0
[   62.765148][  T374]  worker_thread+0xa60/0x1260
[   62.769623][  T374]  kthread+0x26d/0x300
[   62.773522][  T374]  ? worker_clr_flags+0x1a0/0x1a0
[   62.778469][  T374]  ? kthread_blkcg+0xd0/0xd0
[   62.782902][  T374]  ret_from_fork+0x1f/0x30
[   62.787152][  T374]  </TASK>
[   62.790008][  T374] 
[   62.792177][  T374] Allocated by task 374:
[   62.796260][  T374]  kasan_set_track+0x4b/0x70
[   62.800685][  T374]  kasan_save_alloc_info+0x1f/0x30
[   62.805632][  T374]  __kasan_kmalloc+0x9c/0xb0
[   62.810056][  T374]  __kmalloc_node+0xb4/0x1e0
[   62.814483][  T374]  kvmalloc_node+0x221/0x640
[   62.818918][  T374]  alloc_netdev_mqs+0x8c/0xf90
[   62.823629][  T374]  alloc_etherdev_mqs+0x36/0x40
[   62.828438][  T374]  usbnet_probe+0x213/0x28a0
[   62.832861][  T374]  usb_probe_interface+0x5b6/0xa90
[   62.838015][  T374]  really_probe+0x2b8/0x920
[   62.842437][  T374]  __driver_probe_device+0x1a0/0x310
[   62.847556][  T374]  driver_probe_device+0x54/0x3d0
[   62.852418][  T374]  __device_attach_driver+0x2e3/0x490
[   62.857624][  T374]  bus_for_each_drv+0x183/0x200
[   62.862337][  T374]  __device_attach+0x312/0x510
[   62.866913][  T374]  device_initial_probe+0x1a/0x20
[   62.871773][  T374]  bus_probe_device+0xbe/0x1e0
[   62.876465][  T374]  device_add+0xb60/0xf10
[   62.880624][  T374]  usb_set_configuration+0x190f/0x1e80
[   62.885922][  T374]  usb_generic_driver_probe+0x8b/0x150
[   62.891212][  T374]  usb_probe_device+0x144/0x260
[   62.895907][  T374]  really_probe+0x2b8/0x920
[   62.900243][  T374]  __driver_probe_device+0x1a0/0x310
[   62.905364][  T374]  driver_probe_device+0x54/0x3d0
[   62.910219][  T374]  __device_attach_driver+0x2e3/0x490
[   62.915426][  T374]  bus_for_each_drv+0x183/0x200
[   62.920114][  T374]  __device_attach+0x312/0x510
[   62.924713][  T374]  device_initial_probe+0x1a/0x20
[   62.929572][  T374]  bus_probe_device+0xbe/0x1e0
[   62.934196][  T374]  device_add+0xb60/0xf10
[   62.938422][  T374]  usb_new_device+0xf2f/0x1820
[   62.943023][  T374]  hub_event+0x2db1/0x4830
[   62.947283][  T374]  process_one_work+0x73d/0xcb0
[   62.951966][  T374]  worker_thread+0xa60/0x1260
[   62.956479][  T374]  kthread+0x26d/0x300
[   62.960381][  T374]  ret_from_fork+0x1f/0x30
[   62.964638][  T374] 
[   62.966813][  T374] Freed by task 374:
[   62.970537][  T374]  kasan_set_track+0x4b/0x70
[   62.974981][  T374]  kasan_save_free_info+0x2b/0x40
[   62.979823][  T374]  ____kasan_slab_free+0x131/0x180
[   62.984773][  T374]  __kasan_slab_free+0x11/0x20
[   62.989370][  T374]  __kmem_cache_free+0x21d/0x410
[   62.994146][  T374]  kfree+0x7a/0xf0
[   62.997702][  T374]  kvfree+0x35/0x40
[   63.001346][  T374]  netdev_freemem+0x3f/0x60
[   63.005692][  T374]  netdev_release+0x7f/0xb0
[   63.010027][  T374]  device_release+0x95/0x1c0
[   63.014454][  T374]  kobject_put+0x178/0x260
[   63.018702][  T374]  put_device+0x1f/0x30
[   63.022701][  T374]  free_netdev+0x393/0x480
[   63.026953][  T374]  usbnet_disconnect+0x25f/0x3b0
[   63.031723][  T374]  usb_unbind_interface+0x1fa/0x8c0
[   63.036755][  T374]  device_release_driver_internal+0x53e/0x870
[   63.042660][  T374]  device_release_driver+0x19/0x20
[   63.047607][  T374]  bus_remove_device+0x2fa/0x360
[   63.052383][  T374]  device_del+0x663/0xe90
[   63.056545][  T374]  usb_disable_device+0x380/0x720
[   63.061403][  T374]  usb_disconnect+0x32a/0x890
[   63.065942][  T374]  hub_event+0x1ed8/0x4830
[   63.070172][  T374]  process_one_work+0x73d/0xcb0
[   63.074864][  T374]  worker_thread+0xd71/0x1260
[   63.079370][  T374]  kthread+0x26d/0x300
[   63.083285][  T374]  ret_from_fork+0x1f/0x30
[   63.087528][  T374] 
[   63.089698][  T374] Last potentially related work creation:
[   63.095254][  T374]  kasan_save_stack+0x3b/0x60
[   63.099775][  T374]  __kasan_record_aux_stack+0xb4/0xc0
[   63.104999][  T374]  kasan_record_aux_stack_noalloc+0xb/0x10
[   63.110614][  T374]  insert_work+0x56/0x310
[   63.114781][  T374]  __queue_work+0x9b6/0xd70
[   63.119119][  T374]  queue_work_on+0x105/0x170
[   63.123545][  T374]  usbnet_link_change+0x182/0x1a0
[   63.128477][  T374]  usbnet_probe+0x1e1e/0x28a0
[   63.132919][  T374]  usb_probe_interface+0x5b6/0xa90
[   63.137868][  T374]  really_probe+0x2b8/0x920
[   63.142204][  T374]  __driver_probe_device+0x1a0/0x310
[   63.147329][  T374]  driver_probe_device+0x54/0x3d0
[   63.152190][  T374]  __device_attach_driver+0x2e3/0x490
[   63.157437][  T374]  bus_for_each_drv+0x183/0x200
[   63.162080][  T374]  __device_attach+0x312/0x510
[   63.166686][  T374]  device_initial_probe+0x1a/0x20
[   63.171543][  T374]  bus_probe_device+0xbe/0x1e0
[   63.176156][  T374]  device_add+0xb60/0xf10
[   63.180315][  T374]  usb_set_configuration+0x190f/0x1e80
[   63.185601][  T374]  usb_generic_driver_probe+0x8b/0x150
[   63.190893][  T374]  usb_probe_device+0x144/0x260
[   63.195583][  T374]  really_probe+0x2b8/0x920
[   63.199924][  T374]  __driver_probe_device+0x1a0/0x310
[   63.205041][  T374]  driver_probe_device+0x54/0x3d0
[   63.209903][  T374]  __device_attach_driver+0x2e3/0x490
[   63.215111][  T374]  bus_for_each_drv+0x183/0x200
[   63.219798][  T374]  __device_attach+0x312/0x510
[   63.224394][  T374]  device_initial_probe+0x1a/0x20
[   63.229255][  T374]  bus_probe_device+0xbe/0x1e0
[   63.233857][  T374]  device_add+0xb60/0xf10
[   63.238020][  T374]  usb_new_device+0xf2f/0x1820
[   63.242627][  T374]  hub_event+0x2db1/0x4830
[   63.246874][  T374]  process_one_work+0x73d/0xcb0
[   63.251561][  T374]  worker_thread+0xa60/0x1260
[   63.256074][  T374]  kthread+0x26d/0x300
[   63.260087][  T374]  ret_from_fork+0x1f/0x30
[   63.264326][  T374] 
[   63.266489][  T374] The buggy address belongs to the object at ffff88812fdc2000
[   63.266489][  T374]  which belongs to the cache kmalloc-4k of size 4096
[   63.280381][  T374] The buggy address is located 3312 bytes inside of
[   63.280381][  T374]  4096-byte region [ffff88812fdc2000, ffff88812fdc3000)
[   63.293760][  T374] 
[   63.295934][  T374] The buggy address belongs to the physical page:
[   63.302170][  T374] page:ffffea0004bf7000 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x12fdc0
[   63.312403][  T374] head:ffffea0004bf7000 order:3 compound_mapcount:0 compound_pincount:0
[   63.320559][  T374] flags: 0x4000000000010200(slab|head|zone=1)
[   63.326473][  T374] raw: 4000000000010200 0000000000000000 dead000000000001 ffff888100043380
[   63.334891][  T374] raw: 0000000000000000 0000000000040004 00000001ffffffff 0000000000000000
[   63.343304][  T374] page dumped because: kasan: bad access detected
[   63.349649][  T374] page_owner tracks the page as allocated
[   63.355191][  T374] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 290, tgid 290 (syz-executor), ts 21805317864, free_ts 0
[   63.375593][  T374]  post_alloc_hook+0x213/0x220
[   63.380187][  T374]  prep_new_page+0x1b/0x110
[   63.384524][  T374]  get_page_from_freelist+0x3a98/0x3b10
[   63.389911][  T374]  __alloc_pages+0x234/0x610
[   63.394342][  T374]  alloc_slab_page+0x6c/0xf0
[   63.398777][  T374]  new_slab+0x90/0x3e0
[   63.402661][  T374]  ___slab_alloc+0x6f9/0xb80
[   63.407086][  T374]  __slab_alloc+0x5d/0xa0
[   63.411251][  T374]  __kmem_cache_alloc_node+0x207/0x2a0
[   63.416547][  T374]  __kmalloc_node_track_caller+0xa2/0x1e0
[   63.422101][  T374]  kmemdup+0x29/0x60
[   63.425947][  T374]  __devinet_sysctl_register+0xac/0x2a0
[   63.431314][  T374]  devinet_sysctl_register+0x16a/0x1e0
[   63.436608][  T374]  inetdev_init+0x2bf/0x4f0
[   63.440947][  T374]  inetdev_event+0x205/0x1110
[   63.445457][  T374]  raw_notifier_call_chain+0x8c/0xf0
[   63.450580][  T374] page_owner free stack trace missing
[   63.455793][  T374] 
[   63.457956][  T374] Memory state around the buggy address:
[   63.463432][  T374]  ffff88812fdc2b80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   63.471323][  T374]  ffff88812fdc2c00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   63.479222][  T374] >ffff88812fdc2c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   63.487117][  T374]                                                              ^
[   63.494671][  T374]  ffff88812fdc2d00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   63.502566][  T374]  ffff88812fdc2d80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   63.510465][  T374] ==================================================================
[   63.518361][  T374] Disabling lock debugging due to kernel taint
[   63.529694][ T1685] hub 1-1:0.0: 1 port detected
[   63.529780][   T19] hid-generic 0000:007F:FFFFFFFE.0005: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[   64.149359][  T297] hub 1-1:0.0: activate --> -90
[   64.550793][ T1685] usb 1-1: USB disconnect, device number 10