last executing test programs:

36.322246024s ago: executing program 2 (id=750):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='veth1_virt_wifi\x00', 0x10)
socket$packet(0x11, 0x3, 0x300) (async)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000140)={0x1, 0x6}, 0x4)
setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x28, 0x1, 0xd, 0xfffff024}, {0x6, 0x0, 0x2, 0xffffffff}]}, 0x10)
dup(r0) (async)
r2 = dup(r0)
sendmsg$inet(r2, &(0x7f0000000780)={&(0x7f0000000280)={0x2, 0x0, @private=0xa010100}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000dc0)="bbff", 0x2}], 0x1}, 0x20000840)

36.321757964s ago: executing program 2 (id=751):
mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000008300), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYRESHEX=r0, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESHEX=0x0])
utime(&(0x7f00000000c0)='./file0\x00', 0x0)
syz_fuse_handle_req(r0, &(0x7f00000021c0), 0x2000, &(0x7f00000041c0)={&(0x7f00000001c0)={0x50, 0x0, 0x0, {0x7, 0x29, 0x211, 0x2100039, 0x0, 0x0, 0x1, 0x59, 0x0, 0x0, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(r0, &(0x7f0000004300)="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", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x78, 0x0, 0x100000000, {0x7, 0x10001, 0x0, {0x5, 0xfffffffffffffffd, 0x200000006, 0x2000000000006b, 0x7, 0x16729df3, 0x3, 0xfffff2e0, 0x101, 0xa000, 0xfffffffe, 0x0, 0x0, 0x4, 0xa7}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
removexattr(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)=@known='system.sockprotoname\x00')
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000600)={&(0x7f0000000940)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="000225bd7000fcdbdf25150000000c009900ff030000580000000a001a00ffffffffffff00000a001a00ffffffffffff00008c4bca99dcbc4cad8e3fe1b3c02a6e23007e9527f3487d1883f0f1"], 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004000)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b"], 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x5, &(0x7f0000000a40)=ANY=[@ANYBLOB="18ab9a70331163272af6000000001009000000c5d435c70000850000002300000095"], &(0x7f0000000200)='GPL\x00', 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfffffc54)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000002c0)="b9ff03076003008cb89e08f086dd", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000001600)={&(0x7f0000000340)="d8aa188d863b33f9", 0x0, 0x0, 0x0}, 0x38)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x400000, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x0, 0x0, 0xd, 0x3}, @ptr, @volatile={0x0, 0x0, 0x0, 0x9, 0x3}]}}, 0x0, 0x3e}, 0x28)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
unshare(0x2020600)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240))
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x3000046, &(0x7f0000000240)={[{@delalloc}, {@errors_remount}, {@barrier_val={'barrier', 0x3d, 0x5}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4005b1}}, {@oldalloc}, {@grpquota}, {@nobh}, {@noacl}, {@min_batch_time={'min_batch_time', 0x3d, 0x800}}, {@inlinecrypt}]}, 0x1, 0x553, &(0x7f0000000380)="$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")
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xa, 0x7, 0x2, 0x9, 0x42}, 0x50)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r4, <r5=>0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)='%-010d \x00'}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000002c0)={r5, &(0x7f0000000240), 0x0}, 0x20)
ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x2)

36.130778595s ago: executing program 2 (id=754):
r0 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00')
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0)
read$FUSE(r1, &(0x7f0000000200)={0x2020}, 0x2020)
mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', &(0x7f0000000180)='devtmpfs\x00', 0x2200892, 0x0)
openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000540)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x80)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0)
mlock(&(0x7f0000626000/0x5000)=nil, 0x5000)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x7, &(0x7f0000000040)=0x45, 0x4)
pread64(r0, &(0x7f0000002240)=""/237, 0xed, 0x4eb)

35.36727777s ago: executing program 2 (id=757):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xf, 0x5, &(0x7f0000000040)=@framed={{0x25, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x4}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000), 0x4)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @empty}, 0x10)
sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x1c)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x0, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$eJzs3c9rXNUeAPDvnSRNm/a95MGD9+oqIGigdGJqbBVcVFyIYKGga9thMg01k0zJTEoTAlpEcCOouBB007U/6s6tP7b6X7gQS9W0WHEhkTu5t502M2mSJpnqfD5wM+fceyfnfOf+OGfmHu4NoGeNpn8KEYcj4t0kYjibn0TEQDPVH3Fybb1bK8vldEpidfXlX5LmOjdXlsvR8p7UwSzz/4j45q2II4X15dYXl2ZK1WplPsuPN2YvjNcXl46eny1NV6Yrc8cnJiePnXjqxPGdi/W375cOXXvvhcc/P/nHm/+7+s63SZyMQ9my1jh2ymiMZp/JQPoR3uX5nS6sy5JuV4BtSQ/NvrWjPA7HcPQ1UwDAP9nrEbEKAPSYRPsPAD0m/x3g5spyOZ+6+4vE3rr+XETsX4s/v765tqQ/u2a3v3kddOhmcteVkSQiRnag/NGI+PjLVz9Np9il65AA7bxxOSLOjoyuP/8n68YsbNUTGyzbl72O3jPf+Q/2zldp/+fpdv2/wu3+T7Tp/wy2OXa3477H/4EdKGQDaf/v2Zaxbbda4s+M9GW5fzX7fAPJufPVSnpu+3dEjMXAYJqf2KCMsRt/3ui0rLX/9+v7r32Slp++3lmj8FP/4N3vmSo1Sg8Sc6vrlyMe6W8Xf3J7+ycd+r+nN1nGi8+8/VGnZWn8abz5tD7+yEYn7Y7VKxGPtd3+d0a0JRuOTxxv7g7j+U7Rxhc/fDjUqfzW7Z9Oafn5d4G9kG7/oY3jH0lax2vWt17Gd1eGv+607P7xt9//9yWvNNN5P+JSqdGYn4jYl7y0fv6xO+/N8/n6afxjj7Y//jfa/9PvhGc3GX//tZ8/2378uyuNf2pL23/riau3Zvo6lb+57T/ZTI1lczZz/ttsBR/kswMAAAAAAAAAAAAAAAAAAAAAAACAzSpExKFICsXb6UKhWFx7hvd/Y6hQrdUbR87VFuamovms7JEYKOS3uhxuuR/qRHY//Dx/7J78kxHxn4j4YPBAkt9HcarLsQMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA7mCH5/+nfhzsdu0AgF2zv9sVAAD2nPYfAHqP9h8Aeo/2HwB6j/YfAHqP9h8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBddvrUqXRa/X1luZzmpy4uLszULh6dqtRnirML5WK5Nn+hOF2rTVcrxXJt9n7/r1qrXZiMuYVL441KvTFeX1w6M1tbmGucOT9bmq6cqQzsSVQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsDX1xaWZUrVamZfYRmL14ahG9xN92e70sNRnTxPJw1GNHU50+cQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8DfxVwAAAP//02Ii/w==")
r4 = inotify_init()
inotify_add_watch(r4, &(0x7f0000000000)='.\x00', 0x400017e)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000280)='./bus\x00', &(0x7f0000000140), 0x8, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]})
ptrace$ARCH_GET_MAX_TAG_BITS(0x1e, r0, &(0x7f00000000c0), 0x4003)

34.537929098s ago: executing program 2 (id=761):
syz_mount_image$erofs(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x1000801, &(0x7f0000000080)=ANY=[], 0x2, 0x232, &(0x7f0000000500)="$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")
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
ioctl$KVM_TRANSLATE(r2, 0xc018ae85, 0x0)
r3 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x112)
getdents(r3, 0x0, 0x0)

34.378787377s ago: executing program 2 (id=763):
r0 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00')
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0)
read$FUSE(r1, &(0x7f0000000200)={0x2020}, 0x2020)
mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', &(0x7f0000000180)='devtmpfs\x00', 0x2200892, 0x0)
openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000540)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x80)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0)
mlock(&(0x7f0000626000/0x5000)=nil, 0x5000)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x7, &(0x7f0000000040)=0x45, 0x4)
pread64(r0, &(0x7f0000002240)=""/237, 0xed, 0x4eb)

34.378478437s ago: executing program 32 (id=763):
r0 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00')
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0)
read$FUSE(r1, &(0x7f0000000200)={0x2020}, 0x2020)
mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', &(0x7f0000000180)='devtmpfs\x00', 0x2200892, 0x0)
openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000540)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x80)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0)
mlock(&(0x7f0000626000/0x5000)=nil, 0x5000)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x7, &(0x7f0000000040)=0x45, 0x4)
pread64(r0, &(0x7f0000002240)=""/237, 0xed, 0x4eb)

8.511098294s ago: executing program 3 (id=907):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x8000000000002)
sched_setscheduler(r0, 0x2, &(0x7f0000000240)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
keyctl$clear(0x3, 0xfffffffffffffffd)
r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000280), 0x4)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1b, 0x0, 0x0, 0x8000, 0x49001, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @value=r4}, 0x50)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x80)
syz_emit_ethernet(0x32, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x88, 0x0, @empty, @multicast1}, {0x0, 0x2, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0xc}}}}}}}, 0x0)
r7 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_STRSET_GET(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)={0x20, r7, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x8, 0x2, 0x0, 0x1, [{0x4}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x40080}, 0x4800)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x10, &(0x7f0000000040)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffff8000}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r9 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'vlan1\x00', <r10=>0x0})
sendmsg$nl_route(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=ANY=[@ANYBLOB="b80000001000030400"/20, @ANYRES32=r10, @ANYBLOB="95020000000000009000128009000100766c616e00000000800002801c0003800c00010000000000050000000c000100"], 0xb8}, 0x1, 0xba01}, 0x0)
copy_file_range(r3, &(0x7f00000000c0)=0x8, r9, &(0x7f0000000100)=0x329d, 0x2, 0x0)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r8}, 0xc)

8.297388307s ago: executing program 0 (id=909):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]})
setreuid(0xee01, 0xee01)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000071120f00000000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x20}, 0x80)

8.231161511s ago: executing program 0 (id=910):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'bridge0\x00', <r2=>0x0})
r3 = socket$inet6(0xa, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r4 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf0667000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
connect$inet6(r3, &(0x7f0000000200)={0xa, 0x4e24, 0x0, @empty}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0xf401)
sendmsg$nl_route(r0, &(0x7f0000002c80)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="300000001c000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="40003a000a000200ff"], 0x30}}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
lremovexattr(&(0x7f00000043c0)='./file0\x00', &(0x7f0000004400)=@known='system.posix_acl_default\x00')
ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r0, 0x4002f516, &(0x7f0000000040)={0x9, 0x1})
syz_usb_connect$cdc_ecm(0x1, 0x56, &(0x7f0000000280)=ANY=[@ANYBLOB="12010102020000082505a1a4400001020301090244000101812002090400c3020206000305240600000524541c9f3d4ab4b2342a9f8d6d74fa0005000d240f0122d400000700ff7f0309058103080004ff14090582024000f805f2090503020800641d08db19a32a6563c06b517057ff0bf463424f5d2cc067653dee047021c41222382095eb114532f5c0c8ed19eaac1f5c61dd96805e306ecdc7f1a8c09ccdc54799c4e3c466ac6efcfa09caaf139f9c988844c7b637c47a709c980ccb88820db6b647552a32b06e2b433b1878527ee9eedd9955e9351baa9d1ebaf2f95b474486a5f2a39d70ea53e383ae00d0469b64f65f37da7bab6cff870bbddefb97bc24fe08124b0732066b13aac4ad7a0c4a34d6803160f225b6f06c7a2da92570b733a54340e94da2dc77b0ac730d5d1425c30216d49a27b3220c58b6dbac6aba872a4fde8735d289cfea53887a72846bb2a0b4d4642b82639c"], &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x0, 0x0}, {0x0, 0x0}]})
newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100), 0x6000)

7.647102964s ago: executing program 3 (id=913):
syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000300)='./file0\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="61636c2c757365725f78617474722c6e6f61636c2c63616368655f73747261746567793d64697361626c65642c6e6f757365725f78617474722c6e6f61636c2c00d4a87b439fa421753f060fe37a330d2dfca47c4e52e78d71fc65b972e2bb306bb4a29b1fe3019842462c5fee84a2e6eb90d57b8725e3a2eff0b0b471dac5c01bee53cd8d"], 0x0, 0x181, &(0x7f0000000800)="$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")
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0)
syz_mount_image$erofs(&(0x7f0000000140), &(0x7f0000000040)='./file1\x00', 0x4000, &(0x7f00000000c0)=ANY=[], 0x1, 0x1ea, &(0x7f0000000480)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101940, 0x0)
read$FUSE(r0, &(0x7f0000008200)={0x2020}, 0x170d)
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x1400c, &(0x7f0000000680)={[{@test_dummy_encryption}, {@init_itable}, {@noload}]}, 0x3, 0x470, &(0x7f0000000dc0)="$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")
chdir(&(0x7f0000000140)='./bus\x00')
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0)
fdatasync(r1)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x37, &(0x7f00000002c0)=@dstopts={0x2f}, 0x8)
r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$FS_IOC_GETFSLABEL(r2, 0x81009431, &(0x7f0000000340))

6.640301663s ago: executing program 3 (id=914):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000480), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010700000000000000002e000000080001007063690011000200303030303a30303a31302e30000000000c00030001000000"], 0x38}}, 0x20000804)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f00000001c0), 0x1, 0x4bc, &(0x7f0000000a40)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000080)=ANY=[@ANYRESHEX=r5, @ANYRES16=r5, @ANYRESDEC=r3], 0x0, 0x9}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0xce56fe61a68fc369, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000040)={'batadv_slave_1\x00', {0x2, 0x4e21, @remote}})
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d0000009500000000000000c64a70a7efb5663e09c64c94569b6989922e612e4ebce14523ff0a137101741da8dfa203bd86070e8018425971ff4e3a4830716bc7467dcde515a8abac25ac730a5bd80e474e964a269f78a259e1d60c36ecc12c014a7c55d00963871760cc0ed9c9339218808fda8bc9c48ad17bcc641924f58a1eebe542f256"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = socket$key(0xf, 0x3, 0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)=ANY=[@ANYBLOB="04010000100007000000000000000000ff020000000000000000000002000001e00000020000000000000000000000004e200000000000000000000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000fc00000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000001000000000feffffffffffffff0951000001000000090000000000000000000000000000000000200000000000070000000000000000000000000000000000040000000000e80a000000000000000000000a000200700000000000100014000e"], 0x104}}, 0x0)
mkdir(&(0x7f00000002c0)='./file0\x00', 0x8)
r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="269eed99e12dde0f19b36c17e1044a0822f01599513e661be9151f2e6385ca48f3b5dd40743a61e351ae2cbbb22266925a50ae38f27c15e890ea4e02fc179d45f2ca99d7bf833a53cc9da4f388755255d65cd94796b4be57de3319ddbcd7740ac5ca37949806db056a53c45d2cc32a", @ANYRESOCT=r8, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYRES32, @ANYRES32=r6])
read$FUSE(r8, &(0x7f000000e280)={0x2020}, 0x2020)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x7, [@struct={0x4, 0x0, 0x0, 0x4, 0x1, 0xfffffffd}]}, {0x0, [0x61, 0x0, 0x30, 0x2e, 0x5f]}}, 0x0, 0x2b}, 0x28)

6.339501151s ago: executing program 1 (id=916):
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x37, [0xfffffff8, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x4, 0x25cd, 0x1, 0xb4, 0xa, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x1, 0x8, 0xd, 0x4, 0x12a3, 0x6, 0x1, 0x2, 0x6, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x10000, 0x0, 0x91, 0x4, 0x4, 0x16, 0x8, 0x5, 0x401, 0xfffffff5, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0xc66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400080, 0x1, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00060, 0x5, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x1, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x95, 0x7fffffff, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0x2, 0xfffffffe, 0xffff, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x8d3, 0x200006, 0x8, 0x400, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x8000003, 0x5, 0x9, 0x3, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x3e55, 0x5, 0xd3, 0x8, 0x3437, 0x3, 0xd, 0x7, 0x601, 0x101, 0xdd80, 0x60a0, 0x7f, 0x9d26, 0x10000, 0x1, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x8, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x8, 0x5, 0x7f, 0x55, 0x40, 0xff, 0x1005, 0x1, 0x7, 0x1e, 0x9, 0x81, 0x3, 0x9d86, 0xd, 0xfffffff7, 0x8, 0x140f2, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x6, 0x8, 0x14000, 0x1, 0x9]}, 0x45c)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
inotify_add_watch(0xffffffffffffffff, 0x0, 0xa4000021)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'batadv_slave_0\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0x100a, 0x5, 0x80000002, 0x1, 0x4, 0xc, 0xa4, 0x0, 0x7, 0xb69, 0xc1, 0x4, 0x1, 0x6, 0x5, 0x101, 0x1002, 0x9, 0x1, 0x0, 0x800, 0xffffffff, 0x65, 0x6, 0x9, 0x4, 0x7, 0x8, 0x100000, 0x1, 0x40, 0x4, 0x10, 0x2, 0x100, 0x4, 0x1bfc, 0xb, 0x7, 0xbed4, 0x20000008, 0x8000100, 0x7, 0x4, 0x11000, 0x8, 0x5, 0x79b, 0x0, 0x0, 0x2000083, 0x4, 0xa, 0x7, 0xf, 0x101, 0xd7, 0x1fa0860a, 0x7, 0xa8, 0x9, 0x2, 0x180000, 0xf, 0x8b, 0x5, 0x2af, 0x6, 0x5, 0x8, 0x6, 0x9, 0x4, 0x7, 0x4009, 0xfffffffe, 0x4, 0x100002, 0x8, 0x752, 0x0, 0x3, 0x0, 0x10001, 0xe, 0xfffffffd, 0x765, 0x6, 0x5, 0x7ffffffe, 0xfdfffffc, 0x2, 0x2, 0x84, 0x100, 0x7, 0x252, 0x81, 0x5d102cf2, 0x5, 0x20006, 0x5, 0x1, 0xb, 0x0, 0xd9a, 0x3ff, 0x29f, 0xfffffffd, 0x3, 0x2, 0x5, 0xd4, 0x4000000, 0x4, 0x2, 0x40, 0x8, 0x84, 0x9, 0x100, 0x6, 0x2a9d, 0xfffffffe, 0x8001, 0x1fc, 0xc5c, 0x3ff]}})
poll(&(0x7f0000000000), 0x20000000000000b5, 0x9)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x6, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x4, 0x5, 0x4, 0x8], 0x25000, 0x304})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r5 = dup(r4)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

6.285700454s ago: executing program 1 (id=918):
r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x2}, 0x50)
flistxattr(r0, &(0x7f0000000080)=""/173, 0xad) (async)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@bloom_filter={0x1e, 0xbd54, 0x1000, 0x6d, 0x8896, r0, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x4, 0xb}, 0x50)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000340)={r1, &(0x7f00000001c0)="3954cad5973421b253c17a631bda4bd298999cd3679ba7834da636f25c44760052ea64f4316f20520b430988f38396a43f4d5bdc7dbd6329f4c354c6cf23b070bf50b5d282104befd9873cee3fc417f7cf7dee8b7d1bec35bf09c190991af21ead0b1e00db86a77ad5cbec579ee64b2e37eb5a99017aefda2ac8d67a2c93b56900b4709df2083d0c17f8b27bba952ab295dd9d34ecb25f8a95f6c3e1c34823b688a33a2b958ccf34ba7b04f2bf657cf8585564f2277ba2184f6f18944b1790450c5234be89dc48acceccaa88", &(0x7f00000002c0)=""/121}, 0x20) (async)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$sock_int(r2, 0x1, 0x28, &(0x7f0000000380)=0x3, 0x4) (async)
r3 = openat$selinux_status(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r3, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0xa0, 0x0, 0x800, 0x70bd2a, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x1b}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x1c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x7f}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x7}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1a}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}]}, 0xa0}, 0x1, 0x0, 0x0, 0x1}, 0x8000)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x8982, &(0x7f0000000580)) (async)
syz_clone(0x10004000, &(0x7f00000005c0)="90667bd5223052006e315670be4f52bf861bf5d54d7a859a2bd4f53152c9b0b63b3d113e926d41a161a50e44d11db10ced10d1dc7c04ca7eb65157d37fedb16221691e4662997b66b8e57d7595b1209abe34a1e55c6b0faf78f0db465a37e3f1ab081dff82b8167e2df316af125b83e5438da735c8024fa939d6a0d8340d968c935ade668b7eef46d4360aaf3b1ea0b9c87689052c68eb", 0x97, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="af8d883ba487d441b23a74859513e6793aea2202e621afec419f7ab9bee138a856a855963294e3904d7999be6a4fec780a6f596573df") (async)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000740)={'ip_vti0\x00'}) (async)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000007c0), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'wpan0\x00', <r6=>0x0})
sendmsg$IEEE802154_LLSEC_DEL_DEV(r4, &(0x7f00000008c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x30, r5, 0x2, 0x70bd25, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}]}, 0x30}, 0x1, 0x0, 0x0, 0x810}, 0x8000) (async)
preadv(r3, &(0x7f0000000a00)=[{&(0x7f0000000900)=""/245, 0xf5}], 0x1, 0x5ca, 0x5) (async, rerun: 64)
ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000000a40)={0xffffffffffffffff, 0x2, 0x3, 0x1, 0x7}) (async, rerun: 64)
r7 = syz_genetlink_get_family_id$gtp(&(0x7f0000000ac0), r3)
sendmsg$GTP_CMD_ECHOREQ(r3, &(0x7f0000000c00)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x90, r7, 0x4, 0x70bd2c, 0x25dfdbfc, {}, [@GTPA_MS_ADDR6={0x14, 0xc, @mcast1}, @GTPA_PEER_ADDR6={0x14, 0xb, @local}, @GTPA_FLOW={0x6}, @GTPA_FAMILY={0x5, 0xd, 0x6a}, @GTPA_PEER_ADDR6={0x14, 0xb, @remote}, @GTPA_MS_ADDR6={0x14, 0xc, @private0={0xfc, 0x0, '\x00', 0x1}}, @GTPA_MS_ADDR6={0x14, 0xc, @private2={0xfc, 0x2, '\x00', 0x1}}, @GTPA_MS_ADDRESS={0x8, 0x5, @remote}]}, 0x90}, 0x1, 0x0, 0x0, 0x840}, 0x40000000) (async)
getsockname$packet(r3, &(0x7f0000000d80)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000dc0)=0x14)
bpf$PROG_LOAD(0x5, &(0x7f0000000f00)={0x10, 0x18, &(0x7f0000000c40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@alu={0x7, 0x1, 0xf, 0xb, 0x3, 0x100, 0x8}, @generic={0x1, 0x5, 0x7, 0x6, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x6}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @call={0x85, 0x0, 0x0, 0x65}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000d00)='GPL\x00', 0xe, 0x3a, &(0x7f0000000d40)=""/58, 0x41000, 0x41, '\x00', r8, @fallback=0x13, 0xffffffffffffffff, 0x8, &(0x7f0000000e00)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000000e40)={0x4, 0x4, 0x4, 0x101}, 0x10, 0x0, r3, 0x3, &(0x7f0000000e80)=[r3, r0], &(0x7f0000000ec0)=[{0x1, 0x5, 0x10, 0xc}, {0x2, 0x5, 0xc, 0x8}, {0x0, 0x5, 0xe, 0x2}], 0x10, 0x8}, 0x94) (async)
r9 = syz_genetlink_get_family_id$nbd(&(0x7f0000001000), r4)
sendmsg$NBD_CMD_STATUS(r4, &(0x7f0000001100)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000010c0)={&(0x7f0000001040)={0x70, r9, 0x800, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x8}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xa1}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x100}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x104}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x8}]}, 0x70}, 0x1, 0x0, 0x0, 0x40}, 0x800)
memfd_create(&(0x7f0000001140)='+:&\x00', 0x2)
sendmsg$IEEE802154_ASSOCIATE_RESP(r4, &(0x7f0000001280)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001240)={&(0x7f00000011c0)={0x4c, r5, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xfffe}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0x9}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa0}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0x7}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000}, 0x20000040) (async)
r10 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000012c0), 0x1, 0x0)
write$uinput_user_dev(r3, &(0x7f0000001300)={'syz0\x00', {0xfffc, 0x37, 0x8, 0x8}, 0x53, [0xc, 0x4, 0x1, 0x0, 0x2, 0x7, 0x7, 0x1, 0xe7, 0xc000000, 0x9, 0x3, 0x26c, 0x0, 0x1, 0x253, 0xa, 0x401, 0xca, 0x7, 0x401, 0x80000001, 0x5, 0x9, 0x3, 0x2, 0x1, 0x2, 0x9, 0xfffffbff, 0x2, 0x9, 0x9, 0xec3, 0x4, 0x1, 0x0, 0x3, 0xf, 0x10, 0x95a, 0x0, 0x2, 0x0, 0xfffffffc, 0x8000, 0x2, 0x200, 0x0, 0xc2, 0x1, 0x3, 0x1, 0x2, 0xfffffff9, 0x7, 0x0, 0xe2a, 0x1000, 0x80000001, 0x8, 0x2670, 0x8, 0x3], [0x83ce, 0x5, 0xf0b5, 0x4, 0x4, 0x9, 0x9c7, 0x9, 0x0, 0x600000, 0x8, 0x6, 0x8000, 0x0, 0x4, 0xff, 0x2, 0x0, 0x5, 0xbbc, 0x7, 0xfff, 0x4, 0x8, 0x9, 0xba5, 0x6, 0xf, 0x0, 0x2, 0x6, 0xfffffff8, 0x3, 0x2, 0xfffffff7, 0x0, 0x101, 0x4, 0x5, 0x7, 0x80, 0x8, 0xffffffff, 0x8, 0x80000000, 0x7, 0x8, 0x5, 0x2, 0x81, 0xb, 0x4, 0x3, 0x476, 0x5e1, 0x6, 0x9, 0xfc4, 0x72, 0x6, 0x3, 0x2, 0x1, 0x5], [0xf, 0xe9, 0x2, 0x8, 0x4, 0xe7, 0x10, 0xd1, 0xd, 0x7fffffff, 0x940, 0x6, 0x80, 0xf, 0x3, 0x3, 0x3, 0xe77, 0x7f, 0x7, 0x95c3, 0x90, 0x28000000, 0x5, 0x5, 0x0, 0x2, 0x1000, 0x9, 0x9, 0xffff, 0x7fff, 0x3, 0x114e, 0x4, 0x800, 0xfffff37f, 0x1, 0x7fffffff, 0x1, 0x4, 0x1, 0xf, 0x5e3, 0x2, 0x7ff, 0x4, 0x9, 0x6, 0xf09, 0x80000001, 0x78, 0x1000, 0x1000, 0x7, 0x6f8, 0x0, 0x2, 0x5, 0xe, 0x1, 0x7, 0xa, 0x7], [0x6, 0xfffffff9, 0x6, 0x1, 0x794a, 0x8, 0x8, 0x101, 0xa8c7, 0x7, 0x4, 0x2, 0xb, 0x3, 0xfcbe, 0x100, 0x80, 0x8, 0x7fffffff, 0xfffffff9, 0x5, 0x212, 0x6, 0x5, 0x363f, 0x800, 0x9, 0x6, 0xda, 0xff, 0x4, 0x8, 0xc, 0x33bc, 0x7, 0x1, 0x3, 0x8, 0x4, 0xa, 0xa, 0x6, 0x1, 0x4, 0x0, 0x9, 0x8000, 0x7, 0x8, 0x101, 0xfef, 0x6, 0xfffffffb, 0x2, 0xc6, 0xaf, 0xffffffff, 0x0, 0x6, 0x56, 0x4, 0x5, 0x2, 0x81]}, 0x45c) (async, rerun: 32)
write$input_event(r10, &(0x7f0000001780)={{0x77359400}, 0x14, 0x425, 0xfdf}, 0x18) (rerun: 32)
ioctl$KVM_MEMORY_ENCRYPT_REG_REGION(r3, 0x8010aebb, &(0x7f00000017c0)={0x25000})
writev(r10, &(0x7f0000001880)=[{&(0x7f0000001800)="da38a6bd56d0b7c1d7b5d7539bcd02c560173dba5a027b6d195b5d43e8ed16e1ee7c9b91e8f583b8ba4288dd507490da4acb6456fb3f1756b453f5c379f830f298ea58ca45866eb65becfed26e3d6b93b3db1373987e94d92e0a1973f500fcc4ce51a6b6bd", 0x65}], 0x1)

6.230582187s ago: executing program 1 (id=919):
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYRES64, @ANYRESHEX, @ANYRESHEX, @ANYRES16], 0x50)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x4)
ioctl$KDGETLED(r0, 0x4b31, &(0x7f0000000340))
socket(0x10, 0x2, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f00000005c0)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="700000001000370429bd7000fcdbdf250000c1c618b928bc1270604c00ae6626413651c61ec76df179b8b52d6db9349a7db485560e0a259a07db28f108142c37eeba791599e42f6739b76537427d094cea500fea603caa5198483d10833902", @ANYRES32=r2, @ANYBLOB="890c020000000000500012800b0001006970366772650000400002800400120008000100", @ANYRES32=r2, @ANYBLOB="08000c00ffffffff14000700ff0200000000000000000000000000011400060020010000000000000000000000000001"], 0x70}, 0x1, 0x0, 0x0, 0x20008000}, 0x20000000)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r3, 0x0, 0x0)
setsockopt$bt_BT_RCVMTU(r3, 0x112, 0xd, 0x0, 0x0)
r4 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="0d01000009000008250592d20700006a3b010902241700fa0074980904e4ff11070103000905010200ffe0000009058202"], 0x0)
syz_usb_control_io(r4, 0x0, &(0x7f0000000200)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_connect(0x0, 0x3d, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r5 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24004880}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r6 = getpid()
sched_setaffinity(0x0, 0x4c, &(0x7f00000002c0)=0x2)
sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x6)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0)
syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

6.080808226s ago: executing program 5 (id=920):
r0 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00')
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0)
read$FUSE(r1, &(0x7f0000000200)={0x2020}, 0x2020)
mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', &(0x7f0000000180)='devtmpfs\x00', 0x2200892, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000540)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x80)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0)
mlock(&(0x7f0000626000/0x5000)=nil, 0x5000)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x7, &(0x7f0000000040)=0x45, 0x4)
pread64(r0, &(0x7f0000002240)=""/237, 0xed, 0x4eb)

5.757698344s ago: executing program 3 (id=921):
getpid()
getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@private2, 0x0, 0x2, 0x0, 0x2, 0x4101}, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="540000004800010928bd700018dcdf250a00", @ANYRES32, @ANYBLOB="0000000014000100fe80000000000000000000000000001f14000100fe8000000000000000000000000000bb"], 0x54}}, 0x0)
ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c8, &(0x7f0000000100))
timer_create(0x3, 0x0, &(0x7f0000000300)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000240)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
clock_gettime(0x0, &(0x7f0000000040))
clock_gettime(0x6, &(0x7f0000000380))
clock_gettime(0x0, &(0x7f0000000400)={<r2=>0x0, <r3=>0x0})
timer_settime(r1, 0x0, &(0x7f00000003c0)={{0x0, 0x989680}, {r2, r3+10000000}}, &(0x7f0000000480))
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = socket$inet(0x2, 0x2, 0x1)
setsockopt$inet_opts(r5, 0x0, 0x4, 0x0, 0x0)
sendmsg$inet(r5, &(0x7f0000000040)={&(0x7f00000003c0)={0x2, 0x0, @broadcast}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000340)="08001eb3b0335d00", 0x8}], 0x1, 0x0, 0x0, 0xe0000000}, 0x20008094)
bind$inet6(0xffffffffffffffff, &(0x7f00000004c0)={0xa, 0x4e22, 0x7, @private1, 0x1}, 0x1c)
setsockopt$sock_int(r4, 0x1, 0xa, &(0x7f0000000080)=0x40, 0x4)
connect$inet6(r4, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c)
sendmmsg$inet6(r4, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000680)='a', 0x1}, {&(0x7f0000000540)="98587237994d94ece04c42a553a9ceaa0ef6cb6bf16514a24efe29c40702d8f22218bcac61cb9a8d25ae302afe5aadc14b696e284d550470e1dc11f74bff25a96aa9693165e553e6c55b589ec318e8a5b04c8d39cc7630", 0x57}, {&(0x7f0000000900)="cd805f4c47c4974e8254edd0e94d1b2f6a61fa4c0b1b7d64f6fa448401f992b123469bc1220df276c00ab32340fce4e567fd733dbd2f3acb0edcceba1269a55032a79719cf3fff6f52b7161dc7e56eb6082e37d85c3ad3d482d9f476fc185febae4200038cd9a43dd5bd62d2da1c0e201c18b121a8a3bb7ac64fe10f3ae091cbb94fe1a43d94aa1e0118ec7e726157ac1dac5c2195d23982d10379995233aa37f4d8529e412f2efed3c1c0b26fc723cccf633ca0504568a583410c283f09cd35755e350c45c5c8b938dafafaaaa30b69a6387f95214858f95f", 0xd9}], 0x3}}], 0x1, 0x4000001)
syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000012c0), 0xfe, 0x258, &(0x7f0000000680)="$eJzs3T1oJGUcBvBnZnfvzN0iURtB/AAR0UA4O8HmbBQO5DhEBBVORGyUO+G8w+5iZWOhtcpVNofYGS01TbBRBKuoKWIjaLAwWGgxsjuJ5GMlJrvuhMzvB7PzsfPu/x12nnd2i2ECtNZskrNJOknmkvSSFNt3uK+eZjdXb8wsX0yq6unfiuF+9Xptq93pJAtJHk2yVBZ5tZtcW3x+7Y+VJx9852rvgY8Wn5uZ6kFuWl9bfWrjw/Nvf3rukWvffPfL+SJn099xXJNXjNjWLZLb/49iR0TRbboH/BcX3vzk+0Hu70hy/zD/vZSpv7x3r5xY6uXhD/6t7Xu/fnvXNPsKTF5V9QbXwIUKaJ0yST9FOZ+kXi7L+fn6N/wPnVPla5evvDH3yuWrl15ueqQCJqWfrD7x+cnPTu/K/8+dOv/A8TXI/zMXbv44WN7oNN0bYCrurmeD/M+9eP2hyD+0jvxDO8yO2Cb/cGx8WVXVgRocLv+9Q3QNOGpc/6G95B/aS/7hGNvnr7r8Q3vJP7SX/EN7bc8/ANAu1cmm70AGmtL0+AMAAAAAAAAAAAAAAAAAAOx1Y2b54tY0rZpfvZ+sP56kO6p+Z/g84uSW4eup34vBbv8o6mY7nThY/RfuHaf34/u44buvb/2p2fpf39Ns/euXkoW3kpzpdveef8Xm+Xd4t+3zfu+lMQscULFr/bFnp1t/t79uNlv/3EryxWD8OTNq/Clz53A+evzpT+BpSK//OeYHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDV/BwAA///2QnEl")
syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file2\x00', 0x101)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c})
chdir(&(0x7f0000000140)='./file0\x00')
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0)
syz_usb_connect$cdc_ncm(0x0, 0x94, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000102505a1a44000010203010902820002010000000904000001020d0000052406000105240000000d240f01feffffff000000000006241a0000000c241b070005008e0118000f0524"], 0x0)
ioctl$FS_IOC_RESVSP(r6, 0xc0189436, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x5f, 0x3})
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000440)=0x40)
r7 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)

5.380377586s ago: executing program 0 (id=922):
r0 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00')
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0)
read$FUSE(r1, &(0x7f0000000200)={0x2020}, 0x2020)
mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', &(0x7f0000000180)='devtmpfs\x00', 0x2200892, 0x0)
openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000540)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x80)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x40980, 0x0)
mlock(&(0x7f0000626000/0x5000)=nil, 0x5000)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x7, &(0x7f0000000040)=0x45, 0x4)
pread64(r0, 0x0, 0x0, 0x4eb)

4.542072296s ago: executing program 5 (id=923):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x8000000000002)
sched_setscheduler(r0, 0x2, &(0x7f0000000240)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
keyctl$clear(0x3, 0xfffffffffffffffd)
r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000280), 0x4)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1b, 0x0, 0x0, 0x8000, 0x49001, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @value=r4}, 0x50)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x80)
syz_emit_ethernet(0x32, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x88, 0x0, @empty, @multicast1}, {0x0, 0x2, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0xc}}}}}}}, 0x0)
r7 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_STRSET_GET(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)={0x20, r7, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x8, 0x2, 0x0, 0x1, [{0x4}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x40080}, 0x4800)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x10, &(0x7f0000000040)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffff8000}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r9 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'vlan1\x00', <r10=>0x0})
sendmsg$nl_route(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=ANY=[@ANYBLOB="b80000001000030400"/20, @ANYRES32=r10, @ANYBLOB="95020000000000009000128009000100766c616e00000000800002801c0003800c00010000000000050000000c000100"], 0xb8}, 0x1, 0xba01}, 0x0)
copy_file_range(r3, &(0x7f00000000c0)=0x8, r9, &(0x7f0000000100)=0x329d, 0x2, 0x0)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r8}, 0xc)

4.453120471s ago: executing program 0 (id=925):
capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080))
r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000cc0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f00000002c0)={'ip6gre0\x00', <r2=>0x0, 0x29, 0x5, 0xa8, 0x8000, 0x8, @mcast1, @remote, 0x7, 0x7, 0x80000001, 0x7}})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xc, &(0x7f0000000040)=@framed={{0x18, 0x8}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2}, 0x94)
syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x2000000, &(0x7f0000000380)={[{@grpjquota}, {@init_itable}, {@dioread_nolock}, {@bsdgroups}]}, 0x53, 0x4f3, &(0x7f00000012c0)="$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")
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_mreqn(r3, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @empty}, 0xc)
r4 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x9f, 0x18, 0x76, 0x20, 0x17ef, 0x7203, 0x2e36, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xbc, 0x0, 0x2, 0x9e, 0x88, 0x33, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x20, 0x0, 0x0, 0x3}}]}}]}}]}}, 0x0)
syz_usb_control_io$rtl8150(r4, 0x0, 0x0)
syz_usb_control_io$rtl8150(r4, 0x0, &(0x7f00000029c0)={0x2c, &(0x7f0000000080)={0x20, 0x3, 0x2, '~K'}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r4, 0x0, &(0x7f0000002640)={0x44, &(0x7f0000002400)=ANY=[@ANYBLOB="20000000000000f0"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

3.717618344s ago: executing program 5 (id=932):
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x244}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x3, &(0x7f0000000200)=0x8000000a)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0)
r3 = creat(&(0x7f0000000080)='./file0/file1\x00', 0x90)
dup(0xffffffffffffffff)
write$cgroup_type(r3, &(0x7f0000000000), 0xd4ba103)
unlink(&(0x7f0000000100)='./file0/file1\x00')
link(&(0x7f00000000c0)='./file0/file1\x00', &(0x7f0000000180)='./file1\x00')
connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000000c0)={'syz0\x00', {0x2, 0x2, 0x8, 0x7}, 0x3b, [0x401, 0x7ff, 0x401, 0x8, 0x10000, 0x45, 0x200, 0x401, 0x7, 0x293, 0xfc, 0x80000000, 0x8, 0x3, 0xfffffd05, 0x9, 0x50d6, 0x7ff, 0xa, 0x0, 0xd4, 0x4, 0x5, 0x1d231da2, 0x6, 0x5, 0x0, 0x9, 0x0, 0x3, 0x101, 0xfffffffd, 0x800, 0xfffffffa, 0x9, 0x7, 0x8, 0x9, 0xf94d, 0x7, 0x3, 0x9, 0x0, 0x575c, 0x2, 0x5a, 0x2, 0x0, 0x5, 0x5, 0x1, 0x2, 0x1, 0x3, 0x6, 0x670, 0x9, 0x8000, 0x2, 0x9b2, 0x0, 0x2, 0x1, 0x1], [0x4, 0x8000, 0xa, 0xfffff2e1, 0x9ca4, 0xffffffff, 0x0, 0x7f, 0x72a8, 0x400, 0x86, 0x2, 0x4, 0x56e, 0x6, 0x4, 0x1100, 0x88a, 0x2, 0x8, 0xb2, 0x106c, 0xa2b8, 0xc60, 0x6740, 0xf2f1, 0x5, 0x1, 0x5, 0xfffffffd, 0x3, 0x0, 0x7fffffff, 0x1, 0x81, 0x6, 0x6, 0x0, 0x183, 0x401, 0x6, 0xf, 0xd349, 0x9, 0x6, 0x0, 0x9, 0x0, 0x7fff, 0x2, 0xffffffb1, 0x4, 0x6, 0x6, 0x9, 0x1, 0x2, 0x800, 0x4, 0x3, 0x4, 0x7fffffff, 0xc2577131, 0x7], [0x4, 0x5, 0x8, 0x2, 0x5, 0x80, 0xfffffff7, 0x3, 0x7, 0xb5, 0xfffffffa, 0x100, 0x0, 0x1, 0x1, 0x7, 0x8a85, 0x4, 0x430fb4df, 0x7, 0x7, 0x8, 0x8, 0x2, 0x2, 0x9, 0x1000, 0x54e934b9, 0x37, 0x10001, 0x0, 0x8000, 0x32, 0x4, 0x6, 0x6, 0x5, 0xcf9, 0x1000006, 0x9, 0x2, 0xe, 0x0, 0x7f, 0xffffffff, 0x0, 0xfffffffd, 0x5, 0x0, 0xa, 0x7fffffff, 0xffffffc0, 0x5, 0x6, 0xfff, 0x101, 0x400007, 0x8, 0x2, 0x3, 0x5, 0x83, 0xfffffff8, 0xb6], [0x4, 0x2, 0x4, 0x1, 0x6, 0x7, 0x2, 0x9, 0x16, 0x0, 0x7fff, 0x7fff, 0xd, 0x1, 0x5, 0x5, 0x4, 0x0, 0x20000005, 0x8, 0x7, 0x2, 0x4689, 0xe97f, 0x80000000, 0x5, 0xcd3, 0x80000000, 0x5, 0xfffff800, 0xe, 0x26419275, 0x80000001, 0x3, 0xfff, 0x8, 0xef7, 0x4ff, 0x1, 0xfffffff0, 0x7, 0x7b9, 0x52a, 0x5, 0x0, 0x6, 0x7fff, 0x7, 0x3ff, 0x0, 0x2, 0xb2a, 0x3, 0x189f, 0x9, 0x9, 0xffff, 0xd, 0xfb9, 0x77, 0x5, 0xfffffffa, 0x6e, 0x1]}, 0x45c)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c460d04000c028000000000000003003e00ecffffff940200000000000040000000000000004d0200000000000000000000000038"], 0x51)
close(0xffffffffffffffff)

3.680240466s ago: executing program 1 (id=933):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0)
keyctl$link(0x8, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
r3 = socket(0x10, 0x80803, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000900)=ANY=[@ANYBLOB="1c0000005e000102000000000000000000000000682ce665c9"], 0x1c}, 0x1, 0x0, 0x0, 0x4008001}, 0x0)
recvmmsg(r3, &(0x7f0000001bc0)=[{{0x0, 0x0, 0x0}}], 0x7, 0x0, 0x0)
r4 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f00000000000000000a000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0)
sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000740)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@noquota}, {@auto_da_alloc}, {@noload}, {@nodiscard}]}, 0x64, 0x50a, &(0x7f0000000200)="$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")
syz_usb_connect$uac1(0x5, 0x71, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x3, 0x20, 0x3, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x766, 0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0xe5, 0xb, 0x8, {0x7, 0x25, 0x1, 0x4, 0x4, 0xfba6}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x8, 0x1, 0x5, {0x7, 0x25, 0x1, 0x84, 0x6d, 0x5}}}}}}}]}}, &(0x7f0000000540)={0x0, 0x0, 0x10, &(0x7f00000003c0)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0xd42617389d614cb9, 0x85, 0x0, 0x4, 0x8, 0x1}]}})

2.908785141s ago: executing program 4 (id=934):
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x37, [0xfffffff8, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x4, 0x25cd, 0x1, 0xb4, 0xa, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x1, 0x8, 0xd, 0x4, 0x12a3, 0x6, 0x1, 0x2, 0x6, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x10000, 0x0, 0x91, 0x4, 0x4, 0x16, 0x8, 0x5, 0x401, 0xfffffff5, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0xc66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400080, 0x1, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00060, 0x5, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x1, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x95, 0x7fffffff, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0x2, 0xfffffffe, 0xffff, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x8d3, 0x200006, 0x8, 0x400, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x8000003, 0x5, 0x9, 0x3, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x3e55, 0x5, 0xd3, 0x8, 0x3437, 0x3, 0xd, 0x7, 0x601, 0x101, 0xdd80, 0x60a0, 0x7f, 0x9d26, 0x10000, 0x1, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x8, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x8, 0x5, 0x7f, 0x55, 0x40, 0xff, 0x1005, 0x1, 0x7, 0x1e, 0x9, 0x81, 0x3, 0x9d86, 0xd, 0xfffffff7, 0x8, 0x140f2, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x6, 0x8, 0x14000, 0x1, 0x9]}, 0x45c)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
inotify_add_watch(0xffffffffffffffff, 0x0, 0xa4000021)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
poll(&(0x7f0000000000), 0x20000000000000b5, 0x9)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x6, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x4, 0x5, 0x4, 0x8], 0x25000, 0x304})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r5 = dup(r4)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

2.774997999s ago: executing program 3 (id=935):
syz_mount_image$exfat(&(0x7f0000001500), &(0x7f0000000180)='./file0/file0\x00', 0x800000, &(0x7f0000000300)=ANY=[@ANYRES8, @ANYRES16], 0x1, 0x1506, &(0x7f0000004000)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0xcc702, 0x104)
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x2800000, &(0x7f0000000680)={[{@debug}, {@auto_da_alloc}, {@nombcache}, {@test_dummy_encryption}, {@nodiscard}, {@min_batch_time}, {@commit}, {@nodiscard}]}, 0x1, 0xbb9, &(0x7f0000006f00)="$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")
prctl$PR_SET_THP_DISABLE(0x29, 0x1)
syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x20089a, 0x0, 0x0, 0x0, &(0x7f0000000180))
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000480)=@abs={0x0, 0x0, 0x8004e24}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x2}}, 0x18)
socket$inet_udp(0x2, 0x2, 0x0)
io_setup(0x0, &(0x7f00000000c0))
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="400000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800e0001007769726567756172640000000400028008000300a0"], 0x40}, 0x1, 0xd}, 0x40)

2.256782178s ago: executing program 5 (id=936):
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x37, [0xfffffff8, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x4, 0x25cd, 0x1, 0xb4, 0xa, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x1, 0x8, 0xd, 0x4, 0x12a3, 0x6, 0x1, 0x2, 0x6, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x10000, 0x0, 0x91, 0x4, 0x4, 0x16, 0x8, 0x5, 0x401, 0xfffffff5, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0xc66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400080, 0x1, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00060, 0x5, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x1, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x95, 0x7fffffff, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0x2, 0xfffffffe, 0xffff, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x8d3, 0x200006, 0x8, 0x400, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x8000003, 0x5, 0x9, 0x3, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x3e55, 0x5, 0xd3, 0x8, 0x3437, 0x3, 0xd, 0x7, 0x601, 0x101, 0xdd80, 0x60a0, 0x7f, 0x9d26, 0x10000, 0x1, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x8, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x8, 0x5, 0x7f, 0x55, 0x40, 0xff, 0x1005, 0x1, 0x7, 0x1e, 0x9, 0x81, 0x3, 0x9d86, 0xd, 0xfffffff7, 0x8, 0x140f2, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x6, 0x8, 0x14000, 0x1, 0x9]}, 0x45c)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
inotify_add_watch(0xffffffffffffffff, 0x0, 0xa4000021)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
poll(&(0x7f0000000000), 0x20000000000000b5, 0x9)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x6, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x4, 0x5, 0x4, 0x8], 0x25000, 0x304})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r5 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)

2.093401548s ago: executing program 5 (id=937):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010081000000fedbdf050f00000018000780080002"], 0x2c}, 0x1, 0x0, 0x0, 0x2805}, 0x0)
pipe(&(0x7f0000000180))
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000040)=ANY=[@ANYRESOCT=r1], &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

2.031045612s ago: executing program 5 (id=938):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000105804195000000000000109022400010000c04009040000010300020009214902000122a40009058103"], 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c)
r2 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)={0x2})
syz_usb_control_io(r0, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000080)={0x0, 0x8, 0x2, {0x2, 0x21}}, 0x0, 0x0, 0x0, 0x0}, 0x0)

1.72146291s ago: executing program 3 (id=939):
ioctl$KVM_TDX_INIT_VCPU(0xffffffffffffffff, 0xc008aeba, &(0x7f0000000040)={0x2, 0x0, 0x400})
unshare(0x22020400)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r0, 0x89b1, &(0x7f00000006c0)={'vlan0\x00', @local})
r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x2d50, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x5, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x33, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xc, 0x0, 0x7}}}}}]}}]}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)={0x30, r4, 0x1, 0x70bd28, 0x25dfdbff, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x10, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x1}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000001c0)={'ip6_vti0\x00', &(0x7f0000000140)={'syztnl2\x00', <r5=>0x0, 0x2f, 0x2, 0x8, 0x10000, 0x10, @mcast2, @private0, 0x10, 0x1, 0x2, 0x28e}})
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000200)={0xffffffffffffffff, 0x58, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r6=>0x0}}, 0x10)
sendmsg$ETHTOOL_MSG_WOL_SET(r2, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000280)={&(0x7f0000000800)={0x3d0, r4, 0x505, 0x70bd2d, 0x25dfdbfc, {}, [@ETHTOOL_A_WOL_HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}]}, @ETHTOOL_A_WOL_SOPASS={0xfc, 0x3, "dbfe625d3e33b51dc95ea314135b7a490739a8e8f58c6998df4e50a079abc5c3957a67b648ac5e297a41e28fc8896962cd6f64ae5b1f522f6bee6e78ea27fbee2ec2cca82df2a040d1e8ed424f3da4b32acd540df94e3151c65988d4a0d509230be8663769119e28207ed5a38c1fd3e90e7f9a6ca60cd9bc22abda68de93d208347123d822ee6da1dedec3c5eecb2d4af9a90cc02b9054bd8fceaa4fb2efb5be93b7c85ed283f2cd8833a42315417c1f6088c2665f95bcf6600e98c5f7096cb02f98ec078a713e592178df340132526c4074cc554e6ee1f5aad4fac2927058729969135fe536d0e0c60d1b7096691801aa7f69841c3fc30f"}, @ETHTOOL_A_WOL_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_WOL_HEADER={0x80, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}]}, @ETHTOOL_A_WOL_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_WOL_MODES={0x154, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0xcc, 0x3, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'vfat\x00'}]}, {0x4}, {0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'vfat\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'vlan0\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'vfat\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '!/.]\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '+/^#\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfff}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xa}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x94b7}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xc2af}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, 'nfs'}]}]}, @ETHTOOL_A_BITSET_VALUE={0x8, 0x4, "91fa31dc"}, @ETHTOOL_A_BITSET_VALUE={0x65, 0x4, "c22d4e7de7b4578f278cc4d04b4925b4bd8f1f3ee3254fb3f36ad80566daa5b377ed6498522ff05f1d24ba338d74ea9259f6d8dd919098d9214c8a4be731dd6ff507942bb2dbd9d3e7f8861837ab70501da598dac02a41fc9c205e02ce870fb353"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x3}]}, @ETHTOOL_A_WOL_SOPASS={0x65, 0x3, "02a35d3bec4ffca035d5f32911157de93f1cb809690819f51d558a97892e01e99ada6b233252450ac48e78719a6233f32107796e602681717050b461d83055614f0d2a16a1aa3e057e56408172ce2914eeaad6f968d9cc09770f3de2ee1acbd082"}]}, 0x3d0}, 0x1, 0x0, 0x0, 0x80}, 0x84)
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)={[{@utf8no}, {@uni_xlateno}, {@utf8no}, {@fat=@nfs}, {@fat=@codepage={'codepage', 0x3d, '857'}}, {@shortname_lower}, {@numtail}, {@fat=@nfs}, {@uni_xlateno}, {@utf8no}, {@utf8no}, {@iocharset={'iocharset', 0x3d, 'cp936'}}, {@shortname_lower}, {@shortname_lower}, {@uni_xlateno}, {@shortname_lower}]}, 0x2a, 0x34c, &(0x7f0000000400)="$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")
r7 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x183341, 0x0)
write$P9_RLINK(r8, &(0x7f0000000040)={0x7, 0x47, 0x1}, 0x7)
ioctl$F2FS_IOC_START_ATOMIC_WRITE(r8, 0xf501, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000c80)={{r7}, &(0x7f0000000c00), &(0x7f0000000c40)=r8}, 0x20)
syz_usb_control_io$hid(r1, &(0x7f0000000380)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x7, {[@local=@item_012={0x1, 0x2, 0x5, "fc"}, @global=@item_4={0x3, 0x1, 0x2, "acb6231a"}]}}, 0x0}, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
r9 = socket$inet6(0xa, 0x5, 0x6)
setsockopt$inet6_IPV6_ADDRFORM(r9, 0x29, 0x1, &(0x7f0000000000), 0x4)

1.707760901s ago: executing program 4 (id=940):
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x3004d91, &(0x7f0000000080)={[{@noinit_itable}]}, 0x1, 0x523, &(0x7f0000000a80)="$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")
setsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000000c0)="bb2364e0df3b14e33e0e5c7d3c51ff41d14b5f9d44041be1fe209c0bce4c2f3ff3f0f7e30e015a0d19422ecad71b8cb36030fb0f6acadcee79c5ba06fec46ba43133f17477805245ef7df8340b9251642992b1cd419859132eccee932991c76f682750da4d617b7ed62d2547a894e3252932bb80798c7e0582b3549fcee438a7195bfa5916cadec1a0bebf25057735540d81addbc999e09dc12b48c12dbf", 0x9e)
r0 = open(0x0, 0x0, 0x100)
poll(&(0x7f0000000100)=[{}], 0x1, 0x9d)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001080)=ANY=[@ANYBLOB="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", @ANYRESHEX], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0xfd9b}, 0x48)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000600000004000000000000070000000000000000000000010500000140b9000000000000010000850200000000000000020000000000004300000000da", @ANYRES16=<r2=>r0], &(0x7f00000002c0)=""/147, 0x52, 0x93, 0x0, 0xffffffff}, 0x28)
r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00')
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x1c, 0x2, 0x3, 0x401, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
unshare(0x22020400)
fcntl$addseals(r1, 0x409, 0x7)
r5 = socket$inet6(0xa, 0x3, 0x7)
setsockopt$inet6_int(r5, 0x29, 0x4b, 0x0, 0x0)
sendmmsg$inet6(r5, &(0x7f0000004580)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00'], 0x28}}], 0x1, 0x0)
recvfrom$inet6(r5, 0x0, 0x0, 0x10000, &(0x7f0000000040)={0xa, 0x4e21, 0x9, @private0, 0x23}, 0x1c)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02})
preadv(r6, &(0x7f0000000100)=[{0x0}, {&(0x7f00000000c0)=""/39, 0x27}], 0x2, 0x8, 0x10000e)
ioctl$KVM_CAP_VM_COPY_ENC_CONTEXT_FROM(r6, 0x4068aea3, &(0x7f0000000540)={0xc5, 0x0, r0})
sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYRES16=r2], 0x1c}, 0x1, 0x0, 0x0, 0x10004000}, 0x0)
getsockopt$sock_buf(r0, 0x1, 0x1a, &(0x7f00000003c0)=""/210, &(0x7f00000004c0)=0xd2)
ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r3, 0x541b, 0x0)

1.394735529s ago: executing program 4 (id=941):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0xff, @ipv4={'\x00', '\xff\xff', @empty}, 0x3}, 0x1c)
listen(r0, 0x6)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r2 = socket$pptp(0x18, 0x1, 0x2)
bind$pptp(r2, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e)
connect$pptp(r2, &(0x7f0000000080)={0x18, 0x2, {0x0, @rand_addr=0x64010102}}, 0x1e)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000015c0), 0x2300, 0x0)
ioctl$PPPIOCATTCHAN(r3, 0x40047438, &(0x7f0000000040)=0x1)
readv(r3, &(0x7f00000002c0)=[{&(0x7f00000000c0)=""/75, 0x4b}], 0x1)
close_range(r1, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r4=>0xffffffffffffffff})
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f00000005c0)=@filter={'filter\x00', 0x42, 0x4, 0x478, 0xffffffff, 0x1b8, 0x1b8, 0xf8, 0xffffffff, 0xffffffff, 0x3e0, 0x3e0, 0x3e0, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @loopback, 0x0, 0x0, 'veth0_to_batadv\x00', 'wlan0\x00', {}, {}, 0x11}, 0x0, 0xd0, 0xf8, 0x0, {0x100000000000000}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x2, 0x0, 0xf}}, @common=@unspec=@connmark={{0x30}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@unspec=@state={{0x28}, {0x7}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@ip={@multicast2, @private=0xa010102, 0x0, 0x0, 'veth1_virt_wifi\x00', '\x00', {}, {}, 0x0, 0x1}, 0x0, 0x1e8, 0x228, 0x0, {}, [@common=@inet=@policy={{0x158}, {[{@ipv4=@loopback, [0xffffff00, 0xff000000, 0xff000000, 0xffffff00], @ipv4=@dev={0xac, 0x14, 0x14, 0x28}, [0xff000000, 0x0, 0x0, 0xffffffff], 0x4d6, 0x0, 0x73, 0x1, 0x0, 0x7}, {@ipv6=@private0={0xfc, 0x0, '\x00', 0x1}, [0xffffffff, 0xffffff00, 0xff, 0xff000000], @ipv4=@empty, [0xff, 0xff000000, 0xffffff00], 0x4d3, 0x3506, 0x6, 0x0, 0x10, 0x3}, {@ipv6=@private0={0xfc, 0x0, '\x00', 0x1}, [0xffffffff, 0xff000000, 0xff, 0xff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xff, 0xff, 0xff000000, 0xff000000], 0x4d5, 0x3507, 0x0, 0x1, 0x16, 0x1}, {@ipv4=@local, [0xff, 0xffffff00, 0xffffff00, 0xff], @ipv6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, [0xff, 0xff000000, 0xffffffff, 0xffffff00], 0x4d5, 0x0, 0x33, 0x1, 0x4, 0x4}], 0x2, 0x1}}, @common=@socket0={{0x20}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4d8)
connect$unix(r4, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
getpeername$unix(r4, 0x0, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r7, 0x0)
r8 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_buf(r8, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000", 0x4)
bind$inet6(r6, &(0x7f0000000040)={0xa, 0x5e22, 0x0, @empty}, 0x1c)
listen(r6, 0x0)
r9 = socket$netlink(0x10, 0x3, 0x4)
writev(r9, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a09000000ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1)
r10 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r10, 0x4000000000000, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x4001, 0x3, 0xa38, 0x8e8, 0xb, 0x148, 0x0, 0x148, 0x9a0, 0x240, 0x240, 0x9a0, 0x215, 0x3, 0x0, {[{{@ip={@local, @local, 0x0, 0x0, 'ip6gretap0\x00', 'veth0\x00', {}, {}, 0x11}, 0x2e8, 0x880, 0x8e8, 0x0, {0xff0f000000000000}, [@common=@inet=@udp={{0x30}}, @common=@unspec=@u32={{0x7e0}, {[{[{}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x0, 0x1}], [], 0xfc}, {}, {[{}, {}, {}, {}, {}, {}, {0x0, 0x3}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x4}]}, {[], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}], 0x0, 0x6}, {[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x3}], [{}, {}, {}, {}, {}, {}, {0x0, 0xac}]}, {[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x2}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x8000}]}, {[{}, {}, {}, {}, {}, {}, {}, {}, {0x9}]}, {[{}, {}, {}, {}, {0x0, 0x2}]}, {[{}, {}, {0x1000000}, {}, {}, {}, {0x0, 0x1}]}, {}, {[{}, {}, {}, {}, {}, {0x3}]}], 0x1}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}, {{@ip={@broadcast, @broadcast, 0x0, 0x0, 'team0\x00', 'netpci0\x00'}, 0xec010000, 0x98, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xa98)
ioctl$sock_ipv6_tunnel_SIOCDELPRL(r7, 0x89f6, &(0x7f0000000100)={'sit0\x00', &(0x7f0000000000)={@broadcast, 0x0, 0x0, 0x30, 0x0, [{@private}, {}, {@local}]}})

1.324300283s ago: executing program 4 (id=942):
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x37, [0xfffffff8, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x4, 0x25cd, 0x1, 0xb4, 0xa, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x1, 0x8, 0xd, 0x4, 0x12a3, 0x6, 0x1, 0x2, 0x6, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x10000, 0x0, 0x91, 0x4, 0x4, 0x16, 0x8, 0x5, 0x401, 0xfffffff5, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0xc66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400080, 0x1, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00060, 0x5, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x1, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x95, 0x7fffffff, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0x2, 0xfffffffe, 0xffff, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x8d3, 0x200006, 0x8, 0x400, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x8000003, 0x5, 0x9, 0x3, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x3e55, 0x5, 0xd3, 0x8, 0x3437, 0x3, 0xd, 0x7, 0x601, 0x101, 0xdd80, 0x60a0, 0x7f, 0x9d26, 0x10000, 0x1, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x8, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x8, 0x5, 0x7f, 0x55, 0x40, 0xff, 0x1005, 0x1, 0x7, 0x1e, 0x9, 0x81, 0x3, 0x9d86, 0xd, 0xfffffff7, 0x8, 0x140f2, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x6, 0x8, 0x14000, 0x1, 0x9]}, 0x45c)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'batadv_slave_0\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0x100a, 0x5, 0x80000002, 0x1, 0x4, 0xc, 0xa4, 0x0, 0x7, 0xb69, 0xc1, 0x4, 0x1, 0x6, 0x5, 0x101, 0x1002, 0x9, 0x1, 0x0, 0x800, 0xffffffff, 0x65, 0x6, 0x9, 0x4, 0x7, 0x8, 0x100000, 0x1, 0x40, 0x4, 0x10, 0x2, 0x100, 0x4, 0x1bfc, 0xb, 0x7, 0xbed4, 0x20000008, 0x8000100, 0x7, 0x4, 0x11000, 0x8, 0x5, 0x79b, 0x0, 0x0, 0x2000083, 0x4, 0xa, 0x7, 0xf, 0x101, 0xd7, 0x1fa0860a, 0x7, 0xa8, 0x9, 0x2, 0x180000, 0xf, 0x8b, 0x5, 0x2af, 0x6, 0x5, 0x8, 0x6, 0x9, 0x4, 0x7, 0x4009, 0xfffffffe, 0x4, 0x100002, 0x8, 0x752, 0x0, 0x3, 0x0, 0x10001, 0xe, 0xfffffffd, 0x765, 0x6, 0x5, 0x7ffffffe, 0xfdfffffc, 0x2, 0x2, 0x84, 0x100, 0x7, 0x252, 0x81, 0x5d102cf2, 0x5, 0x20006, 0x5, 0x1, 0xb, 0x0, 0xd9a, 0x3ff, 0x29f, 0xfffffffd, 0x3, 0x2, 0x5, 0xd4, 0x4000000, 0x4, 0x2, 0x40, 0x8, 0x84, 0x9, 0x100, 0x6, 0x2a9d, 0xfffffffe, 0x8001, 0x1fc, 0xc5c, 0x3ff]}})
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x6, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x4, 0x5, 0x4, 0x8], 0x25000, 0x304})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r5 = dup(r4)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

536.324259ms ago: executing program 1 (id=943):
r0 = userfaultfd(0x801)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})
ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2})
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='oom_score_adj\x00')
lseek(r2, 0x8000000000000000, 0x3)
write$binfmt_script(r1, &(0x7f0000000300)={'#! ', './file0', [], 0xa, "01118c921354e263d43ec15a7a654cbb5b68d14d7bf96cdaf37bc6d4d0c626f8600f128ab47184aed0055c70ccc7cda17efe256ffe46ca4107f13722367e24070099c8eaf0f1fd075f48b3a5b5f6ec2a63a1c34ad72dbb4b54e418ce42f3967c45f0cb632df43235dc9a72a4059565f95f9d4e36ecb06a237aa10fcf1c89aebbbe2db32bf87c603c1aa32ef25e55f3a401517d3bb93f3605055682d6be41784b00340d3bc49deeb66692d43d0f42349339c684d41293ab033523ec30e239e7a44c00b5c146f41f3ad6716bebaf4b95b08ca75fd72e00f79f47c600af278f6ce724ffc7f5aa7b9d9f166c5b0f0f2e54a4"}, 0xfb)

306.840682ms ago: executing program 1 (id=944):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000001cc0)=@raw={'raw\x00', 0x8, 0x3, 0x320, 0x0, 0xffffffff, 0xffffffff, 0x138, 0xffffffff, 0x328, 0xffffffff, 0xffffffff, 0x328, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2b}}, [0xffffff00, 0xffffffff, 0xffffffff, 0xff], [0xffffff00, 0xff000000, 0xffffffff, 0xff000000], 'wg2\x00', 'erspan0\x00', {}, {0xff}, 0x5c, 0xde, 0x2, 0x33}, 0x0, 0xd0, 0x138, 0x60030000, {0x0, 0xff000000}, [@inet=@rpfilter={{0x28}, {0x4}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x10, 0xd80, 0x101, 0xdb4a, 'snmp\x00', 'syz0\x00'}}}, {{@ipv6={@loopback, @private2={0xfc, 0x2, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffff00, 0xffffff00], [0xffffffff, 0xffffff00, 0xffffffff], 'netpci0\x00', 'bridge0\x00', {}, {0xff}, 0x2b, 0x2, 0x5}, 0x0, 0x1c8, 0x1f0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x20, 0x4, 0x1, 'syz0\x00'}}, @inet=@rpfilter={{0x28}, {0x4}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x458)
bind$inet(r0, &(0x7f0000000780)={0x2, 0x4e20, @rand_addr=0x64010102}, 0x10)
syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f00000000c0)='./file2\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6673796e635f6d6f64653d7374726963742c6174676300636865636b706f696e743d6d657267652c6e6f71756f74612c6261636b67726f756e645f67633d6f66662c646973636172642c6c617a7974696d652c757372e480c29629cefae40f8e020000000000000800000061496f0256583de206bcf3dee0c478878faf370b62a05c95465a6c000000000000646f2516421000000000000000796e635f6d6f64653d706f7369782c6e6f757365725f78617474722c6572726f72733d72656d6f756e742d726f2c636f6d70726573735f63616368652c757365725f78617474722c00"], 0x1, 0x5521, &(0x7f0000000200)="$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")
connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010100"/20, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
unshare(0x2040400)
r2 = socket$netlink(0x10, 0x3, 0x0)
writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000080)="390000001300090468fe0700200000000000ff3f08000000480100100000000019002b000a0001000500000000000072080003000500000000", 0x39}], 0x1)

247.196046ms ago: executing program 4 (id=945):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syz_tun\x00', <r1=>0x0})
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@bloom_filter={0x1e, 0xff, 0x1ff, 0x1, 0xc00, 0x1, 0xa, '\x00', r1, 0xffffffffffffffff, 0x1, 0x2, 0x2, 0xc}, 0x50)
r3 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r0}, 0x8)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@bloom_filter={0x1e, 0x3, 0x47, 0x2, 0x10024, r2, 0x7, '\x00', r1, 0xffffffffffffffff, 0x3, 0x4, 0x1, 0x4, @void, @value, @value=r3}, 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000017b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r5, r1}, 0x14)
syz_emit_ethernet(0x16, &(0x7f00000007c0)={@random="e331f3495bfd", @broadcast, @void, {@llc={0x4, {@snap={0x1, 0x0, "91", "0401df", 0x9100}}}}}, 0x0)
socket$packet(0x11, 0x3, 0x300)
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000180)={[{@delalloc}, {@noload}, {@acl}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x783, &(0x7f0000001000)="$eJzs3c9rHFUcAPDvbJKmSauJIGg9BQQNlG5Mja2Ch4oHESwU9Gy7bLahZpMt2U1pQg4tIngRVDwIeunZH/Xm1R9X/S88SEvVtFjxIJHZH+222U03bXY3kM8HXva9mdm89903P97sDDsB7FkT6Z9MxKGI+DiJGKtPTyJiqJobjDhRW+72+lo+TUlsbLz9Z1Jd5tb6Wj6a3pM6UC88HRE/fRBxOLO53vLK6nyuWCws1ctTlYXzU+WV1SPnFnJzhbnC4rHpmZmjx186fmznYv3719WD1z954/lvT/z7/lNXP/o5iRNxsD6vOY6dMhET9c9kKP0I7/H6TlfWZ0m/G8BDSTfNgdpWHodiLAaquTZGetkyAKBbNgCAPSgxBgCAPabxPcCt9bV8I/X3G4neuvFaROyvxd+4vlmbM1i/Zre/eh109FZyz5WRJCLGd6D+iYj48vt3v05T1PvBtTSgFy5djogz4xOb9//JpnsWtuuFrWZuDFdfJu6bvNeOP9BPP6Tjn5dbjf8yd8Y/0WL8M9xi230YD97+M9d2oJq20vHfq033tt1uir9ufKBeeqw65htKzp4rFtJ92+MRMRlDw2l5urpo65Hb5M3/brarv3n899en732V1p++3l0ic21w+N73zOYquUeNu+HG5YhnBlvFn9zp/6TN+PdUh3W8+cqHX7Sbl8afxttIm+Pvro0rEc+17P+7fZlseX/iVHV1mGqsFC1899vno+3qb+7/NKX1N84FeiHt/9Gt4x9Pmu/XLG+/jl+ujP3Ybt6D42+9/u9L3qnm99WnXcxVKkvTEfuStzZPP3r3vY1yY/k0/slnW2//tWpbr//pOeGZDuMfvP7HNw8ff3el8c9uq/+3n7l6e36gXf2d9f9MNTdZn9LJ/q/TBj7KZwcAAAAAAAAAAAAAAAAAAAAAAAAAncpExMFIMtk7+Uwmm609w/vJGM0US+XK4bOl5cXZqD4rezyGMo2fuhxr+j3U6frv4TfKR+8rvxgRT0TEZ8Mj1XI2XyrO9jt4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKg70Ob5/6nfh/vdOgCga/b3uwEAQM85/gPA3rO94/9I19oBAPSO838A2Hs6Pv6f6W47AIDecf4PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAl506eTJNG/+sr+XT8uyFleX50oUjs4XyfHZhOZ/Nl5bOZ+dKpbliIZsvLbT9R5dqL8VS6fxMLC5fnKoUypWp8srq6YXS8mLl9LmF3FzhdGGoZ5EBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQOfKK6vzuWKxsCSzZWZkdzRj12QGY1c0Q6Zrmea9xEj/dlAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAu9z/AQAA//+MoS4e")
r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0)
getsockopt$ARPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x60, 0x0, &(0x7f0000005640)=0x44)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x17)
syz_emit_ethernet(0x5a, &(0x7f0000000200)={@local, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "081200", 0x24, 0x2b, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, @local, {[@srh={0x3a, 0x2, 0x2, 0x1, 0x0, 0x0, 0x0, [@empty]}], {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x100, @void}}}}}}}}, 0x0)

217.266488ms ago: executing program 0 (id=946):
rt_tgsigqueueinfo(0x0, 0x0, 0xb, &(0x7f0000000080))
syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x10000, &(0x7f0000000080)={[{@nodots}, {@dots}, {@dots}, {@dots}, {@nodots}, {@dots}, {@dots}, {@nodots}, {@dots}, {@nodots}, {@nodots}, {@dots}, {@fat=@nfs}, {@fat=@gid={'gid', 0x3d, 0xee00}}, {@fat=@quiet}, {@dots}, {@nodots}, {@nodots}, {@nodots}, {@nodots}, {@nodots}, {@nodots}, {@fat=@nfs_stale_rw}, {@nodots}]}, 0x1, 0x200, &(0x7f0000000800)="$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")
setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000000)=@gcm_256={{0x303}, "4232d7b54eb8e3cf", "093c8483ebea9c97ec8b5751caac16f9c05245209d6d217813b8f3c8b535a7fb", "7b53a1c8", "6c7744c98b4b6487"}, 0x38)

65.234867ms ago: executing program 0 (id=947):
r0 = syz_mount_image$ext4(&(0x7f0000000380)='ext3\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000000c0)={[{@errors_continue}, {@jqfmt_vfsold}, {@errors_continue}]}, 0x1, 0x553, &(0x7f0000001080)="$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")
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000d00)=ANY=[@ANYBLOB="050000000000000071113d00000000008510000002000000850000007d00000095fca53e1dbe8532b0f905bf44470033", @ANYRESOCT=r0, @ANYRESHEX=r0], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x94)
r2 = socket$inet6(0xa, 0xa, 0x3c)
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200010, &(0x7f00000002c0)=ANY=[@ANYBLOB="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", @ANYRESOCT=0x0], 0x0, 0x260, &(0x7f0000000780)="$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")
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000d80)={'#! ', './file1'}, 0xb)
ftruncate(r3, 0x5)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @mcast2, 0x6}, 0x1c)
writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000100)="88", 0xfdef}], 0x1)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYRESDEC=r1], 0x13c}, 0x1, 0x0, 0x0, 0x4000}, 0x20000810)
r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x10, 0x4, &(0x7f0000000700)=ANY=[@ANYRES32=r3], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x8, r3}, 0x94)
ioctl$BLKOPENZONE(0xffffffffffffffff, 0x40101286, &(0x7f0000000200)={0x6})
r6 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$MRT_DEL_VIF(r6, 0x0, 0xcb, 0x0, 0x0)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r7, 0x0)
r8 = socket$vsock_stream(0x28, 0x1, 0x0)
setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r8, 0x28, 0x6, &(0x7f0000000080)={0x0, 0x2710}, 0x10)
r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
fcntl$dupfd(r1, 0x406, r5)
r10 = open(&(0x7f0000000680)='./file1\x00', 0x6202, 0x14)
recvmsg$inet_nvme(r9, &(0x7f0000000400)={&(0x7f0000000500)=@can, 0x80, &(0x7f0000000c80)=[{&(0x7f0000000580)=""/232, 0xe8}, {&(0x7f0000000a00)=""/246, 0xf6}, {&(0x7f0000000b00)=""/193, 0xc1}, {&(0x7f0000000c00)=""/123, 0x7b}, {&(0x7f0000000280)=""/58, 0x3a}], 0x5}, 0x20)
r11 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0)
pwritev2(r11, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0)
r12 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_pidfd_open(0x0, 0x0)
syz_open_procfs(r12, &(0x7f0000000240)='mountstats\x00')
sendfile(r10, r10, 0x0, 0x7f03)
ioctl$EXT4_IOC_CLEAR_ES_CACHE(r5, 0x6628)

0s ago: executing program 4 (id=948):
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x37, [0xfffffff8, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x4, 0x25cd, 0x1, 0xb4, 0xa, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x1, 0x8, 0xd, 0x4, 0x12a3, 0x6, 0x1, 0x2, 0x6, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x10000, 0x0, 0x91, 0x4, 0x4, 0x16, 0x8, 0x5, 0x401, 0xfffffff5, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0xc66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400080, 0x1, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00060, 0x5, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x1, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x95, 0x7fffffff, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0x2, 0xfffffffe, 0xffff, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x8d3, 0x200006, 0x8, 0x400, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x8000003, 0x5, 0x9, 0x3, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x3e55, 0x5, 0xd3, 0x8, 0x3437, 0x3, 0xd, 0x7, 0x601, 0x101, 0xdd80, 0x60a0, 0x7f, 0x9d26, 0x10000, 0x1, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x8, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x8, 0x5, 0x7f, 0x55, 0x40, 0xff, 0x1005, 0x1, 0x7, 0x1e, 0x9, 0x81, 0x3, 0x9d86, 0xd, 0xfffffff7, 0x8, 0x140f2, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x6, 0x8, 0x14000, 0x1, 0x9]}, 0x45c)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
inotify_add_watch(0xffffffffffffffff, 0x0, 0xa4000021)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
poll(&(0x7f0000000000), 0x20000000000000b5, 0x9)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x6, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x4, 0x5, 0x4, 0x8], 0x25000, 0x304})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r3 = dup(0xffffffffffffffff)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

kernel console output (not intermixed with test programs):

 158.625854][ T2756] System zones: 0-5
[  158.641474][ T2756] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug,auto_da_alloc,nombcache,test_dummy_encryption,nodiscard,min_batch_time=0x0000000000000000,commit=0x0000000000000000,nodiscard,,errors=continue. Quota mode: writeback.
[  158.760007][ T2762] netlink: 80 bytes leftover after parsing attributes in process `syz.1.624'.
[  158.837166][ T2765] SELinux:  policydb magic number 0x0 does not match expected magic number 0xf97cff8c
[  158.846942][ T2765] SELinux: failed to load policy
[  159.016765][  T529] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[  159.024580][ T1936] usb 2-1: USB disconnect, device number 20
[  159.031294][ T1936] usblp0: removed
[  159.296228][ T2774] netlink: 8 bytes leftover after parsing attributes in process `syz.2.634'.
[  159.305119][ T2774] netlink: 96 bytes leftover after parsing attributes in process `syz.2.634'.
[  159.507663][  T529] usb 1-1: Using ep0 maxpacket: 8
[  159.632405][  T529] usb 1-1: config index 0 descriptor too short (expected 5924, got 36)
[  159.649019][  T529] usb 1-1: config 250 has an invalid interface number: 228 but max is -1
[  159.666866][  T529] usb 1-1: config 250 has 1 interface, different from the descriptor's value: 0
[  159.689299][ T2783] netlink: 8 bytes leftover after parsing attributes in process `syz.1.637'.
[  159.698287][  T529] usb 1-1: config 250 has no interface number 0
[  159.706661][  T529] usb 1-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024
[  159.719659][  T529] usb 1-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024
[  159.740207][  T529] usb 1-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0
[  159.750582][  T529] usb 1-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0
[  159.768119][  T529] usb 1-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17
[  159.826111][  T529] usb 1-1: config 250 interface 228 has no altsetting 0
[  160.538944][ T2788] fuse: Unknown parameter '&���-��l�J"��Q>f�.c��H��@t:a�Q�'
[  160.641494][  T529] usb 1-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07
[  160.659486][  T529] usb 1-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59
[  160.671790][  T529] usb 1-1: Product: syz
[  160.725117][ T2800] 9pnet: Insufficient options for proto=fd
[  160.731818][  T529] usb 1-1: SerialNumber: syz
[  160.774745][  T529] hub 1-1:250.228: bad descriptor, ignoring hub
[  160.784088][  T529] hub: probe of 1-1:250.228 failed with error -5
[  160.800386][ T2805] netlink: 8 bytes leftover after parsing attributes in process `syz.1.644'.
[  160.810275][ T2807] netlink: 8 bytes leftover after parsing attributes in process `syz.4.645'.
[  160.873016][ T2807] loop4: detected capacity change from 0 to 512
[  160.953445][ T2807] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  160.972910][ T2807] ext4 filesystem being mounted at /143/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  160.984700][  T529] usblp 1-1:250.228: usblp0: USB Bidirectional printer dev 17 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292
[  161.207567][ T2815] fuse: Unknown parameter '&���-��l�J"��Q>f�.c��H��@t:a�Q�'
[  161.276363][ T2816] netlink: 80 bytes leftover after parsing attributes in process `syz.0.632'.
[  161.467331][ T2819] fuse: Bad value for 'fd'
[  161.477955][ T2819] loop3: detected capacity change from 0 to 1024
[  161.502260][ T2819] EXT4-fs (loop3): Ignoring removed oldalloc option
[  161.509343][ T2819] EXT4-fs (loop3): Ignoring removed nobh option
[  161.509361][ T2819] EXT4-fs (loop3): Mount option "noacl" will be removed by 3.5
[  161.509361][ T2819] Contact linux-ext4@vger.kernel.org if you think we should keep it.
[  161.509361][ T2819] 
[  161.519325][ T2819] EXT4-fs (loop3): mounted filesystem without journal. Opts: delalloc,errors=remount-ro,barrier=0x0000000000000005,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004005b1,oldalloc,grpquota,nobh,noacl,min_batch_time=0x0000000000000800,inlinecrypt,. Quota mode: writeback.
[  161.667151][  T529] usb 1-1: USB disconnect, device number 17
[  161.678968][ T2825] netlink: 8 bytes leftover after parsing attributes in process `syz.1.648'.
[  161.688380][  T529] usblp0: removed
[  161.748353][ T2823] loop2: detected capacity change from 0 to 2048
[  161.767568][ T2823] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option
[  161.787657][ T2823] EXT4-fs (loop2): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000000000,grpquota,nomblk_io_submit,stripe=0x000000000004ffff,norecovery,errors=remount-ro,max_batch_time=0x0000000000000814,. Quota mode: writeback.
[  162.519616][ T2832] fuse: Unknown parameter '&���-��l�J"��Q>f�.c��H��@t:a�Q�'
[  162.718912][  T529] usb 4-1: new high-speed USB device number 19 using dummy_hcd
[  162.749012][ T2843] 9pnet: Insufficient options for proto=fd
[  162.813285][   T30] audit: type=1400 audit(1769174502.381:414): avc:  denied  { create } for  pid=2846 comm="syz.1.655" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[  162.831712][ T2834] loop4: detected capacity change from 0 to 40427
[  162.906187][ T2834] F2FS-fs (loop4): Unrecognized mount option "J��g�x���01777777777777777777777" or missing value
[  162.955635][  T529] usb 4-1: Using ep0 maxpacket: 8
[  163.264479][  T529] usb 4-1: config 5 has an invalid interface number: 132 but max is 2
[  163.272807][  T529] usb 4-1: config 5 has an invalid interface number: 70 but max is 2
[  163.281062][  T529] usb 4-1: config 5 contains an unexpected descriptor of type 0x2, skipping
[  163.289904][  T529] usb 4-1: config 5 contains an unexpected descriptor of type 0x2, skipping
[  163.298595][  T529] usb 4-1: config 5 has an invalid interface number: 25 but max is 2
[  163.306670][  T529] usb 4-1: config 5 has no interface number 0
[  163.312811][  T529] usb 4-1: config 5 has no interface number 1
[  163.318881][  T529] usb 4-1: config 5 has no interface number 2
[  163.324952][  T529] usb 4-1: config 5 interface 132 altsetting 129 endpoint 0xC has an invalid bInterval 239, changing to 7
[  163.336263][  T529] usb 4-1: config 5 interface 132 altsetting 129 bulk endpoint 0xA has invalid maxpacket 8
[  163.346285][ T1936] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[  163.353850][  T529] usb 4-1: config 5 interface 132 altsetting 129 has a duplicate endpoint with address 0xA, skipping
[  163.364740][  T529] usb 4-1: config 5 interface 132 altsetting 129 endpoint 0x6 has invalid maxpacket 1023, setting to 64
[  163.376286][  T529] usb 4-1: config 5 interface 132 altsetting 129 has an invalid endpoint with address 0x0, skipping
[  163.387215][  T529] usb 4-1: config 5 interface 70 altsetting 42 endpoint 0x7 has invalid maxpacket 512, setting to 64
[  163.398281][  T529] usb 4-1: config 5 interface 70 altsetting 42 has a duplicate endpoint with address 0xF, skipping
[  163.409005][  T529] usb 4-1: config 5 interface 70 altsetting 42 has a duplicate endpoint with address 0x7, skipping
[  163.419747][  T529] usb 4-1: config 5 interface 70 altsetting 42 has a duplicate endpoint with address 0x2, skipping
[  163.430461][  T529] usb 4-1: config 5 interface 70 altsetting 42 has a duplicate endpoint with address 0xE, skipping
[  163.441180][  T529] usb 4-1: config 5 interface 70 altsetting 42 endpoint 0xB has invalid maxpacket 1023, setting to 64
[  163.458866][  T529] usb 4-1: config 5 interface 70 altsetting 42 has a duplicate endpoint with address 0xA, skipping
[  163.471402][  T529] usb 4-1: config 5 interface 70 altsetting 42 bulk endpoint 0x8A has invalid maxpacket 32
[  163.481441][  T529] usb 4-1: config 5 interface 132 has no altsetting 0
[  163.488276][  T529] usb 4-1: config 5 interface 70 has no altsetting 0
[  163.495001][  T529] usb 4-1: config 5 interface 25 has no altsetting 0
[  163.518691][ T2862] loop0: detected capacity change from 0 to 256
[  163.559562][ T2862] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3ec, utbl_chksum : 0xe619d30d)
[  163.661917][  T529] usb 4-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=e5.1c
[  163.674310][  T529] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  163.682696][  T529] usb 4-1: Product: syz
[  163.687010][  T529] usb 4-1: Manufacturer: syz
[  163.691772][  T529] usb 4-1: SerialNumber: syz
[  163.698036][ T2867] loop2: detected capacity change from 0 to 2048
[  163.708093][ T2828] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  163.727198][ T1936] usb 5-1: config 0 has an invalid interface number: 64 but max is 0
[  163.735310][ T1936] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  163.753100][ T2867] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option
[  163.772798][ T1936] usb 5-1: config 0 has no interface number 0
[  163.776269][ T2867] EXT4-fs (loop2): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000000000,grpquota,nomblk_io_submit,stripe=0x000000000004ffff,norecovery,errors=remount-ro,max_batch_time=0x0000000000000814,. Quota mode: writeback.
[  163.975500][ T2880] loop2: detected capacity change from 0 to 40427
[  163.984459][ T1936] usb 5-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48
[  163.993580][ T1936] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  164.001729][ T1936] usb 5-1: Product: syz
[  164.126692][ T2880] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[  164.176599][ T2880] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  164.245799][ T2880] F2FS-fs (loop2): Found nat_bits in checkpoint
[  164.246865][  T529] usbhid 4-1:5.132: couldn't find an input interrupt endpoint
[  164.265265][ T1936] usb 5-1: Manufacturer: syz
[  164.269888][ T1936] usb 5-1: SerialNumber: syz
[  164.276112][ T1936] usb 5-1: config 0 descriptor??
[  164.285104][ T2880] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  164.292223][ T2880] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  164.312334][   T30] audit: type=1400 audit(1769174503.946:415): avc:  denied  { setattr } for  pid=2879 comm="syz.2.665" name="file1" dev="loop2" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[  164.334722][ T1936] usb 5-1: Found UVC 0.00 device syz (046d:0823)
[  164.341446][ T1936] usb 5-1: No valid video chain found.
[  164.359392][  T529] usb 4-1: USB disconnect, device number 19
[  164.552555][ T1933] usb 5-1: USB disconnect, device number 17
[  164.741261][ T2907] loop0: detected capacity change from 0 to 256
[  164.800823][ T2907] loop0: detected capacity change from 0 to 4096
[  164.813021][ T2907] EXT4-fs (loop0): Test dummy encryption mode enabled
[  164.826960][ T2907] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c019, mo2=0002]
[  164.840619][ T2907] System zones: 0-5
[  164.848970][ T2907] EXT4-fs (loop0): mounted filesystem without journal. Opts: debug,auto_da_alloc,nombcache,test_dummy_encryption,nodiscard,min_batch_time=0x0000000000000000,commit=0x0000000000000000,nodiscard,,errors=continue. Quota mode: writeback.
[  165.276341][ T2922] loop0: detected capacity change from 0 to 256
[  165.292951][ T2922] exfat: Deprecated parameter 'utf8'
[  165.298524][ T2922] exfat: Deprecated parameter 'namecase'
[  165.349499][ T2922] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d)
[  165.363875][ T2924] loop2: detected capacity change from 0 to 256
[  165.389457][   T30] audit: type=1400 audit(1769174505.079:416): avc:  denied  { append } for  pid=2921 comm="syz.0.675" path="/123/file1/file1" dev="loop0" ino=1048614 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  165.412981][ T1933] usb 5-1: new high-speed USB device number 18 using dummy_hcd
[  165.413342][ T2924] exfat: Deprecated parameter 'utf8'
[  165.420978][ T2922] FAULT_INJECTION: forcing a failure.
[  165.420978][ T2922] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  165.435577][ T2924] exfat: Deprecated parameter 'namecase'
[  165.446483][ T2922] CPU: 0 PID: 2922 Comm: syz.0.675 Not tainted syzkaller #0
[  165.453770][ T2922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  165.463819][ T2922] Call Trace:
[  165.467091][ T2922]  <TASK>
[  165.470016][ T2922]  __dump_stack+0x21/0x30
[  165.474344][ T2922]  dump_stack_lvl+0x110/0x170
[  165.479026][ T2922]  ? show_regs_print_info+0x20/0x20
[  165.484225][ T2922]  dump_stack+0x15/0x20
[  165.488375][ T2922]  should_fail+0x3c1/0x510
[  165.492796][ T2922]  should_fail_usercopy+0x1a/0x20
[  165.497815][ T2922]  strncpy_from_user+0x24/0x2e0
[  165.502662][ T2922]  ? kmem_cache_alloc+0xf7/0x260
[  165.507600][ T2922]  getname_flags+0xf4/0x500
[  165.512101][ T2922]  user_path_at_empty+0x30/0x1c0
[  165.517035][ T2922]  do_fchownat+0xf5/0x240
[  165.521363][ T2922]  ? chown_common+0x680/0x680
[  165.526021][ T2922]  ? debug_smp_processor_id+0x17/0x20
[  165.531372][ T2922]  __x64_sys_lchown+0x85/0x90
[  165.536026][ T2922]  x64_sys_call+0x171/0x9a0
[  165.540505][ T2922]  do_syscall_64+0x4c/0xa0
[  165.544901][ T2922]  ? clear_bhb_loop+0x50/0xa0
[  165.549560][ T2922]  ? clear_bhb_loop+0x50/0xa0
[  165.554212][ T2922]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  165.560082][ T2922] RIP: 0033:0x7f3d00cc0cb9
[  165.564475][ T2922] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  165.584056][ T2922] RSP: 002b:00007f3cff71d028 EFLAGS: 00000246 ORIG_RAX: 000000000000005e
[  165.592451][ T2922] RAX: ffffffffffffffda RBX: 00007f3d00f3bfa0 RCX: 00007f3d00cc0cb9
[  165.600399][ T2922] RDX: 000000000000ee01 RSI: 0000000000000000 RDI: 0000200000000080
[  165.608350][ T2922] RBP: 00007f3cff71d090 R08: 0000000000000000 R09: 0000000000000000
[  165.616299][ T2922] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  165.624247][ T2922] R13: 00007f3d00f3c038 R14: 00007f3d00f3bfa0 R15: 00007ffde693b768
[  165.632198][ T2922]  </TASK>
[  165.643508][ T2927] loop3: detected capacity change from 0 to 512
[  165.671190][ T2924] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d)
[  165.684549][ T2927] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  165.733368][ T2931] loop0: detected capacity change from 0 to 512
[  165.740746][ T2927] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.677: invalid indirect mapped block 4294967295 (level 1)
[  165.754756][ T1933] usb 5-1: Using ep0 maxpacket: 16
[  165.773039][ T2927] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.677: invalid indirect mapped block 4294967295 (level 1)
[  165.789035][ T2927] EXT4-fs (loop3): 2 truncates cleaned up
[  165.795266][ T2931] EXT4-fs (loop0): Ignoring removed bh option
[  165.797979][ T2927] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpjquota=,init_itable,dioread_nolock,bsdgroups,,errors=continue. Quota mode: writeback.
[  165.826628][ T2931] EXT4-fs (loop0): orphan cleanup on readonly fs
[  165.843694][ T2931] EXT4-fs error (device loop0): ext4_map_blocks:630: inode #11: block 1: comm syz.0.679: lblock 0 mapped to illegal pblock 1 (length 1)
[  165.858184][ T2931] EXT4-fs (loop0): Remounting filesystem read-only
[  165.865774][ T2931] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2826: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  165.878840][ T2931] EXT4-fs error (device loop0): ext4_xattr_inode_update_ref:1001: inode #11: comm syz.0.679: EA inode 11 ref wraparound: ref_count=0 ref_change=-1
[  165.899231][ T2931] EXT4-fs (loop0): Remounting filesystem read-only
[  165.905800][ T2931] EXT4-fs warning (device loop0): ext4_xattr_inode_dec_ref_all:1190: inode #11: comm syz.0.679: ea_inode dec ref err=-117
[  165.918760][ T2931] EXT4-fs (loop0): 1 orphan inode deleted
[  165.924487][ T2931] EXT4-fs (loop0): mounted filesystem without journal. Opts: bh,errors=remount-ro,debug_want_extra_isize=0x000000000000005c,mb_optimize_scan=0x0000000000000001,barrier=0x0000000000008000,acl,init_itable=0x0000000000000007,. Quota mode: none.
[  165.951217][   T30] audit: type=1400 audit(1769174505.667:417): avc:  denied  { write } for  pid=2930 comm="syz.0.679" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  166.089636][ T1933] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  166.128576][ T1933] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  166.171464][ T1933] usb 5-1: Product: syz
[  166.194509][ T1933] usb 5-1: Manufacturer: syz
[  166.222546][ T2950] netlink: 8 bytes leftover after parsing attributes in process `syz.0.684'.
[  166.225976][ T1933] usb 5-1: SerialNumber: syz
[  166.234119][ T2950] loop0: detected capacity change from 0 to 512
[  166.245498][ T1933] r8152-cfgselector 5-1: config 0 descriptor??
[  166.262191][ T2950] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  166.273487][ T2950] ext4 filesystem being mounted at /127/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  166.284068][ T1936] usb 4-1: new high-speed USB device number 20 using dummy_hcd
[  166.486359][ T2954] fuse: Unknown parameter '&���-��l�J"��Q>f�.c��H��@t:a�Q�'
[  166.537284][ T1933] r8152-cfgselector 5-1: Unknown version 0x0000
[  166.588665][ T1933] r8152-cfgselector 5-1: Unknown version 0x78d0
[  166.595002][ T1933] r8152-cfgselector 5-1: bad CDC descriptors
[  166.680059][ T1936] usb 4-1: Using ep0 maxpacket: 32
[  166.736894][ T2964] fuse: Bad value for 'fd'
[  166.745152][ T2964] loop2: detected capacity change from 0 to 1024
[  166.769368][ T2964] EXT4-fs (loop2): Ignoring removed oldalloc option
[  166.776121][ T2964] EXT4-fs (loop2): Ignoring removed nobh option
[  166.782405][ T2964] EXT4-fs (loop2): Mount option "noacl" will be removed by 3.5
[  166.782405][ T2964] Contact linux-ext4@vger.kernel.org if you think we should keep it.
[  166.782405][ T2964] 
[  166.784858][ T1933] r8152-cfgselector 5-1: Unknown version 0x0000
[  166.809801][ T1933] r8152-cfgselector 5-1: USB disconnect, device number 18
[  166.814772][ T2964] EXT4-fs (loop2): mounted filesystem without journal. Opts: delalloc,errors=remount-ro,barrier=0x0000000000000005,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004005b1,oldalloc,grpquota,nobh,noacl,min_batch_time=0x0000000000000800,inlinecrypt,. Quota mode: writeback.
[  166.843380][ T1936] usb 4-1: config 0 has an invalid interface number: 188 but max is 0
[  166.851794][ T1936] usb 4-1: config 0 has no interface number 0
[  166.857909][ T1936] usb 4-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32
[  166.917902][ T2969] netlink: 8 bytes leftover after parsing attributes in process `syz.2.689'.
[  166.929254][ T2969] loop2: detected capacity change from 0 to 512
[  166.948403][ T2969] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  166.959432][ T2969] ext4 filesystem being mounted at /123/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  167.042674][ T1936] usb 4-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36
[  167.051727][ T1936] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  167.059921][ T1936] usb 4-1: Product: syz
[  167.064343][ T1936] usb 4-1: Manufacturer: syz
[  167.068958][ T1936] usb 4-1: SerialNumber: syz
[  167.078485][ T1936] usb 4-1: config 0 descriptor??
[  167.161894][ T2973] fuse: Unknown parameter '&���-��l�J"��Q>f�.c��H��@t:a�Q�'
[  167.270788][ T2927] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  167.339389][ T2981] loop4: detected capacity change from 0 to 512
[  167.361002][ T2981] EXT4-fs (loop4): Ignoring removed mblk_io_submit option
[  167.373401][   T30] audit: type=1400 audit(1769174507.158:418): avc:  denied  { read append } for  pid=2978 comm="syz.0.690" name="vga_arbiter" dev="devtmpfs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[  167.397964][   T30] audit: type=1400 audit(1769174507.158:419): avc:  denied  { open } for  pid=2978 comm="syz.0.690" path="/dev/vga_arbiter" dev="devtmpfs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[  167.423156][ T2981] EXT4-fs error (device loop4): ext4_get_branch:178: inode #13: block 2: comm syz.4.693: invalid block
[  167.435341][ T2981] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.693: invalid indirect mapped block 10 (level 1)
[  167.455360][ T2981] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.693: invalid indirect mapped block 8 (level 1)
[  167.468924][ T2981] EXT4-fs (loop4): 1 truncate cleaned up
[  167.475122][ T2981] EXT4-fs (loop4): mounted filesystem without journal. Opts: mblk_io_submit,resuid=0x000000000000ee00,,errors=continue. Quota mode: none.
[  167.489721][ T2927] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  167.512752][   T30] audit: type=1400 audit(1769174507.305:420): avc:  denied  { ioctl } for  pid=2980 comm="syz.4.693" path="socket:[33358]" dev="sockfs" ino=33358 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  167.520973][ T2981] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check.
[  167.592357][ T2993] netlink: 80 bytes leftover after parsing attributes in process `syz.1.698'.
[  168.004537][ T3003] loop2: detected capacity change from 0 to 40427
[  168.025803][ T3003] F2FS-fs (loop2): Fix alignment : done, start(4096) end(16896) block(12288)
[  168.035430][ T3003] F2FS-fs (loop2): invalid crc value
[  168.040985][ T3003] F2FS-fs (loop2): invalid crc value
[  168.046347][ T3003] F2FS-fs (loop2): Failed to get valid F2FS checkpoint
[  168.080358][ T1936] asix 4-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61
[  168.090577][ T1936] asix: probe of 4-1:0.188 failed with error -61
[  168.118388][ T1933] usb 2-1: new high-speed USB device number 21 using dummy_hcd
[  168.185114][ T2873] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 5: invalid block bitmap
[  168.282040][   T30] audit: type=1400 audit(1769174508.113:421): avc:  denied  { bind } for  pid=3005 comm="syz.0.700" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  168.309631][ T3008] 9pnet: Insufficient options for proto=fd
[  168.346983][ T1933] usb 2-1: Using ep0 maxpacket: 8
[  168.461331][ T1933] usb 2-1: config index 0 descriptor too short (expected 5924, got 36)
[  168.469679][ T1933] usb 2-1: config 250 has an invalid interface number: 228 but max is -1
[  168.478149][ T1933] usb 2-1: config 250 has 1 interface, different from the descriptor's value: 0
[  168.487200][ T1933] usb 2-1: config 250 has no interface number 0
[  168.493502][ T1933] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024
[  168.505078][ T1933] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024
[  168.515607][ T1933] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0
[  168.525880][ T1933] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0
[  168.536155][ T1933] usb 2-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17
[  168.549636][ T1933] usb 2-1: config 250 interface 228 has no altsetting 0
[  168.575638][  T529] usb 1-1: new high-speed USB device number 18 using dummy_hcd
[  168.670959][ T1933] usb 2-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07
[  168.680173][ T1933] usb 2-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59
[  168.688511][ T1933] usb 2-1: Product: syz
[  168.692807][ T1933] usb 2-1: SerialNumber: syz
[  168.747746][ T1933] hub 2-1:250.228: bad descriptor, ignoring hub
[  168.757174][ T1933] hub: probe of 2-1:250.228 failed with error -5
[  168.813795][  T529] usb 1-1: Using ep0 maxpacket: 16
[  168.960963][ T1933] usblp 2-1:250.228: usblp0: USB Bidirectional printer dev 21 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292
[  169.080545][  T529] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  169.089641][  T529] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  169.097625][  T529] usb 1-1: Product: syz
[  169.101815][  T529] usb 1-1: Manufacturer: syz
[  169.106385][  T529] usb 1-1: SerialNumber: syz
[  169.111596][  T529] r8152-cfgselector 1-1: config 0 descriptor??
[  169.204973][ T2996] netlink: 80 bytes leftover after parsing attributes in process `syz.1.698'.
[  169.252482][  T583] usb 4-1: USB disconnect, device number 20
[  169.290188][  T495] usb 2-1: USB disconnect, device number 21
[  169.296622][  T495] usblp0: removed
[  169.325736][ T3030] netlink: 8 bytes leftover after parsing attributes in process `syz.3.710'.
[  169.336204][ T3030] loop3: detected capacity change from 0 to 512
[  169.347261][  T529] r8152-cfgselector 1-1: Unknown version 0x0000
[  169.386490][  T529] r8152-cfgselector 1-1: Unknown version 0x78d0
[  169.392959][  T529] r8152-cfgselector 1-1: bad CDC descriptors
[  169.406154][ T3030] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  169.417247][ T3030] ext4 filesystem being mounted at /143/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  169.575375][ T3035] fuse: Unknown parameter '&���-��l�J"��Q>f�.c��H��@t:a�Q�'
[  169.737015][  T529] r8152-cfgselector 1-1: Unknown version 0x0000
[  169.743960][  T529] r8152-cfgselector 1-1: USB disconnect, device number 18
[  169.798430][ T3040] netlink: 8 bytes leftover after parsing attributes in process `syz.4.712'.
[  169.810252][ T3040] loop4: detected capacity change from 0 to 512
[  169.838226][ T3040] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  169.849268][ T3040] ext4 filesystem being mounted at /153/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  170.070451][ T3048] fuse: Unknown parameter '&���-��l�J"��Q>f�.c��H��@t:a�Q�'
[  170.099737][  T495] usb 2-1: new high-speed USB device number 22 using dummy_hcd
[  170.251739][ T3050] binder: 3049:3050 ioctl c018620c 200000000000 returned -22
[  170.288718][ T3052] Illegal XDP return value 4294967294, expect packet loss!
[  170.289988][ T3054] FAULT_INJECTION: forcing a failure.
[  170.289988][ T3054] name failslab, interval 1, probability 0, space 0, times 0
[  170.309651][ T3054] CPU: 1 PID: 3054 Comm: syz.0.716 Not tainted syzkaller #0
[  170.316936][ T3054] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  170.326976][ T3054] Call Trace:
[  170.330238][ T3054]  <TASK>
[  170.333151][ T3054]  __dump_stack+0x21/0x30
[  170.337465][ T3054]  dump_stack_lvl+0x110/0x170
[  170.342122][ T3054]  ? show_regs_print_info+0x20/0x20
[  170.347305][ T3054]  ? avc_has_extended_perms+0x9d7/0xed0
[  170.352830][ T3054]  ? __stack_depot_save+0x34/0x480
[  170.357921][ T3054]  dump_stack+0x15/0x20
[  170.362055][ T3054]  should_fail+0x3c1/0x510
[  170.366449][ T3054]  __should_failslab+0xa4/0xe0
[  170.371190][ T3054]  should_failslab+0x9/0x20
[  170.375670][ T3054]  slab_pre_alloc_hook+0x3b/0xe0
[  170.380586][ T3054]  kmem_cache_alloc_trace+0x48/0x270
[  170.385849][ T3054]  ? binder_get_thread+0x23e/0x960
[  170.390941][ T3054]  binder_get_thread+0x23e/0x960
[  170.395855][ T3054]  binder_ioctl+0x278/0x1de0
[  170.400427][ T3054]  ? ioctl_has_perm+0x1b8/0x4f0
[  170.405257][ T3054]  ? binder_poll+0x2d0/0x2d0
[  170.409825][ T3054]  ? security_file_permission+0x79/0xa0
[  170.415350][ T3054]  ? has_cap_mac_admin+0x370/0x370
[  170.420441][ T3054]  ? vfs_write+0xc72/0xfd0
[  170.424837][ T3054]  ? selinux_file_ioctl+0x3a0/0x4d0
[  170.430016][ T3054]  ? selinux_file_alloc_security+0x120/0x120
[  170.435974][ T3054]  ? mutex_unlock+0x8f/0x230
[  170.440541][ T3054]  ? __mutex_lock_slowpath+0x10/0x10
[  170.445803][ T3054]  ? __fget_files+0x2c4/0x320
[  170.450459][ T3054]  ? security_file_ioctl+0x84/0xa0
[  170.455550][ T3054]  ? binder_poll+0x2d0/0x2d0
[  170.460119][ T3054]  __se_sys_ioctl+0x121/0x1a0
[  170.464777][ T3054]  __x64_sys_ioctl+0x7b/0x90
[  170.469348][ T3054]  x64_sys_call+0x2f/0x9a0
[  170.473743][ T3054]  do_syscall_64+0x4c/0xa0
[  170.478138][ T3054]  ? clear_bhb_loop+0x50/0xa0
[  170.482792][ T3054]  ? clear_bhb_loop+0x50/0xa0
[  170.487446][ T3054]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  170.493319][ T3054] RIP: 0033:0x7f3d00cc0cb9
[  170.497714][ T3054] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  170.517296][ T3054] RSP: 002b:00007f3cff71d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  170.525689][ T3054] RAX: ffffffffffffffda RBX: 00007f3d00f3bfa0 RCX: 00007f3d00cc0cb9
[  170.533639][ T3054] RDX: 0000200000000000 RSI: 00000000c018620c RDI: 0000000000000004
[  170.541586][ T3054] RBP: 00007f3cff71d090 R08: 0000000000000000 R09: 0000000000000000
[  170.549537][ T3054] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  170.557485][ T3054] R13: 00007f3d00f3c038 R14: 00007f3d00f3bfa0 R15: 00007ffde693b768
[  170.565440][ T3054]  </TASK>
[  170.569342][ T3054] binder: 3053:3054 ioctl c018620c 200000000000 returned -12
[  170.577633][ T3055] bridge0: port 3(syz_tun) entered blocking state
[  170.588553][ T3055] bridge0: port 3(syz_tun) entered disabled state
[  170.605463][ T3055] device syz_tun entered promiscuous mode
[  170.611295][ T3055] bridge0: port 3(syz_tun) entered blocking state
[  170.617738][ T3055] bridge0: port 3(syz_tun) entered forwarding state
[  170.709468][  T495] usb 2-1: Using ep0 maxpacket: 8
[  170.821121][ T3068] loop4: detected capacity change from 0 to 512
[  170.836980][ T3068] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  170.849155][  T495] usb 2-1: config 5 has an invalid interface number: 132 but max is 2
[  170.857873][  T495] usb 2-1: config 5 has an invalid interface number: 70 but max is 2
[  170.867587][ T3068] EXT4-fs error (device loop4): ext4_get_branch:178: inode #11: block 4294967295: comm syz.4.719: invalid block
[  170.879813][  T495] usb 2-1: config 5 contains an unexpected descriptor of type 0x2, skipping
[  170.888671][ T3068] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.719: invalid indirect mapped block 4294967295 (level 1)
[  170.902569][  T495] usb 2-1: config 5 contains an unexpected descriptor of type 0x2, skipping
[  170.911428][ T3068] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.719: invalid indirect mapped block 4294967295 (level 1)
[  170.925334][  T495] usb 2-1: config 5 has an invalid interface number: 25 but max is 2
[  170.933493][  T495] usb 2-1: config 5 has no interface number 0
[  170.939904][ T3068] EXT4-fs (loop4): 2 truncates cleaned up
[  170.945673][  T495] usb 2-1: config 5 has no interface number 1
[  170.947688][ T3068] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpjquota=,init_itable,dioread_nolock,bsdgroups,,errors=continue. Quota mode: writeback.
[  170.951828][  T495] usb 2-1: config 5 has no interface number 2
[  170.973111][  T495] usb 2-1: config 5 interface 132 altsetting 129 endpoint 0xC has an invalid bInterval 239, changing to 7
[  170.984489][  T495] usb 2-1: config 5 interface 132 altsetting 129 bulk endpoint 0xA has invalid maxpacket 8
[  170.994578][  T495] usb 2-1: config 5 interface 132 altsetting 129 has a duplicate endpoint with address 0xA, skipping
[  171.005523][  T495] usb 2-1: config 5 interface 132 altsetting 129 endpoint 0x6 has invalid maxpacket 1023, setting to 64
[  171.019965][  T495] usb 2-1: config 5 interface 132 altsetting 129 has an invalid endpoint with address 0x0, skipping
[  171.030971][  T495] usb 2-1: config 5 interface 70 altsetting 42 endpoint 0x7 has invalid maxpacket 512, setting to 64
[  171.041909][  T495] usb 2-1: config 5 interface 70 altsetting 42 has a duplicate endpoint with address 0xF, skipping
[  171.052679][  T495] usb 2-1: config 5 interface 70 altsetting 42 has a duplicate endpoint with address 0x7, skipping
[  171.063452][  T495] usb 2-1: config 5 interface 70 altsetting 42 has a duplicate endpoint with address 0x2, skipping
[  171.074220][  T495] usb 2-1: config 5 interface 70 altsetting 42 has a duplicate endpoint with address 0xE, skipping
[  171.084992][  T495] usb 2-1: config 5 interface 70 altsetting 42 endpoint 0xB has invalid maxpacket 1023, setting to 64
[  171.096011][  T495] usb 2-1: config 5 interface 70 altsetting 42 has a duplicate endpoint with address 0xA, skipping
[  171.106763][  T495] usb 2-1: config 5 interface 70 altsetting 42 bulk endpoint 0x8A has invalid maxpacket 32
[  171.118618][  T495] usb 2-1: config 5 interface 132 has no altsetting 0
[  171.125517][  T495] usb 2-1: config 5 interface 70 has no altsetting 0
[  171.132695][  T495] usb 2-1: config 5 interface 25 has no altsetting 0
[  171.280897][  T529] usb 5-1: new high-speed USB device number 19 using dummy_hcd
[  171.338134][  T495] usb 2-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=e5.1c
[  171.352608][  T495] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  171.369270][  T495] usb 2-1: Product: syz
[  171.377766][  T495] usb 2-1: Manufacturer: syz
[  171.382363][  T495] usb 2-1: SerialNumber: syz
[  171.414371][ T3044] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  171.519051][  T529] usb 5-1: Using ep0 maxpacket: 32
[  171.597369][ T3074] loop3: detected capacity change from 0 to 512
[  171.619033][ T3074] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  171.623204][   T30] audit: type=1400 audit(1769174511.620:422): avc:  denied  { name_bind } for  pid=3076 comm="syz.2.723" src=65530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=rawip_socket permissive=1
[  171.652552][  T529] usb 5-1: config 0 has an invalid interface number: 188 but max is 0
[  171.671224][  T529] usb 5-1: config 0 has no interface number 0
[  171.681014][  T529] usb 5-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32
[  171.757900][  T495] usbhid 2-1:5.132: couldn't find an input interrupt endpoint
[  171.768769][ T3078] loop2: detected capacity change from 0 to 40427
[  171.868549][ T3078] F2FS-fs (loop2): fault_injection options not supported
[  171.911881][ T3078] F2FS-fs (loop2): fault_type options not supported
[  171.965848][  T495] usb 2-1: USB disconnect, device number 22
[  172.011487][ T3078] F2FS-fs (loop2): invalid crc value
[  172.029116][   T30] audit: type=1400 audit(1769174512.050:423): avc:  denied  { audit_read } for  pid=3081 comm="syz.0.724" capability=37  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  172.049260][ T3086] netlink: 8 bytes leftover after parsing attributes in process `syz.0.725'.
[  172.059936][ T3078] F2FS-fs (loop2): Found nat_bits in checkpoint
[  172.071704][  T529] usb 5-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36
[  172.077254][ T3086] loop0: detected capacity change from 0 to 512
[  172.087131][  T529] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  172.104810][  T529] usb 5-1: Product: syz
[  172.109039][  T529] usb 5-1: Manufacturer: syz
[  172.113812][  T529] usb 5-1: SerialNumber: syz
[  172.117028][ T3078] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  172.119458][  T529] usb 5-1: config 0 descriptor??
[  172.138671][ T3086] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  172.150936][ T3086] ext4 filesystem being mounted at /139/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  172.157757][ T3068] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  172.328338][ T3092] fuse: Unknown parameter '&���-��l�J"��Q>f�.c��H��@t:a�Q�'
[  172.565003][ T3093] attempt to access beyond end of device
[  172.565003][ T3093] loop2: rw=2049, want=45104, limit=40427
[  172.643076][ T3068] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  173.093780][ T3095] netlink: 80 bytes leftover after parsing attributes in process `syz.3.726'.
[  174.252580][  T495] usb 4-1: new high-speed USB device number 21 using dummy_hcd
[  174.260580][ T3033] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 5: invalid block bitmap
[  174.396140][  T529] asix 5-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61
[  174.406556][  T529] asix: probe of 5-1:0.188 failed with error -61
[  174.458769][ T3113] loop0: detected capacity change from 0 to 512
[  174.676591][ T3113] EXT4-fs (loop0): orphan cleanup on readonly fs
[  174.685270][ T3113] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.731: bg 0: block 248: padding at end of block bitmap is not set
[  174.700655][ T3113] Quota error (device loop0): write_blk: dquota write failed
[  174.708180][ T3113] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota
[  174.718145][ T3113] EXT4-fs error (device loop0): ext4_acquire_dquot:6200: comm syz.0.731: Failed to acquire dquot type 1
[  174.731142][ T3113] EXT4-fs (loop0): 1 truncate cleaned up
[  174.737482][ T3113] EXT4-fs (loop0): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,auto_da_alloc,noload,nodiscard,,errors=continue. Quota mode: writeback.
[  175.123679][   T20] usb 1-1: new high-speed USB device number 19 using dummy_hcd
[  175.406117][  T495] usb 4-1: Using ep0 maxpacket: 8
[  175.524216][  T495] usb 4-1: config index 0 descriptor too short (expected 5924, got 36)
[  175.567512][   T20] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[  175.577376][  T495] usb 4-1: config 250 has an invalid interface number: 228 but max is -1
[  175.586975][  T495] usb 4-1: config 250 has 1 interface, different from the descriptor's value: 0
[  175.594279][   T20] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[  175.619004][  T495] usb 4-1: config 250 has no interface number 0
[  175.632794][  T495] usb 4-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024
[  175.644564][  T495] usb 4-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024
[  175.655461][  T495] usb 4-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0
[  175.665711][  T495] usb 4-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0
[  175.681991][   T20] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  175.691548][  T495] usb 4-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17
[  175.700854][  T529] usb 5-1: USB disconnect, device number 19
[  175.720989][  T495] usb 4-1: config 250 interface 228 has no altsetting 0
[  175.775743][ T3124] netlink: 8 bytes leftover after parsing attributes in process `syz.4.733'.
[  175.802809][ T3124] loop4: detected capacity change from 0 to 512
[  175.844224][   T20] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  175.853448][  T495] usb 4-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07
[  175.859151][   T20] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  175.874887][  T495] usb 4-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59
[  175.875317][   T20] usb 1-1: Product: syz
[  175.887627][   T20] usb 1-1: Manufacturer: syz
[  175.892268][  T495] usb 4-1: Product: syz
[  175.892624][   T20] usb 1-1: SerialNumber: syz
[  175.904222][  T495] usb 4-1: SerialNumber: syz
[  175.906087][ T3124] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  175.920003][ T3124] ext4 filesystem being mounted at /155/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  175.958184][  T495] usb 4-1: can't set config #250, error -71
[  176.005492][  T495] usb 4-1: USB disconnect, device number 21
[  176.305228][  T583] usb 2-1: new high-speed USB device number 23 using dummy_hcd
[  176.500991][  T495] usb 4-1: new high-speed USB device number 22 using dummy_hcd
[  176.539037][  T583] usb 2-1: Using ep0 maxpacket: 8
[  176.653376][  T583] usb 2-1: config 5 has an invalid interface number: 132 but max is 2
[  176.661655][  T583] usb 2-1: config 5 has an invalid interface number: 70 but max is 2
[  176.670083][  T583] usb 2-1: config 5 contains an unexpected descriptor of type 0x2, skipping
[  176.679011][  T583] usb 2-1: config 5 contains an unexpected descriptor of type 0x2, skipping
[  176.688210][  T583] usb 2-1: config 5 has an invalid interface number: 25 but max is 2
[  176.696542][  T583] usb 2-1: config 5 has no interface number 0
[  176.702847][  T583] usb 2-1: config 5 has no interface number 1
[  176.708965][   T30] audit: type=1400 audit(1769174516.963:424): avc:  denied  { accept } for  pid=3143 comm="syz.4.740" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1
[  176.728282][  T583] usb 2-1: config 5 has no interface number 2
[  176.734417][  T495] usb 4-1: Using ep0 maxpacket: 32
[  176.739673][  T583] usb 2-1: config 5 interface 132 altsetting 129 endpoint 0xC has an invalid bInterval 239, changing to 7
[  176.751078][  T583] usb 2-1: config 5 interface 132 altsetting 129 bulk endpoint 0xA has invalid maxpacket 8
[  176.766938][  T583] usb 2-1: config 5 interface 132 altsetting 129 has a duplicate endpoint with address 0xA, skipping
[  176.817328][  T583] usb 2-1: config 5 interface 132 altsetting 129 endpoint 0x6 has invalid maxpacket 1023, setting to 64
[  176.828658][  T583] usb 2-1: config 5 interface 132 altsetting 129 has an invalid endpoint with address 0x0, skipping
[  176.839526][  T583] usb 2-1: config 5 interface 70 altsetting 42 endpoint 0x7 has invalid maxpacket 512, setting to 64
[  176.850963][  T583] usb 2-1: config 5 interface 70 altsetting 42 has a duplicate endpoint with address 0xF, skipping
[  176.861749][  T583] usb 2-1: config 5 interface 70 altsetting 42 has a duplicate endpoint with address 0x7, skipping
[  176.872527][  T583] usb 2-1: config 5 interface 70 altsetting 42 has a duplicate endpoint with address 0x2, skipping
[  176.883368][  T583] usb 2-1: config 5 interface 70 altsetting 42 has a duplicate endpoint with address 0xE, skipping
[  176.894327][  T495] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7
[  176.960023][  T583] usb 2-1: config 5 interface 70 altsetting 42 endpoint 0xB has invalid maxpacket 1023, setting to 64
[  176.971115][  T583] usb 2-1: config 5 interface 70 altsetting 42 has a duplicate endpoint with address 0xA, skipping
[  176.982265][  T583] usb 2-1: config 5 interface 70 altsetting 42 bulk endpoint 0x8A has invalid maxpacket 32
[  176.992365][  T583] usb 2-1: config 5 interface 132 has no altsetting 0
[  176.999255][  T583] usb 2-1: config 5 interface 70 has no altsetting 0
[  177.006017][  T583] usb 2-1: config 5 interface 25 has no altsetting 0
[  177.102593][ T3150] netlink: 4 bytes leftover after parsing attributes in process `syz.2.741'.
[  177.124806][ T3150] loop2: detected capacity change from 0 to 4096
[  177.292732][ T3150] EXT4-fs (loop2): Test dummy encryption mode enabled
[  177.322725][ T3150] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a84ec028, mo2=0002]
[  177.330917][ T3150] System zones: 0-5
[  177.337154][ T3150] EXT4-fs (loop2): mounted filesystem without journal. Opts: debug,stripe=0x0000000000000061,errors=remount-ro,test_dummy_encryption=v1,nodiscard,quota,acl,journal_ioprio=0x0000000000000000,resuid=0x0000000000000000,. Quota mode: writeback.
[  177.425018][   T20] usb 1-1: 0:2 : does not exist
[  177.445756][   T20] usb 1-1: USB disconnect, device number 19
[  177.672686][  T495] usb 4-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=33.f9
[  177.681800][  T495] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  177.701485][  T495] usb 4-1: Product: syz
[  177.705659][  T495] usb 4-1: Manufacturer: syz
[  177.710247][  T495] usb 4-1: SerialNumber: syz
[  177.715002][  T583] usb 2-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=e5.1c
[  177.735145][  T495] usb 4-1: config 0 descriptor??
[  177.741902][  T583] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  177.750045][  T583] usb 2-1: Product: syz
[  177.754203][  T583] usb 2-1: Manufacturer: syz
[  177.759015][  T583] usb 2-1: SerialNumber: syz
[  177.777484][ T3130] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  177.788089][  T495] input: KB Gear Tablet as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input8
[  177.900897][ T3159] loop2: detected capacity change from 0 to 256
[  177.915994][ T3159] FAT-fs (loop2): Directory bread(block 64) failed
[  177.923333][ T3159] FAT-fs (loop2): Directory bread(block 65) failed
[  177.929968][ T3159] FAT-fs (loop2): Directory bread(block 66) failed
[  177.936687][ T3159] FAT-fs (loop2): Directory bread(block 67) failed
[  177.943814][ T3159] FAT-fs (loop2): Directory bread(block 68) failed
[  177.950584][ T3159] FAT-fs (loop2): Directory bread(block 69) failed
[  177.957153][ T3159] FAT-fs (loop2): Directory bread(block 70) failed
[  177.964036][ T3159] FAT-fs (loop2): Directory bread(block 71) failed
[  177.970641][ T3159] FAT-fs (loop2): Directory bread(block 72) failed
[  177.977262][ T3159] FAT-fs (loop2): Directory bread(block 73) failed
[  177.987088][   T20] usb 4-1: USB disconnect, device number 22
[  178.015569][  T448] usb 1-1: new high-speed USB device number 20 using dummy_hcd
[  178.083004][  T583] usbhid 2-1:5.132: couldn't find an input interrupt endpoint
[  178.096354][ T3161] FAULT_INJECTION: forcing a failure.
[  178.096354][ T3161] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  178.109610][ T3161] CPU: 0 PID: 3161 Comm: syz.2.745 Not tainted syzkaller #0
[  178.116900][ T3161] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  178.126950][ T3161] Call Trace:
[  178.130227][ T3161]  <TASK>
[  178.133155][ T3161]  __dump_stack+0x21/0x30
[  178.137485][ T3161]  dump_stack_lvl+0x110/0x170
[  178.142160][ T3161]  ? show_regs_print_info+0x20/0x20
[  178.147359][ T3161]  dump_stack+0x15/0x20
[  178.151511][ T3161]  should_fail+0x3c1/0x510
[  178.155924][ T3161]  should_fail_usercopy+0x1a/0x20
[  178.159768][  T583] usb 2-1: USB disconnect, device number 23
[  178.160941][ T3161]  _copy_from_iter+0x21e/0x1070
[  178.171645][ T3161]  ? copy_mc_pipe_to_iter+0x770/0x770
[  178.177018][ T3161]  ? __check_object_size+0x2f4/0x3c0
[  178.182305][ T3161]  kernfs_fop_write_iter+0x1a1/0x400
[  178.187596][ T3161]  ? iov_iter_init+0xbc/0x180
[  178.192269][ T3161]  vfs_write+0x835/0xfd0
[  178.196505][ T3161]  ? file_end_write+0x1b0/0x1b0
[  178.201346][ T3161]  ? wait_for_completion_killable_timeout+0x10/0x10
[  178.207931][ T3161]  ? __fget_files+0x2c4/0x320
[  178.212608][ T3161]  ? __fdget_pos+0x2d2/0x380
[  178.217197][ T3161]  ? ksys_write+0x71/0x250
[  178.221610][ T3161]  ksys_write+0x149/0x250
[  178.225938][ T3161]  ? __ia32_sys_read+0x90/0x90
[  178.230701][ T3161]  ? debug_smp_processor_id+0x17/0x20
[  178.236072][ T3161]  __x64_sys_write+0x7b/0x90
[  178.240660][ T3161]  x64_sys_call+0x8ef/0x9a0
[  178.245161][ T3161]  do_syscall_64+0x4c/0xa0
[  178.249576][ T3161]  ? clear_bhb_loop+0x50/0xa0
[  178.254249][ T3161]  ? clear_bhb_loop+0x50/0xa0
[  178.258922][ T3161]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  178.264818][ T3161] RIP: 0033:0x7fd538e57cb9
[  178.269230][ T3161] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  178.288832][ T3161] RSP: 002b:00007fd5378b4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  178.297250][ T3161] RAX: ffffffffffffffda RBX: 00007fd5390d2fa0 RCX: 00007fd538e57cb9
[  178.305218][ T3161] RDX: 0000000000000048 RSI: 0000200000000400 RDI: 0000000000000003
[  178.313187][ T3161] RBP: 00007fd5378b4090 R08: 0000000000000000 R09: 0000000000000000
[  178.321153][ T3161] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  178.329104][ T3161] R13: 00007fd5390d3038 R14: 00007fd5390d2fa0 R15: 00007fff96401438
[  178.337057][ T3161]  </TASK>
[  178.377682][  T448] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  178.389803][ T3170] netlink: 80 bytes leftover after parsing attributes in process `syz.4.748'.
[  178.414974][ T3180] fuse: Bad value for 'fd'
[  178.423283][ T3180] loop2: detected capacity change from 0 to 1024
[  178.439354][ T3180] EXT4-fs (loop2): Ignoring removed oldalloc option
[  178.446055][ T3180] EXT4-fs (loop2): Ignoring removed nobh option
[  178.452295][ T3180] EXT4-fs (loop2): Mount option "noacl" will be removed by 3.5
[  178.452295][ T3180] Contact linux-ext4@vger.kernel.org if you think we should keep it.
[  178.452295][ T3180] 
[  178.474198][ T3180] EXT4-fs (loop2): mounted filesystem without journal. Opts: delalloc,errors=remount-ro,barrier=0x0000000000000005,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004005b1,oldalloc,grpquota,nobh,noacl,min_batch_time=0x0000000000000800,inlinecrypt,. Quota mode: writeback.
[  178.511005][  T448] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  178.520102][  T448] usb 1-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3
[  178.528206][  T448] usb 1-1: Product: syz
[  178.532435][  T448] usb 1-1: SerialNumber: syz
[  178.643508][ T3193] netlink: 80 bytes leftover after parsing attributes in process `syz.3.755'.
[  178.672845][  T495] usb 5-1: new high-speed USB device number 20 using dummy_hcd
[  178.901400][  T495] usb 5-1: Using ep0 maxpacket: 8
[  178.906487][ T1138] usb 4-1: new high-speed USB device number 23 using dummy_hcd
[  179.025289][  T495] usb 5-1: config index 0 descriptor too short (expected 5924, got 36)
[  179.033676][  T495] usb 5-1: config 250 has an invalid interface number: 228 but max is -1
[  179.042100][  T495] usb 5-1: config 250 has 1 interface, different from the descriptor's value: 0
[  179.051161][  T495] usb 5-1: config 250 has no interface number 0
[  179.057449][  T495] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024
[  179.069001][  T495] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024
[  179.079410][  T495] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0
[  179.089677][  T495] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0
[  179.099983][  T495] usb 5-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17
[  179.113481][  T495] usb 5-1: config 250 interface 228 has no altsetting 0
[  179.139518][ T1138] usb 4-1: Using ep0 maxpacket: 8
[  179.225302][  T495] usb 5-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07
[  179.234370][  T495] usb 5-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59
[  179.242658][  T495] usb 5-1: Product: syz
[  179.246863][  T495] usb 5-1: SerialNumber: syz
[  179.254222][ T1138] usb 4-1: config index 0 descriptor too short (expected 5924, got 36)
[  179.262480][ T1138] usb 4-1: config 250 has an invalid interface number: 228 but max is -1
[  179.270971][ T1138] usb 4-1: config 250 has 1 interface, different from the descriptor's value: 0
[  179.280016][ T1138] usb 4-1: config 250 has no interface number 0
[  179.286801][  T495] hub 5-1:250.228: bad descriptor, ignoring hub
[  179.293187][ T1138] usb 4-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024
[  179.304755][  T495] hub: probe of 5-1:250.228 failed with error -5
[  179.311200][ T1138] usb 4-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024
[  179.321650][ T1138] usb 4-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0
[  179.331903][ T1138] usb 4-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0
[  179.342171][ T1138] usb 4-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17
[  179.355639][ T1138] usb 4-1: config 250 interface 228 has no altsetting 0
[  179.437040][  T448] cdc_ncm 1-1:1.0: bind() failure
[  179.443128][  T448] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found
[  179.451795][  T448] cdc_ncm 1-1:1.1: bind() failure
[  179.469447][  T448] usb 1-1: USB disconnect, device number 20
[  179.492925][  T495] usblp 5-1:250.228: usblp0: USB Bidirectional printer dev 20 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292
[  179.511385][ T1138] usb 4-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07
[  179.526608][ T3202] loop2: detected capacity change from 0 to 2048
[  179.533734][ T1138] usb 4-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59
[  179.544951][ T1138] usb 4-1: Product: syz
[  179.549108][ T1138] usb 4-1: SerialNumber: syz
[  179.595605][ T1138] hub 4-1:250.228: bad descriptor, ignoring hub
[  179.603591][ T1138] hub: probe of 4-1:250.228 failed with error -5
[  179.610794][ T3202] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  179.624958][   T30] audit: type=1400 audit(1769174520.018:425): avc:  denied  { mounton } for  pid=3196 comm="syz.2.757" path="/140/file1/bus" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1
[  179.647621][   T30] audit: type=1400 audit(1769174520.018:426): avc:  denied  { setattr } for  pid=3196 comm="syz.2.757" name="work" dev="loop2" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1
[  179.669390][   T30] audit: type=1400 audit(1769174520.018:427): avc:  denied  { remove_name } for  pid=3196 comm="syz.2.757" name="#1" dev="loop2" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1
[  179.691308][   T30] audit: type=1400 audit(1769174520.018:428): avc:  denied  { unlink } for  pid=3196 comm="syz.2.757" name="#1" dev="loop2" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1
[  179.743076][ T3213] netlink: 80 bytes leftover after parsing attributes in process `syz.4.748'.
[  179.797440][ T1138] usblp 4-1:250.228: usblp1: USB Bidirectional printer dev 23 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292
[  179.806393][  T494] usb 2-1: new high-speed USB device number 24 using dummy_hcd
[  179.892250][ T3216] loop0: detected capacity change from 0 to 256
[  179.922784][ T3216] FAT-fs (loop0): Unrecognized mount option "srtname=mixed" or missing value
[  180.014482][ T3216] netlink: 176 bytes leftover after parsing attributes in process `syz.0.760'.
[  180.023625][   T20] usb 5-1: USB disconnect, device number 20
[  180.024129][ T3216] x_tables: ip6_tables: icmp6 match: only valid for protocol 58
[  180.038253][ T3217] netlink: 80 bytes leftover after parsing attributes in process `syz.3.755'.
[  180.096327][ T3218] netlink: 'syz.0.760': attribute type 2 has an invalid length.
[  180.104245][ T3218] netlink: 8 bytes leftover after parsing attributes in process `syz.0.760'.
[  180.113089][ T3218] netlink: 96 bytes leftover after parsing attributes in process `syz.0.760'.
[  180.121977][ T3218] netlink: 24 bytes leftover after parsing attributes in process `syz.0.760'.
[  180.177878][  T494] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  180.187722][  T494] usb 2-1: New USB device found, idVendor=046d, idProduct=c22e, bcdDevice= 0.00
[  180.196795][  T494] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  180.210862][  T494] usb 2-1: config 0 descriptor??
[  180.312064][ T3220] loop4: detected capacity change from 0 to 256
[  180.330729][ T3220] exfat: Unknown parameter 'O�7‹������������)����'
[  180.375433][   T30] audit: type=1400 audit(1769174520.805:429): avc:  denied  { mounton } for  pid=3222 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1
[  180.426218][ T3222] bridge0: port 1(bridge_slave_0) entered blocking state
[  180.433301][ T3222] bridge0: port 1(bridge_slave_0) entered disabled state
[  180.441057][ T3222] device bridge_slave_0 entered promiscuous mode
[  180.448359][ T3222] bridge0: port 2(bridge_slave_1) entered blocking state
[  180.455740][ T3222] bridge0: port 2(bridge_slave_1) entered disabled state
[  180.460313][ T3231] loop4: detected capacity change from 0 to 256
[  180.463164][ T3222] device bridge_slave_1 entered promiscuous mode
[  180.502609][  T494] lg-g15 0003:046D:C22E.0003: unknown main item tag 0x0
[  180.509708][  T494] lg-g15 0003:046D:C22E.0003: unknown main item tag 0x0
[  180.518149][  T494] lg-g15 0003:046D:C22E.0003: hidraw0: USB HID v0.00 Device [HID 046d:c22e] on usb-dummy_hcd.1-1/input0
[  180.553417][ T3222] bridge0: port 2(bridge_slave_1) entered blocking state
[  180.560476][ T3222] bridge0: port 2(bridge_slave_1) entered forwarding state
[  180.567698][ T3222] bridge0: port 1(bridge_slave_0) entered blocking state
[  180.574719][ T3222] bridge0: port 1(bridge_slave_0) entered forwarding state
[  180.596281][  T446] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  180.604401][  T446] bridge0: port 1(bridge_slave_0) entered disabled state
[  180.612381][  T446] bridge0: port 2(bridge_slave_1) entered disabled state
[  180.626616][  T446] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  180.634801][  T446] bridge0: port 1(bridge_slave_0) entered blocking state
[  180.641846][  T446] bridge0: port 1(bridge_slave_0) entered forwarding state
[  180.649389][  T446] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  180.657878][  T446] bridge0: port 2(bridge_slave_1) entered blocking state
[  180.664925][  T446] bridge0: port 2(bridge_slave_1) entered forwarding state
[  180.683480][  T446] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  180.696605][  T446] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  180.707285][  T446] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  180.719658][ T3222] device veth0_vlan entered promiscuous mode
[  180.726415][  T446] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  180.734942][  T446] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  180.742686][  T446] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  180.754404][ T3240] loop4: detected capacity change from 0 to 40427
[  180.755693][ T3222] device veth1_macvtap entered promiscuous mode
[  180.768269][  T446] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  180.770044][ T3240] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[  180.781124][  T446] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  180.787310][ T3240] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  180.802690][  T446] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  180.812347][ T3240] F2FS-fs (loop4): invalid crc value
[  180.824838][   T30] audit: type=1400 audit(1769174521.278:430): avc:  denied  { mounton } for  pid=3222 comm="syz-executor" path="/root/syzkaller.7R3fL2/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1
[  180.852797][ T3240] F2FS-fs (loop4): Found nat_bits in checkpoint
[  180.866407][ T3250] loop5: detected capacity change from 0 to 256
[  180.901594][ T3254] netlink: 80 bytes leftover after parsing attributes in process `syz.0.771'.
[  180.916977][ T3240] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  180.918381][ T3250] FAT-fs (loop5): Directory bread(block 64) failed
[  180.925248][ T3240] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  180.933145][ T3250] FAT-fs (loop5): Directory bread(block 65) failed
[  180.950665][ T3250] FAT-fs (loop5): Directory bread(block 66) failed
[  180.957234][ T3250] FAT-fs (loop5): Directory bread(block 67) failed
[  180.964199][ T3250] FAT-fs (loop5): Directory bread(block 68) failed
[  180.971845][ T3250] FAT-fs (loop5): Directory bread(block 69) failed
[  180.978567][ T3250] FAT-fs (loop5): Directory bread(block 70) failed
[  180.985398][ T3250] FAT-fs (loop5): Directory bread(block 71) failed
[  180.992257][ T3250] FAT-fs (loop5): Directory bread(block 72) failed
[  180.999134][ T3250] FAT-fs (loop5): Directory bread(block 73) failed
[  181.038490][ T3240] attempt to access beyond end of device
[  181.038490][ T3240] loop4: rw=2049, want=80816, limit=40427
[  181.051118][ T3256] attempt to access beyond end of device
[  181.051118][ T3256] loop4: rw=2049, want=80976, limit=40427
[  181.084939][ T3240] attempt to access beyond end of device
[  181.084939][ T3240] loop4: rw=2049, want=81920, limit=40427
[  181.106159][ T3240] attempt to access beyond end of device
[  181.106159][ T3240] loop4: rw=2049, want=53248, limit=40427
[  181.120347][ T3259] attempt to access beyond end of device
[  181.120347][ T3259] loop4: rw=2049, want=57464, limit=40427
[  181.150578][   T20] usblp0: removed
[  181.171621][ T3240] attempt to access beyond end of device
[  181.171621][ T3240] loop4: rw=2049, want=61720, limit=40427
[  181.172937][ T3258] loop5: detected capacity change from 0 to 40427
[  181.189370][ T1936] usb 1-1: new high-speed USB device number 21 using dummy_hcd
[  181.189865][ T3240] attempt to access beyond end of device
[  181.189865][ T3240] loop4: rw=2049, want=63824, limit=40427
[  181.211411][ T3240] attempt to access beyond end of device
[  181.211411][ T3240] loop4: rw=2049, want=65896, limit=40427
[  181.224522][ T3240] attempt to access beyond end of device
[  181.224522][ T3240] loop4: rw=2049, want=66848, limit=40427
[  181.263937][  T448] usb 4-1: USB disconnect, device number 23
[  181.270352][  T448] usblp1: removed
[  181.284875][ T3258] F2FS-fs (loop5): Unrecognized mount option "J��g�x���01777777777777777777777" or missing value
[  181.302248][   T20] usb 5-1: new high-speed USB device number 21 using dummy_hcd
[  181.425822][ T1936] usb 1-1: Using ep0 maxpacket: 8
[  181.540073][ T1936] usb 1-1: config index 0 descriptor too short (expected 5924, got 36)
[  181.548334][ T1936] usb 1-1: config 250 has an invalid interface number: 228 but max is -1
[  181.556996][ T1936] usb 1-1: config 250 has 1 interface, different from the descriptor's value: 0
[  181.566081][ T1936] usb 1-1: config 250 has no interface number 0
[  181.568577][  T448] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  181.572455][ T1936] usb 1-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024
[  181.591391][ T1936] usb 1-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024
[  181.601824][ T1936] usb 1-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0
[  181.612156][ T1936] usb 1-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0
[  181.622436][ T1936] usb 1-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17
[  181.636631][ T1936] usb 1-1: config 250 interface 228 has no altsetting 0
[  181.654770][   T20] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  181.666087][   T20] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  181.749621][ T1936] usb 1-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07
[  181.758662][ T1936] usb 1-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59
[  181.766989][   T20] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  181.776094][   T20] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  181.784077][ T1936] usb 1-1: Product: syz
[  181.788357][ T1936] usb 1-1: SerialNumber: syz
[  181.792958][   T20] usb 5-1: SerialNumber: syz
[  181.845729][  T673] device bridge_slave_1 left promiscuous mode
[  181.851858][  T673] bridge0: port 2(bridge_slave_1) entered disabled state
[  181.859449][  T673] device bridge_slave_0 left promiscuous mode
[  181.859732][ T1936] hub 1-1:250.228: bad descriptor, ignoring hub
[  181.865673][  T673] bridge0: port 1(bridge_slave_0) entered disabled state
[  181.872176][ T1936] hub: probe of 1-1:250.228 failed with error -5
[  181.885793][  T673] device veth1_macvtap left promiscuous mode
[  181.891845][  T673] device veth0_vlan left promiscuous mode
[  181.940066][  T448] usb 6-1: config 0 has an invalid interface number: 64 but max is 0
[  181.948174][  T448] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  181.949661][  T529] usb 4-1: new high-speed USB device number 24 using dummy_hcd
[  181.958486][  T448] usb 6-1: config 0 has no interface number 0
[  182.045961][ T1936] usblp 1-1:250.228: usblp0: USB Bidirectional printer dev 21 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292
[  182.140144][  T448] usb 6-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48
[  182.149193][  T448] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  182.157294][  T448] usb 6-1: Product: syz
[  182.161489][  T448] usb 6-1: Manufacturer: syz
[  182.166078][  T448] usb 6-1: SerialNumber: syz
[  182.171300][  T448] usb 6-1: config 0 descriptor??
[  182.206783][  T529] usb 4-1: Using ep0 maxpacket: 8
[  182.208732][  T448] usb 6-1: Found UVC 0.00 device syz (046d:0823)
[  182.218150][  T448] usb 6-1: No valid video chain found.
[  182.308400][ T3263] __nla_validate_parse: 1 callbacks suppressed
[  182.308416][ T3263] netlink: 80 bytes leftover after parsing attributes in process `syz.0.771'.
[  182.330656][  T529] usb 4-1: config index 0 descriptor too short (expected 5924, got 36)
[  182.339144][  T529] usb 4-1: config 250 has an invalid interface number: 228 but max is -1
[  182.347665][  T529] usb 4-1: config 250 has 1 interface, different from the descriptor's value: 0
[  182.356757][  T529] usb 4-1: config 250 has no interface number 0
[  182.363027][  T529] usb 4-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024
[  182.374597][  T529] usb 4-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024
[  182.385019][  T529] usb 4-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0
[  182.395274][  T529] usb 4-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0
[  182.409875][ T1936] usb 1-1: USB disconnect, device number 21
[  182.416197][  T529] usb 4-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17
[  182.429941][ T1936] usblp0: removed
[  182.437343][  T529] usb 4-1: config 250 interface 228 has no altsetting 0
[  182.444685][  T374] usb 2-1: USB disconnect, device number 24
[  182.496077][  T494] usb 6-1: USB disconnect, device number 2
[  182.549790][  T529] usb 4-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07
[  182.559167][  T529] usb 4-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59
[  182.567654][  T529] usb 4-1: Product: syz
[  182.571922][  T529] usb 4-1: SerialNumber: syz
[  182.617086][  T529] hub 4-1:250.228: bad descriptor, ignoring hub
[  182.623337][  T529] hub: probe of 4-1:250.228 failed with error -5
[  182.817881][  T529] usblp 4-1:250.228: usblp0: USB Bidirectional printer dev 24 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292
[  182.982103][ T3280] loop0: detected capacity change from 0 to 512
[  183.304502][ T3283] netlink: 80 bytes leftover after parsing attributes in process `syz.3.773'.
[  183.621652][ T3287] netlink: 8 bytes leftover after parsing attributes in process `syz.5.779'.
[  183.782278][   T20] usb 5-1: 0:2 : does not exist
[  183.838189][   T20] usb 5-1: USB disconnect, device number 21
[  183.960058][ T1936] usb 4-1: USB disconnect, device number 24
[  184.015856][ T1936] usblp0: removed
[  184.030016][    T8] attempt to access beyond end of device
[  184.030016][    T8] loop4: rw=1, want=77840, limit=40427
[  184.112357][  T341] udevd[341]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  184.830424][ T3307] loop0: detected capacity change from 0 to 40427
[  184.846325][ T3307] F2FS-fs (loop0): Fix alignment : done, start(4096) end(16896) block(12288)
[  184.858448][ T3307] F2FS-fs (loop0): invalid crc value
[  184.863936][ T3307] F2FS-fs (loop0): invalid crc value
[  184.869364][ T3307] F2FS-fs (loop0): Failed to get valid F2FS checkpoint
[  185.101931][   T30] audit: type=1400 audit(1769174525.771:431): avc:  denied  { setopt } for  pid=3315 comm="syz.3.787" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  185.198123][ T3317] netlink: 4 bytes leftover after parsing attributes in process `syz.3.787'.
[  185.414462][ T3316] netlink: 4 bytes leftover after parsing attributes in process `syz.3.787'.
[  185.446399][ T3319] loop5: detected capacity change from 0 to 512
[  185.447422][ T3307] device sit0 entered promiscuous mode
[  185.461716][ T3307] netlink: 'syz.0.786': attribute type 1 has an invalid length.
[  185.469970][ T3307] netlink: 1 bytes leftover after parsing attributes in process `syz.0.786'.
[  185.480935][ T3319] EXT4-fs (loop5): dax option not supported
[  185.494633][   T30] audit: type=1400 audit(1769174526.191:432): avc:  denied  { write } for  pid=3315 comm="syz.3.787" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  185.663487][ T3324] loop4: detected capacity change from 0 to 1024
[  185.795595][ T3324] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  186.627040][ T3348] loop4: detected capacity change from 0 to 4096
[  186.690301][ T3352] netlink: 8 bytes leftover after parsing attributes in process `syz.0.794'.
[  186.699167][ T3352] netlink: 96 bytes leftover after parsing attributes in process `syz.0.794'.
[  186.790825][ T3348] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option
[  186.865414][ T3348] EXT4-fs (loop4): cluster size (1024) smaller than block size (4096)
[  186.948929][ T3346] loop3: detected capacity change from 0 to 40427
[  186.958857][ T3346] F2FS-fs (loop3): Fix alignment : done, start(4096) end(16896) block(12288)
[  186.968695][ T3346] F2FS-fs (loop3): invalid crc value
[  186.978565][ T3346] F2FS-fs (loop3): invalid crc value
[  186.984015][ T3346] F2FS-fs (loop3): Failed to get valid F2FS checkpoint
[  187.122174][ T3346] device sit0 entered promiscuous mode
[  187.130607][ T3346] netlink: 'syz.3.795': attribute type 1 has an invalid length.
[  187.154214][ T3346] netlink: 1 bytes leftover after parsing attributes in process `syz.3.795'.
[  187.360451][   T60] usb 2-1: new high-speed USB device number 25 using dummy_hcd
[  187.407415][ T3369] loop0: detected capacity change from 0 to 512
[  187.484292][ T3369] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  187.665109][   T60] usb 2-1: Using ep0 maxpacket: 16
[  187.960949][ T3375] loop5: detected capacity change from 0 to 256
[  188.103246][   T60] usb 2-1: config 1 interface 0 altsetting 3 bulk endpoint 0x1 has invalid maxpacket 32
[  188.113498][   T60] usb 2-1: config 1 interface 0 has no altsetting 0
[  188.194946][ T3375] loop5: detected capacity change from 0 to 4096
[  188.247395][ T3375] EXT4-fs (loop5): Test dummy encryption mode enabled
[  188.256635][ T3375] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c019, mo2=0002]
[  188.265114][ T3375] System zones: 0-5
[  188.265614][   T60] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  188.279011][ T3390] fuse: Bad value for 'fd'
[  188.283278][ T3375] EXT4-fs (loop5): mounted filesystem without journal. Opts: debug,auto_da_alloc,nombcache,test_dummy_encryption,nodiscard,min_batch_time=0x0000000000000000,commit=0x0000000000000000,nodiscard,,errors=continue. Quota mode: writeback.
[  188.283541][   T60] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  188.314098][   T60] usb 2-1: Product: ౿
[  188.318338][   T60] usb 2-1: Manufacturer: ⡐
[  188.322998][   T60] usb 2-1: SerialNumber: Ј
[  188.336219][ T3390] loop0: detected capacity change from 0 to 1024
[  188.342679][ T3363] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  188.367961][ T3390] EXT4-fs (loop0): Ignoring removed oldalloc option
[  188.374857][ T3390] EXT4-fs (loop0): Ignoring removed nobh option
[  188.381282][ T3390] EXT4-fs (loop0): Mount option "noacl" will be removed by 3.5
[  188.381282][ T3390] Contact linux-ext4@vger.kernel.org if you think we should keep it.
[  188.381282][ T3390] 
[  188.418798][ T3390] EXT4-fs (loop0): mounted filesystem without journal. Opts: delalloc,errors=remount-ro,barrier=0x0000000000000005,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004005b1,oldalloc,grpquota,nobh,noacl,min_batch_time=0x0000000000000800,inlinecrypt,. Quota mode: writeback.
[  188.580056][ T3363] UDC core: couldn't find an available UDC or it's busy: -16
[  188.667261][ T3363] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  188.684131][ T3398] 9pnet: Insufficient options for proto=fd
[  188.757502][   T60] usb 2-1: USB disconnect, device number 25
[  188.799614][   T30] audit: type=1400 audit(1769174529.655:433): avc:  denied  { attach_queue } for  pid=3396 comm="syz.0.808" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1
[  189.004762][ T3412] loop5: detected capacity change from 0 to 256
[  189.306649][ T3413] netlink: 8 bytes leftover after parsing attributes in process `syz.3.812'.
[  189.315463][ T3413] netlink: 96 bytes leftover after parsing attributes in process `syz.3.812'.
[  189.562794][ T3419] loop0: detected capacity change from 0 to 118
[  189.654142][ T3428] 9pnet: Insufficient options for proto=fd
[  190.281947][ T3436] loop4: detected capacity change from 0 to 16
[  190.361348][ T3436] erofs: (device loop4): erofs_superblock_csum_verify: invalid checksum 0xefbc3110, 0x7bbbea8c expected
[  190.381393][  T341] udevd[341]: incorrect erofs checksum on /dev/loop4
[  190.486678][ T3436] loop4: detected capacity change from 0 to 16
[  190.520275][ T3436] erofs: (device loop4): erofs_init_devices: extra devices don't match (ondisk 128, given 0)
[  190.561541][ T3436] loop4: detected capacity change from 0 to 512
[  190.593532][ T3436] EXT4-fs (loop4): Test dummy encryption mode enabled
[  190.609302][ T3436] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  190.622580][ T3436] EXT4-fs error (device loop4): ext4_orphan_get:1427: comm syz.4.820: bad orphan inode 131083
[  190.633483][ T3436] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable,noload,,errors=continue. Quota mode: none.
[  190.794776][ T3455] loop4: detected capacity change from 0 to 512
[  190.801604][ T3453] netlink: 4 bytes leftover after parsing attributes in process `syz.5.826'.
[  190.820173][ T3459] netlink: 8 bytes leftover after parsing attributes in process `syz.5.827'.
[  190.830454][ T3459] loop5: detected capacity change from 0 to 512
[  190.879590][ T3459] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  190.890786][ T3459] ext4 filesystem being mounted at /12/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  192.714703][ T3479] loop5: detected capacity change from 0 to 4096
[  192.825692][ T3487] loop4: detected capacity change from 0 to 4096
[  192.835126][ T3490] loop0: detected capacity change from 0 to 256
[  192.862449][ T3479] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  192.885193][ T3479] FAULT_INJECTION: forcing a failure.
[  192.885193][ T3479] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  192.898441][ T3479] CPU: 0 PID: 3479 Comm: syz.5.833 Not tainted syzkaller #0
[  192.905722][ T3479] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  192.915769][ T3479] Call Trace:
[  192.919038][ T3479]  <TASK>
[  192.921957][ T3479]  __dump_stack+0x21/0x30
[  192.926283][ T3479]  dump_stack_lvl+0x110/0x170
[  192.930952][ T3479]  ? show_regs_print_info+0x20/0x20
[  192.936141][ T3479]  dump_stack+0x15/0x20
[  192.940289][ T3479]  should_fail+0x3c1/0x510
[  192.944696][ T3479]  should_fail_usercopy+0x1a/0x20
[  192.949711][ T3479]  _copy_from_user+0x20/0xd0
[  192.954289][ T3479]  kvm_arch_dev_ioctl+0x222/0x680
[  192.959309][ T3479]  ? kvm_vm_ioctl_check_extension+0x690/0x690
[  192.965373][ T3479]  ? slab_free_freelist_hook+0xc2/0x190
[  192.970917][ T3479]  ? kmem_cache_free+0x100/0x320
[  192.975844][ T3479]  kvm_dev_ioctl+0xeb/0x1b40
[  192.980424][ T3479]  ? selinux_file_alloc_security+0x120/0x120
[  192.986395][ T3479]  ? do_sys_openat2+0x6df/0x7f0
[  192.991242][ T3479]  ? hardware_enable_nolock+0xe0/0xe0
[  192.996607][ T3479]  ? security_file_ioctl+0x84/0xa0
[  193.001715][ T3479]  ? hardware_enable_nolock+0xe0/0xe0
[  193.007081][ T3479]  __se_sys_ioctl+0x121/0x1a0
[  193.011754][ T3479]  __x64_sys_ioctl+0x7b/0x90
[  193.016341][ T3479]  x64_sys_call+0x2f/0x9a0
[  193.020748][ T3479]  do_syscall_64+0x4c/0xa0
[  193.025156][ T3479]  ? clear_bhb_loop+0x50/0xa0
[  193.029819][ T3479]  ? clear_bhb_loop+0x50/0xa0
[  193.034486][ T3479]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  193.040371][ T3479] RIP: 0033:0x7f652712194b
[  193.044777][ T3479] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00
[  193.064377][ T3479] RSP: 002b:00007f6525b7c450 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  193.072780][ T3479] RAX: ffffffffffffffda RBX: 0000200000fe5000 RCX: 00007f652712194b
[  193.080743][ T3479] RDX: 00007f6525b7cbd0 RSI: 00000000c008ae05 RDI: 0000000000000008
[  193.088705][ T3479] RBP: 0000200000fe6000 R08: 0000000000000008 R09: 0000000000000000
[  193.096666][ T3479] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000fe6800
[  193.104632][ T3479] R13: 00007f6525b7cbd0 R14: 000000000000006b R15: 00000000000000c0
[  193.112603][ T3479]  </TASK>
[  193.285191][ T3487] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  193.513845][   T60] usb 2-1: new high-speed USB device number 26 using dummy_hcd
[  193.542497][  T494] usb 1-1: new full-speed USB device number 22 using dummy_hcd
[  193.753435][ T3504] netlink: 8 bytes leftover after parsing attributes in process `syz.3.840'.
[  193.784732][ T3504] loop3: detected capacity change from 0 to 512
[  193.800856][ T3504] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  193.812156][ T3504] ext4 filesystem being mounted at /163/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  193.826005][ T3508] loop5: detected capacity change from 0 to 512
[  193.836575][  T494] usb 1-1: device descriptor read/64, error -71
[  193.896941][ T3508] EXT4-fs (loop5): Ignoring removed mblk_io_submit option
[  193.910711][ T3508] EXT4-fs (loop5): Test dummy encryption mode enabled
[  193.918059][ T3508] EXT4-fs (loop5): Can't change test_dummy_encryption on remount
[  193.988544][ T3515] loop4: detected capacity change from 0 to 512
[  194.036472][ T3515] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  194.056509][ T3515] EXT4-fs error (device loop4): ext4_get_branch:178: inode #11: block 4294967295: comm syz.4.841: invalid block
[  194.070314][ T3515] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.841: invalid indirect mapped block 4294967295 (level 1)
[  194.085343][ T3515] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.841: invalid indirect mapped block 4294967295 (level 1)
[  194.100372][ T3515] EXT4-fs (loop4): 2 truncates cleaned up
[  194.106989][ T3515] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpjquota=,init_itable,dioread_nolock,bsdgroups,,errors=continue. Quota mode: writeback.
[  194.151983][   T60] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[  194.165505][   T60] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[  194.175712][   T60] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  194.475821][   T60] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  194.484892][   T60] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  194.492912][   T60] usb 2-1: Product: syz
[  194.497098][   T60] usb 2-1: Manufacturer: syz
[  194.501693][   T60] usb 2-1: SerialNumber: syz
[  194.506309][  T374] usb 5-1: new high-speed USB device number 22 using dummy_hcd
[  194.516507][  T494] usb 1-1: device descriptor read/64, error -71
[  194.952084][  T374] usb 5-1: Using ep0 maxpacket: 32
[  194.980698][  T494] usb 1-1: new full-speed USB device number 23 using dummy_hcd
[  195.075951][  T374] usb 5-1: config 0 has an invalid interface number: 188 but max is 0
[  195.084344][  T374] usb 5-1: config 0 has no interface number 0
[  195.274140][  T374] usb 5-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32
[  195.409330][  T494] usb 1-1: device descriptor read/64, error -71
[  195.425132][ T3537] loop3: detected capacity change from 0 to 512
[  195.437901][  T374] usb 5-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36
[  195.446974][  T374] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  195.455011][  T374] usb 5-1: Product: syz
[  195.459231][  T374] usb 5-1: Manufacturer: syz
[  195.461701][ T3537] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  195.473514][  T374] usb 5-1: SerialNumber: syz
[  195.475456][ T3537] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2229: inode #15: comm syz.3.849: corrupted in-inode xattr
[  195.481578][  T374] usb 5-1: config 0 descriptor??
[  195.490341][ T3537] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2826: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  195.504622][ T3515] raw-gadget.2 gadget: fail, usb_ep_enable returned -22
[  195.508055][ T3537] EXT4-fs (loop3): 1 orphan inode deleted
[  195.520655][ T3537] EXT4-fs (loop3): mounted filesystem without journal. Opts: mb_optimize_scan=0x0000000000000000,min_batch_time=0x0000000000000002,debug_want_extra_isize=0x0000000000000068,nobarrier,nodiscard,journal_ioprio=0x0000000000000002,,errors=continue. Quota mode: none.
[  195.614796][ T3541] xt_TPROXY: Can be used only with -p tcp or -p udp
[  195.712891][ T3543] netlink: 8 bytes leftover after parsing attributes in process `syz.0.850'.
[  195.723928][ T3543] loop0: detected capacity change from 0 to 512
[  195.737244][ T3515] raw-gadget.2 gadget: fail, usb_ep_enable returned -22
[  195.763223][ T3543] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  195.774302][ T3543] ext4 filesystem being mounted at /163/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  196.544673][ T3551] netlink: 8 bytes leftover after parsing attributes in process `syz.5.851'.
[  196.553496][ T3551] netlink: 96 bytes leftover after parsing attributes in process `syz.5.851'.
[  196.782630][ T3548] fuse: Unknown parameter '&���-��l�J"��Q>f�.c��H��@t:a�Q�'
[  196.849511][ T3553] FAULT_INJECTION: forcing a failure.
[  196.849511][ T3553] name failslab, interval 1, probability 0, space 0, times 0
[  196.886124][  T374] asix 5-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  196.896229][ T3553] CPU: 1 PID: 3553 Comm: syz.1.852 Not tainted syzkaller #0
[  196.896250][ T3553] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  196.896259][ T3553] Call Trace:
[  196.896264][ T3553]  <TASK>
[  196.896270][ T3553]  __dump_stack+0x21/0x30
[  196.924046][ T3553]  dump_stack_lvl+0x110/0x170
[  196.928725][ T3553]  ? show_regs_print_info+0x20/0x20
[  196.933929][ T3553]  dump_stack+0x15/0x20
[  196.938083][ T3553]  should_fail+0x3c1/0x510
[  196.942189][ T3557] fuse: Bad value for 'fd'
[  196.942496][ T3553]  __should_failslab+0xa4/0xe0
[  196.947082][   T60] usb 2-1: 0:2 : does not exist
[  196.951631][ T3553]  should_failslab+0x9/0x20
[  196.951651][ T3553]  slab_pre_alloc_hook+0x3b/0xe0
[  196.965863][ T3553]  ? kvm_mmu_topup_memory_cache+0xe4/0x220
[  196.971667][ T3553]  kmem_cache_alloc+0x44/0x260
[  196.976416][ T3553]  kvm_mmu_topup_memory_cache+0xe4/0x220
[  196.982032][ T3553]  kvm_mmu_load+0x88/0x1fd0
[  196.986513][ T3553]  ? kvm_apic_accept_events+0x546/0x560
[  196.992036][ T3553]  ? kvm_apic_has_interrupt+0x78f/0x7a0
[  196.997558][ T3553]  ? kvm_lapic_enable_pv_eoi+0x150/0x150
[  197.003171][ T3553]  vcpu_enter_guest+0x4f79/0x66d0
[  197.008177][ T3553]  ? avc_has_perm+0x163/0x250
[  197.012830][ T3553]  ? local_bh_enable+0x30/0x30
[  197.017574][ T3553]  ? 0xffffffffa0028d98
[  197.021706][ T3553]  ? is_bpf_text_address+0x177/0x190
[  197.026968][ T3553]  ? __kernel_text_address+0xa0/0x100
[  197.032318][ T3553]  ? unwind_get_return_address+0x4d/0x90
[  197.037935][ T3553]  ? stack_trace_save+0xf0/0xf0
[  197.042762][ T3553]  ? arch_stack_walk+0xee/0x140
[  197.047597][ T3553]  ? stack_trace_save+0xa6/0xf0
[  197.052429][ T3553]  ? __stack_depot_save+0x34/0x480
[  197.057518][ T3553]  ? path_openat+0x280e/0x2f20
[  197.062260][ T3553]  ? kasan_set_track+0x5b/0x70
[  197.067003][ T3553]  ? kasan_set_track+0x4a/0x70
[  197.071744][ T3553]  ? __kasan_check_read+0x11/0x20
[  197.076746][ T3553]  ? vmx_vcpu_pi_load+0xab/0x390
[  197.081661][ T3553]  ? __kasan_check_write+0x14/0x20
[  197.086748][ T3553]  ? kvm_arch_vcpu_load+0x58d/0x770
[  197.091926][ T3553]  ? __local_bh_enable_ip+0x58/0x80
[  197.097104][ T3553]  ? local_bh_enable+0x1f/0x30
[  197.101844][ T3553]  ? kvm_load_guest_fpu+0x12a/0x240
[  197.107018][ T3553]  kvm_arch_vcpu_ioctl_run+0xfab/0x2010
[  197.112546][ T3553]  kvm_vcpu_ioctl+0x8f2/0xc00
[  197.117202][ T3553]  ? kvm_clear_stat_per_vcpu+0x200/0x200
[  197.122815][ T3553]  ? selinux_file_ioctl+0x3a0/0x4d0
[  197.127996][ T3553]  ? selinux_file_alloc_security+0x120/0x120
[  197.133954][ T3553]  ? mutex_unlock+0x8f/0x230
[  197.138524][ T3553]  ? __mutex_lock_slowpath+0x10/0x10
[  197.143787][ T3553]  ? __fget_files+0x2c4/0x320
[  197.148443][ T3553]  ? security_file_ioctl+0x84/0xa0
[  197.153533][ T3553]  ? kvm_clear_stat_per_vcpu+0x200/0x200
[  197.159146][ T3553]  __se_sys_ioctl+0x121/0x1a0
[  197.163801][ T3553]  __x64_sys_ioctl+0x7b/0x90
[  197.168370][ T3553]  x64_sys_call+0x2f/0x9a0
[  197.172765][ T3553]  do_syscall_64+0x4c/0xa0
[  197.177158][ T3553]  ? clear_bhb_loop+0x50/0xa0
[  197.181812][ T3553]  ? clear_bhb_loop+0x50/0xa0
[  197.186467][ T3553]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  197.192340][ T3553] RIP: 0033:0x7febf9c46cb9
[  197.196734][ T3553] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  197.216318][ T3553] RSP: 002b:00007febf86a3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  197.224708][ T3553] RAX: ffffffffffffffda RBX: 00007febf9ec1fa0 RCX: 00007febf9c46cb9
[  197.232657][ T3553] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005
[  197.240604][ T3553] RBP: 00007febf86a3090 R08: 0000000000000000 R09: 0000000000000000
[  197.248551][ T3553] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  197.256499][ T3553] R13: 00007febf9ec2038 R14: 00007febf9ec1fa0 R15: 00007ffcb9a6d7d8
[  197.264454][ T3553]  </TASK>
[  197.281904][   T60] usb 2-1: USB disconnect, device number 26
[  197.292339][  T374] asix: probe of 5-1:0.188 failed with error -71
[  197.380061][  T374] usb 5-1: USB disconnect, device number 22
[  197.538105][   T30] audit: type=1400 audit(1769174538.831:434): avc:  denied  { getopt } for  pid=3563 comm="syz.4.855" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  197.706449][ T3560] loop0: detected capacity change from 0 to 40427
[  197.723451][ T3560] F2FS-fs (loop0): Fix alignment : done, start(4096) end(16896) block(12288)
[  197.735235][ T3560] F2FS-fs (loop0): invalid crc value
[  197.740820][ T3560] F2FS-fs (loop0): invalid crc value
[  198.146781][ T3560] F2FS-fs (loop0): Failed to get valid F2FS checkpoint
[  198.493491][   T30] audit: type=1400 audit(1769174539.828:435): avc:  denied  { write } for  pid=3584 comm="syz.4.862" name="ppp" dev="devtmpfs" ino=154 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  198.496696][ T3583] netlink: 80 bytes leftover after parsing attributes in process `syz.5.860'.
[  198.638291][ T3560] netlink: 'syz.0.854': attribute type 1 has an invalid length.
[  198.646149][ T3560] netlink: 1 bytes leftover after parsing attributes in process `syz.0.854'.
[  198.668481][ T3593] netlink: 80 bytes leftover after parsing attributes in process `syz.0.864'.
[  198.847735][ T3598] netlink: 8 bytes leftover after parsing attributes in process `syz.4.863'.
[  198.856614][ T3598] netlink: 96 bytes leftover after parsing attributes in process `syz.4.863'.
[  199.133830][   T60] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  199.210011][  T494] usb 1-1: new high-speed USB device number 24 using dummy_hcd
[  199.316818][ T3601] loop3: detected capacity change from 0 to 512
[  199.357501][ T3601] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  199.372846][   T60] usb 6-1: Using ep0 maxpacket: 8
[  199.385538][ T3601] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.865: invalid indirect mapped block 4294967295 (level 1)
[  199.399906][ T3601] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.865: invalid indirect mapped block 4294967295 (level 1)
[  199.414440][ T3601] EXT4-fs (loop3): 2 truncates cleaned up
[  199.421239][ T3601] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpjquota=,init_itable,dioread_nolock,bsdgroups,,errors=continue. Quota mode: writeback.
[  199.448531][  T494] usb 1-1: Using ep0 maxpacket: 8
[  199.541254][   T60] usb 6-1: config index 0 descriptor too short (expected 5924, got 36)
[  199.549885][   T60] usb 6-1: config 250 has an invalid interface number: 228 but max is -1
[  199.559609][   T60] usb 6-1: config 250 has 1 interface, different from the descriptor's value: 0
[  199.569122][   T60] usb 6-1: config 250 has no interface number 0
[  199.576106][   T60] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024
[  199.587984][   T60] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024
[  199.598540][   T60] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0
[  199.608971][   T60] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0
[  199.619281][   T60] usb 6-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17
[  199.632918][  T494] usb 1-1: config index 0 descriptor too short (expected 5924, got 36)
[  199.641243][   T60] usb 6-1: config 250 interface 228 has no altsetting 0
[  199.648372][  T494] usb 1-1: config 250 has an invalid interface number: 228 but max is -1
[  199.657347][  T494] usb 1-1: config 250 has 1 interface, different from the descriptor's value: 0
[  199.666807][  T494] usb 1-1: config 250 has no interface number 0
[  199.672982][ T3615] netlink: 80 bytes leftover after parsing attributes in process `syz.4.870'.
[  199.673243][  T494] usb 1-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024
[  199.693596][  T494] usb 1-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024
[  199.704131][  T494] usb 1-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0
[  199.714481][  T494] usb 1-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0
[  199.725056][  T494] usb 1-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17
[  199.738557][  T494] usb 1-1: config 250 interface 228 has no altsetting 0
[  199.762593][   T60] usb 6-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07
[  199.771783][   T60] usb 6-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59
[  199.780165][   T60] usb 6-1: Product: syz
[  199.784594][   T60] usb 6-1: SerialNumber: syz
[  199.823474][   T60] hub 6-1:250.228: bad descriptor, ignoring hub
[  199.832102][   T60] hub: probe of 6-1:250.228 failed with error -5
[  199.858140][  T494] usb 1-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07
[  199.867297][  T494] usb 1-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59
[  199.875526][  T494] usb 1-1: Product: syz
[  199.879708][  T494] usb 1-1: SerialNumber: syz
[  199.886384][  T374] usb 4-1: new high-speed USB device number 25 using dummy_hcd
[  199.915455][  T494] hub 1-1:250.228: bad descriptor, ignoring hub
[  199.921701][  T494] hub: probe of 1-1:250.228 failed with error -5
[  199.953465][ T1138] usb 5-1: new high-speed USB device number 23 using dummy_hcd
[  200.169692][   T60] usblp 6-1:250.228: usblp0: USB Bidirectional printer dev 3 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292
[  200.181360][  T494] usblp 1-1:250.228: usblp1: USB Bidirectional printer dev 24 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292
[  200.201531][ T1138] usb 5-1: Using ep0 maxpacket: 8
[  200.276994][  T374] usb 4-1: Using ep0 maxpacket: 32
[  200.308871][ T3623] netlink: 80 bytes leftover after parsing attributes in process `syz.5.860'.
[  200.324619][ T1138] usb 5-1: config index 0 descriptor too short (expected 5924, got 36)
[  200.332879][ T1138] usb 5-1: config 250 has an invalid interface number: 228 but max is -1
[  200.341307][ T1138] usb 5-1: config 250 has 1 interface, different from the descriptor's value: 0
[  200.350358][ T1138] usb 5-1: config 250 has no interface number 0
[  200.356629][ T1138] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024
[  200.359367][ T3625] netlink: 80 bytes leftover after parsing attributes in process `syz.0.864'.
[  200.368254][ T1138] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024
[  200.387721][ T1138] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0
[  200.397999][ T1138] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0
[  200.408279][ T1138] usb 5-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17
[  200.421815][ T1138] usb 5-1: config 250 interface 228 has no altsetting 0
[  200.429419][  T374] usb 4-1: config 0 has an invalid interface number: 188 but max is 0
[  200.437646][  T374] usb 4-1: config 0 has no interface number 0
[  200.443724][  T374] usb 4-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32
[  200.534121][ T1138] usb 5-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07
[  200.543172][ T1138] usb 5-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59
[  200.551442][ T1138] usb 5-1: Product: syz
[  200.555631][ T1138] usb 5-1: SerialNumber: syz
[  200.591673][ T1138] hub 5-1:250.228: bad descriptor, ignoring hub
[  200.597941][ T1138] hub: probe of 5-1:250.228 failed with error -5
[  200.610493][  T374] usb 4-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36
[  200.619566][  T374] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  200.627584][  T374] usb 4-1: Product: syz
[  200.631772][  T374] usb 4-1: Manufacturer: syz
[  200.636351][  T374] usb 4-1: SerialNumber: syz
[  200.641679][  T374] usb 4-1: config 0 descriptor??
[  200.657970][ T3601] raw-gadget.2 gadget: fail, usb_ep_enable returned -22
[  200.956907][ T3601] raw-gadget.2 gadget: fail, usb_ep_enable returned -22
[  201.049108][ T3635] netlink: 80 bytes leftover after parsing attributes in process `syz.4.870'.
[  201.192222][ T3638] netlink: 8 bytes leftover after parsing attributes in process `syz.5.875'.
[  201.201094][ T3638] netlink: 96 bytes leftover after parsing attributes in process `syz.5.875'.
[  201.420080][  T374] asix 4-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61
[  201.430245][  T374] asix: probe of 4-1:0.188 failed with error -61
[  201.439664][   T60] usb 6-1: USB disconnect, device number 3
[  201.439981][ T1138] usblp 5-1:250.228: usblp2: USB Bidirectional printer dev 23 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292
[  201.454698][   T60] usblp0: removed
[  201.488074][ T1138] usb 5-1: USB disconnect, device number 23
[  201.494835][ T1138] usblp2: removed
[  201.553413][  T374] usb 1-1: USB disconnect, device number 24
[  201.571381][  T374] usblp1: removed
[  201.600039][   T30] audit: type=1400 audit(1769174543.082:436): avc:  denied  { bind } for  pid=3644 comm="syz.1.878" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  201.932255][ T3652] 9pnet: Insufficient options for proto=fd
[  202.153299][   T30] audit: type=1400 audit(1769174543.670:437): avc:  denied  { mount } for  pid=3661 comm="syz.0.884" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1
[  202.162511][ T3662] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  202.175272][   T30] audit: type=1400 audit(1769174543.681:438): avc:  denied  { unlink } for  pid=3661 comm="syz.0.884" name="#3" dev="tmpfs" ino=961 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[  202.212318][ T3660] loop4: detected capacity change from 0 to 2048
[  202.218827][   T30] audit: type=1400 audit(1769174543.733:439): avc:  denied  { unmount } for  pid=283 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1
[  202.309019][ T3660] EXT4-fs (loop4): mounted filesystem without journal. Opts: delalloc,noload,acl,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none.
[  202.329654][ T3660] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1147: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters
[  202.345081][ T3660] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 34 with error 28
[  202.357512][ T3660] EXT4-fs (loop4): This should not happen!! Data will be lost
[  202.357512][ T3660] 
[  202.367418][ T3660] EXT4-fs (loop4): Total free blocks count 0
[  202.373625][ T3660] EXT4-fs (loop4): Free/Dirty block details
[  202.379845][ T3660] EXT4-fs (loop4): free_blocks=2415919504
[  202.391726][ T3660] EXT4-fs (loop4): dirty_blocks=48
[  202.404146][ T3660] EXT4-fs (loop4): Block reservation details
[  202.418423][ T3660] EXT4-fs (loop4): i_reserved_data_blocks=3
[  202.483720][    T8] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 34 with error 28
[  202.496295][    T8] EXT4-fs (loop4): This should not happen!! Data will be lost
[  202.496295][    T8] 
[  202.631105][   T60] usb 4-1: USB disconnect, device number 25
[  203.530843][ T3692] loop0: detected capacity change from 0 to 40427
[  203.677643][  T374] usb 2-1: new high-speed USB device number 27 using dummy_hcd
[  203.707149][ T3692] F2FS-fs (loop0): Unrecognized mount option "J��g�x���01777777777777777777777" or missing value
[  204.163685][  T374] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[  204.247326][  T374] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[  204.415981][  T374] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  204.430148][ T3704] loop5: detected capacity change from 0 to 2048
[  204.438649][ T3708] loop3: detected capacity change from 0 to 512
[  204.452476][ T3708] EXT4-fs (loop3): Test dummy encryption mode enabled
[  204.459745][ T3708] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  204.474926][ T3704] EXT4-fs (loop5): mounted filesystem without journal. Opts: delalloc,noload,acl,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none.
[  204.479786][ T3708] EXT4-fs (loop3): 1 truncate cleaned up
[  204.496550][ T3704] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1147: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters
[  204.499961][ T3708] EXT4-fs (loop3): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000003,resuid=0x000000000000ee01,debug_want_extra_isize=0x0000000000000068,lazytime,test_dummy_encryption,noquota,,errors=continue. Quota mode: none.
[  204.511801][ T3704] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 34 with error 28
[  204.546426][ T3704] EXT4-fs (loop5): This should not happen!! Data will be lost
[  204.546426][ T3704] 
[  204.556840][   T30] audit: type=1400 audit(1769174546.200:440): avc:  denied  { setattr } for  pid=3707 comm="syz.3.897" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  204.556908][ T3704] EXT4-fs (loop5): Total free blocks count 0
[  204.585162][ T3704] EXT4-fs (loop5): Free/Dirty block details
[  204.591215][ T3704] EXT4-fs (loop5): free_blocks=2415919504
[  204.597087][ T3704] EXT4-fs (loop5): dirty_blocks=48
[  204.602319][ T3704] EXT4-fs (loop5): Block reservation details
[  204.608324][ T3704] EXT4-fs (loop5): i_reserved_data_blocks=3
[  204.611180][  T374] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  204.637970][  T374] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  204.651277][  T374] usb 2-1: Product: syz
[  204.655502][  T374] usb 2-1: Manufacturer: syz
[  204.660694][  T374] usb 2-1: SerialNumber: syz
[  204.665453][  T673] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 34 with error 28
[  204.677862][  T673] EXT4-fs (loop5): This should not happen!! Data will be lost
[  204.677862][  T673] 
[  204.725397][ T3697] usb 1-1: new high-speed USB device number 25 using dummy_hcd
[  204.892803][ T3727] loop5: detected capacity change from 0 to 512
[  204.975123][ T3727] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  204.990513][ T3727] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.900: invalid indirect mapped block 4294967295 (level 1)
[  205.004570][ T3727] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.900: invalid indirect mapped block 4294967295 (level 1)
[  205.018785][ T3727] EXT4-fs (loop5): 2 truncates cleaned up
[  205.024734][ T3727] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpjquota=,init_itable,dioread_nolock,bsdgroups,,errors=continue. Quota mode: writeback.
[  205.096873][ T3697] usb 1-1: config 0 has an invalid interface number: 64 but max is 0
[  205.104970][ T3697] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  205.115076][ T3697] usb 1-1: config 0 has no interface number 0
[  205.171119][ T3732] binder: 3731:3732 ioctl c0306201 200000000040 returned -14
[  205.187116][ T3734] loop4: detected capacity change from 0 to 256
[  205.240498][ T3734] loop4: detected capacity change from 0 to 4096
[  205.248380][ T3734] EXT4-fs (loop4): Test dummy encryption mode enabled
[  205.256329][ T3734] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c019, mo2=0002]
[  205.264527][ T3734] System zones: 0-5
[  205.269224][ T3734] EXT4-fs (loop4): mounted filesystem without journal. Opts: debug,auto_da_alloc,nombcache,test_dummy_encryption,nodiscard,min_batch_time=0x0000000000000000,commit=0x0000000000000000,nodiscard,,errors=continue. Quota mode: writeback.
[  205.296998][ T3697] usb 1-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48
[  205.306427][  T583] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  205.345833][ T3697] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  205.353868][ T3697] usb 1-1: Product: syz
[  205.358312][ T3697] usb 1-1: Manufacturer: syz
[  205.362947][ T3697] usb 1-1: SerialNumber: syz
[  205.369966][ T3697] usb 1-1: config 0 descriptor??
[  205.411602][ T3697] usb 1-1: Found UVC 0.00 device syz (046d:0823)
[  205.418037][ T3697] usb 1-1: No valid video chain found.
[  205.640281][  T583] usb 6-1: Using ep0 maxpacket: 32
[  205.646886][ T3697] usb 1-1: USB disconnect, device number 25
[  205.653330][ T3739] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=27 sclass=netlink_route_socket pid=3739 comm=syz.3.904
[  205.672314][ T3739] loop3: detected capacity change from 0 to 512
[  205.686006][ T3739] EXT4-fs (loop3): Ignoring removed nobh option
[  205.699463][ T3739] EXT4-fs error (device loop3): ext4_do_update_inode:5249: inode #16: comm syz.3.904: corrupted inode contents
[  205.711443][ T3739] EXT4-fs (loop3): Remounting filesystem read-only
[  205.720817][ T3739] EXT4-fs error (device loop3): ext4_dirty_inode:6085: inode #16: comm syz.3.904: mark_inode_dirty error
[  205.732358][ T3739] EXT4-fs (loop3): Remounting filesystem read-only
[  205.738984][ T3739] EXT4-fs error (device loop3): ext4_do_update_inode:5249: inode #16: comm syz.3.904: corrupted inode contents
[  205.750918][ T3739] EXT4-fs (loop3): Remounting filesystem read-only
[  205.757620][ T3739] EXT4-fs error (device loop3): __ext4_ext_dirty:183: inode #16: comm syz.3.904: mark_inode_dirty error
[  205.768956][ T3739] EXT4-fs (loop3): Remounting filesystem read-only
[  205.775526][ T3739] EXT4-fs error (device loop3): ext4_do_update_inode:5249: inode #16: comm syz.3.904: corrupted inode contents
[  205.790560][ T3739] EXT4-fs (loop3): Remounting filesystem read-only
[  205.797227][  T583] usb 6-1: config 0 has an invalid interface number: 188 but max is 0
[  205.805549][ T3739] EXT4-fs error (device loop3) in ext4_orphan_del:301: Corrupt filesystem
[  205.814144][  T583] usb 6-1: config 0 has no interface number 0
[  205.817350][ T3739] EXT4-fs (loop3): Remounting filesystem read-only
[  205.820394][  T583] usb 6-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32
[  205.826899][ T3739] EXT4-fs error (device loop3): ext4_do_update_inode:5249: inode #16: comm syz.3.904: corrupted inode contents
[  205.848642][ T3739] EXT4-fs (loop3): Remounting filesystem read-only
[  205.855251][ T3739] EXT4-fs error (device loop3): ext4_truncate:4310: inode #16: comm syz.3.904: mark_inode_dirty error
[  205.866330][ T3739] EXT4-fs (loop3): Remounting filesystem read-only
[  205.872898][ T3739] EXT4-fs error (device loop3) in ext4_process_orphan:343: Corrupt filesystem
[  205.881903][ T3739] EXT4-fs (loop3): Remounting filesystem read-only
[  205.888724][ T3739] EXT4-fs (loop3): 1 truncate cleaned up
[  205.894368][ T3739] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,nobh,. Quota mode: writeback.
[  205.908127][ T3739] ext4 filesystem being mounted at /171/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  205.971615][ T3748] netlink: 8 bytes leftover after parsing attributes in process `syz.4.905'.
[  205.980474][ T3748] netlink: 96 bytes leftover after parsing attributes in process `syz.4.905'.
[  206.021025][  T583] usb 6-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36
[  206.043484][  T583] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  206.137549][  T583] usb 6-1: Product: syz
[  206.141797][  T583] usb 6-1: Manufacturer: syz
[  206.141837][ T3739] EXT4-fs error (device loop3): ext4_search_dir:1549: inode #12: block 13: comm syz.3.904: bad entry in directory: inode out of bounds - offset=24, inode=33554445, rec_len=16, size=4096 fake=0
[  206.146629][  T583] usb 6-1: SerialNumber: syz
[  206.166351][ T3739] EXT4-fs (loop3): Remounting filesystem read-only
[  206.170832][  T583] usb 6-1: config 0 descriptor??
[  206.192361][ T3727] raw-gadget.2 gadget: fail, usb_ep_enable returned -22
[  206.240378][  T374] usb 2-1: 0:2 : does not exist
[  206.261216][  T374] usb 2-1: USB disconnect, device number 27
[  206.362064][ T3757] loop0: detected capacity change from 0 to 512
[  206.370558][ T3758] netlink: 8 bytes leftover after parsing attributes in process `syz.3.907'.
[  206.379363][ T3758] netlink: 96 bytes leftover after parsing attributes in process `syz.3.907'.
[  206.402350][ T3727] raw-gadget.2 gadget: fail, usb_ep_enable returned -22
[  206.750007][ T3767] netlink: 8 bytes leftover after parsing attributes in process `syz.0.910'.
[  206.947835][ T3768] loop4: detected capacity change from 0 to 512
[  207.098943][ T3772] loop3: detected capacity change from 0 to 16
[  207.120526][ T3768] EXT4-fs (loop4): orphan cleanup on readonly fs
[  207.129208][ T3768] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.911: bg 0: block 248: padding at end of block bitmap is not set
[  207.144550][ T3768] Quota error (device loop4): write_blk: dquota write failed
[  207.152100][ T3768] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota
[  207.162070][ T3768] EXT4-fs error (device loop4): ext4_acquire_dquot:6200: comm syz.4.911: Failed to acquire dquot type 1
[  207.174979][ T3768] EXT4-fs (loop4): 1 truncate cleaned up
[  207.181295][ T3768] EXT4-fs (loop4): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,auto_da_alloc,noload,nodiscard,,errors=continue. Quota mode: writeback.
[  207.337835][ T1966] udevd[1966]: incorrect erofs checksum on /dev/loop3
[  207.349177][ T3772] erofs: (device loop3): erofs_superblock_csum_verify: invalid checksum 0xefbc3110, 0x7bbbea8c expected
[  207.506896][   T60] usb 5-1: new high-speed USB device number 24 using dummy_hcd
[  207.567496][ T3772] loop3: detected capacity change from 0 to 16
[  207.630962][ T3772] erofs: (device loop3): erofs_init_devices: extra devices don't match (ondisk 128, given 0)
[  207.838275][ T3772] loop3: detected capacity change from 0 to 512
[  207.895432][ T3772] EXT4-fs (loop3): Test dummy encryption mode enabled
[  207.921889][ T3772] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  207.953134][ T3772] EXT4-fs error (device loop3): ext4_orphan_get:1427: comm syz.3.913: bad orphan inode 131083
[  207.968366][ T3772] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable,noload,,errors=continue. Quota mode: none.
[  207.992807][   T60] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[  208.011303][  T583] asix 6-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61
[  208.021779][  T583] asix: probe of 6-1:0.188 failed with error -61
[  208.024543][   T60] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[  208.040309][ T3715] EXT4-fs error (device loop5): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 5: invalid block bitmap
[  208.047906][   T60] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  208.154820][ T3780] netlink: 8 bytes leftover after parsing attributes in process `syz.3.914'.
[  208.175861][ T3780] loop3: detected capacity change from 0 to 512
[  208.211837][   T60] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  208.230656][   T60] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  208.249419][   T60] usb 5-1: Product: syz
[  208.258174][   T60] usb 5-1: Manufacturer: syz
[  208.260964][ T3780] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  208.267229][   T60] usb 5-1: SerialNumber: syz
[  208.278691][ T1138] usb 1-1: new low-speed USB device number 26 using dummy_hcd
[  208.286276][ T3780] ext4 filesystem being mounted at /174/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  208.288969][   T20] usb 6-1: USB disconnect, device number 4
[  208.429571][ T3786] fuse: Unknown parameter '&���-��l�J"��Q>f�.c��H��@t:a�Q�'
[  208.429669][ T3793] loop5: detected capacity change from 0 to 512
[  208.468323][ T3793] EXT4-fs (loop5): invalid first ino: 0
[  208.487115][ T3800] netlink: 80 bytes leftover after parsing attributes in process `syz.1.919'.
[  208.487271][ T3793] SELinux: failed to load policy
[  208.764310][  T583] usb 2-1: new high-speed USB device number 28 using dummy_hcd
[  208.783493][ T1138] usb 1-1: unable to get BOS descriptor or descriptor too short
[  208.907455][ T1138] usb 1-1: config 1 has an invalid descriptor of length 61, skipping remainder of the config
[  208.918197][ T1138] usb 1-1: config 1 interface 0 altsetting 195 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  208.977739][ T1138] usb 1-1: config 1 interface 0 has no altsetting 0
[  209.021487][  T583] usb 2-1: Using ep0 maxpacket: 8
[  209.031480][   T30] audit: type=1400 audit(1769174550.893:441): avc:  denied  { setopt } for  pid=3806 comm="syz.3.921" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  209.034901][ T3807] loop3: detected capacity change from 0 to 128
[  209.058225][ T3807] EXT4-fs error (device loop3): ext4_fill_super:4832: inode #2: comm syz.3.921: iget: checksum invalid
[  209.069623][ T3807] EXT4-fs (loop3): get root inode failed
[  209.075273][ T3807] EXT4-fs (loop3): mount failed
[  209.154848][  T583] usb 2-1: config index 0 descriptor too short (expected 5924, got 36)
[  209.163127][  T583] usb 2-1: config 250 has an invalid interface number: 228 but max is -1
[  209.171572][  T583] usb 2-1: config 250 has 1 interface, different from the descriptor's value: 0
[  209.180692][  T583] usb 2-1: config 250 has no interface number 0
[  209.187539][  T583] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024
[  209.199211][  T583] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024
[  209.209657][  T583] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0
[  209.219972][  T583] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0
[  209.230223][  T583] usb 2-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17
[  209.243724][ T1138] usb 1-1: string descriptor 0 read error: -22
[  209.249889][  T583] usb 2-1: config 250 interface 228 has no altsetting 0
[  209.256877][ T1138] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  209.265978][ T1138] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  209.307844][ T1138] usb 1-1: bad CDC descriptors
[  209.355015][ T1138] usb 1-1: USB disconnect, device number 26
[  209.402464][  T583] usb 2-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07
[  209.411640][  T583] usb 2-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59
[  209.419954][  T583] usb 2-1: Product: syz
[  209.424183][  T307] usb 4-1: new high-speed USB device number 26 using dummy_hcd
[  209.431775][  T583] usb 2-1: SerialNumber: syz
[  209.479904][  T583] hub 2-1:250.228: bad descriptor, ignoring hub
[  210.253513][  T583] hub: probe of 2-1:250.228 failed with error -5
[  210.275662][ T3817] loop4: detected capacity change from 0 to 2048
[  210.282135][  T307] usb 4-1: Using ep0 maxpacket: 16
[  210.327002][  T583] usblp 2-1:250.228: usblp0: USB Bidirectional printer dev 28 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292
[  210.346797][ T3817] EXT4-fs (loop4): mounted filesystem without journal. Opts: delalloc,noload,acl,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none.
[  210.365176][ T3823] netlink: 8 bytes leftover after parsing attributes in process `syz.5.923'.
[  210.373949][ T3823] netlink: 96 bytes leftover after parsing attributes in process `syz.5.923'.
[  210.422208][   T60] usb 5-1: 0:2 : does not exist
[  210.422525][ T3817] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1147: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters
[  210.441939][  T307] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  210.450178][   T60] usb 5-1: USB disconnect, device number 24
[  210.452392][ T3817] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 34 with error 28
[  210.470464][  T307] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2
[  210.479408][  T307] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  210.484535][ T3817] EXT4-fs (loop4): This should not happen!! Data will be lost
[  210.484535][ T3817] 
[  210.502220][ T3817] EXT4-fs (loop4): Total free blocks count 0
[  210.508260][ T3817] EXT4-fs (loop4): Free/Dirty block details
[  210.514198][ T3817] EXT4-fs (loop4): free_blocks=2415919504
[  210.523839][ T3800] netlink: 80 bytes leftover after parsing attributes in process `syz.1.919'.
[  210.526848][ T3817] EXT4-fs (loop4): dirty_blocks=48
[  210.539518][ T3817] EXT4-fs (loop4): Block reservation details
[  210.539908][ T3824] loop0: detected capacity change from 0 to 512
[  210.545641][ T3817] EXT4-fs (loop4): i_reserved_data_blocks=3
[  210.593799][ T3824] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  210.607626][ T3824] EXT4-fs error (device loop0): ext4_get_branch:178: inode #11: block 4294967295: comm syz.0.925: invalid block
[  210.619724][ T3824] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.925: invalid indirect mapped block 4294967295 (level 1)
[  210.633809][ T3824] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.925: invalid indirect mapped block 4294967295 (level 1)
[  210.648014][ T3824] EXT4-fs (loop0): 2 truncates cleaned up
[  210.653854][ T3824] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpjquota=,init_itable,dioread_nolock,bsdgroups,,errors=continue. Quota mode: writeback.
[  210.678926][  T307] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  210.687991][  T307] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  210.696089][  T307] usb 4-1: Product: syz
[  210.696106][  T307] usb 4-1: Manufacturer: syz
[  210.696117][  T307] usb 4-1: SerialNumber: syz
[  210.736388][  T307] cdc_ncm 4-1:1.0: CDC Union missing and no IAD found
[  210.743317][  T307] cdc_ncm 4-1:1.0: bind() failure
[  210.802826][  T529] usb 2-1: USB disconnect, device number 28
[  210.811227][  T529] usblp0: removed
[  210.858483][ T3840] loop4: detected capacity change from 0 to 512
[  210.870306][ T3840] EXT4-fs (loop4): Ignoring removed bh option
[  210.876501][ T3840] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem
[  210.885742][ T3840] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2229: inode #15: comm syz.4.930: corrupted in-inode xattr
[  210.897815][ T3840] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.930: couldn't read orphan inode 15 (err -117)
[  210.909742][ T3840] EXT4-fs (loop4): mounted filesystem without journal. Opts: auto_da_alloc=0x0000000000000002,grpid,bh,grpid,noauto_da_alloc,max_dir_size_kb=0x0000000000000005,init_itable=0x0000000000000009,init_itable,usrjquota=,nolazytime,norecovery,,errors=continue. Quota mode: none.
[  210.926876][   T60] usb 1-1: new high-speed USB device number 27 using dummy_hcd
[  210.945286][  T307] usb 4-1: USB disconnect, device number 26
[  210.990648][ T3843] netlink: 8 bytes leftover after parsing attributes in process `syz.4.931'.
[  211.002276][ T3843] loop4: detected capacity change from 0 to 512
[  211.076583][ T3843] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  211.089779][ T3843] ext4 filesystem being mounted at /203/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  211.165015][   T60] usb 1-1: Using ep0 maxpacket: 32
[  211.679768][ T3715] EXT4-fs error (device loop0): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 5: invalid block bitmap
[  211.693430][ T3852] fuse: Unknown parameter '&���-��l�J"��Q>f�.c��H��@t:a�Q�'
[  211.841310][   T60] usb 1-1: config 0 has an invalid interface number: 188 but max is 0
[  211.853703][   T60] usb 1-1: config 0 has no interface number 0
[  211.884315][   T60] usb 1-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32
[  211.926986][  T374] usb 2-1: new high-speed USB device number 29 using dummy_hcd
[  212.034936][ T3856] loop3: detected capacity change from 0 to 256
[  212.174865][   T60] usb 1-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36
[  212.237238][   T60] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  212.320661][ T3856] loop3: detected capacity change from 0 to 4096
[  212.329081][   T60] usb 1-1: Product: syz
[  212.333360][   T60] usb 1-1: Manufacturer: syz
[  212.346380][  T374] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[  212.365458][  T374] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[  212.376580][   T60] usb 1-1: SerialNumber: syz
[  212.425338][ T3856] EXT4-fs (loop3): Test dummy encryption mode enabled
[  212.459059][   T60] usb 1-1: config 0 descriptor??
[  212.489130][ T3824] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  212.513004][  T374] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  212.522337][ T3856] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c019, mo2=0002]
[  212.530521][ T3856] System zones: 0-5
[  212.535171][ T3856] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug,auto_da_alloc,nombcache,test_dummy_encryption,nodiscard,min_batch_time=0x0000000000000000,commit=0x0000000000000000,nodiscard,,errors=continue. Quota mode: writeback.
[  212.653713][ T3868] netlink: 12 bytes leftover after parsing attributes in process `syz.5.937'.
[  212.689346][  T374] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  212.844204][ T3824] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  212.938390][  T374] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  212.955940][  T374] usb 2-1: Product: syz
[  212.960151][  T374] usb 2-1: Manufacturer: syz
[  212.964746][  T374] usb 2-1: SerialNumber: syz
[  213.039993][ T3874] loop4: detected capacity change from 0 to 512
[  213.057422][ T3874] EXT4-fs (loop4): orphan cleanup on readonly fs
[  213.063837][ T3874] EXT4-fs error (device loop4): ext4_quota_enable:6404: comm syz.4.940: Bad quota inum: 2, type: 1
[  213.074737][ T3874] EXT4-fs warning (device loop4): ext4_enable_quotas:6452: Failed to enable quota tracking (type=1, err=-117, ino=2). Please run e2fsck to fix.
[  213.089346][  T307] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  213.089368][ T3874] EXT4-fs (loop4): Cannot turn on quotas: error -117
[  213.103612][ T3874] EXT4-fs (loop4): mounted filesystem without journal. Opts: noinit_itable,,errors=continue. Quota mode: writeback.
[  213.279757][   T60] asix 1-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61
[  213.289990][   T60] asix: probe of 1-1:0.188 failed with error -61
[  213.308383][ T1936] usb 4-1: new high-speed USB device number 27 using dummy_hcd
[  213.336528][  T307] usb 6-1: Using ep0 maxpacket: 16
[  213.349582][   T30] audit: type=1400 audit(1769174555.428:442): avc:  denied  { bind } for  pid=3881 comm="syz.4.941" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  213.401080][ T3882] xt_policy: output policy not valid in PREROUTING and INPUT
[  213.479457][  T307] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  213.490508][  T307] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  213.500510][  T307] usb 6-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00
[  213.509608][  T307] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  213.518526][  T307] usb 6-1: config 0 descriptor??
[  213.670397][ T1936] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  213.680169][ T1936] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  213.692974][ T1936] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00
[  213.702020][ T1936] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  213.713613][ T1936] usb 4-1: config 0 descriptor??
[  213.950283][ T3876] loop3: detected capacity change from 0 to 256
[  214.006745][ T3876] FAT-fs (loop3): Directory bread(block 64) failed
[  214.022799][ T3876] FAT-fs (loop3): Directory bread(block 65) failed
[  214.029359][ T3876] FAT-fs (loop3): Directory bread(block 66) failed
[  214.051389][ T3876] FAT-fs (loop3): Directory bread(block 67) failed
[  214.057925][ T3876] FAT-fs (loop3): Directory bread(block 68) failed
[  214.079964][ T3876] FAT-fs (loop3): Directory bread(block 69) failed
[  214.086504][ T3876] FAT-fs (loop3): Directory bread(block 70) failed
[  214.098822][ T3876] FAT-fs (loop3): Directory bread(block 71) failed
[  214.105359][ T3876] FAT-fs (loop3): Directory bread(block 72) failed
[  214.127603][ T3876] FAT-fs (loop3): Directory bread(block 73) failed
[  214.299131][  T374] usb 2-1: 0:2 : does not exist
[  214.315758][  T374] usb 2-1: USB disconnect, device number 29
[  214.404671][ T3876] attempt to access beyond end of device
[  214.404671][ T3876] loop3: rw=2049, want=1196, limit=256
[  214.442727][ T1936] kovaplus 0003:1E7D:2D50.0004: item fetching failed at offset 2/5
[  214.450964][ T1936] kovaplus 0003:1E7D:2D50.0004: parse failed
[  214.456987][ T1936] kovaplus: probe of 0003:1E7D:2D50.0004 failed with error -22
[  214.464866][  T583] usb 1-1: USB disconnect, device number 27
[  214.516223][ T3894] loop4: detected capacity change from 0 to 2048
[  214.573187][ T3896] loop0: detected capacity change from 0 to 256
[  214.622354][ T3894] EXT4-fs (loop4): mounted filesystem without journal. Opts: delalloc,noload,acl,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none.
[  214.661437][ T3894] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1147: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters
[  214.701624][ T3901] loop0: detected capacity change from 0 to 1024
[  214.709120][ T3901] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities
[  214.750472][  T332] ------------[ cut here ]------------
[  214.755934][  T332] kernel BUG at fs/ext4/inode.c:2747!
[  214.761968][   T30] audit: type=1400 audit(1769174556.908:443): avc:  denied  { setopt } for  pid=3900 comm="syz.0.947" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  214.794087][  T307] usbhid 6-1:0.0: can't add hid device: -71
[  214.800045][  T307] usbhid: probe of 6-1:0.0 failed with error -71
[  214.808560][  T332] invalid opcode: 0000 [#1] PREEMPT SMP KASAN
[  214.814632][  T332] CPU: 1 PID: 332 Comm: kworker/u4:3 Not tainted syzkaller #0
[  214.822084][  T332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  214.832132][  T332] Workqueue: writeback wb_workfn (flush-7:4)
[  214.838119][  T332] RIP: 0010:ext4_writepages+0x3069/0x3090
[  214.843837][  T332] Code: 00 00 00 e8 89 35 8e ff 84 db 75 2c e8 f0 32 8e ff 49 bc 00 00 00 00 00 fc ff df 48 8b 5c 24 20 e9 8e f7 ff ff e8 d7 32 8e ff <0f> 0b e8 d0 32 8e ff e8 67 e2 24 ff eb a2 e8 c4 32 8e ff e8 5b e2
[  214.863435][  T332] RSP: 0018:ffffc900079c7100 EFLAGS: 00010293
[  214.869493][  T332] RAX: ffffffff81db9699 RBX: 0000008410000000 RCX: ffff888128df3b40
[  214.877456][  T332] RDX: 0000000000000000 RSI: 0000008000000000 RDI: 0000000000000000
[  214.885422][  T332] RBP: ffffc900079c7470 R08: ffff888130b5d7ff R09: 1ffff1102616baff
[  214.893388][  T332] R10: dffffc0000000000 R11: ffffed102616bb00 R12: dffffc0000000000
[  214.901355][  T332] R13: 0000000000000001 R14: 0000008000000000 R15: ffff888130b5da90
[  214.909321][  T332] FS:  0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000
[  214.918247][  T332] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  214.924825][  T332] CR2: 00007f3d00f29d20 CR3: 000000010de03000 CR4: 00000000003506a0
[  214.932787][  T332] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  214.940744][  T332] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  214.948697][  T332] Call Trace:
[  214.951954][  T332]  <TASK>
[  214.954866][  T332]  ? __kasan_check_write+0x14/0x20
[  214.959962][  T332]  ? __update_load_avg_cfs_rq+0xaf/0x2f0
[  214.965579][  T332]  ? update_load_avg+0x40d/0x1110
[  214.970584][  T332]  ? ext4_readpage+0x220/0x220
[  214.975329][  T332]  ? enqueue_task_fair+0xb22/0x2160
[  214.980515][  T332]  ? __kasan_check_write+0x14/0x20
[  214.985608][  T332]  ? ext4_readpage+0x220/0x220
[  214.990350][  T332]  do_writepages+0x473/0x6c0
[  214.994919][  T332]  ? update_curr+0x31f/0x5e0
[  214.999487][  T332]  ? __writepage+0x130/0x130
[  215.004059][  T332]  ? enqueue_task_fair+0xb22/0x2160
[  215.009235][  T332]  ? __kasan_check_write+0x14/0x20
[  215.014325][  T332]  ? _raw_spin_lock+0x94/0xf0
[  215.018979][  T332]  __writeback_single_inode+0xd5/0x9c0
[  215.024419][  T332]  ? wbc_attach_and_unlock_inode+0x194/0x5f0
[  215.030378][  T332]  writeback_sb_inodes+0xa10/0x1610
[  215.035561][  T332]  ? psi_task_change+0x213/0x370
[  215.040481][  T332]  ? queue_io+0x4c0/0x4c0
[  215.044793][  T332]  ? __kasan_check_read+0x11/0x20
[  215.049799][  T332]  ? queue_io+0x382/0x4c0
[  215.054108][  T332]  wb_writeback+0x40b/0x9d0
[  215.058593][  T332]  ? inode_cgwb_move_to_attached+0x3e0/0x3e0
[  215.064552][  T332]  ? set_worker_desc+0x1ba/0x1f0
[  215.069471][  T332]  ? __kasan_check_write+0x14/0x20
[  215.074563][  T332]  wb_workfn+0x3ac/0xf30
[  215.078786][  T332]  ? inode_wait_for_writeback+0x220/0x220
[  215.084485][  T332]  ? compat_start_thread+0x20/0x20
[  215.089576][  T332]  ? _raw_spin_unlock+0x4d/0x70
[  215.094404][  T332]  ? finish_task_switch+0x16b/0x780
[  215.099580][  T332]  ? __switch_to_asm+0x3a/0x60
[  215.104323][  T332]  ? __schedule+0xb76/0x14c0
[  215.108892][  T332]  process_one_work+0x6be/0xba0
[  215.113723][  T332]  worker_thread+0xa59/0x1200
[  215.118379][  T332]  ? _raw_spin_lock_irqsave+0xc2/0x130
[  215.123818][  T332]  kthread+0x411/0x500
[  215.127864][  T332]  ? worker_clr_flags+0x190/0x190
[  215.132869][  T332]  ? kthread_blkcg+0xd0/0xd0
[  215.137438][  T332]  ret_from_fork+0x1f/0x30
[  215.141835][  T332]  </TASK>
[  215.144840][  T332] Modules linked in:
[  215.154057][  T332] ---[ end trace fa2d63a967673450 ]---
[  215.159567][  T332] RIP: 0010:ext4_writepages+0x3069/0x3090
[  215.165293][  T332] Code: 00 00 00 e8 89 35 8e ff 84 db 75 2c e8 f0 32 8e ff 49 bc 00 00 00 00 00 fc ff df 48 8b 5c 24 20 e9 8e f7 ff ff e8 d7 32 8e ff <0f> 0b e8 d0 32 8e ff e8 67 e2 24 ff eb a2 e8 c4 32 8e ff e8 5b e2
[  215.168530][  T307] usb 6-1: USB disconnect, device number 5
[  215.186156][  T332] RSP: 0018:ffffc900079c7100 EFLAGS: 00010293
[  215.196784][  T332] RAX: ffffffff81db9699 RBX: 0000008410000000 RCX: ffff888128df3b40
[  215.204798][  T332] RDX: 0000000000000000 RSI: 0000008000000000 RDI: 0000000000000000
[  215.212765][  T332] RBP: ffffc900079c7470 R08: ffff888130b5d7ff R09: 1ffff1102616baff
[  215.220750][  T332] R10: dffffc0000000000 R11: ffffed102616bb00 R12: dffffc0000000000
[  215.228742][  T332] R13: 0000000000000001 R14: 0000008000000000 R15: ffff888130b5da90
[  215.236958][  T332] FS:  0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000
[  215.243244][ T3892] netlink: 'syz.1.944': attribute type 1 has an invalid length.
[  215.245921][  T332] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  215.253715][ T3892] netlink: 1 bytes leftover after parsing attributes in process `syz.1.944'.
[  215.260109][  T332] CR2: 00007fb045a11ff8 CR3: 0000000125fa3000 CR4: 00000000003506b0
[  215.276848][  T332] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  215.284866][  T332] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  215.292857][  T332] Kernel panic - not syncing: Fatal exception
[  215.299200][  T332] Kernel Offset: disabled
[  215.303511][  T332] Rebooting in 86400 seconds..