last executing test programs:

26.988700654s ago: executing program 1 (id=144):
prlimit64(0x0, 0x1, &(0x7f0000000280)={0x8000000000000085, 0x20000000000000}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000340)={0x0, <r1=>0x0}, &(0x7f0000000080)=0xc)
quotactl$Q_GETQUOTA(0xffffffff80000700, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, r1, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000140)={{{@in6, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@multicast2}, 0x0, @in=@initdev}}, &(0x7f0000000040)=0xe8)
setresuid(r1, r1, r2)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000100)='westwood', 0x8)
mkdir(&(0x7f0000000000)='./config\x00', 0x1ff)
mount(&(0x7f0000000100)=@filename='none\x00', &(0x7f0000000c40)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u/file0\x00', &(0x7f0000000bc0)='cgroup2\x00', 0x0, &(0x7f0000000d80)='\x00\xa2\xc7\xc4\x18\x89\x96\x89*\xca\x8f\x87\xd3\fe\x1c\x8c\xdf\xe6\x8f\x17)=h)\x95fk,\x17{\xaf\x87\xb4\xdcUqd\xd1{\xee\x00F\xbf\x18\xf9\x93.\xd4{\xdd(\x80\x10\xd1-@\x9b\xad\x86\xa7^D\x984\tsw')
mkdir(&(0x7f0000000500)='./config/usb_gadget/g1\x00', 0x1ff)
mkdir(&(0x7f0000000400)='./file0\x00', 0x180)
mkdir(&(0x7f0000000700)='./config/usb_gadget/g1\x00', 0x1ff)
getsockname(r0, &(0x7f0000000380)=@ethernet={0x0, @broadcast}, &(0x7f00000004c0)=0x80)
symlink(&(0x7f00000002c0)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/ss/h\x00', &(0x7f0000000440)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h/file0\x00')
symlink(&(0x7f0000000b00)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', &(0x7f0000000c00)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/ss/h\x00')
mkdir(&(0x7f0000000d00)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u\x00', 0x1ff)
syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f0000000580)='./file0\x00', 0x0, &(0x7f00000000c0)={[{@jqfmt_vfsv1}, {@errors_remount}]}, 0x1, 0x52f, &(0x7f00000005c0)="$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")
mkdir(&(0x7f0000000b40)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h/file0\x00', 0xfa)
mkdir(&(0x7f0000000f00)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0x1ff)
r4 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
write(r4, 0x0, 0x0)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f0, &(0x7f0000001040)={'ip_vti0\x00', &(0x7f0000000e00)={'syztnl1\x00', 0x0, 0x2000, 0x200da5d85240a79d, 0x0, 0x0, {{0x15, 0x4, 0x0, 0x4, 0x54, 0x68, 0x0, 0x82, 0x2b, 0x0, @multicast1, @empty, {[@timestamp_addr={0x44, 0x34, 0x14, 0x1, 0xc, [{@multicast1, 0x3}, {@remote, 0x1000}, {@multicast1, 0x738}, {@rand_addr=0x64010101, 0x3}, {@loopback, 0x7fffffff}, {@multicast2, 0x4}]}, @lsrr={0x83, 0xb, 0xe, [@empty, @initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}}})
write$binfmt_script(r4, 0x0, 0x0)
symlink(&(0x7f0000001000)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u\x00', &(0x7f0000001100)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h/u\x00')
symlink(&(0x7f0000001600)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', &(0x7f0000001700)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/ss/h\x00')
symlink(&(0x7f0000000300)='./config/usb_gadget/g1/functions/uvc.usb0\x00', &(0x7f0000001900)='./config/usb_gadget/g1/configs/c.1/uvc.usb0\x00')
write(0xffffffffffffffff, 0x0, 0x0)

25.835849549s ago: executing program 1 (id=154):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000340)={0x0, <r1=>0x0, <r2=>0x0}, &(0x7f0000000040)=0xc)
syz_mount_image$exfat(&(0x7f0000000400), &(0x7f0000000240)='./file0\x00', 0x2000084c, &(0x7f0000000440)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,uid=', @ANYRESHEX=r1, @ANYBLOB=',dmask=00000000000000000000152,fmask=00000000000000000000006,gid=', @ANYRESHEX=r2, @ANYBLOB=',\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRESHEX=r0, @ANYBLOB="2c646973636172642c00fb278330ab3b4884d36adf6908d11f57832035e96a1513231140da182ca77aeedc492bbc501d94f854a7e26909bde6e698d72a15ec808a86c25d"], 0x81, 0x14f3, &(0x7f0000001580)="$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")
syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x300f401, 0x0, 0x2, 0x0, 0x0) (fail_nth: 1)

25.514655894s ago: executing program 1 (id=157):
r0 = socket$netlink(0x10, 0x3, 0x0)
syz_emit_ethernet(0xf4, &(0x7f0000000240)={@link_local, @link_local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x0, 0xe6, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x6558, 0x3d, 0x0, [0x0, 0x0], "a260e1857bcbb0fd743c1fec217d6f84c01ce9946e7c2f635fbe39cac41925b0c7c86ebf255b9e853a1eaa3a4df43bc0a7b69a10d2e47e175a6eb2a5d7"}, {0x0, 0x0, 0x0, 0x0, 0x11}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [0xf], "a4e2bc9745cd7dea89640e0a3fc2c051949add5df265c6524377344179e6db63897c6430a64b4f8e38585144d4938f26247a7a15750e07e9ada9aebd54d0e4112815703306a9c115ca3e37"}, {0x8, 0x88be, 0x0, {{}, 0x1, {0x7}}}}}}}}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22}, 0x1c)
r2 = socket$netlink(0x10, 0x3, 0x8000000004)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e23, 0xc, @mcast2, 0x8f}, 0x1c)
writev(r2, &(0x7f0000000180)=[{&(0x7f0000000280)="580000001500add427323b472545b45602117fffffff81000e224e217f000001925aa80020007b00090080007f000001e809001600ff0000f03ac7e78f0000000200000000a80c41668b6f220101c9c8888334f400000000", 0x58}], 0x1)
r3 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001940)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PBURST={0x8, 0x7, 0x197c}, @TCA_TBF_PARMS={0x28, 0x1, {{0x2, 0x0, 0x0, 0x73c1, 0x4ed, 0x8}, {0xff, 0x0, 0x7, 0xa3ff, 0x1, 0x100}, 0xfff, 0x9, 0xdd0}}]}}]}, 0x60}}, 0x4c840)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="300000001d0001"], 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000)

25.408177719s ago: executing program 1 (id=158):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000550001002bbd700001dcdf2507000000", @ANYRES32=r1, @ANYBLOB="060001"], 0x38}, 0x1, 0x0, 0x0, 0x2008000}, 0x40080c0)
syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000000)='./file1\x00', 0x1000488, &(0x7f0000000040)=ANY=[@ANYBLOB="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", @ANYRESDEC=0x0], 0x1, 0x232, &(0x7f0000000640)="$eJzs2r+LHGUYB/BnzsSLFy574i8SEF+0UJshd7VFDklAXFA0K0RBMvFmddlx99hZDlbEbKWtf4K1WNoJktLmGv8CC7trrkwhjmz21GzYFEHNJfHzaeaBd77M+zLvvDzFHLz29af9bp13i3GsZFmsXIhp3MxiI1biT9N49eUrPz3/7pX339xuty++k9Kl7cubWymlMy/8+MHn3714Y3z6ve/P/LAa+xsfHhxu/br/7P7Zg98vf9KrU69Og+E4FenacDgurlVl2unV/Tylt6uyqMvUG9TlaGG8Ww13dyepGOysr+2OyrpOxWCS+uUkjYdpPJqk4uOiN0h5nqf1teCf6Hx7s2nisDl5NZqmeeKbOH0j1n+JVmRPpuypC9kzV7PnptnZw6ZpHfdU+U94//9vtx3qpyKqr/Y6e535dT6+3Y1eVFHG+WjFbzHbJkfm9aU32hfPp1s24svq+lH++l7nscX8ZrRiY3l+c55Pi/nVWIs4GXGU34pWPL08v7U0fypeeem25+fRip8/imFUsROz7N/5LzZTev2t9h35c7fuAwB41OTpL0v7tzy/2/g8fw/94R391Yk4d+J4105EPfmsX1RVOXpki9kqH4BpKP7NYjXuKZVFTGf74IGY/OMPx6d3rMcS98niOQkAAAAAAAAAAMDD4n79gQsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHA3fwQAAP//rHDMJg==")
r2 = inotify_init()
inotify_add_watch(r2, &(0x7f0000000000)='.\x00', 0x400017e)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mount$incfs(&(0x7f00000007c0)='.\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000000), 0xc002, 0x0)
chdir(&(0x7f00000003c0)='./bus\x00')
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/memory.force_empty\x00', 0x2, 0x0)
fcntl$setstatus(r2, 0x4, 0x2c00)
write(r3, &(0x7f00000002c0)='0', 0x1)
getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000400)={{{@in=@dev, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in6=@private0}, 0x0, @in6=@private0}}, &(0x7f0000000500)=0xe8)
stat(&(0x7f0000000380)='./file1\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f0000000200)='./bus\x00', 0x1000, &(0x7f0000000880)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id', 0x3d, r4}, 0x2c, {'group_id', 0x3d, r5}, 0x2c, {[{@default_permissions}, {@blksize={'blksize', 0x3d, 0x1800}}, {@max_read={'max_read', 0x3d, 0x3}}, {@max_read={'max_read', 0x3d, 0x6}}, {@default_permissions}, {@allow_other}, {@default_permissions}, {@blksize={'blksize', 0x3d, 0x1e00}}, {@max_read={'max_read', 0x3d, 0x3ff}}], [{@smackfstransmute={'smackfstransmute', 0x3d, '#-@%^@:)-${'}}, {@fscontext={'fscontext', 0x3d, 'unconfined_u'}}]}}, 0x1, 0x0, &(0x7f0000000bc0)="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")

25.355066722s ago: executing program 1 (id=161):
socket$inet6_udp(0xa, 0x2, 0x0)
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
read(r0, 0x0, 0x500)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r0, 0x8040942d, &(0x7f0000000180))
syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000080)="2ef26f0f3566b842000f00d8b805000000b9a00000000f01c166baf80cb8b7351187ef66bafc0cb0000f01df0fde460b0f0130670f01c28fe868cfe20a", 0x3d}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000a23000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000000)="b897008ec0dfedb864000f00d866b9800000c00f326635008000000f30ba4300ed0f00df0f009b52000f2056baf80c66b8e5e75f8266efbafc0cec0fd54651", 0x3f}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0100000004000000a27f00000200000001000000", @ANYRES32=0x1, @ANYBLOB="f3ffffffffffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000fdffffff00"/28], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r4, <r5=>0xffffffffffffffff}, &(0x7f0000000600), &(0x7f00000001c0)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000001000007b8af8ff00000000bfa2000000000000b300ffffb703000008000000b7040000030000008500000300000000950100"/65], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r7=>0x0})
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r8, r7, 0x25, 0x0, @val=@perf_event={0x200}}, 0x18)
r9 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/uac1.usb0/p_volume_max\x00', 0x1, 0x0)
write(r9, &(0x7f0000000280)='10', 0x2)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r9, 0x89f3, &(0x7f0000000580)={'tunl0\x00', &(0x7f00000004c0)={'erspan0\x00', r7, 0x20, 0x20, 0x8, 0x7, {{0xd, 0x4, 0x1, 0x2, 0x34, 0x64, 0x0, 0x8, 0x4, 0x0, @empty, @rand_addr=0x64010100, {[@cipso={0x86, 0x10, 0x3, [{0x5, 0xa, "0d2bcc70505c0330"}]}, @generic={0x86, 0xd, "4065fa2e43aaaeef2e5e73"}]}}}}})
syz_emit_ethernet(0xfdef, &(0x7f0000000280)=ANY=[@ANYBLOB="aaaaaaaaaaaa1780c206050e86dd6018232500002c00fe2d5621b55eb5cb45000000000000000000000000aa00"/54], 0x0)
fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x3, 0x0, 0x0, 0x0)
syz_emit_ethernet(0x42, &(0x7f0000000200)=ANY=[], 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000008000000510000009500000000000000"], &(0x7f0000000900)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

25.240211637s ago: executing program 1 (id=163):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000020000000400000005"], 0x48)
r1 = memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x2c, r2, 0x4, 0x70bd2b, 0x25dfdbfb, {}, [@ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0xc9}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0xf9}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x81}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008004}, 0xa0)
r3 = dup(r1)
r4 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000000)={0x1, 0x6}, 0x4)
setsockopt$packet_fanout_data(r4, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x30, 0x0, 0x0, 0xfffff00c}, {0x6, 0x0, 0x5, 0x12e}]}, 0x10)
r5 = socket(0xa, 0x3, 0xff)
connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e21, 0x10000002, @local, 0x800100}, 0x1c)
setsockopt$inet6_opts(r5, 0x29, 0x39, &(0x7f0000000240)=ANY=[@ANYBLOB="071404"], 0xa8)
sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)=@getqdisc={0x28, 0x26, 0x705, 0x70bf2b, 0x6, {0x0, 0x0, 0x0, 0x0, {0xffff, 0xffe0}, {0xc, 0x78bbe9f1cfa0a994}, {0xfff2, 0x7}}, [{0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x44080}, 0x20004000)
write$binfmt_elf32(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="7f454c464a030103ff0700000000000002000300040000003e0300006c00a926b87d61920c6b0000fe03200001"], 0x79)
execveat(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000004c0)={'wlan0\x00', <r7=>0x0})
sendmsg$NL80211_CMD_AUTHENTICATE(r5, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)={0xc0, 0x0, 0x0, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1f}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x209}], @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @key_params=[@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x24, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "cea120fb634152bd3172eeb991"}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "b2988f4c1c"}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2a}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xfffff65a}], @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}]}, 0xc0}, 0x1, 0x0, 0x0, 0x9881}, 0x0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x15, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000100850000000100000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000010000850000008200000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r9)
sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r10, @ANYBLOB="0b062dbd700000000000300000000a0001007770616e30000071"], 0x20}}, 0x0)
openat$selinux_policy(0xffffff9c, 0x0, 0x0, 0x0)
r11 = gettid()
timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r11}, &(0x7f0000000000)=<r12=>0x0)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
timer_settime(r12, 0x1, &(0x7f0000000040), 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
keyctl$chown(0x4, 0x0, 0xee01, 0x0)
bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000a80)={r8, 0x0, 0x0}, 0x10)

25.239878007s ago: executing program 32 (id=163):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000020000000400000005"], 0x48)
r1 = memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x2c, r2, 0x4, 0x70bd2b, 0x25dfdbfb, {}, [@ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0xc9}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0xf9}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x81}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008004}, 0xa0)
r3 = dup(r1)
r4 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000000)={0x1, 0x6}, 0x4)
setsockopt$packet_fanout_data(r4, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x30, 0x0, 0x0, 0xfffff00c}, {0x6, 0x0, 0x5, 0x12e}]}, 0x10)
r5 = socket(0xa, 0x3, 0xff)
connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e21, 0x10000002, @local, 0x800100}, 0x1c)
setsockopt$inet6_opts(r5, 0x29, 0x39, &(0x7f0000000240)=ANY=[@ANYBLOB="071404"], 0xa8)
sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)=@getqdisc={0x28, 0x26, 0x705, 0x70bf2b, 0x6, {0x0, 0x0, 0x0, 0x0, {0xffff, 0xffe0}, {0xc, 0x78bbe9f1cfa0a994}, {0xfff2, 0x7}}, [{0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x44080}, 0x20004000)
write$binfmt_elf32(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="7f454c464a030103ff0700000000000002000300040000003e0300006c00a926b87d61920c6b0000fe03200001"], 0x79)
execveat(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000004c0)={'wlan0\x00', <r7=>0x0})
sendmsg$NL80211_CMD_AUTHENTICATE(r5, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)={0xc0, 0x0, 0x0, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1f}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x209}], @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @key_params=[@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x24, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "cea120fb634152bd3172eeb991"}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "b2988f4c1c"}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2a}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xfffff65a}], @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}]}, 0xc0}, 0x1, 0x0, 0x0, 0x9881}, 0x0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x15, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000100850000000100000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000010000850000008200000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r9)
sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r10, @ANYBLOB="0b062dbd700000000000300000000a0001007770616e30000071"], 0x20}}, 0x0)
openat$selinux_policy(0xffffff9c, 0x0, 0x0, 0x0)
r11 = gettid()
timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r11}, &(0x7f0000000000)=<r12=>0x0)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
timer_settime(r12, 0x1, &(0x7f0000000040), 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
keyctl$chown(0x4, 0x0, 0xee01, 0x0)
bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000a80)={r8, 0x0, 0x0}, 0x10)

24.53970882s ago: executing program 5 (id=164):
syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000e, &(0x7f0000000140)={[{@jqfmt_vfsold}, {@jqfmt_vfsv0}, {@min_batch_time={'min_batch_time', 0x3d, 0x3ff}}, {@noload}, {@grpjquota_path={'grpjquota', 0x3d, '.'}}, {@noblock_validity}, {@resgid}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x400000}}, {@errors_continue}]}, 0xfa, 0x493, &(0x7f0000000f00)="$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")
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
r0 = inotify_init1(0x80800)
inotify_add_watch(r0, &(0x7f0000000200)='.\x00', 0x44000160)
openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0/file0\x00', 0x4000, 0x104)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x442, 0x0)
syz_clone(0x2300, 0x0, 0x0, 0x0, 0x0, 0x0)
readv(r0, &(0x7f0000003400)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1)
quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000280)='./file0/file0\x00')

24.352318119s ago: executing program 5 (id=173):
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0)
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000000)={0x0, 0x1, 0x6, @random="790c7edd3d8d"}, 0x10)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0)
r1 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0xc840)
sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=@newtfilter={0x54, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x6}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0x28, 0x2, [@TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0xb709, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4084}, 0x24040084)
r3 = syz_open_procfs(0x0, &(0x7f0000000380)='mounts\x00')
r4 = epoll_create(0x10000)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000040)={0x9000000d})
recvmmsg$unix(r1, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)=""/219, 0xdb}], 0x1}}], 0x1, 0x60, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@newtfilter={0x24, 0x2c, 0x20, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x1, 0x7}, {0x4, 0x10}, {0x5, 0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x20040098}, 0xc8a1)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[], 0xc3}, 0x1, 0x100000000000000, 0x0, 0x2000}, 0x40400c0)
r5 = socket(0x10, 0x3, 0x0)
userfaultfd(0x80000)
sendmmsg(r5, &(0x7f0000000000), 0x4000000000001f2, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0)
pipe(&(0x7f0000000140))
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r6, &(0x7f0000000380)={0xa, 0x4e21, 0x1, @loopback, 0x400014}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000002c0), 0x4)

23.158689095s ago: executing program 5 (id=183):
mmap$KVM_VCPU(&(0x7f0000a57000/0x2000)=nil, 0x0, 0x1000001, 0x2010, 0xffffffffffffffff, 0x0)
r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$selinux_load(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf908"], 0x65)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$nl_xfrm(0x10, 0x3, 0x6)
pwrite64(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0xfecc)
openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0)
syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file0\x00', 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',\x00'], 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x6, 0x0)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x1, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x4000087, 0x2, 0x0)
syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000080)='./bus\x00', 0x41c18, &(0x7f0000000200)=ANY=[@ANYBLOB="61636c2c757365725f78617474722c6e6f61636c2c63616368655f73747261746567793d64697361626c65642c6e6f757365725f78617474722c6e6f61636c2c00d4a87b439fa421753f060fe37a330d2dfca47c4e52e78d71fc65b972e2bb306bb4a29b1fe3019842462c5fee84a2e6eb90d57b8725e3a2eff0b0b471dac5c01bee53cd8d"], 0xfe, 0x17d, &(0x7f0000000340)="$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")
r3 = openat(0xffffffffffffff9c, 0x0, 0x80000, 0x40)
ioctl$FS_IOC_FIEMAP(r3, 0xc020660b, &(0x7f00000004c0)=ANY=[])
r4 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000840)={0x0, {0x2, 0x0, @empty}, {0x4, 0x0, @loopback}, {0x2, 0x0, @remote}, 0x184, 0x0, 0x0, 0xfdffffffffffffff, 0x0, &(0x7f0000000180)='lo\x00'})
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
bpf$ITER_CREATE(0x21, 0x0, 0x0)
newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$sock_inet_SIOCADDRT(r5, 0x890b, &(0x7f0000000080)={0x0, {0x2, 0x0, @multicast2}, {0x2, 0x0, @broadcast}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f4})
r6 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0)
r7 = fsmount(r6, 0x0, 0x80)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r1, r7, 0x16, 0x0, @void}, 0x10)
socket$inet_tcp(0x2, 0x1, 0x0)

23.109196978s ago: executing program 33 (id=183):
mmap$KVM_VCPU(&(0x7f0000a57000/0x2000)=nil, 0x0, 0x1000001, 0x2010, 0xffffffffffffffff, 0x0)
r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$selinux_load(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf908"], 0x65)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$nl_xfrm(0x10, 0x3, 0x6)
pwrite64(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0xfecc)
openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0)
syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file0\x00', 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',\x00'], 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x6, 0x0)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x1, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x4000087, 0x2, 0x0)
syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000080)='./bus\x00', 0x41c18, &(0x7f0000000200)=ANY=[@ANYBLOB="61636c2c757365725f78617474722c6e6f61636c2c63616368655f73747261746567793d64697361626c65642c6e6f757365725f78617474722c6e6f61636c2c00d4a87b439fa421753f060fe37a330d2dfca47c4e52e78d71fc65b972e2bb306bb4a29b1fe3019842462c5fee84a2e6eb90d57b8725e3a2eff0b0b471dac5c01bee53cd8d"], 0xfe, 0x17d, &(0x7f0000000340)="$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")
r3 = openat(0xffffffffffffff9c, 0x0, 0x80000, 0x40)
ioctl$FS_IOC_FIEMAP(r3, 0xc020660b, &(0x7f00000004c0)=ANY=[])
r4 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000840)={0x0, {0x2, 0x0, @empty}, {0x4, 0x0, @loopback}, {0x2, 0x0, @remote}, 0x184, 0x0, 0x0, 0xfdffffffffffffff, 0x0, &(0x7f0000000180)='lo\x00'})
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
bpf$ITER_CREATE(0x21, 0x0, 0x0)
newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$sock_inet_SIOCADDRT(r5, 0x890b, &(0x7f0000000080)={0x0, {0x2, 0x0, @multicast2}, {0x2, 0x0, @broadcast}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f4})
r6 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0)
r7 = fsmount(r6, 0x0, 0x80)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r1, r7, 0x16, 0x0, @void}, 0x10)
socket$inet_tcp(0x2, 0x1, 0x0)

13.277122542s ago: executing program 3 (id=210):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/memory.force_empty\x00', 0x2, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
write(r0, &(0x7f00000002c0)='0', 0x1)
syz_usb_connect(0x2, 0x0, 0x0, 0x0)
read$FUSE(r0, 0x0, 0x0)

13.276831413s ago: executing program 4 (id=211):
socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b70500000000000061103000000000000fa00000000000009500000000000000"], &(0x7f00000002c0)='GPL\x00', 0x7, 0xbc, &(0x7f0000000300)=""/188, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000003c0), 0x8, 0x10, &(0x7f0000000080)={0x0, 0x0, 0x1}, 0x10}, 0x28)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./debug\x00', &(0x7f0000000100)='debugfs\x00', 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x400000000008d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0)
mount$binderfs(0x0, &(0x7f00000006c0)='./binderfs\x00', 0x0, 0x20, &(0x7f0000000a80)=ANY=[])
openat(0xffffffffffffff9c, &(0x7f0000000140)='./debug/kvm/mmu_shadow_zapped\x00', 0xf40, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
pipe2$9p(&(0x7f0000000080), 0x800)
socket$nl_route(0x10, 0x3, 0x0)
syz_mount_image$exfat(&(0x7f00000005c0), &(0x7f0000000140)='./bus\x00', 0x3008014, &(0x7f0000000600)=ANY=[], 0x1, 0x14fe, &(0x7f00000020c0)="$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")
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000180)='./bus\x00', 0xa016, 0x0, 0x1, 0x0, &(0x7f0000000040))
rename(&(0x7f0000000280)='./file0/file0\x00', &(0x7f00000001c0)='./debug\x00')

9.889370953s ago: executing program 4 (id=214):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/module/kvm/parameters/nx_huge_pages\x00', 0x2, 0x0)
read$FUSE(r0, &(0x7f0000001280)={0x2020}, 0xfffffca7)
ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000000340)={0xd, "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"})
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'erspan0\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000140)=@newlink={0x48, 0x10, 0xc3b, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, 0x0, 0x6200}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x21f3}, @IFLA_GRE_ENCAP_TYPE={0x6}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x180}, 0x40080c0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200009b1aecb60000000000000000850000007500000095"], 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1809000000000000000000000000000085000000500000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r4}, 0xc)
syz_mount_image$vfat(&(0x7f0000000300), &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYRESOCT=r3], 0x1, 0x36b, &(0x7f0000000a00)="$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")
socket$unix(0x1, 0x1, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0), 0x240, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r5, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "d607f8f9ff0f00000000000023e7eecdf40c363423eb3d259266ec9c37865c6c1a4640ce1b22bb3327ef4f001d34c09f39c3539e4f8d3ee0878ae95bc7f52363c468b257ff3e24852548deb01efd54f11ed2c41d078b9cf1fc8f72566153c97e4af37017ea6b16b694bb4a6e4606c3fb19d1d2bd3c8c4e97da2213f9d5c3b90400000000000000c279f03558083906666827d61dcc3a633bffff250b5a293e3877adc1660edbc9a0307a25720a170e7f5670e419dc44febf7ddc73fd4a5a0b6c28665f7f46c7084e17c809268103a2584ab40a68e528329d97afc3612e325c1eb4a3ab2e156a97444800", "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"})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r6, 0x4068aea3, &(0x7f0000000080)={0xa8, 0x0, 0x1})
sendmsg$nl_xfrm(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001400"], 0xb8}, 0x1, 0x0, 0x0, 0x404c830}, 0x987a3a9f32358a4c)

9.889206183s ago: executing program 0 (id=215):
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, 0x0}], 0x1, 0x14, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0)
getsockopt(r0, 0x28, 0x1, 0x0, &(0x7f0000000000))

9.860941664s ago: executing program 3 (id=217):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1)
syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./bus\x00', 0x3e1c9b, 0x0, 0x0, 0x0, &(0x7f0000000140))
mount$overlay(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f0000000b80), 0x4008, &(0x7f00000002c0))
r0 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./file0\x00', 0x28000, 0x1cd)
ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000000)={0x200, 0x4, 0x0, 0x8, 0x6})

9.856972654s ago: executing program 0 (id=218):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000c00)={[{@grpid}, {@usrquota}, {@nodioread_nolock}, {@test_dummy_encryption}, {@lazytime}, {@nojournal_checksum}, {@minixdf}, {@bh}]}, 0x7, 0xbaf, &(0x7f00000017c0)="$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")
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002780)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
read$FUSE(r0, &(0x7f0000005b00)={0x2020, 0x0, 0x0, <r1=>0x0, <r2=>0x0}, 0x2020)
chown(&(0x7f0000000080)='./file1\x00', r1, r2) (fail_nth: 2)

8.124559516s ago: executing program 0 (id=219):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000c00)={[{@grpid}, {@usrquota}, {@nodioread_nolock}, {@test_dummy_encryption}, {@lazytime}, {@nojournal_checksum}, {@minixdf}, {@bh}]}, 0x7, 0xbaf, &(0x7f00000017c0)="$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")
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002780)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
read$FUSE(r0, &(0x7f0000005b00)={0x2020, 0x0, 0x0, <r1=>0x0, <r2=>0x0}, 0x2020)
socket$nl_route(0x10, 0x3, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="020009d34208b778474e00000400000008000000", @ANYRES32=0x1, @ANYBLOB="0100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="050000000200"/28], 0x50)
unshare(0x20000280)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r3, 0xae03, 0xb9)
syz_open_procfs(0x0, &(0x7f0000000180)='map_files\x00')
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r4 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2)
pipe2(&(0x7f0000000300), 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_mount_image$erofs(&(0x7f0000000080), &(0x7f0000000100)='./file1\x00', 0x3008003, &(0x7f0000002ac0)=ANY=[], 0x2, 0x200, &(0x7f00000002c0)="$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")
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0x64}}, 0x8010)
sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000)
recvmmsg(r8, &(0x7f0000004040)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x7}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000c80)=""/119, 0x77}, 0xff}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000e00)=""/255, 0xff}, 0x80}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001640)=""/201, 0xc9}, 0x2}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001c40)=""/32, 0xffffffd7}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003f80)=""/144, 0x90}, 0x8000}], 0x4000000000002ba, 0x40000002, 0x0)
chown(&(0x7f00000004c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, r2)

8.124071186s ago: executing program 2 (id=220):
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x208002, 0xc0)
mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x163)
openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async)
r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f00000000c0)={{0xa, 0x4e20, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0xa, 0x4e20, 0xff, @local, 0x100}, 0xffffffffffffffff, {[0x5, 0x80, 0x22200000, 0x9189, 0x1ce, 0x9, 0x9, 0x6]}}, 0x5c) (async)
setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f00000000c0)={{0xa, 0x4e20, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0xa, 0x4e20, 0xff, @local, 0x100}, 0xffffffffffffffff, {[0x5, 0x80, 0x22200000, 0x9189, 0x1ce, 0x9, 0x9, 0x6]}}, 0x5c)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r1)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000002c0)={'tunl0\x00', &(0x7f00000001c0)={'syztnl2\x00', <r3=>0x0, 0x0, 0x20, 0x80000000, 0x4, {{0x2b, 0x4, 0x0, 0x1, 0xac, 0x66, 0x0, 0x7, 0x29, 0x0, @rand_addr=0x64010101, @remote, {[@generic={0x88, 0xf, "ab9fddcba9b46b6b9631675900"}, @noop, @ra={0x94, 0x4}, @cipso={0x86, 0x43, 0x3, [{0x0, 0x7, "9b9ccd35ba"}, {0x0, 0x8, "fc29c13c6fcf"}, {0x0, 0xd, "587834efc9cb0c8de94af5"}, {0x2, 0xc, "e2ebf26dbe553b95f91a"}, {0x0, 0x6, "9b27a113"}, {0x2, 0xf, "29b57c629936d12f4c69bfa8e3"}]}, @cipso={0x86, 0x3a, 0x1, [{0x2, 0x2}, {0x6, 0x11, "e4ea2b0b559cd1a48eb02c893cc5b7"}, {0x5, 0x7, "47c4d42588"}, {0x6, 0x10, "b2407c64bdc56e9572bcbebe2f01"}, {0x0, 0xa, "482d23a825ee3e5b"}]}, @noop, @ra={0x94, 0x4, 0x1}]}}}}})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000380)={'syztnl2\x00', &(0x7f0000000300)={'syztnl0\x00', <r4=>0x0, 0x7, 0x20, 0xffffff81, 0xfffffffa, {{0xf, 0x4, 0x3, 0x7, 0x3c, 0x66, 0x0, 0x2, 0x29, 0x0, @remote, @rand_addr=0x64010100, {[@generic={0xd0, 0x8, "7f1184ae4651"}, @ra={0x94, 0x4}, @rr={0x7, 0x7, 0xa6, [@multicast1]}, @rr={0x7, 0x13, 0xe6, [@loopback, @local, @broadcast, @loopback]}, @noop, @noop]}}}}})
getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000400)=0x14)
sendmsg$ETHTOOL_MSG_LINKINFO_SET(r1, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x58, r2, 0x300, 0x70bd2c, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKINFO_PORT={0x5}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x3}, @ETHTOOL_A_LINKINFO_HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x7}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0xfb}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x40000)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r6, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, 0x2, 0x3, 0x101, 0x0, 0x0, {0x0, 0x0, 0xa}, [@NFQA_CFG_CMD={0x8, 0x1, {0x2, 0x0, 0x8}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x880) (async)
sendmsg$NFQNL_MSG_CONFIG(r6, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, 0x2, 0x3, 0x101, 0x0, 0x0, {0x0, 0x0, 0xa}, [@NFQA_CFG_CMD={0x8, 0x1, {0x2, 0x0, 0x8}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x880)
r7 = socket$netlink(0x10, 0x3, 0x8)
r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0x0, 0x9, 0x30}, 0xc)
close_range(r8, r0, 0x2)
recvfrom$inet_nvme(r1, &(0x7f0000000680)=""/136, 0x88, 0x40012081, &(0x7f0000000740)=@generic={0x28, "cb44493c25ae785f06fa95fbbfa3994a3bb24e35ed5fc1373a89fd09fc3ab618ac56e58af8658cb9119ddb42d51ddaa93daf790cc06843d0b7c3a40f1c4cf7e398ab36026b2b60f647242d113c89b88a3a7a6c7faef47308a57c4f62f633ef130896fe67bf99e273ccc844acca7742ccf5049260de6e670093aaaae910dc"}, 0x80) (async)
recvfrom$inet_nvme(r1, &(0x7f0000000680)=""/136, 0x88, 0x40012081, &(0x7f0000000740)=@generic={0x28, "cb44493c25ae785f06fa95fbbfa3994a3bb24e35ed5fc1373a89fd09fc3ab618ac56e58af8658cb9119ddb42d51ddaa93daf790cc06843d0b7c3a40f1c4cf7e398ab36026b2b60f647242d113c89b88a3a7a6c7faef47308a57c4f62f633ef130896fe67bf99e273ccc844acca7742ccf5049260de6e670093aaaae910dc"}, 0x80)
ioctl$BLKCRYPTOIMPORTKEY(r1, 0xc0401289, &(0x7f0000000840)={&(0x7f00000007c0)="cf42380383d77b485672f6a2a6740a1a07c7d0a9339c3a67a6e2c3c42497a7716453c6f5a3f55a31cc351a0e9aaedf39864981df9d27", 0x36, &(0x7f0000000800)=""/4, 0x4})
connect$unix(r1, &(0x7f0000000880)=@file={0x0, './file0\x00'}, 0x6e) (async)
connect$unix(r1, &(0x7f0000000880)=@file={0x0, './file0\x00'}, 0x6e)
getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, &(0x7f0000000900), &(0x7f0000000940)=0x30)
mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x50, r1, 0x6719b000) (async)
mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x50, r1, 0x6719b000)
write$input_event(r1, &(0x7f0000000980)={{}, 0x4, 0x1ff, 0x3}, 0x18) (async)
write$input_event(r1, &(0x7f0000000980)={{}, 0x4, 0x1ff, 0x3}, 0x18)
recvfrom(r6, &(0x7f00000009c0)=""/219, 0xdb, 0x40, &(0x7f0000000ac0)=@vsock={0x28, 0x0, 0x2711}, 0x80)
openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000b40)='./binderfs2/binder-control\x00', 0x800, 0x0) (async)
r9 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000b40)='./binderfs2/binder-control\x00', 0x800, 0x0)
ioctl$F2FS_IOC_PRECACHE_EXTENTS(r9, 0xf50f, 0x0)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_GET(r10, &(0x7f0000000d40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000bc0)={0x108, 0x1, 0x2, 0x301, 0x0, 0x0, {0x0, 0x0, 0x5}, [@CTA_EXPECT_MASK={0x48, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_EXPECT_MASTER={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_EXPECT_MASTER={0x64, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x14, 0x4, @remote}}}]}, @CTA_EXPECT_MASK={0x24, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x20}}]}, @CTA_EXPECT_HELP_NAME={0x9, 0x6, 'snmp\x00'}]}, 0x108}, 0x1, 0x0, 0x0, 0x10}, 0x40000)
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000dc0), r7)
ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000e00)={'wlan1\x00', <r12=>0x0})
sendmsg$NL80211_CMD_TDLS_MGMT(r7, &(0x7f0000000f40)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000e40)={0x9c, r11, 0x400, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_IE={0x45, 0x2a, [@prep={0x83, 0x1f, {{}, 0xfa, 0x89, @broadcast, 0xb5, @void, 0x2, 0x7f, @device_a, 0x33}}, @peer_mgmt={0x75, 0x8, {0x0, 0xfff, @val=0x4, @val=0x28, @void}}, @peer_mgmt={0x75, 0x14, {0x1, 0xfff6, @void, @void, @val="a10b39019323ae1835a69f2ad10797e9"}}]}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5, 0x89, 0x14}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x59}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x3}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40}, 0x800)
ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000fc0)={0x0, {0x2, 0x4e20, @private=0xa010100}, {0x2, 0x4e22, @empty}, {0x2, 0x4e21, @remote}, 0x8b, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000f80)='lo\x00', 0x40, 0x0, 0x2}) (async)
ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000fc0)={0x0, {0x2, 0x4e20, @private=0xa010100}, {0x2, 0x4e22, @empty}, {0x2, 0x4e21, @remote}, 0x8b, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000f80)='lo\x00', 0x40, 0x0, 0x2})
setsockopt$MRT_ADD_MFC(r1, 0x0, 0xcc, &(0x7f0000001040)={@multicast1, @multicast1, 0x0, "22006bc5c35cc35014bc1144aa52bef0f6a90eb1bfd2d691c6edf0d6cd498143", 0x7, 0x1, 0x0, 0xfffffff9}, 0x3c) (async)
setsockopt$MRT_ADD_MFC(r1, 0x0, 0xcc, &(0x7f0000001040)={@multicast1, @multicast1, 0x0, "22006bc5c35cc35014bc1144aa52bef0f6a90eb1bfd2d691c6edf0d6cd498143", 0x7, 0x1, 0x0, 0xfffffff9}, 0x3c)

8.123803076s ago: executing program 3 (id=221):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x17e)
lseek(r0, 0xfffffffffffffffe, 0x1)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1)
sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)={0x4c, r2, 0xacf5e67dd0b583a1, 0xfdffffff, 0x0, {{0x5}, {@void, @val={0xc, 0x99, {0x21, 0x7a}}}}, [@NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x4}, @acl_policy=[@NL80211_ATTR_ACL_POLICY={0x8}], @NL80211_ATTR_SMPS_MODE={0x5}, @crypto_settings=[@NL80211_ATTR_CONTROL_PORT_NO_PREAUTH={0x4}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x17}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x62a5}]]}, 0x4c}}, 0x4)
sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r2, 0x800, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x1a}, @void, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc001}, 0x800)
syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001581c2908570b2a85396d0102030109021b08010001000b0904c8020103010203090504"], 0x0)

8.122761706s ago: executing program 4 (id=222):
sched_setscheduler(0x0, 0x2, 0x0)
r0 = socket$pptp(0x18, 0x1, 0x2)
bind$pptp(r0, &(0x7f0000000140)={0x18, 0x2, {0x0, @local}}, 0x1e)
connect$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0x0, @multicast1}}, 0x1e)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0xc0001, 0x0)
ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000340)=0x1)
ioctl$PPPIOCSFLAGS1(r1, 0x40047459, 0x0)

6.266719644s ago: executing program 0 (id=223):
r0 = add_key$keyring(&(0x7f0000000200), &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="6400000010000104000408000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000440012800e00010069703665727370616e0000003000028006000300060000000600020009000000040012000500080001000000050016000200000005000b0008000000"], 0x64}}, 0x4000000)
prctl$PR_SET_IO_FLUSHER(0x34, 0x1)
add_key(&(0x7f0000000240)='asymmetric\x00', 0x0, &(0x7f0000000480)="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", 0x111, r0)
r2 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff, 0x7, 0x0, 0x0, 0x7, 0x4, 0x7, 0x9, 0x3, 0x3, 0x2, 'syz1\x00'})

6.266451474s ago: executing program 2 (id=224):
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e21, 0x5, @ipv4={'\x00', '\xff\xff', @empty}, 0x7}, 0x1c)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x659, @empty, 0xff}, 0x1c)
r1 = fcntl$dupfd(r0, 0x406, r0)
write$cgroup_pid(r1, &(0x7f0000000240), 0xb375)
read$FUSE(r1, &(0x7f00000007c0)={0x2020}, 0xae4)

6.264819294s ago: executing program 4 (id=225):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x14, r1, 0x60b}, 0x14}}, 0x0)
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r3, &(0x7f0000000080)={0xa, 0x4e21, 0x5, @ipv4={'\x00', '\xff\xff', @empty}, 0x7}, 0x1c)
connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e24, 0x4cf, @ipv4={'\x00', '\xff\xff', @local}, 0xff}, 0x1c)
r4 = fcntl$dupfd(r3, 0x406, r3)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
rename(0x0, 0x0)
sendmsg$nl_xfrm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@flushpolicy={0x18, 0x12, 0x105, 0x4, 0x25dfdbff, "", [@proto={0x5, 0x19, 0xff}]}, 0x18}, 0x1, 0x0, 0x0, 0x880}, 0x20040840)
write$cgroup_pid(r4, &(0x7f0000000240), 0xb375)
read$FUSE(r4, &(0x7f00000007c0)={0x2020}, 0xae4)

4.305273186s ago: executing program 0 (id=226):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/memory.force_empty\x00', 0x2, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
write(r0, &(0x7f00000002c0)='0', 0x1)
syz_usb_connect(0x2, 0x0, 0x0, 0x0)
read$FUSE(r0, 0x0, 0x0)

4.304695477s ago: executing program 2 (id=227):
r0 = syz_open_dev$loop(&(0x7f0000000c00), 0x8, 0x0)
ioctl$IOC_PR_REGISTER(r0, 0x401870c8, 0x0)

4.303868026s ago: executing program 3 (id=228):
socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b70500000000000061103000000000000fa00000000000009500000000000000"], &(0x7f00000002c0)='GPL\x00', 0x7, 0xbc, &(0x7f0000000300)=""/188, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000003c0), 0x8, 0x10, &(0x7f0000000080)={0x0, 0x0, 0x1}, 0x10}, 0x28)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./debug\x00', &(0x7f0000000100)='debugfs\x00', 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x400000000008d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0)
mount$binderfs(0x0, &(0x7f00000006c0)='./binderfs\x00', 0x0, 0x20, &(0x7f0000000a80)=ANY=[])
openat(0xffffffffffffff9c, &(0x7f0000000140)='./debug/kvm/mmu_shadow_zapped\x00', 0xf40, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
pipe2$9p(&(0x7f0000000080), 0x800)
socket$nl_route(0x10, 0x3, 0x0)
syz_mount_image$exfat(&(0x7f00000005c0), &(0x7f0000000140)='./bus\x00', 0x3008014, &(0x7f0000000600)=ANY=[], 0x1, 0x14fe, &(0x7f00000020c0)="$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")
syz_mount_image$fuse(0x0, &(0x7f0000000080)='./file0/file0\x00', 0x2a990a5, 0x0, 0x1, 0x0, 0x0)
rename(&(0x7f0000000280)='./file0/file0\x00', &(0x7f00000001c0)='./debug\x00')

4.303321746s ago: executing program 4 (id=229):
syz_emit_ethernet(0x6d, &(0x7f0000000300)={@remote, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a84d0", 0x37, 0x6, 0x1, @remote, @local, {[], {{0xfffe, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0xfffd, 0x0, 0xb}, {"d93ab1701d580ea509926d956361fbe90d7cb783e602e5508871379a9548b478252a32"}}}}}}}, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x901800, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil})
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x12, 0x4, &(0x7f0000000340)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x3f, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 2)

2.227453384s ago: executing program 2 (id=230):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
ioctl$TIOCMSET(r1, 0x5418, 0x0)
ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000000)={0x0, 0x9, 0x80080000, 0x0, 0xe, "dce4f0020100000000001b347d5c00030200"})
ioctl$TCSETAF(r1, 0x5408, &(0x7f0000000040)={0x91b, 0xd, 0x1000, 0x59, 0xc, "c7b19d7e9cc59315"})
shutdown(r0, 0x1)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='veth1_vlan\x00', 0x10)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@gettaction={0x3c, 0x32, 0x400, 0x0, 0x0, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8}, @action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc}]}, 0x3c}}, 0x14000000)
getegid()

2.226085724s ago: executing program 3 (id=231):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1)
syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./bus\x00', 0x3e1c9b, 0x0, 0x0, 0x0, &(0x7f0000000140))
mount$overlay(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f0000000b80), 0x4008, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}]})
r0 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./file0\x00', 0x28000, 0x1cd)
ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000000)={0x200, 0x4, 0x0, 0x8, 0x6})

2.225810544s ago: executing program 4 (id=232):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000480)={0x73622a85, 0x0, 0x2})
ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x40189429, &(0x7f0000000040)={0x0, 0x347, 0x864})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x1402, 0x0, 0x1, 0x0, 0x0)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000001680)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002c0000009500000000000000eb4779fcbb3e3bbff2971871b1b1c0b4f0fca28377f3aa77d6c8d949060c54d53bd61b3561319f7b346f8cadae05957ee562fe28a5d0b564a59c30cb37ebb90e516d9c72b9d81817f7a04496e4261b41dae579bd93d38e2740ac98d6108c318a35d29534fd3c6bf14ef7a5c59c3d48f092e6b6bb43ec765d850f71052de0718c08"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x70)
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000100001082cbd8acfe4dfffff00000000", @ANYRES32=0x0, @ANYBLOB="01310000048a00001c002b8008000100", @ANYRES32=r4, @ANYBLOB="080003001900000008000800", @ANYRES32=r4, @ANYBLOB="1400030076657468305f766972745f7769666900"], 0x50}}, 0x400c040)
read$FUSE(r2, &(0x7f00000021c0)={0x2020, 0x0, <r5=>0x0, <r6=>0x0, <r7=>0x0}, 0xffffff86)
mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x8000, 0x103)
write$FUSE_INIT(r2, &(0x7f0000000180)={0x50, 0x0, r5, {0x7, 0x2b, 0x0, 0x4040141, 0x6, 0x8, 0x9, 0xa14, 0x0, 0x0, 0x80, 0x400}}, 0x50)
syz_fuse_handle_req(r2, &(0x7f0000006200)="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", 0x2000, &(0x7f0000008c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000008580)={0x90, 0x0, 0x1, {0x6, 0x2, 0x3, 0x8000, 0x1, 0x719, {0x0, 0xffffffffffffff81, 0x9, 0x9, 0x9, 0x9, 0x10000, 0x5, 0xc99a, 0xc000, 0x6, r6, r7, 0xffffffff, 0xa}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
mknodat$null(0xffffffffffffffff, 0x0, 0xc000, 0x103)
syz_open_procfs(0xffffffffffffffff, 0x0)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r9 = socket$inet6_tcp(0xa, 0x1, 0x0)
r10 = dup(r9)
ioctl$TCFLSH(0xffffffffffffffff, 0x4b63, 0x1)
r11 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b702000003000000850000008600000018"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000000000e9ff00040000007d00000095"], 0x0}, 0x94)
r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r12}, 0xc)
ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
write$tun(r8, &(0x7f0000000280)=ANY=[@ANYBLOB="0a000010ffffffffffffffffffffffff86dd6900000000083c00fe8000000000000000000000000000aaff0200000000000000000000000000013c"], 0x42)

2.156296328s ago: executing program 2 (id=233):
syz_mount_image$erofs(&(0x7f0000000080), &(0x7f0000000040)='./bus\x00', 0x1000c00, &(0x7f00000000c0)=ANY=[], 0xf5, 0x218, &(0x7f0000000480)="$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")
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1e9042, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0)
close(r1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500))
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
write$cgroup_devices(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b2388a84b83"], 0xffdd)

6.18143ms ago: executing program 0 (id=234):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x6, 0x6}, 0x4)
setsockopt$packet_fanout_data(r0, 0x107, 0x16, 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000000c0), 0x2c0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1e, 0xe, &(0x7f0000000780)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0xa}, 0x8, 0x10, &(0x7f0000000000)={0xfffffffc, 0x0, 0xfffffffe}, 0x10}, 0x94)
syz_mount_image$ext4(&(0x7f0000000180)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x10008, &(0x7f0000000100)={[{@debug}, {@noacl}]}, 0xff, 0x49e, &(0x7f0000000f40)="$eJzs3M9vFFUcAPDvbH/Qyo9WRBQEraCR+KOlBZWDBzSaeNDERA94rG1BZKGG1gRIo8UYPBoS78ajiX+BNy9GPRgTr5p4NCREe6F4qpmdGbpsd0u3tF3pfj7Jdt/bmd33vjPv7b6Z15kA2tZA+ieJ2BYRv0dEX5a9fYWB7Gl+bmbs5tzMWBILC2//nVTWuzE3M1asWrxva545VIoofZbE8WRpuVMXL50ZLZcnzuf5oemzHw5NXbz03Omzo6cmTk2cGzl27OiR4RdfGHl+TeJM47qx9+PJfXtef/fqm2Mnrr7307dptXbvz5ZXx3FHN+sEVMdAutX+WaioXfZkE3W/F2yvSiedLawITemIiHR3dVX6f190xOLO64vXPm1p5YB1lf42bWm8eHYB2MSSaHUNgNYofujT49/isUFDj/+F6y9HdOfp+bmZsflb8XdGKX+9ax3LH4iIE7P/fpU+otnzEAAAq1AZ2zxbb/xXit2V52yuY0c+h9IfEfdHxM6IeCAidkXEgxGVdR+KiIezNy/0rbD8gZr80vFP6VrdOq+RdPz3UtXYb74q/vypvyPPba/E35WcPF2eOJxvk0PRtSXNDy9Txvev/vZFo2XV47/0kZZfjAXzClzrrDlBNz46PbpWG+H65Yi9nfXiT27NBKQtYE9E7G3uo3cUidNPf7Ov0Up3jn8ZazDPtPB1xFPZ/p+NmvgLyfLzk0M9UZ44PFS0iqV+/vXKW43Kv6v418D1A49kicX9X7NGVUMrlyfOTzVfxpU/Pm94TLPa9t+dvFOZs/7l/ey1C6PT0+eHI7qTNyr54piu8vrI4nsvjE73pvli/bT9HzpYv//vzN+T7v90K6WNeH9EPBoRj+V1fzwiDkTEwWXi//GVJz5YJv4kkmjd/r8cMV73++9W++9PqufrV5HoOPPDd41mzFe2/4/GbOW7NlP5/ruDlVbwLjcfAAAA3BNKEbEtktJglh7YFqXS4GD2P/y74r5SeXJq+pmTkx+dG8+uEeiPrlJxpquv6nzocDKbf2KWH8nPFRfLj+Tnjb/s6K3kB8cmy+Mtjh3a3dbb+38U/T/1V0erawesO9drQfuq7f+lFtUD2Hgr+f13LACb0+39vyf909uqugAby/E/tK96/f+TmrzxP2xOS/v/n3VuWQdsRsb/0L70f2hf+j+0pWYu54/jjRb1REQztwUoLhZY/V0FelZ8hX+7JIo7XqxnWb1x6Ux3/kqUWhRpR5ONbVMk0h6zsYUu3kMFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgXvZfAAAA//8hId5P")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x18808, 0x0, 0xf7, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0e0000000400ba7991b4c500003308000000", @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[], 0x50)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
sendmsg(r3, &(0x7f0000000d80)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000580)="4bf1085cc2641888a0eb50bceeb040826b6fbfc19ccba98f2926f3b55c6698ac476eddcb66809efec3f6625b2c459ac27054a88fc1a2b74ec35dd170c310bd926ff20708d73fdc9c87defa23e3de16aefd84b8c59bf6e33fbb8812164ef2d982c2258927a111b0353d3c359a2996cbbcbe11124f14d4ffd3cecf8e0c512b5299e862d7bc82d5a23fee8bfcdcd9e0555cb536b52dffffc65288471b476c29b662d0c010554f02", 0xa6}, {&(0x7f0000000640)="a2ce3c735bc663427ad2666427df1441bed8e7a78d65054330789a8a72ce33f8e2d54056ee9c4b932a864056cd7fbc0be849f2eaf204485c6ba309797b30a185ec92", 0x42}, {&(0x7f00000006c0)="a0a10f6350115582ce687045b48d72c753c0a044f97dec1f1f06b7ddad647ba812a40d5259f862d67971ed70a3acf2e837c08ccc7a301cea2cd632c092cacbe4000d4ab8d3ce5eec5a23b49c6bbe8454df07924d703d0357f567c5de30dd42de918f56508f2f7c57c473ce1da290cf523b5d31ad2619226172d2e69087fc56ffebac81e4b102db64d0227547bef426a2f8fefc83604abb0b73076c43d11fb39459db3c711afea2260e46c7a3310c391f95e0893263dad016a9f424e03b4e6637170afd153283a662eb310d1f0faddf4f1df60c626ffcd253f497f5a160", 0xdd}, {&(0x7f00000007c0)="722a7c67b2cee8864de3004a3270321b8c3c4cb63880ce56ad3da206dea6164f2ac51220aec7ee39903638dd128bf914a0529a7a1040e62561d76470563b01", 0x3f}, {&(0x7f0000000800)='>-5', 0x3}, {&(0x7f0000000840)="34bc2936892217d784cbb04b3eff2dd632f4898f544b90e7dc6f43519e1ea647340245ca00292bb79c35126d28b4f1ec8f7552fc6851908450a561d6e1842869f40d891033278b2a84dd805eac519395df655f1fd991410fd5a6ccf06fc3e4ccf09cf8d946", 0x65}, {&(0x7f00000008c0)="ac321a5eaf188379629418d8a2ea39c0656853a41321ed735936653eb394307026c9ce437af13d7fc29624c1c615ea50cd936542f7fed0b356647c37f6894040bada2f873dd3945698296e42b93944ab0cdb081eb284d0d126c36784aeb1b957d85a8c532334a38bc53c6efd260c518778427202e4388094a93585bd4e4bcfccb2fb862275fdc9b30bd2d9061985e7c077e2cd6ce17567c539a2953c57fec967f37e34b6c7c0bc84982c9eff76df10b42217f5378c94ccad933ddcd2813e3d953039dae65a179ad6e9b9eed85b2d06cb58ac98627e7e37bf54ffbb0689db19e445f1e95b54cda44770aceb3775afcf", 0xef}], 0x7, &(0x7f0000000a40)=[{0x90, 0x11, 0xfd2, "79d0617247218bae11a2235c8ba411c863fcf6eaed2d0e05dd9c17318497273f18c8f8b5c3e21679e2db1e15951cf673c1007d195e73f74801f391b3c651956725adff418b5b1a5f43863cf504334d892cec3bbee18a183865790e712c36e0dc3daa085e68696d8f44d9930639a36245133315cca651c65bb1"}, {0xe8, 0x114, 0x7, "dcb44f2989cd16c00bb482e7d7b010b8a61c60b4e418f2e9b4f8d404b783453c69b4c85b5d2f44f6cb5c3d3c916fe5e784b0460a679976d16fa8fb9df06ecd2eb75beb7aea3544bb79988e685b435988ad49502b0d219700645541a61df227a8a364a39996b96f12428bc953e7831e1fa50932d8049ae274598d87536980de6ed984e65a018f5c294e5cb456e814b31065c8d3e213e8ed5db4cfc865980e6413a21ffa9453ef139ad527ab90bd2ace96480b7f6df0642f49bca821f89e80dcc6b0068c286653b18d5893a53dcc7af0b04e40e650df"}, {0xb0, 0x111, 0x9, "6dfa0d919bf991e614176fa142a5fdad728a56e1e87b3ed2b9ced3d36cdc025946978f461e48f64ea6b6f4aff979cd446cd3ac68a58d06040c4a4cf53dc106374e8c3b73f8dd525bab23f9a4e0e0bfa2f8c03a86ee1ec5b3f3a785b415961ec2081c283c0c46d6969cdec03073df6271b26637f094b06ff2920748654163e166cf8677fc5cfde728b0864b16b889ea5e081e0a2adc3b2cf5c711"}, {0xf0, 0x0, 0x5, "628ecb05a39959546a41a96b5fb76a03a6317998de62de688cf1e490c3fb0d28009ebc9c02c0498bbb9a20113071e291d9de4f940ff69d75ef0bf181a7852264ec52ef19db9ca5f98c46f08acf5a34d6d81492f53c557c5ad20c769e3fc1113cfc5189733c0ab94db1f9392c49f5c87cffeb2eb22b157d3b5788693a5bc190880339bc0791d4eeb04195d3eaf660cc3ee09139b0fbbd9f3c1e1a5cf8bb58a08733f0eee1820b3759d478e1787fe7c166c4a0ec064e7f928cff364ee93f280b664f7f5f8225fe5655ed98e82b63c414cf77da0e992677a0fc09a7987554374d"}], 0x318}, 0x40)
read$rfkill(0xffffffffffffffff, 0x0, 0x0)
connect$pptp(0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050f0000000000007111ab0000000000851000000200000085000000051c000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x2b2, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x30}}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="09d33d8d91721b8228b9196ec0aabc", @ANYRES32=0x1, @ANYBLOB="0300"/20, @ANYRES32=0x0, @ANYRES32], 0x50)
ioctl$TUNSETOFFLOAD(r4, 0xc004743e, 0x110e22fff6)
close(r4)

201.14µs ago: executing program 2 (id=235):
r0 = add_key$keyring(&(0x7f0000000200), &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="6400000010000104000408000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000440012800e00010069703665727370616e0000003000028006000300060000000600020009000000040012000500080001000000050016000200000005000b0008000000"], 0x64}}, 0x4000000)
prctl$PR_SET_IO_FLUSHER(0x34, 0x1)
add_key(&(0x7f0000000240)='asymmetric\x00', 0x0, &(0x7f0000000480)="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", 0x111, r0)
r2 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff, 0x7, 0x0, 0x0, 0x7, 0x4, 0x7, 0x9, 0x3, 0x3, 0x2, 'syz1\x00'})

0s ago: executing program 3 (id=236):
r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46e, 0x5577, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0x40, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x7f, 0xfc}}}}}]}}]}}, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48)
close(r1)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10003, 0x9, 0x1}, 0x48)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x20040, 0x0)
ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110c230007)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r4, 0xc004743e, 0x110e22fff6)
close(r3)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r2, &(0x7f0000000000), &(0x7f0000001a00)=""/122}, 0x20)
ioctl$PPPIOCGL2TPSTATS(0xffffffffffffffff, 0x80487436, &(0x7f0000000200)="985c0998185043f10d6aea44c1b661176724468df557b8ee700b87b5712f1c21d5784e844b08e3be8badcf34ef90ce39f01d20deccbf86d87c38cbb5acaac3946d4c6049a06aba97a59a846fe1815b8ed3e47210f0425a4f26528f62db975fa547ac0434733d2008d7071f088ca2b1462cf0a32022dce0e00e3200f19a5da57905988381706f39e6b891f74da715927d408ef7b9975e1e2dd41784a95c32")
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000140)={r1, &(0x7f0000000140), &(0x7f00000002c0)=""/4095}, 0x20)
r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80}, 0x28)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1, 0x4, 0x8008, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, r5, 0x1, 0x3}, 0x50)
mount$cgroup(0x0, &(0x7f00000012c0)='./file0\x00', &(0x7f0000000100), 0x8, &(0x7f0000000000)={[{@none}, {@name}]})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022180000000501150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.1.10' (ED25519) to the list of known hosts.
[   17.533396][   T30] audit: type=1400 audit(1789421189.478:64): avc:  denied  { mounton } for  pid=277 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[   17.534537][  T277] cgroup: Unknown subsys name 'net'
[   17.556543][   T30] audit: type=1400 audit(1789421189.478:65): avc:  denied  { mount } for  pid=277 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   17.583896][   T30] audit: type=1400 audit(1789421189.508:66): avc:  denied  { unmount } for  pid=277 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   17.584099][  T277] cgroup: Unknown subsys name 'devices'
[   17.701351][  T277] cgroup: Unknown subsys name 'hugetlb'
[   17.706993][  T277] cgroup: Unknown subsys name 'rlimit'
[   17.814294][   T30] audit: type=1400 audit(1789421189.758:67): avc:  denied  { setattr } for  pid=277 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   17.838161][   T30] audit: type=1400 audit(1789421189.758:68): avc:  denied  { mounton } for  pid=277 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1
[   17.862860][   T30] audit: type=1400 audit(1789421189.758:69): avc:  denied  { mount } for  pid=277 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1
[   17.890131][  T279] SELinux:  Context root:object_r:swapfile_t is not valid (left unmapped).
Setting up swapspace version 1, size = 127995904 bytes
[   17.898932][   T30] audit: type=1400 audit(1789421189.838:70): avc:  denied  { relabelto } for  pid=279 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   17.924374][   T30] audit: type=1400 audit(1789421189.838:71): avc:  denied  { write } for  pid=279 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   17.953298][   T30] audit: type=1400 audit(1789421189.898:72): avc:  denied  { read } for  pid=277 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   17.978897][   T30] audit: type=1400 audit(1789421189.898:73): avc:  denied  { open } for  pid=277 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   17.979091][  T277] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   18.529800][  T286] bridge0: port 1(bridge_slave_0) entered blocking state
[   18.536855][  T286] bridge0: port 1(bridge_slave_0) entered disabled state
[   18.544325][  T286] device bridge_slave_0 entered promiscuous mode
[   18.551397][  T286] bridge0: port 2(bridge_slave_1) entered blocking state
[   18.558603][  T286] bridge0: port 2(bridge_slave_1) entered disabled state
[   18.566252][  T286] device bridge_slave_1 entered promiscuous mode
[   18.586010][  T285] bridge0: port 1(bridge_slave_0) entered blocking state
[   18.593153][  T285] bridge0: port 1(bridge_slave_0) entered disabled state
[   18.600539][  T285] device bridge_slave_0 entered promiscuous mode
[   18.620938][  T285] bridge0: port 2(bridge_slave_1) entered blocking state
[   18.627986][  T285] bridge0: port 2(bridge_slave_1) entered disabled state
[   18.635404][  T285] device bridge_slave_1 entered promiscuous mode
[   18.691176][  T288] bridge0: port 1(bridge_slave_0) entered blocking state
[   18.698233][  T288] bridge0: port 1(bridge_slave_0) entered disabled state
[   18.705821][  T288] device bridge_slave_0 entered promiscuous mode
[   18.715363][  T288] bridge0: port 2(bridge_slave_1) entered blocking state
[   18.722444][  T288] bridge0: port 2(bridge_slave_1) entered disabled state
[   18.729880][  T288] device bridge_slave_1 entered promiscuous mode
[   18.736383][  T287] bridge0: port 1(bridge_slave_0) entered blocking state
[   18.743483][  T287] bridge0: port 1(bridge_slave_0) entered disabled state
[   18.750840][  T287] device bridge_slave_0 entered promiscuous mode
[   18.769645][  T287] bridge0: port 2(bridge_slave_1) entered blocking state
[   18.776701][  T287] bridge0: port 2(bridge_slave_1) entered disabled state
[   18.784128][  T287] device bridge_slave_1 entered promiscuous mode
[   18.817815][  T289] bridge0: port 1(bridge_slave_0) entered blocking state
[   18.824941][  T289] bridge0: port 1(bridge_slave_0) entered disabled state
[   18.832349][  T289] device bridge_slave_0 entered promiscuous mode
[   18.860573][  T289] bridge0: port 2(bridge_slave_1) entered blocking state
[   18.867634][  T289] bridge0: port 2(bridge_slave_1) entered disabled state
[   18.875002][  T289] device bridge_slave_1 entered promiscuous mode
[   18.983910][  T288] bridge0: port 2(bridge_slave_1) entered blocking state
[   18.990997][  T288] bridge0: port 2(bridge_slave_1) entered forwarding state
[   18.998397][  T288] bridge0: port 1(bridge_slave_0) entered blocking state
[   19.005720][  T288] bridge0: port 1(bridge_slave_0) entered forwarding state
[   19.016913][  T286] bridge0: port 2(bridge_slave_1) entered blocking state
[   19.024101][  T286] bridge0: port 2(bridge_slave_1) entered forwarding state
[   19.031405][  T286] bridge0: port 1(bridge_slave_0) entered blocking state
[   19.038430][  T286] bridge0: port 1(bridge_slave_0) entered forwarding state
[   19.046482][  T285] bridge0: port 2(bridge_slave_1) entered blocking state
[   19.053568][  T285] bridge0: port 2(bridge_slave_1) entered forwarding state
[   19.060857][  T285] bridge0: port 1(bridge_slave_0) entered blocking state
[   19.067879][  T285] bridge0: port 1(bridge_slave_0) entered forwarding state
[   19.093136][  T287] bridge0: port 2(bridge_slave_1) entered blocking state
[   19.100216][  T287] bridge0: port 2(bridge_slave_1) entered forwarding state
[   19.107689][  T287] bridge0: port 1(bridge_slave_0) entered blocking state
[   19.114752][  T287] bridge0: port 1(bridge_slave_0) entered forwarding state
[   19.124650][  T289] bridge0: port 2(bridge_slave_1) entered blocking state
[   19.131740][  T289] bridge0: port 2(bridge_slave_1) entered forwarding state
[   19.138998][  T289] bridge0: port 1(bridge_slave_0) entered blocking state
[   19.146078][  T289] bridge0: port 1(bridge_slave_0) entered forwarding state
[   19.181631][    T8] bridge0: port 1(bridge_slave_0) entered disabled state
[   19.188946][    T8] bridge0: port 2(bridge_slave_1) entered disabled state
[   19.196530][    T8] bridge0: port 1(bridge_slave_0) entered disabled state
[   19.204429][    T8] bridge0: port 2(bridge_slave_1) entered disabled state
[   19.211767][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   19.219430][    T8] bridge0: port 1(bridge_slave_0) entered disabled state
[   19.226910][    T8] bridge0: port 2(bridge_slave_1) entered disabled state
[   19.234382][    T8] bridge0: port 1(bridge_slave_0) entered disabled state
[   19.241795][    T8] bridge0: port 2(bridge_slave_1) entered disabled state
[   19.249189][    T8] bridge0: port 1(bridge_slave_0) entered disabled state
[   19.256472][    T8] bridge0: port 2(bridge_slave_1) entered disabled state
[   19.281788][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   19.290258][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   19.297958][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   19.305731][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   19.313421][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   19.321897][    T8] bridge0: port 1(bridge_slave_0) entered blocking state
[   19.328912][    T8] bridge0: port 1(bridge_slave_0) entered forwarding state
[   19.336441][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   19.344608][    T8] bridge0: port 2(bridge_slave_1) entered blocking state
[   19.351756][    T8] bridge0: port 2(bridge_slave_1) entered forwarding state
[   19.359136][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   19.367375][    T8] bridge0: port 1(bridge_slave_0) entered blocking state
[   19.374412][    T8] bridge0: port 1(bridge_slave_0) entered forwarding state
[   19.391569][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   19.399860][    T8] bridge0: port 1(bridge_slave_0) entered blocking state
[   19.406885][    T8] bridge0: port 1(bridge_slave_0) entered forwarding state
[   19.414380][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   19.422879][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   19.431213][    T8] bridge0: port 2(bridge_slave_1) entered blocking state
[   19.438232][    T8] bridge0: port 2(bridge_slave_1) entered forwarding state
[   19.445845][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   19.454392][    T8] bridge0: port 1(bridge_slave_0) entered blocking state
[   19.461464][    T8] bridge0: port 1(bridge_slave_0) entered forwarding state
[   19.468942][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   19.477381][    T8] bridge0: port 2(bridge_slave_1) entered blocking state
[   19.484453][    T8] bridge0: port 2(bridge_slave_1) entered forwarding state
[   19.514412][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   19.522632][    T8] bridge0: port 2(bridge_slave_1) entered blocking state
[   19.529914][    T8] bridge0: port 2(bridge_slave_1) entered forwarding state
[   19.537644][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   19.545877][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   19.553964][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   19.561919][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   19.569927][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   19.577819][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   19.586012][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   19.594168][    T8] bridge0: port 1(bridge_slave_0) entered blocking state
[   19.601205][    T8] bridge0: port 1(bridge_slave_0) entered forwarding state
[   19.608650][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   19.617023][    T8] bridge0: port 2(bridge_slave_1) entered blocking state
[   19.624226][    T8] bridge0: port 2(bridge_slave_1) entered forwarding state
[   19.631695][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   19.639793][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   19.656526][  T288] device veth0_vlan entered promiscuous mode
[   19.665855][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   19.674442][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   19.683020][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   19.691276][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   19.699248][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   19.707546][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   19.715790][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   19.723355][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   19.738296][  T285] device veth0_vlan entered promiscuous mode
[   19.748665][  T288] device veth1_macvtap entered promiscuous mode
[   19.755571][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   19.764172][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   19.772368][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   19.780501][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   19.787898][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   19.796496][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   19.804849][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   19.812863][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   19.821113][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   19.829182][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   19.837368][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   19.845019][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   19.852622][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   19.867694][  T285] device veth1_macvtap entered promiscuous mode
[   19.874445][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   19.882593][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   19.890978][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   19.898540][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   19.906820][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   19.915097][  T289] device veth0_vlan entered promiscuous mode
[   19.930067][  T286] device veth0_vlan entered promiscuous mode
[   19.939377][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   19.948042][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   19.956714][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   19.965541][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   19.974071][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   19.982463][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   19.990904][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   19.998726][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   20.006843][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   20.014379][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   20.023308][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   20.031675][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   20.043812][  T286] device veth1_macvtap entered promiscuous mode
[   20.054520][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   20.062856][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   20.071232][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   20.079530][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   20.089549][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   20.105201][  T287] device veth0_vlan entered promiscuous mode
[   20.114728][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   20.123191][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   20.131942][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   20.140613][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   20.148919][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   20.157271][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   20.165597][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   20.173512][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   20.181523][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   20.188963][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   20.202393][  T289] device veth1_macvtap entered promiscuous mode
[   20.209362][  T288] request_module fs-gadgetfs succeeded, but still no fs?
[   20.214774][  T287] device veth1_macvtap entered promiscuous mode
[   20.229861][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   20.238006][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   20.267936][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   20.284862][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   20.294104][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   20.303058][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   20.304931][  T312] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   20.311958][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   20.336047][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   20.344591][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   20.352861][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   20.427429][  T314] device syzkaller0 entered promiscuous mode
[   20.462429][  T327] loop2: detected capacity change from 0 to 512
d��9P2000.L[   20.493390][  T327] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option
[   20.509629][  T327] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem
d��9P2000.L[   20.552798][  T327] EXT4-fs (loop2): 1 truncate cleaned up
[   20.569473][  T327] EXT4-fs (loop2): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000007,bsddf,nomblk_io_submit,nobarrier,grpid,,errors=continue. Quota mode: none.
[   20.608846][  T322] loop1: detected capacity change from 0 to 40427
[   20.633761][  T327] netlink: 104 bytes leftover after parsing attributes in process `syz.2.7'.
[   20.645794][  T327] overlayfs: './file0' not a directory
[   20.701080][  T322] F2FS-fs (loop1): fault_injection options not supported
[   20.708390][  T322] F2FS-fs (loop1): fault_type options not supported
[   20.728796][  T322] F2FS-fs (loop1): invalid crc value
[   20.738309][  T322] F2FS-fs (loop1): Found nat_bits in checkpoint
[   20.824944][  T340] futex_wake_op: syz.2.9 tries to shift op by 144; fix this program
[   20.865995][  T340] loop2: detected capacity change from 0 to 256
[   20.894029][  T322] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[   20.931425][  T340] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d)
[   21.089216][  T322] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[   21.109640][    T6] usb 5-1: new full-speed USB device number 2 using dummy_hcd
[   21.188487][  T346] futex_wake_op: syz.0.10 tries to shift op by 144; fix this program
[   21.211066][  T346] loop0: detected capacity change from 0 to 256
[   21.221617][  T345] attempt to access beyond end of device
[   21.221617][  T345] loop1: rw=2049, want=45120, limit=40427
[   21.389922][  T348] device syzkaller0 entered promiscuous mode
[   21.414984][  T346] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d)
d��9P2000.L[   21.506114][  T351] xt_socket: unknown flags 0x40

syzkaller
syzkaller login: [   22.009022][  T362] =======================================================
[   22.009022][  T362] WARNING: The mand mount option has been deprecated and
[   22.009022][  T362]          and is ignored by this kernel. Remove the mand
[   22.009022][  T362]          option from the mount to silence this warning.
[   22.009022][  T362] =======================================================
[   22.163190][  T365] loop3: detected capacity change from 0 to 256
[   23.081285][  T365] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   23.091822][   T30] kauditd_printk_skb: 87 callbacks suppressed
[   23.091836][   T30] audit: type=1400 audit(1789421194.038:161): avc:  denied  { remount } for  pid=355 comm="syz.3.15" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[   23.092020][  T365] exFAT-fs (loop3): Medium has reported failures. Some data may be lost.
[   23.101104][   T30] audit: type=1400 audit(1789421194.058:162): avc:  denied  { create } for  pid=355 comm="syz.3.15" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   23.148335][  T365] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[   23.162038][   T30] audit: type=1400 audit(1789421194.078:163): avc:  denied  { create } for  pid=355 comm="syz.3.15" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   23.182095][   T30] audit: type=1400 audit(1789421194.118:164): avc:  denied  { write } for  pid=357 comm="syz.2.14" name="001" dev="devtmpfs" ino=160 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[   23.205252][    T6] usb 5-1: config 0 has no interfaces?
[   23.218020][   T30] audit: type=1400 audit(1789421195.018:165): avc:  denied  { ioctl } for  pid=332 comm="syz.4.8" path="/dev/raw-gadget" dev="devtmpfs" ino=254 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   23.241520][  T369] device syzkaller0 entered promiscuous mode
[   23.256575][  T372] capability: warning: `syz.0.16' uses deprecated v2 capabilities in a way that may be insecure
[   23.311708][   T30] audit: type=1400 audit(1789421195.028:166): avc:  denied  { mounton } for  pid=355 comm="syz.3.15" path="/4/bus" dev="tmpfs" ino=44 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[   23.334593][  T374] futex_wake_op: syz.1.17 tries to shift op by 144; fix this program
[   23.360967][  T374] loop1: detected capacity change from 0 to 256
[   23.457052][  T374] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d)
[   23.608750][   T30] audit: type=1400 audit(1789421195.028:167): avc:  denied  { unmount } for  pid=288 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[   23.636195][   T30] audit: type=1400 audit(1789421195.038:168): avc:  denied  { read write } for  pid=287 comm="syz-executor" name="loop1" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[   23.672707][  T379] loop4: detected capacity change from 0 to 2048
[   23.680696][  T372] loop0: detected capacity change from 0 to 256
d��9P2[   23.692155][   T30] audit: type=1400 audit(1789421195.038:169): avc:  denied  { open } for  pid=287 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
000.L[   23.718093][    T6] usb 5-1: New USB device found, idVendor=7104, idProduct=2202, bcdDevice= 0.40
[   23.718606][   T30] audit: type=1400 audit(1789421195.038:170): avc:  denied  { ioctl } for  pid=287 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=117 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[   23.727700][    T6] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   23.761482][    T6] usb 5-1: Product: syz
[   23.766779][    T6] usb 5-1: config 0 descriptor??
[   23.789637][    T6] usb 5-1: can't set config #0, error -71
[   23.790589][  T372] FAT-fs (loop0): Directory bread(block 64) failed
[   23.799341][    T6] usb 5-1: USB disconnect, device number 2
[   23.813461][  T372] FAT-fs (loop0): Directory bread(block 65) failed
[   23.820767][  T372] FAT-fs (loop0): Directory bread(block 66) failed
[   23.826014][  T379] EXT4-fs (loop4): mounted filesystem without journal. Opts: init_itable,usrjquota=,abort,noload,,errors=continue. Quota mode: none.
[   23.827650][  T372] FAT-fs (loop0): Directory bread(block 67) failed
[   23.848379][  T379] ext4 filesystem being mounted at /2/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   23.854179][  T372] FAT-fs (loop0): Directory bread(block 68) failed
[   23.866452][  T372] FAT-fs (loop0): Directory bread(block 69) failed
[   23.873495][  T372] FAT-fs (loop0): Directory bread(block 70) failed
[   23.880279][  T372] FAT-fs (loop0): Directory bread(block 71) failed
[   23.888127][  T372] FAT-fs (loop0): Directory bread(block 72) failed
[   23.896120][  T372] FAT-fs (loop0): Directory bread(block 73) failed
[   23.928711][  T372] FAT-fs (loop0): Filesystem has been set read-only
[   24.032210][  T389] futex_wake_op: syz.2.21 tries to shift op by 144; fix this program
[   24.049657][  T389] loop2: detected capacity change from 0 to 256
[   24.551290][  T390] EXT4-fs (loop4): shut down requested (0)
[   25.001596][  T389] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d)
d��9P2000.L
syzkaller
syzkaller login: [   25.409980][  T296] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   25.454145][  T411] netlink: 'syz.2.27': attribute type 1 has an invalid length.
[   25.461876][  T411] netlink: 12 bytes leftover after parsing attributes in process `syz.2.27'.
[   25.470745][  T411] netlink: 13 bytes leftover after parsing attributes in process `syz.2.27'.
[   25.636211][  T411] syz.2.27 (411) used greatest stack depth: 21672 bytes left
[   25.683021][   T26] cp2112 0003:10C4:EA90.0001: hidraw0: USB HID v0.00 Device [syz0] on syz0
[   25.701222][  T414] xt_hashlimit: size too large, truncated to 1048576
[   25.746945][   T26] cp2112 0003:10C4:EA90.0001: Part Number: 0x0C Device Version: 0x02
[   25.769712][  T296] usb 2-1: Using ep0 maxpacket: 32
[   25.899690][  T296] usb 2-1: config index 0 descriptor too short (expected 29220, got 36)
[   25.914995][  T296] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[   25.942058][  T296] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81
[   25.969542][  T296] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[   25.999981][  T296] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[   26.030143][  T296] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[   26.073698][  T296] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[   26.102798][  T296] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   26.128290][  T296] usb 2-1: config 0 descriptor??
	l��[   26.283888][  T420] overlayfs: missing 'lowerdir'
[   26.410632][  T296] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 2 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[   26.430703][  T296] usb 2-1: USB disconnect, device number 2
[   26.444640][  T296] usblp0: removed
[   27.143908][  T425] Zero length message leads to an empty skb
[   27.209567][    C0] sched: RT throttling activated
[   27.229350][   T26] cp2112 0003:10C4:EA90.0001: error requesting SMBus config
[   27.237745][   T26] cp2112: probe of 0003:10C4:EA90.0001 failed with error -5
[   27.567844][  T427] fido_id[427]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[   27.690789][  T434] futex_wake_op: syz.0.33 tries to shift op by 144; fix this program
[   27.712001][  T434] loop0: detected capacity change from 0 to 256
[   27.801111][  T434] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d)
[   27.844263][  T296] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[   28.496826][  T436] loop2: detected capacity change from 0 to 131072
[   28.534151][  T439] loop1: detected capacity change from 0 to 256
[   28.560349][  T441] device syzkaller0 entered promiscuous mode
[   28.577323][   T30] kauditd_printk_skb: 88 callbacks suppressed
[   28.577336][   T30] audit: type=1400 audit(1789421200.518:259): avc:  denied  { create } for  pid=442 comm="syz.0.37" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
d��9P2000.L[   28.680097][  T436] F2FS-fs (loop2): invalid crc value
[   28.704957][  T436] F2FS-fs (loop2): Found nat_bits in checkpoint
[   28.725498][  T436] F2FS-fs (loop2): Cannot turn on quotas: -2 on 2
[   28.827068][   T30] audit: type=1400 audit(1789421200.738:260): avc:  denied  { block_suspend } for  pid=442 comm="syz.0.37" capability=36  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[   28.915327][  T436] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4
[   29.067994][  T454] futex_wake_op: syz.4.38 tries to shift op by 144; fix this program
[   29.082438][  T454] loop4: detected capacity change from 0 to 256
[   29.107699][  T454] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d)
[   29.340723][  T457] overlayfs: missing 'lowerdir'
[   29.531276][  T464] futex_wake_op: syz.3.41 tries to shift op by 144; fix this program
[   29.552129][  T464] loop3: detected capacity change from 0 to 256
[   29.616860][  T464] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d)
[   29.847522][  T470] loop4: detected capacity change from 0 to 512
[   29.848527][  T469] netlink: 20 bytes leftover after parsing attributes in process `syz.2.40'.
[   29.891625][  T470] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   29.902846][  T470] ext4 filesystem being mounted at /6/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   29.914310][   T63] usb 1-1: new high-speed USB device number 2 using dummy_hcd

syzkaller
syzkaller login: [   29.933674][   T30] audit: type=1400 audit(1789421201.878:261): avc:  denied  { write } for  pid=468 comm="syz.4.43" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   29.960289][  T470] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters
[   29.974985][  T470] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 159 with max blocks 1 with error 28
[   29.986155][  T469] loop2: detected capacity change from 0 to 40427
[   29.987383][  T470] EXT4-fs (loop4): This should not happen!! Data will be lost
[   29.987383][  T470] 
[   30.003444][  T470] EXT4-fs (loop4): Total free blocks count 0
[   30.009637][  T470] EXT4-fs (loop4): Free/Dirty block details
[   30.015592][  T470] EXT4-fs (loop4): free_blocks=65280
[   30.021008][  T470] EXT4-fs (loop4): dirty_blocks=128
[   30.026249][  T470] EXT4-fs (loop4): Block reservation details
[   30.032282][  T470] EXT4-fs (loop4): i_reserved_data_blocks=128
[   30.035361][  T469] F2FS-fs (loop2): invalid crc value
[   30.043948][  T474] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 2 with error 28
[   30.060099][  T474] EXT4-fs (loop4): This should not happen!! Data will be lost
[   30.060099][  T474] 
[   30.062122][  T469] F2FS-fs (loop2): Found nat_bits in checkpoint
[   30.108357][  T469] F2FS-fs (loop2): Start checkpoint disabled!
[   30.115298][  T469] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6
[   30.146475][   T30] audit: type=1400 audit(1789421202.088:262): avc:  denied  { mount } for  pid=479 comm="syz.4.45" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1
[   30.168832][   T30] audit: type=1400 audit(1789421202.088:263): avc:  denied  { write open } for  pid=467 comm="syz.2.40" path="/14/file0/file0" dev="loop2" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   30.191994][   T63] usb 1-1: Using ep0 maxpacket: 32
[   30.378456][  T484] loop4: detected capacity change from 0 to 256
[   30.409940][   T30] audit: type=1400 audit(1789421202.278:264): avc:  denied  { ioctl } for  pid=467 comm="syz.2.40" path="/14/file0/file0" dev="loop2" ino=10 ioctlcmd=0xf50d scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   30.436866][  T484] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   30.447582][  T484] exFAT-fs (loop4): Medium has reported failures. Some data may be lost.
[   30.470142][  T484] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[   31.111998][   T63] usb 1-1: config index 0 descriptor too short (expected 29220, got 36)
[   31.362152][  T490] loop3: detected capacity change from 0 to 256
[   31.642521][  T490] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   31.653264][  T490] exFAT-fs (loop3): Medium has reported failures. Some data may be lost.
[   31.673390][  T490] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[   32.020326][   T63] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[   32.028967][   T63] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81
[   32.037998][   T63] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[   32.047841][   T63] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[   32.059147][   T63] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[   32.072211][   T63] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[   32.081273][   T63] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   32.091619][   T30] audit: type=1400 audit(1789421202.288:265): avc:  denied  { remount } for  pid=479 comm="syz.4.45" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[   32.111880][   T63] usb 1-1: config 0 descriptor??
[   32.130998][  T493] loop4: detected capacity change from 0 to 8192
[   32.133086][   T30] audit: type=1400 audit(1789421202.288:266): avc:  denied  { create } for  pid=479 comm="syz.4.45" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   32.157724][   T30] audit: type=1400 audit(1789421202.298:267): avc:  denied  { create } for  pid=479 comm="syz.4.45" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   32.180079][  T493]  loop4: p1 p2 p3
[   32.183974][  T493] loop4: p1 start 68157184 is beyond EOD, truncated
[   32.199071][  T495] syz.3.48 uses obsolete (PF_INET,SOCK_PACKET)
[   32.205514][   T30] audit: type=1400 audit(1789421204.148:268): avc:  denied  { read write } for  pid=492 comm="syz.4.47" name="loop4p3" dev="devtmpfs" ino=612 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[   32.297832][  T311] attempt to access beyond end of device
[   32.297832][  T311] loop2: rw=2049, want=45104, limit=40427
[   32.360362][   T63] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 2 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[   32.388669][   T63] usb 1-1: USB disconnect, device number 2
[   32.402714][   T63] usblp0: removed
d��9P2000.L[   32.608827][  T506] futex_wake_op: syz.2.50 tries to shift op by 144; fix this program
[   32.675972][  T506] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d)
[   33.046146][  T513] set_capacity_and_notify: 1 callbacks suppressed
[   33.046171][  T513] loop1: detected capacity change from 0 to 256
[   33.858504][  T514] futex_wake_op: syz.4.52 tries to shift op by 144; fix this program
[   33.875989][  T514] loop4: detected capacity change from 0 to 256
[   33.934151][  T513] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   33.944915][  T513] exFAT-fs (loop1): Medium has reported failures. Some data may be lost.
[   33.964635][  T513] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[   33.981987][  T514] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d)
[   34.099980][  T525] futex_wake_op: syz.3.55 tries to shift op by 144; fix this program
[   34.136930][  T525] loop3: detected capacity change from 0 to 256

syzkaller
syzkaller login: [   34.381460][  T525] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d)
[   34.454229][  T522] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[   34.462422][  T522] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[   34.547704][  T534] futex_wake_op: syz.4.57 tries to shift op by 144; fix this program
[   34.570637][  T534] loop4: detected capacity change from 0 to 256
[   34.710171][  T534] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d)
[   34.966001][  T540] device syzkaller0 entered promiscuous mode
[   34.979019][  T537] loop1: detected capacity change from 0 to 512
[   35.018818][  T537] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
d��9P2000.L[   35.065859][  T537] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.58: invalid indirect mapped block 256 (level 2)
[   35.080231][  T537] EXT4-fs (loop1): 2 truncates cleaned up
[   35.086044][  T537] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpid,auto_da_alloc,lazytime,dioread_nolock,,errors=continue. Quota mode: writeback.
[   35.141749][  T538] loop2: detected capacity change from 0 to 131072
[   35.170725][  T535] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   35.177963][  T535] IPv6: NLM_F_CREATE should be set when creating new route
[   35.185285][  T538] F2FS-fs (loop2): QUOTA feature is enabled, so ignore qf_name
[   35.192884][  T538] F2FS-fs (loop2): QUOTA feature is enabled, so ignore qf_name
[   35.200740][  T538] F2FS-fs (loop2): QUOTA feature is enabled, so ignore jquota_fmt
[   35.210514][  T538] F2FS-fs (loop2): invalid crc value
[   35.218819][  T538] F2FS-fs (loop2): Found nat_bits in checkpoint
[   35.239084][  T535] bridge0: port 2(bridge_slave_1) entered disabled state
[   35.246389][  T535] bridge0: port 1(bridge_slave_0) entered disabled state
[   35.255418][  T538] F2FS-fs (loop2): sanity_check_inode: corrupted inode ino=3, run fsck to fix.
[   35.265045][  T538] F2FS-fs (loop2): Failed to read root inode
[   35.469081][  T550] loop3: detected capacity change from 0 to 256
[   35.476387][   T30] kauditd_printk_skb: 4 callbacks suppressed
[   35.476461][   T30] audit: type=1400 audit(1789421207.218:273): avc:  denied  { read write } for  pid=533 comm="syz.1.58" name="vhost-vsock" dev="devtmpfs" ino=264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[   35.507370][   T26] usb 1-1: new full-speed USB device number 3 using dummy_hcd
[   35.516722][   T30] audit: type=1400 audit(1789421207.218:274): avc:  denied  { open } for  pid=533 comm="syz.1.58" path="/dev/vhost-vsock" dev="devtmpfs" ino=264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[   35.542035][   T30] audit: type=1400 audit(1789421207.218:275): avc:  denied  { ioctl } for  pid=533 comm="syz.1.58" path="/dev/vhost-vsock" dev="devtmpfs" ino=264 ioctlcmd=0xaf12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[   35.598469][  T549] FAT-fs (loop3): error, corrupted directory (invalid entries)
[   35.606083][  T549] FAT-fs (loop3): Filesystem has been set read-only
[   35.714487][   T30] audit: type=1400 audit(1789421207.658:276): avc:  denied  { nlmsg_write } for  pid=536 comm="syz.2.59" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   35.751287][  T555] loop4: detected capacity change from 0 to 256
[   35.762436][   T30] audit: type=1400 audit(1789421207.658:277): avc:  denied  { connect } for  pid=536 comm="syz.2.59" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   35.787869][   T30] audit: type=1400 audit(1789421207.728:278): avc:  denied  { ioctl } for  pid=536 comm="syz.2.59" path="socket:[16519]" dev="sockfs" ino=16519 ioctlcmd=0x941b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   35.815129][   T30] audit: type=1400 audit(1789421207.768:279): avc:  denied  { write } for  pid=556 comm="syz.2.66" name="trace_pipe_raw" dev="tracefs" ino=13119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1
[   35.950927][  T562] futex_wake_op: syz.1.65 tries to shift op by 144; fix this program
[   35.973624][  T562] loop1: detected capacity change from 0 to 256
[   36.029770][   T26] usb 1-1: config 0 has no interfaces?
[   36.049045][  T562] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d)

syzkaller
syzkaller login: [   36.322690][  T568] futex_wake_op: syz.3.67 tries to shift op by 144; fix this program
[   36.340231][  T568] loop3: detected capacity change from 0 to 256
[   36.419812][   T26] usb 1-1: New USB device found, idVendor=7104, idProduct=2202, bcdDevice= 0.40
[   36.443495][   T26] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   36.462258][  T568] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d)
[   36.513913][   T26] usb 1-1: Product: syz
[   36.518601][   T26] usb 1-1: Manufacturer: syz
[   36.523805][   T26] usb 1-1: SerialNumber: syz
[   36.546489][   T26] usb 1-1: config 0 descriptor??
[   36.662860][  T570] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option
[   36.674456][  T570] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem
[   36.694819][  T570] EXT4-fs (loop2): 1 truncate cleaned up
[   36.700861][  T570] EXT4-fs (loop2): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000007,bsddf,nomblk_io_submit,nobarrier,grpid,,errors=continue. Quota mode: none.
[   36.715261][  T572] EXT4-fs error (device loop4): ext4_quota_enable:6435: inode #3: comm syz.4.68: iget: bogus i_mode (4)
[   36.727963][   T30] audit: type=1400 audit(1789421208.658:280): avc:  denied  { remove_name } for  pid=569 comm="syz.2.69" name="file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   36.741721][  T572] EXT4-fs error (device loop4): ext4_quota_enable:6438: comm syz.4.68: Bad quota inode: 3, type: 0
[   36.752874][   T30] audit: type=1400 audit(1789421208.688:281): avc:  denied  { rename } for  pid=569 comm="syz.2.69" name="file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   36.785735][  T572] EXT4-fs warning (device loop4): ext4_enable_quotas:6479: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix.
[   36.800968][  T572] EXT4-fs (loop4): mount failed
[   36.827079][   T30] audit: type=1400 audit(1789421208.768:282): avc:  denied  { read } for  pid=576 comm="syz.1.70" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   36.843155][   T26] usb 1-1: USB disconnect, device number 3
[   36.898523][  T587] netlink: 40 bytes leftover after parsing attributes in process `syz.1.70'.
[   37.375955][  T601] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x4ec6003b, utbl_chksum : 0xe619d30d)
d��9P2000.L[   38.196612][  T609] netlink: 8 bytes leftover after parsing attributes in process `syz.1.80'.
[   38.249708][  T614] netlink: 'syz.1.81': attribute type 3 has an invalid length.
[   38.259607][   T26] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   38.401443][  T618] set_capacity_and_notify: 4 callbacks suppressed
[   38.401466][  T618] loop4: detected capacity change from 0 to 256
[   38.472155][  T618] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   38.482962][  T618] exFAT-fs (loop4): Medium has reported failures. Some data may be lost.
[   38.499624][   T26] usb 4-1: Using ep0 maxpacket: 32
[   38.506063][  T618] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[   38.770238][   T26] usb 4-1: config index 0 descriptor too short (expected 29220, got 36)
[   38.814646][   T26] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[   38.861522][   T26] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81
[   38.928769][   T26] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[   39.015823][   T26] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[   39.170856][  T595] loop2: detected capacity change from 0 to 131072
[   39.236791][  T595] F2FS-fs (loop2): invalid crc value
[   39.249754][   T26] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[   39.284931][   T26] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[   39.294596][  T622] loop4: detected capacity change from 0 to 512
[   39.295327][   T26] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0

syzkaller
syzk[   39.310380][   T26] usb 4-1: config 0 descriptor??
aller login: [   39.327924][  T595] F2FS-fs (loop2): Found nat_bits in checkpoint
[   39.331815][  T616] loop0: detected capacity change from 0 to 40427
[   39.351448][  T622] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   39.360006][  T616] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[   39.376942][  T616] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[   39.382451][  T595] F2FS-fs (loop2): Cannot turn on quotas: -2 on 2
[   39.399427][  T622] tipc: Started in network mode
[   39.404454][  T595] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4
[   39.406435][  T628] overlayfs: missing 'lowerdir'
[   39.417100][  T622] tipc: Node identity , cluster identity 4711
[   39.424321][  T622] tipc: Failed to obtain node identity
[   39.430641][  T622] tipc: Enabling of bearer <eth:ip6_vti0> rejected, failed to enable media
[   39.438234][  T616] F2FS-fs (loop0): Found nat_bits in checkpoint
[   39.439991][  T622] EXT4-fs error (device loop4): __ext4_find_entry:1696: inode #2: comm syz.4.83: checksumming directory block 0
[   39.462711][  T622] EXT4-fs error (device loop4): __ext4_find_entry:1696: inode #2: comm syz.4.83: checksumming directory block 0
[   39.485105][  T616] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[   39.492669][  T616] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[   39.570444][   T26] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 2 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[   39.600696][   T26] usb 4-1: USB disconnect, device number 2
[   39.621848][   T26] usblp0: removed
[   39.730640][  T642] loop0: detected capacity change from 0 to 40427
[   39.767930][  T642] F2FS-fs (loop0): invalid crc value
[   39.774252][  T642] F2FS-fs (loop0): Found nat_bits in checkpoint
[   39.796106][  T642] F2FS-fs (loop0): Start checkpoint disabled!
[   39.802954][  T642] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6
[   39.879619][   T63] usb 5-1: new full-speed USB device number 3 using dummy_hcd
[   39.946941][  T646] attempt to access beyond end of device
[   39.946941][  T646] loop0: rw=2049, want=77832, limit=40427
[   39.958633][  T646] attempt to access beyond end of device
[   39.958633][  T646] loop0: rw=2049, want=77872, limit=40427
[   39.971120][  T646] attempt to access beyond end of device
[   39.971120][  T646] loop0: rw=2049, want=77936, limit=40427
[   39.979643][  T397] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   39.982952][  T646] attempt to access beyond end of device
[   39.982952][  T646] loop0: rw=2049, want=77976, limit=40427
[   40.001705][  T646] attempt to access beyond end of device
[   40.001705][  T646] loop0: rw=2049, want=78008, limit=40427
[   40.013294][  T646] attempt to access beyond end of device
[   40.013294][  T646] loop0: rw=2049, want=78056, limit=40427
[   40.025011][  T646] attempt to access beyond end of device
[   40.025011][  T646] loop0: rw=2049, want=78112, limit=40427
[   40.036835][  T646] attempt to access beyond end of device
[   40.036835][  T646] loop0: rw=2049, want=78128, limit=40427
[   40.048521][  T646] attempt to access beyond end of device
[   40.048521][  T646] loop0: rw=2049, want=78168, limit=40427
[   40.061326][  T646] attempt to access beyond end of device
[   40.061326][  T646] loop0: rw=2049, want=78200, limit=40427
[   40.149717][   T26] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[   40.279698][   T63] usb 5-1: config index 0 descriptor too short (expected 36, got 10)
[   40.287807][   T63] usb 5-1: config 0 descriptor has 1 excess byte, ignoring
[   40.295139][   T63] usb 5-1: config 0 has no interfaces?
[   40.300756][   T63] usb 5-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00
[   40.310007][   T63] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   40.318700][   T63] usb 5-1: config 0 descriptor??
[   40.399716][   T26] usb 4-1: Using ep0 maxpacket: 32
[   40.409687][  T397] usb 3-1: unable to get BOS descriptor or descriptor too short
[   40.489662][  T397] usb 3-1: config 1 interface 0 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[   40.502620][  T397] usb 3-1: config 1 interface 0 has no altsetting 0
[   40.509660][   T20] usb 1-1: new full-speed USB device number 4 using dummy_hcd
[   40.549695][   T26] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   40.564474][   T26] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[   40.573672][   T26] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   40.586814][   T26] usb 4-1: config 0 descriptor??
[   40.595234][   T63] usb 5-1: USB disconnect, device number 3
[   40.641376][   T26] hub 4-1:0.0: USB hub found
[   40.659729][  T397] usb 3-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40
[   40.668941][  T397] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   40.676986][  T397] usb 3-1: Product: syz
[   40.681291][  T397] usb 3-1: Manufacturer: syz
[   40.685873][  T397] usb 3-1: SerialNumber: syz
[   40.709651][  T397] usb 3-1: can't set config #1, error -71
[   40.718658][  T397] usb 3-1: USB disconnect, device number 2
[   40.807678][   T30] kauditd_printk_skb: 26 callbacks suppressed
[   40.807707][   T30] audit: type=1400 audit(1789421212.748:309): avc:  denied  { name_bind } for  pid=651 comm="syz.3.91" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1
[   40.873347][   T26] hub 4-1:0.0: config failed, can't read hub descriptor (err -22)
[   40.877000][  T656] loop2: detected capacity change from 0 to 512
[   40.888969][  T652] capability: warning: `syz.3.91' uses 32-bit capabilities (legacy support in use)
[   40.898343][   T20] usb 1-1: config 0 has no interfaces?
[   40.910020][  T656] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option
[   40.920843][   T30] audit: type=1400 audit(1789421212.868:310): avc:  denied  { ioctl } for  pid=657 comm="syz.3.92" path="socket:[17948]" dev="sockfs" ino=17948 ioctlcmd=0x8953 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   40.923046][  T656] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem
[   40.960350][  T660] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability
[   40.960393][  T656] EXT4-fs (loop2): 1 truncate cleaned up
[   40.979831][  T656] EXT4-fs (loop2): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000007,bsddf,nomblk_io_submit,nobarrier,grpid,,errors=continue. Quota mode: none.
[   41.002597][   T26] usbhid 4-1:0.0: can't add hid device: -71
[   41.010796][   T26] usbhid: probe of 4-1:0.0 failed with error -71
[   41.046938][   T30] audit: type=1400 audit(1789421212.988:311): avc:  denied  { shutdown } for  pid=664 comm="syz.2.94" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   41.066937][   T30] audit: type=1400 audit(1789421212.988:312): avc:  denied  { create } for  pid=659 comm="syz.3.93" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1
[   41.076884][   T26] usb 4-1: USB disconnect, device number 3
[   41.086319][   T20] usb 1-1: New USB device found, idVendor=7104, idProduct=2202, bcdDevice= 0.40
[   41.097402][   T30] audit: type=1400 audit(1789421212.988:313): avc:  denied  { setopt } for  pid=659 comm="syz.3.93" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   41.120921][   T20] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   41.129324][   T20] usb 1-1: Product: syz
[   41.133784][   T20] usb 1-1: Manufacturer: syz
[   41.138466][   T20] usb 1-1: SerialNumber: syz
[   41.144842][   T30] audit: type=1400 audit(1789421212.988:314): avc:  denied  { bind } for  pid=659 comm="syz.3.93" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   41.150536][   T20] usb 1-1: config 0 descriptor??
[   41.212581][   T30] audit: type=1400 audit(1789421213.158:315): avc:  denied  { read } for  pid=671 comm="syz.4.96" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[   41.244464][   T30] audit: type=1400 audit(1789421213.158:316): avc:  denied  { open } for  pid=671 comm="syz.4.96" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[   41.244492][   T30] audit: type=1400 audit(1789421213.158:317): avc:  denied  { ioctl } for  pid=671 comm="syz.4.96" path="/dev/binderfs/binder0" dev="binder" ino=13 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[   41.304723][   T30] audit: type=1400 audit(1789421213.248:318): avc:  denied  { write } for  pid=673 comm="syz.4.98" name="001" dev="devtmpfs" ino=181 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[   41.355002][  T680] loop2: detected capacity change from 0 to 40427
[   41.412971][  T680] F2FS-fs (loop2): fault_injection options not supported
[   41.420435][  T680] F2FS-fs (loop2): fault_type options not supported
[   41.428281][  T680] F2FS-fs (loop2): invalid crc value
[   41.434204][  T649] FAULT_INJECTION: forcing a failure.
[   41.434204][  T649] name failslab, interval 1, probability 0, space 0, times 1
[   41.447130][  T649] CPU: 0 PID: 649 Comm: syz.0.89 Not tainted syzkaller #0
[   41.447632][  T680] F2FS-fs (loop2): Found nat_bits in checkpoint
[   41.454334][  T649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   41.454365][  T649] Call Trace:
[   41.454371][  T649]  <TASK>
[   41.454378][  T649]  __dump_stack+0x21/0x30
[   41.454410][  T649]  dump_stack_lvl+0x110/0x170
[   41.454425][  T649]  ? show_regs_print_info+0x20/0x20
[   41.454443][  T649]  dump_stack+0x15/0x20
[   41.454458][  T649]  should_fail+0x3ab/0x500
[   41.454475][  T649]  __should_failslab+0xa4/0xe0
[   41.490575][  T680] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[   41.491266][  T649]  should_failslab+0x9/0x20
[   41.491290][  T649]  slab_pre_alloc_hook+0x39/0xd0
[   41.521499][  T649]  ? alloc_vfsmnt+0x27/0x4a0
[   41.526078][  T649]  kmem_cache_alloc+0x44/0x260
[   41.530840][  T649]  alloc_vfsmnt+0x27/0x4a0
[   41.535241][  T649]  clone_mnt+0x6d/0xd00
[   41.539580][  T649]  ? rwsem_write_trylock+0x136/0x300
[   41.544893][  T649]  copy_tree+0xd9/0x790
[   41.549237][  T649]  ? __kasan_check_write+0x14/0x20
[   41.554355][  T649]  copy_mnt_ns+0x180/0x930
[   41.558845][  T649]  ? create_new_namespaces+0x34/0x660
[   41.564204][  T649]  create_new_namespaces+0xd0/0x660
[   41.569392][  T649]  unshare_nsproxy_namespaces+0x120/0x170
[   41.575183][  T649]  ksys_unshare+0x4d7/0x810
[   41.579676][  T649]  ? sighand_ctor+0x60/0x60
[   41.584182][  T649]  ? __kasan_check_write+0x14/0x20
[   41.589277][  T649]  ? switch_fpu_return+0x15d/0x2c0
[   41.594461][  T649]  __x64_sys_unshare+0x38/0x40
[   41.599208][  T649]  x64_sys_call+0x442/0x9a0
[   41.603699][  T649]  do_syscall_64+0x4c/0xa0
[   41.608129][  T649]  ? clear_bhb_loop+0x50/0xa0
[   41.612883][  T649]  ? clear_bhb_loop+0x50/0xa0
[   41.617569][  T649]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   41.623466][  T649] RIP: 0033:0x7f9c0860c159
[   41.627864][  T649] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   41.647913][  T649] RSP: 002b:00007f9c07065028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[   41.656491][  T649] RAX: ffffffffffffffda RBX: 00007f9c08893fa0 RCX: 00007f9c0860c159
[   41.664746][  T649] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000022020600
[   41.673449][  T649] RBP: 00007f9c086a303b R08: 0000000000000000 R09: 0000000000000000
[   41.682842][  T649] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   41.691982][  T649] R13: 00007f9c08894038 R14: 00007f9c08893fa0 R15: 00007ffe36e0d3d8
[   41.700492][  T649]  </TASK>
[   41.741363][   T20] usb 1-1: USB disconnect, device number 4
[   41.820197][  T686] loop3: detected capacity change from 0 to 1024
[   41.842406][  T686] EXT4-fs (loop3): Ignoring removed nobh option
[   41.848808][  T686] EXT4-fs (loop3): Ignoring removed bh option
[   41.855305][  T686] EXT4-fs (loop3): Ignoring removed nobh option
[   41.870859][  T686] EXT4-fs (loop3): mounted filesystem without journal. Opts: nobh,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000011,bh,nombcache,mb_optimize_scan=0x0000000000000001,nobh,. Quota mode: none.
[   41.999629][  T491] usb 3-1: new low-speed USB device number 3 using dummy_hcd
[   42.093246][  T701] overlayfs: failed to resolve './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa': -2
[   42.131407][  T703] loop4: detected capacity change from 0 to 256
[   42.219692][   T26] usb 4-1: new full-speed USB device number 4 using dummy_hcd
[   42.232204][  T705] loop4: detected capacity change from 0 to 256
[   42.251360][  T705] FAT-fs (loop4): Directory bread(block 64) failed
[   42.257968][  T705] FAT-fs (loop4): Directory bread(block 65) failed
[   42.265210][  T705] FAT-fs (loop4): Directory bread(block 66) failed
[   42.265234][  T707] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors
[   42.277761][  T707] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869)
[   42.283232][  T705] FAT-fs (loop4): Directory bread(block 67) failed
[   42.296164][  T707] EXT4-fs (loop0): filesystem has both journal inode and journal device!
[   42.304550][  T705] FAT-fs (loop4): Directory bread(block 68) failed
[   42.315439][  T705] FAT-fs (loop4): Directory bread(block 69) failed
[   42.322877][  T705] FAT-fs (loop4): Directory bread(block 70) failed
[   42.329672][  T705] FAT-fs (loop4): Directory bread(block 71) failed
[   42.336366][  T705] FAT-fs (loop4): Directory bread(block 72) failed
[   42.343001][  T705] FAT-fs (loop4): Directory bread(block 73) failed
[   42.343598][  T709] x_tables: duplicate underflow at hook 3
[   42.519708][   T26] usb 4-1: device descriptor read/64, error -71
[   42.891884][  T722] netlink: 140 bytes leftover after parsing attributes in process `syz.1.114'.
[   42.901188][  T722] netlink: 56 bytes leftover after parsing attributes in process `syz.1.114'.
[   42.910398][   T26] usb 4-1: device descriptor read/64, error -71
[   42.989663][  T491] usb 3-1: config 9 has an invalid interface number: 181 but max is 1
[   42.998018][  T491] usb 3-1: config 9 contains an unexpected descriptor of type 0x2, skipping
[   43.006772][  T491] usb 3-1: config 9 has an invalid interface number: 69 but max is 1
[   43.014973][  T491] usb 3-1: config 9 contains an unexpected descriptor of type 0x2, skipping
[   43.023791][  T491] usb 3-1: config 9 has an invalid interface number: 22 but max is 1
[   43.032050][  T491] usb 3-1: config 9 has 3 interfaces, different from the descriptor's value: 2
[   43.041124][  T491] usb 3-1: config 9 has no interface number 0
[   43.047243][  T491] usb 3-1: config 9 has no interface number 1
[   43.054187][  T491] usb 3-1: config 9 has no interface number 2
[   43.060493][  T491] usb 3-1: config 9 interface 181 altsetting 54 endpoint 0x4 has invalid maxpacket 1023, setting to 8
[   43.071497][  T491] usb 3-1: config 9 interface 181 altsetting 54 endpoint 0x2 has invalid maxpacket 1023, setting to 8
[   43.082581][  T491] usb 3-1: config 9 interface 181 altsetting 54 endpoint 0x7 has an invalid bInterval 0, changing to 10
[   43.094094][  T491] usb 3-1: config 9 interface 69 altsetting 55 endpoint 0xC has an invalid bInterval 18, changing to 4
[   43.105198][  T491] usb 3-1: config 9 interface 69 altsetting 55 endpoint 0xC has invalid maxpacket 16, setting to 0
[   43.116884][  T491] usb 3-1: config 9 interface 69 altsetting 55 has a duplicate endpoint with address 0x7, skipping
[   43.127720][  T491] usb 3-1: config 9 interface 69 altsetting 55 endpoint 0x3 has invalid maxpacket 32, setting to 8
[   43.138455][  T491] usb 3-1: config 9 interface 69 altsetting 55 has an invalid endpoint with address 0x80, skipping
[   43.149173][  T491] usb 3-1: config 9 interface 69 altsetting 55 has a duplicate endpoint with address 0x7, skipping
[   43.160157][  T491] usb 3-1: config 9 interface 69 altsetting 55 endpoint 0xA has invalid maxpacket 1023, setting to 8
[   43.171063][  T491] usb 3-1: config 9 interface 69 altsetting 55 endpoint 0x5 has invalid maxpacket 32, setting to 8
[   43.181928][   T26] usb 4-1: new full-speed USB device number 5 using dummy_hcd
[   43.189421][  T491] usb 3-1: config 9 interface 69 altsetting 55 has a duplicate endpoint with address 0x3, skipping
[   43.200288][  T491] usb 3-1: config 9 interface 69 altsetting 55 has an invalid endpoint with address 0x0, skipping
[   43.209601][   T20] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[   43.210935][  T491] usb 3-1: config 9 interface 69 altsetting 55 has a duplicate endpoint with address 0x3, skipping
[   43.229129][  T491] usb 3-1: config 9 interface 69 altsetting 55 endpoint 0x8 has invalid maxpacket 512, setting to 8
[   43.259622][  T491] usb 3-1: config 9 interface 69 altsetting 55 has a duplicate endpoint with address 0x82, skipping
[   43.274209][  T491] usb 3-1: config 9 interface 69 altsetting 55 has 12 endpoint descriptors, different from the interface descriptor's value: 15
[   43.290390][  T491] usb 3-1: too many endpoints for config 9 interface 22 altsetting 153: 33, using maximum allowed: 30
[   43.304791][  T491] usb 3-1: config 9 interface 22 altsetting 153 endpoint 0xF is Bulk; changing to Interrupt
[   43.315416][  T491] usb 3-1: config 9 interface 22 altsetting 153 has a duplicate endpoint with address 0x3, skipping
[   43.326763][  T491] usb 3-1: config 9 interface 22 altsetting 153 has 3 endpoint descriptors, different from the interface descriptor's value: 33
[   43.342519][  T491] usb 3-1: config 9 interface 181 has no altsetting 0
[   43.349352][  T491] usb 3-1: config 9 interface 69 has no altsetting 0
[   43.356307][  T491] usb 3-1: config 9 interface 22 has no altsetting 0
[   43.365588][  T729] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   43.383038][  T729] EXT4-fs (loop0): re-mounted. Opts: (null). Quota mode: writeback.
[   43.489114][  T729] EXT4-fs error (device loop0): ext4_acquire_dquot:6227: comm syz.0.116: Failed to acquire dquot type 1
[   43.489980][   T26] usb 4-1: device descriptor read/64, error -71
[   43.504093][  T729] EXT4-fs error (device loop0): ext4_acquire_dquot:6227: comm syz.0.116: Failed to acquire dquot type 1
[   43.519677][  T491] usb 3-1: New USB device found, idVendor=045e, idProduct=04db, bcdDevice=6b.a5
[   43.528964][  T491] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   43.537652][  T491] usb 3-1: Product: 䀊
[   43.541945][   T20] usb 2-1: device descriptor read/64, error -71
[   43.548235][  T491] usb 3-1: Manufacturer: 䯭襲禀뺲ꁧꫀ於⏌ၔ쑮⟙
[   43.556086][  T491] usb 3-1: SerialNumber: У
[   43.579760][  T680] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[   43.669618][   T63] usb 5-1: new full-speed USB device number 4 using dummy_hcd
[   43.889666][   T26] usb 4-1: device descriptor read/64, error -71
[   43.949699][   T20] usb 2-1: device descriptor read/64, error -71
[   43.957975][  T491] usb 3-1: USB disconnect, device number 3
[   44.019687][   T26] usb usb4-port1: attempt power cycle
[   44.059676][   T63] usb 5-1: config 0 has no interfaces?
[   44.219730][   T20] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[   44.227324][   T63] usb 5-1: New USB device found, idVendor=7104, idProduct=2202, bcdDevice= 0.40
[   44.236434][   T63] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   44.244499][   T63] usb 5-1: Product: syz
[   44.248661][   T63] usb 5-1: Manufacturer: syz
[   44.253302][   T63] usb 5-1: SerialNumber: syz
[   44.258586][   T63] usb 5-1: config 0 descriptor??
[   44.450250][  T741] tipc: Started in network mode
[   44.455152][  T741] tipc: Node identity aaaaaaaaaaaa, cluster identity 4711
[   44.462688][  T741] tipc: Enabled bearer <eth:syz_tun>, priority 0
[   44.469694][   T26] usb 4-1: new full-speed USB device number 6 using dummy_hcd
[   44.499657][   T20] usb 2-1: device descriptor read/64, error -71
[   44.501600][  T734] FAULT_INJECTION: forcing a failure.
[   44.501600][  T734] name failslab, interval 1, probability 0, space 0, times 0
[   44.522978][  T734] CPU: 1 PID: 734 Comm: syz.4.118 Not tainted syzkaller #0
[   44.523153][  T744] set_capacity_and_notify: 2 callbacks suppressed
[   44.523164][  T744] loop0: detected capacity change from 0 to 512
[   44.530222][  T734] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   44.530238][  T734] Call Trace:
[   44.530243][  T734]  <TASK>
[   44.530250][  T734]  __dump_stack+0x21/0x30
[   44.530272][  T734]  dump_stack_lvl+0x110/0x170
[   44.530286][  T734]  ? show_regs_print_info+0x20/0x20
[   44.530302][  T734]  dump_stack+0x15/0x20
[   44.530316][  T734]  should_fail+0x3ab/0x500
[   44.530333][  T734]  __should_failslab+0xa4/0xe0
[   44.530361][  T734]  should_failslab+0x9/0x20
[   44.530376][  T734]  slab_pre_alloc_hook+0x39/0xd0
[   44.596659][  T734]  __kmalloc+0x6d/0x2c0
[   44.600809][  T734]  ? kvmalloc_node+0x211/0x320
[   44.605603][  T734]  kvmalloc_node+0x211/0x320
[   44.610363][  T734]  ? vm_mmap+0xb0/0xb0
[   44.614856][  T734]  ? kmem_cache_alloc_trace+0x119/0x270
[   44.620652][  T734]  ? alloc_fdtable+0xcd/0x2e0
[   44.625354][  T734]  alloc_fdtable+0x17f/0x2e0
[   44.630101][  T734]  dup_fd+0x896/0xad0
[   44.634067][  T734]  ? __kasan_check_write+0x14/0x20
[   44.639168][  T734]  ksys_unshare+0x442/0x810
[   44.643658][  T734]  ? sighand_ctor+0x60/0x60
[   44.648271][  T734]  ? __kasan_check_write+0x14/0x20
[   44.653513][  T734]  ? switch_fpu_return+0x15d/0x2c0
[   44.658629][  T734]  __x64_sys_unshare+0x38/0x40
[   44.663511][  T734]  x64_sys_call+0x442/0x9a0
[   44.668033][  T734]  do_syscall_64+0x4c/0xa0
[   44.672432][  T734]  ? clear_bhb_loop+0x50/0xa0
[   44.677234][  T734]  ? clear_bhb_loop+0x50/0xa0
[   44.682033][  T734]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   44.687924][  T734] RIP: 0033:0x7fb093e2c159
[   44.689598][    T6] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[   44.692327][  T734] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   44.692344][  T734] RSP: 002b:00007fb092885028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[   44.728094][  T734] RAX: ffffffffffffffda RBX: 00007fb0940b3fa0 RCX: 00007fb093e2c159
[   44.736082][  T734] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000022020600
[   44.744049][  T734] RBP: 00007fb093ec303b R08: 0000000000000000 R09: 0000000000000000
[   44.752010][  T734] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   44.759977][  T734] R13: 00007fb0940b4038 R14: 00007fb0940b3fa0 R15: 00007ffed3f79ef8
[   44.767952][  T734]  </TASK>
[   44.802021][   T63] usb 5-1: USB disconnect, device number 4
[   44.889731][   T20] usb 2-1: device descriptor read/64, error -71
[   44.909114][  T753] loop0: detected capacity change from 0 to 256
[   44.915491][   T26] usb 4-1: device descriptor read/8, error -71
[   45.017651][   T20] usb usb2-port1: attempt power cycle
[   45.070144][    C0] Adjusting tsc more than 11% (6082813 vs 8464237)
[   45.120393][    T6] usb 3-1: unable to get BOS descriptor or descriptor too short
[   45.170501][   T26] usb 4-1: device descriptor read/8, error -71
[   45.220696][    T6] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7
[   45.521515][   T20] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[   45.534184][    T6] usb 3-1: string descriptor 0 read error: -22
[   45.541751][    T6] usb 3-1: New USB device found, idVendor=041e, idProduct=3237, bcdDevice= 0.40
[   45.552041][    T6] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   45.622897][    T6] usb 3-1: unit 4 not found!
[   45.722086][    T6] tipc: Node number set to 43690
[   45.734722][   T20] usb 2-1: device descriptor read/8, error -71
[   45.877246][    T6] usb 3-1: USB disconnect, device number 4
[   45.988272][  T769] loop0: detected capacity change from 0 to 131072
[   46.028221][  T769] F2FS-fs (loop0): invalid crc value
[   46.052264][  T769] F2FS-fs (loop0): Found nat_bits in checkpoint
[   46.072630][  T769] F2FS-fs (loop0): Cannot turn on quotas: -2 on 2
[   46.073217][   T20] usb 2-1: device descriptor read/8, error -71
[   46.086085][  T769] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4
[   46.179730][  T785] 9pnet: Insufficient options for proto=fd
[   46.220586][   T30] kauditd_printk_skb: 21 callbacks suppressed
[   46.220599][   T30] audit: type=1400 audit(1789421217.919:336): avc:  denied  { append } for  pid=787 comm="syz.1.136" name="001" dev="devtmpfs" ino=178 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[   46.373522][   T30] audit: type=1400 audit(1789421218.051:337): avc:  denied  { read } for  pid=787 comm="syz.1.136" name="event2" dev="devtmpfs" ino=270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[   46.396576][   T30] audit: type=1400 audit(1789421218.051:338): avc:  denied  { ioctl } for  pid=787 comm="syz.1.136" path="/dev/input/event2" dev="devtmpfs" ino=270 ioctlcmd=0x4503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[   46.422353][   T30] audit: type=1400 audit(1789421218.060:339): avc:  denied  { bind } for  pid=787 comm="syz.1.136" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   46.441561][   T30] audit: type=1400 audit(1789421218.060:340): avc:  denied  { name_bind } for  pid=787 comm="syz.1.136" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1
[   46.462239][   T30] audit: type=1400 audit(1789421218.060:341): avc:  denied  { node_bind } for  pid=787 comm="syz.1.136" saddr=::ffff:0.0.0.0 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1
[   46.495131][  T791] netlink: 140 bytes leftover after parsing attributes in process `syz.4.137'.
[   46.504257][  T791] netlink: 56 bytes leftover after parsing attributes in process `syz.4.137'.
[   46.654579][  T797] loop4: detected capacity change from 0 to 256
[   46.699126][  T797] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d)
[   46.909491][  T799] futex_wake_op: syz.3.141 tries to shift op by 144; fix this program
[   46.917768][  T799] futex_wake_op: syz.3.141 tries to shift op by 144; fix this program
[   46.940598][  T801] loop3: detected capacity change from 0 to 256
[   47.011968][  T801] device lo entered promiscuous mode
[   47.017934][  T801] device dummy0 entered promiscuous mode
[   47.024357][  T801] device ifb0 entered promiscuous mode
[   47.030556][  T801] device ifb1 entered promiscuous mode
[   47.036464][  T801] device eth0 entered promiscuous mode
[   47.039173][   T63] usb 3-1: new full-speed USB device number 5 using dummy_hcd
[   47.044972][  T801] device tunl0 entered promiscuous mode
[   47.056200][  T801] device gre0 entered promiscuous mode
[   47.058131][   T30] audit: type=1400 audit(1789421218.679:342): avc:  denied  { setopt } for  pid=802 comm="syz.0.140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   47.063136][  T801] device gretap0 entered promiscuous mode
[   47.083961][   T30] audit: type=1400 audit(1789421218.679:343): avc:  denied  { connect } for  pid=802 comm="syz.0.140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   47.112741][  T801] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[   47.339910][   T30] audit: type=1400 audit(1789421218.937:344): avc:  denied  { getopt } for  pid=809 comm="syz.0.143" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   47.395422][  T812] loop1: detected capacity change from 0 to 512
[   47.427853][  T812] EXT4-fs (loop1): bad s_min_extra_isize: 544
[   47.478672][   T30] audit: type=1400 audit(1789421218.992:345): avc:  denied  { getopt } for  pid=811 comm="syz.1.144" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   47.802393][  T830] loop3: detected capacity change from 0 to 512
[   47.833367][  T830] EXT4-fs (loop3): Mount option "nouser_xattr" will be removed by 3.5
[   47.833367][  T830] Contact linux-ext4@vger.kernel.org if you think we should keep it.
[   47.833367][  T830] 
[   47.854843][  T830] EXT4-fs (loop3): failed to initialize system zone (-117)
[   47.862222][  T830] EXT4-fs (loop3): mount failed
[   48.101375][   T26] usb 5-1: new full-speed USB device number 5 using dummy_hcd
[   48.291659][  T833] loop0: detected capacity change from 0 to 8192
[   48.329352][  T380]  loop0: p1 p2 p3
[   48.333476][  T380] loop0: p1 start 68157184 is beyond EOD, truncated
[   48.429041][  T833]  loop0: p1 p2 p3
[   48.432897][  T833] loop0: p1 start 68157184 is beyond EOD, truncated
[   48.491627][   T26] usb 5-1: config index 0 descriptor too short (expected 36, got 10)
[   48.514985][  T841] loop1: detected capacity change from 0 to 256
[   48.521513][   T26] usb 5-1: config 0 descriptor has 1 excess byte, ignoring
[   48.582776][   T26] usb 5-1: config 0 has no interfaces?
[   48.588313][   T26] usb 5-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00
[   48.597535][   T26] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   48.609348][   T26] usb 5-1: config 0 descriptor??
[   48.613275][  T841] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d)
[   48.627569][  T841] FAULT_INJECTION: forcing a failure.
[   48.627569][  T841] name failslab, interval 1, probability 0, space 0, times 0
[   48.640544][  T841] CPU: 1 PID: 841 Comm: syz.1.154 Not tainted syzkaller #0
[   48.647838][  T841] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   48.657908][  T841] Call Trace:
[   48.661179][  T841]  <TASK>
[   48.664099][  T841]  __dump_stack+0x21/0x30
[   48.668432][  T841]  dump_stack_lvl+0x110/0x170
[   48.673274][  T841]  ? show_regs_print_info+0x20/0x20
[   48.678492][  T841]  ? file_end_write+0x1b0/0x1b0
[   48.683429][  T841]  dump_stack+0x15/0x20
[   48.687590][  T841]  should_fail+0x3ab/0x500
[   48.692255][  T841]  __should_failslab+0xa4/0xe0
[   48.697015][  T841]  should_failslab+0x9/0x20
[   48.701518][  T841]  slab_pre_alloc_hook+0x39/0xd0
[   48.706452][  T841]  ? getname_flags+0xba/0x510
[   48.711266][  T841]  kmem_cache_alloc+0x44/0x260
[   48.716260][  T841]  getname_flags+0xba/0x510
[   48.718145][  T843] loop3: detected capacity change from 0 to 256
[   48.720773][  T841]  __x64_sys_mkdirat+0x7c/0xa0
[   48.720797][  T841]  x64_sys_call+0x37e/0x9a0
[   48.736415][  T841]  do_syscall_64+0x4c/0xa0
[   48.740852][  T841]  ? clear_bhb_loop+0x50/0xa0
[   48.745518][  T841]  ? clear_bhb_loop+0x50/0xa0
[   48.750204][  T841]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   48.756080][  T841] RIP: 0033:0x7fe06e533fc7
[   48.760480][  T841] Code: 00 66 90 48 89 f2 b9 00 01 00 00 48 89 fe bf 9c ff ff ff e9 db f7 ff ff 66 2e 0f 1f 84 00 00 00 00 00 90 b8 02 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   48.780398][  T841] RSP: 002b:00007fe06cf8de58 EFLAGS: 00000246 ORIG_RAX: 0000000000000102
[   48.788825][  T841] RAX: ffffffffffffffda RBX: 00007fe06cf8dee0 RCX: 00007fe06e533fc7
[   48.796799][  T841] RDX: 00000000000001ff RSI: 0000200000000000 RDI: 00000000ffffff9c
[   48.805001][  T841] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[   48.812966][  T841] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000000
[   48.820928][  T841] R13: 00007fe06cf8dea0 R14: 0000000000000000 R15: 0000000000000000
[   48.828981][  T841]  </TASK>
[   48.840188][  T843] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   48.851258][  T843] exFAT-fs (loop3): Medium has reported failures. Some data may be lost.
[   48.860905][  T843] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[   48.862028][  T845] sch_tbf: burst 0 is lower than device batadv_slave_0 mtu (1514) !
[   48.898040][  T847] overlayfs: missing 'lowerdir'
[   48.915696][  T850] netlink: 24 bytes leftover after parsing attributes in process `syz.1.158'.
[   48.926140][   T63] usb 3-1: config 0 has no interfaces?
[   48.966232][  T850] incfs: ino conflict with backing FS 1
[   48.976777][  T850] overlayfs: upper fs does not support tmpfile.
[   49.080208][  T745] usb 5-1: USB disconnect, device number 5
[   49.120272][   T63] usb 3-1: New USB device found, idVendor=7104, idProduct=2202, bcdDevice= 0.40
[   49.129583][   T63] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   49.138119][   T63] usb 3-1: Product: syz
[   49.142931][   T63] usb 3-1: Manufacturer: syz
[   49.147597][   T63] usb 3-1: SerialNumber: syz
[   49.158437][   T63] usb 3-1: config 0 descriptor??
[   49.168532][  T861] bridge0: port 1(bridge_slave_0) entered blocking state
[   49.175979][  T861] bridge0: port 1(bridge_slave_0) entered disabled state
[   49.183600][  T861] device bridge_slave_0 entered promiscuous mode
[   49.191178][  T861] bridge0: port 2(bridge_slave_1) entered blocking state
[   49.198514][  T861] bridge0: port 2(bridge_slave_1) entered disabled state
[   49.206240][  T861] device bridge_slave_1 entered promiscuous mode
[   49.250950][  T861] bridge0: port 2(bridge_slave_1) entered blocking state
[   49.258192][  T861] bridge0: port 2(bridge_slave_1) entered forwarding state
[   49.265527][  T861] bridge0: port 1(bridge_slave_0) entered blocking state
[   49.272673][  T861] bridge0: port 1(bridge_slave_0) entered forwarding state
[   49.290414][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   49.300138][   T45] bridge0: port 1(bridge_slave_0) entered disabled state
[   49.301438][  T866] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbb4420a7, utbl_chksum : 0xe619d30d)
[   49.319878][   T45] bridge0: port 2(bridge_slave_1) entered disabled state
[   49.327803][  T866] mmap: syz.0.165 (866): VmData 40828928 exceed data ulimit 33554432. Update limits or use boot option ignore_rlimit_data.
[   49.352657][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   49.361003][   T45] bridge0: port 1(bridge_slave_0) entered blocking state
[   49.368125][   T45] bridge0: port 1(bridge_slave_0) entered forwarding state
[   49.375851][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   49.384390][   T45] bridge0: port 2(bridge_slave_1) entered blocking state
[   49.391472][   T45] bridge0: port 2(bridge_slave_1) entered forwarding state
[   49.398946][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   49.409532][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   49.420203][  T793] FAULT_INJECTION: forcing a failure.
[   49.420203][  T793] name failslab, interval 1, probability 0, space 0, times 0
[   49.435712][  T793] CPU: 0 PID: 793 Comm: syz.2.138 Not tainted syzkaller #0
[   49.442958][  T793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   49.453021][  T793] Call Trace:
[   49.456397][  T793]  <TASK>
[   49.459334][  T793]  __dump_stack+0x21/0x30
[   49.462693][  T861] device veth0_vlan entered promiscuous mode
[   49.463682][  T793]  dump_stack_lvl+0x110/0x170
[   49.474325][  T793]  ? show_regs_print_info+0x20/0x20
[   49.476362][  T861] device veth1_macvtap entered promiscuous mode
[   49.479543][  T793]  dump_stack+0x15/0x20
[   49.479568][  T793]  should_fail+0x3ab/0x500
[   49.479587][  T793]  __should_failslab+0xa4/0xe0
[   49.499264][  T793]  should_failslab+0x9/0x20
[   49.503856][  T793]  slab_pre_alloc_hook+0x39/0xd0
[   49.508819][  T793]  ? create_new_namespaces+0x34/0x660
[   49.514193][  T793]  kmem_cache_alloc+0x44/0x260
[   49.519141][  T793]  create_new_namespaces+0x34/0x660
[   49.524341][  T793]  ? ns_capable+0x8c/0xf0
[   49.528675][  T793]  unshare_nsproxy_namespaces+0x120/0x170
[   49.534403][  T793]  ksys_unshare+0x4d7/0x810
[   49.538907][  T793]  ? sighand_ctor+0x60/0x60
[   49.543509][  T793]  ? __kasan_check_write+0x14/0x20
[   49.548626][  T793]  ? switch_fpu_return+0x15d/0x2c0
[   49.553727][  T793]  __x64_sys_unshare+0x38/0x40
[   49.558504][  T793]  x64_sys_call+0x442/0x9a0
[   49.562996][  T793]  do_syscall_64+0x4c/0xa0
[   49.567411][  T793]  ? clear_bhb_loop+0x50/0xa0
[   49.572072][  T793]  ? clear_bhb_loop+0x50/0xa0
[   49.576805][  T793]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   49.582735][  T793] RIP: 0033:0x7f53c64cd159
[   49.587137][  T793] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   49.607232][  T793] RSP: 002b:00007f53c4f26028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[   49.615637][  T793] RAX: ffffffffffffffda RBX: 00007f53c6754fa0 RCX: 00007f53c64cd159
[   49.623621][  T793] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000022020600
[   49.631594][  T793] RBP: 00007f53c656403b R08: 0000000000000000 R09: 0000000000000000
[   49.639566][  T793] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   49.647531][  T793] R13: 00007f53c6755038 R14: 00007f53c6754fa0 R15: 00007ffd24b81c88
[   49.655498][  T793]  </TASK>
[   49.677591][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   49.686675][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   49.695834][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   49.698241][   T63] usb 3-1: USB disconnect, device number 5
[   49.704636][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   49.718487][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   49.725919][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   49.730099][  T871] binder: 867:871 ioctl c0306201 200000000040 returned -14
[   49.734014][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   49.742360][  T871] binder: 867:871 ioctl c0306201 200000000640 returned -22
[   49.805155][  T878] overlayfs: missing 'lowerdir'
[   49.824342][  T877] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1)
[   49.838070][  T874] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -13
[   49.846263][  T874] EXT4-fs error (device loop5): ext4_orphan_get:1406: comm syz.5.164: inode #15: comm syz.5.164: iget: illegal inode #
[   49.850096][  T877] syz.3.168 (877): attempted to duplicate a private mapping with mremap.  This is not supported.
[   49.859368][  T874] EXT4-fs error (device loop5): ext4_orphan_get:1411: comm syz.5.164: couldn't read orphan inode 15 (err -117)
[   49.888032][  T874] EXT4-fs (loop5): mounted filesystem without journal. Opts: jqfmt=vfsold,jqfmt=vfsv0,min_batch_time=0x00000000000003ff,noload,grpjquota=.,noblock_validity,resgid=0x0000000000000000,inode_readahead_blks=0x0000000000400000,errors=continue,,errors=continue. Quota mode: writeback.
[   49.926508][  T874] EXT4-fs (loop5): Quota file not on filesystem root. Journaled quota will not work
[   49.957068][  T861] EXT4-fs error (device loop5): ext4_readdir:263: inode #11: block 18: comm syz-executor: path (unknown): bad entry in directory: inode out of bounds - offset=0, inode=256, rec_len=1024, size=1024 fake=0
[   49.981678][  T877] netlink: 4 bytes leftover after parsing attributes in process `syz.3.168'.
[   49.991757][  T877] fuse: Bad value for 'group_id'
[   50.004908][  T306] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1)
[   50.014904][  T861] EXT4-fs error (device loop5): ext4_empty_dir:3177: inode #11: block 18: comm syz-executor: bad entry in directory: inode out of bounds - offset=4096, inode=256, rec_len=1024, size=1024 fake=0
[   50.039195][  T861] EXT4-fs error (device loop5): ext4_readdir:263: inode #11: block 18: comm syz-executor: path (unknown): bad entry in directory: inode out of bounds - offset=0, inode=256, rec_len=1024, size=1024 fake=0
[   50.062962][  T861] EXT4-fs error (device loop5): ext4_empty_dir:3177: inode #11: block 18: comm syz-executor: bad entry in directory: inode out of bounds - offset=4096, inode=256, rec_len=1024, size=1024 fake=0
[   50.082653][  T861] EXT4-fs error (device loop5): ext4_readdir:263: inode #11: block 18: comm syz-executor: path (unknown): bad entry in directory: inode out of bounds - offset=0, inode=256, rec_len=1024, size=1024 fake=0
[   50.453926][  T861] EXT4-fs error (device loop5): ext4_empty_dir:3177: inode #11: block 18: comm syz-executor: bad entry in directory: inode out of bounds - offset=4096, inode=256, rec_len=1024, size=1024 fake=0
[   50.477083][   T10] device bridge_slave_1 left promiscuous mode
[   50.485556][   T10] bridge0: port 2(bridge_slave_1) entered disabled state
[   50.516616][   T10] device bridge_slave_0 left promiscuous mode
[   50.534076][   T10] bridge0: port 1(bridge_slave_0) entered disabled state
[   50.549182][  T861] EXT4-fs error (device loop5): ext4_readdir:263: inode #11: block 18: comm syz-executor: path (unknown): bad entry in directory: inode out of bounds - offset=0, inode=256, rec_len=1024, size=1024 fake=0
[   50.739600][  T900] futex_wake_op: syz.3.175 tries to shift op by 144; fix this program
[   50.807004][  T900] set_capacity_and_notify: 4 callbacks suppressed
[   50.807035][  T900] loop3: detected capacity change from 0 to 256
[   50.823052][  T861] EXT4-fs error (device loop5): ext4_empty_dir:3177: inode #11: block 18: comm syz-executor: bad entry in directory: inode out of bounds - offset=4096, inode=256, rec_len=1024, size=1024 fake=0
[   50.872064][  T900] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d)
[   50.945377][  T861] EXT4-fs error (device loop5): ext4_readdir:263: inode #11: block 18: comm syz-executor: path (unknown): bad entry in directory: inode out of bounds - offset=0, inode=256, rec_len=1024, size=1024 fake=0
[   50.969917][  T861] EXT4-fs error (device loop5): ext4_empty_dir:3177: inode #11: block 18: comm syz-executor: bad entry in directory: inode out of bounds - offset=4096, inode=256, rec_len=1024, size=1024 fake=0
[   51.124587][  T908] netlink: 'syz.0.179': attribute type 4 has an invalid length.
[   51.134963][  T908] syz.0.179 (908) used greatest stack depth: 20992 bytes left
[   51.153550][  T912] overlayfs: missing 'lowerdir'
[   51.222056][  T914] xt_CT: You must specify a L4 protocol and not use inversions on it
[   51.231144][  T914] netlink: 'syz.0.182': attribute type 4 has an invalid length.
[   51.287992][  T296] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[   51.526467][  T745] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[   51.699969][  T296] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   51.711413][  T296] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   51.721166][  T296] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[   51.734431][  T296] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   51.746970][  T296] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   51.756206][  T296] usb 5-1: config 0 descriptor??
[   51.757835][  T923] loop2: detected capacity change from 0 to 8192
[   51.797428][  T745] usb 1-1: Using ep0 maxpacket: 8
[   51.809619][  T380]  loop2: p1 p2 p3
[   51.813596][  T380] loop2: p1 start 68157184 is beyond EOD, truncated
[   51.821999][  T923]  loop2: p1 p2 p3
[   51.825832][  T923] loop2: p1 start 68157184 is beyond EOD, truncated
[   51.852482][   T10] device bridge_slave_1 left promiscuous mode
[   51.858767][   T10] bridge0: port 2(bridge_slave_1) entered disabled state
[   51.867043][   T10] device bridge_slave_0 left promiscuous mode
[   51.879226][   T10] bridge0: port 1(bridge_slave_0) entered disabled state
[   51.888408][   T10] device veth1_macvtap left promiscuous mode
[   51.894633][   T10] device veth0_vlan left promiscuous mode
[   51.927599][  T745] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   51.940213][  T745] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   51.954846][  T745] usb 1-1: New USB device found, idVendor=056a, idProduct=0019, bcdDevice= 0.00
[   51.959598][  T380] udevd[380]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory
[   51.964408][  T745] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   51.985145][  T745] usb 1-1: config 0 descriptor??
[   52.014188][    T6] usb 4-1: new full-speed USB device number 8 using dummy_hcd
[   52.264365][  T296] plantronics 0003:047F:FFFF.0002: unknown main item tag 0xd
[   52.283030][  T296] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving
[   52.307298][  T296] plantronics 0003:047F:FFFF.0002: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0
[   52.316962][  T930] fido_id[930]: Failed to get parent HID device: No such file or directory
[   52.336209][   T30] kauditd_printk_skb: 32 callbacks suppressed
[   52.336230][   T30] audit: type=1400 audit(1789421223.550:378): avc:  denied  { setopt } for  pid=928 comm="syz.2.187" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   52.368103][   T30] audit: type=1400 audit(1789421223.578:379): avc:  denied  { create } for  pid=928 comm="syz.2.187" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[   52.426227][    T6] usb 4-1: config 0 has no interfaces?
[   52.496867][  T745] wacom 0003:056A:0019.0003: Unknown device_type for 'HID 056a:0019'. Assuming pen.
[   52.508387][  T745] wacom 0003:056A:0019.0003: hidraw1: USB HID v0.00 Joystick [HID 056a:0019] on usb-dummy_hcd.0-1/input0
[   52.519399][  T932] fido_id[932]: Failed to get parent HID device: No such file or directory
[   52.521021][  T745] input: Wacom Bamboo1 Medium Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:056A:0019.0003/input/input5
[   52.542385][   T30] audit: type=1400 audit(1789421223.744:380): avc:  denied  { read } for  pid=86 comm="acpid" name="event3" dev="devtmpfs" ino=815 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   52.556573][  T906] UDC core: couldn't find an available UDC or it's busy: -16
[   52.564749][   T30] audit: type=1400 audit(1789421223.744:381): avc:  denied  { open } for  pid=86 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=815 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   52.572286][  T906] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[   52.612263][   T30] audit: type=1400 audit(1789421223.808:382): avc:  denied  { ioctl } for  pid=86 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=815 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   52.619020][  T745] usb 5-1: USB disconnect, device number 6
[   52.644714][    T6] usb 4-1: New USB device found, idVendor=7104, idProduct=2202, bcdDevice= 0.40
[   52.653869][    T6] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   52.662023][    T6] usb 4-1: Product: syz
[   52.666378][    T6] usb 4-1: Manufacturer: syz
[   52.672072][    T6] usb 4-1: SerialNumber: syz
[   52.698540][    T6] usb 4-1: config 0 descriptor??
[   52.723384][  T914] loop0: detected capacity change from 0 to 512
[   52.784828][  T914] EXT4-fs (loop0): Ignoring removed mblk_io_submit option
[   52.792061][  T914] EXT4-fs (loop0): Unrecognized mount option "euid=00000000000000000000" or missing value
[   52.959084][  T924] FAULT_INJECTION: forcing a failure.
[   52.959084][  T924] name failslab, interval 1, probability 0, space 0, times 0
[   52.971773][  T924] CPU: 0 PID: 924 Comm: syz.3.186 Not tainted syzkaller #0
[   52.979072][  T924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   52.989111][  T924] Call Trace:
[   52.992377][  T924]  <TASK>
[   52.995309][  T924]  __dump_stack+0x21/0x30
[   52.999645][  T924]  dump_stack_lvl+0x110/0x170
[   53.004416][  T924]  ? show_regs_print_info+0x20/0x20
[   53.009614][  T924]  dump_stack+0x15/0x20
[   53.013774][  T924]  should_fail+0x3ab/0x500
[   53.018211][  T924]  __should_failslab+0xa4/0xe0
[   53.022992][  T924]  should_failslab+0x9/0x20
[   53.027504][  T924]  slab_pre_alloc_hook+0x39/0xd0
[   53.032433][  T924]  __kmalloc+0x6d/0x2c0
[   53.036575][  T924]  ? kvmalloc_node+0x211/0x320
[   53.041337][  T924]  kvmalloc_node+0x211/0x320
[   53.045906][  T924]  ? vm_mmap+0xb0/0xb0
[   53.049974][  T924]  ? kmem_cache_alloc_trace+0x119/0x270
[   53.055509][  T924]  ? alloc_fdtable+0xcd/0x2e0
[   53.060173][  T924]  alloc_fdtable+0x17f/0x2e0
[   53.064761][  T924]  dup_fd+0x896/0xad0
[   53.068758][  T924]  ? __kasan_check_write+0x14/0x20
[   53.073887][  T924]  ksys_unshare+0x442/0x810
[   53.078405][  T924]  ? sighand_ctor+0x60/0x60
[   53.083039][  T924]  ? __kasan_check_write+0x14/0x20
[   53.088241][  T924]  ? switch_fpu_return+0x15d/0x2c0
[   53.093349][  T924]  __x64_sys_unshare+0x38/0x40
[   53.098106][  T924]  x64_sys_call+0x442/0x9a0
[   53.102684][  T924]  do_syscall_64+0x4c/0xa0
[   53.107090][  T924]  ? clear_bhb_loop+0x50/0xa0
[   53.111779][  T924]  ? clear_bhb_loop+0x50/0xa0
[   53.116448][  T924]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   53.122356][  T924] RIP: 0033:0x7f92b43c3159
[   53.126758][  T924] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   53.146456][  T924] RSP: 002b:00007f92b2e1c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[   53.154948][  T924] RAX: ffffffffffffffda RBX: 00007f92b464afa0 RCX: 00007f92b43c3159
[   53.162926][  T924] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000022020600
[   53.170895][  T924] RBP: 00007f92b445a03b R08: 0000000000000000 R09: 0000000000000000
[   53.178855][  T924] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   53.186821][  T924] R13: 00007f92b464b038 R14: 00007f92b464afa0 R15: 00007ffe95a0d098
[   53.194794][  T924]  </TASK>
[   53.241151][    T6] usb 4-1: USB disconnect, device number 8
[   53.426110][   T20] usb 1-1: USB disconnect, device number 5
[   53.707664][  T942] usb usb1: usbfs: process 942 (syz.4.191) did not claim interface 0 before use
[   53.709015][  T943] loop2: detected capacity change from 0 to 1024
[   53.717458][   T30] audit: type=1400 audit(1789421224.832:383): avc:  denied  { setopt } for  pid=939 comm="syz.0.189" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[   53.781993][  T943] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[   54.626978][  T952] overlayfs: missing 'lowerdir'
[   55.597679][  T966] loop3: detected capacity change from 0 to 512
[   55.646557][  T966] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002]
[   55.885239][  T969] futex_wake_op: syz.2.196 tries to shift op by 144; fix this program
[   55.906207][  T969] loop2: detected capacity change from 0 to 256
[   55.913552][  T971] futex_wake_op: syz.4.198 tries to shift op by 144; fix this program
[   55.935376][  T971] loop4: detected capacity change from 0 to 256
[   55.946500][  T966] System zones: 1-12
[   55.953425][  T966] EXT4-fs error (device loop3): ext4_xattr_inode_iget:401: inode #12: comm syz.3.197: missing EA_INODE flag
[   55.966528][  T966] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.197: error while reading EA inode 12 err=-117
[   55.981659][  T966] EXT4-fs (loop3): 1 orphan inode deleted
[   55.987580][  T966] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug,resuid=0x000000000000ee01,,errors=continue. Quota mode: writeback.
[   56.021161][  T971] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d)
[   56.035125][  T969] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d)
[   57.143694][    T6] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[   57.200691][  T978] mmap: syz.2.199 (978) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst.
[   57.715529][    T6] usb 1-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00
[   57.724604][    T6] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   57.732723][    T6] usb 1-1: Product: syz
[   57.736985][    T6] usb 1-1: Manufacturer: syz
[   57.741623][    T6] usb 1-1: SerialNumber: syz
[   58.225198][  T961] UDC core: couldn't find an available UDC or it's busy: -16
[   58.225813][  T962] UDC core: couldn't find an available UDC or it's busy: -16
[   58.232718][  T961] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[   58.248175][  T962] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[   58.248394][  T983] UDC core: couldn't find an available UDC or it's busy: -16
[   58.256747][  T961] UDC core: couldn't find an available UDC or it's busy: -16
[   58.263120][  T983] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[   58.270723][  T961] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[   58.345683][  T993] loop2: detected capacity change from 0 to 512
[   58.403913][  T995] process 'syz.3.202' launched '/dev/loop#' with NULL argv: empty string added
[   58.424237][  T993] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002]
[   58.433325][  T993] System zones: 1-12
[   58.438644][  T993] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: inode #12: comm syz.2.201: missing EA_INODE flag
[   58.450812][  T993] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.201: error while reading EA inode 12 err=-117
[   58.463473][  T993] EXT4-fs (loop2): 1 orphan inode deleted
[   58.469223][  T993] EXT4-fs (loop2): mounted filesystem without journal. Opts: debug,resuid=0x000000000000ee01,,errors=continue. Quota mode: writeback.
[   59.373847][   T30] audit: type=1400 audit(1789421230.036:384): avc:  denied  { unmount } for  pid=285 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1
[   59.658751][ T1003] overlayfs: missing 'lowerdir'
[   59.665355][   T30] audit: type=1326 audit(1789421230.313:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1004 comm="syz.2.205" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53c64cd159 code=0x7ffc0000
[   59.694549][   T30] audit: type=1326 audit(1789421230.313:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1004 comm="syz.2.205" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53c64cd159 code=0x7ffc0000
[   59.719675][   T30] audit: type=1326 audit(1789421230.313:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1004 comm="syz.2.205" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53c64cd159 code=0x7ffc0000
[   59.744543][   T30] audit: type=1326 audit(1789421230.313:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1004 comm="syz.2.205" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=103 compat=0 ip=0x7f53c64cd159 code=0x7ffc0000
[   59.769500][   T30] audit: type=1326 audit(1789421230.340:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1004 comm="syz.2.205" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53c64cd159 code=0x7ffc0000
[   59.794585][   T30] audit: type=1326 audit(1789421230.340:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1004 comm="syz.2.205" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53c64cd159 code=0x7ffc0000
[   59.819350][   T30] audit: type=1326 audit(1789421230.340:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1004 comm="syz.2.205" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53c64cd159 code=0x7ffc0000
[   59.844113][   T30] audit: type=1326 audit(1789421230.340:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1004 comm="syz.2.205" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f53c64cd159 code=0x7ffc0000
[   59.868771][   T30] audit: type=1326 audit(1789421230.340:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1004 comm="syz.2.205" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53c64cd159 code=0x7ffc0000
[   62.286461][ T1022] loop4: detected capacity change from 0 to 256
[   62.526680][ T1021] futex_wake_op: syz.2.209 tries to shift op by 144; fix this program
[   62.536482][ T1016] loop0: detected capacity change from 0 to 131072
[   62.537243][ T1021] loop2: detected capacity change from 0 to 256
[   62.572412][ T1016] F2FS-fs (loop0): invalid crc value
[   62.579472][ T1016] F2FS-fs (loop0): Found nat_bits in checkpoint
[   62.594345][ T1022] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   62.605150][ T1022] exFAT-fs (loop4): Medium has reported failures. Some data may be lost.
[   62.619896][ T1016] F2FS-fs (loop0): Cannot turn on quotas: -2 on 2
[   62.621409][ T1022] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[   62.627028][ T1021] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d)
[   62.658382][    T6] rtl8150 1-1:1.0: couldn't reset the device
[   62.660702][ T1016] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4
[   62.685557][    T6] rtl8150: probe of 1-1:1.0 failed with error -5
[   62.715681][    T6] usb 1-1: USB disconnect, device number 6
[   64.347094][ T1033] loop2: detected capacity change from 0 to 512
[   64.472001][ T1038] loop4: detected capacity change from 0 to 512
[   64.481879][ T1040] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=1040 comm=syz.2.216
[   64.497347][ T1043] overlayfs: missing 'lowerdir'
[   64.514110][ T1044] loop0: detected capacity change from 0 to 4096
[   64.522613][ T1038] FAT-fs (loop4): Unrecognized mount option "00000000000000000000004" or missing value
[   64.533853][ T1044] EXT4-fs (loop0): Test dummy encryption mode enabled
[   64.540801][ T1044] EXT4-fs (loop0): Ignoring removed bh option
[   64.549523][ T1044] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpid,usrquota,nodioread_nolock,test_dummy_encryption,lazytime,nojournal_checksum,minixdf,bh,,errors=continue. Quota mode: writeback.
[   64.569463][ T1044] FAULT_INJECTION: forcing a failure.
[   64.569463][ T1044] name fail_usercopy, interval 1, probability 0, space 0, times 1
[   64.582735][ T1044] CPU: 1 PID: 1044 Comm: syz.0.218 Not tainted syzkaller #0
[   64.590025][ T1044] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   64.600083][ T1044] Call Trace:
[   64.603351][ T1044]  <TASK>
[   64.606270][ T1044]  __dump_stack+0x21/0x30
[   64.610589][ T1044]  dump_stack_lvl+0x110/0x170
[   64.615373][ T1044]  ? show_regs_print_info+0x20/0x20
[   64.620571][ T1044]  dump_stack+0x15/0x20
[   64.624757][ T1044]  should_fail+0x3ab/0x500
[   64.629174][ T1044]  should_fail_usercopy+0x1a/0x20
[   64.634189][ T1044]  strncpy_from_user+0x24/0x2d0
[   64.639025][ T1044]  ? kmem_cache_alloc+0xf7/0x260
[   64.643962][ T1044]  getname_flags+0xf5/0x510
[   64.648567][ T1044]  user_path_at_empty+0x2f/0x1c0
[   64.653487][ T1044]  do_fchownat+0xf5/0x240
[   64.657803][ T1044]  ? chown_common+0x680/0x680
[   64.662467][ T1044]  ? debug_smp_processor_id+0x17/0x20
[   64.667826][ T1044]  __x64_sys_chown+0x82/0x90
[   64.672407][ T1044]  x64_sys_call+0x943/0x9a0
[   64.676898][ T1044]  do_syscall_64+0x4c/0xa0
[   64.681298][ T1044]  ? clear_bhb_loop+0x50/0xa0
[   64.685962][ T1044]  ? clear_bhb_loop+0x50/0xa0
[   64.690626][ T1044]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   64.696519][ T1044] RIP: 0033:0x7f9c0860c159
[   64.700940][ T1044] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   64.720532][ T1044] RSP: 002b:00007f9c07065028 EFLAGS: 00000246 ORIG_RAX: 000000000000005c
[   64.728936][ T1044] RAX: ffffffffffffffda RBX: 00007f9c08893fa0 RCX: 00007f9c0860c159
[   64.736903][ T1044] RDX: 000000000000000a RSI: 000000003a736e6f RDI: 0000200000000080
[   64.744861][ T1044] RBP: 00007f9c07065090 R08: 0000000000000000 R09: 0000000000000000
[   64.752817][ T1044] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   64.760774][ T1044] R13: 00007f9c08894038 R14: 00007f9c08893fa0 R15: 00007ffe36e0d3d8
[   64.768736][ T1044]  </TASK>
[   66.240508][   T30] kauditd_printk_skb: 122 callbacks suppressed
[   66.240522][   T30] audit: type=1400 audit(1789421236.383:516): avc:  denied  { bind } for  pid=1056 comm="syz.4.222" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   66.255707][ T1052] loop0: detected capacity change from 0 to 4096
[   66.269956][   T30] audit: type=1400 audit(1789421236.383:517): avc:  denied  { create } for  pid=1051 comm="syz.2.220" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1
[   66.296872][   T30] audit: type=1400 audit(1789421236.411:518): avc:  denied  { connect } for  pid=1056 comm="syz.4.222" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   66.313896][ T1052] EXT4-fs (loop0): Test dummy encryption mode enabled
[   66.317233][   T30] audit: type=1400 audit(1789421236.411:519): avc:  denied  { write } for  pid=1056 comm="syz.4.222" name="ppp" dev="devtmpfs" ino=154 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[   66.323369][ T1052] EXT4-fs (loop0): Ignoring removed bh option
[   66.346017][   T30] audit: type=1400 audit(1789421236.411:520): avc:  denied  { open } for  pid=1056 comm="syz.4.222" path="/dev/ppp" dev="devtmpfs" ino=154 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[   66.353509][ T1052] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpid,usrquota,nodioread_nolock,test_dummy_encryption,lazytime,nojournal_checksum,minixdf,bh,,errors=continue. Quota mode: writeback.
[   66.375288][   T30] audit: type=1400 audit(1789421236.411:521): avc:  denied  { ioctl } for  pid=1056 comm="syz.4.222" path="/dev/ppp" dev="devtmpfs" ino=154 ioctlcmd=0x7438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[   66.647832][  T465] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[   66.928416][  T465] usb 4-1: Using ep0 maxpacket: 8
[   67.058570][  T465] usb 4-1: config index 0 descriptor too short (expected 2075, got 27)
[   67.066881][  T465] usb 4-1: config 0 has an invalid interface number: 200 but max is 0
[   67.075097][  T465] usb 4-1: config 0 has no interface number 0
[   67.081232][  T465] usb 4-1: config 0 interface 200 altsetting 2 endpoint 0x4 has invalid wMaxPacketSize 0
[   67.091227][  T465] usb 4-1: config 0 interface 200 has no altsetting 0
[   67.286174][  T465] usb 4-1: New USB device found, idVendor=0b57, idProduct=852a, bcdDevice=6d.39
[   67.295250][  T465] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   67.303292][  T465] usb 4-1: Product: syz
[   67.307507][  T465] usb 4-1: Manufacturer: syz
[   67.312115][  T465] usb 4-1: SerialNumber: syz
[   67.317443][  T465] usb 4-1: config 0 descriptor??
[   67.666513][  T465] input: Hanwang Art Master III 1308 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.200/input/input8
[   67.679116][  T465] usb 4-1: USB disconnect, device number 9
[   68.102633][   T30] audit: type=1400 audit(1789421238.099:522): avc:  denied  { nlmsg_read } for  pid=1068 comm="syz.4.225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   70.108423][ T1076] FAULT_INJECTION: forcing a failure.
[   70.108423][ T1076] name failslab, interval 1, probability 0, space 0, times 0
[   70.121944][ T1076] CPU: 1 PID: 1076 Comm: syz.4.229 Not tainted syzkaller #0
[   70.129350][ T1076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   70.139588][ T1076] Call Trace:
[   70.142856][ T1076]  <TASK>
[   70.145815][ T1076]  __dump_stack+0x21/0x30
[   70.150139][ T1076]  dump_stack_lvl+0x110/0x170
[   70.154801][ T1076]  ? show_regs_print_info+0x20/0x20
[   70.160072][ T1076]  dump_stack+0x15/0x20
[   70.164416][ T1076]  should_fail+0x3ab/0x500
[   70.168829][ T1076]  __should_failslab+0xa4/0xe0
[   70.173593][ T1076]  should_failslab+0x9/0x20
[   70.178117][ T1076]  slab_pre_alloc_hook+0x39/0xd0
[   70.183142][ T1076]  ? kvm_mmu_topup_memory_cache+0xd8/0x210
[   70.188952][ T1076]  kmem_cache_alloc+0x44/0x260
[   70.190670][ T1080] loop3: detected capacity change from 0 to 256
[   70.193824][ T1076]  kvm_mmu_topup_memory_cache+0xd8/0x210
[   70.193854][ T1076]  kvm_mmu_load+0x88/0x1ea0
[   70.193868][ T1076]  ? kvm_apic_accept_events+0x576/0x580
[   70.215850][ T1076]  ? _raw_spin_lock+0xf0/0xf0
[   70.220692][ T1076]  ? kvm_apic_has_interrupt+0x776/0x780
[   70.226228][ T1076]  ? kvm_lapic_enable_pv_eoi+0x140/0x140
[   70.231933][ T1076]  vcpu_enter_guest+0x4edb/0x6600
[   70.236968][ T1076]  ? avc_has_perm+0x163/0x250
[   70.241637][ T1076]  ? local_bh_enable+0x30/0x30
[   70.246386][ T1076]  ? avc_has_perm_noaudit+0x490/0x490
[   70.251760][ T1076]  ? inode_doinit_with_dentry+0xf6/0xd90
[   70.257554][ T1076]  ? 0xffffffffa00020dc
[   70.262047][ T1076]  ? is_bpf_text_address+0x177/0x190
[   70.267437][ T1076]  ? __kernel_text_address+0xa0/0x100
[   70.272901][ T1076]  ? unwind_get_return_address+0x4d/0x90
[   70.278536][ T1076]  ? stack_trace_save+0xf0/0xf0
[   70.283524][ T1076]  ? arch_stack_walk+0xee/0x140
[   70.288414][ T1076]  ? stack_trace_save+0xa6/0xf0
[   70.293297][ T1076]  ? __stack_depot_save+0x34/0x480
[   70.298465][ T1076]  ? path_openat+0x284f/0x2f80
[   70.303242][ T1076]  ? kasan_set_track+0x5b/0x70
[   70.308689][ T1076]  ? __kasan_check_read+0x11/0x20
[   70.313974][ T1076]  ? vmx_vcpu_pi_load+0xa1/0x370
[   70.318917][ T1076]  ? __kasan_check_write+0x14/0x20
[   70.324039][ T1076]  ? kvm_arch_vcpu_load+0x56f/0x760
[   70.329247][ T1076]  ? local_bh_enable+0x1f/0x30
[   70.334020][ T1076]  ? kvm_load_guest_fpu+0x12a/0x240
[   70.339206][ T1076]  kvm_arch_vcpu_ioctl_run+0xfa7/0x2020
[   70.344740][ T1076]  kvm_vcpu_ioctl+0x8ed/0xc00
[   70.349419][ T1076]  ? kvm_clear_stat_per_vcpu+0x200/0x200
[   70.355051][ T1076]  ? selinux_file_ioctl+0x3ad/0x4c0
[   70.360236][ T1076]  ? selinux_file_alloc_security+0x120/0x120
[   70.366283][ T1076]  ? mutex_unlock+0x8f/0x230
[   70.371104][ T1076]  ? __mutex_lock_slowpath+0x10/0x10
[   70.376419][ T1076]  ? __fget_files+0x2e1/0x340
[   70.381092][ T1076]  ? security_file_ioctl+0x84/0xa0
[   70.386304][ T1076]  ? kvm_clear_stat_per_vcpu+0x200/0x200
[   70.392105][ T1076]  __se_sys_ioctl+0x121/0x1a0
[   70.396889][ T1076]  __x64_sys_ioctl+0x7b/0x90
[   70.401479][ T1076]  x64_sys_call+0x2f/0x9a0
[   70.406173][ T1076]  do_syscall_64+0x4c/0xa0
[   70.410586][ T1076]  ? clear_bhb_loop+0x50/0xa0
[   70.415258][ T1076]  ? clear_bhb_loop+0x50/0xa0
[   70.419947][ T1076]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   70.425951][ T1076] RIP: 0033:0x7fb093e2c159
[   70.430385][ T1076] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   70.450223][ T1076] RSP: 002b:00007fb092885028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   70.458656][ T1076] RAX: ffffffffffffffda RBX: 00007fb0940b3fa0 RCX: 00007fb093e2c159
[   70.466732][ T1076] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005
[   70.474813][ T1076] RBP: 00007fb092885090 R08: 0000000000000000 R09: 0000000000000000
[   70.482773][ T1076] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   70.490739][ T1076] R13: 00007fb0940b4038 R14: 00007fb0940b3fa0 R15: 00007ffed3f79ef8
[   70.498698][ T1076]  </TASK>
[   70.508123][ T1080] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   70.518862][ T1080] exFAT-fs (loop3): Medium has reported failures. Some data may be lost.
[   70.529284][ T1080] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[   70.547159][   T30] audit: type=1400 audit(1789421240.351:523): avc:  denied  { rename } for  pid=1077 comm="syz.3.228" name="file0" dev="loop3" ino=1048656 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   72.131071][ T1085] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[   72.140208][ T1085] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[   72.149003][   T30] audit: type=1326 audit(1789421241.818:524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1083 comm="syz.2.230" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53c64cd159 code=0x7ffc0000
[   72.175146][ T1087] binder: 1086:1087 ioctl 40189429 200000000040 returned -22
[   72.176128][ T1090] loop2: detected capacity change from 0 to 16
[   72.187751][   T30] audit: type=1326 audit(1789421241.818:525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1083 comm="syz.2.230" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f53c64cd159 code=0x7ffc0000
[   72.214979][   T30] audit: type=1326 audit(1789421241.818:526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1083 comm="syz.2.230" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53c64cd159 code=0x7ffc0000
[   72.240044][   T30] audit: type=1326 audit(1789421241.818:527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1083 comm="syz.2.230" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f53c64cd159 code=0x7ffc0000
[   72.252286][ T1090] erofs: (device loop2): mounted with root inode @ nid 36.
[   72.265679][   T30] audit: type=1326 audit(1789421241.818:528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1083 comm="syz.2.230" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53c64cd159 code=0x7ffc0000
[   72.298054][   T30] audit: type=1326 audit(1789421241.818:529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1083 comm="syz.2.230" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f53c64cd159 code=0x7ffc0000
[   72.330017][   T30] audit: type=1326 audit(1789421241.818:530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1083 comm="syz.2.230" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53c64cd159 code=0x7ffc0000
[   72.334291][ T1090] device syzkaller0 entered promiscuous mode
[   72.361193][   T30] audit: type=1326 audit(1789421241.818:531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1083 comm="syz.2.230" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f53c64cd159 code=0x7ffc0000
[   72.386448][   T30] audit: type=1326 audit(1789421241.818:532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1083 comm="syz.2.230" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53c64cd159 code=0x7ffc0000
[   72.411524][   T30] audit: type=1326 audit(1789421241.818:533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1083 comm="syz.2.230" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f53c64cd159 code=0x7ffc0000
SYZFAIL: open of /sys/kernel/debug/kcov failed
 (errno 2: No such file or directory)
SYZFAIL: open of /sys/kernel/debug/kcov failed
 (errno 2: No such file or directory)
SYZFAIL: open of /sys/kernel/debug/kcov failed
 (errno 2: No such file or directory)
SYZFAIL: open of /sys/kernel/debug/kcov failed
 (errno 2: No such file or directory)
SYZFAIL: open of /sys/kernel/debug/kcov failed
 (errno 2: No such file or directory)
SYZFAIL: open of /sys/kernel/debug/kcov failed
 (errno 2: No such file or directory)
SYZFAIL: open of /sys/kernel/debug/kcov failed
 (errno 2: No such file or directory)
SYZFAIL: open of /sys/kernel/debug/kcov failed
 (errno 2: No such file or directory)
SYZFAIL: open of /sys/kernel/debug/kcov failed
 (errno 2: No such file or directory)
SYZFAIL: open of /sys/kernel/debug/kcov failed
 (errno 2: No such file or directory)
SYZFAIL: open of /sys/kernel/debug/kcov failed
 (errno 2: No such file or directory)
SYZFAIL: open of /sys/kernel/debug/kcov failed
 (errno 2: No such file or directory)
SYZFAIL: open of /sys/kernel/debug/kcov failed
 (errno 2: No such file or directory)
SYZFAIL: open of /sys/kernel/debug/kcov failed
 (errno 2: No such file or directory)
SYZFAIL: open of /sys/kernel/debug/kcov failed
 (errno 2: No such file or directory)
SYZFAIL: open of /sys/kernel/debug/kcov failed
 (errno 2: No such file or directory)
SYZFAIL: open of /sys/kernel/debug/kcov failed
 (errno 2: No such file or directory)
SYZFAIL: open of /sys/kernel/debug/kcov failed
 (errno 2: No such file or directory)
SYZFAIL: open of /sys/kernel/debug/kcov failed
 (errno 2: No such file or directory)
SYZFAIL: open of /sys/kernel/debug/kcov failed
 (errno 2: No such file or directory)
SYZFAIL: open of /sys/kernel/debug/kcov failed
 (errno 2: No such file or directory)
SYZFAIL: repeatedly failed to execute the program
proc=6 req=184 state=1 status=67 (errno 9: Bad file descriptor)
[   74.488381][  T288] syz-executor (288) used greatest stack depth: 20672 bytes left
[   74.501243][ T1100] tipc: Resetting bearer <eth:syz_tun>
[   74.508973][ T1100] tipc: Disabling bearer <eth:syz_tun>
[   75.184887][   T10] device bridge_slave_1 left promiscuous mode
[   75.191297][   T10] bridge0: port 2(bridge_slave_1) entered disabled state
[   75.198878][   T10] device bridge_slave_0 left promiscuous mode
[   75.204986][   T10] bridge0: port 1(bridge_slave_0) entered disabled state
[   75.212991][   T10] device veth1_macvtap left promiscuous mode
[   75.218987][   T10] device veth0_vlan left promiscuous mode
[   75.591305][   T10] tipc: Left network mode
[   76.223372][   T10] device bridge_slave_1 left promiscuous mode
[   76.229771][   T10] bridge0: port 2(bridge_slave_1) entered disabled state
[   76.237223][   T10] device bridge_slave_0 left promiscuous mode
[   76.243605][   T10] bridge0: port 1(bridge_slave_0) entered disabled state
[   76.251432][   T10] device bridge_slave_1 left promiscuous mode
[   76.257554][   T10] bridge0: port 2(bridge_slave_1) entered disabled state
[   76.265095][   T10] device bridge_slave_0 left promiscuous mode
[   76.271262][   T10] bridge0: port 1(bridge_slave_0) entered disabled state
[   76.279171][   T10] device bridge_slave_1 left promiscuous mode
[   76.285335][   T10] bridge0: port 2(bridge_slave_1) entered disabled state
[   76.292813][   T10] device bridge_slave_0 left promiscuous mode
[   76.299081][   T10] bridge0: port 1(bridge_slave_0) entered disabled state
[   76.307216][   T10] device veth1_macvtap left promiscuous mode
[   76.313238][   T10] device veth0_vlan left promiscuous mode
[   76.319350][   T10] device veth1_macvtap left promiscuous mode
[   76.325362][   T10] device veth0_vlan left promiscuous mode
[   76.331334][   T10] device veth1_macvtap left promiscuous mode
[   76.337385][   T10] device veth0_vlan left promiscuous mode