last executing test programs:

2m8.506935969s ago: executing program 1 (id=128):
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @void}, 0x10)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
r0 = socket(0x10, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000000)={'ip6gre0\x00', &(0x7f00000009c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}}})
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1}, 0x0, &(0x7f0000000040)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000001700)=0x4)
r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
write$UHID_CREATE2(r3, &(0x7f0000000c00)={0xb, {'syz1\x00', 'syz0\x00', 'syz1\x00', 0xa1, 0x6, 0x100, 0xc, 0x8001, 0x40, "329eed5a3701f7e94839caedca98a3ee793e35d3ef077d926227f808cd35ec3ce58e211b7210fa73e1b759a9754192b7558423802d6cb600a66a18e6e0af7de9fcaffa70f98cfcc82444951899aaa7d82574e583f00f8c100d250cb8b5b24b8d9b3e51cf7458d5d17ae7e4f2868bb361f3110b036bb341094a57d18b8dc1b1c65068eec8b910ccb69caab71e2c8027c581a7308a85be1352a1bf0423743a526cfe"}}, 0x1b9)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000440)={'syztnl1\x00', &(0x7f0000000640)={'ip6_vti0\x00', 0x0, 0x0, 0x0, 0x3, 0x9, 0x0, @private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0xc0}})

2m8.301505749s ago: executing program 1 (id=130):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10)
fsopen(0x0, 0x0)

2m7.355598072s ago: executing program 1 (id=132):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000074"], 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18)
socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
r6 = fcntl$dupfd(r5, 0x406, r5)
setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfd, 0x0, 0xe4}]}, 0x10)
sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3)
write$binfmt_elf32(r6, &(0x7f0000000640)={{0x7f, 0x45, 0x4c, 0x46, 0x40, 0x0, 0x9b, 0x5, 0xffffffff7ffffffc, 0x2, 0x5, 0x8, 0x2a, 0x38, 0x329, 0x5, 0x1, 0x20, 0x0, 0x4, 0x4}, [], "", ['\x00', '\x00', '\x00']}, 0x338)
setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4)

2m6.474458259s ago: executing program 1 (id=136):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x800700, &(0x7f0000000580)={[{@grpjquota}, {@stripe={'stripe', 0x3d, 0x3}}, {@norecovery}, {@noinit_itable}, {@init_itable_val={'init_itable', 0x3d, 0x1}}, {@minixdf}, {@usrjquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@errors_continue}, {@dioread_lock}, {@noblock_validity}, {@noquota}]}, 0x3, 0x465, &(0x7f0000000f00)="$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")
syz_mount_image$exfat(&(0x7f0000000100), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000600)=ANY=[], 0x2, 0x150f, &(0x7f000000bb00)="$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")
mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, 0x0)
chdir(&(0x7f0000000180)='./file0\x00')
rename(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000f40)='./file1\x00')

2m5.731630793s ago: executing program 1 (id=139):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7"], 0x0}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b708000000000000"], 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x0, &(0x7f0000000080), 0x1, 0x4fa, &(0x7f00000005c0)="$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")
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="000000004c90020052feffff0300010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff"])
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0x32140c0, &(0x7f0000000880)={[{@usrquota}, {@init_itable}, {@errors_remount}, {@data_ordered}, {@data_err_abort}, {@auto_da_alloc}], [{@pcr={'pcr', 0x3d, 0x22}}, {@smackfsdef={'smackfsdef', 0x3d, 'data=ordered'}}, {@smackfsroot={'smackfsroot', 0x3d, '\x03\xe9!\x93\xc8'}}, {@subj_type={'subj_type', 0x3d, '$+&g\x83{\xf9h\x12\x17\x88-\v\xcb\x1f,-'}}, {@fscontext={'fscontext', 0x3d, 'system_u'}}, {@seclabel}]}, 0x0, 0x4ec, &(0x7f0000000d40)="$eJzs3c9vG1kdAPDvOHGTtFmcBQ7LSiwVLEpXUDvZsLsRhyVICE6VKOXCKYTEiaI4cRQ7bRNVKBV/ABLil+DEiQsSZ4SE+icgpEpwRwiBKmjLgQNgNPaYhqyTOEocp/HnI73Om1/+fl+defabGXkCGFjXI2IuIoYi4q2IKGTLc1mJvVZJt3v29MFiWpJojNz5WxJJtqz9Wkk2vZbtNhoRX/tKxLeSD8at7eyuLVQq5a1svlRf3yzVdnZvrq4vrJRXyhtzM9Pvzr43+87s1Jm19f0v/fmH3/35l9//zWfv/XH+rze+naY1nq3b345u7HW5Xavp+eb/RdtwRGydJNgFNtRqT77feQAA0J30O/6HI+KTEfH8J/3OBgAAAOiFxhfG419JRAMAAAC4tHLNe2CTXDG7F2A8crlisXUP70fjaq5SrdU/s1zd3lhq3Ss7Efnc8mqlPJXdKzwR+SSdn27WX8y/fWB+JiJejYjvF8aa88XFamWp3yc/AAAAYEBcOzD+/0ehNf4HAAAALpmJficAAAAA9JzxPwAAAFx+h47/k+HzTQQAAADoha/eupWWRvv510t3d7bXqndvLpVra8X17cXiYnVrs7hSra40f7Nv/bjXq1Srm5+Lje37pXq5Vi/Vdnbn16vbG/X55nO958uNwrk0CwAAANjn1U88+kMSEXufH2uW1JVsXf743ed6mx3QS7mTbZ70Kg/g/A31OwGgb9zgC4OrizE+cMkdM7D/wYH5E542AAAALoLJj53q+r/rgfASM5CHweX6Pwwu1/9hcLn+DwNu5PhNRg9b8dszzgUAAOiZ8WZJcsXsWuB45HLFYsQrzccC5JPl1Up5KiI+FBG/L+RH0vnpficNAAAAAAAAAAAAAAAAAAAAAAAAAC+ZRiOJBgAAAHCpReT+kmQP8p8svDl+8PzAleSfheY0Iu799M6P7i/U61vT6fK//295/cfZ8rfbS1LfOOczGQAAAEBbe5zeHscDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwFl69vTBYrucZ9wnX4yIiU7xh2O0OR39VSEirj5PYnjffklEDJ1B/L2HEfFap/hJmlZMZFkcjJ+LiLE+x792BvFhkD1K+5+59PjLHzj+cnG9Oe18/A1n5bSeXD+s/8u1+79mP9ep/3vl6JcebVdef/zL0qHxH0a8Pty5/2nHTzrFv9J9G7/59d3dw9Y1fhYxecznTxq/VF/fLNV2dm+uri+slFfKGzMz0+/Ovjf7zuxUaXm1Us7+7Rjjex//9X+Oav/VjvFb/e+h7Y+IN7ts/78f33/6kSPi3/hU5/f/tSPip38Tn84+B9L1k+36Xqu+3xu/+N0bR7V/6ZD2H/n+R8SNLtv/1u3v/KnLTQGAc1Db2V1bqFTKWz2pjJ1m96SV4V5PM3y5K9WNC5GGysWt3M4O9BPv3s9eCQAA6IUXX/oPrjnBBR4AAAAAAAAAAAAAAAAAAADgVHr+I2Qj///LAqP9ayoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwJH+GwAA//+yjc/P")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f0000000440)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r6, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000400)={0x38, r7, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_DEBUG_MSGMASK={0xc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x4}]}]}, 0x38}}, 0x0)

2m5.535758262s ago: executing program 1 (id=142):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='hrtimer_init\x00', r1}, 0x10)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='hrtimer_init\x00', r2}, 0x10)
socketpair(0xa, 0x1, 0x0, &(0x7f0000000000))

2m5.535418892s ago: executing program 32 (id=142):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='hrtimer_init\x00', r1}, 0x10)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='hrtimer_init\x00', r2}, 0x10)
socketpair(0xa, 0x1, 0x0, &(0x7f0000000000))

1m57.032054473s ago: executing program 2 (id=191):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000f9ffff030000000000000000850000002c00000095"], &(0x7f0000000040)='GPL\x00', 0x5, 0xbf, &(0x7f00000020c0)=""/191}, 0x80)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r2=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r1, r2}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
syz_emit_ethernet(0xfdef, &(0x7f00000003c0)=ANY=[], 0x0)

1m56.993115877s ago: executing program 2 (id=192):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
r3 = inotify_init1(0x0)
r4 = inotify_add_watch(r3, &(0x7f0000000200)='.\x00', 0x10000a0)
r5 = dup(r3)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r6 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
connect$unix(r7, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r9}, 0x10)
unshare(0x22020600)
inotify_rm_watch(r5, r4)
r10 = syz_open_dev$vcsu(&(0x7f00000001c0), 0x1, 0x100)
ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f513, &(0x7f0000000000))
read$FUSE(r10, &(0x7f0000000200)={0x2020}, 0x2020)

1m56.523329803s ago: executing program 2 (id=196):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x5, 0x1, 0x8e, 0xe7c9, 0x1}, 0x50)
bpf$MAP_DELETE_BATCH(0x18, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0xe30a, r2}, 0x38)

1m56.499442815s ago: executing program 2 (id=197):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x3000046, &(0x7f0000000180)={[{@delalloc}, {@errors_remount}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4005b1}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@inlinecrypt}]}, 0x1, 0x553, &(0x7f0000000380)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==")
socket$inet_tcp(0x2, 0x1, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x185641, 0x0)
r1 = open(&(0x7f00000003c0)='./bus\x00', 0x84902, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x11, r1, 0x0)
sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="45000000120001030000000000000000000000004e22ff0f2d0029f7891f976a23c6d70bb9c950fe00"/56, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00'], 0x4c}}, 0x0)
write$FUSE_ATTR(r0, &(0x7f0000000440)={0x78, 0x0, 0x0, {0x2000000000000001, 0x2000000, 0x0, {0xffffffffff7ffffe, 0x1, 0xffffffffbfffffff, 0x10, 0xffffffffffff592c, 0x6, 0x4, 0x6288f666, 0x0, 0xc000}}}, 0xa6)

1m55.943803561s ago: executing program 2 (id=200):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10)
socket$netlink(0x10, 0x3, 0x0)
r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r4, &(0x7f0000000a00)={'syz0\x00', {0x9, 0x7, 0x5, 0x5}, 0x3f, [0x9, 0x2, 0x8, 0x6, 0x2, 0x400, 0x80000000, 0x0, 0x8, 0x0, 0x6, 0x2, 0xfffffffb, 0x39, 0x747d5e13, 0x8, 0xfffffb9a, 0xfffffffc, 0x4, 0xfffffffb, 0x2004, 0x3, 0x4, 0xf252, 0x80, 0x800, 0x300000, 0x7, 0xe, 0x4623f, 0x0, 0x0, 0x1ff, 0x8000, 0x0, 0x3, 0xd, 0x3, 0xba55, 0x8da8, 0xfffffffe, 0x2, 0x2, 0x4, 0xe, 0x4, 0x2, 0x6, 0x8, 0x9, 0x1, 0x199f, 0x8, 0x2, 0x9, 0xffffffff, 0x4, 0x6, 0x1000, 0x5, 0x40, 0x6, 0xa, 0x5], [0x7, 0x1e, 0x3, 0x8000, 0xfffffffe, 0x3, 0x0, 0x25, 0x7, 0xfffffffc, 0x4, 0x7fff, 0x72c, 0x1c32, 0x3, 0x5, 0x10000, 0x400, 0x8001, 0x3, 0x1, 0x297, 0x5, 0x0, 0x981, 0x4, 0x0, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x1000001, 0x10, 0xfffffff9, 0xfffffffd, 0x5, 0x1, 0xffffffff, 0x6, 0x5, 0x800, 0xffff, 0x6, 0x96, 0xfffffff9, 0x2, 0x0, 0x2, 0x401, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0x7, 0x6, 0x2, 0x1, 0x1, 0x8, 0x6, 0x200, 0x3], [0x401, 0xc584, 0xffff, 0xcd5, 0x7, 0x1f, 0x404, 0x4, 0x8, 0x10, 0x7, 0x9, 0xe8b, 0x5, 0x80000001, 0x48, 0x3f92, 0x1000, 0x0, 0x10, 0x1, 0xfffffff9, 0xe58, 0x1000, 0x80040101, 0x4, 0x4, 0x5, 0x200003, 0x2, 0x5, 0x80, 0x9, 0x8001, 0x3, 0x0, 0x3, 0x4, 0x3, 0x6d7e, 0x3, 0x8, 0x3, 0xbf23, 0x6, 0x9, 0x956, 0x0, 0x3ff, 0x3, 0xcac, 0x100fffd, 0x2005, 0x9, 0x4, 0xea, 0x9, 0x20000005, 0x3, 0xd9, 0x0, 0x7d, 0x401, 0x5], [0x108e, 0xffff, 0x3, 0x3, 0x88, 0x2, 0x4000000, 0x4, 0x50, 0x2, 0x763, 0xb, 0x402, 0x800, 0x5, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x6, 0x4, 0xe47, 0x3, 0x1654, 0x4, 0x200, 0x2851, 0x3b, 0x20000002, 0x5, 0x800, 0xa80a, 0x65f413f9, 0x4, 0x20008, 0x8a8, 0x6, 0x44, 0x409, 0x3, 0x4, 0x4, 0x10, 0x4, 0xffffffff, 0x7fff, 0x2, 0xfffffff8, 0x401, 0x1, 0x200, 0x7, 0x4edf, 0xfffffffd, 0xe, 0xe, 0x2, 0xf, 0xf, 0x136, 0x6]}, 0x45c)
ioctl$UI_DEV_CREATE(r4, 0x5501)

1m55.889301515s ago: executing program 2 (id=201):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000000085000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000280)='kfree\x00', r0}, 0x18)
r1 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000340), 0x1, 0x0)
write$selinux_validatetrans(r1, &(0x7f0000001cc0)=ANY=[@ANYBLOB='system_u:object_r:semanage_t system_u:object_r:fixed_disk_device_t:s0 00000000000w'], 0x79)

1m55.852287949s ago: executing program 33 (id=201):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000000085000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000280)='kfree\x00', r0}, 0x18)
r1 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000340), 0x1, 0x0)
write$selinux_validatetrans(r1, &(0x7f0000001cc0)=ANY=[@ANYBLOB='system_u:object_r:semanage_t system_u:object_r:fixed_disk_device_t:s0 00000000000w'], 0x79)

7.541277085s ago: executing program 4 (id=872):
socket$nl_xfrm(0x10, 0x3, 0x6)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480), 0x4)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0)
read$char_usb(0xffffffffffffffff, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
close(0x3)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800"/12], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff)
keyctl$negate(0xc, 0x0, 0x2, r4)
bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0)

7.020662136s ago: executing program 4 (id=876):
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x64)
mount$incfs(&(0x7f0000000580)='./file0\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x8c)
r1 = epoll_create(0x5)
r2 = openat$incfs(r0, &(0x7f0000000000)='.log\x00', 0x80040, 0x42)
mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x8000, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}})

6.947833643s ago: executing program 3 (id=878):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10)
r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0)
write$UHID_CREATE(r1, &(0x7f0000000a00)={0x0, {'syz0\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000940)=""/3, 0x3, 0x0, 0x4, 0x0, 0x0, 0xc08}}, 0x120)
readv(r1, 0x0, 0x0)

6.921168616s ago: executing program 3 (id=880):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYRESOCT, @ANYRES32=0x0], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
r4 = io_uring_setup(0x177f, &(0x7f0000000140)={0x0, 0xfffdfffe, 0x0, 0x0, 0xfffffff9})
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
listen(r5, 0x0)
close_range(r4, 0xffffffffffffffff, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r3}, 0x18)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
lsetxattr$security_selinux(&(0x7f0000000340)='.\x00', &(0x7f0000000240), &(0x7f0000000280)='system_u:object_r:fsadm_exec_t:s0\x00', 0x22, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa00200000000808004500002800000000008c684518bee146732fa08313069078ac141400ac1e000100000000", @ANYRES32=0x41424344, @ANYRES32=r4, @ANYBLOB="5000000090780000"], 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000100))
r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, 0x0)

6.110493496s ago: executing program 4 (id=884):
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000845, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f00000700000000"], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00'}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r2}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20)
listen(r1, 0x2)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
io_getevents(0x0, 0x5, 0x6, &(0x7f0000000580)=[{}, {}, {}, {}, {}, {}], 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xe, 0x7fff7ffc}]})

6.021670985s ago: executing program 5 (id=885):
r0 = open(&(0x7f0000000040)='./bus\x00', 0x1c1242, 0x0)
r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r1, 0x0, &(0x7f0000001700)=""/44}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x8, 0x60000000, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x50)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x8000000, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0xb}, {0xffff, 0x9}, {0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x4000000000001f2, 0x0)
ftruncate(r0, 0x2007ffb)
connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r2 = gettid()
timer_create(0x8, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r3 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0)
readv(r3, &(0x7f0000001140)=[{&(0x7f0000000700)=""/206, 0xce}], 0x1)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)

5.916243546s ago: executing program 3 (id=886):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18)
connect$inet6(0xffffffffffffffff, &(0x7f0000000240)={0xa, 0x6e23, 0xfffffdff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}, 0x1c)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001840), 0x3b, 0x0)

4.600946146s ago: executing program 3 (id=892):
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a00000005"], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x7ff, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x7}, 0x50)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
connect$inet(r2, &(0x7f00000000c0)={0x2, 0x20, @remote}, 0x10)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/crypto\x00', 0x0, 0x0)
sendfile(r2, r3, 0x0, 0x4000000000010046)

4.55152422s ago: executing program 5 (id=893):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000140)={0x0, <r1=>0x0})
prlimit64(r1, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x80, 0x1, 0x28}, 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x18)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000480)={0x38, r5, 0x1, 0x0, 0xfffffffc, {}, [@ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_DEBUG_MSGMASK={0xc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x8, 0x3, 0x0, 0x1, [{0x4}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r6 = getpid()
sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2)
sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
connect$unix(r7, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e)
sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r7, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7020000140000e5b7030000000700008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r10}, 0x10)
syz_open_procfs(0xffffffffffffffff, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x15, 0x10, 0x2}, 0x50)

3.591665715s ago: executing program 4 (id=897):
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000140)={0x0, &(0x7f0000000a80)=[@out_dx={0xaa, 0x28, {0xcdae, 0x6, 0x4}}, @wrmsr={0x1e, 0x20, {0xb8d, 0x3}}, @wrmsr={0x1e, 0x20, {0x926, 0x3}}, @wr_crn={0x46, 0x20, {0x4, 0x8}}, @in_dx={0x82, 0x20, {0x15cb}}, @in_dx={0x82, 0x20, {0x2b56, 0x1}}, @wr_crn={0x46, 0x20, {0x0, 0x5}}, @wr_drn={0x6e, 0x20, {0x0, 0x4}}, @in_dx={0x82, 0x20, {0xce1e, 0x3}}, @code={0xa, 0x51, {"c4618565053e000000b805000000b9adcdbab40f01d941d1e9f0408020050f01f82e66400f3a416f01cc640fc73a3e66440f38820766b81c008ec8c4a2795823"}}, @wrmsr={0x1e, 0x20, {0x96c, 0xf9a3}}, @wr_drn={0x6e, 0x20, {0x7, 0x80000000}}, @out_dx={0xaa, 0x28, {0x40000000000ead1, 0x5, 0x4}}, @out_dx={0xaa, 0x28, {0xe1a0, 0x2, 0x6}}, @cpuid={0x14, 0x18, {0x40, 0x800}}, @in_dx={0x82, 0x20, {0x9504}}, @cpuid={0x14, 0x18, {0x302, 0x4}}, @rdmsr={0x32, 0x18, {0x864}}, @wr_drn={0x6e, 0x20, {0x4, 0xf4}}], 0x2ee})
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0)
write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
symlink(0x0, &(0x7f0000000000)='./file0\x00')
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

3.284367855s ago: executing program 5 (id=904):
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)

3.249822759s ago: executing program 3 (id=905):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10)
r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0)
write$UHID_CREATE(r1, &(0x7f0000000a00)={0x0, {'syz0\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000940)=""/3, 0x3, 0x0, 0x4, 0x0, 0x0, 0xc08}}, 0x120)
readv(r1, &(0x7f0000000140), 0x0)

3.194413405s ago: executing program 5 (id=906):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="b702000008000000bfa300000000000007030000ffffffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000001404000001007d60b7030000000000006a0a00fe40000900850000001f000000b70000000000000095000000000000006623848adf1dc9a764ab51a064caff0c9b27a26293fddf0180000071ff31f1622271d5518193e09483c5a020c334f8c76334d8ce8303b81ddaa52e8756ad60a07d6f27c125e16d024098f755d8583da60f27c162dbba0700002ac9170f50f2568836077b7f711a18ebf608d87b885297b6b6981978d51514b00dcc4a2748b376358c33c9753beab62bdf27dc04e4cb4bc598affd989b1ca58949a54d5827df14feecea46408a05d572077f1252fbb72c3d099c501bc4ded6fca17a3447222c95edb47b770009524edd5fa5c53e9c37251709f1ff7f0000f07bf7f53ce129a9ecd3b4dd15100f2b450f98526a0d8cac7c97fc2f64015306a1bd88345710fb6379b4c53cf55eefb4c0974486a8d25a363adbd83b49e13fbd1757b27020bd9b8cff3f48c9411670c34f23ab8caf7851b290feb3045a1b622f20c4383a0280f040de7667f8b1d0842835e81c35af41e5b5b924275cb1749289b44e9728e7a73f148ac8206afe120c1437490d9900000011000003971b32fdffffffffffffffaf580278e1342aabd1b623f6c4f128858e4eb6b42f2173184c2b99b645f6ec0e14e5d7c95a0008000000f30f6c0000000000ff0000b8f5001a1d2a34dc0973ec302bc23211d3e3b6e6dad65a51e5497a3419cecec38126247b27113ad4c7915c8f82c333a7b350802f0311807010d1ed50c18411aa6900daccc02f4ba4b078f07e41f781eee222c7d071d5a94d82ca9a0846c1af59cee16639b4970f8f0a82c6a712fd5722d677d406160ffaffffffb4e0bde6749aa52c408b74251914c5d3255fd88a42e7ebb69ebcd8eee623e51dbb1f1b548c91a6825c0686fdc16be1cbb72c217fda18bd746253ca66093daf35923300b600000000ac376e0a4649a8a84e1d293a6b109c5e59b366bca5cc3d936c53d4a48c05099e6fc37e5aa23bff8cce0600000000000300a568a8532623d12b40b50ac26f2e8255470a04bfbe7acb581b90991d965a01d1f84cb6b973558e1e3f8118c77ccf0b3c6eb6443870004da10c75723b65f83769ad1f0e4ef6b9ef1cec23264fd8fdac6264af1cb467020bdc12b797b6c156c439105829d2ae1c45f7cfa40df68f536a03353a55a8a8e176e5d48887d31c8e0f77f2c1e68ec7c01bd5a2028a8fc107007f5f4c67600a6ade3deb1f200abe1f753754678dae8b4e3ba3d086d4b95dfc5817e3dafae2d38b522f942cc750399d9029f071fdb1e05882f8a4b8fbd219ccac3a895828b4f22b6527ce31ceb02b7b2b4492510134552f0b076b168394f8417f25cc82ae04007193cbe69de8bf35e4bebd15412426b2020ab1f05fc44ae9ae094c1b81d3ef947692b44d2afb09c7498dedf0f87c38bbcab7357836f03e8a7c392e535694a3ead2de11e6b1781e2a017ac341fda2e563ee95085742f5fee9f95f4741b226e428d20b00bc140000e4b2f5efd0a0b1ceba000830ba8634b5aa26bdbe91614e92fae3c7349531df9bf4c01ebf5d8eb7d53e5f30647661623fbdb3f6c3652c423ce6ecc1be5d4e8133fc32f68ea86a2df1e7df98a0ae216c405d0ae9eed114ff2d6fe27dfdff1cf9194849c4cc0da9533e5983863e526a7dc0d8728f3b573ca4427bdb44df9341e9b8420e896598a156c935c800436a312e7ae3c011e46851ac599f0427729ab9c55ae0ab4c0000000000000000000000000000c87bcc2ac5aed9467b51d92e0993af4beaf1f3d47dcdfab9165f98155d93e383d6b85158b54675c1585037508c1e9461a1c3d1a6e2402045cae150a7016f716eebbdf6afc4414d900be0bdf19f4a273f44f4357380b4387f1c8b104f0e406b2f04e5ed88631be6411f9927fe9f83412b7c5a676ceec8b454ebf6481c98e86b6933a02daea0b4ec0be5b3d916bd70208b4588626c27c318475802e2c62681bd1a331422a6e47bbd40857d52c4894944fae5c5000000000000000000000000e0c47613e950b6aefeae054fc723f62ac7d13941de11b018f1f48ac50335df91c771729f81929128135b2803562c1171ee00a3f4a31281aa363e087d53d86dd85e3ff979a7e72d16fdd7e1a0f07a1c8e6085d280d760f74975ceb3a5be6cfb4da8e0aeb769b8b75f4aad803ed77d34872eed2711aa40a3b38099dc2752e8ec9b520faf39e416752aa0830206736570f5d41a4df848c9052551cf8dcb1be000000000eb2577188e8e96bd825d462350905d3eb916b397d2a46a64081e85661d7a5a2716cc87cb1976d15d9b6418e94f165911803e43830432226c660f4da67bb7c8ceb3755c07197d8b80b8d16b12c2ec63bebe107aa2350a7ae564bf69a6c52a2da1496016dd66a1c1b112"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000880), 0xfffffffffffffddd, 0x0, 0xffffffffffffffff, 0x28}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0x22, 0x0, &(0x7f0000000040)="3d6ee2e04b91ab10143d9abe86dd", 0x0, 0xfffc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

3.109127153s ago: executing program 3 (id=907):
creat(&(0x7f00000000c0)='./bus\x00', 0x182)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={0x0}, 0x18)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

3.059528188s ago: executing program 5 (id=909):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x7, 0x4, 0x200, 0x21db}, 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000f00000000000000000218120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB], 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYBLOB='\a'], 0x10)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
sendmmsg$inet6(r5, &(0x7f0000008c00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000c80)=[{0x0}], 0x1}}], 0x2, 0x20004810)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0xc, @mcast2, 0x9}, 0x1c)
r7 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB], 0x0)
syz_usb_control_io(r7, &(0x7f0000000a40)={0x2c, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0)

2.867501647s ago: executing program 0 (id=910):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000400018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={0x0, r1}, 0x18)
sigaltstack(0x0, 0x0)

2.606882393s ago: executing program 0 (id=911):
r0 = socket(0x10, 0x803, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x6ac, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x680, 0x2, [@TCA_U32_SEL={0x254, 0x5, {0xa, 0x5, 0x0, 0x101, 0x5, 0x5, 0x6, 0x4, [{0xff, 0x9, 0x7ff, 0x4}, {0x7bfb, 0x2, 0x1f34f1d5, 0x10001}, {0x8, 0x6, 0x94}, {0x7, 0x8, 0x9, 0x9}, {0x7, 0x3, 0x8, 0x4}, {0x7ff, 0x2, 0x3, 0x5}, {0xf88, 0x9, 0x5, 0xc3}, {0x7, 0x9, 0xfffffff9, 0x9}, {0x3, 0xfffffff8, 0x2, 0x7}, {0x4, 0x7, 0x2, 0xffffffff}, {0xcd, 0x2, 0x2, 0x6}, {0x4, 0xfffffffc, 0x5, 0x3}, {0xfffffc00, 0x0, 0xffffffff, 0x1}, {0xfffffffa, 0xfffffff8, 0x2, 0x2}, {0xf8, 0x4, 0x2, 0x7}, {0xf, 0x3, 0x3, 0x10000}, {0x9, 0x101, 0x5, 0x7}, {0x0, 0x0, 0x1, 0x5}, {0x81, 0x1, 0x3, 0x7}, {0x6, 0x9, 0x40}, {0xfffffff7, 0x9, 0x7, 0x9}, {0x1de, 0x1, 0x10, 0x20}, {0x9, 0xfffffffe, 0x3, 0x8000}, {0x11f4, 0x4, 0x4, 0x7ff}, {0x62, 0xfffffff1, 0x2, 0x1}, {0x0, 0x8, 0x2e90, 0x7}, {0x6, 0x0, 0x7fff, 0x66c}, {0xf04, 0x8, 0xebe5, 0x1}, {0xa1, 0x7, 0x6372, 0x1b90}, {0xc, 0x5, 0x2, 0xa00f}, {0x1cd2c000, 0x141ed403, 0x4, 0x1}, {0x5, 0x100, 0x3, 0x2}, {0x3, 0x6000, 0xfff, 0x3}, {0xf89, 0x8, 0xfffffff9, 0x2}, {0x9, 0x0, 0x9, 0x9}, {0x9, 0x3, 0xac, 0x8}]}}, @TCA_U32_MARK={0x10, 0xa, {0x8, 0x3}}, @TCA_U32_FLAGS={0x8, 0xb, 0x3}, @TCA_U32_POLICE={0x410, 0x6, [@TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x67d7763c, 0x2, 0x80, 0x0, 0x81, 0x7fffffff, 0xfffffff8, 0x0, 0x3, 0x4, 0xb, 0x1, 0xfffffff7, 0x5, 0x3ff, 0xdd, 0x1, 0x9, 0x1, 0x0, 0x3, 0x1c, 0x81, 0x1f, 0x101, 0x5, 0x4, 0x6, 0x80, 0x4, 0xfffffffe, 0x50fe, 0x6e, 0xd, 0x39, 0xfffffff9, 0x0, 0xfffffffb, 0x8000, 0x5, 0xa00000, 0x3, 0x6, 0x0, 0x200, 0x6, 0x1000, 0x2, 0xa2, 0x4ab9, 0x24b7, 0x9, 0x0, 0xd64f, 0x4, 0x0, 0x401, 0x4, 0x5, 0x7f, 0xe, 0x1, 0x3ff, 0x2, 0x5, 0x6, 0x8, 0xb7ab, 0x7, 0x2, 0x1, 0x13fb, 0x6, 0x5, 0x80000001, 0x7, 0xa6, 0x1, 0x8, 0x6, 0x7, 0x4, 0x1, 0x3, 0x6, 0x1000, 0x0, 0xfff, 0x0, 0xd, 0x6, 0x800, 0x1, 0x1, 0x8001, 0x9, 0x7, 0x598a, 0x2, 0xfffffff9, 0x1, 0x4, 0x100, 0x2, 0xf, 0x0, 0x9, 0x2e49, 0x7, 0x8, 0xc2d, 0x7fffffff, 0x2, 0x200, 0x60, 0x5, 0x0, 0x80, 0x9, 0x6, 0x4, 0x7, 0x5, 0xda6, 0x80, 0x6, 0x3eae, 0xfffffff1, 0x3, 0x4836, 0x3, 0xf4cf, 0x5, 0x4, 0x0, 0x80, 0x800, 0x1240000, 0x5, 0xfff, 0x3, 0x2, 0x4, 0x9480, 0x200, 0x8, 0xffff, 0x2, 0x8da000, 0x3ff, 0xc, 0xfbf, 0x4ae, 0x8, 0xf281, 0x356cb98f, 0xffffb87e, 0x2, 0x3, 0xf, 0xd156, 0x3, 0x1ff, 0x6, 0x5, 0x5, 0x6, 0xffff, 0x168, 0x8, 0x6, 0x6, 0x0, 0x6, 0xd7b, 0x0, 0x80, 0x2d5a, 0x1, 0x80, 0x10001, 0x7, 0x1, 0x4, 0xffff, 0xfff, 0x7, 0x101, 0x7, 0xffffffff, 0x2, 0x2, 0xfba, 0x3, 0x615, 0x8, 0x2, 0x95, 0xb9cf, 0x10000, 0xf3a9, 0x101, 0x6, 0x9, 0x8, 0x224, 0x2, 0xfffffff2, 0x1, 0x6f1, 0x7, 0x2021fa48, 0x3, 0x791290f9, 0xffffff29, 0x7, 0x1, 0x7, 0x101, 0x1, 0xffffff5d, 0x1ff, 0x0, 0xc720, 0x4, 0x7, 0x0, 0x2, 0x8, 0x400, 0x8001, 0x7, 0x9, 0xfff, 0xfffffffa, 0x10, 0x9, 0x5, 0x80000000, 0x4c6, 0xf3de, 0xe26, 0xffff, 0x5, 0x1, 0x0, 0xfffffffe, 0x800, 0x100, 0x7, 0x0, 0x6, 0x6, 0x7, 0x80000000]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x8000}]}]}}]}, 0x6ac}}, 0x24040084)

2.579587425s ago: executing program 0 (id=912):
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x4c, &(0x7f00000002c0)=0x2)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newtaction={0x68, 0x30, 0x10d, 0x70bd2a, 0x25dfdbfd, {}, [{0x54, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x40, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x2, 0x9, 0x4, 0x8be6, 0x5}}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xffe0, 0xd}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4081}, 0x2400c800)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x9)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x5, &(0x7f0000000440)=@framed={{}, [@map_idx={0x18, 0x0, 0x5, 0x0, 0x3}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r6}, 0x10)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r7}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000001040)=@base={0xa, 0x4, 0x4, 0xc}, 0x50)
sendmsg$NFQNL_MSG_VERDICT(0xffffffffffffffff, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000700)={0x20, 0x1, 0x3, 0x401, 0x0, 0x0, {}, [@NFQA_VERDICT_HDR={0xc}]}, 0x20}}, 0x0)
unshare(0x62040200)
mremap(&(0x7f00002d7000/0x1000)=nil, 0x1000, 0x2000, 0x0, &(0x7f00001ec000/0x2000)=nil)
r8 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCADDRT(r8, 0x890b, &(0x7f0000000000)={0x4000000, {}, {0x2, 0x0, @dev}, {0x2, 0x0, @empty}, 0x1c0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x9})
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x13, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000800161d4910dbdea3fd42d6b76480f79645805185c6fcbd14303eeb0000000000007110289f00"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x80)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0)

2.53509461s ago: executing program 4 (id=913):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="09000000070000007165000004"], 0x50)
bpf$MAP_UPDATE_CONST_STR(0x15, &(0x7f0000000100)={{r0}, 0x0, 0x0}, 0x20)

2.518464171s ago: executing program 6 (id=914):
sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000880)={0x118, 0x0, 0x300, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void, @val={0xc, 0x99, {0x10001, 0x32}}}}, [@NL80211_ATTR_VENDOR_DATA={0x7d, 0xc5, "0b1bba3ab48b9823b7fb3a0ed564acbe444178171c7800799f51dffa17c09da4106127dc17f1fc26b6368f24315a78a825e36ce3aa5b248d8f228ab4d5f9454134cd663ad426a4ecd9bc2cc8016e51ba11f104c850a024f139f024c14b14bb18b6d2b02173531ca4aef79f34e930cc31073705aa6f35507bff"}, @NL80211_ATTR_VENDOR_DATA={0x77, 0xc5, "4080777f4ac84b85a114364a184ceab70c027a0381fea04b7307d580cafb2e78f8e5aa124e7241ae8c364b21b944efdf871047d485b3acc7300eca9958e5295af03b60ba76c54df792e67f00e370712c00f4fde8c80c92dd359025db44c38985eff2083b5e01acd8a67602dafcc97f367e77ec"}]}, 0x118}, 0x1, 0x0, 0x0, 0x8048001}, 0x20000800)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0)
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000001880)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0xc0}}, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x5, 0x6, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x0, 0x1c, 0x0, 0xffffffffffffffff, 0x6], 0x0, 0x41901})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

2.471916476s ago: executing program 4 (id=915):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000140)={0x0, <r1=>0x0})
prlimit64(r1, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x80, 0x1, 0x28}, 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x18)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000480)={0x38, r5, 0x1, 0x0, 0xfffffffc, {}, [@ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_DEBUG_MSGMASK={0xc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x8, 0x3, 0x0, 0x1, [{0x4}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r6 = getpid()
sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2)
sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
connect$unix(r7, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e)
sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r7, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7020000140000e5b7030000000700008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r10}, 0x10)
syz_open_procfs(0xffffffffffffffff, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x15, 0x10, 0x2}, 0x50)

2.471339746s ago: executing program 6 (id=916):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x4, 0x5}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
r2 = add_key$keyring(&(0x7f0000000080), &(0x7f00000002c0)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$restrict_keyring(0xa, r2, &(0x7f0000000300)='asymmetric\x00', 0x0)

2.470853376s ago: executing program 6 (id=917):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10)
r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0)
write$UHID_CREATE(r1, &(0x7f0000000a00)={0x0, {'syz0\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000940)=""/3, 0x3, 0x0, 0x4, 0x0, 0x0, 0xc08}}, 0x120)
readv(r1, &(0x7f0000000140), 0x0)

2.415920171s ago: executing program 6 (id=918):
openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x101142, 0x56633bd1cf1d94b2)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}, {@metacopy_on}], [], 0x2c})
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x8800, 0x8)
syz_mount_image$fuse(0x0, &(0x7f0000000580)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x420, 0x0, 0x0, 0x0, 0x0)
renameat2(r0, &(0x7f0000000380)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r1, &(0x7f0000000040)='./file1\x00', 0x2)

355.116405ms ago: executing program 0 (id=919):
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xae, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000500)='9p_client_req\x00', r0}, 0x10)
pipe2$9p(&(0x7f0000001900)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000500)='9p_client_req\x00', r3}, 0x10)
r4 = dup(r2)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[], [], 0x6b}})

339.764917ms ago: executing program 6 (id=920):
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000100)={'tunl0\x00', &(0x7f0000000040)={'ip_vti0\x00', 0x0, 0x20, 0x80, 0x8, 0x4, {{0xd, 0x4, 0x0, 0x1, 0x34, 0x65, 0x0, 0x8, 0x7b, 0x0, @local, @private=0xa010101, {[@timestamp={0x44, 0x18, 0xd0, 0x0, 0xd, [0x10001, 0x5, 0x3, 0xe7a, 0x3]}, @cipso={0x86, 0x6, 0xffffffffffffffff}]}}}}})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = dup(r1)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x26e8, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000640)={0x0, 0xd000})
open(&(0x7f0000000000)='./file0\x00', 0x48041, 0xc6)
ioctl$KVM_NMI(r3, 0xae9a)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

311.595959ms ago: executing program 6 (id=921):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000406c256d0000000200000109022400010000000009040000010300000009210000000122050009058103"], 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/13, @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10)
sigaltstack(0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0)
syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3c01}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x6, @string={0x6, 0x3, "ac658b07"}}, 0x0, 0x0}, 0x0)

280.052493ms ago: executing program 0 (id=922):
pipe2$9p(&(0x7f0000000240), 0x0)
write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18}, 0x18)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x100, 0x4, 0x28}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x18)
syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000012c0), 0xfe, 0x244, &(0x7f0000000400)="$eJzs3T9oJFUcB/DvzO565m6RUxtB/AMiooFwdoJNbBQCEoKIoEJExEZJhJhgl1jZWGitksomiJ3RUtIEG0WwipoiNoIGC4OFFiu7k0hMVqNu3Dkynw9MZibz3vzesPN9u83sBmisq0mmk7SSTCbpJCmON7i7Wq4e7q5PbM8nvd4TPxWDdtV+5ajflSRrSR5KslUWeamdrGw+s/fLzmP3vbncuff9zacnxnqRh/b3dh8/eG/2jY9mHlz54qsfZotMp/un6zp/xZD/tYvklv+j2HWiaNc9Av6Judc+/Lqf+1uT3DPIfydlqhfvraUbtjp54N2/6vv2j1/ePs6xAuev1+v03wPXekDjlEm6KcqpJNV2WU5NVZ/hv2ldLl9eXHp18sXF5YUX6p6pgPPSTXYf/eTSx1dO5P/7VpV/4OLq5//JuY1v+9sHrbpHA4zFHdWqn//J51bvj/xD48g/NJf8Q3PJPzSX/ENzyT80l/zDBdb5+8PyD80l/9Bc8g/NdTz/AECz9C7V/QQyUJe65x8AAAAAAAAAAAAAAAAAAOC09Ynt+aNlXDU/eyfZfyRJe1j91uD3iJMbB38v/1z0m/2hqLqN5Nm7RjzBiD6o+enrm76rt/7nd9Zbf3UhWXs9ybV2+/T9Vxzef//dzWcc7zw/YoF/qTix//BT461/0m8b9daf2Uk+7c8/14bNP2VuG6yHzz/ds79i+Uyv/DriCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABib3wMAAP//+kBtTA==")
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x143042, 0xf0)
truncate(0x0, 0x2)
ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000005c0))
r3 = openat(0xffffffffffffff9c, 0x0, 0x42, 0xc2)
pwrite64(r3, &(0x7f0000000080)="cc", 0x1, 0x200980)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
ioctl$EXT4_IOC_MIGRATE(r2, 0x6609)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, 0x0, &(0x7f0000000940)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000001400000000000000ff000000850000000e000000850000000700000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)

76.014603ms ago: executing program 0 (id=923):
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000640), 0x10000000000001d0)

0s ago: executing program 5 (id=924):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000f1ffff000000000000100000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000000e}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0x101}, 0x18)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000380)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x7, 0x7}, {}, {0x8, 0x2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0xfffffffd, 0x400, 0x7, 0x6, 0x7}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0x0, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x10}, 0x0)

kernel console output (not intermixed with test programs):

 with all layers on same fs, ignore.
[   79.353102][ T1126] loop0: detected capacity change from 0 to 256
[   79.361691][ T1126] exfat: Deprecated parameter 'namecase'
[   79.385795][ T1126] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d)
[   79.848324][ T1131] loop3: detected capacity change from 0 to 256
[   79.940626][   T30] kauditd_printk_skb: 3 callbacks suppressed
[   79.940642][   T30] audit: type=1400 audit(1760352032.065:264): avc:  denied  { bind } for  pid=1127 comm="syz.3.224" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   79.970325][ T1131] exfat: Deprecated parameter 'namecase'
[   80.024995][ T1131] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d)
[   80.045848][   T30] audit: type=1400 audit(1760352032.265:265): avc:  denied  { setopt } for  pid=1127 comm="syz.3.224" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   80.073154][   T30] audit: type=1400 audit(1760352032.265:266): avc:  denied  { mount } for  pid=1127 comm="syz.3.224" name="/" dev="ramfs" ino=19784 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1
[   80.126868][   T30] audit: type=1400 audit(1760352032.345:267): avc:  denied  { ioctl } for  pid=1136 comm="syz.5.225" path="socket:[19850]" dev="sockfs" ino=19850 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   80.559691][ T1152] overlayfs: "xino" feature enabled using 2 upper inode bits.
[   80.580293][   T30] audit: type=1400 audit(1760352032.675:268): avc:  denied  { mount } for  pid=1142 comm="syz.4.228" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1
[   81.730125][   T30] audit: type=1400 audit(1760352033.935:269): avc:  denied  { unmount } for  pid=282 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1
[   82.680076][  T345] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   83.716550][   T30] audit: type=1400 audit(1760352035.295:270): avc:  denied  { nlmsg_write } for  pid=1190 comm="syz.3.243" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   83.970121][  T345] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   83.984374][  T345] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   84.334984][ T1195] loop6: detected capacity change from 0 to 512
[   84.380122][  T345] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[   84.392758][  T345] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0
[   84.406366][  T345] usb 1-1: Manufacturer: syz
[   84.412594][ T1195] EXT4-fs error (device loop6): ext4_fill_super:4832: inode #2: comm syz.6.236: casefold flag without casefold feature
[   84.426610][  T345] usb 1-1: config 0 descriptor??
[   84.440282][ T1195] EXT4-fs (loop6): get root inode failed
[   84.452504][ T1195] EXT4-fs (loop6): mount failed
[   84.761305][ T1186] syz.6.236 (1186) used greatest stack depth: 20832 bytes left
[   85.188239][   T30] audit: type=1400 audit(1760352037.405:271): avc:  denied  { search } for  pid=1215 comm="syz.5.248" name="/" dev="configfs" ino=13796 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[   85.566219][   T20] hid-generic 0000:0004:0000.0005: unknown main item tag 0x0
[   85.574538][   T20] hid-generic 0000:0004:0000.0005: unknown main item tag 0x0
[   85.582533][   T20] hid-generic 0000:0004:0000.0005: unknown main item tag 0x0
[   85.591160][   T20] hid-generic 0000:0004:0000.0005: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz0
[   85.647236][ T1242] fido_id[1242]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[   85.670174][   T26] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[   85.819821][  T345] input: syz Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.0004/input/input6
[   85.915502][  T345] input: syz Pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.0004/input/input7
[   85.937283][  T345] uclogic 0003:256C:006D.0004: input,hidraw0: USB HID v0.00 Keypad [syz] on usb-dummy_hcd.0-1/input0
[   85.991161][   T26] usb 7-1: Using ep0 maxpacket: 16
[   85.995238][  T345] usb 1-1: USB disconnect, device number 2
[   86.191166][   T26] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   86.202406][   T26] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3
[   86.538442][ T1252] fido_id[1252]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory
[   88.043990][ T1268] bridge0: port 3(gretap0) entered blocking state
[   88.050536][ T1268] bridge0: port 3(gretap0) entered disabled state
[   88.060422][ T1268] device gretap0 entered promiscuous mode
[   88.066871][ T1268] bridge0: port 3(gretap0) entered blocking state
[   88.073330][ T1268] bridge0: port 3(gretap0) entered forwarding state
[   88.243698][   T30] audit: type=1400 audit(1760352040.245:272): avc:  denied  { create } for  pid=1261 comm="syz.5.264" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[   88.268402][   T30] audit: type=1400 audit(1760352040.265:273): avc:  denied  { ioctl } for  pid=1261 comm="syz.5.264" path="socket:[19443]" dev="sockfs" ino=19443 ioctlcmd=0x89a2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   88.342105][    T6] hid-generic 0000:0004:0000.0006: unknown main item tag 0x0
[   88.362303][   T26] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   88.364202][    T6] hid-generic 0000:0004:0000.0006: unknown main item tag 0x0
[   88.372357][ T1276] loop6: detected capacity change from 0 to 16
[   88.391893][   T26] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   88.395279][    T6] hid-generic 0000:0004:0000.0006: unknown main item tag 0x0
[   88.399932][   T26] usb 7-1: Product: syz
[   88.399948][   T26] usb 7-1: Manufacturer: syz
[   88.399962][   T26] usb 7-1: SerialNumber: syz
[   88.424137][    T6] hid-generic 0000:0004:0000.0006: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz0
[   88.430166][   T26] usb 7-1: can't set config #1, error -71
[   88.461423][   T26] usb 7-1: USB disconnect, device number 2
[   88.543313][ T1276] erofs: (device loop6): mounted with root inode @ nid 36.
[   88.590226][   T30] audit: type=1400 audit(1760352040.725:274): avc:  denied  { ioctl } for  pid=1270 comm="syz.4.266" path="user:[4026531837]" dev="nsfs" ino=4026531837 ioctlcmd=0xf509 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[   88.779811][ T1281] loop0: detected capacity change from 0 to 256
[   88.788523][ T1276] erofs: (device loop6): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[   88.948474][ T1276] erofs: (device loop6): z_erofs_readpage: failed to read, err [-117]
[   88.967594][ T1286] fido_id[1286]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[   88.978381][ T1276] erofs: (device loop6): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[   88.990759][ T1276] erofs: (device loop6): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[   89.000638][ T1276] erofs: (device loop6): z_erofs_readahead: readahead error at page 42 @ nid 36
[   89.010071][ T1276] erofs: (device loop6): z_erofs_readahead: readahead error at page 41 @ nid 36
[   89.019237][ T1276] erofs: (device loop6): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[   89.815183][   T30] audit: type=1400 audit(1760352041.505:275): avc:  denied  { ioctl } for  pid=1280 comm="syz.0.270" path="socket:[20507]" dev="sockfs" ino=20507 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   89.854536][ T1276] erofs: (device loop6): z_erofs_readahead: readahead error at page 40 @ nid 36
[   90.034243][ T1276] erofs: (device loop6): z_erofs_readahead: readahead error at page 39 @ nid 36
[   90.084967][ T1276] erofs: (device loop6): z_erofs_readahead: readahead error at page 38 @ nid 36
[   90.114506][ T1276] erofs: (device loop6): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[   90.134586][ T1276] erofs: (device loop6): z_erofs_readahead: readahead error at page 31 @ nid 36
[   90.151673][ T1276] erofs: (device loop6): z_erofs_readahead: readahead error at page 27 @ nid 36
[   90.161888][ T1276] erofs: (device loop6): z_erofs_readahead: readahead error at page 26 @ nid 36
[   90.170965][  T286] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[   90.216509][ T1276] erofs: (device loop6): z_erofs_readahead: readahead error at page 25 @ nid 36
[   90.235962][ T1276] erofs: (device loop6): z_erofs_readahead: readahead error at page 24 @ nid 36
[   90.246153][ T1276] erofs: (device loop6): z_erofs_readahead: readahead error at page 4 @ nid 36
[   90.255470][ T1276] erofs: (device loop6): z_erofs_map_blocks_iter: invalid logical cluster 0 at nid 36
[   90.266215][ T1276] erofs: (device loop6): z_erofs_readahead: readahead error at page 0 @ nid 36
[   90.275840][ T1276] attempt to access beyond end of device
[   90.275840][ T1276] loop6: rw=524288, want=312, limit=16
[   90.293069][ T1276] attempt to access beyond end of device
[   90.293069][ T1276] loop6: rw=524288, want=1049280, limit=16
[   90.305091][ T1276] attempt to access beyond end of device
[   90.305091][ T1276] loop6: rw=524288, want=24, limit=16
[   90.321422][ T1276] attempt to access beyond end of device
[   90.321422][ T1276] loop6: rw=524288, want=848, limit=16
[   90.340237][ T1276] attempt to access beyond end of device
[   90.340237][ T1276] loop6: rw=524288, want=13478624104, limit=16
[   90.359643][ T1276] attempt to access beyond end of device
[   90.359643][ T1276] loop6: rw=524288, want=13478624080, limit=16
[   90.372481][ T1276] erofs: (device loop6): z_erofs_readahead: readahead error at page 87 @ nid 36
[   90.381671][ T1276] erofs: (device loop6): z_erofs_readahead: readahead error at page 86 @ nid 36
[   90.403196][ T1276] erofs: (device loop6): z_erofs_readahead: readahead error at page 85 @ nid 36
[   90.408095][ T1312] loop0: detected capacity change from 0 to 512
[   90.412628][ T1276] erofs: (device loop6): z_erofs_readahead: readahead error at page 84 @ nid 36
[   90.428212][ T1276] erofs: (device loop6): z_erofs_readahead: readahead error at page 83 @ nid 36
[   90.438343][ T1276] erofs: (device loop6): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[   90.447717][  T286] usb 6-1: Using ep0 maxpacket: 16
[   90.448160][ T1276] erofs: (device loop6): z_erofs_readahead: readahead error at page 82 @ nid 36
[   90.462851][ T1276] erofs: (device loop6): z_erofs_readahead: readahead error at page 81 @ nid 36
[   90.472489][ T1276] erofs: (device loop6): z_erofs_readahead: readahead error at page 80 @ nid 36
[   90.482036][ T1276] erofs: (device loop6): z_erofs_readahead: readahead error at page 79 @ nid 36
[   90.492446][ T1276] erofs: (device loop6): z_erofs_readahead: readahead error at page 78 @ nid 36
[   90.501706][ T1276] erofs: (device loop6): z_erofs_readahead: readahead error at page 77 @ nid 36
[   90.511612][ T1276] erofs: (device loop6): z_erofs_readahead: readahead error at page 76 @ nid 36
[   90.524035][ T1312] EXT4-fs error (device loop0): ext4_do_update_inode:5235: inode #16: comm syz.0.279: corrupted inode contents
[   90.536591][ T1312] EXT4-fs error (device loop0): ext4_dirty_inode:6071: inode #16: comm syz.0.279: mark_inode_dirty error
[   90.537833][ T1276] erofs: (device loop6): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[   90.548636][ T1312] EXT4-fs error (device loop0): ext4_do_update_inode:5235: inode #16: comm syz.0.279: corrupted inode contents
[   90.569522][ T1312] EXT4-fs error (device loop0): __ext4_ext_dirty:183: inode #16: comm syz.0.279: mark_inode_dirty error
[   90.580966][  T286] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   90.587017][ T1276] erofs: (device loop6): z_erofs_readahead: readahead error at page 75 @ nid 36
[   90.592215][ T1312] EXT4-fs error (device loop0): ext4_do_update_inode:5235: inode #16: comm syz.0.279: corrupted inode contents
[   90.609171][    T6] hid-generic 0000:0004:0000.0007: unknown main item tag 0x0
[   90.612902][  T286] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   90.622933][    T6] hid-generic 0000:0004:0000.0007: unknown main item tag 0x0
[   90.630067][  T286] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[   90.638337][ T1276] erofs: (device loop6): z_erofs_readahead: readahead error at page 74 @ nid 36
[   90.650364][  T286] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[   90.660238][ T1276] erofs: (device loop6): z_erofs_readahead: readahead error at page 73 @ nid 36
[   90.668451][ T1312] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem
[   90.677944][    T6] hid-generic 0000:0004:0000.0007: unknown main item tag 0x0
[   90.686071][  T286] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   90.695431][ T1276] erofs: (device loop6): z_erofs_readahead: readahead error at page 72 @ nid 36
[   90.702534][  T286] usb 6-1: config 0 descriptor??
[   90.716339][ T1312] EXT4-fs error (device loop0): ext4_do_update_inode:5235: inode #16: comm syz.0.279: corrupted inode contents
[   90.716428][    T6] hid-generic 0000:0004:0000.0007: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz0
[   90.737988][ T1276] erofs: (device loop6): z_erofs_readahead: readahead error at page 71 @ nid 36
[   90.747473][ T1312] EXT4-fs error (device loop0): ext4_truncate:4304: inode #16: comm syz.0.279: mark_inode_dirty error
[   90.758607][ T1276] erofs: (device loop6): z_erofs_readahead: readahead error at page 70 @ nid 36
[   90.758706][ T1276] erofs: (device loop6): z_erofs_readahead: readahead error at page 61 @ nid 36
[   90.780093][ T1276] erofs: (device loop6): z_erofs_readahead: readahead error at page 59 @ nid 36
[   90.789177][ T1276] erofs: (device loop6): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[   90.806091][ T1321] loop3: detected capacity change from 0 to 512
[   90.809197][ T1319] fido_id[1319]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[   90.826541][ T1312] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem
[   90.835838][ T1276] erofs: (device loop6): z_erofs_readahead: readahead error at page 58 @ nid 36
[   90.837034][ T1312] EXT4-fs (loop0): 1 truncate cleaned up
[   90.853948][ T1321] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem
[   90.863117][ T1276] erofs: (device loop6): z_erofs_readahead: readahead error at page 57 @ nid 36
[   90.873020][ T1321] EXT4-fs (loop3): invalid journal inode
[   90.877269][ T1312] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   90.878755][ T1321] EXT4-fs (loop3): can't get journal size
[   90.890318][ T1312] ext4 filesystem being mounted at /44/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   90.910358][ T1276] erofs: (device loop6): z_erofs_readahead: readahead error at page 56 @ nid 36
[   90.927792][ T1321] EXT4-fs (loop3): 1 truncate cleaned up
[   90.933733][ T1276] erofs: (device loop6): z_erofs_readahead: readahead error at page 55 @ nid 36
[   90.942884][ T1321] EXT4-fs (loop3): mounted filesystem without journal. Opts: noload,,errors=continue. Quota mode: none.
[   90.950152][ T1276] erofs: (device loop6): z_erofs_readahead: readahead error at page 54 @ nid 36
[   90.979780][ T1276] erofs: (device loop6): z_erofs_readahead: readahead error at page 53 @ nid 36
[   90.989500][ T1276] erofs: (device loop6): z_erofs_readahead: readahead error at page 52 @ nid 36
[   91.037030][ T1276] erofs: (device loop6): z_erofs_readahead: readahead error at page 51 @ nid 36
[   91.048288][ T1276] erofs: (device loop6): z_erofs_readahead: readahead error at page 50 @ nid 36
[   91.067213][ T1276] erofs: (device loop6): z_erofs_readahead: readahead error at page 49 @ nid 36
[   91.076579][ T1276] erofs: (device loop6): z_erofs_readahead: readahead error at page 48 @ nid 36
[   91.086207][ T1276] erofs: (device loop6): z_erofs_readahead: readahead error at page 47 @ nid 36
[   91.095558][ T1276] erofs: (device loop6): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[   91.105175][ T1276] erofs: (device loop6): z_erofs_readahead: readahead error at page 46 @ nid 36
[   91.114339][ T1276] erofs: (device loop6): z_erofs_readahead: readahead error at page 45 @ nid 36
[   91.250779][ T1276] erofs: (device loop6): z_erofs_readahead: readahead error at page 44 @ nid 36
[   91.260913][ T1276] attempt to access beyond end of device
[   91.260913][ T1276] loop6: rw=524288, want=24, limit=16
[   91.274139][  T286] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0
[   91.360106][  T286] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0
[   91.367433][  T286] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0
[   91.379676][ T1276] attempt to access beyond end of device
[   91.379676][ T1276] loop6: rw=524288, want=96, limit=16
[   91.390977][ T1276] attempt to access beyond end of device
[   91.390977][ T1276] loop6: rw=524288, want=32, limit=16
[   91.397903][  T286] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0
[   91.409884][ T1276] attempt to access beyond end of device
[   91.409884][ T1276] loop6: rw=524288, want=14425508776, limit=16
[   91.421316][  T286] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0
[   91.437882][  T286] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0
[   91.445561][  T286] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0
[   91.453890][  T286] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0
[   91.461310][  T286] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0
[   91.468562][  T286] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0
[   91.475969][  T286] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0
[   91.483265][  T286] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0
[   91.490660][  T286] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0
[   91.497901][  T286] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0
[   91.523635][   T30] audit: type=1400 audit(1760352043.745:276): avc:  denied  { read write } for  pid=1332 comm="syz.6.284" name="rtc0" dev="devtmpfs" ino=259 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[   91.548787][   T30] audit: type=1400 audit(1760352043.745:277): avc:  denied  { open } for  pid=1332 comm="syz.6.284" path="/dev/rtc0" dev="devtmpfs" ino=259 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[   91.637176][  T286] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0
[   91.644546][  T286] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0
[   91.651814][  T286] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0
[   91.659065][  T286] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0
[   91.666369][  T286] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0
[   91.673635][  T286] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0
[   91.680908][  T286] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0
[   91.688163][  T286] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0
[   91.695444][  T286] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0
[   91.702739][  T286] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0
[   91.710023][  T286] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0
[   91.717376][  T286] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0
[   91.724681][  T286] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0
[   91.731954][  T286] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0
[   91.739192][  T286] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0
[   91.746490][  T286] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0
[   91.753761][  T286] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0
[   91.761254][  T286] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0
[   91.768628][  T286] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0
[   91.775947][  T286] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0
[   91.828954][  T286] microsoft 0003:045E:07DA.0008: No inputs registered, leaving
[   91.837709][  T286] microsoft 0003:045E:07DA.0008: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0
[   91.849308][  T286] microsoft 0003:045E:07DA.0008: no inputs found
[   91.855780][  T286] microsoft 0003:045E:07DA.0008: could not initialize ff, continuing anyway
[   91.909202][  T286] usb 6-1: USB disconnect, device number 3
[   92.225454][ T1343] loop0: detected capacity change from 0 to 512
[   92.329026][ T1353] loop5: detected capacity change from 0 to 512
[   92.342191][ T1343] EXT4-fs error (device loop0): ext4_orphan_get:1401: inode #15: comm syz.0.285: casefold flag without casefold feature
[   92.355217][ T1343] EXT4-fs error (device loop0): ext4_orphan_get:1406: comm syz.0.285: couldn't read orphan inode 15 (err -117)
[   92.368044][ T1343] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   92.389171][ T1353] EXT4-fs (loop5): Ignoring removed oldalloc option
[   92.416484][    T6] hid-generic 0000:0004:0000.0009: unknown main item tag 0x0
[   92.424447][    T6] hid-generic 0000:0004:0000.0009: unknown main item tag 0x0
[   92.432098][    T6] hid-generic 0000:0004:0000.0009: unknown main item tag 0x0
[   92.441625][ T1354] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[   92.450940][ T1354] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[   92.467963][    T6] hid-generic 0000:0004:0000.0009: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz0
[   92.536102][ T1364] fido_id[1364]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[   93.165930][ T1362] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=none,decodes=none:owns=io+mem
[   93.328037][ T1386] loop3: detected capacity change from 0 to 1024
[   93.349366][ T1388] loop6: detected capacity change from 0 to 512
[   93.402612][ T1388] EXT4-fs (loop6): 1 orphan inode deleted
[   93.408502][ T1388] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   93.429945][  T434] hid-generic 0000:0004:0000.000A: unknown main item tag 0x0
[   93.437685][ T1386] EXT4-fs (loop3): Test dummy encryption mode enabled
[   93.444605][  T434] hid-generic 0000:0004:0000.000A: unknown main item tag 0x0
[   93.452330][ T1386] EXT4-fs (loop3): Ignoring removed orlov option
[   93.453274][ T1388] ext4 filesystem being mounted at /16/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   93.460253][  T434] hid-generic 0000:0004:0000.000A: unknown main item tag 0x0
[   93.482007][ T1386] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,debug_want_extra_isize=0x0000000000000084,stripe=0x0000000000000007,commit=0x0000000000000005,orlov,barrier=0x0000000000000005,mb_optimize_scan=0x0000000000000001,quota,,errors=continue. Quota mode: writeback.
[   93.510783][  T434] hid-generic 0000:0004:0000.000A: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz0
[   93.611283][ T1396] fido_id[1396]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[   93.938465][   T30] audit: type=1400 audit(1760352046.155:278): avc:  denied  { name_bind } for  pid=1387 comm="syz.6.302" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1
[   94.402724][  T286] hid-generic 0000:0004:0000.000B: unknown main item tag 0x0
[   94.414725][  T286] hid-generic 0000:0004:0000.000B: unknown main item tag 0x0
[   94.488795][  T286] hid-generic 0000:0004:0000.000B: unknown main item tag 0x0
[   94.504731][  T286] hid-generic 0000:0004:0000.000B: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz0
[   94.584190][ T1431] fido_id[1431]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[   94.614681][ T1433] loop3: detected capacity change from 0 to 8192
[   95.870087][  T345] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[   96.017055][ T1459] loop3: detected capacity change from 0 to 512
[   96.138659][ T1463] loop5: detected capacity change from 0 to 256
[   97.038962][ T1253] hid-generic 0000:0004:0000.000C: unknown main item tag 0x0
[   97.046437][ T1253] hid-generic 0000:0004:0000.000C: unknown main item tag 0x0
[   97.054362][ T1253] hid-generic 0000:0004:0000.000C: unknown main item tag 0x0
[   97.062320][ T1253] hid-generic 0000:0004:0000.000C: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz0
[   97.300487][ T1463] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[   97.328037][ T1467] loop6: detected capacity change from 0 to 1024
[   97.343250][ T1463] FAT-fs (loop5): Directory bread(block 64) failed
[   97.349887][ T1463] FAT-fs (loop5): Directory bread(block 65) failed
[   97.357165][ T1463] FAT-fs (loop5): Directory bread(block 66) failed
[   97.363930][ T1463] FAT-fs (loop5): Directory bread(block 67) failed
[   97.370520][ T1463] FAT-fs (loop5): Directory bread(block 68) failed
[   97.377142][ T1463] FAT-fs (loop5): Directory bread(block 69) failed
[   97.383728][ T1463] FAT-fs (loop5): Directory bread(block 70) failed
[   97.390308][ T1463] FAT-fs (loop5): Directory bread(block 71) failed
[   97.396859][ T1463] FAT-fs (loop5): Directory bread(block 72) failed
[   97.403404][ T1463] FAT-fs (loop5): Directory bread(block 73) failed
[   97.431390][ T1467] EXT4-fs (loop6): Ignoring removed orlov option
[   97.448786][ T1468] fido_id[1468]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[   97.472958][ T1467] EXT4-fs (loop6): mounted filesystem without journal. Opts: block_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,norecovery,,errors=continue. Quota mode: none.
[   97.494921][ T1459] EXT4-fs error (device loop3): ext4_orphan_get:1401: inode #15: comm syz.3.324: casefold flag without casefold feature
[   97.509037][ T1459] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.324: couldn't read orphan inode 15 (err -117)
[   97.521388][ T1459] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpid,user_xattr,,errors=continue. Quota mode: writeback.
[   97.526095][ T1471] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=767 (24544 ns) > initial count (7680 ns). Using initial count to start timer.
[   97.599001][  T345] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[   97.608441][  T345] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   97.617238][  T345] usb 1-1: config 0 descriptor??
[   97.789900][ T1481] loop5: detected capacity change from 0 to 1024
[   97.838165][ T1481] EXT4-fs (loop5): Ignoring removed nobh option
[   97.962040][ T1481] EXT4-fs (loop5): Ignoring removed bh option
[   97.968254][ T1481] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   97.991928][ T1481] EXT4-fs (loop5): mounted filesystem without journal. Opts: delalloc,nodelalloc,init_itable=0x0000000000000003,inlinecrypt,data_err=ignore,nodiscard,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback.
[   98.150145][ T1253] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[   98.346113][ T1497] netlink: 148 bytes leftover after parsing attributes in process `syz.3.335'.
[   98.516719][    T6] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[   98.524334][  T345] usb 1-1: Cannot set autoneg
[   98.529067][  T345] MOSCHIP usb-ethernet driver: probe of 1-1:0.0 failed with error -71
[   98.539499][  T345] usb 1-1: USB disconnect, device number 3
[   98.580125][ T1253] usb 5-1: Using ep0 maxpacket: 16
[   98.740132][ T1253] usb 5-1: unable to get BOS descriptor or descriptor too short
[   98.770029][    T6] usb 6-1: Using ep0 maxpacket: 32
[   98.820106][ T1253] usb 5-1: config 13 has an invalid interface number: 50 but max is 0
[   98.828497][ T1253] usb 5-1: config 13 has no interface number 0
[   98.834860][ T1253] usb 5-1: config 13 interface 50 has no altsetting 0
[   98.890094][    T6] usb 6-1: config 0 has an invalid interface number: 1 but max is 0
[   98.898181][    T6] usb 6-1: config 0 has no interface number 0
[   98.904393][    T6] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   98.915396][    T6] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   98.925319][    T6] usb 6-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00
[   98.934627][    T6] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   98.943604][    T6] usb 6-1: config 0 descriptor??
[   98.968176][  T434] hid-generic 0000:0004:0000.000D: unknown main item tag 0x0
[   98.976655][  T434] hid-generic 0000:0004:0000.000D: unknown main item tag 0x0
[   98.984287][  T434] hid-generic 0000:0004:0000.000D: unknown main item tag 0x0
[   98.992637][  T434] hid-generic 0000:0004:0000.000D: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz0
[   99.000190][ T1253] usb 5-1: New USB device found, idVendor=1aca, idProduct=b28e, bcdDevice=92.32
[   99.017413][ T1253] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   99.037580][ T1253] usb 5-1: Product: syz
[   99.041937][ T1253] usb 5-1: Manufacturer: syz
[   99.046647][ T1253] usb 5-1: SerialNumber: syz
[   99.056552][ T1502] fido_id[1502]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[   99.113719][ T1510] 9pnet: Insufficient options for proto=fd
[   99.139781][ T1514] loop3: detected capacity change from 0 to 512
[   99.153193][   T30] audit: type=1400 audit(1760352051.375:279): avc:  denied  { relabelfrom } for  pid=1515 comm="syz.6.344" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1
[   99.173433][   T30] audit: type=1400 audit(1760352051.375:280): avc:  denied  { relabelto } for  pid=1515 comm="syz.6.344" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1
[   99.174586][ T1512] incfs_lookup_dentry err:-5
[   99.193866][   T30] audit: type=1400 audit(1760352051.375:281): avc:  denied  { mounton } for  pid=1511 comm="syz.0.343" path="/56/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   99.198788][ T1512] incfs: Can't find or create .index dir in ./file0
[   99.221888][ T1514] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   99.227146][ T1512] incfs: mount failed -5
[   99.239843][ T1514] ext4 filesystem being mounted at /80/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   99.766553][ T1529] netlink: 20 bytes leftover after parsing attributes in process `syz.0.346'.
[   99.943691][   T26] hid-generic 0000:0004:0000.000F: unknown main item tag 0x0
[   99.952702][   T26] hid-generic 0000:0004:0000.000F: unknown main item tag 0x0
[   99.962272][   T26] hid-generic 0000:0004:0000.000F: unknown main item tag 0x0
[   99.988685][    T6] uclogic 0003:28BD:0094.000E: pen parameters not found
[   99.995890][ T1253] usb 5-1: MIDIStreaming interface descriptor not found
[  100.002966][    T6] uclogic 0003:28BD:0094.000E: interface is invalid, ignoring
[  100.038892][   T26] hid-generic 0000:0004:0000.000F: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz0
[  100.055831][ T1253] usb 5-1: USB disconnect, device number 4
[  100.064182][    T6] usb 6-1: USB disconnect, device number 4
[  100.107452][ T1533] fido_id[1533]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  100.358551][ T1549] loop6: detected capacity change from 0 to 1024
[  100.530138][ T1550] kernel profiling enabled (shift: 10)
[  100.572557][ T1549] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  100.649279][   T30] audit: type=1400 audit(1760352052.865:282): avc:  denied  { map } for  pid=1558 comm="syz.0.359" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=175 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[  100.772181][   T30] audit: type=1400 audit(1760352052.995:283): avc:  denied  { read } for  pid=1554 comm="syz.3.357" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  100.860027][ T1253] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  100.910045][   T26] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  101.120182][ T1253] usb 7-1: Using ep0 maxpacket: 16
[  101.160066][   T26] usb 1-1: Using ep0 maxpacket: 16
[  101.250112][ T1253] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  101.261112][ T1253] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  101.270899][ T1253] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[  101.280010][ T1253] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  101.280621][   T26] usb 1-1: config 7 has an invalid interface number: 163 but max is 0
[  101.290985][ T1253] usb 7-1: config 0 descriptor??
[  101.300065][   T26] usb 1-1: config 7 has no interface number 0
[  101.470127][   T26] usb 1-1: New USB device found, idVendor=1a0a, idProduct=0103, bcdDevice=ce.47
[  101.479925][   T26] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  101.491271][   T26] usb 1-1: Product: syz
[  101.502536][   T26] usb 1-1: Manufacturer: syz
[  101.507581][  T345] hid-generic 0000:0004:0000.0010: unknown main item tag 0x0
[  101.510963][   T26] usb 1-1: SerialNumber: syz
[  101.516125][  T345] hid-generic 0000:0004:0000.0010: unknown main item tag 0x0
[  101.527850][  T345] hid-generic 0000:0004:0000.0010: unknown main item tag 0x0
[  101.536431][  T345] hid-generic 0000:0004:0000.0010: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz0
[  101.572404][ T1571] fido_id[1571]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  101.812199][ T1579] loop3: detected capacity change from 0 to 256
[  101.842597][   T26] usb_ehset_test: probe of 1-1:7.163 failed with error -32
[  101.881360][ T1579] exfat: Deprecated parameter 'namecase'
[  101.897146][ T1579] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d)
[  101.911195][   T30] audit: type=1400 audit(1760352053.995:284): avc:  denied  { create } for  pid=1574 comm="syz.3.365" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1
[  102.032819][   T26] usb 1-1: USB disconnect, device number 4
[  102.963844][   T30] audit: type=1400 audit(1760352055.185:285): avc:  denied  { write } for  pid=1582 comm="syz.3.367" name="config" dev="proc" ino=4026532623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1
[  103.287780][ T1596] syz.3.371[1596] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  103.287860][ T1596] syz.3.371[1596] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  103.383258][ T1596] device dummy0 entered promiscuous mode
[  103.400532][ T1596] device macsec1 entered promiscuous mode
[  104.275380][ T1596] device dummy0 left promiscuous mode
[  104.283281][  T345] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  104.310157][ T1253] usbhid 7-1:0.0: can't add hid device: -71
[  104.324700][ T1253] usbhid: probe of 7-1:0.0 failed with error -71
[  104.340042][   T39] hid-generic 0000:0004:0000.0011: unknown main item tag 0x0
[  104.347497][   T39] hid-generic 0000:0004:0000.0011: unknown main item tag 0x0
[  104.355141][   T39] hid-generic 0000:0004:0000.0011: unknown main item tag 0x0
[  104.363242][   T39] hid-generic 0000:0004:0000.0011: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz0
[  104.469527][ T1602] fido_id[1602]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  106.113033][ T1253] usb 7-1: USB disconnect, device number 3
[  106.178449][ T1617] loop3: detected capacity change from 0 to 1024
[  106.240065][  T345] usb 6-1: Using ep0 maxpacket: 16
[  106.275079][ T1617] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  106.373145][  T345] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  106.384324][  T345] usb 6-1: New USB device found, idVendor=056a, idProduct=0300, bcdDevice= 0.00
[  106.393710][  T345] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  106.405369][  T345] usb 6-1: config 0 descriptor??
[  106.507364][   T30] audit: type=1400 audit(1760352058.725:286): avc:  denied  { read } for  pid=1613 comm="syz.4.377" name="loop-control" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[  106.534426][   T30] audit: type=1400 audit(1760352058.725:287): avc:  denied  { open } for  pid=1613 comm="syz.4.377" path="/dev/loop-control" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[  106.559273][   T30] audit: type=1400 audit(1760352058.755:288): avc:  denied  { ioctl } for  pid=1613 comm="syz.4.377" path="/dev/loop-control" dev="devtmpfs" ino=115 ioctlcmd=0x4c81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[  106.587604][   T30] audit: type=1400 audit(1760352058.755:289): avc:  denied  { setattr } for  pid=1616 comm="syz.3.378" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  106.627180][ T1624] 9pnet_virtio: no channels available for device syz
[  106.792860][ T1624] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:3871: comm syz.3.378: Allocating blocks 497-513 which overlap fs metadata
[  107.369296][ T1624] EXT4-fs (loop3): pa ffff888132ce3498: logic 256, phys. 385, len 8
[  107.377399][ T1624] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:4888: group 0, free 0, pa_free 1
[  108.104448][  T345] usbhid 6-1:0.0: can't add hid device: -71
[  108.110507][  T345] usbhid: probe of 6-1:0.0 failed with error -71
[  108.119424][  T345] usb 6-1: USB disconnect, device number 5
[  108.137144][    T6] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0
[  108.145557][    T6] hid-generic 0000:0000:0000.0012: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  108.149208][   T26] hid-generic 0000:0004:0000.0013: unknown main item tag 0x0
[  108.164299][   T26] hid-generic 0000:0004:0000.0013: unknown main item tag 0x0
[  108.175028][   T26] hid-generic 0000:0004:0000.0013: unknown main item tag 0x0
[  108.186764][   T26] hid-generic 0000:0004:0000.0013: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz0
[  108.206099][ T1648] fido_id[1648]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  109.133706][ T1656] fido_id[1656]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  109.433581][ T1253] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  110.100047][ T1679] loop6: detected capacity change from 0 to 512
[  110.149835][ T1680] netlink: 24 bytes leftover after parsing attributes in process `syz.0.397'.
[  110.163313][ T1683] netlink: 76 bytes leftover after parsing attributes in process `syz.4.398'.
[  110.214017][ T1679] EXT4-fs (loop6): Ignoring removed oldalloc option
[  110.220884][ T1679] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  110.392881][    T6] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  110.396298][ T1679] EXT4-fs (loop6): 1 truncate cleaned up
[  110.406364][ T1679] EXT4-fs (loop6): mounted filesystem without journal. Opts: debug_want_extra_isize=0x000000000000002e,min_batch_time=0x0000000000000fff,inode_readahead_blks=0x0000000000000000,oldalloc,errors=remount-ro,minixdf,. Quota mode: none.
[  110.475041][  T345] hid-generic 0000:0004:0000.0014: unknown main item tag 0x0
[  110.483047][  T345] hid-generic 0000:0004:0000.0014: unknown main item tag 0x0
[  110.490798][  T345] hid-generic 0000:0004:0000.0014: unknown main item tag 0x0
[  110.499143][  T345] hid-generic 0000:0004:0000.0014: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz0
[  110.520033][ T1253] usb 4-1: Using ep0 maxpacket: 16
[  110.547053][ T1688] fido_id[1688]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  110.694749][ T1253] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  110.705961][    T6] usb 6-1: Using ep0 maxpacket: 32
[  110.713040][ T1253] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  110.723239][ T1253] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  110.736475][ T1253] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  110.745606][ T1253] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  111.047279][ T1253] usb 4-1: config 0 descriptor??
[  111.080076][    T6] usb 6-1: config 0 has no interfaces?
[  111.085603][    T6] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  111.100040][    T6] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  111.120855][    T6] usb 6-1: config 0 descriptor??
[  111.364635][   T30] audit: type=1400 audit(1760352063.585:290): avc:  denied  { mounton } for  pid=1668 comm="syz.5.395" path="/proc/130/task" dev="proc" ino=22009 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1
[  111.531396][ T1253] microsoft 0003:045E:07DA.0015: unknown main item tag 0x0
[  111.539101][ T1253] microsoft 0003:045E:07DA.0015: unknown main item tag 0x0
[  111.546483][ T1253] microsoft 0003:045E:07DA.0015: unknown main item tag 0x0
[  111.553920][ T1253] microsoft 0003:045E:07DA.0015: unknown main item tag 0x0
[  111.561514][ T1253] microsoft 0003:045E:07DA.0015: unknown main item tag 0x0
[  111.569177][ T1253] microsoft 0003:045E:07DA.0015: unknown main item tag 0x0
[  111.584433][ T1253] microsoft 0003:045E:07DA.0015: unknown main item tag 0x0
[  111.591828][ T1253] microsoft 0003:045E:07DA.0015: unknown main item tag 0x0
[  111.599801][ T1253] microsoft 0003:045E:07DA.0015: unknown main item tag 0x0
[  111.619220][ T1253] microsoft 0003:045E:07DA.0015: unknown main item tag 0x0
[  111.627257][ T1253] microsoft 0003:045E:07DA.0015: unknown main item tag 0x0
[  111.634758][ T1253] microsoft 0003:045E:07DA.0015: unknown main item tag 0x0
[  111.644445][ T1253] microsoft 0003:045E:07DA.0015: unknown main item tag 0x0
[  111.651891][ T1253] microsoft 0003:045E:07DA.0015: unknown main item tag 0x0
[  111.659645][ T1253] microsoft 0003:045E:07DA.0015: unknown main item tag 0x0
[  111.674023][ T1253] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0015/input/input8
[  111.712860][ T1714] loop6: detected capacity change from 0 to 256
[  111.747185][ T1714] exFAT-fs (loop6): failed to load upcase table (idx : 0x00011a39, chksum : 0xd54015fb, utbl_chksum : 0xe619d30d)
[  111.762676][ T1253] microsoft 0003:045E:07DA.0015: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0
[  111.777965][   T30] audit: type=1400 audit(1760352064.005:291): avc:  denied  { listen } for  pid=1713 comm="syz.6.408" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  111.800163][ T1253] usb 4-1: USB disconnect, device number 2
[  111.805141][   T30] audit: type=1400 audit(1760352064.015:292): avc:  denied  { accept } for  pid=1713 comm="syz.6.408" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  111.834937][   T30] audit: type=1400 audit(1760352064.055:293): avc:  denied  { create } for  pid=1711 comm="syz.0.407" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  111.848742][ T1717] fido_id[1717]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory
[  111.860244][   T30] audit: type=1400 audit(1760352064.055:294): avc:  denied  { connect } for  pid=1711 comm="syz.0.407" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  112.504856][  T434] hid-generic 0000:0004:0000.0016: unknown main item tag 0x0
[  112.513145][  T434] hid-generic 0000:0004:0000.0016: unknown main item tag 0x0
[  112.521671][  T434] hid-generic 0000:0004:0000.0016: unknown main item tag 0x0
[  112.534045][  T434] hid-generic 0000:0004:0000.0016: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz0
[  112.585578][ T1728] binder: BINDER_SET_CONTEXT_MGR already set
[  112.591672][ T1728] binder: 1722:1728 ioctl 4018620d 2000000002c0 returned -16
[  112.981384][ T1729] fido_id[1729]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  113.030699][  T434] usb 6-1: USB disconnect, device number 6
[  113.624369][ T1731] netlink: 28 bytes leftover after parsing attributes in process `syz.0.412'.
[  113.639120][ T1735] loop6: detected capacity change from 0 to 16
[  113.686224][ T1735] erofs: (device loop6): mounted with root inode @ nid 36.
[  113.746057][ T1735] erofs: (device loop6): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  113.763618][ T1735] erofs: (device loop6): z_erofs_readpage: failed to read, err [-117]
[  113.773222][ T1735] erofs: (device loop6): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  113.783424][ T1735] erofs: (device loop6): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  113.793412][ T1735] erofs: (device loop6): z_erofs_readahead: readahead error at page 42 @ nid 36
[  113.812461][ T1735] erofs: (device loop6): z_erofs_readahead: readahead error at page 41 @ nid 36
[  113.821798][ T1735] erofs: (device loop6): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  113.831600][ T1735] erofs: (device loop6): z_erofs_readahead: readahead error at page 40 @ nid 36
[  113.840752][ T1735] erofs: (device loop6): z_erofs_readahead: readahead error at page 39 @ nid 36
[  113.849954][ T1735] erofs: (device loop6): z_erofs_readahead: readahead error at page 38 @ nid 36
[  113.859429][ T1735] erofs: (device loop6): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  113.873313][ T1735] erofs: (device loop6): z_erofs_readahead: readahead error at page 31 @ nid 36
[  113.882964][ T1735] erofs: (device loop6): z_erofs_readahead: readahead error at page 27 @ nid 36
[  113.892191][ T1735] erofs: (device loop6): z_erofs_readahead: readahead error at page 26 @ nid 36
[  113.901302][ T1735] erofs: (device loop6): z_erofs_readahead: readahead error at page 25 @ nid 36
[  113.910389][ T1735] erofs: (device loop6): z_erofs_readahead: readahead error at page 24 @ nid 36
[  113.919580][ T1735] erofs: (device loop6): z_erofs_readahead: readahead error at page 4 @ nid 36
[  113.929321][ T1735] erofs: (device loop6): z_erofs_map_blocks_iter: invalid logical cluster 0 at nid 36
[  113.941031][   T30] audit: type=1400 audit(1760352066.165:295): avc:  denied  { listen } for  pid=1741 comm="syz.4.417" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1
[  113.988752][ T1735] erofs: (device loop6): z_erofs_readahead: readahead error at page 0 @ nid 36
[  113.997972][ T1735] attempt to access beyond end of device
[  113.997972][ T1735] loop6: rw=524288, want=312, limit=16
[  114.009410][ T1735] attempt to access beyond end of device
[  114.009410][ T1735] loop6: rw=524288, want=1049280, limit=16
[  114.026162][ T1735] attempt to access beyond end of device
[  114.026162][ T1735] loop6: rw=524288, want=24, limit=16
[  114.049802][ T1735] attempt to access beyond end of device
[  114.049802][ T1735] loop6: rw=524288, want=848, limit=16
[  114.061168][  T345] usb 1-1: new full-speed USB device number 5 using dummy_hcd
[  114.074739][ T1735] attempt to access beyond end of device
[  114.074739][ T1735] loop6: rw=524288, want=13478624104, limit=16
[  114.087061][ T1735] attempt to access beyond end of device
[  114.087061][ T1735] loop6: rw=524288, want=13478624080, limit=16
[  114.146165][ T1735] erofs: (device loop6): z_erofs_readahead: readahead error at page 87 @ nid 36
[  114.155401][ T1735] erofs: (device loop6): z_erofs_readahead: readahead error at page 86 @ nid 36
[  114.164610][ T1735] erofs: (device loop6): z_erofs_readahead: readahead error at page 85 @ nid 36
[  114.173939][ T1735] erofs: (device loop6): z_erofs_readahead: readahead error at page 84 @ nid 36
[  114.183272][ T1735] erofs: (device loop6): z_erofs_readahead: readahead error at page 83 @ nid 36
[  114.192549][ T1735] erofs: (device loop6): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  114.202056][ T1735] erofs: (device loop6): z_erofs_readahead: readahead error at page 82 @ nid 36
[  114.211203][ T1735] erofs: (device loop6): z_erofs_readahead: readahead error at page 81 @ nid 36
[  114.220372][ T1735] erofs: (device loop6): z_erofs_readahead: readahead error at page 80 @ nid 36
[  114.229466][ T1735] erofs: (device loop6): z_erofs_readahead: readahead error at page 79 @ nid 36
[  114.238731][ T1735] erofs: (device loop6): z_erofs_readahead: readahead error at page 78 @ nid 36
[  114.247876][ T1735] erofs: (device loop6): z_erofs_readahead: readahead error at page 77 @ nid 36
[  114.257135][ T1735] erofs: (device loop6): z_erofs_readahead: readahead error at page 76 @ nid 36
[  114.266447][ T1735] erofs: (device loop6): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  114.275879][ T1735] erofs: (device loop6): z_erofs_readahead: readahead error at page 75 @ nid 36
[  114.285097][ T1735] erofs: (device loop6): z_erofs_readahead: readahead error at page 74 @ nid 36
[  114.294360][ T1735] erofs: (device loop6): z_erofs_readahead: readahead error at page 73 @ nid 36
[  114.303531][ T1735] erofs: (device loop6): z_erofs_readahead: readahead error at page 72 @ nid 36
[  114.312816][ T1735] erofs: (device loop6): z_erofs_readahead: readahead error at page 71 @ nid 36
[  114.321947][ T1735] erofs: (device loop6): z_erofs_readahead: readahead error at page 70 @ nid 36
[  114.331231][ T1735] erofs: (device loop6): z_erofs_readahead: readahead error at page 61 @ nid 36
[  114.340356][ T1735] erofs: (device loop6): z_erofs_readahead: readahead error at page 59 @ nid 36
[  114.349456][ T1735] erofs: (device loop6): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  114.358927][ T1735] erofs: (device loop6): z_erofs_readahead: readahead error at page 58 @ nid 36
[  114.368066][ T1735] erofs: (device loop6): z_erofs_readahead: readahead error at page 57 @ nid 36
[  114.377199][ T1735] erofs: (device loop6): z_erofs_readahead: readahead error at page 56 @ nid 36
[  114.386433][ T1735] erofs: (device loop6): z_erofs_readahead: readahead error at page 55 @ nid 36
[  114.395746][ T1735] erofs: (device loop6): z_erofs_readahead: readahead error at page 54 @ nid 36
[  114.404945][ T1735] erofs: (device loop6): z_erofs_readahead: readahead error at page 53 @ nid 36
[  114.414081][ T1735] erofs: (device loop6): z_erofs_readahead: readahead error at page 52 @ nid 36
[  114.423186][ T1735] erofs: (device loop6): z_erofs_readahead: readahead error at page 51 @ nid 36
[  114.432325][ T1735] erofs: (device loop6): z_erofs_readahead: readahead error at page 50 @ nid 36
[  114.441458][ T1735] erofs: (device loop6): z_erofs_readahead: readahead error at page 49 @ nid 36
[  114.450575][ T1735] erofs: (device loop6): z_erofs_readahead: readahead error at page 48 @ nid 36
[  114.459764][ T1735] erofs: (device loop6): z_erofs_readahead: readahead error at page 47 @ nid 36
[  114.468882][ T1735] erofs: (device loop6): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  114.478243][ T1735] erofs: (device loop6): z_erofs_readahead: readahead error at page 46 @ nid 36
[  114.487592][ T1735] erofs: (device loop6): z_erofs_readahead: readahead error at page 45 @ nid 36
[  114.487700][  T345] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  114.497042][ T1735] erofs: (device loop6): z_erofs_readahead: readahead error at page 44 @ nid 36
[  114.515640][ T1735] attempt to access beyond end of device
[  114.515640][ T1735] loop6: rw=524288, want=24, limit=16
[  114.526743][ T1735] attempt to access beyond end of device
[  114.526743][ T1735] loop6: rw=524288, want=96, limit=16
[  114.537823][ T1735] attempt to access beyond end of device
[  114.537823][ T1735] loop6: rw=524288, want=32, limit=16
[  114.548968][ T1735] attempt to access beyond end of device
[  114.548968][ T1735] loop6: rw=524288, want=14425508776, limit=16
[  114.580090][  T345] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  114.589469][  T345] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  114.597816][  T345] usb 1-1: SerialNumber: syz
[  114.653111][  T345] cdc_acm 1-1:1.0: skipping garbage
[  114.669313][  T345] cdc_acm: probe of 1-1:1.0 failed with error -12
[  115.295743][   T39] usb 1-1: USB disconnect, device number 5
[  115.560891][ T1777] loop3: detected capacity change from 0 to 256
[  115.572061][  T345] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  115.605469][   T30] audit: type=1400 audit(1760352067.825:296): avc:  denied  { ioctl } for  pid=1781 comm="syz.6.431" path="/dev/usbmon0" dev="devtmpfs" ino=155 ioctlcmd=0x9204 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  115.611333][ T1777] FAT-fs (loop3): Directory bread(block 64) failed
[  115.640739][ T1777] FAT-fs (loop3): Directory bread(block 65) failed
[  115.647500][ T1777] FAT-fs (loop3): Directory bread(block 66) failed
[  115.654759][ T1777] FAT-fs (loop3): Directory bread(block 67) failed
[  115.661509][ T1777] FAT-fs (loop3): Directory bread(block 68) failed
[  115.668146][ T1777] FAT-fs (loop3): Directory bread(block 69) failed
[  115.674914][ T1777] FAT-fs (loop3): Directory bread(block 70) failed
[  115.681890][ T1777] FAT-fs (loop3): Directory bread(block 71) failed
[  115.688594][ T1777] FAT-fs (loop3): Directory bread(block 72) failed
[  115.695224][ T1777] FAT-fs (loop3): Directory bread(block 73) failed
[  115.896608][ T1785] loop6: detected capacity change from 0 to 256
[  115.953073][ T1785] exFAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  115.963856][ T1785] exFAT-fs (loop6): Medium has reported failures. Some data may be lost.
[  115.989282][ T1785] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  116.240129][  T345] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  116.240970][ T1790] loop0: detected capacity change from 0 to 512
[  116.256629][  T345] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  116.292346][  T345] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  116.315265][  T345] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  116.316973][ T1790] EXT4-fs (loop0): mounted filesystem without journal. Opts: quota,journal_ioprio=0x0000000000000001,dioread_lock,norecovery,dioread_lock,,errors=continue. Quota mode: writeback.
[  116.331184][  T345] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  116.350572][ T1790] ext4 filesystem being mounted at /72/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  116.361272][  T345] usb 6-1: config 0 descriptor??
[  116.375949][   T30] audit: type=1400 audit(1760352068.595:297): avc:  denied  { read write } for  pid=1788 comm="syz.0.432" name="file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  116.412142][   T30] audit: type=1400 audit(1760352068.605:298): avc:  denied  { open } for  pid=1788 comm="syz.0.432" path="/72/file1/file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  116.758228][ T1810] netlink: 12 bytes leftover after parsing attributes in process `syz.4.434'.
[  116.830905][  T345] plantronics 0003:047F:FFFF.0017: unknown main item tag 0x0
[  116.838471][  T345] plantronics 0003:047F:FFFF.0017: unknown main item tag 0x0
[  116.846889][  T345] plantronics 0003:047F:FFFF.0017: unknown main item tag 0x0
[  116.854521][  T345] plantronics 0003:047F:FFFF.0017: unknown main item tag 0x0
[  116.868162][  T345] plantronics 0003:047F:FFFF.0017: unknown main item tag 0x0
[  116.891358][  T345] plantronics 0003:047F:FFFF.0017: No inputs registered, leaving
[  116.910852][  T345] plantronics 0003:047F:FFFF.0017: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0
[  117.130572][ T1786] usb 6-1: USB disconnect, device number 7
[  118.695727][ T1845] loop3: detected capacity change from 0 to 512
[  118.732576][ T1845] EXT4-fs (loop3): Test dummy encryption mode enabled
[  118.739418][ T1845] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  118.750876][ T1845] EXT4-fs (loop3): 1 truncate cleaned up
[  118.815888][   T30] audit: type=1400 audit(1760352071.035:299): avc:  denied  { bind } for  pid=1835 comm="syz.4.447" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  118.850081][ T1845] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,inode_readahead_blks=0x0000000000040000,journal_ioprio=0x0000000000000006,user_xattr,,errors=continue. Quota mode: none.
[  118.899470][ T1845] EXT4-fs warning (device loop3): __ext4fs_dirhash:270: inode #2: comm syz.3.448: Siphash requires key
[  119.767088][ T1855] netlink: 4 bytes leftover after parsing attributes in process `syz.3.450'.
[  119.776020][ T1855] device bridge_slave_1 left promiscuous mode
[  119.782230][ T1855] bridge0: port 2(bridge_slave_1) entered disabled state
[  120.512161][ T1865] loop0: detected capacity change from 0 to 256
[  120.635617][ T1855] device bridge_slave_0 left promiscuous mode
[  120.641855][ T1855] bridge0: port 1(bridge_slave_0) entered disabled state
[  121.875967][ T1891] loop6: detected capacity change from 0 to 512
[  122.030999][ T1891] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  122.679540][ T1891] EXT4-fs (loop6): 1 truncate cleaned up
[  122.685355][ T1891] EXT4-fs (loop6): mounted filesystem without journal. Opts: quota,,errors=continue. Quota mode: writeback.
[  122.908587][   T30] audit: type=1400 audit(1760352075.125:300): avc:  denied  { accept } for  pid=1900 comm="syz.3.466" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1
[  123.151062][   T30] audit: type=1400 audit(1760352075.275:301): avc:  denied  { lock } for  pid=1898 comm="syz.0.465" path="socket:[22807]" dev="sockfs" ino=22807 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1
[  123.160710][ T1908] 9pnet: Insufficient options for proto=fd
[  123.361473][ T1924] loop6: detected capacity change from 0 to 512
[  123.785155][ T1924] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  123.811642][ T1924] ext4 filesystem being mounted at /53/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  123.833256][ T1930] loop3: detected capacity change from 0 to 256
[  123.885728][ T1930] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d)
[  124.330175][   T30] audit: type=1400 audit(1760352076.535:302): avc:  denied  { connect } for  pid=1936 comm="syz.4.477" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  124.403540][ T1942] netlink: 28 bytes leftover after parsing attributes in process `syz.0.476'.
[  124.426450][ T1942] loop0: detected capacity change from 0 to 256
[  124.467773][ T1942] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  124.512834][ T1942] FAT-fs (loop0): Directory bread(block 64) failed
[  124.527731][ T1942] FAT-fs (loop0): Directory bread(block 65) failed
[  124.590072][ T1942] FAT-fs (loop0): Directory bread(block 66) failed
[  124.597067][ T1942] FAT-fs (loop0): Directory bread(block 67) failed
[  124.604909][ T1942] FAT-fs (loop0): Directory bread(block 68) failed
[  124.611821][ T1942] FAT-fs (loop0): Directory bread(block 69) failed
[  124.619181][ T1942] FAT-fs (loop0): Directory bread(block 70) failed
[  124.631536][ T1942] FAT-fs (loop0): Directory bread(block 71) failed
[  124.639555][ T1942] FAT-fs (loop0): Directory bread(block 72) failed
[  124.648156][ T1942] FAT-fs (loop0): Directory bread(block 73) failed
[  124.656149][ T1948] 9pnet: Insufficient options for proto=fd
[  124.705186][   T30] audit: type=1400 audit(1760352076.925:303): avc:  denied  { mounton } for  pid=1932 comm="syz.0.476" path="/79/file1/file0" dev="loop0" ino=1048614 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=file permissive=1
[  124.705296][ T1942] 9pnet: Insufficient options for proto=fd
[  125.001365][   T30] audit: type=1400 audit(1760352077.225:304): avc:  denied  { execute } for  pid=1940 comm="syz.5.478" dev="tmpfs" ino=72 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  125.026330][   T30] audit: type=1400 audit(1760352077.225:305): avc:  denied  { execute_no_trans } for  pid=1940 comm="syz.5.478" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=72 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  125.056274][   T30] audit: type=1400 audit(1760352077.245:306): avc:  denied  { read write } for  pid=282 comm="syz-executor" name="loop4" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  125.080846][   T30] audit: type=1400 audit(1760352077.245:307): avc:  denied  { open } for  pid=282 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  125.107767][   T30] audit: type=1400 audit(1760352077.245:308): avc:  denied  { ioctl } for  pid=282 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=120 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  125.136957][   T30] audit: type=1400 audit(1760352077.245:309): avc:  denied  { read } for  pid=1958 comm="syz.4.484" name="kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  125.190695][   T30] audit: type=1400 audit(1760352077.245:310): avc:  denied  { open } for  pid=1958 comm="syz.4.484" path="/dev/kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  125.244199][   T30] audit: type=1400 audit(1760352077.355:311): avc:  denied  { execmem } for  pid=1960 comm="syz.4.485" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[  125.383789][ T1962] fuse: Bad value for 'fd'
[  125.390899][ T1962] netlink: 8 bytes leftover after parsing attributes in process `syz.4.485'.
[  125.422119][ T1969] loop5: detected capacity change from 0 to 128
[  125.540439][ T1969] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a80ec018, mo2=0002]
[  125.548539][ T1969] System zones: 1-3, 19-19, 35-36
[  125.556884][ T1969] EXT4-fs (loop5): mounted filesystem without journal. Opts: quota,debug,,errors=continue. Quota mode: writeback.
[  125.570244][ T1969] ext4 filesystem being mounted at /60/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  126.395088][ T1993] netlink: 96 bytes leftover after parsing attributes in process `syz.6.496'.
[  126.728736][ T2012] loop0: detected capacity change from 0 to 512
[  126.906047][ T2012] EXT4-fs (loop0): orphan cleanup on readonly fs
[  126.929813][ T2012] EXT4-fs error (device loop0): ext4_acquire_dquot:6200: comm syz.0.500: Failed to acquire dquot type 1
[  126.959159][ T2012] EXT4-fs (loop0): 1 truncate cleaned up
[  127.199892][ T2012] EXT4-fs (loop0): mounted filesystem without journal. Opts: noinit_itable,,errors=continue. Quota mode: writeback.
[  127.518663][ T2019] netlink: 96 bytes leftover after parsing attributes in process `syz.4.505'.
[  127.751017][ T2025] netlink: 4 bytes leftover after parsing attributes in process `syz.6.507'.
[  128.002141][ T2025] device bridge_slave_1 left promiscuous mode
[  128.028801][ T2025] bridge0: port 2(bridge_slave_1) entered disabled state
[  128.056944][ T2025] device bridge_slave_0 left promiscuous mode
[  128.066906][ T2025] bridge0: port 1(bridge_slave_0) entered disabled state
[  128.220376][ T2033] loop3: detected capacity change from 0 to 2048
[  128.292842][  T408] Alternate GPT is invalid, using primary GPT.
[  128.299373][  T408]  loop3: p1 p2 p3
[  128.303761][  T408] loop3: partition table partially beyond EOD, truncated
[  128.317349][ T2033] Alternate GPT is invalid, using primary GPT.
[  128.324836][ T2033]  loop3: p1 p2 p3
[  128.328656][ T2033] loop3: partition table partially beyond EOD, truncated
[  128.861053][ T2053] loop0: detected capacity change from 0 to 16
[  128.944316][ T2053] erofs: (device loop0): mounted with root inode @ nid 36.
[  129.052118][ T2056] hub 9-0:1.0: USB hub found
[  129.058711][ T2053] syz.0.516[2053] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  129.058796][ T2053] syz.0.516[2053] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  129.071517][ T2056] hub 9-0:1.0: 1 port detected
[  129.089061][ T2053] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  129.098888][ T2053] erofs: (device loop0): z_erofs_readpage: failed to read, err [-117]
[  129.107546][ T2053] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  129.117029][ T2053] erofs: (device loop0): z_erofs_readpage: failed to read, err [-117]
[  129.125949][ T2053] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  129.135521][ T2053] erofs: (device loop0): z_erofs_readpage: failed to read, err [-117]
[  129.301948][ T2065] netlink: 4 bytes leftover after parsing attributes in process `syz.4.521'.
[  129.310962][ T2065] device bridge_slave_1 left promiscuous mode
[  129.317300][ T2065] bridge0: port 2(bridge_slave_1) entered disabled state
[  129.345853][ T2065] device bridge_slave_0 left promiscuous mode
[  129.359514][ T2065] bridge0: port 1(bridge_slave_0) entered disabled state
[  129.504851][   T30] kauditd_printk_skb: 38 callbacks suppressed
[  129.505875][   T30] audit: type=1400 audit(1760352081.725:348): avc:  denied  { lock } for  pid=2072 comm="syz.3.524" path="socket:[23095]" dev="sockfs" ino=23095 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1
[  129.559288][ T2076] loop5: detected capacity change from 0 to 512
[  129.804238][ T2076] EXT4-fs (loop5): mounted filesystem without journal. Opts: noauto_da_alloc,,errors=continue. Quota mode: writeback.
[  129.817302][ T2076] ext4 filesystem being mounted at /66/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  129.848097][   T30] audit: type=1400 audit(1760352082.065:349): avc:  denied  { read write } for  pid=2067 comm="syz.5.522" name="file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  129.965668][   T30] audit: type=1400 audit(1760352082.065:350): avc:  denied  { open } for  pid=2067 comm="syz.5.522" path="/66/file1/file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  130.034031][ T2086] loop6: detected capacity change from 0 to 256
[  130.079942][ T2086] FAT-fs (loop6): Directory bread(block 64) failed
[  130.095509][ T2086] FAT-fs (loop6): Directory bread(block 65) failed
[  130.109574][ T2086] FAT-fs (loop6): Directory bread(block 66) failed
[  130.116296][ T2086] FAT-fs (loop6): Directory bread(block 67) failed
[  130.122983][ T2086] FAT-fs (loop6): Directory bread(block 68) failed
[  130.129515][ T2086] FAT-fs (loop6): Directory bread(block 69) failed
[  130.136216][ T2086] FAT-fs (loop6): Directory bread(block 70) failed
[  130.142914][ T2086] FAT-fs (loop6): Directory bread(block 71) failed
[  130.149475][ T2086] FAT-fs (loop6): Directory bread(block 72) failed
[  130.156343][ T2086] FAT-fs (loop6): Directory bread(block 73) failed
[  130.174221][   T30] audit: type=1400 audit(1760352082.395:351): avc:  denied  { mount } for  pid=2085 comm="syz.6.527" name="/" dev="loop6" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1
[  130.198463][ T2088] SELinux:  Context system_u:object_r:var_lib_t:s0 is not valid (left unmapped).
[  130.251868][   T30] audit: type=1400 audit(1760352082.425:352): avc:  denied  { relabelfrom } for  pid=2083 comm="syz.4.526" name="UDP" dev="sockfs" ino=23165 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1
[  130.358184][   T30] audit: type=1400 audit(1760352082.425:353): avc:  denied  { mac_admin } for  pid=2083 comm="syz.4.526" capability=33  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  130.380764][   T30] audit: type=1400 audit(1760352082.525:354): avc:  denied  { relabelto } for  pid=2083 comm="syz.4.526" name="UDP" dev="sockfs" ino=23165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=udp_socket permissive=1 trawcon="system_u:object_r:var_lib_t:s0"
[  130.418280][ T2097] loop3: detected capacity change from 0 to 512
[  130.528149][   T30] audit: type=1400 audit(1760352082.745:355): avc:  denied  { create } for  pid=2103 comm="syz.0.535" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  130.572054][ T2111] syz.0.536[2111] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  130.572159][ T2111] syz.0.536[2111] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  130.582119][ T2097] EXT4-fs error (device loop3): ext4_do_update_inode:5235: inode #16: comm syz.3.532: corrupted inode contents
[  130.596159][   T30] audit: type=1400 audit(1760352082.815:356): avc:  denied  { setopt } for  pid=2110 comm="syz.0.536" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  130.793203][ T2097] EXT4-fs error (device loop3): ext4_dirty_inode:6071: inode #16: comm syz.3.532: mark_inode_dirty error
[  130.873193][ T2097] EXT4-fs error (device loop3): ext4_do_update_inode:5235: inode #16: comm syz.3.532: corrupted inode contents
[  130.877202][   T30] audit: type=1400 audit(1760352082.855:357): avc:  denied  { write } for  pid=2100 comm="syz.6.534" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  130.917219][ T2097] EXT4-fs error (device loop3): __ext4_ext_dirty:183: inode #16: comm syz.3.532: mark_inode_dirty error
[  130.930337][ T2097] EXT4-fs error (device loop3): ext4_do_update_inode:5235: inode #16: comm syz.3.532: corrupted inode contents
[  130.950257][ T2097] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem
[  130.969272][ T2097] EXT4-fs error (device loop3): ext4_do_update_inode:5235: inode #16: comm syz.3.532: corrupted inode contents
[  130.993249][ T2097] EXT4-fs error (device loop3): ext4_truncate:4304: inode #16: comm syz.3.532: mark_inode_dirty error
[  131.022360][ T2097] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem
[  131.033863][ T2097] EXT4-fs (loop3): 1 truncate cleaned up
[  131.046842][ T2097] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  131.058395][ T2097] ext4 filesystem being mounted at /123/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  131.070330][ T2106] syz.5.531[2106] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  131.070435][ T2106] syz.5.531[2106] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  132.663316][ T2137] blk_update_request: I/O error, dev loop11, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  132.685886][ T2137] FAT-fs (loop11): unable to read boot sector
[  134.220745][  T345] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  134.301969][ T1786] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  136.048421][   T30] kauditd_printk_skb: 22 callbacks suppressed
[  136.048440][   T30] audit: type=1400 audit(1760352088.165:380): avc:  denied  { unlink } for  pid=863 comm="syz-executor" name="file0" dev="tmpfs" ino=384 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  136.114256][ T2176] loop3: detected capacity change from 0 to 512
[  136.265627][ T2180] loop5: detected capacity change from 0 to 40427
[  136.305209][ T2180] F2FS-fs (loop5): fault_injection options not supported
[  136.395583][ T2180] F2FS-fs (loop5): invalid crc value
[  136.402766][   T30] audit: type=1400 audit(1760352088.615:381): avc:  denied  { mount } for  pid=2183 comm="syz.0.561" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[  136.430981][   T30] audit: type=1400 audit(1760352088.655:382): avc:  denied  { unmount } for  pid=281 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[  136.441668][ T2176] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback.
[  136.467946][ T2180] F2FS-fs (loop5): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109)
[  136.470258][ T2176] ext4 filesystem being mounted at /125/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  136.501337][ T2180] F2FS-fs (loop5): Cannot turn on quotas: -2 on 2
[  136.508206][ T2180] F2FS-fs (loop5): Start checkpoint disabled!
[  136.544585][ T2180] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6
[  136.589789][ T1786] usb 6-1: device not accepting address 8, error -71
[  136.645689][ T2199] loop0: detected capacity change from 0 to 512
[  137.228735][   T30] audit: type=1400 audit(1760352088.975:383): avc:  denied  { remove_name } for  pid=2175 comm="syz.3.557" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  137.378792][   T30] audit: type=1400 audit(1760352088.975:384): avc:  denied  { rename } for  pid=2175 comm="syz.3.557" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  138.183883][   T30] audit: type=1400 audit(1760352089.495:385): avc:  denied  { read } for  pid=2204 comm="syz.4.567" dev="nsfs" ino=4026532468 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  138.205264][   T30] audit: type=1400 audit(1760352089.495:386): avc:  denied  { open } for  pid=2204 comm="syz.4.567" path="net:[4026532468]" dev="nsfs" ino=4026532468 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  138.242207][   T30] audit: type=1400 audit(1760352089.495:387): avc:  denied  { create } for  pid=2204 comm="syz.4.567" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  138.262236][  T345] usb 4-1: device not accepting address 3, error -71
[  138.274286][   T30] audit: type=1400 audit(1760352089.495:388): avc:  denied  { ioctl } for  pid=2204 comm="syz.4.567" path="socket:[23423]" dev="sockfs" ino=23423 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  138.285661][ T2199] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  138.310805][ T2199] ext4 filesystem being mounted at /98/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  138.334597][  T459] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[  138.358519][ T2216] loop3: detected capacity change from 0 to 1024
[  138.378738][   T30] audit: type=1400 audit(1760352090.595:389): avc:  denied  { ioctl } for  pid=2198 comm="syz.0.563" path="/98/bus/cpu.stat" dev="loop0" ino=18 ioctlcmd=0x583b scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[  138.480439][ T2216] EXT4-fs (loop3): Test dummy encryption mode enabled
[  138.513111][ T2216] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,i_version,noblock_validity,commit=0x0000000000000005,inlinecrypt,max_batch_time=0x0000000000000000,auto_da_alloc=0xfffffffffffff1b3,auto_da_alloc,lazytime,nombcache,block_validity,,errors=continue. Quota mode: writeback.
[  139.115156][   T26] hid-generic 0000:0004:0000.0018: unknown main item tag 0x0
[  139.122865][   T26] hid-generic 0000:0004:0000.0018: unknown main item tag 0x0
[  139.130321][  T459] usb 7-1: Using ep0 maxpacket: 32
[  139.135752][   T26] hid-generic 0000:0004:0000.0018: unknown main item tag 0x0
[  139.144929][   T26] hid-generic 0000:0004:0000.0018: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz0
[  139.256408][ T2223] fido_id[2223]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  139.310594][  T459] usb 7-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  139.334905][  T459] usb 7-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  139.550148][  T459] usb 7-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  139.563749][  T459] usb 7-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[  139.595851][  T459] usb 7-1: Product: syz
[  139.611289][  T459] usb 7-1: Manufacturer: syz
[  139.670106][  T459] usb 7-1: can't set config #4, error -71
[  139.683222][  T459] usb 7-1: USB disconnect, device number 4
[  139.743709][  T337] handle_bad_sector: 11 callbacks suppressed
[  139.743730][  T337] attempt to access beyond end of device
[  139.743730][  T337] loop5: rw=2049, want=45112, limit=40427
[  140.303882][ T2242] loop3: detected capacity change from 0 to 128
[  140.333299][ T2242] EXT4-fs (loop3): Test dummy encryption mode enabled
[  140.349694][ T2242] EXT4-fs (loop3): Test dummy encryption mode enabled
[  140.364319][ T2242] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option
[  140.384156][ T2242] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption=v1,test_dummy_encryption=v1,nomblk_io_submit,commit=0x0000000000000000,,errors=continue. Quota mode: none.
[  140.404671][ T2239] SELinux: failed to load policy
[  140.419301][ T2242] ext4 filesystem being mounted at /127/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  140.572644][ T2250] loop6: detected capacity change from 0 to 4096
[  141.029528][ T2250] EXT4-fs (loop6): Test dummy encryption mode enabled
[  141.104347][ T2258] futex_wake_op: syz.4.581 tries to shift op by -1; fix this program
[  141.131792][ T2250] EXT4-fs (loop6): unsupported descriptor size 255
[  141.334774][ T2254] device bridge0 entered promiscuous mode
[  141.341414][  T337] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready
[  141.349748][  T337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  141.358664][  T337] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready
[  141.375611][  T337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  141.384228][  T337] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  141.393237][  T337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  141.419524][  T337] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  141.427928][  T337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  141.505937][ T2263] netlink: 'syz.4.584': attribute type 12 has an invalid length.
[  141.560048][   T26] usb 1-1: new full-speed USB device number 6 using dummy_hcd
[  141.970040][ T1253] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  141.982994][   T30] kauditd_printk_skb: 4 callbacks suppressed
[  141.983008][   T30] audit: type=1400 audit(1760352094.205:394): avc:  denied  { create } for  pid=2267 comm="syz.5.586" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  142.037603][   T30] audit: type=1400 audit(1760352094.205:395): avc:  denied  { connect } for  pid=2267 comm="syz.5.586" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  142.060725][ T2274] loop6: detected capacity change from 0 to 128
[  142.081272][ T2274] EXT4-fs (loop6): Test dummy encryption mode enabled
[  142.088797][ T2274] EXT4-fs (loop6): Test dummy encryption mode enabled
[  142.096490][   T26] usb 1-1: config 0 has an invalid interface number: 41 but max is 0
[  142.104876][   T26] usb 1-1: config 0 has no interface number 0
[  142.111473][ T2274] EXT4-fs (loop6): Ignoring removed nomblk_io_submit option
[  142.119009][   T26] usb 1-1: config 0 interface 41 has no altsetting 0
[  142.127685][ T2274] EXT4-fs (loop6): mounted filesystem without journal. Opts: test_dummy_encryption=v1,test_dummy_encryption=v1,nomblk_io_submit,commit=0x0000000000000000,,errors=continue. Quota mode: none.
[  142.150216][ T2274] ext4 filesystem being mounted at /83/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  142.245365][ T1253] usb 4-1: Using ep0 maxpacket: 16
[  142.310233][   T26] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a
[  142.319483][   T26] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  142.328042][   T26] usb 1-1: Product: syz
[  142.332481][   T26] usb 1-1: Manufacturer: syz
[  142.337158][   T26] usb 1-1: SerialNumber: syz
[  142.347612][   T26] usb 1-1: config 0 descriptor??
[  142.616902][ T2282] overlayfs: failed to resolve './file0': -2
[  142.715213][   T30] audit: type=1400 audit(1760352094.825:396): avc:  denied  { mounton } for  pid=2273 comm="syz.6.588" path="/83/mnt/bus" dev="loop6" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1
[  142.934550][   T30] audit: type=1400 audit(1760352094.825:397): avc:  denied  { write } for  pid=2273 comm="syz.6.588" name="bus" dev="loop6" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1
[  142.962391][   T30] audit: type=1400 audit(1760352094.825:398): avc:  denied  { add_name } for  pid=2273 comm="syz.6.588" name="work" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1
[  143.032138][   T30] audit: type=1400 audit(1760352094.835:399): avc:  denied  { setattr } for  pid=2273 comm="syz.6.588" name="work" dev="loop6" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1
[  143.057822][   T30] audit: type=1400 audit(1760352094.835:400): avc:  denied  { remove_name } for  pid=2273 comm="syz.6.588" name="#b" dev="loop6" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1
[  143.064671][ T1253] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  143.090720][ T1253] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  143.100553][ T1253] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  143.119708][ T1253] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 27680, setting to 1024
[  143.132245][ T1253] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024
[  143.142362][ T1253] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22
[  143.155642][   T30] audit: type=1400 audit(1760352094.835:401): avc:  denied  { rename } for  pid=2273 comm="syz.6.588" name="#b" dev="loop6" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[  143.188868][   T30] audit: type=1400 audit(1760352094.835:402): avc:  denied  { unlink } for  pid=2273 comm="syz.6.588" name="#b" dev="loop6" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1
[  143.213765][   T30] audit: type=1400 audit(1760352094.835:403): avc:  denied  { unlink } for  pid=2273 comm="syz.6.588" name="#c" dev="loop6" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[  143.280567][ T1253] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  143.289880][ T1253] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  143.531247][   T26] CoreChips: probe of 1-1:0.41 failed with error -22
[  143.582197][ T1253] usb 4-1: SerialNumber: syz
[  143.630116][ T2260] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  143.650861][ T1253] cdc_acm 4-1:1.0: Control and data interfaces are not separated!
[  143.661183][ T1253] cdc_acm: probe of 4-1:1.0 failed with error -12
[  143.912082][  T434] usb 4-1: USB disconnect, device number 5
[  144.108215][ T2302] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2302 comm=syz.0.582
[  145.577922][ T2317] loop5: detected capacity change from 0 to 1024
[  145.607949][   T26] usb 1-1: USB disconnect, device number 6
[  145.640061][ T2317] EXT4-fs (loop5): Ignoring removed orlov option
[  145.717057][ T2317] EXT4-fs (loop5): mounted filesystem without journal. Opts: orlov,min_batch_time=0x0000000000000004,,errors=continue. Quota mode: writeback.
[  146.204519][ T2326] netlink: 24 bytes leftover after parsing attributes in process `syz.3.602'.
[  147.081356][   T30] kauditd_printk_skb: 6 callbacks suppressed
[  147.081400][   T30] audit: type=1400 audit(1760352099.305:410): avc:  denied  { setopt } for  pid=2346 comm="syz.4.608" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  147.117055][   T30] audit: type=1400 audit(1760352099.315:411): avc:  denied  { write } for  pid=2352 comm="syz.0.609" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  147.174308][   T30] audit: type=1400 audit(1760352099.315:412): avc:  denied  { map } for  pid=2346 comm="syz.4.608" path="socket:[24572]" dev="sockfs" ino=24572 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  147.207709][   T30] audit: type=1400 audit(1760352099.315:413): avc:  denied  { read accept } for  pid=2346 comm="syz.4.608" path="socket:[24572]" dev="sockfs" ino=24572 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  147.504457][ T2357] loop0: detected capacity change from 0 to 8192
[  147.563950][ T2359] loop6: detected capacity change from 0 to 512
[  147.575761][ T2357]  loop0: p4 < >
[  147.589440][   T30] audit: type=1400 audit(1760352099.805:414): avc:  denied  { write } for  pid=2360 comm="syz.5.612" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  147.623142][ T2361] input: syz0 as /devices/virtual/input/input11
[  147.636472][   T30] audit: type=1400 audit(1760352099.855:415): avc:  denied  { read } for  pid=86 comm="acpid" name="event3" dev="devtmpfs" ino=1013 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  147.679088][   T30] audit: type=1400 audit(1760352099.855:416): avc:  denied  { open } for  pid=86 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=1013 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  147.712701][   T30] audit: type=1400 audit(1760352099.855:417): avc:  denied  { ioctl } for  pid=86 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=1013 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  147.726683][ T2359] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  147.744673][ T2367] loop0: detected capacity change from 0 to 512
[  147.770238][ T2367] EXT4-fs (loop0): Ignoring removed nobh option
[  147.770603][  T365] udevd[365]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory
[  147.776706][ T2367] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  148.169500][   T30] audit: type=1400 audit(1760352100.385:418): avc:  denied  { bind } for  pid=2371 comm="syz.4.616" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  148.213547][ T2367] EXT4-fs error (device loop0): ext4_orphan_get:1401: inode #15: comm syz.0.615: iget: bad i_size value: 38620345925642
[  148.413046][ T2367] EXT4-fs error (device loop0): ext4_orphan_get:1406: comm syz.0.615: couldn't read orphan inode 15 (err -117)
[  148.432213][   T30] audit: type=1400 audit(1760352100.385:419): avc:  denied  { write } for  pid=2371 comm="syz.4.616" path="socket:[25652]" dev="sockfs" ino=25652 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  148.488179][ T2367] EXT4-fs (loop0): mounted filesystem without journal. Opts: nobh,auto_da_alloc,data_err=ignore,nojournal_checksum,dioread_nolock,minixdf,,errors=continue. Quota mode: writeback.
[  148.533421][ T2380] device syzkaller0 entered promiscuous mode
[  148.579197][ T2370] EXT4-fs error (device loop0): ext4_validate_block_bitmap:429: comm syz.0.615: bg 0: block 5: invalid block bitmap
[  148.592248][ T2370] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1864 with error 28
[  148.604934][ T2370] EXT4-fs (loop0): This should not happen!! Data will be lost
[  148.604934][ T2370] 
[  148.614672][ T2370] EXT4-fs (loop0): Total free blocks count 0
[  148.649130][ T2370] EXT4-fs (loop0): Free/Dirty block details
[  148.655872][ T2370] EXT4-fs (loop0): free_blocks=0
[  148.661100][ T2370] EXT4-fs (loop0): dirty_blocks=1864
[  148.666407][ T2370] EXT4-fs (loop0): Block reservation details
[  148.673079][ T2370] EXT4-fs (loop0): i_reserved_data_blocks=1864
[  149.191437][ T2403] netlink: 'syz.0.624': attribute type 12 has an invalid length.
[  149.379247][ T2408] netlink: 12 bytes leftover after parsing attributes in process `syz.6.626'.
[  149.845155][ T2411] device pim6reg1 entered promiscuous mode
[  150.067199][  T434] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  150.509950][  T434] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  150.551568][  T434] usb 4-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00
[  150.560768][  T434] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  150.570207][  T434] usb 4-1: config 0 descriptor??
[  151.030539][ T2399] syz.3.623[2399] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  151.030616][ T2399] syz.3.623[2399] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  151.058935][ T2438] netlink: 'syz.5.637': attribute type 12 has an invalid length.
[  151.144372][ T2447] fuse: Unknown parameter '00000000000000000000'
[  151.446369][ T2449] netlink: 4 bytes leftover after parsing attributes in process `syz.0.638'.
[  152.680455][  T434] usbhid 4-1:0.0: can't add hid device: -71
[  152.686631][  T434] usbhid: probe of 4-1:0.0 failed with error -71
[  152.735435][ T2461] loop3: detected capacity change from 0 to 16
[  152.744893][  T434] usb 4-1: USB disconnect, device number 6
[  152.830971][ T2461] erofs: (device loop3): mounted with root inode @ nid 36.
[  152.891651][   T30] kauditd_printk_skb: 6 callbacks suppressed
[  152.891666][   T30] audit: type=1400 audit(1760352105.115:426): avc:  denied  { map } for  pid=2459 comm="syz.3.645" path="/135/file1/file2" dev="loop3" ino=89 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  152.931974][ T2461] attempt to access beyond end of device
[  152.931974][ T2461] loop3: rw=524288, want=264, limit=16
[  153.109594][   T30] audit: type=1400 audit(1760352105.155:427): avc:  denied  { execute } for  pid=2459 comm="syz.3.645" path="/135/file1/file2" dev="loop3" ino=89 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  153.850894][ T2482] loop3: detected capacity change from 0 to 256
[  154.347286][ T2482] exFAT-fs (loop3): failed to load upcase table (idx : 0x000106cd, chksum : 0x3aeaf2c0, utbl_chksum : 0xe619d30d)
[  154.370149][   T30] audit: type=1400 audit(1760352106.585:428): avc:  denied  { write } for  pid=2478 comm="syz.3.650" name="/" dev="loop3" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  154.392358][ T2480] exFAT-fs (loop3): hint_cluster is invalid (521)
[  154.399043][ T2480] exFAT-fs (loop3): error, invalid access to FAT (entry 0x00000208)
[  154.407100][ T2480] exFAT-fs (loop3): Filesystem has been set read-only
[  154.413924][ T2480] exFAT-fs (loop3): error, failed to bmap (inode : ffff888132f04520 iblock : 9, err : -5)
[  154.424053][ T2480] exFAT-fs (loop3): error, invalid access to FAT (entry 0x00000208)
[  154.432115][ T2480] exFAT-fs (loop3): error, invalid access to FAT (entry 0x00000208)
[  154.575327][   T30] audit: type=1400 audit(1760352106.585:429): avc:  denied  { add_name } for  pid=2478 comm="syz.3.650" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  154.675259][   T30] audit: type=1400 audit(1760352106.585:430): avc:  denied  { associate } for  pid=2478 comm="syz.3.650" name="file1" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[  154.700628][ T2488] netlink: 'syz.3.652': attribute type 12 has an invalid length.
[  154.752431][   T30] audit: type=1400 audit(1760352106.585:431): avc:  denied  { read write } for  pid=2478 comm="syz.3.650" name="file1" dev="loop3" ino=1048616 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  154.779074][   T30] audit: type=1400 audit(1760352106.585:432): avc:  denied  { open } for  pid=2478 comm="syz.3.650" path="/137/file1/file1" dev="loop3" ino=1048616 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  155.115518][   T30] audit: type=1400 audit(1760352107.295:433): avc:  denied  { setopt } for  pid=2492 comm="syz.5.654" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  155.290043][   T30] audit: type=1400 audit(1760352107.305:434): avc:  denied  { write } for  pid=2492 comm="syz.5.654" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  155.419621][ T2505] loop3: detected capacity change from 0 to 4096
[  155.501301][ T2505] EXT4-fs (loop3): Test dummy encryption mode enabled
[  155.512351][ T2505] EXT4-fs (loop3): unsupported descriptor size 255
[  156.038821][   T30] audit: type=1400 audit(1760352108.255:435): avc:  denied  { create } for  pid=2510 comm="syz.5.659" dev="anon_inodefs" ino=25045 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  156.838219][ T2541] loop6: detected capacity change from 0 to 256
[  156.863490][ T2541] FAT-fs (loop6): Unrecognized mount option "�7id=Uî0x000000000000ee01" or missing value
[  158.096280][ T2547] loop3: detected capacity change from 0 to 4096
[  158.103128][   T30] kauditd_printk_skb: 2 callbacks suppressed
[  158.103143][   T30] audit: type=1400 audit(1760352109.265:438): avc:  denied  { name_bind } for  pid=2537 comm="syz.0.668" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1
[  158.228123][ T2547] EXT4-fs (loop3): Test dummy encryption mode enabled
[  158.246579][   T30] audit: type=1400 audit(1760352109.385:439): avc:  denied  { create } for  pid=2543 comm="syz.5.670" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  158.271282][ T2547] EXT4-fs (loop3): unsupported descriptor size 255
[  158.282308][   T30] audit: type=1400 audit(1760352109.405:440): avc:  denied  { write } for  pid=2543 comm="syz.5.670" path="socket:[25091]" dev="sockfs" ino=25091 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  158.305904][   T30] audit: type=1400 audit(1760352109.455:441): avc:  denied  { create } for  pid=2543 comm="" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  158.421987][   T30] audit: type=1400 audit(1760352110.585:442): avc:  denied  { mount } for  pid=2540 comm="syz.6.669" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[  158.709430][ T2570] netlink: 'syz.0.678': attribute type 12 has an invalid length.
[  158.818640][ T2578] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2578 comm=syz.4.681
[  161.075585][ T2599] loop3: detected capacity change from 0 to 16
[  161.143101][ T2599] erofs: Unknown parameter '
'
[  161.622427][ T2608] loop0: detected capacity change from 0 to 256
[  161.641402][ T2610] netlink: 'syz.3.693': attribute type 12 has an invalid length.
[  161.660583][ T2608] exfat: Bad value for 'errors'
[  161.720888][   T30] audit: type=1400 audit(1760352113.945:443): avc:  denied  { read } for  pid=2607 comm="syz.0.692" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[  161.816736][   T30] audit: type=1400 audit(1760352113.945:444): avc:  denied  { open } for  pid=2607 comm="syz.0.692" path="/dev/cpu/1/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[  161.857756][   T30] audit: type=1400 audit(1760352113.965:445): avc:  denied  { ioctl } for  pid=2607 comm="syz.0.692" path="/dev/cpu/1/msr" dev="devtmpfs" ino=87 ioctlcmd=0x63a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[  161.935035][ T2606] hid-generic 0003:0004:0000.0019: unknown main item tag 0x0
[  162.192264][ T2618] netlink: 12 bytes leftover after parsing attributes in process `syz.3.694'.
[  162.194344][ T2606] hid-generic 0003:0004:0000.0019: unknown main item tag 0x0
[  162.208963][ T2606] hid-generic 0003:0004:0000.0019: unknown main item tag 0x0
[  162.216767][ T2606] hid-generic 0003:0004:0000.0019: unknown main item tag 0x0
[  162.224872][ T2606] hid-generic 0003:0004:0000.0019: unknown main item tag 0x0
[  162.232385][ T2606] hid-generic 0003:0004:0000.0019: unknown main item tag 0x0
[  162.239871][ T2606] hid-generic 0003:0004:0000.0019: unknown main item tag 0x0
[  162.265989][ T2606] hid-generic 0003:0004:0000.0019: unknown main item tag 0x0
[  162.296834][ T2606] hid-generic 0003:0004:0000.0019: unknown main item tag 0x0
[  162.314616][ T2606] hid-generic 0003:0004:0000.0019: unknown main item tag 0x0
[  162.333616][ T2606] hid-generic 0003:0004:0000.0019: unknown main item tag 0x0
[  162.370039][ T2606] hid-generic 0003:0004:0000.0019: unknown main item tag 0x0
[  162.401271][ T2606] hid-generic 0003:0004:0000.0019: unknown main item tag 0x0
[  162.432115][ T2606] hid-generic 0003:0004:0000.0019: hidraw0: USB HID vffffff.fd Device [syz0] on syz1
[  162.487726][ T2622] fido_id[2622]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  163.071183][   T30] audit: type=1400 audit(1760352115.285:446): avc:  denied  { read } for  pid=2639 comm="syz.3.702" name="usbmon7" dev="devtmpfs" ino=176 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  163.148802][   T30] audit: type=1400 audit(1760352115.315:447): avc:  denied  { open } for  pid=2639 comm="syz.3.702" path="/dev/usbmon7" dev="devtmpfs" ino=176 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  163.222125][   T30] audit: type=1400 audit(1760352115.445:448): avc:  denied  { ioctl } for  pid=2639 comm="syz.3.702" path="/dev/usbmon7" dev="devtmpfs" ino=176 ioctlcmd=0x9208 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  163.286567][   T30] audit: type=1400 audit(1760352115.445:449): avc:  denied  { append } for  pid=2639 comm="syz.3.702" name="001" dev="devtmpfs" ino=178 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[  163.335383][   T30] audit: type=1400 audit(1760352115.485:450): avc:  denied  { bind } for  pid=2644 comm="syz.3.703" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  164.030139][ T2670] netlink: 12 bytes leftover after parsing attributes in process `syz.5.711'.
[  164.455173][ T2675] loop6: detected capacity change from 0 to 8192
[  164.485357][   T30] audit: type=1400 audit(1760352116.705:451): avc:  denied  { setopt } for  pid=2677 comm="syz.4.715" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  164.512474][  T408]  loop6: p1 < > p2 p4 < p5 >
[  164.517329][  T408] loop6: partition table partially beyond EOD, truncated
[  164.546663][  T408] loop6: p1 start 134217728 is beyond EOD, truncated
[  164.553831][  T408] loop6: p2 size 591360 extends beyond EOD, truncated
[  164.591087][  T408] loop6: p5 size 591360 extends beyond EOD, truncated
[  164.613726][ T2675]  loop6: p1 < > p2 p4 < p5 >
[  164.618595][ T2675] loop6: partition table partially beyond EOD, truncated
[  164.642314][ T2675] loop6: p1 start 134217728 is beyond EOD, truncated
[  164.649056][ T2675] loop6: p2 size 591360 extends beyond EOD, truncated
[  164.690494][ T2675] loop6: p5 size 591360 extends beyond EOD, truncated
[  164.813377][  T365] udevd[365]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory
[  164.819539][  T408] udevd[408]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory
[  164.824886][  T334] udevd[334]: inotify_add_watch(7, /dev/loop6p5, 10) failed: No such file or directory
[  164.867962][ T2697] loop6: detected capacity change from 0 to 512
[  164.933660][  T365] udevd[365]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory
[  164.945511][  T334] udevd[334]: inotify_add_watch(7, /dev/loop6p5, 10) failed: No such file or directory
[  164.959891][  T408] udevd[408]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory
[  165.031259][ T2700] netlink: 4 bytes leftover after parsing attributes in process `syz.4.722'.
[  165.043838][ T2700] netlink: 12 bytes leftover after parsing attributes in process `syz.4.722'.
[  165.188266][ T2697] EXT4-fs (loop6): 1 orphan inode deleted
[  165.223835][ T2697] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  165.500497][ T2697] ext4 filesystem being mounted at /106/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  165.920718][ T2706] xt_TCPMSS: Only works on TCP SYN packets
[  166.050126][   T30] audit: type=1400 audit(1760352118.195:452): avc:  denied  { name_bind } for  pid=2696 comm="syz.6.719" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1
[  166.378345][   T30] audit: type=1400 audit(1760352118.575:453): avc:  denied  { create } for  pid=2705 comm="syz.5.723" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  166.398384][   T30] audit: type=1400 audit(1760352118.575:454): avc:  denied  { bind } for  pid=2705 comm="syz.5.723" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  166.427043][ T2712] bridge0: port 3(gretap0) entered disabled state
[  166.460637][ T2712] bridge0: port 2(bridge_slave_1) entered disabled state
[  166.467943][ T2712] bridge0: port 1(bridge_slave_0) entered disabled state
[  166.852477][ T2721] overlayfs: missing 'lowerdir'
[  167.378591][ T2728] kvm [2725]: vcpu0, guest rIP: 0x9131 disabled perfctr wrmsr: 0xc1 data 0x1
[  167.397399][ T2728] kvm [2725]: vcpu0, guest rIP: 0x9131 disabled perfctr wrmsr: 0xc2 data 0x1
[  167.421757][ T2728] kvm [2725]: vcpu0, guest rIP: 0x9131 ignored wrmsr: 0x11e data 0xbe702112
[  167.445573][ T2728] kvm [2725]: vcpu0, guest rIP: 0x9131 disabled perfctr wrmsr: 0x186 data 0x1
[  167.454666][ T2728] kvm [2725]: vcpu0, guest rIP: 0x9131 disabled perfctr wrmsr: 0x187 data 0x1
[  167.466574][ T2728] kvm [2725]: vcpu0, guest rIP: 0x9131 vmx_set_msr: BTF|LBR in IA32_DEBUGCTLMSR 0x1, nop
[  168.090774][ T2740] netlink: 12 bytes leftover after parsing attributes in process `syz.4.732'.
[  168.705787][   T30] audit: type=1400 audit(1760352120.925:455): avc:  denied  { write } for  pid=2764 comm="syz.4.742" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  169.087475][   T30] audit: type=1400 audit(1760352121.305:456): avc:  denied  { create } for  pid=2774 comm="syz.0.745" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  169.149246][   T30] audit: type=1400 audit(1760352121.335:457): avc:  denied  { bind } for  pid=2774 comm="syz.0.745" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  169.213330][   T30] audit: type=1400 audit(1760352121.335:458): avc:  denied  { connect } for  pid=2774 comm="syz.0.745" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  169.392235][   T30] audit: type=1400 audit(1760352121.335:459): avc:  denied  { write } for  pid=2774 comm="syz.0.745" name="ppp" dev="devtmpfs" ino=154 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  169.896497][   T30] audit: type=1400 audit(1760352121.335:460): avc:  denied  { ioctl } for  pid=2774 comm="syz.0.745" path="/dev/ppp" dev="devtmpfs" ino=154 ioctlcmd=0x7438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  169.939662][   T30] audit: type=1326 audit(1760352121.575:461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2745 comm="syz.6.736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ada43dec9 code=0x7fc00000
[  169.997418][   T30] audit: type=1400 audit(1760352122.115:462): avc:  denied  { getopt } for  pid=2782 comm="syz.6.749" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  170.162695][ T2795] netlink: 12 bytes leftover after parsing attributes in process `syz.3.748'.
[  170.380330][ T2752] loop5: detected capacity change from 0 to 131072
[  170.405037][ T2797] loop0: detected capacity change from 0 to 512
[  170.450059][ T2797] EXT4-fs (loop0): Ignoring removed bh option
[  170.467080][ T2752] F2FS-fs (loop5): invalid crc value
[  170.483707][ T2752] F2FS-fs (loop5): Mismatch valid blocks 0 vs. 16
[  170.491572][ T2801] loop3: detected capacity change from 0 to 512
[  170.492257][ T2752] F2FS-fs (loop5): Failed to initialize F2FS segment manager (-117)
[  170.508268][ T2797] EXT4-fs (loop0): mounted filesystem without journal. Opts: i_version,nogrpid,bh,,errors=continue. Quota mode: writeback.
[  170.521618][ T2797] ext4 filesystem being mounted at /132/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  170.526511][ T2801] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem
[  170.558886][ T2801] EXT4-fs (loop3): invalid journal inode
[  170.564879][ T2801] EXT4-fs (loop3): can't get journal size
[  170.650011][   T30] audit: type=1400 audit(1760352122.805:463): avc:  denied  { ioctl } for  pid=2796 comm="syz.0.753" path="/132/bus/file1" dev="loop0" ino=15 ioctlcmd=0x660f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  170.679709][ T2801] EXT4-fs (loop3): 1 truncate cleaned up
[  170.687651][ T2801] EXT4-fs (loop3): mounted filesystem without journal. Opts: noload,,errors=continue. Quota mode: none.
[  171.539998][   T20] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  171.636531][ T2841] netlink: 'syz.3.766': attribute type 12 has an invalid length.
[  171.722921][ T2845] loop6: detected capacity change from 0 to 512
[  171.746944][ T2845] EXT4-fs (loop6): Quota format mount options ignored when QUOTA feature is enabled
[  171.796022][ T2845] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm syz.6.768: bg 0: block 248: padding at end of block bitmap is not set
[  171.820050][   T20] usb 1-1: Using ep0 maxpacket: 16
[  171.843789][ T2845] Quota error (device loop6): write_blk: dquota write failed
[  171.872543][ T2845] EXT4-fs error (device loop6): ext4_acquire_dquot:6200: comm syz.6.768: Failed to acquire dquot type 1
[  171.917475][ T2845] EXT4-fs (loop6): 1 truncate cleaned up
[  171.939119][ T2845] EXT4-fs (loop6): mounted filesystem without journal. Opts: bsdgroups,resgid=0x0000000000000000,dioread_lock,resgid=0x0000000000000000,grpjquota=,resuid=0x0000000000000000,noblock_validity,resuid=0x0000000000000000,jqfmt=vfsv1,,errors=continue. Quota mode: writeback.
[  171.965581][   T20] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  171.990285][   T20] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  172.010555][ T2845] ext4 filesystem being mounted at /118/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  172.040769][   T20] usb 1-1: New USB device found, idVendor=1b96, idProduct=0008, bcdDevice= 0.00
[  172.050176][   T20] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  172.063557][   T20] usb 1-1: config 0 descriptor??
[  172.304462][ T2853] netlink: 28 bytes leftover after parsing attributes in process `syz.4.769'.
[  172.551009][   T20] ntrig 0003:1B96:0008.001A: unknown main item tag 0x0
[  172.557997][   T20] ntrig 0003:1B96:0008.001A: unknown main item tag 0x0
[  172.565289][   T20] ntrig 0003:1B96:0008.001A: unknown main item tag 0x0
[  172.572277][   T20] ntrig 0003:1B96:0008.001A: unknown main item tag 0x0
[  172.579230][   T20] ntrig 0003:1B96:0008.001A: unknown main item tag 0x0
[  172.586210][   T20] ntrig 0003:1B96:0008.001A: unknown main item tag 0x0
[  172.593183][   T20] ntrig 0003:1B96:0008.001A: unknown main item tag 0x0
[  172.601846][   T20] ntrig 0003:1B96:0008.001A: hidraw0: USB HID v0.00 Device [HID 1b96:0008] on usb-dummy_hcd.0-1/input0
[  172.760110][   T20] ntrig 0003:1B96:0008.001A: Firmware version: 0.0.0.0.0 (0000 0000)
[  172.961986][  T286] usb 1-1: USB disconnect, device number 7
[  173.395251][ T2870] fuse: Unknown parameter 'group_id00000000000000000000'
[  173.458116][ T2876] netlink: 'syz.3.778': attribute type 12 has an invalid length.
[  173.516742][ T2887] loop0: detected capacity change from 0 to 128
[  173.701730][ T2890] netlink: 'syz.0.782': attribute type 3 has an invalid length.
[  173.710013][ T2890] netlink: 'syz.0.782': attribute type 3 has an invalid length.
[  174.267256][ T2912] netlink: 'syz.5.791': attribute type 12 has an invalid length.
[  174.716132][   T30] kauditd_printk_skb: 7 callbacks suppressed
[  174.716149][   T30] audit: type=1400 audit(1760352126.935:470): avc:  denied  { read } for  pid=2928 comm="syz.3.798" name="binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  174.884474][   T30] audit: type=1400 audit(1760352126.935:471): avc:  denied  { open } for  pid=2928 comm="syz.3.798" path="/dev/binderfs/binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  175.612970][ T2949] netlink: 'syz.0.803': attribute type 12 has an invalid length.
[  176.401068][   T30] audit: type=1400 audit(1760352128.625:472): avc:  denied  { rename } for  pid=2957 comm="syz.4.809" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1
[  177.686919][ T3004] loop5: detected capacity change from 0 to 512
[  177.720922][ T3004] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  177.953000][   T20] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  179.600095][   T20] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  179.611708][   T20] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  179.708225][ T3042] netlink: 'syz.5.831': attribute type 4 has an invalid length.
[  179.716008][ T3042] netlink: 17 bytes leftover after parsing attributes in process `syz.5.831'.
[  179.970074][   T20] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  179.979589][   T20] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0
[  179.987799][   T20] usb 5-1: Manufacturer: syz
[  179.996895][   T20] usb 5-1: config 0 descriptor??
[  180.030014][  T286] usb 6-1: new full-speed USB device number 10 using dummy_hcd
[  180.271466][   T30] audit: type=1326 audit(1760352132.495:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3047 comm="syz.6.839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ada43dec9 code=0x7ffc0000
[  180.295056][   T30] audit: type=1326 audit(1760352132.495:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3047 comm="syz.6.839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ada43dec9 code=0x7ffc0000
[  180.318640][   T30] audit: type=1326 audit(1760352132.495:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3047 comm="syz.6.839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6ada43dec9 code=0x7ffc0000
[  180.321414][ T3048] overlayfs: failed to clone upperpath
[  180.347698][   T30] audit: type=1326 audit(1760352132.495:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3047 comm="syz.6.839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ada43dec9 code=0x7ffc0000
[  180.371242][   T30] audit: type=1326 audit(1760352132.495:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3047 comm="syz.6.839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ada43dec9 code=0x7ffc0000
[  180.394654][   T30] audit: type=1326 audit(1760352132.495:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3047 comm="syz.6.839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6ada43dec9 code=0x7ffc0000
[  180.418434][   T30] audit: type=1326 audit(1760352132.515:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3047 comm="syz.6.839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ada43dec9 code=0x7ffc0000
[  180.447265][   T30] audit: type=1326 audit(1760352132.525:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3047 comm="syz.6.839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6ada43dec9 code=0x7ffc0000
[  180.450276][  T286] usb 6-1: too many endpoints for config 0 interface 0 altsetting 254: 253, using maximum allowed: 30
[  180.470916][   T30] audit: type=1326 audit(1760352132.535:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3047 comm="syz.6.839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ada43dec9 code=0x7ffc0000
[  180.501816][  T286] usb 6-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  180.518155][   T30] audit: type=1326 audit(1760352132.535:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3047 comm="syz.6.839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ada43dec9 code=0x7ffc0000
[  180.547449][  T286] usb 6-1: config 0 interface 0 has no altsetting 0
[  180.571758][ T3052] loop0: detected capacity change from 0 to 256
[  180.578248][  T286] usb 6-1: New USB device found, idVendor=056a, idProduct=0323, bcdDevice= 0.00
[  180.597600][  T286] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  180.609302][  T345] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0
[  180.617954][  T345] hid-generic 0000:0000:0000.001C: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  180.618273][  T286] usb 6-1: config 0 descriptor??
[  180.661264][ T3052] FAT-fs (loop0): Directory bread(block 64) failed
[  180.664392][ T3055] fido_id[3055]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  180.680236][ T3052] FAT-fs (loop0): Directory bread(block 65) failed
[  180.692589][ T3052] FAT-fs (loop0): Directory bread(block 66) failed
[  180.701688][ T3052] FAT-fs (loop0): Directory bread(block 67) failed
[  180.709481][ T3052] FAT-fs (loop0): Directory bread(block 68) failed
[  180.716371][ T3052] FAT-fs (loop0): Directory bread(block 69) failed
[  180.723696][ T3052] FAT-fs (loop0): Directory bread(block 70) failed
[  180.730807][ T3052] FAT-fs (loop0): Directory bread(block 71) failed
[  180.737500][ T3052] FAT-fs (loop0): Directory bread(block 72) failed
[  180.744409][ T3052] FAT-fs (loop0): Directory bread(block 73) failed
[  181.230101][   T20] uclogic 0003:256C:006D.001B: failed retrieving Huion firmware version: -71
[  181.239021][   T20] uclogic 0003:256C:006D.001B: failed probing parameters: -71
[  181.246616][   T20] uclogic: probe of 0003:256C:006D.001B failed with error -71
[  181.256865][   T20] usb 5-1: USB disconnect, device number 5
[  181.398185][  T337] attempt to access beyond end of device
[  181.398185][  T337] loop0: rw=1, want=1480, limit=256
[  181.409330][  T337] attempt to access beyond end of device
[  181.409330][  T337] loop0: rw=1, want=1832, limit=256
[  181.427633][  T337] attempt to access beyond end of device
[  181.427633][  T337] loop0: rw=1, want=7728, limit=256
[  181.444996][  T337] attempt to access beyond end of device
[  181.444996][  T337] loop0: rw=1, want=14216, limit=256
[  181.463618][  T337] attempt to access beyond end of device
[  181.463618][  T337] loop0: rw=1, want=26136, limit=256
[  181.480688][  T337] attempt to access beyond end of device
[  181.480688][  T337] loop0: rw=1, want=33800, limit=256
[  182.621052][ T3108] loop5: detected capacity change from 0 to 512
[  183.130306][  T286] usbhid 6-1:0.0: can't add hid device: -71
[  183.137020][  T286] usbhid: probe of 6-1:0.0 failed with error -71
[  183.273471][  T286] usb 6-1: USB disconnect, device number 10
[  183.522154][ T3108] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  183.544198][ T3108] ext4 filesystem being mounted at /115/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  184.180073][  T448] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  184.650039][  T448] usb 1-1: Using ep0 maxpacket: 16
[  185.020594][  T448] usb 1-1: config 7 has an invalid interface number: 163 but max is 0
[  185.031840][ T1786] hid-generic 0000:0004:0000.001D: unknown main item tag 0x0
[  185.032256][  T448] usb 1-1: config 7 has no interface number 0
[  185.039563][ T1786] hid-generic 0000:0004:0000.001D: unknown main item tag 0x0
[  185.052902][ T1786] hid-generic 0000:0004:0000.001D: unknown main item tag 0x0
[  185.060845][ T1786] hid-generic 0000:0004:0000.001D: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz0
[  185.102815][ T3166] fido_id[3166]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  185.200214][  T448] usb 1-1: New USB device found, idVendor=1a0a, idProduct=0103, bcdDevice=ce.47
[  185.209475][  T448] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  185.217596][  T448] usb 1-1: Product: syz
[  185.221915][  T448] usb 1-1: Manufacturer: syz
[  185.226541][  T448] usb 1-1: SerialNumber: syz
[  185.284840][ T3175] binder: 3168:3175 ioctl c0306201 0 returned -14
[  185.291590][   T30] kauditd_printk_skb: 26 callbacks suppressed
[  185.291605][   T30] audit: type=1400 audit(1760352137.505:509): avc:  denied  { listen } for  pid=3168 comm="syz.3.880" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  185.318062][   T30] audit: type=1400 audit(1760352137.505:510): avc:  denied  { relabelto } for  pid=3168 comm="syz.3.880" name="200" dev="tmpfs" ino=1087 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0"
[  185.344636][   T30] audit: type=1400 audit(1760352137.505:511): avc:  denied  { associate } for  pid=3168 comm="syz.3.880" name="200" dev="tmpfs" ino=1087 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:fsadm_exec_t:s0"
[  185.372394][   T30] audit: type=1400 audit(1760352137.505:512): avc:  denied  { ioctl } for  pid=3168 comm="syz.3.880" path="/dev/binderfs/binder0" dev="binder" ino=16 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  185.523565][   T30] audit: type=1400 audit(1760352137.745:513): avc:  denied  { mount } for  pid=3176 comm="syz.6.882" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1
[  185.720309][ T3181] overlayfs: failed to clone upperpath
[  185.941002][  T448] usb_ehset_test: probe of 1-1:7.163 failed with error -32
[  185.953279][  T448] usb 1-1: USB disconnect, device number 8
[  186.034671][   T30] audit: type=1400 audit(1760352138.255:514): avc:  denied  { write } for  pid=284 comm="syz-executor" name="200" dev="tmpfs" ino=1087 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0"
[  186.060989][   T30] audit: type=1400 audit(1760352138.255:515): avc:  denied  { remove_name } for  pid=284 comm="syz-executor" name="binderfs" dev="tmpfs" ino=1091 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0"
[  186.095786][   T30] audit: type=1400 audit(1760352138.255:516): avc:  denied  { rmdir } for  pid=284 comm="syz-executor" name="200" dev="tmpfs" ino=1087 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0"
[  186.192683][   T30] audit: type=1400 audit(1760352138.415:517): avc:  denied  { listen } for  pid=3182 comm="syz.4.884" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1
[  186.553880][ T3196] netlink: 'syz.0.887': attribute type 8 has an invalid length.
[  186.617604][ T3201] netlink: 'syz.0.887': attribute type 8 has an invalid length.
[  187.420755][   T20] hid-generic 0000:0004:0000.001E: unknown main item tag 0x0
[  187.428589][   T20] hid-generic 0000:0004:0000.001E: unknown main item tag 0x0
[  187.486520][   T20] hid-generic 0000:0004:0000.001E: unknown main item tag 0x0
[  187.495910][   T20] hid-generic 0000:0004:0000.001E: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz0
[  188.244871][ T3211] fido_id[3211]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  188.774756][  T448] hid-generic 0000:0004:0000.001F: unknown main item tag 0x0
[  188.784240][ T3227] kvm [3223]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc1 data 0x800
[  188.794082][ T3227] kvm [3223]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0x0
[  188.794350][  T448] hid-generic 0000:0004:0000.001F: unknown main item tag 0x0
[  188.807664][ T3227] kvm [3223]: vcpu0, guest rIP: 0x18e ignored wrmsr: 0x11e data 0x900000000000
[  188.819812][   T30] audit: type=1400 audit(1760352141.035:518): avc:  denied  { create } for  pid=3234 comm="syz.6.902" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1
[  188.834176][  T448] hid-generic 0000:0004:0000.001F: unknown main item tag 0x0
[  188.845014][ T3227] kvm [3223]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0x186 data 0x100000000000
[  188.856642][ T3227] kvm [3223]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0x187 data 0x800000000800
[  188.866828][  T448] hid-generic 0000:0004:0000.001F: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz0
[  188.929102][ T3247] fido_id[3247]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  189.495328][  T286] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[  189.552309][ T3277] overlayfs: failed to clone upperpath
[  191.736648][ T3289] loop0: detected capacity change from 0 to 128
[  191.762750][ T3289] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  191.774371][ T3289] ext4 filesystem being mounted at /169/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  191.832322][   T30] audit: type=1400 audit(1760352144.055:519): avc:  denied  { setattr } for  pid=3288 comm="syz.0.922" path="/169/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file1" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[  192.018095][ T3293] netlink: 12 bytes leftover after parsing attributes in process `syz.5.924'.
[  192.027261][ T3293] netlink: 12 bytes leftover after parsing attributes in process `syz.5.924'.
[  192.041041][ T3293] ==================================================================
[  192.049167][ T3293] BUG: KASAN: slab-out-of-bounds in tc_setup_flow_action+0x870/0x3240
[  192.057371][ T3293] Read of size 8 at addr ffff888117ec5cc0 by task syz.5.924/3293
[  192.065244][ T3293] 
[  192.067598][ T3293] CPU: 0 PID: 3293 Comm: syz.5.924 Tainted: G        W         syzkaller #0
[  192.076284][ T3293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  192.086461][ T3293] Call Trace:
[  192.089751][ T3293]  <TASK>
[  192.092694][ T3293]  __dump_stack+0x21/0x30
[  192.097180][ T3293]  dump_stack_lvl+0xee/0x150
[  192.101822][ T3293]  ? show_regs_print_info+0x20/0x20
[  192.107042][ T3293]  ? load_image+0x3a0/0x3a0
[  192.111566][ T3293]  print_address_description+0x7f/0x2c0
[  192.117343][ T3293]  ? tc_setup_flow_action+0x870/0x3240
[  192.122829][ T3293]  kasan_report+0xf1/0x140
[  192.127269][ T3293]  ? tc_setup_flow_action+0x870/0x3240
[  192.132735][ T3293]  __asan_report_load8_noabort+0x14/0x20
[  192.138373][ T3293]  tc_setup_flow_action+0x870/0x3240
[  192.143667][ T3293]  mall_replace_hw_filter+0x293/0x820
[  192.149067][ T3293]  ? pcpu_block_update_hint_alloc+0x8c1/0xc50
[  192.155168][ T3293]  ? mall_set_parms+0x520/0x520
[  192.160050][ T3293]  ? tcf_exts_destroy+0xb0/0xb0
[  192.164913][ T3293]  ? mall_set_parms+0x1e8/0x520
[  192.169772][ T3293]  mall_change+0x526/0x740
[  192.174195][ T3293]  ? __kasan_check_write+0x14/0x20
[  192.179322][ T3293]  ? mall_get+0xa0/0xa0
[  192.183514][ T3293]  ? tcf_chain_tp_insert_unique+0xac1/0xc10
[  192.189446][ T3293]  tc_new_tfilter+0x12a2/0x1870
[  192.194334][ T3293]  ? tcf_gate_entry_destructor+0x20/0x20
[  192.199993][ T3293]  ? security_capable+0x87/0xb0
[  192.204894][ T3293]  ? ns_capable+0x8c/0xf0
[  192.209227][ T3293]  ? netlink_net_capable+0x125/0x160
[  192.214525][ T3293]  ? tcf_gate_entry_destructor+0x20/0x20
[  192.220161][ T3293]  rtnetlink_rcv_msg+0x81b/0xb90
[  192.225112][ T3293]  ? rtnetlink_bind+0x80/0x80
[  192.229798][ T3293]  ? memcpy+0x56/0x70
[  192.233780][ T3293]  ? avc_has_perm_noaudit+0x2f4/0x460
[  192.239159][ T3293]  ? arch_stack_walk+0xee/0x140
[  192.244018][ T3293]  ? avc_denied+0x1b0/0x1b0
[  192.248533][ T3293]  ? stack_trace_save+0x98/0xe0
[  192.253390][ T3293]  ? avc_has_perm+0x158/0x240
[  192.258072][ T3293]  ? avc_has_perm_noaudit+0x460/0x460
[  192.263456][ T3293]  ? x64_sys_call+0x4b/0x9a0
[  192.268052][ T3293]  ? selinux_nlmsg_lookup+0x416/0x4c0
[  192.273429][ T3293]  netlink_rcv_skb+0x1e0/0x430
[  192.278194][ T3293]  ? rtnetlink_bind+0x80/0x80
[  192.282877][ T3293]  ? netlink_ack+0xb60/0xb60
[  192.287472][ T3293]  ? __netlink_lookup+0x387/0x3b0
[  192.292503][ T3293]  rtnetlink_rcv+0x1c/0x20
[  192.296926][ T3293]  netlink_unicast+0x876/0xa40
[  192.301696][ T3293]  netlink_sendmsg+0x86a/0xb70
[  192.306466][ T3293]  ? netlink_getsockopt+0x530/0x530
[  192.311669][ T3293]  ? security_socket_sendmsg+0x82/0xa0
[  192.317139][ T3293]  ? netlink_getsockopt+0x530/0x530
[  192.322339][ T3293]  ____sys_sendmsg+0x5a2/0x8c0
[  192.327128][ T3293]  ? __sys_sendmsg_sock+0x40/0x40
[  192.332155][ T3293]  ? import_iovec+0x7c/0xb0
[  192.336663][ T3293]  ___sys_sendmsg+0x1f0/0x260
[  192.341351][ T3293]  ? __sys_sendmsg+0x250/0x250
[  192.346120][ T3293]  ? sock_show_fdinfo+0xa0/0xa0
[  192.350983][ T3293]  ? __fdget+0x1a1/0x230
[  192.355241][ T3293]  __x64_sys_sendmsg+0x1e2/0x2a0
[  192.360201][ T3293]  ? ___sys_sendmsg+0x260/0x260
[  192.365064][ T3293]  ? __kasan_check_write+0x14/0x20
[  192.370185][ T3293]  ? switch_fpu_return+0x15d/0x2c0
[  192.375315][ T3293]  x64_sys_call+0x4b/0x9a0
[  192.379737][ T3293]  do_syscall_64+0x4c/0xa0
[  192.384283][ T3293]  ? clear_bhb_loop+0x50/0xa0
[  192.388984][ T3293]  ? clear_bhb_loop+0x50/0xa0
[  192.393669][ T3293]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  192.399587][ T3293] RIP: 0033:0x7f997da4dec9
[  192.404008][ T3293] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  192.423617][ T3293] RSP: 002b:00007f997c4b6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  192.432038][ T3293] RAX: ffffffffffffffda RBX: 00007f997dca4fa0 RCX: 00007f997da4dec9
[  192.440027][ T3293] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000004
[  192.448004][ T3293] RBP: 00007f997dad0f91 R08: 0000000000000000 R09: 0000000000000000
[  192.455981][ T3293] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  192.463952][ T3293] R13: 00007f997dca5038 R14: 00007f997dca4fa0 R15: 00007ffe4b463f88
[  192.471935][ T3293]  </TASK>
[  192.474961][ T3293] 
[  192.477282][ T3293] Allocated by task 3293:
[  192.481612][ T3293]  __kasan_kmalloc+0xda/0x110
[  192.486297][ T3293]  __kmalloc+0x13d/0x2c0
[  192.490545][ T3293]  tcf_idr_create+0x5f/0x790
[  192.495137][ T3293]  tcf_idr_create_from_flags+0x61/0x70
[  192.500597][ T3293]  tcf_gact_init+0x346/0x580
[  192.505190][ T3293]  tcf_action_init_1+0x3f7/0x6a0
[  192.510147][ T3293]  tcf_action_init+0x1e9/0x710
[  192.514921][ T3293]  tcf_exts_validate+0x217/0x520
[  192.519859][ T3293]  mall_set_parms+0x48/0x520
[  192.524451][ T3293]  mall_change+0x45a/0x740
[  192.528868][ T3293]  tc_new_tfilter+0x12a2/0x1870
[  192.533725][ T3293]  rtnetlink_rcv_msg+0x81b/0xb90
[  192.538667][ T3293]  netlink_rcv_skb+0x1e0/0x430
[  192.543438][ T3293]  rtnetlink_rcv+0x1c/0x20
[  192.547863][ T3293]  netlink_unicast+0x876/0xa40
[  192.552626][ T3293]  netlink_sendmsg+0x86a/0xb70
[  192.557389][ T3293]  ____sys_sendmsg+0x5a2/0x8c0
[  192.562174][ T3293]  ___sys_sendmsg+0x1f0/0x260
[  192.566861][ T3293]  __x64_sys_sendmsg+0x1e2/0x2a0
[  192.571837][ T3293]  x64_sys_call+0x4b/0x9a0
[  192.576259][ T3293]  do_syscall_64+0x4c/0xa0
[  192.580677][ T3293]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  192.586588][ T3293] 
[  192.588911][ T3293] The buggy address belongs to the object at ffff888117ec5c00
[  192.588911][ T3293]  which belongs to the cache kmalloc-192 of size 192
[  192.602966][ T3293] The buggy address is located 0 bytes to the right of
[  192.602966][ T3293]  192-byte region [ffff888117ec5c00, ffff888117ec5cc0)
[  192.616592][ T3293] The buggy address belongs to the page:
[  192.622246][ T3293] page:ffffea00045fb140 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x117ec5
[  192.632485][ T3293] flags: 0x4000000000000200(slab|zone=1)
[  192.638136][ T3293] raw: 4000000000000200 ffffea00042b9540 0000000900000009 ffff888100042c00
[  192.646724][ T3293] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000
[  192.655311][ T3293] page dumped because: kasan: bad access detected
[  192.661723][ T3293] page_owner tracks the page as allocated
[  192.667523][ T3293] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x12cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY), pid 113, ts 6245460511, free_ts 0
[  192.682541][ T3293]  post_alloc_hook+0x192/0x1b0
[  192.687403][ T3293]  prep_new_page+0x1c/0x110
[  192.691909][ T3293]  get_page_from_freelist+0x2cc5/0x2d50
[  192.697458][ T3293]  __alloc_pages+0x18f/0x440
[  192.702055][ T3293]  new_slab+0xa1/0x4d0
[  192.706146][ T3293]  ___slab_alloc+0x381/0x810
[  192.710756][ T3293]  __slab_alloc+0x49/0x90
[  192.715105][ T3293]  kmem_cache_alloc_trace+0x146/0x270
[  192.720483][ T3293]  kernfs_fop_open+0x343/0xb30
[  192.725257][ T3293]  do_dentry_open+0x834/0x1010
[  192.730024][ T3293]  vfs_open+0x73/0x80
[  192.734009][ T3293]  path_openat+0x2646/0x2f10
[  192.738599][ T3293]  do_filp_open+0x1b3/0x3e0
[  192.743101][ T3293]  do_sys_openat2+0x14c/0x7b0
[  192.747801][ T3293]  __x64_sys_openat+0x136/0x160
[  192.752658][ T3293]  x64_sys_call+0x219/0x9a0
[  192.757165][ T3293] page_owner free stack trace missing
[  192.762526][ T3293] 
[  192.764846][ T3293] Memory state around the buggy address:
[  192.770476][ T3293]  ffff888117ec5b80: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc
[  192.778534][ T3293]  ffff888117ec5c00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  192.786611][ T3293] >ffff888117ec5c80: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc
[  192.794666][ T3293]                                            ^
[  192.800819][ T3293]  ffff888117ec5d00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  192.808883][ T3293]  ffff888117ec5d80: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc
[  192.816937][ T3293] ==================================================================
[  192.824998][ T3293] Disabling lock debugging due to kernel taint
[  192.845917][   T30] audit: type=1400 audit(1760352145.065:520): avc:  denied  { read } for  pid=83 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1
[  192.872304][   T30] audit: type=1400 audit(1760352145.085:521): avc:  denied  { search } for  pid=83 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  192.893989][   T30] audit: type=1400 audit(1760352145.085:522): avc:  denied  { write } for  pid=83 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  192.915528][   T30] audit: type=1400 audit(1760352145.085:523): avc:  denied  { add_name } for  pid=83 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  192.942742][   T30] audit: type=1400 audit(1760352145.085:524): avc:  denied  { create } for  pid=83 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  192.963400][   T30] audit: type=1400 audit(1760352145.085:525): avc:  denied  { append open } for  pid=83 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  192.986361][   T30] audit: type=1400 audit(1760352145.085:526): avc:  denied  { getattr } for  pid=83 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1