last executing test programs:

6.271652704s ago: executing program 2 (id=271):
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000001c0)={[{@barrier}, {@nodioread_nolock}, {@noquota}, {@sb={'sb', 0x3d, 0x100000000}}, {@auto_da_alloc}, {@nodioread_nolock}]}, 0x1, 0x5a0, &(0x7f0000000980)="$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")
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x58)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0)
unshare(0x22020400)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r3, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
copy_file_range(r2, 0x0, r2, &(0x7f00000000c0)=0xae8, 0x863, 0x0)

6.149515578s ago: executing program 2 (id=272):
syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x840, &(0x7f0000000080)={[{@test_dummy_encryption_v1}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x2}}, {@inlinecrypt}]}, 0x1, 0x241, &(0x7f0000000540)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x105042, 0x189)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, &(0x7f0000000300)={0x14, &(0x7f0000000100)={0x20, 0x24, 0x16, {0x16, 0xc, "fcedfa253d8043e925819d25a1c63ac62b23c698"}}, 0x0, 0x0, 0x0}, 0x0)
r2 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0)
ioctl$HIDIOCGUCODE(r2, 0xc018480d, &(0x7f0000000140)={0x3, 0x200, 0x7fff, 0x3, 0x6, 0x3})
write$binfmt_format(r0, &(0x7f0000000000)='1\x00', 0x2400)

5.806919598s ago: executing program 4 (id=275):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6_vti0\x00', <r1=>0x0})
r2 = gettid()
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x5}, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00000010000304f9ffbffffedbdf2500007400", @ANYRES32=r1, @ANYBLOB="049c01000750050008001300", @ANYRES32=r2, @ANYBLOB="14000300"], 0x3c}, 0x1, 0x0, 0x0, 0x4802}, 0x42850)

5.725430521s ago: executing program 4 (id=276):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f)
r3 = socket$igmp(0x2, 0x3, 0x2)
getsockopt$IPT_SO_GET_INFO(r3, 0x0, 0x40, &(0x7f0000000300)={'nat\x00', 0x0, [0x2, 0x100, 0xa1, 0x1, 0x80]}, &(0x7f0000000380)=0x54)
socket$nl_audit(0x10, 0x3, 0x9)

4.231965488s ago: executing program 3 (id=284):
sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000400)={0xffffffffffffffff, 0x3, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x58}}, 0x0)
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000002040)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000a00)=""/178, 0xb2}], 0x1}, 0x2}, {{0x0, 0x0, 0x0}, 0x9}], 0x2, 0x40000022, 0x0)
mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xc)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$TIPC_NL_MEDIA_GET(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="11002aad70d071dbdf2503000000"], 0x14}, 0x1, 0x0, 0x0, 0x14}, 0x10)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x1c}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0xbe8}, {&(0x7f00000007c0)=""/154, 0x43}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400})

4.105161171s ago: executing program 3 (id=285):
r0 = syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x29, 0x351, &(0x7f0000001b40)="$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")
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0x124)
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r3 = dup(r2)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x80100, 0x0)
ioctl$TIOCMSET(r5, 0x5418, &(0x7f0000000000)=0x8001)
r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2)
ioctl$KVM_RUN(r7, 0xae80, 0x0)
close_range(r4, 0xffffffffffffffff, 0x0)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0x0, 0x0)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r10, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)=ANY=[@ANYRES8=r1, @ANYRES16=r6, @ANYRES8=r3, @ANYRESHEX=r8, @ANYRESHEX=r0], 0x1c}, 0x1, 0x0, 0x0, 0x4040}, 0x4000854)
r11 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), r10)
sendmsg$WG_CMD_SET_DEVICE(r10, 0x0, 0x4010)
sendmsg$WG_CMD_SET_DEVICE(r9, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="18010000", @ANYRES16=r11, @ANYBLOB="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"], 0x118}, 0x1, 0x0, 0x0, 0x4004001}, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0)
ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0x300, 0xfffe, 0x101, 0x2}})
mknodat$null(r1, &(0x7f0000000000)='./file1\x00', 0x8000, 0x103)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ff0000/0x10000)=nil, 0xffffff1b, &(0x7f0000000000)='\x00\x00')
r12 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x408000, 0x0)
r13 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_STOP_NAN(r12, &(0x7f0000000180)={&(0x7f0000000240), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r13, 0x200, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x20000000)
madvise(&(0x7f0000ff7000/0x1000)=nil, 0x1000, 0xa)

3.999546025s ago: executing program 4 (id=287):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000100000006"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4000}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080))
r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001180)=ANY=[@ANYBLOB="12010000090003206d0414c34000ffff000109022400010400a000090400000103010100093700086ce82201000905815f"], 0x0)
syz_usb_control_io$hid(r2, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xf, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000100"/15], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @cgroup_device=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_usb_control_io(r2, &(0x7f0000000180)={0x2c, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x7, 0x3, 0x2d, 0x80, 0x4, 0x2, 0x400}}}, 0x0)
r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r3}, &(0x7f0000000280), &(0x7f0000000240)=r1}, 0x20)
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000)
r4 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
setsockopt$inet6_int(r4, 0x29, 0x2, &(0x7f0000004240)=0xc3, 0x4)
recvmmsg(r4, &(0x7f0000004180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003b80)=""/219, 0xdb}, 0x936}], 0x1, 0x2, 0x0)
sendto$inet6(r4, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c)

3.921260357s ago: executing program 3 (id=288):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
mknodat$loop(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x2000, 0x0)
r1 = open(&(0x7f00000003c0)='./file2\x00', 0x200000, 0x10dd722b6e14c3dd)
r2 = syz_mount_image$fuse(0x0, &(0x7f0000000100)='./file0\x00', 0x40, 0x0, 0x0, 0x0, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
socket$can_raw(0x1d, 0x3, 0x1)
r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
r6 = syz_usb_connect$uac1(0x0, 0xa4, &(0x7f00000003c0)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r5, @ANYBLOB="05", @ANYRES16=r5, @ANYRES64=r5], 0x0)
pipe2$9p(&(0x7f0000000240)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff}, 0x0)
r9 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x6)
copy_file_range(r9, &(0x7f0000000080)=0x6, r7, &(0x7f0000000140)=0x3, 0xffffffffffffffff, 0x0)
write$P9_RVERSION(r8, &(0x7f00000002c0)=ANY=[@ANYRES8=r6], 0x15)
r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd634936f2})
ioctl$TUNSETPERSIST(r10, 0x400454cb, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r11 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0)
ioctl$PPPIOCNEWUNIT(r11, 0xc004743e, &(0x7f0000000140))
ioctl$PPPIOCSNPMODE(r11, 0x4008744b, &(0x7f0000000040)={0x2b})
r12 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
ioctl$AUTOFS_IOC_SETTIMEOUT(r12, 0x80049367, &(0x7f0000000340)=0xb8b)
write$P9_RLERRORu(r8, &(0x7f0000000580)=ANY=[@ANYRESHEX=r11, @ANYRES32=r8, @ANYRES64=r4, @ANYRESHEX=r8], 0x53)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x2004000, &(0x7f0000000440)=ANY=[@ANYRESOCT=r2, @ANYRESHEX=r7, @ANYBLOB=',wfdno=', @ANYRESHEX=r8, @ANYBLOB="1c3310bcd881f5c939013a8378263dee141f7326721942bbf267190888df2e54e55f1dd1c0f2c31db9774dbc0ba27c77634a379a29503946d28aec16f2ff16467d77f34835d25e8d1205e2de7ba12dd5ebf09e553f97e65fd8a225e6a4dc92631ed2d8115aa766d54c5250eed80194eea15ae95ae41ec1729b5fc3364ddd279706200f298c1a38f86e3647bb1f0864acd3cb3f7d5621ad6aaf6e9da2adde8f7dbd657957eaa648a991be3f5021e5bad0b99f7a974015dfd0bd914b7700dd0e948a69c40ac3b1efaf58b219e01ae960af7830e9e5a4c003e755"])
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, 0x0)
syz_usb_connect$midi(0x0, 0x31, &(0x7f0000000380)=ANY=[@ANYBLOB="1201010200000008990431104000010203d62142810001011810040904000001010300060905070b00020f070204250100"], &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0})
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000008000000000000000900000873110d000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x22, '\x00', 0x0, @cgroup_sock_addr=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

3.920912407s ago: executing program 0 (id=289):
sched_setaffinity(0x0, 0x0, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', <r1=>0x0})
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x12, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newlink={0x98, 0x10, 0x401, 0x5, 0x3, {0x0, 0x0, 0x0, 0x0, 0x503}, [@IFLA_LINKINFO={0x70, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x60, 0x2, 0x0, 0x1, [@IFLA_VLAN_INGRESS_QOS={0x10, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x308, {0x10005, 0xb}}]}, @IFLA_VLAN_ID={0x6, 0x1, 0x3}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x2, 0xe}}, @IFLA_VLAN_EGRESS_QOS={0x1c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffffa}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x49b}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x8, 0xf}}, @IFLA_VLAN_INGRESS_QOS={0x10, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x4, 0x3}}]}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x98}, 0x1, 0x0, 0x0, 0x20004800}, 0x4000000)

3.868432669s ago: executing program 0 (id=290):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]})
close_range(r1, r1, 0x200000000000000)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000)
recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000980)=@ipv4_newroute={0x24, 0x18, 0x1, 0x60bd2f, 0x25dfdbf9, {0x2, 0x20, 0x30, 0xc, 0xff, 0x4, 0xfd, 0x1, 0x5a00}, [@RTA_GATEWAY={0x8, 0x5, @loopback}]}, 0x24}, 0x1, 0x0, 0x0, 0x20004005}, 0x80)
setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @dev={0xac, 0x14, 0x14, 0x15}}, 0x8)

3.8269486s ago: executing program 0 (id=291):
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x280, 0x0)
ioctl$PTP_PEROUT_REQUEST2(r0, 0x40383d0c, 0x0)
write$FUSE_LSEEK(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
prlimit64(r1, 0x9, 0x0, &(0x7f00000001c0))
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x8f}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x70)
r4 = socket$inet6_udplite(0xa, 0x2, 0x88)
bind$inet6(r4, &(0x7f0000000080)={0xa, 0x4e21, 0x5, @ipv4={'\x00', '\xff\xff', @empty}, 0x7}, 0x1c)
setsockopt$inet6_udp_int(r4, 0x11, 0xa, &(0x7f0000000000)=0xfffffff9, 0x4)
r5 = fcntl$dupfd(r4, 0x0, r4)
write$cgroup_pid(r5, &(0x7f0000000240), 0x12)
fsconfig$FSCONFIG_SET_BINARY(r5, 0x2, &(0x7f0000000040)='\x00', &(0x7f0000000100)="266da01542810a715113b55e4d962b14b6ecc734ba44b2c6c7a9886659a710effd90d634186328acf259c6c86fd2d823bf9830a083b25cb677ceebb0cb9496de0a936dc18c7150e487f6797f940afa0173c28901f31718f6a295af614ad27ec7371c34f26f31be3c12ddba46dca52b599d7664d1e1a6e9314e4ec9fd5a4cb4d557008ca46f81c59579bc78ec2ad10c1c7df3e3510d4e970b5f510049129403eec276e9f0352dd4e5", 0xa8)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x9, 0x687, 0x6, 0xfffa}, 0x2000001d, [0x108e8fd7, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x20002, 0x20003, 0x84, 0x6, 0x4d, 0x39cc191a, 0x5c, 0x9, 0x5b2, 0x2, 0x0, 0x1, 0x3, 0x0, 0x2ab, 0x4, 0x10007, 0x4, 0x3c5b, 0x1, 0xb, 0x40000009, 0xfffffffd, 0x1f461e2c, 0x7, 0xe661, 0x7fff, 0xb, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x800242, 0xffffffff, 0x11, 0x0, 0xffffffff, 0x2, 0x406, 0x3, 0x2, 0x5, 0x3e, 0x8b, 0x6, 0x6, 0x3, 0x80092a3, 0x4, 0x1, 0x20000000, 0x82, 0x0, 0x7, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000009, 0xffff, 0x4000, 0x6, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x5, 0x1001, 0xfffffffc, 0x43, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x0, 0x0, 0xfffffffe, 0x8, 0x4, 0x8002, 0x9, 0x3fe, 0x401, 0x400006, 0x4, 0xfb, 0x5, 0x8000, 0x5f31, 0xbcf5, 0x1, 0x2, 0x2, 0x9, 0x4, 0x9, 0x5, 0x9, 0x6, 0xb, 0xa, 0x1, 0x6, 0x9, 0x2, 0x7f, 0x7, 0x1, 0x3, 0x9, 0x425, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x400004], [0x6, 0x6, 0x80000001, 0x2, 0xff, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x1, 0xb, 0x4, 0x5, 0x1005, 0x0, 0x1f0, 0x2, 0x2, 0x86, 0x1, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x800, 0x8, 0x5, 0x8001, 0x7, 0x2, 0x800003, 0x200, 0x80, 0x2, 0xcc52, 0x950bfaf, 0x1000, 0xa2, 0x7, 0x8c, 0xfffffff9, 0x6, 0xac8, 0xbf, 0x10002, 0x403, 0x7ff, 0xffffffff, 0x0, 0x1, 0xffff, 0x0, 0x6, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0xff], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x1, 0x6, 0x5, 0x0, 0x3, 0x1, 0x1ff, 0x3, 0x7, 0xfd, 0x1003, 0x101, 0x10000, 0x6, 0x7fff, 0xffdf, 0xe620, 0x2002, 0xf, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x2, 0xffffffff, 0x80000004, 0x7, 0x8, 0xc8, 0xee1, 0x0, 0xffff, 0x3, 0x7b, 0x20100, 0x9602, 0x4, 0x2, 0xffff, 0x6, 0x1, 0x10080, 0x6, 0x2, 0x30b1d693, 0x5a2b, 0xc, 0x7, 0x1, 0x6c1b, 0x800, 0x8, 0x5, 0xb1c, 0x1, 0x1fd, 0xffff3441, 0xfff]}, 0x45c)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)

2.965299647s ago: executing program 0 (id=292):
ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, &(0x7f0000002d40)={0x25, 0x2b, 0x12, 0x4, 0xe, 0x3e5, 0x2, 0xca, 0xffffffffffffffff})

2.913374889s ago: executing program 0 (id=293):
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x280, 0x0)
ioctl$PTP_PEROUT_REQUEST2(r0, 0x40383d0c, 0x0)
write$FUSE_LSEEK(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x8f}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x70)
r4 = socket$inet6_udplite(0xa, 0x2, 0x88)
bind$inet6(r4, &(0x7f0000000080)={0xa, 0x4e21, 0x5, @ipv4={'\x00', '\xff\xff', @empty}, 0x7}, 0x1c)
setsockopt$inet6_udp_int(r4, 0x11, 0xa, &(0x7f0000000000)=0xfffffff9, 0x4)
r5 = fcntl$dupfd(r4, 0x0, r4)
write$cgroup_pid(r5, &(0x7f0000000240), 0x12)
fsconfig$FSCONFIG_SET_BINARY(r5, 0x2, &(0x7f0000000040)='\x00', &(0x7f0000000100)="266da01542810a715113b55e4d962b14b6ecc734ba44b2c6c7a9886659a710effd90d634186328acf259c6c86fd2d823bf9830a083b25cb677ceebb0cb9496de0a936dc18c7150e487f6797f940afa0173c28901f31718f6a295af614ad27ec7371c34f26f31be3c12ddba46dca52b599d7664d1e1a6e9314e4ec9fd5a4cb4d557008ca46f81c59579bc78ec2ad10c1c7df3e3510d4e970b5f510049129403eec276e9f0352dd4e5", 0xa8)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x9, 0x687, 0x6, 0xfffa}, 0x2000001d, [0x108e8fd7, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x20002, 0x20003, 0x84, 0x6, 0x4d, 0x39cc191a, 0x5c, 0x9, 0x5b2, 0x2, 0x0, 0x1, 0x3, 0x0, 0x2ab, 0x4, 0x10007, 0x4, 0x3c5b, 0x1, 0xb, 0x40000009, 0xfffffffd, 0x1f461e2c, 0x7, 0xe661, 0x7fff, 0xb, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x800242, 0xffffffff, 0x11, 0x0, 0xffffffff, 0x2, 0x406, 0x3, 0x2, 0x5, 0x3e, 0x8b, 0x6, 0x6, 0x3, 0x80092a3, 0x4, 0x1, 0x20000000, 0x82, 0x0, 0x7, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000009, 0xffff, 0x4000, 0x6, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x5, 0x1001, 0xfffffffc, 0x43, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x0, 0x0, 0xfffffffe, 0x8, 0x4, 0x8002, 0x9, 0x3fe, 0x401, 0x400006, 0x4, 0xfb, 0x5, 0x8000, 0x5f31, 0xbcf5, 0x1, 0x2, 0x2, 0x9, 0x4, 0x9, 0x5, 0x9, 0x6, 0xb, 0xa, 0x1, 0x6, 0x9, 0x2, 0x7f, 0x7, 0x1, 0x3, 0x9, 0x425, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x400004], [0x6, 0x6, 0x80000001, 0x2, 0xff, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x1, 0xb, 0x4, 0x5, 0x1005, 0x0, 0x1f0, 0x2, 0x2, 0x86, 0x1, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x800, 0x8, 0x5, 0x8001, 0x7, 0x2, 0x800003, 0x200, 0x80, 0x2, 0xcc52, 0x950bfaf, 0x1000, 0xa2, 0x7, 0x8c, 0xfffffff9, 0x6, 0xac8, 0xbf, 0x10002, 0x403, 0x7ff, 0xffffffff, 0x0, 0x1, 0xffff, 0x0, 0x6, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0xff], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x1, 0x6, 0x5, 0x0, 0x3, 0x1, 0x1ff, 0x3, 0x7, 0xfd, 0x1003, 0x101, 0x10000, 0x6, 0x7fff, 0xffdf, 0xe620, 0x2002, 0xf, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x2, 0xffffffff, 0x80000004, 0x7, 0x8, 0xc8, 0xee1, 0x0, 0xffff, 0x3, 0x7b, 0x20100, 0x9602, 0x4, 0x2, 0xffff, 0x6, 0x1, 0x10080, 0x6, 0x2, 0x30b1d693, 0x5a2b, 0xc, 0x7, 0x1, 0x6c1b, 0x800, 0x8, 0x5, 0xb1c, 0x1, 0x1fd, 0xffff3441, 0xfff]}, 0x45c)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)

2.422951614s ago: executing program 1 (id=294):
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f00000003c0)={{0x3, 0x7}})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x50741000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}})
read$FUSE(r2, &(0x7f00000021c0)={0x2020, 0x0, <r3=>0x0}, 0x2020)
write$FUSE_INIT(r2, &(0x7f0000000080)={0x50, 0x0, r3, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50)
r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x2c)
syz_fuse_handle_req(r2, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r5 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r5, 0x29, 0x31, &(0x7f0000000040)=0x7, 0x4)
bind$inet6(r5, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
r6 = socket$inet6(0xa, 0x2, 0x0)
sendto$inet6(r6, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)
recvmmsg(r5, &(0x7f0000000600)=[{{&(0x7f0000000140)=@nfc_llcp, 0x0, &(0x7f0000000780)=[{&(0x7f00000001c0)=""/199}, {&(0x7f0000000340)=""/161}, {&(0x7f0000000400)=""/94}, {&(0x7f0000000480)=""/160}, {&(0x7f0000000640)=""/155}, {&(0x7f0000000700)=""/80}], 0x0, &(0x7f0000000580)=""/80, 0x11}}], 0x4000000000002ff, 0x2, 0x0)
syz_fuse_handle_req(r2, &(0x7f00000083c0)="99529ca7d265e2dba44891e35e7d5dab7921b730436ecd4e999a25bcf86a25f8f029c0dd50373e90b7cf7779b12ecd4423c5b13cfac186975cd723976f3c747612913029d42517c189364bc59d8ebad53ed1b86f8f66c99b1f9b5b40d78cef1f14f81815d53bdca7fef40607358db69eb8c0b1f6b0942ab4b1ee7ca8deb4eddef06381a3d1c52d6147fc5109c7c607591497a6b2477f60cc881d3219c96bffb34aadec3fa97250713cce17cd536721bf9c40a019531ed0bbad139e26a3d4d39b68ab1bf37cb1a4bd197a8789cb1940cd86d9e56713bc36c7cffd07a311f5bc2e91f16d152eb480645e85ec9b3bf09c7fa140dced0afd55d7b99e90a96e7748e2d0dc09672ac199ce529e631efe1783769819c182ca106f6184bcbb387ed246c43562d74c36ac3a7ec2f0e11f70bad0007c03bb9c0d2dacc2148cce4a4aea327c7319016ad146b52bfae0357f9e892e9bec61a13c93551cfa3d4f4bfa7585c93bb0bef01a9114f3dc54179cf9a57fe88f5cff3403e33c9d09e3e9c2e10f1f16894e1b59e3cad47c1f202cf7b756f2851fc96d09459c9a8d34c19e6a3525cd5001aac5181f57286d0e1e88ce5092c7c76b6abdaebf2c499aa47587b48eb12a2b72548c190b0324ebedb81a63333b6edb25550f859c5ccc404a944ff7f61af8800888192fbd4c8e0e417d1d181b4b335a6f52e0a7dae18397e81e3f747cab7be902ed903bdd6a622f178f9b4244718ee1206237257374d2fd1466ab6135ef7ef4a114ae170eafe9cd78cf9ffc36974cbc4b8003072bed78765a0b9f1240f24dec6a9e46db9bb498d40f727c0cbf8f4a6a49539bd0805caf65d80130d7fb60a69dc7ed890874a17530c042cf33a977d331435d68ef33885f638c777ad49564ca77d8b81ddd853a21cd55d95b627310dd633a4f005853a5506cd8f744c367f3cb6998b0fa97de6bb35b166b0c6408c4e0a38ed26235a88520c38ca97ac8a6dc81e6dc6483d383fa09f198997b8eea1c68c9e3320683c9a02dd89ddc34c241e7294ccc88d6b35762892e8746e558bfbc2251949f2ecb763dad5b975eaf36e2864be6a41d3e20514d32f5d4b6350dc7e3cc3a85428ea98efb3b1edc2a2ec1e618452949cc7e2ba1251990168fee342d4f304b7a7af9162bcbe6b09c75d7420d2c547b4e3cee1836df6eddd5dff73a4e308fcd8eaa7a33e6980a6f8ead03257a37d72d3b265d02fa42f57db877654ed513e31c35e1af0bd28511d6b57cfe07b27cbe9767a534b426dfc3dd257d5899444f34cbf4dc74b9eab2e7e3e1e1a8a6ac5e4359d653506b299a5b7c67b92dc462f1216655f952362a3387ad9966b606d98e8d1b544dc27dc6bc78fd18a446736e25c51143db9886b6c09812d5825b5d9e0932f218ff8bea4d9e1c4df9c9d4eb19336d48163a921c4ff1f0beef26b01b7e8c0d23fb59b84e229eaabb791f2cffc9aa4db75162cbfe4c9ae8d76a5b6bc4bff20e3f8f125b9aadb3e728d7f78d61fd55f46b7f59511b876e6563256686e44f25cf38d393a9b762bada272eba8df28e4086c4cd2fe3c9fab97756fb145373e6ca1991bb1ee6589e49c821ff29f047970819f88f724bd077cd3f0ae463d99b3e53078431e3f9bebabc5289a65479359efe3909186aac60a29f561de8c590988c913c9e693ab8106e8287f6565eee6735f7c88cad7124d1c8d9ff347e97912824088ee954de01c6d8a06447f06899607eadbfd078bc3df506252005749378dbd7399c9eca60b81dc0d88dedec31e5cf6e7b6d6d411958df8f9e0bf4443e8d3bdfe49d05f811d17088024d0629fc8ab8e05e309bf55e8e60d342623765f4e8d2dc4a90291cd4354ff9568c8170e6ea56e028bcf2719595253adb8c84050bb9ce4927a1c1f4560da87d109ceda90bbe45a1717763d8025f1ff40f157185ddf17079da272ae10c4f34162caf4b0d31221a57b3059fd449c87554d968a54b2eebd760dc3263c40d9eedf5905d5699d29706ea6e9e81ff2bf92489a06deffe7e978661f37a88450783e23f107c2bfce000dfc91c5fca49e46d9ea978f215a45984699f0d2503b30a741e13be56b7abe3e5663c0825c3cb04ead44ce97719c4ee6f4cdd3c452775ad7163d5c9034583cc2dbc2b0c04917a3e1aa3d0a8bb6fcf94d7922eb1d543c09185827aeb1b72ae7103ef2c014af2ff4b47fca40fb0e66ddf0264476d7a84e9b8dc551d4c407bdbac6757f7a25bd404b45bec1091696203cc438860131ad5f2fd80e3c45629864dd9f7d302b66fb8fb86735c9a6dcf8b135a273dd2ae9473bc905081be9fcb8f91b1ddba1ac692798dac0b9ccffe0319a779f5e10c65f294b22fe475283b023f9cd890e92c5447b1bc1528255c5af383bc1fb6e72cb9a67215a9e25cde63c89baa8c7125c7e8b748b728d07d9cb66778404f54e6a9e3ae1ae82f3d0ce77199f23f94a01b71b805b476fedbebeb52c83a1b857f23ba438c56a6c4c2a5909f721e6e3d240e4a16455e92220d13022ce7ec0b1365ba4e67aa6ecb324f8826579e12cebdfc0d8af63e83b5e5624d5b791f99093f9a27f7baea9fd10111209c0857a04f07408111063ef34026aee27a3d51b40e53883f9094402534bdd21cc49d7f5593e99cb204cd805bee4add0f82cf4b6dc5da14d6b79fbc68c9ccf7fb5fe774f8879e13079b024a8ad24bf123c420d630837a84ba05abf0ae4dc3fc04f25c7f74ff91d0d609c958642a48551e51b5c0074a56a7da10ce153b08cabea636f8489d8e7b655758a41d7f7474c9d76bf4d54d789bfceaffef139854065de6a94b0275a9626aab99ae838364b1a491e55017e4212b6b01f7a41bc9c215ecd17c49a8610db28c699259c58b81a0e84c45fd8e719c05c48501c49e8a6515044d247f58e4cd0bf22fd6ae31f45339d1f801196d426c52269b1aaffaf18e2a03760bb231cb7cefa6d72f1d7eb6a3bbd65d0914221b8fbf531dbd562eb4a1b28983ac7d83d4813b10b34c9525ba644f61a2c4800d4fe96a7bca63da1041ed73cc57fb9d42f9dfc8ca41d80292bbb311c89b0a0fcee1d88a025a7416863342aea00e6f049cb2ddebd17c5c617ff562a8af0c965cbe8341431a30ea239e4a62aa2b19757a3b0de04229a9907f8610c27b26591405845bf8b5b83706ed18d910c4f68777378366ff565617b19168a04560a32ce5ad64aaef9f4377118c4335b24826cdcde78fb4bdb11498553f56d8dfeb3a482c70cc6580c399b92339cbdb3464fcc7b00e9839fd0d2b8b6db90c56b33593a0048bf7983421f29b1285c81a239045b96a9b0cacd70d6d9853206471f06915efc8d3ec4c50fb13601abc73247a656066fd7b329159b3ce9e3302b4c0d6aec58cb0946a8ee8e7f55f1af604f1edb4d887fa6292dc0ce57705c1a25dc62650c127d11a364b397aefc2fcc3a164bdc53165a461b01de9180c1461b309c75af0911b4cc1b8aa05652b62119c87b4b235c573aa15b1516cddf61efd6a7f8c953fbaaee9c0e800e8f519e1494de850ddb976864088fe0cf90bbc54395078ea2501e8baa84d6807e184105bc2a140b663416496886422643bbf764d406af06e7d086678828defda0b648b25666b7b5ea29e927141740d5be0e61bf25d40b8404ffd3c67bb855b11d4faf82b7b8051615c101c3deb0601a0fa9ecd8b4a95082ccbc8222b0982802dd8430e653d6eea2786dc3a91397135faffdc65a5bae048f5c463b1a6648becce961d39d063d28d1ad6dafcea0b0878379adb16cc0d4cea572abeacd9a168a4fe2e338092b5bc93ecf02ac6ccda03e5b23adf511fdf7a79442093233b79c67d3fdd3c36c96a8f67aa79e4743d99cf963ae6161877f73656eb0314d889f4b8649bbce8a759f90eac6c006197b54b2bbac7c9b237f1e3dc099c62a65481960e6ad697fc66316ac084ba99c60f58bf44ff45f3b2006cbc4196a25f124dfaf247e863a855ef6070deb45219a922dcf2be9bd01c340e1ca5ed7c3ddac9f7a677c5d00610991d21e0751ac8044585b39f3fec5b672a11a9bce32196c2003d01ea50b0f0403e16df188ecbbb74f295f01398363ddfecdb63a49347c912c125670205d7b6be999688df85bb7d5ac12b62b4fdc4eadcc2a9a7897028404f697b007603a0ad588c772952d6670ee870771774ad157c0b9cccd4b2192d835606198ea0c65036ae4e406cdc539ff3aa81fa20b7ab58d6f3abdb69cc1f503d593f7025d2035e7f21db76336efc2843a0dc9bd2eb8794718134ee68fc57d4d2bcc18969d08177f442b87433b48540c661940cf9e2462c53efa310c7e47487deab2ae15b1978ef05aa1e14110943f649d82486f710a39854409e74edcaf06b4a92d3580b9cdabf83c6351657698d3d5af7514f382e75d1c912cded577258603fc9ed002e010747cddf7885d34afc9a84d82696c6660cb5ecafb68b564908fc49c4db6a187d037241a26b1141cf20f2e968a53366db0f60b79cd98cf3c897c50b7b9728e6e7100f99e4d5ed2428dbd285516ca6660777a39b4b2617c1be5b0232d60b9c8099f5daedbf190109439c40b46090985200d6c0501313f3fa4d244864575c275faca47aeff32c7b3e3c59392618562a7c2d4b3af85a37a8847f595352024cb63d3a9085c2a502c6a3248f43c5fc828e636cb634b2d393d853ae2dc9605985cf85c060860a90256c7b574c1e01c320687a2bb0b2d51cc2950c485f2ffa5db0ad7aaf753f543de7f86efb775c6bac2989a33757a28836fd27f9347229a0004bd2e546994c69c678fe5717f613f905d945c072004c3a80e0e54215e19ff9972521890d4e705e429f16fc35fe5a15f2e6b75cd719d38f76b087b62e4b5dcdb35f4baa2bab167150bafb6c69e260ca51004bc826d46b77c3f67eaa08497294868e6d91b7b867e4da62052f4f891677256cfbaf19cf32bad99a7da69d8a66537686f89a58d78c7eeaa99cd38009a1a32582bedc5c718e57b19cd405ae659a89909356a07fcef89384d160fa5ae6683cc379642aea4f0c915f72d679bd521399cb16112f2abdede3001400b4a64d2173e153a68631183679b56b8f389ba889784133453a7e892fd3b092f5040870a3cfd6f982990143e7c0882b4ff4c5d049192d36925a25ae4be441aa30dc7e74398b340c45b52c73ed3b0cd640e3cc9fd4be24e7355f386106f65895f1ee850b2a781d1d1d322ca5a3b0fdb78ce1eda048ece94af25437969c99c58c08f1446ca5541e03987a20fd75283e3e116dc4c9222ab7522e4ccf6da14aef49cac9a6a2cd4aba1c54d49e6da4179a66b84e384cd3da53908579b28c11d525ebdc4dc69074cef8a9ecd3aab98f2858769d656b46141c3a4e69a5ed6c0a732c9ec1fce080eaebf537fa5e17236a44ba9c931f555d193e475ffafd20c53ccbab607c1a15fd06742a64691205eb0d00f7f40e4dd8efb279cf09b2522aac0729a631aacb92d5cfa2ce6bb07385b981890b5916755d5cc3a51c8c36bd2987068cc24fcf73840895ca9bbb9aff1059601f771afedf0a48d5921103920515b27d7e607951982feba197df8c61600feb3622b9eea13a4db4068728cb98cca76cfae197f6258758490bf41673ee29acd91fd296ec863c646e0ca6a0f0e9de146c663ba13d962964d7c32804fd12a14c1ca7212ad48bdfab469c6570dca562220ecbe7b6b163ed4c9361c5c10bed5c92861b8786ada20a99245d282e4454187ec02adfe354e30647cb10661c85168f7958e3ce69ab48c9455214707a63c9b1167f0845a6bfcce2a96cd53eab430f13cd527f1666290719a47c517cfa22fec2e9916af8aa93c78e567993d7fb8ee60fc4b903b8c67a3658302c5e5f35250c30427e4c055b6c54705bc599861f80b7200d361965ff98c88cc698a2615cadeac4bdfd3d613377cea52d2bbcb7e6b78ac31d4b2c33eaf0b2ed40b963e3cb25c7dfea3ebfe7b4aff2aaaaf184dc80ab649a108e2c830ce7eaea58a263392aa9cd13d7f7bd607dc7c804b19dfa41b3e5a5155201a87311e22062c93896e70f3a5c4b03521300b61cc311ebd5beb9838d0ed207c6bfc99e4392508e95804b10b36024f32e1fe1138e9ee7773f797b2bc6be7416f4e9691ef4c2a8d06af6c8b84bd1e6fd1ba3d3183475ef6c139ccf8dcf37671fbb96a2ab5e0e042f7c4728cf30bcc1a0de28a5024276ceaa194b4926e7f6a97b78bac36e47f832d56a96cd266434d37bcf2c2f57877717d91b1854972f832354acc207a2ee8caace7504e0e6197dd7e64a01c4c67bb2de8acc0cccc6c6bff0b0cbfe345542c5a795dfa48cc0990ab5702574d36494bc44c20f5b324f7c984d986cc8cb40cb2550076d96a069b6688d22171beed2dc5b6ff3ede8fff4c4a9de6d3817357a7ca7d24d87300b4545ebbac8cf7f09ec637a4f4d6bd07673709b6c363a75ccef585610c5f15de7851b5ab53e02a757bfc3caeb9a9a8996beffdc0cfd1201b6cd99cb035584e51a6c15a5d2e17d2f8aa6b41e26809392fac6caed1e02a53dcea8a413203608780dab33315a76eba24d540e4c5b9790420834bc8d4e47bc65ae52a54c0ff308427a8d7aff746aa6589d17514e40fee5d0b3533cf4ad2c5f9d96db9f50bd69ed8c92b860e199a35cf268c66ed13516a3b4b024f62d4b2a656067eece95575bdb4907efc488a9821bc3a9c81dd11b2128b7a01aa7a9ce6e73de3b4e9beced70206f91575baddbcbe5722337953c8016a0f4b62120d776c43b7d1a879b692107954f45acdf8967dcaa994aad4922d4fe093e16c2d0090906f5036af99e50bb09b04e9c9b3b5085abf621297ce203010249cede92e9b66b446b86b43eaaae228dfdd3b4408c12b404bb727f7e969e7da04fc59900112bf8d38af0416dc616e75f167aa1352215f07115a6f4eb6bb5fff6f5c2fc9ab906392036b44090e65fdaf017dc53bc94e0807d679d793df18cc44e6c846d414cef1569530f7692daf91eaaf4ae89fe2522f2c9cf33b6ca508ebcd006bc1a61f0c800553aff9dc7d57200b25ecb83e1e0b8cd29520b63aa649d3f71a62570eee56e03223ddf31f0c04fa686b7f6dd054e7a259d9ba335c2c5b2c508897506c0db7f01878dec1411c33f0af61b81dbcf9ff8bdc0c50044963a79f3ee1462150c6bd03a32dbdfef8d72f0b8b3a395ffb0cc85792e7bc867feb5e312cb64e29e193388e9f173c162f4a1320a6f99ea3795fb77d982605959909a1aa11076fcc779ea6b80ec1bf0edfc2569ec04d15a0bdeebccf3c75393dca5e81663532f8ced12d08e4c2ae6e2954d427c7bf053dc4718f56f453bc88d74045bd2f9747aae9b5298a0de927f1d6b1308f4e1483487f083e71ed09298deb52bb10079b13def7453eb432498069edb5ade70c5c54913684d934a3febf78753ac13300a91f467ff3f6e2f00898f015d08f7739047b321b3eaee5ad8aa7adbf7833f014d8c576a491af9fca6843b327ed513821cb3951b2e67a275225d7af6b382e2f955adaacba5d1fdea2223202dee132b91d5cf381b51da94145255f584a70c5e8d11e06a44afa6599bf3ed0cb61703eba254333af53afac60e54cf6397f9f7302249ab644f0b576c713b15007be1f4f9bb213660bca8a70251472b86669d361ef968f542e81ddbe8f4d2e9cabe8d7bf6a31f14a2cc272963553a424c105e7750437ec5bf316e30ce60b4b0c27ccc1eb27e60f6472fef27654da49905ff9c01b28695310ecd8701aedff25a83da4b7c41995f902bdf249769dcb53a3efa894710dd66ba8745ae2253cc6b75a038183a0bee21226d48239320efad6727093e4f94bbc2fdcc216200d903c32bb9f16dd17d5dac423ae0696f3decc576b8f1fdce63d0532370af7d1e2fa2ca5c5d17bd88f5e3abb4792dac8689ca13752f83d753b06b037bf5a80a3748983790352775685b0414c9d74849fd217e388f904278ddb6b0abdda941b61579c796e2bb77a9bc363b18642c401faa502a31011544111b6eedaa369976c814773d83220a75f31026d6ad0b8b4298ea6062234db232bc435e096e84f740e55bb14d46ae04af0500aa5bb218aff6c76aa8a8e3140a1b0d6638538fd7f30fa8d992e53abf8af2fbc16b9e8a668c1aac72cea1a746ee5f7f3392a4ec8f1d19f2f426b6069b1cd347cbc38bceba96ce5da49198083403143c740c04639cd1089abb34fe812d85921c47437604f684bca44a1eaa965c0a6e1c1fd1f70ee932af3455b36184cc15934cdb3f28959d37d8fc10696f8ec1e4b0c3d1b9ff74a01b796d1bb68954a3768c8bcec741b3b69da892f8922142b16b2cabb469a9906b34216243fac80374c10e178c5fd36440f8d7a8588a9c2510d86ffa8cb68ce8c330d2111c94724e522f04573dad43bce252eb505d29ca9379a6b281519d38b7174f3ae8f185544f3003c936a7e6b23ca97a313aac6a061caa45fda73522f3061767bb4e33dbe4bde390eb0f07225a8aef939cb6ab2ada10c02527281abad394cd4ea9f59467a08b72047cdb75d7b2b98e5b4542554a60f953ac7a4b980f42518eec05ff2c044549cab0cf33eef36dfbabcbc0300009d898862d2194cfcdd9a713c30bbe52291105193656ea5eb830873ac956469d31689cc3c69edb5cb9a6e31ce3e6fb50ddd4e52ef9fdeacfc0db21e1e83e0d8d0a64f17cacb4dc208a893e7fd8ffa86cfc554dfba3d9fd281115eccb4b9d909f2fbf3fbb66bedd7b5db3f6d4f076f5d8fb54f8832896f8ef6f624162f1dd589be7a8e87dd5065708a8b0bfb18a5c2299f5605ac8a11c1add55b2018e6099380a70bee3e0727ca6ec58928fe6eb3147b47401e8d822eebade713b58335787669e5e0de5d328a1067df4cd9124665bb02ee8adfd1b3618374ef167df1f0fe79456f78aee3da4c1bf397e4637b0cf41a0f4a2910efd02b17bf5f3c15b0084b36fa7d4e85a53e5be366b428244eeba7499c3e54397227928e2ff6e583f332d6f7e8cf4d058f379b58a7d03a4bfa454bb4b6d543804b8970e6a9fe8886179eb418a8ce9e509e8433571f7d32378f2e983fa418c8c91760ec9fb20968e7fc23b7c4ac71693b2576ac0f8ce2020ff1e7a7ff24301b48b544fb29a1ca4f2502daded865e488a16dd33ec67b2eee3025cdc5ef90f253c4b5e0a61d51e495b675c5a1d55b4ba3812c5f44cd08487e61d36b0c2dc32d27333a5ee8a0906bfbcd388bd9389d1509912c0471c7b706a5aff880569a3fb11ac5f14d780deb4c1b1afe30fb6b8daf87b27a4ceb869d587a97f2f5af8d819aa47bbf207db68a6ecbbefb1e109ed0bfbbf3b54fba9e79de8fad9c3bcd3e74b8b92ccea3ff5c558c6cd72d78a711fc39df603bd4aa1439dd302258edd2204e52d7f435c6f552b612fbc321bea971195cd4d8bb033e2a779e239164d7eea6d8fd233b0b9b776246564cfcf44b31a83031a2413bf98a398c9f93da243cef9ce73d81bade8ad551fb0ffa75bc874c11d23ac9d7752f22a0f54c3870f3314a83e64332db810da1ebb288e10c4eb9be9ec037317b8f813e68160a887da3f5c0389510a0734b69ef275e19973b169d340610cf2112e9964cc0566b9b690c3feb36c8526491d3a563f0bead2abbcf0665e048aa3f929351b2f89876580633a403250ae3b5244c8c0e996bf888938dfc8920348d88e272e6eadc7c0387ca1dae228bd620ce3975d43b58758d9412d304a227245587065f58c4573ba2557f1d8333ba007709b1239d682f03405b22135757178fb701bbde81d2f8faaa7666c025d8a8bb426dc4b8e61aed79b3b3d3a9b01ee9142772d869677ede166e7a8be8ab84cdd6946b1478ce77ba307213971cfb24c86c344310f279e38d22254bf4caf83c02e715cb0550e615dc9f8dd2400fa749e3527493c15fb454c158e4c0603ae6e962b7890058ec7c10f0618ee274a15bca6ca9fe5bc5f9e7797c0950299912be9c58463c07d667d4bffe8aa590ae43db08512b40f3d265026bef2facdd508984e5f6d2ac7ef573397f14ed2e2ccdcbe5796e60ae64d173814906d1da5a5bfe8a2a4c5d6bb0b3315b878b4877d0c045f6e6cfa0dfc1ea4de7abe26f2b2d8c93299ed1d83f1b7853c756bfa346cd53b008fec169883983fe0f2405777dd85e17b2e4e8b23432c0dc4c386d67b6597184d0b4b95877362304638484cc0951400f66ee8391dd44417c58b3d46a8345a8049fcd70f7b5f4a6f912e2b18760947c74ef2b732b342878d7e7cc99902de87db36469555fbbfe76189f108d6ab31f4727fe4e22d075afaf6cc726ab17a5e1b4ab6c8f29a459da3c4266b5ad8ff55906a190f8b19a3bb92a50df49647c03d5d6106ec07e9300038d059a75b54ac31683ef8e5eee946e1c84d016ee1e7800a92c0a3823b62e0417fe86b191951f65abc0c38c1e0e8f1121a04b62a8a720790560f922804b1b7e7eaa497e1bede6e3d0dcf0312dbf221561958fa1e85a8f99e6fc82f919e78c17d1beda16cfef25fb5d00f7c32df9a51eac76000c988ffdf011564aa0e319764b16a5a7c728a470ff70772fb76c9ada26a0ac073fcbfa12501c2454b19e02d928e3939a40bfff76c002533b3849cdf8016728445131e5f1e292b7d3dc06bb3a3cfff6fabae0b7341694a8938c1d2497cd70b76c337c9a312e96c8f736d7625a535e1906eba53d199221ca60202a65be0f7e530aca10e61fa39c7601d65954e5ed4cab94345c6b89c7f8a0de5c61a7945e1564731b6715331d13263b2961a163382f7c4934d847033860e402f3aadb4f3e6cf47a97a2031401da4d2c8de8c80cdad71b97b4deb2075a02282f958ac6772354e67f097ca693778224b80892490015e7d697fb9107f75cea708178ffec93fb1d44e8493bad1d42c918e661219ea819e0200759037a5a585c0fe074fd407536fe58013f42612c41bfc66e16870d7a9c00ee93a3122b253fecbf5de3837641f4a1376af0f053463413c26c29f9a346318565276856b963da30ba6ab8c4c8ef6cfddc432328586d9d9829895835759bcde0851ae0c838a3927ea63fe5ba793fae94da61cab00fc05f3a265a2da1221bb2b66775ed7ba856b41011652d4984991e56249360ddfc997245ac1547a1c16382d42df383a8d1c852643b24895c422712e79c436fdfffece4ed1c50922d4f25296aaf6b204522086d188bee254f8303b60537ead1195ac5dd301286f0042dd68aa05a70e4beb779aa0b61a316f736b72c9ab7ed860a0908a078f4b8a53f2df0abf993f689de4b02b9138ca5047fb0bfc9ba3b92bff033e36fc9553260b008cef3d147c62d1d3944fd1eaff79bc5a922ec2190907bfda1b51c2c7fb867db1f8e13a37b5e3ae0165e93350b958a239ec1f2b78561cff854b975307b5b5dd23b040602a5a36bd79947ee04c7d0e5e30f9c4c79f7b4e6eada98bfc6c357cdf8939213423f1b21ba26cfc2b2756ea3eb992372db0ab8a7c37d8ae96bf3ed6be873c1891550ef741812032e1ae938326c399ee43a3061602dda006f1b6b620bebb6a5752bee77e8acf9921ebf4d4c8af7eb5e937c65697c0664c594e31a62377a25605051996c474ca322ce8e0e6ef8a7988be", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
getdents64(r4, &(0x7f0000000100)=""/134, 0x86)

2.096740994s ago: executing program 2 (id=295):
syz_mount_image$fuse(&(0x7f0000000100), &(0x7f0000000180)='./file2\x00', 0x10000, &(0x7f0000004900)=ANY=[@ANYBLOB='fd=', @ANYBLOB=',rootmode=00000000000000000120000,user_id=', @ANYRESDEC, @ANYBLOB='\x00\x00roup_id=', @ANYRESDEC, @ANYBLOB=',blksize=0x0000000000000400,blksize=0x0000000000000600,default_permissions,default_permissions,allow_other,blksize=0x0000000000000800,allow_other,blksize=0x0000000000001000,permit_directio,dont_hash,context=system_u,smackfsroot=usrquota,permit_directio,\x00'], 0x0, 0x0, 0x0)

2.031418486s ago: executing program 0 (id=296):
pipe2(&(0x7f0000000200)={<r0=>0xffffffffffffffff}, 0x0)
syz_usb_connect$uac2(0x0, 0x92, &(0x7f0000000680)=ANY=[@ANYBLOB="12014101000000401e040030400001020301090280000301cc6016080b010101062080090400000001012000092401fb000820008d0c24030506031004030100ba0b24060303040002000a00090401000001"], 0x0)
bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e24, @multicast1}, 0x10)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c00000010000107000000000000000000060001"], 0x1c}}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_mount_image$f2fs(&(0x7f0000010600), &(0x7f0000000040)='./file2\x00', 0x4, &(0x7f00000001c0)=ANY=[], 0x1, 0x10600, &(0x7f0000010640)="$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")
syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x300f401, 0x0, 0x2, 0x0, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
socket$key(0xf, 0x3, 0x2)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000080)={0x0, <r1=>0x0})
syz_open_procfs(r1, &(0x7f0000000000)='fdinfo\x00')
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x23f}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0x1, &(0x7f0000000a80)=0x1, 0x4)
r4 = socket$inet6(0xa, 0x3, 0x84)
setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0xa, 0x0, 0x1}, {{@in=@remote, 0x2000000, 0x6c}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x0, 0x0, 0x0, 0x3, 0xffffff81}}, 0xe8)
connect$inet6(r4, &(0x7f00000000c0), 0x1c)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
unshare(0x48000000)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f00000029c0)={0x0, 0x31000000, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001000010700000000000002000a00"/28], 0x1c}}, 0x0)

2.023071136s ago: executing program 2 (id=297):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f)
r3 = socket$igmp(0x2, 0x3, 0x2)
getsockopt$IPT_SO_GET_INFO(r3, 0x0, 0x40, &(0x7f0000000300)={'nat\x00', 0x0, [0x2, 0x100, 0xa1, 0x1, 0x80]}, &(0x7f0000000380)=0x54)
socket$nl_audit(0x10, 0x3, 0x9)

1.806753693s ago: executing program 4 (id=298):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c})
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000400)='./file0/file1\x00', 0x40, 0x83)
r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
readv(r1, &(0x7f0000001c00)=[{0x0}, {&(0x7f0000000980)=""/4096, 0x1000}], 0x2)
fcntl$setstatus(r0, 0x4, 0x76800)
listen(r1, 0xff)
r2 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x8000000, 0x0)
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000001, 0x13, r2, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000001fc0)=ANY=[@ANYBLOB="9feb01001800000000000000300000003000000007000000000000000100000d000000000000000003000001000000000000000d0000000045000000000000005f002e00"/79], &(0x7f00000020c0)=""/223, 0x4f, 0xdf, 0x1}, 0x28)
ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000040)=<r3=>0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000180))
sched_setaffinity(r3, 0x8, &(0x7f0000000140)=0x7f)
syz_clone(0x2c040000, 0x0, 0x0, 0x0, 0x0, 0x0)
r4 = syz_open_dev$evdev(&(0x7f00000001c0), 0x2, 0x8000)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4098884, 0x0, 0x0)
ioctl$EVIOCSMASK(r4, 0x40104593, &(0x7f0000000080)={0x0, 0x0, 0x0})
ioctl$EVIOCSKEYCODE_V2(r4, 0x80104592, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x6, "006074333200009bb3c2ce0000000000000000011800f5ff0100fffffffdff00"})
fsync(r0)

1.693311277s ago: executing program 4 (id=299):
syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x200000c, &(0x7f0000000000), 0xff, 0x236, &(0x7f0000000300)="$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") (async)
syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x200000c, &(0x7f0000000000), 0xff, 0x236, &(0x7f0000000300)="$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")
capset(&(0x7f0000000080)={0x20071026}, &(0x7f00000002c0)={0x200000, 0x200000})
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x48041, 0x0) (async)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x48041, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x11e)
mount$incfs(&(0x7f00000007c0)='.\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000840), 0x1004002, 0x0) (async)
mount$incfs(&(0x7f00000007c0)='.\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000840), 0x1004002, 0x0)
r0 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$read(0xb, r0, &(0x7f0000000440)=""/116, 0x74)
add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000140)={'fscrypt:', @desc4}, &(0x7f0000000540)={0x0, "b677a8aa1d29134d7bf7dc482fbe3007072fe370845e482ec63a7feafc1d2cf85f40974d01fd03ad9ff5f0200395eef5d675f8a58f1970d61bee0ae67f1a2dd7", 0x40}, 0x48, r0) (async)
add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000140)={'fscrypt:', @desc4}, &(0x7f0000000540)={0x0, "b677a8aa1d29134d7bf7dc482fbe3007072fe370845e482ec63a7feafc1d2cf85f40974d01fd03ad9ff5f0200395eef5d675f8a58f1970d61bee0ae67f1a2dd7", 0x40}, 0x48, r0)
chdir(&(0x7f00000003c0)='./bus\x00')
unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='mnt/encrypted_dir\x00', 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x115000, 0x0)
setsockopt$MRT6_ASSERT(r1, 0x29, 0xcf, &(0x7f00000000c0)=0x1, 0x4)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x0, 0x10c)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r2, 0x800c6613, &(0x7f00000006c0)=@v1={0x0, @adiantum, 0x3, @desc3})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='mnt/encrypted_dir\x00', 0x101a00, 0x0)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r3, 0x800c6613, &(0x7f00000006c0)=@v2={0x2, @aes256, 0x0, '\x00', @a}) (async)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r3, 0x800c6613, &(0x7f00000006c0)=@v2={0x2, @aes256, 0x0, '\x00', @a})

1.647950189s ago: executing program 4 (id=300):
sched_setaffinity(0x0, 0x0, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', <r1=>0x0})
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x12, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newlink={0x98, 0x10, 0x401, 0x5, 0x3, {0x0, 0x0, 0x0, 0x0, 0x503}, [@IFLA_LINKINFO={0x70, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x60, 0x2, 0x0, 0x1, [@IFLA_VLAN_INGRESS_QOS={0x10, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x308, {0x10005, 0xb}}]}, @IFLA_VLAN_ID={0x6, 0x1, 0x3}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x2, 0xe}}, @IFLA_VLAN_EGRESS_QOS={0x1c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffffa}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x49b}}]}, @IFLA_VLAN_INGRESS_QOS={0x1c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x4, 0x6}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x4, 0x3}}]}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x98}, 0x1, 0x0, 0x0, 0x20004800}, 0x4000000)

1.646751909s ago: executing program 3 (id=301):
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff, 0x30, 0x0, @val=@perf_event={0x7}}, 0x18)
ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000080)={0x9, 0x4})
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000000c0)='./file2\x00', 0x0, &(0x7f00000018c0)=ANY=[], 0xfd, 0x1501, &(0x7f00000002c0)="$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")
rename(&(0x7f0000001980)='./file1\x00', &(0x7f00000001c0)='./file0/file1\x00')

1.219054262s ago: executing program 1 (id=302):
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x280, 0x0)
ioctl$PTP_PEROUT_REQUEST2(r0, 0x40383d0c, 0x0)
write$FUSE_LSEEK(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
prlimit64(r1, 0x9, 0x0, &(0x7f00000001c0))
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x8f}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x70)
r4 = socket$inet6_udplite(0xa, 0x2, 0x88)
bind$inet6(r4, &(0x7f0000000080)={0xa, 0x4e21, 0x5, @ipv4={'\x00', '\xff\xff', @empty}, 0x7}, 0x1c)
setsockopt$inet6_udp_int(r4, 0x11, 0xa, &(0x7f0000000000)=0xfffffff9, 0x4)
r5 = fcntl$dupfd(r4, 0x0, r4)
write$cgroup_pid(r5, &(0x7f0000000240), 0x12)
fsconfig$FSCONFIG_SET_BINARY(r5, 0x2, &(0x7f0000000040)='\x00', &(0x7f0000000100)="266da01542810a715113b55e4d962b14b6ecc734ba44b2c6c7a9886659a710effd90d634186328acf259c6c86fd2d823bf9830a083b25cb677ceebb0cb9496de0a936dc18c7150e487f6797f940afa0173c28901f31718f6a295af614ad27ec7371c34f26f31be3c12ddba46dca52b599d7664d1e1a6e9314e4ec9fd5a4cb4d557008ca46f81c59579bc78ec2ad10c1c7df3e3510d4e970b5f510049129403eec276e9f0352dd4e5", 0xa8)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x9, 0x687, 0x6, 0xfffa}, 0x2000001d, [0x108e8fd7, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x20002, 0x20003, 0x84, 0x6, 0x4d, 0x39cc191a, 0x5c, 0x9, 0x5b2, 0x2, 0x0, 0x1, 0x3, 0x0, 0x2ab, 0x4, 0x10007, 0x4, 0x3c5b, 0x1, 0xb, 0x40000009, 0xfffffffd, 0x1f461e2c, 0x7, 0xe661, 0x7fff, 0xb, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x800242, 0xffffffff, 0x11, 0x0, 0xffffffff, 0x2, 0x406, 0x3, 0x2, 0x5, 0x3e, 0x8b, 0x6, 0x6, 0x3, 0x80092a3, 0x4, 0x1, 0x20000000, 0x82, 0x0, 0x7, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000009, 0xffff, 0x4000, 0x6, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x5, 0x1001, 0xfffffffc, 0x43, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x0, 0x0, 0xfffffffe, 0x8, 0x4, 0x8002, 0x9, 0x3fe, 0x401, 0x400006, 0x4, 0xfb, 0x5, 0x8000, 0x5f31, 0xbcf5, 0x1, 0x2, 0x2, 0x9, 0x4, 0x9, 0x5, 0x9, 0x6, 0xb, 0xa, 0x1, 0x6, 0x9, 0x2, 0x7f, 0x7, 0x1, 0x3, 0x9, 0x425, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x400004], [0x6, 0x6, 0x80000001, 0x2, 0xff, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x1, 0xb, 0x4, 0x5, 0x1005, 0x0, 0x1f0, 0x2, 0x2, 0x86, 0x1, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x800, 0x8, 0x5, 0x8001, 0x7, 0x2, 0x800003, 0x200, 0x80, 0x2, 0xcc52, 0x950bfaf, 0x1000, 0xa2, 0x7, 0x8c, 0xfffffff9, 0x6, 0xac8, 0xbf, 0x10002, 0x403, 0x7ff, 0xffffffff, 0x0, 0x1, 0xffff, 0x0, 0x6, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0xff], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x1, 0x6, 0x5, 0x0, 0x3, 0x1, 0x1ff, 0x3, 0x7, 0xfd, 0x1003, 0x101, 0x10000, 0x6, 0x7fff, 0xffdf, 0xe620, 0x2002, 0xf, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x2, 0xffffffff, 0x80000004, 0x7, 0x8, 0xc8, 0xee1, 0x0, 0xffff, 0x3, 0x7b, 0x20100, 0x9602, 0x4, 0x2, 0xffff, 0x6, 0x1, 0x10080, 0x6, 0x2, 0x30b1d693, 0x5a2b, 0xc, 0x7, 0x1, 0x6c1b, 0x800, 0x8, 0x5, 0xb1c, 0x1, 0x1fd, 0xffff3441, 0xfff]}, 0x45c)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)

1.172345013s ago: executing program 3 (id=303):
ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, &(0x7f0000002d40)={0x25, 0x2b, 0x12, 0x4, 0xe, 0x3e5, 0x2, 0xca, 0xffffffffffffffff})

1.089355196s ago: executing program 3 (id=304):
mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x64)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_subtree(r0, &(0x7f0000001040), 0x201, 0x0)
write$cgroup_subtree(r1, 0x0, 0x0)
sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8d}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xdbde2000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
ioctl$MON_IOCT_RING_SIZE(0xffffffffffffffff, 0x9204, 0xfe779)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
lseek(r5, 0x2, 0x0)
getdents64(r5, 0x0, 0x22)
shutdown(0xffffffffffffffff, 0x0)
ioctl$sock_inet6_tcp_SIOCOUTQNSD(r5, 0x894b, &(0x7f00000000c0))
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00')
preadv(r6, &(0x7f0000000040)=[{&(0x7f0000000180)=""/88, 0x58}], 0x1, 0x6, 0x0)
syz_usb_connect(0x4, 0x36, &(0x7f0000000280)=ANY=[@ANYRESOCT], 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000540)='./file1\x00', 0x3010018, &(0x7f0000000040), 0x5, 0x4d0, &(0x7f00000013c0)="$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")

227.191952ms ago: executing program 1 (id=305):
setuid(0xee00)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff})
ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r0, 0x8982, &(0x7f0000002800)={0x1, 'vlan0\x00'})
munmap(&(0x7f0000001000/0x4000)=nil, 0x4000)
r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0xffffffffffffffff, 0x10}, 0xc)
r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
r3 = fsmount(r2, 0x0, 0x8)
fchdir(r3)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0)
fstat(r4, &(0x7f0000002a00))
fsconfig$FSCONFIG_SET_FLAG(r4, 0x0, &(0x7f0000000040)='lazytime\x00', 0x0, 0x0)
lseek(r1, 0x8, 0x4)
r5 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r5, &(0x7f0000000440), 0x10)
listen(r5, 0x5)
r6 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r6, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10)
sendto$packet(r6, &(0x7f0000000600)="5f0efc3e1792a50972d2eb21bdff9ca4ac804c2847689e7fd3f3fe7bf05ddc63ff512d4074687760a5fbd1fc97777a6e55123f04cc8437b15f4b2c6f5027dcea15b6658d", 0xffffff3d, 0x0, 0x0, 0xffffffffffffff10)

179.525914ms ago: executing program 1 (id=306):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = socket$inet(0xa, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000002c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x3c8, 0x138, 0x98, 0x138, 0x0, 0x0, 0x378, 0x378, 0x378, 0x378, 0x378, 0x6, 0x0, {[{{@ip={@loopback, @multicast1=0xe0007600, 0x0, 0x0, 'gre0\x00', 'ip6gre0\x00', {}, {}, 0x0, 0x0, 0x11}, 0x7a00, 0x70, 0x98}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x3}}}, {{@ip={@multicast1, @local, 0x0, 0x0, 'wg1\x00', 'nicvf0\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private2, 'veth0_virt_wifi\x00', {0x7}}}}, {{@ip={@rand_addr, @private, 0xffffffff, 0xff, 'syzkaller0\x00', 'veth1_to_team\x00', {}, {0xff}}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@empty, @empty, 0xff000000, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x1fb, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000d00)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000091e90fa00253389d907df3843421ba65fe21544d5edefcfdbc434f725768e83d940e36b0ae1182a1668203f85d46791bb3897a38"], 0x48) (async)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000d00)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000091e90fa00253389d907df3843421ba65fe21544d5edefcfdbc434f725768e83d940e36b0ae1182a1668203f85d46791bb3897a38"], 0x48)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x16, 0x21, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x540}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000007c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r4, 0x0, 0x27, &(0x7f0000000100)={@multicast2, @loopback}, 0xc)
setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, &(0x7f0000000480)={0x1, {{0x2, 0x4e23, @multicast1}}}, 0x88)
setsockopt$inet_mreqsrc(r4, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b80a000500000000", &(0x7f0000000300)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b80a000500000000", &(0x7f0000000300)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
r5 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) (async)
sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async)
connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r7, &(0x7f0000003900), 0x34aa945a513d639, 0x0)
r8 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, &(0x7f0000000bc0)={@rand_addr=' \x01\x00', 0x5, 0x0, 0x2, 0xc, 0x5, 0x4}, 0x20) (async)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, &(0x7f0000000bc0)={@rand_addr=' \x01\x00', 0x5, 0x0, 0x2, 0xc, 0x5, 0x4}, 0x20)
recvmmsg(r7, &(0x7f0000000bc0), 0x0, 0x2, 0x0)
openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async)
r9 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r9, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x14, 0x3, 0x2, 0x5, 0x0, 0x0, {0x3}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x640008c0}, 0x0)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000580)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@block_validity}, {@errors_remount}, {@nombcache}]}, 0x1, 0x44f, &(0x7f0000000640)="$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") (async)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000580)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@block_validity}, {@errors_remount}, {@nombcache}]}, 0x1, 0x44f, &(0x7f0000000640)="$eJzs28tvG8UfAPDvrpP219cvoSqPPoBAQVQ8kiYtpQcuIJA4gIQEh3IMSVqVug1qgkSrCAJC5YgqcUcckfgLOMEFASckrnBHlSoUIbVwMlp7N7Ed23nUiaH+fKRtZ3bXnfl6drwzO90A+tZI9kcSsTcifo2IoVq28YSR2l+3lxam/lpamEqiUnnjj6R63q2lhani1OJze4rMQET6SRKHW5Q7d+XqhclyeeZynh+bv/ju2NyVq8+cvzh5bubczKWJ06dPnhh/7tTEs12JM4vr1qEPZo8cfOWt669Nnbn+9o9fJ0X8TXF0yUing49XKl0urrf21aWTgR5WhA0p1bppDFb7/1CUYqXxhuLlj3taOWBLVSqVyn3tDy9WgLtYEr2uAdAbxY0+m//mW3Hr34bRR+/dfKE2Acpiv51vtSMDkebnDDbNb7tpJCLOLP79RbbFRp9DpFtUKQDgrvZtNv55umH8l48/0qh/LvT/fA1lOCLuiYj9EXEqIg5ExL0R1XPvj4gHWhWStC+/eZFk9fgnvbHp4NYhG/89n69tNY7/lgdXw6U8t68a/2By9nx55nj+nRyLwZ1ZfrxDGd+99Mtn7Y7Vj/+yLSu/GAvm9bgxsLPxM9OT85N3EnO9mx9FHBpoFX+yvBKQNd/BiDi0yTLOP/nVkSJ9uNR4bO34O+jCOlPly4gnau2/GE3xF5LO65Nj/4vyzPGx4qpY7aefr73ervw7ir8Lsvbf3fL6X45/OKlfr53beBnXfvu07Zxms9f/juTNhn3vT87PXx6P2JG8Wqt0/f6JpvMmVs7P4j92tHX/3x8r38Th7PpPIx6MiIci4uG87o9ExKMRcbRD/D+8+Ng7HeP/s138Ozv8q92RxT/d0P7FD1+79l9J7IjmPa0TpQvff9NQ6HBT/Gu2/8lq6li+Zz2/f+up1+auZgAAAPjvySb7eyNJR5fTaTo6Wvs//Adid1qenZt/6uzse5ema+8IDMdgWjzpGqp7HjqeT+uL/ERT/kT+3Pjz0q5qfnRqtjzd6+Chz+1p0/8zv5d6XTtgy3lfC/qX/g99q/49AKDPuP9D/2rR/3f1oh7A9mt1//+wB/UAtl9T/7fsB33E/B/6l/4P/Uv/h740tyvWfkleQmJVItJ/RTUktijR618mAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA7vgnAAD//wW66qg=")
r10 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0)
ioctl$EXT4_IOC_MOVE_EXT(r10, 0x40305829, 0x0)
open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f)
syz_emit_ethernet(0xe3, &(0x7f0000000280)={@local, @random="a65c7d43c3c3", @void, {@x25={0x805, {0x1, 0x3f, 0x1, "8542a6bdfb0dd5f1f5d07899f6f7d0f924283dde4c66c653158d53786c5a96604959ffd6f0a854c660107518d03a06a867d65b7d9a7e4945fc7902b1e33805c73b6f9b75d25696659ce012ffd50f7ef6c8e25b10fa0b46613734321b213d03e64d765083ed2bff43f194b5d7a3c5fee836c4b365d6ef41dac44f5d0d7f7064992d16643f5fe588bcd85e8eb3c54985881c8a0052bb79a40b3adf57e0c6f4c976b6638a6f2a2bc4e0dc95f9837c53611b5856262452d06c8bc55015a6f3a24963f2f83e35fe5241448c223b519a0d8025953c"}}}}, 0x0)
r11 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_opts(r11, 0x0, 0x9, &(0x7f0000000000)=""/252, &(0x7f0000000100)=0xfc) (async)
getsockopt$inet_opts(r11, 0x0, 0x9, &(0x7f0000000000)=""/252, &(0x7f0000000100)=0xfc)

35.323109ms ago: executing program 2 (id=307):
syz_mount_image$fuse(&(0x7f0000000100), &(0x7f0000000180)='./file2\x00', 0x10000, &(0x7f0000004900)=ANY=[@ANYBLOB='fd=', @ANYBLOB=',rootmode=00000000000000000120000,user_id=', @ANYRESDEC, @ANYBLOB='\x00\x00roup_id=', @ANYRESDEC, @ANYBLOB=',blksize=0x0000000000000400,blksize=0x0000000000000600,default_permissions,default_permissions,allow_other,blksize=0x0000000000000800,allow_other,blksize=0x0000000000001000,permit_directio,dont_hash,context=system_u,smackfsroot=usrquota,permit_directio,\x00'], 0x0, 0x0, 0x0)

35.108299ms ago: executing program 1 (id=308):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)

11.6582ms ago: executing program 1 (id=309):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f)
ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a2, &(0x7f0000000000)='bridge0\x00')
syz_emit_ethernet(0x2a, &(0x7f00000000c0)={@broadcast, @dev, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0xf21a5dc3ddee5620, @broadcast, @local, @local, @rand_addr=0x64010102}}}}, 0x0)
r4 = socket$igmp(0x2, 0x3, 0x2)
getsockopt$IPT_SO_GET_INFO(r4, 0x0, 0x40, &(0x7f0000000300)={'nat\x00', 0x0, [0x2, 0x100, 0xa1, 0x1, 0x80]}, &(0x7f0000000380)=0x54)
r5 = socket$nl_audit(0x10, 0x3, 0x9)
ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000040)={'xfrm0\x00', &(0x7f0000000400)=@ethtool_perm_addr={0x20, 0xa5, "64a78dca57a9c007176ad9281a9f0daecfdd3e5dd83142bb88f4c80686db554a7aeee124e4e7d3a44fc6e10b8b378bc6bbf5420873e3dfb85f2f575431517d95fab8f98b58a3439199d3fb283a7ddf8f8a1288680192a0d34e29ace65bff3635ca876686f8c2d32280f71b4adf6d269cbb236f3b44be82df51bd40790006a061f00a60b6a8728fd2ec647187ed2921b481ac0017a27c80cef34a5219c4687e653029196ef9"}})

0s ago: executing program 2 (id=310):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$MRT6_FLUSH(r2, 0x29, 0xd4, &(0x7f0000000280)=0x2, 0x4)
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="28010000000000000100000001", @ANYRESHEX=0x0, @ANYRESDEC=r1], 0x128}, 0x0)
recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)}, 0x40000020)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
r5 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r5, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty, 0x3}, 0x1c)
setsockopt$inet6_udp_encap(r5, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4)
syz_emit_ethernet(0x2a, &(0x7f0000000240)={@local, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x67, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0)
r6 = accept$unix(r3, 0x0, &(0x7f0000000440))
recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x158}, 0x10142)
r7 = socket$unix(0x1, 0x2, 0x0)
connect$unix(r7, &(0x7f0000000000)=@file={0x0, './bus\x00'}, 0x6e)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff})
sendmsg$inet(r11, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg(r10, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0300000004000000040000000a0000001a0000007db922d7c6c052e17f0aa785e03a672710fff440a198a5ffb28e0c9f19a225077817d86f884e84edeb1abc09ce37469910d98b028cbd1067c16b3ea4feac1d7b05d1529c3e48d503dd3ccfcf71f2ef43e7093e460bf3bcc88f4aeedec77a1d020dce99b212400b6111485a821e19bafefe4b51e18de8864f751d359b8215acc24ba634021b667b46d1a75fbb1efaf0678c548ed7220f831762ec09a26e4d93c4ab1f7db3c47d8b28bb770deb64421b6c0c3dda0f33761e1cb110be3abea9cc", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48)

kernel console output (not intermixed with test programs):

ve=1
[   26.145245][  T357] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   26.156014][  T357] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.12: invalid indirect mapped block 9 (level 0)
[   26.169659][  T357] EXT4-fs (loop1): Remounting filesystem read-only
[   26.176407][  T357] EXT4-fs (loop1): 1 truncate cleaned up
[   26.182611][  T357] EXT4-fs (loop1): mounted filesystem without journal. Opts: lazytime,errors=remount-ro,discard,. Quota mode: none.
[   26.212569][  T352] usb 2-1: unit 4 not found!
[   26.217215][  T352] usb 2-1: unit 0 not found!
[   26.363559][  T306] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x4
[   26.371146][  T306] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving
[   26.380628][  T306] plantronics 0003:047F:FFFF.0001: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0
[   26.402079][   T26] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[   26.412085][   T39] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   26.423125][   T39] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   26.433254][   T39] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[   26.446773][   T39] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   26.456140][   T39] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   26.464878][   T39] usb 4-1: config 0 descriptor??
[   26.571633][  T306] usb 3-1: USB disconnect, device number 2
[   26.642107][   T26] usb 1-1: Using ep0 maxpacket: 16
[   26.652323][  T352] snd-usb-audio: probe of 2-1:1.0 failed with error -22
[   26.660136][  T352] usb 2-1: unit 4 not found!
[   26.664797][  T352] usb 2-1: unit 0 not found!
[   26.722410][  T352] snd-usb-audio: probe of 2-1:1.1 failed with error -22
[   26.729874][  T352] usb 2-1: unit 4 not found!
[   26.734603][  T352] usb 2-1: unit 0 not found!
[   26.762370][   T26] usb 1-1: config 0 has an invalid interface number: 34 but max is 0
[   26.770829][   T26] usb 1-1: config 0 has no interface number 0
[   26.777598][   T26] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023
[   26.787824][   T26] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80
[   26.798031][  T352] snd-usb-audio: probe of 2-1:1.2 failed with error -22
[   26.806201][  T352] usb 2-1: USB disconnect, device number 2
[   26.838252][   T30] audit: type=1400 audit(1781352587.795:141): avc:  denied  { unmount } for  pid=289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1
[   26.962131][   T26] usb 1-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73
[   26.971417][   T26] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   26.979579][   T26] usb 1-1: Product: syz
[   26.983964][   T26] usb 1-1: Manufacturer: syz
[   26.988565][   T26] usb 1-1: SerialNumber: syz
[   26.995837][  T389] loop4: detected capacity change from 0 to 40427
[   27.002722][   T39] usbhid 4-1:0.0: can't add hid device: -71
[   27.008686][   T39] usbhid: probe of 4-1:0.0 failed with error -71
[   27.015445][   T26] usb 1-1: config 0 descriptor??
[   27.021235][   T39] usb 4-1: USB disconnect, device number 2
[   27.032096][  T382] raw-gadget.3 gadget: fail, usb_ep_enable returned -22
[   27.039072][  T382] raw-gadget.3 gadget: fail, usb_ep_enable returned -22
[   27.054212][  T389] F2FS-fs (loop4): invalid crc value
[   27.062466][  T389] F2FS-fs (loop4): Found nat_bits in checkpoint
[   27.088412][  T389] F2FS-fs (loop4): Start checkpoint disabled!
[   27.095784][  T389] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6
[   27.122877][   T30] audit: type=1400 audit(1781352588.085:142): avc:  denied  { map_create } for  pid=392 comm="syz.2.20" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[   27.141863][   T30] audit: type=1400 audit(1781352588.085:143): avc:  denied  { create } for  pid=388 comm="syz.4.19" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1
[   27.219388][  T399] loop1: detected capacity change from 0 to 128
[   27.242700][  T401] loop2: detected capacity change from 0 to 128
[   27.249922][  T399] EXT4-fs (loop1): Test dummy encryption mode enabled
[   27.258216][  T399] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption=v1,max_dir_size_kb=0x0000000000000002,inlinecrypt,,errors=continue. Quota mode: none.
[   27.258949][  T382] raw-gadget.3 gadget: fail, usb_ep_enable returned -22
[   27.275219][  T399] ext4 filesystem being mounted at /5/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   27.282298][  T382] raw-gadget.3 gadget: fail, usb_ep_enable returned -22
[   27.305747][  T401] EXT4-fs (loop2): Test dummy encryption mode enabled
[   27.314309][  T401] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption=v1,max_dir_size_kb=0x0000000000000002,inlinecrypt,,errors=continue. Quota mode: none.
[   27.331342][  T401] ext4 filesystem being mounted at /6/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   27.402072][  T352] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   27.488560][  T405] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0008 with DS=0x7
[   27.498577][  T405] netlink: 32 bytes leftover after parsing attributes in process `syz.3.25'.
[   27.511277][  T405] loop3: detected capacity change from 0 to 512
[   27.542107][   T26] asix 1-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random
[   27.572071][   T39] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[   27.637037][  T306] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[   27.662069][  T352] usb 5-1: Using ep0 maxpacket: 16
[   27.782119][  T352] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[   27.824804][  T352] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00
[   27.842032][  T352] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   27.888646][  T352] usb 5-1: config 0 descriptor??
[   27.962275][   T39] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   27.973579][   T39] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   27.983514][   T39] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[   27.996465][   T39] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   28.005517][   T39] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   28.013709][  T306] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   28.024817][  T306] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   28.034927][   T39] usb 2-1: config 0 descriptor??
[   28.039939][  T306] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[   28.053618][  T306] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   28.062683][  T306] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   28.071436][  T306] usb 3-1: config 0 descriptor??
[   28.341388][  T405] syz.3.25 (405) used greatest stack depth: 21792 bytes left
[   28.392909][  T352] kone 0003:1E7D:2CED.0002: unknown main item tag 0x0
[   28.395145][  T382] loop0: detected capacity change from 0 to 512
[   28.399998][  T352] kone 0003:1E7D:2CED.0002: unknown main item tag 0x1
[   28.413561][  T352] kone 0003:1E7D:2CED.0002: unknown main item tag 0x0
[   28.420538][  T352] kone 0003:1E7D:2CED.0002: unknown main item tag 0x0
[   28.427434][  T352] kone 0003:1E7D:2CED.0002: unknown main item tag 0x3
[   28.434285][  T352] kone 0003:1E7D:2CED.0002: unknown main item tag 0x6
[   28.449385][  T352] kone 0003:1E7D:2CED.0002: hidraw0: USB HID v0.09 Device [HID 1e7d:2ced] on usb-dummy_hcd.4-1/input0
[   28.552693][  T306] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x4
[   28.560301][  T306] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving
[   28.569207][  T306] plantronics 0003:047F:FFFF.0003: hiddev96,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0
[   28.581993][   T39] usbhid 2-1:0.0: can't add hid device: -71
[   28.588177][   T39] usbhid: probe of 2-1:0.0 failed with error -71
[   28.602043][  T352] kone 0003:1E7D:2CED.0002: couldn't init struct kone_device
[   28.609448][  T352] kone 0003:1E7D:2CED.0002: couldn't install mouse
[   28.616090][   T39] usb 2-1: USB disconnect, device number 3
[   28.623425][  T352] kone: probe of 0003:1E7D:2CED.0002 failed with error -5
[   28.632295][  T352] usb 5-1: USB disconnect, device number 2
[   28.648037][  T414] fido_id[414]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory
[   28.702071][   T26] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[   28.712273][   T26] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9
[   28.722845][   T26] asix: probe of 1-1:0.34 failed with error -71
[   28.729978][   T26] usb 1-1: USB disconnect, device number 3
[   28.760483][  T306] usb 3-1: USB disconnect, device number 3
[   29.049894][  T417] tmpfs: Cannot retroactively limit inodes
[   29.128597][   T45] attempt to access beyond end of device
[   29.128597][   T45] loop4: rw=2049, want=40968, limit=40427
[   29.139949][   T45] attempt to access beyond end of device
[   29.139949][   T45] loop4: rw=2049, want=40992, limit=40427
[   29.243281][  T423] Zero length message leads to an empty skb
[   29.294525][  T427] loop3: detected capacity change from 0 to 128
[   29.392288][  T427] EXT4-fs (loop3): Test dummy encryption mode enabled
[   29.416862][  T427] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption=v1,max_dir_size_kb=0x0000000000000002,inlinecrypt,,errors=continue. Quota mode: none.
[   29.434200][  T427] ext4 filesystem being mounted at /5/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   29.436728][  T436] netlink: 76 bytes leftover after parsing attributes in process `syz.0.34'.
[   29.852079][   T26] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[   29.951364][   T30] kauditd_printk_skb: 24 callbacks suppressed
[   29.951382][   T30] audit: type=1400 audit(1781352590.905:168): avc:  denied  { unmount } for  pid=285 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[   30.341367][  T447] FAULT_INJECTION: forcing a failure.
[   30.341367][  T447] name fail_usercopy, interval 1, probability 0, space 0, times 1
[   30.367812][  T447] CPU: 0 PID: 447 Comm: syz.2.38 Not tainted syzkaller #0
[   30.374959][  T447] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[   30.385037][  T447] Call Trace:
[   30.388328][  T447]  <TASK>
[   30.391346][  T447]  __dump_stack+0x21/0x30
[   30.395695][  T447]  dump_stack_lvl+0x110/0x170
[   30.400377][  T447]  ? show_regs_print_info+0x20/0x20
[   30.405583][  T447]  ? __stack_depot_save+0x34/0x480
[   30.407907][  T445] loop1: detected capacity change from 0 to 40427
[   30.410698][  T447]  ? path_openat+0x280e/0x2f20
[   30.422029][  T447]  dump_stack+0x15/0x20
[   30.426202][  T447]  should_fail+0x3c1/0x510
[   30.430713][  T447]  should_fail_usercopy+0x1a/0x20
[   30.435784][  T447]  _copy_from_user+0x20/0xd0
[   30.440389][  T447]  __copy_msghdr_from_user+0xc9/0x630
[   30.442378][   T26] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   30.445764][  T447]  ? _kstrtoull+0x3c0/0x4d0
[   30.461280][  T447]  ? __ia32_sys_shutdown+0x1e0/0x1e0
[   30.466673][  T447]  ? kstrtouint_from_user+0x1c4/0x220
[   30.472048][   T26] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   30.472052][  T447]  ___sys_sendmsg+0x19a/0x2e0
[   30.472075][  T447]  ? __sys_sendmsg+0x280/0x280
[   30.481770][   T26] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[   30.486464][  T447]  ? __fdget+0x1a1/0x230
[   30.486486][  T447]  __x64_sys_sendmsg+0x206/0x2f0
[   30.486501][  T447]  ? ___sys_sendmsg+0x2e0/0x2e0
[   30.486513][  T447]  ? ksys_write+0x1f4/0x250
[   30.502019][   T26] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   30.504178][  T447]  ? fpregs_assert_state_consistent+0xb1/0xe0
[   30.508862][   T26] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   30.513868][  T447]  x64_sys_call+0x4b/0x9a0
[   30.513892][  T447]  do_syscall_64+0x4c/0xa0
[   30.513907][  T447]  ? clear_bhb_loop+0x50/0xa0
[   30.513921][  T447]  ? clear_bhb_loop+0x50/0xa0
[   30.532878][   T26] usb 4-1: config 0 descriptor??
[   30.538387][  T447]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   30.564006][  T445] F2FS-fs (loop1): invalid crc value
[   30.564497][  T447] RIP: 0033:0x7f01bcab7e59
[   30.585350][  T447] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   30.605623][  T447] RSP: 002b:00007f01bb512028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   30.614043][  T447] RAX: ffffffffffffffda RBX: 00007f01bcd30fa0 RCX: 00007f01bcab7e59
[   30.622021][  T447] RDX: 0000000004008880 RSI: 0000200000000140 RDI: 0000000000000003
[   30.630149][  T447] RBP: 00007f01bb512090 R08: 0000000000000000 R09: 0000000000000000
[   30.638164][  T447] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   30.646152][  T447] R13: 00007f01bcd31038 R14: 00007f01bcd30fa0 R15: 00007ffe086549f8
[   30.654136][  T447]  </TASK>
[   30.658234][  T445] F2FS-fs (loop1): Found nat_bits in checkpoint
[   30.700374][  T445] F2FS-fs (loop1): Start checkpoint disabled!
[   30.714601][  T445] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6
[   30.726876][  T431] loop4: detected capacity change from 0 to 131072
[   30.759253][  T431] F2FS-fs (loop4): Found nat_bits in checkpoint
[   30.770658][   T30] audit: type=1400 audit(1781352591.725:169): avc:  denied  { setattr } for  pid=444 comm="syz.1.37" path="/8/bus/file1" dev="loop1" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   30.827097][   T30] audit: type=1400 audit(1781352591.785:170): avc:  denied  { unmount } for  pid=285 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[   30.849836][  T431] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[   30.857256][   T30] audit: type=1400 audit(1781352591.805:171): avc:  denied  { read } for  pid=458 comm="syz.0.41" dev="nsfs" ino=4026532612 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[   30.880847][   T30] audit: type=1400 audit(1781352591.805:172): avc:  denied  { open } for  pid=458 comm="syz.0.41" path="net:[4026532612]" dev="nsfs" ino=4026532612 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[   30.888432][  T329] attempt to access beyond end of device
[   30.888432][  T329] loop1: rw=2049, want=40968, limit=40427
[   30.909140][   T30] audit: type=1400 audit(1781352591.805:173): avc:  denied  { create } for  pid=458 comm="syz.0.41" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   30.918065][  T329] attempt to access beyond end of device
[   30.918065][  T329] loop1: rw=2049, want=40984, limit=40427
[   30.941674][   T30] audit: type=1400 audit(1781352591.825:174): avc:  denied  { append } for  pid=430 comm="syz.4.32" path="/7/file1/cpuacct.usage_all" dev="loop4" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   30.979327][   T30] audit: type=1400 audit(1781352591.825:175): avc:  denied  { lock } for  pid=430 comm="syz.4.32" path="/7/file1/cpuacct.usage_all" dev="loop4" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   31.003249][   T30] audit: type=1400 audit(1781352591.835:176): avc:  denied  { read } for  pid=461 comm="syz.0.43" name="binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[   31.039806][   T30] audit: type=1400 audit(1781352591.865:177): avc:  denied  { open } for  pid=461 comm="syz.0.43" path="/dev/binderfs/binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[   31.064497][   T26] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x4
[   31.072242][   T26] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving
[   31.081709][   T26] plantronics 0003:047F:FFFF.0004: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0
[   31.108496][  T466] process 'syz.0.44' launched './file1' with NULL argv: empty string added
[   31.162040][  T306] usb 5-1: new full-speed USB device number 3 using dummy_hcd
[   31.219124][  T475] loop1: detected capacity change from 0 to 512
[   31.303952][   T26] usb 4-1: USB disconnect, device number 3
[   31.442024][  T306] usb 5-1: device descriptor read/64, error -71
[   31.724741][  T484] xt_hashlimit: size too large, truncated to 1048576
[   31.791330][  T486] device wireguard0 entered promiscuous mode
[   31.862074][  T306] usb 5-1: device descriptor read/64, error -71
[   32.572062][  T306] usb 5-1: new full-speed USB device number 4 using dummy_hcd
[   32.754194][  T491] loop2: detected capacity change from 0 to 512
[   32.763798][  T494] loop1: detected capacity change from 0 to 128
[   32.782933][  T494] EXT4-fs (loop1): Test dummy encryption mode enabled
[   32.790444][  T498] loop3: detected capacity change from 0 to 1024
[   32.791092][  T494] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption=v1,max_dir_size_kb=0x0000000000000002,inlinecrypt,,errors=continue. Quota mode: none.
[   32.813937][  T494] ext4 filesystem being mounted at /11/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   32.842760][  T498] EXT4-fs (loop3): Ignoring removed bh option
[   32.882849][  T498] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodelalloc,dioread_lock,jqfmt=vfsv1,abort,debug_want_extra_isize=0x0000000000000008,lazytime,errors=remount-ro,stripe=0x0000000000000007,bh,auto_da_alloc,. Quota mode: none.
[   32.916886][  T498] overlayfs: './file1' not a directory
[   32.936864][  T498] overlayfs: './file0' not a directory
[   33.132078][   T26] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[   33.502318][   T26] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   33.551011][   T26] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   33.675942][   T26] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[   33.746925][   T26] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   33.792945][   T26] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   33.857936][   T26] usb 2-1: config 0 descriptor??
[   33.983926][  T525] capability: warning: `syz.3.61' uses deprecated v2 capabilities in a way that may be insecure
[   34.015599][  T545] loop3: detected capacity change from 0 to 512
[   34.073540][  T545] EXT4-fs (loop3): mounted filesystem without journal. Opts: nojournal_checksum,,errors=continue. Quota mode: writeback.
[   34.727226][  T307] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[   34.756326][  T553] loop0: detected capacity change from 0 to 256
[   34.775309][  T555] loop3: detected capacity change from 0 to 256
[   34.775949][  T553] FAT-fs (loop0): Directory bread(block 64) failed
[   34.788382][   T26] usbhid 2-1:0.0: can't add hid device: -71
[   34.794666][   T26] usbhid: probe of 2-1:0.0 failed with error -71
[   34.798677][  T555] FAT-fs (loop3): Directory bread(block 64) failed
[   34.801097][  T553] FAT-fs (loop0): Directory bread(block 65) failed
[   34.810027][  T555] FAT-fs (loop3): Directory bread(block 65) failed
[   34.815808][   T26] usb 2-1: USB disconnect, device number 4
[   34.821268][  T555] FAT-fs (loop3): Directory bread(block 66) failed
[   34.829647][  T553] FAT-fs (loop0): Directory bread(block 66) failed
[   34.833648][  T555] FAT-fs (loop3): Directory bread(block 67) failed
[   34.840060][  T553] FAT-fs (loop0): Directory bread(block 67) failed
[   34.846364][  T555] FAT-fs (loop3): Directory bread(block 68) failed
[   34.854327][  T553] FAT-fs (loop0): Directory bread(block 68) failed
[   34.859449][  T555] FAT-fs (loop3): Directory bread(block 69) failed
[   34.866124][  T553] FAT-fs (loop0): Directory bread(block 69) failed
[   34.872367][  T555] FAT-fs (loop3): Directory bread(block 70) failed
[   34.878924][  T553] FAT-fs (loop0): Directory bread(block 70) failed
[   34.885504][  T555] FAT-fs (loop3): Directory bread(block 71) failed
[   34.892085][  T553] FAT-fs (loop0): Directory bread(block 71) failed
[   34.898447][  T555] FAT-fs (loop3): Directory bread(block 72) failed
[   34.905277][  T553] FAT-fs (loop0): Directory bread(block 72) failed
[   34.911517][  T555] FAT-fs (loop3): Directory bread(block 73) failed
[   34.925291][  T553] FAT-fs (loop0): Directory bread(block 73) failed
[   34.927956][  T555] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   34.934330][  T553] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   34.972078][  T307] usb 5-1: Using ep0 maxpacket: 32
[   35.434974][  T559] FAULT_INJECTION: forcing a failure.
[   35.434974][  T559] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   35.448154][  T559] CPU: 0 PID: 559 Comm: syz.0.65 Not tainted syzkaller #0
[   35.455293][  T559] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[   35.465691][  T559] Call Trace:
[   35.468965][  T559]  <TASK>
[   35.471887][  T559]  __dump_stack+0x21/0x30
[   35.476222][  T559]  dump_stack_lvl+0x110/0x170
[   35.480897][  T559]  ? show_regs_print_info+0x20/0x20
[   35.486181][  T559]  ? __stack_depot_save+0x34/0x480
[   35.491395][  T559]  ? path_openat+0x280e/0x2f20
[   35.496160][  T559]  dump_stack+0x15/0x20
[   35.500332][  T559]  should_fail+0x3c1/0x510
[   35.504743][  T559]  should_fail_usercopy+0x1a/0x20
[   35.509763][  T559]  _copy_from_user+0x20/0xd0
[   35.514347][  T559]  __copy_msghdr_from_user+0xc9/0x630
[   35.519721][  T559]  ? _kstrtoull+0x3c0/0x4d0
[   35.524221][  T559]  ? __ia32_sys_shutdown+0x1e0/0x1e0
[   35.529678][  T559]  ? kstrtouint_from_user+0x1c4/0x220
[   35.535083][  T559]  ___sys_sendmsg+0x19a/0x2e0
[   35.539757][  T559]  ? __sys_sendmsg+0x280/0x280
[   35.544526][  T559]  ? __fdget+0x1a1/0x230
[   35.548763][  T559]  __x64_sys_sendmsg+0x206/0x2f0
[   35.553698][  T559]  ? ___sys_sendmsg+0x2e0/0x2e0
[   35.558543][  T559]  ? ksys_write+0x1f4/0x250
[   35.563055][  T559]  ? fpregs_assert_state_consistent+0xb1/0xe0
[   35.569127][  T559]  x64_sys_call+0x4b/0x9a0
[   35.573546][  T559]  do_syscall_64+0x4c/0xa0
[   35.577959][  T559]  ? clear_bhb_loop+0x50/0xa0
[   35.582629][  T559]  ? clear_bhb_loop+0x50/0xa0
[   35.587389][  T559]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   35.593379][  T559] RIP: 0033:0x7fde0f005e59
[   35.597785][  T559] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   35.617387][  T559] RSP: 002b:00007fde0da1e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   35.626581][  T559] RAX: ffffffffffffffda RBX: 00007fde0f27f180 RCX: 00007fde0f005e59
[   35.634557][  T559] RDX: 0000000000000044 RSI: 0000200000000380 RDI: 000000000000000a
[   35.642521][  T559] RBP: 00007fde0da1e090 R08: 0000000000000000 R09: 0000000000000000
[   35.650490][  T559] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   35.658463][  T559] R13: 00007fde0f27f218 R14: 00007fde0f27f180 R15: 00007ffdc12d16c8
[   35.666435][  T559]  </TASK>
[   35.717174][   T30] kauditd_printk_skb: 14 callbacks suppressed
[   35.717229][   T30] audit: type=1400 audit(1781352596.235:192): avc:  denied  { bind } for  pid=554 comm="syz.3.64" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   35.830033][  T561] loop3: detected capacity change from 0 to 512
[   35.841667][  T563] loop0: detected capacity change from 0 to 256
[   35.842584][  T307] usb 5-1: unable to get BOS descriptor or descriptor too short
[   35.863528][  T561] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters
[   35.878370][  T561] EXT4-fs (loop3): Remounting filesystem read-only
[   35.885246][  T561] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.66: invalid indirect mapped block 4278190080 (level 0)
[   35.885734][  T563] FAT-fs (loop0): Directory bread(block 64) failed
[   35.908295][  T561] EXT4-fs (loop3): Remounting filesystem read-only
[   35.911480][  T563] FAT-fs (loop0): Directory bread(block 65) failed
[   35.916243][  T561] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.66: invalid indirect mapped block 1 (level 1)
[   35.923139][  T563] FAT-fs (loop0): Directory bread(block 66) failed
[   35.934687][  T561] EXT4-fs (loop3): Remounting filesystem read-only
[   35.947521][  T563] FAT-fs (loop0): Directory bread(block 67) failed
[   35.957627][  T563] FAT-fs (loop0): Directory bread(block 68) failed
[   35.965049][  T561] EXT4-fs (loop3): 1 truncate cleaned up
[   35.971048][  T563] FAT-fs (loop0): Directory bread(block 69) failed
[   35.977916][  T561] EXT4-fs (loop3): mounted filesystem without journal. Opts: abort,errors=continue,inode_readahead_blks=0x0000000000000040,errors=remount-ro,barrier=0x0000000000001000,resgid=0x0000000000000000,nolazytime,noquota,auto_da_alloc=0x0000000000000006,data=journal,init_itable=0x000000000000. Quota mode: none.
[   35.989151][  T563] FAT-fs (loop0): Directory bread(block 70) failed
[   36.013344][  T563] FAT-fs (loop0): Directory bread(block 71) failed
[   36.021003][  T563] FAT-fs (loop0): Directory bread(block 72) failed
[   36.027672][  T563] FAT-fs (loop0): Directory bread(block 73) failed
[   36.036870][  T563] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   36.080275][   T30] audit: type=1400 audit(1781352597.015:193): avc:  denied  { create } for  pid=567 comm="syz.1.68" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[   36.105859][   T30] audit: type=1400 audit(1781352597.015:194): avc:  denied  { setopt } for  pid=567 comm="syz.1.68" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[   36.113524][  T569] loop2: detected capacity change from 0 to 256
[   36.125326][   T30] audit: type=1400 audit(1781352597.025:195): avc:  denied  { bind } for  pid=567 comm="syz.1.68" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[   36.131539][  T307] usb 5-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40
[   36.154609][   T30] audit: type=1400 audit(1781352597.025:196): avc:  denied  { name_bind } for  pid=567 comm="syz.1.68" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1
[   36.187528][  T307] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   36.195749][  T307] usb 5-1: Product: syz
[   36.199926][  T307] usb 5-1: Manufacturer: syz
[   36.204819][  T307] usb 5-1: SerialNumber: syz
[   37.820849][  T579] loop4: detected capacity change from 0 to 512
[   37.852407][  T569] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x8f9fe1ed, utbl_chksum : 0xe619d30d)
[   37.892608][  T307] usb 5-1: can't set config #1, error -71
[   37.901362][  T307] usb 5-1: USB disconnect, device number 5
[   37.921428][   T30] audit: type=1400 audit(1781352598.875:197): avc:  denied  { remove_name } for  pid=565 comm="syz.2.69" name="file1" dev="loop2" ino=1048619 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   37.960163][   T30] audit: type=1400 audit(1781352598.875:198): avc:  denied  { rename } for  pid=565 comm="syz.2.69" name="file1" dev="loop2" ino=1048619 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   38.092890][  T590] mmap: syz.0.73 (590) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst.
[   38.957449][  T588] sched: RT throttling activated
[   39.559208][   T30] audit: type=1400 audit(1781352599.045:199): avc:  denied  { read } for  pid=585 comm="syz.0.73" name="event0" dev="devtmpfs" ino=256 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[   39.624001][   T30] audit: type=1400 audit(1781352599.045:200): avc:  denied  { open } for  pid=585 comm="syz.0.73" path="/dev/input/event0" dev="devtmpfs" ino=256 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[   39.648036][   T30] audit: type=1400 audit(1781352599.045:201): avc:  denied  { ioctl } for  pid=585 comm="syz.0.73" path="/dev/input/event0" dev="devtmpfs" ino=256 ioctlcmd=0x4523 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[   39.682088][    T6] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[   39.712147][  T590] syz.0.73 (590) used greatest stack depth: 20672 bytes left
[   39.751342][  T604] loop2: detected capacity change from 0 to 512
[   39.761029][  T606] loop0: detected capacity change from 0 to 128
[   39.786775][  T606] EXT4-fs (loop0): Test dummy encryption mode enabled
[   39.795606][  T606] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption=v1,max_dir_size_kb=0x0000000000000002,inlinecrypt,,errors=continue. Quota mode: none.
[   39.817138][  T606] ext4 filesystem being mounted at /16/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   39.932025][    T6] usb 2-1: Using ep0 maxpacket: 32
[   40.029912][  T613] loop3: detected capacity change from 0 to 256
[   40.163686][  T613] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011a39, chksum : 0xd54015fb, utbl_chksum : 0xe619d30d)
[   40.192040][    T6] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   40.203049][    T6] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   40.203399][  T613] netlink: 'syz.3.82': attribute type 4 has an invalid length.
[   40.222075][  T307] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[   40.289395][  T619] xt_hashlimit: size too large, truncated to 1048576
[   40.332118][    T6] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[   40.341381][    T6] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[   40.350116][    T6] usb 2-1: Product: syz
[   40.354546][    T6] usb 2-1: Manufacturer: syz
[   40.402522][    T6] hub 2-1:4.0: USB hub found
[   40.621014][  T307] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   40.632055][  T307] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   40.641929][  T307] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[   40.655111][  T307] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   40.664251][  T307] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   40.673396][  T307] usb 1-1: config 0 descriptor??
[   40.712042][  T352] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[   40.712140][    T6] hub 2-1:4.0: 7 ports detected
[   40.742075][    T6] hub 2-1:4.0: insufficient power available to use all downstream ports
[   40.981782][  T634] loop4: detected capacity change from 0 to 256
[   40.988125][  T352] usb 4-1: Using ep0 maxpacket: 32
[   40.992054][    T6] hub 2-1:4.0: hub_hub_status failed (err = -71)
[   40.995720][   T30] kauditd_printk_skb: 8 callbacks suppressed
[   40.995733][   T30] audit: type=1400 audit(1781352601.955:210): avc:  denied  { unmount } for  pid=287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1
[   40.999798][    T6] hub 2-1:4.0: config failed, can't get hub status (err -71)
[   41.034495][    T6] usb 2-1: USB disconnect, device number 5
[   41.041034][  T634] exfat: Deprecated parameter 'utf8'
[   41.046835][  T634] exfat: Deprecated parameter 'utf8'
[   41.058912][  T634] exfat: Deprecated parameter 'namecase'
[   41.065030][  T634] exfat: Deprecated parameter 'utf8'
[   41.118699][  T634] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d)
[   41.172081][  T352] usb 4-1: unable to get BOS descriptor or descriptor too short
[   41.335700][  T640] loop4: detected capacity change from 0 to 4096
[   41.381896][  T640] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled
[   41.413082][  T640] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled
[   41.424427][  T640] EXT4-fs (loop4): Mount option "nouser_xattr" will be removed by 3.5
[   41.424427][  T640] Contact linux-ext4@vger.kernel.org if you think we should keep it.
[   41.424427][  T640] 
[   41.443524][  T352] usb 4-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40
[   41.454456][  T640] EXT4-fs (loop4): Test dummy encryption mode enabled
[   41.461458][  T352] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   41.472374][  T640] EXT4-fs (loop4): can't mount with journal_checksum, fs mounted w/o journal
[   41.481619][  T352] usb 4-1: Product: syz
[   41.487065][  T352] usb 4-1: Manufacturer: syz
[   41.493008][  T352] usb 4-1: SerialNumber: syz
[   41.658249][  T642] fuse: Bad value for 'fd'
[   41.809159][  T624] loop3: detected capacity change from 0 to 512
[   41.872338][  T624] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[   41.982247][  T307] usbhid 1-1:0.0: can't add hid device: -71
[   41.988224][  T307] usbhid: probe of 1-1:0.0 failed with error -71
[   41.995722][  T307] usb 1-1: USB disconnect, device number 4
[   42.012399][  T624] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.85: invalid indirect mapped block 9 (level 0)
[   42.025712][  T624] EXT4-fs (loop3): Remounting filesystem read-only
[   42.032340][  T624] EXT4-fs (loop3): 1 truncate cleaned up
[   42.038002][  T624] EXT4-fs (loop3): mounted filesystem without journal. Opts: lazytime,errors=remount-ro,discard,. Quota mode: none.
[   42.225044][  T352] usb 4-1: unit 4 not found!
[   42.230130][  T352] usb 4-1: unit 0 not found!
[   42.252163][  T650] loop0: detected capacity change from 0 to 128
[   42.388168][  T650] EXT4-fs (loop0): Test dummy encryption mode enabled
[   42.495840][  T650] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption=v1,max_dir_size_kb=0x0000000000000002,inlinecrypt,,errors=continue. Quota mode: none.
[   42.580238][  T650] ext4 filesystem being mounted at /17/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   42.653475][  T352] snd-usb-audio: probe of 4-1:1.0 failed with error -22
[   42.720297][  T352] usb 4-1: unit 4 not found!
[   42.754846][  T352] usb 4-1: unit 0 not found!
[   42.833102][  T352] snd-usb-audio: probe of 4-1:1.1 failed with error -22
[   42.860283][  T352] usb 4-1: unit 4 not found!
[   42.883672][  T352] usb 4-1: unit 0 not found!
[   42.992255][  T352] snd-usb-audio: probe of 4-1:1.2 failed with error -22
[   43.002773][  T352] usb 4-1: USB disconnect, device number 4
[   43.047730][   T30] audit: type=1400 audit(1781352604.005:211): avc:  denied  { wake_alarm } for  pid=639 comm="syz.4.90" capability=35  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[   43.069320][   T30] audit: type=1400 audit(1781352604.035:212): avc:  denied  { connect } for  pid=639 comm="syz.4.90" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   43.088785][   T30] audit: type=1400 audit(1781352604.035:213): avc:  denied  { write } for  pid=639 comm="syz.4.90" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   43.219820][   T30] audit: type=1400 audit(1781352604.175:214): avc:  denied  { read write } for  pid=659 comm="syz.3.96" name="uhid" dev="devtmpfs" ino=263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[   43.262005][   T30] audit: type=1400 audit(1781352604.175:215): avc:  denied  { open } for  pid=659 comm="syz.3.96" path="/dev/uhid" dev="devtmpfs" ino=263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[   43.285294][  T307] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[   43.332050][   T30] audit: type=1400 audit(1781352604.175:216): avc:  denied  { read write } for  pid=659 comm="syz.3.96" name="vhost-vsock" dev="devtmpfs" ino=264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[   43.356073][   T30] audit: type=1400 audit(1781352604.175:217): avc:  denied  { open } for  pid=659 comm="syz.3.96" path="/dev/vhost-vsock" dev="devtmpfs" ino=264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[   43.422614][   T30] audit: type=1400 audit(1781352604.175:218): avc:  denied  { ioctl } for  pid=659 comm="syz.3.96" path="/dev/vhost-vsock" dev="devtmpfs" ino=264 ioctlcmd=0xaf60 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[   44.582312][  T672] loop3: detected capacity change from 0 to 512
[   44.696859][  T672] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[   45.303824][  T675] loop2: detected capacity change from 0 to 256
[   45.360229][  T307] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   45.371208][  T307] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   45.388105][  T307] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[   45.389292][  T675] exfat: Deprecated parameter 'utf8'
[   45.401374][  T307] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   45.412578][  T675] exfat: Deprecated parameter 'utf8'
[   45.415746][  T307] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   45.421188][  T675] exfat: Deprecated parameter 'namecase'
[   45.434803][  T307] usb 1-1: config 0 descriptor??
[   45.436791][  T675] exfat: Deprecated parameter 'utf8'
[   45.451304][  T675] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d)
[   45.464083][  T307] usb 1-1: can't set config #0, error -71
[   45.752436][  T683] loop0: detected capacity change from 0 to 128
[   45.806077][  T684] loop3: detected capacity change from 0 to 256
[   45.895754][  T683] EXT4-fs (loop0): Test dummy encryption mode enabled
[   45.950920][  T687] loop2: detected capacity change from 0 to 512
[   45.958355][   T30] audit: type=1400 audit(1781352606.885:219): avc:  denied  { create } for  pid=686 comm="syz.2.104" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[   45.994572][  T687] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended
[   46.060528][  T683] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption=v1,max_dir_size_kb=0x0000000000000002,inlinecrypt,,errors=continue. Quota mode: none.
[   46.085173][  T687] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters
[   46.099819][  T687] Quota error (device loop2): write_blk: dquota write failed
[   46.107241][  T687] Quota error (device loop2): find_free_dqentry: Can't write quota data block 5
[   46.116613][  T687] Quota error (device loop2): write_blk: dquota write failed
[   46.124287][  T687] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota
[   46.134219][  T687] EXT4-fs error (device loop2): ext4_acquire_dquot:6227: comm syz.2.104: Failed to acquire dquot type 1
[   46.147419][  T687] EXT4-fs (loop2): 1 truncate cleaned up
[   46.153586][  T687] EXT4-fs (loop2): mounted filesystem without journal. Opts: dioread_nolock,noblock_validity,noquota,resgid=0x0000000000000000,norecovery,abort,minixdf,nouid32,resgid=0x00000000000000002,errors=continue. Quota mode: writeback.
[   46.246188][   T30] audit: type=1400 audit(1781352606.955:220): avc:  denied  { mounton } for  pid=686 comm="syz.2.104" path="/22/file0" dev="tmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[   46.249101][  T684] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011bf5, chksum : 0x5eaa6302, utbl_chksum : 0xe619d30d)
[   46.281259][  T684] exFAT-fs (loop3): bogus allocation bitmap size(need : 2, cur : 17179869186)
[   46.308285][  T683] ext4 filesystem being mounted at /18/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   46.318674][   T60] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[   46.328032][  T307] usb 1-1: USB disconnect, device number 5
[   50.030102][  T711] loop4: detected capacity change from 0 to 1024
[   50.124956][   T30] audit: type=1400 audit(1781352611.085:221): avc:  denied  { unlink } for  pid=287 comm="syz-executor" name="file0" dev="tmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[   50.157093][  T713] loop2: detected capacity change from 0 to 256
[   50.179735][   T60] usb 5-1: Using ep0 maxpacket: 32
[   50.183934][  T715] loop3: detected capacity change from 0 to 128
[   50.185257][   T30] audit: type=1400 audit(1781352611.115:222): avc:  denied  { name_bind } for  pid=712 comm="syz.2.112" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1
[   50.233832][  T715] EXT4-fs (loop3): Test dummy encryption mode enabled
[   50.240857][  T711] EXT4-fs (loop4): Test dummy encryption mode enabled
[   50.249974][  T711] EXT4-fs (loop4): Journaled quota options ignored when QUOTA feature is enabled
[   50.259307][   T60] usb 5-1: device descriptor read/all, error -71
[   50.264445][   T30] audit: type=1400 audit(1781352611.225:223): avc:  denied  { mounton } for  pid=712 comm="syz.2.112" path="/23/file0/file1" dev="loop2" ino=1048635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=file permissive=1
[   50.266135][  T711] EXT4-fs (loop4): Journaled quota options ignored when QUOTA feature is enabled
[   50.295838][  T715] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption=v1,max_dir_size_kb=0x0000000000000002,inlinecrypt,,errors=continue. Quota mode: none.
[   50.314351][  T711] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption,i_version,noblock_validity,usrjquota=./file0,errors=remount-ro,max_batch_time=0x0000000000000004,abort,auto_da_alloc,lazytime,grpjquota=./file1,block_validity,. Quota mode: writeback.
[   50.314982][  T352] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[   50.352277][  T715] ext4 filesystem being mounted at /28/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   50.355428][  T711] EXT4-fs error (device loop4): ext4_remount:6053: comm syz.4.111: Abort forced by user
[   50.362555][   T30] audit: type=1400 audit(1781352611.315:224): avc:  denied  { remount } for  pid=710 comm="syz.4.111" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[   50.378290][  T711] EXT4-fs (loop4): re-mounted. Opts: (null). Quota mode: writeback.
[   50.508597][  T723] loop4: detected capacity change from 0 to 256
[   50.533444][  T723] exfat: Deprecated parameter 'utf8'
[   50.540371][  T723] exfat: Deprecated parameter 'utf8'
[   50.546800][  T723] exfat: Deprecated parameter 'namecase'
[   50.552525][  T723] exfat: Deprecated parameter 'utf8'
[   50.572138][    T6] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[   50.585453][  T723] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d)
[   50.597595][  T352] usb 2-1: Using ep0 maxpacket: 8
[   50.642022][  T307] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[   50.652064][  T368] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[   50.762121][  T352] usb 2-1: unable to get BOS descriptor or descriptor too short
[   50.862531][  T352] usb 2-1: config 4 has an invalid interface number: 147 but max is 0
[   50.871126][  T352] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config
[   50.882832][  T352] usb 2-1: config 4 has no interface number 0
[   51.012601][  T368] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   51.045045][  T368] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   51.059771][  T368] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[   51.076044][  T352] usb 2-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e
[   51.085740][  T368] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   51.096413][  T352] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   51.105440][  T368] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   51.114662][  T352] usb 2-1: Product: syz
[   51.118947][  T352] usb 2-1: Manufacturer: syz
[   51.127558][  T352] usb 2-1: SerialNumber: syz
[   51.174067][  T368] usb 4-1: config 0 descriptor??
[   51.442085][    T6] usb 3-1: Using ep0 maxpacket: 8
[   51.472071][  T307] usb 1-1: Using ep0 maxpacket: 32
[   51.569211][  T733] loop4: detected capacity change from 0 to 256
[   51.592224][    T6] usb 3-1: unable to get BOS descriptor or descriptor too short
[   51.603784][  T733] exFAT-fs (loop4): failed to load upcase table (idx : 0x00011bf5, chksum : 0x5eaa6302, utbl_chksum : 0xe619d30d)
[   51.616087][  T733] exFAT-fs (loop4): bogus allocation bitmap size(need : 2, cur : 17179869186)
[   51.652713][  T368] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x4
[   51.660320][  T368] plantronics 0003:047F:FFFF.0005: No inputs registered, leaving
[   51.669395][  T368] plantronics 0003:047F:FFFF.0005: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0
[   51.672081][    T6] usb 3-1: unable to read config index 0 descriptor/start: -71
[   51.681904][  T352] usb 2-1: Found UVC 0.02 device syz (04f2:b746)
[   51.689425][  T307] usb 1-1: unable to get BOS descriptor or descriptor too short
[   51.706181][    T6] usb 3-1: can't read configurations, error -71
[   51.719627][  T352] usb 2-1: No valid video chain found.
[   51.758911][  T352] usb 2-1: USB disconnect, device number 6
[   52.000755][  T352] usb 4-1: USB disconnect, device number 5
[   52.832064][  T307] usb 1-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40
[   52.844767][  T307] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   52.862526][  T307] usb 1-1: Product: syz
[   52.866794][  T307] usb 1-1: Manufacturer: syz
[   52.871629][  T307] usb 1-1: SerialNumber: syz
[   52.881081][  T749] loop3: detected capacity change from 0 to 128
[   52.914696][  T749] EXT4-fs (loop3): Test dummy encryption mode enabled
[   52.922823][  T749] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption=v1,max_dir_size_kb=0x0000000000000002,inlinecrypt,,errors=continue. Quota mode: none.
[   52.939874][  T749] ext4 filesystem being mounted at /29/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   53.019116][  T753] loop4: detected capacity change from 0 to 512
[   53.081149][  T753] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[   53.169657][  T717] loop0: detected capacity change from 0 to 512
[   53.214361][  T717] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[   53.230971][  T717] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.110: invalid indirect mapped block 9 (level 0)
[   53.288793][  T717] EXT4-fs (loop0): Remounting filesystem read-only
[   53.341853][  T717] EXT4-fs (loop0): 1 truncate cleaned up
[   53.348699][  T717] EXT4-fs (loop0): mounted filesystem without journal. Opts: lazytime,errors=remount-ro,discard,. Quota mode: none.
[   53.964250][  T760] loop1: detected capacity change from 0 to 512
[   53.971647][  T307] usb 1-1: unit 4 not found!
[   53.975108][  T763] loop2: detected capacity change from 0 to 256
[   53.976356][  T307] usb 1-1: unit 0 not found!
[   54.020807][  T763] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011bf5, chksum : 0x5eaa6302, utbl_chksum : 0xe619d30d)
[   54.037010][  T763] exFAT-fs (loop2): bogus allocation bitmap size(need : 2, cur : 17179869186)
[   55.535218][  T774] loop3: detected capacity change from 0 to 512
[   55.977981][  T774] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[   56.129141][  T780] loop4: detected capacity change from 0 to 512
[   56.165707][  T780] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem
[   56.179806][  T780] EXT4-fs (loop4): 1 truncate cleaned up
[   56.186918][  T307] snd-usb-audio: probe of 1-1:1.0 failed with error -22
[   56.187283][  T780] EXT4-fs (loop4): mounted filesystem without journal. Opts: noload,nolazytime,errors=remount-ro,max_batch_time=0x0000000000000003,data_err=ignore,noblock_validity,. Quota mode: none.
[   56.194577][  T307] usb 1-1: unit 4 not found!
[   56.216686][  T307] usb 1-1: unit 0 not found!
[   56.274381][  T307] snd-usb-audio: probe of 1-1:1.1 failed with error -22
[   56.293250][   T30] audit: type=1400 audit(1781352617.255:225): avc:  denied  { write } for  pid=779 comm="syz.4.128" name="file0" dev="loop4" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   56.302723][  T780] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.128: invalid indirect mapped block 4294901760 (level 0)
[   56.318847][  T307] usb 1-1: unit 4 not found!
[   56.332753][   T30] audit: type=1400 audit(1781352617.255:226): avc:  denied  { open } for  pid=779 comm="syz.4.128" path="/26/file0/file0/file0" dev="loop4" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   56.344431][  T780] EXT4-fs (loop4): Remounting filesystem read-only
[   56.360095][   T30] audit: type=1400 audit(1781352617.325:227): avc:  denied  { read } for  pid=779 comm="syz.4.128" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   56.367936][  T792] loop0: detected capacity change from 0 to 256
[   56.391405][  T780] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.128: invalid indirect mapped block 2185560079 (level 0)
[   56.394034][  T788] loop2: detected capacity change from 0 to 128
[   56.406780][  T780] EXT4-fs (loop4): Remounting filesystem read-only
[   56.413556][  T307] usb 1-1: unit 0 not found!
[   56.419411][  T780] EXT4-fs error (device loop4): ext4_do_update_inode:5260: inode #13: comm syz.4.128: corrupted inode contents
[   56.436118][  T780] EXT4-fs (loop4): Remounting filesystem read-only
[   56.442811][  T780] EXT4-fs error (device loop4): ext4_dirty_inode:6108: inode #13: comm syz.4.128: mark_inode_dirty error
[   56.455139][  T780] EXT4-fs (loop4): Remounting filesystem read-only
[   56.459111][  T788] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[   56.461675][  T780] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.128: invalid indirect mapped block 65535 (level 2)
[   56.472834][  T788] ext4 filesystem being mounted at /28/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   56.486181][  T780] EXT4-fs (loop4): Remounting filesystem read-only
[   56.496263][  T307] snd-usb-audio: probe of 1-1:1.2 failed with error -22
[   56.503110][  T780] EXT4-fs error (device loop4): ext4_do_update_inode:5260: inode #13: comm syz.4.128: corrupted inode contents
[   56.515736][  T307] usb 1-1: USB disconnect, device number 6
[   56.529060][  T780] EXT4-fs (loop4): Remounting filesystem read-only
[   56.536145][  T780] EXT4-fs error (device loop4): ext4_truncate:4317: inode #13: comm syz.4.128: mark_inode_dirty error
[   56.537983][  T792] exFAT-fs (loop0): failed to load upcase table (idx : 0x00011bf5, chksum : 0x5eaa6302, utbl_chksum : 0xe619d30d)
[   56.562216][  T792] exFAT-fs (loop0): bogus allocation bitmap size(need : 2, cur : 17179869186)
[   56.563378][  T780] EXT4-fs (loop4): Remounting filesystem read-only
[   56.587254][  T798] loop1: detected capacity change from 0 to 4096
[   56.592719][  T780] EXT4-fs error (device loop4) in ext4_setattr:5676: Corrupt filesystem
[   56.650341][  T780] EXT4-fs (loop4): Remounting filesystem read-only
[   56.702588][  T798] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   56.712010][  T614] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[   56.730744][  T785] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[   56.768646][  T785] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[   56.783566][   T30] audit: type=1400 audit(1781352617.745:228): avc:  denied  { setattr } for  pid=797 comm="syz.1.131" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   56.827969][  T803] loop2: detected capacity change from 0 to 512
[   56.983839][  T803] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[   57.231634][   T30] audit: type=1400 audit(1781352617.985:229): avc:  denied  { ioctl } for  pid=797 comm="syz.1.131" path="/23/file1/.pending_reads" dev="loop1" ino=18 ioctlcmd=0xae60 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   57.596230][   T30] audit: type=1400 audit(1781352618.355:230): avc:  denied  { setattr } for  pid=797 comm="syz.1.131" name="" dev="pipefs" ino=1490 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1
[   57.678909][  T813] loop0: detected capacity change from 0 to 128
[   57.710188][  T815] loop2: detected capacity change from 0 to 512
[   57.746645][  T813] EXT4-fs (loop0): Test dummy encryption mode enabled
[   57.753903][  T815] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option
[   57.768563][  T815] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem
[   57.775403][  T820] loop1: detected capacity change from 0 to 256
[   57.793747][  T815] EXT4-fs (loop2): 1 truncate cleaned up
[   57.799446][  T815] EXT4-fs (loop2): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000007,bsddf,nomblk_io_submit,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none.
[   57.825595][  T813] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption=v1,max_dir_size_kb=0x0000000000000002,inlinecrypt,,errors=continue. Quota mode: none.
[   57.845415][  T813] ext4 filesystem being mounted at /21/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   57.860582][  T820] exFAT-fs (loop1): failed to load upcase table (idx : 0x00011bf5, chksum : 0x5eaa6302, utbl_chksum : 0xe619d30d)
[   57.896436][   T30] audit: type=1400 audit(1781352618.855:231): avc:  denied  { mounton } for  pid=814 comm="syz.2.137" path="/30/file0/file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   57.919694][  T614] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   57.926096][  T820] exFAT-fs (loop1): bogus allocation bitmap size(need : 2, cur : 17179869186)
[   57.940970][  T614] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   57.961001][  T614] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[   57.981755][  T614] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   57.991041][  T614] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   58.005005][  T614] usb 4-1: config 0 descriptor??
[   58.034175][  T820] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[   58.042387][  T820] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[   58.051054][  T826] device wireguard0 entered promiscuous mode
[   58.107874][   T30] audit: type=1400 audit(1781352619.065:232): avc:  denied  { ioctl } for  pid=830 comm="syz.1.141" path="socket:[18135]" dev="sockfs" ino=18135 ioctlcmd=0x89f1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   58.145393][  T835] futex_wake_op: syz.2.142 tries to shift op by -1; fix this program
[   58.155090][  T840] device vlan2 entered promiscuous mode
[   58.160712][  T840] device bridge0 entered promiscuous mode
[   58.166695][  T838] loop4: detected capacity change from 0 to 4096
[   58.173274][  T835] netlink: 'syz.2.142': attribute type 4 has an invalid length.
[   58.233658][  T838] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled
[   58.252877][  T838] EXT4-fs (loop4): Ignoring removed mblk_io_submit option
[   58.261262][  T838] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c098, mo2=0003]
[   58.269960][  T838] System zones: 0-5
[   58.274638][  T838] EXT4-fs (loop4): mounted filesystem without journal. Opts: debug,jqfmt=vfsv0,inlinecrypt,debug,auto_da_alloc,mblk_io_submit,delalloc,nogrpid,minixdf,,errors=continue. Quota mode: writeback.
[   58.517168][  T845] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[   59.219722][  T614] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x4
[   59.227391][  T614] plantronics 0003:047F:FFFF.0006: No inputs registered, leaving
[   59.247367][  T614] plantronics 0003:047F:FFFF.0006: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0
[   59.264406][  T614] usb 4-1: USB disconnect, device number 6
[   59.289233][  T852] xt_hashlimit: size too large, truncated to 1048576
[   59.313593][   T30] audit: type=1400 audit(1781352620.275:233): avc:  denied  { setopt } for  pid=854 comm="syz.1.148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   59.316927][  T853] fido_id[853]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory
[   59.364811][  T857] EXT4-fs (loop0): couldn't mount as ext2 due to feature incompatibilities
[   59.365180][  T855] FAT-fs (loop1): bogus number of FAT sectors
[   59.375630][  T856] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011bf5, chksum : 0x5eaa6302, utbl_chksum : 0xe619d30d)
[   59.391347][  T855] FAT-fs (loop1): Can't find a valid FAT filesystem
[   59.414313][  T856] exFAT-fs (loop2): bogus allocation bitmap size(need : 2, cur : 17179869186)
[   60.832106][  T866] set_capacity_and_notify: 5 callbacks suppressed
[   60.832133][  T866] loop3: detected capacity change from 0 to 512
[   60.846138][   T30] audit: type=1400 audit(1781352620.755:234): avc:  denied  { unlink } for  pid=851 comm="syz.0.146" name="#3" dev="tmpfs" ino=145 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[   60.902341][  T859] EXT4-fs (loop4): 1 truncate cleaned up
[   60.916760][  T859] EXT4-fs (loop4): mounted filesystem without journal. Opts: noload,stripe=0x000000000000030c,jqfmt=vfsv1,nojournal_checksum,jqfmt=vfsv1,usrjquota=,,errors=continue. Quota mode: none.
[   61.094935][  T866] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[   61.523793][  T871] loop1: detected capacity change from 0 to 512
[   61.579531][  T871] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem
[   61.602887][  T871] EXT4-fs (loop1): invalid journal inode
[   61.612055][  T871] EXT4-fs (loop1): can't get journal size
[   61.619417][  T871] EXT4-fs (loop1): 1 truncate cleaned up
[   61.625614][  T871] EXT4-fs (loop1): mounted filesystem without journal. Opts: norecovery,sysvgroups,sysvgroups,lazytime,,errors=continue. Quota mode: none.
[   61.670332][  T876] loop2: detected capacity change from 0 to 1024
[   61.674988][  T871] netlink: 28 bytes leftover after parsing attributes in process `syz.1.151'.
[   61.709463][  T879] FAULT_INJECTION: forcing a failure.
[   61.709463][  T879] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   61.723326][  T879] CPU: 1 PID: 879 Comm: syz.0.154 Not tainted syzkaller #0
[   61.730566][  T879] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[   61.740730][  T879] Call Trace:
[   61.744002][  T879]  <TASK>
[   61.746928][  T879]  __dump_stack+0x21/0x30
[   61.751275][  T879]  dump_stack_lvl+0x110/0x170
[   61.755947][  T879]  ? show_regs_print_info+0x20/0x20
[   61.761140][  T879]  dump_stack+0x15/0x20
[   61.765299][  T879]  should_fail+0x3c1/0x510
[   61.769708][  T879]  should_fail_usercopy+0x1a/0x20
[   61.774810][  T879]  _copy_from_user+0x20/0xd0
[   61.779404][  T879]  __sys_bpf+0x258/0x7d0
[   61.783643][  T879]  ? bpf_link_show_fdinfo+0x330/0x330
[   61.789021][  T879]  ? asm_sysvec_reschedule_ipi+0x1b/0x20
[   61.794652][  T879]  __x64_sys_bpf+0x7c/0x90
[   61.799073][  T879]  x64_sys_call+0x4b9/0x9a0
[   61.803571][  T879]  do_syscall_64+0x4c/0xa0
[   61.807995][  T879]  ? clear_bhb_loop+0x50/0xa0
[   61.812666][  T879]  ? clear_bhb_loop+0x50/0xa0
[   61.817343][  T879]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   61.823248][  T879] RIP: 0033:0x7fde0f005e59
[   61.827840][  T879] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   61.847440][  T879] RSP: 002b:00007fde0da60028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[   61.855855][  T879] RAX: ffffffffffffffda RBX: 00007fde0f27efa0 RCX: 00007fde0f005e59
[   61.863998][  T879] RDX: 0000000000000038 RSI: 0000200000001880 RDI: 000000000000001a
[   61.871960][  T879] RBP: 00007fde0da60090 R08: 0000000000000000 R09: 0000000000000000
[   61.879928][  T879] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   61.887892][  T879] R13: 00007fde0f27f038 R14: 00007fde0f27efa0 R15: 00007ffdc12d16c8
[   61.896213][  T879]  </TASK>
[   61.901700][   T30] audit: type=1400 audit(1781352622.665:235): avc:  denied  { create } for  pid=877 comm="syz.0.154" dev="anon_inodefs" ino=18246 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[   62.015705][  T876] EXT4-fs (loop2): Ignoring removed oldalloc option
[   62.083810][  T881] loop3: detected capacity change from 0 to 128
[   62.105422][  T876] EXT4-fs (loop2): Ignoring removed oldalloc option
[   62.340018][   T30] audit: type=1400 audit(1781352622.665:236): avc:  denied  { ioctl } for  pid=877 comm="syz.0.154" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=18246 ioctlcmd=0xaa00 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[   62.366365][  T876] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   62.379422][   T30] audit: type=1400 audit(1781352623.005:237): avc:  denied  { map } for  pid=873 comm="syz.3.153" path="socket:[18251]" dev="sockfs" ino=18251 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1
[   62.404764][   T30] audit: type=1400 audit(1781352623.005:238): avc:  denied  { accept } for  pid=873 comm="syz.3.153" path="socket:[18251]" dev="sockfs" ino=18251 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1
[   62.431389][  T876] EXT4-fs (loop2): mounted filesystem without journal. Opts: stripe=0x0000000000000004,bsddf,nodioread_nolock,norecovery,dioread_nolock,oldalloc,oldalloc,sysvgroups,norecovery,,errors=continue. Quota mode: none.
[   62.459230][  T889] loop0: detected capacity change from 0 to 512
[   62.490834][  T891] loop4: detected capacity change from 0 to 1024
[   62.577932][  T891] EXT4-fs (loop4): revision level too high, forcing read-only mode
[   62.592619][  T891] EXT4-fs (loop4): orphan cleanup on readonly fs
[   62.608561][  T891] Quota error (device loop4): v2_read_file_info: Can't read info structure
[   62.622142][  T891] EXT4-fs warning (device loop4): ext4_enable_quotas:6479: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix.
[   62.694731][  T891] EXT4-fs (loop4): Cannot turn on quotas: error -5
[   62.785176][  T891] EXT4-fs (loop4): 1 truncate cleaned up
[   62.819132][  T891] EXT4-fs (loop4): mounted filesystem without journal. Opts: nodelalloc,resgid=0x000000000000ee00,init_itable,,errors=continue. Quota mode: writeback.
[   62.843340][  T891] netlink: 'syz.4.156': attribute type 3 has an invalid length.
[   62.886628][  T896] loop3: detected capacity change from 0 to 512
[   62.902090][  T307] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[   63.048402][  T904] loop2: detected capacity change from 0 to 256
[   63.090837][  T904] exfat: Deprecated parameter 'utf8'
[   63.096493][  T904] exfat: Deprecated parameter 'utf8'
[   63.103478][  T904] exfat: Deprecated parameter 'namecase'
[   63.109314][  T904] exfat: Deprecated parameter 'utf8'
[   63.241699][  T904] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d)
[   63.292032][  T307] usb 2-1: Using ep0 maxpacket: 32
[   63.312024][  T614] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[   63.333265][  T908] device syz_tun entered promiscuous mode
[   63.339412][  T908] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[   63.357352][   T30] audit: type=1400 audit(1781352624.315:239): avc:  denied  { link } for  pid=907 comm="syz.2.164" name="file0" dev="tmpfs" ino=227 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[   63.393218][  T911] loop2: detected capacity change from 0 to 128
[   63.412112][  T307] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   63.419551][  T306] hid-generic 0006:0008:0001.0007: unknown main item tag 0x0
[   63.423994][  T307] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   63.439758][  T306] hid-generic 0006:0008:0001.0007: unknown main item tag 0x0
[   63.447594][  T306] hid-generic 0006:0008:0001.0007: unknown main item tag 0x0
[   63.455549][  T306] hid-generic 0006:0008:0001.0007: unknown main item tag 0x0
[   63.456832][  T911] EXT4-fs (loop2): Test dummy encryption mode enabled
[   63.462991][  T306] hid-generic 0006:0008:0001.0007: unknown main item tag 0x0
[   63.463061][  T306] hid-generic 0006:0008:0001.0007: unknown main item tag 0x0
[   63.480380][  T911] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption=v1,max_dir_size_kb=0x0000000000000002,inlinecrypt,,errors=continue. Quota mode: none.
[   63.484757][  T306] hid-generic 0006:0008:0001.0007: unknown main item tag 0x0
[   63.502228][  T911] ext4 filesystem being mounted at /38/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   63.509261][  T306] hid-generic 0006:0008:0001.0007: unknown main item tag 0x0
[   63.526886][  T306] hid-generic 0006:0008:0001.0007: unknown main item tag 0x0
[   63.538595][  T306] hid-generic 0006:0008:0001.0007: unknown main item tag 0x0
[   63.546060][  T306] hid-generic 0006:0008:0001.0007: unknown main item tag 0x0
[   63.553562][  T306] hid-generic 0006:0008:0001.0007: unknown main item tag 0x0
[   63.560939][  T306] hid-generic 0006:0008:0001.0007: unknown main item tag 0x0
[   63.568469][  T306] hid-generic 0006:0008:0001.0007: unknown main item tag 0x0
[   63.575871][  T306] hid-generic 0006:0008:0001.0007: unknown main item tag 0x0
[   63.582046][  T307] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[   63.583365][  T306] hid-generic 0006:0008:0001.0007: unknown main item tag 0x0
[   63.592760][  T307] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[   63.599824][  T306] hid-generic 0006:0008:0001.0007: unknown main item tag 0x0
[   63.608437][  T307] usb 2-1: Product: syz
[   63.616354][  T306] hid-generic 0006:0008:0001.0007: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0
[   63.620040][  T307] usb 2-1: Manufacturer: syz
[   63.649617][  T917] device vlan2 entered promiscuous mode
[   63.655592][  T917] device bridge0 entered promiscuous mode
[   63.656156][  T915] fido_id[915]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[   63.693355][  T307] hub 2-1:4.0: USB hub found
[   63.722167][  T614] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   63.733209][  T614] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   63.743073][  T614] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[   63.756267][  T614] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   63.774291][   T30] audit: type=1400 audit(1781352624.735:240): avc:  denied  { write } for  pid=925 comm="syz.0.171" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   63.774343][  T614] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   63.822755][  T614] usb 5-1: config 0 descriptor??
[   63.871907][   T30] audit: type=1400 audit(1781352624.815:241): avc:  denied  { create } for  pid=930 comm="syz.3.170" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   63.891537][   T30] audit: type=1400 audit(1781352624.815:242): avc:  denied  { read } for  pid=930 comm="syz.3.170" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   63.912939][   T30] audit: type=1400 audit(1781352624.815:243): avc:  denied  { getopt } for  pid=930 comm="syz.3.170" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   64.770451][  T938] FAULT_INJECTION: forcing a failure.
[   64.770451][  T938] name failslab, interval 1, probability 0, space 0, times 1
[   64.783115][  T938] CPU: 0 PID: 938 Comm: syz.3.173 Not tainted syzkaller #0
[   64.790312][  T938] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[   64.800368][  T938] Call Trace:
[   64.803647][  T938]  <TASK>
[   64.806663][  T938]  __dump_stack+0x21/0x30
[   64.810997][  T938]  dump_stack_lvl+0x110/0x170
[   64.815692][  T938]  ? show_regs_print_info+0x20/0x20
[   64.820893][  T938]  dump_stack+0x15/0x20
[   64.825050][  T938]  should_fail+0x3c1/0x510
[   64.829467][  T938]  __should_failslab+0xa4/0xe0
[   64.834281][  T938]  should_failslab+0x9/0x20
[   64.838952][  T938]  slab_pre_alloc_hook+0x3b/0xe0
[   64.843895][  T938]  kmem_cache_alloc_trace+0x48/0x270
[   64.849181][  T938]  ? __get_vm_area_node+0x11d/0x350
[   64.854381][  T938]  __get_vm_area_node+0x11d/0x350
[   64.859398][  T938]  ? selinux_capset+0xf0/0xf0
[   64.864071][  T938]  __vmalloc_node_range+0xdf/0xaf0
[   64.869180][  T938]  ? array_map_alloc+0x27c/0x6d0
[   64.874118][  T938]  ? security_capable+0x87/0xb0
[   64.878966][  T938]  bpf_map_area_alloc+0xd5/0xe0
[   64.883818][  T938]  ? array_map_alloc+0x27c/0x6d0
[   64.888752][  T938]  array_map_alloc+0x27c/0x6d0
[   64.893514][  T938]  ? bpf_map_meta_alloc+0xa1/0x8c0
[   64.898625][  T938]  array_of_map_alloc+0x55/0xc0
[   64.903473][  T938]  map_create+0x455/0x21b0
[   64.907892][  T938]  __sys_bpf+0x2ff/0x7d0
[   64.912216][  T938]  ? bpf_link_show_fdinfo+0x330/0x330
[   64.917593][  T938]  ? __secure_computing+0xea/0x290
[   64.922872][  T938]  __x64_sys_bpf+0x7c/0x90
[   64.927280][  T938]  x64_sys_call+0x4b9/0x9a0
[   64.931776][  T938]  do_syscall_64+0x4c/0xa0
[   64.936192][  T938]  ? clear_bhb_loop+0x50/0xa0
[   64.940871][  T938]  ? clear_bhb_loop+0x50/0xa0
[   64.945546][  T938]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   64.951419][  T938] RIP: 0033:0x7f4c7cf42e59
[   64.955808][  T938] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   64.975388][  T938] RSP: 002b:00007f4c7b95b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[   64.983783][  T938] RAX: ffffffffffffffda RBX: 00007f4c7d1bc180 RCX: 00007f4c7cf42e59
[   64.991750][  T938] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 0000000000000000
[   64.999722][  T938] RBP: 00007f4c7b95b090 R08: 0000000000000000 R09: 0000000000000000
[   65.007684][  T938] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   65.015819][  T938] R13: 00007f4c7d1bc218 R14: 00007f4c7d1bc180 R15: 00007ffffddf9f98
[   65.023795][  T938]  </TASK>
[   65.108436][  T941] loop0: detected capacity change from 0 to 256
[   65.114842][  T307] hub 2-1:4.0: 7 ports detected
[   65.135113][  T941] exfat: Deprecated parameter 'utf8'
[   65.143571][  T941] exfat: Deprecated parameter 'utf8'
[   65.148930][  T941] exfat: Deprecated parameter 'namecase'
[   65.154940][  T941] exfat: Deprecated parameter 'utf8'
[   65.160362][  T307] hub 2-1:4.0: insufficient power available to use all downstream ports
[   65.174646][  T941] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d)
[   65.323312][  T614] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x4
[   65.961987][  T307] hub 2-1:4.0: hub_hub_status failed (err = -71)
[   65.968356][  T307] hub 2-1:4.0: config failed, can't get hub status (err -71)
[   65.975992][  T614] plantronics 0003:047F:FFFF.0008: No inputs registered, leaving
[   66.179164][  T961] netlink: 'syz.4.181': attribute type 5 has an invalid length.
[   66.191360][  T960] loop1: detected capacity change from 0 to 512
[   66.207909][  T963] loop2: detected capacity change from 0 to 1024
[   66.239372][  T614] plantronics 0003:047F:FFFF.0008: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0
[   66.260633][  T963] EXT4-fs (loop2): Ignoring removed oldalloc option
[   66.270378][  T307] usb 2-1: USB disconnect, device number 7
[   66.272285][  T963] EXT4-fs (loop2): Project quota feature not enabled. Cannot enable project quota enforcement.
[   66.282262][  T614] usb 5-1: USB disconnect, device number 8
[   66.330398][  T948] loop3: detected capacity change from 0 to 512
[   66.335674][  T967] fido_id[967]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory
[   66.441664][  T948] EXT4-fs error (device loop3): ext4_map_blocks:632: inode #2: block 3: comm syz.3.177: lblock 0 mapped to illegal pblock 3 (length 1)
[   66.456019][  T948] EXT4-fs warning (device loop3): dx_probe:823: inode #2: lblock 0: comm syz.3.177: error -117 reading directory block
[   66.468746][  T948] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117
[   66.477291][  T948] EXT4-fs (loop3): mounted filesystem without journal. Opts: dioread_lock,nodiscard,nodelalloc,jqfmt=vfsv1,nolazytime,grpjquota=.nouid32,resuid=0x0000000000000000,nodelalloc,grpid,,,errors=continue. Quota mode: writeback.
[   67.470062][  T981] loop0: detected capacity change from 0 to 512
[   68.733330][  T988] loop1: detected capacity change from 0 to 512
[   68.743093][  T981] SELinux: security_context_str_to_sid(unconfined_u) failed for (dev ?, type ?) errno=-22
[   68.753372][  T988] SELinux: security_context_str_to_sid(unconfined_u) failed for (dev ?, type ?) errno=-22
[   68.764314][  T992] loop3: detected capacity change from 0 to 128
[   68.771223][  T988] EXT4-fs (loop1): Test dummy encryption mode enabled
[   68.778243][  T988] EXT4-fs (loop1): Ignoring removed oldalloc option
[   68.795266][  T981] EXT4-fs (loop0): Test dummy encryption mode enabled
[   68.806700][  T985] loop4: detected capacity change from 0 to 40427
[   68.809779][  T981] EXT4-fs (loop0): Ignoring removed oldalloc option
[   68.824847][  T992] attempt to access beyond end of device
[   68.824847][  T992] loop3: rw=34817, want=134, limit=128
[   68.825469][  T988] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption=v1,acl,oldalloc,debug_want_extra_isize=0x0000000000000008,,errors=continue. Quota mode: writeback.
[   68.842118][  T981] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption=v1,acl,oldalloc,debug_want_extra_isize=0x0000000000000008,,errors=continue. Quota mode: writeback.
[   68.854229][  T988] SELinux: security_context_str_to_sid(unconfined_u) failed for (dev loop1, type ext4) errno=-22
[   68.872283][  T981] SELinux: security_context_str_to_sid(unconfined_u) failed for (dev loop0, type ext4) errno=-22
[   68.896269][  T985] F2FS-fs (loop4): Insane cp_payload (553648128 >= 504)
[   68.905450][  T985] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[   68.922932][  T985] F2FS-fs (loop4): invalid crc value
[   68.929263][  T985] F2FS-fs (loop4): Ignore s_resuid=0, s_resgid=65535 w/o reserve_root and reserve_node
[   68.941719][  T985] F2FS-fs (loop4): Found nat_bits in checkpoint
[   68.954586][  T988] loop1: detected capacity change from 0 to 4096
[   68.966787][   T10] attempt to access beyond end of device
[   68.966787][   T10] loop3: rw=1, want=162, limit=128
[   68.993893][  T985] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[   69.002121][  T352] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[   69.009444][  T981] loop0: detected capacity change from 0 to 4096
[   69.011263][  T988] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled
[   69.018059][  T985] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[   69.035681][  T981] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled
[   69.057742][  T988] EXT4-fs (loop1): Test dummy encryption mode enabled
[   69.059452][  T981] EXT4-fs (loop0): Test dummy encryption mode enabled
[   69.086706][  T981] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c198, mo2=0003]
[   69.098937][  T981] System zones: 0-5
[   69.103730][  T988] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c198, mo2=0003]
[   69.112190][  T988] System zones: 0-5
[   69.116654][  T981] EXT4-fs (loop0): mounted filesystem without journal. Opts: debug,jqfmt=vfsv0,inlinecrypt,debug,test_dummy_encryption=v1,norecovery,delalloc,nogrpid,minixdf,,errors=continue. Quota mode: writeback.
[   69.133776][  T988] EXT4-fs (loop1): mounted filesystem without journal. Opts: debug,jqfmt=vfsv0,inlinecrypt,debug,test_dummy_encryption=v1,norecovery,delalloc,nogrpid,minixdf,,errors=continue. Quota mode: writeback.
[   69.360902][ T1011] FAULT_INJECTION: forcing a failure.
[   69.360902][ T1011] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   69.392177][  T352] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   69.429185][  T352] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   69.502017][  T352] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[   69.540267][ T1011] CPU: 1 PID: 1011 Comm: syz.1.188 Not tainted syzkaller #0
[   69.547587][ T1011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[   69.557649][ T1011] Call Trace:
[   69.560926][ T1011]  <TASK>
[   69.564025][ T1011]  __dump_stack+0x21/0x30
[   69.568360][ T1011]  dump_stack_lvl+0x110/0x170
[   69.573041][ T1011]  ? show_regs_print_info+0x20/0x20
[   69.578240][ T1011]  dump_stack+0x15/0x20
[   69.582394][ T1011]  should_fail+0x3c1/0x510
[   69.586807][ T1011]  should_fail_usercopy+0x1a/0x20
[   69.591824][ T1011]  _copy_from_user+0x20/0xd0
[   69.596417][ T1011]  __sys_bpf+0x258/0x7d0
[   69.600656][ T1011]  ? bpf_link_show_fdinfo+0x330/0x330
[   69.606022][ T1011]  ? __kasan_check_write+0x14/0x20
[   69.611131][ T1011]  __x64_sys_bpf+0x7c/0x90
[   69.615547][ T1011]  x64_sys_call+0x4b9/0x9a0
[   69.620047][ T1011]  do_syscall_64+0x4c/0xa0
[   69.624462][ T1011]  ? clear_bhb_loop+0x50/0xa0
[   69.629252][ T1011]  ? clear_bhb_loop+0x50/0xa0
[   69.633937][ T1011]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   69.639830][ T1011] RIP: 0033:0x7fe2c94ede59
[   69.644244][ T1011] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   69.663855][ T1011] RSP: 002b:00007fe2c7f06028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[   69.672268][ T1011] RAX: ffffffffffffffda RBX: 00007fe2c9767180 RCX: 00007fe2c94ede59
[   69.680341][ T1011] RDX: 0000000000000050 RSI: 0000200000000900 RDI: 0000000000000000
[   69.688399][ T1011] RBP: 00007fe2c7f06090 R08: 0000000000000000 R09: 0000000000000000
[   69.696634][ T1011] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   69.704607][ T1011] R13: 00007fe2c9767218 R14: 00007fe2c9767180 R15: 00007ffc29b90378
[   69.712580][ T1011]  </TASK>
[   69.752370][  T352] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   69.793846][  T352] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   69.853401][  T352] usb 3-1: config 0 descriptor??
[   69.982028][  T614] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[   70.342047][  T614] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   70.342835][  T352] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x4
[   70.362009][  T614] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   70.370982][  T352] plantronics 0003:047F:FFFF.0009: No inputs registered, leaving
[   70.381912][  T614] usb 5-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af
[   70.381998][  T307] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[   70.392619][  T352] plantronics 0003:047F:FFFF.0009: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0
[   70.421036][  T614] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   70.441645][  T614] usb 5-1: config 0 descriptor??
[   70.523477][  T289] attempt to access beyond end of device
[   70.523477][  T289] loop4: rw=2049, want=40968, limit=40427
[   70.536434][  T289] attempt to access beyond end of device
[   70.536434][  T289] loop4: rw=2049, want=41008, limit=40427
[   70.562395][  T293] usb 3-1: USB disconnect, device number 6
[   70.599022][ T1023] loop0: detected capacity change from 0 to 128
[   70.611525][   T30] kauditd_printk_skb: 33 callbacks suppressed
[   70.611539][   T30] audit: type=1400 audit(1781352631.565:277): avc:  denied  { create } for  pid=1029 comm="syz.1.200" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1
[   70.642087][  T614] usbhid 5-1:0.0: can't add hid device: -71
[   70.648915][  T614] usbhid: probe of 5-1:0.0 failed with error -71
[   70.657158][  T614] usb 5-1: USB disconnect, device number 9
[   70.672049][  T307] usb 4-1: Using ep0 maxpacket: 16
[   70.677601][ T1030] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   70.756066][ T1034] EXT4-fs (loop0): Ignoring removed nobh option
[   70.773531][ T1034] EXT4-fs (loop0): mounted filesystem without journal. Opts: init_itable=0x0000000000000006,discard,barrier=0x000000002cb525b5,norecovery,noload,grpjquota=,noauto_da_alloc,acl,auto_da_alloc=0x0000000000000343,jqfmt=vfsv1,nobh,,errors=continue. Quota mode: none.
[   70.799172][  T307] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   70.971589][  T307] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[   71.263135][   T30] audit: type=1400 audit(1781352632.225:278): avc:  denied  { setopt } for  pid=1049 comm="syz.1.205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   71.342059][  T307] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   71.352607][  T307] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   71.360790][  T307] usb 4-1: Product: syz
[   71.365660][  T307] usb 4-1: Manufacturer: syz
[   71.370309][  T307] usb 4-1: SerialNumber: syz
[   71.375987][ T1052] netlink: 'syz.1.206': attribute type 4 has an invalid length.
[   71.827886][ T1057] set_capacity_and_notify: 3 callbacks suppressed
[   71.827920][ T1057] loop4: detected capacity change from 0 to 256
[   71.952978][   T30] audit: type=1400 audit(1781352632.915:279): avc:  denied  { write } for  pid=1060 comm="syz.0.208" name="event2" dev="devtmpfs" ino=270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[   72.294596][ T1065] loop2: detected capacity change from 0 to 128
[   72.313084][ T1065] EXT4-fs (loop2): Test dummy encryption mode enabled
[   72.327037][ T1057] FAT-fs (loop4): Directory bread(block 64) failed
[   72.337960][ T1065] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption=v1,max_dir_size_kb=0x0000000000000002,inlinecrypt,,errors=continue. Quota mode: none.
[   72.355611][ T1065] ext4 filesystem being mounted at /46/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   72.371860][ T1057] FAT-fs (loop4): Directory bread(block 65) failed
[   72.379157][  T307] usb 4-1: 0:2 : does not exist
[   72.385010][ T1057] FAT-fs (loop4): Directory bread(block 66) failed
[   72.392281][ T1057] FAT-fs (loop4): Directory bread(block 67) failed
[   72.392539][  T307] usb 4-1: USB disconnect, device number 7
[   72.410523][ T1057] FAT-fs (loop4): Directory bread(block 68) failed
[   72.420777][ T1073] loop3: detected capacity change from 0 to 256
[   72.427280][ T1057] FAT-fs (loop4): Directory bread(block 69) failed
[   72.434112][ T1057] FAT-fs (loop4): Directory bread(block 70) failed
[   72.440686][ T1057] FAT-fs (loop4): Directory bread(block 71) failed
[   72.447295][ T1057] FAT-fs (loop4): Directory bread(block 72) failed
[   72.453906][ T1057] FAT-fs (loop4): Directory bread(block 73) failed
[   72.476179][ T1075] loop1: detected capacity change from 0 to 512
[   72.523178][ T1075] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   72.554347][ T1075] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002]
[   72.564291][ T1075] System zones: 1-12
[   72.569263][ T1075] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2807: Unable to expand inode 15. Delete some EAs or run e2fsck.
[   72.586409][ T1075] EXT4-fs (loop1): 1 truncate cleaned up
[   72.592223][ T1075] EXT4-fs (loop1): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,max_batch_time=0x0000000000000002,debug_want_extra_isize=0x000000000000006a,mb_optimize_scan=0x0000000000000001,debug,data=journal,,errors=continue. Quota mode: none.
[   72.618117][  T325] udevd[325]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   72.633822][    T6] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[   72.651727][   T30] audit: type=1400 audit(1781352633.605:280): avc:  denied  { load_policy } for  pid=1076 comm="syz.0.215" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1
[   72.673424][ T1077] SELinux: ebitmap start bit (2687808) is beyond the end of the bitmap (1472)
[   72.684130][ T1077] SELinux: failed to load policy
[   72.711483][ T1088] loop0: detected capacity change from 0 to 256
[   72.720428][   T30] audit: type=1400 audit(1781352633.645:281): avc:  denied  { mount } for  pid=1078 comm="syz.4.216" name="/" dev="ramfs" ino=19370 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1
[   72.945305][ T1088] exFAT-fs (loop0): failed to load upcase table (idx : 0x00011bf5, chksum : 0xcea91b8a, utbl_chksum : 0xe619d30d)
[   72.987961][ T1088] exFAT-fs (loop0): bogus allocation bitmap size(need : 2, cur : 17179869186)
[   73.034298][   T30] audit: type=1400 audit(1781352633.995:282): avc:  denied  { append } for  pid=1087 comm="syz.0.218" name="loop0" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[   73.118674][   T30] audit: type=1400 audit(1781352634.015:283): avc:  denied  { map } for  pid=1087 comm="syz.0.218" path="/dev/loop0" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[   73.166436][ T1093] device vlan2 entered promiscuous mode
[   73.182057][ T1093] device bridge0 entered promiscuous mode
[   73.301463][   T30] audit: type=1400 audit(1781352634.255:284): avc:  denied  { create } for  pid=1094 comm="syz.0.219" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[   73.535323][ T1104] loop0: detected capacity change from 0 to 256
[   74.432450][  T369] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[   74.577129][ T1085] loop4: detected capacity change from 0 to 40427
[   74.632867][ T1085] F2FS-fs (loop4): Unrecognized mount option "compress_attr" or missing value
[   74.657568][   T30] audit: type=1400 audit(1781352635.595:285): avc:  denied  { mounton } for  pid=1078 comm="syz.4.216" path="/bus" dev="ramfs" ino=19377 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1
[   74.679696][   T30] audit: type=1400 audit(1781352635.615:286): avc:  denied  { create } for  pid=1078 comm="syz.4.216" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[   74.706055][  T369] usb 2-1: Using ep0 maxpacket: 16
[   74.733835][ T1115] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2877470342 (2877470342 ns) > initial count (1113741947 ns). Using initial count to start timer.
[   74.767716][ T1117] loop3: detected capacity change from 0 to 512
[   74.769354][    T6] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   74.787484][    T6] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   74.792994][ T1117] EXT4-fs: Invalid sb specification: sb=0x0000000000000007Jnouid32,jqfmt=vfsold,noquota,bsdgroups,usrjquota=",,errors=continue
[   74.797963][    T6] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[   74.818167][ T1117] EXT4-fs (loop3): Unrecognized mount option "sb=0x0000000000000007Jnouid32" or missing value
[   74.823770][    T6] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   74.844706][    T6] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   74.852062][  T369] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   74.854767][    T6] usb 3-1: config 0 descriptor??
[   74.886798][ T1122] loop4: detected capacity change from 0 to 8192
[   74.893537][  T369] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[   74.936316][ T1122] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 0)
[   74.945001][ T1122] FAT-fs (loop4): Filesystem has been set read-only
[   75.028339][ T1122] FAT-fs (loop4): error, corrupted directory (invalid entries)
[   75.046755][ T1122] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 0)
[   75.055729][ T1122] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 0)
[   75.116303][  T369] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   75.125509][  T369] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   75.134086][  T369] usb 2-1: Product: syz
[   75.138441][  T369] usb 2-1: Manufacturer: syz
[   75.143191][  T369] usb 2-1: SerialNumber: syz
[   75.343054][    T6] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x4
[   75.351083][    T6] plantronics 0003:047F:FFFF.000A: No inputs registered, leaving
[   75.363338][    T6] plantronics 0003:047F:FFFF.000A: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0
[   75.518164][ T1128] loop4: detected capacity change from 0 to 512
[   75.544232][  T369] usb 2-1: 0:2 : does not exist
[   75.586278][  T369] usb 2-1: USB disconnect, device number 8
[   75.779973][ T1128] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[   75.928923][   T30] kauditd_printk_skb: 1 callbacks suppressed
[   75.928945][   T30] audit: type=1400 audit(1781352636.885:288): avc:  denied  { mounton } for  pid=1130 comm="syz.3.229" path="/51/file0" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1
[   76.103808][  T384] udevd[384]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   76.228604][ T1131] netlink: 16 bytes leftover after parsing attributes in process `syz.3.229'.
[   76.327016][ T1131] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[   76.374911][ T1134] xt_hashlimit: size too large, truncated to 1048576
[   76.392596][ T1131] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   76.403740][ T1131] exFAT-fs (loop3): unable to read boot sector
[   76.409969][ T1131] exFAT-fs (loop3): failed to read boot sector
[   76.416191][ T1131] exFAT-fs (loop3): failed to recognize exfat type
[   76.514877][ T1139] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011bf5, chksum : 0x5eaa6302, utbl_chksum : 0xe619d30d)
[   76.536506][ T1139] exFAT-fs (loop3): bogus allocation bitmap size(need : 2, cur : 17179869186)
[   76.635267][   T30] audit: type=1400 audit(1781352637.595:289): avc:  denied  { mounton } for  pid=1144 comm="syz.3.233" path="/53/file0" dev="tmpfs" ino=309 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[   76.765533][ T1148] netlink: 'syz.1.232': attribute type 4 has an invalid length.
[   76.773476][ T1148] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.232'.
[   77.612084][  T369] usb 3-1: reset high-speed USB device number 7 using dummy_hcd
[   77.871148][ T1166] set_capacity_and_notify: 2 callbacks suppressed
[   77.871163][ T1166] loop2: detected capacity change from 0 to 1024
[   77.887330][ T1166] SELinux: security_context_str_to_sid(s) failed for (dev ?, type ?) errno=-22
[   77.945521][ T1167] fuse: root generation should be zero
[   77.972675][ T1171] loop0: detected capacity change from 0 to 512
[   78.073933][ T1166] EXT4-fs (loop2): Unrecognized mount option "euid>00000000000000000000" or missing value
[   78.135890][ T1171] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[   78.763186][  T306] usb 3-1: USB disconnect, device number 7
[   78.875645][ T1164] loop3: detected capacity change from 0 to 40427
[   78.887189][ T1180] loop1: detected capacity change from 0 to 256
[   78.892354][ T1164] F2FS-fs (loop3): Invalid SB checksum offset: 0
[   78.901678][ T1164] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock
[   78.910953][ T1164] F2FS-fs (loop3): invalid crc value
[   78.918096][ T1164] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437)
[   78.945523][ T1180] exFAT-fs (loop1): failed to load upcase table (idx : 0x00011bf5, chksum : 0x5eaa6302, utbl_chksum : 0xe619d30d)
[   78.957937][ T1180] exFAT-fs (loop1): bogus allocation bitmap size(need : 2, cur : 17179869186)
[   78.981024][ T1164] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0
[   78.990885][   T30] audit: type=1400 audit(1781352639.955:290): avc:  denied  { create } for  pid=1165 comm="syz.2.237" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[   79.010759][ T1164] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[   79.024110][ T1186] loop2: detected capacity change from 0 to 512
[   79.039620][   T30] audit: type=1400 audit(1781352639.995:291): avc:  denied  { getopt } for  pid=1161 comm="syz.3.240" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   79.065801][  T286] attempt to access beyond end of device
[   79.065801][  T286] loop3: rw=2049, want=45104, limit=40427
[   79.081650][ T1186] EXT4-fs error (device loop2): ext4_orphan_get:1406: inode #15: comm syz.2.237: iget: bad i_size value: 38620345925642
[   79.094383][    T6] usb 5-1: new full-speed USB device number 10 using dummy_hcd
[   79.106348][ T1186] EXT4-fs error (device loop2): ext4_orphan_get:1411: comm syz.2.237: couldn't read orphan inode 15 (err -117)
[   79.118558][ T1186] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   79.231893][ T1191] A link change request failed with some changes committed already. Interface sit1 may have been left with an inconsistent configuration, please check.
[   79.512140][    T6] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[   79.525803][    T6] usb 5-1: New USB device found, idVendor=04d9, idProduct=a067, bcdDevice= 0.00
[   79.558684][    T6] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   79.576922][    T6] usb 5-1: config 0 descriptor??
[   79.754465][ T1207] loop2: detected capacity change from 0 to 256
[   79.809603][ T1207] FAT-fs (loop2): Directory bread(block 64) failed
[   79.816779][ T1207] FAT-fs (loop2): Directory bread(block 65) failed
[   79.823433][ T1207] FAT-fs (loop2): Directory bread(block 66) failed
[   79.829984][ T1207] FAT-fs (loop2): Directory bread(block 67) failed
[   79.836599][ T1207] FAT-fs (loop2): Directory bread(block 68) failed
[   79.843154][ T1207] FAT-fs (loop2): Directory bread(block 69) failed
[   79.849752][ T1207] FAT-fs (loop2): Directory bread(block 70) failed
[   79.856598][ T1207] FAT-fs (loop2): Directory bread(block 71) failed
[   79.863202][ T1207] FAT-fs (loop2): Directory bread(block 72) failed
[   79.869745][ T1207] FAT-fs (loop2): Directory bread(block 73) failed
[   79.937947][ T1189] loop1: detected capacity change from 0 to 131072
[   79.967412][ T1189] F2FS-fs (loop1): Test dummy encryption mode enabled
[   79.977039][ T1189] F2FS-fs (loop1): invalid crc value
[   79.988782][ T1189] F2FS-fs (loop1): Found nat_bits in checkpoint
[   80.049226][ T1189] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[   80.125880][    T6] holtek_mouse 0003:04D9:A067.000B: unknown main item tag 0x0
[   80.133714][    T6] holtek_mouse 0003:04D9:A067.000B: unknown main item tag 0x0
[   80.141568][    T6] holtek_mouse 0003:04D9:A067.000B: unknown main item tag 0x0
[   80.149345][    T6] holtek_mouse 0003:04D9:A067.000B: unknown main item tag 0x0
[   80.157195][    T6] holtek_mouse 0003:04D9:A067.000B: unknown main item tag 0x0
[   80.165074][    T6] holtek_mouse 0003:04D9:A067.000B: unknown main item tag 0x0
[   80.191056][    T6] holtek_mouse 0003:04D9:A067.000B: unknown main item tag 0x0
[   80.225262][ T1189] netlink: 24 bytes leftover after parsing attributes in process `syz.1.244'.
[   80.246310][    T6] holtek_mouse 0003:04D9:A067.000B: hidraw0: USB HID v0.00 Device [HID 04d9:a067] on usb-dummy_hcd.4-1/input0
[   80.297709][ T1214] fscrypt: AES-256-XTS using implementation "xts-aes-aesni"
[   80.344864][    T6] usb 5-1: USB disconnect, device number 10
[   80.442614][ T1132] EXT4-fs error (device loop0): ext4_validate_block_bitmap:420: comm ext4lazyinit: bg 0: bad block bitmap checksum
[   80.601646][   T30] audit: type=1400 audit(1781352641.555:292): avc:  denied  { validate_trans } for  pid=1217 comm="syz.2.252" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1
[   80.629614][ T1222] loop2: detected capacity change from 0 to 256
[   80.724760][ T1222] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011bf5, chksum : 0x5eaa6302, utbl_chksum : 0xe619d30d)
[   80.738366][ T1222] exFAT-fs (loop2): bogus allocation bitmap size(need : 2, cur : 17179869186)
[   81.035196][ T1226] loop1: detected capacity change from 0 to 512
[   81.345528][ T1226] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[   81.739509][   T30] audit: type=1400 audit(1781352642.695:293): avc:  denied  { getopt } for  pid=1238 comm="syz.2.257" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[   81.794013][   T30] audit: type=1400 audit(1781352642.755:294): avc:  denied  { append } for  pid=1245 comm="syz.0.259" name="kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[   81.838850][ T1246] loop0: detected capacity change from 0 to 512
[   81.875956][ T1246] EXT4-fs error (device loop0): ext4_orphan_get:1406: inode #15: comm syz.0.259: iget: bad i_size value: 38620345925642
[   81.903929][ T1243] erofs: (device loop2): mounted with root inode @ nid 36.
[   81.979289][ T1246] EXT4-fs error (device loop0): ext4_orphan_get:1411: comm syz.0.259: couldn't read orphan inode 15 (err -117)
[   82.085931][ T1246] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   82.312894][ T1253] attempt to access beyond end of device
[   82.312894][ T1253] loop2: rw=0, want=304, limit=16
[   82.323670][ T1253] erofs: (device loop2): erofs_readdir: fail to readdir of logical block 0 of nid 36
[   82.451984][    T6] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[   82.642038][   T60] usb 5-1: new low-speed USB device number 11 using dummy_hcd
[   82.692666][ T1256] SELinux: security_context_str_to_sid(root) failed for (dev ?, type ?) errno=-22
[   82.702766][ T1258] netlink: 16 bytes leftover after parsing attributes in process `syz.2.262'.
[   82.711710][ T1258] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[   82.732906][ T1256] EXT4-fs (loop3): Test dummy encryption mode enabled
[   82.739777][ T1256] EXT4-fs (loop3): Unrecognized mount option "smackfsfloor=test_dummy_encryption" or missing value
[   82.753420][   T30] audit: type=1326 audit(1781352643.715:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1255 comm="syz.3.263" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c7cf42e59 code=0x7ffc0000
[   82.788763][ T1258] blk_update_request: I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   82.799881][ T1258] exFAT-fs (loop2): unable to read boot sector
[   82.806137][ T1258] exFAT-fs (loop2): failed to read boot sector
[   82.812564][ T1258] exFAT-fs (loop2): failed to recognize exfat type
[   82.818633][   T30] audit: type=1326 audit(1781352643.715:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1255 comm="syz.3.263" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c7cf42e59 code=0x7ffc0000
[   82.844186][    T6] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[   82.886683][   T30] audit: type=1326 audit(1781352643.715:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1255 comm="syz.3.263" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c7cf42e59 code=0x7ffc0000
[   82.909197][    T6] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   82.917961][   T30] audit: type=1326 audit(1781352643.715:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1255 comm="syz.3.263" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=179 compat=0 ip=0x7f4c7cf42e59 code=0x7ffc0000
[   82.922606][    T6] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   82.948076][   T30] audit: type=1326 audit(1781352643.715:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1255 comm="syz.3.263" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c7cf42e59 code=0x7ffc0000
[   82.957076][   T60] usb 5-1: Invalid ep0 maxpacket: 16
[   82.987288][    T6] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[   82.990022][   T30] audit: type=1326 audit(1781352643.715:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1255 comm="syz.3.263" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c7cf42e59 code=0x7ffc0000
[   83.025364][   T30] audit: type=1326 audit(1781352643.715:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1255 comm="syz.3.263" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c7cf42e59 code=0x7ffc0000
[   83.050297][   T30] audit: type=1326 audit(1781352643.745:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1255 comm="syz.3.263" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c7cf42e59 code=0x7ffc0000
[   83.092231][    T6] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[   83.102061][    T6] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[   83.110259][    T6] usb 1-1: Manufacturer: syz
[   83.118048][    T6] usb 1-1: config 0 descriptor??
[   83.142155][   T60] usb 5-1: new low-speed USB device number 12 using dummy_hcd
[   83.171973][  T368] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[   83.382260][   T60] usb 5-1: Invalid ep0 maxpacket: 16
[   83.387950][   T60] usb usb5-port1: attempt power cycle
[   83.412076][  T368] usb 3-1: Using ep0 maxpacket: 32
[   83.542067][  T368] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   83.553195][  T368] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   83.605160][    T6] appleir 0003:05AC:8243.000C: unknown main item tag 0x0
[   83.614785][    T6] appleir 0003:05AC:8243.000C: No inputs registered, leaving
[   83.643412][    T6] appleir 0003:05AC:8243.000C: hiddev96,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0
[   83.912057][   T60] usb 5-1: new low-speed USB device number 13 using dummy_hcd
[   84.032087][   T60] usb 5-1: Invalid ep0 maxpacket: 16
[   84.181703][ T1270] set_capacity_and_notify: 3 callbacks suppressed
[   84.181713][ T1270] loop3: detected capacity change from 0 to 256
[   84.194461][   T60] usb 5-1: new low-speed USB device number 14 using dummy_hcd
[   84.203146][ T1270] exfat: Deprecated parameter 'namecase'
[   84.208805][ T1270] exfat: Bad value for 'namecase'
[   84.212117][  T368] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[   84.251184][  T368] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[   84.259664][  T368] usb 3-1: Product: syz
[   84.264129][  T368] usb 3-1: Manufacturer: syz
[   84.303873][  T306] usb 1-1: USB disconnect, device number 7
[   84.312577][  T368] hub 3-1:4.0: USB hub found
[   84.322206][   T60] usb 5-1: Invalid ep0 maxpacket: 16
[   84.327578][   T60] usb usb5-port1: unable to enumerate USB device
[   84.442263][ T1229] EXT4-fs error (device loop0): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 5: invalid block bitmap
[   84.595942][ T1270] loop3: detected capacity change from 0 to 512
[   84.646515][ T1270] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[   84.687244][ T1270] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.267: invalid indirect mapped block 9 (level 0)
[   84.701362][  T368] hub 3-1:4.0: config failed, can't read hub descriptor (err -22)
[   84.813020][  T368] usb 3-1: USB disconnect, device number 8
[   84.828817][ T1270] EXT4-fs (loop3): 1 truncate cleaned up
[   84.988912][ T1270] EXT4-fs (loop3): mounted filesystem without journal. Opts: init_itable,inode_readahead_blks=0x0000000008000000,nodiscard,,errors=continue. Quota mode: none.
[   85.339364][ T1285] loop0: detected capacity change from 0 to 512
[   85.377469][ T1285] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[   85.434427][ T1285] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002]
[   85.457160][ T1285] System zones: 1-12
[   85.484295][ T1285] EXT4-fs (loop0): 1 truncate cleaned up
[   85.490066][ T1285] EXT4-fs (loop0): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,max_batch_time=0x0000000000000002,debug_want_extra_isize=0x000000000000006a,mb_optimize_scan=0x0000000000000001,debug,data=journal,,errors=continue. Quota mode: none.
[   85.582189][ T1291] loop2: detected capacity change from 0 to 1024
[   85.603126][ T1291] EXT4-fs (loop2): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,sb=0x0000000100000000,auto_da_alloc,nodioread_nolock,,errors=continue. Quota mode: none.
[   85.621739][ T1291] ext4 filesystem being mounted at /57/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   85.632204][  T758] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[   85.689739][ T1297] loop2: detected capacity change from 0 to 128
[   85.732944][ T1297] EXT4-fs (loop2): Test dummy encryption mode enabled
[   85.753213][ T1297] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption=v1,max_dir_size_kb=0x0000000000000002,inlinecrypt,,errors=continue. Quota mode: none.
[   85.770455][ T1297] ext4 filesystem being mounted at /58/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   85.912008][  T758] usb 4-1: device descriptor read/64, error -71
[   85.978736][ T1301] device vlan2 entered promiscuous mode
[   85.984609][ T1301] device bridge0 entered promiscuous mode
[   86.057342][ T1305] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check.
[   86.082097][   T60] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[   86.318827][ T1316] loop1: detected capacity change from 0 to 512
[   86.444044][ T1316] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[   86.478541][ T1319] netlink: 32 bytes leftover after parsing attributes in process `syz.0.279'.
[   86.590424][ T1319] loop0: detected capacity change from 0 to 512
[   87.191975][  T758] usb 4-1: device descriptor read/64, error -71
[   87.302117][   T60] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   87.328208][   T60] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   87.353163][   T60] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[   87.380236][ T1326] netlink: 16 bytes leftover after parsing attributes in process `syz.3.281'.
[   87.381982][   T60] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   87.398467][ T1326] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[   87.431986][   T60] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   87.455216][   T60] usb 3-1: config 0 descriptor??
[   87.508173][   T30] kauditd_printk_skb: 16 callbacks suppressed
[   87.508186][   T30] audit: type=1400 audit(1781352648.465:319): avc:  denied  { bind } for  pid=1327 comm="syz.3.282" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   87.558728][ T1330] loop3: detected capacity change from 0 to 256
[   87.595637][   T30] audit: type=1400 audit(1781352648.495:320): avc:  denied  { listen } for  pid=1327 comm="syz.3.282" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   87.646792][   T30] audit: type=1400 audit(1781352648.495:321): avc:  denied  { connect } for  pid=1327 comm="syz.3.282" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   87.692027][   T30] audit: type=1400 audit(1781352648.495:322): avc:  denied  { write } for  pid=1327 comm="syz.3.282" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   87.716099][ T1334] loop3: detected capacity change from 0 to 256
[   87.748436][ T1334] FAT-fs (loop3): Directory bread(block 64) failed
[   87.757474][ T1334] FAT-fs (loop3): Directory bread(block 65) failed
[   87.764642][ T1334] FAT-fs (loop3): Directory bread(block 66) failed
[   87.771631][ T1334] FAT-fs (loop3): Directory bread(block 67) failed
[   87.780057][ T1334] FAT-fs (loop3): Directory bread(block 68) failed
[   87.787053][ T1334] FAT-fs (loop3): Directory bread(block 69) failed
[   87.800652][ T1336] loop0: detected capacity change from 0 to 256
[   87.801921][ T1334] FAT-fs (loop3): Directory bread(block 70) failed
[   87.813624][ T1334] FAT-fs (loop3): Directory bread(block 71) failed
[   87.821712][ T1334] FAT-fs (loop3): Directory bread(block 72) failed
[   87.828645][ T1334] FAT-fs (loop3): Directory bread(block 73) failed
[   87.850417][ T1334] netlink: 36 bytes leftover after parsing attributes in process `syz.3.285'.
[   87.864722][ T1336] exFAT-fs (loop0): failed to load upcase table (idx : 0x00011bf5, chksum : 0xcea91b8a, utbl_chksum : 0xe619d30d)
[   87.880594][ T1336] exFAT-fs (loop0): bogus allocation bitmap size(need : 2, cur : 17179869186)
[   87.949636][   T30] audit: type=1400 audit(1781352648.905:323): avc:  denied  { create } for  pid=1340 comm="syz.3.288" name="file2" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[   87.968225][  T411] udevd[411]: inotify_add_watch(7, /dev/loop3, 10) failed: No such file or directory
[   87.971458][   T60] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x4
[   87.984009][  T384] udevd[384]: inotify_add_watch(7, /dev/loop3, 10) failed: No such file or directory
[   87.988906][   T60] plantronics 0003:047F:FFFF.000D: No inputs registered, leaving
[   88.008133][   T60] plantronics 0003:047F:FFFF.000D: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0
[   88.152013][  T368] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[   88.282472][ T1277] EXT4-fs error (device loop1): ext4_validate_block_bitmap:420: comm ext4lazyinit: bg 0: bad block bitmap checksum
[   88.411994][  T368] usb 5-1: Using ep0 maxpacket: 32
[   88.442018][  T758] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[   88.542079][  T368] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   88.553046][  T368] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   88.692062][  T368] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[   88.701189][  T368] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[   88.709628][  T368] usb 5-1: Product: syz
[   88.713834][  T368] usb 5-1: Manufacturer: syz
[   88.752703][  T368] hub 5-1:4.0: USB hub found
[   88.812269][  T758] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   88.822464][  T758] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[   88.922280][  T758] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[   88.954902][  T758] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[   88.963177][  T758] usb 4-1: SerialNumber: syz
[   89.012069][  T368] hub 5-1:4.0: 7 ports detected
[   89.032603][  T368] hub 5-1:4.0: insufficient power available to use all downstream ports
[   89.483571][   T30] audit: type=1400 audit(1781352650.445:324): avc:  denied  { read write } for  pid=1340 comm="syz.3.288" name="ppp" dev="devtmpfs" ino=154 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[   89.537260][ T1341] UDC core: couldn't find an available UDC or it's busy: -16
[   89.545182][  T368] hub 5-1:4.0: hub_hub_status failed (err = -71)
[   89.551727][ T1341] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[   89.561261][  T368] hub 5-1:4.0: config failed, can't get hub status (err -71)
[   89.570214][   T30] audit: type=1400 audit(1781352650.475:325): avc:  denied  { open } for  pid=1340 comm="syz.3.288" path="/dev/ppp" dev="devtmpfs" ino=154 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[   89.648358][   T30] audit: type=1400 audit(1781352650.475:326): avc:  denied  { ioctl } for  pid=1340 comm="syz.3.288" path="/dev/ppp" dev="devtmpfs" ino=154 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[   89.674751][  T368] usb 5-1: USB disconnect, device number 15
[   89.806024][ T1361] fuse: Bad value for 'fd'
[   90.062536][   T30] audit: type=1400 audit(1781352651.025:327): avc:  denied  { read } for  pid=1370 comm="syz.4.298" name="usbmon8" dev="devtmpfs" ino=179 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[   90.086000][  T731] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[   90.093698][   T30] audit: type=1400 audit(1781352651.025:328): avc:  denied  { map } for  pid=1370 comm="syz.4.298" path="/dev/usbmon8" dev="devtmpfs" ino=179 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[   90.128765][ T1373] loop4: detected capacity change from 0 to 128
[   90.172168][ T1373] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[   90.183076][ T1373] ext4 filesystem being mounted at /52/bus/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   90.203431][  T758] usb 4-1: 0:2 : does not exist
[   90.208351][  T758] usb 4-1: unit 5: unexpected type 0x09
[   90.231353][  T368] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0
[   90.232130][  T758] usb 4-1: USB disconnect, device number 9
[   90.268791][  T368] hid-generic 0000:0000:0000.000E: hidraw1: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[   90.283431][  T289] ------------[ cut here ]------------
[   90.289045][  T289] WARNING: CPU: 1 PID: 289 at fs/inode.c:335 drop_nlink+0xc5/0x110
[   90.302749][  T289] Modules linked in:
[   90.306748][  T289] CPU: 1 PID: 289 Comm: syz-executor Not tainted syzkaller #0
[   90.314502][  T289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[   90.324916][  T289] RIP: 0010:drop_nlink+0xc5/0x110
[   90.330131][  T289] Code: 1b 48 8d bb b8 04 00 00 be 08 00 00 00 e8 a3 03 f2 ff f0 48 ff 83 b8 04 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 8b 83 b2 ff <0f> 0b eb 86 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 5e ff ff ff 4c
[   90.350133][  T289] RSP: 0018:ffffc90000a77b28 EFLAGS: 00010293
[   90.356709][  T289] RAX: ffffffff81b75dd5 RBX: ffff88812f7e8bf0 RCX: ffff88811d22e2c0
[   90.364941][  T289] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[   90.373331][  T289] RBP: ffffc90000a77b50 R08: 0000000000000003 R09: 0000000000000004
[   90.381504][  T289] R10: dffffc0000000000 R11: fffff5200014ef54 R12: dffffc0000000000
[   90.389931][  T289] R13: 1ffff11025efd187 R14: ffff88812f7e8c38 R15: 0000000000000000
[   90.398208][  T289] FS:  0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000
[   90.407371][  T289] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   90.426052][  T289] CR2: 00007f4c7b99cff8 CR3: 000000010d672000 CR4: 00000000003526a0
[   90.453573][  T289] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[   90.462038][  T731] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   90.463038][  T325] udevd[325]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   90.480254][  T731] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[   90.504414][  T289] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[   90.526716][  T289] Call Trace:
[   90.530146][  T289]  <TASK>
[   90.544205][  T289]  shmem_rmdir+0x5b/0x90
[   90.548656][  T289]  vfs_rmdir+0x313/0x460
[   90.568404][  T289]  incfs_kill_sb+0x105/0x220
[   90.581811][  T289]  deactivate_locked_super+0xa0/0x100
[   90.587361][  T289]  deactivate_super+0xaf/0xe0
[   90.592202][  T289]  cleanup_mnt+0x45b/0x510
[   90.592477][  T307] usb 3-1: USB disconnect, device number 9
[   90.596720][  T289]  __cleanup_mnt+0x19/0x20
[   90.607318][  T289]  task_work_run+0x127/0x190
[   90.612103][  T289]  do_exit+0xb35/0x2890
[   90.616382][  T289]  ? put_task_struct+0x90/0x90
[   90.622829][  T289]  ? __fdget_pos+0x1f7/0x380
[   90.628112][  T289]  ? ksys_write+0x1e4/0x250
[   90.691717][  T289]  ? __ia32_sys_read+0x90/0x90
[   90.696680][  T289]  do_group_exit+0x141/0x310
[   90.705414][  T289]  ? debug_smp_processor_id+0x17/0x20
[   90.710988][  T289]  __x64_sys_exit_group+0x3f/0x40
[   90.722027][  T731] usb 1-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40
[   90.731220][  T731] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   90.740965][  T289]  x64_sys_call+0x832/0x9a0
[   90.745557][  T289]  do_syscall_64+0x4c/0xa0
[   90.801172][  T289]  ? clear_bhb_loop+0x50/0xa0
[   90.806336][  T731] usb 1-1: Product: syz
[   90.810545][  T731] usb 1-1: Manufacturer: syz
[   90.815265][  T289]  ? clear_bhb_loop+0x50/0xa0
[   90.820095][  T289]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   90.826141][  T731] usb 1-1: SerialNumber: syz
[   90.831104][  T289] RIP: 0033:0x7ff74b794e59
[   90.835919][  T289] Code: Unable to access opcode bytes at RIP 0x7ff74b794e2f.
[   90.843504][  T289] RSP: 002b:00007fff19136898 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
[   90.851978][  T289] RAX: ffffffffffffffda RBX: 00007ff74b82a22a RCX: 00007ff74b794e59
[   90.859972][  T289] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001
[   90.868025][  T289] RBP: 0000000000000009 R08: 0000000000000000 R09: 00007ff74b82a1ca
[   90.877215][  T289] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff19137b50
[   90.885359][  T289] R13: 00007ff74b82a1ca R14: 00005555591db4e8 R15: 00007fff19138c20
[   90.894945][  T289]  </TASK>
[   90.898175][  T289] ---[ end trace e02a577d457966f3 ]---
[   90.904567][  T289] ------------[ cut here ]------------
[   90.910307][  T289] WARNING: CPU: 1 PID: 289 at fs/inode.c:335 drop_nlink+0xc5/0x110
[   90.918770][  T289] Modules linked in:
[   90.924272][  T289] CPU: 1 PID: 289 Comm: syz-executor Tainted: G        W         syzkaller #0
[   90.962734][  T289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[   90.973844][  T289] RIP: 0010:drop_nlink+0xc5/0x110
[   90.979054][  T289] Code: 1b 48 8d bb b8 04 00 00 be 08 00 00 00 e8 a3 03 f2 ff f0 48 ff 83 b8 04 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 8b 83 b2 ff <0f> 0b eb 86 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 5e ff ff ff 4c
[   91.000641][  T289] RSP: 0018:ffffc90000a77b28 EFLAGS: 00010293
[   91.007530][  T289] RAX: ffffffff81b75dd5 RBX: ffff88812f7eaab0 RCX: ffff88811d22e2c0
[   91.072000][  T289] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[   91.089850][  T289] RBP: ffffc90000a77b50 R08: 0000000000000003 R09: 0000000000000004
[   91.130451][  T289] R10: dffffc0000000000 R11: fffff5200014ef54 R12: dffffc0000000000
[   91.204976][  T289] R13: 1ffff11025efd55f R14: ffff88812f7eaaf8 R15: 0000000000000000
[   91.277794][  T289] FS:  0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000
[   91.358806][  T289] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   91.415542][  T289] CR2: 00007fde0591c000 CR3: 00000001102d6000 CR4: 00000000003506a0
[   91.620284][  T289] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[   91.628522][  T289] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[   91.638287][  T289] Call Trace:
[   91.641638][  T289]  <TASK>
[   91.648179][  T289]  shmem_rmdir+0x5b/0x90
[   91.652895][  T289]  vfs_rmdir+0x313/0x460
[   91.657192][  T289]  incfs_kill_sb+0x198/0x220
[   91.661824][  T289]  deactivate_locked_super+0xa0/0x100
[   91.672720][  T289]  deactivate_super+0xaf/0xe0
[   91.698059][  T289]  cleanup_mnt+0x45b/0x510
[   91.708142][  T289]  __cleanup_mnt+0x19/0x20
[   91.718225][  T289]  task_work_run+0x127/0x190
[   91.728320][  T289]  do_exit+0xb35/0x2890
[   91.738405][  T289]  ? put_task_struct+0x90/0x90
[   91.744510][  T289]  ? __fdget_pos+0x1f7/0x380
[   91.749294][ T1395] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[   91.758110][ T1396] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[   91.760433][  T289]  ? ksys_write+0x1e4/0x250
[   91.777345][  T289]  ? __ia32_sys_read+0x90/0x90
[   91.782212][  T289]  do_group_exit+0x141/0x310
[   91.786910][  T289]  ? debug_smp_processor_id+0x17/0x20
[   91.792843][  T289]  __x64_sys_exit_group+0x3f/0x40
[   91.799144][  T289]  x64_sys_call+0x832/0x9a0
[   91.799278][ T1401] fuse: Bad value for 'fd'
[   91.803827][  T289]  do_syscall_64+0x4c/0xa0
[   91.813168][  T289]  ? clear_bhb_loop+0x50/0xa0
[   91.818204][  T289]  ? clear_bhb_loop+0x50/0xa0
[   91.822960][  T289]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   91.828961][  T289] RIP: 0033:0x7ff74b794e59
[   91.840203][  T289] Code: Unable to access opcode bytes at RIP 0x7ff74b794e2f.
[   91.848246][  T289] RSP: 002b:00007fff19136898 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
[   91.859807][  T289] RAX: ffffffffffffffda RBX: 00007ff74b82a22a RCX: 00007ff74b794e59
[   91.868117][  T289] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001
[   91.877944][  T289] RBP: 0000000000000009 R08: 0000000000000000 R09: 00007ff74b82a1ca
[   91.886363][  T289] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff19137b50
[   91.944462][  T289] R13: 00007ff74b82a1ca R14: 00005555591db4e8 R15: 00007fff19138c20
[   91.952894][  T289]  </TASK>
[   91.955966][  T289] ---[ end trace e02a577d457966f4 ]---
[   92.002865][  T289] ==================================================================
[   92.010971][  T289] BUG: KASAN: use-after-free in fast_dput+0x1e9/0x290
[   92.017752][  T289] Read of size 4 at addr ffff888134066110 by task syz-executor/289
[   92.025648][  T289] 
[   92.027972][  T289] CPU: 1 PID: 289 Comm: syz-executor Tainted: G        W         syzkaller #0
[   92.036812][  T289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[   92.046874][  T289] Call Trace:
[   92.050150][  T289]  <TASK>
[   92.053078][  T289]  __dump_stack+0x21/0x30
[   92.057418][  T289]  dump_stack_lvl+0x110/0x170
[   92.062104][  T289]  ? show_regs_print_info+0x20/0x20
[   92.067309][  T289]  ? load_image+0x3e0/0x3e0
[   92.071823][  T289]  print_address_description+0x7f/0x2c0
[   92.077382][  T289]  ? fast_dput+0x1e9/0x290
[   92.081804][  T289]  kasan_report+0xf1/0x140
[   92.086228][  T289]  ? fast_dput+0x1e9/0x290
[   92.090648][  T289]  __asan_report_load4_noabort+0x14/0x20
[   92.096290][  T289]  fast_dput+0x1e9/0x290
[   92.100556][  T289]  dput+0x26/0x90
[   92.104198][  T289]  incfs_free_mount_info+0x60/0x200
[   92.109393][  T289]  incfs_kill_sb+0x1b8/0x220
[   92.113988][  T289]  deactivate_locked_super+0xa0/0x100
[   92.119363][  T289]  deactivate_super+0xaf/0xe0
[   92.124043][  T289]  cleanup_mnt+0x45b/0x510
[   92.128464][  T289]  __cleanup_mnt+0x19/0x20
[   92.132888][  T289]  task_work_run+0x127/0x190
[   92.137483][  T289]  do_exit+0xb35/0x2890
[   92.141648][  T289]  ? put_task_struct+0x90/0x90
[   92.146420][  T289]  ? __fdget_pos+0x1f7/0x380
[   92.151015][  T289]  ? ksys_write+0x1e4/0x250
[   92.155516][  T289]  ? __ia32_sys_read+0x90/0x90
[   92.160279][  T289]  do_group_exit+0x141/0x310
[   92.164880][  T289]  ? debug_smp_processor_id+0x17/0x20
[   92.170324][  T289]  __x64_sys_exit_group+0x3f/0x40
[   92.175325][  T289]  x64_sys_call+0x832/0x9a0
[   92.179808][  T289]  do_syscall_64+0x4c/0xa0
[   92.184210][  T289]  ? clear_bhb_loop+0x50/0xa0
[   92.188954][  T289]  ? clear_bhb_loop+0x50/0xa0
[   92.193610][  T289]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   92.199483][  T289] RIP: 0033:0x7ff74b794e59
[   92.203882][  T289] Code: Unable to access opcode bytes at RIP 0x7ff74b794e2f.
[   92.211225][  T289] RSP: 002b:00007fff19136898 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
[   92.219705][  T289] RAX: ffffffffffffffda RBX: 00007ff74b82a22a RCX: 00007ff74b794e59
[   92.227667][  T289] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001
[   92.235622][  T289] RBP: 0000000000000009 R08: 0000000000000000 R09: 00007ff74b82a1ca
[   92.243588][  T289] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff19137b50
[   92.251556][  T289] R13: 00007ff74b82a1ca R14: 00005555591db4e8 R15: 00007fff19138c20
[   92.259516][  T289]  </TASK>
[   92.262521][  T289] 
[   92.264828][  T289] Allocated by task 1374:
[   92.269129][  T289]  __kasan_slab_alloc+0xbd/0xf0
[   92.273968][  T289]  slab_post_alloc_hook+0x4f/0x2b0
[   92.279061][  T289]  kmem_cache_alloc+0xf7/0x260
[   92.283804][  T289]  __d_alloc+0x2d/0x6a0
[   92.287970][  T289]  d_alloc_parallel+0xe2/0x1370
[   92.293510][  T289]  __lookup_slow+0x14c/0x410
[   92.298097][  T289]  lookup_one_len+0x19d/0x2d0
[   92.302763][  T289]  incfs_lookup_dentry+0x60/0xb0
[   92.307687][  T289]  open_or_create_special_dir+0x4f/0x1d0
[   92.313302][  T289]  incfs_mount_fs+0x42f/0x890
[   92.317969][  T289]  legacy_get_tree+0xed/0x190
[   92.322642][  T289]  vfs_get_tree+0x89/0x260
[   92.327308][  T289]  do_new_mount+0x25a/0xa20
[   92.331797][  T289]  path_mount+0x659/0xff0
[   92.336112][  T289]  __se_sys_mount+0x320/0x390
[   92.340945][  T289]  __x64_sys_mount+0xbf/0xd0
[   92.345521][  T289]  x64_sys_call+0x6bf/0x9a0
[   92.350115][  T289]  do_syscall_64+0x4c/0xa0
[   92.354516][  T289]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   92.360389][  T289] 
[   92.362690][  T289] Freed by task 0:
[   92.366429][  T289]  kasan_set_track+0x4a/0x70
[   92.371001][  T289]  kasan_set_free_info+0x23/0x40
[   92.376078][  T289]  ____kasan_slab_free+0x125/0x160
[   92.381173][  T289]  __kasan_slab_free+0x11/0x20
[   92.385920][  T289]  slab_free_freelist_hook+0xc2/0x190
[   92.391274][  T289]  kmem_cache_free+0x100/0x320
[   92.396032][  T289]  __d_free+0x23/0x30
[   92.399993][  T289]  rcu_do_batch+0x532/0xbe0
[   92.404476][  T289]  rcu_core+0x5ee/0xf80
[   92.408732][  T289]  rcu_core_si+0x9/0x10
[   92.412866][  T289]  handle_softirqs+0x250/0x560
[   92.417614][  T289]  __irq_exit_rcu+0x52/0xf0
[   92.422108][  T289]  irq_exit_rcu+0x9/0x10
[   92.426642][  T289]  sysvec_apic_timer_interrupt+0xa9/0xc0
[   92.432260][  T289]  asm_sysvec_apic_timer_interrupt+0x1b/0x20
[   92.438220][  T289] 
[   92.440523][  T289] Last potentially related work creation:
[   92.446241][  T289]  kasan_save_stack+0x3a/0x60
[   92.450992][  T289]  __kasan_record_aux_stack+0xd2/0x100
[   92.456435][  T289]  kasan_record_aux_stack_noalloc+0xb/0x10
[   92.462233][  T289]  call_rcu+0x10b/0xf80
[   92.466375][  T289]  dentry_free+0xbd/0x150
[   92.470684][  T289]  __dentry_kill+0x50a/0x650
[   92.475343][  T289]  dentry_kill+0xc0/0x2a0
[   92.479661][  T289]  dput+0x47/0x90
[   92.483532][  T289]  incfs_free_mount_info+0x60/0x200
[   92.488722][  T289]  incfs_kill_sb+0x1b8/0x220
[   92.493377][  T289]  deactivate_locked_super+0xa0/0x100
[   92.498732][  T289]  deactivate_super+0xaf/0xe0
[   92.503402][  T289]  cleanup_mnt+0x45b/0x510
[   92.507804][  T289]  __cleanup_mnt+0x19/0x20
[   92.512207][  T289]  task_work_run+0x127/0x190
[   92.516777][  T289]  do_exit+0xb35/0x2890
[   92.520946][  T289]  do_group_exit+0x141/0x310
[   92.525528][  T289]  __x64_sys_exit_group+0x3f/0x40
[   92.530558][  T289]  x64_sys_call+0x832/0x9a0
[   92.535049][  T289]  do_syscall_64+0x4c/0xa0
[   92.539467][  T289]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   92.545428][  T289] 
[   92.547735][  T289] Second to last potentially related work creation:
[   92.554557][  T289]  kasan_save_stack+0x3a/0x60
[   92.559233][  T289]  __kasan_record_aux_stack+0xd2/0x100
[   92.564688][  T289]  kasan_record_aux_stack_noalloc+0xb/0x10
[   92.570530][  T289]  call_rcu+0x10b/0xf80
[   92.574678][  T289]  dentry_free+0xbd/0x150
[   92.578990][  T289]  __dentry_kill+0x50a/0x650
[   92.583558][  T289]  shrink_dentry_list+0x38e/0x500
[   92.588564][  T289]  shrink_dcache_parent+0xa9/0x270
[   92.593655][  T289]  d_invalidate+0x113/0x260
[   92.598141][  T289]  proc_invalidate_siblings_dcache+0x298/0x3c0
[   92.604278][  T289]  proc_flush_pid+0x1d/0x20
[   92.608762][  T289]  release_task+0x10c6/0x1200
[   92.613418][  T289]  do_exit+0x19ff/0x2890
[   92.617643][  T289]  do_group_exit+0x141/0x310
[   92.622211][  T289]  get_signal+0x66a/0x1480
[   92.626604][  T289]  arch_do_signal_or_restart+0xdf/0x11c0
[   92.632230][  T289]  exit_to_user_mode_loop+0xa7/0xe0
[   92.637412][  T289]  exit_to_user_mode_prepare+0x87/0xd0
[   92.642860][  T289]  syscall_exit_to_user_mode+0x1a/0x30
[   92.648298][  T289]  do_syscall_64+0x58/0xa0
[   92.652694][  T289]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   92.658569][  T289] 
[   92.660874][  T289] The buggy address belongs to the object at ffff888134066110
[   92.660874][  T289]  which belongs to the cache dentry of size 208
[   92.674491][  T289] The buggy address is located 0 bytes inside of
[   92.674491][  T289]  208-byte region [ffff888134066110, ffff8881340661e0)
[   92.687575][  T289] The buggy address belongs to the page:
[   92.693199][  T289] page:ffffea0004d01980 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x134066
[   92.703426][  T289] flags: 0x4000000000000200(slab|zone=1)
[   92.709053][  T289] raw: 4000000000000200 0000000000000000 0000000400000001 ffff8881001c5c80
[   92.717632][  T289] raw: 0000000000000000 00000000000f000f 00000001ffffffff 0000000000000000
[   92.726209][  T289] page dumped because: kasan: bad access detected
[   92.732597][  T289] page_owner tracks the page as allocated
[   92.738290][  T289] page last allocated via order 0, migratetype Reclaimable, gfp_mask 0x112cd0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY|__GFP_RECLAIMABLE), pid 961, ts 66233125895, free_ts 62976783008
[   92.755892][  T289]  post_alloc_hook+0x192/0x1b0
[   92.760657][  T289]  prep_new_page+0x1c/0x110
[   92.765144][  T289]  get_page_from_freelist+0x2d3a/0x2dc0
[   92.770677][  T289]  __alloc_pages+0x1a2/0x460
[   92.775247][  T289]  new_slab+0xa1/0x4d0
[   92.779306][  T289]  ___slab_alloc+0x381/0x810
[   92.783878][  T289]  __slab_alloc+0x49/0x90
[   92.788194][  T289]  kmem_cache_alloc+0x138/0x260
[   92.793024][  T289]  __d_alloc+0x2d/0x6a0
[   92.797170][  T289]  d_alloc_parallel+0xe2/0x1370
[   92.802000][  T289]  path_openat+0x962/0x2f20
[   92.806485][  T289]  do_filp_open+0x1e2/0x410
[   92.810992][  T289]  do_sys_openat2+0x15e/0x7f0
[   92.815670][  T289]  __x64_sys_openat+0x136/0x160
[   92.820551][  T289]  x64_sys_call+0x219/0x9a0
[   92.825044][  T289]  do_syscall_64+0x4c/0xa0
[   92.829446][  T289] page last free stack trace:
[   92.834109][  T289]  free_unref_page_prepare+0x542/0x550
[   92.839581][  T289]  free_unref_page+0xae/0x540
[   92.844243][  T289]  __free_pages+0x6c/0x100
[   92.848642][  T289]  __free_slab+0xe8/0x1e0
[   92.853057][  T289]  discard_slab+0x29/0x40
[   92.857407][  T289]  __slab_free+0x211/0x290
[   92.861907][  T289]  ___cache_free+0x104/0x120
[   92.866476][  T289]  qlink_free+0x4d/0x90
[   92.870613][  T289]  qlist_free_all+0x5f/0xb0
[   92.875107][  T289]  kasan_quarantine_reduce+0x14a/0x170
[   92.880572][  T289]  __kasan_slab_alloc+0x2f/0xf0
[   92.885403][  T289]  slab_post_alloc_hook+0x4f/0x2b0
[   92.890499][  T289]  kmem_cache_alloc+0xf7/0x260
[   92.895241][  T289]  getname_flags+0xb9/0x500
[   92.899727][  T289]  getname+0x19/0x20
[   92.903781][  T289]  do_sys_openat2+0xeb/0x7f0
[   92.908355][  T289] 
[   92.910659][  T289] Memory state around the buggy address:
[   92.916266][  T289]  ffff888134066000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   92.924333][  T289]  ffff888134066080: fb fb fb fb fb fb fb fb fb fb fc fc fc fc fc fc
[   92.932387][  T289] >ffff888134066100: fc fc fa fb fb fb fb fb fb fb fb fb fb fb fb fb
[   92.940431][  T289]                          ^
[   92.944997][  T289]  ffff888134066180: fb fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc
[   92.953124][  T289]  ffff888134066200: fc fc fc fc fa fb fb fb fb fb fb fb fb fb fb fb
[   92.961165][  T289] ==================================================================
[   92.969205][  T289] Disabling lock debugging due to kernel taint
[   92.976601][  T289] ------------[ cut here ]------------
[   92.982288][  T289] WARNING: CPU: 1 PID: 289 at fs/dcache.c:769 fast_dput+0x210/0x290
[   92.987055][ T1363] loop0: detected capacity change from 0 to 131072
[   92.990283][  T289] Modules linked in:
[   92.990296][  T289] CPU: 1 PID: 289 Comm: syz-executor Tainted: G    B   W         syzkaller #0
[   93.009560][  T289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[   93.019639][  T289] RIP: 0010:fast_dput+0x210/0x290
[   93.024700][  T289] Code: e5 f2 ff e9 46 fe ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 99 fe ff ff 48 89 df e8 ea e4 f2 ff e9 8c fe ff ff e8 00 67 b3 ff <0f> 0b e9 0b ff ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c e4 fe ff
[   93.044413][  T289] RSP: 0018:ffffc90000a77b40 EFLAGS: 00010293
[   93.050483][  T289] RAX: ffffffff81b67a60 RBX: ffff888134066110 RCX: ffff88811d22e2c0
[   93.058493][  T289] RDX: 0000000000000000 RSI: 00000000ffffff80 RDI: 0000000000000001
[   93.066544][  T289] RBP: ffffc90000a77b70 R08: 0000000000000003 R09: 0000000000000004
[   93.066617][   T30] kauditd_printk_skb: 3 callbacks suppressed
[   93.066627][   T30] audit: type=1400 audit(1781352654.005:332): avc:  denied  { read } for  pid=83 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1
[   93.074654][  T289] R10: dffffc0000000000 R11: fffff5200014ef58 R12: 00000000ffffff80
[   93.074670][  T289] R13: dffffc0000000000 R14: ffff888134066168 R15: 1ffff1102680cc2d
[   93.074682][  T289] FS:  0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000
[   93.102489][   T30] audit: type=1400 audit(1781352654.005:333): avc:  denied  { search } for  pid=83 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   93.110388][  T289] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   93.110402][  T289] CR2: 00007fe2c7f26ff8 CR3: 000000010dc32000 CR4: 00000000003506a0
[   93.110417][  T289] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[   93.118726][   T30] audit: type=1400 audit(1781352654.005:334): avc:  denied  { write } for  pid=83 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   93.127324][  T289] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[   93.127340][  T289] Call Trace:
[   93.127344][  T289]  <TASK>
[   93.127350][  T289]  dput+0x26/0x90
[   93.192475][   T30] audit: type=1400 audit(1781352654.005:335): avc:  denied  { add_name } for  pid=83 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   93.200329][  T289]  incfs_free_mount_info+0x60/0x200
[   93.200353][  T289]  incfs_kill_sb+0x1b8/0x220
[   93.230783][   T30] audit: type=1400 audit(1781352654.005:336): avc:  denied  { create } for  pid=83 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   93.235860][  T289]  deactivate_locked_super+0xa0/0x100
[   93.235884][  T289]  deactivate_super+0xaf/0xe0
[   93.240669][   T30] audit: type=1400 audit(1781352654.005:337): avc:  denied  { append open } for  pid=83 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   93.260875][  T289]  cleanup_mnt+0x45b/0x510
[   93.260904][  T289]  __cleanup_mnt+0x19/0x20
[   93.260918][  T289]  task_work_run+0x127/0x190
[   93.297787][   T30] audit: type=1400 audit(1781352654.005:338): avc:  denied  { getattr } for  pid=83 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   93.298826][  T289]  do_exit+0xb35/0x2890
[   93.334483][  T289]  ? put_task_struct+0x90/0x90
[   93.339240][  T289]  ? __fdget_pos+0x1f7/0x380
[   93.343846][  T289]  ? ksys_write+0x1e4/0x250
[   93.348346][  T289]  ? __ia32_sys_read+0x90/0x90
[   93.353118][  T289]  do_group_exit+0x141/0x310
[   93.358063][  T289]  ? debug_smp_processor_id+0x17/0x20
[   93.363451][  T289]  __x64_sys_exit_group+0x3f/0x40
[   93.368472][  T289]  x64_sys_call+0x832/0x9a0
[   93.372987][  T289]  do_syscall_64+0x4c/0xa0
[   93.377542][  T289]  ? clear_bhb_loop+0x50/0xa0
[   93.382577][  T289]  ? clear_bhb_loop+0x50/0xa0
[   93.387383][  T289]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   93.393302][  T289] RIP: 0033:0x7ff74b794e59
[   93.397718][  T289] Code: Unable to access opcode bytes at RIP 0x7ff74b794e2f.
[   93.405442][  T289] RSP: 002b:00007fff19136898 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
[   93.413868][  T289] RAX: ffffffffffffffda RBX: 00007ff74b82a22a RCX: 00007ff74b794e59
[   93.422094][  T289] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001
[   93.430091][  T289] RBP: 0000000000000009 R08: 0000000000000000 R09: 00007ff74b82a1ca
[   93.438178][  T289] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff19137b50
[   93.446177][  T289] R13: 00007ff74b82a1ca R14: 00005555591db4e8 R15: 00007fff19138c20
[   93.454202][  T289]  </TASK>
[   93.457222][  T289] ---[ end trace e02a577d457966f5 ]---
[   93.632352][  T731] usb 1-1: unit 4 not found!
[   93.640808][  T731] usb 1-1: USB disconnect, device number 8
[   93.872522][  T384] udevd[384]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   93.932908][  T329] device bridge_slave_1 left promiscuous mode
[   93.939077][  T329] bridge0: port 2(bridge_slave_1) entered disabled state
[   93.946576][  T329] device bridge_slave_0 left promiscuous mode
[   93.952738][  T329] bridge0: port 1(bridge_slave_0) entered disabled state
[   93.960532][  T329] device veth1_macvtap left promiscuous mode
[   93.966716][  T329] device veth0_vlan left promiscuous mode