last executing test programs:

48.123956434s ago: executing program 4 (id=48):
socket$inet_udp(0x2, 0x2, 0x0)
r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0xd, 0x2000000000008d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2)
sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x7)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/power/mem_sleep', 0x101a02, 0x0)
sendfile(r0, r2, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000200), 0x651, 0x0)
recvmmsg(r3, &(0x7f0000000240), 0x4000087, 0x2, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x7, 0x401d031, 0xffffffffffffffff, 0x0)
r5 = add_key(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
mmap$IORING_OFF_SQ_RING(0x0, 0x7fff, 0x2, 0x2172, 0xffffffffffffffff, 0x0)
setxattr$incfs_metadata(&(0x7f0000000040)='./cgroup\x00', &(0x7f0000000200), &(0x7f0000000340)="8056ac0000a385", 0xadf4, 0x3)
keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000300)={r5}, 0x0, 0x0, 0x0)
fcntl$getown(r0, 0x9)
r6 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x3, 0x1, 0x401d031, 0xffffffffffffffff, 0x0)
syz_mount_image$vfat(&(0x7f0000000500), &(0x7f0000000540)='./file1\x00', 0xa00058, &(0x7f0000000580)=ANY=[@ANYRES8=r6, @ANYRES32=r1, @ANYRES8=r6], 0x1, 0x392, &(0x7f0000000840)="$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")
renameat2(0xffffffffffffff9c, &(0x7f0000000c00)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000c40)='./file2\x00', 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000380), 0x1ba1433b002043e0, 0x0)
r7 = socket$netlink(0x10, 0x3, 0x0)
r8 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
bind$802154_dgram(r8, &(0x7f00000005c0)={0x24, @short={0x2, 0x1, 0xaaa3}}, 0x14)
getpeername$packet(r2, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000004c0)=0x14)
sendmsg$netlink(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000480)=ANY=[@ANYBLOB="2c0000001200010000000000000000001c0000000c00350000000001000000000c003600070000000000000030b4"], 0x2c}], 0x1}, 0x0)

46.590907891s ago: executing program 4 (id=54):
r0 = open(&(0x7f0000000080)='./file1\x00', 0x143142, 0x80)
sendfile(r0, r0, 0x0, 0x1000000201005)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'veth1_to_hsr\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@gettclass={0x24, 0x2a, 0x1, 0x23, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0xffe0, 0x9}, {0x1, 0x5}, {0xb, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x11}, 0x40000)
sendmsg$nl_route(r0, &(0x7f0000000580)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)=@can_newroute={0x58, 0x18, 0x4, 0x70bd2a, 0x25dfdbff, {0x1d, 0x1, 0x6}, [@CGW_FILTER={0xc, 0xb, {{0x4, 0x0, 0x1, 0x1}, {0x2, 0x1, 0x1, 0x1}}}, @CGW_SRC_IF={0x8, 0x9, r3}, @CGW_MOD_AND={0x15, 0x1, {{{0x0, 0x1, 0x0, 0x1}, 0x0, 0x1, 0x0, 0x0, "4f20135c5d90f345"}, 0x5}}, @CGW_MOD_AND={0x15, 0x1, {{{0x2}, 0x6, 0x3, 0x0, 0x0, "a23471d5c00b42fc"}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40408d0}, 0x20000cd0)
pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x800)
r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
close_range(r5, 0xffffffffffffffff, 0x0)
dup(r4)
r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_trie\x00')
pread64(r6, &(0x7f0000001540)=""/102356, 0x18fd4, 0x4000)
syz_open_dev$vcsu(&(0x7f0000000040), 0x7, 0x707400)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xd, 0x6, &(0x7f00000001c0)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, r6}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}], &(0x7f0000001400)='GPL\x00', 0x5, 0xc5, &(0x7f0000000280)=""/197, 0x0, 0x0, '\x00', 0x0, @fallback, r6, 0x6}, 0x94)

46.375741763s ago: executing program 4 (id=56):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00'})
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000005e00000427bd7006fbdbdf2500000000", @ANYRES32=r1, @ANYBLOB="05000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0xc4)

46.359409704s ago: executing program 4 (id=57):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYRESOCT=0x0], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYRESOCT=0x0], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)

46.3043808s ago: executing program 4 (id=58):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./sys/module/usbcore/parameters/quirks\x00', 0x140, 0x60)
mkdirat(r1, &(0x7f0000000240)='./sys/class/ptp/ptp0/max_vclocks\x00', 0x20)
mount(0x0, &(0x7f0000000280)='./sys\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/module/usbcore/parameters/quirks\x00', 0x2, 0x0)
write(r2, &(0x7f0000000340)="306663353a313232373a646133bc7e59256325ef564968291b4c9bf666210591a5a906edeb77b4bab9b868f0636d348598b189b276ab65ef0a67f2f78f4331b9fb78f2d875ea27de89bd646d6c57", 0x4e)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0xdc)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000480)=0x400, 0x4)
r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/class/ptp/ptp0/max_vclocks\x00', 0x2, 0x41)
socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_int(r3, 0x29, 0x1e, &(0x7f00000003c0)=0x267, 0x4)
connect$inet6(r2, &(0x7f0000000400)={0xa, 0x4e23, 0x20802, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2a}, 0x1c)
write(r3, &(0x7f0000000200)='0', 0x18)
r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x101000, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
ioctl$KVM_GET_MSRS_cpu(r7, 0xc008ae88, &(0x7f0000000500)={0x1, 0x0, [{0x40000f6a, 0x0, 0x3}]})
r8 = syz_kvm_setup_syzos_vm$x86(r4, &(0x7f0000c00000/0x400000)=nil)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r9 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r9, &(0x7f0000000540)={0xa, 0x4e04, 0x3, @dev={0xfe, 0x80, '\x00', 0x25}, 0x23}, 0x1c)
sendmmsg$inet6(r9, &(0x7f0000000580)=[{{&(0x7f00000005c0)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x64}, 0x13}, 0x1c, 0x0}}], 0x1, 0x20002040)
sendto$inet6(r1, 0x0, 0x0, 0xc850, 0x0, 0x0)
setsockopt$inet6_int(r9, 0x29, 0x31, &(0x7f0000000600)=0x66, 0x4)
syz_kvm_add_vcpu$x86(r8, &(0x7f0000000140)={0x0, 0x0})
r10 = socket$pptp(0x18, 0x1, 0x2)
accept4(r10, 0x0, 0x0, 0x800)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x42a00, 0x0)

45.051077857s ago: executing program 4 (id=61):
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/reserved_size', 0x101a42, 0x10)
copy_file_range(r0, &(0x7f0000000040)=0x7, r0, 0x0, 0x4, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0xc, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x7)
r1 = getpid()
syz_emit_ethernet(0x86, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000200)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000280), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f00000002c0), 0x80002c1, 0x2, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
setrlimit(0x4, &(0x7f0000000300)={0x4})
setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x9, 0x3, 0x1e8, 0x0, 0xffffffff, 0xffffffff, 0xb8, 0xffffffff, 0xb8, 0xffffffff, 0xffffffff, 0x150, 0xffffffff, 0x3, 0x0, {[{{@ip={@loopback, @loopback, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x6}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@ip={@empty, @empty}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x248)
readahead(0xffffffffffffffff, 0xa282, 0x3)
r5 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
writev(r5, &(0x7f0000000680)=[{&(0x7f00000006c0)="343a06", 0x3}, {0x0}], 0x2)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0x7)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$XFS_IOC_START_COMMIT(r5, 0x80585882, &(0x7f0000000a80)={<r7=>0xffffffffffffffff})
bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x19, 0x20000000000001b1, &(0x7f0000000c00)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @btf_id={0x18, 0xc, 0x3, 0x0, 0x2}, @cb_func={0x18, 0x0, 0x4, 0x0, 0x1}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @cb_func, @map_fd={0x18, 0x0, 0x1, 0x0, r7}]}, &(0x7f0000000a40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r8)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000700)={'wlan0\x00', <r10=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r8, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="090d2000000000f0ff000700000008000300", @ANYRES32=r10, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc0008000500060000001400040073"], 0x58}}, 0x0)
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r6, &(0x7f0000000900)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x50, r9, 0x200, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x6d}, @void, @void}}, [@NL80211_ATTR_NETNS_FD={0x8, 0xdb, r0}, @NL80211_ATTR_PID={0x8, 0x52, r1}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x2b}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x5, 0x5a}}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r5}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r0}]}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x8844)

29.562074806s ago: executing program 32 (id=61):
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/reserved_size', 0x101a42, 0x10)
copy_file_range(r0, &(0x7f0000000040)=0x7, r0, 0x0, 0x4, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0xc, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x7)
r1 = getpid()
syz_emit_ethernet(0x86, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000200)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000280), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f00000002c0), 0x80002c1, 0x2, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
setrlimit(0x4, &(0x7f0000000300)={0x4})
setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x9, 0x3, 0x1e8, 0x0, 0xffffffff, 0xffffffff, 0xb8, 0xffffffff, 0xb8, 0xffffffff, 0xffffffff, 0x150, 0xffffffff, 0x3, 0x0, {[{{@ip={@loopback, @loopback, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x6}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@ip={@empty, @empty}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x248)
readahead(0xffffffffffffffff, 0xa282, 0x3)
r5 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
writev(r5, &(0x7f0000000680)=[{&(0x7f00000006c0)="343a06", 0x3}, {0x0}], 0x2)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0x7)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$XFS_IOC_START_COMMIT(r5, 0x80585882, &(0x7f0000000a80)={<r7=>0xffffffffffffffff})
bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x19, 0x20000000000001b1, &(0x7f0000000c00)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @btf_id={0x18, 0xc, 0x3, 0x0, 0x2}, @cb_func={0x18, 0x0, 0x4, 0x0, 0x1}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @cb_func, @map_fd={0x18, 0x0, 0x1, 0x0, r7}]}, &(0x7f0000000a40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r8)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000700)={'wlan0\x00', <r10=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r8, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="090d2000000000f0ff000700000008000300", @ANYRES32=r10, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc0008000500060000001400040073"], 0x58}}, 0x0)
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r6, &(0x7f0000000900)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x50, r9, 0x200, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x6d}, @void, @void}}, [@NL80211_ATTR_NETNS_FD={0x8, 0xdb, r0}, @NL80211_ATTR_PID={0x8, 0x52, r1}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x2b}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x5, 0x5a}}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r5}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r0}]}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x8844)

5.653154674s ago: executing program 2 (id=218):
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r1=>0x0})
sendmsg$NL80211_CMD_SET_PMKSA(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x48, 0x0, 0x10, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x4}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x10}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x2b}, @NL80211_ATTR_PMK={0x14, 0xfe, "1c90ff4e5727414544135e91ff306623"}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x4084)
ioctl$RTC_PIE_OFF(r0, 0x7006)
ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, &(0x7f00000001c0))
r2 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff8)
keyctl$set_timeout(0xf, r2, 0x3)
ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000280)=@usbdevfs_disconnect={0x101})
keyctl$set_timeout(0xf, r2, 0xffffffffffffff30)
ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f00000002c0)=@usbdevfs_connect={0x7fffffff})
getdents64(r0, &(0x7f0000000300)=""/108, 0x6c)
fsconfig$FSCONFIG_SET_PATH(r0, 0x3, &(0x7f0000000380)='syz', &(0x7f00000003c0)='\x00', 0xffffffffffffff9c)
r3 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$FS_IOC_GETVERSION(r3, 0x80087601, &(0x7f0000000400))
syz_usb_connect(0x4, 0x516, &(0x7f0000000440)={{0x12, 0x1, 0x300, 0xb9, 0x72, 0xbd, 0x40, 0x499, 0x1004, 0xdf32, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x504, 0x1, 0x3, 0x4, 0x80, 0x2, "", [{{0x9, 0x4, 0xe6, 0x8, 0x10, 0xff, 0x93, 0x8d, 0xff, [], [{{0x9, 0x5, 0x5, 0x0, 0x8, 0x3, 0x7, 0xaa}}, {{0x9, 0x5, 0x6, 0x10, 0x400, 0xf, 0x0, 0x6}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x9d, 0x81, 0x33, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x9, 0x2}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x8, 0x5}]}}, {{0x9, 0x5, 0xf, 0x0, 0x40, 0xb, 0x0, 0x41}}, {{0x9, 0x5, 0x8, 0x10, 0x10, 0x8, 0x8, 0x8e}}, {{0x9, 0x5, 0x6, 0x10, 0x3ff, 0xe, 0x4, 0xf, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x9, 0x180}]}}, {{0x9, 0x5, 0xd, 0x0, 0x3ff, 0x6, 0x3, 0x9}}, {{0x9, 0x5, 0x0, 0x3, 0x0, 0x8, 0x0, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x3, 0xffff}, @generic={0xa1, 0xd, "33ffbfe4f2dd2e96a40002690a461ea72bc79071854ac50dea401e2ee09471841a1cc8f40874db3e01d0efc852be866816c5ea5b303a1c1bb45a834315a06385459c6768d9e0fb4db4e589d8dcf635e77884c810a965f6b147fe7bb229261f1eca95c193194917efddce26a6f40151ec6af19bf619df5769bcbaaa6d5e366a3b1dd019f5766f3c877205dfdf0c98b730cf73844f7951b2563ce8df1b174f24"}]}}, {{0x9, 0x5, 0x8, 0x4, 0x3d7, 0x0, 0x0, 0x4}}, {{0x9, 0x5, 0xe, 0x8, 0x200, 0x20, 0x0, 0x1, [@generic={0xde, 0x22, "18fe8c1caa583157bc16d139414cefb3d12d1759c0cff0afe3731ae2e530ab6809947f8a805887e24d4e62a7282792a84d1a9957cc08b57c092fdb23d65dba2ea089787b0963475d96f0eaf38a2770ad75dc23ce143c563694dfcfbaf3791249757b159d6c26a839e7d8123104c5b41503f87f47e972fc2700077750cfbc51773ed95471844c21a088e7b765472006f4bc023a65459095a3f80f731256e395d471925cdcfef27b3d44dbeb0a92a0aaf0ad0d9c4043f86312eca2b8dca40017391fd2bfabe2ce626d06170a70eff823df0f94604a02c8ca002feab868"}]}}, {{0x9, 0x5, 0x8, 0x0, 0x20, 0x3, 0x3, 0xf3}}, {{0x9, 0x5, 0xb, 0x3, 0x3ff, 0x6, 0x2, 0x23, [@generic={0xdf, 0x11, "80525fdb4a798a89f75e7fa962e55167f1c3d490ea8c601525744b18384f6d6eb790e8233db321830b3670bb3b8bdd1b0ef16158038006eff9f2e2e4896bb07a5b7b8f796ab726ee036ce797f624e2f44ab903fae8523091a453c897e8d619815e627ff7835218bea5baa4b0ac6dbbfc45f58df203b70317fdbabdface4390ffb089cb15a0f29e550182e04354e3739cf8a59397751d3a2e4b8a706bc9860af7c9801e4d72d509ed81389bd99e89391012bcdeba073f0419b66b2185af82ad10442f30e6731a6588018f53ddca725c814531a49b8daa9b56c009eb509e"}, @generic={0x8b, 0x22, "87fadb6a10125d8d7a6945dd84446e43a13ed6c28dd49bc21e0bfa2ec3c246056f5517d89cf92cbaa5554201bf082d3c817303ebce8d2cc7c4ddd12a6d833675a4076f175602aaf541093886b61c05cd95e478402107a9fd877a91ec3b08bb19d271b6d36c0dc4cab9161883effb19f9c23f083b51cf8ec01eb78a4264535ac6f107ac9bd32eec6e45"}]}}, {{0x9, 0x5, 0x2, 0x0, 0x8, 0x0, 0x2, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x6, 0x1}]}}, {{0x9, 0x5, 0x9, 0x3, 0x8, 0x6, 0x0, 0x71, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x8}, @generic={0xa9, 0x4, "12c5de33db92188281d68c0de56696a2ccdd7a5e706a1c4d2f53cde4df860ead4262c1c7f49f5bbac80b49ba3e32ea68e2811b824d859e485571e48f710c6b3f06ac463d697bf87e706aca7e752235c79a9d70f519006314e1bc6da631db10ae7bb61d585bbea72af7a6b6f3e12cfb653e9750e9c1538536e2801fd7fd2d9d4d7ae3810a34244bb57ea1e470bd57cc1d7990d8e790efd2976be2cb4593834c3767bafa32731185"}]}}, {{0x9, 0x5, 0xa, 0x0, 0x10, 0x7, 0x7, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x3, 0xb}]}}, {{0x9, 0x5, 0xc, 0x0, 0x40, 0x4, 0xfc, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0xf}, @generic={0x98, 0xf, "5a08fbfb03aed262cfc0ad766c92c80c4deb2cff83bb9725ad21cf41e30615f3c2ea420119b55a38b3cd8b4dff96253be759bb90471f6ba07e5ab90b8695b105332cecce752522aa2832f6c0178b3cada1513d98daaa3756ee7b3b687681a8458558fb51cc32d0b76706bc9cdc67e0b406011a7adc08667650f4dd642a9963bb26ee63793c045fdb4e7f44283f1e797841e7e9df136f"}]}}]}}]}}]}}, &(0x7f0000000ac0)={0xa, &(0x7f0000000980)={0xa, 0x6, 0x140, 0x6, 0x5, 0xe, 0x12da7391743bd914, 0x5}, 0x5, &(0x7f00000009c0)={0x5, 0xf, 0x5}, 0x3, [{0x22, &(0x7f0000000a00)=@string={0x22, 0x3, "c7b46f4f689ea9db28628f93ef4dc4027439538cccfab746a1511e9ecc5eb1f0"}}, {0x4, &(0x7f0000000a40)=@lang_id={0x4, 0x3, 0x41c}}, {0x4, &(0x7f0000000a80)=@lang_id={0x4, 0x3, 0x2801}}]})
r4 = syz_usb_connect(0x0, 0x67e, &(0x7f0000000b00)={{0x12, 0x1, 0x310, 0xcc, 0x41, 0x4b, 0xff, 0x403, 0xfb59, 0xa6fe, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x66c, 0x1, 0x4, 0x40, 0x80, 0x4, "", [{{0x9, 0x4, 0xd3, 0x7, 0x10, 0x3d, 0xd7, 0xa3, 0x0, [], [{{0x9, 0x5, 0x2, 0x10, 0x40, 0xf4, 0x8, 0x6}}, {{0x9, 0x5, 0x4, 0x3, 0x20, 0x0, 0xf, 0x8, [@generic={0xf5, 0x23, "2efb5cf89630ecfec13f4c6444ebe791d241620273eed59fb65f6fe57c0a0c218ce9bf21bd8ee442bf5d0c15da0a412a68d693f0fa1390c41a41e3d7b502ee234d42819e7cda56ccc52f97de53d5b5d30d52352e7cf7bb1dcd0d074cdf148e48bea373b353287c0dd24debbb6b3d934c21e47c9f9122296c96b122189519abea472643309704673cd3e3d905617ffc7d4c1f35e46f75332ad95dbcaa210d9784ebd66d5f3a9f02705a921c6a116bea71fe2c4cb87e9c0c99b4d517a7379f1be346f894f8bcae48f125ca1ca4d930dc97240b5b185a6681616a5a15f82457afee2ced57356fd8bccff8723032758007a837d279"}]}}, {{0x9, 0x5, 0x5, 0xf, 0x10, 0x3, 0x5, 0xe1, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x2, 0x4}, @generic={0x6d, 0x24, "993f99e9bf6b0e16a76c69f4e0ea1ee87e31e157e63f0ba044c925a9b1717dce91371ea98047490bacba630e8ce6e2912dcc6964f6b1605b6025b050dfaecbae73e7953a745db8a9509b0e92ac3e7726e0add6b5a6b6d17023e5a38d5ef4644a1f6d6a430489ef5754e8c1"}]}}, {{0x9, 0x5, 0x80, 0x0, 0x3ff, 0x6, 0x1, 0x2, [@generic={0x57, 0xf, "e64a48034444a424fe79ba6a15c0f15432f741792731fca9d676ca576162439c3b9c63651572de337c6e8d246b50562c9fc02395510f6d58481557385ce6a089683b52a0cf11518187cc1c67ed9d0815a17bc0e5e3"}]}}, {{0x9, 0x5, 0x4, 0x10, 0x200, 0x8, 0x9, 0xe, [@generic={0xa4, 0x7, "032142cc898bdae598ef3de2b5186b2fa29733a3508b2c5bf7eb1374f0bc67d6d409ef2cc515b9dceff74c089f20120f28c103c73b66a14f1827739fc5c204acaf7c58346eab3ebf5bd52edcf301367a9be43d952545d8b9b0e09423e041da8a38500bd5cf6ce33180a94807c93fb670d4def0054b1d00d1c7227a6ab826288b84dc5a9acae24410fbf459217e4eb03f17277e2960f8b6e761df2638a26d75a3018e"}, @generic={0x46, 0x1b, "2f06e585007fb5731ca3de348124ea9a92f4dc6d2561fdf8ff11a8642dfce242464de9872cfdd0b193a1d614fae756154a6e0d5e429d73d497e761c5bbc541b1700a8c27"}]}}, {{0x9, 0x5, 0x8, 0x1, 0x3ff, 0x7f, 0x4, 0x5, [@generic={0x54, 0xd, "5e5eb5ea748738055bee6c1b8b6fdcda1533a045f4165a24e28e60dbf0ddd9ef6b816a225d62b51760840b7f9a168289cff1be678cd93595a81b67863f4b6570cd51b175ed28dea0bc6200e29503ea65f0d6"}]}}, {{0x9, 0x5, 0xc, 0x8, 0x400, 0x1, 0xff, 0x9, [@generic={0x8c, 0x30, "3ef7dab9e4da0b137fb59434a3a7e33c4a5a6887194e98a66a423294c57fca282ede3719dae7e0cb13b9f165db5c6e75097342f7c0fdf6543214d63d11b15d4d6c8728a189ccd0c1df25ee140185de5b92c1de62d53ddc84b23a382c3bb30990984bcd2af73f96ee2951e4ffb765f0e46abf221cce98a218aadd2c6c4e3164a3df79977281d252249dd7"}]}}, {{0x9, 0x5, 0xd, 0x0, 0x1ff, 0x4, 0x6, 0x89, [@generic={0xd4, 0x6, "4e1f1cee348efbac602c3b66bfe90a6f2bfa47a5d1dd6a4d7bb207c0e6782415b3ebe34c6bde591603af29254caceb155f8239a6c04a23631e3424fe4c24da7925b2329a1009b2604c7c8c12c610f8a87707ec4812d6cabe2ff70ce546d80f9f5bcd0bc8cf37c222e330ddb665368cb644cd7b684606b5423be096b37498179d7dc9e4190a01fb4bb88257307f4d883886edc323dc8c223f17a6485849a191f91fe20e8b99a6636354f350a156196dad5f9da4238d273b50583c8fee3bfa482cb347322bb8a9a949cc6954ab4bb341663687"}]}}, {{0x9, 0x5, 0x4, 0x10, 0x40, 0x7, 0xa, 0x9, [@generic={0x48, 0xd, "92abc40c0d28315f763c7a4534f2765e75f2392089bfb8ff85518d6d80e14d74325afbe2a1d5374a8f3551d62561e8116575d0edac4db847d1b8876ac8f2dec55cc592a00270"}]}}, {{0x9, 0x5, 0x6, 0x10, 0x8, 0x9, 0x8}}, {{0x9, 0x5, 0x98, 0x0, 0x10, 0x88, 0x5f, 0x6, [@generic={0xb3, 0x18, "bee120fb506d5f2bbbfd9570fd4a2b26feed7e4538dd5b2c69f420bfb1fcfa5d92d3eadfec7888cc825aa6022330234f48dfa1d5a49b2951a66eb069a73f219c688288c4f2c483f30216ef11c285e0254ca9993a8f2e826861261c901915d7b678463db13282c1e9d3172cc6c1bd5c7aff76aa7b72fe0d9c1f995848ddd60a203ca25e8751ee6298781cc40e40d205ea4c76ee5c7690ade67943e957830ed757b46d361074fa1b11a6e0666e7ec3a99f74"}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x3, 0x800}]}}, {{0x9, 0x5, 0xf, 0x8, 0x20, 0x0, 0x41, 0x56, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0xd, 0x8000}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0xff, 0x9}]}}, {{0x9, 0x5, 0xc, 0x3, 0x400, 0x72, 0xee}}, {{0x9, 0x5, 0x5, 0x0, 0x0, 0x4, 0xff, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x5, 0x3}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x40, 0x4}]}}, {{0x9, 0x5, 0x1, 0x8, 0x400, 0x9, 0x27, 0x5, [@generic={0x36, 0x1, "d72fba313854c842a115472ab66bf0e3c5bed86950e50012792c86f9c06f85803e844c30f5a0352023aa874be5682becae40c483"}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0xf8, 0x1ff}]}}, {{0x9, 0x5, 0x2, 0x0, 0x8, 0x0, 0xf8, 0x7, [@generic={0xa, 0x9, "01622585f4b91c50"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x7, 0x6}]}}]}}]}}]}}, &(0x7f0000001240)={0xa, &(0x7f0000001180)={0xa, 0x6, 0x250, 0xb, 0x7, 0x81, 0x10}, 0x3e, &(0x7f00000011c0)={0x5, 0xf, 0x3e, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x1, "3e2688b579be80a2d18fbe7f33e10f1c"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xb, 0x7, 0x5, 0x2}, @ext_cap={0x7, 0x10, 0x2, 0xc, 0x6, 0x4, 0x101}, @ss_container_id={0x14, 0x10, 0x4, 0x81, "c00f6c07b4911bbdc53938823dc32ca6"}]}, 0x1, [{0x4, &(0x7f0000001200)=@lang_id={0x4, 0x3, 0x860}}]})
syz_usb_ep_read(0xffffffffffffffff, 0x9, 0x17, &(0x7f0000001280)=""/23)
keyctl$assume_authority(0x10, r2)
syz_usb_control_io(r4, &(0x7f0000001440)={0x2c, &(0x7f00000012c0)={0x60, 0x7, 0x4f, {0x4f, 0x23, "43111367eb35ae644eb012d6b94b935c5cdea7b86be0ddf9857c6ed03f546ebe6c94236d7d5132f6e0df6559593578cb318a4673bd39a8a3a0668a63fa1558fde484a410753ff4855b6fed8617"}}, &(0x7f0000001340)={0x0, 0x3, 0x19, @string={0x19, 0x3, "feb09ea78e2d3e49a1a5d4c1ba5b08c0c378e6f4fe7166"}}, &(0x7f0000001380)={0x0, 0xf, 0xf, {0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x3, 0xfd, 0x7}]}}, &(0x7f00000013c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0xff, 0x10, 0x9, 0x0, "11762096", "9c677f11"}}, &(0x7f0000001400)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x81, 0x1, 0x5, 0x67, 0x72, 0x2a7, 0x200}}}, &(0x7f0000001900)={0x84, &(0x7f0000001480)={0x0, 0x12, 0x89, "e2b8df286c78880ec358d1cf7df6406e825ec87807d4ffbb1078ebe3ad3c47c4e80b3e1587c617f4d5c5990639baeabbcdfce69f568676f5c8051fa098e89e879bc724097042da887ad2a7b3cfb9a24104deca8fea69d68d9aa49c4777e6aed7cb35907f195d01b206b3823477e24dcc1947c32fe4015bfb30ef30188f6eeee83df1ef06c6b0632354"}, &(0x7f0000001540)={0x0, 0xa, 0x1, 0xbe}, &(0x7f0000001580)={0x0, 0x8, 0x1, 0x5}, &(0x7f00000015c0)={0x20, 0x0, 0x4, {0x0, 0x1}}, &(0x7f0000001600)={0x20, 0x0, 0x4, {0x40, 0x80}}, &(0x7f0000001640)={0x40, 0x7, 0x2, 0x3}, &(0x7f0000001680)={0x40, 0x9, 0x1, 0x7}, &(0x7f00000016c0)={0x40, 0xb, 0x2, 'W '}, &(0x7f0000001700)={0x40, 0xf, 0x2, 0x10}, &(0x7f0000001740)={0x40, 0x13, 0x6, @remote}, &(0x7f0000001780)={0x40, 0x17, 0x6, @remote}, &(0x7f00000017c0)={0x40, 0x19, 0x2, "eba1"}, &(0x7f0000001800)={0x40, 0x1a, 0x2, 0x2}, &(0x7f0000001840)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000001880)={0x40, 0x1e, 0x1, 0x8f}, &(0x7f00000018c0)={0x40, 0x21, 0x1, 0x1}})
ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f00000019c0)={<r5=>0x0, "ae583ad73f3cc4b7cf71aa72effa3c65"})
ioctl$BTRFS_IOC_SCRUB(r3, 0xc400941b, &(0x7f00000029c0)={r5, 0x9, 0xf51, 0x1})
keyctl$assume_authority(0x10, r2)
ioctl(r0, 0x7, &(0x7f0000002dc0)="42024f90538d9c9d358bdfd450ddf0ea2f93e3ad0f787d28a02d009f7c2c4dc880bce2530efd4a6de5eb1c2176ea87400126831132846f8430538ad4434cec91aa943de02b66273a7c994eceae7e1c44004d5985f6f8c17926066e9d5d427f60e8b477b1d43d96c83178d646321eddb6f4d57f4d0e6f1f54b0a5548d54d7bef72c3ab390cf3da797143fd0682977746293ad3a44b79175f65b25")
syz_usb_connect$cdc_ncm(0x6, 0x106, &(0x7f0000002e80)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xf4, 0x2, 0x1, 0x0, 0xa0, 0x3, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x6, 0x24, 0x6, 0x0, 0x1, ','}, {0x5, 0x24, 0x0, 0xfffb}, {0xd, 0x24, 0xf, 0x1, 0x3, 0x81, 0x7, 0x3}, {0x6, 0x24, 0x1a, 0x4, 0x1}, [@mdlm={0x15}, @mbim_extended={0x8, 0x24, 0x1c, 0x7, 0x6f}, @mdlm_detail={0x4b, 0x24, 0x13, 0x2, "016361a34fe7ff8769a508737be75d416ba0908f56c132792400a3e78ede5d059a2cbdcb1c3f3d8017f2e15bb942b596c935d6c8c9edc301a0a2bf1188069616a800283e993ac6"}, @obex={0x5, 0x24, 0x15, 0xfff}, @mdlm={0x15, 0x24, 0x12, 0x3}, @mdlm={0x15, 0x24, 0x12, 0x1000}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0x7, 0x8}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x8, 0x4, 0x5, 0xb}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x6, 0xdd, 0x6}}}}}}}]}}, &(0x7f0000003400)={0xa, &(0x7f0000002fc0)={0xa, 0x6, 0x300, 0x3, 0x81, 0x7, 0x40, 0xb}, 0x41, &(0x7f0000003000)={0x5, 0xf, 0x41, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x9, 0x40, 0x5, 0x1}, @ssp_cap={0x14, 0x10, 0xa, 0x7, 0x2, 0x6, 0xf000, 0x1, [0xcf, 0xcf]}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0xe, 0xd}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "2b550e771d5484b7e65a88646466234e"}]}, 0xa, [{0x4, &(0x7f0000003080)=@lang_id={0x4, 0x3, 0x429}}, {0x4, &(0x7f00000030c0)=@lang_id={0x4, 0x3, 0xc04}}, {0x4, &(0x7f0000003100)=@lang_id={0x4, 0x3, 0x406}}, {0xa1, &(0x7f0000003140)=@string={0xa1, 0x3, "e7d80aece1f0f94d1be36ed92a74d209ed883b7a9fe06c8c264817867a417c83243c7ea927f8a27dd8d3f31536d29c168f212c5a88556fc36700bc242442b6b3aa08a695584fb46999548bc9065c3cc2f635e16f0fcf976100286c48c248352cd6b1bf121519220a524ca152864e0e79c502a83698d2cade6e301291c579eec57f0e290abdc73e785795873683bf55a9a1a95a5c5e079fc990b3c7ef8b97b8"}}, {0x4, &(0x7f0000003200)=@lang_id={0x4, 0x3, 0x418}}, {0x4, &(0x7f0000003240)=@lang_id={0x4, 0x3, 0xf0ff}}, {0x1b, &(0x7f0000003280)=@string={0x1b, 0x3, "76afb105979348cc934603632ff4cf4231bc14b9f9fb31e870"}}, {0x8a, &(0x7f00000032c0)=@string={0x8a, 0x3, "6128dda602e19ca386ce26af5e0869a977d60955ab7210ec1e70c4fbe6fac93c11603f36564fbfe3bc38012cc1cb87b5b5378d5bf86089bb49449861038d6eb13dbc76776860ae13691d4ebecafdb8887a6d36aa5458badd61837f08a3d1c830d746b8fb054897eafa432097e47b1bcde84417b85fc6944fad6058c107eff43e473caf99a029a9bb"}}, {0x4, &(0x7f0000003380)=@lang_id={0x4, 0x3, 0x425}}, {0x4, &(0x7f00000033c0)=@lang_id={0x4, 0x3, 0x42c}}]})
keyctl$reject(0x13, r2, 0x1, 0x0, r2)
ioctl$BTRFS_IOC_DEFRAG(r3, 0x50009402, 0x0)
ioctl$GIO_CMAP(r0, 0x4b70, &(0x7f00000034c0))
io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000003a40)={0xca4c, 0x0, &(0x7f0000003980)=[{&(0x7f0000003500)=""/24, 0x18}, {&(0x7f0000003540)=""/187, 0xbb}, {&(0x7f0000003600)=""/178, 0xb2}, {&(0x7f00000036c0)=""/158, 0x9e}, {&(0x7f0000003780)=""/84, 0x54}, {&(0x7f0000003800)=""/211, 0xd3}, {&(0x7f0000003900)=""/41, 0x29}, {&(0x7f0000003940)}], &(0x7f0000003a00)=[0x101, 0x4], 0x8}, 0x20)
madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x13)
madvise(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2)

5.060354214s ago: executing program 2 (id=224):
syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x2000200, &(0x7f0000000240)={[{@nodiscard}]}, 0x7, 0x4ee, &(0x7f0000002080)="$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")
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000a40)='.\x00', 0x0, 0x0)
mknodat$null(0xffffffffffffff9c, &(0x7f0000002580)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x40, 0x103)
getdents(r0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x400000000008d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2)
sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
prlimit64(r1, 0x7, 0x0, 0x0)
sendmmsg$unix(r3, &(0x7f0000000200), 0x651, 0x0)
recvmmsg(r2, &(0x7f0000000280), 0x4000087, 0x2, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r4, 0x29, 0x31, &(0x7f0000000280)=0x7, 0x4)
getsockopt$inet6_buf(r4, 0x29, 0x6, &(0x7f0000000500)=""/79, &(0x7f0000000580)=0x4f)
socket$nl_route(0x10, 0x3, 0x0)
write(0xffffffffffffffff, &(0x7f0000000440)="6796db8f8ab5829ae9100a54a3aedf63d5f103e7166fce55c021bbf998d0853f4aa81699893782844e4fdc716a5a7e6a64612692a9638c703b4dcd895a19ef0160255a4595d7a4db880374fbd77b46eb1c08474452440e1ad29e73a049caf4578b5d55301df934162af6189fbbe769f7bbe27e9dc4d7cf7f8a24dd1983893b1c84a84e85c776750bff55fb40c50cb360a4278d0c007a635dbd905d", 0x9b)
syz_emit_ethernet(0x87, &(0x7f0000000380)={@broadcast, @empty, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "f2a400", 0x51, 0x2f, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[], {{0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x22eb, 0xd, 0x0, [], "ba41912135147f7538648840d6"}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1}}}}}}}}}, 0x0)
symlinkat(&(0x7f0000002680)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000003680)='./file0\x00')
getdents(r0, &(0x7f0000000ac0)=""/4096, 0x1000)

3.747791747s ago: executing program 1 (id=228):
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000640)={'syz1\x00', {0x9, 0x7, 0x5, 0x5}, 0x3f, [0x9, 0x2, 0x18, 0x2, 0x2, 0x400, 0x80000000, 0x0, 0x5, 0x0, 0x6, 0x1, 0xfffffffb, 0x39, 0x747d5e13, 0x800, 0xfffffb9a, 0xfffffffe, 0x1, 0xfffffffb, 0x2004, 0x3, 0x0, 0xf250, 0x4, 0x4800, 0x4, 0x4, 0xe, 0x4623f, 0x0, 0x10001, 0x1ff, 0x8000, 0x0, 0x3, 0x0, 0x3, 0xa, 0x8da8, 0x2, 0x200, 0xffffffff, 0x5, 0xe, 0x4, 0x2, 0x6f, 0x243, 0x7, 0x1, 0x199d, 0x6, 0x2, 0x9, 0xffffffff, 0x4, 0x6, 0x1000, 0x5, 0x3d, 0x8, 0xa, 0x5], [0x7, 0x1e, 0x3, 0x8000, 0xfffffffd, 0x3, 0x3, 0x25, 0x40, 0xfffffffc, 0x3, 0x7fff, 0x72c, 0x1c32, 0x2, 0x8, 0x10000, 0x3fe, 0x7ffd, 0x3, 0x3, 0x297, 0x5, 0x0, 0xa, 0x4, 0x0, 0x3ff, 0x0, 0xfffffffe, 0x8, 0x1000003, 0xd3e, 0xfffffff9, 0xffffffff, 0xc, 0x1, 0xffffffff, 0x6, 0x2000008, 0x804, 0xfdff, 0x0, 0x96, 0xfffffff9, 0x2, 0x0, 0x2, 0x401, 0xc, 0x2, 0xb, 0x9, 0xe, 0x5, 0x7, 0x9, 0x2, 0x1, 0x1, 0x8, 0x7, 0x1fe, 0x3], [0x401, 0x8000e584, 0xffff, 0xcd3, 0xb, 0x1f, 0x404, 0x4, 0x4008, 0xc, 0x7, 0x9, 0x1e86, 0x5, 0x80000001, 0x8, 0x3f92, 0x6, 0x2, 0x10, 0x1, 0xfffffff9, 0x0, 0x1000, 0x9, 0x5, 0x4, 0x5, 0x200003, 0x100, 0x5, 0x80, 0x9, 0x8001, 0x10000, 0x0, 0x3, 0x400004, 0x3, 0x6d7e, 0x9, 0x8, 0x3, 0xbf23, 0x9, 0x9, 0x956, 0x0, 0x5, 0xe, 0x6, 0x100fffd, 0x93, 0x9, 0x4, 0xea, 0x9, 0x20000005, 0x1, 0x80, 0x0, 0x9, 0x401, 0x5], [0x108f, 0x10003, 0x3, 0x0, 0x88, 0x2, 0x4000000, 0x4, 0x50, 0x2, 0x763, 0xb, 0x406, 0x1, 0x5, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x8000, 0x4, 0xe47, 0x4, 0x3, 0x4, 0x0, 0x2851, 0x3b, 0x20000001, 0x4, 0x5, 0xa80a, 0x65f413f9, 0x4, 0x20008, 0x8a5, 0x8a, 0x46, 0x409, 0x3, 0x4, 0x168, 0x800, 0x4, 0xffffffff, 0x7fff, 0xffff8a33, 0xfffffff8, 0xf, 0x3, 0x200, 0x7, 0xd4, 0xfffffffd, 0xa, 0xe, 0x101, 0xfff, 0xf, 0x136, 0x6]}, 0x45c)
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
readv(0xffffffffffffffff, &(0x7f0000000ac0)=[{&(0x7f0000000b00)=""/41, 0x29}], 0x1)
write$input_event(0xffffffffffffffff, &(0x7f0000000b40)={{0x77359400}, 0x15}, 0xfe4f)

3.663266207s ago: executing program 2 (id=230):
r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = openat$selinux_policy(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0)
ioctl$TCXONC(0xffffffffffffffff, 0x4b45, 0x2)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newqdisc={0x54, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xfff1, 0xffff}, {0x0, 0x6}}, [@qdisc_kind_options=@q_ingress={0xc}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xa2, 0x4, 0x1, 0x6, 0x2, 0x8, 0x2492}}, {0x4}}]}]}, 0x54}}, 0x40)
fsetxattr$trusted_overlay_nlink(r0, 0x0, 0x0, 0x0, 0x2)
listxattr(&(0x7f0000000280)='./file0\x00', 0x0, 0x0)
ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f00000002c0))
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00', <r4=>0x0})
ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000400)={@mcast2, @dev={0xfe, 0x80, '\x00', 0x28}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1, 0x6, 0x0, 0x100, 0x4, 0x0, r4})
r5 = openat$make_it_fail(0xffffffffffffff9c, &(0x7f0000000500)='/proc/thread-self/make-it-fail\x00', 0x1, 0x0)
write(r5, &(0x7f0000000540)='1', 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={<r6=>0xffffffffffffffff})
pipe(&(0x7f00000005c0)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
splice(r6, 0x0, r7, 0x0, 0x39000, 0x0)
readlinkat(r7, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)=""/62, 0x3e)
syz_emit_ethernet(0xe, &(0x7f00000006c0)=ANY=[@ANYBLOB="aaaaaaaaaa3baaaaaaaaaa3688a258359a51f77d80b16e9708a9ea5e4d385050ff939631d8151a3d768454447256edb5ab8cf1505d08ee71bde887c3b975eed7e83784d89862ffce08e1da0802411d2d46d1beb95e6f26d75c84c63fe82100"/104], 0x0)
ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000480)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private0, 0x4, 0x6, 0x0, 0x700, 0x3, 0x190022, r4})
write$selinux_load(r0, &(0x7f0000000300)=ANY=[], 0x190ec)
syz_open_dev$usbfs(&(0x7f0000000040), 0x10001, 0x100)
socket(0x11, 0x3, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'gre0\x00'})
r9 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000680)={'bridge_slave_0\x00', <r10=>0x0})
sendmsg$nl_route(r9, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="340000001c00010429bd7000ffdbdf2507000000", @ANYRES32=r10, @ANYBLOB="40004c060a000200ffffffffffff00000c000e8005000100030000"], 0x34}, 0x1, 0x0, 0x0, 0x44801}, 0x840)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
socket$nl_route(0x10, 0x3, 0x0)

3.375423816s ago: executing program 1 (id=231):
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$UI_DEV_CREATE(r0, 0x5501)
readv(r0, &(0x7f0000000ac0)=[{&(0x7f0000000b00)=""/41, 0x29}], 0x1)
write$input_event(r0, &(0x7f0000000b40)={{0x77359400}, 0x15}, 0xfe4f)

3.375122286s ago: executing program 1 (id=232):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0c0100000001010400000000000000000a0000003c0001802c00018014000300fe80000084ff000000000000000000aa14000400fc0000000000000000000000000000000c00028005000100000000003c0002800c00028005000100000000002c000180140003000000000000000000000000000000000114000400fe8000000000000000000000000000aa08000740000000007800068014000500fc0200000000000000000000000000010c000380060001"], 0x10c}}, 0x0)

3.374906816s ago: executing program 1 (id=233):
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000002000/0x2000)=nil, 0x2000}, 0x2})
setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@mcast2, @in=@loopback, 0x4e23, 0xb, 0x4e23, 0x7, 0xa, 0xa0, 0xa0, 0x17}, {0x4, 0x9d, 0x101, 0x8, 0x3, 0x0, 0x1}, {0xfffffffffffffffa, 0x0, 0x709e, 0x3}, 0x6, 0x0, 0x2, 0x0, 0x2, 0x3}, {{@in6=@mcast2, 0x4d2, 0x2b}, 0xa, @in6=@empty, 0x34ff, 0x4, 0x1, 0x0, 0x2, 0x7, 0x5}}, 0xe8)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000002c0)=0x7)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB="600100001000030400"/20, @ANYRESHEX=r0, @ANYBLOB="46060900000000001400350062726964676530000000000000000000240116800b2101802c0001800c0004000b000000080000000c000400090000000700000010000600fdffffff7f000000070000003400018014000b00017200000000000007000000000000000c0007000800000065000000100002000e000000a500000000040000bc0001800c000400ff070000000000000c000300000000000004000014000a00080000000000000002000000000000000c000700ff0000000200000014000a000300000000000000517c0000000000000c00030005000000542d00002800010007000000aaaafad58f4800000000000000000000000000000000000000000000000000000c00040009000000000400002c000c8014000100040000003d07000002000000810000001400010000000000fc0000000700000088a80000050011"], 0x160}, 0x1, 0x0, 0x0, 0x4600}, 0x24044800)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x2)
sched_setscheduler(r3, 0x2, &(0x7f0000000340)=0x4)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r4)
sendmsg$TIPC_CMD_GET_NODES(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)={0x1c, r5, 0x401, 0x70bd2d, 0x25dfdbfa, {{}, {0x0, 0x410c}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40012}, 0x40)
sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x24, r5, 0x200, 0x70bd27, 0x25dfdbfc, {{}, {}, {0x8, 0x11, 0x2}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4800}, 0x4080)
r6 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0)
read$msr(r6, &(0x7f00000008c0)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f00000198c0)=0x410000002)
ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0)
r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r7)
ptrace$pokeuser(0x6, r7, 0x358, 0xffff8881f5c0a000)
r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000019900)='/proc/cpuinfo\x00', 0x0, 0x0)
read$FUSE(r8, &(0x7f0000019940)={0x2020}, 0x2020)

3.093482324s ago: executing program 1 (id=236):
r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000180)=ANY=[@ANYBLOB="120100000200006b3c47ea352c32fcd859bc1970b4c4402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a0000000905810300020000000904010000020d00000904010102020d0000090582020002000000090503020002000000"], 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async)
syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) (async)
mkdir(&(0x7f0000000000)='my_debugfs\x00', 0x1ff) (async)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)=@newae={0x50, 0x1e, 0x2c8679de05526ffb, 0x70bd26, 0x25dfdbff, {{@in6=@remote, 0x4d4, 0x2, 0x18}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0xe, 0x3501}, [@replay_val={0x10, 0xa, {0x70bd2d, 0x70bd26, 0xc}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20048000}, 0x0)
mount(0x0, &(0x7f00000000c0)='my_debugfs\x00', &(0x7f0000000100)='debugfs\x00', 0x0, 0x0) (async)
openat$dir(0xffffffffffffff9c, &(0x7f0000000880)='.\x00', 0x0, 0x0) (async)
openat(0xffffffffffffff9c, &(0x7f00000008c0)='./file1\x00', 0x101042, 0x15) (async)
r2 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000900)={@mcast2, 0x800, 0x0, 0x103, 0x1}, 0x20) (async)
setsockopt$inet6_int(r2, 0x29, 0x1000000000021, &(0x7f0000000940)=0x1, 0x4)
sendmsg$inet6(r2, &(0x7f0000000980)={&(0x7f00000009c0)={0xa, 0x4e21, 0x80000, @private1={0xfc, 0x1, '\x00', 0x8}}, 0x1c, 0x0, 0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="120000000000000029000000", @ANYRES16=r2], 0x18}, 0x2000c8d0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='my_debugfs\x00', 0x0, 0x0)
read$FUSE(r3, &(0x7f0000002380)={0x2020}, 0x2020) (async)
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r5 = dup(r4) (async)
r6 = syz_open_procfs(0x0, &(0x7f0000000240)='fd/3\x00')
r7 = syz_open_dev$usbmon(&(0x7f0000000280), 0x13dd, 0xc01)
mount$9p_fd(0x0, &(0x7f00000002c0)='.\x00', &(0x7f0000000300), 0x8080, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r7])
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000500)=ANY=[@ANYBLOB="050000000000000071114000000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000540)='GPL\x00', 0x5, 0x29e, &(0x7f0000000580)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="540000001300230a28bd7000ffdbdfa500000000", @ANYRES32=0x0, @ANYBLOB="20a40300000000001400350076657468305f6d6163767461700000001800168014000180100002000356c7fa830f0000ffffff7f08002900"], 0x54}, 0x1, 0x0, 0x0, 0x5b556efbb1a58058}, 0x44850) (async)
write$uinput_user_dev(r5, 0x0, 0x0) (async)
openat(r5, &(0x7f0000000400)='./file0\x00', 0x200, 0x20) (async)
syz_usb_ep_write(r0, 0x82, 0x5, &(0x7f0000002340)='hello')

2.556400289s ago: executing program 0 (id=238):
syz_mount_image$f2fs(&(0x7f00000027c0), &(0x7f0000002800)='./file0\x00', 0x82, &(0x7f0000002840)=ANY=[@ANYBLOB='test_dummy_encryption=v1,checkpoint=disable,noacl,fsync_mode=strict,jqfmt=vfsold,noquota,fsync_mode=posix,usrjquota=ext4\x00,resuid=', @ANYRES64, @ANYRES16], 0x1, 0x105b3, &(0x7f0000002900)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x42, 0x0)
unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file2\x00', 0x0)
rename(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file2\x00')

2.033009593s ago: executing program 0 (id=242):
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000640)={'syz1\x00', {0x9, 0x7, 0x5, 0x5}, 0x3f, [0x9, 0x2, 0x18, 0x2, 0x2, 0x400, 0x80000000, 0x0, 0x5, 0x0, 0x6, 0x1, 0xfffffffb, 0x39, 0x747d5e13, 0x800, 0xfffffb9a, 0xfffffffe, 0x1, 0xfffffffb, 0x2004, 0x3, 0x0, 0xf250, 0x4, 0x4800, 0x4, 0x4, 0xe, 0x4623f, 0x0, 0x10001, 0x1ff, 0x8000, 0x0, 0x3, 0x0, 0x3, 0xa, 0x8da8, 0x2, 0x200, 0xffffffff, 0x5, 0xe, 0x4, 0x2, 0x6f, 0x243, 0x7, 0x1, 0x199d, 0x6, 0x2, 0x9, 0xffffffff, 0x4, 0x6, 0x1000, 0x5, 0x3d, 0x8, 0xa, 0x5], [0x7, 0x1e, 0x3, 0x8000, 0xfffffffd, 0x3, 0x3, 0x25, 0x40, 0xfffffffc, 0x3, 0x7fff, 0x72c, 0x1c32, 0x2, 0x8, 0x10000, 0x3fe, 0x7ffd, 0x3, 0x3, 0x297, 0x5, 0x0, 0xa, 0x4, 0x0, 0x3ff, 0x0, 0xfffffffe, 0x8, 0x1000003, 0xd3e, 0xfffffff9, 0xffffffff, 0xc, 0x1, 0xffffffff, 0x6, 0x2000008, 0x804, 0xfdff, 0x0, 0x96, 0xfffffff9, 0x2, 0x0, 0x2, 0x401, 0xc, 0x2, 0xb, 0x9, 0xe, 0x5, 0x7, 0x9, 0x2, 0x1, 0x1, 0x8, 0x7, 0x1fe, 0x3], [0x401, 0x8000e584, 0xffff, 0xcd3, 0xb, 0x1f, 0x404, 0x4, 0x4008, 0xc, 0x7, 0x9, 0x1e86, 0x5, 0x80000001, 0x8, 0x3f92, 0x6, 0x2, 0x10, 0x1, 0xfffffff9, 0x0, 0x1000, 0x9, 0x5, 0x4, 0x5, 0x200003, 0x100, 0x5, 0x80, 0x9, 0x8001, 0x10000, 0x0, 0x3, 0x400004, 0x3, 0x6d7e, 0x9, 0x8, 0x3, 0xbf23, 0x9, 0x9, 0x956, 0x0, 0x5, 0xe, 0x6, 0x100fffd, 0x93, 0x9, 0x4, 0xea, 0x9, 0x20000005, 0x1, 0x80, 0x0, 0x9, 0x401, 0x5], [0x108f, 0x10003, 0x3, 0x0, 0x88, 0x2, 0x4000000, 0x4, 0x50, 0x2, 0x763, 0xb, 0x406, 0x1, 0x5, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x8000, 0x4, 0xe47, 0x4, 0x3, 0x4, 0x0, 0x2851, 0x3b, 0x20000001, 0x4, 0x5, 0xa80a, 0x65f413f9, 0x4, 0x20008, 0x8a5, 0x8a, 0x46, 0x409, 0x3, 0x4, 0x168, 0x800, 0x4, 0xffffffff, 0x7fff, 0xffff8a33, 0xfffffff8, 0xf, 0x3, 0x200, 0x7, 0xd4, 0xfffffffd, 0xa, 0xe, 0x101, 0xfff, 0xf, 0x136, 0x6]}, 0x45c)
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
readv(0xffffffffffffffff, &(0x7f0000000ac0)=[{&(0x7f0000000b00)=""/41, 0x29}], 0x1)
write$input_event(0xffffffffffffffff, &(0x7f0000000b40)={{0x77359400}, 0x15}, 0xfe4f)

1.741836342s ago: executing program 0 (id=243):
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$UI_DEV_CREATE(r0, 0x5501)
readv(r0, &(0x7f0000000ac0)=[{&(0x7f0000000b00)=""/41, 0x29}], 0x1)
write$input_event(r0, &(0x7f0000000b40)={{0x77359400}, 0x15}, 0xfe4f)

1.684452638s ago: executing program 0 (id=244):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x24, r1, 0x1, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_NETNS_FD={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40804}, 0x8000)
syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000740)='./file1\x00', 0x21081e, &(0x7f0000000780)={[{@block_validity}, {@usrquota}, {@nobh}]}, 0x1, 0x526, &(0x7f0000000900)="$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")
quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000000e40)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000e80)={0x3, 0x0, 0x5, 0xff, 0x5, 0x6, 0xf, 0x4, 0x3})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r3)
sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB="70020000", @ANYRES16=r4, @ANYBLOB="0f0700000000000000006700000048000e00", @ANYBLOB='H'], 0x270}, 0x1, 0x0, 0x0, 0x44810}, 0x0)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet_opts(r6, 0x0, 0x4, &(0x7f0000000400)="441f08100000009837a0324d7df546bcb8e8c94efe76cef3e200000000", 0x1d)
sendmsg$nl_xfrm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x140, 0x10, 0x1, 0x0, 0xfffffffe, {{@in=@private=0xa010101, @in6=@ipv4={'\x00', '\xff\xff', @private=0xa010102}}, {@in=@broadcast, 0x0, 0x33}, @in6=@ipv4={'\x00', '\xff\xff', @loopback}, {}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x0, 0x66}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}, 0x43}}, @sa_dir={0x5, 0x21, 0x2}]}, 0x140}}, 0x0)
capset(&(0x7f0000000f00)={0x20080522}, &(0x7f0000000f40)={0x0, 0x0, 0x40013, 0x0, 0x1})
symlinkat(&(0x7f0000000f80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f00000010c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')

1.562947481s ago: executing program 0 (id=245):
r0 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r0, &(0x7f0000000300)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
r2 = getpgid(r1)
sched_setscheduler(r2, 0x3, &(0x7f00000000c0)=0x800)
r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
r4 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x14, 0x3a, 0xa01, 0x0, 0x10000002, {0xa}}, 0x14}}, 0x0)
ioctl$UI_DEV_CREATE(r3, 0x5501)
readv(r3, &(0x7f0000000ac0)=[{&(0x7f0000000b00)=""/41, 0x29}], 0x1)
write$input_event(r3, &(0x7f0000000b40)={{0x77359400}, 0x15}, 0xfe4f)

1.493438668s ago: executing program 0 (id=247):
r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x77, 0x101301)
syz_usb_connect(0x3, 0xcfd, &(0x7f0000001900)={{0x12, 0x1, 0x250, 0x24, 0x35, 0x2d, 0xff, 0x1f4d, 0xa115, 0x428, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xceb, 0x4, 0x7, 0x7, 0x80, 0x6, "", [{{0x9, 0x4, 0x23, 0xc8, 0xd, 0xb9, 0xcf, 0x39, 0x6, [], [{{0x9, 0x5, 0xd, 0x0, 0x10, 0x6, 0x80, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x1, 0x2}, @generic={0x62, 0x10, "a1ae88ba24a4755abf5e1411e99226712eb97e5e3068b736bbcf7d8146b2ba6e55d57a811cc28fd7d19b887628079d0a695e997ea005506d2a4d1c5753adad86c8a399b38fac653980e48a9e661c1613b5381bde0388f6a180c695036e7d1002"}]}}, {{0x9, 0x5, 0x0, 0x4, 0x200, 0x10, 0x6, 0x5, [@generic={0x69, 0xa, "18804e879ea63f729abcddb8b4d7c5cdf15ff7080eea63de46093898e40751a930343be20a73e9efdd88bebb4a2cb62254fd5259142706c59c7d6773ad69679fc5bcb7d62d82f160e2f2aea21bade516caa698564220a4e4f31a3db5d8b3f455cd25b974a89af8"}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x9, 0xd}]}}, {{0x9, 0x5, 0x7, 0x3, 0x40, 0x6a, 0xa, 0xbf, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x7f, 0x2}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x3, 0x3}]}}, {{0x9, 0x5, 0xf11ed0602791a947, 0x8, 0x200, 0x5, 0x9, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x2, 0x2}]}}, {{0x9, 0x5, 0x4, 0x0, 0x400, 0x4, 0xff, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x80, 0x3}]}}, {{0x9, 0x5, 0xa, 0x10, 0x8, 0x4, 0x10, 0x1, [@generic={0xdf, 0x4, "3df3ed3bab032c91f4f5bb21bded6ddcd43471d9a1529bf0d32a1a05b923ae391e909e1c09adb388329bd1e58e8f1460ad4f11ea228959454e250bc8a81472eb220ecb1a5b9f186df59772cce4a3ff6ef075f269c4876d3df00e7208f32e2e94bff7aa5164662c6f2d604efbf88d52a7d21c47bf158870a04879f8768a51aeb4546867ed631ab57b24db684bb5b02a799d14ba5419e8ce340f961ba03f49c20fde32e624ddde52069ff47cbefbfe5d71ed4b57634df12e08ab07ddc8ff2390c64bbcaecf7a7773aeeb1d20c4cb2c43a4f7283d7756b38cb82ff754d012"}]}}, {{0x9, 0x5, 0x6, 0x0, 0x8, 0x9, 0x7, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x6, 0x100}, @generic={0xb3, 0x5, "ab76ab854048ebbb3068d61294801721f76e562b1f156b52f518e65ad72dae92923a60c5486ce4dd222d0110d1421057294cf1196127d7b813e8504e5c0f6ea7ee1dab8307161cc38bd4534fff0a5cbcc22cbd293ba2a98c1885c096043579cd8fab96086c6112f02923e3465ae2405bdb7f0149eeca2cd6df2f09f78b999c5b7d6beb6a2c1b5c43303f6ff0cc76619653a328262584c26608cf07e00faf7668a9ec743a7d703cb0d97c289a272239b623"}]}}, {{0x9, 0x5, 0xf, 0x1, 0x8, 0x94, 0xff, 0x7}}, {{0x9, 0x5, 0x8, 0x10, 0x8, 0x2, 0x6, 0xfb, [@generic={0xe0, 0x9, "9e41d2d78a45c92e79653a1577ccefc514e6567f150b368de60be83093271c7a5bb0cf8759481d630551a953dc82bde0a6c8b1f8113986d127ac64a86bb68c55809d98d29efe77b87432c82be7b1e66c6ce1322fb271e0b776d5635a9e7043c120ef1dc8490a20c849299e00f29a1543fc270958eab00aef9d7cc9ca27a7896bbfa3b2557e174071d06f3c2c515bd8edb62f257d2e025442b1ce688efa354677fc5b9d340663995a0495c1949d198e484ad445c0155317a3a4973dab6ce5ced5a3dd49a988e9221ac609caf2abbd4b4a8d7cbfb0df22200936ab48920143"}]}}, {{0x9, 0x5, 0x82, 0x1, 0x0, 0x6, 0x7f}}, {{0x9, 0x5, 0x6, 0x0, 0x200, 0xf3, 0x0, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x1, 0x2}]}}, {{0x9, 0x5, 0xdd82322a45acff43, 0x8, 0x0, 0x2, 0x9, 0x8, [@generic={0x9e, 0x0, "7d1d9383878e04924717955af962ec81e99be65bfef188c6305cca2242bfb77fc92007066739140e6330175e9d82d8dc8e12938b668deda5c227c128979a1c60558d783290019e8074da3e70fc31ce79eb9510520903d0afed3411bf561d3153ebd03fc21b61cf94dcc44bcde533502e4618cdf8bffec6c08f046b2a7df5450a13e076e9212abc85b63c79bf7b86a297b3bf1da08cb5f4036bca30f1"}, @generic={0x11, 0x2, "594f919c3f87e575f140eaf66eef5c"}]}}, {{0x9, 0x5, 0x85, 0xc, 0x3ff, 0x0, 0x8, 0x5}}]}}, {{0x9, 0x4, 0xc3, 0x0, 0x7, 0x8, 0x47, 0xc9, 0xa, [@generic={0x2d, 0x2, "63d75451d51982fce3d6e40454fc7e86be8e9e5d01f21a564aeaabc58294ba79e84a0d0853a24a0c58976e"}, @cdc_ncm={{0x5}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x800009, 0x9, 0xa, 0x1}, {0x6, 0x24, 0x1a, 0x3, 0x1}, [@acm={0x4, 0x24, 0x2, 0x9}, @country_functional={0xa, 0x24, 0x7, 0x4, 0x9, [0x4c, 0xc1]}, @mbim={0xc, 0x24, 0x1b, 0xabf1, 0x3, 0x94, 0x9, 0xc, 0x7}]}], [{{0x9, 0x5, 0x6, 0x10, 0x20, 0x6, 0x5, 0x7}}, {{0x9, 0x5, 0x4, 0x0, 0x10, 0x0, 0x8, 0x0, [@generic={0xa0, 0x8, "8919897e956354be31573ab91aa07ac30436402a68c0ef54d96821e4151396496684b7a622a44b2a78750fe3131f4cf9f80a519e81a43b71ce6cfafd0ebd4c6f6d615988c3c1902f93d7c5d97d1b33fec314135adb5ac8b25d48b8f54461fcc8423953398d26c7e776951f032621de234fdc6bb52a77e7af2a909e18c08fcf91aaeb451c644e2985d3122f73a852870309b779becb1d869109dbb70d9a70"}, @generic={0xd8, 0x3a, "1a9799c1ff85524e8c4dbcd351cf5996eb6bbd423d8a2ce87908c6a609734300cfdc77164d8700d4a14a643ed1c414f3288dec3fc2dac5a13a0f976c96405c1a8dbaa8278189cbdb0d02f57fc27115fd6084bc6ab7c4ad304d7e301dfb491f0ba441f97b4a3e4836d9760425a69b518d55c4ed264e59e2c1ebb62e69134fdd4f3d92d4714ecfd9efa1cb1efd973c95a3c260ad4c50f6b31d448c0348dc691e05a2352389288de4e9a35783adec686dbe49d3a0c9f6416f1a8862dfab84bf1e91259ee22b494ea9fe9115c9262665a7653268fe3d1b35"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x10, 0x8, 0x5, 0xed}}, {{0x9, 0x5, 0x6, 0xc, 0x20, 0xb3, 0x9, 0x9d, [@generic={0x33, 0x30, "d130363a7da8e0716c108071b5a4c385cfcbd1850cec654d34e37a6ca6da5e958e74b940bc980d04aacfe90f5f8168da36"}, @generic={0x5d, 0x22, "b1f497396359c80fb15fcc4561a841fee439cbe6b8840cb24f6905e1e0393af064e89e2e2beea7ad019a79c754605b53e249c50edc57df42e756889e81911d1d41db33c0716cea1ac08351f9b34f49d0352cdce92be2b34b714f9b"}]}}, {{0x9, 0x5, 0x6, 0x10, 0x3ff, 0xf7, 0x3, 0x10}}, {{0x9, 0x5, 0x5, 0x11, 0x400, 0x39, 0xb, 0x1}}, {{0x9, 0x5, 0x5, 0x1, 0x3ff, 0x5, 0x9, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x7, 0x3}]}}]}}, {{0x9, 0x4, 0x98, 0x7, 0x3, 0xff, 0x5d, 0x1, 0x3, [@cdc_ncm={{0xa, 0x24, 0x6, 0x0, 0x1, "eb13e137a3"}, {0x5, 0x24, 0x0, 0x400}, {0xd, 0x24, 0xf, 0x1, 0x8, 0x3, 0x3}, {0x6, 0x24, 0x1a, 0x401, 0x1}, [@mdlm_detail={0xa, 0x24, 0x13, 0x0, "28a6f9aaeac7"}, @dmm={0x7, 0x24, 0x14, 0xace, 0x4}, @dmm={0x7, 0x24, 0x14, 0xa2b, 0x7}]}, @cdc_ecm={{0x8, 0x24, 0x6, 0x0, 0x0, "1f2e79"}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0xea69, 0x7, 0xc}, [@ncm={0x6, 0x24, 0x1a, 0xff, 0x3}, @acm={0x4, 0x24, 0x2, 0x8}, @ncm={0x6, 0x24, 0x1a, 0x0, 0x34}]}], [{{0x9, 0x5, 0x4, 0x0, 0x10, 0x58, 0x4, 0x2}}, {{0x9, 0x5, 0x7, 0x8, 0x40, 0xa, 0xff, 0x11}}, {{0x9, 0x5, 0x0, 0x10, 0x200, 0xff, 0x5, 0xa}}]}}, {{0x9, 0x4, 0x29, 0x1, 0x9, 0xe1, 0x42, 0x4f, 0x4, [@generic={0xa1, 0x3d, "98ef7fb8c206828888220354c08d3a1f56afc7311f03148e547b12f5d9a0ce5c7850c16685129cf448aa5da13e5086dc2be5ebfca703ca87747681e0127db4fa0aa2e12dfdfab2a5465bc0e4ce90d6c01cf054c721145259e8f0ccea26cf4d6fe675c873c62d9ddbb19065f336bd7867e25270163303ec02e1c41819a37d4e6592b2bb5fed61780b3f01c24e67255554dddd8b4d77bcdbbf33a280127630e7"}], [{{0x9, 0x5, 0x80, 0xc, 0x40, 0x3, 0x4, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0xdb}, @generic={0x4, 0x8, "641c"}]}}, {{0x9, 0x5, 0x4, 0x3, 0x400, 0x4, 0x4, 0x7, [@generic={0xf4, 0x0, "a6fac4f9a02c4235e8b40a0be925f508db79fd234980fca0a1caaca2df4d9ed160f2fcf7e67127502f42673b3cb9d0761b917b56f6d71a8aee4cb9e2b6b200ee42f8a22fddcf7c6bcf0d296b46607cdf9f4bf1d3ffb45060acc3c5c82649a5699e907ade93ae1ed00fd6b60d0f832869bc892213097fb67b13d6c15ce703e3e78b316a38b665e180e59f24479334e162364b17b503d576869e1a8043644377d24bf38d059da899a7c53f3d9fee26f6113632125bf8eb54d30ef1cb8efa1f6b7d490556fbd4a97f59adb73c6ecb50286a980252582f861e1fbbf8401b11e095406e14b4020c2c91487a0ab2b4745272ee7fa2"}]}}, {{0x9, 0x5, 0xe, 0x1, 0x10, 0x10, 0xe, 0x3, [@generic={0xb8, 0x23, "9b6fd16021a7e84195a00b7ad60e9a770ac4e57ba1ce377c4abdb47038b827d1dccce130e38a88b9880f3506cad2660e1f5ba5683a5faea0f52303e6dadbd953d7aecb46ef9309da4d9bc4b03904ba9d96009d53a96116c85e2ba4120267b6b273909c11d564bf4a5a88bf9eb0688492ab54b3a51dd437c4496d9ecd5e8161c382be362501737920dd0a39159f297a5657981ccf7b4d0725a4d046a5324bf8687e755516fdbbde7abe334a846c43e8b83ff9de3e3b75"}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x81, 0xffff}]}}, {{0x9, 0x5, 0xc, 0x10, 0x200, 0x4, 0xff, 0x4, [@generic={0x15, 0xc, "3c7ea7b8f10b8bebb1df0e2495afe880398dde"}]}}, {{0x9, 0x5, 0x3, 0x0, 0x10, 0x3, 0x9, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0xc, 0x49b}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x8, 0x8001}]}}, {{0x9, 0x5, 0x8b, 0x0, 0x10, 0xa, 0x8, 0x81}}, {{0x9, 0x5, 0x80, 0x0, 0x20, 0x6, 0x3, 0x4, [@generic={0xc7, 0x8, "cfd52507410fceab2efdcc9390e8a16c61f058bf28fb0d155479da031a5ee4f5c4f270c4344a2439e16ac977542c632580e4473747565e8debf963cb15ba3b253f58567310aeaf59988de4f412b4b2c3d83281f78ab651f22ab17a3d53437babea2596e7e9bbd52a68dbb6b31fec404e2d886314f1789776930dc41a7cb740d92d8f12f9edd7346188a074b31a7d0e1195e6a5c3ebdeccb4e877011844011f9d1e04bfd31acbabb4b8c0b21b1c8e216c4bd96e1b3b437a8b5c665a8f05c85e7c677b8f5afc"}, @generic={0xb7, 0x22, "288c70535d5f79f7e6fd486fc2b97e0cebda7e18561eb2c1416ff694310a1e24dc4f0e6a7349a4ddc0605420456ad3c3e7da62d548bc469bf2cee9fa97a26a266048f50970cb480a28eaa98581d47b5ed6d835763c3df384d93511cff10fdba06d08450b8d519c68474d8bf093dd59146502c7e5cb3ed0f7e507c6117da5b87ebad7105c03a2c311de0d30ba5b10a32b38b5263cf9108c31a0557b6c8008135923bec9b20fca672d8eee2023d15a2c0935eafb2ca7"}]}}, {{0x9, 0x5, 0x9, 0x0, 0x400, 0x8, 0x7, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x0, 0xfff3}, @generic={0x9c, 0x23, "eda2a78bedc3a6a061bc7c95b3be2998d457baea337c67f14641e4d682121764109489e437c116e20e58c36d49aa7e46eaec7b48552bcc0f7a8298294896d45028cb56b3febb089fda098432cc81b251d015fb04d9024aed01a6b824982ed88be219f61966cdce07c832cad1498e37e5102f4d4f92090e500dbd6214654d282551794dba0c00455482ae11f96819ff431ad511e5dbd0ebfec290"}]}}, {{0x9, 0x5, 0xc, 0x3, 0x40, 0x1, 0xf0, 0xf7}}]}}]}}]}}, &(0x7f0000001100)={0xa, &(0x7f0000000d80)={0xa, 0x6, 0x300, 0x6, 0x1, 0x2, 0xff, 0xbf}, 0x25, &(0x7f0000000dc0)={0x5, 0xf, 0x25, 0x1, [@ssp_cap={0x20, 0x10, 0xa, 0x5, 0x5, 0x61, 0xf00, 0x8, [0xf, 0x3fcf, 0x3f00, 0x3e8f, 0xff00c0]}]}, 0x9, [{0x4, &(0x7f0000000e00)=@lang_id={0x4, 0x3, 0x100c}}, {0x4, &(0x7f0000000e40)=@lang_id={0x4, 0x3, 0x2009}}, {0x1a, &(0x7f0000000e80)=@string={0x1a, 0x3, "5cb823c40308cc3691f3f7a1e2a878d2f4c9795ac04efcca"}}, {0x4, &(0x7f0000000ec0)=@lang_id={0x4, 0x3, 0x3c01}}, {0xd3, &(0x7f00000014c0)=@string={0xd3, 0x3, "233fa0c548d6561cc91e29ea827cebc4fc95627557af9da013971d1299c29b6403d471218f7c127f3532adf47493905ae07c1df620cbef74c355615a733ea5851bfce0818789d8ce6cfa1dbcb051a47b6337817e524784475714a9e5ac61b0cc74ac053079c918c7af844187bff8b0d9fd9749c8ed2f5d684a19e3ee84cc354c1641a933f82ac041953678e84f7f2cec20db8304870de0abdcc5be05fa228261e3a95c404a520c74bd1022396723e30ed2fdd051a3d86b4a11a75b02019d52dfee77a70b2346a5a0ff81a0cd93195c8f12"}}, {0xc4, &(0x7f0000001740)=@string={0xc4, 0x3, "b3048c80d98fd9b00ad45e9da7c3538c6173fa0b585d68097c0e276edb66d2b745af46349e969ddffb9d100b4ccc7ef921c185f33cec59b05b12aa9be9c67d7b1178c39751c8e7bf3668bcda63acb8c0721350b3520fdb8a57a2f502f80d82303a983f851fdc6169e8ee820f8b9626a5867324e0645b5fcbb1040f01f2cc8c296ce6580492daf8b120859cdf174f17cd750bc8f34959f807395e95f1729199ab467166afa29afdf52853de811536383399a8bf98ff5622ed739ae804e847e100ebb6"}}, {0xcd, &(0x7f0000000f80)=@string={0xcd, 0x3, "eb6dd836c9fd8c66d50230504232c8b93030cd2ce5547ca235474cbb507702071e865f12505f75ad891f8ffc2248e815a4eeb494be58240f62e36f0dc19511093b4d4f14e7dc58fe2bd7d6de31ada22c501fb58112ca4c0eb21f44dd3bb445fb6267201c48544cd8ee0b728f9893622559610684cb377b2c4e88dbb862cd1ea2f67527eb8a25fc0f091f17b1ca150cbe890fbd03034d7764011b5453883d12bc50869b042324907a8424110dbf3c46fedeb86468465d145b3341361f45d674f483154d797b951d50443e36"}}, {0x4, &(0x7f0000001080)=@lang_id={0x4, 0x3, 0xc07}}, {0x4, &(0x7f0000001440)=@lang_id={0x4, 0x3, 0x1404}}]})
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
stat(&(0x7f0000000f40)='./file0\x00', &(0x7f0000001840)={0x0, 0x0, 0x0, 0x0, <r1=>0x0})
rt_tgsigqueueinfo(0x0, 0x0, 0xb, &(0x7f0000000140))
quotactl$Q_QUOTAON(0xffffffff80000202, &(0x7f0000000f00)=@md={'/dev/md', @named={'_syz', 0x0, '0'}}, r1, &(0x7f00000018c0)='./file0/file0\x00')
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x10, 0x0)
syz_mount_image$fuse(&(0x7f00000011c0), &(0x7f0000001200)='./file0\x00', 0x400a8, &(0x7f0000001240)=ANY=[], 0x5, 0x0, 0x0)
symlinkat(&(0x7f0000001280)='.\x00', 0xffffffffffffff9c, &(0x7f00000012c0)='./file0\x00')
r2 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f00000015c0), &(0x7f0000001640)=0x60, 0x180000)
accept4(r2, &(0x7f0000001680)=@ieee802154={0x24, @short}, &(0x7f0000001700)=0x80, 0x1000)
mount$bind(&(0x7f0000001300)='./file0/file0\x00', &(0x7f0000001340)='./file0\x00', 0x0, 0xa1c08, 0x0)
umount2(&(0x7f0000001380)='./file0\x00', 0x4)
mount$bind(&(0x7f00000013c0)='./file0\x00', &(0x7f0000001400)='./file0\x00', 0x0, 0x1406800, 0x0)
ioctl$USBDEVFS_CONTROL(r0, 0xc0105500, &(0x7f0000000100)={0x0, 0x5, 0x3, 0x5, 0x0, 0x0, 0x0})

756.800352ms ago: executing program 3 (id=253):
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000640)={'syz1\x00', {0x9, 0x7, 0x5, 0x5}, 0x3f, [0x9, 0x2, 0x18, 0x2, 0x2, 0x400, 0x80000000, 0x0, 0x5, 0x0, 0x6, 0x1, 0xfffffffb, 0x39, 0x747d5e13, 0x800, 0xfffffb9a, 0xfffffffe, 0x1, 0xfffffffb, 0x2004, 0x3, 0x0, 0xf250, 0x4, 0x4800, 0x4, 0x4, 0xe, 0x4623f, 0x0, 0x10001, 0x1ff, 0x8000, 0x0, 0x3, 0x0, 0x3, 0xa, 0x8da8, 0x2, 0x200, 0xffffffff, 0x5, 0xe, 0x4, 0x2, 0x6f, 0x243, 0x7, 0x1, 0x199d, 0x6, 0x2, 0x9, 0xffffffff, 0x4, 0x6, 0x1000, 0x5, 0x3d, 0x8, 0xa, 0x5], [0x7, 0x1e, 0x3, 0x8000, 0xfffffffd, 0x3, 0x3, 0x25, 0x40, 0xfffffffc, 0x3, 0x7fff, 0x72c, 0x1c32, 0x2, 0x8, 0x10000, 0x3fe, 0x7ffd, 0x3, 0x3, 0x297, 0x5, 0x0, 0xa, 0x4, 0x0, 0x3ff, 0x0, 0xfffffffe, 0x8, 0x1000003, 0xd3e, 0xfffffff9, 0xffffffff, 0xc, 0x1, 0xffffffff, 0x6, 0x2000008, 0x804, 0xfdff, 0x0, 0x96, 0xfffffff9, 0x2, 0x0, 0x2, 0x401, 0xc, 0x2, 0xb, 0x9, 0xe, 0x5, 0x7, 0x9, 0x2, 0x1, 0x1, 0x8, 0x7, 0x1fe, 0x3], [0x401, 0x8000e584, 0xffff, 0xcd3, 0xb, 0x1f, 0x404, 0x4, 0x4008, 0xc, 0x7, 0x9, 0x1e86, 0x5, 0x80000001, 0x8, 0x3f92, 0x6, 0x2, 0x10, 0x1, 0xfffffff9, 0x0, 0x1000, 0x9, 0x5, 0x4, 0x5, 0x200003, 0x100, 0x5, 0x80, 0x9, 0x8001, 0x10000, 0x0, 0x3, 0x400004, 0x3, 0x6d7e, 0x9, 0x8, 0x3, 0xbf23, 0x9, 0x9, 0x956, 0x0, 0x5, 0xe, 0x6, 0x100fffd, 0x93, 0x9, 0x4, 0xea, 0x9, 0x20000005, 0x1, 0x80, 0x0, 0x9, 0x401, 0x5], [0x108f, 0x10003, 0x3, 0x0, 0x88, 0x2, 0x4000000, 0x4, 0x50, 0x2, 0x763, 0xb, 0x406, 0x1, 0x5, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x8000, 0x4, 0xe47, 0x4, 0x3, 0x4, 0x0, 0x2851, 0x3b, 0x20000001, 0x4, 0x5, 0xa80a, 0x65f413f9, 0x4, 0x20008, 0x8a5, 0x8a, 0x46, 0x409, 0x3, 0x4, 0x168, 0x800, 0x4, 0xffffffff, 0x7fff, 0xffff8a33, 0xfffffff8, 0xf, 0x3, 0x200, 0x7, 0xd4, 0xfffffffd, 0xa, 0xe, 0x101, 0xfff, 0xf, 0x136, 0x6]}, 0x45c)
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
readv(0xffffffffffffffff, &(0x7f0000000ac0)=[{&(0x7f0000000b00)=""/41, 0x29}], 0x1)
write$input_event(0xffffffffffffffff, &(0x7f0000000b40)={{0x77359400}, 0x15}, 0xfe4f)

704.439878ms ago: executing program 5 (id=254):
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000640)={'syz1\x00', {0x9, 0x7, 0x5, 0x5}, 0x3f, [0x9, 0x2, 0x18, 0x2, 0x2, 0x400, 0x80000000, 0x0, 0x5, 0x0, 0x6, 0x1, 0xfffffffb, 0x39, 0x747d5e13, 0x800, 0xfffffb9a, 0xfffffffe, 0x1, 0xfffffffb, 0x2004, 0x3, 0x0, 0xf250, 0x4, 0x4800, 0x4, 0x4, 0xe, 0x4623f, 0x0, 0x10001, 0x1ff, 0x8000, 0x0, 0x3, 0x0, 0x3, 0xa, 0x8da8, 0x2, 0x200, 0xffffffff, 0x5, 0xe, 0x4, 0x2, 0x6f, 0x243, 0x7, 0x1, 0x199d, 0x6, 0x2, 0x9, 0xffffffff, 0x4, 0x6, 0x1000, 0x5, 0x3d, 0x8, 0xa, 0x5], [0x7, 0x1e, 0x3, 0x8000, 0xfffffffd, 0x3, 0x3, 0x25, 0x40, 0xfffffffc, 0x3, 0x7fff, 0x72c, 0x1c32, 0x2, 0x8, 0x10000, 0x3fe, 0x7ffd, 0x3, 0x3, 0x297, 0x5, 0x0, 0xa, 0x4, 0x0, 0x3ff, 0x0, 0xfffffffe, 0x8, 0x1000003, 0xd3e, 0xfffffff9, 0xffffffff, 0xc, 0x1, 0xffffffff, 0x6, 0x2000008, 0x804, 0xfdff, 0x0, 0x96, 0xfffffff9, 0x2, 0x0, 0x2, 0x401, 0xc, 0x2, 0xb, 0x9, 0xe, 0x5, 0x7, 0x9, 0x2, 0x1, 0x1, 0x8, 0x7, 0x1fe, 0x3], [0x401, 0x8000e584, 0xffff, 0xcd3, 0xb, 0x1f, 0x404, 0x4, 0x4008, 0xc, 0x7, 0x9, 0x1e86, 0x5, 0x80000001, 0x8, 0x3f92, 0x6, 0x2, 0x10, 0x1, 0xfffffff9, 0x0, 0x1000, 0x9, 0x5, 0x4, 0x5, 0x200003, 0x100, 0x5, 0x80, 0x9, 0x8001, 0x10000, 0x0, 0x3, 0x400004, 0x3, 0x6d7e, 0x9, 0x8, 0x3, 0xbf23, 0x9, 0x9, 0x956, 0x0, 0x5, 0xe, 0x6, 0x100fffd, 0x93, 0x9, 0x4, 0xea, 0x9, 0x20000005, 0x1, 0x80, 0x0, 0x9, 0x401, 0x5], [0x108f, 0x10003, 0x3, 0x0, 0x88, 0x2, 0x4000000, 0x4, 0x50, 0x2, 0x763, 0xb, 0x406, 0x1, 0x5, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x8000, 0x4, 0xe47, 0x4, 0x3, 0x4, 0x0, 0x2851, 0x3b, 0x20000001, 0x4, 0x5, 0xa80a, 0x65f413f9, 0x4, 0x20008, 0x8a5, 0x8a, 0x46, 0x409, 0x3, 0x4, 0x168, 0x800, 0x4, 0xffffffff, 0x7fff, 0xffff8a33, 0xfffffff8, 0xf, 0x3, 0x200, 0x7, 0xd4, 0xfffffffd, 0xa, 0xe, 0x101, 0xfff, 0xf, 0x136, 0x6]}, 0x45c)
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
readv(0xffffffffffffffff, &(0x7f0000000ac0)=[{&(0x7f0000000b00)=""/41, 0x29}], 0x1)
write$input_event(0xffffffffffffffff, &(0x7f0000000b40)={{0x77359400}, 0x15}, 0xfe4f)

704.163828ms ago: executing program 3 (id=255):
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000002000/0x2000)=nil, 0x2000}, 0x2})
setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@mcast2, @in=@loopback, 0x4e23, 0xb, 0x4e23, 0x7, 0xa, 0xa0, 0xa0, 0x17}, {0x4, 0x9d, 0x101, 0x8, 0x3, 0x0, 0x1}, {0xfffffffffffffffa, 0x0, 0x709e, 0x3}, 0x6, 0x0, 0x2, 0x0, 0x2, 0x3}, {{@in6=@mcast2, 0x4d2, 0x2b}, 0xa, @in6=@empty, 0x34ff, 0x4, 0x1, 0x0, 0x2, 0x7, 0x5}}, 0xe8)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000002c0)=0x7)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB="600100001000030400"/20, @ANYRESHEX=r0, @ANYBLOB="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"], 0x160}, 0x1, 0x0, 0x0, 0x4600}, 0x24044800)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x2)
sched_setscheduler(r3, 0x2, &(0x7f0000000340)=0x4)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r4)
sendmsg$TIPC_CMD_GET_NODES(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)={0x1c, r5, 0x401, 0x70bd2d, 0x25dfdbfa, {{}, {0x0, 0x410c}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40012}, 0x40)
sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x24, r5, 0x200, 0x70bd27, 0x25dfdbfc, {{}, {}, {0x8, 0x11, 0x2}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4800}, 0x4080)
r6 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0)
read$msr(r6, &(0x7f00000008c0)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f00000198c0)=0x410000002)
ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0)
r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace$pokeuser(0x6, r7, 0x358, 0xffff8881f5c0a000)
r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000019900)='/proc/cpuinfo\x00', 0x0, 0x0)
read$FUSE(r8, &(0x7f0000019940)={0x2020}, 0x2020)
r9 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=ANY=[@ANYBLOB="bc010000190001002dbdc991aa157c94f1250000000000000040ffffac1414bbac1514bb0000000000000000000080004e20000bf80300000a00800000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000ff0f00000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000060000000000000080000000000000000000000000000000fcffffff00000000000000000000000004010500fc000000000000000000000000000004000000053c000000000000000000000000000000000000000000000002350000000200000000000000000000fc7f0000fe8000000000000000000000000000bb000000003c0000000200000000000000000000000000000000000001023500000403000000080000000800000000000000000000000000000000000000000001000000003200000000000000000000000000000000000000000000000335000001010400080000000000000000000000ac14141c000000000000000000000000000000006c00000030000000fe8000000000000000000000000000aa0000000004020000000001000000000000000000"], 0x1bc}, 0x1, 0x0, 0x0, 0x28040015}, 0x20000010)

701.709348ms ago: executing program 5 (id=264):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x3a)
pipe2$9p(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
write$FUSE_BMAP(0xffffffffffffffff, &(0x7f00000001c0)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f0000000200)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x14000, &(0x7f00000002c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX])
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000440), 0x12)
syz_mount_image$ext4(&(0x7f0000000300)='ext4\x00', &(0x7f0000000340)='./file0\x00', 0x20a1, &(0x7f0000000380)={[{@bsdgroups}, {@nodelalloc}, {@nogrpid}, {@noblock_validity}, {@dax_inode}, {@prjquota}]}, 0x1, 0x654, &(0x7f00000008c0)="$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")

591.7216ms ago: executing program 2 (id=256):
r0 = socket$netlink(0x10, 0x3, 0x4)
r1 = socket$packet(0x11, 0x3, 0x300)
connect$unix(0xffffffffffffffff, &(0x7f0000000800)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@base={0x9, 0x9, 0x8, 0x40, 0xc0, 0x1, 0x3}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940), &(0x7f0000000980), 0x1103, r2}, 0x38)
bpf$MAP_DELETE_BATCH(0x1b, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000a00), 0x0, 0x2, r2}, 0x38)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000940)={0x1, &(0x7f0000000980)=[{0x6, 0x72, 0x0, 0x7fff0000}]})
prlimit64(0x0, 0xe, &(0x7f0000000a00)={0x7, 0x100}, 0x0)
r5 = getpid()
sched_setscheduler(r5, 0x1, &(0x7f0000000a40)=0x7)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000a80)={0x1, &(0x7f0000000ac0)=[{0x6, 0x0, 0x57, 0x7fc00100}]})
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000340)={<r8=>0x0})
ioctl$SECCOMP_IOCTL_NOTIF_SEND(r7, 0xc0182101, &(0x7f0000000b80)={r8})
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, &(0x7f0000000bc0)={<r9=>0x0, <r10=>0x0})
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r7, 0x40182103, &(0x7f0000000c40)={r9, 0x3, r6, 0x5})
close_range(r4, 0xffffffffffffffff, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@gettaction={0x30, 0x32, 0x215, 0x0, 0x4, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x80000000}]}, 0x30}}, 0x0)
setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f00000001c0)=0x9, 0x4)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'xfrm0\x00', <r11=>0x0})
sendto$packet(r1, &(0x7f0000000240)="0b031200e2ff020002004cc88dfc6d5a97096c0f99b95f9315460c7e416617423c7f2be66b9dc27b47d1165a42b868d00b32f932de274e86ec1fb891", 0x3c, 0x0, &(0x7f0000000280)={0x11, 0x0, r11, 0x1, 0x9, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}, 0x14)
r12 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ptrace$ARCH_SHSTK_STATUS(0x1e, r10, &(0x7f00000000c0), 0x5005)
clock_gettime(0x0, &(0x7f00000075c0)={<r13=>0x0, <r14=>0x0})
recvmmsg(r1, &(0x7f0000007480)=[{{&(0x7f00000003c0)=@hci, 0x80, &(0x7f0000004300)=[{&(0x7f0000000440)=""/124, 0x7c}, {&(0x7f0000000e80)=""/159, 0x9f}, {&(0x7f0000000580)=""/99, 0x63}, {&(0x7f0000000600)=""/235, 0xeb}, {&(0x7f0000002240)=""/4096, 0x1000}, {&(0x7f0000003240)=""/65, 0x41}, {&(0x7f00000032c0)=""/4096, 0x1000}, {&(0x7f00000042c0)=""/49, 0x31}], 0x8}, 0x5}, {{&(0x7f0000004380)=@l2, 0x80, &(0x7f0000004840)=[{&(0x7f0000004400)=""/41, 0x29}, {&(0x7f0000004440)=""/106, 0x6a}, {&(0x7f00000044c0)=""/163, 0xa3}, {&(0x7f0000004580)=""/228, 0xe4}, {&(0x7f0000004680)=""/241, 0xf1}, {&(0x7f0000004780)=""/191, 0xbf}], 0x6}, 0x8}, {{&(0x7f00000048c0)=@pppoe={0x18, 0x0, {0x0, @multicast}}, 0x80, &(0x7f0000005c40)=[{&(0x7f0000004940)=""/109, 0x6d}, {&(0x7f0000000d80)=""/231, 0xe7}, {&(0x7f0000004ac0)=""/185, 0xb9}, {&(0x7f0000004b80)=""/4096, 0x1000}, {&(0x7f0000005b80)=""/175, 0xaf}], 0x5, &(0x7f0000005cc0)=""/42, 0x2a}, 0x7f000000}, {{&(0x7f0000005d00)=@can, 0x80, &(0x7f0000005f00)=[{&(0x7f0000005d80)=""/227, 0xe3}, {&(0x7f0000005e80)=""/70, 0x46}], 0x2, &(0x7f0000005f40)=""/146, 0xfffffd06}, 0xf9}, {{&(0x7f0000006000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000007340)=[{&(0x7f0000006080)=""/38, 0x26}, {&(0x7f00000060c0)=""/52, 0x34}, {&(0x7f0000006100)=""/129, 0x81}, {&(0x7f00000061c0)=""/30, 0x1e}, {&(0x7f0000006200)=""/58, 0x3a}, {&(0x7f0000006240)=""/252, 0xfc}, {&(0x7f0000006340)=""/4096, 0x1000}], 0x7, &(0x7f00000073c0)=""/167, 0xa7}, 0xfff}], 0x5, 0x0, &(0x7f0000007600)={r13, r14+60000000})
ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r12, 0xc0145401, &(0x7f0000000040)={0x3, 0x4, 0x0, 0x0, 0x7fffffff})
sendmsg$NFT_MSG_GETSET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000c80)=ANY=[@ANYBLOB="480000000a0a010200000000000000000000000808000340000001140900010073797a31000000000c001040000900010073797a300000000008000f4000000001000000000000007addb20fd2b6cf39529997b1dc2ba31eba31c43f648a3ed8eaf006aba8916d5e55d1de91e335670c7893022d148a87110047d0e4424ec77a789a351658f89f8fee7a3d684c849c10df113426e77e55848ad76354548ee696030cdcba5e5c53a18e4a5a0722646187c2435fe28aaaa6625d035f3e3b11a56f7405c0535aabb5350149d645438b9de203249e2993d9b1a4b2c830552c6d0f3b30357ff6761327d0ec956d"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x8000)
socket$inet6(0xa, 0x3, 0x2)

468.163392ms ago: executing program 5 (id=257):
symlinkat(&(0x7f0000000f80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f00000010c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')

461.329493ms ago: executing program 3 (id=258):
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000002000/0x2000)=nil, 0x2000}, 0x2})
setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@mcast2, @in=@loopback, 0x4e23, 0xb, 0x4e23, 0x7, 0xa, 0xa0, 0xa0, 0x17}, {0x4, 0x9d, 0x101, 0x8, 0x3, 0x0, 0x1}, {0xfffffffffffffffa, 0x0, 0x709e, 0x3}, 0x6, 0x0, 0x2, 0x0, 0x2, 0x3}, {{@in6=@mcast2, 0x4d2, 0x2b}, 0xa, @in6=@empty, 0x34ff, 0x4, 0x1, 0x0, 0x2, 0x7, 0x5}}, 0xe8)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000002c0)=0x7)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB="600100001000030400"/20, @ANYRESHEX=r0, @ANYBLOB="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"], 0x160}, 0x1, 0x0, 0x0, 0x4600}, 0x24044800)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x2)
sched_setscheduler(r3, 0x2, &(0x7f0000000340)=0x4)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r4)
sendmsg$TIPC_CMD_GET_NODES(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)={0x1c, r5, 0x401, 0x70bd2d, 0x25dfdbfa, {{}, {0x0, 0x410c}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40012}, 0x40)
sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x24, r5, 0x200, 0x70bd27, 0x25dfdbfc, {{}, {}, {0x8, 0x11, 0x2}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4800}, 0x4080)
r6 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0)
read$msr(r6, &(0x7f00000008c0)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f00000198c0)=0x410000002)
ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0)
r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r7)
ptrace$pokeuser(0x6, r7, 0x358, 0xffff8881f5c0a000)
openat$procfs(0xffffffffffffff9c, &(0x7f0000019900)='/proc/cpuinfo\x00', 0x0, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)

445.592104ms ago: executing program 5 (id=259):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
munmap(&(0x7f0000002000/0x1000)=nil, 0x1000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x10, &(0x7f0000000500)=ANY=[@ANYBLOB="180000009100000000000000010a000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000001daaf5ff00000000bf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000580)='GPL\x00', 0x7, 0x1000, &(0x7f0000001bc0)=""/4096, 0x41100, 0xd, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x7c)

380.367281ms ago: executing program 5 (id=260):
r0 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000000)=@name, &(0x7f0000000040)=0x10, 0x80000)
setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$tipc(r2, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x3, {0x43, 0x3, 0x1}}, 0x10) (async, rerun: 64)
r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (rerun: 64)
ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000140)={0x5, 0x0, [{0xa2a, 0x0, 0xfffffffffffffff8}, {0x388, 0x0, 0x1}, {0x223, 0x0, 0x9}, {0x211, 0x0, 0x4}, {0x953, 0x0, 0x7fff}]}) (async)
socket$tipc(0x1e, 0x2, 0x0)
fstat(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, <r4=>0x0})
fsetxattr$security_capability(r0, &(0x7f00000001c0), &(0x7f0000000280)=@v3={0x3000000, [{0xe, 0x7}, {0xbb8, 0x180000}], r4}, 0x18, 0x2) (async)
getsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f00000002c0), &(0x7f0000000300)=0x4) (async)
r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), r3)
sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0x90, r5, 0x8, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge0\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_macvtap\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@mcast1}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x8000}, 0x8080)
r6 = socket$nl_route(0x10, 0x3, 0x0) (async)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000005c0)={'syztnl1\x00', &(0x7f0000000540)={'syztnl2\x00', <r7=>0x0, 0x4, 0x9d, 0x7f, 0x80000000, 0x10, @loopback, @mcast2, 0x40, 0x10, 0x7, 0x6}})
sendmsg$nl_route_sched_retired(r6, &(0x7f0000000700)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000006c0)={&(0x7f0000000600)=@delqdisc={0xbc, 0x25, 0x307, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0xc, 0xfff2}, {0xffe0, 0xd}, {0xffff, 0xfff2}}, [@q_dsmark={{0xb}, {0x20, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x800}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x609}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0x24, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xfff7}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x20}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x3}]}}, @q_dsmark={{0xb}, {0x18, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x1}]}}, @q_dsmark={{0xb}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0x6}]}}]}, 0xbc}, 0x1, 0x0, 0x0, 0x4040880}, 0x40000) (async, rerun: 64)
ioctl$BTRFS_IOC_LOGICAL_INO(0xffffffffffffffff, 0xc0389424, &(0x7f0000000780)={0xbcb2, 0x30, '\x00', 0x0, &(0x7f0000000740)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) (async, rerun: 64)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_inet6_tcp_SIOCOUTQ(r8, 0x5411, &(0x7f00000007c0)) (async)
socket$packet(0x11, 0x3, 0x300) (async)
read$msr(r3, &(0x7f0000000800)=""/4096, 0x1000)
openat$kvm(0xffffffffffffff9c, &(0x7f0000001800), 0x440081, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000004, 0x30, r2, 0xd2f42000) (async, rerun: 32)
pipe2(&(0x7f0000001840)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff}, 0x4800) (rerun: 32)
setsockopt$CAN_RAW_FILTER(r9, 0x65, 0x1, &(0x7f0000001880)=[{{0x1, 0x1}}, {{0x3, 0x1, 0x1}, {0x1, 0x1, 0x1}}, {{0x1}, {0x3, 0x0, 0x1}}, {{0x2, 0x0, 0x1, 0x1}, {0x1}}], 0x20) (async)
socketpair(0x2b, 0x1, 0xfc, &(0x7f00000018c0)={0xffffffffffffffff, <r11=>0xffffffffffffffff}) (async)
getsockopt$CAN_RAW_FD_FRAMES(r10, 0x65, 0x5, &(0x7f0000001900), &(0x7f0000001940)=0x4) (async)
setsockopt$SO_ATTACH_FILTER(r10, 0x1, 0x1a, &(0x7f00000019c0)={0x2, &(0x7f0000001980)=[{0x2, 0x2, 0x0, 0x8000}, {0x2d5, 0x2, 0x4, 0x4}]}, 0x10) (async)
pread64(0xffffffffffffffff, &(0x7f0000001a00)=""/210, 0xd2, 0x5)
r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001b40), r11)
sendmsg$NL80211_CMD_JOIN_MESH(r11, &(0x7f0000001d40)={&(0x7f0000001b00)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001d00)={&(0x7f0000001b80)={0x168, r12, 0x2, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0x38}, @NL80211_MESHCONF_NOLEARN={0x5}, @NL80211_MESHCONF_HT_OPMODE={0x6, 0x16, 0x17}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x6}]}, @NL80211_ATTR_BSS_BASIC_RATES={0x1b, 0x24, [{0x4f, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x12}, {0x6, 0x1}, {0x9, 0x1}, {0x16, 0x1}, {0x6, 0x1}, {0x16}, {0x36}, {0x18, 0x1}, {0x3}, {0x18}, {0x3}, {0x11076f894dc94170, 0x1}, {0x4, 0x1}, {0x52}, {0x6c}, {0x1, 0x1}, {0x6}, {0x4a, 0x1}, {0xb}, {0x60}]}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x9}, @NL80211_ATTR_MESH_SETUP={0xec, 0x70, [@NL80211_MESH_SETUP_ENABLE_VENDOR_METRIC={0x5, 0x2, 0x1}, @NL80211_MESH_SETUP_IE={0xdb, 0x3, "85cce3b68cf6695b28a53737b4f18d7faf8cdc0c7aa524399368c21840b7e6beca949e2d9013a61a1f34645dbe2f1bafd4e0fe3134cc1a9bfee9309858853d8f38f53fba6e014273db1959e1258bf3fcd4248f28e868045e2620a591f2081d46575a6da9234b635141abe5e7cf1c90e62ad7bc5bcd89a825c3167120ea82ea287ec2994e35b5a1e2e2bca62fe684558a1351aaf602a32bf6a4eb2a9716ba4551768389dcf6bf9c1f32d21515ae57b72e57c8e19440a57b7090ff3d3138b6b6c3cfec20a94a8f98736c6c8de1743376e6c4818b1bbe1f41"}, @NL80211_MESH_SETUP_USERSPACE_AMPE={0x4}]}]}, 0x168}, 0x1, 0x0, 0x0, 0x50000}, 0x4054)

367.220072ms ago: executing program 5 (id=261):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x2}, &(0x7f0000000040)=<r1=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000080)={0x0, 0x0, 0x10001, 0x5}) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xd, 0x3, &(0x7f00000007c0)=ANY=[@ANYBLOB="b400000000000000a57ea800000000009500000c00000000a627efb26ef8ed6cf805809257d88019c9dc14fdb319c3bae2d4ebaf8024f5fb9bb623d3da911944fee4d30a0a9b6efa68a1dc426d3390f19d64430ec4662a20e5f149b3d32fd17f8d92d2197b4386d1a26182c9c6b51d9f"], &(0x7f0000000840)='GPL\x00', 0x2, 0xc3, &(0x7f0000000880)=""/195, 0x0, 0x23, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x8, &(0x7f0000000980)={0x3}, 0x8, 0x10, &(0x7f00000009c0)={0x0, 0xf}, 0x10}, 0x94)
mkdirat(0xffffffffffffff9c, &(0x7f0000000a00)='./dev\x00', 0x102)
mount(0x0, &(0x7f0000000a40)='./dev\x00', &(0x7f0000000a80)='devtmpfs\x00', 0x2, 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000ac0)='./mnt\x00', 0x1ff) (async)
mount(&(0x7f0000000b00)=@filename='./dev/sda1\x00', &(0x7f0000000b40)='./mnt\x00', &(0x7f0000000b80)='ext4\x00', 0x8410, 0x0) (async)
chdir(&(0x7f0000000bc0)='./mnt\x00') (async)
r2 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r2, &(0x7f0000000c00)=@file={0x1, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) (async)
r3 = inotify_init1(0x0)
inotify_add_watch(r3, &(0x7f0000000c80)='.\x00', 0x82000084) (async)
bind$unix(r2, &(0x7f0000000cc0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async)
timer_settime(r1, 0xd25f8e34d7c46251, &(0x7f00000000c0)={{0x0, 0x989680}, {0x77359400}}, 0x0) (async)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) (async)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, &(0x7f0000000180)=0x100000001, 0x4) (async)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f00000001c0)=0x2, 0x4) (async)
connect$inet(r4, &(0x7f0000000200)={0x2, 0x4e21, @remote}, 0x10) (async)
sendto$inet(r4, &(0x7f00000004c0)="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", 0x109e8, 0x805, 0x0, 0x6) (async)
r5 = fcntl$dupfd(r4, 0x406, r4)
sendmmsg$inet(r5, &(0x7f0000000680)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000700)="f4", 0x1}], 0x1, &(0x7f0000000740)=ANY=[@ANYBLOB="1000000000000000000000000700000011"], 0x28}}], 0x1, 0x20008084) (async)
ioctl$int_in(r4, 0x5452, &(0x7f0000000780)=0x20d) (async)
write$binfmt_elf64(r0, &(0x7f0000000340)={{0x7f, 0x45, 0x4c, 0x46, 0x7, 0xfc, 0x3c, 0x40, 0x10001, 0x2, 0x3e, 0x7, 0x294, 0x40, 0x1dd, 0x13, 0x0, 0x38, 0x1, 0x0, 0x333}, [{0x3, 0x3, 0x4, 0x100000000, 0x1c8, 0xe8, 0x4, 0x3}], "", ['\x00']}, 0x178) (async)
close(r0)
execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000)

175.423452ms ago: executing program 3 (id=262):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x1a1740, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x20040, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./debugfs\x00', 0x1ff)
mount(0x0, &(0x7f0000000680)='./debugfs\x00', &(0x7f00000006c0)='debugfs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000940)='./debugfs/kvm/halt_poll_fail_ns\x00', 0x2, 0x0)
write(r2, &(0x7f0000000980)='0', 0x1)

125.851207ms ago: executing program 3 (id=263):
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x42, 0x0)
unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file2\x00', 0x0)
rename(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file2\x00')

125.355527ms ago: executing program 3 (id=265):
prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x400000000008d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2)
sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7)
r1 = syz_open_procfs(r0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
getpgrp(r0)
sendmmsg$unix(r3, &(0x7f00000002c0), 0x651, 0x0)
recvmmsg(r2, &(0x7f0000000300), 0x4000087, 0x2, 0x0)
setrlimit(0x5, &(0x7f0000000380)={0x8, 0x5})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x103241, 0x0)
syz_mount_image$exfat(&(0x7f0000000400), &(0x7f0000000440)='./file1\x00', 0x20808, &(0x7f0000000200)=ANY=[@ANYRES32=r3, @ANYRES8, @ANYRES32=r3, @ANYRESHEX=r1], 0x1, 0x1546, &(0x7f0000003380)="$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")
write$tun(r4, &(0x7f0000002d80)=ANY=[@ANYBLOB="020409e899ca0ab3130e3e785dab00"/30], 0x1e)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000002dc0)={0x3, 0x7, &(0x7f0000002e80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @sched_cls=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000002ec0)=0x10800001, 0x4)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
r7 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r7, &(0x7f0000002f00)={0x500, 0x0, &(0x7f0000002f40)={&(0x7f0000002f80)=ANY=[@ANYBLOB="020300090e000000000000020000000005000600000000000a004e2000000007fe8000000000000000000000000000bb9c00000000000000020001000000000000000002fffffffb05000500000000000a004e2200000005fc02000000000000000000000000000102000000000000002c3fcac10963e3ce443b0a49c4c9aa82a576248da8dcb5376bd5806e0d436f30b264afc8d17d39d6185631d8e6e1b3503c4c7d376f155a06204a27d933b078750c092ceeb7497de7f91a4d8ec97a2d36c36d7384d8b505e467c37bcd6388b37698bdac963a584dad64c39589da6c29aff7916e2dbce6e66368eff07f6ff83b4ed35db2845b6d9b34ce6ebc08cde1e2c4cb7c0966a1c905ce8e4fb0debb8628022b44d93d369d1283cdfba03e58ed23f6b15c243b0e3bf7355d69f3be844c95ba9bece2f804a752ef997672cd1d243c8db5abf57b39fb89b094dca96b02a73a6065ac5a59069ec0b73987892c089bd0d9459e5a4541ffd0340c00006881ae78e9d94d7b195312737934ff7fe7561aa74e013da9ac5e413de0436c8ad155a8496205a93ad67c8d3130ac"], 0x70}}, 0x0)
r8 = socket$inet_udplite(0x2, 0x2, 0x88)
syz_open_procfs$pagemap(r0, &(0x7f0000003140))
getsockopt$sock_int(r8, 0x1, 0x2, &(0x7f0000003180), &(0x7f00000031c0)=0xa)
r9 = openat(0xffffffffffffff9c, &(0x7f0000003200)='./trace/events/sched/sched_switch/trigger\x00', 0x2, 0x0)
writev(r9, &(0x7f0000000100)=[{&(0x7f0000003280)="cd", 0x1}], 0x1)
syz_emit_ethernet(0x56, &(0x7f00000032c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60a24b9f00202b00fe8000000000000000000000000000bbfe8000000000000000000000000000aa3a02020100000000ff0100000000000000000000000000010000000000089078a04f61b04969c3ce92e2ae60c7a92eaf6599d6257436964a1d1f0e084582"], 0x0)
bind$inet6(r6, &(0x7f0000003340)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c)
listen(r6, 0x0)

55.292894ms ago: executing program 2 (id=266):
r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000640)={'syz1\x00', {0x9, 0x7, 0x5, 0x5}, 0x3f, [0x9, 0x2, 0x18, 0x2, 0x2, 0x400, 0x80000000, 0x0, 0x5, 0x0, 0x6, 0x1, 0xfffffffb, 0x39, 0x747d5e13, 0x800, 0xfffffb9a, 0xfffffffe, 0x1, 0xfffffffb, 0x2004, 0x3, 0x0, 0xf250, 0x4, 0x4800, 0x4, 0x4, 0xe, 0x4623f, 0x0, 0x10001, 0x1ff, 0x8000, 0x0, 0x3, 0x0, 0x3, 0xa, 0x8da8, 0x2, 0x200, 0xffffffff, 0x5, 0xe, 0x4, 0x2, 0x6f, 0x243, 0x7, 0x1, 0x199d, 0x6, 0x2, 0x9, 0xffffffff, 0x4, 0x6, 0x1000, 0x5, 0x3d, 0x8, 0xa, 0x5], [0x7, 0x1e, 0x3, 0x8000, 0xfffffffd, 0x3, 0x3, 0x25, 0x40, 0xfffffffc, 0x3, 0x7fff, 0x72c, 0x1c32, 0x2, 0x8, 0x10000, 0x3fe, 0x7ffd, 0x3, 0x3, 0x297, 0x5, 0x0, 0xa, 0x4, 0x0, 0x3ff, 0x0, 0xfffffffe, 0x8, 0x1000003, 0xd3e, 0xfffffff9, 0xffffffff, 0xc, 0x1, 0xffffffff, 0x6, 0x2000008, 0x804, 0xfdff, 0x0, 0x96, 0xfffffff9, 0x2, 0x0, 0x2, 0x401, 0xc, 0x2, 0xb, 0x9, 0xe, 0x5, 0x7, 0x9, 0x2, 0x1, 0x1, 0x8, 0x7, 0x1fe, 0x3], [0x401, 0x8000e584, 0xffff, 0xcd3, 0xb, 0x1f, 0x404, 0x4, 0x4008, 0xc, 0x7, 0x9, 0x1e86, 0x5, 0x80000001, 0x8, 0x3f92, 0x6, 0x2, 0x10, 0x1, 0xfffffff9, 0x0, 0x1000, 0x9, 0x5, 0x4, 0x5, 0x200003, 0x100, 0x5, 0x80, 0x9, 0x8001, 0x10000, 0x0, 0x3, 0x400004, 0x3, 0x6d7e, 0x9, 0x8, 0x3, 0xbf23, 0x9, 0x9, 0x956, 0x0, 0x5, 0xe, 0x6, 0x100fffd, 0x93, 0x9, 0x4, 0xea, 0x9, 0x20000005, 0x1, 0x80, 0x0, 0x9, 0x401, 0x5], [0x108f, 0x10003, 0x3, 0x0, 0x88, 0x2, 0x4000000, 0x4, 0x50, 0x2, 0x763, 0xb, 0x406, 0x1, 0x5, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x8000, 0x4, 0xe47, 0x4, 0x3, 0x4, 0x0, 0x2851, 0x3b, 0x20000001, 0x4, 0x5, 0xa80a, 0x65f413f9, 0x4, 0x20008, 0x8a5, 0x8a, 0x46, 0x409, 0x3, 0x4, 0x168, 0x800, 0x4, 0xffffffff, 0x7fff, 0xffff8a33, 0xfffffff8, 0xf, 0x3, 0x200, 0x7, 0xd4, 0xfffffffd, 0xa, 0xe, 0x101, 0xfff, 0xf, 0x136, 0x6]}, 0x45c)
ioctl$UI_DEV_CREATE(r0, 0x5501)
readv(r0, &(0x7f0000000ac0)=[{&(0x7f0000000b00)=""/41, 0x29}], 0x1)
write$input_event(r0, &(0x7f0000000b40)={{0x77359400}, 0x15}, 0xfe4f)

204.31µs ago: executing program 2 (id=267):
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000640)={'syz1\x00', {0x9, 0x7, 0x5, 0x5}, 0x3f, [0x9, 0x2, 0x18, 0x2, 0x2, 0x400, 0x80000000, 0x0, 0x5, 0x0, 0x6, 0x1, 0xfffffffb, 0x39, 0x747d5e13, 0x800, 0xfffffb9a, 0xfffffffe, 0x1, 0xfffffffb, 0x2004, 0x3, 0x0, 0xf250, 0x4, 0x4800, 0x4, 0x4, 0xe, 0x4623f, 0x0, 0x10001, 0x1ff, 0x8000, 0x0, 0x3, 0x0, 0x3, 0xa, 0x8da8, 0x2, 0x200, 0xffffffff, 0x5, 0xe, 0x4, 0x2, 0x6f, 0x243, 0x7, 0x1, 0x199d, 0x6, 0x2, 0x9, 0xffffffff, 0x4, 0x6, 0x1000, 0x5, 0x3d, 0x8, 0xa, 0x5], [0x7, 0x1e, 0x3, 0x8000, 0xfffffffd, 0x3, 0x3, 0x25, 0x40, 0xfffffffc, 0x3, 0x7fff, 0x72c, 0x1c32, 0x2, 0x8, 0x10000, 0x3fe, 0x7ffd, 0x3, 0x3, 0x297, 0x5, 0x0, 0xa, 0x4, 0x0, 0x3ff, 0x0, 0xfffffffe, 0x8, 0x1000003, 0xd3e, 0xfffffff9, 0xffffffff, 0xc, 0x1, 0xffffffff, 0x6, 0x2000008, 0x804, 0xfdff, 0x0, 0x96, 0xfffffff9, 0x2, 0x0, 0x2, 0x401, 0xc, 0x2, 0xb, 0x9, 0xe, 0x5, 0x7, 0x9, 0x2, 0x1, 0x1, 0x8, 0x7, 0x1fe, 0x3], [0x401, 0x8000e584, 0xffff, 0xcd3, 0xb, 0x1f, 0x404, 0x4, 0x4008, 0xc, 0x7, 0x9, 0x1e86, 0x5, 0x80000001, 0x8, 0x3f92, 0x6, 0x2, 0x10, 0x1, 0xfffffff9, 0x0, 0x1000, 0x9, 0x5, 0x4, 0x5, 0x200003, 0x100, 0x5, 0x80, 0x9, 0x8001, 0x10000, 0x0, 0x3, 0x400004, 0x3, 0x6d7e, 0x9, 0x8, 0x3, 0xbf23, 0x9, 0x9, 0x956, 0x0, 0x5, 0xe, 0x6, 0x100fffd, 0x93, 0x9, 0x4, 0xea, 0x9, 0x20000005, 0x1, 0x80, 0x0, 0x9, 0x401, 0x5], [0x108f, 0x10003, 0x3, 0x0, 0x88, 0x2, 0x4000000, 0x4, 0x50, 0x2, 0x763, 0xb, 0x406, 0x1, 0x5, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x8000, 0x4, 0xe47, 0x4, 0x3, 0x4, 0x0, 0x2851, 0x3b, 0x20000001, 0x4, 0x5, 0xa80a, 0x65f413f9, 0x4, 0x20008, 0x8a5, 0x8a, 0x46, 0x409, 0x3, 0x4, 0x168, 0x800, 0x4, 0xffffffff, 0x7fff, 0xffff8a33, 0xfffffff8, 0xf, 0x3, 0x200, 0x7, 0xd4, 0xfffffffd, 0xa, 0xe, 0x101, 0xfff, 0xf, 0x136, 0x6]}, 0x45c)
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
readv(0xffffffffffffffff, &(0x7f0000000ac0)=[{&(0x7f0000000b00)=""/41, 0x29}], 0x1)
write$input_event(0xffffffffffffffff, &(0x7f0000000b40)={{0x77359400}, 0x15}, 0xfe4f)

0s ago: executing program 1 (id=268):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000340)={'wg2\x00', <r3=>0x0})
sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)={0x34, r1, 0x1, 0x70bd2b, 0x25dfdbfd, {0x1c}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000011}, 0x4)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000001800090400005a2df2a600000a0000e4ffffff02028019bb07001e0001000000"], 0x24}}, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0)
io_setup(0x3ff, &(0x7f0000000100)=<r6=>0x0)
io_submit(r6, 0xfe, &(0x7f0000000140)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f00000001c0)='m', 0x1}])
ioctl$LOOP_GET_STATUS64(r5, 0x4c05, &(0x7f0000000200))

kernel console output (not intermixed with test programs):


syzkaller
syzkaller login: [    9.201161][  T109] udevd (109) used greatest stack depth: 22888 bytes left
[   15.551897][   T30] kauditd_printk_skb: 25 callbacks suppressed
[   15.551913][   T30] audit: type=1400 audit(1793668480.608:59): avc:  denied  { transition } for  pid=223 comm="sshd-session" path="/bin/sh" dev="sda1" ino=90 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[   15.563199][   T30] audit: type=1400 audit(1793668480.608:60): avc:  denied  { noatsecure } for  pid=223 comm="sshd-session" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[   15.572249][   T30] audit: type=1400 audit(1793668480.618:61): avc:  denied  { write } for  pid=223 comm="sh" path="pipe:[447]" dev="pipefs" ino=447 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1
[   15.596526][   T30] audit: type=1400 audit(1793668480.618:62): avc:  denied  { rlimitinh } for  pid=223 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[   15.616760][   T30] audit: type=1400 audit(1793668480.618:63): avc:  denied  { siginh } for  pid=223 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
Warning: Permanently added '10.128.1.59' (ED25519) to the list of known hosts.
[   23.403517][   T30] audit: type=1400 audit(1793668488.458:64): avc:  denied  { mounton } for  pid=277 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[   23.407090][  T277] cgroup: Unknown subsys name 'net'
[   23.426197][   T30] audit: type=1400 audit(1793668488.458:65): avc:  denied  { mount } for  pid=277 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   23.453639][   T30] audit: type=1400 audit(1793668488.488:66): avc:  denied  { unmount } for  pid=277 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   23.473692][  T277] cgroup: Unknown subsys name 'devices'
[   23.599710][  T277] cgroup: Unknown subsys name 'hugetlb'
[   23.605347][  T277] cgroup: Unknown subsys name 'rlimit'
[   23.745470][   T30] audit: type=1400 audit(1793668488.798:67): avc:  denied  { setattr } for  pid=277 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   23.768799][   T30] audit: type=1400 audit(1793668488.798:68): avc:  denied  { mounton } for  pid=277 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1
[   23.794003][   T30] audit: type=1400 audit(1793668488.798:69): avc:  denied  { mount } for  pid=277 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1
[   23.822557][  T279] SELinux:  Context root:object_r:swapfile_t is not valid (left unmapped).
Setting up swapspace version 1, size = 127995904 bytes
[   23.831745][   T30] audit: type=1400 audit(1793668488.888:70): avc:  denied  { relabelto } for  pid=279 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   23.858007][   T30] audit: type=1400 audit(1793668488.888:71): avc:  denied  { write } for  pid=279 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   23.891321][   T30] audit: type=1400 audit(1793668488.948:72): avc:  denied  { read } for  pid=277 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   23.916949][   T30] audit: type=1400 audit(1793668488.948:73): avc:  denied  { open } for  pid=277 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   23.917017][  T277] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   24.505965][  T285] bridge0: port 1(bridge_slave_0) entered blocking state
[   24.513086][  T285] bridge0: port 1(bridge_slave_0) entered disabled state
[   24.520684][  T285] device bridge_slave_0 entered promiscuous mode
[   24.540492][  T285] bridge0: port 2(bridge_slave_1) entered blocking state
[   24.547674][  T285] bridge0: port 2(bridge_slave_1) entered disabled state
[   24.555112][  T285] device bridge_slave_1 entered promiscuous mode
[   24.561698][  T286] bridge0: port 1(bridge_slave_0) entered blocking state
[   24.568852][  T286] bridge0: port 1(bridge_slave_0) entered disabled state
[   24.576387][  T286] device bridge_slave_0 entered promiscuous mode
[   24.584671][  T286] bridge0: port 2(bridge_slave_1) entered blocking state
[   24.591769][  T286] bridge0: port 2(bridge_slave_1) entered disabled state
[   24.599477][  T286] device bridge_slave_1 entered promiscuous mode
[   24.636329][  T287] bridge0: port 1(bridge_slave_0) entered blocking state
[   24.643799][  T287] bridge0: port 1(bridge_slave_0) entered disabled state
[   24.651488][  T287] device bridge_slave_0 entered promiscuous mode
[   24.659014][  T287] bridge0: port 2(bridge_slave_1) entered blocking state
[   24.666074][  T287] bridge0: port 2(bridge_slave_1) entered disabled state
[   24.673646][  T287] device bridge_slave_1 entered promiscuous mode
[   24.758977][  T289] bridge0: port 1(bridge_slave_0) entered blocking state
[   24.766052][  T289] bridge0: port 1(bridge_slave_0) entered disabled state
[   24.773647][  T289] device bridge_slave_0 entered promiscuous mode
[   24.780923][  T289] bridge0: port 2(bridge_slave_1) entered blocking state
[   24.788006][  T289] bridge0: port 2(bridge_slave_1) entered disabled state
[   24.795452][  T289] device bridge_slave_1 entered promiscuous mode
[   24.869196][  T288] bridge0: port 1(bridge_slave_0) entered blocking state
[   24.876362][  T288] bridge0: port 1(bridge_slave_0) entered disabled state
[   24.883853][  T288] device bridge_slave_0 entered promiscuous mode
[   24.890944][  T288] bridge0: port 2(bridge_slave_1) entered blocking state
[   24.898071][  T288] bridge0: port 2(bridge_slave_1) entered disabled state
[   24.905418][  T288] device bridge_slave_1 entered promiscuous mode
[   24.955824][  T286] bridge0: port 2(bridge_slave_1) entered blocking state
[   24.962919][  T286] bridge0: port 2(bridge_slave_1) entered forwarding state
[   24.970357][  T286] bridge0: port 1(bridge_slave_0) entered blocking state
[   24.977431][  T286] bridge0: port 1(bridge_slave_0) entered forwarding state
[   25.015799][  T287] bridge0: port 2(bridge_slave_1) entered blocking state
[   25.022906][  T287] bridge0: port 2(bridge_slave_1) entered forwarding state
[   25.030214][  T287] bridge0: port 1(bridge_slave_0) entered blocking state
[   25.037366][  T287] bridge0: port 1(bridge_slave_0) entered forwarding state
[   25.049269][  T289] bridge0: port 2(bridge_slave_1) entered blocking state
[   25.056341][  T289] bridge0: port 2(bridge_slave_1) entered forwarding state
[   25.063669][  T289] bridge0: port 1(bridge_slave_0) entered blocking state
[   25.070724][  T289] bridge0: port 1(bridge_slave_0) entered forwarding state
[   25.079134][  T285] bridge0: port 2(bridge_slave_1) entered blocking state
[   25.086221][  T285] bridge0: port 2(bridge_slave_1) entered forwarding state
[   25.093565][  T285] bridge0: port 1(bridge_slave_0) entered blocking state
[   25.100628][  T285] bridge0: port 1(bridge_slave_0) entered forwarding state
[   25.146524][   T45] bridge0: port 1(bridge_slave_0) entered disabled state
[   25.154081][   T45] bridge0: port 2(bridge_slave_1) entered disabled state
[   25.161578][   T45] bridge0: port 1(bridge_slave_0) entered disabled state
[   25.168877][   T45] bridge0: port 2(bridge_slave_1) entered disabled state
[   25.176174][   T45] bridge0: port 1(bridge_slave_0) entered disabled state
[   25.183559][   T45] bridge0: port 2(bridge_slave_1) entered disabled state
[   25.191079][   T45] bridge0: port 1(bridge_slave_0) entered disabled state
[   25.198413][   T45] bridge0: port 2(bridge_slave_1) entered disabled state
[   25.207166][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   25.214796][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   25.248450][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   25.256067][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   25.263996][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   25.272486][   T45] bridge0: port 1(bridge_slave_0) entered blocking state
[   25.279829][   T45] bridge0: port 1(bridge_slave_0) entered forwarding state
[   25.287959][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   25.296280][   T45] bridge0: port 2(bridge_slave_1) entered blocking state
[   25.304174][   T45] bridge0: port 2(bridge_slave_1) entered forwarding state
[   25.311772][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   25.320726][   T45] bridge0: port 1(bridge_slave_0) entered blocking state
[   25.330311][   T45] bridge0: port 1(bridge_slave_0) entered forwarding state
[   25.341962][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   25.351698][   T45] bridge0: port 2(bridge_slave_1) entered blocking state
[   25.359604][   T45] bridge0: port 2(bridge_slave_1) entered forwarding state
[   25.383159][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   25.391332][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   25.399490][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   25.408604][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   25.434657][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   25.444465][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   25.452082][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   25.461621][   T45] bridge0: port 1(bridge_slave_0) entered blocking state
[   25.468709][   T45] bridge0: port 1(bridge_slave_0) entered forwarding state
[   25.476119][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   25.484368][   T45] bridge0: port 2(bridge_slave_1) entered blocking state
[   25.491417][   T45] bridge0: port 2(bridge_slave_1) entered forwarding state
[   25.498918][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   25.506885][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   25.515023][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   25.532511][  T286] device veth0_vlan entered promiscuous mode
[   25.541851][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   25.550562][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   25.559421][   T45] bridge0: port 1(bridge_slave_0) entered blocking state
[   25.566460][   T45] bridge0: port 1(bridge_slave_0) entered forwarding state
[   25.574013][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   25.582798][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   25.591112][   T45] bridge0: port 2(bridge_slave_1) entered blocking state
[   25.598620][   T45] bridge0: port 2(bridge_slave_1) entered forwarding state
[   25.605991][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   25.614390][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   25.622662][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   25.630216][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   25.645302][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   25.653475][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   25.661652][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   25.670492][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   25.685154][  T285] device veth0_vlan entered promiscuous mode
[   25.692034][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   25.700589][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   25.709344][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   25.717364][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   25.726170][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   25.734809][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   25.749441][  T286] device veth1_macvtap entered promiscuous mode
[   25.757540][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   25.769624][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   25.786766][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   25.796186][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   25.804626][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   25.812512][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   25.820973][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   25.829544][   T45] bridge0: port 1(bridge_slave_0) entered blocking state
[   25.836581][   T45] bridge0: port 1(bridge_slave_0) entered forwarding state
[   25.844173][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   25.852764][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   25.861187][   T45] bridge0: port 2(bridge_slave_1) entered blocking state
[   25.868423][   T45] bridge0: port 2(bridge_slave_1) entered forwarding state
[   25.877561][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   25.895427][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   25.903988][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   25.919538][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   25.927995][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   25.936149][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   25.944678][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   25.952807][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   25.961238][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   25.969785][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   25.978100][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   25.990907][  T289] device veth0_vlan entered promiscuous mode
[   25.999229][  T285] device veth1_macvtap entered promiscuous mode
[   26.008092][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   26.015810][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   26.024385][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   26.032936][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   26.041181][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   26.049780][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   26.058056][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   26.066164][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   26.073720][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   26.091133][  T287] device veth0_vlan entered promiscuous mode
[   26.101703][  T286] request_module fs-gadgetfs succeeded, but still no fs?
[   26.109052][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   26.117073][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   26.125846][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   26.134474][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   26.143190][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   26.151645][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   26.160225][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   26.167882][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   26.186480][  T289] device veth1_macvtap entered promiscuous mode
[   26.197566][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   26.206381][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   26.214837][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   26.222713][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   26.231208][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   26.240857][  T287] device veth1_macvtap entered promiscuous mode
[   26.251044][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   26.258890][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   26.267366][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   26.285485][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   26.294213][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   26.307199][  T288] device veth0_vlan entered promiscuous mode
[   26.326921][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   26.336902][  T312] netlink: 84 bytes leftover after parsing attributes in process `syz.3.4'.
[   26.347351][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   26.356441][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   26.365255][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   26.373492][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   26.382144][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   26.390854][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   26.399723][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   26.438040][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   26.449053][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   26.457275][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   26.468385][  T288] device veth1_macvtap entered promiscuous mode
[   26.476401][  T317] process 'syz.3.6' launched './file0' with NULL argv: empty string added
[   26.487878][   T61] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   26.570027][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   26.579406][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   26.588355][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   26.596690][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   26.771975][  T325] netlink: 'syz.1.2': attribute type 11 has an invalid length.
[   27.087109][  T328] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   27.627816][  T321] loop2: detected capacity change from 0 to 40427
[   27.679192][  T321] F2FS-fs (loop2): invalid crc value
[   27.715648][  T321] F2FS-fs (loop2): Found nat_bits in checkpoint
[   27.744629][  T341] loop1: detected capacity change from 0 to 2048
[   27.796905][  T321] F2FS-fs (loop2): Start checkpoint disabled!
[   27.807814][  T321] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6
[   27.867753][   T61] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0
[   28.479306][  T350] attempt to access beyond end of device
[   28.479306][  T350] loop2: rw=2049, want=81920, limit=40427
[   28.501507][  T350] attempt to access beyond end of device
[   28.501507][  T350] loop2: rw=2049, want=53248, limit=40427
[   28.525495][  T350] attempt to access beyond end of device
[   28.525495][  T350] loop2: rw=2049, want=77824, limit=40427
[   28.549065][  T350] attempt to access beyond end of device
[   28.549065][  T350] loop2: rw=2049, want=86016, limit=40427
[   28.562046][  T350] attempt to access beyond end of device
[   28.562046][  T350] loop2: rw=2049, want=86024, limit=40427
[   28.573385][  T350] attempt to access beyond end of device
[   28.573385][  T350] loop2: rw=2049, want=86032, limit=40427
[   28.584828][  T350] attempt to access beyond end of device
[   28.584828][  T350] loop2: rw=2049, want=86040, limit=40427
[   28.596166][  T350] attempt to access beyond end of device
[   28.596166][  T350] loop2: rw=2049, want=86048, limit=40427
[   28.607525][  T350] attempt to access beyond end of device
[   28.607525][  T350] loop2: rw=2049, want=86056, limit=40427
[   28.618915][  T350] attempt to access beyond end of device
[   28.618915][  T350] loop2: rw=2049, want=86064, limit=40427
[   28.770071][  T352] loop3: detected capacity change from 0 to 512
[   29.254811][  T348] sched: RT throttling activated
[   29.262638][   T30] kauditd_printk_skb: 55 callbacks suppressed
[   29.262653][   T30] audit: type=1400 audit(1793668492.998:129): avc:  denied  { ioctl } for  pid=319 comm="syz.2.3" path="socket:[16517]" dev="sockfs" ino=16517 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   29.296265][   T61] usb 1-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   29.760266][  T355] netlink: 'syz.4.7': attribute type 11 has an invalid length.
[   29.778260][  T352] =======================================================
[   29.778260][  T352] WARNING: The mand mount option has been deprecated and
[   29.778260][  T352]          and is ignored by this kernel. Remove the mand
[   29.778260][  T352]          option from the mount to silence this warning.
[   29.778260][  T352] =======================================================
[   29.848099][   T61] usb 1-1: config 0 interface 0 has no altsetting 0
[   29.961482][   T61] usb 1-1: New USB device found, idVendor=1b1c, idProduct=0a55, bcdDevice= 0.00
[   29.983757][   T61] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   29.995345][   T61] usb 1-1: config 0 descriptor??
[   30.000416][   T30] audit: type=1400 audit(1793668493.008:130): avc:  denied  { write } for  pid=319 comm="syz.2.3" name="/" dev="loop2" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   30.038581][  T351] FAT-fs (loop3): error, invalid access to FAT (entry 0x0fffff00)
[   30.046575][  T351] FAT-fs (loop3): Filesystem has been set read-only
[   30.187718][   T30] audit: type=1400 audit(1793668493.008:131): avc:  denied  { add_name } for  pid=319 comm="syz.2.3" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   30.357669][   T30] audit: type=1400 audit(1793668493.008:132): avc:  denied  { create } for  pid=319 comm="syz.2.3" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   30.532039][  T369] loop0: detected capacity change from 0 to 512
[   31.032930][  T369] FAT-fs (loop0): error, invalid access to FAT (entry 0x0fffff00)
[   31.040873][  T369] FAT-fs (loop0): Filesystem has been set read-only
[   31.122111][  T373] loop4: detected capacity change from 0 to 512
[   31.277750][   T61] usb 1-1: can't set config #0, error -71
[   31.284204][   T61] usb 1-1: USB disconnect, device number 2
[   31.291467][   T30] audit: type=1400 audit(1793668493.008:133): avc:  denied  { read write open } for  pid=319 comm="syz.2.3" path="/0/file0/file1" dev="loop2" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   31.449743][   T30] audit: type=1400 audit(1793668493.818:134): avc:  denied  { write } for  pid=347 comm="syz.3.13" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1
[   31.483394][   T30] audit: type=1400 audit(1793668493.818:135): avc:  denied  { mmap_zero } for  pid=347 comm="syz.3.13" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1
[   31.576798][  T373] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a826c028, mo2=0002]
[   31.590164][  T373] System zones: 1-12
[   31.604278][   T30] audit: type=1400 audit(1793668494.778:136): avc:  denied  { create } for  pid=334 comm="syz.4.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   31.637092][   T30] audit: type=1400 audit(1793668494.788:137): avc:  denied  { prog_load } for  pid=334 comm="syz.4.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[   31.664351][  T373] EXT4-fs (loop4): 1 orphan inode deleted
[   31.681105][  T373] EXT4-fs (loop4): mounted filesystem without journal. Opts: block_validity,debug,debug_want_extra_isize=0x0000000000000006,errors=remount-ro,prjquota,. Quota mode: writeback.
[   31.714173][   T30] audit: type=1400 audit(1793668494.788:138): avc:  denied  { bpf } for  pid=334 comm="syz.4.7" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[   31.817824][  T373] netlink: 24 bytes leftover after parsing attributes in process `syz.4.17'.
[   31.948857][  T385] loop1: detected capacity change from 0 to 512
[   32.393344][  T386] netlink: 'syz.0.18': attribute type 11 has an invalid length.
[   32.622441][  T385] FAT-fs (loop1): error, invalid access to FAT (entry 0x0fffff00)
[   32.630548][  T385] FAT-fs (loop1): Filesystem has been set read-only
[   32.759437][  T373] EXT4-fs error (device loop4): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz.4.17: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0
[   32.808324][  T368] loop3: detected capacity change from 0 to 40427
[   32.876664][  T373] EXT4-fs (loop4): Remounting filesystem read-only
[   32.992316][  T368] F2FS-fs (loop3): invalid crc value
[   33.339490][  T398] loop1: detected capacity change from 0 to 512
[   33.443398][  T397] netlink: 'syz.2.15': attribute type 11 has an invalid length.
[   34.260185][  T368] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109)
[   34.291245][  T368] F2FS-fs (loop3): Start checkpoint disabled!
[   34.298409][  T368] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6
[   34.497785][   T30] kauditd_printk_skb: 67 callbacks suppressed
[   34.497808][   T30] audit: type=1400 audit(1793668499.548:206): avc:  denied  { mount } for  pid=365 comm="syz.3.16" name="/" dev="loop3" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[   34.576472][  T396] FAT-fs (loop1): error, invalid access to FAT (entry 0x0fffff00)
[   34.584398][  T396] FAT-fs (loop1): Filesystem has been set read-only
[   34.601895][   T30] audit: type=1400 audit(1793668499.578:207): avc:  denied  { mounton } for  pid=391 comm="syz.1.20" path="/5/file1" dev="tmpfs" ino=44 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[   34.624195][   T30] audit: type=1400 audit(1793668499.598:208): avc:  denied  { mount } for  pid=391 comm="syz.1.20" name="/" dev="loop1" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1
[   34.665758][   T30] audit: type=1400 audit(1793668499.648:209): avc:  denied  { read } for  pid=391 comm="syz.1.20" dev="nsfs" ino=4026532458 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[   34.805525][   T30] audit: type=1400 audit(1793668499.648:210): avc:  denied  { open } for  pid=391 comm="syz.1.20" path="net:[4026532458]" dev="nsfs" ino=4026532458 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[   35.861727][  T403] netlink: 'syz.4.21': attribute type 11 has an invalid length.
[   36.093166][   T30] audit: type=1400 audit(1793668499.648:211): avc:  denied  { create } for  pid=391 comm="syz.1.20" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[   36.168608][   T30] audit: type=1400 audit(1793668499.658:212): avc:  denied  { bind } for  pid=391 comm="syz.1.20" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[   36.189583][   T30] audit: type=1400 audit(1793668499.708:213): avc:  denied  { unmount } for  pid=285 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[   36.209606][   T30] audit: type=1400 audit(1793668499.838:214): avc:  denied  { unmount } for  pid=287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1
[   36.236637][   T30] audit: type=1400 audit(1793668501.118:215): avc:  denied  { read } for  pid=401 comm="syz.1.23" name="ashmem" dev="devtmpfs" ino=265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   36.329900][  T408] ip_tables: iptables: counters copy to user failed while replacing table
[   36.351769][  T408] netlink: 'syz.2.24': attribute type 11 has an invalid length.
[   36.912887][  T426] loop1: detected capacity change from 0 to 131072
[   36.927310][  T428] loop3: detected capacity change from 0 to 512
[   37.966481][  T429] netlink: 'syz.4.27': attribute type 11 has an invalid length.
[   38.012785][  T426] F2FS-fs (loop1): Wrong secs_per_zone / total_sections (512, 24)
[   38.020990][  T426] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock
[   38.029306][  T426] F2FS-fs (loop1): Test dummy encryption mode enabled
[   38.039134][  T426] F2FS-fs (loop1): invalid crc value
[   38.240248][  T427] FAT-fs (loop3): error, invalid access to FAT (entry 0x0fffff00)
[   38.248158][  T427] FAT-fs (loop3): Filesystem has been set read-only
[   38.275166][  T434] netlink: 320 bytes leftover after parsing attributes in process `syz.2.30'.
[   38.302260][  T426] F2FS-fs (loop1): Found nat_bits in checkpoint
[   38.556567][  T426] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=80000000, run fsck to fix.
[   38.731779][  T439] loop2: detected capacity change from 0 to 4096
[   38.788490][  T439] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,,errors=continue. Quota mode: writeback.
[   38.813949][  T426] F2FS-fs (loop1): Cannot turn on quotas: -2 on 0
[   38.820708][  T426] F2FS-fs (loop1): Start checkpoint disabled!
[   38.833637][  T426] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0
[   38.840758][  T426] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6
[   39.019766][  T426] fscrypt: AES-256-XTS using implementation "xts-aes-aesni"
[   39.067354][  T375] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=80000000, run fsck to fix.
[   39.199435][  T462] loop3: detected capacity change from 0 to 512
[   39.358286][  T462] FAT-fs (loop3): error, invalid access to FAT (entry 0x0fffff00)
[   39.366203][  T462] FAT-fs (loop3): Filesystem has been set read-only
[   40.231590][  T461] loop0: detected capacity change from 0 to 40427
[   40.235227][   T61] usb 5-1: new low-speed USB device number 2 using dummy_hcd
[   40.358010][  T461] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[   40.365792][  T461] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[   40.400612][   T30] kauditd_printk_skb: 89 callbacks suppressed
[   40.400628][   T30] audit: type=1400 audit(1793668505.458:305): avc:  denied  { mount } for  pid=465 comm="syz.3.39" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1
[   40.421067][  T461] F2FS-fs (loop0): Unrecognized mount option "MÌØÏ›©E§È¤Bïý6᱇5½Ú#þ(tÇpØ•r ’�¼ëN`ï’åg¨"eÔž>$÷ô;<DÞïu¹q%xÇ¿«¿" or missing value
[   40.469991][  T471] netlink: 'syz.2.38': attribute type 11 has an invalid length.
[   40.768163][   T30] audit: type=1400 audit(1793668505.818:306): avc:  denied  { unmount } for  pid=285 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1
[   41.171084][  T477] loop3: detected capacity change from 0 to 512
[   42.269398][  T476] FAT-fs (loop3): error, invalid access to FAT (entry 0x0fffff00)
[   42.277296][  T476] FAT-fs (loop3): Filesystem has been set read-only
[   42.348261][   T61] usb 5-1: device descriptor read/all, error -71
[   42.436609][  T473] loop1: detected capacity change from 0 to 40427
[   42.519474][   T30] audit: type=1400 audit(1793668507.558:307): avc:  denied  { create } for  pid=484 comm="syz.0.44" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   42.630112][  T487] loop2: detected capacity change from 0 to 512
[   43.906587][  T479] ip_tables: iptables: counters copy to user failed while replacing table
[   43.928080][  T479] netlink: 'syz.4.41': attribute type 11 has an invalid length.
[   43.940077][   T30] audit: type=1400 audit(1793668508.978:308): avc:  denied  { create } for  pid=478 comm="syz.4.41" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   44.007202][  T483] FAT-fs (loop2): error, invalid access to FAT (entry 0x0fffff00)
[   44.015204][  T483] FAT-fs (loop2): Filesystem has been set read-only
[   44.030673][   T30] audit: type=1400 audit(1793668508.978:309): avc:  denied  { prog_load } for  pid=478 comm="syz.4.41" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[   44.092681][  T473] F2FS-fs (loop1): invalid crc value
[   44.211198][   T30] audit: type=1400 audit(1793668508.978:310): avc:  denied  { bpf } for  pid=478 comm="syz.4.41" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[   44.239729][  T473] F2FS-fs (loop1): Failed to initialize F2FS segment manager (-4)
[   44.253805][   T30] audit: type=1400 audit(1793668508.978:311): avc:  denied  { perfmon } for  pid=478 comm="syz.4.41" capability=38  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[   44.307346][   T30] audit: type=1400 audit(1793668508.978:312): avc:  denied  { write } for  pid=478 comm="syz.4.41" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   44.332667][   T30] audit: type=1400 audit(1793668508.978:313): avc:  denied  { read } for  pid=478 comm="syz.4.41" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   44.386752][   T30] audit: type=1400 audit(1793668508.978:314): avc:  denied  { ioctl } for  pid=478 comm="syz.4.41" path="socket:[17096]" dev="sockfs" ino=17096 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   44.499684][  T485] loop0: detected capacity change from 0 to 40427
[   44.702670][  T500] loop4: detected capacity change from 0 to 512
[   45.609895][  T501] ip_tables: iptables: counters copy to user failed while replacing table
[   45.666844][  T501] netlink: 'syz.2.45': attribute type 11 has an invalid length.
[   45.678423][   T30] kauditd_printk_skb: 20 callbacks suppressed
[   45.678563][   T30] audit: type=1400 audit(1793668509.678:335): avc:  denied  { write } for  pid=494 comm="syz.4.46" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1
[   45.760729][  T498] FAT-fs (loop4): error, invalid access to FAT (entry 0x0fffff00)
[   45.768691][  T498] FAT-fs (loop4): Filesystem has been set read-only
[   45.981311][  T485] F2FS-fs (loop0): invalid crc value
[   45.999959][  T485] F2FS-fs (loop0): Failed to initialize F2FS segment manager (-4)
[   46.193506][   T30] audit: type=1400 audit(1793668509.698:336): avc:  denied  { mmap_zero } for  pid=494 comm="syz.4.46" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1
[   46.297634][    T6] usb 2-1: new low-speed USB device number 2 using dummy_hcd
[   46.365421][  T510] loop4: detected capacity change from 0 to 512
[   46.883472][  T510] FAT-fs (loop4): error, invalid access to FAT (entry 0x0fffff00)
[   46.891807][  T510] FAT-fs (loop4): Filesystem has been set read-only
[   47.284555][  T512] loop2: detected capacity change from 0 to 1024
[   47.333851][   T30] audit: type=1400 audit(1793668512.388:337): avc:  denied  { create } for  pid=513 comm="syz.0.50" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   47.355295][  T512] EXT4-fs (loop2): Ignoring removed nobh option
[   47.375760][  T512] EXT4-fs (loop2): Ignoring removed bh option
[   47.407999][   T30] audit: type=1400 audit(1793668512.418:338): avc:  denied  { map_create } for  pid=513 comm="syz.0.50" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[   47.447245][  T512] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a802c028, mo2=0002]
[   47.465997][  T512] System zones: 0-1, 3-12
[   47.470615][  T290] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   47.505940][  T512] EXT4-fs (loop2): mounted filesystem without journal. Opts: nobh,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,sysvgroups,errors=remount-ro,stripe=0x0000000000000011,bh,debug,. Quota mode: none.
[   47.540711][   T30] audit: type=1400 audit(1793668512.418:339): avc:  denied  { map_read map_write } for  pid=513 comm="syz.0.50" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[   47.560746][   T30] audit: type=1400 audit(1793668512.428:340): avc:  denied  { prog_run } for  pid=513 comm="syz.0.50" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[   47.580372][   T30] audit: type=1400 audit(1793668512.428:341): avc:  denied  { read append } for  pid=513 comm="syz.0.50" name="kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[   47.606041][  T512] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2812: Unable to expand inode 12. Delete some EAs or run e2fsck.
[   47.633856][   T30] audit: type=1400 audit(1793668512.428:342): avc:  denied  { open } for  pid=513 comm="syz.0.50" path="/dev/kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[   47.697780][   T30] audit: type=1400 audit(1793668512.428:343): avc:  denied  { ioctl } for  pid=513 comm="syz.0.50" path="/dev/kvm" dev="devtmpfs" ino=82 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[   47.722671][   T30] audit: type=1400 audit(1793668512.458:344): avc:  denied  { write } for  pid=513 comm="syz.0.50" name="kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[   47.918898][  T536] loop0: detected capacity change from 0 to 512
[   47.972160][  T538] netlink: 320 bytes leftover after parsing attributes in process `syz.2.55'.
[   47.982160][  T290] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0
[   48.079564][  T536] FAT-fs (loop0): error, invalid access to FAT (entry 0x0fffff00)
[   48.087483][  T536] FAT-fs (loop0): Filesystem has been set read-only
[   48.912277][  T290] usb 4-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   48.925593][  T290] usb 4-1: config 0 interface 0 has no altsetting 0
[   48.932423][  T290] usb 4-1: New USB device found, idVendor=1b1c, idProduct=0a55, bcdDevice= 0.00
[   48.955954][  T290] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   48.985653][  T290] usb 4-1: config 0 descriptor??
[   49.046500][  T520] loop1: detected capacity change from 0 to 40427
[   49.061514][  T547] loop2: detected capacity change from 0 to 1024
[   49.125524][  T520] F2FS-fs (loop1): invalid crc value
[   49.181214][  T555] loop0: detected capacity change from 0 to 1024
[   49.186009][  T290] usbhid 4-1:0.0: can't add hid device: -71
[   49.194126][  T290] usbhid: probe of 4-1:0.0 failed with error -71
[   49.208854][  T520] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109)
[   49.223694][  T290] usb 4-1: USB disconnect, device number 2
[   49.307761][  T520] F2FS-fs (loop1): Start checkpoint disabled!
[   49.347915][  T520] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6
[   49.507712][  T575] loop0: detected capacity change from 0 to 8192
[   49.546494][  T581] device vti0 entered promiscuous mode
[   49.589161][  T581] syz.1.66 (581) used greatest stack depth: 22080 bytes left
[   49.637628][  T290] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[   49.866345][  T584] loop1: detected capacity change from 0 to 32768
[   49.934411][  T584]  loop1: p1 p3 < >
[   50.007718][  T290] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0
[   50.048405][  T290] usb 4-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   50.082526][  T290] usb 4-1: config 0 interface 0 has no altsetting 0
[   50.102017][  T308] udevd[308]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory
[   50.102017][  T358] udevd[358]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory
[   50.130005][  T290] usb 4-1: New USB device found, idVendor=1b1c, idProduct=0a55, bcdDevice= 0.00
[   50.157704][  T290] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   50.181237][  T290] usb 4-1: config 0 descriptor??
[   50.545799][  T596] loop2: detected capacity change from 0 to 512
[   50.635502][  T597] loop0: detected capacity change from 0 to 512
[   50.729808][  T290] hid (null): invalid report_count 40727
[   50.735951][  T290] hid (null): report_id 6385 is invalid
[   50.840590][  T597] FAT-fs (loop0): error, invalid access to FAT (entry 0x0fffff00)
[   50.848543][  T597] FAT-fs (loop0): Filesystem has been set read-only
[   50.970504][  T290] hid-generic 0003:1B1C:0A55.0001: unknown main item tag 0x6
[   51.010075][  T596] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm syz.2.69: bg 0: block 5: invalid block bitmap
[   51.106522][  T290] hid-generic 0003:1B1C:0A55.0001: invalid report_count 40727
[   51.144782][  T596] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6191: Corrupt filesystem
[   51.145063][  T600] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[   51.172660][  T596] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.69: invalid indirect mapped block 3 (level 2)
[   51.226804][  T290] hid-generic 0003:1B1C:0A55.0001: item 0 2 1 9 parsing failed
[   51.351527][  T290] hid-generic: probe of 0003:1B1C:0A55.0001 failed with error -22
[   51.362993][  T596] EXT4-fs (loop2): 1 orphan inode deleted
[   51.377669][  T596] EXT4-fs (loop2): 1 truncate cleaned up
[   51.398423][  T596] EXT4-fs (loop2): mounted filesystem without journal. Opts: nodiscard,,errors=continue. Quota mode: writeback.
[   51.424028][  T562] xt_hashlimit: size too large, truncated to 1048576
[   51.462071][   T30] kauditd_printk_skb: 41 callbacks suppressed
[   51.462085][   T30] audit: type=1400 audit(1793668516.518:386): avc:  denied  { create } for  pid=595 comm="syz.2.69" name="file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   51.735294][   T30] audit: type=1400 audit(1793668516.788:387): avc:  denied  { create } for  pid=595 comm="syz.2.69" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1
[   51.766621][   T30] audit: type=1400 audit(1793668516.818:388): avc:  denied  { read write } for  pid=605 comm="syz.1.73" name="fuse" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1
[   51.819018][  T614] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability
[   51.864289][  T606] loop0: detected capacity change from 0 to 256
[   51.927663][   T30] audit: type=1400 audit(1793668516.858:389): avc:  denied  { open } for  pid=605 comm="syz.1.73" path="/dev/fuse" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1
[   51.974537][   T30] audit: type=1400 audit(1793668517.008:390): avc:  denied  { create } for  pid=605 comm="syz.1.73" dev="anon_inodefs" ino=17703 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[   52.093185][   T30] audit: type=1400 audit(1793668517.148:391): avc:  denied  { write } for  pid=620 comm="syz.1.75" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   52.124862][   T61] usb 4-1: USB disconnect, device number 3
[   52.138028][   T30] audit: type=1400 audit(1793668517.148:392): avc:  denied  { create } for  pid=620 comm="syz.1.75" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[   52.159425][   T30] audit: type=1400 audit(1793668517.148:393): avc:  denied  { ioctl } for  pid=620 comm="syz.1.75" path="socket:[17770]" dev="sockfs" ino=17770 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[   52.228806][   T30] audit: type=1400 audit(1793668517.288:394): avc:  denied  { create } for  pid=626 comm="syz.1.78" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   52.264178][  T625] loop0: detected capacity change from 0 to 1024
[   52.277887][   T30] audit: type=1400 audit(1793668517.288:395): avc:  denied  { setopt } for  pid=626 comm="syz.1.78" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   52.437203][  T636] loop0: detected capacity change from 0 to 512
[   52.498667][  T636] EXT4-fs error (device loop0): ext4_validate_block_bitmap:429: comm syz.0.79: bg 0: block 5: invalid block bitmap
[   52.533220][  T636] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6191: Corrupt filesystem
[   52.542247][   T26] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[   52.560205][  T636] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.79: invalid indirect mapped block 3 (level 2)
[   52.607270][  T636] EXT4-fs (loop0): 1 orphan inode deleted
[   52.627203][  T636] EXT4-fs (loop0): 1 truncate cleaned up
[   52.634292][  T636] EXT4-fs (loop0): mounted filesystem without journal. Opts: nodiscard,,errors=continue. Quota mode: writeback.
[   52.680252][  T639] binder: 638:639 ioctl c018620b 200000001b80 returned -14
[   52.847631][   T26] usb 2-1: device descriptor read/64, error -71
[   53.008895][   T39] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[   53.710111][   T26] usb 2-1: device descriptor read/64, error -71
[   53.716630][   T39] usb 4-1: device descriptor read/64, error -71
[   53.977625][   T26] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[   53.997910][  T643] netlink: 16 bytes leftover after parsing attributes in process `syz.2.81'.
[   54.249687][  T650] loop0: detected capacity change from 0 to 512
[   54.257202][   T39] usb 4-1: device descriptor read/64, error -71
[   55.267960][  T647] FAT-fs (loop0): error, invalid access to FAT (entry 0x0fffff00)
[   55.276892][  T647] FAT-fs (loop0): Filesystem has been set read-only
[   55.375069][   T26] usb 2-1: device descriptor read/64, error -71
[   55.382733][  T652] loop2: detected capacity change from 0 to 8192
[   55.447810][   T39] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[   55.609501][  T657] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   55.709595][  T671] loop3: detected capacity change from 0 to 512
[   55.733052][  T672] loop0: detected capacity change from 0 to 16
[   55.768948][  T671] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm syz.3.89: bg 0: block 5: invalid block bitmap
[   55.784340][  T671] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6191: Corrupt filesystem
[   55.793502][  T671] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.89: invalid indirect mapped block 3 (level 2)
[   55.794868][  T672] erofs: (device loop0): mounted with root inode @ nid 36.
[   55.809005][  T671] EXT4-fs (loop3): 1 orphan inode deleted
[   55.823112][  T671] EXT4-fs (loop3): 1 truncate cleaned up
[   55.829977][  T671] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodiscard,,errors=continue. Quota mode: writeback.
[   55.844278][  T672] netlink: 37 bytes leftover after parsing attributes in process `syz.0.88'.
[   55.997624][   T26] usb 2-1: device descriptor read/64, error -71
[   56.117895][   T26] usb usb2-port1: attempt power cycle
[   56.963563][   T26] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[   57.025457][  T681] loop0: detected capacity change from 0 to 512
[   57.087743][   T26] usb 2-1: Using ep0 maxpacket: 16
[   57.118974][  T681] EXT4-fs error (device loop0): ext4_validate_block_bitmap:429: comm syz.0.91: bg 0: block 5: invalid block bitmap
[   57.162969][  T681] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6191: Corrupt filesystem
[   57.176770][  T681] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.91: invalid indirect mapped block 3 (level 2)
[   57.191711][  T681] EXT4-fs (loop0): 1 orphan inode deleted
[   57.198813][  T681] EXT4-fs (loop0): 1 truncate cleaned up
[   57.205446][  T681] EXT4-fs (loop0): mounted filesystem without journal. Opts: nodiscard,,errors=continue. Quota mode: writeback.
[   57.292800][   T26] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[   57.314082][   T26] usb 2-1: config 0 has no interface number 0
[   57.328576][   T26] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   57.344684][   T26] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   57.365049][   T26] usb 2-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00
[   57.381548][   T26] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   57.401796][   T26] usb 2-1: config 0 descriptor??
[   57.769209][  T655] loop1: detected capacity change from 0 to 512
[   58.341569][  T655] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   58.459751][  T655] EXT4-fs (loop1): 1 orphan inode deleted
[   58.465552][  T655] EXT4-fs (loop1): mounted filesystem without journal. Opts: nobarrier,,errors=continue. Quota mode: writeback.
[   58.517005][  T655] ext4 filesystem being mounted at /20/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   58.599387][   T30] kauditd_printk_skb: 15 callbacks suppressed
[   58.599403][   T30] audit: type=1400 audit(1793668523.658:411): avc:  denied  { bind } for  pid=696 comm="syz.0.95" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   58.647893][  T697] input: syz1 as /devices/virtual/input/input4
[   58.675084][   T30] audit: type=1400 audit(1793668523.698:412): avc:  denied  { read write } for  pid=696 comm="syz.0.95" name="uinput" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[   58.730923][   T30] audit: type=1400 audit(1793668523.698:413): avc:  denied  { open } for  pid=696 comm="syz.0.95" path="/dev/uinput" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[   58.795206][   T30] audit: type=1400 audit(1793668523.698:414): avc:  denied  { ioctl } for  pid=696 comm="syz.0.95" path="/dev/uinput" dev="devtmpfs" ino=258 ioctlcmd=0x5501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[   58.829713][   T30] audit: type=1400 audit(1793668523.768:415): avc:  denied  { read } for  pid=86 comm="acpid" name="event3" dev="devtmpfs" ino=656 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   58.852078][  T697] loop0: detected capacity change from 0 to 40427
[   58.856050][  T690] loop3: detected capacity change from 0 to 40427
[   58.886247][   T30] audit: type=1400 audit(1793668523.768:416): avc:  denied  { open } for  pid=86 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=656 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   58.919053][  T697] F2FS-fs (loop0): invalid crc value
[   58.930279][  T690] F2FS-fs (loop3): invalid crc value
[   58.948444][  T697] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109)
[   58.956054][  T690] F2FS-fs (loop3): Found nat_bits in checkpoint
[   58.970520][  T655] tap0: tun_chr_ioctl cmd 1074025677
[   58.975918][  T655] tap0: linktype set to 780
[   58.990002][  T697] F2FS-fs (loop0): Start checkpoint disabled!
[   58.996741][  T697] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6
[   59.001125][   T30] audit: type=1400 audit(1793668523.768:417): avc:  denied  { ioctl } for  pid=86 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=656 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   59.067738][   T26] uclogic 0003:28BD:0071.0002: pen parameters not found
[   59.076019][   T26] uclogic 0003:28BD:0071.0002: interface is invalid, ignoring
[   59.127269][   T30] audit: type=1400 audit(1793668524.118:418): avc:  denied  { read open } for  pid=696 comm="syz.0.95" path="/19/bus/file1" dev="loop0" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   59.129462][  T690] F2FS-fs (loop3): Start checkpoint disabled!
[   59.172397][   T30] audit: type=1400 audit(1793668524.128:419): avc:  denied  { ioctl } for  pid=696 comm="syz.0.95" path="/19/bus/file1" dev="loop0" ino=10 ioctlcmd=0x6616 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   59.196879][  T690] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6
[   59.287541][  T375] handle_bad_sector: 2022 callbacks suppressed
[   59.287560][  T375] attempt to access beyond end of device
[   59.287560][  T375] loop0: rw=2049, want=40976, limit=40427
[   59.328169][  T310] usb 2-1: USB disconnect, device number 5
[   59.412422][  T707] loop2: detected capacity change from 0 to 512
[   59.591500][  T707] FAT-fs (loop2): error, invalid access to FAT (entry 0x0fffff00)
[   59.600018][  T707] FAT-fs (loop2): Filesystem has been set read-only
[   60.297647][   T30] audit: type=1400 audit(1793668525.308:420): avc:  denied  { setopt } for  pid=711 comm="syz.3.100" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[   60.605491][  T728] loop2: detected capacity change from 0 to 2048
[   60.617733][  T324] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[   60.632317][  T728] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   60.647472][  T728] ext4 filesystem being mounted at /20/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   60.745559][  T730] loop1: detected capacity change from 0 to 512
[   60.927089][  T730] FAT-fs (loop1): error, invalid access to FAT (entry 0x0fffff00)
[   60.936328][  T730] FAT-fs (loop1): Filesystem has been set read-only
[   61.048030][  T324] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0
[   61.133267][  T324] usb 1-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   61.219155][  T728] overlayfs: failed to set xattr on upper
[   61.230283][  T728] overlayfs: ...falling back to index=off,metacopy=off.
[   61.257747][  T324] usb 1-1: config 0 interface 0 has no altsetting 0
[   61.292630][  T324] usb 1-1: New USB device found, idVendor=1b1c, idProduct=0a55, bcdDevice= 0.00
[   61.702499][  T324] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   61.733522][  T324] usb 1-1: config 0 descriptor??
[   61.743597][  T728] overlayfs: failed to resolve './cgroup': -2
[   61.767997][  T732] netlink: 84 bytes leftover after parsing attributes in process `syz.3.105'.
[   61.899049][  T742] loop2: detected capacity change from 0 to 512
[   61.925953][  T744] netlink: 20 bytes leftover after parsing attributes in process `syz.1.108'.
[   61.947672][  T744] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   61.955368][  T744] IPv6: NLM_F_CREATE should be set when creating new route
[   61.963911][  T744] IPv6: NLM_F_CREATE should be set when creating new route
[   61.992246][  T742] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm syz.2.106: bg 0: block 5: invalid block bitmap
[   62.019638][  T744] Zero length message leads to an empty skb
[   62.027729][  T742] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6191: Corrupt filesystem
[   62.037932][  T742] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.106: invalid indirect mapped block 3 (level 2)
[   62.058036][  T742] EXT4-fs (loop2): 1 orphan inode deleted
[   62.063834][  T742] EXT4-fs (loop2): 1 truncate cleaned up
[   62.079780][  T742] EXT4-fs (loop2): mounted filesystem without journal. Opts: nodiscard,,errors=continue. Quota mode: writeback.
[   62.100587][  T752] netlink: 320 bytes leftover after parsing attributes in process `syz.1.109'.
[   62.240054][  T324] hid (null): invalid report_count 40727
[   62.248670][  T324] hid (null): report_id 6385 is invalid
[   62.277646][  T324] hid-generic 0003:1B1C:0A55.0003: unknown main item tag 0x6
[   62.358924][  T324] hid-generic 0003:1B1C:0A55.0003: invalid report_count 40727
[   62.366710][  T324] hid-generic 0003:1B1C:0A55.0003: item 0 2 1 9 parsing failed
[   62.377864][  T324] hid-generic: probe of 0003:1B1C:0A55.0003 failed with error -22
[   62.484454][  T718] xt_hashlimit: size too large, truncated to 1048576
[   63.223777][  T760] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[   63.656629][  T763] loop1: detected capacity change from 0 to 40427
[   63.674400][  T763] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[   63.699135][  T763] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[   63.718337][  T763] F2FS-fs (loop1): invalid crc value
[   63.739800][  T763] F2FS-fs (loop1): SIT is corrupted data# 5 7 vs 11
[   63.748675][  T763] F2FS-fs (loop1): Failed to initialize F2FS segment manager (-117)
[   63.878900][  T324] usb 1-1: USB disconnect, device number 3
[   64.174660][  T772] loop1: detected capacity change from 0 to 512
[   64.282176][  T772] FAT-fs (loop1): error, invalid access to FAT (entry 0x0fffff00)
[   64.290202][  T772] FAT-fs (loop1): Filesystem has been set read-only
[   64.958035][  T775] netlink: 320 bytes leftover after parsing attributes in process `syz.0.115'.
[   65.205959][   T30] kauditd_printk_skb: 16 callbacks suppressed
[   65.205975][   T30] audit: type=1400 audit(1793668530.258:437): avc:  denied  { wake_alarm } for  pid=778 comm="syz.0.116" capability=35  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[   65.315072][   T30] audit: type=1400 audit(1793668530.318:438): avc:  denied  { mount } for  pid=778 comm="syz.0.116" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1
[   65.337350][  T779] netlink: 'syz.0.116': attribute type 1 has an invalid length.
[   65.345721][   T30] audit: type=1400 audit(1793668530.318:439): avc:  denied  { search } for  pid=778 comm="syz.0.116" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1
[   65.377901][  T779] netlink: 'syz.0.116': attribute type 3 has an invalid length.
[   65.407624][   T30] audit: type=1400 audit(1793668530.318:440): avc:  denied  { read write } for  pid=778 comm="syz.0.116" name="filter" dev="tracefs" ino=3874 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1
[   65.461472][  T288] syz-executor (288) used greatest stack depth: 21992 bytes left
[   65.469512][   T30] audit: type=1400 audit(1793668530.318:441): avc:  denied  { open } for  pid=778 comm="syz.0.116" path="/23/trace/events/kmem/kmalloc/filter" dev="tracefs" ino=3874 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1
[   65.536974][   T30] audit: type=1400 audit(1793668530.428:442): avc:  denied  { mounton } for  pid=781 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1
[   65.596373][  T781] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.627654][  T781] bridge0: port 1(bridge_slave_0) entered disabled state
[   65.635341][  T781] device bridge_slave_0 entered promiscuous mode
[   65.647633][  T781] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.654991][  T781] bridge0: port 2(bridge_slave_1) entered disabled state
[   65.662587][  T781] device bridge_slave_1 entered promiscuous mode
[   65.697624][   T30] audit: type=1400 audit(1793668530.428:443): avc:  denied  { create } for  pid=781 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[   65.743782][  T781] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.750990][  T781] bridge0: port 2(bridge_slave_1) entered forwarding state
[   65.758701][  T781] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.765851][  T781] bridge0: port 1(bridge_slave_0) entered forwarding state
[   65.792984][  T375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   65.827714][  T375] bridge0: port 1(bridge_slave_0) entered disabled state
[   65.855553][  T375] bridge0: port 2(bridge_slave_1) entered disabled state
[   65.870958][  T783] loop1: detected capacity change from 0 to 40427
[   65.880191][  T375] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   65.898345][   T30] audit: type=1400 audit(1793668530.958:444): avc:  denied  { write } for  pid=778 comm="syz.0.116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   65.908366][  T375] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.927442][  T375] bridge0: port 1(bridge_slave_0) entered forwarding state
[   65.944493][   T30] audit: type=1400 audit(1793668530.958:445): avc:  denied  { nlmsg_write } for  pid=778 comm="syz.0.116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   65.974171][  T783] F2FS-fs (loop1): invalid crc value
[   66.011121][  T765] loop2: detected capacity change from 0 to 131072
[   66.017810][  T783] F2FS-fs (loop1): Found nat_bits in checkpoint
[   66.049345][  T375] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   66.065456][   T30] audit: type=1400 audit(1793668531.008:446): avc:  denied  { setopt } for  pid=778 comm="syz.0.116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   66.066163][  T375] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.094123][  T375] bridge0: port 2(bridge_slave_1) entered forwarding state
[   66.120703][  T765] F2FS-fs (loop2): Wrong secs_per_zone / total_sections (512, 24)
[   66.137673][  T765] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock
[   66.152424][  T765] F2FS-fs (loop2): Test dummy encryption mode enabled
[   66.204357][  T783] F2FS-fs (loop1): Start checkpoint disabled!
[   66.218578][  T765] F2FS-fs (loop2): invalid crc value
[   66.229713][  T375] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   66.238043][  T783] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6
[   66.247831][  T375] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   66.260321][  T765] F2FS-fs (loop2): Found nat_bits in checkpoint
[   66.277513][  T375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   66.379322][  T797] loop0: detected capacity change from 0 to 512
[   66.500546][  T797] FAT-fs (loop0): error, invalid access to FAT (entry 0x0fffff00)
[   66.508724][  T797] FAT-fs (loop0): Filesystem has been set read-only
[   66.577041][  T765] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=80000000, run fsck to fix.
[   67.274247][  T781] device veth0_vlan entered promiscuous mode
[   67.285006][  T765] F2FS-fs (loop2): Cannot turn on quotas: -2 on 0
[   67.296865][  T765] F2FS-fs (loop2): Start checkpoint disabled!
[   67.311570][  T789] loop3: detected capacity change from 0 to 40427
[   67.331164][  T375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   67.340177][  T375] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   67.348160][  T375] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   67.363396][  T375] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   67.372047][  T375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   67.380841][  T781] device veth1_macvtap entered promiscuous mode
[   67.391497][  T375] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   67.400758][  T375] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   67.409551][  T375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   67.433330][  T789] F2FS-fs (loop3): invalid crc value
[   67.472907][  T375] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   67.495774][  T375] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   67.560855][  T789] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109)
[   67.572706][  T806] xt_TPROXY: Can be used only with -p tcp or -p udp
[   67.607512][  T789] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[   67.658112][  T812] input: syz1 as /devices/virtual/input/input5
[   67.665785][   T10] device bridge_slave_1 left promiscuous mode
[   67.675175][   T10] bridge0: port 2(bridge_slave_1) entered disabled state
[   67.715722][   T10] device bridge_slave_0 left promiscuous mode
[   67.725717][   T10] bridge0: port 1(bridge_slave_0) entered disabled state
[   67.753021][   T10] device veth1_macvtap left promiscuous mode
[   67.779016][   T10] device veth0_vlan left promiscuous mode
[   67.810089][  T818] loop0: detected capacity change from 0 to 512
[   67.877258][  T818] EXT4-fs error (device loop0): ext4_validate_block_bitmap:429: comm syz.0.123: bg 0: block 5: invalid block bitmap
[   67.968479][  T818] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6191: Corrupt filesystem
[   68.007809][  T818] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.123: invalid indirect mapped block 3 (level 2)
[   68.022394][  T818] EXT4-fs (loop0): 1 orphan inode deleted
[   68.063083][  T818] EXT4-fs (loop0): 1 truncate cleaned up
[   68.079274][  T285] attempt to access beyond end of device
[   68.079274][  T285] loop3: rw=2049, want=45104, limit=40427
[   68.100200][  T818] EXT4-fs (loop0): mounted filesystem without journal. Opts: nodiscard,,errors=continue. Quota mode: writeback.
[   68.114271][  T827] netlink: 320 bytes leftover after parsing attributes in process `syz.2.125'.
[   69.266514][  T836] input: syz1 as /devices/virtual/input/input6
[   69.434240][  T834] loop2: detected capacity change from 0 to 40427
[   69.493501][  T843] loop0: detected capacity change from 0 to 1024
[   69.506396][  T809] loop5: detected capacity change from 0 to 131072
[   69.516986][  T834] F2FS-fs (loop2): invalid crc value
[   69.535099][  T834] F2FS-fs (loop2): Found nat_bits in checkpoint
[   69.574003][  T834] F2FS-fs (loop2): Start checkpoint disabled!
[   69.580974][  T834] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6
[   69.592204][  T809] F2FS-fs (loop5): Wrong secs_per_zone / total_sections (512, 24)
[   69.635449][  T809] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock
[   69.658701][  T809] F2FS-fs (loop5): Test dummy encryption mode enabled
[   69.677705][   T39] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[   69.700073][  T809] F2FS-fs (loop5): invalid crc value
[   69.783512][  T809] F2FS-fs (loop5): Found nat_bits in checkpoint
[   69.910478][  T853] loop0: detected capacity change from 0 to 512
[   69.967723][   T39] usb 4-1: Using ep0 maxpacket: 16
[   70.013167][  T853] FAT-fs (loop0): error, invalid access to FAT (entry 0x0fffff00)
[   70.021109][  T853] FAT-fs (loop0): Filesystem has been set read-only
[   70.173056][  T809] F2FS-fs (loop5): f2fs_check_nid_range: out-of-range nid=80000000, run fsck to fix.
[   70.294460][  T809] F2FS-fs (loop5): Cannot turn on quotas: -2 on 0
[   70.358137][   T39] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   70.371673][  T809] F2FS-fs (loop5): Start checkpoint disabled!
[   70.419157][   T39] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0
[   70.510613][   T39] usb 4-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28
[   70.677122][   T39] usb 4-1: config 0 interface 0 has no altsetting 0
[   70.706322][   T39] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[   70.736591][   T39] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   70.791279][   T39] usb 4-1: config 0 descriptor??
[   71.019110][  T375] attempt to access beyond end of device
[   71.019110][  T375] loop1: rw=2049, want=40976, limit=40427
[   71.203949][  T861] loop0: detected capacity change from 0 to 512
[   71.373697][  T861] FAT-fs (loop0): error, invalid access to FAT (entry 0x0fffff00)
[   71.381769][  T861] FAT-fs (loop0): Filesystem has been set read-only
[   71.657214][  T862] loop3: detected capacity change from 0 to 512
[   72.312697][  T862] EXT4-fs (loop3): 1 truncate cleaned up
[   72.324819][  T862] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[   72.400130][   T30] kauditd_printk_skb: 15 callbacks suppressed
[   72.400147][   T30] audit: type=1400 audit(1793668537.458:462): avc:  denied  { read write } for  pid=838 comm="syz.3.128" name="uhid" dev="devtmpfs" ino=263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[   72.432574][   T39] usb 4-1: USB disconnect, device number 6
[   72.513782][   T30] audit: type=1400 audit(1793668537.488:463): avc:  denied  { open } for  pid=838 comm="syz.3.128" path="/dev/uhid" dev="devtmpfs" ino=263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[   72.547294][  T879] input: syz1 as /devices/virtual/input/input7
[   72.690267][  T886] input: syz1 as /devices/virtual/input/input8
[   72.803598][  T888] loop0: detected capacity change from 0 to 512
[   72.857871][   T30] audit: type=1400 audit(1793668537.838:464): avc:  denied  { create } for  pid=883 comm="syz.0.137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1
[   72.965313][  T888] EXT4-fs (loop0): mounted filesystem without journal. Opts: sysvgroups,auto_da_alloc,minixdf,,errors=continue. Quota mode: writeback.
[   72.979993][  T888] ext4 filesystem being mounted at /34/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   73.090637][   T30] audit: type=1400 audit(1793668537.838:465): avc:  denied  { write } for  pid=883 comm="syz.0.137" path="socket:[19817]" dev="sockfs" ino=19817 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1
[   73.156938][  T859] loop5: detected capacity change from 0 to 131072
[   73.200570][  T859] F2FS-fs (loop5): Wrong secs_per_zone / total_sections (512, 24)
[   73.209785][  T859] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock
[   73.237676][  T859] F2FS-fs (loop5): Test dummy encryption mode enabled
[   73.255471][  T859] F2FS-fs (loop5): invalid crc value
[   73.268197][  T859] F2FS-fs (loop5): Found nat_bits in checkpoint
[   73.307373][  T859] F2FS-fs (loop5): f2fs_check_nid_range: out-of-range nid=80000000, run fsck to fix.
[   73.319555][  T859] F2FS-fs (loop5): Cannot turn on quotas: -2 on 0
[   73.326295][  T859] F2FS-fs (loop5): Start checkpoint disabled!
[   73.332993][  T893] input: syz1 as /devices/virtual/input/input9
[   73.334186][  T859] F2FS-fs (loop5): Try to recover 2th superblock, ret: 0
[   73.346605][  T859] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6
[   73.397709][   T30] audit: type=1400 audit(1793668538.448:466): avc:  denied  { read write } for  pid=858 comm="syz.5.131" name="file2" dev="loop5" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   73.426501][   T30] audit: type=1400 audit(1793668538.448:467): avc:  denied  { open } for  pid=858 comm="syz.5.131" path="/1/file0/file2" dev="loop5" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   73.449754][   T30] audit: type=1400 audit(1793668538.448:468): avc:  denied  { unlink } for  pid=858 comm="syz.5.131" name="file2" dev="loop5" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   73.472895][   T30] audit: type=1400 audit(1793668538.478:469): avc:  denied  { write } for  pid=895 comm="syz.3.140" name="binder-control" dev="binder" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[   73.485526][  T798] F2FS-fs (loop5): f2fs_check_nid_range: out-of-range nid=80000000, run fsck to fix.
[   73.522959][   T30] audit: type=1400 audit(1793668538.558:470): avc:  denied  { create } for  pid=895 comm="syz.3.140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1
[   73.586302][  T896] loop3: detected capacity change from 0 to 1024
[   73.629520][  T901] input: syz1 as /devices/virtual/input/input10
[   73.642388][  T375] attempt to access beyond end of device
[   73.642388][  T375] loop2: rw=2049, want=40976, limit=40427
[   73.673961][  T896] EXT4-fs (loop3): Mount option "journal_checksum" incompatible with ext3
[   73.793437][  T901] loop0: detected capacity change from 0 to 40427
[   73.871430][  T901] F2FS-fs (loop0): invalid crc value
[   73.913219][  T901] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109)
[   74.005892][  T906] loop1: detected capacity change from 0 to 512
[   74.082512][  T901] F2FS-fs (loop0): Start checkpoint disabled!
[   74.094228][  T901] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6
[   74.299207][  T908] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=908 comm=syz.3.140
[   74.860661][  T916] loop5: detected capacity change from 0 to 512
[   74.913332][   T30] audit: type=1400 audit(1793668539.968:471): avc:  denied  { mount } for  pid=912 comm="syz.2.144" name="/" dev="configfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1
[   75.016716][  T916] FAT-fs (loop5): error, invalid access to FAT (entry 0x0fffff00)
[   75.025044][  T916] FAT-fs (loop5): Filesystem has been set read-only
[   75.293149][  T375] attempt to access beyond end of device
[   75.293149][  T375] loop0: rw=2049, want=40976, limit=40427
[   75.976541][  T929] loop1: detected capacity change from 0 to 1024
[   76.065017][  T933] input: syz1 as /devices/virtual/input/input11
[   76.083882][  T929] EXT4-fs (loop1): error: could not find journal device path: error -2
[   76.167202][  T942] netlink: 320 bytes leftover after parsing attributes in process `syz.0.146'.
[   76.192978][  T939] loop1: detected capacity change from 0 to 1024
[   76.220457][  T946] netlink: 320 bytes leftover after parsing attributes in process `syz.5.152'.
[   76.495891][  T952] input: syz1 as /devices/virtual/input/input12
[   76.513400][  T954] loop5: detected capacity change from 0 to 512
[   76.624835][  T954] EXT4-fs (loop5): Test dummy encryption mode enabled
[   76.631943][  T954] EXT4-fs (loop5): Test dummy encryption mode enabled
[   76.639059][  T954] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[   76.658274][  T954] EXT4-fs (loop5): 1 truncate cleaned up
[   76.664117][  T954] EXT4-fs (loop5): mounted filesystem without journal. Opts: test_dummy_encryption,nojournal_checksum,data_err=abort,debug_want_extra_isize=0x0000000000000080,dioread_nolock,jqfmt=vfsv1,test_dummy_encryption,nodioread_nolock,,errors=continue. Quota mode: none.
[   76.764794][  T961] loop3: detected capacity change from 0 to 512
[   77.509083][  T963] loop1: detected capacity change from 0 to 256
[   77.597910][  T969] netlink: 320 bytes leftover after parsing attributes in process `syz.5.159'.
[   77.620605][  T963] FAT-fs (loop1): Unrecognized mount option "
r§ ŠÏ@;@ÂÍM@.¨pÒÆŒ¤f‰èR" or missing value
[   77.847643][   T26] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[   77.864960][  T963] loop1: detected capacity change from 0 to 256
[   77.899613][  T975] input: syz1 as /devices/virtual/input/input13
[   77.925234][  T977] input: syz1 as /devices/virtual/input/input14
[   77.949031][  T979] netlink: 84 bytes leftover after parsing attributes in process `syz.3.161'.
[   78.066059][  T977] loop5: detected capacity change from 0 to 40427
[   78.075930][   T30] kauditd_printk_skb: 6 callbacks suppressed
[   78.075946][   T30] audit: type=1400 audit(1793668543.128:478): avc:  denied  { watch watch_reads } for  pid=982 comm="syz.3.165" path="/33/file1" dev="tmpfs" ino=204 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[   78.111545][  T963] FAT-fs (loop1): error, clusters badly computed (0 != 128)
[   78.119582][  T963] FAT-fs (loop1): Filesystem has been set read-only
[   78.128186][  T963] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[   78.137880][  T977] F2FS-fs (loop5): invalid crc value
[   78.154137][  T977] F2FS-fs (loop5): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109)
[   78.184724][  T977] F2FS-fs (loop5): Start checkpoint disabled!
[   78.191763][  T977] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6
[   78.247688][   T26] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   78.279447][   T10] attempt to access beyond end of device
[   78.279447][   T10] loop5: rw=2049, want=40976, limit=40427
[   78.347614][  T430] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[   78.360839][   T30] audit: type=1400 audit(1793668543.418:479): avc:  denied  { read } for  pid=962 comm="syz.1.156" name="ppp" dev="devtmpfs" ino=154 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[   78.391282][   T30] audit: type=1400 audit(1793668543.418:480): avc:  denied  { open } for  pid=962 comm="syz.1.156" path="/dev/ppp" dev="devtmpfs" ino=154 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[   78.447763][   T26] usb 1-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40
[   78.467113][   T26] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   78.479677][   T30] audit: type=1400 audit(1793668543.538:481): avc:  denied  { mount } for  pid=992 comm="syz.5.166" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1
[   78.507804][   T26] usb 1-1: Product: syz
[   78.512022][   T26] usb 1-1: Manufacturer: syz
[   78.524575][   T26] usb 1-1: SerialNumber: syz
[   78.539438][   T30] audit: type=1400 audit(1793668543.588:482): avc:  denied  { create } for  pid=992 comm="syz.5.166" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[   78.563940][   T30] audit: type=1400 audit(1793668543.588:483): avc:  denied  { write } for  pid=992 comm="syz.5.166" name="file0" dev="tmpfs" ino=79 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[   78.589170][   T30] audit: type=1400 audit(1793668543.588:484): avc:  denied  { open } for  pid=992 comm="syz.5.166" path="/11/file0" dev="tmpfs" ino=79 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[   78.623615][   T30] audit: type=1400 audit(1793668543.618:485): avc:  denied  { unlink } for  pid=781 comm="syz-executor" name="file0" dev="tmpfs" ino=79 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[   78.646538][  T430] usb 4-1: Using ep0 maxpacket: 8
[   78.660207][ T1003] input: syz1 as /devices/virtual/input/input15
[   78.722363][ T1007] FAULT_INJECTION: forcing a failure.
[   78.722363][ T1007] name fail_futex, interval 1, probability 0, space 0, times 1
[   78.735674][ T1007] CPU: 0 PID: 1007 Comm: syz.1.170 Not tainted syzkaller #0
[   78.743015][ T1007] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[   78.753311][ T1007] Call Trace:
[   78.756632][ T1007]  <TASK>
[   78.759637][ T1007]  __dump_stack+0x21/0x30
[   78.764011][ T1007]  dump_stack_lvl+0x110/0x170
[   78.768746][ T1007]  ? show_regs_print_info+0x20/0x20
[   78.773986][ T1007]  ? internal_get_user_pages_fast+0x453/0x650
[   78.780092][ T1007]  dump_stack+0x15/0x20
[   78.784271][ T1007]  should_fail+0x3ab/0x500
[   78.788721][ T1007]  get_futex_key+0x143/0xb60
[   78.793387][ T1007]  ? wake_up_q+0x106/0x1b0
[   78.797852][ T1007]  ? futex_wait_restart+0x250/0x250
[   78.803126][ T1007]  ? __kasan_check_write+0x14/0x20
[   78.808367][ T1007]  ? get_futex_key+0x91e/0xb60
[   78.813192][ T1007]  futex_wait_setup+0x52/0x510
[   78.817999][ T1007]  ? futex_wait_restart+0x250/0x250
[   78.823241][ T1007]  do_futex+0x1beb/0x2800
[   78.827620][ T1007]  ? call_rcu+0x10b/0xf60
[   78.831982][ T1007]  ? ____fput+0x15/0x20
[   78.836176][ T1007]  ? exit_to_user_mode_loop+0xd0/0xe0
[   78.841587][ T1007]  ? exit_to_user_mode_prepare+0x87/0xd0
[   78.847251][ T1007]  ? syscall_exit_to_user_mode+0x1a/0x30
[   78.852929][ T1007]  ? do_syscall_64+0x58/0xa0
[   78.857561][ T1007]  ? entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   78.863667][ T1007]  ? _kstrtoull+0x3bb/0x4c0
[   78.868207][ T1007]  ? futex_exit_release+0x1e0/0x1e0
[   78.873448][ T1007]  ? kstrtouint_from_user+0x1c4/0x220
[   78.878865][ T1007]  ? __kasan_check_write+0x14/0x20
[   78.884096][ T1007]  ? proc_fail_nth_write+0x180/0x200
[   78.889399][ T1007]  ? security_file_permission+0x79/0xa0
[   78.894970][ T1007]  ? file_end_write+0x1b0/0x1b0
[   78.899866][ T1007]  ? __kasan_check_write+0x14/0x20
[   78.905095][ T1007]  ? mutex_unlock+0x8f/0x230
[   78.909707][ T1007]  __se_sys_futex+0x135/0x330
[   78.914433][ T1007]  ? __kasan_check_write+0x14/0x20
[   78.919563][ T1007]  ? __x64_sys_futex+0x100/0x100
[   78.924690][ T1007]  ? ksys_write+0x1fa/0x260
[   78.929214][ T1007]  ? __kasan_check_write+0x14/0x20
[   78.934629][ T1007]  __x64_sys_futex+0xe5/0x100
[   78.939585][ T1007]  x64_sys_call+0x251/0x9a0
[   78.944115][ T1007]  do_syscall_64+0x4c/0xa0
[   78.948554][ T1007]  ? clear_bhb_loop+0x50/0xa0
[   78.953271][ T1007]  ? clear_bhb_loop+0x50/0xa0
[   78.957971][ T1007]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   78.963914][ T1007] RIP: 0033:0x7f68405b3b19
[   78.968346][ T1007] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   78.987975][ T1007] RSP: 002b:00007f683f00b028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[   78.996405][ T1007] RAX: ffffffffffffffda RBX: 00007f6840839fa0 RCX: 00007f68405b3b19
[   79.004393][ T1007] RDX: 0000000000000001 RSI: 000000000000000b RDI: 0000000000000000
[   79.012376][ T1007] RBP: 00007f684064baf8 R08: 00002000000002c0 R09: 0000000000000001
[   79.020384][ T1007] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   79.028509][ T1007] R13: 00007f684083a038 R14: 00007f6840839fa0 R15: 00007ffc1f6782a8
[   79.036504][ T1007]  </TASK>
[   79.039690][  T430] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 15
[   79.065345][ T1007] loop1: detected capacity change from 0 to 512
[   79.098895][ T1007] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   79.114087][ T1007] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.170: bg 0: block 384: padding at end of block bitmap is not set
[   79.128883][ T1007] EXT4-fs (loop1): Remounting filesystem read-only
[   79.135547][ T1007] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6191: Corrupt filesystem
[   79.144872][ T1007] EXT4-fs (loop1): Remounting filesystem read-only
[   79.151633][  T430] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40
[   79.161203][ T1007] EXT4-fs error (device loop1): ext4_clear_blocks:883: inode #11: comm syz.1.170: attempt to clear invalid blocks 983260 len 1
[   79.174588][  T430] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[   79.182759][  T430] usb 4-1: SerialNumber: syz
[   79.184543][  T965] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=48385 sclass=netlink_route_socket pid=965 comm=syz.0.158
[   79.188456][ T1007] EXT4-fs (loop1): Remounting filesystem read-only
[   79.208659][  T965] loop0: detected capacity change from 0 to 512
[   79.215094][ T1007] EXT4-fs error (device loop1): __ext4_get_inode_loc:4365: comm syz.1.170: Invalid inode table block 0 in block_group 0
[   79.227955][ T1007] EXT4-fs (loop1): Remounting filesystem read-only
[   79.234482][ T1007] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5904: Corrupt filesystem
[   79.244222][ T1007] EXT4-fs (loop1): Remounting filesystem read-only
[   79.250904][ T1007] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem
[   79.260030][  T965] EXT4-fs (loop0): Unrecognized mount option "fowner<00000000000000000000" or missing value
[   79.270357][ T1007] EXT4-fs (loop1): Remounting filesystem read-only
[   79.276900][ T1007] EXT4-fs error (device loop1): __ext4_get_inode_loc:4365: comm syz.1.170: Invalid inode table block 0 in block_group 0
[   79.289902][ T1007] EXT4-fs (loop1): Remounting filesystem read-only
[   79.296481][   T30] audit: type=1400 audit(1793668544.348:486): avc:  denied  { create } for  pid=964 comm="syz.0.158" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   79.301795][  T965] UDC core: couldn't find an available UDC or it's busy: -16
[   79.318431][ T1007] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5904: Corrupt filesystem
[   79.324363][  T965] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[   79.335322][   T30] audit: type=1400 audit(1793668544.358:487): avc:  denied  { bind } for  pid=964 comm="syz.0.158" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   79.360382][ T1007] EXT4-fs (loop1): Remounting filesystem read-only
[   79.366919][ T1007] EXT4-fs error (device loop1): ext4_truncate:4317: inode #11: comm syz.1.170: mark_inode_dirty error
[   79.378184][ T1007] EXT4-fs (loop1): Remounting filesystem read-only
[   79.384739][ T1007] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem
[   79.393912][ T1007] EXT4-fs (loop1): Remounting filesystem read-only
[   79.400541][ T1007] EXT4-fs (loop1): 1 truncate cleaned up
[   79.406197][ T1007] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,resuid=0x0000000000000000,max_dir_size_kb=0x00000000000001ff,noblock_validity,. Quota mode: none.
[   79.411728][  T965] loop0: detected capacity change from 0 to 512
[   79.477798][  T430] cdc_ether: probe of 4-1:1.0 failed with error -71
[   79.483686][  T965] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[   79.506468][  T430] usb-storage 4-1:1.0: USB Mass Storage device detected
[   79.528415][  T965] EXT4-fs (loop0): 1 truncate cleaned up
[   79.534210][  T965] EXT4-fs (loop0): mounted filesystem without journal. Opts: debug_want_extra_isize=0x000000000000002e,min_batch_time=0x0000000000000fff,jqfmt=vfsv0,stripe=0x0000000000004000,errors=remount-ro,max_batch_time=0x0000000000000004,. Quota mode: none.
[   79.601035][  T430] usb-storage 4-1:1.0: Quirks match for vid 0525 pid a4a5: 10000
[   79.643410][  T430] usb 4-1: USB disconnect, device number 7
[   79.738758][ T1034] loop1: detected capacity change from 0 to 512
[   80.110217][ T1036] loop3: detected capacity change from 0 to 256
[   80.162879][ T1036] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   80.449195][ T1039] input: syz1 as /devices/virtual/input/input17
[   80.629303][ T1039] F2FS-fs (loop5): invalid crc value
[   80.648952][ T1039] F2FS-fs (loop5): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109)
[   80.683818][ T1039] F2FS-fs (loop5): Start checkpoint disabled!
[   80.690694][ T1039] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6
[   80.727831][   T26] usb 1-1: 1:1 : unsupported format bits 0x2020000
[   80.747235][ T1045] FAULT_INJECTION: forcing a failure.
[   80.747235][ T1045] name fail_usercopy, interval 1, probability 0, space 0, times 1
[   80.760424][   T26] usb 1-1: 2:1 : no or invalid class specific endpoint descriptor
[   80.768322][ T1045] CPU: 0 PID: 1045 Comm: syz.0.179 Not tainted syzkaller #0
[   80.768350][ T1045] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[   80.768362][ T1045] Call Trace:
[   80.768368][ T1045]  <TASK>
[   80.768375][ T1045]  __dump_stack+0x21/0x30
[   80.768401][ T1045]  dump_stack_lvl+0x110/0x170
[   80.768420][ T1045]  ? show_regs_print_info+0x20/0x20
[   80.768455][ T1045]  dump_stack+0x15/0x20
[   80.768473][ T1045]  should_fail+0x3ab/0x500
[   80.775957][   T26] usb 1-1: 2:1 : unsupported format bits 0x2020000
[   80.785926][ T1045]  should_fail_usercopy+0x1a/0x20
[   80.785950][ T1045]  _copy_from_user+0x20/0xd0
[   80.785968][ T1045]  proc_control_compat+0xae/0x180
[   80.785988][ T1045]  ? proc_submiturb+0x150/0x150
[   80.818217][   T26] usb 1-1: USB disconnect, device number 4
[   80.821714][ T1045]  ? mutex_lock+0x9b/0x1c0
[   80.851550][ T1045]  ? selinux_file_ioctl+0x3ad/0x4c0
[   80.856819][ T1045]  usbdev_ioctl+0x1355/0x1f10
[   80.861517][ T1045]  ? usbdev_poll+0x200/0x200
[   80.866111][ T1045]  ? security_file_ioctl+0x84/0xa0
[   80.871223][ T1045]  ? usbdev_poll+0x200/0x200
[   80.875815][ T1045]  __se_sys_ioctl+0x121/0x1a0
[   80.880498][ T1045]  __x64_sys_ioctl+0x7b/0x90
[   80.885119][ T1045]  x64_sys_call+0x2f/0x9a0
[   80.889555][ T1045]  do_syscall_64+0x4c/0xa0
[   80.893973][ T1045]  ? clear_bhb_loop+0x50/0xa0
[   80.898654][ T1045]  ? clear_bhb_loop+0x50/0xa0
[   80.903331][ T1045]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   80.909252][ T1045] RIP: 0033:0x7f7e12cecb19
[   80.913673][ T1045] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   80.933476][ T1045] RSP: 002b:00007f7e11744028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   80.942041][ T1045] RAX: ffffffffffffffda RBX: 00007f7e12f72fa0 RCX: 00007f7e12cecb19
[   80.950026][ T1045] RDX: 0000200000000100 RSI: 00000000c0105500 RDI: 0000000000000003
[   80.958025][ T1045] RBP: 00007f7e11744090 R08: 0000000000000000 R09: 0000000000000000
[   80.966111][ T1045] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   80.974097][ T1045] R13: 00007f7e12f73038 R14: 00007f7e12f72fa0 R15: 00007fff5cb4e9c8
[   80.982085][ T1045]  </TASK>
[   81.044433][ T1047] netlink: 104 bytes leftover after parsing attributes in process `syz.1.178'.
[   81.060346][  T308] udevd[308]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   81.343355][  T364] attempt to access beyond end of device
[   81.343355][  T364] loop5: rw=2049, want=40976, limit=40427
[   81.461804][ T1057] 9pnet: Insufficient options for proto=fd
[   81.534363][ T1063] set_capacity_and_notify: 3 callbacks suppressed
[   81.534381][ T1063] loop3: detected capacity change from 0 to 256
[   81.550739][ T1061] EXT4-fs error (device loop5): ext4_validate_block_bitmap:429: comm syz.5.187: bg 0: block 5: invalid block bitmap
[   81.563950][ T1061] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6191: Corrupt filesystem
[   81.579575][ T1063] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d)
[   81.619387][ T1061] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.187: invalid indirect mapped block 3 (level 2)
[   81.650323][ T1061] EXT4-fs (loop5): 1 orphan inode deleted
[   81.662753][ T1061] EXT4-fs (loop5): 1 truncate cleaned up
[   81.673728][ T1061] EXT4-fs (loop5): mounted filesystem without journal. Opts: nodiscard,,errors=continue. Quota mode: writeback.
[   81.836006][ T1070] SELinux:  policydb magic number 0x0 does not match expected magic number 0xf97cff8c
[   81.845840][ T1070] SELinux: failed to load policy
[   82.847098][   T26] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[   83.031168][ T1051] loop0: detected capacity change from 0 to 131072
[   83.892073][   T30] kauditd_printk_skb: 10 callbacks suppressed
[   83.892091][   T30] audit: type=1400 audit(1794192836.949:498): avc:  denied  { create } for  pid=1082 comm="syz.2.192" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[   83.949481][ T1051] F2FS-fs (loop0): Wrong secs_per_zone / total_sections (512, 24)
[   83.992073][ T1051] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock
[   84.017070][   T30] audit: type=1400 audit(1794192837.069:499): avc:  denied  { name_bind } for  pid=1082 comm="syz.2.192" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1
[   84.038434][ T1051] F2FS-fs (loop0): Test dummy encryption mode enabled
[   84.046284][ T1051] F2FS-fs (loop0): invalid crc value
[   84.057777][   T26] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0
[   84.075401][   T30] audit: type=1400 audit(1794192837.109:500): avc:  denied  { write } for  pid=1082 comm="syz.2.192" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[   84.082339][   T26] usb 2-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   84.099009][ T1051] F2FS-fs (loop0): Found nat_bits in checkpoint
[   84.156193][ T1051] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=80000000, run fsck to fix.
[   84.156965][   T26] usb 2-1: config 0 interface 0 has no altsetting 0
[   84.174197][ T1051] F2FS-fs (loop0): Cannot turn on quotas: -2 on 0
[   84.189625][   T26] usb 2-1: New USB device found, idVendor=1b1c, idProduct=0a55, bcdDevice= 0.00
[   84.190402][ T1051] F2FS-fs (loop0): Start checkpoint disabled!
[   84.201051][   T26] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   84.225105][ T1051] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0
[   84.236461][   T26] usb 2-1: config 0 descriptor??
[   84.241914][ T1051] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6
[   84.261209][ T1102] loop3: detected capacity change from 0 to 256
[   84.453502][ T1104] netlink: 320 bytes leftover after parsing attributes in process `syz.3.200'.
[   84.517696][  T324] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[   84.729979][ T1108] loop3: detected capacity change from 0 to 512
[   84.767895][   T26] hid (null): invalid report_count 40727
[   84.773683][   T26] hid (null): report_id 6385 is invalid
[   84.785158][ T1108] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm syz.3.201: bg 0: block 5: invalid block bitmap
[   84.795677][   T26] hid-generic 0003:1B1C:0A55.0005: unknown main item tag 0x6
[   84.807598][  T324] usb 6-1: device descriptor read/64, error -71
[   84.817839][ T1108] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6191: Corrupt filesystem
[   84.825662][   T26] hid-generic 0003:1B1C:0A55.0005: invalid report_count 40727
[   84.834103][ T1108] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.201: invalid indirect mapped block 3 (level 2)
[   84.847480][ T1108] EXT4-fs (loop3): 1 orphan inode deleted
[   84.853386][ T1108] EXT4-fs (loop3): 1 truncate cleaned up
[   84.859156][ T1108] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodiscard,,errors=continue. Quota mode: writeback.
[   84.871242][   T26] hid-generic 0003:1B1C:0A55.0005: item 0 2 1 9 parsing failed
[   84.957811][   T26] hid-generic: probe of 0003:1B1C:0A55.0005 failed with error -22
[   84.972265][ T1065] xt_hashlimit: size too large, truncated to 1048576
[   84.997527][ T1113] input: syz1 as /devices/virtual/input/input21
[   85.066097][ T1116] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[   85.953711][ T1113] loop0: detected capacity change from 0 to 40427
[   86.073041][ T1113] F2FS-fs (loop0): invalid crc value
[   86.099591][ T1113] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109)
[   86.129192][  T324] usb 6-1: device descriptor read/64, error -71
[   86.136899][ T1113] F2FS-fs (loop0): Start checkpoint disabled!
[   86.146734][ T1113] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6
[   86.312617][    T6] usb 2-1: USB disconnect, device number 6
[   86.347098][  T798] attempt to access beyond end of device
[   86.347098][  T798] loop0: rw=2049, want=40976, limit=40427
[   86.397686][  T324] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[   86.704071][ T1144] loop0: detected capacity change from 0 to 512
[   86.707816][  T324] usb 6-1: device descriptor read/64, error -71
[   87.117736][  T324] usb 6-1: device descriptor read/64, error -71
[   87.248056][  T324] usb usb6-port1: attempt power cycle
[   87.919389][ T1122] loop3: detected capacity change from 0 to 131072
[   87.938478][ T1122] F2FS-fs (loop3): Test dummy encryption mode enabled
[   87.946320][ T1153] netlink: 320 bytes leftover after parsing attributes in process `syz.2.214'.
[   87.968734][ T1122] F2FS-fs (loop3): invalid crc value
[   88.368804][ T1122] F2FS-fs (loop3): Found nat_bits in checkpoint
[   88.498039][ T1122] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[   88.647635][   T30] audit: type=1400 audit(1794192841.639:501): avc:  denied  { append } for  pid=1121 comm="syz.3.203" path="/47/file1/cgroup.stat" dev="loop3" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   88.671767][ T1122] futex_wake_op: syz.3.203 tries to shift op by 146; fix this program
[   88.691542][ T1122] futex_wake_op: syz.3.203 tries to shift op by 146; fix this program
[   88.789242][ T1175] netlink: 320 bytes leftover after parsing attributes in process `syz.0.221'.
[   89.004927][   T30] audit: type=1400 audit(1794192842.059:502): avc:  denied  { name_bind } for  pid=1179 comm="syz.0.223" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1
[   89.037605][  T324] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[   89.062254][ T1136] loop1: detected capacity change from 0 to 131072
[   89.134561][ T1136] F2FS-fs (loop1): Wrong secs_per_zone / total_sections (512, 24)
[   89.142529][ T1136] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock
[   89.153240][ T1136] F2FS-fs (loop1): Test dummy encryption mode enabled
[   89.160995][ T1136] F2FS-fs (loop1): invalid crc value
[   89.190892][ T1136] F2FS-fs (loop1): Found nat_bits in checkpoint
[   89.226841][ T1193] loop0: detected capacity change from 0 to 512
[   89.404257][ T1136] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=80000000, run fsck to fix.
[   89.473821][ T1193] EXT4-fs error (device loop0): ext4_orphan_get:1410: inode #15: comm syz.0.227: iget: bad i_size value: 38620345925642
[   89.487109][  T324] usb 6-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0
[   89.541133][  T324] usb 6-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   89.576664][ T1136] F2FS-fs (loop1): Cannot turn on quotas: -2 on 0
[   89.610166][ T1193] EXT4-fs error (device loop0): ext4_orphan_get:1415: comm syz.0.227: couldn't read orphan inode 15 (err -117)
[   89.660278][ T1136] F2FS-fs (loop1): Start checkpoint disabled!
[   89.695928][  T324] usb 6-1: config 0 interface 0 has no altsetting 0
[   89.723441][ T1193] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   89.761465][  T324] usb 6-1: New USB device found, idVendor=1b1c, idProduct=0a55, bcdDevice= 0.00
[   90.266550][  T324] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   90.283301][ T1193] EXT4-fs (loop0): shut down requested (1)
[   90.293021][  T324] usb 6-1: config 0 descriptor??
[   90.298697][   T30] audit: type=1400 audit(1794192843.359:503): avc:  denied  { read } for  pid=83 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1
[   90.322161][ T1193] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue
[   90.335558][ T1193] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[   90.417686][   T30] audit: type=1400 audit(1794192843.359:504): avc:  denied  { search } for  pid=83 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   90.461185][   T30] audit: type=1400 audit(1794192843.359:505): avc:  denied  { write } for  pid=83 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   90.482547][   T30] audit: type=1400 audit(1794192843.359:506): avc:  denied  { add_name } for  pid=83 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   90.504415][   T30] audit: type=1400 audit(1794192843.359:507): avc:  denied  { create } for  pid=83 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   90.524925][   T30] audit: type=1400 audit(1794192843.359:508): avc:  denied  { append open } for  pid=83 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   90.557938][   T30] audit: type=1400 audit(1794192843.359:509): avc:  denied  { getattr } for  pid=83 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   90.637875][ T1201] loop0: detected capacity change from 0 to 512
[   90.724525][ T1212] netlink: 84 bytes leftover after parsing attributes in process `syz.1.232'.
[   90.746968][ T1214] netlink: 320 bytes leftover after parsing attributes in process `syz.1.233'.
[   90.778913][  T324] hid (null): invalid report_count 40727
[   90.788840][  T324] hid (null): report_id 6385 is invalid
[   90.863892][  T324] hid-generic 0003:1B1C:0A55.0006: unknown main item tag 0x6
[   90.867039][ T1219] input: syz1 as /devices/virtual/input/input26
[   90.912703][  T324] hid-generic 0003:1B1C:0A55.0006: invalid report_count 40727
[   90.985004][  T324] hid-generic 0003:1B1C:0A55.0006: item 0 2 1 9 parsing failed
[   91.018421][  T324] hid-generic: probe of 0003:1B1C:0A55.0006 failed with error -22
[   91.044048][ T1171] xt_hashlimit: size too large, truncated to 1048576
[   91.107216][ T1219] loop0: detected capacity change from 0 to 40427
[   91.117012][ T1224] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[   91.234969][ T1221] loop3: detected capacity change from 0 to 40427
[   91.261943][ T1219] F2FS-fs (loop0): invalid crc value
[   91.269376][ T1219] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109)
[   91.290607][ T1221] F2FS-fs (loop3): invalid crc value
[   91.303823][ T1219] F2FS-fs (loop0): Start checkpoint disabled!
[   91.310596][ T1219] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6
[   91.331422][ T1221] F2FS-fs (loop3): Found nat_bits in checkpoint
[   91.367645][  T324] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[   91.382640][  T309] usb 6-1: USB disconnect, device number 5
[   91.388722][ T1221] F2FS-fs (loop3): Start checkpoint disabled!
[   91.396069][ T1221] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6
[   91.625704][  T375] attempt to access beyond end of device
[   91.625704][  T375] loop3: rw=2049, want=40968, limit=40427
[   91.637221][  T375] attempt to access beyond end of device
[   91.637221][  T375] loop3: rw=2049, want=41008, limit=40427
[   91.647902][  T324] usb 2-1: device descriptor read/64, error -71
[   91.875296][ T1233] loop0: detected capacity change from 0 to 131072
[   91.894441][   T30] audit: type=1400 audit(1794192844.949:510): avc:  denied  { mount } for  pid=1236 comm="syz.5.240" name="/" dev="ramfs" ino=20647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1
[   91.900277][ T1237] overlayfs: missing 'lowerdir'
[   91.916826][   T30] audit: type=1400 audit(1794192844.949:511): avc:  denied  { remount } for  pid=1236 comm="syz.5.240" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1
[   91.959674][ T1233] F2FS-fs (loop0): Wrong secs_per_zone / total_sections (512, 24)
[   91.967542][ T1233] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock
[   91.987648][ T1233] F2FS-fs (loop0): Test dummy encryption mode enabled
[   91.995465][ T1233] F2FS-fs (loop0): invalid crc value
[   92.006061][ T1233] F2FS-fs (loop0): Found nat_bits in checkpoint
[   92.035096][ T1233] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=80000000, run fsck to fix.
[   92.037822][ T1178] usb 4-1: new full-speed USB device number 8 using dummy_hcd
[   92.050050][ T1233] F2FS-fs (loop0): Cannot turn on quotas: -2 on 0
[   92.052371][  T324] usb 2-1: device descriptor read/64, error -71
[   92.059456][ T1233] F2FS-fs (loop0): Start checkpoint disabled!
[   92.072084][ T1233] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0
[   92.079188][ T1233] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6
[   92.109164][  T375] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=80000000, run fsck to fix.
[   92.327630][  T324] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[   92.377685][ T1178] usb 4-1: not running at top speed; connect to a high speed hub
[   92.418764][ T1249] loop0: detected capacity change from 0 to 512
[   92.457683][ T1178] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   92.468070][ T1178] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2
[   92.477082][ T1178] usb 4-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00
[   92.483819][ T1249] EXT4-fs (loop0): Ignoring removed nobh option
[   92.487123][ T1178] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   92.509969][ T1249] EXT4-fs (loop0): mounted filesystem without journal. Opts: block_validity,usrquota,nobh,,errors=continue. Quota mode: writeback.
[   92.524187][ T1249] ext4 filesystem being mounted at /61/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   92.538291][ T1178] usb 4-1: Found UVC 0.00 device <unnamed> (046d:0825)
[   92.544475][ T1249] netlink: 532 bytes leftover after parsing attributes in process `syz.0.244'.
[   92.617632][  T324] usb 2-1: device descriptor read/64, error -71
[   92.641671][ T1255] netlink: 320 bytes leftover after parsing attributes in process `syz.5.246'.
[   92.747747][ T1178] usb 4-1: Failed to query (GET_INFO) UVC control 1 on unit 1: -71 (exp. 1).
[   92.768398][ T1178] usb 4-1: Failed to query (GET_INFO) UVC control 2 on unit 1: -71 (exp. 1).
[   92.797774][ T1178] usb 4-1: Failed to query (GET_INFO) UVC control 5 on unit 1: -71 (exp. 1).
[   92.806774][ T1178] usb 4-1: No streaming interface found for terminal 2.
[   92.826864][ T1178] usb 4-1: USB disconnect, device number 8
[   92.917675][  T290] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[   92.953345][ T1261] netlink: 320 bytes leftover after parsing attributes in process `syz.5.248'.
[   93.007640][  T324] usb 2-1: device descriptor read/64, error -71
[   93.127830][  T324] usb usb2-port1: attempt power cycle
[   93.187630][  T290] usb 1-1: device descriptor read/64, error -71
[   93.259173][ T1265] loop5: detected capacity change from 0 to 512
[   93.275218][ T1265] EXT4-fs (loop5): can't mount with data=, fs mounted w/o journal
[   93.293661][ T1270] 9pnet: Insufficient options for proto=fd
[   93.303027][ T1270] loop3: detected capacity change from 0 to 1024
[   93.354575][ T1265] loop5: detected capacity change from 0 to 256
[   93.363278][ T1265] exfat: Unknown parameter 'nodiscard'
[   93.396891][ T1278] netlink: 320 bytes leftover after parsing attributes in process `syz.3.255'.
[   93.449332][ T1280] 9pnet: Insufficient options for proto=fd
[   93.467476][ T1280] loop5: detected capacity change from 0 to 1024
[   93.557899][  T324] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[   93.597667][  T290] usb 1-1: device descriptor read/64, error -71
[   93.676235][ T1288] netlink: 320 bytes leftover after parsing attributes in process `syz.3.258'.
[   93.727913][  T324] usb 2-1: device descriptor read/8, error -71
[   93.877800][  T290] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[   94.090235][  T324] usb 2-1: device descriptor read/8, error -71
[   94.112200][ T1318] netlink: 'syz.1.268': attribute type 30 has an invalid length.
[   94.124218][ T1318] ==================================================================
[   94.132344][ T1318] BUG: KASAN: use-after-free in unaccount_page_cache_page+0x6f1/0x760
[   94.140527][ T1318] Read of size 4 at addr ffff8881372f5470 by task syz.1.268/1318
[   94.148279][ T1318] 
[   94.150619][ T1318] CPU: 0 PID: 1318 Comm: syz.1.268 Not tainted syzkaller #0
[   94.157927][ T1318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[   94.168090][ T1318] Call Trace:
[   94.171412][ T1318]  <TASK>
[   94.174372][ T1318]  __dump_stack+0x21/0x30
[   94.178745][ T1318]  dump_stack_lvl+0x110/0x170
[   94.183461][ T1318]  ? show_regs_print_info+0x20/0x20
[   94.188683][ T1318]  ? load_image+0x3f0/0x3f0
[   94.193209][ T1318]  print_address_description+0x7f/0x2c0
[   94.198772][ T1318]  ? unaccount_page_cache_page+0x6f1/0x760
[   94.204591][ T1318]  kasan_report+0x10f/0x150
[   94.209133][ T1318]  ? unaccount_page_cache_page+0x6f1/0x760
[   94.215039][ T1318]  __asan_report_load4_noabort+0x14/0x20
[   94.220687][ T1318]  unaccount_page_cache_page+0x6f1/0x760
[   94.226331][ T1318]  __delete_from_page_cache+0xbe/0x470
[   94.231816][ T1318]  ? __bpf_trace_file_check_and_advance_wb_err+0x30/0x30
[   94.238941][ T1318]  ? __kasan_check_write+0x14/0x20
[   94.244088][ T1318]  ? __kasan_check_read+0x11/0x20
[   94.249130][ T1318]  ? workingset_eviction+0x402/0x9f0
[   94.254431][ T1318]  __remove_mapping+0x601/0x990
[   94.259302][ T1318]  ? jbd2_journal_try_to_free_buffers+0x2c8/0x300
[   94.265728][ T1318]  ? remove_mapping+0xa0/0xa0
[   94.270417][ T1318]  ? __kasan_check_read+0x11/0x20
[   94.275456][ T1318]  shrink_page_list+0x2a24/0x5800
[   94.280513][ T1318]  ? shrink_page_list+0x8e1/0x5800
[   94.285643][ T1318]  ? reclaim_clean_pages_from_list+0x7e0/0x7e0
[   94.291912][ T1318]  ? __this_cpu_preempt_check+0x13/0x20
[   94.297474][ T1318]  ? __mod_zone_page_state+0x8e/0xd0
[   94.302773][ T1318]  ? isolate_lru_pages+0xff1/0x11f0
[   94.307986][ T1318]  ? should_run_aging+0x410/0x410
[   94.313126][ T1318]  ? cgroup_rstat_updated+0x80/0x360
[   94.318423][ T1318]  ? _raw_spin_lock_irq+0x95/0xf0
[   94.323482][ T1318]  ? __this_cpu_preempt_check+0x13/0x20
[   94.329041][ T1318]  ? __count_memcg_events+0xad/0x120
[   94.335123][ T1318]  shrink_lruvec+0x11eb/0x3b00
[   94.339938][ T1318]  ? down_read_trylock+0x317/0x630
[   94.345069][ T1318]  ? mem_cgroup_shrink_node+0x550/0x550
[   94.350644][ T1318]  ? shrink_slab+0x91b/0x9d0
[   94.355275][ T1318]  ? __kasan_check_write+0x14/0x20
[   94.360400][ T1318]  ? _raw_spin_lock+0x94/0xf0
[   94.365092][ T1318]  ? cgroup_rstat_flush_locked+0xa29/0xa70
[   94.370909][ T1318]  ? inactive_is_low+0x160/0x2f0
[   94.375862][ T1318]  ? css_next_descendant_pre+0x1e1/0x210
[   94.381508][ T1318]  ? mem_cgroup_iter+0x465/0x6c0
[   94.386755][ T1318]  shrink_node+0x11ee/0x2a40
[   94.391384][ T1318]  ? allow_direct_reclaim+0x370/0x370
[   94.396773][ T1318]  do_try_to_free_pages+0x5a7/0x1580
[   94.402096][ T1318]  ? try_to_free_pages+0x1010/0x1010
[   94.407421][ T1318]  ? __queue_work+0x903/0xc60
[   94.412116][ T1318]  try_to_free_mem_cgroup_pages+0x261/0x610
[   94.418023][ T1318]  ? shrink_lruvec+0x3b00/0x3b00
[   94.422995][ T1318]  ? mutex_unlock+0x8f/0x230
[   94.427609][ T1318]  ? __kasan_check_read+0x11/0x20
[   94.432652][ T1318]  ? page_counter_set_max+0x65/0x140
[   94.437953][ T1318]  mem_cgroup_resize_max+0x309/0x3e0
[   94.443248][ T1318]  mem_cgroup_write+0x1ed/0x230
[   94.448263][ T1318]  ? mem_cgroup_reset+0x130/0x130
[   94.453322][ T1318]  ? __kasan_check_write+0x14/0x20
[   94.458457][ T1318]  ? _copy_from_iter+0x4a4/0x10a0
[   94.463501][ T1318]  ? mem_cgroup_reset+0x130/0x130
[   94.468542][ T1318]  cgroup_file_write+0x294/0x560
[   94.473493][ T1318]  ? cgroup_seqfile_stop+0xc0/0xc0
[   94.478618][ T1318]  ? mutex_lock+0x9b/0x1c0
[   94.483076][ T1318]  ? wait_for_completion_killable_timeout+0x10/0x10
[   94.489689][ T1318]  ? __kasan_check_write+0x14/0x20
[   94.494811][ T1318]  ? cgroup_seqfile_stop+0xc0/0xc0
[   94.499937][ T1318]  kernfs_fop_write_iter+0x2bd/0x400
[   94.505246][ T1318]  ? rw_verify_area+0xa7/0x1c0
[   94.510030][ T1318]  aio_write+0x502/0x700
[   94.514285][ T1318]  ? aio_read+0x490/0x490
[   94.518632][ T1318]  ? __kasan_check_write+0x14/0x20
[   94.523877][ T1318]  io_submit_one+0x71b/0x1900
[   94.528621][ T1318]  ? irqentry_exit+0x37/0x40
[   94.533352][ T1318]  ? lookup_ioctx+0x2b0/0x2b0
[   94.538140][ T1318]  ? asm_exc_page_fault+0x27/0x30
[   94.543273][ T1318]  ? __get_user_4+0x1c/0x30
[   94.551667][ T1318]  ? blk_start_plug+0x5a/0x170
[   94.557094][ T1318]  __se_sys_io_submit+0x17b/0x3d0
[   94.564202][ T1318]  ? __x64_sys_io_submit+0x90/0x90
[   94.569357][ T1318]  ? __kasan_check_write+0x14/0x20
[   94.574853][ T1318]  ? switch_fpu_return+0x15d/0x2c0
[   94.580342][ T1318]  __x64_sys_io_submit+0x7b/0x90
[   94.585551][ T1318]  x64_sys_call+0x140/0x9a0
[   94.590528][ T1318]  do_syscall_64+0x4c/0xa0
[   94.595682][ T1318]  ? clear_bhb_loop+0x50/0xa0
[   94.600397][ T1318]  ? clear_bhb_loop+0x50/0xa0
[   94.605276][ T1318]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   94.611189][ T1318] RIP: 0033:0x7f68405b3b19
[   94.615630][ T1318] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   94.635350][ T1318] RSP: 002b:00007f683f00b028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1
[   94.643877][ T1318] RAX: ffffffffffffffda RBX: 00007f6840839fa0 RCX: 00007f68405b3b19
[   94.651867][ T1318] RDX: 0000200000000140 RSI: 00000000000000fe RDI: 00007f683efda000
[   94.659853][ T1318] RBP: 00007f684064baf8 R08: 0000000000000000 R09: 0000000000000000
[   94.667836][ T1318] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   94.675816][ T1318] R13: 00007f684083a038 R14: 00007f6840839fa0 R15: 00007ffc1f6782a8
[   94.683802][ T1318]  </TASK>
[   94.686838][ T1318] 
[   94.689171][ T1318] Allocated by task 1136:
[   94.693503][ T1318]  __kasan_kmalloc+0xd4/0x100
[   94.698205][ T1318]  kmem_cache_alloc_trace+0x119/0x270
[   94.703613][ T1318]  alloc_super+0x5e/0x840
[   94.707968][ T1318]  sget+0x1e2/0x4c0
[   94.711812][ T1318]  mount_bdev+0xec/0x3c0
[   94.716072][ T1318]  f2fs_mount+0x34/0x40
[   94.720239][ T1318]  legacy_get_tree+0xed/0x190
[   94.724929][ T1318]  vfs_get_tree+0x89/0x260
[   94.729364][ T1318]  do_new_mount+0x251/0xb40
[   94.733882][ T1318]  path_mount+0x640/0xff0
[   94.738224][ T1318]  __se_sys_mount+0x320/0x390
[   94.742920][ T1318]  __x64_sys_mount+0xbf/0xd0
[   94.747604][ T1318]  x64_sys_call+0x6bf/0x9a0
[   94.752117][ T1318]  do_syscall_64+0x4c/0xa0
[   94.756544][ T1318]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   94.762554][ T1318] 
[   94.764899][ T1318] Freed by task 503:
[   94.768818][ T1318]  kasan_set_track+0x4a/0x70
[   94.773443][ T1318]  kasan_set_free_info+0x23/0x40
[   94.778398][ T1318]  ____kasan_slab_free+0x125/0x160
[   94.783526][ T1318]  __kasan_slab_free+0x11/0x20
[   94.788297][ T1318]  slab_free_freelist_hook+0xc2/0x190
[   94.793703][ T1318]  kfree+0xc4/0x270
[   94.797522][ T1318]  destroy_super_work+0x40/0x50
[   94.802388][ T1318]  process_one_work+0x6c8/0xbb0
[   94.807252][ T1318]  worker_thread+0xaa0/0x1250
[   94.811939][ T1318]  kthread+0x3f5/0x4f0
[   94.816027][ T1318]  ret_from_fork+0x1f/0x30
[   94.820565][ T1318] 
[   94.822896][ T1318] Last potentially related work creation:
[   94.828700][ T1318]  kasan_save_stack+0x3a/0x60
[   94.833392][ T1318]  __kasan_record_aux_stack+0xd2/0x100
[   94.838869][ T1318]  kasan_record_aux_stack_noalloc+0xb/0x10
[   94.844815][ T1318]  insert_work+0x51/0x310
[   94.849161][ T1318]  __queue_work+0x8e1/0xc60
[   94.853697][ T1318]  queue_work_on+0xde/0x150
[   94.858214][ T1318]  destroy_super_rcu+0xd1/0xe0
[   94.862985][ T1318]  rcu_do_batch+0x4c1/0xbf0
[   94.867496][ T1318]  rcu_core+0x4a3/0xef0
[   94.871664][ T1318]  rcu_core_si+0x9/0x10
[   94.875826][ T1318]  handle_softirqs+0x250/0x560
[   94.880599][ T1318]  run_ksoftirqd+0x28/0x40
[   94.885034][ T1318]  smpboot_thread_fn+0x446/0x880
[   94.890067][ T1318]  kthread+0x3f5/0x4f0
[   94.894147][ T1318]  ret_from_fork+0x1f/0x30
[   94.898578][ T1318] 
[   94.900904][ T1318] Second to last potentially related work creation:
[   94.907494][ T1318]  kasan_save_stack+0x3a/0x60
[   94.912180][ T1318]  __kasan_record_aux_stack+0xd2/0x100
[   94.917652][ T1318]  kasan_record_aux_stack_noalloc+0xb/0x10
[   94.923469][ T1318]  call_rcu+0x10b/0xf60
[   94.927637][ T1318]  __put_super+0x26b/0x2d0
[   94.932065][ T1318]  deactivate_locked_super+0xd4/0x100
[   94.937447][ T1318]  mount_bdev+0x2ab/0x3c0
[   94.942226][ T1318]  f2fs_mount+0x34/0x40
[   94.946479][ T1318]  legacy_get_tree+0xed/0x190
[   94.951182][ T1318]  vfs_get_tree+0x89/0x260
[   94.955613][ T1318]  do_new_mount+0x251/0xb40
[   94.960127][ T1318]  path_mount+0x640/0xff0
[   94.964726][ T1318]  __se_sys_mount+0x320/0x390
[   94.969607][ T1318]  __x64_sys_mount+0xbf/0xd0
[   94.974236][ T1318]  x64_sys_call+0x6bf/0x9a0
[   94.978766][ T1318]  do_syscall_64+0x4c/0xa0
[   94.983210][ T1318]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   94.989129][ T1318] 
[   94.991473][ T1318] The buggy address belongs to the object at ffff8881372f5000
[   94.991473][ T1318]  which belongs to the cache kmalloc-2k of size 2048
[   95.005543][ T1318] The buggy address is located 1136 bytes inside of
[   95.005543][ T1318]  2048-byte region [ffff8881372f5000, ffff8881372f5800)
[   95.019006][ T1318] The buggy address belongs to the page:
[   95.024670][ T1318] page:ffffea0004dcbc00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1372f0
[   95.034924][ T1318] head:ffffea0004dcbc00 order:3 compound_mapcount:0 compound_pincount:0
[   95.043262][ T1318] flags: 0x4000000000010200(slab|head|zone=1)
[   95.049378][ T1318] raw: 4000000000010200 0000000000000000 dead000000000122 ffff888100043200
[   95.057985][ T1318] raw: 0000000000000000 0000000000080008 00000001ffffffff 0000000000000000
[   95.066583][ T1318] page dumped because: kasan: bad access detected
[   95.073013][ T1318] page_owner tracks the page as allocated
[   95.078741][ T1318] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 286, ts 88994447839, free_ts 88823320774
[   95.099170][ T1318]  post_alloc_hook+0x192/0x1b0
[   95.104067][ T1318]  prep_new_page+0x1c/0x110
[   95.108592][ T1318]  get_page_from_freelist+0x2d42/0x2dd0
[   95.114159][ T1318]  __alloc_pages+0x1a2/0x460
[   95.119023][ T1318]  new_slab+0xa0/0x4d0
[   95.123115][ T1318]  ___slab_alloc+0x3ac/0x840
[   95.127746][ T1318]  __slab_alloc+0x49/0x90
[   95.132100][ T1318]  __kmalloc+0x16a/0x2c0
[   95.136449][ T1318]  kvmalloc_node+0x211/0x320
[   95.141058][ T1318]  xt_alloc_table_info+0x3b/0xa0
[   95.146013][ T1318]  do_ip6t_set_ctl+0x865/0xd80
[   95.150799][ T1318]  nf_setsockopt+0x272/0x2a0
[   95.155405][ T1318]  ipv6_setsockopt+0x258f/0x3750
[   95.160365][ T1318]  tcp_setsockopt+0x22b/0x1e90
[   95.165154][ T1318]  sock_common_setsockopt+0xa0/0xb0
[   95.170370][ T1318]  __sys_setsockopt+0x2e9/0x470
[   95.175244][ T1318] page last free stack trace:
[   95.179934][ T1318]  free_unref_page_prepare+0x5fa/0x600
[   95.185413][ T1318]  free_unref_page+0xae/0x540
[   95.190115][ T1318]  __free_pages+0x6c/0x100
[   95.194551][ T1318]  __free_slab+0xe5/0x1e0
[   95.198898][ T1318]  __unfreeze_partials+0x15a/0x190
[   95.204032][ T1318]  put_cpu_partial+0xc6/0x120
[   95.208738][ T1318]  __slab_free+0x1d4/0x290
[   95.213172][ T1318]  ___cache_free+0x104/0x120
[   95.217795][ T1318]  qlink_free+0x4d/0x90
[   95.221992][ T1318]  qlist_free_all+0x5f/0xb0
[   95.226514][ T1318]  kasan_quarantine_reduce+0x14a/0x170
[   95.231993][ T1318]  __kasan_slab_alloc+0x2f/0xe0
[   95.236863][ T1318]  slab_post_alloc_hook+0x4f/0x2b0
[   95.241996][ T1318]  kmem_cache_alloc+0xf7/0x260
[   95.246780][ T1318]  getname_flags+0xba/0x510
[   95.251313][ T1318]  user_path_at_empty+0x2f/0x1c0
[   95.256269][ T1318] 
[   95.258630][ T1318] Memory state around the buggy address:
[   95.264277][ T1318]  ffff8881372f5300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   95.272356][ T1318]  ffff8881372f5380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   95.280441][ T1318] >ffff8881372f5400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   95.288516][ T1318]                                                              ^
[   95.296242][ T1318]  ffff8881372f5480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   95.304357][ T1318]  ffff8881372f5500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   95.312447][ T1318] ==================================================================
[   95.320700][ T1318] Disabling lock debugging due to kernel taint
[   95.393382][ T1320] loop3: detected capacity change from 0 to 256
[   95.400881][  T290] usb 1-1: device descriptor read/64, error -71
[   95.577631][   T30] kauditd_printk_skb: 4 callbacks suppressed
[   95.577654][   T30] audit: type=1400 audit(1794192848.579:516): avc:  denied  { getopt } for  pid=1311 comm="syz.3.265" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   95.859260][ T1318] syz.1.268 (1318) used greatest stack depth: 20712 bytes left