last executing test programs:

14.030326535s ago: executing program 4 (id=690):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000001480)={'syzkaller0\x00', 0x7101})
syz_clone(0x4d100000, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b00)={0x0, r2}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r4, 0xf, 0x0, 0x0, 0x0, 0x0, 0xc00d, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

13.820531249s ago: executing program 4 (id=682):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x17, 0x9, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0x50}, @generic={0x7e}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)

12.940481082s ago: executing program 4 (id=685):
syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2100, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000080)={0x1, 0x0, [{0x80000019, 0x7, 0x71e, 0x2, 0x2bd18c10}]})
r3 = dup(r2)
ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000ebfffff3000040"])
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r5 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0xde02})
preadv(r4, &(0x7f00000002c0)=[{&(0x7f0000000300)=""/133, 0x20000385}], 0x1, 0x0, 0x0)

12.023499469s ago: executing program 4 (id=694):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syslog(0x4, &(0x7f0000000180)=""/210, 0xd2)

11.126866324s ago: executing program 4 (id=702):
r0 = syz_usb_connect$uac1(0x2, 0x78, &(0x7f0000000880)=ANY=[@ANYBLOB="12010003000000406b1d01014000010203010902660003880200040904000000010100000a2401030000020102072404020c59ff03"], &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0})
r1 = syz_usb_connect$hid(0x1, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201100100000008ac056502000000000001090224000100000002000921000002dde3ea4594012205000905c103000002fe9b0000000000000000"], 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_open_dev$hidraw(&(0x7f0000002300), 0x1, 0x14a042)
r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0)
ioctl$EVIOCGMASK(r2, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"})
r3 = syz_open_dev$evdev(&(0x7f00000002c0), 0x1, 0x0)
ioctl$EVIOCGMASK(r3, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"})
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYRES8=r0, @ANYRESHEX=r0], 0x0)
ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"})
syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000"], 0x0)
ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f00000000c0)=""/208)

9.09845655s ago: executing program 3 (id=713):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00'})
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$bt_BT_SNDMTU(r2, 0x112, 0xc, &(0x7f0000000940)=0xd30, 0x2)
r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r1)
sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x48, r3, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5}, {0x5}, {0x5, 0x3, 0x2}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x48}}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$TIPC_NL_LINK_SET(r5, &(0x7f0000000240)={0x0, 0xa, &(0x7f0000000200)={&(0x7f0000000040)={0x30, r6, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x1c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x30}}, 0x0)
sendmsg$TIPC_NL_NET_SET(r4, &(0x7f0000000900)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f0000000480)={0x400, r6, 0x1, 0x70bd2a, 0x0, {}, [@TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1f}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}]}, @TIPC_NLA_MEDIA={0x80, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x622}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x500}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xebb5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1ff}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_REF={0x8}]}, @TIPC_NLA_BEARER={0xf8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'eth', 0x3a, 'dvmrp0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x8, @mcast2, 0x1000}}, {0x14, 0x2, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'ib', 0x3a, 'wlan1\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x10}}}, {0x14, 0x2, @in={0x2, 0x4e21, @broadcast}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @rand_addr=0x64010102}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x5, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x1}}}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x862}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xd8}]}, @TIPC_NLA_NET={0x60, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x20abd60e}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x80000000}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6}]}, @TIPC_NLA_SOCK={0x78, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x101}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xc0}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x74}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1f}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x60}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xf0f}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xffffffc0}]}, @TIPC_NLA_MEDIA={0x98, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff7a7c}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffff8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x400}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}]}, @TIPC_NLA_BEARER={0xb0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'ipvlan1\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @empty}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x100, @mcast2, 0x7}}}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @local}}, {0x14, 0x2, @in={0x2, 0x4e20, @remote}}}}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x20}]}]}, 0x400}, 0x1, 0x0, 0x0, 0x8000}, 0x40010)

9.032830358s ago: executing program 3 (id=714):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f000000e0c0), 0x10010)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
writev(r2, &(0x7f0000000140)=[{&(0x7f00000000c0)="39000000130003470fbb65e1c3e4ffff06006000010000005600000025000000190004000400000007fd17e5ff8e0606040020000000000000", 0x39}], 0x1)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r3 = io_uring_setup(0x2605, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x7ff})
r4 = epoll_create1(0x0)
dup3(r4, r3, 0x0)
sendfile(r0, r1, &(0x7f0000000100), 0x100000000010001)

9.025866688s ago: executing program 4 (id=715):
ptrace(0x10, 0x1)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = gettid()
timer_create(0x0, &(0x7f0000000440)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x1ffffdf2, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x3, 0x4, &(0x7f0000000e80)=ANY=[@ANYBLOB="8500000061000000350000000000000085000000230000009500000000000000f4670880271e3542dfa8ba6287066c5197fabc5f7010e81a15202164afe0b737126ea6f7dc39cd340101000000000000e22ff5dde54704d25c79949c23e20100000000000000c09cc28de194f40800000000b0d3712c7e93366796c7224a0c2c0213af2ecdf3c075e3d800000104f4b1fc30dc914bc16543d4baa2bb755af3d576090c4867a7b6393e366c6386d5ec7209d031f40f3012e95752003b2f7846c744ae6af3c037102124d8eb0000000000000000000000006aac3abe6c4d7f47ef6d02bad9dddacecf7eaa4a9779f8555ed6aea768c1f28221c110ed050000000ee282ab76ef93d96bc46a7c04b8c5327592686ba3f12ac6cba00b1b2da951667d0276a0327b56c0ebfb19b3426887b6f1b6070e0ce1f844ce32a9988ca042dca52fbb8c1452b651ebf942f7297f7b66254c567b7983f60f2744419a2f238f173d0000003cf4fbd775d9c07d8d591a4dac60ff00a629b3b200000000000000000000000009001d004e41ff9b4d00e07ff771cea08bea1fb4c4c43f74936f333e3ae44f7ddd2fb35d4c46392ae855531b1eaf40aee8c94fd812e40f14c519a264ff3c572eecd5f6ca98b55e78f8d94f57ed7e6a3ab5dd9a4adedbdf0e58f58eb2e83500000000000000934c92002eace9a8d6f3dd008acf8a5c0fb433678060ac0e201e401fb1711d41f45d90a1e19795c995ff7d0020ecccf41d81c8c510cf773171407191872d0e3e62dd578d590e62ff74d667477ac69a806d4552084a87f74fdfc117d4975576c102976c1ef70ceac9ff714bab1f59f8ebd67f2aca41706c147e3e0d3e557de0349c5ca80f10361bedc4832ae62a2b745ef6587710a82c2e27bacc81877b996a708c3a9235bdbec2cde0cfca78205439b4fd312c7106000000000000000000000000df83e1a6c37e26d8f98d7e9419275bc3bba633b47d00"/720], &(0x7f0000000140)='GPL\x00', 0x0, 0xe0, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffc1a, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x15)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r2, 0xfffff000, 0xe40, 0x0, &(0x7f0000000880)="61df712bc884fed5722780b686dd", 0x0, 0x8000, 0x0, 0xfffffffffffffeca, 0x0, &(0x7f0000000000), &(0x7f0000000800)="ffe200004e379b19393a41afde6b0b1235c1278ebf59a5d4d697bc199e060b675b46d4ff37c7f91ceaa6790cd8570f080b0d2375918cd7dfcf26aa90dc6a5617be488475b892958512c8e814c24d7efc26f9f2512dec8c759773c42a2fca2735984613809a78eb", 0x0, 0x2}, 0x28)
r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[], 0x0)
syz_usb_control_io$hid(r3, 0x0, 0x0)
write$char_usb(0xffffffffffffffff, &(0x7f0000000040), 0x0)

8.969603915s ago: executing program 3 (id=716):
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00'})
r1 = socket(0x10, 0x3, 0x0)
r2 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="0d01000009000008250592d20700006a3b010902241700fa0074980904e4ff11070103000905010200ffe0000009058202"], 0x0)
syz_usb_control_io(r2, 0x0, &(0x7f0000000200)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_disconnect(r2)
syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[], 0x0)
syz_usb_disconnect(r2)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$netlink(r0, &(0x7f0000000100), 0x0)

5.544403054s ago: executing program 3 (id=729):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r3)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200))
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast})
close(r2)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000))
ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'})
close(r1)

5.388738982s ago: executing program 3 (id=731):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r0 = syz_open_dev$MSR(0x0, 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
shutdown(r1, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', <r3=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newaddr={0x48, 0x14, 0x509, 0x0, 0x0, {0x2, 0x1f, 0x0, 0x0, r3}, [@IFA_ADDRESS={0x8, 0x1, @multicast2}, @IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_BROADCAST={0x8, 0x4, @local}, @IFA_BROADCAST={0x8, 0x4, @local}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x1}, @IFA_RT_PRIORITY={0x8, 0x9, 0x103}]}, 0x48}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'})
sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0x70}}, 0x0)

5.333380539s ago: executing program 3 (id=732):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
openat$ptp0(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ptrace(0x10, 0x1)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
connect$tipc(0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
recvmsg(r1, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000003cc0)=ANY=[], 0x0)

4.885608291s ago: executing program 0 (id=735):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180800000000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
sched_setscheduler(0x0, 0x1, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00')
fchdir(r1)
mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0)
r2 = inotify_init1(0x0)
fcntl$setown(r2, 0x8, 0xffffffffffffffff)
fcntl$getownex(r2, 0x10, &(0x7f0000000140)={0x0, <r3=>0x0})
r4 = syz_open_procfs(r3, &(0x7f0000000600)='fd/4\x00')
ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r4, 0x8004587d, &(0x7f0000000180)={@desc={0x1, 0x2000000, @desc3}})

4.884906051s ago: executing program 0 (id=736):
syz_usb_connect$cdc_ncm(0x5, 0x7d, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001020000082505a1a440000102030109026b0002010690030904000001020d0000052406000105240001006d710f01030000002808fdff0f0624000000000424130907240a01000101042413040905810300040510070904010000"], 0x0)
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0xfffffc}, 0x10)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100))
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0)
r3 = epoll_create1(0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="280000006a00010500000000fddbdf25000000000000000008000500", @ANYRES32=0x0, @ANYBLOB='\b\x00'], 0x28}}, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x8, 0x0, &(0x7f0000000040)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000640)={0x20, 0x0, &(0x7f0000000280)=[@request_death, @clear_death], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f00000001c0)=[@enter_looper], 0x4, 0x0, &(0x7f0000000080)="ecfa2a69"})

3.158317402s ago: executing program 0 (id=739):
syz_mount_image$exfat(&(0x7f0000001500), &(0x7f0000000040)='./file0\x00', 0x8000, &(0x7f00000001c0)=ANY=[@ANYBLOB="00e0c6e4d9182ec69e599fd4d32ba9c5146fbc43a33914b2b1a5ce8843b193dc82dbc512b6fabfe6fbdd2a8bdeeda78e17b18f1b6e80c81cd67046e6a85e7160112d613e4c6dcab2404d58291ec130b9fd2785ce8dd5538f70998f2d50005813ba6c65cd3c25a8e730e1cd7b11cf7f6cc0fba6b670c64374abd09518ffba0c5eb2e602b1a64ac897fce7fae33878c0e57398a4cc6ce9bee1d70bef22f10c7776c2f5077cb1de63832b1bab15c6caf549a1cd58106494d92d1159033b2e27eceae339414a62aca9cf6a00c07e2a181dd9668a64b5eefc8e5ebc6564442a8d"], 0x1, 0x14fe, &(0x7f0000001580)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0)
creat(&(0x7f0000000040)='./bus\x00', 0x0)
creat(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10)
mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1)
creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='cpuacct.stat\x00', 0x275a, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0)

3.147480793s ago: executing program 0 (id=740):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r0, 0x800448f0, 0x0)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x4, &(0x7f0000000000), 0x1, 0x625, &(0x7f0000001400)="$eJzs3c9rXNUeAPDvncnvvPeShsd7r2/xXkC0BW3SpK0UEWwRXJVSfywEN45NWmqnP2gimlppAnUjiBsXgisX1oX/gxYEV/4DLty4kkoR6UYpOnInd8ZpMjeZxMxMm/l8YDr33HNzz7nJfHvOnDnnTgA9azL9pxCxNyIuJxETDXl9kWVOrh539+drp9NHEpXKiz8lce16stx4riR7Ho2INOO3sUi+joiJ4vpyF5auni+Vy/NXsvT04oXL0wtLVw+cu1A6O392/uLsk7NHjxw+cnTmYMNPnXluq9e3p2H7xI3X3xx77+Qrn358L5n57LuTSRyrVzq9rq2eezOTMRmVTOP+9Pd6dKcL65Ji/XXyp2TtjrWebWOF2JLa368/Iv4dY1Fs+GuOxbvPd7VyQFtVkqi3UUCvScQ/9KhaP6D23r6198EDbe6VAJ1w53jEY/X474+I1fg/NpuNDcZQdWxg5G5y3zhPEhEHd6D8tIxvvjp5I31Em8bhgOaWVwazIfC17X9Sjc3xGKqmRu4W7ov/QjaMO56NH76wcTFjeRmTa9JZ+YPbvR6gdcsrEfGfZv3/zeP/1ew53f/aNsvPiX8AAAAAAABgG24dj4gnmn3+V6jP/xloMv9nNCKO7UD5m3/+V7i9A8UATdw5HvF00/m/hdoh48Us9ffqfID+5My58vzBiPhHROyP/sE0PdN40s8bfjoiDrw/8VFe+Y3z/9JHWn5tLmBWj9t9a2YDzZUWSztw6dDz7qxE/Lcvf/5P2v4nTdr/NL4vt1jGxKM3T+XlbR7/QLtUPonY17T9T+rHJBvfn2O62h+YrvUK1vvf2x98kVe++IfuSdv/kY3jfzBpvF/PwtbOPxARh5b6Knn52+3/DyQvFaNhJeJbpcXFKzMRA8mJ9ftnt1ZneJgMtX7oOxFRjYdavKTxv/+Rjcf/6v3/hjgczu7x1Yp//T76fV6e9h+6J43/uY3b//H72/+tb8zeHP8yr/xTLbX/h6tt+v5sj/E/2FirAdrtegIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAw6gQEX+LpDBV3y4UpqYiRiPinzFSKF9aWHz8zKU3Ls6ledXv/y/Uvul3bDWd1L7/f7whPbsmfSgi9kTEh8Xhanrq9KXyXLcvHgAAAAAAAAAAAAAAAAAAAB4Qo6tP69b/p34odrVqQCf0Zc/iHXpPX7crAHSN+IfeJf6hd+XH/y/3KlUdrQ7QQa22/5Xrba4I0HHb7P/7uAB2Ae//oVf1t3bYULvrAXSD9h8AAAAAAHaVPf+/9W0SEctPDVcfqYEsr/7B4HC3age0UyEvY7Cz9QA6zxxe6F2m/kDvanHyL7CLJfWtX5su9s+f/Z+0p0IAAAAAAAAAAAAAwDr79raw/h/YlXLX/wO73gbr/5st7HG7ANhFrP+H3uU2X0Cts5/3Tf/W/wMAAAAAAAAAAADAA2Do6vlSuTx/ZWGp5Y3rWzn4r2/8GHlZz9Q2VjpQjUpxZ86zXOrcr+4h3+iPiDVZlbHVl+35Uvnl6Gx9ahHTibIGOlhWzkaX/j8CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADW+SMAAP//fSQouA==")
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010010850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000540)='sock_rcvqueue_full\x00', r2}, 0x10)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$TCFLSH(r3, 0x400455c8, 0x0)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000080), 0xfd32)
bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6)

1.901340378s ago: executing program 2 (id=747):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
getgroups(0xffffff95, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="580000001000010400000000000000000000ffff", @ANYRES32=0x0, @ANYBLOB="000000000000000024001280090001007866726d0000000014000280080002000000e3b60800010001000000140003007866726d30"], 0x58}}, 0x0)
getpeername$packet(0xffffffffffffffff, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)

1.881301661s ago: executing program 2 (id=748):
syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)={0x14, 0x2, 0x6, 0x5, 0x0, 0x0, {0x1}}, 0x14}}, 0x4000)
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000200), 0x26002)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0xfffffffffffffffe]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

1.823124738s ago: executing program 2 (id=749):
socket$can_bcm(0x1d, 0x2, 0x2)
pipe(&(0x7f0000000340))
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x28011, r0, 0x0)
ftruncate(r0, 0xc17a)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x2, 0x4000, 0x2000, &(0x7f000000e000/0x2000)=nil})
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x2, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0}], 0x1, 0x9, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

1.027597071s ago: executing program 1 (id=751):
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000680)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}, {@metacopy_on}], [], 0x2c})
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000000580)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10)
renameat2(r0, &(0x7f0000000380)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r1, &(0x7f0000000040)='./file1\x00', 0x2)

1.008075793s ago: executing program 0 (id=752):
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x810100, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x3}, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00')
fchdir(r0)
mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0)
r1 = inotify_init1(0x0)
fcntl$setown(r1, 0x8, 0xffffffffffffffff)
fcntl$getownex(r1, 0x10, &(0x7f0000000140)={0x0, <r2=>0x0})
r3 = syz_open_procfs(r2, &(0x7f0000000600)='fd/4\x00')
fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000180)=@v2={0x2000000, [{0x7d4, 0x9ca9}, {0x4, 0x10001}]}, 0x14, 0x1)
ioctl$EXT4_IOC_GROUP_EXTEND(r3, 0x40305829, &(0x7f0000000240)=0x20)

994.402224ms ago: executing program 1 (id=753):
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0600000004000000ff0f00000700000000", @ANYBLOB], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000900)={'bridge0\x00', @broadcast})

990.216015ms ago: executing program 0 (id=754):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000680)='kmem_cache_free\x00'}, 0x10)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2b, 0x0, 0x0)
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406c256d00000000000001090224000100"], 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4)
ptrace(0x10, 0x1)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x5}]}, 0x10)
r0 = gettid()
timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f00000002c0))
timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
mknod(&(0x7f0000000000)='./file0\x00', 0x1000, 0x0)
open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)

902.730705ms ago: executing program 1 (id=755):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
close_range(r0, 0xffffffffffffffff, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x4, 0x8, 0x0, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='br_fdb_add\x00', r1}, 0x10)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'bridge0\x00', <r5=>0x0})
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="280000001c000100000000000000000007000000", @ANYRES32=r5, @ANYBLOB="4000aa000a0002"], 0x28}}, 0x0)

886.572926ms ago: executing program 1 (id=756):
syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2001004, 0x0, 0x0, 0x0, &(0x7f0000000000))
pipe2$9p(&(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018400110800395032303030"], 0x15)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r3}, 0x10)
r4 = dup(r1)
write$FUSE_BMAP(r4, &(0x7f0000000080)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1])
chdir(&(0x7f0000000040)='./file0\x00')
syz_mount_image$fuse(0x0, &(0x7f0000006340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)

870.222419ms ago: executing program 1 (id=757):
r0 = epoll_create1(0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014})
epoll_wait(r0, &(0x7f0000000040)=[{}], 0x1, 0xfffff001)
syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB='nodiscard,background_gc=sync,fsync_mode=posix,alloc_mode=reuse,inline_xattr,disable_roll_forward,background_gc=on,inline_dentry,noflush_merge,user_xattr,t,mode=adaptive,prjjquota=,extent_cache,\x00'/210], 0x0, 0x550e, &(0x7f0000001e00)="$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")

833.866463ms ago: executing program 2 (id=758):
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000e27b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='workqueue_queue_work\x00', r3}, 0x10)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='workqueue_queue_work\x00', r4}, 0x10)
write$cgroup_pid(r1, &(0x7f0000000c40), 0x12)

824.412554ms ago: executing program 2 (id=759):
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000540)='./file0\x00', 0x1c14744, &(0x7f0000000500)={[{@bh}]}, 0xff, 0x49f, &(0x7f0000001400)="$eJzs3M9vVEUcAPDve7vlp9KK+AMksYrGxh8tLaAc9KDRxIMmGj3gsbaFIAs1tCZCiBRj8GhIvBuPJv4FnjgZ9WTixYPeDQlRYgJ4cc3bfa/trrulP3er+/kkCzP75r2Zb9/M7nRmtwH0rMHsnyTiroj4JSL669nGAoP1/27duDBx+8aFiSSq1bd+T2rlbt64MFEULc7bmWeG0oj0kySvpNHMufOnxiuVqbN5fmT29PsjM+fOP3Py9PiJqRNTZ8aOHj18aPS5Z8eONJx3ZJVxZvHd3PfR9P69r75z5fWJY1fe/f7rrL1pfnxxHOtlMAv8j2pN87HH17uyLvu7uhBnUu52a1iuUkRkt6uvNv77oxTli8Wx/njl4+62DthI2Wv21vaH56rA/1gS3W4B0B3FG332+2/+6OvQ1GNTuP5i/RegLPZb+aN+pDy/NrCRP5DBiDg299cX2SOa1iGqLdYNAADW6mo2/3m6Yf6Xzz/SuH9RuV353tBARNwTEbsj4t6I2BMR90XUyj4QEQ+usP7mraF/78Ok11YV2DJl87/n872txvlfMfuLgVKeu7sWf19y/GRl6mD+MxmKvq1ZfrTVxYtLvPzTZ+3qXzz/yx5Z/cVcML/I1eYFusnx2fH1mpRevxSxr9wq/iSKbZwkIvZGxL6VXXpXkTj55Ff72xW6c/xLWId9puqXEU/U7/9cNMVfSJbenxzZFpWpgyP1XlFqUccPP15+o139zfG3On8jZfd/R2P/byrR/2eyeL92ZuV1XP7107Z7q+U79/9r5Rb9f0vydm1Pd0v+3Ifjs7NnRyO2JK/V8g3Pjy2cW+SL8ln8Qwdaj//d+TlZ/A9FxP6In4th93B+7x6JiEcj4sAS8X/30mPvtTu2pv6/DrL4J1u+/s33/4HG+7/yROnUt9+0q785/iTPL5TI7v/hWmoof6b2+pfb3ua67ZuzLS+x2t4MAAAA/z1p7bPxSTo8n07T4eH6Z/j3xI60Mj0z+9Tx6Q/OTNY/Qz8QfWmx/tm/aD10NJnLr1jPj+VrxcXxQ/m68eel7UkSlanhienKZJdjh163s834z/zWZjH6hY62ENhQvq8Fvat5/KddagfQed7/oXcZ/9C7jH/oXcX4f3PRcxebynT6g+lAZ3j/h95l/EPvmh//l7rbDqDzvP9DT2r1Jfnibxys4Sv/a0qUl/j2/iZNFKujm6U9p5KI2NgqIt0ckbZNRP5HLDZLe5adiLlSvSPdrq7yOuUlRvdyE915PQIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFhv/wQAAP//m7Df+Q==")
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140)={r0, <r1=>0xffffffffffffffff}, 0x4)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f0000000480)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x13}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0xe80, 0xe80, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x6, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040), &(0x7f00000004c0), 0xce, r4}, 0x38)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='block_plug\x00', r5}, 0x10)
write$cgroup_pid(r3, &(0x7f0000000980), 0x12)

801.742887ms ago: executing program 2 (id=760):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={<r0=>0xffffffffffffffff})
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0)
syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="73686f72746e616d653d77696e6e742c756e695f786c61740600000073686f72746e616d882b885992e47584b16c6f7765722c73686f72746e6144d04991dad54157354f6e7dc56d653d77696e93fd595674d882e939352c636f6465706167653d3836342c757466383d312c696f636861727365743d6370"], 0x1, 0x248, &(0x7f0000002340)="$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")
lstat(0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[@ANYBLOB="020200090c0000000000000000000000030006000000000002000000ffffffff00000000000000000200010000000000000000f1ff000000030005000000000002000000ac1414aa000000000000000001001500000000000100140000000000"], 0x60}, 0x1, 0x7}, 0x0)
syz_usb_control_io$hid(r1, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00220f00000003a8407a730b93bf0280b3"], 0x0}, 0x0)
r3 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0)
r4 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0)
ioctl$HIDIOCSREPORT(r4, 0x81044804, &(0x7f0000000400)={0x1})
ioctl$HIDIOCGUSAGE(r3, 0x40184810, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

0s ago: executing program 1 (id=761):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x17, 0x9, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0x50}, @generic={0x7e}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)

kernel console output (not intermixed with test programs):

ing 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   49.302608][  T295] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00
[   49.311436][  T295] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   49.319976][  T295] usb 4-1: config 0 descriptor??
[   49.378710][  T322] usb usb1-port1: attempt power cycle
[   49.408605][  T615] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   49.418570][  T615] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[   49.427259][  T615] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   49.436399][  T615] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   49.444914][  T615] usb 2-1: config 0 descriptor??
[   49.498588][    T6] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[   49.738537][    T6] usb 3-1: Using ep0 maxpacket: 16
[   49.746569][   T60] usb 2-1: USB disconnect, device number 6
[   49.788562][  T322] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[   49.799349][  T295] koneplus 0003:1E7D:2E22.000C: item fetching failed at offset 0/2
[   49.807781][  T295] koneplus 0003:1E7D:2E22.000C: parse failed
[   49.813648][  T295] koneplus: probe of 0003:1E7D:2E22.000C failed with error -22
[   49.858634][    T6] usb 3-1: config 0 has an invalid interface number: 22 but max is 0
[   49.866631][    T6] usb 3-1: config 0 has no interface number 0
[   49.872634][    T6] usb 3-1: config 0 interface 22 has no altsetting 0
[   49.879210][    T6] usb 3-1: New USB device found, idVendor=0506, idProduct=11f8, bcdDevice=15.32
[   49.887990][    T6] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   49.896571][    T6] usb 3-1: config 0 descriptor??
[   49.968614][  T322] usb 1-1: device descriptor read/8, error -71
[   50.248694][  T322] usb 1-1: device descriptor read/8, error -71
[   50.528542][  T322] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[   50.699341][ T1089] loop1: detected capacity change from 0 to 256
[   50.758577][  T322] usb 1-1: device descriptor read/8, error -71
[   50.912907][ T1092] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks
[   50.958559][  T615] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[   51.038602][  T322] usb 1-1: device descriptor read/8, error -71
[   51.158639][  T322] usb usb1-port1: unable to enumerate USB device
[   51.298551][  T295] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[   51.538543][  T295] usb 2-1: Using ep0 maxpacket: 32
[   51.554554][   T19] usb 4-1: USB disconnect, device number 7
[   51.579856][ T1103] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[   51.658661][  T295] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   51.672087][  T295] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   51.681975][  T295] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[   51.691397][  T295] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   51.700224][  T295] usb 2-1: config 0 descriptor??
[   51.739011][  T295] hub 2-1:0.0: USB hub found
[   51.939660][ T1113] loop3: detected capacity change from 0 to 512
[   51.949629][ T1113] EXT4-fs error (device loop3): ext4_orphan_get:1396: inode #15: comm syz.3.258: casefold flag without casefold feature
[   51.962122][  T295] hub 2-1:0.0: 1 port detected
[   51.967192][ T1113] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: inode #12: comm syz.3.258: missing EA_INODE flag
[   51.980591][ T1113] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.258: error while reading EA inode 12 err=-117
[   51.992887][ T1113] EXT4-fs (loop3): 1 orphan inode deleted
[   51.998544][ T1113] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[   52.025426][  T592] EXT4-fs (loop3): unmounting filesystem.
[   52.778604][   T19] hub 2-1:0.0: activate --> -90
[   53.068618][   T19] usb 2-1-port1: config error
[   53.107921][ T1141] loop3: detected capacity change from 0 to 512
[   53.130641][ T1141] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[   53.139765][ T1141] ext4 filesystem being mounted at /34/bus supports timestamps until 2038 (0x7fffffff)
[   53.161344][  T592] EXT4-fs (loop3): unmounting filesystem.
[   53.218844][    T6] usb 3-1: string descriptor 0 read error: -71
[   53.228914][    T6] usb 3-1: USB disconnect, device number 6
[   53.269308][  T314] usb 2-1: USB disconnect, device number 7
[   53.790497][ T1166] incfs: Can't find or create .index dir in ./file0
[   53.796942][ T1166] incfs: mount failed -14
[   54.128542][    T6] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[   54.254281][   T28] kauditd_printk_skb: 42 callbacks suppressed
[   54.254295][   T28] audit: type=1400 audit(1729689409.331:383): avc:  denied  { connect } for  pid=1177 comm="syz.3.283" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   54.488612][    T6] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   54.499376][    T6] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   54.509210][    T6] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   54.521873][   T28] audit: type=1400 audit(1729689409.591:384): avc:  denied  { read write } for  pid=1181 comm="syz.3.285" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[   54.546135][    T6] usb 2-1: New USB device found, idVendor=5543, idProduct=0003, bcdDevice= 0.00
[   54.546271][   T28] audit: type=1400 audit(1729689409.591:385): avc:  denied  { open } for  pid=1181 comm="syz.3.285" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[   54.555379][    T6] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   54.587266][    T6] usb 2-1: config 0 descriptor??
[   54.788581][  T322] usb 4-1: new full-speed USB device number 8 using dummy_hcd
[   55.079523][    T6] uclogic 0003:5543:0003.000D: item fetching failed at offset 5/7
[   55.087240][    T6] uclogic 0003:5543:0003.000D: parse failed
[   55.092956][    T6] uclogic: probe of 0003:5543:0003.000D failed with error -22
[   55.148633][  T322] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[   55.159423][  T322] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   55.168990][  T322] usb 4-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00
[   55.177806][  T322] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   55.186195][  T322] usb 4-1: config 0 descriptor??
[   55.284982][    T6] usb 2-1: USB disconnect, device number 8
[   55.660102][  T322] samsung 0003:0419:0600.000E: item fetching failed at offset 1/5
[   55.667869][  T322] samsung 0003:0419:0600.000E: parse failed
[   55.673887][  T322] samsung: probe of 0003:0419:0600.000E failed with error -22
[   55.819162][   T28] audit: type=1400 audit(1729689410.901:386): avc:  denied  { create } for  pid=1189 comm="syz.1.288" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1
[   55.862148][  T322] usb 4-1: USB disconnect, device number 8
[   55.958039][ T1194] loop1: detected capacity change from 0 to 256
[   56.421072][ T1196] loop3: detected capacity change from 0 to 256
[   56.427370][ T1196] exfat: Unknown parameter 'ÿÿÿÿÿÿÿÿ18446744073709551615ÿ0x0000000000000000'
[   56.486957][   T28] audit: type=1400 audit(1729689411.561:387): avc:  denied  { write } for  pid=1195 comm="syz.3.290" name="event0" dev="devtmpfs" ino=168 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[   57.522507][ T1211] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.529614][ T1211] bridge0: port 1(bridge_slave_0) entered disabled state
[   57.537008][ T1211] device bridge_slave_0 entered promiscuous mode
[   57.548874][ T1211] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.555828][ T1211] bridge0: port 2(bridge_slave_1) entered disabled state
[   57.563145][ T1211] device bridge_slave_1 entered promiscuous mode
[   57.629623][ T1211] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.636508][ T1211] bridge0: port 2(bridge_slave_1) entered forwarding state
[   57.643603][ T1211] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.650384][ T1211] bridge0: port 1(bridge_slave_0) entered forwarding state
[   57.679656][  T615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   57.687461][  T615] bridge0: port 1(bridge_slave_0) entered disabled state
[   57.694743][  T615] bridge0: port 2(bridge_slave_1) entered disabled state
[   57.710879][    T6] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   57.720667][    T6] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.727527][    T6] bridge0: port 1(bridge_slave_0) entered forwarding state
[   57.734919][    T6] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   57.742986][    T6] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.749853][    T6] bridge0: port 2(bridge_slave_1) entered forwarding state
[   57.770970][    T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   57.778548][   T60] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[   57.779528][    T6] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   57.794300][    T6] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   57.806496][ T1211] device veth0_vlan entered promiscuous mode
[   57.817256][  T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   57.825429][  T295] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   57.833008][  T295] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   57.846928][ T1211] device veth1_macvtap entered promiscuous mode
[   57.854647][    T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   57.872999][  T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   57.881934][  T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   58.039186][   T43] device bridge_slave_1 left promiscuous mode
[   58.045143][   T43] bridge0: port 2(bridge_slave_1) entered disabled state
[   58.068913][   T43] device bridge_slave_0 left promiscuous mode
[   58.074884][   T43] bridge0: port 1(bridge_slave_0) entered disabled state
[   58.099542][   T43] device veth1_macvtap left promiscuous mode
[   58.105401][   T43] device veth0_vlan left promiscuous mode
[   58.349122][ T1208] loop1: detected capacity change from 0 to 131072
[   59.778981][ T1208] F2FS-fs (loop1): Invalid log sectorsize (67108873)
[   59.785498][ T1208] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[   59.989476][ T1208] F2FS-fs (loop1): invalid crc value
[   60.249305][ T1208] F2FS-fs (loop1): Found nat_bits in checkpoint
[   60.738840][ T1208] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[   60.745709][ T1208] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4
[   61.678639][ T1218] loop0: detected capacity change from 0 to 1024
[   63.768695][ T1218] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[   63.858578][ T1218] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (30349!=20869)
[   63.929152][ T1218] EXT4-fs (loop0): invalid journal inode
[   75.814509][ T1249] bridge0: port 1(bridge_slave_0) entered blocking state
[   75.821712][ T1249] bridge0: port 1(bridge_slave_0) entered disabled state
[   75.829279][ T1249] device bridge_slave_0 entered promiscuous mode
[   75.859541][ T1249] bridge0: port 2(bridge_slave_1) entered blocking state
[   75.866396][ T1249] bridge0: port 2(bridge_slave_1) entered disabled state
[   75.873768][ T1249] device bridge_slave_1 entered promiscuous mode
[   75.888634][ T1251] bridge0: port 1(bridge_slave_0) entered blocking state
[   75.895492][ T1251] bridge0: port 1(bridge_slave_0) entered disabled state
[   75.903126][ T1251] device bridge_slave_0 entered promiscuous mode
[   75.921459][ T1251] bridge0: port 2(bridge_slave_1) entered blocking state
[   75.928320][ T1251] bridge0: port 2(bridge_slave_1) entered disabled state
[   75.936178][ T1251] device bridge_slave_1 entered promiscuous mode
[   75.978232][ T1250] bridge0: port 1(bridge_slave_0) entered blocking state
[   75.985134][ T1250] bridge0: port 1(bridge_slave_0) entered disabled state
[   75.992520][ T1250] device bridge_slave_0 entered promiscuous mode
[   76.014932][ T1250] bridge0: port 2(bridge_slave_1) entered blocking state
[   76.021912][ T1250] bridge0: port 2(bridge_slave_1) entered disabled state
[   76.029286][ T1250] device bridge_slave_1 entered promiscuous mode
[   76.035829][ T1248] bridge0: port 1(bridge_slave_0) entered blocking state
[   76.042869][ T1248] bridge0: port 1(bridge_slave_0) entered disabled state
[   76.050134][ T1248] device bridge_slave_0 entered promiscuous mode
[   76.056980][ T1252] bridge0: port 1(bridge_slave_0) entered blocking state
[   76.063991][ T1252] bridge0: port 1(bridge_slave_0) entered disabled state
[   76.071186][ T1252] device bridge_slave_0 entered promiscuous mode
[   76.077938][ T1252] bridge0: port 2(bridge_slave_1) entered blocking state
[   76.084850][ T1252] bridge0: port 2(bridge_slave_1) entered disabled state
[   76.092112][ T1252] device bridge_slave_1 entered promiscuous mode
[   76.102743][ T1248] bridge0: port 2(bridge_slave_1) entered blocking state
[   76.109641][ T1248] bridge0: port 2(bridge_slave_1) entered disabled state
[   76.116886][ T1248] device bridge_slave_1 entered promiscuous mode
[   76.300639][ T1251] bridge0: port 2(bridge_slave_1) entered blocking state
[   76.307500][ T1251] bridge0: port 2(bridge_slave_1) entered forwarding state
[   76.314690][ T1251] bridge0: port 1(bridge_slave_0) entered blocking state
[   76.321536][ T1251] bridge0: port 1(bridge_slave_0) entered forwarding state
[   76.340463][   T43] device bridge_slave_1 left promiscuous mode
[   76.346379][   T43] bridge0: port 2(bridge_slave_1) entered disabled state
[   76.353826][   T43] device bridge_slave_0 left promiscuous mode
[   76.360005][   T43] bridge0: port 1(bridge_slave_0) entered disabled state
[   76.367665][   T43] device veth1_macvtap left promiscuous mode
[   76.373675][   T43] device veth0_vlan left promiscuous mode
[   76.458064][ T1249] bridge0: port 2(bridge_slave_1) entered blocking state
[   76.464972][ T1249] bridge0: port 2(bridge_slave_1) entered forwarding state
[   76.472071][ T1249] bridge0: port 1(bridge_slave_0) entered blocking state
[   76.478819][ T1249] bridge0: port 1(bridge_slave_0) entered forwarding state
[   76.516532][ T1248] bridge0: port 2(bridge_slave_1) entered blocking state
[   76.523432][ T1248] bridge0: port 2(bridge_slave_1) entered forwarding state
[   76.530521][ T1248] bridge0: port 1(bridge_slave_0) entered blocking state
[   76.537286][ T1248] bridge0: port 1(bridge_slave_0) entered forwarding state
[   76.554080][ T1252] bridge0: port 2(bridge_slave_1) entered blocking state
[   76.560965][ T1252] bridge0: port 2(bridge_slave_1) entered forwarding state
[   76.568074][ T1252] bridge0: port 1(bridge_slave_0) entered blocking state
[   76.574864][ T1252] bridge0: port 1(bridge_slave_0) entered forwarding state
[   76.589941][  T322] bridge0: port 1(bridge_slave_0) entered disabled state
[   76.597116][  T322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   76.604626][  T322] bridge0: port 2(bridge_slave_1) entered disabled state
[   76.612319][  T322] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   76.620741][  T322] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   76.629167][  T322] bridge0: port 1(bridge_slave_0) entered disabled state
[   76.636161][  T322] bridge0: port 1(bridge_slave_0) entered disabled state
[   76.643277][  T322] bridge0: port 2(bridge_slave_1) entered disabled state
[   76.650649][  T322] bridge0: port 2(bridge_slave_1) entered disabled state
[   76.686878][    T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   76.694145][    T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   76.708703][    T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   76.716630][    T6] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   76.724820][    T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   76.733250][    T6] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   76.741303][    T6] bridge0: port 1(bridge_slave_0) entered blocking state
[   76.748123][    T6] bridge0: port 1(bridge_slave_0) entered forwarding state
[   76.755488][    T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   76.763337][    T6] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   76.772309][    T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   76.780505][    T6] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   76.788438][    T6] bridge0: port 2(bridge_slave_1) entered blocking state
[   76.795305][    T6] bridge0: port 2(bridge_slave_1) entered forwarding state
[   76.825430][    T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   76.833345][    T6] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   76.841508][    T6] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   76.849310][    T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   76.856489][    T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   76.881559][   T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   76.888926][   T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   76.896185][   T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   76.903501][   T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   76.910735][   T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   76.919020][   T60] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   76.927138][   T60] bridge0: port 1(bridge_slave_0) entered blocking state
[   76.934052][   T60] bridge0: port 1(bridge_slave_0) entered forwarding state
[   76.941274][   T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   76.949667][   T60] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   76.957633][   T60] bridge0: port 2(bridge_slave_1) entered blocking state
[   76.964509][   T60] bridge0: port 2(bridge_slave_1) entered forwarding state
[   76.971652][   T60] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   76.993498][   T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   77.003046][   T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   77.011335][   T60] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   77.019628][   T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   77.027714][   T60] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   77.035798][   T60] bridge0: port 1(bridge_slave_0) entered blocking state
[   77.042647][   T60] bridge0: port 1(bridge_slave_0) entered forwarding state
[   77.058344][ T1249] device veth0_vlan entered promiscuous mode
[   77.079893][  T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   77.088295][  T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   77.096154][  T295] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   77.103975][  T295] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   77.111360][  T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   77.119258][  T295] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   77.126424][  T295] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   77.134303][  T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   77.142490][  T295] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   77.150931][  T295] bridge0: port 2(bridge_slave_1) entered blocking state
[   77.157761][  T295] bridge0: port 2(bridge_slave_1) entered forwarding state
[   77.165039][  T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   77.173307][  T295] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   77.181298][  T295] bridge0: port 1(bridge_slave_0) entered blocking state
[   77.188149][  T295] bridge0: port 1(bridge_slave_0) entered forwarding state
[   77.195591][  T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   77.203832][  T295] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   77.211917][  T295] bridge0: port 2(bridge_slave_1) entered blocking state
[   77.218765][  T295] bridge0: port 2(bridge_slave_1) entered forwarding state
[   77.225898][  T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   77.234019][  T295] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   77.241783][  T295] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   77.260874][ T1248] device veth0_vlan entered promiscuous mode
[   77.276915][ T1249] device veth1_macvtap entered promiscuous mode
[   77.284144][ T1251] device veth0_vlan entered promiscuous mode
[   77.291821][  T615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   77.300250][  T615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   77.310582][  T615] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   77.319149][  T615] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   77.326879][  T615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   77.334898][  T615] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   77.345092][ T1252] device veth0_vlan entered promiscuous mode
[   77.356041][  T615] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   77.363403][  T615] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   77.370654][  T615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   77.378615][  T615] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   77.386025][  T615] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   77.399266][    T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   77.411949][  T615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   77.426050][ T1252] device veth1_macvtap entered promiscuous mode
[   77.433538][ T1251] device veth1_macvtap entered promiscuous mode
[   77.441777][  T689] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   77.452434][ T1250] device veth0_vlan entered promiscuous mode
[   77.464413][ T1248] device veth1_macvtap entered promiscuous mode
[   77.473647][  T689] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   77.481786][  T689] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   77.490264][  T689] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   77.498269][  T689] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   77.506581][  T689] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   77.514618][  T689] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   77.547612][  T689] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   77.555089][  T689] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   77.562462][  T689] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   77.570531][  T689] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   77.592187][  T689] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   77.600259][  T689] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   77.614499][  T322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   77.622616][  T322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   77.636506][ T1250] device veth1_macvtap entered promiscuous mode
[   77.656504][   T60] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   77.664080][   T60] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   77.679704][   T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   77.687853][   T60] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   77.709186][   T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   77.723893][   T60] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   77.738792][   T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   77.746866][   T60] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   77.759588][   T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   77.786207][   T60] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   77.797514][   T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   77.806095][   T60] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   77.814514][   T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   77.820514][   T28] audit: type=1400 audit(1729689432.891:388): avc:  denied  { append } for  pid=1273 comm="syz.4.300" name="001" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[   77.934435][ T1276] loop3: detected capacity change from 0 to 1024
[   77.942244][   T28] audit: type=1400 audit(1729689433.021:389): avc:  denied  { create } for  pid=1281 comm="syz.2.298" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[   77.961537][ T1276] EXT4-fs: Ignoring removed orlov option
[   77.969679][ T1276] EXT4-fs: Ignoring removed nomblk_io_submit option
[   77.980364][   T28] audit: type=1400 audit(1729689433.041:390): avc:  denied  { write } for  pid=1281 comm="syz.2.298" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[   78.033274][ T1276] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[   78.079174][ T1251] EXT4-fs (loop3): unmounting filesystem.
[   78.230486][   T43] device bridge_slave_1 left promiscuous mode
[   78.237718][   T43] bridge0: port 2(bridge_slave_1) entered disabled state
[   78.251670][   T43] device bridge_slave_0 left promiscuous mode
[   78.261958][   T43] bridge0: port 1(bridge_slave_0) entered disabled state
[   78.282574][   T43] device bridge_slave_1 left promiscuous mode
[   78.288569][  T689] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[   78.294038][   T43] bridge0: port 2(bridge_slave_1) entered disabled state
[   78.304898][   T43] device bridge_slave_0 left promiscuous mode
[   78.311004][   T43] bridge0: port 1(bridge_slave_0) entered disabled state
[   78.319342][   T43] device bridge_slave_1 left promiscuous mode
[   78.325347][   T43] bridge0: port 2(bridge_slave_1) entered disabled state
[   78.335483][   T43] device bridge_slave_0 left promiscuous mode
[   78.341823][   T43] bridge0: port 1(bridge_slave_0) entered disabled state
[   78.349885][   T43] device bridge_slave_1 left promiscuous mode
[   78.356033][   T43] bridge0: port 2(bridge_slave_1) entered disabled state
[   78.364192][   T43] device bridge_slave_0 left promiscuous mode
[   78.370324][   T43] bridge0: port 1(bridge_slave_0) entered disabled state
[   78.378790][   T43] device veth1_macvtap left promiscuous mode
[   78.384683][   T43] device veth0_vlan left promiscuous mode
[   78.390555][   T43] device veth1_macvtap left promiscuous mode
[   78.396429][   T43] device veth0_vlan left promiscuous mode
[   78.402312][   T43] device veth1_macvtap left promiscuous mode
[   78.408200][   T43] device veth0_vlan left promiscuous mode
[   78.414077][   T43] device veth1_macvtap left promiscuous mode
[   78.420262][   T43] device veth0_vlan left promiscuous mode
[   78.531495][ T1313] overlayfs: statfs failed on './file0'
[   78.649329][  T689] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   78.659091][  T689] usb 5-1: New USB device found, idVendor=04d5, idProduct=0001, bcdDevice= 0.00
[   78.667949][  T689] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   78.676992][  T689] usb 5-1: config 0 descriptor??
[   78.719020][  T689] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[   78.839645][ T1319] loop1: detected capacity change from 0 to 512
[   78.846661][ T1319] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   78.865749][ T1319] EXT4-fs (loop1): 1 truncate cleaned up
[   78.871513][ T1319] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[   78.918246][ T1326] Zero length message leads to an empty skb
[   78.918327][   T28] audit: type=1400 audit(1729689433.991:391): avc:  denied  { create } for  pid=1324 comm="syz.2.316" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1
[   78.956524][   T28] audit: type=1400 audit(1729689433.991:392): avc:  denied  { write } for  pid=1324 comm="syz.2.316" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1
[   79.051193][ T1329] device syzkaller0 entered promiscuous mode
[   79.086803][  T322] usb 5-1: USB disconnect, device number 7
[   79.163530][  T689] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[   79.181256][ T1326] syz.2.316 (1326) used greatest stack depth: 20496 bytes left
[   79.222604][ T1336] bridge0: port 3(vlan2) entered blocking state
[   79.229266][ T1336] bridge0: port 3(vlan2) entered disabled state
[   79.235857][ T1336] device vlan2 entered promiscuous mode
[   79.241328][ T1336] device vlan1 entered promiscuous mode
[   79.248609][ T1336] bridge0: port 3(vlan2) entered blocking state
[   79.254713][ T1336] bridge0: port 3(vlan2) entered forwarding state
[   79.284656][ T1336] bridge0: port 3(vlan2) entered disabled state
[   79.290804][ T1336] bridge0: port 2(bridge_slave_1) entered disabled state
[   79.297742][ T1336] bridge0: port 1(bridge_slave_0) entered disabled state
[   79.346575][ T1336] device vlan1 left promiscuous mode
[   79.357040][ T1342] device bridge_slave_0 left promiscuous mode
[   79.363566][ T1342] bridge0: port 1(bridge_slave_0) entered disabled state
[   79.373636][ T1342] device bridge_slave_1 left promiscuous mode
[   79.388706][ T1342] bridge0: port 2(bridge_slave_1) entered disabled state
[   79.396622][ T1342] device vlan2 left promiscuous mode
[   79.408686][ T1342] bridge0: port 3(vlan2) entered disabled state
[   79.512989][ T1350] loop0: detected capacity change from 0 to 8192
[   79.528622][  T689] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 18
[   79.544561][   T28] audit: type=1400 audit(1729689434.621:393): avc:  denied  { remount } for  pid=1349 comm="syz.0.323" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1
[   79.787309][  T689] usb 2-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99
[   79.796524][  T689] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   79.804467][  T689] usb 2-1: Product: syz
[   79.808703][  T689] usb 2-1: Manufacturer: syz
[   79.813131][  T689] usb 2-1: SerialNumber: syz
[   79.818213][  T689] usb 2-1: config 0 descriptor??
[   79.838627][ T1319] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[   80.102179][  T314] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[   80.120327][  T689] usb 2-1: USB disconnect, device number 9
[   80.358547][  T314] usb 3-1: Using ep0 maxpacket: 8
[   80.518627][  T314] usb 3-1: config index 0 descriptor too short (expected 5924, got 36)
[   80.526824][  T314] usb 3-1: config 250 has an invalid interface number: 228 but max is -1
[   80.535242][  T314] usb 3-1: config 250 has 1 interface, different from the descriptor's value: 0
[   80.544339][  T314] usb 3-1: config 250 has no interface number 0
[   80.550804][  T314] usb 3-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024
[   80.581496][  T314] usb 3-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024
[   80.594079][  T314] usb 3-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0
[   80.626684][  T314] usb 3-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0
[   80.652147][ T1249] EXT4-fs (loop1): unmounting filesystem.
[   80.663338][  T314] usb 3-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17
[   80.679779][  T314] usb 3-1: config 250 interface 228 has no altsetting 0
[   80.735759][ T1377] loop1: detected capacity change from 0 to 128
[   80.755713][ T1377] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[   80.784374][ T1377] ext4 filesystem being mounted at /5/mnt supports timestamps until 2038 (0x7fffffff)
[   80.818620][  T314] usb 3-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07
[   80.827647][  T314] usb 3-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59
[   80.840183][  T314] usb 3-1: Product: syz
[   80.844226][  T314] usb 3-1: SerialNumber: syz
[   80.924666][ T1249] EXT4-fs (loop1): unmounting filesystem.
[   80.949326][  T314] hub 3-1:250.228: bad descriptor, ignoring hub
[   80.955541][  T314] hub: probe of 3-1:250.228 failed with error -5
[   81.239211][  T314] usblp 3-1:250.228: usblp0: USB Bidirectional printer dev 7 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292
[   81.256217][   T28] audit: type=1400 audit(1729689436.331:394): avc:  denied  { watch } for  pid=1395 comm="syz.0.341" path="/15/file0/file0" dev="fuse" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1
[   81.305172][   T28] audit: type=1400 audit(1729689436.381:395): avc:  denied  { block_suspend } for  pid=1404 comm="syz.1.343" capability=36  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[   81.354490][   T28] audit: type=1400 audit(1729689436.431:396): avc:  denied  { connect } for  pid=1409 comm="syz.1.345" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   81.442176][   T28] audit: type=1400 audit(1729689436.521:397): avc:  denied  { read write } for  pid=1353 comm="syz.2.325" name="lp0" dev="devtmpfs" ino=534 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1
[   81.855305][ T1427] loop4: detected capacity change from 0 to 256
[   81.876739][ T1427] FAT-fs (loop4): Directory bread(block 64) failed
[   81.883518][ T1354] usb 3-1: reset high-speed USB device number 7 using dummy_hcd
[   81.894448][ T1427] FAT-fs (loop4): Directory bread(block 65) failed
[   81.901189][ T1427] FAT-fs (loop4): Directory bread(block 66) failed
[   81.907903][ T1427] FAT-fs (loop4): Directory bread(block 67) failed
[   81.915129][ T1427] FAT-fs (loop4): Directory bread(block 68) failed
[   81.922508][ T1427] FAT-fs (loop4): Directory bread(block 69) failed
[   81.929904][ T1427] FAT-fs (loop4): Directory bread(block 70) failed
[   81.936396][ T1427] FAT-fs (loop4): Directory bread(block 71) failed
[   81.943146][ T1427] FAT-fs (loop4): Directory bread(block 72) failed
[   81.949825][ T1427] FAT-fs (loop4): Directory bread(block 73) failed
[   82.033017][ T1432] netlink: 8 bytes leftover after parsing attributes in process `syz.0.353'.
[   82.044266][ T1432] device bridge1 entered promiscuous mode
[   82.668858][ T1354] usb 3-1: failed to restore interface 228 altsetting 255 (error=-71)
[   82.678410][  T689] usb 3-1: USB disconnect, device number 7
[   82.687198][  T689] usblp0: removed
[   83.168436][ T1459] loop1: detected capacity change from 0 to 512
[   83.201477][ T1459] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended
[   83.210892][ T1459] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem
[   83.221056][ T1459] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002]
[   83.229279][ T1459] System zones: 0-2, 18-18, 34-34
[   83.247904][ T1459] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1086: updating to rev 1 because of new feature flag, running e2fsck is recommended
[   83.264142][ T1459] EXT4-fs (loop1): 1 truncate cleaned up
[   83.270046][ T1459] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[   83.396440][ T1249] EXT4-fs (loop1): unmounting filesystem.
[   83.445392][ T1468] bridge: RTM_NEWNEIGH with invalid ether address
[   83.501399][ T1475] loop2: detected capacity change from 0 to 1024
[   83.521358][ T1475] EXT4-fs: Ignoring removed oldalloc option
[   83.539175][ T1475] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[   83.582657][ T1480] loop1: detected capacity change from 0 to 256
[   83.597913][   T28] kauditd_printk_skb: 3 callbacks suppressed
[   83.597929][   T28] audit: type=1400 audit(1729689438.671:401): avc:  denied  { ioctl } for  pid=1479 comm="syz.1.369" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=23499 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[   83.637066][   T28] audit: type=1400 audit(1729689438.691:402): avc:  denied  { ioctl } for  pid=1472 comm="syz.2.367" path="/9/file1/file1" dev="loop2" ino=15 ioctlcmd=0x6628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   83.662471][   T28] audit: type=1400 audit(1729689438.711:403): avc:  denied  { read } for  pid=1483 comm="syz.1.370" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   83.692159][ T1250] EXT4-fs (loop2): unmounting filesystem.
[   83.746361][ T1493] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready
[   83.931951][ T1498] device pim6reg1 entered promiscuous mode
[   84.024032][ T1501] loop2: detected capacity change from 0 to 128
[   84.060980][ T1501] EXT4-fs (loop2): Test dummy encryption mode enabled
[   84.076734][ T1501] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[   84.085394][ T1501] ext4 filesystem being mounted at /12/mnt supports timestamps until 2038 (0x7fffffff)
[   84.163340][ T1501] fscrypt: AES-256-XTS using implementation "xts-aes-aesni"
[   84.199811][ T1501] EXT4-fs (loop2): pa ffff888133265738: logic 32768, phys. 37, len 27
[   84.207860][ T1501] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:4885: group 0, free 11, pa_free 26
[   84.234075][   T28] audit: type=1400 audit(1729689439.311:404): avc:  denied  { unmount } for  pid=1250 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1
[   84.255095][ T1250] EXT4-fs (loop2): unmounting filesystem.
[   84.339204][ T1508] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks
[   84.453336][ T1511] loop2: detected capacity change from 0 to 512
[   84.462275][ T1511] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized
[   84.714305][ T1524] loop4: detected capacity change from 0 to 512
[   84.742250][ T1524] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[   84.751176][ T1524] ext4 filesystem being mounted at /16/file0 supports timestamps until 2038 (0x7fffffff)
[   84.779424][ T1524] EXT4-fs (loop4): re-mounted. Quota mode: writeback.
[   84.791558][ T1252] EXT4-fs (loop4): unmounting filesystem.
[   84.801762][ T1520] loop1: detected capacity change from 0 to 40427
[   84.808572][ T1520] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[   84.824159][ T1520] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[   84.824572][ T1528] loop4: detected capacity change from 0 to 2048
[   84.836643][ T1520] F2FS-fs (loop1): invalid crc value
[   84.857538][ T1520] F2FS-fs (loop1): Found nat_bits in checkpoint
[   84.869825][ T1528] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[   84.887257][ T1528] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[   84.896470][ T1520] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[   84.903008][ T1528] EXT4-fs (loop4): Remounting filesystem read-only
[   84.908866][ T1520] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[   84.941974][ T1252] EXT4-fs (loop4): unmounting filesystem.
[   84.943054][ T1520] syz.1.382: attempt to access beyond end of device
[   84.943054][ T1520] loop1: rw=2049, sector=45096, nr_sectors = 128 limit=40427
[   84.968105][ T1520] syz.1.382: attempt to access beyond end of device
[   84.968105][ T1520] loop1: rw=34817, sector=45096, nr_sectors = 128 limit=40427
[   84.986042][ T1520] syz.1.382: attempt to access beyond end of device
[   84.986042][ T1520] loop1: rw=2049, sector=45096, nr_sectors = 128 limit=40427
[   85.000408][ T1520] syz.1.382: attempt to access beyond end of device
[   85.000408][ T1520] loop1: rw=2049, sector=77824, nr_sectors = 416 limit=40427
[   85.024240][    T8] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix.
[   85.033673][    T8] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix.
[   85.678592][  T689] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[   85.690900][ T1564] syz.2.393 uses obsolete (PF_INET,SOCK_PACKET)
[   85.719708][   T28] audit: type=1400 audit(1729689440.801:405): avc:  denied  { ioctl } for  pid=1563 comm="syz.2.393" path="socket:[24298]" dev="sockfs" ino=24298 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   85.809910][ T1564] device syzkaller0 entered promiscuous mode
[   85.903208][   T28] audit: type=1400 audit(1729689440.981:406): avc:  denied  { remount } for  pid=1566 comm="syz.3.394" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1
[   85.970478][   T28] audit: type=1326 audit(1729689441.051:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1571 comm="syz.2.395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4eff77dff9 code=0x7ffc0000
[   86.037227][   T28] audit: type=1326 audit(1729689441.051:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1571 comm="syz.2.395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4eff77dff9 code=0x7ffc0000
[   86.072941][  T689] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   86.100105][  T689] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   86.113380][  T689] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[   86.139052][   T28] audit: type=1326 audit(1729689441.071:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1571 comm="syz.2.395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f4eff77dff9 code=0x7ffc0000
[   86.141553][  T689] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   86.221340][ T1583] kvm: pic: level sensitive irq not supported
[   86.221403][ T1583] kvm: pic: non byte read
[   86.238610][   T28] audit: type=1326 audit(1729689441.071:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1571 comm="syz.2.395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4eff77dff9 code=0x7ffc0000
[   86.268757][  T689] usb 5-1: config 0 descriptor??
[   86.296772][ T1583] kvm: pic: level sensitive irq not supported
[   86.296819][ T1583] kvm: pic: non byte read
[   86.455794][ T1591] syz.2.405[1591] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   86.455868][ T1591] syz.2.405[1591] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   87.044142][ T1602] loop2: detected capacity change from 0 to 512
[   87.184061][ T1602] EXT4-fs: Ignoring removed i_version option
[   87.200319][ T1602] EXT4-fs: Ignoring removed nomblk_io_submit option
[   87.465770][ T1602] EXT4-fs error (device loop2): ext4_orphan_get:1422: comm syz.2.406: bad orphan inode 1
[   87.480017][ T1602] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[   87.549746][ T1606] syz.3.407[1606] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   87.549829][ T1606] syz.3.407[1606] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   87.568559][  T689] usb 5-1: string descriptor 0 read error: -71
[   87.572354][ T1608] netlink: 16 bytes leftover after parsing attributes in process `syz.0.408'.
[   87.598634][  T689] uclogic 0003:256C:006D.000F: failed retrieving string descriptor #200: -71
[   87.603124][ T1250] EXT4-fs error (device loop2): ext4_readdir:260: inode #11: block 21: comm syz-executor: path /20/file0/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=64815104, rec_len=1024, size=1024 fake=0
[   87.614948][  T689] uclogic 0003:256C:006D.000F: failed retrieving pen parameters: -71
[   87.630869][ T1250] EXT4-fs error (device loop2): ext4_empty_dir:3131: inode #11: block 21: comm syz-executor: bad entry in directory: inode out of bounds - offset=7168, inode=64815104, rec_len=1024, size=1024 fake=0
[   87.636608][  T689] uclogic 0003:256C:006D.000F: failed probing pen v2 parameters: -71
[   87.656406][ T1250] EXT4-fs error (device loop2): ext4_readdir:260: inode #11: block 21: comm syz-executor: path /20/file0/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=64815104, rec_len=1024, size=1024 fake=0
[   87.672280][  T689] uclogic 0003:256C:006D.000F: failed probing parameters: -71
[   87.710535][  T689] uclogic: probe of 0003:256C:006D.000F failed with error -71
[   87.723390][  T689] usb 5-1: USB disconnect, device number 8
[   87.768806][ T1250] EXT4-fs error (device loop2): ext4_empty_dir:3131: inode #11: block 21: comm syz-executor: bad entry in directory: inode out of bounds - offset=7168, inode=64815104, rec_len=1024, size=1024 fake=0
[   87.811412][ T1616] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks
[   87.823368][ T1250] EXT4-fs error (device loop2): ext4_readdir:260: inode #11: block 21: comm syz-executor: path /20/file0/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=64815104, rec_len=1024, size=1024 fake=0
[   87.859464][ T1250] EXT4-fs error (device loop2): ext4_empty_dir:3131: inode #11: block 21: comm syz-executor: bad entry in directory: inode out of bounds - offset=7168, inode=64815104, rec_len=1024, size=1024 fake=0
[   87.879561][ T1250] EXT4-fs error (device loop2): ext4_readdir:260: inode #11: block 21: comm syz-executor: path /20/file0/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=64815104, rec_len=1024, size=1024 fake=0
[   87.901045][ T1250] EXT4-fs error (device loop2): ext4_empty_dir:3131: inode #11: block 21: comm syz-executor: bad entry in directory: inode out of bounds - offset=7168, inode=64815104, rec_len=1024, size=1024 fake=0
[   87.920841][ T1250] EXT4-fs error (device loop2): ext4_readdir:260: inode #11: block 21: comm syz-executor: path /20/file0/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=64815104, rec_len=1024, size=1024 fake=0
[   87.942340][ T1250] EXT4-fs error (device loop2): ext4_empty_dir:3131: inode #11: block 21: comm syz-executor: bad entry in directory: inode out of bounds - offset=7168, inode=64815104, rec_len=1024, size=1024 fake=0
[   88.049459][ T1631] device pim6reg1 entered promiscuous mode
[   88.090094][ T1250] EXT4-fs (loop2): unmounting filesystem.
[   88.141159][ T1635] loop1: detected capacity change from 0 to 2048
[   88.159826][ T1635] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[   88.199301][ T1249] EXT4-fs (loop1): unmounting filesystem.
[   88.315956][ T1648] bridge0: port 1(bridge_slave_0) entered blocking state
[   88.322866][ T1648] bridge0: port 1(bridge_slave_0) entered disabled state
[   88.330717][ T1648] device bridge_slave_0 entered promiscuous mode
[   88.337345][ T1648] bridge0: port 2(bridge_slave_1) entered blocking state
[   88.344229][ T1648] bridge0: port 2(bridge_slave_1) entered disabled state
[   88.353615][ T1648] device bridge_slave_1 entered promiscuous mode
[   88.424654][ T1648] bridge0: port 2(bridge_slave_1) entered blocking state
[   88.431567][ T1648] bridge0: port 2(bridge_slave_1) entered forwarding state
[   88.438666][ T1648] bridge0: port 1(bridge_slave_0) entered blocking state
[   88.445507][ T1648] bridge0: port 1(bridge_slave_0) entered forwarding state
[   88.471153][  T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   88.478810][  T314] bridge0: port 1(bridge_slave_0) entered disabled state
[   88.485964][  T314] bridge0: port 2(bridge_slave_1) entered disabled state
[   88.503958][  T615] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   88.512209][  T615] bridge0: port 1(bridge_slave_0) entered blocking state
[   88.519218][  T615] bridge0: port 1(bridge_slave_0) entered forwarding state
[   88.534999][  T322] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   88.539395][ T1664] overlayfs: statfs failed on './file0'
[   88.543253][  T322] bridge0: port 2(bridge_slave_1) entered blocking state
[   88.555083][  T322] bridge0: port 2(bridge_slave_1) entered forwarding state
[   88.562279][  T322] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   88.580708][  T615] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   88.594186][  T615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   88.606909][  T615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   88.615278][  T615] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   88.622651][  T615] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   88.633395][ T1648] device veth0_vlan entered promiscuous mode
[   88.645601][  T615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   88.655751][ T1648] device veth1_macvtap entered promiscuous mode
[   88.666486][  T615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   88.677750][  T322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   88.758390][ T1679] device veth0_vlan left promiscuous mode
[   88.764987][ T1679] device veth0_vlan entered promiscuous mode
[   89.028783][  T295] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[   89.268952][  T295] usb 3-1: Using ep0 maxpacket: 8
[   89.296375][ T1699] loop4: detected capacity change from 0 to 2048
[   89.388617][  T295] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   89.401817][  T295] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5
[   89.494820][  T295] usb 3-1: New USB device found, idVendor=5543, idProduct=0064, bcdDevice= 0.00
[   89.503948][  T295] usb 3-1: New USB device strings: Mfr=0, Product=242, SerialNumber=0
[   89.512338][  T295] usb 3-1: Product: syz
[   89.517077][  T295] usb 3-1: config 0 descriptor??
[   89.647021][ T1705] device veth0_vlan left promiscuous mode
[   89.653266][ T1705] device veth0_vlan entered promiscuous mode
[   89.729125][ T1714] binder: 1710:1714 ioctl 4018620d 0 returned -22
[   89.825231][ T1719] Invalid ELF header len 1
[   89.982341][  T689] usb 3-1: USB disconnect, device number 8
[   89.985599][ T1709] loop4: detected capacity change from 0 to 40427
[   90.006354][ T1709] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[   90.014632][ T1709] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[   90.023619][ T1709] F2FS-fs (loop4): invalid crc value
[   90.041389][ T1709] F2FS-fs (loop4): Found nat_bits in checkpoint
[   90.067843][ T1709] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[   90.074743][ T1709] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[   90.218870][ T1736] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks
[   90.241906][ T1738] loop3: detected capacity change from 0 to 128
[   90.277404][ T1738] syz.3.455: attempt to access beyond end of device
[   90.277404][ T1738] loop3: rw=2049, sector=145, nr_sectors = 896 limit=128
[   90.309116][ T1738] syz.3.455: attempt to access beyond end of device
[   90.309116][ T1738] loop3: rw=0, sector=177, nr_sectors = 1 limit=128
[   90.322543][ T1737] syz.3.455: attempt to access beyond end of device
[   90.322543][ T1737] loop3: rw=0, sector=177, nr_sectors = 1 limit=128
[   90.340429][ T1737] Buffer I/O error on dev loop3, logical block 177, async page read
[   90.348323][ T1737] syz.3.455: attempt to access beyond end of device
[   90.348323][ T1737] loop3: rw=0, sector=178, nr_sectors = 1 limit=128
[   90.361186][ T1737] Buffer I/O error on dev loop3, logical block 178, async page read
[   90.369933][ T1737] syz.3.455: attempt to access beyond end of device
[   90.369933][ T1737] loop3: rw=0, sector=179, nr_sectors = 1 limit=128
[   90.382843][ T1737] Buffer I/O error on dev loop3, logical block 179, async page read
[   90.390759][ T1737] syz.3.455: attempt to access beyond end of device
[   90.390759][ T1737] loop3: rw=0, sector=180, nr_sectors = 1 limit=128
[   90.403747][ T1737] Buffer I/O error on dev loop3, logical block 180, async page read
[   90.412982][ T1737] syz.3.455: attempt to access beyond end of device
[   90.412982][ T1737] loop3: rw=0, sector=181, nr_sectors = 1 limit=128
[   90.426038][ T1737] Buffer I/O error on dev loop3, logical block 181, async page read
[   90.434014][ T1737] syz.3.455: attempt to access beyond end of device
[   90.434014][ T1737] loop3: rw=0, sector=182, nr_sectors = 1 limit=128
[   90.446965][ T1737] Buffer I/O error on dev loop3, logical block 182, async page read
[   90.455018][ T1737] syz.3.455: attempt to access beyond end of device
[   90.455018][ T1737] loop3: rw=0, sector=183, nr_sectors = 1 limit=128
[   90.467946][ T1737] Buffer I/O error on dev loop3, logical block 183, async page read
[   90.475759][ T1737] syz.3.455: attempt to access beyond end of device
[   90.475759][ T1737] loop3: rw=0, sector=184, nr_sectors = 1 limit=128
[   90.488927][ T1737] Buffer I/O error on dev loop3, logical block 184, async page read
[   90.496852][ T1737] Buffer I/O error on dev loop3, logical block 177, async page read
[   90.504727][ T1737] Buffer I/O error on dev loop3, logical block 178, async page read
[   90.541597][ T1746] device syz_tun entered promiscuous mode
[   90.547489][ T1746] device vlan2 entered promiscuous mode
[   90.554055][ T1746] device syz_tun left promiscuous mode
[   90.928750][    T6] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[   91.298664][    T6] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   91.309377][    T6] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   91.319638][    T6] usb 4-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00
[   91.328967][    T6] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   91.340687][    T6] usb 4-1: config 0 descriptor??
[   91.366827][ T1767] device syz_tun entered promiscuous mode
[   91.378784][ T1767] device macsec1 entered promiscuous mode
[   91.390677][ T1767] device syz_tun left promiscuous mode
[   91.468935][ T1771] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks
[   91.478715][   T60] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[   91.521492][ T1773] loop1: detected capacity change from 0 to 128
[   91.609398][ T1777] device syz_tun entered promiscuous mode
[   91.614975][ T1777] device vlan2 entered promiscuous mode
[   91.629242][ T1777] device syz_tun left promiscuous mode
[   91.938631][   T60] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   91.950017][   T60] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   91.961677][   T60] usb 3-1: New USB device found, idVendor=04b4, idProduct=07b1, bcdDevice= 0.00
[   91.971802][   T60] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   92.021272][   T60] usb 3-1: config 0 descriptor??
[   92.105874][    T6] hid-steam 0003:28DE:1142.0010: unknown main item tag 0x0
[   92.113328][    T6] hid-steam 0003:28DE:1142.0010: item fetching failed at offset 2/5
[   92.121331][    T6] hid-steam 0003:28DE:1142.0010: steam_probe:parse of hid interface failed
[   92.129778][    T6] hid-steam: probe of 0003:28DE:1142.0010 failed with error -22
[   92.157720][    T6] usb 4-1: USB disconnect, device number 10
[   92.183904][ T1791] netlink: 12 bytes leftover after parsing attributes in process `syz.1.476'.
[   92.202095][ T1791] device pim6reg1 entered promiscuous mode
[   92.301634][ T1798] loop1: detected capacity change from 0 to 1024
[   92.309139][ T1798] journal_path: Lookup failure for './file0'
[   92.315052][ T1798] EXT4-fs: error: could not find journal device path
[   92.489449][   T60] cypress 0003:04B4:07B1.0011: unknown main item tag 0x6
[   92.496345][   T60] cypress 0003:04B4:07B1.0011: item fetching failed at offset 4/5
[   92.504220][   T60] cypress 0003:04B4:07B1.0011: parse failed
[   92.509941][   T60] cypress: probe of 0003:04B4:07B1.0011 failed with error -22
[   92.544019][ T1801] device syz_tun entered promiscuous mode
[   92.549696][ T1801] device macsec1 entered promiscuous mode
[   92.555981][ T1801] device syz_tun left promiscuous mode
[   92.683272][   T28] kauditd_printk_skb: 47 callbacks suppressed
[   92.683290][   T28] audit: type=1326 audit(1729689447.761:458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1802 comm="syz.1.483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84feb7dff9 code=0x7ffc0000
[   92.716421][ T1805] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks
[   92.726035][ T1807] netlink: 24 bytes leftover after parsing attributes in process `syz.0.493'.
[   92.740924][   T28] audit: type=1326 audit(1729689447.761:459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1802 comm="syz.1.483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84feb7dff9 code=0x7ffc0000
[   92.764657][   T28] audit: type=1326 audit(1729689447.761:460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1802 comm="syz.1.483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f84feb7dff9 code=0x7ffc0000
[   92.787798][   T28] audit: type=1326 audit(1729689447.761:461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1802 comm="syz.1.483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84feb7dff9 code=0x7ffc0000
[   92.811263][   T28] audit: type=1326 audit(1729689447.761:462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1802 comm="syz.1.483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84feb7dff9 code=0x7ffc0000
[   92.838323][   T28] audit: type=1326 audit(1729689447.761:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1802 comm="syz.1.483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f84feb7dff9 code=0x7ffc0000
[   92.861372][   T28] audit: type=1326 audit(1729689447.791:464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1802 comm="syz.1.483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84feb7dff9 code=0x7ffc0000
[   92.862723][  T615] usb 3-1: USB disconnect, device number 9
[   92.894179][   T28] audit: type=1326 audit(1729689447.791:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1802 comm="syz.1.483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84feb7dff9 code=0x7ffc0000
[   92.917330][   T28] audit: type=1326 audit(1729689447.791:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1802 comm="syz.1.483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f84feb7dff9 code=0x7ffc0000
[   92.940185][   T28] audit: type=1326 audit(1729689447.791:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1802 comm="syz.1.483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84feb7dff9 code=0x7ffc0000
[   93.141364][ T1811] loop4: detected capacity change from 0 to 128
[   93.202787][ T1823] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks
[   93.241027][ T1826] loop4: detected capacity change from 0 to 1024
[   93.246502][ T1828] Invalid ELF header len 1
[   93.261534][ T1826] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[   93.290216][ T1835] netlink: 12 bytes leftover after parsing attributes in process `syz.3.492'.
[   93.299697][ T1252] EXT4-fs error (device loop4): ext4_empty_dir:3087: inode #11: comm syz-executor: invalid size
[   93.310530][ T1252] EXT4-fs error (device loop4): ext4_empty_dir:3087: inode #11: comm syz-executor: invalid size
[   93.321765][ T1252] EXT4-fs error (device loop4): ext4_empty_dir:3087: inode #11: comm syz-executor: invalid size
[   93.335828][ T1252] EXT4-fs error (device loop4): ext4_empty_dir:3087: inode #11: comm syz-executor: invalid size
[   93.340088][ T1835] device pim6reg1 entered promiscuous mode
[   93.346763][ T1252] EXT4-fs error (device loop4): ext4_empty_dir:3087: inode #11: comm syz-executor: invalid size
[   93.362390][ T1252] EXT4-fs error (device loop4): ext4_empty_dir:3087: inode #11: comm syz-executor: invalid size
[   93.373131][ T1252] EXT4-fs error (device loop4): ext4_empty_dir:3087: inode #11: comm syz-executor: invalid size
[   93.383789][ T1252] EXT4-fs error (device loop4): ext4_empty_dir:3087: inode #11: comm syz-executor: invalid size
[   93.394461][ T1252] EXT4-fs error (device loop4): ext4_empty_dir:3087: inode #11: comm syz-executor: invalid size
[   93.405143][ T1252] EXT4-fs error (device loop4): ext4_empty_dir:3087: inode #11: comm syz-executor: invalid size
[   93.408665][    T6] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[   93.467705][ T1841] loop3: detected capacity change from 0 to 512
[   93.481723][ T1841] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[   93.491345][ T1841] ext4 filesystem being mounted at /31/file1 supports timestamps until 2038 (0x7fffffff)
[   93.493059][ T1252] EXT4-fs (loop4): unmounting filesystem.
[   93.598569][  T322] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[   93.608390][ T1845] bridge0: port 1(bridge_slave_0) entered blocking state
[   93.615396][ T1845] bridge0: port 1(bridge_slave_0) entered disabled state
[   93.623971][ T1845] device bridge_slave_0 entered promiscuous mode
[   93.624174][ T1251] EXT4-fs (loop3): unmounting filesystem.
[   93.631057][ T1845] bridge0: port 2(bridge_slave_1) entered blocking state
[   93.642641][ T1845] bridge0: port 2(bridge_slave_1) entered disabled state
[   93.650546][ T1845] device bridge_slave_1 entered promiscuous mode
[   93.700989][ T1845] bridge0: port 2(bridge_slave_1) entered blocking state
[   93.707832][ T1845] bridge0: port 2(bridge_slave_1) entered forwarding state
[   93.714983][ T1845] bridge0: port 1(bridge_slave_0) entered blocking state
[   93.721736][ T1845] bridge0: port 1(bridge_slave_0) entered forwarding state
[   93.742319][   T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   93.749703][   T60] bridge0: port 1(bridge_slave_0) entered disabled state
[   93.756758][   T60] bridge0: port 2(bridge_slave_1) entered disabled state
[   93.765876][  T615] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   93.774355][  T615] bridge0: port 1(bridge_slave_0) entered blocking state
[   93.781210][  T615] bridge0: port 1(bridge_slave_0) entered forwarding state
[   93.796744][   T60] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   93.804752][   T60] bridge0: port 2(bridge_slave_1) entered blocking state
[   93.808548][  T295] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[   93.811615][   T60] bridge0: port 2(bridge_slave_1) entered forwarding state
[   93.819248][    T6] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[   93.826364][   T60] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   93.835298][    T6] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   93.843056][   T60] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   93.851445][    T6] usb 1-1: config 0 descriptor??
[   93.871609][ T1845] device veth0_vlan entered promiscuous mode
[   93.878655][   T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   93.886899][   T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   93.894800][   T60] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   93.902402][   T60] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   93.914925][  T615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   93.923916][ T1845] device veth1_macvtap entered promiscuous mode
[   93.933075][   T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   93.943155][  T615] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   93.968609][  T322] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   93.979966][  T322] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   93.989668][  T322] usb 2-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00
[   93.998845][  T322] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   94.008389][  T322] usb 2-1: config 0 descriptor??
[   94.068576][  T295] usb 3-1: Using ep0 maxpacket: 16
[   94.109277][    T8] device bridge_slave_1 left promiscuous mode
[   94.115227][    T8] bridge0: port 2(bridge_slave_1) entered disabled state
[   94.122620][    T8] device bridge_slave_0 left promiscuous mode
[   94.128661][    T8] bridge0: port 1(bridge_slave_0) entered disabled state
[   94.136149][    T8] device veth1_macvtap left promiscuous mode
[   94.142313][    T8] device veth0_vlan left promiscuous mode
[   94.208682][  T295] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   94.219488][  T295] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   94.229647][  T295] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[   94.242273][  T295] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[   94.251310][  T295] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   94.259648][  T295] usb 3-1: config 0 descriptor??
[   94.489627][  T322] hid-steam 0003:28DE:1142.0012: unknown main item tag 0x0
[   94.496664][  T322] hid-steam 0003:28DE:1142.0012: item fetching failed at offset 2/5
[   94.504730][  T322] hid-steam 0003:28DE:1142.0012: steam_probe:parse of hid interface failed
[   94.513258][  T322] hid-steam: probe of 0003:28DE:1142.0012 failed with error -22
[   94.692817][  T322] usb 2-1: USB disconnect, device number 10
[   94.729984][  T295] microsoft 0003:045E:07DA.0013: unknown main item tag 0x0
[   94.737187][  T295] microsoft 0003:045E:07DA.0013: unknown main item tag 0x0
[   94.744276][  T295] microsoft 0003:045E:07DA.0013: unknown main item tag 0x0
[   94.751282][  T295] microsoft 0003:045E:07DA.0013: unknown main item tag 0x0
[   94.758275][  T295] microsoft 0003:045E:07DA.0013: unknown main item tag 0x0
[   94.765346][  T295] microsoft 0003:045E:07DA.0013: unknown main item tag 0x0
[   94.772467][  T295] microsoft 0003:045E:07DA.0013: unknown main item tag 0x0
[   94.779532][  T295] microsoft 0003:045E:07DA.0013: unknown main item tag 0x0
[   94.786532][  T295] microsoft 0003:045E:07DA.0013: unknown main item tag 0x0
[   94.793634][  T295] microsoft 0003:045E:07DA.0013: unknown main item tag 0x0
[   94.803221][  T295] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0013/input/input9
[   94.815274][  T295] microsoft 0003:045E:07DA.0013: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0
[   94.939108][   T19] usb 3-1: USB disconnect, device number 10
[   95.428571][    T6] usb 1-1: Cannot set autoneg
[   95.433124][    T6] MOSCHIP usb-ethernet driver: probe of 1-1:0.0 failed with error -71
[   95.444138][    T6] usb 1-1: USB disconnect, device number 10
[   95.467976][ T1862] loop2: detected capacity change from 0 to 128
[   95.498191][ T1862] bio_check_eod: 668 callbacks suppressed
[   95.498215][ T1862] syz.2.504: attempt to access beyond end of device
[   95.498215][ T1862] loop2: rw=2049, sector=145, nr_sectors = 896 limit=128
[   95.561327][ T1862] syz.2.504: attempt to access beyond end of device
[   95.561327][ T1862] loop2: rw=0, sector=177, nr_sectors = 1 limit=128
[   95.574959][ T1859] syz.2.504: attempt to access beyond end of device
[   95.574959][ T1859] loop2: rw=0, sector=177, nr_sectors = 1 limit=128
[   95.587966][ T1859] buffer_io_error: 662 callbacks suppressed
[   95.587983][ T1859] Buffer I/O error on dev loop2, logical block 177, async page read
[   95.609228][ T1859] syz.2.504: attempt to access beyond end of device
[   95.609228][ T1859] loop2: rw=0, sector=178, nr_sectors = 1 limit=128
[   95.622575][ T1859] Buffer I/O error on dev loop2, logical block 178, async page read
[   95.641660][ T1859] syz.2.504: attempt to access beyond end of device
[   95.641660][ T1859] loop2: rw=0, sector=179, nr_sectors = 1 limit=128
[   95.687981][ T1859] Buffer I/O error on dev loop2, logical block 179, async page read
[   95.720772][ T1859] syz.2.504: attempt to access beyond end of device
[   95.720772][ T1859] loop2: rw=0, sector=180, nr_sectors = 1 limit=128
[   95.772794][ T1859] Buffer I/O error on dev loop2, logical block 180, async page read
[   95.780841][ T1859] syz.2.504: attempt to access beyond end of device
[   95.780841][ T1859] loop2: rw=0, sector=181, nr_sectors = 1 limit=128
[   95.793829][ T1859] Buffer I/O error on dev loop2, logical block 181, async page read
[   95.801795][ T1859] syz.2.504: attempt to access beyond end of device
[   95.801795][ T1859] loop2: rw=0, sector=182, nr_sectors = 1 limit=128
[   95.814851][ T1859] Buffer I/O error on dev loop2, logical block 182, async page read
[   95.823347][ T1859] syz.2.504: attempt to access beyond end of device
[   95.823347][ T1859] loop2: rw=0, sector=183, nr_sectors = 1 limit=128
[   95.836285][ T1859] Buffer I/O error on dev loop2, logical block 183, async page read
[   95.844195][ T1859] syz.2.504: attempt to access beyond end of device
[   95.844195][ T1859] loop2: rw=0, sector=184, nr_sectors = 1 limit=128
[   95.857594][ T1859] Buffer I/O error on dev loop2, logical block 184, async page read
[   95.865764][ T1859] Buffer I/O error on dev loop2, logical block 177, async page read
[   95.873705][ T1859] Buffer I/O error on dev loop2, logical block 178, async page read
[   96.370853][ T1886] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks
[   96.393189][ T1877] device syzkaller0 entered promiscuous mode
[   96.608561][   T60] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[   96.828918][ T1910] loop4: detected capacity change from 0 to 256
[   96.840619][ T1910] exfat: Unknown parameter 'ÿÿÿÿÿÿÿÿ18446744073709551615ÿ0x0000000000000000'
[   96.978647][   T60] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   96.989498][   T60] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   97.008542][   T60] usb 4-1: New USB device found, idVendor=04b4, idProduct=07b1, bcdDevice= 0.00
[   97.020037][   T60] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   97.028581][  T295] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[   97.037156][   T60] usb 4-1: config 0 descriptor??
[   97.147389][ T1916] loop4: detected capacity change from 0 to 256
[   97.519376][   T60] cypress 0003:04B4:07B1.0014: unknown main item tag 0x6
[   97.526320][   T60] cypress 0003:04B4:07B1.0014: item fetching failed at offset 4/5
[   97.534292][   T60] cypress 0003:04B4:07B1.0014: parse failed
[   97.540450][   T60] cypress: probe of 0003:04B4:07B1.0014 failed with error -22
[   97.548560][  T295] usb 1-1: Using ep0 maxpacket: 16
[   97.678630][  T295] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   97.689472][  T295] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   97.699050][  T295] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[   97.711619][  T295] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[   97.720517][  T295] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   97.730164][  T295] usb 1-1: config 0 descriptor??
[   97.805527][    T6] usb 4-1: USB disconnect, device number 11
[   97.828674][   T60] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[   98.068538][   T60] usb 2-1: Using ep0 maxpacket: 16
[   98.158549][   T19] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[   98.188653][   T60] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   98.199398][   T60] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   98.209040][   T60] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   98.219721][  T295] microsoft 0003:045E:07DA.0015: unknown main item tag 0x0
[   98.221901][   T60] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00
[   98.229177][  T295] microsoft 0003:045E:07DA.0015: unknown main item tag 0x0
[   98.237520][   T60] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   98.244952][  T295] microsoft 0003:045E:07DA.0015: unknown main item tag 0x0
[   98.255763][   T60] usb 2-1: config 0 descriptor??
[   98.259866][  T295] microsoft 0003:045E:07DA.0015: unknown main item tag 0x0
[   98.271754][  T295] microsoft 0003:045E:07DA.0015: unknown main item tag 0x0
[   98.279059][  T295] microsoft 0003:045E:07DA.0015: unknown main item tag 0x0
[   98.286492][  T295] microsoft 0003:045E:07DA.0015: unknown main item tag 0x0
[   98.293919][  T295] microsoft 0003:045E:07DA.0015: unknown main item tag 0x0
[   98.301485][  T295] microsoft 0003:045E:07DA.0015: unknown main item tag 0x0
[   98.308596][  T295] microsoft 0003:045E:07DA.0015: unknown main item tag 0x0
[   98.320518][  T295] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0015/input/input10
[   98.346860][  T295] microsoft 0003:045E:07DA.0015: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0
[   98.352924][ T1930] device vlan2 entered promiscuous mode
[   98.364388][ T1930] device dummy0 entered promiscuous mode
[   98.373808][ T1930] device dummy0 left promiscuous mode
[   98.473566][  T322] usb 1-1: USB disconnect, device number 11
[   98.578616][   T19] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   98.589046][   T19] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[   98.597976][   T19] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   98.606846][   T19] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   98.615341][   T19] usb 5-1: config 0 descriptor??
[   98.739132][   T60] koneplus 0003:1E7D:2E22.0016: item fetching failed at offset 0/2
[   98.747128][   T60] koneplus 0003:1E7D:2E22.0016: parse failed
[   98.753230][   T60] koneplus: probe of 0003:1E7D:2E22.0016 failed with error -22
[   98.867047][  T615] usb 5-1: USB disconnect, device number 9
[   99.465174][ T1956] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks
[   99.548578][  T322] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[   99.788550][  T322] usb 1-1: Using ep0 maxpacket: 16
[  100.068594][  T322] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00
[  100.077681][  T322] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  100.085848][  T322] usb 1-1: Product: syz
[  100.090088][  T322] usb 1-1: Manufacturer: syz
[  100.094515][  T322] usb 1-1: SerialNumber: syz
[  100.099852][  T322] usb 1-1: config 0 descriptor??
[  100.139403][  T322] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected
[  100.147184][  T322] usb 1-1: Detected FT232H
[  100.348614][  T322] ftdi_sio ttyUSB0: Unable to read latency timer: -32
[  100.398565][  T615] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  100.572311][  T689] usb 2-1: USB disconnect, device number 11
[  100.608597][  T322] ftdi_sio 1-1:0.0: GPIO initialisation failed: -32
[  100.617612][  T322] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  100.658538][  T615] usb 4-1: Using ep0 maxpacket: 16
[  100.808622][  T615] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  100.819458][  T615] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0
[  100.831186][  T615] usb 4-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  100.844221][  T615] usb 4-1: config 0 interface 0 has no altsetting 0
[  100.850941][  T615] usb 4-1: New USB device found, idVendor=045e, idProduct=05da, bcdDevice= 0.00
[  100.860040][  T615] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  100.878727][  T615] usb 4-1: config 0 descriptor??
[  101.407715][ T1962] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  101.474509][ T1962] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  101.536489][  T615] hid-generic 0003:045E:05DA.0017: ignoring exceeding usage max
[  101.558668][  T615] hid-generic 0003:045E:05DA.0017: hidraw0: USB HID v0.00 Device [HID 045e:05da] on usb-dummy_hcd.3-1/input0
[  101.759424][   T60] usb 4-1: USB disconnect, device number 12
[  102.336208][  T615] usb 1-1: USB disconnect, device number 12
[  102.348714][  T615] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  102.358341][  T615] ftdi_sio 1-1:0.0: device disconnected
[  102.394126][ T2011] loop4: detected capacity change from 0 to 1024
[  102.413190][ T2011] EXT4-fs (loop4): revision level too high, forcing read-only mode
[  102.421600][ T2011] EXT4-fs (loop4): orphan cleanup on readonly fs
[  102.428943][ T2011] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.552: bg 0: block 10: padding at end of block bitmap is not set
[  102.443168][ T2011] __quota_error: 56 callbacks suppressed
[  102.443186][ T2011] Quota error (device loop4): write_blk: dquota write failed
[  102.456954][ T2011] Quota error (device loop4): find_free_dqentry: Can't write quota data block 5
[  102.466938][ T2011] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota
[  102.477877][ T2011] EXT4-fs error (device loop4): ext4_acquire_dquot:6764: comm syz.4.552: Failed to acquire dquot type 0
[  102.493094][ T2011] EXT4-fs error (device loop4): ext4_free_blocks:6213: comm syz.4.552: Freeing blocks not in datazone - block = 0, count = 4096
[  102.507067][ T2016] device syzkaller0 entered promiscuous mode
[  102.512525][ T2011] EXT4-fs (loop4): 1 truncate cleaned up
[  102.524399][ T2011] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  102.551500][ T2011] EXT4-fs error (device loop4): __ext4_remount:6412: comm syz.4.552: Abort forced by user
[  102.565476][ T2011] syz.4.552 (2011) used greatest stack depth: 19752 bytes left
[  102.575638][ T1845] EXT4-fs (loop4): unmounting filesystem.
[  102.696634][ T2034] binder: 2027:2034 ioctl 4018620d 0 returned -22
[  103.328599][  T615] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  103.527574][ T2052] loop3: detected capacity change from 0 to 512
[  103.534485][ T2052] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[  103.543554][ T2052] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem
[  103.552731][ T2052] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002]
[  103.560779][ T2052] System zones: 0-2, 18-18, 34-34
[  103.566495][ T2052] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1086: updating to rev 1 because of new feature flag, running e2fsck is recommended
[  103.568531][  T615] usb 3-1: Using ep0 maxpacket: 16
[  103.581200][ T2052] EXT4-fs (loop3): 1 truncate cleaned up
[  103.591498][ T2052] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  103.614002][ T1251] EXT4-fs (loop3): unmounting filesystem.
[  103.617443][ T2059] device syzkaller0 entered promiscuous mode
[  103.749870][   T60] usb 1-1: new full-speed USB device number 13 using dummy_hcd
[  104.148637][   T60] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  104.159990][   T60] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  104.171227][   T60] usb 1-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00
[  104.181136][   T60] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  104.210095][   T60] usb 1-1: config 0 descriptor??
[  104.634559][  T295] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  104.669337][   T60] samsung 0003:0419:0600.0018: item fetching failed at offset 1/5
[  104.677135][   T60] samsung 0003:0419:0600.0018: parse failed
[  104.682987][   T60] samsung: probe of 0003:0419:0600.0018 failed with error -22
[  104.788614][  T615] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00
[  104.797634][  T615] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  104.807749][  T615] usb 3-1: Product: syz
[  104.811949][  T615] usb 3-1: Manufacturer: syz
[  104.816339][  T615] usb 3-1: SerialNumber: syz
[  104.821660][  T615] usb 3-1: config 0 descriptor??
[  104.859109][  T615] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected
[  104.866780][  T615] usb 3-1: Detected FT232H
[  104.874964][    T6] usb 1-1: USB disconnect, device number 13
[  104.880732][  T295] usb 5-1: Using ep0 maxpacket: 16
[  104.908562][   T19] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  104.998601][  T295] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  105.009373][  T295] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0
[  105.018853][  T295] usb 5-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  105.031523][  T295] usb 5-1: config 0 interface 0 has no altsetting 0
[  105.037837][  T295] usb 5-1: New USB device found, idVendor=045e, idProduct=05da, bcdDevice= 0.00
[  105.046800][  T295] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  105.055327][  T295] usb 5-1: config 0 descriptor??
[  105.068601][  T615] ftdi_sio ttyUSB0: Unable to read latency timer: -32
[  105.148570][   T19] usb 2-1: Using ep0 maxpacket: 8
[  105.268590][   T19] usb 2-1: config index 0 descriptor too short (expected 5924, got 36)
[  105.276713][   T19] usb 2-1: config 250 has an invalid interface number: 228 but max is -1
[  105.284938][   T19] usb 2-1: config 250 has 1 interface, different from the descriptor's value: 0
[  105.293789][   T19] usb 2-1: config 250 has no interface number 0
[  105.300493][   T19] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024
[  105.311950][  T615] ftdi_sio 3-1:0.0: GPIO initialisation failed: -32
[  105.318448][   T19] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024
[  105.328930][  T615] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  105.338273][   T19] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0
[  105.348401][   T19] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0
[  105.358456][   T19] usb 2-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17
[  105.371714][   T19] usb 2-1: config 250 interface 228 has no altsetting 0
[  105.498631][   T19] usb 2-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07
[  105.507739][   T19] usb 2-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59
[  105.515913][   T19] usb 2-1: Product: syz
[  105.520675][   T19] usb 2-1: SerialNumber: syz
[  105.525186][ T2045] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  105.537982][ T2045] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  105.550371][  T295] hid-generic 0003:045E:05DA.0019: ignoring exceeding usage max
[  105.560537][  T295] hid-generic 0003:045E:05DA.0019: hidraw0: USB HID v0.00 Device [HID 045e:05da] on usb-dummy_hcd.4-1/input0
[  105.572484][   T19] hub 2-1:250.228: bad descriptor, ignoring hub
[  105.580128][   T19] hub: probe of 2-1:250.228 failed with error -5
[  105.765389][  T295] usb 5-1: USB disconnect, device number 10
[  105.779295][   T19] usblp 2-1:250.228: usblp0: USB Bidirectional printer dev 12 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292
[  106.388776][ T2068] usb 2-1: reset high-speed USB device number 12 using dummy_hcd
[  106.691834][   T19] usb 3-1: USB disconnect, device number 11
[  106.707892][ T2088] loop3: detected capacity change from 0 to 512
[  106.711690][   T19] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  106.714557][ T2088] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  106.723647][   T19] ftdi_sio 3-1:0.0: device disconnected
[  106.747127][ T2088] EXT4-fs (loop3): 1 truncate cleaned up
[  106.752830][ T2088] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  107.008652][ T2068] usb 2-1: failed to restore interface 228 altsetting 255 (error=-71)
[  107.029014][  T689] usb 2-1: USB disconnect, device number 12
[  107.045622][  T689] usblp0: removed
[  107.078387][ T1251] EXT4-fs (loop3): unmounting filesystem.
[  108.498548][   T19] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  108.506007][  T615] usb 2-1: new full-speed USB device number 13 using dummy_hcd
[  108.513485][  T295] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  108.738530][   T19] usb 1-1: Using ep0 maxpacket: 8
[  108.758726][  T295] usb 5-1: Using ep0 maxpacket: 16
[  108.858619][   T19] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  108.868606][   T19] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5
[  108.881443][  T615] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  108.892381][  T295] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  108.903358][  T295] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  108.913115][  T615] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  108.923234][  T295] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  108.936162][  T615] usb 2-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00
[  108.945130][  T615] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  108.952972][  T295] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00
[  108.962149][  T295] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  108.970202][  T615] usb 2-1: config 0 descriptor??
[  108.975907][  T295] usb 5-1: config 0 descriptor??
[  108.981207][   T19] usb 1-1: New USB device found, idVendor=5543, idProduct=0064, bcdDevice= 0.00
[  108.990208][   T19] usb 1-1: New USB device strings: Mfr=0, Product=242, SerialNumber=0
[  108.998454][   T19] usb 1-1: Product: syz
[  109.015997][   T19] usb 1-1: config 0 descriptor??
[  109.278542][  T689] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  109.379859][   T60] usb 1-1: USB disconnect, device number 14
[  109.449695][  T615] samsung 0003:0419:0600.001A: item fetching failed at offset 1/5
[  109.457435][  T615] samsung 0003:0419:0600.001A: parse failed
[  109.463343][  T615] samsung: probe of 0003:0419:0600.001A failed with error -22
[  109.471345][  T295] koneplus 0003:1E7D:2E22.001B: item fetching failed at offset 0/2
[  109.480134][  T295] koneplus 0003:1E7D:2E22.001B: parse failed
[  109.485993][  T295] koneplus: probe of 0003:1E7D:2E22.001B failed with error -22
[  109.528570][  T689] usb 4-1: Using ep0 maxpacket: 16
[  109.653356][  T295] usb 2-1: USB disconnect, device number 13
[  109.878594][  T689] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00
[  109.887464][  T689] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  109.895374][  T689] usb 4-1: Product: syz
[  109.899425][  T689] usb 4-1: Manufacturer: syz
[  109.903840][  T689] usb 4-1: SerialNumber: syz
[  109.908942][  T689] usb 4-1: config 0 descriptor??
[  109.917910][ T2143] binder: 2141:2143 ioctl 4018620d 0 returned -22
[  109.949039][  T689] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected
[  109.956518][  T689] usb 4-1: Detected FT232H
[  110.168586][  T689] ftdi_sio ttyUSB0: Unable to read latency timer: -32
[  110.433718][  T689] ftdi_sio 4-1:0.0: GPIO initialisation failed: -32
[  110.465474][  T689] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  111.169362][  T322] usb 5-1: USB disconnect, device number 11
[  111.192160][   T28] audit: type=1326 audit(1729689466.271:524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2166 comm="syz.4.599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f979517dff9 code=0x7ffc0000
[  111.217004][   T28] audit: type=1326 audit(1729689466.271:525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2166 comm="syz.4.599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f979517dff9 code=0x7ffc0000
[  111.240315][   T28] audit: type=1326 audit(1729689466.291:526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2166 comm="syz.4.599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f979517dff9 code=0x7ffc0000
[  111.263961][   T28] audit: type=1326 audit(1729689466.291:527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2166 comm="syz.4.599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f979517dff9 code=0x7ffc0000
[  111.290517][   T28] audit: type=1326 audit(1729689466.291:528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2166 comm="syz.4.599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f979517dff9 code=0x7ffc0000
[  111.313839][   T28] audit: type=1326 audit(1729689466.291:529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2166 comm="syz.4.599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f979517dff9 code=0x7ffc0000
[  111.337360][   T28] audit: type=1326 audit(1729689466.391:530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2166 comm="syz.4.599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f979517dff9 code=0x7ffc0000
[  111.368842][   T28] audit: type=1326 audit(1729689466.391:531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2166 comm="syz.4.599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f979517dff9 code=0x7ffc0000
[  111.414088][   T28] audit: type=1326 audit(1729689466.491:532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2166 comm="syz.4.599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f979517c990 code=0x7ffc0000
[  111.437344][   T28] audit: type=1326 audit(1729689466.491:533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2166 comm="syz.4.599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f979517f827 code=0x7ffc0000
[  112.011299][   T24] usb 4-1: USB disconnect, device number 13
[  112.033421][   T24] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  112.106827][   T24] ftdi_sio 4-1:0.0: device disconnected
[  112.626266][ T2189] loop4: detected capacity change from 0 to 512
[  112.634617][ T2189] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized
[  112.907167][ T2193] syz.0.617[2193] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  112.907242][ T2193] syz.0.617[2193] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  112.919971][ T2193] syz.0.617[2193] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  112.931256][ T2193] syz.0.617[2193] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  112.944207][ T2193] netlink: 4 bytes leftover after parsing attributes in process `syz.0.617'.
[  112.977866][ T2193] bridge0: port 1(bridge_slave_0) entered disabled state
[  112.988548][ T2193] device bridge_slave_0 left promiscuous mode
[  112.994525][ T2193] bridge0: port 1(bridge_slave_0) entered disabled state
[  113.439451][ T2210] process 'syz.4.611' launched './file1' with NULL argv: empty string added
[  113.465137][ T2212] loop4: detected capacity change from 0 to 512
[  113.490619][ T2212] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  113.500116][ T2212] ext4 filesystem being mounted at /28/bus supports timestamps until 2038 (0x7fffffff)
[  113.549898][ T1845] EXT4-fs (loop4): unmounting filesystem.
[  113.586944][ T2217] netlink: 32 bytes leftover after parsing attributes in process `syz.4.614'.
[  113.600134][ T2217] netlink: 32 bytes leftover after parsing attributes in process `syz.4.614'.
[  113.668577][  T615] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  113.898636][ T1101] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  114.278616][  T615] usb 3-1: New USB device found, idVendor=05ac, idProduct=0223, bcdDevice=e1.fc
[  114.287498][  T615] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  114.314223][  T615] usb 3-1: config 0 descriptor??
[  114.320220][ T1101] usb 5-1: Using ep0 maxpacket: 16
[  114.359141][  T615] usbhid 3-1:0.0: couldn't find an input interrupt endpoint
[  114.564643][  T615] usb 3-1: USB disconnect, device number 12
[  114.598626][ T1101] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00
[  114.607596][ T1101] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  114.608525][  T689] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[  114.615508][ T1101] usb 5-1: Product: syz
[  114.627014][ T1101] usb 5-1: Manufacturer: syz
[  114.631628][ T1101] usb 5-1: SerialNumber: syz
[  114.642371][ T1101] usb 5-1: config 0 descriptor??
[  114.679218][ T1101] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected
[  114.686825][ T1101] usb 5-1: Detected FT232H
[  115.058573][ T1101] ftdi_sio ttyUSB0: Unable to read latency timer: -32
[  115.068679][  T689] usb 1-1: Using ep0 maxpacket: 8
[  115.168225][ T2246] syz.3.624[2246] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  115.168298][ T2246] syz.3.624[2246] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  115.180948][ T2246] syz.3.624[2246] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  115.192215][ T2246] syz.3.624[2246] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  115.204651][ T2246] netlink: 4 bytes leftover after parsing attributes in process `syz.3.624'.
[  115.225035][ T2246] bridge0: port 1(bridge_slave_0) entered disabled state
[  115.233525][ T2246] device bridge_slave_0 left promiscuous mode
[  115.239603][  T689] usb 1-1: config index 0 descriptor too short (expected 5924, got 36)
[  115.239616][ T2246] bridge0: port 1(bridge_slave_0) entered disabled state
[  115.254598][  T689] usb 1-1: config 250 has an invalid interface number: 228 but max is -1
[  115.265210][  T689] usb 1-1: config 250 has 1 interface, different from the descriptor's value: 0
[  115.274316][  T689] usb 1-1: config 250 has no interface number 0
[  115.280477][  T689] usb 1-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024
[  115.291954][  T689] usb 1-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024
[  115.302778][  T689] usb 1-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0
[  115.319181][ T1101] ftdi_sio 5-1:0.0: GPIO initialisation failed: -32
[  115.320211][  T689] usb 1-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0
[  115.344017][  T689] usb 1-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17
[  115.357439][  T689] usb 1-1: config 250 interface 228 has no altsetting 0
[  115.442742][ T1101] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  115.649004][  T689] usb 1-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07
[  115.781050][  T689] usb 1-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59
[  115.841818][  T689] usb 1-1: Product: syz
[  115.846599][  T689] usb 1-1: SerialNumber: syz
[  115.889784][  T689] hub 1-1:250.228: bad descriptor, ignoring hub
[  115.895864][  T689] hub: probe of 1-1:250.228 failed with error -5
[  116.109762][  T689] usblp 1-1:250.228: usblp0: USB Bidirectional printer dev 15 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292
[  116.738723][ T2232] usb 1-1: reset high-speed USB device number 15 using dummy_hcd
[  116.821706][  T615] usb 5-1: USB disconnect, device number 12
[  116.838798][  T615] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  116.850074][  T615] ftdi_sio 5-1:0.0: device disconnected
[  116.868625][ T2270] device pim6reg1 entered promiscuous mode
[  117.389173][ T2232] usb 1-1: failed to restore interface 228 altsetting 255 (error=-71)
[  117.466638][ T1101] usb 1-1: USB disconnect, device number 15
[  117.843092][ T1101] usblp0: removed
[  117.889056][ T2279] device syzkaller0 entered promiscuous mode
[  118.070637][ T2289] syz.4.637[2289] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  118.070711][ T2289] syz.4.637[2289] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  118.083370][ T2289] syz.4.637[2289] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  118.096119][ T2289] syz.4.637[2289] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  118.120042][ T2289] netlink: 4 bytes leftover after parsing attributes in process `syz.4.637'.
[  118.140788][ T2289] bridge0: port 1(bridge_slave_0) entered disabled state
[  118.152320][ T2289] device bridge_slave_0 left promiscuous mode
[  118.158359][ T2289] bridge0: port 1(bridge_slave_0) entered disabled state
[  118.170143][ T2292] bridge0: port 3(vlan2) entered blocking state
[  118.176323][ T2292] bridge0: port 3(vlan2) entered disabled state
[  118.183033][ T2292] device vlan2 entered promiscuous mode
[  118.188839][ T2292] device vlan1 entered promiscuous mode
[  118.194475][ T2292] bridge0: port 3(vlan2) entered blocking state
[  118.200584][ T2292] bridge0: port 3(vlan2) entered forwarding state
[  118.255536][ T2297] loop4: detected capacity change from 0 to 512
[  118.263850][ T2292] bridge0: port 3(vlan2) entered disabled state
[  118.270011][ T2292] bridge0: port 2(bridge_slave_1) entered disabled state
[  118.276971][ T2292] bridge0: port 1(bridge_slave_0) entered disabled state
[  118.316911][ T2292] device vlan1 left promiscuous mode
[  118.322576][  T555] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  118.337235][   T28] kauditd_printk_skb: 35 callbacks suppressed
[  118.337252][   T28] audit: type=1400 audit(1729689473.411:569): avc:  denied  { ioctl } for  pid=2296 comm="syz.4.641" path="/dev/input/event2" dev="devtmpfs" ino=182 ioctlcmd=0x4593 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[  118.369679][  T322] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  118.378181][ T2293] device bridge_slave_0 left promiscuous mode
[  118.391275][ T2293] bridge0: port 1(bridge_slave_0) entered disabled state
[  118.409676][ T2293] device bridge_slave_1 left promiscuous mode
[  118.416549][ T2293] bridge0: port 2(bridge_slave_1) entered disabled state
[  118.424434][ T2293] device vlan2 left promiscuous mode
[  118.429960][ T2293] bridge0: port 3(vlan2) entered disabled state
[  118.718529][   T60] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  118.727173][ T2306] loop4: detected capacity change from 0 to 40427
[  118.734530][   T28] audit: type=1400 audit(1729689473.811:570): avc:  denied  { unlink } for  pid=85 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  118.738584][  T322] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  118.771860][  T322] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  118.775783][ T2306] F2FS-fs (loop4): invalid crc value
[  118.781627][  T322] usb 3-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00
[  118.795719][  T322] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  118.796440][ T2306] F2FS-fs (loop4): Found nat_bits in checkpoint
[  118.810385][  T322] usb 3-1: config 0 descriptor??
[  118.844629][ T2306] F2FS-fs (loop4): Start checkpoint disabled!
[  118.851225][ T2306] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6
[  118.988538][   T60] usb 2-1: Using ep0 maxpacket: 16
[  119.278655][   T60] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00
[  119.287548][   T60] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  119.295635][   T60] usb 2-1: Product: syz
[  119.299889][   T60] usb 2-1: Manufacturer: syz
[  119.304307][   T60] usb 2-1: SerialNumber: syz
[  119.310498][   T60] usb 2-1: config 0 descriptor??
[  119.317847][ T2312] binder: 2311:2312 ioctl c018620c 20000140 returned -22
[  119.326281][   T28] audit: type=1400 audit(1729689474.411:571): avc:  denied  { transfer } for  pid=2311 comm="syz.3.655" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1
[  119.329237][   T43] bio_check_eod: 216 callbacks suppressed
[  119.329250][   T43] kworker/u4:2: attempt to access beyond end of device
[  119.329250][   T43] loop4: rw=2049, sector=40960, nr_sectors = 8 limit=40427
[  119.364456][  T322] usbhid 3-1:0.0: can't add hid device: -71
[  119.370788][   T60] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected
[  119.378193][  T322] usbhid: probe of 3-1:0.0 failed with error -71
[  119.395174][   T60] usb 2-1: Detected FT232H
[  119.401823][  T322] usb 3-1: USB disconnect, device number 13
[  119.578578][   T60] ftdi_sio ttyUSB0: Unable to read latency timer: -32
[  119.848611][   T60] ftdi_sio 2-1:0.0: GPIO initialisation failed: -32
[  119.857052][   T60] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  120.215074][ T2331] device pim6reg1 entered promiscuous mode
[  120.408841][   T28] audit: type=1400 audit(1729689475.491:572): avc:  denied  { getopt } for  pid=2341 comm="syz.3.653" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  120.410553][ T2342] netlink: 36 bytes leftover after parsing attributes in process `syz.3.653'.
[  120.451418][   T28] audit: type=1400 audit(1729689475.521:573): avc:  denied  { nlmsg_write } for  pid=2341 comm="syz.3.653" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1
[  120.485285][ T2345] bridge0: port 1(vlan2) entered blocking state
[  120.491485][ T2345] bridge0: port 1(vlan2) entered disabled state
[  120.498082][ T2345] device vlan2 entered promiscuous mode
[  120.503604][ T2345] device vlan1 entered promiscuous mode
[  120.509483][ T2345] bridge0: port 1(vlan2) entered blocking state
[  120.515585][ T2345] bridge0: port 1(vlan2) entered forwarding state
[  120.542466][ T2345] bridge0: port 1(vlan2) entered disabled state
[  120.548659][ T2345] bridge0: port 2(bridge_slave_1) entered disabled state
[  120.572334][ T2345] device vlan1 left promiscuous mode
[  120.583723][ T2346] device bridge_slave_1 left promiscuous mode
[  120.589984][ T2346] bridge0: port 2(bridge_slave_1) entered disabled state
[  120.597636][ T2346] device vlan2 left promiscuous mode
[  120.602920][ T2346] bridge0: port 1(vlan2) entered disabled state
[  121.028523][ T1101] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  121.388578][ T1101] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  121.408524][ T1101] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  121.479274][  T689] usb 2-1: USB disconnect, device number 14
[  121.488824][ T1101] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  121.496966][  T689] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  121.497989][ T1101] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  121.508342][  T689] ftdi_sio 2-1:0.0: device disconnected
[  121.538548][ T1101] usb 3-1: SerialNumber: syz
[  121.819324][ T1101] usb 3-1: 0:2 : does not exist
[  121.858764][ T1101] usb 3-1: unit 255 not found!
[  121.863393][ T1101] usb 3-1: unit 8 not found!
[  121.938531][  T689] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  122.058583][ T1101] usb 3-1: 5:0: cannot get min/max values for control 24 (id 5)
[  122.078164][ T1101] usb 3-1: USB disconnect, device number 14
[  122.248794][  T689] usb 2-1: device descriptor read/64, error -71
[  122.324566][ T2371] binder: 2370:2371 ioctl c018620c 20000140 returned -22
[  122.648537][  T689] usb 2-1: device descriptor read/64, error -71
[  122.928622][  T689] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  123.059097][ T2393] device pim6reg1 entered promiscuous mode
[  123.208692][  T295] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[  123.219060][  T689] usb 2-1: device descriptor read/64, error -71
[  123.399683][ T2405] loop4: detected capacity change from 0 to 512
[  123.410586][ T2405] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  123.419545][ T2405] ext4 filesystem being mounted at /45/bus supports timestamps until 2038 (0x7fffffff)
[  123.448664][  T295] usb 1-1: Using ep0 maxpacket: 8
[  123.468724][ T1101] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  123.479368][ T1845] EXT4-fs (loop4): unmounting filesystem.
[  123.568617][  T295] usb 1-1: config 1 has an invalid interface number: 128 but max is 1
[  123.576625][  T295] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[  123.586542][  T295] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2
[  123.595323][  T295] usb 1-1: config 1 has no interface number 0
[  123.601246][  T295] usb 1-1: config 1 interface 128 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  123.668576][  T689] usb 2-1: device descriptor read/64, error -71
[  123.768644][  T295] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  123.777577][  T295] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  123.785352][  T295] usb 1-1: Product: syz
[  123.789419][  T295] usb 1-1: Manufacturer: syz
[  123.793824][  T295] usb 1-1: SerialNumber: syz
[  123.798707][  T689] usb usb2-port1: attempt power cycle
[  123.828606][ T1101] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 18
[  123.839445][  T295] cdc_wdm 1-1:1.128: skipping garbage
[  123.844629][  T295] cdc_wdm 1-1:1.128: invalid descriptor buffer length
[  123.851345][  T295] cdc_wdm: probe of 1-1:1.128 failed with error -22
[  123.899114][ T2412] binder: 2411:2412 ioctl c018620c 20000140 returned -22
[  123.988579][ T1101] usb 4-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99
[  123.997871][ T1101] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  124.006060][ T1101] usb 4-1: Product: syz
[  124.010246][ T1101] usb 4-1: Manufacturer: syz
[  124.014653][ T1101] usb 4-1: SerialNumber: syz
[  124.025774][ T1101] usb 4-1: config 0 descriptor??
[  124.042037][  T322] usb 1-1: USB disconnect, device number 16
[  124.048828][ T2403] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22
[  124.218528][  T689] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[  124.302087][ T1101] usb 4-1: USB disconnect, device number 14
[  124.418589][  T689] usb 2-1: device descriptor read/8, error -71
[  124.688769][  T689] usb 2-1: device descriptor read/8, error -71
[  124.958645][  T689] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[  125.148680][  T689] usb 2-1: device descriptor read/8, error -71
[  125.478603][  T689] usb 2-1: device descriptor read/8, error -71
[  125.598681][  T689] usb usb2-port1: unable to enumerate USB device
[  125.846678][ T2450] device syzkaller0 entered promiscuous mode
[  126.080941][ T2461] bridge0: port 1(vlan2) entered blocking state
[  126.097918][ T2461] bridge0: port 1(vlan2) entered disabled state
[  126.116484][ T2461] device vlan2 entered promiscuous mode
[  126.132056][ T2461] device vlan1 entered promiscuous mode
[  126.146269][ T2461] bridge0: port 1(vlan2) entered blocking state
[  126.152385][ T2461] bridge0: port 1(vlan2) entered forwarding state
[  126.218859][ T2463] bridge0: port 1(vlan2) entered disabled state
[  126.225004][ T2463] bridge0: port 2(bridge_slave_1) entered disabled state
[  126.329473][ T2463] device vlan1 left promiscuous mode
[  126.347447][ T2461] device bridge_slave_1 left promiscuous mode
[  126.377434][ T2461] bridge0: port 2(bridge_slave_1) entered disabled state
[  126.413348][ T2461] device vlan2 left promiscuous mode
[  126.427984][ T2461] bridge0: port 1(vlan2) entered disabled state
[  127.689180][ T2495] netlink: 'syz.0.703': attribute type 4 has an invalid length.
[  127.958532][  T322] usb 5-1: new full-speed USB device number 13 using dummy_hcd
[  128.059942][   T28] audit: type=1400 audit(1729689483.141:574): avc:  denied  { getopt } for  pid=2504 comm="syz.0.706" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  128.368563][  T322] usb 5-1: unable to get BOS descriptor or descriptor too short
[  128.418584][  T322] usb 5-1: not running at top speed; connect to a high speed hub
[  128.426278][  T689] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[  128.498562][  T322] usb 5-1: config 136 has an invalid descriptor of length 0, skipping remainder of the config
[  128.518512][  T322] usb 5-1: config 136 has 2 interfaces, different from the descriptor's value: 3
[  128.537615][  T322] usb 5-1: config 136 has no interface number 1
[  128.543740][  T322] usb 5-1: too many endpoints for config 136 interface 2 altsetting 12: 89, using maximum allowed: 30
[  128.574865][  T322] usb 5-1: config 136 interface 2 altsetting 12 has 0 endpoint descriptors, different from the interface descriptor's value: 89
[  128.598130][  T322] usb 5-1: config 136 interface 2 has no altsetting 0
[  128.758803][  T322] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  128.767772][  T322] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  128.775804][  T322] usb 5-1: Product: syz
[  128.780202][  T322] usb 5-1: Manufacturer: syz
[  128.784624][  T322] usb 5-1: SerialNumber: syz
[  128.798605][  T689] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  128.809440][  T689] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  128.819076][  T689] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00
[  128.827978][  T689] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  128.878318][  T689] usb 1-1: config 0 descriptor??
[  129.084068][ T2493] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  129.094835][ T2493] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  129.171304][ T2493] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  129.179602][ T2493] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  129.187946][ T2493] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  129.196469][ T2493] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  129.308630][  T322] usb 5-1: MIDIStreaming interface descriptor not found
[  129.318397][  T322] usb 5-1: USB disconnect, device number 13
[  129.359967][  T689] pyra 0003:1E7D:2CF6.001C: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.0-1/input0
[  129.702061][   T28] audit: type=1400 audit(1729689484.781:575): avc:  denied  { setopt } for  pid=2524 comm="syz.3.713" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  129.723919][ T2525] netlink: 24 bytes leftover after parsing attributes in process `syz.3.713'.
[  129.733869][ T2525] tipc: Started in network mode
[  129.738971][ T2525] tipc: Node identity 7, cluster identity 6
[  129.744887][ T2525] tipc: Node number set to 7
[  129.749615][ T2525] tipc: Cannot configure node identity twice
[  129.766781][ T2530] netlink: 'syz.3.714': attribute type 4 has an invalid length.
[  130.078541][  T295] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[  130.118628][   T19] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  130.218598][  T689] pyra 0003:1E7D:2CF6.001C: couldn't init struct pyra_device
[  130.225797][  T689] pyra 0003:1E7D:2CF6.001C: couldn't install mouse
[  130.232744][  T689] pyra: probe of 0003:1E7D:2CF6.001C failed with error -71
[  130.241319][  T689] usb 1-1: USB disconnect, device number 17
[  130.338539][  T295] usb 4-1: Using ep0 maxpacket: 8
[  130.418601][   T19] usb 5-1: device descriptor read/64, error -71
[  130.478622][  T295] usb 4-1: config index 0 descriptor too short (expected 5924, got 36)
[  130.486764][  T295] usb 4-1: config 250 has an invalid interface number: 228 but max is -1
[  130.494972][  T295] usb 4-1: config 250 has 1 interface, different from the descriptor's value: 0
[  130.504923][  T295] usb 4-1: config 250 has no interface number 0
[  130.511166][  T295] usb 4-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024
[  130.522579][  T295] usb 4-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024
[  130.532812][  T295] usb 4-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0
[  130.542998][  T295] usb 4-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0
[  130.553084][  T295] usb 4-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17
[  130.566455][  T295] usb 4-1: config 250 interface 228 has no altsetting 0
[  130.718638][  T295] usb 4-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07
[  130.727712][  T295] usb 4-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59
[  130.735886][  T295] usb 4-1: Product: syz
[  130.739927][  T295] usb 4-1: SerialNumber: syz
[  130.819326][  T295] hub 4-1:250.228: bad descriptor, ignoring hub
[  130.825692][  T295] hub: probe of 4-1:250.228 failed with error -5
[  131.017995][   T19] usb 5-1: device descriptor read/64, error -71
[  131.059267][  T295] usblp 4-1:250.228: usblp0: USB Bidirectional printer dev 15 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292
[  131.288579][   T19] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  131.558950][   T19] usb 5-1: device descriptor read/64, error -71
[  131.597603][ T2556] binder_alloc: 2555: pid 2555 spamming oneway? 1 buffers allocated for a total size of 4096
[  131.621667][ T2558] netlink: 4 bytes leftover after parsing attributes in process `syz.0.724'.
[  131.639304][   T28] audit: type=1400 audit(1729689486.721:576): avc:  denied  { append } for  pid=2557 comm="syz.0.724" name="ppp" dev="devtmpfs" ino=138 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  131.668929][ T2535] usb 4-1: reset high-speed USB device number 15 using dummy_hcd
[  131.688349][ T2554] bridge0: port 1(bridge_slave_0) entered blocking state
[  131.695627][ T2554] bridge0: port 1(bridge_slave_0) entered disabled state
[  131.703154][ T2554] device bridge_slave_0 entered promiscuous mode
[  131.710274][ T2554] bridge0: port 2(bridge_slave_1) entered blocking state
[  131.717297][ T2554] bridge0: port 2(bridge_slave_1) entered disabled state
[  131.725124][ T2554] device bridge_slave_1 entered promiscuous mode
[  131.839546][ T2554] bridge0: port 2(bridge_slave_1) entered blocking state
[  131.846388][ T2554] bridge0: port 2(bridge_slave_1) entered forwarding state
[  131.853520][ T2554] bridge0: port 1(bridge_slave_0) entered blocking state
[  131.860440][ T2554] bridge0: port 1(bridge_slave_0) entered forwarding state
[  132.433976][ T1101] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  132.441825][ T1101] bridge0: port 1(bridge_slave_0) entered disabled state
[  132.449217][ T1101] bridge0: port 2(bridge_slave_1) entered disabled state
[  132.472287][  T615] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  132.480184][   T19] usb 5-1: device descriptor read/64, error -71
[  132.486646][  T615] bridge0: port 1(bridge_slave_0) entered blocking state
[  132.493522][  T615] bridge0: port 1(bridge_slave_0) entered forwarding state
[  132.501632][  T615] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  132.509940][  T615] bridge0: port 2(bridge_slave_1) entered blocking state
[  132.516781][  T615] bridge0: port 2(bridge_slave_1) entered forwarding state
[  132.524041][  T615] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  132.531925][  T615] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  132.548627][ T2535] usb 4-1: failed to restore interface 228 altsetting 255 (error=-71)
[  132.557736][  T295] usb 4-1: USB disconnect, device number 15
[  132.564204][ T1101] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  132.573046][  T295] usblp0: removed
[  132.576767][ T1101] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  132.586496][ T1101] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  132.593849][ T1101] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  132.600938][   T19] usb usb5-port1: attempt power cycle
[  132.608080][ T2554] device veth0_vlan entered promiscuous mode
[  132.635341][ T2554] device veth1_macvtap entered promiscuous mode
[  132.662005][   T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  132.675129][   T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  132.691384][   T60] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  132.699354][   T60] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  132.713135][   T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  132.726851][   T60] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  132.744529][   T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  132.767160][   T28] audit: type=1326 audit(1729689487.841:577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2574 comm="syz.0.728" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4f6557dff9 code=0x0
[  133.028577][   T19] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[  133.228636][   T19] usb 5-1: device descriptor read/8, error -71
[  133.290754][ T2584] device syzkaller0 entered promiscuous mode
[  133.425212][ T2586] netlink: 8 bytes leftover after parsing attributes in process `syz.3.731'.
[  133.498740][   T19] usb 5-1: device descriptor read/8, error -71
[  133.864973][   T60] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[  133.877260][ T2599] EXT4-fs (sda1): shut down requested (1)
[  133.887049][ T2599] Aborting journal on device sda1-8.
[  133.918691][   T19] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[  134.098577][   T19] usb 5-1: device descriptor read/8, error -71
[  134.138532][   T60] usb 4-1: device descriptor read/64, error -71
[  134.169188][  T322] usb 1-1: new high-speed USB device number 18 using dummy_hcd
[  134.368596][   T19] usb 5-1: device descriptor read/8, error -71
[  134.428552][  T322] usb 1-1: Using ep0 maxpacket: 8
[  134.489553][   T19] usb usb5-port1: unable to enumerate USB device
[  134.528554][   T60] usb 4-1: device descriptor read/64, error -71
[  134.548589][  T322] usb 1-1: config 1 has an invalid descriptor of length 109, skipping remainder of the config
[  134.558861][  T322] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2
[  134.567635][  T322] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  134.658560][  T689] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  134.738608][  T322] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  134.747659][  T322] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  134.755796][  T322] usb 1-1: Product: syz
[  134.759992][  T322] usb 1-1: Manufacturer: syz
[  134.764460][  T322] usb 1-1: SerialNumber: syz
[  134.798599][   T60] usb 4-1: new high-speed USB device number 17 using dummy_hcd
[  135.018659][  T689] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  135.029518][  T689] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  135.039194][  T689] usb 3-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00
[  135.048148][  T689] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  135.061112][  T322] cdc_ncm 1-1:1.0: CDC Union missing and no IAD found
[  135.067797][  T322] cdc_ncm 1-1:1.0: bind() failure
[  135.072705][   T60] usb 4-1: device descriptor read/64, error -71
[  135.083377][  T322] usb 1-1: USB disconnect, device number 18
[  135.138702][  T689] usb 3-1: config 0 descriptor??
[  135.468592][   T60] usb 4-1: device descriptor read/64, error -71
[  135.588599][   T60] usb usb4-port1: attempt power cycle
[  135.652611][   T28] audit: type=1400 audit(1729689490.731:578): avc:  denied  { ioctl } for  pid=2612 comm="syz.0.740" path="socket:[30625]" dev="sockfs" ino=30625 ioctlcmd=0x48f0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  135.678804][  T689] sony 0003:054C:0268.001D: unknown main item tag 0x0
[  135.685544][  T689] sony 0003:054C:0268.001D: unknown main item tag 0x0
[  135.692756][  T689] sony 0003:054C:0268.001D: unknown main item tag 0x0
[  135.699452][  T689] sony 0003:054C:0268.001D: unknown main item tag 0x0
[  135.706014][  T689] sony 0003:054C:0268.001D: unknown main item tag 0x0
[  135.714300][  T689] sony 0003:054C:0268.001D: hiddev96,hidraw0: USB HID v80.00 Device [HID 054c:0268] on usb-dummy_hcd.2-1/input0
[  135.725987][  T689] sony 0003:054C:0268.001D: failed to claim input
[  135.883117][   T19] usb 3-1: USB disconnect, device number 15
[  135.998578][   T60] usb 4-1: new high-speed USB device number 18 using dummy_hcd
[  136.168608][   T60] usb 4-1: device descriptor read/8, error -71
[  136.438768][   T60] usb 4-1: device descriptor read/8, error -71
[  136.708572][   T60] usb 4-1: new high-speed USB device number 19 using dummy_hcd
[  136.794910][ T2623] overlayfs: failed to resolve './file0': -2
[  136.833963][   T28] audit: type=1400 audit(1729689491.911:579): avc:  denied  { mount } for  pid=2629 comm="syz.2.746" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1
[  136.856287][   T28] audit: type=1400 audit(1729689491.911:580): avc:  denied  { mounton } for  pid=2629 comm="syz.2.746" path="/61/file0" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1
[  136.898594][   T60] usb 4-1: device descriptor read/8, error -71
[  137.168585][   T60] usb 4-1: device descriptor read/8, error -71
[  137.288600][   T60] usb usb4-port1: unable to enumerate USB device
[  137.768560][ T2614] Bluetooth: hci0: command 0x1003 tx timeout
[  137.774582][ T1694] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  137.817920][ T2649] bridge0: port 2(bridge_slave_1) entered disabled state
[  137.824964][ T2649] bridge0: port 1(bridge_slave_0) entered disabled state
[  137.854464][ T2649] bridge0: port 2(bridge_slave_1) entered blocking state
[  137.861370][ T2649] bridge0: port 2(bridge_slave_1) entered forwarding state
[  137.868455][ T2649] bridge0: port 1(bridge_slave_0) entered blocking state
[  137.875315][ T2649] bridge0: port 1(bridge_slave_0) entered forwarding state
[  137.882653][ T2649] device bridge0 entered promiscuous mode
[  137.898113][ T2652] bridge: RTM_NEWNEIGH with invalid ether address
[  138.098530][  T322] usb 1-1: new high-speed USB device number 19 using dummy_hcd
[  138.268545][   T60] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[  138.458582][  T322] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  138.468610][  T322] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  138.477458][  T322] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  138.486598][  T322] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  138.495123][  T322] usb 1-1: config 0 descriptor??
[  138.638592][   T60] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  138.649466][   T60] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  138.659043][   T60] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  138.671705][   T60] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  138.680626][   T60] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  138.689143][   T60] usb 3-1: config 0 descriptor??
[  138.888599][  T322] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  139.269251][   T60] plantronics 0003:047F:FFFF.001E: unknown main item tag 0x0
[  139.276674][   T60] plantronics 0003:047F:FFFF.001E: No inputs registered, leaving
[  139.285457][   T60] plantronics 0003:047F:FFFF.001E: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0
[  139.641421][   T19] usb 3-1: USB disconnect, device number 16
[  139.658838][ T2663] usb 3-1: string descriptor 0 read error: -19
SYZFAIL: posix_spawn failed
 (errno 5: Input/output error)
[  140.221999][  T295] usb 1-1: USB disconnect, device number 19
[  140.609333][   T10] device bridge_slave_1 left promiscuous mode
[  140.615285][   T10] bridge0: port 2(bridge_slave_1) entered disabled state
[  140.622515][   T10] device bridge_slave_0 left promiscuous mode
[  140.628420][   T10] bridge0: port 1(bridge_slave_0) entered disabled state
[  140.636030][   T10] device veth1_macvtap left promiscuous mode
[  140.641903][   T10] device veth0_vlan left promiscuous mode
[  140.951404][   T10] tipc: Left network mode
[  141.480101][   T10] device bridge_slave_1 left promiscuous mode
[  141.486113][   T10] bridge0: port 2(bridge_slave_1) entered disabled state
[  141.493578][   T10] device bridge_slave_0 left promiscuous mode
[  141.499584][   T10] bridge0: port 1(bridge_slave_0) entered disabled state
[  141.507070][   T10] device bridge_slave_1 left promiscuous mode
[  141.513073][   T10] bridge0: port 2(bridge_slave_1) entered disabled state
[  141.520982][   T10] device veth1_macvtap left promiscuous mode
[  141.526797][   T10] device veth0_vlan left promiscuous mode
[  141.532750][   T10] device veth1_macvtap left promiscuous mode
[  141.538615][   T10] device veth0_vlan left promiscuous mode