last executing test programs:

54.282208153s ago: executing program 1 (id=233):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x553, &(0x7f00000009c0)="$eJzs3c9rJFkdAPBvddKZzExmk1UPOrDr4q7MLDrdk427GzysK4ieFsT1PsakJ4TppIekszsJi3b+AkFEBU968SL4Bwgy4MWjCAN6VlhRRGcV9LBOSXVXJ7FTnfSMnfQk+Xygpt6rH/39vkxeparrURXAufVCRLwZEY/SNH05Iqbz5aV8ilZnyrb74OF7i9mURJq+/bckknxZtlmapmn3My/nu01GxNe+EvHNZF/AyXy+tX1noV6vrefVanP1bnVja/vGyurCcm25tjY3N/va/Ovzr87fHEo7r0TEG1/60/e/89Mvv/HLz777x1t/uf6tLK2pfH23HU9g/LCVnaaXL0z27LD+hMGeRll7yh/mlYuD7bNznAkBANBXdo7/kYj4VES8HNMxdvjpLAAAAHAKpV+Yig+Tzv27AhN9lgMAAACnSKk9BjYpVfKxAFNRKlUqnTG8H4tLpXpjo/mZ243NtaXOWNmZKJdur9RrN/OxwjNRTrL6bLu8V3+lpz4XEc9GxPemL7brlcVGfWnUX34AAADAOXG55/r/n9Od6//DJSeTHAAAADA8M6NOAAAAADh2rv8BAADgTCuPOgEAAADg2H31rbeyKe2+/3rpna3NO413bizVNu5UVjcXK4uN9buV5UZjuf3MvtWjPq/eaNz9XKxt3qs2axvN6pWt7Vurjc215q2VmDyRBgEAAAAHPPvJ+79PIqL1+YvtKTMx6qSAEzG+W+o+07Og9//hmc78/RNKCjgRYwNs8/6F4uXOE+B0G+9d0KevA2eP8f/AUW/06Dt45zedWWnI+QAAAMN37RPF9/+PPp9vOeWHU04nhvOr5/5/Oj2qRIAT177/P+hAHicLcKaUBxoBCJxl/+/9/6Ol6WMlBAAADN1Ue0pKlfzrvakolSqViCvt1wKWk9sr9drNiHgmIn43Xb6Q1WfbeyZHXjMAAAAAAAAAAAAAAAAAAAAAAAAAAB1pmkQKAAAAnGkRpT8nv+o8y//a9EtTvd8PTCT/br8SeCIi3v3R2z+4t9Bsrs9my/++u7z5w3z5K6P4BgMAAADo1b1Ob8//NepsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADhrPnj43mJ3GmDzi8OK+9cvRsRMUfzxmGzPJ6McEZf+kcT4vv2SiBgbQvzWTkR8vCh+kqW1G7Io/jB+CK2dpJW2FcaPmfynUBT/8hDiw3l2Pzv+vFnU/0vxQnte3P/GI/6n/qT6H/9i9/g31qf/XxkwxtUHP6/2jX91Kq6OFx//uvGTPvFfHCh6Ob7x9e3tfmvTH0dc6/79aR/x9kfYK1Wbq3erG1vbN1ZWF5Zry7W1ubnZ1+Zfn391/mb19kq9lv9bGOO7z/3iUd/270RcKvz7l+TZ9G//SwWfN1aQ/38e3Hv40W6ldTD+9RcL4v/6J/kWB+OX8jifzsvZ+mvdcqtT3u/5n/32+cPav7TX/vLj/P9f7/ehvQ50lOcG+9UBAI7Fxtb2nYV6vbZ+ugoXImLAjbOr9Kci58cvTMRTkcbZLXw7KzwYcOOxOGKbNE3TrE8VrLofEYMklsSQW1oqzmev0PcIMOojEwAAMGx7J/2jzgQAAAAAAAAAAAAAAAAAAADOr5N4ylpvzL1HICfDeIQ2AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBQ/DcAAP//fdvZHw==")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x1)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)=@dellink={0x34, 0x11, 0x5, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'batadv0\x00'}]}, 0x34}}, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000005c0))
ioctl$EXT4_IOC_MIGRATE(r0, 0x6609)

53.221544899s ago: executing program 1 (id=238):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r1 = socket$netlink(0x10, 0x3, 0xf)
ioctl$sock_SIOCETHTOOL(r1, 0x89f1, &(0x7f0000000340)={'ip6gre0\x00', &(0x7f0000000240)=@ethtool_ringparam={0x6cf0842e, 0x2f, 0x7, 0x10000, 0x3, 0x415, 0x18, 0xffff62d8, 0x2}})
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
ptrace$ARCH_SHSTK_LOCK(0x1e, r2, 0x3, 0x5003)
r3 = socket(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b8, 0xd0, 0x178, 0x394, 0xd0, 0x178, 0x1e8, 0x258, 0x258, 0x1e8, 0x258, 0x3, 0x0, {[{{@ipv6={@loopback={0x1f0}, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, [0x0, 0xffffffff], [], 'pim6reg0\x00', 'netpci0\x00', {}, {0xff}, 0x0, 0x0, 0x0, 0x4d}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x9, 0x10, 0x3}}}, {{@ipv6={@private1, @mcast1, [0xffffffff], [0xff, 0x0, 0x0, 0xff000000], 'wg2\x00', 'hsr0\x00', {}, {}, 0x3b, 0x10}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x4}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x1e, 0x8, 0x5, 'snmp_trap\x00', {0x7}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x318)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r6, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4)
recvmmsg(r6, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x10022, 0x0)
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x0, 0x20000000)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
clock_adjtime(0x0, &(0x7f00000001c0)={0x8b8d, 0x9, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0xffffffffffffffff, 0x1, 0x0, 0xfffffffd, 0x7, 0x0, 0x0, 0x2000000003, 0x0, 0x82a, 0x0, 0x81, 0x7})
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
setresuid(0xee01, 0x0, 0x0)
setreuid(0x0, 0x0)
sendmsg$IPCTNL_MSG_EXP_GET(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="580000000102010200000000000000000a00000006000740000000003c0001802c000180140003002001000009000000000000000000000214000400fe8000000000000000000000000000bb0c0002800500010088"], 0x58}}, 0x0)
pipe(&(0x7f0000004600)={<r8=>0xffffffffffffffff})
fremovexattr(r8, 0x0)
setsockopt$sock_attach_bpf(r8, 0x1, 0x32, &(0x7f0000000080)=r8, 0x4)
bind$inet6(r0, 0x0, 0x0)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4b, &(0x7f0000000040)=0x401, 0x4)
bind$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x4e22, 0x823, @mcast2, 0x5}, 0x1c)

52.309938552s ago: executing program 1 (id=245):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0)
close(r0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1a1102, 0x0)
unshare(0x22020600)
ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff3)
ioctl$TUNGETVNETLE(r0, 0x40047451, 0x0)

52.283567413s ago: executing program 1 (id=247):
syz_emit_ethernet(0x0, 0x0, 0x0) (async)
syz_emit_ethernet(0x0, 0x0, 0x0)
syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000040)='./bus\x00', 0x2000000, &(0x7f00000015c0)=ANY=[@ANYBLOB="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", @ANYRESOCT=0x0], 0x1, 0x553b, &(0x7f0000010740)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x20042, 0x40)
fadvise64(r0, 0x8, 0x4c, 0x1) (async)
fadvise64(r0, 0x8, 0x4c, 0x1)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000000201010800000000000000000100000508001540000000030800084000000c2c08001a4000000008929e0db71cc934329416d7d577949ef4fcfba4c34bea13b5727bf6395ea036b3cb95df4c4bb9a6397f6a4b"], 0x2c}, 0x1, 0x0, 0x0, 0x4002000}, 0x80)
syz_genetlink_get_family_id$ieee802154(&(0x7f0000000340), 0xffffffffffffffff)
mmap(&(0x7f0000dde000/0x3000)=nil, 0x3000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0) (async)
mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks=5'])
chdir(&(0x7f0000000140)='./file0\x00') (async)
chdir(&(0x7f0000000140)='./file0\x00')
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x4d)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0)
r3 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000000)={0x8}, 0x9)
fallocate(r2, 0x0, 0x37e9, 0x2f92)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}}, 0x44014) (async)
sendmsg$nl_generic(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}}, 0x44014)
recvmmsg(r4, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4091, 0xffb}], 0x1}}], 0x1, 0x2, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="fc0000001900010029bd7000fbdbdf25ac1e0101000000000000000000000000ffffffff00000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000001000080000000000000000000000000000000000000000000000000000000000200000000000000fdffffffefffffff00000000000000001000000000000000050000000000000000000000002000000000000000000000000000000000000001000202000000004400050000000000000000000000ffff0a010100000004d63c"], 0xfc}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) (async)
sendmsg$nl_xfrm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="fc0000001900010029bd7000fbdbdf25ac1e0101000000000000000000000000ffffffff00000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000001000080000000000000000000000000000000000000000000000000000000000200000000000000fdffffffefffffff00000000000000001000000000000000050000000000000000000000002000000000000000000000000000000000000001000202000000004400050000000000000000000000ffff0a010100000004d63c"], 0xfc}, 0x1, 0x0, 0x0, 0x20000004}, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
r7 = socket$inet6_udplite(0xa, 0x2, 0x88)
connect$inet6(r7, &(0x7f00000000c0)={0xa, 0x4e21, 0x659, @empty, 0xff}, 0x1c) (async)
connect$inet6(r7, &(0x7f00000000c0)={0xa, 0x4e21, 0x659, @empty, 0xff}, 0x1c)
setsockopt$inet6_IPV6_ADDRFORM(r7, 0x29, 0x1, &(0x7f0000000280), 0x4)
bind$inet6(r6, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) (async)
bind$inet6(r6, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)

51.509421033s ago: executing program 1 (id=250):
r0 = socket$nl_route(0x10, 0x3, 0x0)
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x10, &(0x7f00000014c0), 0x1, 0x793, &(0x7f0000000c00)="$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")
r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x182)
fallocate(r1, 0x0, 0x1, 0x2000402)
write$binfmt_misc(r1, &(0x7f0000000080)="f1", 0x1)
ioctl$EXT4_IOC_MOVE_EXT(r1, 0x40305829, &(0x7f0000000000)={0x17c04, 0xffffffffffffffff, 0x6, 0x72b7, 0x8})
r2 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'bridge0\x00', <r3=>0x0})
sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00114edb185eafed52650007000000", @ANYRES32=r3, @ANYBLOB="800202000a000200577f0000aabb000020000e"], 0x48}}, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000005}, 0x40000)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
syz_clone3(&(0x7f00000002c0)={0x8040000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

51.325028237s ago: executing program 1 (id=257):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0)
close(r0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1a1102, 0x0)
unshare(0x22020600)
ioctl$TUNGETVNETLE(r0, 0x40047451, 0x0)

51.308124578s ago: executing program 32 (id=257):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0)
close(r0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1a1102, 0x0)
unshare(0x22020600)
ioctl$TUNGETVNETLE(r0, 0x40047451, 0x0)

37.535326525s ago: executing program 5 (id=351):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000005a0000008500000022000000180100002020702500000000002020200100000000000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff0000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0x2000000, 0x11, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x80800)
r3 = dup(r2)
sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f00000002c0)={0x104, 0x0, 0x1, 0x201, 0x0, 0x0, {0xa, 0x0, 0x5}, [@CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x10000}, @CTA_MARK={0x8}, @CTA_TUPLE_REPLY={0x9c, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x14}}, {0x8, 0x2, @private=0xa010102}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x3}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x91d5}, @CTA_LABELS={0x8, 0x16, 0x1, 0x0, [0x7fffffff]}, @CTA_SEQ_ADJ_ORIG={0x2c, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x1}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xfffffc00}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x6}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x5}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x20000080}, 0x1)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@mmap}]}})

37.290431401s ago: executing program 5 (id=352):
r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x24800)
ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, &(0x7f0000000040))
ioctl$KVM_SET_IRQCHIP(r0, 0x8208ae63, &(0x7f0000000080)={0x0, 0x0, @ioapic={0x9000, 0x7, 0xfffffffd, 0x85c, 0x0, [{0x4, 0x6, 0x0, '\x00', 0x9}, {0x4, 0x2, 0xf, '\x00', 0x6}, {0xc2, 0x6, 0x40, '\x00', 0x5}, {0x91, 0x3, 0x5, '\x00', 0x2}, {0x8, 0xa, 0x8}, {0x6, 0x7, 0x7, '\x00', 0x5}, {0x8, 0x1, 0x8, '\x00', 0x9}, {0x6, 0x8, 0x0, '\x00', 0xa}, {0x20, 0x9, 0x4, '\x00', 0x3}, {0x4, 0x50, 0xb, '\x00', 0x1}, {0x47, 0x9, 0x1, '\x00', 0x8}, {0x0, 0x6, 0xd}, {0xfc, 0x5, 0x6, '\x00', 0x80}, {0x6, 0x1, 0x7, '\x00', 0x8}, {0x0, 0x4, 0x1, '\x00', 0x81}, {0xc9, 0x2, 0x81, '\x00', 0x4}, {0x9, 0x4, 0x1, '\x00', 0x5}, {0xf8, 0x9, 0xff, '\x00', 0x1}, {0x8, 0x1, 0x0, '\x00', 0x40}, {0x6, 0x2e, 0x0, '\x00', 0xd}, {0x8, 0x2, 0x0, '\x00', 0x6}, {0xa3, 0x6e, 0x1, '\x00', 0x25}, {0xfb, 0x7, 0x40, '\x00', 0x8}, {0x2, 0xf7, 0x4, '\x00', 0x1}]}}) (async)
ioctl$KVM_SET_IRQCHIP(r0, 0x8208ae63, &(0x7f0000000080)={0x0, 0x0, @ioapic={0x9000, 0x7, 0xfffffffd, 0x85c, 0x0, [{0x4, 0x6, 0x0, '\x00', 0x9}, {0x4, 0x2, 0xf, '\x00', 0x6}, {0xc2, 0x6, 0x40, '\x00', 0x5}, {0x91, 0x3, 0x5, '\x00', 0x2}, {0x8, 0xa, 0x8}, {0x6, 0x7, 0x7, '\x00', 0x5}, {0x8, 0x1, 0x8, '\x00', 0x9}, {0x6, 0x8, 0x0, '\x00', 0xa}, {0x20, 0x9, 0x4, '\x00', 0x3}, {0x4, 0x50, 0xb, '\x00', 0x1}, {0x47, 0x9, 0x1, '\x00', 0x8}, {0x0, 0x6, 0xd}, {0xfc, 0x5, 0x6, '\x00', 0x80}, {0x6, 0x1, 0x7, '\x00', 0x8}, {0x0, 0x4, 0x1, '\x00', 0x81}, {0xc9, 0x2, 0x81, '\x00', 0x4}, {0x9, 0x4, 0x1, '\x00', 0x5}, {0xf8, 0x9, 0xff, '\x00', 0x1}, {0x8, 0x1, 0x0, '\x00', 0x40}, {0x6, 0x2e, 0x0, '\x00', 0xd}, {0x8, 0x2, 0x0, '\x00', 0x6}, {0xa3, 0x6e, 0x1, '\x00', 0x25}, {0xfb, 0x7, 0x40, '\x00', 0x8}, {0x2, 0xf7, 0x4, '\x00', 0x1}]}})
ioctl$BTRFS_IOC_DEFRAG(r0, 0x50009402, 0x0)
ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, &(0x7f00000002c0)) (async)
ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, &(0x7f00000002c0))
getsockopt$IP_SET_OP_GET_BYNAME(r0, 0x1, 0x53, &(0x7f0000000300)={0x6, 0x7, 'syz1\x00'}, &(0x7f0000000340)=0x28) (async)
getsockopt$IP_SET_OP_GET_BYNAME(r0, 0x1, 0x53, &(0x7f0000000300)={0x6, 0x7, 'syz1\x00'}, &(0x7f0000000340)=0x28)
ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000380)={0x1})
ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f0000001f00)={{<r1=>r0, &(0x7f00000003c0)='@&*\x00', 0x10200, &(0x7f0000000400)={@_ha_fsid={[0xeb45, 0xfff]}, {0x0, 0x3ff, 0x2, 0x10001}}, 0x3, &(0x7f0000000440)={@_ha_fsid}, &(0x7f0000000480)=0x7}, 0xa, &(0x7f0000001dc0)=[{0x1, 0x3, &(0x7f00000004c0)='\x00', &(0x7f0000000500)="f40c4b336db7bd4970873d0210ba476aae280bd265faab9468fdd44a5f2c3631fdf72e28e32482fc7a193c691484fa4b7cb87256b35f7b01b1bb3b0e2c994277a4a22da54009b9dfa54fcc849cdbe1715488d88d1b8212bb5317a89beed61c9eb4af6af926f5a7bd9b377a0a3f72457da66eb12ad483c1aa9bb3d3375ed542acc288a8299f61ec6ec4c93596f6bf50d76035cd5e5165270c65302acd75feda586c22f2786d8244b9fa5142ffbaf5d81bc1", 0xb1, 0x18}, {0x1, 0x0, &(0x7f00000005c0)='\x00', &(0x7f0000000600)="15e56a3c64fda31620ce6988cbba9e34dfaf6f373e0bf2f7646baf91ca1ba5ad5617617a2f7a7e20c0bb393474a021e304304816bf0a2dcbaa62e317376cf73a7f4879d0c48c1c412f8c6998d60da3cb596d4b32e0f101e0fd4bba3085b19502a26f97aec71a6d437d4d03bece8130dc71eca7de418b2847677422a3f77c759c5b56c371c9b1385aa60d1865abda1d9668d0f80f97ba8cd5b1ed8875d4b36f9a632c0c78df17007c49fd1e5606984bbb4b52feb5e9602f664b58cb640d", 0xbd, 0x20}, {0x1, 0x3, &(0x7f00000006c0)='/dev/vcsa#\x00', &(0x7f0000000700)="0bf3539a0ec7a854f25fe31b0b0dfecc3c1985899c39ec23bc6fede9da06d4541ffd35bc7617b3d4a64b9d57ab8126e11fa0c627861bf5623ca1feebad5e5e16f1bf603d46834b846374cb6c82d32bbb08c270b3e56d2074959b911a4fae417644df7daa649e6f388781f9aa97962b0fa3fbdc7b7f5477da45cd7e4c97f93b1c82181ba8d3fbbb986c66b7d3fd00a586386b505c7292316205efca4f7692081525ac6b32b95e9a1ab99ff5beaf9d8d2c011b20622c67f141851c68238d1da6d308c9de253afdbcc0ee6f8048d89737766ba41649fd737726", 0xd8}, {0x1, 0x7, &(0x7f0000000800)='\xae\x89\x00', &(0x7f0000000840)="9d71d44b0dc90c38a428a9954f3e8add0158d67d26722f82dc0f06bebab42695c7e20ff24fbd32a17be707a0b74388080bae5e02300bea16f8403097858ed90bb3f43fe27efebfdd7307370c1c75b6bdd7def09d87bce853b4a1c90b51dd882c8bef9ab9aa6976c4f2e6b98467d4162a76fe9b8c758f45144fcacfa2086df0cfc834c894f5a954b1616847b6c07d006774a19ff29c4dbdffa5ff6cb32c4669725b8d0a120c3eab4c62880c6429146120b5b2ea701d2ecb65d7a610ae54a7da1ed42fd937dc1b42b2512597303df8175ef18d386192b9d18a1792c0337dfb69d9b3facabe2286b8ed459f0582ea482ee63e", 0xf1, 0x10}, {0x2, 0x9, &(0x7f0000000940)='\x00', &(0x7f0000000980)="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", 0x1000, 0x1a}, {0x1, 0x7, &(0x7f0000001980)='&%-@.[)\x00', &(0x7f00000019c0)="142fc918e27ae2542c693a2831d6aca3fe652d086b5cb57724b912f2ab", 0x1d, 0x10}, {0x3, 0x2, &(0x7f0000001a00)='syz1\x00', &(0x7f0000001a40)="1408a0b86d12f2f4458a800c9d0d95ed0a3ffcf43838b1a87c7375b73ffe86efd3d79568a05f7a96f063b5fa9ec829e3170d6b91ddd8ceaaaa45ba395b1850906b77eaa0882899c4631c04b61488649f4ab7b8bef9695fd7b884d6e5cf76de6159911334469a58e5719603008960b6392d", 0x71, 0x10}, {0x1, 0x6, &(0x7f0000001ac0)='\x00', &(0x7f0000001b00)="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", 0xfd, 0x36}, {0x2, 0xfdd, &(0x7f0000001c00)='syz1\x00', &(0x7f0000001c40)="7ebe44f0665741c4156c22f7c66e12cd1f37de5f8a2d6085790693493760424ef795c9d88886c27cf3f538e441ab29487c0e295716f7be86a6aff4159bace8147677bbe107abe4555914accbc2658506605667d2410dab1f0920422e8415b6a47c0b8e8eb64d62de608f4b1961077cb7fa5d3a94c3d49c1a197b96d215836ba9061437db8132039eaf3e9a36e78da089", 0x90, 0x12}, {0x2, 0x8, &(0x7f0000001d00)='#)\x00', &(0x7f0000001d40)="ad1027a1cbf30de6cebd95ab1f1014e2567d5af8d14d5189f83de8af4229fe4c83900967febd4f1a030b1c99b352f28b5c5964264b403718c39c44e39e26f8c6471c8d7b9f887f76278dcc5e649ffc188512b056be6ef518ad9554eb", 0x5c, 0x12}]})
ioctl$USBDEVFS_ALLOC_STREAMS(r0, 0x8008551c, &(0x7f0000001f80)={0xc64e, 0x14, [{0x5, 0x1}, {0x0, 0x1}, {0x4}, {0x7}, {0xc, 0x1}, {0x8, 0x1}, {0xb, 0x1}, {0x5, 0x1}, {0xd}, {0xb, 0x1}, {0x6, 0x1}, {0xa}, {0x0, 0x1}, {0xb, 0x1}, {0x9}, {0x1}, {0x4, 0x1}, {0xa}, {0x5, 0x1}, {0x1, 0x1}]})
ioctl$BTRFS_IOC_DEV_REPLACE(r0, 0xca289435, &(0x7f0000001fc0)={0x2, 0x4, @status={[0x1b, 0x100, 0x622900ae, 0x9, 0x7fff, 0x80000000]}, [0x2, 0x9355, 0x5, 0x27, 0x4, 0x0, 0x0, 0x30, 0x400, 0x10, 0x3, 0x9, 0x100000001, 0xe, 0x80000001, 0x8, 0x8000, 0x7fff, 0x5, 0x9, 0x3, 0x0, 0xb, 0x10, 0x3, 0x8, 0xffffffffffffffff, 0x9000, 0x0, 0xfc, 0x40000000000000, 0x6, 0x4, 0xcbe2, 0x9, 0x9, 0xd, 0x8, 0x0, 0xa, 0x9, 0x0, 0x6d3, 0x6, 0x3, 0x7, 0x2, 0x7, 0x2, 0x9, 0xfff, 0x7f, 0x4, 0x8, 0x5, 0xe4, 0x2, 0x4, 0x6, 0x80000000, 0x9, 0x4, 0x5, 0x100000001]})
symlinkat(&(0x7f0000002a00)='./file0\x00', r1, &(0x7f0000002a40)='./file0\x00')
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002a80), 0x2000, 0x0)
ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r2) (async)
ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r2)
write(r1, &(0x7f0000002ac0)="d6c9", 0x2) (async)
write(r1, &(0x7f0000002ac0)="d6c9", 0x2)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000002b80)={'ip6_vti0\x00', &(0x7f0000002b00)={'ip6_vti0\x00', <r3=>0x0, 0x2f, 0x5, 0x4, 0x9, 0x8, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x80, 0x7800, 0x2, 0x6}})
setsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f0000002bc0)={@mcast2, r3}, 0x14) (async)
setsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f0000002bc0)={@mcast2, r3}, 0x14)
ioctl$VHOST_VDPA_GET_AS_NUM(r1, 0x8004af7a, &(0x7f0000002c00)) (async)
ioctl$VHOST_VDPA_GET_AS_NUM(r1, 0x8004af7a, &(0x7f0000002c00))
ioctl$KVM_HYPERV_EVENTFD(r0, 0x4018aebd, &(0x7f0000002c40)={0x4, r1})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000002c80)={'pimreg0\x00'})
ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000002cc0)={0x0, 0x0, 0x10000000, 0x1})
statx(r0, &(0x7f0000002d00)='./file0\x00', 0x2000, 0x80, &(0x7f0000002d40)) (async)
statx(r0, &(0x7f0000002d00)='./file0\x00', 0x2000, 0x80, &(0x7f0000002d40)={0x0, 0x0, 0x0, 0x0, <r4=>0x0})
setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000002e40)={{{@in=@empty, @in6=@local, 0x4e20, 0x69be, 0x4e24, 0x5, 0xa, 0x0, 0x80, 0xff, r3, r4}, {0xf4, 0x8, 0x9089, 0x0, 0x27a2, 0x2, 0x7fffffff, 0x3}, {0x86, 0x401, 0x9, 0x400}, 0x8c9, 0x6e6bb8, 0x1, 0x0, 0x2, 0x3}, {{@in=@multicast1, 0x4d5, 0x32}, 0xa, @in=@dev={0xac, 0x14, 0x14, 0x26}, 0x3501, 0x1, 0x2, 0xbf, 0x7, 0x0, 0x1}}, 0xe8)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000002fc0)={'syztnl0\x00', &(0x7f0000002f40)={'ip6_vti0\x00', r3, 0x73, 0x2, 0xfb, 0x8, 0x10, @rand_addr=' \x01\x00', @mcast2, 0x10, 0x7, 0x1, 0x8}})
ioctl$SNAPSHOT_SET_SWAP_AREA(r0, 0x400c330d, &(0x7f0000003000)={0xb, 0x200000})
ioctl$BLKDISCARDZEROES(r1, 0x127c, &(0x7f0000003040)) (async)
ioctl$BLKDISCARDZEROES(r1, 0x127c, &(0x7f0000003040))
pwritev2(r0, &(0x7f00000031c0)=[{&(0x7f0000003080)="90a87e80a44419e2b33be69a3ffa163c64f44aafb50ef1fd353ffd261b7a63d1aadfae8c2fc25aace48e1153d979d3c22ba552072d13ae01d1de4342c45596a7ad3cf9bcd34275e5fafa3fd86f8aeed1253accc7151289a300bf0100cda8", 0x5e}, {&(0x7f0000003100)="70b1cd83c1fd352c10ac455447d28036963415529261b436b381a2c748d747e15c56f880bbfc4ace615cbeec74edfee5d551bb29c5e481efff0844b4fa124bdc6becb867dcf44589cbc9001459fd6753d55e20276b1e3972718488dbd4796abb6733312e214e6d3d6fac9d6d56231c510c398deabf48d19bed9af4799541f4d6c714378f63dc85366f02a01e9b4d54e960e1c6b3f0aaff5dc094259b10bead5e68c943db48677fbdb3ed9d03253356f42d", 0xb1}], 0x2, 0x80000001, 0x3, 0x8)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000003240)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f0000003340)={&(0x7f0000003200)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000003300)={&(0x7f0000003280)={0x80, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_KEY={0x54, 0x50, 0x0, 0x1, [@NL80211_KEY_TYPE={0x8, 0x7, 0x1}, @NL80211_KEY_SEQ={0x14, 0x4, "44a91fe3f3958002ea6de40a156babfb"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "a44f88d25715b2aa276615ecc9"}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "51e2dae7b8"}, @NL80211_KEY_MODE={0x5}]}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "6865acc795"}, @NL80211_ATTR_KEY_DEFAULT={0x4}]}, 0x80}, 0x1, 0x0, 0x0, 0x4}, 0x44041)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x4, 0x7, &(0x7f0000003380)=0x1) (async)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x4, 0x7, &(0x7f0000003380)=0x1)

36.689659006s ago: executing program 2 (id=357):
r0 = io_uring_setup(0xad5, &(0x7f0000000100)={0x0, 0x9371, 0x0, 0xffffffff, 0xfffffffc})
close(r0)
sync()
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x101904, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./sys/bus/pci/devices/0000:00:01.0/msi_bus\x00', 0x8342, 0x39)
pwrite64(r2, &(0x7f0000000100)='\n', 0x1, 0x8000c5b)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x104)
fcntl$lock(r3, 0x5, &(0x7f0000000140)={0x0, 0x2, 0x7fffffffffffffff, 0x9c4a})
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000580)={'syzkaller0\x00', 0xca02})
r4 = socket$packet(0x11, 0x3, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', <r5=>0x0})
setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000300)={r5, 0x1, 0x0, @broadcast}, 0x49)
setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000200)={r5, 0x11, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x42}}, 0x10)
setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000c00)={r5, 0x1, 0x6}, 0x10)
prctl$PR_SET_THP_DISABLE(0x29, 0x0)
readv(r1, &(0x7f00000003c0)=[{&(0x7f00000005c0)=""/84, 0x54}], 0x1)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r6, 0x8933, &(0x7f0000000000)={'wg2\x00'})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bond_slave_0\x00'})
socket$netlink(0x10, 0x3, 0x14)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f00000000c0)={'vcan0\x00'})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x88840, 0x0)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r2, 0x8982, &(0x7f0000000180)={0x6, 'vxcan1\x00', {0x6}, 0x2d10})
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r7 = openat(r3, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/msi_bus\x00', 0x640303, 0x0)
write(r7, &(0x7f00000004c0)="9a88d19ac1", 0x5)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000030000000200000002"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x20000000000000fe, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)

36.597400129s ago: executing program 5 (id=358):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x83, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r1, 0x4008ae90, &(0x7f00000000c0)={0x6666666666667fb})
syz_usb_connect(0x2, 0xb3, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ef020140000000000001000000010902a1000201008032080b00020e03000009040000000e0100000d240100012700006cdc020101112402010102000000000000000002000009240302010100010009040100000e0200000e240101470081000200000001001b240401015955593200001000800000aa00389b711001000000001e240501008002e0010000000000000000006009001516050001"], &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0})
r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0)
write$UHID_CREATE2(r2, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119)
write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000280)={0x29, 0x4, 0x0, {0x6, 0x3, 0x1, 0x0, [0x0]}}, 0x29)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r2, 0x1000)
r3 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0xbb42)
r4 = dup3(r3, r2, 0x80000)
read$FUSE(r4, 0x0, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x8, 0x6, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0xc369d000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
epoll_pwait2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x210000, &(0x7f0000000fc0)={[{@user_xattr}, {@init_itable_val={'init_itable', 0x3d, 0xe}}, {@dioread_nolock}, {@acl}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x70}}, {@sb}, {@stripe={'stripe', 0x3d, 0xbb4b}}, {@data_err_abort}, {@max_batch_time={'max_batch_time', 0x3d, 0x3fe}}, {@user_xattr}, {@noinit_itable}]}, 0x3, 0x589, &(0x7f0000000a00)="$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")
syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000cb768405e0483020b990102030109022400010000000009040000025c291d0009050900000000060709050ae5"], 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$AUTOFS_IOC_PROTOSUBVER(r5, 0x80049367, &(0x7f00000002c0))
syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x80401c, &(0x7f0000000040)=ANY=[@ANYBLOB="666c7573685f6d657267652c6e6f666c7573685f6d657267652c6d6f64653d667261676d656e743a7365676d656e742c636f6d70726573735f63616368652c696e6c696e655f78617474722c636f6d70726573735f63616368652c6e6f696e6c696e655f78617474722c6e6f646973636172642c6261636b67726f756e645f67633d6f6e2c6261636b67726f756e645f67633d6f66662c636865636b706f696e743d64697361626c652c617467632c67635f6d657267652c6e6f626172726965722c004b1c091f21dfc606226168fd668d440f"], 0xfd, 0x5532, &(0x7f0000005a80)="$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")
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a000028060001001a"], 0x1c}}, 0x0)
r8 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), r7)
sendmsg$WG_CMD_SET_DEVICE(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x1c, r8, 0x1, 0x70b526, 0x25dfdbfc, {}, [@WGDEVICE_A_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc004811}, 0x4004010)
r9 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183b41, 0x12b)
ioctl$FS_IOC_RESVSP(r9, 0x40305828, 0x0)
getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000180)={<r10=>0x0}, &(0x7f00000001c0)=0xc)
ioctl$sock_SIOCSPGRP(r6, 0x8902, &(0x7f0000000240)=r10)
ioctl$FS_IOC_FIEMAP(r9, 0xc020660b, &(0x7f00000008c0)={0x4, 0x3f015764000, 0x2, 0x6})

36.462266702s ago: executing program 2 (id=362):
syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x10000, 0xffffffffffffffff, 0x0, 0x0, 0x0) (async)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x10, 0x0) (async)
syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file0/file0\x00', 0x3005840, 0x0, 0x5, 0x0, 0x0)
mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x104000, 0x0) (async)
mount$bind(&(0x7f0000000040)='./file0/file0/../file0\x00', &(0x7f0000000000)='./file0/file0/../file0\x00', 0x0, 0xa1c08, 0x0) (async)
mount$fuse(0x0, &(0x7f00000005c0)='./file0/file0\x00', 0x0, 0x88000, 0x0) (async)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2125099, 0x0) (async)
open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) (async)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='tmpfs\x00', 0x0, 0x0)
removexattr(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)=@random={'osx.', '\x00'}) (async)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) (async)
setresuid(0x0, 0xee00, 0x0) (async)
capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x803, 0x4, 0x7}) (async)
syz_read_part_table(0x104e, &(0x7f0000003180)="$eJzsz8GNwkAMBdCfTXaVPdEJNdAEdzqBeiiOGzckI0dB6QA4vCeNxvL8seTwUT+pMVWVIZm6Mb1eDlvZhlTGpTolc9//3f1N0uec/Rq8bX/+lsw6plOXzLskj9xTPfJ4fcOKAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPD1ngEAAP//EIsMCA==") (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000440), 0x8, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})

36.197660739s ago: executing program 2 (id=364):
sched_setaffinity(0x0, 0x0, 0x0) (async)
sched_setaffinity(0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r0 = socket$nl_route(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0) (async)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = open(&(0x7f0000000080)='./file0\x00', 0x3fe, 0x0)
finit_module(r2, 0x0, 0x1)
getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000900)=ANY=[@ANYBLOB="48000000100039042abd70000000000000000000", @ANYRES32=r3, @ANYBLOB="01180200031100002800128008000100736974001c00028006001d0008000000050004000c00000008000200ac"], 0x48}, 0x1, 0x0, 0x0, 0x40054d0}, 0x8020)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001000)=[{{&(0x7f0000000940)=@abs={0x1, 0x0, 0x4e23}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x40}}], 0x1, 0x4) (async)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001000)=[{{&(0x7f0000000940)=@abs={0x1, 0x0, 0x4e23}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x40}}], 0x1, 0x4)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9, 0x0, 0x0, 0x4000000}, 0x4040804) (async)
sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9, 0x0, 0x0, 0x4000000}, 0x4040804)
r5 = syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./bus\x00', 0x408, &(0x7f0000000180)=ANY=[@ANYBLOB='nonumtail=0,shortname=mixed,utf8=0,shortname=mixed,uni_xlate=0,uni_xlate=1,gid=', @ANYRESHEX=0xee00, @ANYBLOB="2c756e695f786c6174653d302c696f636861727365743d63703433372c73686f72746e616d653d77696e6e742c616c6c6f775f7574696d653d30303030303030303030303030303030303030303030342c73686f72746e616d653d6d697865642c636865636b3d7374726963742c646d61736b3d30303030303030303030303030303030303030303031352c6e6e6f6e756d7461696c3d312c73686f72746e616d653d6d010000002c756e695f786c6174653d312c00"], 0x25, 0x34f, &(0x7f00000004c0)="$eJzs3T9sG2UUAPBnLondiBIPSBVMhg0JVU0QA0yJqiJVZIAii38LFk35E5tKsbAUhjheQBUTiAUJJrYOMHZGDAixMbBSJFRALHSr1IhDts/2OXZoMji06u83RE/v+9597y6n3CVKvrzRjs2L83Hp5s0bUSoVYm717GrcKkQ5FiKJvt2Y6uOF6XkA4C53K03j77TvzrM/XRxEnv0AcO/qPf/fOjlKFI9QfOXBWbQEAMzYIb//f2Fq9vLM2gIAZmji+f/42PC+H/PPDX8nAAC4d7306mvPr61HXKhUShGNj1rVVjWeHY2vXYp3oh4bcSaWYi+i/6LQf1vofnzu/Pq5M5Wu38tR7Va0qhGNdqvaf1NYS3r1xViOpShn9emwPunWL/fqKxGx2+6tH41Cqzofi9n6vyzGRqzEUjw8UR9xfv3cSiU7QLUxqG9HdKI0OIlu/6djKX56My5HPS5Gt3bU/85ypXI2XR+rb10t9uYBAAAAAAAAAAAAAAAAAAAAAMAsnK4MlYf736SNduvDC/snlMf2x6n2h7P9gTr9/YHS4mB3nivJ/v2BxvfnKcVcPPC/njkAAAAAAAAAAAAAAAAAAADcPZrbC1Gr1ze2mtsfbOaDdi7z3g9ff3ciBkNzWem7yagqsuTYcQYTc0dOYrhEOixPk7E5WZBEDCbv1q5eG3acn1McnsVEeTcoTgwVsp5q9frJx377YlrVP91gt5dJYuKyjAeFbP3cUOOhbqIUEXsHVR0crNxhzvU0TQ8q3/l8sioKEXNx5DYOEXx/4+1HnmqeerqX+Tbb9OGJJ5devv7ZV39u1urR6V+Zen1hq7mXHuLI3V4nh5Lc/VPIrnNhyp0wPeiMMp2t5nYt+fmvVx795Md9k5Pp90+az7x/8Frf7M8s9INCRHlwEf6r1fkpN//04PXbw7v36J+4U1+u1q7t/PrHYatyXyRs1AEAAAAAAAAAAAAAAAAAAMci97fiR/DMi7PrCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACO3+j//+eCzkTmMMHtdkwOFTe2mgcufuJYTxUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgPvYvwEAAP//RyVySg==")
ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r5, 0xc080661a, &(0x7f00000002c0)={@id={0x2, 0x0, @c}}) (async)
ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r5, 0xc080661a, &(0x7f00000002c0)={@id={0x2, 0x0, @c}})
openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) (async)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="05000000040000000c0000000b"], 0x50)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x19, 0x4, 0x4, 0xb, 0x0, 0xffffffffffffffff, 0x2}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000200007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000200007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000018110000", @ANYRES32=r7], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000018110000", @ANYRES32=r7], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r8}, 0xc)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r6, 0xc0185879, &(0x7f0000000080)={@desc={0x1, 0x0, @desc4}})

35.633437012s ago: executing program 2 (id=367):
r0 = eventfd(0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_HYPERV_EVENTFD(r2, 0x4018aebd, &(0x7f0000000200)={0x1, r0})
r3 = syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000c00000/0x400000)=nil)
r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r5 = add_key$user(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000800)="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", 0x1000, 0xfffffffffffffffc)
keyctl$read(0xb, r5, &(0x7f0000001800)=""/205, 0xcd)
ioctl$UI_DEV_SETUP(r4, 0x405c5503, 0x0)
ioctl$UI_SET_EVBIT(r4, 0x40045564, 0xffffffffffffffff)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x20000, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
ioctl$KVM_GET_IRQCHIP(r7, 0xc208ae62, &(0x7f0000000b40)={0x2, 0x0, @ioapic={0xdddd0000, 0x14000, 0x7, 0xff, 0x0, [{0x4, 0xbf, 0x8, '\x00', 0x4}, {0x9, 0xb, 0x9, '\x00', 0x3}, {0x2d, 0x22, 0x6, '\x00', 0x3}, {0x9a, 0x3, 0x8, '\x00', 0xfb}, {0x12, 0x2, 0x8, '\x00', 0x5}, {0xf6, 0x1, 0x11, '\x00', 0x8}, {0xe, 0x0, 0x5, '\x00', 0x7}, {0xb1, 0x2, 0xff, '\x00', 0x6}, {0x1, 0x4, 0x2a, '\x00', 0x6}, {0x7, 0x1, 0x5, '\x00', 0x5}, {0x5, 0x3, 0x1, '\x00', 0x31}, {0x2, 0x1, 0x5, '\x00', 0xa}, {0x8, 0x7, 0xfc, '\x00', 0x40}, {0xb8, 0x40, 0xd8, '\x00', 0x5}, {0x0, 0x79, 0x4, '\x00', 0x6}, {0x6, 0xee, 0x0, '\x00', 0x5}, {0x9, 0x6, 0x9, '\x00', 0x8}, {0x2f, 0xfd, 0x66, '\x00', 0x3}, {0x6, 0x8, 0x8, '\x00', 0x70}, {0xc, 0x5f, 0x43}, {0x4, 0x4, 0x2, '\x00', 0x4}, {0x6, 0x10}, {0x88, 0x3, 0xa, '\x00', 0x10}, {0x0, 0xd3, 0x12, '\x00', 0x9}]}})
syz_kvm_add_vcpu$x86(r3, &(0x7f0000000240)={0x0, &(0x7f0000000280)=[@wrmsr={0x65, 0x20, {0x40000000, 0x10000}}, @code={0xa, 0x25, {"48c7c15d00010048c7c2010000000f01c10f01d9"}}], 0x45})
syz_kvm_add_vcpu$x86(r3, &(0x7f00000007c0)={0x0, &(0x7f0000001900)=[@nested_vmresume={0x130, 0x18}, @nested_load_syzos={0x136, 0x58, {0x0, 0x9, [@nested_amd_inject_event={0x180, 0x38, {0x2, 0xbf, 0x2, 0x1, 0x1}}]}}, @cpuid={0x64, 0x18, {0x10, 0x8}}, @nested_amd_clgi={0x17f, 0x10}, @uexit={0x0, 0x18, 0x9}, @nested_amd_vmsave={0x183, 0x18, 0x1}, @rdmsr={0x66, 0x18, {0x8dc}}, @nested_amd_set_intercept={0x181, 0x30, {0x1, 0x6401, 0x9}}, @nested_vmlaunch={0x12f, 0x18}, @nested_vmresume={0x130, 0x18, 0x1}, @nested_load_syzos={0x136, 0x1fa, {0x0, 0x3, [@code={0xa, 0x5c, {"c4e149143539630000400f070f001fc74424009d000000c744240200000000ff1c2436470f07f32e0298ef9c000066baf80cb888584581ef66bafc0c66ed43f6f1b8010000000f01d90f09"}}, @nested_vmlaunch={0x12f, 0x18}, @nested_amd_vmsave={0x183, 0x18}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x3, @ro64=0x2400, 0x0, 0x8001, 0xffffffffffffffff}}, @nested_load_code={0x12e, 0x79, {0x2, "b9850900000f32470f01c966bad00466ed66baf80cb8e8ecf780ef66bafc0ced4b0fc7aa80fc0000c744240046000000c7442402ffb50000c7442406000000000f011424420f0766bad004b000eec4426dba0fb9800000c00f3235008000000f30"}}, @nested_amd_vmsave={0x183, 0x18, 0x1}, @wrmsr={0x65, 0x20, {0x923, 0x4}}, @code={0xa, 0x65, {"67450f2171b9c5030000b800800000ba000000000f3066baf80cb8ce368586ef66bafc0cb000ee66ba2000b8eae30000ef6636f30f1efa0f01ca660fc7b5cd5173f8676765440f01c866ba4200b000ee420f20da"}}]}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x2, @control16, 0x100, 0x10001, 0x6}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x1, @ro64=0x2401, 0x81, 0x8, 0xd}}, @nested_vmlaunch={0x12f, 0x18}, @rdmsr={0x66, 0x18, {0xb6c}}, @rdmsr={0x66, 0x18, {0xaf2}}, @cpuid={0x64, 0x18, {0x1ff, 0xff}}, @wr_drn={0x68, 0x20, {0x4}}, @nested_load_code={0x12e, 0x5f, {0x0, "67410f01cfb9800000c00f3235001000000f30c401016dcb46de94e800d00ed666b844000f00d88f29489340006566410f0966430f3800de67440f01c466baa100b8af180000ef"}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x0, @save_area=0x556, 0x8, 0x4, 0x2725}}, @wr_drn={0x68, 0x20, {0x6, 0xc}}, @set_irq_handler={0xc8, 0x20, {0x6c, 0x1}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x0, @save_area=0x55d, 0xd3b1, 0x3, 0x40}}, @nested_vmlaunch={0x12f, 0x18}, @nested_vmlaunch={0x12f, 0x18}, @nested_amd_stgi={0x17e, 0x10}, @nested_vmlaunch={0x12f, 0x18, 0x3}, @nested_vmlaunch={0x12f, 0x18}, @nested_vmresume={0x130, 0x18, 0x1}], 0x5c1})
syz_usb_connect$uac2(0x5, 0xb0, &(0x7f0000000140)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x582, 0x44, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9e, 0x3, 0x1, 0x7f, 0x80, 0x8, {0x8, 0xb, 0x1, 0x1, 0x1, 0xc, 0x20, 0x6}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x3, 0x0, 0x3e, 0xff}, [@source_unit={0x8, 0x24, 0xa, 0x76, 0x0, 0xff, 0x1, 0x3}, @selector_unit={0xc, 0x24, 0xb, 0x8, 0x7, "79582f83cd6a8b"}, @sample_rate={0x9, 0x24, 0xd, 0x2, 0x0, 0x1, [0x0]}, @sample_rate={0x13, 0x24, 0xd, 0x6, 0x2, 0x3, [0x3, 0x2, 0x3, 0x1, 0x2, 0x0]}, @mixer_unit={0x5, 0x24, 0x4, 0x3, 0xe}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x8, 0x4, 0x6, {0x8, 0x25, 0x1, 0x82, 0x30, 0x4, 0x28}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0xe8, 0xff, 0x5, {0x8, 0x25, 0x1, 0x3, 0xc, 0x9, 0xf29}}}}}}}}]}}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0})
eventfd(0x0) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) (async)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async)
ioctl$KVM_HYPERV_EVENTFD(r2, 0x4018aebd, &(0x7f0000000200)={0x1, r0}) (async)
syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000c00000/0x400000)=nil) (async)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async)
add_key$user(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000800)="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", 0x1000, 0xfffffffffffffffc) (async)
keyctl$read(0xb, r5, &(0x7f0000001800)=""/205, 0xcd) (async)
ioctl$UI_DEV_SETUP(r4, 0x405c5503, 0x0) (async)
ioctl$UI_SET_EVBIT(r4, 0x40045564, 0xffffffffffffffff) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x20000, 0x0) (async)
ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) (async)
ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) (async)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) (async)
ioctl$KVM_GET_IRQCHIP(r7, 0xc208ae62, &(0x7f0000000b40)={0x2, 0x0, @ioapic={0xdddd0000, 0x14000, 0x7, 0xff, 0x0, [{0x4, 0xbf, 0x8, '\x00', 0x4}, {0x9, 0xb, 0x9, '\x00', 0x3}, {0x2d, 0x22, 0x6, '\x00', 0x3}, {0x9a, 0x3, 0x8, '\x00', 0xfb}, {0x12, 0x2, 0x8, '\x00', 0x5}, {0xf6, 0x1, 0x11, '\x00', 0x8}, {0xe, 0x0, 0x5, '\x00', 0x7}, {0xb1, 0x2, 0xff, '\x00', 0x6}, {0x1, 0x4, 0x2a, '\x00', 0x6}, {0x7, 0x1, 0x5, '\x00', 0x5}, {0x5, 0x3, 0x1, '\x00', 0x31}, {0x2, 0x1, 0x5, '\x00', 0xa}, {0x8, 0x7, 0xfc, '\x00', 0x40}, {0xb8, 0x40, 0xd8, '\x00', 0x5}, {0x0, 0x79, 0x4, '\x00', 0x6}, {0x6, 0xee, 0x0, '\x00', 0x5}, {0x9, 0x6, 0x9, '\x00', 0x8}, {0x2f, 0xfd, 0x66, '\x00', 0x3}, {0x6, 0x8, 0x8, '\x00', 0x70}, {0xc, 0x5f, 0x43}, {0x4, 0x4, 0x2, '\x00', 0x4}, {0x6, 0x10}, {0x88, 0x3, 0xa, '\x00', 0x10}, {0x0, 0xd3, 0x12, '\x00', 0x9}]}}) (async)
syz_kvm_add_vcpu$x86(r3, &(0x7f0000000240)={0x0, &(0x7f0000000280)=[@wrmsr={0x65, 0x20, {0x40000000, 0x10000}}, @code={0xa, 0x25, {"48c7c15d00010048c7c2010000000f01c10f01d9"}}], 0x45}) (async)
syz_kvm_add_vcpu$x86(r3, &(0x7f00000007c0)={0x0, &(0x7f0000001900)=[@nested_vmresume={0x130, 0x18}, @nested_load_syzos={0x136, 0x58, {0x0, 0x9, [@nested_amd_inject_event={0x180, 0x38, {0x2, 0xbf, 0x2, 0x1, 0x1}}]}}, @cpuid={0x64, 0x18, {0x10, 0x8}}, @nested_amd_clgi={0x17f, 0x10}, @uexit={0x0, 0x18, 0x9}, @nested_amd_vmsave={0x183, 0x18, 0x1}, @rdmsr={0x66, 0x18, {0x8dc}}, @nested_amd_set_intercept={0x181, 0x30, {0x1, 0x6401, 0x9}}, @nested_vmlaunch={0x12f, 0x18}, @nested_vmresume={0x130, 0x18, 0x1}, @nested_load_syzos={0x136, 0x1fa, {0x0, 0x3, [@code={0xa, 0x5c, {"c4e149143539630000400f070f001fc74424009d000000c744240200000000ff1c2436470f07f32e0298ef9c000066baf80cb888584581ef66bafc0c66ed43f6f1b8010000000f01d90f09"}}, @nested_vmlaunch={0x12f, 0x18}, @nested_amd_vmsave={0x183, 0x18}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x3, @ro64=0x2400, 0x0, 0x8001, 0xffffffffffffffff}}, @nested_load_code={0x12e, 0x79, {0x2, "b9850900000f32470f01c966bad00466ed66baf80cb8e8ecf780ef66bafc0ced4b0fc7aa80fc0000c744240046000000c7442402ffb50000c7442406000000000f011424420f0766bad004b000eec4426dba0fb9800000c00f3235008000000f30"}}, @nested_amd_vmsave={0x183, 0x18, 0x1}, @wrmsr={0x65, 0x20, {0x923, 0x4}}, @code={0xa, 0x65, {"67450f2171b9c5030000b800800000ba000000000f3066baf80cb8ce368586ef66bafc0cb000ee66ba2000b8eae30000ef6636f30f1efa0f01ca660fc7b5cd5173f8676765440f01c866ba4200b000ee420f20da"}}]}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x2, @control16, 0x100, 0x10001, 0x6}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x1, @ro64=0x2401, 0x81, 0x8, 0xd}}, @nested_vmlaunch={0x12f, 0x18}, @rdmsr={0x66, 0x18, {0xb6c}}, @rdmsr={0x66, 0x18, {0xaf2}}, @cpuid={0x64, 0x18, {0x1ff, 0xff}}, @wr_drn={0x68, 0x20, {0x4}}, @nested_load_code={0x12e, 0x5f, {0x0, "67410f01cfb9800000c00f3235001000000f30c401016dcb46de94e800d00ed666b844000f00d88f29489340006566410f0966430f3800de67440f01c466baa100b8af180000ef"}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x0, @save_area=0x556, 0x8, 0x4, 0x2725}}, @wr_drn={0x68, 0x20, {0x6, 0xc}}, @set_irq_handler={0xc8, 0x20, {0x6c, 0x1}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x0, @save_area=0x55d, 0xd3b1, 0x3, 0x40}}, @nested_vmlaunch={0x12f, 0x18}, @nested_vmlaunch={0x12f, 0x18}, @nested_amd_stgi={0x17e, 0x10}, @nested_vmlaunch={0x12f, 0x18, 0x3}, @nested_vmlaunch={0x12f, 0x18}, @nested_vmresume={0x130, 0x18, 0x1}], 0x5c1}) (async)
syz_usb_connect$uac2(0x5, 0xb0, &(0x7f0000000140)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x582, 0x44, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9e, 0x3, 0x1, 0x7f, 0x80, 0x8, {0x8, 0xb, 0x1, 0x1, 0x1, 0xc, 0x20, 0x6}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x3, 0x0, 0x3e, 0xff}, [@source_unit={0x8, 0x24, 0xa, 0x76, 0x0, 0xff, 0x1, 0x3}, @selector_unit={0xc, 0x24, 0xb, 0x8, 0x7, "79582f83cd6a8b"}, @sample_rate={0x9, 0x24, 0xd, 0x2, 0x0, 0x1, [0x0]}, @sample_rate={0x13, 0x24, 0xd, 0x6, 0x2, 0x3, [0x3, 0x2, 0x3, 0x1, 0x2, 0x0]}, @mixer_unit={0x5, 0x24, 0x4, 0x3, 0xe}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x8, 0x4, 0x6, {0x8, 0x25, 0x1, 0x82, 0x30, 0x4, 0x28}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0xe8, 0xff, 0x5, {0x8, 0x25, 0x1, 0x3, 0xc, 0x9, 0xf29}}}}}}}}]}}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0}) (async)

34.221783428s ago: executing program 4 (id=374):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@can_newroute={0x154, 0x18, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@CGW_CS_CRC8={0x11e, 0x6, {0x0, 0xff, 0x3, 0x0, 0x7, "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", 0x0, "5c8d586b2a88d818b56d2a5e15c8a95d29e5b2ea"}}, @CGW_CS_XOR={0x8, 0x5, {0x1, 0xf4, 0xfffffffffffffffd, 0xfb}}, @CGW_MOD_OR={0x15, 0x2, {{{0x4, 0x1}, 0x8, 0x2, 0x0, 0x0, "f57de0eb74757e1d"}, 0x3}}]}, 0x154}}, 0x404c004)
ioctl$BTRFS_IOC_SYNC(r0, 0x9408, 0x0)

34.221081988s ago: executing program 4 (id=375):
syz_mount_image$f2fs(&(0x7f0000000100), &(0x7f0000002500)='./file1\x00', 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="6163746976655f6c6f67733d342c66617374626f6f742c746573745f64756d6d795f656e6372797074696f6e2c6673796e635f6d6f64653d7374726963742c00200da779e57c52e33a83fdbd563a5b7c6b958cb6e49387a5ba5a89b0887c0292eb888cc8efa81040100d83ba748033542625bc334eaf793332891541000f3c63c0a5f0af254a5bd1f4b81d0c5188ddcadf07eff7b49004e0b243a8a4d93632fbe9ab868d88310829d8e04a3c0572143a3d3d1472cc5da6f72bb097f5f7b95a09e442c0a1463aaa90db7dcbc542dc5bced278eda11583f810469b706968e793db3230"], 0x1, 0x105eb, &(0x7f000000cf00)="$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")
r0 = open(&(0x7f0000000000)='./file1\x00', 0x80242, 0x1df2a23c5997fabf) (async)
timer_create(0x4, &(0x7f0000000480)={0x0, 0xe, 0x1, @thr={&(0x7f0000000380)="7762d92af9d05aaa9219c0655a2a64aae1964e7b2740a88350e1da9ce7b7eaa8ec26393f76078dba1bf0b2cd925b573107675a323a81e2bb4f896e2aebc6032fa805471f06739f718c562082cc558f91df0599493b3afa700182b2c63952e76e5808b266e5", &(0x7f0000000500)="0b6b2da3d93428638edd6cd53f9275e93f5a1911d18db520013ece726608eaa476fba461533deaab59860b92c56484664a2c1fa2ad08c65f7aafe0"}}, &(0x7f0000000240))
r1 = socket$inet6(0xa, 0x2, 0x0) (async)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) (async)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) (async)
sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001500)=@newqdisc={0x68, 0x24, 0xe0b, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x38, 0x2, {{0x1ff, 0x4, 0x0, 0x5, 0xfffffffd, 0x8}, [@TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x80000001, 0x6, 0x8, 0xfffffffe, 0xd99d}}]}]}}}]}, 0x68}}, 0x0) (async)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async)
sendmmsg$inet(r1, &(0x7f0000001b40)=[{{&(0x7f0000000000)={0x2, 0x4ea4, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000440)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x6}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}], 0x30}}], 0x1, 0xc0) (async)
write$FUSE_CREATE_OPEN(r0, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x3, 0x7, 0x8000000200007, 0x282b, 0x20103, 0x80001, {0x200004, 0x10005c62, 0x203, 0x1000000000, 0x83, 0xd616, 0x10000006, 0x6, 0x0, 0x0, 0x0, 0xee00, 0xee00, 0x8, 0x1}}, {0x0, 0xa}}}, 0xa0)
sendfile(r0, r0, &(0x7f0000000100)=0x4, 0x80000000) (async)
pipe(&(0x7f0000000000)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff}) (async)
r7 = open(&(0x7f0000000000)='./bus\x00', 0x141b42, 0x8)
pipe(&(0x7f0000000080)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
write$binfmt_script(r6, 0x0, 0xb) (async)
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x2}, &(0x7f0000000b80)=<r10=>0x0)
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) (async)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async)
timer_settime(r10, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) (async)
splice(r8, 0x0, r7, 0x0, 0x1000, 0x1)
splice(r5, 0x0, r9, 0x0, 0x80, 0x0) (async)
munmap(&(0x7f0000000000/0x1000)=nil, 0x1000) (async)
write$binfmt_misc(r6, &(0x7f0000000100)='F', 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) (async)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3004419, 0x0, 0x1, 0x0, 0x0) (async)
mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000540)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) (async)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0)

33.696771841s ago: executing program 3 (id=379):
syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000380)={[{@grpquota}, {@nogrpid}, {@quota}, {@nobh}]}, 0x1, 0x511, &(0x7f0000000ac0)="$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")
r0 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x10c062)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/fscaps', 0x2000, 0x190)
sendmsg$NL80211_CMD_NEW_KEY(r1, 0x0, 0x20000090)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
getsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, &(0x7f0000000480))
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000080)={r0, 0x1, {0x0, 0x0, 0x0, 0x5a, 0x80, 0x0, 0x0, 0x119, 0x0, "faf90002000000bd3fe37d58128bbad0099cebdc25f5ab60b534464c516bdd8a0f35000000000000000000005100", "42d8cc26f7061a74df2cfc1fc89f399e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd0c7f3f800b2f7b6aa54cc50c1fcaed1e0800", "141802c4daf4162e43ac61b7ad3300", [0xbffffffffffffcec, 0x100]}})
ioctl$LOOP_CLR_FD(r0, 0x4c01)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r5, 0x6, 0x25, &(0x7f0000000180)=0x1000002, 0x4)
sendfile(r0, r0, 0x0, 0x2000000000409)
socket$can_raw(0x1d, 0x3, 0x1)
pipe2(&(0x7f0000000040), 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x5, 0x0, 0x7fff0001}]})
setfsuid(0x0)
mkdir(&(0x7f0000000000)='./bus\x00', 0x0)

183.270826ms ago: executing program 4 (id=380):
r0 = io_uring_setup(0x3454, &(0x7f0000000080)={0x0, 0xb8cc, 0x8, 0x1})
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c0100001000130726bd70000000000000000000000000000000ffffe0000002ac1414bb0000000000000000000000004e22000100000003020000003a000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fe8000000000000000000000000000bb0000000032000000fe8000000000000000000000000000aa0000000000000000000000000000000008000000000000000a000000000000000600000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000200000000000000f8ffffffffffffff0c000000000000000200000029bd7000000400000200010028000000000000004c001200726663343534332867636d28616573292900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000"], 0x13c}, 0x1, 0x0, 0x0, 0x80c4}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x800, &(0x7f0000000000), 0x26, 0x756, &(0x7f00000002c0)="$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")
setpriority(0x0, 0xff, 0x80000000008)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000040)={0x81}, 0x8)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x10)
ioctl$FS_IOC_ENABLE_VERITY(r3, 0x40806685, &(0x7f0000000a80)={0x1, 0x2, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1})
ioctl$SIOCGIFHWADDR(r2, 0x8927, &(0x7f0000000000)={'team_slave_0\x00'})
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
fcntl$setown(r4, 0x8, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
mmap(&(0x7f0000086000/0x3000)=nil, 0x3000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xef7ef000)
close(r5)
madvise(&(0x7f0000130000/0xd000)=nil, 0xd000, 0x15)

182.707476ms ago: executing program 5 (id=381):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x4000)
io_setup(0x1000, &(0x7f00000003c0)=<r0=>0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f0000001400)="0d0ad7c36d6617110e434332d6ac582208222cfb7c37ce1148f448455bc37f5f70c92774dcb201629979039d7c8943b2", 0x30, 0x6d91fb6122d891cc, 0x0, 0x0)
r1 = open(&(0x7f0000000780)='./bus\x00', 0x14337e, 0x0)
io_submit(r0, 0x1, &(0x7f0000001d00)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x0, r1, &(0x7f0000000340)='p', 0x300}])
r2 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040))
ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000900)={{&(0x7f00001eb000/0x800000)=nil, 0x800000}, 0x1})
ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000000)={&(0x7f00005a7000/0x3000)=nil, &(0x7f0000add000/0x1000)=nil, 0x3000, 0x1})

182.385926ms ago: executing program 5 (id=382):
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wake_lock', 0x202, 0xc4)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000300)=@v2={0x2, @adiantum, 0x0, '\x00', @c})
syz_usb_connect(0x1, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="1201ff0133c7a408b4043168ab2c01020301090224000101cec0150904"], &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]})
syz_usb_connect(0x3, 0x11e8, &(0x7f0000000480)={{0x12, 0x1, 0x300, 0xc7, 0xcb, 0xf2, 0x10, 0xf92, 0x1, 0xbf30, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x11d6, 0x4, 0xe, 0x8, 0x0, 0x7, "", [{{0x9, 0x4, 0xe4, 0x3, 0xa, 0xdd, 0x8f, 0x6b, 0x2f, [@uac_control={{0xa, 0x24, 0x1, 0xf4, 0x34}, [@processing_unit={0x8, 0x24, 0x7, 0x2, 0x1, 0x1, "ac"}, @processing_unit={0xc, 0x24, 0x7, 0x5, 0x2, 0x9, "bedae14163"}, @feature_unit={0xd, 0x24, 0x6, 0x3, 0x2, 0x3, [0x4, 0x9, 0x7], 0x55}, @selector_unit={0x9, 0x24, 0x5, 0x2, 0x4c, "5d7ab519"}]}, @cdc_ncm={{0x7, 0x24, 0x6, 0x0, 0x1, "bced"}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0x8c19, 0x7, 0x1, 0x50}, {0x6, 0x24, 0x1a, 0x5, 0x39}}], [{{0x9, 0x5, 0x9, 0x8, 0x200, 0x5, 0x2, 0x7, [@generic={0x8d, 0x30, "fd81eb8b010fb17208e8664020a4139c7b70c1fac03d65e79b94eb6c709665088eb7262c2624ba1ced1c820a093d271ab62185bd51cb9f6de4461ed2c7dce76e06493ea58c26afc760cf96bf669fd5dee58d136c7d0af0a4c323349503cb64a15d7e36a8e4c11c1bd85985e377c930862d011673053973dd01fda5f05fd527fd172e6d44211b53bb0097fb"}]}}, {{0x9, 0x5, 0xb, 0x2, 0x3ff, 0x2, 0x2, 0xfa, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x6, 0x5}]}}, {{0x9, 0x5, 0x0, 0x8, 0x45d54033cb6bb7a7, 0x1, 0xd, 0x3, [@generic={0x9a, 0xf, "679f66171deb811a0cfc767895ec7e88b0497c83c5ff7522fde35f6fa353ed61916d2b7f5eecad8270586d9684c2d762a1a2d1e2c9282f91c58ac1a8ab174c46722c38daa03191eecf4c4f21f59aec5353637cca82c22c37d083d992e810829e3140f35fdf4d754e0f51c58bfca84e641b401f39b26c152d8ad47583648f752ed2b34d034328262a2cd4ce572afab339accd03d649dac9a1"}]}}, {{0x9, 0x5, 0x4, 0xc, 0x20, 0x7, 0x3, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x3, 0x25}]}}, {{0x9, 0x5, 0x80, 0x2, 0x40, 0x8, 0x8, 0x5, [@generic={0x1b, 0xa, "e577829658e25c3ff701b6d4bdd22ff53c904969c79ad1748b"}, @generic={0xd9, 0xc, "5b4b88562a0803f7a13a9f31b98b933fe0ddbf5878cd7803348e2f1eaf3251dda823792b3c4cbbe6ed5f4036bb17b85e4eb3588965b5fe23903b978b9ce4ca5957f9ac1a4be17e93f4eff8186ab8b5531651b0b3d17d76e2f4078c0060145e84e2bcc820e20ffee6aa90ddac110894f0207fa87c07631d597d32c1f754656420363358a02f9a85e88b4cf5b54f77c6e97eb3e920eb6a39b5f3bfe61fa942320b650101f6c801984131a657a13cac5f391222e915d662b56275b05d6bbf448ebda39d8bb637caac5951bbaae5123fa0891fb5d9f90fa603"}]}}, {{0x9, 0x5, 0xd, 0xc, 0x10, 0x68, 0x4, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x9d, 0xfffd}]}}, {{0x9, 0x5, 0x7, 0x0, 0x10, 0x2, 0x3, 0x8}}, {{0x9, 0x5, 0x3, 0x10, 0x400, 0x9, 0x3, 0x41, [@generic={0xd1, 0x7, "3951464f32c57695b07f610ae27028c1a8dc668de7393e5fb8d0d0d33f986cbcaf47f60bcf73903c4adc97248358dfc504417ea13a97f16e1a3c87f3dcce0118d574faa11c5495629a25472d4865c51e2af0433100d79368e28751671b10a1b96d3b8b2e4fdf133a82250db5ce9138d179a2948152b44588e12f0b3f878870f8669cedb20ac31478abdf7d4129b8cb158bad4e11e8c6ea7d985f42e3b245e006cddefe2e608c238ba0675267141b1bfc9a239db181aead75cd9f49b1fd6bff302052ac395c90f7c36c6b44ab3f656a"}, @generic={0x77, 0x1, "9ea963891a54b55314042644e6f2340453f4ad5abe36ba808a2ac5e1b9d39bcb6cdaebf88957e4a364fa6c6b74464d045685c55a1417fc31c831addc69526632848d9a05bc566bc652c9acd408c8866bf8eb4c10b0b0fff0e489274b2a99ff913f6f9cba4048fc831b12bf286c007bcead85d29ad5"}]}}, {{0x9, 0x5, 0xd, 0x0, 0x3ff, 0x4, 0x3, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x2, 0x8}, @generic={0x84, 0x5, "7196b21ae178893e112f615691761f2cbe2f05785c83f66ae4cbba69dd0fffb4748159fab01196d95dde7c3af45e49c0969c66cc700693f1ed46accdcdd273b7681512e4fe3264cf58d94fe9212dd95cd3e680d692d5b521eabafbb708fa29e848ca1ca22759d4f6cced9678dd49eca9d02eae62ba088c1dd1d00669ce12e7ab3855"}]}}, {{0x9, 0x5, 0xe, 0x10, 0x400, 0x5, 0x5, 0xd, [@generic={0x9c, 0x7, "ebd47f292d7dcd5c2b81e8f5cbab6bc0815dae9ab817a21f2488227935ece25869528170088cca9ab08f854fa2b384d19fcb099f2d3fd59590b81523ca50534890b0a86e610f4fb729ed66376b715f58a9cef26a1b00248872bb2defedf4c6182b50e6052d48515cb65c5f19c3d6029d7b92186afcfac048daec562512bf792d548f253d481a3aa084ebf34296b1f1475ec246c664d13855d408"}, @generic={0x92, 0x8, "db884149a1e68b8692b3b7839d6231182d6c60e543dfe7727f88bfe4fe33a796863c52a114e0a750756abdbdb66a2fd81f2d9eefb0347b41b936edaaf45ca7d1217afbc7545110a28102f3a6e150fdeba33c837702210e542c04e6f46b657f8d4288f7133e2a57962367201989eeed4f5e997ee2d0e16152c5cee7ffb0bfb42fb76cd072972c49e96adc4dd1b74f3354"}]}}]}}, {{0x9, 0x4, 0xb2, 0x3, 0x10, 0xe1, 0x57, 0xdf, 0x3, [@uac_control={{0xa, 0x24, 0x1, 0xfff8, 0x4e}, [@extension_unit={0xc, 0x24, 0x8, 0x6, 0x7, 0x0, "c16efff2dc"}, @input_terminal={0xc, 0x24, 0x2, 0x6, 0x400, 0x1, 0xe, 0x7, 0x2, 0xfd}, @selector_unit={0x6, 0x24, 0x5, 0x4, 0x7, "9f"}, @feature_unit={0x11, 0x24, 0x6, 0x6, 0x3, 0x5, [0x4, 0xa, 0x8, 0xdde42ffb653f00b3, 0x4], 0x5}, @processing_unit={0xb, 0x24, 0x7, 0x3, 0x0, 0x3, "fa0f90b8"}, @selector_unit={0xa, 0x24, 0x5, 0x3, 0x9, "a582d4aa24"}]}, @uac_as={[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x4e, 0x8, 0x6, 0x6}]}], [{{0x9, 0x5, 0x2, 0x1, 0x20, 0x18, 0x4, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x9, 0x8000}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x81, 0x66}]}}, {{0x9, 0x5, 0xe, 0x4, 0x10, 0x99, 0xd, 0xa}}, {{0x9, 0x5, 0xc, 0x8, 0x10, 0x3, 0x9, 0x8}}, {{0x9, 0x5, 0xf, 0x3, 0x20, 0xa, 0x3, 0x1, [@generic={0xfb, 0x31, "a7147032d8ddc4b515ca134a34b119271dd2a8c78360870c113554ecd8c4a8938f7aa9e7b9f3f736f4dd54eb747ffb84fa7d00b9e397b2a55485b1fd8f2a85a1b7b87c26b585b50501872185f764bfe2f7bed4f82f27e3a09726e5544adf4a336dc832edd497b8f4b608cce5a1d730c71b28d7e978dfdaeb63daf71ae10c7455a0cc8d9414adebaf41132afa77fab9929d4e0af379ffef4dfb5ecd10daeb85db628d53d99d81661bbb14e830b02c213f853b162ab562be09eed2c5b3738a55e938b38cc92a688d6c5e610a52e982fffb11600dfcba7943a3150000e3475899f7ed5b17387a66a8a24aa4849f848e2174a94680b52ce35b1281"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x81, 0x5}]}}, {{0x9, 0x5, 0x4, 0x8, 0x8, 0x80, 0x6}}, {{0x9, 0x5, 0x2, 0x10, 0x20, 0x6, 0x0, 0xa7, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x4e}, @generic={0xe5, 0x23, "ceb4bca4b9ec22cf1cf9c2b6d0108649b31dda54d155e54e4e2f67ddc7f432901716e3c411dad76dfbcb28144d97868e4900c400e4573e27308724230332c73ec0e3f81b00beeb2ab44d0bc9c5e88ed08e29512e43fc0cfb1d468cd5181002dc8c5ab849c72c8098fa11577f56e610f334cdd86c93e3b82fa5cf0487f468f91d5a5e22890fff63371ef923badd14f6b740565b931a11529ac5773c29592aa0ac3c714b0cf524d738b0f5647f65ae7adf66878ed081d8ce1cd234b8370cb73ffeb6aa569b47e5916adce28f7cb95cb395edc673d62091f4d29c1029092d89f41a437ea6"}]}}, {{0x9, 0x5, 0x5, 0x3, 0x8, 0x4, 0x5, 0x0, [@generic={0xee, 0x2, "0b5f39ab1de54694ce5be785a15c84281a742fe1514dae8f95b91ad92ec7c10dc54d1c432c83525246efb68b95169da7a98c7dc2807d25a4781c2846017cebb5690c4429b7a9a91b68f1a9367fb8f04a28a18bc1db335f13a433c23d575c3e02dbb500b226137277ef41c9f7b532a2c2a6066cfcd4087160625b6593005a6c8040ce6771b8fafefeef228cbba96915020fefb0337cc73395c89ad219cea935319c786e56da5f6cda854ce032788775c157e3e12783bb17f3ef036417191457fbea663b7b333f0a208fb63b1017b75255c029357fdde372c312f6aa8349deab518739961d4094c88ebbab68c4"}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x0, 0x6}]}}, {{0x9, 0x5, 0xd, 0x0, 0x200, 0x8, 0x5, 0x9e, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x8, 0x9}, @generic={0xdf, 0x9, "8f6b6d10543b7253189c48728866f35b66e9a2b845f337dcd29536c4cec05bc8466878aa8539fe5f152417c6ebdbd0c05ef22472dd6df7be858391036f9aeee6e017ab2d94e82a032f1903da66a97f58e0db79437c9a14013724e85609e7f1a46558003fc3bf68feef96dcfd31c52de26fb4c569d4ee39a4fe3e458c1b239828fc6bfdec313d9795b5e3b0777ddc61d83bebc24fa242f0ddf27e0211fe03e23831ef85a83bb3190b0b7fba33731aad119932a0c752b9f8472ea297c086bac93700dedcf8bda321ff0d5a6aedf32e68e8da0f95f480ea6984f73141162b"}]}}, {{0x9, 0x5, 0x1, 0x0, 0x9775083d93ca227e, 0xe, 0x0, 0x50}}, {{0x9, 0x5, 0xd, 0x4, 0x20, 0x1, 0x6, 0x4}}, {{0x9, 0x5, 0x80, 0x2, 0x20, 0xe, 0x9, 0x40, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x1, 0xf}]}}, {{0x9, 0x5, 0xc, 0x3, 0x400, 0x81, 0x2, 0xb, [@generic={0xbf, 0x7, "17d682b44a8dce260f37a6e143b5a8d00391b69840f765226f646127a410917679fa7f319d59314fe6d68059a900c8e73e4abbc8552767bea6598d6d8d85f5a9aeedb1fbf06374596976388c5c06e9091b8bc3057eb92395a669bb0348a2d6426a2bc4f6d52d89208de305a9130e94351277da6dc744733f0f9b606285574c63cb9107b34935052f417ece057443810543b9367767c078159e45bfdf91abc99555996af4164fdf185b4f2d9ffae45a7487bea5cd1c9ba1281f5dd46492"}]}}, {{0x9, 0x5, 0x6, 0x8, 0x400, 0x3, 0x9, 0x0, [@generic={0x6d, 0xf, "1388b88fc068e18b419e121464741b557ac7ddc8c6f49fa00f433482b72df465351c097826f5bc15b1c7f391afbd1424e5ea6bb879184d2aee55a01f8cc9efa72f19b5cd5e2bd336e3ce568599827e8934ff7d11350df32035c6ed2b863ee8f2eb6e63bfa3bbd1e6178634"}]}}, {{0x9, 0x5, 0x2, 0x0, 0x20, 0xf5, 0x34, 0x9, [@generic={0x26, 0x9, "686a0a83f15022498a4e0296454c2ccbc75b8ae54420d4184a8623b127993c40bd0f09c5"}]}}, {{0x9, 0x5, 0x80, 0x8, 0x10, 0xc, 0x3, 0x5, [@generic={0xf5, 0xd, "2d0a98b7887c7495180fbb0fca0a10f96d6959124f56e13c854a9091ea4629512cc74f1a4bf6dae69c2dacde9210ac84bcf752c66c92f3242c445ce319ae7002eda6e79f64bcb9b31aeaae44ab38eb7579863e41707bacfd06b2d14ced3d1b537bfc295669ae48ccc3775c8cf7e411772a5ee743ae6151ac152178f372968b4588ced226d41b6245d2af32ce35a8e84a6dc6e47a20ec601b21d015c41232f1067cac289d1237e12d9b5c27201f599ca4b012ee74f0cae2bfa2619769d2efb5d93ec291fe920a09669a0763b44037f8cae3f8035e2c8a77878fb0b24c03c72ea5b814a8a6d0482af2b9006c39a1a15fa0feca5a"}, @generic={0xee, 0x8, "ce6f828ee13bc1017e26cfeda17a112e3ebe988c550641182ded9bf44e02df542e4edaa5715bf2c1a5761ae7e8efcf7f96c12bc5f857a10ad1208eaf105d03ee24f331566b644da31b5bc12c5d1843933bfb75fd9da2e88b4214ec7a5f8136864f6cca95bfda0ceb2a9eb5cfb5776cbfb2c14d4d9a0bf63fe22d18edd68f43a736905362b3c184aa5fa9c1ea0a3cd68a5a7fb4359e59ed42ed7b4ee23f0e98a4d26e45ec1ccd25f3d8df5509699347c5d2d9c3fae5972b6a3dc2f8224de61474754a0eae3cc33ddcdd1b20e3988c018d6a9fb5bd0c5fd7440f88c7098777d01456d476fde6f66a36eb5117f9"}]}}, {{0x9, 0x5, 0x80, 0x1, 0x400, 0x7f, 0x81, 0xf9, [@generic={0xad, 0x3, "98ab62a7de928d0c3757abfd037f610822da589d86655ab9624fd9e824740366252c950c1a5ae2b7d8f7f2b516b87e289e334c0551016c31dde80208deca4a1969cfca0c3108dc3845685ecee19ee44bd22ba83b9f14be8881936e3d4651597dc40229331e3a8180f1550008fea9f9eb9f7a615b118bd807ff8a033b213a473dd81faa134a16f29ce5174e98b9a408efb72245418ca7aa3502fd2abcdc500a5aba65a30c6663538b53101c"}]}}]}}, {{0x9, 0x4, 0x8b, 0x7f, 0xc, 0xff, 0x58, 0x53, 0x4, [@generic={0xfc, 0xb, "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"}, @uac_control={{0xa, 0x24, 0x1, 0x2000, 0x25}, [@extension_unit={0xb, 0x24, 0x8, 0x5, 0x2, 0x7, "cf436074"}, @processing_unit={0x9, 0x24, 0x7, 0x1, 0x6, 0xfc, "8e90"}, @selector_unit={0x7, 0x24, 0x5, 0x4, 0xa, ')\"'}]}], [{{0x9, 0x5, 0xc, 0xc, 0x40, 0x9, 0x5, 0x68}}, {{0x9, 0x5, 0xd, 0x0, 0x3ff, 0x5, 0x8, 0x8}}, {{0x9, 0x5, 0x7, 0x3, 0x200, 0x9, 0x0, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x7, 0xa}, @generic={0x6a, 0xc, "c3461201b16c98376ffa522b832c0f45ba4c2e605b973b391de774f130fb6d6d9a63f77019656cbbaa2ed46c73499e570bde1e8858cc3c80b800ec323595aae4422915b803c07a0366c6dfa343c890c9b8850b7842d37a8511419fd8f07e7ead7cb6ed64e4904aa7"}]}}, {{0x9, 0x5, 0xe, 0x0, 0x10, 0x8, 0x0, 0xe, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x6, 0xa}]}}, {{0x9, 0x5, 0x0, 0x4, 0x20, 0xc5, 0xb, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x5b, 0x5}]}}, {{0x9, 0x5, 0x80, 0x0, 0x3ff, 0xb, 0x5, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x4, 0xfffd}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x2, 0x3ff}]}}, {{0x9, 0x5, 0x6, 0x4, 0x40, 0x7, 0x5, 0x3, [@generic={0x48, 0x21, "f62fd6b8dd02e6d9dbb728a1c49ff6fd3894f501992cc62c0e2f65b5ff982ea1251f21eeec9cc271395acf2596f45cacb0c604ce4af2d6f05f125d17d548088a4e341cc02f9c"}]}}, {{0x9, 0x5, 0xa, 0x10, 0x8, 0x7, 0x6, 0x81, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x10, 0x6}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0xb, 0x1}]}}, {{0x9, 0x5, 0x6, 0x10, 0x20, 0x9, 0x10, 0xdd}}, {{0x9, 0x5, 0xe, 0x8, 0x400, 0x80, 0x40, 0x81}}, {{0x9, 0x5, 0x80, 0x0, 0x8, 0xf8, 0xa0, 0x45, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x0, 0x3}]}}, {{0x9, 0x5, 0x4, 0x4, 0x40, 0xc0, 0x2, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0xbb, 0x3}, @generic={0x4a, 0x2d, "be75e8b05e929b8ee7ca8a1ee660952c52a419fbd8292e3eeda2275a0ec45d8a6ca847aeba0a4a6127cac4a754d58a8128a3d49ee999568ec47547fb12bc9add2a3f9ad27bb70a1f"}]}}]}}, {{0x9, 0x4, 0xc8, 0x4, 0x2, 0xff, 0xff, 0x30, 0xff, [@cdc_ncm={{0xa, 0x24, 0x6, 0x0, 0x1, "3dd69c4898"}, {0x5, 0x24, 0x0, 0xf6f1}, {0xd, 0x24, 0xf, 0x1, 0x3, 0x5, 0x4, 0xe1}, {0x6, 0x24, 0x1a, 0x1, 0x10}, [@obex={0x5, 0x24, 0x15, 0x1}, @mbim={0xc, 0x24, 0x1b, 0x9, 0xa41, 0x2, 0x81, 0x1, 0x7}]}, @uac_as={[@format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0xe0, 0x1, 0x1, 0x0, "dfea4b55bb1f9b"}]}], [{{0x9, 0x5, 0x9, 0x4, 0x40, 0x7, 0xe, 0x7d, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x7, 0x2}]}}, {{0x9, 0x5, 0x0, 0xc, 0x10, 0xa, 0x4, 0xfb}}]}}]}}]}}, &(0x7f0000001a00)={0xa, &(0x7f0000001680)={0xa, 0x6, 0x201, 0xd, 0x90, 0x8, 0x40, 0x9}, 0x103, &(0x7f0000000140)={0x5, 0xf, 0x103, 0x6, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xd, 0x4, 0x1, 0x100}, @ssp_cap={0x10, 0x10, 0xa, 0x2, 0x1, 0x4, 0x0, 0x1, [0x9f30]}, @ptm_cap={0x3}, @generic={0xbe, 0x10, 0x4, "91e12689553140e040a4c47cc11d5a6a1201b058fe478111593cd2d83069600638858e31839bfff5dd13f71512cd5ad91cfa534b6ea58253ac0216a232d6663f6bf6a46dcdfebd30184241b88b6caa31951657663db3876f75d129c8c453061433966c27d41e18ee91235988d14725ff7d65989c4c200989294124346ade5ecd6307cb28f41c38f1ca7aedd53b19c6ff4a3d0d990b77d2bb412f530b66a4ec432fb99917929e44c1e70beccc6fedd6411594258f025e69b231c2c5"}, @ssp_cap={0x1c, 0x10, 0xa, 0xde, 0x4, 0xffff, 0xf00, 0x6, [0x3fcf, 0x30, 0xc0, 0xffc000]}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x2, 0x3, 0x1}]}, 0x6, [{0x4, &(0x7f0000001800)=@lang_id={0x4, 0x3, 0x80c}}, {0x1b, &(0x7f0000001840)=@string={0x1b, 0x3, "53f5a3ee119caca0b02a1fc64c58ef0b2eb61a5d719ac9ba28"}}, {0x8f, &(0x7f0000001880)=@string={0x8f, 0x3, "7072577aedbfd2c0e6e325ea6fb940e6da9935156f2f14b910c565914f68212d38b3c80d296840462a17342d0920be524bedc05323ee229390796825af917fcbfe023ae6df792327b2bfa10cd494f1d920f234251ddb8106796ceddcf5d46bac2c36625b6a990e6e6ecdab432cb51d7db5e36d3f4c60afc1c755530abda3e3212816a2983a17a9bb6155279b42"}}, {0x4, &(0x7f0000001940)=@lang_id={0x4, 0x3, 0x2c01}}, {0x55, &(0x7f0000001980)=@lang_id={0x4, 0x3, 0x80c}}, {0x4, &(0x7f00000019c0)=@lang_id={0x4, 0x3, 0x1007}}]})
connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000280)={{0x2b, @loopback, 0x4e20, 0x1, 'dh\x00', 0x8, 0x7fff, 0x18}, {@broadcast, 0x4e22, 0x2, 0x3, 0xaad0, 0xfffffffb}}, 0x44)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
execveat(r0, &(0x7f0000000380)='./file1\x00', &(0x7f0000001740)={[&(0x7f00000003c0)='\x1c-gT\xb6\xcc}\xaa\xcbY\x98u\xd7\xfa\xf9\xbb', &(0x7f0000000400)='dh\x00', &(0x7f00000016c0)='\x1c-gT\xb6\xcc}\xaa\xcbY\x98u\xd7\xfa\xf9\xbb', &(0x7f0000001700)='[&\x00']}, &(0x7f0000001780), 0x100)
bpf$MAP_CREATE(0x0, &(0x7f0000010280)=ANY=[@ANYBLOB="100000000400000008000000080000000000", @ANYBLOB="0000fffffffffffffffffffffffd2e", @ANYRES8=r1], 0x48)
write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="2800000004"], 0x28)
ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f00000000c0))

182.211756ms ago: executing program 4 (id=383):
syz_usb_connect$uac3(0x3, 0xa4, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x0)

182.052446ms ago: executing program 3 (id=384):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x1, 0x4, 0x4, 0xa, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1, 0xa, &(0x7f0000000600)=@raw=[@map_fd={0x18, 0x1, 0x1, 0x0, r0}, @ldst={0x2, 0x0, 0x3, 0xa, 0x0, 0xfffc}, @alu={0x7, 0x1, 0x9, 0x2, 0xa}, @alu={0x7, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffc}, @call={0x85, 0x0, 0x0, 0x1}, @jmp={0x5, 0x0, 0x5, 0x0, 0x0, 0x1}, @exit, @ldst={0x1, 0x0, 0x3, 0x1}, @exit], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x90, 0x90, 0x8, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x4, 0x8}}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x2, 0x7}}, @restrict={0x10, 0x0, 0x0, 0xb, 0x5}, @const={0xa, 0x0, 0x0, 0xa, 0x4}, @func={0x3, 0x0, 0x0, 0xc, 0x3}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x2, 0x3}}, @func={0xb, 0x0, 0x0, 0xc, 0x1}, @typedef={0x7}, @ptr={0xe, 0x0, 0x0, 0x2, 0x2}]}, {0x0, [0x5f, 0x61, 0x0, 0x2e, 0x5f, 0x61]}}, &(0x7f00000001c0)=""/167, 0xb0, 0xa7, 0x1, 0x1, 0x10000}, 0x28)

181.937796ms ago: executing program 3 (id=385):
r0 = socket$netlink(0x10, 0x3, 0xf) (async, rerun: 32)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async, rerun: 32)
r1 = syz_clone(0x20000011, 0x0, 0xffffffffffffff99, 0x0, 0x0, 0x0)
waitid(0x0, 0x0, 0x0, 0x4, 0x0) (async)
ioprio_set$pid(0x1, r1, 0x4007) (async)
ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f0000000340)={'ip6gre0\x00', &(0x7f0000000240)=@ethtool_ringparam={0x6cf0842e, 0x3a, 0x7, 0x10000, 0x3, 0x415, 0x18, 0xffff62d8, 0x2}})
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c)
listen(r2, 0x0) (async)
syz_emit_ethernet(0xd4, &(0x7f0000000100)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, @random="24bd0a4e6969", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x20, 0xc6, 0x64, 0x0, 0x7, 0x6, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0xc2, 0x2, 0x0, 0xe7, {[@timestamp={0x8, 0xa, 0xff, 0x5}, @generic={0x3, 0x2}]}}, {"7fb7e099a906dae2730c7e335058d317c3db835df96f6c9c29f8a7fee5fcf64ff32f2c8c8fb8409038b0311e8241348bc9f061636104734acf76bb90fd55477b7d5569164b0eecece0440ef8fc08eae3cdce4117d8ea770e365dba46f7087c9d34e2d06b5560fd5096754dc17b2557227c52b67dd2180b342034fdf48b61b4b6af6f75c9f587c5bbbf759e8f6eba0db456f0"}}}}}}, 0x0)

181.712736ms ago: executing program 0 (id=387):
ioctl$EVIOCGNAME(0xffffffffffffffff, 0x80404506, &(0x7f0000000080)=""/176)
rmdir(&(0x7f0000000040)='./cgroup/../file0\x00')
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0x9, &(0x7f0000000300)=@raw=[@generic={0xb7, 0x2, 0x0, 0x0, 0x2}, @generic={0x7b, 0xa, 0x2, 0xffc0}, @generic={0x63, 0xa, 0x2, 0xffc8}, @generic={0xbf, 0x2, 0xa, 0x200}, @generic={0x7, 0x2, 0x0, 0x0, 0xffffffc0}, @generic={0xb7, 0x3, 0x0, 0x0, 0x40}, @generic={0xb7, 0x4}, @generic={0x85, 0x0, 0x0, 0x0, 0x45}, @generic={0x95}], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

181.603036ms ago: executing program 0 (id=388):
timer_create(0x0, &(0x7f0000000240)={0x0, 0x1, 0x1, @thr={0x0, 0x0}}, &(0x7f0000000280)=<r0=>0x0)
timer_gettime(r0, &(0x7f0000000040)) (async)
timer_gettime(r0, &(0x7f0000000040))
r1 = syz_mount_image$erofs(&(0x7f00000000c0), &(0x7f0000000040)='./file2\x00', 0x20404a, &(0x7f0000000080)=ANY=[], 0xfd, 0x1e6, &(0x7f0000000340)="$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")
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x82000, 0xe1) (async)
r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x82000, 0xe1)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000b, 0x12, r2, 0x0) (async)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000b, 0x12, r2, 0x0)
ioctl$BTRFS_IOC_DEFRAG(r1, 0x50009402, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0)
mount$9p_unix(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x2000020, &(0x7f0000000400))
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002180)={0x0, 0x0})

180.388926ms ago: executing program 0 (id=389):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0e000000040000000400000009"], 0x48)
close(0x3)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x1, 0x6, 0x18, 0x8, 0x40, 0xffffffffffffffff, 0x4e22}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040), &(0x7f00000004c0), 0xce, r2}, 0x38)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000fc007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000002300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000001a00)={r3, 0x1}, 0xc)
r4 = syz_open_dev$vcsa(&(0x7f0000000380), 0x7b95b611, 0x802)
writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000300)="ba", 0x1}, {&(0x7f00000001c0)='\x00\x00\x00\x00', 0x4}, {&(0x7f0000000000)='x', 0x1}], 0x3)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f000010cf80)={0x3ff, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, <r5=>0x0}], 0x95, "cfe64eaea54c40"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r4, 0xd000943d, &(0x7f000010df80)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, <r6=>0x0}], 0x2, "0297c3cd9ed829"})
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f000010ef80)={0x0, <r7=>0x0, "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", "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"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f000010ff80)={0x0, ""/256, 0x0, <r8=>0x0})
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r4, 0xc0709411, &(0x7f0000110180)={{<r9=>0x0, 0x3, 0x7fff, 0x1ff, 0x65, 0x1, 0x3, 0x5, 0x0, 0x7, 0x5ba, 0xc17, 0x5, 0xfffffffffffffff9}, 0x10, [0x0, 0x0]})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000110200)={0x0, ""/256, 0x0, <r10=>0x0})
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r1, 0xc0709411, &(0x7f0000110400)={{<r11=>0x0, 0x3, 0x9, 0x567eb177, 0xfff, 0x8000000000000000, 0x2, 0xfffff199, 0x7, 0x8001, 0x401, 0x40, 0x8000000000000001, 0x8, 0x3}, 0x18, [0x0, 0x0, 0x0]})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f00001104c0)={0x9, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, <r12=>0x0}], 0x37, "1893deb8029558"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f00001114c0)={0x9, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, <r13=>0x0}], 0xf, "7352d9398ab990"})
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f00001124c0)={{<r14=>0x0, 0x4, 0x27618ad6, 0x9d4, 0x1, 0xfff, 0xfffffffffffffffc, 0x5, 0xfffffff2, 0x4, 0x2, 0xe, 0x3, 0x0, 0x7fffffff}, 0x8, [0x0]})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f0000112540)={0x8, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, <r15=>0x0}], 0x5, "510930e628df26"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000113540)={0x9, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {0x0, r6}, {r7, r8}, {r9, r10}, {r11, r12}, {0x0, r13}, {r14, r15}], 0xd, "b867634c202e72"})
r16 = socket$netlink(0x10, 0x3, 0x6)
bind$netlink(r16, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r17 = socket$inet6(0xa, 0x1, 0x0)
bind$inet6(r17, &(0x7f0000000040)={0xa, 0x4e22, 0x82, @ipv4={'\x00', '\xff\xff', @loopback}, 0x6}, 0x1c)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r17, 0x29, 0x20, &(0x7f0000000080)={@private1, 0x800, 0x0, 0x3, 0x3, 0x4, 0x6}, 0x20)
setsockopt$inet6_int(r17, 0x29, 0x1000000000021, &(0x7f0000000180)=0x9, 0x4)
sendmsg$nl_generic(r16, &(0x7f0000000780)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000740)={&(0x7f00000004c0)={0x14, 0x1b, 0x10, 0x70bd2a, 0x25dfdbfe, {0x10}}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv6_newnexthop={0x24, 0x68, 0x1, 0x70bd2d, 0x25dfdbfe, {0xa, 0x0, 0x3, 0x0, 0x4}, [@NHA_FDB={0x4}, @NHA_ID={0x8, 0x1, 0x1}]}, 0x24}}, 0x0)

180.108126ms ago: executing program 5 (id=390):
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setns(0xffffffffffffffff, 0x20000000)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/hci\x00')
timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4}, &(0x7f0000000000)=<r1=>0x0)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
timer_settime(r1, 0x1, &(0x7f0000000040), 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x8031, 0xffffffffffffffff, 0xfffff000)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="05000000ff7f00004200000006000000c0000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="000031f14b0b000047288800"/28], 0x50)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000780)={0x0, &(0x7f0000000540)})
rt_tgsigqueueinfo(0x0, 0x0, 0x18, 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100), &(0x7f00000001c0), 0x10f0, r2}, 0x38)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000004c0)={r2, 0x0, &(0x7f0000000480)}, 0x20)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
getpid()
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="480000001000ffff28bd7000fadbdf2500000000", @ANYRES32=0x0, @ANYBLOB="8144000009060000200012800b000100697036746e6c00001000028005000900040000000400130008000400ff001168"], 0x48}}, 0x40014)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/synthetic_events\x00', 0x2, 0x0)
write(r4, &(0x7f0000000300)='foo int x; bar int', 0x12)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000010000000800000008"], 0x48)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0x14, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa10000000000000701000008000000b702000008000000b703000000000000850000000500000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000840)={r6}, 0xc)
pread64(r0, &(0x7f0000000380)=""/71, 0x47, 0xffffffff)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x41000, 0x0, '\x00', 0x0, @sk_msg}, 0x94)
close(r7)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200))

179.935676ms ago: executing program 2 (id=391):
syz_emit_ethernet(0x46, &(0x7f00000000c0)={@local, @random="7f0a00034011", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x2f, 0x2f, 0x0, @empty, @broadcast}, "000086ddffff0000"}}}}}, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0)
close(r0)
socket$packet(0x11, 0x3, 0x300)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1a1102, 0x0)
unshare(0x22020600)
ioctl$TUNGETVNETLE(r0, 0x40047451, 0x0)

179.734676ms ago: executing program 3 (id=392):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0)
close(r0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000200)=[{0x6, 0xf5, 0x9, 0x7fff0000}]})
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000140)={@loopback, <r1=>0x0}, &(0x7f0000000180)=0x14)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x39}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x105, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', r1}, 0x50)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000300)=r2, 0x4)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0x1c, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}, {}, {0x85, 0x0, 0x0, 0x17}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0xfca804a0, 0xe, 0x0, &(0x7f00000002c0)="b8000005000000005baf2312bbc2", 0x0, 0x12000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r5 = epoll_create(0x10000e9)
epoll_pwait2(r5, &(0x7f00000001c0), 0x0, &(0x7f0000000200), 0x0, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1a1102, 0x0)
unshare(0x22020600)
ioctl$TUNGETVNETLE(r0, 0x800454dd, &(0x7f0000000000))
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x7f, 0x7fff0006}]})
openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$wireguard(&(0x7f00000005c0), 0xffffffffffffffff)
syz_emit_ethernet(0x86, &(0x7f0000002180)={@broadcast, @random="42e17dbe6edb", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "2e5cea", 0x50, 0x3c, 0x0, @local, @mcast2, {[@srh={0x29, 0x0, 0x4, 0x0, 0xd, 0x0, 0xb}], {0xf5, 0x200, 0x48, 0x0, @wg=@cookie={0x3, 0x1, "c80c03000000340db2f999357b6d1e416f09e55e5cc6531d", "11a886ad86c414dbb912c9492279249260e92303a8f0b7cc89f9735acfc9a140"}}}}}}}, 0x0)
ioctl$TUNGETVNETLE(r0, 0x40047451, 0x0)

179.618956ms ago: executing program 4 (id=393):
r0 = openat$kvm(0x0, &(0x7f0000000240), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1)
fstat(r3, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, <r4=>0x0})
setresuid(r4, 0x0, 0x0)
ioctl$NS_GET_OWNER_UID(r3, 0xb704, &(0x7f0000000000))
getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000040)={{{@in=@remote, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}}, {{@in=@broadcast}, 0x0, @in=@multicast2}}, &(0x7f0000000140)=0xe8)
statx(r3, &(0x7f0000000180)='./file0\x00', 0x4000, 0x7ff, &(0x7f0000000380))
setreuid(r4, r5)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40)
r6 = syz_kvm_add_vcpu$x86(r2, &(0x7f00000004c0)={0x0, &(0x7f0000000300)=[@cpuid={0x64, 0x18, {0x7, 0x3}}, @nested_load_syzos={0x136, 0x20, {0x3, 0x2}}, @nested_vmresume={0x130, 0x18}, @nested_create_vm={0x12d, 0x18, 0x1}], 0x68})
ioctl$KVM_RUN(r6, 0xae80, 0x0)

130.904717ms ago: executing program 2 (id=394):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040), 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, 0x1, 0x0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0)
r2 = socket$tipc(0x1e, 0x2, 0x0)
connect$tipc(r2, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x5}}, 0x10)
sendmmsg$inet(r2, &(0x7f0000006740)=[{{0x0, 0x0, &(0x7f00000056c0)=[{&(0x7f0000001240)="80349c0d9e8fcc9f44658138dc4a3c4ad42f918348474a5bc38ff0e0571fc22c8eb5cb22fdf30ced1a4c1ccb5e5b35fed7db48c1a8a7132adc5623d146ddfe2254dd2579b4284b53d1cea6206864473d31bdb00c9d1462458b678827e80c94d88099e7471a58b1463086f9cdd1ccc19fa2fc4a9dd5a56fe782d15e66648c7630f1aaa7e9820460c46e292dbb8fa6f6701048ff17f46097b1ee0750ed038f18b81b2ba014bf866062c9a6f88b5d07e13b7eddd968ba9c7a53609c7b61471a51fd85bceebc0a92b2cd7c45a7f4571e693abebc3c5ff16c8128d92476", 0xdb}, {&(0x7f0000000280)="5b4ea50f20d7212327afde5e7a457cde2dff791c69fbc3", 0x17}, {&(0x7f00000002c0)="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", 0x1e0}, {&(0x7f0000001440)="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", 0xab7}, {&(0x7f0000002440)="253c10cd", 0x4}], 0x5}}], 0x1, 0x0)
mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000240)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
syz_mount_image$fuse(&(0x7f0000000180), &(0x7f0000000040)='./file0\x00', 0x480a8, &(0x7f0000000340)=ANY=[], 0x21, 0x0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
ioctl$FS_IOC_RESVSP(r3, 0xc0189436, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x5f, 0x3})

118.225757ms ago: executing program 3 (id=395):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r1, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$TCFLSH(r3, 0x400455cb, 0x0)
syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=<r4=>0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58)
ioctl$EXT4_IOC_GETFSUUID(r4, 0x8004745a, 0x0)
r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_EXIT_HYPERCALL(r5, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc})
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000005c0)={'vxcan0\x00', <r6=>0x0})
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x6, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', r6, 0xffffffffffffffff, 0x2, 0x400000, 0x8000}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0xc, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040), &(0x7f00000004c0), 0xce, r7}, 0x38)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001200)={r8, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f07df33c9f7b986", 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r9 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
r10 = syz_open_dev$vcsa(&(0x7f0000000380), 0x7b95b611, 0x802)
writev(r10, &(0x7f00000003c0)=[{&(0x7f0000000000)='x', 0x1}, {&(0x7f00000001c0)='\x00\x00\x00\x00', 0x4}, {&(0x7f0000000300)="ba", 0x1}], 0x3)
ioctl$KVM_X86_SETUP_MCE(r10, 0x4008ae9c, &(0x7f0000000600)={0xf, 0x6, 0x7})
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000000), 0x82, 0x0)
r11 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x8c)
r12 = openat$incfs(r11, &(0x7f0000000100)='.log\x00', 0x0, 0x20)
ppoll(&(0x7f0000000000)=[{r12, 0x1000}], 0x1, &(0x7f0000000340)={0x0, 0x989680}, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r5, r9, &(0x7f0000a4c000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0xaaaaaaaaaaaaacd, 0x6, 0x0, 0x0)
ioctl$KVM_SET_LAPIC(r9, 0x4400ae8f, &(0x7f00000001c0)={"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"})
ioctl$KVM_RUN(r9, 0xae80, 0x0)

45.762469ms ago: executing program 0 (id=396):
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010d00000000000000850a000000000000000500000014000500200100000000000000000100000000001c00090008000000", @ANYRES32=r5], 0x4c}}, 0x0)
ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000240)={@remote, @ipv4={'\x00', '\xff\xff', @empty}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20c200a2, r3})
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x24000010}, 0x8608819f216f39ee)

36.58033ms ago: executing program 4 (id=397):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r2 = fsmount(r1, 0x0, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@cgroup=<r3=>r2, 0x6, 0x0, 0x50d6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0xe6c11ffe4afd7b0e, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000005c0)={r4, r3, 0x15, 0x0, @val=@kprobe_multi=@syms={0x0, 0x0, 0x0}}, 0x30)
r5 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0)
r6 = fsmount(r5, 0x0, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000005c0)={r7, r6, 0x15, 0x0, @void}, 0x10)
getsockopt$inet_tcp_buf(r0, 0x6, 0x23, &(0x7f0000000040)=""/36, &(0x7f0000000200)=0x24)
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000001080)={0x200000, 0x200000})
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/13], 0x48)
syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000000c0)='./file2\x00', 0x2000000, &(0x7f00000018c0)=ANY=[], 0xfb, 0x1500, &(0x7f00000002c0)="$eJzs3Am4T1X3OPC19t6H62b4JpnP2uvwTYZNkoSSZEiSJCRzQpIkSZK4ZEpCEjLeJHPInG665nnInHTzSpIkJCTZ/+c2/P16h5/3fX/9/vq/d32e5zz2cs7aZ+27nu89w/Pc79ddh1VvVKNKfWaGf4f+bYC//JMEAAkAMBAAcgBAAABlc5bNmb4/i8akf+sk4n9JgxlXugJxJUn/Mzbpf8Ym/c/YpP8Zm/Q/Y5P+Z2zS/4xN+i9EhjYr39WyZdxN3v//f079T5Ll+p8h4D/aIf3/T6P/paOl/xmb9D9jk/5nbNL/jCy40gWIK0w+/xmb9F+IDO0Pf6e84dyVfqct27+wCSGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQ/w+c85cYAPhtfKXrEkIIIYQQQgghxB/Hv3ulKxBCCCGEEEIIIcT/PgQFGgwEkAkyQwJkgUS4CrJCNsgOOSAGV0NOuAZywbWQG/JAXsgH+aEAFIQQCCwwRFAICkMcroMicD0UhWJQHEqAg5JQCm6A0nAjlIGboCzcDOXgFigPFX4+Z7rboTLcAVXgTqgK1aA61IC7oCbcDbXgHqgN90IduA/qwv1QDx6A+tAAGsKD0AgegsbQBJpCM2gOLaDlZfKTc/y9/OehB7wAPaEXJEFv6AMvQl/oB/1hAAyEl2AQvAyD4RUYAkNhGLwKw+E1GAGvw0gYBaPhDRgDY2EcjIcJMBGS4U2YBG/BZHj7oWwwFabBdJgBM2EWvAOzYQ7MhXdhHsyHBZCcZREshiXwHiyF9yEFPoBl8CGkwnJYASthFayGNbAW1sF62AAbYRNshi2wFbbBR7AddsBO2AW7YQ/shY9hH3wC++FTSMPP/sX8s7/Ph24ICKhQoUGDmTATJmACJmIiZsWsmB2zYwxjmBNzYi7MhbkxN+bFvJiE+bEgFkRCQkbGQlgI4xjHIlgEi2JRLI7F0aHDUlgKS+ONWAbLYFksi+WwHJbHClgBb8VbsRJWwspYGatgFayKVbE6Vse78C68G2thLayNtbEO1sG6WBfrYT2sj/WxITbERtgIG2NjbIpNsTk2x5bYElthK2yNrbEttsV22A7bY3vsgB2wI3bETtgJO2Nn7IJdsCt2xW74HD6Hz+Pz+AK+gL2wquqNfbAP9sW+2B8H4AB8CQfhy/gyvoJDcCgOw1fxVXwNR+AZHImjcDSOxkpqLI7D8chqIiZjMmaGSTgZJ+MUnIpTcTrOwJk4C2fhbJyDc/BdnIfzcT4uxIW4GJfgElyK72MKpuAyPIupuBxX4EpchatxFa7FdbgWN+BG3ICbcTNuxa34EX6EO3AH7sJduAf34Mf4MX6Cn+AQTMM0PIAH8CAexEN4CA/jYTyCR/AoHsVjeAyP43E8gSfxFJ7E03gaz+BZPAcAHgAu4AW8iBfTP/wqnVFGZVKZVIJKUIkqUWVVWVV2lV3FVEzlVDlVLpVL5Va5VV6VV+VX+VVBVVCRIsUqUoVUIRVXcVVEFVFFVVFVXBVXTjlVSpVSpVVpVUaVUWXVzaqcukWVVxVUG3erulVVUm1dZXWHqqKqqKqqmqquaqgaqqaqqWqpWqq2qq3qqDqqrrpf1VO9sT82UOmdaaSGYmM1DJuqZqq5aqFew4dVKzUCW6s2qq16VI3CkdhetXId1BOqoxqHndRTajw+rbqoidhVPau6qedUd/W86qFau56ql5qCvVUfNR37qn6qvxqgZmM1ld6x6uoV9XzmoWqYelUtxtfUCPW6GqlGqdHqDTVGjVXj1Hg1QU1UyepNNUm9pSart9UUNVVNU9PVDDVTzVLvqNlqjpqr3lXz1Hy1QC1Ui9RitUS9p5aq91WK+kAtUx+qVLVcrVAr1Sq1Wq1Ra9U6tV5tUBvVJrVZbVFb1Tb1kdqudqidapfarfaovepjtU99ovarT1Wa+kwdUH9RB9Xn6pD6Qh1WX6oj6it1VH2tjqlv1HH1rTqhTqpT6jt1Wn2vzqiz6pz6QZ1XP6oL6id1UXkFGrXSWhsd6Ew6s07QWXSivkpn1dl0dp1Dx/TVOqe+RufS1+rcOo/Oa/Lp/LqALqhDTdpq1pEupAvruL5OF9HX66K6mC6uS2inS+pS+gZdWt+oy+ibdFl9sy6nb9HldQVd0YO+TVfSt+vK+g5dRd+pq+pqurquoe/SNfXdupa+R9fW9+o6+j5dV9+v6+kHdH3dQDfUD+pG+iHdWDfRTXUz3Vy30C31w7qVfkS31m10W/2obqcf0+3147qDfkJ31E/qTvop3Vk/rbvoZ3RX/azupp/T3fVP+qL2uqfupZN0b91Hv6j76n66vx6gB+qX9CD9sh6sX9FD9FA9TL+qh+vX9Aj9uh6pR+nR+g09Ro/V4/R4PUFP1Mn6TT1Jv6Un67f1FD1VT9PT9Qw9U/f/daa5/0T+W38nP9PPZ9+qt+mP9Ha9Q+/Uu/RuvUfv1Xv1Pr1P79f7dZpO0wf0AX1QH9SH9CF9WB/WR/QRfVQf1cf0MX1cH9cn9En9g/5On9bf6zP6rD6rf9Dn9Xl94defARg0ymhjTGAymcwmwWQxieYqk9VkM9lNDhMzV5uc5hqTy1xrcps8Jq/JZ/KbAqagCQ0Za9hEppApbOLmOlPEXG+KmmKmuClhnClpSpkb/sf5l6uvpWlpWplWprVpbdqatqadaWfam/amg+lgOpqOppPpZDqbzqaL6WK6mq6mm+lmupvupofpYXqanibJJJk+5kXT1/Qz/c0AM9C8ZAaZQWawGWyGmCFmmBlmhpvhZoQZYUaakWa0GW3GmDFmnBlnJpgJJtnnMJPMJDPZTDZTzBQzbWAOM8PMMLPMLDPbzDZzzVwzz8wzC8wCs8gsMkvMErPULDUpJsUsM8tMqllulpuVZqVZbVabtWatWW/Wm41mo9lsNptUs81sM9vNdrPT7DS7zW6z1+w1+8w+s9/sN2kmzRwwB8xBc9AcMofMYXPYHDFHzFFz1Bwzx8xxc9ycMCfMKXPKnDanzRlzxpwz58x5c95cMBfMRXMx/bYvUIEKTGCCTEGmICFICBKDxCBrkDXIHmQPYkEsyBnkDHIF1wa5gzxB3iBfkD8oEBQMwoACG3AQBYWCwkE8uC4oElwfFA2KBcWDEoELSgalghuC0sGNQZngpqBscHNQLrglKB9UCCoGtwa3BZWC24PKwR1BleDOoGpQLage1AjuCmoGdwe1gnuC2sG9QZ3gvqBucH9QL3ggqB80CBoGDwaNgoeCxkGToGnQLGgetAha/qHze38mzyOuZ9grTAp7h33CF8O+Yb+wfzggHBi+FA4KXw4Hh6+EQ8Kh4bDw1XB4+Fo4Inw9HBmOCkeHb4RjwrHhuHB8OCGcGCaHb4aTwrfCyeHb4ZRwajgtmB7OCGeGs8J3wtnhnHBu+G44L5wfLggXhovCxSH+cksMKeEH4bLwwzA1XB6uCFeGq8LV4ZpwbbguXB9uCDeGm8LNZQf9cmi4PdwR7gx3hbvDPeHe8ONwX/hJuD/8NEwLPwsPhH8JD4afh4fCL8LD4ZfhkfCr8Gj4dXgs/CY8Hn4bnghPhqfC78LT4ffhmfBseC78ITwf/hheCH8KL4Y+/eY+/fJOhgxlokyUQAmUSImUlbJSdspOMYpRTspJuSgX5abclJfyUn7KTwWpIKVjYipEhShOcSpCRagoFaXiVJwcOSpFpag0laYyVIbKUlkqR+WoPJWnilSRbqPb6Ha6ne6gO+hOupOqUTWqQTWoJtWkWlSLalNtqkN1qC7VpXpUj+pTfWpIDakRNaLG1JiaUlNqTs2pJbWkVtSKWlNrakttqR21o/bUnjpQB+pIHakTdaLO1Jm6UBfqSl2pG3Wj7tSdelAP6kk9KYmSqA/1ob7Ul/pTfxpIA2kQDaLBNJiG0BAaRsNoOA2nETSCRtIoGk1v0BgaS+NoPE2giZRMyTSJJtFkmkxTaApNo2k0g2bQLJpFs2k2zaW5NI/m0QJaQItoES2hJbSUllIKpdAyWkaplEoraAWtolW0htbQOlpHG2gDbaJNtIW20DbaRttpO+2knbSbdtNe2kv7aB/tp/2URml0gA7QQTpIh+gQHabDdISO0FE6SsfoGB2n43SCTtApOkWn6TSdoTN0js7RefqRLtBPdJE8JdgsNtFeZbPabDa7zWH/Os5r89n8toAtaEOb2+b5XUzW2qK2mC1uS1hnS9pS9oa/icvbCraivdXeZivZ221lW95mgf8a17R321r2Hlvb3mtr2Lt+F9ex99m69iFbzzax9W0z29C2sI3sQ7axbWKb2ma2uW1h29nHbHv7uO1gn7Ad7ZN/Ey+179t1dr3dYDfaffYTe87+YI/ar+15+6PtaXvZgfYlO8i+bAfbV+wQO/T3MYAdbd+wY+xYO86OtxPsxL+Jp9npdoadaWfZd+xsO+dv4iX2PTvPptgFdqFdZBf/HKfXlGI/sMvshzbVLrcr7Eq7yq62a+za/1vrSrvZbrFb7V77sd1ud9iddpfdbff8HKevY7/91KbZz+wR+5U9aD+3h+wxe9h++XOcvr5j9ht73H5rT9iT9pT9zp6239sz9uzP609f+3f2J3vReguMrFiz4YAzcWZO4CycyFdxVs7G2TkHx/hqzsnXcC6+lnNzHs7L+Tg/F+CCHDKxZeaIC3FhjvN1XISv56JcjItzCXZckkvxDVyab+QyfBOX5Zu5HN/C5bkCV+Rb+TauxLdzZb6Dq/CdXJWrcXWuwXdxTb6ba/E9XJvv5Tp8H9fl+7keP8D1uQE35Ae5ET/EjbkJN+Vm3JxbcEt+mFvxI9ya23BbfpTb8WPcnh/nDvwEd+QnuRM/xZ35ae7Cz3BXfpa78XPcnZ/nHvwC9+RenMS9uQ+/yH25H/fnATyQX+JB/DIP5ld4CA/lYfwqD+fXeAS/ziN5FI/mN3gMj+VxPJ4n8ERO5jd5Er/Fk/ltnsJTeRpP5xk8k2fxOzyb5/Bcfpfn8XxewAt5ES/mJfweL+X3OYU/4GX8Iafycl7BK3kVr+Y1vJbX8XrewBt5E2/mLbyVt/FHvJ138E7exbt5D+/lj3kff8L7+VNO48/4AP+FD/LnfIi/4MP8JR/hr/gof83H+Bs+zt/yCT7Jp/g7Ps3f8xk+y+f4Bz7PP/IF/okvsmeIMFKRjkwURJmizFFClCVKjK6KskbZouxRjigWXR3ljK6JckXXRrmjPFHeKF+UPyoQFYzCiCIbcRRFhaLCUTy6LioSXR8VjYpFxaMSkYtKRqWiG6LS0Y1RmeimqGx0c1QuuiUqH1WIKka3RrdFlaLbo8rRHVGV6M6oalQtqh7ViO6KakZ3R7Wie6La0b1Rmei+qG50f1QveiCqHzWIGkYPRo2ih6LGUZOoadQsah61iFpGD0etokei1lGbqG30aNQueixqHz0edYieiDpGT17aXyz45Wr6V/uTot6R/vUN2T16UXxxfEn8vfjS+PvxlPgH8WXxD+Op8eXxFfGV8VXx1fE18bXxdfH18Q3xjfFN8c3xLfGtce9rZAaH6Q/CYFzgMrnMLsFlcYnuKpfVZXPZXQ4Xc1e7nO4al8td63K7PC6vy+fyuwIuhwsdOevYRa6QK+zi7jpXxF3virpirrgr4Zwr6Uq5Fq6la+lauUdca9fGtXWPukfdY+4x93jCr4W7Tu4p19k97bq4Z9wz7lnXzT3nurvnXQ/3guvperkkl+T6uD6ur+vr+rv+bqAb6Aa5QW6wG+yGuCFumBvmhrvhboQb4Ua6kW60G+3GuDFunBvnJrgJLtklu0lukpvsJrspboqb5qa5GW6Gm+Vmudlutpvr5rp5bp5b4Ba4RW6RW+KWuKVuqUtxKW6ZW+ZSXapb4Va4VW6VW+PWuHVundvgNrhNbpPb4ra4bW6b2+62u51up9vtdru9bq/b5/a5/W6/S3Np7oA74A66g+6Q+8Iddl+6I+4rd9R97Y65b9xx96074U66U87r0+57d8addefcD+68+9FdcD+5i8675NibsUmxt2KTY2/HpsSmxqbFpsdmxGbGZsXeic2OzYnNjb0bmxebH1sQWxhbFFscWxJ7L7Y09n4sJfZBbFnsw1hqbHlsRWxlbFVsdcz7AtsjX8gX9nF/nS/ir/dFfTFf3Jfwzpf0pfwNvrS/0ZfxN/my/mZfzt/iy/sKvqJv4pv6Zr65b+Fb+od9K/+Ib+3b+Lb+Ud/OP+bb+8d9B/+E7+if9J38U76zf9p38c/4rv7Z+b922ffwL/ievpdP8r19H/+i7+v7+f5+gB/oX/KD/Mt+sH/FD/FD/TD/qh/uX/Mj/Ot+pB/lR/s3/Bg/1o/z4/0EP9En+zf9JP+Wn+zf9lP8VD/NT/cz/Ew/y7/jZ/s5fq5/18/z8/0Cv9Av8ov9Ev+eX+rf9yn+A7/Mf+hT/XK/wq/0q/xqv8av9ev8er/Bb/Sb/Ga/xW/12/xHfrvf4Xf6XX633+P3+o/9Pv+J3+8/9Wn+M3/A/8Uf9J/7Q/4Lf9h/6Y/4r/xR/7U/5r/xx/23/oQ/6U/57/xp/70/48/6c/4Hf97/6C/4n/xF+Zs1IYQQQoh/ir7M/t5/5//Ur1u6PgCQbUe+w38956bcv4z7qX0dYwDwRK+uDX7bGjRISkr69dhUDUHhhQAQu5T/8/cP/Bovh7bwGHSANlD679bXT1X8+b7vv5s/fjNAIkCW33LSH48S4a/nv/EfzN/kPb7c/AsBiha+lJN+ot/iS/OX+Qfz72l3mfmzfJ4M0Pq/5GSFS/Gl+UvBI/AkdPjdkUIIIYQQQgghxC/6qfPdLvd8m/58nt9cyskMl+LLPZ9fRuU/Yg1CCCGEEEIIIYT47z39XPfHH+7QoU3n/+RB5j9HGX+CAQLAn6AMGfz5B1f6N5MQQgghhBDij3bppv9KVyKEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQmRc//43hKl/+uArvUYhhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBDiSvs/AQAA///c71RJ")
r8 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_DELDEST(r8, 0x6, 0x9, &(0x7f00000003c0)={{0x2, @rand_addr=0x1, 0xdffd, 0x2, 'nq\x00', 0x8, 0x3, 0x3}, {@private=0xa010300, 0xfffd, 0x3, 0x8, 0x0, 0x2004040}}, 0x44)
getsockopt$inet_tcp_int(r8, 0x6, 0x9, 0x0, &(0x7f0000000040))

22.89878ms ago: executing program 0 (id=398):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x6, 0x9, &(0x7f00000003c0)={{0x2, @rand_addr=0x1, 0xdffd, 0x2, 'nq\x00', 0x8, 0x3, 0x3}, {@private=0xa010300, 0xfffd, 0x3, 0x8, 0x0, 0x2004040}}, 0x44)
getsockopt$inet_tcp_int(r0, 0x6, 0x9, 0x0, &(0x7f0000000040))

3.95533ms ago: executing program 0 (id=399):
syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000380)={[{@grpquota}, {@nogrpid}, {@quota}, {@nobh}]}, 0x1, 0x511, &(0x7f0000000ac0)="$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")
r0 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x10c062)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/fscaps', 0x2000, 0x190)
sendmsg$NL80211_CMD_NEW_KEY(r1, 0x0, 0x20000090)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$bt_BT_DEFER_SETUP(r5, 0x112, 0x7, 0x0, &(0x7f0000000480))
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000080)={r0, 0x1, {0x0, 0x0, 0x0, 0x5a, 0x80, 0x0, 0x0, 0x119, 0x0, "faf90002000000bd3fe37d58128bbad0099cebdc25f5ab60b534464c516bdd8a0f35000000000000000000005100", "42d8cc26f7061a74df2cfc1fc89f399e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd0c7f3f800b2f7b6aa54cc50c1fcaed1e0800", "141802c4daf4162e43ac61b7ad3300", [0xbffffffffffffcec, 0x100]}})
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r6, 0x6, 0x25, &(0x7f0000000180)=0x1000002, 0x4)
sendfile(r0, r0, 0x0, 0x2000000000409)
socket$can_raw(0x1d, 0x3, 0x1)
pipe2(&(0x7f0000000040), 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x5, 0x0, 0x7fff0001}]})
setfsuid(0x0)
mkdir(&(0x7f0000000000)='./bus\x00', 0x0)

0s ago: executing program 3 (id=400):
prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000ffd000/0x3000)=nil)
socket(0xa, 0x3, 0x87)
r0 = socket(0x10, 0x3, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
r1 = syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10c0840, &(0x7f0000000040), 0x1, 0x5d2, &(0x7f0000001240)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000019080)=@file={0x0, './file1\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x803, 0x4, 0x7})
r5 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00')
read$FUSE(r5, &(0x7f00000047c0)={0x2020, 0x0, 0x0, <r6=>0x0}, 0x2020)
close_range(r0, r1, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r7 = creat(&(0x7f0000000100)='./file0\x00', 0x7a)
write$binfmt_elf32(r7, 0x0, 0x69)
close(r7)
mount$incfs(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000180)='./config\x00', &(0x7f00000001c0), 0xa00000, &(0x7f0000000600)={[{@read_timeout_ms={'read_timeout_ms', 0x3d, 0x1}}], [{@subj_user={'subj_user', 0x3d, '\x00'}}, {@fowner_eq={'fowner', 0x3d, r6}}, {@smackfsdef={'smackfsdef', 0x3d, 'mounts\x00'}}, {@obj_type={'obj_type', 0x3d, '\x00'}}, {@fowner_gt={'fowner>', r6}}, {@context={'context', 0x3d, 'sysadm_u'}}, {@euid_lt={'euid<', r6}}]})
r8 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)
connect$bt_sco(r8, &(0x7f0000000000), 0x8)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=@ipv6_newrule={0x2c, 0x20, 0x2d2c6d60ea1da725, 0x70bd29, 0x25dfdbfd, {0xa, 0x14, 0x0, 0xcd, 0xfe, 0x0, 0x0, 0x1, 0x10002}, [@FIB_RULE_POLICY=@FRA_PRIORITY={0x8, 0x6, 0x7ffc}, @FIB_RULE_POLICY=@FRA_PROTOCOL={0x5, 0x15, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008005}, 0x44050)
mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4)

kernel console output (not intermixed with test programs):

46.938171][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   46.958407][  T289] device veth0_vlan entered promiscuous mode
[   46.970668][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   46.978944][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   46.988193][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   46.996839][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   47.005305][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   47.013373][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   47.021764][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   47.030076][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   47.038472][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   47.046900][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   47.055492][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   47.063161][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   47.076814][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   47.091203][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   47.099706][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   47.099954][  T288] request_module fs-gadgetfs succeeded, but still no fs?
[   47.112208][  T287] device veth0_vlan entered promiscuous mode
[   47.128442][  T289] device veth1_macvtap entered promiscuous mode
[   47.136851][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   47.144896][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   47.153291][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   47.160963][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   47.193984][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   47.215204][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   47.224695][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   47.233113][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   47.261292][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   47.273098][  T287] device veth1_macvtap entered promiscuous mode
[   47.286141][  T318] loop1: detected capacity change from 0 to 512
[   47.304115][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   47.312891][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   47.333092][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   47.341856][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   47.349038][  T320] loop3: detected capacity change from 0 to 512
[   47.385693][  T318] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002]
[   47.398301][  T318] System zones: 1-12
[   47.405592][  T318] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: inode #12: comm syz.1.2: missing EA_INODE flag
[   47.429655][  T318] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.2: error while reading EA inode 12 err=-117
[   47.442269][  T318] EXT4-fs (loop1): 1 orphan inode deleted
[   47.448068][  T318] EXT4-fs (loop1): mounted filesystem without journal. Opts: debug,resuid=0x000000000000ee01,,errors=continue. Quota mode: writeback.
[   47.557373][  T320] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,grpquota,. Quota mode: writeback.
[   47.572716][  T320] ext4 filesystem being mounted at /0/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   47.583443][  T318] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2'.
[   47.600206][  T307] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   47.626030][  T320] 9pnet: Insufficient options for proto=fd
[   47.646735][  T332] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off.
[   47.659165][  T332] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[   47.690482][  T349] tipc: Started in network mode
[   47.695494][  T349] tipc: Node identity -, cluster identity 4711
[   47.709049][  T337] device bridge_slave_0 left promiscuous mode
[   47.715503][  T337] bridge0: port 1(bridge_slave_0) entered disabled state
[   47.723890][  T337] device bridge_slave_1 left promiscuous mode
[   47.730005][  T337] bridge0: port 2(bridge_slave_1) entered disabled state
[   47.755535][  T353] process 'syz.4.9' launched './file0' with NULL argv: empty string added
[   47.791621][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready
[   47.841763][  T349] loop4: detected capacity change from 0 to 512
[   47.918461][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   47.982386][  T349] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option
[   47.990286][  T307] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 4352, setting to 1024
[   48.033324][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready
[   48.041792][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   48.045136][  T349] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem
[   48.050052][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   48.064153][  T307] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024
[   48.066442][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   48.083477][  T349] EXT4-fs (loop4): orphan cleanup on readonly fs
[   48.084464][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   48.090642][  T349] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2
[   48.098565][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   48.106662][  T349] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2
[   48.124426][  T349] EXT4-fs (loop4): 1 truncate cleaned up
[   48.130682][  T349] EXT4-fs (loop4): mounted filesystem without journal. Opts: nomblk_io_submit,usrjquota="errors=continue,noload,data_err=ignore,grpjquota="errors=continue,errors=remount-ro,jqfmt=vfsv1,. Quota mode: writeback.
[   48.170534][  T337] syz.0.7 (337) used greatest stack depth: 21976 bytes left
[   48.191858][  T361] loop1: detected capacity change from 0 to 512
[   48.208620][  T361] EXT4-fs (loop1): Ignoring removed nobh option
[   48.246229][  T361] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,nobh,,errors=continue. Quota mode: writeback.
[   48.251944][  T364] =======================================================
[   48.251944][  T364] WARNING: The mand mount option has been deprecated and
[   48.251944][  T364]          and is ignored by this kernel. Remove the mand
[   48.251944][  T364]          option from the mount to silence this warning.
[   48.251944][  T364] =======================================================
[   48.260446][  T361] ext4 filesystem being mounted at /1/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   48.295405][  T307] usb 3-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01
[   48.328850][  T307] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   48.339888][  T368] FAULT_INJECTION: forcing a failure.
[   48.339888][  T368] name failslab, interval 1, probability 0, space 0, times 1
[   48.352933][  T368] CPU: 0 PID: 368 Comm: syz.0.14 Not tainted syzkaller #0
[   48.353091][  T307] usb 3-1: Product: syz
[   48.360102][  T368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   48.364989][  T307] usb 3-1: Manufacturer: syz
[   48.374322][  T368] Call Trace:
[   48.374337][  T368]  <TASK>
[   48.374344][  T368]  __dump_stack+0x21/0x30
[   48.374368][  T368]  dump_stack_lvl+0x110/0x170
[   48.374385][  T368]  ? show_regs_print_info+0x20/0x20
[   48.374402][  T368]  ? node_tag_clear+0x1ea/0x320
[   48.379563][  T307] usb 3-1: SerialNumber: syz
[   48.382380][  T368]  dump_stack+0x15/0x20
[   48.382405][  T368]  should_fail+0x3ab/0x500
[   48.382425][  T368]  __should_failslab+0xa4/0xe0
[   48.422274][  T368]  should_failslab+0x9/0x20
[   48.426905][  T368]  slab_pre_alloc_hook+0x39/0xd0
[   48.431937][  T368]  ? __kernfs_new_node+0xa6/0x670
[   48.436962][  T368]  __kmalloc_track_caller+0x6c/0x2c0
[   48.442244][  T368]  ? __kernfs_new_node+0xa6/0x670
[   48.447450][  T368]  kstrdup_const+0x55/0x90
[   48.451866][  T368]  __kernfs_new_node+0xa6/0x670
[   48.456807][  T368]  ? kernfs_new_node+0x260/0x260
[   48.461753][  T368]  ? rwsem_write_trylock+0x136/0x300
[   48.467045][  T368]  ? cgroup_mkdir+0x395/0x13d0
[   48.471904][  T368]  ? kernfs_iop_mkdir+0x1a3/0x2b0
[   48.477013][  T368]  ? vfs_mkdir+0x38b/0x590
[   48.481428][  T368]  ? up_write+0x7b/0x290
[   48.486046][  T368]  kernfs_new_node+0x150/0x260
[   48.490813][  T368]  __kernfs_create_file+0x4e/0x270
[   48.495925][  T368]  cgroup_addrm_files+0xa46/0xf50
[   48.500951][  T368]  ? trace_raw_output_cgroup_event+0x1e0/0x1e0
[   48.507190][  T368]  ? __pcpu_chunk_move+0x275/0x310
[   48.512297][  T368]  ? pcpu_memcg_post_alloc_hook+0x176/0x210
[   48.518294][  T368]  ? __kasan_check_write+0x14/0x20
[   48.523493][  T368]  ? __kasan_check_write+0x14/0x20
[   48.528601][  T368]  ? _raw_spin_lock_irq+0x95/0xf0
[   48.533951][  T368]  css_populate_dir+0x1d4/0x360
[   48.538829][  T368]  cgroup_mkdir+0x1153/0x13d0
[   48.543557][  T368]  ? css_task_iter_end+0x270/0x270
[   48.548693][  T368]  ? up_read+0x56/0x1d0
[   48.552860][  T368]  ? css_task_iter_end+0x270/0x270
[   48.557973][  T368]  kernfs_iop_mkdir+0x1a3/0x2b0
[   48.562967][  T368]  vfs_mkdir+0x38b/0x590
[   48.567220][  T368]  do_mkdirat+0x174/0x4d0
[   48.571633][  T368]  __x64_sys_mkdirat+0x89/0xa0
[   48.576395][  T368]  x64_sys_call+0x37e/0x9a0
[   48.580909][  T368]  do_syscall_64+0x4c/0xa0
[   48.585342][  T368]  ? clear_bhb_loop+0x50/0xa0
[   48.590038][  T368]  ? clear_bhb_loop+0x50/0xa0
[   48.594757][  T368]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   48.600656][  T368] RIP: 0033:0x7f0f15097159
[   48.605074][  T368] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   48.624684][  T368] RSP: 002b:00007f0f13af0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102
[   48.633131][  T368] RAX: ffffffffffffffda RBX: 00007f0f1531efa0 RCX: 00007f0f15097159
[   48.641107][  T368] RDX: 00000000000001ff RSI: 0000200000000000 RDI: ffffffffffffff9c
[   48.649171][  T368] RBP: 00007f0f1512e024 R08: 0000000000000000 R09: 0000000000000000
[   48.657166][  T368] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   48.665408][  T368] R13: 00007f0f1531f038 R14: 00007f0f1531efa0 R15: 00007ffc9240e9e8
[   48.673831][  T368]  </TASK>
[   48.677447][  T314] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[   48.694617][  T368] cgroup: cgroup_addrm_files: failed to add notify_on_release, err=-12
[   48.739773][  T307] ums-karma 3-1:1.0: USB Mass Storage device detected
[   48.768297][  T307] ums-karma 3-1:1.0: This device (045a,5210,0101 S 06 P f5) has unneeded SubClass and Protocol entries in unusual_devs.h (kernel syzkaller)
[   48.768297][  T307]    Please send a copy of this message to <linux-usb@vger.kernel.org> and <usb-storage@lists.one-eyed-alien.net>
[   48.912324][  T385] TCP: TCP_TX_DELAY enabled
[   48.934868][  T385] EXT4-fs error (device loop1): ext4_find_dest_de:2115: inode #2: block 3: comm syz.1.11: bad entry in directory: inode out of bounds - offset=92, inode=117440528, rec_len=16, size=2048 fake=0
[   48.976344][  T307] ums-karma: probe of 3-1:1.0 failed with error -5
[   49.247729][  T307] usb 3-1: USB disconnect, device number 2
[   49.277704][  T400] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   49.294101][  T293] usb 5-1: new full-speed USB device number 2 using dummy_hcd
[   49.403247][  T408] xt_hashlimit: size too large, truncated to 1048576
[   49.417440][   T30] kauditd_printk_skb: 79 callbacks suppressed
[   49.417456][   T30] audit: type=1400 audit(1788404912.617:153): avc:  denied  { unlink } for  pid=409 comm="syz.0.28" name="#1" dev="tmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[   49.469630][  T412] 9pnet: Insufficient options for proto=fd
[   49.471574][   T30] audit: type=1400 audit(1788404912.667:154): avc:  denied  { name_bind } for  pid=407 comm="syz.1.27" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1
[   49.522253][   T30] audit: type=1400 audit(1788404912.667:155): avc:  denied  { node_bind } for  pid=407 comm="syz.1.27" saddr=::1 src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1
[   49.561912][   T30] audit: type=1400 audit(1788404912.667:156): avc:  denied  { read write } for  pid=407 comm="syz.1.27" name="usbmon9" dev="devtmpfs" ino=182 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[   49.595603][   T30] audit: type=1400 audit(1788404912.667:157): avc:  denied  { open } for  pid=407 comm="syz.1.27" path="/dev/usbmon9" dev="devtmpfs" ino=182 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[   49.626202][   T30] audit: type=1400 audit(1788404912.677:158): avc:  denied  { bind } for  pid=413 comm="syz.0.29" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   49.647340][   T30] audit: type=1400 audit(1788404912.677:159): avc:  denied  { ioctl } for  pid=413 comm="syz.0.29" path="socket:[15778]" dev="sockfs" ino=15778 ioctlcmd=0x48e6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   49.677850][   T30] audit: type=1400 audit(1788404912.677:160): avc:  denied  { create } for  pid=413 comm="syz.0.29" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   49.697573][  T293] usb 5-1: not running at top speed; connect to a high speed hub
[   49.705653][   T30] audit: type=1400 audit(1788404912.677:161): avc:  denied  { write } for  pid=413 comm="syz.0.29" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   49.740943][   T30] audit: type=1400 audit(1788404912.677:162): avc:  denied  { create } for  pid=413 comm="syz.0.29" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   49.830232][  T293] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   49.841408][  T426] loop1: detected capacity change from 0 to 256
[   49.853964][  T293] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2
[   49.880403][  T293] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[   49.918917][  T428] loop3: detected capacity change from 0 to 512
[   49.960497][  T426] netlink: 8 bytes leftover after parsing attributes in process `syz.1.33'.
[   49.980171][  T431] loop1: detected capacity change from 0 to 512
[   49.994725][  T428] EXT4-fs (loop3): Ignoring removed nobh option
[   50.040551][  T428] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,nobh,,errors=continue. Quota mode: writeback.
[   50.054518][  T428] ext4 filesystem being mounted at /6/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   50.090387][  T293] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   50.103920][  T293] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   50.119986][  T293] usb 5-1: Product: syz
[   50.137269][  T293] usb 5-1: Manufacturer: syz
[   50.146464][  T293] usb 5-1: SerialNumber: syz
[   50.313678][  T442] EXT4-fs error (device loop3): ext4_find_dest_de:2115: inode #2: block 3: comm syz.3.34: bad entry in directory: inode out of bounds - offset=92, inode=117440528, rec_len=16, size=2048 fake=0
[   50.550303][    T6] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   50.558544][  T293] cdc_ncm 5-1:1.0: skipping garbage
[   50.563839][  T293] cdc_ncm 5-1:1.0: skipping garbage
[   50.569180][  T293] cdc_ncm 5-1:1.0: CDC Union missing and no IAD found
[   50.576106][  T293] cdc_ncm 5-1:1.0: bind() failure
[   50.582491][  T293] usb 5-1: USB disconnect, device number 2
[   50.696878][  T450] loop1: detected capacity change from 0 to 128
[   50.799090][  T453] devpts: called with bogus options
[   50.806891][  T458] devpts: called with bogus options
[   50.910265][    T6] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[   50.919562][    T6] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   50.929378][    T6] usb 1-1: config 0 descriptor??
[   51.026583][  T470] sch_tbf: peakrate 6 is lower than or equals to rate 18334158150323501347 !
[   51.029435][  T463] netlink: 72 bytes leftover after parsing attributes in process `syz.3.40'.
[   51.122531][  T473] loop4: detected capacity change from 0 to 256
[   51.716265][  T483] loop2: detected capacity change from 0 to 512
[   51.742505][  T483] EXT4-fs (loop2): Ignoring removed nobh option
[   51.752452][  T483] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,nobh,,errors=continue. Quota mode: writeback.
[   51.766340][  T483] ext4 filesystem being mounted at /4/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   51.848025][  T293] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   51.973044][  T488] EXT4-fs error (device loop2): ext4_find_dest_de:2115: inode #2: block 3: comm syz.2.46: bad entry in directory: inode out of bounds - offset=92, inode=117440528, rec_len=16, size=2048 fake=0
[   52.169911][    T6] usb 1-1: Cannot set autoneg
[   52.174794][    T6] MOSCHIP usb-ethernet driver: probe of 1-1:0.0 failed with error -71
[   52.183955][    T6] usb 1-1: USB disconnect, device number 2
[   52.280832][  T505] EXT4-fs (loop4): Ignoring removed nobh option
[   52.292418][  T505] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,nobh,,errors=continue. Quota mode: writeback.
[   52.306504][  T505] ext4 filesystem being mounted at /9/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   52.318322][  T499] EXT4-fs (loop1): Ignoring removed nobh option
[   52.363162][  T499] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,nobh,,errors=continue. Quota mode: writeback.
[   52.376975][  T499] ext4 filesystem being mounted at /9/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   52.420283][  T293] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   52.435698][  T293] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   52.933284][  T293] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00
[   52.948065][  T293] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   52.959120][  T293] usb 4-1: config 0 descriptor??
[   52.988173][  T511] EXT4-fs error (device loop4): ext4_find_dest_de:2115: inode #2: block 3: comm syz.4.50: bad entry in directory: inode out of bounds - offset=92, inode=117440528, rec_len=16, size=2048 fake=0
[   52.988175][  T512] EXT4-fs error (device loop1): ext4_find_dest_de:2115: inode #2: block 3: comm syz.1.48: bad entry in directory: inode out of bounds - offset=92, inode=117440528, rec_len=16, size=2048 fake=0
[   53.141019][  T521] futex_wake_op: syz.0.51 tries to shift op by 144; fix this program
[   53.154239][  T525] set_capacity_and_notify: 2 callbacks suppressed
[   53.154257][  T525] loop2: detected capacity change from 0 to 512
[   53.256196][  T525] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[   53.442417][  T531] netlink: 72 bytes leftover after parsing attributes in process `syz.4.55'.
[   53.530254][  T293] usbhid 4-1:0.0: can't add hid device: -71
[   53.536363][  T293] usbhid: probe of 4-1:0.0 failed with error -71
[   53.545451][  T293] usb 4-1: USB disconnect, device number 2
[   53.550240][  T307] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   53.610254][  T358] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[   53.892642][  T544] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability
[   53.920315][  T307] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0
[   53.936859][  T550] netlink: 16 bytes leftover after parsing attributes in process `syz.3.61'.
[   53.977836][  T552] 9pnet: Insufficient options for proto=fd
[   53.990355][  T358] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   54.002923][  T358] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[   54.020381][  T358] usb 3-1: New USB device found, idVendor=056e, idProduct=0c0d, bcdDevice= 0.00
[   54.029850][  T358] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   54.045631][  T562] loop4: detected capacity change from 0 to 512
[   54.059317][  T358] usb 3-1: config 0 descriptor??
[   54.090355][  T307] usb 2-1: New USB device found, idVendor=19f7, idProduct=0011, bcdDevice= 0.40
[   54.099445][  T307] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   54.102551][  T562] EXT4-fs (loop4): Ignoring removed nobh option
[   54.107993][  T307] usb 2-1: Product: syz
[   54.118602][  T307] usb 2-1: Manufacturer: syz
[   54.120546][  T358] usbhid 3-1:0.0: couldn't find an input interrupt endpoint
[   54.123674][  T307] usb 2-1: SerialNumber: syz
[   54.166470][  T562] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,nobh,,errors=continue. Quota mode: writeback.
[   54.181996][  T562] ext4 filesystem being mounted at /12/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   54.320225][   T60] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[   54.373908][  T575] EXT4-fs error (device loop4): ext4_find_dest_de:2115: inode #2: block 3: comm syz.4.65: bad entry in directory: inode out of bounds - offset=92, inode=117440528, rec_len=16, size=2048 fake=0
[   54.471268][  T577] loop1: detected capacity change from 0 to 256
[   54.697405][  T566] loop3: detected capacity change from 0 to 131072
[   54.730302][  T307] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found
[   54.730359][   T60] usb 1-1: unable to get BOS descriptor or descriptor too short
[   54.745505][  T566] F2FS-fs (loop3): Unrecognized mount option "0x0000000000000004" or missing value
[   54.760303][  T307] usb 2-1: unit 5 not found!
[   54.806454][   T30] kauditd_printk_skb: 41 callbacks suppressed
[   54.806470][   T30] audit: type=1400 audit(1788404918.007:204): avc:  denied  { read write } for  pid=580 comm="syz.3.68" name="uhid" dev="devtmpfs" ino=263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[   54.836297][   T60] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   54.847558][   T60] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[   54.860041][  T307] usb 2-1: USB disconnect, device number 2
[   54.915257][   T30] audit: type=1400 audit(1788404918.007:205): avc:  denied  { open } for  pid=580 comm="syz.3.68" path="/dev/uhid" dev="devtmpfs" ino=263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[   54.948943][   T30] audit: type=1400 audit(1788404918.007:206): avc:  denied  { read write } for  pid=580 comm="syz.3.68" name="uinput" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[   54.973038][   T30] audit: type=1400 audit(1788404918.007:207): avc:  denied  { open } for  pid=580 comm="syz.3.68" path="/dev/uinput" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[   54.997704][   T30] audit: type=1400 audit(1788404918.007:208): avc:  denied  { ioctl } for  pid=580 comm="syz.3.68" path="/dev/uhid" dev="devtmpfs" ino=263 ioctlcmd=0x5883 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[   55.038455][   T30] audit: type=1400 audit(1788404918.237:209): avc:  denied  { mmap_zero } for  pid=584 comm="syz.4.69" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1
[   55.039990][  T585] binder: 584:585 unknown command 0
[   55.058606][   T30] audit: type=1400 audit(1788404918.237:210): avc:  denied  { read } for  pid=584 comm="syz.4.69" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[   55.063901][  T585] binder: 584:585 ioctl c0306201 200000000040 returned -22
[   55.086641][   T30] audit: type=1400 audit(1788404918.237:211): avc:  denied  { open } for  pid=584 comm="syz.4.69" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[   55.119151][   T30] audit: type=1400 audit(1788404918.237:212): avc:  denied  { ioctl } for  pid=584 comm="syz.4.69" path="/dev/binderfs/binder0" dev="binder" ino=7 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[   55.130917][  T589] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4120 sclass=netlink_route_socket pid=589 comm=syz.4.70
[   55.144952][   T60] usb 1-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40
[   55.157237][  T293] usb 4-1: new full-speed USB device number 3 using dummy_hcd
[   55.172119][   T60] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   55.182819][   T30] audit: type=1400 audit(1788404918.237:213): avc:  denied  { set_context_mgr } for  pid=584 comm="syz.4.69" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1
[   55.185750][  T593] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4120 sclass=netlink_route_socket pid=593 comm=syz.4.70
[   55.202777][   T60] usb 1-1: Product: syz
[   55.222056][   T60] usb 1-1: Manufacturer: syz
[   55.226701][   T60] usb 1-1: SerialNumber: syz
[   55.271141][   T60] usb 1-1: selecting invalid altsetting 1
[   55.277101][   T60] usb 1-1: unit 0 not found!
[   55.286368][   T60] snd-usb-audio: probe of 1-1:1.0 failed with error -22
[   55.362315][  T615] loop4: detected capacity change from 0 to 256
[   55.476308][    T6] usb 1-1: USB disconnect, device number 3
[   55.533347][  T605] netlink: 72 bytes leftover after parsing attributes in process `syz.1.73'.
[   55.555929][  T617] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000001)
[   55.563872][  T617] FAT-fs (loop4): Filesystem has been set read-only
[   55.710276][  T293] usb 4-1: config 1 has an invalid descriptor of length 210, skipping remainder of the config
[   55.721553][  T293] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 1
[   55.890312][  T293] usb 4-1: New USB device found, idVendor=1235, idProduct=8203, bcdDevice= 0.40
[   55.899433][  T293] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   55.907455][  T293] usb 4-1: Product: syz
[   55.911665][  T293] usb 4-1: Manufacturer: syz
[   55.916258][  T293] usb 4-1: SerialNumber: syz
[   56.000025][  T621] netlink: 28 bytes leftover after parsing attributes in process `syz.0.78'.
[   56.010577][  T621] netlink: 91 bytes leftover after parsing attributes in process `syz.0.78'.
[   56.348271][   T60] usb 3-1: USB disconnect, device number 3
[   56.482532][  T631] loop2: detected capacity change from 0 to 256
[   56.560102][  T625] loop1: detected capacity change from 0 to 40427
[   56.631425][  T633] x_tables: duplicate underflow at hook 2
[   56.661471][  T633] loop4: detected capacity change from 0 to 512
[   56.863476][  T625] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[   56.871436][  T625] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[   56.900524][  T625] F2FS-fs (loop1): Unrecognized mount option "Íf®Ô/sž­ºê†À®ÏYUžI|›Ûwí‘È¿=iá#¼Ù«7Š\ÆYý'–—ÿÿ	¼à9xþ(É#~JesFJ!ë­k^:zS¨‡oìÚ2óIìÈÁ$ÐR·< ‘÷·3ÍuCW5õý> ©ÿ˜˜´àJW´Š÷DÝBGºIæUŽÜ*²¾ÙXúhê" or missing value
[   56.925755][  T635] loop2: detected capacity change from 0 to 256
[   57.092744][  T637] overlayfs: failed to clone upperpath
[   57.173507][  T625] loop1: detected capacity change from 0 to 512
[   57.256140][  T625] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   57.275546][  T625] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   57.291696][  T625] EXT4-fs (loop1): 1 truncate cleaned up
[   57.297402][  T625] EXT4-fs (loop1): mounted filesystem without journal. Opts: mb_optimize_scan=0x0000000000000001,acl,stripe=0x0000000000000001,noblock_validity,usrjquota=,,errors=continue. Quota mode: none.
[   57.514204][  T625] syz.1.80 (625) used greatest stack depth: 21224 bytes left
[   57.781504][  T659] netlink: 72 bytes leftover after parsing attributes in process `syz.1.90'.
[   57.844902][  T293] usb 4-1: USB disconnect, device number 3
[   57.920234][  T481] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[   57.973595][  T675] EXT4-fs (loop3): Ignoring removed nobh option
[   57.992791][  T675] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,nobh,,errors=continue. Quota mode: writeback.
[   58.008959][  T675] ext4 filesystem being mounted at /15/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   58.067462][  T681] syz.2.96 uses obsolete (PF_INET,SOCK_PACKET)
[   58.207464][  T686] EXT4-fs error (device loop3): ext4_find_dest_de:2115: inode #2: block 3: comm syz.3.94: bad entry in directory: inode out of bounds - offset=92, inode=117440528, rec_len=16, size=2048 fake=0
[   58.393552][  T690] UDC core: couldn't find an available UDC or it's busy: -16
[   58.401051][  T690] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[   58.510245][  T481] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   58.520823][  T481] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[   58.533779][  T481] usb 5-1: New USB device found, idVendor=056e, idProduct=0c0d, bcdDevice= 0.00
[   58.543020][  T481] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   58.555194][  T481] usb 5-1: config 0 descriptor??
[   58.576601][  T698] Zero length message leads to an empty skb
[   58.601605][  T481] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[   58.660184][   T26] usb 2-1: new full-speed USB device number 3 using dummy_hcd
[   58.848422][  T708] set_capacity_and_notify: 3 callbacks suppressed
[   58.848439][  T708] loop3: detected capacity change from 0 to 256
[   58.976221][  T716] loop2: detected capacity change from 0 to 1024
[   59.014124][  T716] EXT4-fs (loop2): revision level too high, forcing read-only mode
[   59.038393][  T716] EXT4-fs (loop2): orphan cleanup on readonly fs
[   59.049391][  T716] EXT4-fs error (device loop2): ext4_ext_check_inode:501: inode #3: comm syz.2.106: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 3(4), depth 0(0)
[   59.067472][   T26] usb 2-1: config 14 has an invalid interface number: 217 but max is 0
[   59.075948][   T26] usb 2-1: config 14 contains an unexpected descriptor of type 0x1, skipping
[   59.085081][  T716] EXT4-fs error (device loop2): ext4_quota_enable:6438: comm syz.2.106: Bad quota inode: 3, type: 0
[   59.096042][   T26] usb 2-1: config 14 has an invalid descriptor of length 0, skipping remainder of the config
[   59.106622][   T26] usb 2-1: config 14 has 2 interfaces, different from the descriptor's value: 1
[   59.115863][  T716] EXT4-fs warning (device loop2): ext4_enable_quotas:6479: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix.
[   59.130850][   T26] usb 2-1: config 14 has no interface number 1
[   59.137143][   T26] usb 2-1: config 14 interface 217 has no altsetting 0
[   59.144092][  T716] EXT4-fs (loop2): Cannot turn on quotas: error -117
[   59.150892][  T716] EXT4-fs (loop2): mounted filesystem without journal. Opts: nodelalloc,init_itable=0x00000000000002cd,init_itable,,errors=continue. Quota mode: writeback.
[   59.178377][  T715] netlink: 8 bytes leftover after parsing attributes in process `syz.2.106'.
[   59.249230][  T722] loop3: detected capacity change from 0 to 512
[   59.258000][  T706] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability
[   59.333258][  T722] EXT4-fs (loop3): Ignoring removed nobh option
[   59.351928][  T722] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,nobh,,errors=continue. Quota mode: writeback.
[   59.406183][   T26] usb 2-1: New USB device found, idVendor=0421, idProduct=0070, bcdDevice=46.26
[   59.415892][   T26] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   59.424686][   T26] usb 2-1: Product: syz
[   59.428933][   T26] usb 2-1: Manufacturer: syz
[   59.433604][   T26] usb 2-1: SerialNumber: syz
[   59.561015][  T735] EXT4-fs error (device loop3): ext4_find_dest_de:2115: inode #2: block 3: comm syz.3.107: bad entry in directory: inode out of bounds - offset=92, inode=117440528, rec_len=16, size=2048 fake=0
[   59.678791][  T691] WARNING! power/level is deprecated; use power/control instead
[   59.848975][  T739] loop2: detected capacity change from 0 to 128
[   59.904946][  T739] attempt to access beyond end of device
[   59.904946][  T739] loop2: rw=2049, want=1041, limit=128
[   59.920438][  T739] attempt to access beyond end of device
[   59.920438][  T739] loop2: rw=524288, want=369, limit=128
[   59.932254][  T739] attempt to access beyond end of device
[   59.932254][  T739] loop2: rw=0, want=153, limit=128
[   59.943486][  T739] attempt to access beyond end of device
[   59.943486][  T739] loop2: rw=0, want=153, limit=128
[   59.954330][  T739] attempt to access beyond end of device
[   59.954330][  T739] loop2: rw=0, want=153, limit=128
[   59.965463][  T739] attempt to access beyond end of device
[   59.965463][  T739] loop2: rw=0, want=153, limit=128
[   60.129875][  T743] loop2: detected capacity change from 0 to 1024
[   60.162869][  T743] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsv0,max_dir_size_kb=0x0000000000000007,noquota,delalloc,noblock_validity,nodioread_nolock,errors=remount-ro,. Quota mode: none.
[   60.224549][   T30] kauditd_printk_skb: 101 callbacks suppressed
[   60.224564][   T30] audit: type=1400 audit(60.207:315): avc:  denied  { remove_name } for  pid=742 comm="syz.2.111" name="file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   60.225189][  T743] EXT4-fs error (device loop2): ext4_get_first_dir_block:3619: inode #12: comm syz.2.111: directory missing '..'
[   60.230872][   T30] audit: type=1400 audit(60.207:316): avc:  denied  { rename } for  pid=742 comm="syz.2.111" name="file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   60.230899][   T30] audit: type=1400 audit(60.207:317): avc:  denied  { unlink } for  pid=742 comm="syz.2.111" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   60.230920][   T30] audit: type=1400 audit(60.207:318): avc:  denied  { rename } for  pid=742 comm="syz.2.111" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   60.253616][  T743] EXT4-fs (loop2): Remounting filesystem read-only
[   60.265130][   T30] audit: type=1400 audit(60.207:319): avc:  denied  { rmdir } for  pid=742 comm="syz.2.111" name="file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   60.296960][  T743] netlink: 8 bytes leftover after parsing attributes in process `syz.2.111'.
[   60.308055][   T30] audit: type=1400 audit(60.267:320): avc:  denied  { nlmsg_read } for  pid=742 comm="syz.2.111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   60.450250][  T736] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[   60.450416][  T753] loop2: detected capacity change from 0 to 512
[   60.468093][  T753] EXT4-fs (loop2): Ignoring removed nobh option
[   60.481995][  T753] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,nobh,,errors=continue. Quota mode: writeback.
[   60.654847][  T757] EXT4-fs error (device loop2): ext4_find_dest_de:2115: inode #2: block 3: comm syz.2.114: bad entry in directory: inode out of bounds - offset=92, inode=117440528, rec_len=16, size=2048 fake=0
[   60.681639][  T576] usb 5-1: USB disconnect, device number 3
[   60.844776][  T759] loop4: detected capacity change from 0 to 256
[   60.920313][  T736] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   60.931507][  T736] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   60.942061][  T736] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80
[   60.956990][  T736] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   60.966147][  T736] usb 4-1: config 0 descriptor??
[   61.241707][  T763] loop4: detected capacity change from 0 to 131072
[   61.272243][  T763] F2FS-fs (loop4): Segment count (31) mismatch with total segments from devices (0)
[   61.282004][  T763] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[   61.314782][  T763] F2FS-fs (loop4): invalid crc value
[   61.324998][  T763] F2FS-fs (loop4): Found nat_bits in checkpoint
[   61.358249][  T763] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[   61.365527][  T763] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4
[   61.367652][   T30] audit: type=1400 audit(61.347:321): avc:  denied  { ioctl } for  pid=768 comm="syz.2.118" path="socket:[17408]" dev="sockfs" ino=17408 ioctlcmd=0x89f6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   61.418234][   T30] audit: type=1400 audit(61.397:322): avc:  denied  { unmount } for  pid=286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1
[   61.439156][  T772] loop1: detected capacity change from 0 to 1024
[   61.442648][  T773] loop2: detected capacity change from 0 to 512
[   61.451207][  T736] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0
[   61.454706][  T763] F2FS-fs (loop4): checksum invalid, nid = 7, ino_of_node = 7, 32dd6215 vs. 1de10dc4
[   61.458825][  T736] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0
[   61.470343][  T763] F2FS-fs (loop4): checksum invalid, nid = 7, ino_of_node = 7, 32dd6215 vs. 1de10dc4
[   61.475620][  T736] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0
[   61.489194][   T30] audit: type=1400 audit(61.467:323): avc:  denied  { getopt } for  pid=762 comm="syz.4.117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   61.493636][  T736] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0
[   61.513403][   T26] rndis_host 2-1:14.217: skipping garbage
[   61.519369][  T736] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0
[   61.525718][  T773] EXT4-fs (loop2): Ignoring removed nobh option
[   61.532486][  T736] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0
[   61.543998][  T772] EXT4-fs (loop1): Ignoring removed bh option
[   61.550708][  T736] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0
[   61.552336][  T772] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   61.565637][  T736] cp2112 0003:10C4:EA90.0001: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.3-1/input0
[   61.573666][   T26] usb 2-1: bad CDC descriptors
[   61.600291][   T26] cdc_acm 2-1:14.217: skipping garbage
[   61.601416][   T30] audit: type=1400 audit(61.577:324): avc:  denied  { write } for  pid=762 comm="syz.4.117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[   61.614732][   T26] usb 2-1: USB disconnect, device number 3
[   61.630062][  T772] EXT4-fs (loop1): mounted filesystem without journal. Opts: nobarrier,dioread_lock,dioread_nolock,resgid=0x0000000000000000,nogrpid,lazytime,journal_ioprio=0x0000000000000005,stripe=0x0000000000000011,bh,init_itable,,errors=continue. Quota mode: none.
[   61.632215][  T773] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,nobh,,errors=continue. Quota mode: writeback.
[   61.680722][  T772] overlayfs: missing 'lowerdir'
[   61.700309][  T736] cp2112 0003:10C4:EA90.0001: Part Number: 0x30 Device Version: 0x6E
[   61.947772][  T781] EXT4-fs error (device loop2): ext4_find_dest_de:2115: inode #2: block 3: comm syz.2.120: bad entry in directory: inode out of bounds - offset=92, inode=117440528, rec_len=16, size=2048 fake=0
[   62.210241][  T736] cp2112 0003:10C4:EA90.0001: error setting SMBus config
[   62.222055][  T736] cp2112: probe of 0003:10C4:EA90.0001 failed with error -71
[   62.232486][  T736] usb 4-1: USB disconnect, device number 4
[   62.348239][  T783] fido_id[783]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory
[   62.410962][  T790] EXT4-fs (loop2): Ignoring removed nobh option
[   62.458557][  T790] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,nobh,,errors=continue. Quota mode: writeback.
[   62.621018][  T799] EXT4-fs error (device loop1): ext4_iget_extra_inode:4604: inode #15: comm syz.1.126: corrupted in-inode xattr
[   62.633588][  T799] EXT4-fs (loop1): Remounting filesystem read-only
[   62.640514][  T799] EXT4-fs error (device loop1): ext4_orphan_get:1411: comm syz.1.126: couldn't read orphan inode 15 (err -117)
[   62.652628][  T799] EXT4-fs (loop1): Remounting filesystem read-only
[   62.659150][  T799] EXT4-fs (loop1): mounted filesystem without journal. Opts: init_itable=0x0000000000000fff,inode_readahead_blks=0x0000000008000000,errors=remount-ro,nodelalloc,user_xattr,noload,grpid,stripe=0x0000000000010000,grpjquota=,journal_dev=0x0000000000000065,grpjquota=,. Quota mode: none.
[   62.784122][  T804] EXT4-fs error (device loop2): ext4_find_dest_de:2115: inode #2: block 3: comm syz.2.123: bad entry in directory: inode out of bounds - offset=92, inode=117440528, rec_len=16, size=2048 fake=0
[   64.068655][  T822] netlink: 8 bytes leftover after parsing attributes in process `syz.0.132'.
[   64.131110][  T822] netlink: 64 bytes leftover after parsing attributes in process `syz.0.132'.
[   64.163815][  T828] fuse: Bad value for 'fd'
[   64.176694][  T820] set_capacity_and_notify: 3 callbacks suppressed
[   64.176710][  T820] loop3: detected capacity change from 0 to 8192
[   64.264051][  T820] SELinux: failed to load policy
[   64.600600][  T836] loop3: detected capacity change from 0 to 128
[   64.608637][  T836] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1)
[   64.740233][  T782] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[   64.890253][  T736] usb 4-1: new low-speed USB device number 5 using dummy_hcd
[   65.467080][  T848] netlink: 72 bytes leftover after parsing attributes in process `syz.1.140'.
[   65.885442][  T850] loop4: detected capacity change from 0 to 40427
[   65.903832][  T850] F2FS-fs (loop4): invalid crc value
[   65.913453][  T850] F2FS-fs (loop4): Found nat_bits in checkpoint
[   65.940232][  T782] usb 3-1: Using ep0 maxpacket: 16
[   65.954097][  T850] F2FS-fs (loop4): Start checkpoint disabled!
[   65.961918][  T850] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6
[   65.996672][   T30] kauditd_printk_skb: 16 callbacks suppressed
[   65.996688][   T30] audit: type=1400 audit(65.973:341): avc:  denied  { append } for  pid=849 comm="syz.4.141" name="loop4" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[   66.026343][   T30] audit: type=1400 audit(65.993:342): avc:  denied  { map } for  pid=849 comm="syz.4.141" path="/dev/loop4" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[   66.097847][  T856] netlink: 4 bytes leftover after parsing attributes in process `syz.4.141'.
[   66.350002][   T30] audit: type=1400 audit(66.323:343): avc:  denied  { write } for  pid=849 comm="syz.4.141" path="/29/file0/file1" dev="loop4" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   66.390380][  T782] usb 3-1: unable to get BOS descriptor or descriptor too short
[   66.403751][   T45] attempt to access beyond end of device
[   66.403751][   T45] loop4: rw=2049, want=40984, limit=40427
[   66.470435][  T782] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   66.487125][  T782] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 144, changing to 7
[   66.498254][  T782] usb 3-1: too many endpoints for config 1 interface 2 altsetting 0: 255, using maximum allowed: 30
[   66.509319][  T782] usb 3-1: config 1 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255
[   66.527656][  T736] usb 4-1: unable to read config index 0 descriptor/start: -61
[   66.537030][  T865] netlink: 4 bytes leftover after parsing attributes in process `syz.4.145'.
[   66.540780][  T736] usb 4-1: can't read configurations, error -61
[   66.547087][  T865] : Can't open blockdev
[   66.570222][   T60] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[   66.657284][  T867] loop4: detected capacity change from 0 to 40427
[   66.700260][  T736] usb 4-1: new low-speed USB device number 6 using dummy_hcd
[   66.710373][  T782] usb 3-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40
[   66.722339][  T782] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   66.722698][  T867] F2FS-fs (loop4): invalid crc value
[   66.730904][  T782] usb 3-1: Product: syz
[   66.740483][  T782] usb 3-1: Manufacturer: syz
[   66.745209][  T782] usb 3-1: SerialNumber: syz
[   66.747588][  T867] F2FS-fs (loop4): Found nat_bits in checkpoint
[   66.783709][  T867] F2FS-fs (loop4): Start checkpoint disabled!
[   66.790961][  T867] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6
[   66.912252][   T45] attempt to access beyond end of device
[   66.912252][   T45] loop4: rw=2049, want=40976, limit=40427
[   66.990233][   T60] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   67.000646][   T60] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   67.011788][   T60] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0
[   67.021989][   T60] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0
[   67.032260][   T60] usb 2-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   67.048651][  T875] netlink: 44 bytes leftover after parsing attributes in process `syz.4.149'.
[   67.100295][  T736] usb 4-1: unable to read config index 0 descriptor/start: -61
[   67.107911][  T736] usb 4-1: can't read configurations, error -61
[   67.114946][  T736] usb usb4-port1: attempt power cycle
[   67.130273][  T782] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found
[   67.169046][  T782] usb 3-1: USB disconnect, device number 4
[   67.170038][  T878] loop4: detected capacity change from 0 to 40427
[   67.220318][   T60] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   67.225814][  T878] F2FS-fs (loop4): Fix alignment : done, start(4096) end(16896) block(12288)
[   67.230362][   T60] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   67.246953][   T60] usb 2-1: Product: syz
[   67.251316][   T60] usb 2-1: Manufacturer: syz
[   67.256034][   T60] usb 2-1: SerialNumber: syz
[   67.258933][  T878] F2FS-fs (loop4): invalid crc value
[   67.267495][  T878] F2FS-fs (loop4): invalid crc value
[   67.272899][  T878] F2FS-fs (loop4): Failed to get valid F2FS checkpoint
[   67.310797][   T60] cdc_mbim 2-1:1.0: skipping garbage
[   67.418585][  T880] loop4: detected capacity change from 0 to 512
[   67.471813][  T880] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback.
[   67.541302][  T885] xt_bpf: check failed: parse error
[   67.568968][  T736] usb 4-1: new low-speed USB device number 7 using dummy_hcd
[   67.740550][  T860] netlink: 36 bytes leftover after parsing attributes in process `syz.1.143'.
[   67.776689][  T895] loop3: detected capacity change from 0 to 512
[   67.866384][  T895] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.155: invalid indirect mapped block 4294967295 (level 1)
[   67.886482][  T895] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.155: invalid indirect mapped block 4294967295 (level 1)
[   67.903487][  T895] EXT4-fs (loop3): 2 truncates cleaned up
[   67.909871][  T895] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   68.681916][  T898] UDC core: couldn't find an available UDC or it's busy: -16
[   68.822084][  T898] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[   68.830252][   T60] cdc_mbim 2-1:1.0: bind() failure
[   68.837334][   T60] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found
[   68.840195][  T736] usb 4-1: device descriptor read/8, error -71
[   68.844456][   T60] cdc_ncm 2-1:1.1: bind() failure
[   69.111561][  T918] loop4: detected capacity change from 0 to 512
[   69.149130][  T918] EXT4-fs (loop4): Test dummy encryption mode enabled
[   69.167158][  T918] EXT4-fs error (device loop4): ext4_orphan_get:1406: inode #15: comm syz.4.158: inode has both inline data and extents flags
[   69.189094][  T918] EXT4-fs error (device loop4): ext4_orphan_get:1411: comm syz.4.158: couldn't read orphan inode 15 (err -117)
[   69.201818][  T918] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: writeback.
[   69.229461][   T30] audit: type=1400 audit(69.208:344): avc:  denied  { create } for  pid=923 comm="syz.0.160" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[   69.237860][  T924] overlayfs: missing 'lowerdir'
[   69.254537][  T782] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[   69.264813][  T918] fscrypt: AES-256-XTS using implementation "xts-aes-aesni"
[   69.272319][  T736] usb 4-1: device descriptor read/8, error -71
[   69.280450][   T30] audit: type=1400 audit(69.268:345): avc:  denied  { setattr } for  pid=917 comm="syz.4.158" name="file1" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   69.301691][   T30] audit: type=1400 audit(69.268:346): avc:  denied  { link } for  pid=923 comm="syz.0.160" name="file1" dev="tmpfs" ino=295 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[   69.323392][   T30] audit: type=1400 audit(69.288:347): avc:  denied  { unlink } for  pid=287 comm="syz-executor" name="file0" dev="tmpfs" ino=295 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[   69.323643][  T918] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni"
[   69.403141][  T918] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[   69.421125][  T918] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[   69.508503][  T932] loop4: detected capacity change from 0 to 512
[   69.510183][  T782] usb 3-1: Using ep0 maxpacket: 32
[   69.611424][   T30] audit: type=1400 audit(69.598:348): avc:  denied  { read } for  pid=931 comm="syz.4.162" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=18770 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[   69.640245][  T782] usb 3-1: config 0 has an invalid interface number: 16 but max is 0
[   69.650897][  T782] usb 3-1: config 0 has no interface number 0
[   69.667360][  T782] usb 3-1: config 0 interface 16 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023
[   69.680510][   T30] audit: type=1400 audit(69.618:349): avc:  denied  { watch watch_reads } for  pid=894 comm="syz.3.155" path="/25/file0" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   69.710248][  T782] usb 3-1: config 0 interface 16 altsetting 0 endpoint 0x82 has invalid maxpacket 65435, setting to 1024
[   69.731870][   T30] audit: type=1400 audit(69.618:350): avc:  denied  { read write } for  pid=894 comm="syz.3.155" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   69.740188][  T782] usb 3-1: config 0 interface 16 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024
[   69.785662][  T945] SELinux: security_context_str_to_sid(system_u) failed for (dev ?, type ?) errno=-22
[   69.796299][  T945] 9pnet: Could not find request transport: xen
[   69.799610][  T937] syz.4.162 (937) used greatest stack depth: 20872 bytes left
[   70.232647][  T782] usb 3-1: New USB device found, idVendor=0499, idProduct=102a, bcdDevice=8e.2d
[   70.241993][  T782] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   70.246011][  T959] usb 2-1: USB disconnect, device number 4
[   70.250551][  T782] usb 3-1: Product: syz
[   70.260620][  T782] usb 3-1: Manufacturer: syz
[   70.266636][  T782] usb 3-1: SerialNumber: syz
[   70.276984][  T963] loop4: detected capacity change from 0 to 128
[   70.278833][  T965] loop1: detected capacity change from 0 to 512
[   70.290556][  T782] usb 3-1: config 0 descriptor??
[   70.310445][  T893] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[   70.311374][  T965] EXT4-fs (loop1): Ignoring removed nobh option
[   70.317618][  T893] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[   70.342084][  T965] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,nobh,,errors=continue. Quota mode: writeback.
[   70.411859][  T963] EXT4-fs (loop4): Test dummy encryption mode enabled
[   70.420026][  T963] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption=v1,max_batch_time=0x0000000000000005,,errors=continue. Quota mode: none.
[   70.527386][  T970] EXT4-fs error (device loop1): ext4_find_dest_de:2115: inode #2: block 3: comm syz.1.170: bad entry in directory: inode out of bounds - offset=92, inode=117440528, rec_len=16, size=2048 fake=0
[   70.693240][  T736] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[   70.708834][  T972] netlink: 36 bytes leftover after parsing attributes in process `syz.0.171'.
[   70.709382][  T959] usb 3-1: USB disconnect, device number 5
[   70.719573][  T973] netlink: 36 bytes leftover after parsing attributes in process `syz.0.171'.
[   70.724071][   T39] usb 5-1: new full-speed USB device number 4 using dummy_hcd
[   70.852617][  T977] loop2: detected capacity change from 0 to 40427
[   70.884880][  T977] F2FS-fs (loop2): Fix alignment : done, start(4096) end(16896) block(12288)
[   70.894806][  T977] F2FS-fs (loop2): invalid crc value
[   70.900712][  T977] F2FS-fs (loop2): invalid crc value
[   70.906407][  T977] F2FS-fs (loop2): Failed to get valid F2FS checkpoint
[   70.960279][  T736] usb 4-1: unable to get BOS descriptor or descriptor too short
[   71.040299][  T736] usb 4-1: config 1 has an invalid interface number: 121 but max is 0
[   71.047382][  T980] loop2: detected capacity change from 0 to 1024
[   71.048846][  T736] usb 4-1: config 1 has no interface number 0
[   71.112913][  T980] EXT4-fs (loop2): Ignoring removed oldalloc option
[   71.121380][  T980] EXT4-fs (loop2): Ignoring removed orlov option
[   71.127864][  T980] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities
[   71.170320][   T39] usb 5-1: config 0 has an invalid interface number: 251 but max is 0
[   71.178925][   T39] usb 5-1: config 0 has no interface number 0
[   71.191032][   T30] kauditd_printk_skb: 3 callbacks suppressed
[   71.191048][   T30] audit: type=1400 audit(71.180:354): avc:  denied  { bind } for  pid=981 comm="syz.1.175" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   71.222939][  T982] loop1: detected capacity change from 0 to 8192
[   71.230285][  T736] usb 4-1: New USB device found, idVendor=05ba, idProduct=0007, bcdDevice=3e.97
[   71.239528][  T736] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   71.248653][  T736] usb 4-1: Product: syz
[   71.253059][  T736] usb 4-1: Manufacturer: syz
[   71.257833][  T736] usb 4-1: SerialNumber: syz
[   71.263296][  T982]  loop1: p1 p2 p4[EZD]
[   71.271377][  T982] loop1: p4 start 201326592 is beyond EOD, truncated
[   71.271944][  T980] netlink: 8 bytes leftover after parsing attributes in process `syz.2.174'.
[   71.300460][  T736] hub 4-1:1.121: bad descriptor, ignoring hub
[   71.306556][  T736] hub: probe of 4-1:1.121 failed with error -5
[   71.315123][  T101]  loop1: p1 p2 p4[EZD]
[   71.317604][   T30] audit: type=1400 audit(71.300:355): avc:  denied  { setopt } for  pid=981 comm="syz.1.175" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   71.320670][  T101] loop1: p4 start 201326592 is beyond EOD, truncated
[   71.380306][   T39] usb 5-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4
[   71.381104][  T985] loop2: detected capacity change from 0 to 8192
[   71.389607][   T39] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   71.389629][   T39] usb 5-1: Product: syz
[   71.389643][   T39] usb 5-1: Manufacturer: syz
[   71.389656][   T39] usb 5-1: SerialNumber: syz
[   71.419665][   T39] usb 5-1: config 0 descriptor??
[   71.421280][  T532] udevd[532]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory
[   71.425649][  T309] udevd[309]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory
[   71.450815][  T985] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   71.456160][  T312] udevd[312]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory
[   71.471196][  T309] udevd[309]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory
[   71.508441][   T30] audit: type=1400 audit(71.490:356): avc:  denied  { remount } for  pid=984 comm="syz.2.177" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1
[   71.595617][   T30] audit: type=1400 audit(71.580:357): avc:  denied  { mount } for  pid=996 comm="syz.2.178" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1
[   71.620746][  T736] usb 4-1: USB disconnect, device number 8
[   71.657776][   T30] audit: type=1400 audit(71.600:358): avc:  denied  { search } for  pid=996 comm="syz.2.178" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1
[   71.689255][   T30] audit: type=1400 audit(71.600:359): avc:  denied  { read } for  pid=996 comm="syz.2.178" name="trace_pipe" dev="tracefs" ino=12958 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1
[   71.711761][   T30] audit: type=1400 audit(71.600:360): avc:  denied  { open } for  pid=996 comm="syz.2.178" path="/30/debug/tracing/trace_pipe" dev="tracefs" ino=12958 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1
[   71.850243][  T959] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[   71.910257][  T576] usb 3-1: new full-speed USB device number 6 using dummy_hcd
[   72.048481][ T1003] loop3: detected capacity change from 0 to 512
[   72.091027][ T1003] EXT4-fs (loop3): Ignoring removed nobh option
[   72.101981][ T1003] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,nobh,,errors=continue. Quota mode: writeback.
[   72.153812][  T959] usb 2-1: device descriptor read/64, error -71
[   72.180246][  T576] usb 3-1: device descriptor read/64, error -71
[   72.354745][ T1007] EXT4-fs error (device loop3): ext4_find_dest_de:2115: inode #2: block 3: comm syz.3.181: bad entry in directory: inode out of bounds - offset=92, inode=117440528, rec_len=16, size=2048 fake=0
[   72.450261][   T39] asix 5-1:0.251 (unnamed net_device) (uninitialized): invalid PHY address: 227
[   72.452914][   T30] audit: type=1400 audit(72.440:361): avc:  denied  { bind } for  pid=1008 comm="syz.0.182" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[   72.580252][  T576] usb 3-1: device descriptor read/64, error -71
[   72.600193][  T959] usb 2-1: device descriptor read/64, error -71
[   72.627696][ T1013] netlink: 12 bytes leftover after parsing attributes in process `syz.0.184'.
[   72.688315][   T39] usb 5-1: USB disconnect, device number 4
[   72.860195][  T576] usb 3-1: new full-speed USB device number 7 using dummy_hcd
[   72.870171][  T959] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[   72.969146][ T1018] loop3: detected capacity change from 0 to 512
[   73.053753][ T1018] EXT4-fs (loop3): Ignoring removed nobh option
[   73.101658][ T1018] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,nobh,,errors=continue. Quota mode: writeback.
[   73.190323][  T959] usb 2-1: device descriptor read/64, error -71
[   73.197069][  T576] usb 3-1: device descriptor read/64, error -71
[   73.333833][ T1024] EXT4-fs error (device loop3): ext4_find_dest_de:2115: inode #2: block 3: comm syz.3.185: bad entry in directory: inode out of bounds - offset=92, inode=117440528, rec_len=16, size=2048 fake=0
[   73.660212][  T576] usb 3-1: device descriptor read/64, error -71
[   73.666675][  T959] usb 2-1: device descriptor read/64, error -71
[   73.750176][   T39] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[   73.790622][  T576] usb usb3-port1: attempt power cycle
[   73.796262][  T959] usb usb2-port1: attempt power cycle
[   73.895068][   T30] audit: type=1400 audit(73.880:362): avc:  denied  { create } for  pid=1032 comm="syz.3.191" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[   73.924807][   T30] audit: type=1400 audit(73.900:363): avc:  denied  { write } for  pid=1032 comm="syz.3.191" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[   73.990178][   T39] usb 5-1: Using ep0 maxpacket: 8
[   74.110311][   T39] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 57, changing to 9
[   74.121571][   T39] usb 5-1: New USB device found, idVendor=1294, idProduct=1320, bcdDevice= 0.00
[   74.130899][   T39] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   74.140952][   T39] usb 5-1: config 0 descriptor??
[   74.260242][  T576] usb 3-1: new full-speed USB device number 8 using dummy_hcd
[   74.267902][  T959] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[   74.380927][ T1041] capability: warning: `syz.4.188' uses deprecated v2 capabilities in a way that may be insecure
[   74.392451][ T1041] UDC core: couldn't find an available UDC or it's busy: -16
[   74.402101][ T1041] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[   74.440201][  T576] usb 3-1: device descriptor read/8, error -71
[   74.450383][  T959] usb 2-1: device descriptor read/8, error -71
[   74.628803][ T1057] loop2: detected capacity change from 0 to 512
[   74.643130][ T1057] EXT4-fs (loop2): Ignoring removed nobh option
[   74.650261][  T576] usb 3-1: device descriptor read/8, error -71
[   74.660312][  T959] usb 2-1: device descriptor read/8, error -71
[   74.674936][ T1057] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,nobh,,errors=continue. Quota mode: writeback.
[   74.680579][   T39] usbhid 5-1:0.0: can't add hid device: -71
[   74.707443][   T39] usbhid: probe of 5-1:0.0 failed with error -71
[   74.778845][   T39] usb 5-1: USB disconnect, device number 5
[   74.913703][ T1063] EXT4-fs error (device loop2): ext4_find_dest_de:2115: inode #2: block 3: comm syz.2.195: bad entry in directory: inode out of bounds - offset=92, inode=117440528, rec_len=16, size=2048 fake=0
[   75.249129][ T1069] loop4: detected capacity change from 0 to 8192
[   75.293199][ T1049] loop1: detected capacity change from 0 to 131072
[   75.612901][  T736] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[   75.636107][ T1086] loop2: detected capacity change from 0 to 4096
[   75.815305][ T1086] EXT4-fs (loop2): mounted filesystem without journal. Opts: nodelalloc,,errors=continue. Quota mode: writeback.
[   75.890339][  T959] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[   75.918815][ T1086] netlink: 11236 bytes leftover after parsing attributes in process `syz.2.203'.
[   75.982898][ T1092] Illegal XDP return value 4294967274, expect packet loss!
[   75.999820][ T1094] bpf setsockopt: ignoring program buffer with optlen=64747 (max_optlen=4096)
[   76.009016][  T959] usb 2-1: Using ep0 maxpacket: 32
[   76.010705][ T1094] netlink: 16 bytes leftover after parsing attributes in process `syz.2.206'.
[   76.023516][ T1094] netlink: 16 bytes leftover after parsing attributes in process `syz.2.206'.
[   76.044345][ T1096] netlink: 4 bytes leftover after parsing attributes in process `syz.2.207'.
[   76.097661][ T1097] loop2: detected capacity change from 0 to 512
[   76.110278][  T736] usb 5-1: Using ep0 maxpacket: 16
[   76.140285][  T959] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[   76.210282][  T358] usb 4-1: new full-speed USB device number 9 using dummy_hcd
[   76.232062][ T1097] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002]
[   76.240251][  T736] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   76.240286][ T1097] System zones: 
[   76.251065][  T736] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[   76.251089][ T1097] 1-12
[   76.254653][  T736] usb 5-1: config 1 interface 0 altsetting 0 has an invalid endpoint descriptor of length 2, skipping
[   76.264124][ T1097] 
[   76.267209][  T736] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[   76.293529][ T1097] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: inode #12: comm syz.2.207: missing EA_INODE flag
[   76.305595][ T1097] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.207: error while reading EA inode 12 err=-117
[   76.317904][  T959] usb 2-1: New USB device found, idVendor=1235, idProduct=8012, bcdDevice= 0.40
[   76.318245][ T1097] EXT4-fs (loop2): 1 orphan inode deleted
[   76.327042][  T959] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   76.332976][ T1097] EXT4-fs (loop2): mounted filesystem without journal. Opts: debug,resuid=0x000000000000ee01,,errors=continue. Quota mode: writeback.
[   76.341334][  T959] usb 2-1: Product: syz
[   76.438943][  T959] usb 2-1: Manufacturer: syz
[   76.444021][  T959] usb 2-1: SerialNumber: syz
[   76.471313][  T736] usb 5-1: Dual-Role OTG device on HNP port
[   76.500057][  T736] usb 5-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40
[   76.509225][  T736] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   76.517814][  T736] usb 5-1: Product: syz
[   76.530198][  T736] usb 5-1: Manufacturer: syz
[   76.530500][ T1102] syz.0.209 (1102): attempted to duplicate a private mapping with mremap.  This is not supported.
[   76.534839][  T736] usb 5-1: SerialNumber: syz
[   76.660256][  T358] usb 4-1: unable to get BOS descriptor or descriptor too short
[   76.690909][ T1072] UDC core: couldn't find an available UDC or it's busy: -16
[   76.701663][ T1072] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[   76.710323][  T358] usb 4-1: not running at top speed; connect to a high speed hub
[   76.800394][  T358] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   76.834734][  T959] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found
[   76.860455][  T959] usb 2-1: unit 1 not found!
[   76.867869][  T959] usb 2-1: unit 8 not found!
[   77.104788][  T358] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[   77.112378][  T959] snd-usb-audio: probe of 2-1:1.0 failed with error -71
[   77.113902][  T358] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 120, changing to 4
[   77.133164][  T959] usb 2-1: USB disconnect, device number 8
[   77.245972][  T736] usb 5-1: USB disconnect, device number 6
[   77.253341][ T1112] loop2: detected capacity change from 0 to 8192
[   77.265332][   T30] kauditd_printk_skb: 4 callbacks suppressed
[   77.265348][   T30] audit: type=1400 audit(77.250:368): avc:  denied  { search } for  pid=1109 comm="syz.4.211" name="/" dev="configfs" ino=14435 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[   77.272526][ T1113] loop4: detected capacity change from 0 to 512
[   77.294266][   T30] audit: type=1400 audit(77.250:369): avc:  denied  { write } for  pid=1109 comm="syz.4.211" name="usb_gadget" dev="configfs" ino=14436 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[   77.326900][   T30] audit: type=1400 audit(77.250:370): avc:  denied  { add_name } for  pid=1109 comm="syz.4.211" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[   77.340893][ T1115] SELinux:  Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[   77.350496][  T358] usb 4-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice= 0.40
[   77.353923][ T1115] loop1: detected capacity change from 0 to 512
[   77.438988][  T358] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   77.477934][ T1115] EXT4-fs (loop1): Ignoring removed nobh option
[   77.484773][   T30] audit: type=1400 audit(77.250:371): avc:  denied  { create } for  pid=1109 comm="syz.4.211" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=dir permissive=1
[   77.504216][  T358] usb 4-1: Product: syz
[   77.517045][  T358] usb 4-1: Manufacturer: syz
[   77.522041][  T358] usb 4-1: SerialNumber: syz
[   77.528508][   T30] audit: type=1400 audit(77.310:372): avc:  denied  { create } for  pid=1109 comm="syz.4.211" name="gser.usb0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=lnk_file permissive=1
[   77.551264][ T1115] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002]
[   77.559783][   T30] audit: type=1400 audit(77.460:373): avc:  denied  { create } for  pid=1114 comm="syz.1.213" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C653061616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616
[   77.560184][   T30] audit: type=1400 audit(77.460:374): avc:  denied  { associate } for  pid=1114 comm="syz.1.213" name="file0" scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon=2321202E2F6367726F75702F66696C65306161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161
[   77.579804][ T1115] System zones: 
[   77.648779][   T30] audit: type=1400 audit(77.460:375): avc:  denied  { mounton } for  pid=1114 comm="syz.1.213" path="/29/file0" dev="tmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C65306161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161
[   77.737821][  T532] udevd[532]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   77.848650][ T1090] loop3: detected capacity change from 0 to 256
[   77.882171][ T1115] 1-12
[   77.893285][ T1115] EXT4-fs error (device loop1): ext4_iget_extra_inode:4604: inode #15: comm syz.1.213: corrupted in-inode xattr
[   77.906738][ T1115] EXT4-fs error (device loop1): ext4_orphan_get:1411: comm syz.1.213: couldn't read orphan inode 15 (err -117)
[   77.927187][ T1115] EXT4-fs (loop1): mounted filesystem without journal. Opts: debug,nobh,,errors=continue. Quota mode: writeback.
[   77.940396][ T1129] netlink: 'syz.0.217': attribute type 1 has an invalid length.
[   77.951157][ T1129] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   77.958390][ T1129] IPv6: NLM_F_CREATE should be set when creating new route
[   77.966055][ T1129] IPv6: NLM_F_CREATE should be set when creating new route
[   77.973561][ T1115] netlink: 8 bytes leftover after parsing attributes in process `syz.1.213'.
[   77.986027][   T30] audit: type=1326 audit(77.970:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1130 comm="syz.0.218" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f15097159 code=0x7ffc0000
[   77.990261][  T358] usb 4-1: 1:1 : no or invalid class specific endpoint descriptor
[   78.020319][  T358] usb 4-1: 1:1 : unknown format tag 0x3 is detected.  processed as MPEG.
[   78.029275][  T358] usb 4-1: found format II with max.bitrate = 5, frame size=14
[   78.029990][ T1115] netlink: 20 bytes leftover after parsing attributes in process `syz.1.213'.
[   78.037276][  T358] usb 4-1: 1:1 : invalid UAC_FORMAT_TYPE desc
[   78.050492][ T1112] loop2: detected capacity change from 0 to 512
[   78.052708][   T30] audit: type=1326 audit(77.970:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1130 comm="syz.0.218" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f0f15097159 code=0x7ffc0000
[   78.086260][  T358] usb 4-1: 0:2 : does not exist
[   78.098223][  T358] usb 4-1: USB disconnect, device number 9
[   78.114421][ T1112] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   78.161227][ T1112] EXT4-fs error (device loop2): __ext4_get_inode_loc:4365: comm syz.2.212: Invalid inode table block 34 in block_group 0
[   78.174805][ T1112] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5904: Corrupt filesystem
[   78.184852][ T1112] EXT4-fs error (device loop2): ext4_setattr:5617: inode #15: comm syz.2.212: mark_inode_dirty error
[   78.210472][ T1112] EXT4-fs error (device loop2) in ext4_setattr:5676: Corrupt filesystem
[   78.310899][  T532] udevd[532]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   78.392022][ T1161] EXT4-fs (loop2): Ignoring removed nobh option
[   78.412364][ T1161] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,nobh,,errors=continue. Quota mode: writeback.
[   78.611892][ T1168] EXT4-fs error (device loop2): ext4_find_dest_de:2115: inode #2: block 3: comm syz.2.224: bad entry in directory: inode out of bounds - offset=92, inode=117440528, rec_len=16, size=2048 fake=0
[   79.045748][ T1138] F2FS-fs (loop1): Found nat_bits in checkpoint
[   79.078222][ T1138] F2FS-fs (loop1): Mounted with checkpoint version = 753bd00b
[   79.287821][ T1176] netlink: 12 bytes leftover after parsing attributes in process `syz.2.226'.
[   79.511929][ T1186] netlink: 4 bytes leftover after parsing attributes in process `syz.0.232'.
[   79.601873][ T1176] F2FS-fs (loop2): invalid crc value
[   79.641824][ T1176] F2FS-fs (loop2): Found nat_bits in checkpoint
[   79.690232][  T358] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[   79.717885][ T1184] set_capacity_and_notify: 11 callbacks suppressed
[   79.717903][ T1184] loop3: detected capacity change from 0 to 40427
[   79.732017][ T1176] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[   79.885108][ T1184] F2FS-fs (loop3): Insane cp_payload (553648128 >= 504)
[   79.905070][ T1184] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[   79.928920][ T1184] F2FS-fs (loop3): invalid crc value
[   79.999629][ T1207] loop1: detected capacity change from 0 to 512
[   80.014157][ T1184] F2FS-fs (loop3): Found nat_bits in checkpoint
[   80.029964][ T1176] attempt to access beyond end of device
[   80.029964][ T1176] loop2: rw=2049, want=79880, limit=40427
[   80.046568][ T1176] attempt to access beyond end of device
[   80.046568][ T1176] loop2: rw=2049, want=81920, limit=40427
[   80.050221][  T358] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   80.062780][ T1176] attempt to access beyond end of device
[   80.062780][ T1176] loop2: rw=2049, want=51480, limit=40427
[   80.083766][ T1176] attempt to access beyond end of device
[   80.083766][ T1176] loop2: rw=2049, want=53248, limit=40427
[   80.094817][ T1207] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended
[   80.105696][ T1176] attempt to access beyond end of device
[   80.105696][ T1176] loop2: rw=2049, want=62248, limit=40427
[   80.129120][  T358] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[   80.134002][ T1176] attempt to access beyond end of device
[   80.134002][ T1176] loop2: rw=2049, want=69632, limit=40427
[   80.158150][ T1176] attempt to access beyond end of device
[   80.158150][ T1176] loop2: rw=2049, want=69640, limit=40427
[   80.170440][ T1176] attempt to access beyond end of device
[   80.170440][ T1176] loop2: rw=2049, want=69648, limit=40427
[   80.170680][  T358] usb 5-1: New USB device found, idVendor=056e, idProduct=0c0d, bcdDevice= 0.00
[   80.181814][ T1176] attempt to access beyond end of device
[   80.181814][ T1176] loop2: rw=2049, want=69656, limit=40427
[   80.192318][  T358] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   80.202269][ T1176] attempt to access beyond end of device
[   80.202269][ T1176] loop2: rw=2049, want=69664, limit=40427
[   80.218354][ T1207] EXT4-fs error (device loop1): ext4_orphan_get:1432: comm syz.1.233: bad orphan inode 13
[   80.236015][  T358] usb 5-1: config 0 descriptor??
[   80.245204][ T1184] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[   80.267672][ T1184] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[   80.291020][  T358] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[   80.314823][ T1207] ext4_test_bit(bit=12, block=18) = 1
[   80.346234][ T1207] is_bad_inode(inode)=0
[   80.358278][ T1207] NEXT_ORPHAN(inode)=0
[   80.364268][ T1207] max_ino=32
[   80.367824][ T1207] i_nlink=1
[   80.372372][ T1207] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   80.397464][ T1207] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1054: updating to rev 1 because of new feature flag, running e2fsck is recommended
[   80.440218][ T1207] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.233: bg 0: block 248: padding at end of block bitmap is not set
[   80.462863][ T1207] EXT4-fs error (device loop1): ext4_acquire_dquot:6227: comm syz.1.233: Failed to acquire dquot type 1
[   80.542054][ T1220] EXT4-fs error (device loop1): ext4_release_dquot:6263: comm kworker/u4:20: Failed to release dquot type 1
[   80.773000][ T1261] loop3: detected capacity change from 0 to 512
[   80.830937][ T1261] EXT4-fs (loop3): Ignoring removed nobh option
[   80.842117][ T1261] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,nobh,,errors=continue. Quota mode: writeback.
[   81.141730][ T1268] EXT4-fs error (device loop3): ext4_find_dest_de:2115: inode #2: block 3: comm syz.3.237: bad entry in directory: inode out of bounds - offset=92, inode=117440528, rec_len=16, size=2048 fake=0
[   81.383964][ T1256] loop2: detected capacity change from 0 to 131072
[   81.432787][ T1256] F2FS-fs (loop2): Unrecognized mount option "pr	{jNJjjquota=f25ϗA=n"g%a;plfs" or missing value
[   81.930883][ T1286] loop3: detected capacity change from 0 to 256
[   82.126095][ T1279] loop2: detected capacity change from 0 to 40427
[   82.160194][ T1283] loop1: detected capacity change from 0 to 40427
[   82.171410][ T1279] F2FS-fs (loop2): Fix alignment : done, start(4096) end(16896) block(12288)
[   82.181154][ T1279] F2FS-fs (loop2): invalid crc value
[   82.186901][ T1279] F2FS-fs (loop2): invalid crc value
[   82.192347][ T1279] F2FS-fs (loop2): Failed to get valid F2FS checkpoint
[   82.203251][ T1283] F2FS-fs (loop1): invalid crc value
[   82.210451][ T1283] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109)
[   82.243171][ T1283] F2FS-fs (loop1): Start checkpoint disabled!
[   82.250943][ T1283] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6
[   82.262534][ T1282] netlink: 68 bytes leftover after parsing attributes in process `syz.1.247'.
[   82.271782][ T1283] netlink: 68 bytes leftover after parsing attributes in process `syz.1.247'.
[   82.307218][   T30] kauditd_printk_skb: 61 callbacks suppressed
[   82.307235][   T30] audit: type=1400 audit(82.292:436): avc:  denied  { watch } for  pid=1291 comm="syz.0.251" path="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=dir permissive=1
[   82.350257][  T959] usb 4-1: new full-speed USB device number 10 using dummy_hcd
[   82.419657][   T39] usb 5-1: USB disconnect, device number 7
[   82.562672][ T1305] bridge0: port 1(bridge_slave_0) entered blocking state
[   82.569811][ T1305] bridge0: port 1(bridge_slave_0) entered disabled state
[   82.577703][ T1305] device bridge_slave_0 entered promiscuous mode
[   82.586438][ T1305] bridge0: port 2(bridge_slave_1) entered blocking state
[   82.593574][ T1305] bridge0: port 2(bridge_slave_1) entered disabled state
[   82.601265][ T1305] device bridge_slave_1 entered promiscuous mode
[   82.621060][ T1299] netlink: 72 bytes leftover after parsing attributes in process `syz.0.255'.
[   82.644927][ T1305] bridge0: port 2(bridge_slave_1) entered blocking state
[   82.652141][ T1305] bridge0: port 2(bridge_slave_1) entered forwarding state
[   82.659684][ T1305] bridge0: port 1(bridge_slave_0) entered blocking state
[   82.667017][ T1305] bridge0: port 1(bridge_slave_0) entered forwarding state
[   82.688694][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   82.696741][ T1228] bridge0: port 1(bridge_slave_0) entered disabled state
[   82.704826][ T1228] bridge0: port 2(bridge_slave_1) entered disabled state
[   82.712018][  T358] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[   82.724379][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   82.732674][ T1228] bridge0: port 1(bridge_slave_0) entered blocking state
[   82.740009][ T1228] bridge0: port 1(bridge_slave_0) entered forwarding state
[   82.748774][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   82.750299][  T959] usb 4-1: config 1 has an invalid interface number: 161 but max is 0
[   82.757860][ T1228] bridge0: port 2(bridge_slave_1) entered blocking state
[   82.765550][  T959] usb 4-1: config 1 has no interface number 0
[   82.772838][ T1228] bridge0: port 2(bridge_slave_1) entered forwarding state
[   82.794081][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   82.803281][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   82.818615][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   82.830024][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   82.838157][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   82.845893][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   82.855976][ T1305] device veth0_vlan entered promiscuous mode
[   82.866490][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   82.876140][ T1305] device veth1_macvtap entered promiscuous mode
[   82.884011][ T1223] device bridge_slave_1 left promiscuous mode
[   82.890277][ T1223] bridge0: port 2(bridge_slave_1) entered disabled state
[   82.890446][  T959] usb 4-1: New USB device found, idVendor=05cc, idProduct=3352, bcdDevice=da.6e
[   82.906589][  T959] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[   82.906829][ T1223] device bridge_slave_0 left promiscuous mode
[   82.914983][  T959] usb 4-1: Product: syz
[   82.921991][ T1223] bridge0: port 1(bridge_slave_0) entered disabled state
[   82.925483][  T959] usb 4-1: Manufacturer: syz
[   82.938078][ T1223] device veth1_macvtap left promiscuous mode
[   82.945092][ T1223] device veth0_vlan left promiscuous mode
[   83.025113][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   83.036573][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   83.053090][   T30] audit: type=1400 audit(83.035:437): avc:  denied  { mounton } for  pid=1305 comm="syz-executor" path="/root/syzkaller.T0ViAE/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1
[   83.090932][ T1311] loop5: detected capacity change from 0 to 512
[   83.131020][ T1311] EXT4-fs (loop5): Ignoring removed nobh option
[   83.149831][ T1311] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,nobh,,errors=continue. Quota mode: writeback.
[   83.163826][  T358] usb 3-1: unable to get BOS descriptor or descriptor too short
[   83.243173][ T1288] netlink: 36 bytes leftover after parsing attributes in process `syz.3.249'.
[   83.297594][   T30] audit: type=1400 audit(83.275:438): avc:  denied  { write } for  pid=1287 comm="syz.3.249" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   83.315017][ T1314] overlayfs: failed to clone upperpath
[   83.389433][   T30] audit: type=1400 audit(83.325:439): avc:  denied  { add_name } for  pid=1287 comm="syz.3.249" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   83.411152][   T30] audit: type=1400 audit(83.325:440): avc:  denied  { associate } for  pid=1287 comm="syz.3.249" name="file1" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[   83.447065][ T1322] EXT4-fs error (device loop5): ext4_find_dest_de:2115: inode #2: block 3: comm syz.5.258: bad entry in directory: inode out of bounds - offset=92, inode=117440528, rec_len=16, size=2048 fake=0
[   83.502779][  T959] usb 4-1: USB disconnect, device number 10
[   83.526185][   T30] audit: type=1400 audit(83.465:441): avc:  denied  { lock } for  pid=1319 comm="syz.4.260" path="/dev/fuse" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1
[   83.562844][   T30] audit: type=1400 audit(83.465:442): avc:  denied  { remount } for  pid=1313 comm="syz.0.259" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[   83.698517][ T1325] netlink: 316 bytes leftover after parsing attributes in process `syz.0.261'.
[   83.707980][ T1325] netlink: 316 bytes leftover after parsing attributes in process `syz.0.261'.
[   83.710263][  T358] usb 3-1: New USB device found, idVendor=0499, idProduct=7010, bcdDevice= 0.40
[   83.726971][  T358] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   83.735575][  T358] usb 3-1: Product: �〞ꛡ빣暼�绋��䭛憜곩䰛域㴸ᰡ뷻徱裈᪺ྈὊ䴾作��
[   83.746682][  T358] usb 3-1: Manufacturer: à°�
[   83.751369][  T358] usb 3-1: SerialNumber: �◇핇䶮䶄ㇰ೅奟㑣�깬�繡㼓풛�㧣魋䣑櫬�㖣뚘��㗯穡肑ᎂ뙥湅࡙⃮⺥邥⑚��媩⑿銦Ɉ筚㫔꼒㎨㩇錄⚚㶈깶귃⺧俄抾皒�薚�祵�ğ料禒Ꚍ╈턷�ᙓ틋튒碱ং頿�즚狔�ဲ౳耆㒭措⑌寘ᮽ뒆䱯�茆ꥧ䓛
[   84.022420][ T1300] UDC core: couldn't find an available UDC or it's busy: -16
[   84.037597][ T1300] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[   84.121689][  T358] snd-usb-audio: probe of 3-1:1.0 failed with error -2
[   84.131157][  T358] usb 3-1: USB disconnect, device number 10
[   84.154524][ T1337] loop5: detected capacity change from 0 to 40427
[   84.186865][ T1337] F2FS-fs (loop5): Fix alignment : done, start(4096) end(16896) block(12288)
[   84.206066][ T1337] F2FS-fs (loop5): invalid crc value
[   84.212414][ T1337] F2FS-fs (loop5): invalid crc value
[   84.217832][ T1337] F2FS-fs (loop5): Failed to get valid F2FS checkpoint
[   84.264292][ T1350] capability: warning: `syz.0.269' uses 32-bit capabilities (legacy support in use)
[   84.360403][ T1351] loop3: detected capacity change from 0 to 1024
[   84.411018][ T1351] EXT4-fs (loop3): Ignoring removed bh option
[   84.556046][ T1351] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodelalloc,dioread_lock,jqfmt=vfsv1,abort,debug_want_extra_isize=0x0000000000000008,lazytime,errors=remount-ro,stripe=0x0000000000000007,bh,auto_da_alloc,. Quota mode: none.
[   84.748251][ T1357] EXT4-fs (loop4): Ignoring removed nobh option
[   84.977762][ T1357] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,nobh,,errors=continue. Quota mode: writeback.
[   85.094438][ T1364] set_capacity_and_notify: 1 callbacks suppressed
[   85.094457][ T1364] loop2: detected capacity change from 0 to 512
[   85.291536][ T1364] EXT4-fs (loop2): Ignoring removed nobh option
[   85.342211][ T1364] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,nobh,,errors=continue. Quota mode: writeback.
[   85.510131][    C0] sched: RT throttling activated
[   86.489964][   T30] audit: type=1400 audit(86.474:443): avc:  denied  { setopt } for  pid=1378 comm="syz.0.277" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   86.675392][   T30] audit: type=1400 audit(86.664:444): avc:  denied  { bind } for  pid=1378 comm="syz.0.277" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   86.772780][ T1375] EXT4-fs error (device loop4): ext4_find_dest_de:2115: inode #2: block 3: comm syz.4.272: bad entry in directory: inode out of bounds - offset=92, inode=117440528, rec_len=16, size=2048 fake=0
[   87.006236][ T1397] EXT4-fs error (device loop2): ext4_find_dest_de:2115: inode #2: block 3: comm syz.2.273: bad entry in directory: inode out of bounds - offset=92, inode=117440528, rec_len=16, size=2048 fake=0
[   87.191138][ T1401] syz.4.279 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[   87.212835][ T1396] loop5: detected capacity change from 0 to 40427
[   87.225337][ T1396] F2FS-fs (loop5): Fix alignment : done, start(4096) end(16896) block(12288)
[   87.238688][ T1396] F2FS-fs (loop5): invalid crc value
[   87.240268][    T6] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[   87.251191][ T1396] F2FS-fs (loop5): invalid crc value
[   87.257206][ T1396] F2FS-fs (loop5): Failed to get valid F2FS checkpoint
[   87.424534][   T30] audit: type=1400 audit(87.414:445): avc:  denied  { create } for  pid=1415 comm="syz.0.285" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1
[   87.530308][  T358] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[   87.610196][  T481] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[   87.620288][    T6] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   87.630707][    T6] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   87.640488][    T6] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0
[   87.650467][    T6] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   87.770213][  T358] usb 3-1: Using ep0 maxpacket: 32
[   87.820332][    T6] usb 4-1: New USB device found, idVendor=2a39, idProduct=3fd4, bcdDevice= 0.40
[   87.829449][    T6] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   87.837595][    T6] usb 4-1: Product: syz
[   87.841794][    T6] usb 4-1: Manufacturer: syz
[   87.846413][    T6] usb 4-1: SerialNumber: syz
[   87.890339][  T358] usb 3-1: config 1 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   87.903836][  T358] usb 3-1: config 1 interface 0 has no altsetting 0
[   87.950523][  T358] usb 3-1: language id specifier not provided by device, defaulting to English
[   87.980257][  T481] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   88.022207][   T30] audit: type=1400 audit(88.014:446): avc:  denied  { write } for  pid=1423 comm="syz.4.287" name="ptp0" dev="devtmpfs" ino=260 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[   88.160357][  T481] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 1.00
[   88.169571][  T481] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   88.177653][  T481] usb 6-1: Product: syz
[   88.182036][  T481] usb 6-1: Manufacturer: syz
[   88.186813][  T481] usb 6-1: SerialNumber: syz
[   88.591739][  T481] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device
[   88.597769][  T358] usb 3-1: New USB device found, idVendor=1477, idProduct=1023, bcdDevice= 0.40
[   88.615438][  T358] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   88.624178][  T358] usb 3-1: Manufacturer: ॡ잨촤轱辱芛뗋嘊䑥蛞�詭淺ᮔ瀞啲㢅狕�磈ጡ퀜䓡씜��䑞䷾�龂�초삻跊妵耂�⩋ᶿ躮肒ᕣ둂⃀䒸킱ꯉ�렌
[   88.642585][  T358] usb 3-1: SerialNumber: syz
[   88.647548][ T1431] netlink: 28 bytes leftover after parsing attributes in process `syz.0.289'.
[   88.723757][ T1426] loop4: detected capacity change from 0 to 131072
[   88.752058][   T30] audit: type=1400 audit(88.744:447): avc:  denied  { read write } for  pid=1409 comm="syz.5.282" name="cdc-wdm0" dev="devtmpfs" ino=884 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1
[   88.775658][   T30] audit: type=1400 audit(88.744:448): avc:  denied  { open } for  pid=1409 comm="syz.5.282" path="/dev/cdc-wdm0" dev="devtmpfs" ino=884 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1
[   88.778783][ T1426] F2FS-fs (loop4): Test dummy encryption mode enabled
[   88.807058][ T1432] tipc: Failed to remove unknown binding: 66,0,0/0:3853377738/3853377739
[   88.816094][ T1426] F2FS-fs (loop4): invalid crc value
[   88.821908][ T1432] tipc: Failed to remove unknown binding: 66,0,0/0:3853377738/3853377739
[   88.831266][ T1432] FAULT_INJECTION: forcing a failure.
[   88.831266][ T1432] name failslab, interval 1, probability 0, space 0, times 0
[   88.834187][ T1426] F2FS-fs (loop4): Found nat_bits in checkpoint
[   88.844423][ T1432] CPU: 1 PID: 1432 Comm: syz.5.282 Not tainted syzkaller #0
[   88.858158][ T1432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   88.868504][ T1432] Call Trace:
[   88.871898][ T1432]  <TASK>
[   88.874866][ T1432]  __dump_stack+0x21/0x30
[   88.876201][ T1426] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[   88.879223][ T1432]  dump_stack_lvl+0x110/0x170
[   88.879249][ T1432]  ? show_regs_print_info+0x20/0x20
[   88.896681][ T1432]  dump_stack+0x15/0x20
[   88.900867][ T1432]  should_fail+0x3ab/0x500
[   88.905310][ T1432]  __should_failslab+0xa4/0xe0
[   88.910198][ T1432]  should_failslab+0x9/0x20
[   88.914739][ T1432]  slab_pre_alloc_hook+0x39/0xd0
[   88.915875][   T30] audit: type=1400 audit(88.904:449): avc:  denied  { create } for  pid=1425 comm="syz.4.288" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   88.919799][ T1432]  ? prepare_creds+0x2f/0x610
[   88.919826][ T1432]  kmem_cache_alloc+0x44/0x260
[   88.919850][ T1432]  prepare_creds+0x2f/0x610
[   88.954602][ T1432]  ? fpu_clone+0x26d/0x4e0
[   88.959368][ T1432]  copy_creds+0xe4/0x640
[   88.963661][ T1432]  copy_process+0x7d5/0x3280
[   88.968384][ T1432]  ? __kasan_check_write+0x14/0x20
[   88.972020][   T30] audit: type=1400 audit(88.934:450): avc:  denied  { read write open } for  pid=1425 comm="syz.4.288" path="/54/file1/file1" dev="loop4" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   88.973524][ T1432]  ? proc_fail_nth_write+0x180/0x200
[   88.973558][ T1432]  ? __pidfd_prepare+0x150/0x150
[   89.006533][ T1432]  kernel_clone+0x233/0x960
[   89.011186][ T1432]  ? create_io_thread+0x170/0x170
[   89.016257][ T1432]  ? __kasan_check_write+0x14/0x20
[   89.021410][ T1432]  ? mutex_unlock+0x8f/0x230
[   89.026039][ T1432]  __x64_sys_clone+0x198/0x210
[   89.030924][ T1432]  ? __kasan_check_write+0x14/0x20
[   89.036071][ T1432]  ? __ia32_sys_vfork+0x130/0x130
[   89.041133][ T1432]  ? __kasan_check_write+0x14/0x20
[   89.046366][ T1432]  ? switch_fpu_return+0x15d/0x2c0
[   89.051605][ T1432]  x64_sys_call+0x41f/0x9a0
[   89.056169][ T1432]  do_syscall_64+0x4c/0xa0
[   89.060625][ T1432]  ? clear_bhb_loop+0x50/0xa0
[   89.065651][ T1432]  ? clear_bhb_loop+0x50/0xa0
[   89.070565][ T1432]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   89.076493][ T1432] RIP: 0033:0x7f21f45f9159
[   89.081011][ T1432] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   89.101117][ T1432] RSP: 002b:00007f21f3030fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038
[   89.109821][ T1432] RAX: ffffffffffffffda RBX: 00007f21f4881090 RCX: 00007f21f45f9159
[   89.117917][ T1432] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000011
[   89.125915][ T1432] RBP: 00007f21f4690024 R08: 0000000000000000 R09: 0000000000000000
[   89.134160][ T1432] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[   89.142242][ T1432] R13: 00007f21f4881128 R14: 00007f21f4881090 R15: 00007ffe67c65c88
[   89.150318][ T1432]  </TASK>
[   89.310762][ T1442] loop4: detected capacity change from 0 to 512
[   89.335993][ T1442] EXT4-fs (loop4): Ignoring removed nobh option
[   89.352144][ T1442] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,nobh,,errors=continue. Quota mode: writeback.
[   89.642146][ T1451] EXT4-fs error (device loop4): ext4_find_dest_de:2115: inode #2: block 3: comm syz.4.290: bad entry in directory: inode out of bounds - offset=92, inode=117440528, rec_len=16, size=2048 fake=0
[   89.865300][   T30] audit: type=1400 audit(89.854:451): avc:  denied  { create } for  pid=1457 comm="syz.2.295" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1
[   89.906313][    T6] usb 4-1: USB disconnect, device number 11
[   89.947682][   T30] audit: type=1400 audit(89.894:452): avc:  denied  { setopt } for  pid=1457 comm="syz.2.295" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1
[   89.972766][   T30] audit: type=1400 audit(89.894:453): avc:  denied  { write } for  pid=1457 comm="syz.2.295" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1
[   90.020233][  T358] usbhid 3-1:1.0: can't add hid device: -71
[   90.023195][   T30] audit: type=1400 audit(90.014:454): avc:  denied  { write } for  pid=1465 comm="syz.3.298" name="buffer_size_kb" dev="tracefs" ino=12959 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1
[   90.026382][  T358] usbhid: probe of 3-1:1.0 failed with error -71
[   90.061682][  T358] usb 3-1: USB disconnect, device number 11
[   90.361341][  T293] usb 6-1: USB disconnect, device number 2
[   90.400932][ T1481] loop5: detected capacity change from 0 to 1024
[   90.410700][  T358] usb 3-1: new full-speed USB device number 12 using dummy_hcd
[   90.509843][ T1484] loop4: detected capacity change from 0 to 1024
[   90.572586][ T1484] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   90.602121][ T1484] EXT4-fs (loop4): mounted filesystem without journal. Opts: discard,journal_dev=0x0000000000000002,grpquota,nojournal_checksum,debug_want_extra_isize=0x0000000000000080,delalloc,nogrpid,noauto_da_alloc,dioread_nolock,,errors=continue. Quota mode: writeback.
[   90.714343][ T1223] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   90.722862][ T1493] netlink: 32 bytes leftover after parsing attributes in process `syz.4.304'.
[   90.742405][ T1493] netlink: 75 bytes leftover after parsing attributes in process `syz.4.304'.
[   90.754286][ T1493] loop4: detected capacity change from 0 to 256
[   90.772439][ T1493] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d)
[   90.781463][ T1498] loop5: detected capacity change from 0 to 512
[   90.880270][  T358] usb 3-1: unable to get BOS descriptor or descriptor too short
[   90.920484][  T358] usb 3-1: not running at top speed; connect to a high speed hub
[   90.932576][ T1503] loop4: detected capacity change from 0 to 40427
[   90.946788][ T1503] F2FS-fs (loop4): Fix alignment : done, start(4096) end(16896) block(12288)
[   90.964230][ T1503] F2FS-fs (loop4): invalid crc value
[   90.970020][ T1503] F2FS-fs (loop4): invalid crc value
[   90.975793][ T1503] F2FS-fs (loop4): Failed to get valid F2FS checkpoint
[   91.000264][  T358] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   91.020373][  T358] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[   91.029505][  T358] usb 3-1: config 1 has no interface number 1
[   91.036259][  T358] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[   91.049374][  T358] usb 3-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping
[   91.066733][  T358] usb 3-1: config 1 interface 2 has no altsetting 0
[   91.114099][ T1511] loop4: detected capacity change from 0 to 1024
[   91.125451][ T1511] EXT4-fs (loop4): Ignoring removed bh option
[   91.140498][ T1511] EXT4-fs (loop4): Ignoring removed bh option
[   91.295835][ T1511] EXT4-fs (loop4): mounted filesystem without journal. Opts: nodelalloc,dioread_lock,barrier=0x0000000000000004,nolazytime,bh,min_batch_time=0x0000000000000008,errors=remount-ro,stripe=0x0000000000000005,bh,init_itable,. Quota mode: none.
[   91.422789][  T358] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   91.432266][  T358] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   91.440765][  T358] usb 3-1: Product: syz
[   91.445021][  T358] usb 3-1: Manufacturer: syz
[   91.449607][  T358] usb 3-1: SerialNumber: syz
[   92.233896][ T1458] netlink: 277 bytes leftover after parsing attributes in process `syz.2.295'.
[   92.250899][ T1529] SELinux: security_context_str_to_sid(user_u) failed for (dev ?, type ?) errno=-22
[   92.261054][ T1530] netlink: 24 bytes leftover after parsing attributes in process `syz.0.316'.
[   92.276158][ T1530] netlink: 4 bytes leftover after parsing attributes in process `syz.0.316'.
[   92.304962][ T1529] cgroup: Unknown subsys name 'nofavordynmods'
[   92.310392][ T1519] loop3: detected capacity change from 0 to 8192
[   92.371462][ T1519] FAT-fs (loop3): Unrecognized mount option "0x00000000000000030000000000000000000000000000000000000000" or missing value
[   92.421972][ T1519] SELinux:  policydb magic number 0x74616676 does not match expected magic number 0xf97cff8c
[   92.434609][ T1548] loop4: detected capacity change from 0 to 512
[   92.436758][   T30] kauditd_printk_skb: 24 callbacks suppressed
[   92.436770][   T30] audit: type=1400 audit(92.424:479): avc:  denied  { remove_name } for  pid=1546 comm="rm" name="resolv.conf.ip6gretap0.link" dev="tmpfs" ino=3389 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   92.441301][  T358] usb 3-1: 2:1 : no UAC_FORMAT_TYPE desc
[   92.458382][   T30] audit: type=1400 audit(92.434:480): avc:  denied  { unlink } for  pid=1546 comm="rm" name="resolv.conf.ip6gretap0.link" dev="tmpfs" ino=3389 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   92.476627][ T1519] SELinux: failed to load policy
[   92.505752][  T358] usb 3-1: selecting invalid altsetting 0
[   92.514630][  T358] usb 3-1: USB disconnect, device number 12
[   92.719318][ T1564] loop3: detected capacity change from 0 to 512
[   92.747380][ T1564] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[   92.757172][  T532] udevd[532]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   92.814800][ T1564] EXT4-fs (loop3): orphan cleanup on readonly fs
[   92.824958][ T1564] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:3894: comm syz.3.321: Allocating blocks 41-42 which overlap fs metadata
[   92.839723][ T1564] EXT4-fs (loop3): Remounting filesystem read-only
[   92.846588][ T1564] Quota error (device loop3): write_blk: dquota write failed
[   92.854500][ T1564] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota
[   92.864849][ T1564] EXT4-fs error (device loop3): ext4_acquire_dquot:6227: comm syz.3.321: Failed to acquire dquot type 0
[   92.876427][ T1564] EXT4-fs (loop3): Remounting filesystem read-only
[   92.883357][ T1564] EXT4-fs error (device loop3): mb_free_blocks:1889: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt.
[   92.905308][ T1564] EXT4-fs (loop3): Remounting filesystem read-only
[   92.928257][ T1564] EXT4-fs (loop3): 1 truncate cleaned up
[   92.940751][ T1564] EXT4-fs (loop3): pa ffff888111d7fbd0: logic 1, phys. 41, len 23
[   92.949019][ T1564] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:4904: group 0, free 22, pa_free 23
[   92.955198][ T1567] loop4: detected capacity change from 0 to 40427
[   92.994544][ T1571] EXT4-fs (loop2): Ignoring removed nobh option
[   93.004838][ T1564] EXT4-fs (loop3): Remounting filesystem read-only
[   93.011963][ T1564] EXT4-fs (loop3): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000000005,noblock_validity,usrquota,grpjquota=,nogrpid,errors=remount-ro,grpjquota=,i_version,resuid=0x00000000000000002. Quota mode: writeback.
[   93.042721][ T1567] F2FS-fs (loop4): Fix alignment : done, start(4096) end(16896) block(12288)
[   93.056441][   T30] audit: type=1400 audit(93.044:481): avc:  denied  { ioctl } for  pid=1563 comm="syz.3.321" path="socket:[21093]" dev="sockfs" ino=21093 ioctlcmd=0x89f1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   93.062897][ T1567] F2FS-fs (loop4): invalid crc value
[   93.088414][ T1573] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   93.097930][ T1571] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,nobh,,errors=continue. Quota mode: writeback.
[   93.100479][ T1567] F2FS-fs (loop4): invalid crc value
[   93.120360][ T1567] F2FS-fs (loop4): Failed to get valid F2FS checkpoint
[   93.301581][ T1592] EXT4-fs error (device loop2): ext4_find_dest_de:2115: inode #2: block 3: comm syz.2.324: bad entry in directory: inode out of bounds - offset=92, inode=117440528, rec_len=16, size=2048 fake=0
[   93.698166][ T1598] xt_TPROXY: Can be used only with -p tcp or -p udp
[   93.751870][ T1598] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback.
[   94.026964][ T1612] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   94.070804][ T1624] xt_hashlimit: size too large, truncated to 1048576
[   94.078725][   T30] audit: type=1400 audit(94.064:482): avc:  denied  { append } for  pid=1611 comm="syz.2.333" path="/52/file1/cpuset.effective_cpus" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   94.122583][ T1608] netlink: 8 bytes leftover after parsing attributes in process `syz.5.332'.
[   94.152720][ T1608] ------------[ cut here ]------------
[   94.158234][ T1608] WARNING: CPU: 0 PID: 1608 at mm/page_alloc.c:5799 __alloc_pages+0x392/0x460
[   94.167377][   T30] audit: type=1400 audit(94.104:483): avc:  denied  { lock } for  pid=1611 comm="syz.2.333" path="/52/file1/cpuset.effective_cpus" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   94.191047][ T1608] Modules linked in:
[   94.195027][ T1608] CPU: 1 PID: 1608 Comm: syz.5.332 Not tainted syzkaller #0
[   94.202676][ T1608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   94.213172][ T1608] RIP: 0010:__alloc_pages+0x392/0x460
[   94.218783][ T1608] Code: ff e8 82 1b 0a 03 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c 6c fd ff ff 41 89 ff 4c 89 e7 e8 a6 cb 04 00 44 89 ff e9 59 fd ff ff <0f> 0b e9 16 ff ff ff 65 8b 05 a8 ae 5d 7e 89 44 24 08 c1 e8 06 48
[   94.241350][ T1608] RSP: 0018:ffffc90000e97720 EFLAGS: 00010246
[   94.248812][ T1608] RAX: ffffc90000e97780 RBX: 0000000000000015 RCX: 0000000000000000
[   94.257135][ T1608] RDX: 0000000000000018 RSI: 0000000000000000 RDI: ffffc90000e97798
[   94.265557][ T1608] RBP: ffffc90000e97808 R08: ffffc90000e97797 R09: ffffc90000e97780
[   94.273977][ T1608] R10: dffffc0000000000 R11: fffff520001d2ef3 R12: ffffc90000e97760
[   94.282430][ T1608] R13: dffffc0000000000 R14: 1ffff920001d2ee8 R15: 0000000000000000
[   94.354556][ T1608] FS:  00007f21f30526c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000
[   94.364573][ T1608] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   94.371674][ T1608] CR2: 0000000000000000 CR3: 000000011b31b000 CR4: 00000000003526a0
[   94.379964][ T1608] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[   94.404692][ T1608] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[   94.430302][ T1608] Call Trace:
[   94.433660][ T1608]  <TASK>
[   94.436616][ T1608]  ? prep_new_page+0x110/0x110
[   94.463322][ T1608]  kmalloc_order+0x4c/0x160
[   94.468119][ T1608]  ? slab_post_alloc_hook+0x6d/0x2b0
[   94.493665][ T1608]  kmalloc_order_trace+0x18/0xb0
[   94.499018][ T1608]  __kmalloc+0x199/0x2c0
[   94.525767][ T1608]  hashtab_init+0xca/0x160
[   94.543057][ T1608]  symtab_init+0x40/0x60
[   94.562018][   T30] audit: type=1400 audit(94.534:484): avc:  denied  { mounton } for  pid=1629 comm="syz.2.339" path="/syzcgroup/unified/syz2" dev="cgroup2" ino=24 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1
[   94.683739][ T1608]  policydb_read+0x9a6/0x2d10
[   94.824223][ T1608]  security_load_policy+0x158/0xf00
[   94.852951][   T30] audit: type=1400 audit(94.544:485): avc:  denied  { bind } for  pid=1629 comm="syz.2.339" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   94.889902][ T1636] fuse: Bad value for 'fd'
[   94.916886][ T1608]  ? irqentry_exit+0x37/0x40
[   94.973060][ T1608]  ? exc_page_fault+0x5e/0xb0
[   95.023413][ T1608]  ? asm_exc_page_fault+0x27/0x30
[   95.072751][ T1608]  ? selinux_policy_commit+0x560/0x560
[   95.489994][ T1608]  ? copy_user_enhanced_fast_string+0xe/0x40
[   95.500088][ T1608]  ? _copy_from_user+0x95/0xd0
[   95.504957][ T1608]  sel_write_load+0x386/0x600
[   95.509747][ T1608]  ? sel_make_dir+0x270/0x270
[   95.514598][ T1608]  ? security_file_permission+0x83/0xa0
[   95.530594][ T1608]  ? sel_make_dir+0x270/0x270
[   95.535333][ T1608]  vfs_write+0x404/0xfd0
[   95.539598][ T1608]  ? file_end_write+0x1b0/0x1b0
[   95.550347][ T1608]  ? __kasan_check_write+0x14/0x20
[   95.575921][ T1608]  ? mutex_lock+0x9b/0x1c0
[   95.586035][ T1608]  ? wait_for_completion_killable_timeout+0x10/0x10
[   95.612274][ T1639] set_capacity_and_notify: 5 callbacks suppressed
[   95.612287][ T1639] loop2: detected capacity change from 0 to 256
[   95.637165][ T1608]  ? __fget_files+0x2e1/0x340
[   95.641990][ T1608]  ? __fdget_pos+0x2d2/0x380
[   95.656763][ T1608]  ? ksys_write+0x70/0x260
[   95.662362][ T1608]  ksys_write+0x14a/0x260
[   95.666741][ T1608]  ? __ia32_sys_read+0x90/0x90
[   95.674912][ T1608]  ? __secure_computing+0xea/0x290
[   95.680082][ T1608]  __x64_sys_write+0x7b/0x90
[   95.684826][ T1608]  x64_sys_call+0x8ef/0x9a0
[   95.689435][ T1608]  do_syscall_64+0x4c/0xa0
[   95.694105][ T1608]  ? clear_bhb_loop+0x50/0xa0
[   95.698883][ T1608]  ? clear_bhb_loop+0x50/0xa0
[   95.703690][ T1608]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   95.709771][ T1608] RIP: 0033:0x7f21f45f9159
[   95.724710][ T1608] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   95.745311][ T1608] RSP: 002b:00007f21f3052028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[   95.753974][ T1608] RAX: ffffffffffffffda RBX: 00007f21f4880fa0 RCX: 00007f21f45f9159
[   95.762253][ T1608] RDX: 0000000000002000 RSI: 0000200000000000 RDI: 000000000000000b
[   95.771217][ T1608] RBP: 00007f21f4690024 R08: 0000000000000000 R09: 0000000000000000
[   95.779516][ T1608] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   95.800538][ T1608] R13: 00007f21f4881038 R14: 00007f21f4880fa0 R15: 00007ffe67c65c88
[   95.808968][ T1608]  </TASK>
[   95.813402][ T1608] ---[ end trace 8ad26fe106d4a4fe ]---
[   95.819329][ T1608] SELinux: failed to load policy
[   96.120913][ T1652] fuse: Bad value for 'group_id'
[   96.196116][ T1657] loop3: detected capacity change from 0 to 2048
[   96.349250][ T1657] EXT4-fs (loop3): mounted filesystem without journal. Opts: resgid=0x0000000000000000,block_validity,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none.
[   96.425066][   T30] audit: type=1400 audit(96.414:486): avc:  denied  { unmount } for  pid=1651 comm="syz.3.347" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[   96.812542][ T1682] loop4: detected capacity change from 0 to 256
[   97.110976][ T1684] cgroup2: Unknown parameter 'memory_hugetlb_accounting'
[   97.150370][ T1687] device batadv_slave_1 entered promiscuous mode
[   97.317079][ T1685] device batadv_slave_1 left promiscuous mode
[   97.349051][ T1694] netlink: 104 bytes leftover after parsing attributes in process `syz.0.361'.
[   97.380513][ T1699] overlayfs: workdir and upperdir must reside under the same mount
[   97.470894][ T1698] loop2: detected capacity change from 0 to 8192
[   97.577227][   T30] kauditd_printk_skb: 2 callbacks suppressed
[   97.577243][   T30] audit: type=1400 audit(97.564:489): avc:  denied  { unmount } for  pid=288 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1
[   97.710229][   T60] usb 6-1: new full-speed USB device number 3 using dummy_hcd
[   97.957574][ T1713] netlink: 8 bytes leftover after parsing attributes in process `syz.2.364'.
[   97.966620][ T1714] loop2: detected capacity change from 0 to 256
[   97.991867][ T1714] FAT-fs (loop2): Directory bread(block 64) failed
[   97.999004][ T1714] FAT-fs (loop2): Directory bread(block 65) failed
[   98.009804][ T1714] FAT-fs (loop2): Directory bread(block 66) failed
[   98.016642][ T1714] FAT-fs (loop2): Directory bread(block 67) failed
[   98.028200][ T1714] FAT-fs (loop2): Directory bread(block 68) failed
[   98.034957][ T1714] FAT-fs (loop2): Directory bread(block 69) failed
[   98.041824][ T1714] FAT-fs (loop2): Directory bread(block 70) failed
[   98.048546][ T1714] FAT-fs (loop2): Directory bread(block 71) failed
[   98.058062][ T1714] FAT-fs (loop2): Directory bread(block 72) failed
[   98.065595][ T1714] FAT-fs (loop2): Directory bread(block 73) failed
[   98.082335][ T1714] handle_bad_sector: 1516 callbacks suppressed
[   98.082356][ T1714] attempt to access beyond end of device
[   98.082356][ T1714] loop2: rw=2051, want=1768, limit=256
[   98.100777][   T60] usb 6-1: not running at top speed; connect to a high speed hub
[   98.172817][   T30] audit: type=1400 audit(98.164:490): avc:  denied  { listen } for  pid=1718 comm="syz.0.366" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1
[   98.200423][   T60] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   98.211762][   T60] usb 6-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 1.00
[   98.220892][   T60] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   98.274854][   T60] usb 6-1: Found UVC 1.00 device <unnamed> (0000:0000)
[   98.332127][   T30] audit: type=1326 audit(98.324:491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1725 comm="syz.4.368" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1038239159 code=0x7ffc0000
[   98.356515][   T30] audit: type=1326 audit(98.324:492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1725 comm="syz.4.368" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1038239159 code=0x7ffc0000
[   98.381303][   T30] audit: type=1326 audit(98.324:493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1725 comm="syz.4.368" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f1038239159 code=0x7ffc0000
[   98.405957][   T30] audit: type=1326 audit(98.324:494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1725 comm="syz.4.368" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1038239159 code=0x7ffc0000
[   98.430635][   T30] audit: type=1326 audit(98.324:495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1725 comm="syz.4.368" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f1038239159 code=0x7ffc0000
[   98.451786][ T1736] loop4: detected capacity change from 0 to 8192
[   98.455076][   T30] audit: type=1326 audit(98.324:496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1725 comm="syz.4.368" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f1038239159 code=0x7ffc0000
[   98.491161][  T358] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   98.509573][  T358] hid-generic 0000:0000:0000.0002: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[   98.534375][  T576] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[   98.551178][   T30] audit: type=1326 audit(98.324:497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1725 comm="syz.4.368" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f1038239159 code=0x7ffc0000
[   98.583646][   T30] audit: type=1326 audit(98.324:498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1725 comm="syz.4.368" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f1038239159 code=0x7ffc0000
[   98.870223][  T576] usb 3-1: device descriptor read/64, error -71
[   99.234191][ T1706] loop5: detected capacity change from 0 to 1024
[   99.280290][  T576] usb 3-1: device descriptor read/64, error -71
[   99.358795][ T1706] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   99.419189][ T1706] EXT4-fs (loop5): mounted filesystem without journal. Opts: user_xattr,init_itable=0x000000000000000e,dioread_nolock,acl,debug_want_extra_isize=0x0000000000000070,sb=0x0000000000000000,stripe=0x000000000000bb4b,data_err=abort,max_batch_time=0x00000000000003fe,user_xattr,noinit_itable,errors=continue. Quota mode: none.
[   99.494858][ T1706] UDC core: couldn't find an available UDC or it's busy: -16
[   99.506788][ T1706] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[   99.550215][  T576] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[   99.840200][  T576] usb 3-1: device descriptor read/64, error -71
[   99.930246][   T60] usb 6-1: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround.
[   99.960259][   T60] uvcvideo 6-1:1.1: Failed to query (129) UVC probe control : -71 (exp. 26).
[   99.969095][   T60] uvcvideo 6-1:1.1: Failed to initialize the device (-5).
[   99.990821][   T60] usb 6-1: USB disconnect, device number 3
[  100.026655][ T1758] netlink: 4 bytes leftover after parsing attributes in process `syz.3.378'.
[  100.117576][ T1752] loop4: detected capacity change from 0 to 131072
[  100.138543][ T1752] F2FS-fs (loop4): Test dummy encryption mode enabled
[  100.156382][ T1752] F2FS-fs (loop4): invalid crc value
[  100.166748][ T1752] F2FS-fs (loop4): Found nat_bits in checkpoint
[  100.194574][ T1752] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  100.203937][ T1766] netlink: 12 bytes leftover after parsing attributes in process `syz.4.375'.
[  100.250427][  T576] usb 3-1: device descriptor read/64, error -71
[  100.370438][  T576] usb usb3-port1: attempt power cycle
[  100.665112][ T1778] loop4: detected capacity change from 0 to 2048
[  100.741671][ T1778] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  100.780234][  T576] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  100.977456][  T576] usb 3-1: device descriptor read/8, error -71
[  101.060195][  T358] usb 6-1: new low-speed USB device number 4 using dummy_hcd
[  101.210213][  T576] usb 3-1: device descriptor read/8, error -71
[  101.220307][    T6] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  101.420229][  T358] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  101.480250][    T6] usb 5-1: Using ep0 maxpacket: 8
[  101.600261][    T6] usb 5-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config
[  101.610584][    T6] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  101.670255][  T358] usb 6-1: string descriptor 0 read error: -22
[  101.676493][  T358] usb 6-1: New USB device found, idVendor=04b4, idProduct=6831, bcdDevice=2c.ab
[  101.686494][  T358] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  101.730804][  T358] ums-cypress 6-1:1.0: USB Mass Storage device detected
[  101.780271][    T6] usb 5-1: New USB device found, idVendor=0763, idProduct=1031, bcdDevice= 0.40
[  101.789448][    T6] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  101.797485][    T6] usb 5-1: Product: syz
[  101.801747][    T6] usb 5-1: Manufacturer: syz
[  101.806428][    T6] usb 5-1: SerialNumber: syz
[  101.931588][ T1784] UDC core: couldn't find an available UDC or it's busy: -16
[  101.939108][ T1784] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  101.949014][  T293] usb 6-1: USB disconnect, device number 4
[  102.170318][    T6] usb 5-1: unit 6 not found!
[  102.175663][    T6] usb 5-1: unit 0 not found!
[  102.181836][    T6] usb 5-1: USB disconnect, device number 8
[  102.390594][  T532] udevd[532]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  133.647371][   T30] kauditd_printk_skb: 32 callbacks suppressed
[  133.647389][   T30] audit: type=1400 audit(133.634:531): avc:  denied  { bind } for  pid=1820 comm="syz.0.389" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  133.741035][   T30] audit: type=1400 audit(133.714:532): avc:  denied  { ioctl } for  pid=1834 comm="syz.3.395" path="socket:[22028]" dev="sockfs" ino=22028 ioctlcmd=0x745a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  133.774185][   T30] audit: type=1400 audit(133.734:533): avc:  denied  { connect } for  pid=1832 comm="syz.2.394" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  133.822977][ T1841] loop4: detected capacity change from 0 to 256
[  133.921358][ T1228] ==================================================================
[  133.929477][ T1228] BUG: KASAN: use-after-free in l2tp_tunnel_del_work+0xcd/0x3d0
[  133.937149][ T1228] Read of size 8 at addr ffff88812972f480 by task kworker/u4:28/1228
[  133.940178][ T1841] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0xa9436649, utbl_chksum : 0xe619d30d)
[  133.945237][ T1228] 
[  133.945247][ T1228] CPU: 1 PID: 1228 Comm: kworker/u4:28 Tainted: G        W         syzkaller #0
[  133.968746][ T1228] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  133.971329][ T1836] ------------[ cut here ]------------
[  133.978814][ T1228] Workqueue: l2tp l2tp_tunnel_del_work
[  133.978844][ T1228] Call Trace:
[  133.978849][ T1228]  <TASK>
[  133.978855][ T1228]  __dump_stack+0x21/0x30
[  133.978876][ T1228]  dump_stack_lvl+0x110/0x170
[  133.978891][ T1228]  ? show_regs_print_info+0x20/0x20
[  133.978906][ T1228]  ? load_image+0x3f0/0x3f0
[  133.978926][ T1228]  print_address_description+0x7f/0x2c0
[  134.016025][ T1836] WARNING: CPU: 0 PID: 1836 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0
[  134.020448][ T1228]  ? l2tp_tunnel_del_work+0xcd/0x3d0
[  134.020472][ T1228]  kasan_report+0x10f/0x150
[  134.020489][ T1228]  ? l2tp_tunnel_del_work+0xcd/0x3d0
[  134.020507][ T1228]  __asan_report_load8_noabort+0x14/0x20
[  134.020526][ T1228]  l2tp_tunnel_del_work+0xcd/0x3d0
[  134.020545][ T1228]  process_one_work+0x6c8/0xbb0
[  134.020568][ T1228]  worker_thread+0xaa0/0x1250
[  134.020590][ T1228]  kthread+0x3f5/0x4f0
[  134.020605][ T1228]  ? worker_clr_flags+0x190/0x190
[  134.020622][ T1228]  ? kthread_blkcg+0xd0/0xd0
[  134.020639][ T1228]  ret_from_fork+0x1f/0x30
[  134.055157][ T1836] Modules linked in:
[  134.056755][ T1228]  </TASK>
[  134.056764][ T1228] 
[  134.056769][ T1228] Allocated by task 1835:
[  134.070605][ T1836] 
[  134.075410][ T1228]  __kasan_kmalloc+0xd4/0x100
[  134.075436][ T1228]  __kmalloc+0x13d/0x2c0
[  134.095732][ T1851] incfs: Options parsing error. -22
[  134.098281][ T1228]  l2tp_session_create+0x39/0xb60
[  134.100676][ T1851] incfs: mount failed -22
[  134.105286][ T1228]  pppol2tp_connect+0xbf5/0x1640
[  134.129272][ T1228]  __sys_connect+0x3cb/0x450
[  134.133884][ T1228]  __x64_sys_connect+0x7a/0x90
[  134.138669][ T1228]  x64_sys_call+0x7c/0x9a0
[  134.140226][ T1836] CPU: 0 PID: 1836 Comm: syz.3.395 Tainted: G        W         syzkaller #0
[  134.143102][ T1228]  do_syscall_64+0x4c/0xa0
[  134.143123][ T1228]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  134.162302][ T1228] 
[  134.164648][ T1228] Freed by task 1835:
[  134.168739][ T1228]  kasan_set_track+0x4a/0x70
[  134.169332][ T1836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  134.173521][ T1228]  kasan_set_free_info+0x23/0x40
[  134.173542][ T1228]  ____kasan_slab_free+0x125/0x160
[  134.173557][ T1228]  __kasan_slab_free+0x11/0x20
[  134.173573][ T1228]  slab_free_freelist_hook+0xc2/0x190
[  134.173593][ T1228]  kfree+0xc4/0x270
[  134.199201][ T1836] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0
[  134.204008][ T1228]  l2tp_session_put+0xaf/0x1a0
[  134.204028][ T1228]  pppol2tp_ioctl+0x748/0x960
[  134.204045][ T1228]  pppox_ioctl+0x1e4/0x320
[  134.216686][ T1836] Code: 5d c3 e8 1c 5f 0b fd be 02 00 00 00 eb 0a e8 10 5f 0b fd be 01 00 00 00 4c 89 f7 e8 33 c7 f1 fd e9 0f ff ff ff e8 f9 5e 0b fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 e8 5e 0b fd 4c 89 f7 be 03
[  134.218940][ T1228]  sock_do_ioctl+0x103/0x310
[  134.218963][ T1228]  sock_ioctl+0x459/0x6d0
[  134.242155][ T1836] RSP: 0018:ffffc90000ae7bf0 EFLAGS: 00010293
[  134.247645][ T1228]  __se_sys_ioctl+0x121/0x1a0
[  134.247673][ T1228]  __x64_sys_ioctl+0x7b/0x90
[  134.261016][ T1836] 
[  134.263277][ T1228]  x64_sys_call+0x2f/0x9a0
[  134.263305][ T1228]  do_syscall_64+0x4c/0xa0
[  134.268074][ T1836] RAX: ffffffff845e5c87 RBX: ffff888110788000 RCX: ffff888110402780
[  134.272599][ T1228]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  134.272620][ T1228] 
[  134.272625][ T1228] Last potentially related work creation:
[  134.272630][ T1228]  kasan_save_stack+0x3a/0x60
[  134.272646][ T1228]  __kasan_record_aux_stack+0xd2/0x100
[  134.272664][ T1228]  kasan_record_aux_stack_noalloc+0xb/0x10
[  134.272679][ T1228]  call_rcu+0x10b/0xf60
[  134.325831][ T1228]  addrconf_permanent_addr+0x302/0x940
[  134.331321][ T1228]  addrconf_notify+0x752/0xe00
[  134.336092][ T1228]  raw_notifier_call_chain+0x90/0x100
[  134.341643][ T1228]  __dev_notify_flags+0x2f4/0x5b0
[  134.346785][ T1228]  dev_change_flags+0xe3/0x1a0
[  134.351635][ T1228]  do_setlink+0xc95/0x2970
[  134.356229][ T1228]  rtnl_newlink+0x1598/0x1900
[  134.360900][ T1228]  rtnetlink_rcv_msg+0x9fd/0xcb0
[  134.365845][ T1228]  netlink_rcv_skb+0x1e9/0x430
[  134.370605][ T1228]  rtnetlink_rcv+0x1c/0x20
[  134.375018][ T1228]  netlink_unicast+0x86c/0xa30
[  134.379773][ T1228]  netlink_sendmsg+0x879/0xb80
[  134.384533][ T1228]  __sys_sendto+0x46d/0x620
[  134.389034][ T1228]  __x64_sys_sendto+0xe5/0x100
[  134.393798][ T1228]  x64_sys_call+0x178/0x9a0
[  134.398298][ T1228]  do_syscall_64+0x4c/0xa0
[  134.402835][ T1228]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  134.408728][ T1228] 
[  134.411052][ T1228] The buggy address belongs to the object at ffff88812972f400
[  134.411052][ T1228]  which belongs to the cache kmalloc-512 of size 512
[  134.425188][ T1228] The buggy address is located 128 bytes inside of
[  134.425188][ T1228]  512-byte region [ffff88812972f400, ffff88812972f600)
[  134.438520][ T1228] The buggy address belongs to the page:
[  134.444313][ T1228] page:ffffea0004a5cb00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x12972c
[  134.454635][ T1228] head:ffffea0004a5cb00 order:2 compound_mapcount:0 compound_pincount:0
[  134.462954][ T1228] flags: 0x4000000000010200(slab|head|zone=1)
[  134.469034][ T1228] raw: 4000000000010200 dead000000000100 dead000000000122 ffff888100042f00
[  134.477625][ T1228] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000
[  134.486286][ T1228] page dumped because: kasan: bad access detected
[  134.492791][ T1228] page_owner tracks the page as allocated
[  134.498497][ T1228] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 285, ts 46968526978, free_ts 0
[  134.516633][ T1228]  post_alloc_hook+0x192/0x1b0
[  134.521395][ T1228]  prep_new_page+0x1c/0x110
[  134.525984][ T1228]  get_page_from_freelist+0x2c3a/0x2cd0
[  134.531528][ T1228]  __alloc_pages+0x1a2/0x460
[  134.536121][ T1228]  new_slab+0xa0/0x4d0
[  134.540205][ T1228]  ___slab_alloc+0x3ac/0x840
[  134.544809][ T1228]  __slab_alloc+0x49/0x90
[  134.549312][ T1228]  __kmalloc+0x16a/0x2c0
[  134.553662][ T1228]  fib6_info_alloc+0x34/0xe0
[  134.558335][ T1228]  ip6_route_info_create+0x51b/0x14d0
[  134.563708][ T1228]  ip6_route_add+0x27/0x130
[  134.568216][ T1228]  addrconf_add_dev+0x385/0x4c0
[  134.573065][ T1228]  inet6_addr_add+0x1a6/0x9d0
[  134.577738][ T1228]  inet6_rtm_newaddr+0x6e7/0x9c0
[  134.582763][ T1228]  rtnetlink_rcv_msg+0x9fd/0xcb0
[  134.587695][ T1228]  netlink_rcv_skb+0x1e9/0x430
[  134.592548][ T1228] page_owner free stack trace missing
[  134.597910][ T1228] 
[  134.600236][ T1228] Memory state around the buggy address:
[  134.605860][ T1228]  ffff88812972f380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  134.613925][ T1228]  ffff88812972f400: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  134.621982][ T1228] >ffff88812972f480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  134.630052][ T1228]                    ^
[  134.634211][ T1228]  ffff88812972f500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  134.642290][ T1228]  ffff88812972f580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  134.650513][ T1228] ==================================================================
[  134.658917][ T1228] Disabling lock debugging due to kernel taint
[  134.760236][   T30] audit: type=1400 audit(134.744:534): avc:  denied  { read } for  pid=83 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1
[  134.830345][ T1836] RDX: 0000000000000000 RSI: 000000001b31f280 RDI: 000000000c04eb7d
[  134.859803][ T1836] RBP: ffffc90000ae7c10 R08: ffff888110788083 R09: 1ffff110220f1010
[  134.878176][   T30] audit: type=1400 audit(134.744:535): avc:  denied  { search } for  pid=83 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  134.902736][ T1836] R10: dffffc0000000000 R11: ffffed10220f1011 R12: dffffc0000000000
[  134.923280][ T1836] R13: dffffc0000000000 R14: 000000001b31f280 R15: ffff88812972f400
[  134.942692][ T1836] FS:  0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000
[  134.955058][   T30] audit: type=1400 audit(134.744:536): avc:  denied  { write } for  pid=83 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  134.976656][ T1836] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  134.983537][ T1836] CR2: 00007f92fe5782f8 CR3: 000000011e810000 CR4: 00000000003506b0
[  134.991955][   T30] audit: type=1400 audit(134.744:537): avc:  denied  { add_name } for  pid=83 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  135.013576][ T1836] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  135.022218][ T1836] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  135.027229][   T30] audit: type=1400 audit(134.744:538): avc:  denied  { create } for  pid=83 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  135.030840][ T1836] Call Trace:
[  135.050221][   T30] audit: type=1400 audit(134.744:539): avc:  denied  { append open } for  pid=83 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  135.060841][ T1836]  <TASK>
[  135.075946][   T30] audit: type=1400 audit(134.744:540): avc:  denied  { getattr } for  pid=83 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  135.079111][ T1836]  pppol2tp_release+0x150/0x2b0
[  135.105832][ T1836]  sock_close+0xb8/0x200
[  135.110345][ T1836]  ? sock_mmap+0xa0/0xa0
[  135.114618][ T1836]  __fput+0x22b/0x900
[  135.118702][ T1836]  ____fput+0x15/0x20
[  135.123396][ T1836]  task_work_run+0x127/0x190
[  135.128099][ T1836]  do_exit+0xb70/0x29a0
[  135.133021][ T1836]  ? __se_sys_clock_nanosleep+0x30b/0x3a0
[  135.138856][ T1836]  ? put_task_struct+0x90/0x90
[  135.143721][ T1836]  ? __kasan_check_write+0x14/0x20
[  135.148898][ T1836]  __x64_sys_exit+0x40/0x40
[  135.153483][ T1836]  x64_sys_call+0x44/0x9a0
[  135.157963][ T1836]  do_syscall_64+0x4c/0xa0
[  135.162482][ T1836]  ? clear_bhb_loop+0x50/0xa0
[  135.167223][ T1836]  ? clear_bhb_loop+0x50/0xa0
[  135.172033][ T1836]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  135.177946][ T1836] RIP: 0033:0x7f92fe327159
[  135.182380][ T1836] Code: Unable to access opcode bytes at RIP 0x7f92fe32712f.
[  135.189759][ T1836] RSP: 002b:00007f92fcd7fef8 EFLAGS: 00000246 ORIG_RAX: 000000000000003c
[  135.198205][ T1836] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f92fe327159
[  135.206220][ T1836] RDX: 00007f92fcd809c8 RSI: 0000000000000000 RDI: 0000000000000000
[  135.214226][ T1836] RBP: 00007f92fe3be024 R08: 0000000000000000 R09: 0000000000000058
[  135.222231][ T1836] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  135.230240][ T1836] R13: 00007f92fe5af038 R14: 00007f92fe5aefa0 R15: 00007fff6b263ce8
[  135.238323][ T1836]  </TASK>
[  135.241364][ T1836] ---[ end trace 8ad26fe106d4a4ff ]---