last executing test programs:

15.50954056s ago: executing program 1 (id=51):
r0 = memfd_create(&(0x7f0000000180)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3', 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x18)
r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r2, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
close_range(r0, 0xffffffffffffffff, 0x0)

15.499116181s ago: executing program 1 (id=52):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x40, 0x6, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0)
read$FUSE(r1, &(0x7f0000002300)={0x2020}, 0x2020)
r2 = dup(r1)
mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000cc0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}})

14.657445312s ago: executing program 1 (id=57):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/net/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd1l,'}, 0x30)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
fchdir(r0)

14.609190878s ago: executing program 1 (id=58):
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x8, &(0x7f00000005c0)={[{@errors_remount}, {}]}, 0x4, 0x4f3, &(0x7f00000012c0)="$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")
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x19010d5, 0x0)
creat(&(0x7f0000000040)='./bus\x00', 0x0)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
mount$bind(&(0x7f0000000180)='.\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x94d510, 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x104000, 0x0)

14.469288285s ago: executing program 1 (id=59):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r1}, 0x10)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)

14.25495272s ago: executing program 1 (id=60):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x7, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0, <r1=>0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00', r2}, 0x10)
r3 = socket$packet(0x11, 0x2, 0x300)
fcntl$lock(r3, 0x5, &(0x7f0000000040)={0x2, 0x4, 0x0, 0xc, 0xffffffffffffffff})

14.25481024s ago: executing program 32 (id=60):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x7, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0, <r1=>0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00', r2}, 0x10)
r3 = socket$packet(0x11, 0x2, 0x300)
fcntl$lock(r3, 0x5, &(0x7f0000000040)={0x2, 0x4, 0x0, 0xc, 0xffffffffffffffff})

8.762613109s ago: executing program 5 (id=171):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x24, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000140)='mm_page_alloc\x00', r0}, 0x10)
sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x24040880}, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r1, 0x800448d2, &(0x7f0000000100))

8.713805575s ago: executing program 5 (id=172):
unshare(0x4000400)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = syz_pidfd_open(r0, 0x0)
waitid$P_PIDFD(0x3, r1, 0x0, 0x4, 0x0)
process_mrelease(r1, 0x0)

8.662794501s ago: executing program 5 (id=174):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1802000000090001000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
syz_mount_image$f2fs(&(0x7f00000004c0), &(0x7f0000000040)='./bus\x00', 0x2008410, &(0x7f0000001f80)=ANY=[@ANYBLOB="66617374626f6f742c71756f7461000000000000003b814e50a959736d65720f73ecea54b5e5be45ace9a88f723cb005aeff24212c651baef614d442ae89412ad3dcd0b7586d02002a6d6d65cacd4fc5002207ce994dda65c4b1d23a9bd5ba0f4ce5c2b5a5718c6aa918080002223d2753a5cac974110144cd0a1e368652324a41b31e1eb3b32dccbdf8f68bd96a45a75427a5f789d267fd92f6a5540200b81d5b9fa9b40fe4d7fbd50a6afc3a989c6d60045663c59cbdc4c700000000bc7f6b22df0191acf5912afdcc1c061835177068c40f757dd123d2600b1c544f1525aa8d00000000000000000000002e8b5c733d362417c17f527c0bfebec112d57fc69fabb9b31ef97b2147931ff60cdf666c25244218b1f1a6010000000100000020563b835d0e8e9a09070ef1691fcb2f37bda5d4e3d9d7a2d0ac82b45a53001057f321acc45d5e065a461de90100000077d200000000000040b78f0dd3836f5ab2f6a1a5b798bb7752f192c6b48e568973a59cd9c74bd9a14721856c5499cd8f93f8beaa9cf76718ce7244c8426803000000005c000208886b313bd01a22d576e414011a4f0a897515329f86d4585fa0ea17068f8af349696da4a2b3e24310ca52ec51bc23b57897cb55a2d513e6a00765ee3f58b471c54dd57f0af584afe4a21f92b515d7f2fa6fbb273ca0f751e684584320534667aea39ad7222c8ef531f514939177a47395e94c1723abb3fd44fd64fde4b45cc2f55f4ae05ff48648a4c998257856bcdcf2fa02010000001f54fb936570450e91c8d55abad76a7b7a000016f81ec9da9ccc1191c211632266d907e4d9b23496ae19bac24dc23c43f514f1b4af19988bbe61ee29a368a999435d6872d01b79c7821e875859dfbf3c57e4f1fb0be46cb5f7a0fa13516c0926d19dd2d5862085e1e4cb8279be17cba17ee4d06ad97b4ca282e73ea142b01b4a742fa11c0927ba811dd60903d575db449d775021b542db617086b3ed42e6e60fe043cff79b0c067c584bbf82657974c3736912b4b522052b9467d0da116ccc1652d861a420f09aaf67d3e9f6160100000001000000ae6335ad9896abd3cc00413638cb9bc62ab8054325d72e9144cf4f88702f586507e3147198e0bc4060a7c8f4dce73b653177ecf8228e6e6fae02510000000000000000000000000000f43739fdd2d24e50e0233acfe1c8639070fe00f40b0d01f8a0a35fcfe3ea10faf9c24b8488ed4ed83fb06a9a7c57442ede9e1fc2853b8f4d2241cff61d0125b7750e3fdae6a4ab9c776a191ed8098a780ea2bbaa64978cd3a6458fcc6b949bcbca0dceb7361f66e46731eba4f3aed335e7c8c541e82453218a19d39489e1525466ac93759787e767f601931d94c9c426489b741a6bc8abf475e4bf859e1ce7f7227069e9f51e25fa3d1b18dc565180a1af464a1dd697db85e2b27b90f6bd7cf1b6bc0bcd8ba552ced3d3cfbf9c9bc04f65b6f83cb40173b4bdc393d47e5da95b63a40ac18daf11e8d0706b47795fbe2b56d0ea7ffc5a59ede88621a08b25ca6ebe041317b62373a60951af33eb7954a9731aaa125add0913ed2435a207439e9122512d77096747a4b404459cebc8faff8f7a31758e630c75a1ff90402754d339dc21cf6b8e04e1aedf14df0b4aaf0e03194df3eb41ba066bc343b323a3162d7e7ba687633c2faa8f28b42364b72e3a457476fd6b2a54e670ba798172c44c4390f73fdab743a4cac88b2bd0545b8483f2e2f9846b138a4d8a7332978da70e9050417087c5ae034a735e8b448dd9701404", @ANYRESDEC], 0x1, 0x553b, &(0x7f000000ac00)="$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")
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000280)='f2fs_write_checkpoint\x00', r1}, 0x10)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)

8.492032011s ago: executing program 5 (id=180):
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x3000010, &(0x7f0000000080), 0x1, 0x513, &(0x7f00000010c0)="$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")
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x0, 0x0)
close_range(r1, 0xffffffffffffffff, 0x0)

8.037133246s ago: executing program 5 (id=183):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r2}, 0x10)
ioctl$HCIINQUIRY(r0, 0x800448d4, &(0x7f0000000080)={0x0, 0x200, "00fa00"})

7.933347479s ago: executing program 5 (id=184):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000140), 0x1003}, 0x6d)

7.914531331s ago: executing program 33 (id=184):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000140), 0x1003}, 0x6d)

6.155006662s ago: executing program 0 (id=215):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x1, 0x5, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10)
r2 = socket$nl_generic(0x11, 0x3, 0x10)
syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr, @multicast1}, @address_request}}}}, 0x0)
sendmsg(r2, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x2c, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x3e}], 0x2, 0x0, 0x0, 0x11000000}, 0x0)

6.154558512s ago: executing program 0 (id=217):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='ext4_request_blocks\x00', r0}, 0x10)
r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8)
close(r2)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000240)={r3, r2, 0x7, 0x0, @void}, 0x10)

6.154419442s ago: executing program 0 (id=218):
syz_io_uring_setup(0x239, 0x0, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x8140aecc, &(0x7f0000000140))
r0 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000640)=ANY=[@ANYBLOB="12010000090000402505a8a440000102030109021b00010100000009040000020701010009050102"], 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000000)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0xfffffffffffffc4a}})
syz_open_dev$char_usb(0xc, 0xb4, 0x0)

4.028401777s ago: executing program 0 (id=234):
syz_emit_ethernet(0x3e, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff080047000030000000000006907800000000e00000018608ffffffff0002"], 0x0)
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000400)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1}, 0x10)
setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, 0x0, 0x0)
syz_usb_connect(0x0, 0x41, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000e518a708ac0501859d200000690109022f00010000000009040000000e010000152403"], 0x0)

3.651500792s ago: executing program 3 (id=244):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000001b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
unshare(0x600)
r1 = socket(0x10, 0x3, 0x0)
flistxattr(r1, 0x0, 0x0)

3.629621754s ago: executing program 3 (id=246):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402609333340000000000109022400010000000009040000010301010009210000000122010009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000800000000000000000001801000020bd342100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10)
syz_usb_control_io(r0, &(0x7f00000011c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000002"], 0x0, 0x0, 0x0, 0x0}, 0x0)

2.469368044s ago: executing program 0 (id=254):
r0 = getpid()
r1 = syz_pidfd_open(r0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
close_range(r1, 0xffffffffffffffff, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000a00)=ANY=[@ANYBLOB="120100007856bb40da0b53813de2010203010902"], 0x0)
ioctl$BTRFS_IOC_ADD_DEV(r1, 0x40095505, &(0x7f00000000c0)={{}, "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"})

1.701709836s ago: executing program 3 (id=260):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000001e00100000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000fcffffffb702000004000000b7030000000000de850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6}]}, 0x10)
bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
syz_emit_ethernet(0x36, &(0x7f0000000280)={@local, @link_local, @val, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0)

1.618898046s ago: executing program 3 (id=261):
syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000002140)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x3}}]}, 0x0, 0x473, &(0x7f00000004c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0)
ioctl$FS_IOC_ENABLE_VERITY(r0, 0x8004587d, &(0x7f0000000140)={0x2, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0})
chdir(&(0x7f0000000040)='./file0\x00')
r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
getdents(r1, 0x0, 0x0)

1.488703942s ago: executing program 3 (id=266):
syz_emit_ethernet(0x5e, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaa"], 0x0)
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x1000004, &(0x7f0000000300)=ANY=[@ANYBLOB='shortname=lower,iocharset=iso8859-1,fmask=00000000000000000000066,uni_xlate=1,uni_xlate=0,fmask=00000000000000000000003,uid=', @ANYRESHEX=0x0, @ANYBLOB=',uni_xlate=0,utf8=1,check=strict,nonumtail=0,rodir,errors=continue,shortname=lower,umaQk=00000000000000000000007,rodir,sys_immutable,\x00'], 0x6, 0x2ba, &(0x7f0000000640)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r0, &(0x7f0000000040)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)

1.442436977s ago: executing program 4 (id=270):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000600)={{r0}, &(0x7f0000000580), &(0x7f00000005c0)='%pK    \x00'}, 0x20)
r2 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0)
write$selinux_validatetrans(r2, &(0x7f0000000b40)=ANY=[@ANYBLOB="737973746528b7f3fce9300f01723a6d61746c5f73706f6f065f743a73302073797374656d5f753a6f626a6563657669633a73302030303030303030303030303030303030303030372073"], 0x4c)

1.42145115s ago: executing program 4 (id=272):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xa, 0x3, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
futimesat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x0)

1.378530925s ago: executing program 4 (id=275):
syz_emit_ethernet(0x2a, &(0x7f0000000140)={@local, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x8}}}}}, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x49, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, <r1=>0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10)
syz_emit_ethernet(0x6a, &(0x7f0000000080)={@random="e90c630faca2", @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0xe000, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x4, "c8a397ea4c0969dc13b5cd3768a2aa863dbc2c067d120bce", "3c3b51c4b8495052c0f34ae2a5a088b2894c5f0e68d10af14fa5802972915e99"}}}}}}, 0x0)

1.378318575s ago: executing program 4 (id=276):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x7, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000400)=@generic={&(0x7f00000003c0)='.\x00', r2}, 0x18)

1.369110236s ago: executing program 3 (id=277):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000401e04012810000000000109022400010000000009040000020300000009210000000122050009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x7, &(0x7f0000000540)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10)
syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="0000f0"], 0x0, 0x0, 0x0, 0x0}, 0x0)

1.271027137s ago: executing program 4 (id=279):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000080), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r0, 0x0)
mmap(&(0x7f0000048000/0x1000)=nil, 0x1000, 0x6, 0x31, 0xffffffffffffffff, 0x0)
futex(&(0x7f000000cffc)=0x4, 0xb, 0x4, 0x0, &(0x7f0000000500), 0x0)
futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0)

1.232947132s ago: executing program 2 (id=280):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
syslog(0x2, &(0x7f0000001a40)=""/4096, 0xbc8)

845.750798ms ago: executing program 0 (id=281):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES16], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b40)={&(0x7f0000000600)='kfree\x00', r1}, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220f000000a3013528e0c30c"], 0x0}, 0x0)

587.017769ms ago: executing program 2 (id=282):
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="f53d9b43fcfa6ca290a353d9184958c2c78fb91e", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10)
pivot_root(&(0x7f0000000280)='.\x00', &(0x7f00000003c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00')

586.72073ms ago: executing program 2 (id=283):
io_setup(0x3, &(0x7f0000000180)=<r0=>0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
r2 = eventfd(0x0)
r3 = socket$packet(0x11, 0x2, 0x300)
io_submit(r0, 0x2, &(0x7f0000000840)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000300)="13088df100c1024288cef1d96c6dda37e091d155e367d5fb33b17472580e3fb17c0bccd988c21266386d15766050252b8bce5db7dfac4be01c37cd16441e98ddc9374444394ee738", 0x48, 0x0, 0x0, 0x1, r2}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x1}])

512.777048ms ago: executing program 2 (id=284):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xa, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000500)=ANY=[@ANYBLOB="05"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x100, 0x100, 0x9, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0xcff5, r0}, 0x38)
bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500), 0x0, 0x2, r0, 0x0, 0x100000000000000}, 0x38)

505.219449ms ago: executing program 2 (id=285):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x0, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000540)=ANY=[@ANYBLOB="01000000000000000a0000000000000000000000ff"])
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000340)=ANY=[@ANYBLOB="01000000000000004503"])

438.985878ms ago: executing program 2 (id=286):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0022220000009603000700000000070c00000016b8ef0a1a7083000000000b0000170083de"], 0x0}, 0x0)
socket$key(0xf, 0x3, 0x2)
quotactl$Q_GETINFO(0xffffffff80000500, 0x0, 0x0, 0x0)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000000)='B')

438.707808ms ago: executing program 4 (id=287):
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0)
r0 = socket(0x1e, 0x5, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10)
pipe2$9p(&(0x7f0000000240)={<r1=>0xffffffffffffffff}, 0x0)
r2 = dup(r0)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})

327.9347ms ago: executing program 6 (id=292):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x200000, &(0x7f0000000c80)={[{@noauto_da_alloc}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@dioread_lock}, {@jqfmt_vfsv0}, {@discard}, {@lazytime}, {@noacl}, {@usrquota}, {@noauto_da_alloc}]}, 0xfe, 0x54d, &(0x7f0000000400)="$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")
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events.local\x00', 0x275a, 0x0)
write$binfmt_misc(r1, &(0x7f0000000480), 0xed)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0)
getsockopt$inet6_buf(r0, 0x29, 0x30, 0x0, &(0x7f0000000080))

236.158452ms ago: executing program 6 (id=293):
r0 = getpid()
r1 = syz_pidfd_open(r0, 0x0)
setns(r1, 0x24020000)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000300)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000440)='kmem_cache_free\x00', r2}, 0x10)
syz_clone3(&(0x7f00000008c0)={0x14840000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000880)=[0x0], 0x1}, 0x58)

63.356692ms ago: executing program 6 (id=294):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000300)={{r0, <r1=>0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000180)='%pS    \x00'}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r1}, 0x4)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000c40)='sys_enter\x00', r2}, 0x10)
statx(0xffffffffffffffff, 0x0, 0x400, 0x8, 0x0)

63.154232ms ago: executing program 6 (id=295):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
getpid()
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg$unix(r0, &(0x7f0000000540)={&(0x7f0000000180)=@abs={0x1, 0x0, 0x4e21}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x35c556aae2ce9086}, 0x40800)

62.993933ms ago: executing program 6 (id=296):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f00000003c0)=[@increfs], 0x0, 0x0, 0x0})
dup3(r1, r0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x10, 0x0, &(0x7f00000002c0)=[@request_death={0x400c6313}], 0x0, 0x0, 0x0})

0s ago: executing program 6 (id=297):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000700)=[@text32={0x20, &(0x7f0000000000)="440f20c0350c000000440f22c00f2b4c83d3c4c17d50ed260f01f226f30fa7e866ba430066b8a3aa66ef0f98b386000000262e0fc77e4e66ba2000ed660fd8fe", 0x40}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.1.133' (ED25519) to the list of known hosts.
[   19.865020][   T30] audit: type=1400 audit(1730338262.983:66): avc:  denied  { integrity } for  pid=279 comm="syz-executor" lockdown_reason="debugfs access" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=lockdown permissive=1
[   19.888313][   T30] audit: type=1400 audit(1730338263.013:67): avc:  denied  { mounton } for  pid=279 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[   19.889432][  T279] cgroup: Unknown subsys name 'net'
[   19.911220][   T30] audit: type=1400 audit(1730338263.013:68): avc:  denied  { mount } for  pid=279 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   19.937750][   T30] audit: type=1400 audit(1730338263.033:69): avc:  denied  { unmount } for  pid=279 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   19.937892][  T279] cgroup: Unknown subsys name 'devices'
[   20.108156][  T279] cgroup: Unknown subsys name 'hugetlb'
[   20.113584][  T279] cgroup: Unknown subsys name 'rlimit'
[   20.245067][   T30] audit: type=1400 audit(1730338263.363:70): avc:  denied  { setattr } for  pid=279 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=250 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   20.268083][   T30] audit: type=1400 audit(1730338263.363:71): avc:  denied  { mounton } for  pid=279 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1
[   20.292576][   T30] audit: type=1400 audit(1730338263.363:72): avc:  denied  { mount } for  pid=279 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1
[   20.298245][  T282] SELinux:  Context root:object_r:swapfile_t is not valid (left unmapped).
Setting up swapspace version 1, size = 127995904 bytes
[   20.324174][   T30] audit: type=1400 audit(1730338263.443:73): avc:  denied  { relabelto } for  pid=282 comm="mkswap" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   20.349451][   T30] audit: type=1400 audit(1730338263.443:74): avc:  denied  { write } for  pid=282 comm="mkswap" path="/root/swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   20.378085][   T30] audit: type=1400 audit(1730338263.503:75): avc:  denied  { read } for  pid=279 comm="syz-executor" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   20.403746][  T279] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   20.804641][  T291] bridge0: port 1(bridge_slave_0) entered blocking state
[   20.811604][  T291] bridge0: port 1(bridge_slave_0) entered disabled state
[   20.818802][  T291] device bridge_slave_0 entered promiscuous mode
[   20.833984][  T289] bridge0: port 1(bridge_slave_0) entered blocking state
[   20.840878][  T289] bridge0: port 1(bridge_slave_0) entered disabled state
[   20.848058][  T289] device bridge_slave_0 entered promiscuous mode
[   20.854651][  T289] bridge0: port 2(bridge_slave_1) entered blocking state
[   20.861556][  T289] bridge0: port 2(bridge_slave_1) entered disabled state
[   20.868663][  T289] device bridge_slave_1 entered promiscuous mode
[   20.874954][  T291] bridge0: port 2(bridge_slave_1) entered blocking state
[   20.881870][  T291] bridge0: port 2(bridge_slave_1) entered disabled state
[   20.888955][  T291] device bridge_slave_1 entered promiscuous mode
[   20.973387][  T293] bridge0: port 1(bridge_slave_0) entered blocking state
[   20.980312][  T293] bridge0: port 1(bridge_slave_0) entered disabled state
[   20.987495][  T293] device bridge_slave_0 entered promiscuous mode
[   21.005258][  T293] bridge0: port 2(bridge_slave_1) entered blocking state
[   21.012145][  T293] bridge0: port 2(bridge_slave_1) entered disabled state
[   21.019343][  T293] device bridge_slave_1 entered promiscuous mode
[   21.035487][  T290] bridge0: port 1(bridge_slave_0) entered blocking state
[   21.042353][  T290] bridge0: port 1(bridge_slave_0) entered disabled state
[   21.049597][  T290] device bridge_slave_0 entered promiscuous mode
[   21.068034][  T290] bridge0: port 2(bridge_slave_1) entered blocking state
[   21.074904][  T290] bridge0: port 2(bridge_slave_1) entered disabled state
[   21.082212][  T290] device bridge_slave_1 entered promiscuous mode
[   21.138176][  T292] bridge0: port 1(bridge_slave_0) entered blocking state
[   21.145025][  T292] bridge0: port 1(bridge_slave_0) entered disabled state
[   21.152400][  T292] device bridge_slave_0 entered promiscuous mode
[   21.170751][  T292] bridge0: port 2(bridge_slave_1) entered blocking state
[   21.177652][  T292] bridge0: port 2(bridge_slave_1) entered disabled state
[   21.184837][  T292] device bridge_slave_1 entered promiscuous mode
[   21.246066][  T291] bridge0: port 2(bridge_slave_1) entered blocking state
[   21.252948][  T291] bridge0: port 2(bridge_slave_1) entered forwarding state
[   21.260047][  T291] bridge0: port 1(bridge_slave_0) entered blocking state
[   21.266822][  T291] bridge0: port 1(bridge_slave_0) entered forwarding state
[   21.275921][  T289] bridge0: port 2(bridge_slave_1) entered blocking state
[   21.282785][  T289] bridge0: port 2(bridge_slave_1) entered forwarding state
[   21.289868][  T289] bridge0: port 1(bridge_slave_0) entered blocking state
[   21.296673][  T289] bridge0: port 1(bridge_slave_0) entered forwarding state
[   21.329961][  T293] bridge0: port 2(bridge_slave_1) entered blocking state
[   21.336823][  T293] bridge0: port 2(bridge_slave_1) entered forwarding state
[   21.343907][  T293] bridge0: port 1(bridge_slave_0) entered blocking state
[   21.350724][  T293] bridge0: port 1(bridge_slave_0) entered forwarding state
[   21.394538][   T45] bridge0: port 1(bridge_slave_0) entered disabled state
[   21.401685][   T45] bridge0: port 2(bridge_slave_1) entered disabled state
[   21.409087][   T45] bridge0: port 1(bridge_slave_0) entered disabled state
[   21.416093][   T45] bridge0: port 2(bridge_slave_1) entered disabled state
[   21.423408][   T45] bridge0: port 1(bridge_slave_0) entered disabled state
[   21.430432][   T45] bridge0: port 2(bridge_slave_1) entered disabled state
[   21.438815][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   21.446009][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   21.459916][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   21.467978][   T45] bridge0: port 1(bridge_slave_0) entered blocking state
[   21.474815][   T45] bridge0: port 1(bridge_slave_0) entered forwarding state
[   21.508694][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   21.517282][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   21.525320][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   21.532747][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   21.540103][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   21.548112][   T45] bridge0: port 2(bridge_slave_1) entered blocking state
[   21.555364][   T45] bridge0: port 2(bridge_slave_1) entered forwarding state
[   21.562573][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   21.570585][   T45] bridge0: port 1(bridge_slave_0) entered blocking state
[   21.577430][   T45] bridge0: port 1(bridge_slave_0) entered forwarding state
[   21.584549][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   21.592627][   T45] bridge0: port 2(bridge_slave_1) entered blocking state
[   21.599529][   T45] bridge0: port 2(bridge_slave_1) entered forwarding state
[   21.606647][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   21.614346][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   21.623390][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   21.631398][   T45] bridge0: port 1(bridge_slave_0) entered blocking state
[   21.638243][   T45] bridge0: port 1(bridge_slave_0) entered forwarding state
[   21.647978][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   21.655770][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   21.667568][  T293] device veth0_vlan entered promiscuous mode
[   21.682104][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   21.690004][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   21.697541][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   21.704689][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   21.712845][    T8] bridge0: port 2(bridge_slave_1) entered blocking state
[   21.719707][    T8] bridge0: port 2(bridge_slave_1) entered forwarding state
[   21.735258][  T293] device veth1_macvtap entered promiscuous mode
[   21.746309][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   21.756287][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   21.772473][  T289] device veth0_vlan entered promiscuous mode
[   21.786016][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   21.794448][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   21.802428][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   21.809960][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   21.817681][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   21.825381][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   21.833297][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   21.841653][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   21.862767][  T289] device veth1_macvtap entered promiscuous mode
[   21.872703][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   21.881183][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   21.889196][    T8] bridge0: port 1(bridge_slave_0) entered blocking state
[   21.896011][    T8] bridge0: port 1(bridge_slave_0) entered forwarding state
[   21.903341][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   21.911391][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   21.919473][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   21.927109][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   21.935122][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   21.943381][    T8] bridge0: port 2(bridge_slave_1) entered blocking state
[   21.950218][    T8] bridge0: port 2(bridge_slave_1) entered forwarding state
[   21.957581][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   21.983441][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   21.991480][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   21.999573][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   22.007750][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   22.015475][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   22.023692][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   22.031936][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   22.039267][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   22.046528][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   22.054557][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   22.062827][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   22.071266][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   22.079470][   T10] bridge0: port 1(bridge_slave_0) entered blocking state
[   22.086306][   T10] bridge0: port 1(bridge_slave_0) entered forwarding state
[   22.093564][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   22.101764][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   22.109818][   T10] bridge0: port 2(bridge_slave_1) entered blocking state
[   22.116650][   T10] bridge0: port 2(bridge_slave_1) entered forwarding state
[   22.124044][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   22.154744][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   22.164242][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   22.172711][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   22.181483][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   22.191066][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   22.199287][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   22.207454][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   22.215513][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   22.223971][  T316] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3
[   22.225766][  T291] device veth0_vlan entered promiscuous mode
[   22.248398][  T290] device veth0_vlan entered promiscuous mode
[   22.256039][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   22.267535][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   22.282832][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   22.292598][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   22.301972][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   22.309663][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   22.317351][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   22.325022][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   22.340194][  T290] device veth1_macvtap entered promiscuous mode
[   22.348430][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   22.356769][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   22.364815][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   22.375376][  T291] device veth1_macvtap entered promiscuous mode
[   22.392707][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   22.401124][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   22.409332][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   22.417447][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   22.425675][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   22.434834][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   22.443145][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   22.451565][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   22.459784][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   22.470705][  T292] device veth0_vlan entered promiscuous mode
[   22.484948][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   22.492848][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   22.503873][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   22.511998][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   22.538029][  T312] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   22.546789][  T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   22.555132][  T312] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   22.563489][  T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   22.577005][  T292] device veth1_macvtap entered promiscuous mode
[   22.587642][  T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   22.597069][  T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   22.598364][  T335] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   22.605107][  T312] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   22.656518][  T312] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   22.683425][  T341] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4'.
[   22.701461][  T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   22.719268][  T312] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   22.733008][  T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   22.890579][  T372] loop4: detected capacity change from 0 to 2048
[   22.978327][  T372] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[   22.996658][   T20] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   23.004353][  T311] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   23.004689][    T8] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[   23.027372][    T8] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28
[   23.040183][    T8] EXT4-fs (loop4): This should not happen!! Data will be lost
[   23.040183][    T8] 
[   23.049770][    T8] EXT4-fs (loop4): Total free blocks count 0
[   23.055563][    T8] EXT4-fs (loop4): Free/Dirty block details
[   23.061372][    T8] EXT4-fs (loop4): free_blocks=2415919104
[   23.067135][    T8] EXT4-fs (loop4): dirty_blocks=16
[   23.072142][    T8] EXT4-fs (loop4): Block reservation details
[   23.078139][    T8] EXT4-fs (loop4): i_reserved_data_blocks=1
[   23.266550][  T311] usb 3-1: Using ep0 maxpacket: 16
[   23.366705][  T350] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   23.386625][  T311] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   23.386693][   T26] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   23.397449][  T311] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[   23.417390][   T20] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[   23.428230][  T378] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   23.435544][  T311] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[   23.444456][   T20] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   23.455169][  T311] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   23.462981][   T20] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   23.472827][   T20] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[   23.485849][  T311] usb 3-1: config 0 descriptor??
[   23.566633][   T20] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[   23.575538][   T20] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[   23.583476][   T20] usb 4-1: Manufacturer: syz
[   23.588599][   T20] usb 4-1: config 0 descriptor??
[   23.626575][  T350] usb 2-1: Using ep0 maxpacket: 16
[   23.746733][  T350] usb 2-1: config 0 has no interfaces?
[   23.758928][   T26] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   23.769989][   T26] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   23.779564][   T26] usb 5-1: New USB device found, idVendor=1532, idProduct=011d, bcdDevice= 0.00
[   23.788425][   T26] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   23.796690][  T378] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   23.798893][   T26] usb 5-1: config 0 descriptor??
[   23.807873][  T378] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   23.896796][  T378] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00
[   23.905714][  T378] usb 1-1: New USB device strings: Mfr=0, Product=9, SerialNumber=0
[   23.913500][  T378] usb 1-1: Product: syz
[   23.918289][  T378] usb 1-1: config 0 descriptor??
[   23.936593][  T350] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[   23.945498][  T350] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   23.953462][  T350] usb 2-1: Product: syz
[   23.962940][  T311] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0001/input/input4
[   23.974552][  T350] usb 2-1: Manufacturer: syz
[   23.979012][  T350] usb 2-1: SerialNumber: syz
[   23.983946][  T350] r8152-cfgselector 2-1: config 0 descriptor??
[   24.048167][  T311] microsoft 0003:045E:07DA.0001: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0
[   24.060774][   T20] appleir 0003:05AC:8243.0002: unknown main item tag 0x0
[   24.069533][   T20] appleir 0003:05AC:8243.0002: No inputs registered, leaving
[   24.078470][   T20] appleir 0003:05AC:8243.0002: hiddev96,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0
[   24.236594][  T350] r8152-cfgselector 2-1: Unknown version 0x0000
[   24.244298][  T350] r8152-cfgselector 2-1: USB disconnect, device number 2
[   24.287393][   T26] hid-rmi 0003:1532:011D.0003: item fetching failed at offset 5/7
[   24.295312][   T26] hid-rmi 0003:1532:011D.0003: parse failed
[   24.301053][   T26] hid-rmi: probe of 0003:1532:011D.0003 failed with error -22
[   24.373073][   T20] usb 3-1: USB disconnect, device number 2
[   24.387267][  T378] konepure 0003:1E7D:2DB4.0004: item fetching failed at offset 10/11
[   24.396185][  T378] konepure 0003:1E7D:2DB4.0004: parse failed
[   24.402502][  T378] konepure: probe of 0003:1E7D:2DB4.0004 failed with error -22
[   24.503735][   T26] usb 5-1: USB disconnect, device number 2
[   24.592681][  T378] usb 1-1: USB disconnect, device number 2
[   24.745063][  T399] syz.1.32[399] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   24.745132][  T399] syz.1.32[399] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   24.951642][   T30] kauditd_printk_skb: 70 callbacks suppressed
[   24.951656][   T30] audit: type=1400 audit(1730338268.073:146): avc:  denied  { unmount } for  pid=290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1
[   25.000930][  T408] loop2: detected capacity change from 0 to 512
[   25.065224][  T412] Zero length message leads to an empty skb
[   25.076815][  T408] =======================================================
[   25.076815][  T408] WARNING: The mand mount option has been deprecated and
[   25.076815][  T408]          and is ignored by this kernel. Remove the mand
[   25.076815][  T408]          option from the mount to silence this warning.
[   25.076815][  T408] =======================================================
[   25.136371][   T30] audit: type=1400 audit(1730338268.253:147): avc:  denied  { write } for  pid=415 comm="syz.0.39" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   25.162280][  T408] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   25.188385][  T408] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.35: bg 0: block 131: padding at end of block bitmap is not set
[   25.216587][  T408] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6185: Corrupt filesystem
[   25.225039][  T402] syz.1.33 (402) used greatest stack depth: 20560 bytes left
[   25.233046][  T408] EXT4-fs (loop2): 1 truncate cleaned up
[   25.246024][  T408] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[   25.279958][   T30] audit: type=1400 audit(1730338268.403:148): avc:  denied  { write } for  pid=426 comm="syz.1.45" path="socket:[16673]" dev="sockfs" ino=16673 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   25.315435][  T429] loop2: detected capacity change from 0 to 8192
[   25.399182][   T30] audit: type=1400 audit(1730338268.523:149): avc:  denied  { name_bind } for  pid=428 comm="syz.2.44" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1
[   25.456554][   T20] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[   25.506669][  T378] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[   25.736503][   T20] usb 1-1: Using ep0 maxpacket: 8
[   25.806574][  T311] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[   25.866615][   T20] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   25.916701][  T378] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   25.927523][  T378] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   25.937129][  T378] usb 5-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00
[   25.947266][  T378] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   25.955712][  T378] usb 5-1: config 0 descriptor??
[   25.986637][   T20] usb 1-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d
[   25.995672][   T20] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105
[   26.003725][   T20] usb 1-1: SerialNumber: syz
[   26.009379][   T20] usb 1-1: config 0 descriptor??
[   26.057018][   T20] usb 1-1: Found UVC 0.00 device <unnamed> (05ac:8501)
[   26.063796][   T20] uvcvideo 1-1:0.0: Entity type for entity Output 255 was not initialized!
[   26.072203][   T20] usb 1-1: Failed to create links for entity 255
[   26.078393][   T20] usb 1-1: Failed to register entities (-22).
[   26.236701][  T311] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   26.247472][  T311] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   26.257119][  T311] usb 3-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00
[   26.259993][  T331] usb 1-1: USB disconnect, device number 3
[   26.266018][  T311] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   26.266980][  T311] usb 3-1: config 0 descriptor??
[   26.286528][  T350] usb 4-1: reset high-speed USB device number 2 using dummy_hcd
[   26.326666][  T350] usb 4-1: device reset changed ep0 maxpacket size!
[   26.336543][   T39] usb 4-1: USB disconnect, device number 2
[   26.379750][  T461] loop1: detected capacity change from 0 to 512
[   26.426776][  T378] hid (null): report_id 1388856143 is invalid
[   26.433360][  T378] hid-led 0003:27B8:01ED.0005: report_id 1388856143 is invalid
[   26.442334][  T378] hid-led 0003:27B8:01ED.0005: item 0 4 1 8 parsing failed
[   26.449755][  T378] hid-led: probe of 0003:27B8:01ED.0005 failed with error -22
[   26.458443][  T461] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,bsddf,. Quota mode: writeback.
[   26.470064][  T461] ext4 filesystem being mounted at /26/file0 supports timestamps until 2038 (0x7fffffff)
[   26.488796][   T30] audit: type=1400 audit(1730338269.613:150): avc:  denied  { mounton } for  pid=460 comm="syz.1.58" path="/26/file0/file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   26.516474][   T39] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[   26.517724][   T30] audit: type=1400 audit(1730338269.613:151): avc:  denied  { write } for  pid=460 comm="syz.1.58" path="/26/file0/bus" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   26.546179][   T30] audit: type=1400 audit(1730338269.613:152): avc:  denied  { mounton } for  pid=460 comm="syz.1.58" path="/26/file0/bus" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   26.568712][   T30] audit: type=1400 audit(1730338269.643:153): avc:  denied  { remove_name } for  pid=293 comm="syz-executor" name=6C6F73742B0F6F756E64 dev="loop1" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   26.593570][   T30] audit: type=1400 audit(1730338269.643:154): avc:  denied  { rmdir } for  pid=293 comm="syz-executor" name=6C6F73742B0F6F756E64 dev="loop1" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   26.629849][   T20] usb 5-1: USB disconnect, device number 3
[   26.766599][   T39] usb 4-1: Using ep0 maxpacket: 16
[   26.767491][  T311] sony 0003:054C:0268.0006: unknown main item tag 0x0
[   26.778482][  T311] sony 0003:054C:0268.0006: item fetching failed at offset 1/5
[   26.786030][  T311] sony 0003:054C:0268.0006: parse failed
[   26.791617][  T311] sony: probe of 0003:054C:0268.0006 failed with error -22
[   26.804081][  T466] bridge0: port 1(bridge_slave_0) entered blocking state
[   26.810953][  T466] bridge0: port 1(bridge_slave_0) entered disabled state
[   26.818051][  T466] device bridge_slave_0 entered promiscuous mode
[   26.824690][  T466] bridge0: port 2(bridge_slave_1) entered blocking state
[   26.831664][  T466] bridge0: port 2(bridge_slave_1) entered disabled state
[   26.839181][  T466] device bridge_slave_1 entered promiscuous mode
[   26.886607][   T39] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7
[   26.888987][  T466] bridge0: port 2(bridge_slave_1) entered blocking state
[   26.897502][   T39] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0
[   26.904053][  T466] bridge0: port 2(bridge_slave_1) entered forwarding state
[   26.920638][  T466] bridge0: port 1(bridge_slave_0) entered blocking state
[   26.927414][  T466] bridge0: port 1(bridge_slave_0) entered forwarding state
[   26.954209][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   26.961979][    T8] bridge0: port 1(bridge_slave_0) entered disabled state
[   26.969654][    T8] bridge0: port 2(bridge_slave_1) entered disabled state
[   26.989092][  T312] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   27.005454][  T311] usb 3-1: USB disconnect, device number 3
[   27.008086][  T312] bridge0: port 1(bridge_slave_0) entered blocking state
[   27.017998][  T312] bridge0: port 1(bridge_slave_0) entered forwarding state
[   27.033659][  T312] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   27.042917][  T312] bridge0: port 2(bridge_slave_1) entered blocking state
[   27.049801][  T312] bridge0: port 2(bridge_slave_1) entered forwarding state
[   27.065404][  T312] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   27.073386][  T312] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   27.076579][   T39] usb 4-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f
[   27.092394][   T39] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   27.103145][   T30] audit: type=1400 audit(1730338270.223:155): avc:  denied  { mounton } for  pid=478 comm="syz.0.65" path="/11/file0" dev="tmpfs" ino=72 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[   27.105134][   T39] usb 4-1: Product: syz
[   27.130677][   T39] usb 4-1: Manufacturer: syz
[   27.135362][   T39] usb 4-1: SerialNumber: syz
[   27.135889][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   27.140742][   T39] usb 4-1: config 0 descriptor??
[   27.153017][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   27.166065][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   27.174266][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   27.184260][  T466] device veth0_vlan entered promiscuous mode
[   27.191855][  T484] syz.0.67 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[   27.206801][   T39] hub 4-1:0.0: bad descriptor, ignoring hub
[   27.212529][   T39] hub: probe of 4-1:0.0 failed with error -5
[   27.280518][   T39] snd-usb-audio: probe of 4-1:0.0 failed with error -12
[   27.407177][  T329] device bridge_slave_1 left promiscuous mode
[   27.413232][  T329] bridge0: port 2(bridge_slave_1) entered disabled state
[   27.456923][  T329] device bridge_slave_0 left promiscuous mode
[   27.462873][  T329] bridge0: port 1(bridge_slave_0) entered disabled state
[   27.527828][  T329] device veth1_macvtap left promiscuous mode
[   27.533673][  T329] device veth0_vlan left promiscuous mode
[   28.907624][  T481] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   28.932026][  T481] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   28.938091][  T492] syz.4.71[492] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   28.939807][  T492] syz.4.71[492] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   28.969427][  T466] device veth1_macvtap entered promiscuous mode
[   29.010515][  T481] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   29.029096][  T481] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   29.045905][  T481] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   29.071785][  T481] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   29.086631][  T378] usb 4-1: USB disconnect, device number 3
[   29.183980][  T514] SELinux:  policydb version 0 does not match my version range 15-33
[   29.220801][  T514] SELinux: failed to load policy
[   29.283156][  T495] loop0: detected capacity change from 0 to 40427
[   29.341710][  T495] F2FS-fs (loop0): invalid crc value
[   29.360940][  T495] F2FS-fs (loop0): Found nat_bits in checkpoint
[   29.373113][  T534] binfmt_misc: register: failed to install interpreter file ./file0
[   29.447398][  T495] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[   29.529741][  T495] attempt to access beyond end of device
[   29.529741][  T495] loop0: rw=2049, want=45104, limit=40427
[   29.591384][  T567] loop4: detected capacity change from 0 to 1024
[   29.601952][  T289] attempt to access beyond end of device
[   29.601952][  T289] loop0: rw=2049, want=45112, limit=40427
[   29.647227][  T567] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option
[   29.686486][  T567] EXT4-fs (loop4): mounted filesystem without journal. Opts: noblock_validity,max_dir_size_kb=0x0000000000000003,sysvgroups,grpquota,debug_want_extra_isize=0x0000000000000080,user_xattr,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: writeback.
[   29.814167][  T582] loop0: detected capacity change from 0 to 256
[   29.863129][  T587] binfmt_misc: register: failed to install interpreter file ./bus/file0
[   29.886518][  T331] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[   30.009212][   T30] kauditd_printk_skb: 60 callbacks suppressed
[   30.009225][   T30] audit: type=1400 audit(1730338273.133:216): avc:  denied  { mount } for  pid=601 comm="syz.2.116" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1
[   30.047926][   T30] audit: type=1400 audit(1730338273.163:217): avc:  denied  { unmount } for  pid=601 comm="syz.2.116" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1
[   30.100903][   T30] audit: type=1400 audit(1730338273.223:218): avc:  denied  { write } for  pid=610 comm="syz.2.120" name="001" dev="devtmpfs" ino=177 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[   30.126151][  T611] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[   30.141293][   T30] audit: type=1400 audit(1730338273.243:219): avc:  denied  { unmount } for  pid=289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1
[   30.181911][  T615] process 'syz.0.121' launched './file0' with NULL argv: empty string added
[   30.202549][   T30] audit: type=1400 audit(1730338273.323:220): avc:  denied  { execute } for  pid=614 comm="syz.0.121" name="file0" dev="tmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[   30.236150][   T30] audit: type=1400 audit(1730338273.333:221): avc:  denied  { read } for  pid=618 comm="syz.2.124" name="uinput" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[   30.246561][  T331] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   30.259463][   T30] audit: type=1400 audit(1730338273.333:222): avc:  denied  { open } for  pid=618 comm="syz.2.124" path="/dev/uinput" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[   30.289859][  T331] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   30.302529][   T30] audit: type=1400 audit(1730338273.343:223): avc:  denied  { execute_no_trans } for  pid=614 comm="syz.0.121" path="/16/file0" dev="tmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[   30.317593][  T623] loop5: detected capacity change from 0 to 128
[   30.331686][  T331] usb 4-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00
[   30.340785][  T331] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   30.350023][  T331] usb 4-1: config 0 descriptor??
[   30.353393][  T623] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[   30.420848][  T631] 9pnet: p9_errstr2errno: server reported unknown error Ý@íÎhQI¸¥ŠteœkKzEËxÐBAšÁbà¹lpΆ²vxÝé*óÍDŽ‘àò}‘©Ù’ñ;5ÏÇ–3OŲ"
[   30.500133][  T639] netlink: 'syz.5.134': attribute type 1 has an invalid length.
[   30.506571][   T39] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[   30.507686][  T350] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[   30.507735][  T639] netlink: 'syz.5.134': attribute type 2 has an invalid length.
[   30.512426][  T639] netlink: 'syz.5.134': attribute type 1 has an invalid length.
[   30.537603][  T639] netlink: 'syz.5.134': attribute type 2 has an invalid length.
[   30.580661][   T30] audit: type=1400 audit(1730338273.703:224): avc:  denied  { create } for  pid=645 comm="syz.5.137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   30.600702][   T30] audit: type=1400 audit(1730338273.703:225): avc:  denied  { bind } for  pid=645 comm="syz.5.137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   30.716155][  T661] loop5: detected capacity change from 0 to 1024
[   30.756699][  T350] usb 1-1: Using ep0 maxpacket: 16
[   30.759430][  T661] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   30.816200][  T670] loop5: detected capacity change from 0 to 1024
[   30.836763][  T331] hid (null): unknown global tag 0xe
[   30.843059][  T670] EXT4-fs (loop5): Test dummy encryption mode enabled
[   30.850364][  T331] logitech-hidpp-device 0003:046D:C086.0007: unknown main item tag 0x0
[   30.854686][  T670] EXT4-fs (loop5): mounted filesystem without journal. Opts: test_dummy_encryption,debug_want_extra_isize=0x0000000000000008,stripe=0x0000000000000006,commit=0x0000000000000005,nouid32,inlinecrypt,discard,data_err=abort,,errors=continue. Quota mode: writeback.
[   30.858736][  T331] logitech-hidpp-device 0003:046D:C086.0007: unknown main item tag 0x0
[   30.891271][   T39] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   30.901204][   T39] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[   30.906547][  T350] usb 1-1: config 0 has an invalid interface number: 2 but max is 0
[   30.917934][  T331] logitech-hidpp-device 0003:046D:C086.0007: unknown main item tag 0x0
[   30.918649][  T350] usb 1-1: config 0 has no interface number 0
[   30.926071][  T331] logitech-hidpp-device 0003:046D:C086.0007: unknown global tag 0xe
[   30.932311][  T350] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0
[   30.949318][  T331] logitech-hidpp-device 0003:046D:C086.0007: item 0 1 1 14 parsing failed
[   30.949562][  T350] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0
[   30.958368][  T331] logitech-hidpp-device 0003:046D:C086.0007: hidpp_probe:parse failed
[   30.975614][  T331] logitech-hidpp-device: probe of 0003:046D:C086.0007 failed with error -22
[   31.026630][   T39] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[   31.043834][   T39] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[   31.052006][   T39] usb 3-1: SerialNumber: syz
[   31.088523][  T378] usb 4-1: USB disconnect, device number 4
[   31.116717][  T350] usb 1-1: New USB device found, idVendor=0582, idProduct=0005, bcdDevice= 0.88
[   31.125727][  T350] usb 1-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3
[   31.133573][  T350] usb 1-1: Product: syz
[   31.136492][   T60] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[   31.137597][  T350] usb 1-1: SerialNumber: syz
[   31.150182][  T350] usb 1-1: config 0 descriptor??
[   31.337152][   T39] usb 3-1: 0:2 : does not exist
[   31.344374][   T39] usb 3-1: USB disconnect, device number 4
[   31.352424][  T392] udevd[392]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   31.437116][  T350] snd-usb-audio: probe of 1-1:0.2 failed with error -12
[   31.446871][  T350] usb 1-1: USB disconnect, device number 4
[   31.496552][   T60] usb 5-1: config 1 has an invalid descriptor of length 145, skipping remainder of the config
[   31.506756][   T60] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[   31.586574][   T60] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[   31.595500][   T60] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[   31.608372][   T60] usb 5-1: SerialNumber: syz
[   31.610732][  T683] loop3: detected capacity change from 0 to 512
[   31.688895][  T683] EXT4-fs error (device loop3): ext4_orphan_get:1397: inode #15: comm syz.3.152: casefold flag without casefold feature
[   31.701573][  T683] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.152: couldn't read orphan inode 15 (err -117)
[   31.713360][  T683] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   31.887150][   T60] usb 5-1: 0:2 : does not exist
[   31.906907][   T60] usb 5-1: USB disconnect, device number 4
[   31.943037][  T699] loop5: detected capacity change from 0 to 2048
[   31.973852][  T699] EXT4-fs (loop5): mounted filesystem without journal. Opts: commit=0x0000000000000005,,errors=continue. Quota mode: none.
[   32.008012][  T699] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[   32.076600][  T350] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[   32.099871][  T717] loop5: detected capacity change from 0 to 1024
[   32.117806][  T717] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   32.147711][  T717] EXT4-fs (loop5): mounted filesystem without journal. Opts: jqfmt=vfsold,noauto_da_alloc,jqfmt=vfsold,bsdgroups,resuid=0x0000000000000000,dioread_nolock,usrjquota=,discard,jqfmt=vfsv1,,errors=continue. Quota mode: none.
[   32.286380][  T738] netlink: 104 bytes leftover after parsing attributes in process `syz.0.173'.
[   32.316602][  T311] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[   32.416249][  T737] loop5: detected capacity change from 0 to 40427
[   32.424738][  T737] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12
[   32.432537][  T737] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[   32.442800][  T737] F2FS-fs (loop5): Found nat_bits in checkpoint
[   32.464926][  T737] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0
[   32.471887][  T737] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[   32.486535][  T350] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   32.497406][  T350] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   32.506933][  T350] usb 3-1: New USB device found, idVendor=6666, idProduct=8801, bcdDevice= 0.00
[   32.515879][  T350] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   32.524502][  T350] usb 3-1: config 0 descriptor??
[   32.596269][  T755] loop5: detected capacity change from 0 to 512
[   32.678485][  T755] EXT4-fs error (device loop5): ext4_do_update_inode:5205: inode #3: comm syz.5.180: corrupted inode contents
[   32.690290][  T755] EXT4-fs error (device loop5): ext4_dirty_inode:6038: inode #3: comm syz.5.180: mark_inode_dirty error
[   32.701369][  T311] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11
[   32.702082][  T755] EXT4-fs error (device loop5): ext4_do_update_inode:5205: inode #3: comm syz.5.180: corrupted inode contents
[   32.712522][  T311] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024
[   32.724542][  T755] EXT4-fs error (device loop5): __ext4_ext_dirty:183: inode #3: comm syz.5.180: mark_inode_dirty error
[   32.735362][  T311] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[   32.746599][  T755] EXT4-fs error (device loop5): ext4_acquire_dquot:6187: comm syz.5.180: Failed to acquire dquot type 0
[   32.758767][  T311] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   32.778392][  T311] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   32.786770][  T311] usb 4-1: config 0 descriptor??
[   32.792457][  T755] EXT4-fs error (device loop5): ext4_do_update_inode:5205: inode #16: comm syz.5.180: corrupted inode contents
[   32.804332][  T755] EXT4-fs error (device loop5): ext4_dirty_inode:6038: inode #16: comm syz.5.180: mark_inode_dirty error
[   32.815541][  T713] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[   32.815820][  T755] EXT4-fs error (device loop5): ext4_do_update_inode:5205: inode #16: comm syz.5.180: corrupted inode contents
[   32.834120][  T755] EXT4-fs error (device loop5): __ext4_ext_dirty:183: inode #16: comm syz.5.180: mark_inode_dirty error
[   32.850365][  T755] EXT4-fs error (device loop5): ext4_do_update_inode:5205: inode #16: comm syz.5.180: corrupted inode contents
[   32.863189][  T755] EXT4-fs error (device loop5) in ext4_orphan_del:305: Corrupt filesystem
[   32.872351][  T755] EXT4-fs error (device loop5): ext4_do_update_inode:5205: inode #16: comm syz.5.180: corrupted inode contents
[   32.884292][  T755] EXT4-fs error (device loop5): ext4_truncate:4303: inode #16: comm syz.5.180: mark_inode_dirty error
[   32.896028][  T755] EXT4-fs error (device loop5) in ext4_process_orphan:347: Corrupt filesystem
[   32.905248][  T755] EXT4-fs (loop5): 1 truncate cleaned up
[   32.910887][  T755] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   32.921788][  T755] ext4 filesystem being mounted at /38/file1 supports timestamps until 2038 (0x7fffffff)
[   32.937090][  T755] syz.5.180 (755) used greatest stack depth: 20400 bytes left
[   33.017248][  T350] smartjoyplus 0003:6666:8801.0008: unknown main item tag 0x0
[   33.024560][  T350] smartjoyplus 0003:6666:8801.0008: ignoring exceeding usage max
[   33.033577][  T350] smartjoyplus 0003:6666:8801.0008: usage index exceeded
[   33.041403][  T350] smartjoyplus 0003:6666:8801.0008: item 0 0 2 0 parsing failed
[   33.050814][  T350] smartjoyplus 0003:6666:8801.0008: parse failed
[   33.057123][  T350] smartjoyplus: probe of 0003:6666:8801.0008 failed with error -22
[   33.115460][  T765] bridge0: port 1(bridge_slave_0) entered blocking state
[   33.122482][  T765] bridge0: port 1(bridge_slave_0) entered disabled state
[   33.129842][  T765] device bridge_slave_0 entered promiscuous mode
[   33.138239][  T765] bridge0: port 2(bridge_slave_1) entered blocking state
[   33.145123][  T765] bridge0: port 2(bridge_slave_1) entered disabled state
[   33.152388][  T765] device bridge_slave_1 entered promiscuous mode
[   33.192998][  T765] bridge0: port 2(bridge_slave_1) entered blocking state
[   33.199877][  T765] bridge0: port 2(bridge_slave_1) entered forwarding state
[   33.206975][  T765] bridge0: port 1(bridge_slave_0) entered blocking state
[   33.214013][  T765] bridge0: port 1(bridge_slave_0) entered forwarding state
[   33.224780][   T26] usb 3-1: USB disconnect, device number 5
[   33.239119][  T329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   33.248089][  T329] bridge0: port 1(bridge_slave_0) entered disabled state
[   33.255738][  T329] bridge0: port 2(bridge_slave_1) entered disabled state
[   33.276325][  T329] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   33.284922][  T329] bridge0: port 1(bridge_slave_0) entered blocking state
[   33.286012][  T311] plantronics 0003:047F:FFFF.0009: unknown main item tag 0xd
[   33.291834][  T329] bridge0: port 1(bridge_slave_0) entered forwarding state
[   33.300141][  T311] plantronics 0003:047F:FFFF.0009: No inputs registered, leaving
[   33.308762][  T329] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   33.321776][  T329] bridge0: port 2(bridge_slave_1) entered blocking state
[   33.324174][  T311] plantronics 0003:047F:FFFF.0009: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0
[   33.328641][  T329] bridge0: port 2(bridge_slave_1) entered forwarding state
[   33.328932][  T329] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   33.355714][  T329] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   33.369271][  T329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   33.381927][  T329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   33.389962][  T329] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   33.397514][  T329] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   33.405427][  T765] device veth0_vlan entered promiscuous mode
[   33.418124][  T329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   33.427315][  T765] device veth1_macvtap entered promiscuous mode
[   33.436734][  T329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   33.446923][  T329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   33.507144][   T45] device bridge_slave_1 left promiscuous mode
[   33.513154][   T45] bridge0: port 2(bridge_slave_1) entered disabled state
[   33.520509][   T45] device bridge_slave_0 left promiscuous mode
[   33.526469][   T45] bridge0: port 1(bridge_slave_0) entered disabled state
[   33.533894][   T45] device veth1_macvtap left promiscuous mode
[   33.539941][   T45] device veth0_vlan left promiscuous mode
[   33.546628][   T39] usb 5-1: new full-speed USB device number 5 using dummy_hcd
[   33.566887][   T60] usb 4-1: USB disconnect, device number 5
[   33.748841][   T20] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[   33.897871][  T790] loop0: detected capacity change from 0 to 40427
[   33.906673][   T39] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[   33.917795][   T39] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[   33.928607][   T39] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   33.938140][   T39] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[   33.951313][   T39] usb 5-1: New USB device found, idVendor=17ef, idProduct=6085, bcdDevice= 0.00
[   33.960266][   T39] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   33.968637][   T39] usb 5-1: config 0 descriptor??
[   33.987926][  T790] F2FS-fs (loop0): invalid crc value
[   33.995914][  T790] F2FS-fs (loop0): Found nat_bits in checkpoint
[   34.018544][  T790] F2FS-fs (loop0): Start checkpoint disabled!
[   34.025126][  T790] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6
[   34.037111][  T790] attempt to access beyond end of device
[   34.037111][  T790] loop0: rw=10241, want=45104, limit=40427
[   34.038698][   T20] usb 7-1: Using ep0 maxpacket: 8
[   34.060715][   T45] attempt to access beyond end of device
[   34.060715][   T45] loop0: rw=1, want=45104, limit=40427
[   34.071969][   T45] attempt to access beyond end of device
[   34.071969][   T45] loop0: rw=2049, want=40976, limit=40427
[   34.116499][   T60] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[   34.176535][   T20] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   34.190650][   T20] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   34.203082][   T20] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00
[   34.212022][   T20] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   34.221320][   T20] usb 7-1: config 0 descriptor??
[   34.301564][  T814] loop0: detected capacity change from 0 to 128
[   34.366550][   T60] usb 3-1: Using ep0 maxpacket: 8
[   34.388325][  T814] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[   34.398889][  T814] ext4 filesystem being mounted at /44/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff)
[   34.431101][   T39] hid-rmi 0003:17EF:6085.000A: unknown main item tag 0x0
[   34.439581][   T39] hid-rmi 0003:17EF:6085.000A: unknown main item tag 0x0
[   34.446814][   T39] hid-rmi 0003:17EF:6085.000A: item fetching failed at offset 2/5
[   34.454832][   T39] hid-rmi 0003:17EF:6085.000A: parse failed
[   34.460774][   T39] hid-rmi: probe of 0003:17EF:6085.000A failed with error -22
[   34.483815][  T818] loop0: detected capacity change from 0 to 512
[   34.516632][   T60] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   34.589083][  T818] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   34.600418][  T818] ext4 filesystem being mounted at /45/file0 supports timestamps until 2038 (0x7fffffff)
[   34.631556][  T311] usb 5-1: USB disconnect, device number 5
[   34.649470][  T824] capability: warning: `syz.0.208' uses deprecated v2 capabilities in a way that may be insecure
[   34.687326][   T60] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   34.697535][   T20] kone 0003:1E7D:2CED.000B: collection stack underflow
[   34.703202][   T60] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   34.705592][   T20] kone 0003:1E7D:2CED.000B: item 0 1 0 12 parsing failed
[   34.712907][   T60] usb 3-1: Product: syz
[   34.720445][   T20] kone 0003:1E7D:2CED.000B: parse failed
[   34.723387][   T60] usb 3-1: Manufacturer: syz
[   34.728645][   T20] kone: probe of 0003:1E7D:2CED.000B failed with error -22
[   34.732955][   T60] usb 3-1: SerialNumber: syz
[   34.902070][   T39] usb 7-1: USB disconnect, device number 2
[   35.076544][   T20] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[   35.086602][  T378] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[   35.212705][   T30] kauditd_printk_skb: 38 callbacks suppressed
[   35.212720][   T30] audit: type=1326 audit(1730338278.333:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=849 comm="syz.4.220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2abea28719 code=0x7ffc0000
[   35.242108][   T30] audit: type=1326 audit(1730338278.333:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=849 comm="syz.4.220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2abea28719 code=0x7ffc0000
[   35.265406][   T30] audit: type=1326 audit(1730338278.333:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=849 comm="syz.4.220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7f2abea28719 code=0x7ffc0000
[   35.289256][   T30] audit: type=1326 audit(1730338278.333:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=849 comm="syz.4.220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2abea28719 code=0x7ffc0000
[   35.305519][  T852] loop4: detected capacity change from 0 to 512
[   35.312386][   T30] audit: type=1326 audit(1730338278.333:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=849 comm="syz.4.220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2abea28719 code=0x7ffc0000
[   35.343799][  T852] EXT4-fs (loop4): Mount option "noacl" will be removed by 3.5
[   35.343799][  T852] Contact linux-ext4@vger.kernel.org if you think we should keep it.
[   35.343799][  T852] 
[   35.363152][  T852] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.221: invalid indirect mapped block 11 (level 0)
[   35.366683][   T20] usb 4-1: Using ep0 maxpacket: 8
[   35.376728][  T852] EXT4-fs error (device loop4): ext4_clear_blocks:883: inode #13: comm syz.4.221: attempt to clear invalid blocks 1024 len 1
[   35.394201][  T852] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters
[   35.408524][  T852] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.221: invalid indirect mapped block 1819239214 (level 0)
[   35.422535][  T852] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.221: invalid indirect mapped block 33554432 (level 2)
[   35.436401][   T30] audit: type=1400 audit(1730338278.563:267): avc:  denied  { remove_name } for  pid=83 comm="syslogd" name="messages" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   35.437076][  T852] EXT4-fs (loop4): 1 truncate cleaned up
[   35.459017][   T30] audit: type=1400 audit(1730338278.563:268): avc:  denied  { rename } for  pid=83 comm="syslogd" name="messages" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   35.466593][  T852] EXT4-fs (loop4): mounted filesystem without journal. Opts: max_batch_time=0x000000000000000e,journal_dev=0x0000000000000005,nodelalloc,noacl,max_batch_time=0x00000000000000ea,nodiscard,,errors=continue. Quota mode: none.
[   35.486017][   T30] audit: type=1400 audit(1730338278.563:269): avc:  denied  { create } for  pid=83 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   35.530559][   T30] audit: type=1400 audit(1730338278.653:270): avc:  denied  { create } for  pid=854 comm="syz.6.222" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   35.551018][   T30] audit: type=1400 audit(1730338278.653:271): avc:  denied  { connect } for  pid=854 comm="syz.6.222" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   35.570679][  T378] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[   35.580351][   T20] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   35.596222][  T378] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[   35.606177][   T20] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   35.616022][  T378] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   35.628679][   T20] usb 4-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00
[   35.637486][   T20] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   35.645864][   T20] usb 4-1: config 0 descriptor??
[   35.661510][  T859] capability: warning: `syz.4.224' uses 32-bit capabilities (legacy support in use)
[   35.826525][  T378] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[   35.835455][  T378] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   35.844375][  T378] usb 1-1: Product: syz
[   35.854805][  T378] usb 1-1: Manufacturer: syz
[   35.859295][   T39] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[   35.860731][  T378] usb 1-1: SerialNumber: syz
[   35.907080][  T378] hub 1-1:1.0: bad descriptor, ignoring hub
[   35.912858][  T378] hub: probe of 1-1:1.0 failed with error -5
[   35.966536][   T60] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42
[   35.972855][   T60] cdc_ncm 3-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048
[   35.980031][   T60] cdc_ncm 3-1:1.0: setting rx_max = 2048
[   36.127367][   T20] steelseries_srws1 0003:1038:1410.000C: unknown main item tag 0xd
[   36.135855][  T378] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 5 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[   36.146494][   T20] steelseries_srws1 0003:1038:1410.000C: item fetching failed at offset 6/7
[   36.155090][   T20] steelseries_srws1 0003:1038:1410.000C: parse failed
[   36.161655][  T311] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[   36.169572][   T20] steelseries_srws1: probe of 0003:1038:1410.000C failed with error -22
[   36.176764][   T60] cdc_ncm 3-1:1.0: setting tx_max = 184
[   36.185908][   T60] cdc_ncm 3-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM, 42:42:42:42:42:42
[   36.205507][   T60] usb 3-1: USB disconnect, device number 6
[   36.211565][   T60] cdc_ncm 3-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM
[   36.226549][   T39] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   36.237544][   T39] usb 7-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16
[   36.330735][   T26] usb 4-1: USB disconnect, device number 6
[   36.406481][  T311] usb 5-1: Using ep0 maxpacket: 16
[   36.406525][   T39] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   36.420301][   T39] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   36.428113][   T39] usb 7-1: Product: syz
[   36.432085][   T39] usb 7-1: Manufacturer: syz
[   36.436608][   T39] usb 7-1: SerialNumber: syz
[   36.466728][  T378] usb 1-1: USB disconnect, device number 5
[   36.473684][  T378] usblp0: removed
[   36.526606][  T311] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   36.537443][  T311] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   36.547129][  T311] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   36.559835][  T311] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00
[   36.568807][  T311] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   36.577256][  T311] usb 5-1: config 0 descriptor??
[   36.688685][  T897] loop2: detected capacity change from 0 to 1024
[   36.702668][  T857] raw-gadget.2 gadget: fail, usb_ep_enable returned -22
[   36.777009][  T897] EXT4-fs (loop2): Test dummy encryption mode enabled
[   36.783686][  T897] EXT4-fs (loop2): Ignoring removed orlov option
[   36.791378][  T897] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption,debug_want_extra_isize=0x0000000000000084,stripe=0x0000000000000007,commit=0x0000000000000005,orlov,barrier=0x0000000000000005,max_batch_time=0x0000000000000000,data_err=abort,,errors=continue. Quota mode: writeback.
[   36.824755][  T897] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni"
[   36.863306][  T906] loop3: detected capacity change from 0 to 512
[   36.901034][  T910] loop2: detected capacity change from 0 to 1024
[   36.901260][  T906] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   36.918478][  T906] ext4 filesystem being mounted at /27/file0 supports timestamps until 2038 (0x7fffffff)
[   36.928258][  T910] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[   36.936329][  T906] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters
[   36.954642][  T906] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 159 with max blocks 1 with error 28
[   36.967056][  T906] EXT4-fs (loop3): This should not happen!! Data will be lost
[   36.967056][  T906] 
[   36.978158][  T906] EXT4-fs (loop3): Total free blocks count 0
[   36.983983][  T906] EXT4-fs (loop3): Free/Dirty block details
[   36.990162][  T906] EXT4-fs (loop3): free_blocks=65280
[   36.995500][  T906] EXT4-fs (loop3): dirty_blocks=1
[   37.000725][  T906] EXT4-fs (loop3): Block reservation details
[   37.006645][  T906] EXT4-fs (loop3): i_reserved_data_blocks=1
[   37.037274][  T311] koneplus 0003:1E7D:2E22.000D: unknown main item tag 0x0
[   37.045368][  T311] koneplus 0003:1E7D:2E22.000D: hidraw0: USB HID v0.00 Device [HID 1e7d:2e22] on usb-dummy_hcd.4-1/input0
[   37.063625][  T921] loop2: detected capacity change from 0 to 512
[   37.124112][  T927] loop3: detected capacity change from 0 to 2048
[   37.138130][  T921] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpid,nombcache,,errors=continue. Quota mode: writeback.
[   37.150535][  T921] ext4 filesystem being mounted at /40/file0 supports timestamps until 2038 (0x7fffffff)
[   37.153331][  T392] Alternate GPT is invalid, using primary GPT.
[   37.166573][  T392]  loop3: p2 p3 p7
[   37.177360][  T927] Alternate GPT is invalid, using primary GPT.
[   37.183395][  T927]  loop3: p2 p3 p7
[   37.248935][  T313] udevd[313]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory
[   37.251383][  T391] udevd[391]: inotify_add_watch(7, /dev/loop3p7, 10) failed: No such file or directory
[   37.258565][  T311] koneplus 0003:1E7D:2E22.000D: couldn't init struct koneplus_device
[   37.270064][  T392] udevd[392]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory
[   37.275800][  T378] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[   37.281443][  T311] koneplus 0003:1E7D:2E22.000D: couldn't install mouse
[   37.302938][  T313] udevd[313]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory
[   37.313583][  T391] udevd[391]: inotify_add_watch(7, /dev/loop3p7, 10) failed: No such file or directory
[   37.318505][  T311] koneplus: probe of 0003:1E7D:2E22.000D failed with error -71
[   37.324408][  T392] udevd[392]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory
[   37.339822][  T311] usb 5-1: USB disconnect, device number 6
[   37.363011][  T857] raw-gadget.2 gadget: fail, usb_ep_enable returned -22
[   37.506498][  T378] usb 1-1: Using ep0 maxpacket: 8
[   37.606549][   T39] cdc_ncm 7-1:1.0: failed to get mac address
[   37.616491][  T350] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[   37.626503][  T459] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[   37.626559][  T378] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   37.716604][  T378] usb 1-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d
[   37.725516][  T378] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105
[   37.733477][  T378] usb 1-1: SerialNumber: syz
[   37.738626][  T378] usb 1-1: config 0 descriptor??
[   37.777030][  T378] usb 1-1: Found UVC 0.00 device <unnamed> (05ac:8501)
[   37.783741][  T378] uvcvideo 1-1:0.0: Entity type for entity Output 255 was not initialized!
[   37.792231][  T378] usb 1-1: Failed to create links for entity 255
[   37.798346][  T378] usb 1-1: Failed to register entities (-22).
[   37.826535][   T39] cdc_ncm 7-1:1.0: bind() failure
[   37.833582][  T949] netlink: 104 bytes leftover after parsing attributes in process `syz.4.248'.
[   37.849837][   T39] cdc_ncm: probe of 7-1:1.1 failed with error -71
[   37.866555][   T39] cdc_mbim: probe of 7-1:1.1 failed with error -71
[   37.876260][   T39] usb 7-1: USB disconnect, device number 3
[   37.976570][  T350] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 255, changing to 11
[   37.980014][   T60] usb 1-1: USB disconnect, device number 6
[   37.987731][  T350] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 59391, setting to 1024
[   38.005156][  T350] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00
[   38.014152][  T350] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   38.026567][  T459] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   38.036610][  T941] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[   38.037686][  T459] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   38.053743][  T459] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[   38.062655][  T459] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   38.070896][  T459] usb 4-1: config 0 descriptor??
[   38.116498][    T6] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[   38.350011][  T959] loop6: detected capacity change from 0 to 512
[   38.438084][  T959] EXT4-fs (loop6): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000200000,nobarrier,errors=continue,,errors=continue. Quota mode: writeback.
[   38.476742][    T6] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 255, changing to 11
[   38.488111][    T6] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 59391, setting to 1024
[   38.499470][    T6] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00
[   38.508530][    T6] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   38.536629][  T951] raw-gadget.2 gadget: fail, usb_ep_enable returned -22
[   38.543569][  T350] aiptek 3-1:17.0: Aiptek using 400 ms programming speed
[   38.547114][  T459] keytouch 0003:0926:3333.000E: fixing up Keytouch IEC report descriptor
[   38.562904][  T350] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:17.0/input/input6
[   38.579080][  T459] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.000E/input/input8
[   38.589982][  T350] usb 3-1: USB disconnect, device number 7
[   38.596480][    C0] aiptek 3-1:17.0: aiptek_irq - usb_submit_urb failed with result -19
[   38.679465][  T459] keytouch 0003:0926:3333.000E: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0
[   38.761874][  T459] usb 4-1: USB disconnect, device number 7
[   38.796613][   T39] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[   38.796667][    T6] aiptek 5-1:17.0: Aiptek using 400 ms programming speed
[   38.811722][    T6] input: Aiptek as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:17.0/input/input7
[   38.822289][    T6] usb 5-1: USB disconnect, device number 7
[   38.886590][   T60] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[   39.166555][   T39] usb 1-1: config 0 has no interfaces?
[   39.256643][   T60] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   39.270235][   T60] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   39.280755][   T60] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[   39.293857][   T60] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   39.302746][   T60] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   39.314295][   T60] usb 7-1: config 0 descriptor??
[   39.324568][  T978] loop3: detected capacity change from 0 to 512
[   39.336719][   T39] usb 1-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d
[   39.345777][   T39] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   39.353871][   T39] usb 1-1: Product: syz
[   39.358401][   T39] usb 1-1: Manufacturer: syz
[   39.362988][   T39] usb 1-1: SerialNumber: syz
[   39.368577][   T39] r8152-cfgselector 1-1: config 0 descriptor??
[   39.381342][  T980] incfs: iterate_incfs_dir / -22
[   39.404638][  T978] EXT4-fs error (device loop3): ext4_clear_blocks:883: inode #13: comm syz.3.261: attempt to clear invalid blocks 2 len 1
[   39.417897][  T978] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 216 vs 220 free clusters
[   39.432617][  T978] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.261: invalid indirect mapped block 1819239214 (level 0)
[   39.447703][  T978] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.261: invalid indirect mapped block 1819239214 (level 1)
[   39.462162][  T978] EXT4-fs (loop3): 1 truncate cleaned up
[   39.467878][  T978] EXT4-fs (loop3): mounted filesystem without journal. Opts: auto_da_alloc=0x0000000000000003,,errors=continue. Quota mode: none.
[   39.484736][  T978] EXT4-fs (loop3): shut down requested (2)
[   39.524265][  T995] loop3: detected capacity change from 0 to 256
[   39.618663][  T963] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[   39.626668][   T39] r8152-cfgselector 1-1: Unknown version 0x0000
[   39.634348][   T39] r8152-cfgselector 1-1: USB disconnect, device number 7
[   39.647434][ T1014] loop2: detected capacity change from 0 to 2048
[   39.731652][ T1014] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[   39.797122][   T60] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0
[   39.804397][   T60] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0
[   39.811835][   T60] plantronics 0003:047F:FFFF.000F: No inputs registered, leaving
[   39.820731][   T60] plantronics 0003:047F:FFFF.000F: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0
[   39.906483][  T350] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[   40.067464][   T39] usb 7-1: USB disconnect, device number 4
[   40.266539][  T350] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   40.277340][  T350] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   40.287110][   T30] kauditd_printk_skb: 99 callbacks suppressed
[   40.287124][   T30] audit: type=1326 audit(40.281:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1023 comm="syz.2.280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1393312719 code=0x7ffc0000
[   40.287146][  T350] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   40.315876][   T30] audit: type=1326 audit(40.281:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1023 comm="syz.2.280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1393312719 code=0x7ffc0000
[   40.352490][  T350] usb 4-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.10
[   40.362647][  T350] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   40.371008][  T350] usb 4-1: config 0 descriptor??
[   40.416563][    T6] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[   40.530310][   T30] audit: type=1400 audit(40.521:373): avc:  denied  { setopt } for  pid=1038 comm="syz.4.287" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   40.605521][   T30] audit: type=1400 audit(40.591:374): avc:  denied  { unlink } for  pid=1044 comm="syz.6.290" name="#1" dev="tmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[   40.634031][   T30] audit: type=1400 audit(40.621:375): avc:  denied  { setopt } for  pid=1046 comm="syz.6.291" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   40.660705][ T1049] loop6: detected capacity change from 0 to 1024
[   40.697396][ T1049] EXT4-fs (loop6): Mount option "noacl" will be removed by 3.5
[   40.697396][ T1049] Contact linux-ext4@vger.kernel.org if you think we should keep it.
[   40.697396][ T1049] 
[   40.717849][ T1049] EXT4-fs (loop6): mounted filesystem without journal. Opts: noauto_da_alloc,max_dir_size_kb=0x0000000000000001,dioread_lock,jqfmt=vfsv0,discard,lazytime,noacl,usrquota,noauto_da_alloc,,errors=continue. Quota mode: writeback.
[   40.786611][   T60] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[   40.796577][    T6] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   40.805649][   T30] audit: type=1400 audit(40.791:376): avc:  denied  { sys_admin } for  pid=1053 comm="syz.6.293" capability=21  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1
[   40.827162][    T6] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[   40.827211][    T6] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   40.827232][    T6] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   40.858391][    T6] usb 1-1: config 0 descriptor??
[   40.895867][   T30] audit: type=1400 audit(40.881:377): avc:  denied  { read } for  pid=1059 comm="syz.6.296" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[   40.897582][  T350] prodikeys 0003:041E:2801.0010: unknown main item tag 0x0
[   40.921058][   T30] audit: type=1400 audit(40.881:378): avc:  denied  { open } for  pid=1059 comm="syz.6.296" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[   40.934696][  T350] prodikeys 0003:041E:2801.0010: unknown main item tag 0x0
[   40.956254][   T30] audit: type=1400 audit(40.921:379): avc:  denied  { ioctl } for  pid=1059 comm="syz.6.296" path="/dev/binderfs/binder0" dev="binder" ino=4 ioctlcmd=0x6207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[   40.959670][  T350] prodikeys 0003:041E:2801.0010: unknown main item tag 0x0
[   40.984256][   T30] audit: type=1400 audit(40.921:380): avc:  denied  { set_context_mgr } for  pid=1059 comm="syz.6.296" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1
[   40.989543][  T350] prodikeys 0003:041E:2801.0010: unknown main item tag 0x0
[   41.016744][  T350] prodikeys 0003:041E:2801.0010: unknown main item tag 0x0
[   41.026774][  T350] prodikeys 0003:041E:2801.0010: hidraw0: USB HID v0.00 Device [HID 041e:2801] on usb-dummy_hcd.3-1/input0
[   41.048952][  T350] ==================================================================
[   41.056842][  T350] BUG: KASAN: use-after-free in __list_del_entry_valid+0x2f/0x120
[   41.064478][  T350] Read of size 8 at addr ffff88810a74ad08 by task kworker/0:4/350
[   41.072304][  T350] 
[   41.074472][  T350] CPU: 0 PID: 350 Comm: kworker/0:4 Not tainted 5.15.167-syzkaller-android13-5.15.167_r00 #0
[   41.084460][  T350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[   41.094472][  T350] Workqueue: events binder_deferred_func
[   41.099932][  T350] Call Trace:
[   41.103079][  T350]  <TASK>
[   41.105855][  T350]  dump_stack_lvl+0x151/0x1c0
[   41.110349][  T350]  ? io_uring_drop_tctx_refs+0x190/0x190
[   41.115811][  T350]  ? panic+0x760/0x760
[   41.119718][  T350]  ? kasan_quarantine_put+0x34/0x1a0
[   41.124837][  T350]  print_address_description+0x87/0x3b0
[   41.130219][  T350]  kasan_report+0x179/0x1c0
[   41.134557][  T350]  ? _raw_spin_lock+0xa4/0x1b0
[   41.139160][  T350]  ? __list_del_entry_valid+0x2f/0x120
[   41.144451][  T350]  ? __list_del_entry_valid+0x2f/0x120
[   41.149849][  T350]  __asan_report_load8_noabort+0x14/0x20
[   41.155306][  T350]  __list_del_entry_valid+0x2f/0x120
[   41.160427][  T350]  binder_release_work+0xcd/0x680
[   41.165285][  T350]  binder_deferred_func+0x1847/0x1bc0
[   41.170490][  T350]  ? read_word_at_a_time+0x12/0x20
[   41.175437][  T350]  process_one_work+0x6bb/0xc10
[   41.180126][  T350]  worker_thread+0xad5/0x12a0
[   41.184638][  T350]  ? _raw_spin_lock+0x1b0/0x1b0
[   41.189328][  T350]  kthread+0x421/0x510
[   41.193228][  T350]  ? worker_clr_flags+0x180/0x180
[   41.198090][  T350]  ? kthread_blkcg+0xd0/0xd0
[   41.202514][  T350]  ret_from_fork+0x1f/0x30
[   41.206769][  T350]  </TASK>
[   41.209632][  T350] 
[   41.211800][  T350] Allocated by task 1060:
[   41.215970][  T350]  ____kasan_kmalloc+0xdb/0x110
[   41.220655][  T350]  __kasan_kmalloc+0x9/0x10
[   41.224993][  T350]  kmem_cache_alloc_trace+0x115/0x210
[   41.230208][  T350]  binder_thread_write+0x9f5/0x6ec0
[   41.235247][  T350]  binder_ioctl_write_read+0x205/0x7300
[   41.240618][  T350]  binder_ioctl+0x371/0x2640
[   41.245042][  T350]  __se_sys_ioctl+0x114/0x190
[   41.249557][  T350]  __x64_sys_ioctl+0x7b/0x90
[   41.253980][  T350]  x64_sys_call+0x98/0x9a0
[   41.258236][  T350]  do_syscall_64+0x3b/0xb0
[   41.262487][  T350]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   41.268220][  T350] 
[   41.270385][  T350] Freed by task 350:
[   41.274116][  T350]  kasan_set_track+0x4b/0x70
[   41.278543][  T350]  kasan_set_free_info+0x23/0x40
[   41.283317][  T350]  ____kasan_slab_free+0x126/0x160
[   41.288263][  T350]  __kasan_slab_free+0x11/0x20
[   41.292864][  T350]  slab_free_freelist_hook+0xbd/0x190
[   41.298078][  T350]  kfree+0xc8/0x220
[   41.301717][  T350]  binder_free_ref+0x128/0x260
[   41.306318][  T350]  binder_deferred_func+0x171c/0x1bc0
[   41.311523][  T350]  process_one_work+0x6bb/0xc10
[   41.316210][  T350]  worker_thread+0xad5/0x12a0
[   41.320723][  T350]  kthread+0x421/0x510
[   41.324629][  T350]  ret_from_fork+0x1f/0x30
[   41.328881][  T350] 
[   41.331063][  T350] Last potentially related work creation:
[   41.336607][  T350]  kasan_save_stack+0x3b/0x60
[   41.341119][  T350]  __kasan_record_aux_stack+0xd3/0xf0
[   41.346327][  T350]  kasan_record_aux_stack_noalloc+0xb/0x10
[   41.351968][  T350]  call_rcu+0x123/0x10b0
[   41.356055][  T350]  __percpu_ref_switch_mode+0x342/0x620
[   41.361434][  T350]  percpu_ref_kill_and_confirm+0xa3/0x220
[   41.366983][  T350]  blkg_destroy+0x594/0x5f0
[   41.371323][  T350]  blkg_destroy_all+0xd2/0x440
[   41.375922][  T350]  blkcg_exit_queue+0x15/0x20
[   41.380435][  T350]  blk_release_queue+0x148/0x270
[   41.385211][  T350]  kobject_put+0x178/0x260
[   41.389463][  T350]  blk_put_queue+0x19/0x20
[   41.393716][  T350]  scsi_device_dev_release_usercontext+0x58e/0x840
[   41.400053][  T350]  execute_in_process_context+0x1af/0x240
[   41.405605][  T350]  scsi_device_dev_release+0xf8/0x110
[   41.410812][  T350]  device_release+0x95/0x1c0
[   41.415240][  T350]  kobject_put+0x178/0x260
[   41.419493][  T350]  put_device+0x1f/0x30
[   41.423485][  T350]  __scsi_remove_device+0x307/0x370
[   41.428517][  T350]  scsi_probe_and_add_lun+0x2360/0x4320
[   41.433900][  T350]  __scsi_scan_target+0x1ed/0xe30
[   41.438759][  T350]  scsi_scan_host_selected+0x334/0x5f0
[   41.444054][  T350]  scsi_scan_host+0x3a8/0x670
[   41.448566][  T350]  virtscsi_probe+0x930/0xc30
[   41.453080][  T350]  virtio_dev_probe+0x891/0xae0
[   41.457769][  T350]  really_probe+0x28d/0x970
[   41.462108][  T350]  __driver_probe_device+0x1a0/0x310
[   41.467227][  T350]  driver_probe_device+0x54/0x3d0
[   41.472089][  T350]  __driver_attach+0x446/0x590
[   41.476688][  T350]  bus_for_each_dev+0x17b/0x1f0
[   41.481377][  T350]  driver_attach+0x42/0x50
[   41.485628][  T350]  bus_add_driver+0x33f/0x590
[   41.490141][  T350]  driver_register+0x2e2/0x3e0
[   41.494742][  T350]  register_virtio_driver+0x97/0xc0
[   41.499776][  T350]  init+0x66/0xe0
[   41.503245][  T350]  do_one_initcall+0x182/0x610
[   41.507849][  T350]  do_initcall_level+0x186/0x310
[   41.512620][  T350]  do_initcalls+0x4e/0x90
[   41.516786][  T350]  do_basic_setup+0x81/0x90
[   41.521131][  T350]  kernel_init_freeable+0x2c1/0x400
[   41.526159][  T350]  kernel_init+0x1d/0x290
[   41.530330][  T350]  ret_from_fork+0x1f/0x30
[   41.534580][  T350] 
[   41.536758][  T350] The buggy address belongs to the object at ffff88810a74ad00
[   41.536758][  T350]  which belongs to the cache kmalloc-64 of size 64
[   41.550465][  T350] The buggy address is located 8 bytes inside of
[   41.550465][  T350]  64-byte region [ffff88810a74ad00, ffff88810a74ad40)
[   41.563309][  T350] The buggy address belongs to the page:
[   41.568788][  T350] page:ffffea000429d280 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x10a74a
[   41.578842][  T350] flags: 0x4000000000000200(slab|zone=1)
[   41.584316][  T350] raw: 4000000000000200 dead000000000100 dead000000000122 ffff888100042780
[   41.592735][  T350] raw: 0000000000000000 0000000000200020 00000001ffffffff 0000000000000000
[   41.601148][  T350] page dumped because: kasan: bad access detected
[   41.607407][  T350] page_owner tracks the page as allocated
[   41.613080][  T350] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x12cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY), pid 1, ts 2025153485, free_ts 0
[   41.627739][  T350]  post_alloc_hook+0x1a3/0x1b0
[   41.632338][  T350]  prep_new_page+0x1b/0x110
[   41.636681][  T350]  get_page_from_freelist+0x3550/0x35d0
[   41.642058][  T350]  __alloc_pages+0x27e/0x8f0
[   41.646484][  T350]  new_slab+0x9a/0x4e0
[   41.650389][  T350]  ___slab_alloc+0x39e/0x830
[   41.654815][  T350]  __slab_alloc+0x4a/0x90
[   41.659002][  T350]  kmem_cache_alloc_trace+0x142/0x210
[   41.664190][  T350]  percpu_ref_init+0xc8/0x340
[   41.668702][  T350]  blkg_alloc+0xa7/0x5b0
[   41.672781][  T350]  blkcg_init_queue+0x29/0x200
[   41.677380][  T350]  blk_alloc_queue+0x3fa/0x570
[   41.681984][  T350]  blk_mq_init_queue+0x36/0xd0
[   41.686581][  T350]  scsi_alloc_sdev+0x674/0xa10
[   41.691180][  T350]  scsi_probe_and_add_lun+0x199/0x4320
[   41.696476][  T350]  __scsi_scan_target+0x1ed/0xe30
[   41.701335][  T350] page_owner free stack trace missing
[   41.706542][  T350] 
[   41.708712][  T350] Memory state around the buggy address:
[   41.714184][  T350]  ffff88810a74ac00: 00 00 00 00 00 00 00 03 fc fc fc fc fc fc fc fc
[   41.722082][  T350]  ffff88810a74ac80: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc
[   41.729981][  T350] >ffff88810a74ad00: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc
[   41.737874][  T350]                       ^
[   41.742058][  T350]  ffff88810a74ad80: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc
[   41.749944][  T350]  ffff88810a74ae00: 00 00 00 00 00 00 00 07 fc fc fc fc fc fc fc fc
[   41.757838][  T350] ==================================================================
[   41.765738][  T350] Disabling lock debugging due to kernel taint
[   41.772031][  T350] general protection fault, probably for non-canonical address 0xf4effc38e000002b: 0000 [#1] PREEMPT SMP KASAN
[   41.783554][  T350] KASAN: maybe wild-memory-access in range [0xa78001c700000158-0xa78001c70000015f]
[   41.792670][  T350] CPU: 0 PID: 350 Comm: kworker/0:4 Tainted: G    B             5.15.167-syzkaller-android13-5.15.167_r00 #0
[   41.804047][  T350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[   41.813932][  T350] Workqueue: events binder_deferred_func
[   41.819501][  T350] RIP: 0010:__list_del_entry_valid+0x75/0x120
[   41.825403][  T350] Code: 1e 48 85 db 74 68 4d 85 ff 74 74 48 ba 00 01 00 00 00 00 ad de 48 39 d3 74 76 48 83 c2 22 49 39 d7 74 7e 4c 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 ff e8 cc 90 48 ff 49 8b 17 4c 39 f2 75
[   41.844837][  T350] RSP: 0018:ffffc90000bb7c00 EFLAGS: 00010a07
[   41.850737][  T350] RAX: 14f00038e000002b RBX: ffff88811cc63200 RCX: ffffffff826a1859
[   41.858547][  T350] RDX: dead000000000122 RSI: 0000000000000282 RDI: ffff88810a74ad00
[   41.866363][  T350] RBP: ffffc90000bb7c20 R08: ffffffff8141997b R09: 0000000000000003
[   41.874174][  T350] R10: fffffbfff0e9a04c R11: dffffc0000000001 R12: dffffc0000000000
[   41.881983][  T350] R13: ffff88810a74ad00 R14: ffff88810a74ad00 R15: a78001c70000015e
[   41.889793][  T350] FS:  0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000
[   41.898559][  T350] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   41.904982][  T350] CR2: 00007f91337c4f98 CR3: 00000001110b3000 CR4: 00000000003526b0
[   41.912798][  T350] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[   41.920611][  T350] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[   41.928418][  T350] Call Trace:
[   41.931547][  T350]  <TASK>
[   41.934326][  T350]  ? __die_body+0x62/0xb0
[   41.938485][  T350]  ? die_addr+0x9f/0xd0
[   41.942476][  T350]  ? exc_general_protection+0x311/0x4b0
[   41.947861][  T350]  ? check_panic_on_warn+0x65/0xb0
[   41.953157][  T350]  ? asm_exc_general_protection+0x27/0x30
[   41.958705][  T350]  ? check_panic_on_warn+0x5b/0xb0
[   41.963653][  T350]  ? __list_del_entry_valid+0x49/0x120
[   41.968947][  T350]  ? __list_del_entry_valid+0x75/0x120
[   41.974242][  T350]  binder_release_work+0xcd/0x680
[   41.979104][  T350]  binder_deferred_func+0x1847/0x1bc0
[   41.984310][  T350]  ? read_word_at_a_time+0x12/0x20
[   41.989260][  T350]  process_one_work+0x6bb/0xc10
[   41.993944][  T350]  worker_thread+0xad5/0x12a0
[   41.998456][  T350]  ? _raw_spin_lock+0x1b0/0x1b0
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[   42.003146][  T350]  kthread+0x421/0x510
[   42.007052][  T350]  ? worker_clr_flags+0x180/0x180
[   42.011909][  T350]  ? kthread_blkcg+0xd0/0xd0
[   42.016337][  T350]  ret_from_fork+0x1f/0x30
[   42.020592][  T350]  </TASK>
[   42.023451][  T350] Modules linked in:
[   42.027258][  T350] ---[ end trace b0f4ef5f320f6a17 ]---
[   42.028053][   T60] usb 3-1: Using ep0 maxpacket: 16
[   42.032483][  T350] RIP: 0010:__list_del_entry_valid+0x75/0x120
[   42.043337][  T350] Code: 1e 48 85 db 74 68 4d 85 ff 74 74 48 ba 00 01 00 00 00 00 ad de 48 39 d3 74 76 48 83 c2 22 49 39 d7 74 7e 4c 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 ff e8 cc 90 48 ff 49 8b 17 4c 39 f2 75
[   42.062811][  T350] RSP: 0018:ffffc90000bb7c00 EFLAGS: 00010a07
[   42.068723][  T350] RAX: 14f00038e000002b RBX: ffff88811cc63200 RCX: ffffffff826a1859
[   42.076502][  T350] RDX: dead000000000122 RSI: 0000000000000282 RDI: ffff88810a74ad00
[   42.084298][  T350] RBP: ffffc90000bb7c20 R08: ffffffff8141997b R09: 0000000000000003
[   42.092146][  T350] R10: fffffbfff0e9a04c R11: dffffc0000000001 R12: dffffc0000000000
[   42.099951][  T350] R13: ffff88810a74ad00 R14: ffff88810a74ad00 R15: a78001c70000015e
[   42.105985][  T331] usb 4-1: USB disconnect, device number 8
[   42.107837][  T350] FS:  0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000
[   42.122251][  T350] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   42.128685][  T350] CR2: 00007f91337c4f98 CR3: 00000001110b3000 CR4: 00000000003526b0
[   42.136484][  T350] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[   42.144268][  T350] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[   42.152124][  T350] Kernel panic - not syncing: Fatal exception
[   42.158260][  T350] Kernel Offset: disabled
[   42.162390][  T350] Rebooting in 86400 seconds..