last executing test programs:

8.343175246s ago: executing program 1 (id=330):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f0000000200), 0x3, 0x45a, &(0x7f0000000a80)="$eJzs201sFFUcAPD/TLtFBGxF/OBDraKx8aOlgEiiBzWamIiJiR702LSFIAs1tCZCiIIxeDLGxLvx6NGrJ70Y48nEq94NCTFcAE9rZncGdpfdhS673cr+fsnAezNv9r1/Z97ue/N2Axhak9k/ScTmiPgzIsZr2cYCk7X/rlw6M3/10pn5JCqVd/5JquUuXzozXxQtztuUZ6bSiPTzJHa2qHf51Oljc+Xy4sk8P7Ny/MOZ5VOnnzt6fO7I4pHFE3sPHty/b/aFA3uf70mcWZsu7/hkadf2N97/+q1DXzbE3xRHj1Rf+sU3Wx98slLpcXWDtaUunYwOsCGsykhEZJerVO3/4zES1y/eeLz+2UAbB/RVpVKpbGp/+GwFuIMl0Zhv6PI/HFjj1gBrp/igz+a/xdY8CHi5f8OPgbv4Sm0ClMV9Jd9qR0YjzcuUmua3vTQZEe+d/ffbbIv+PIcAAGjwUzb+ebbV+C+NB+rK3ZOvDU1ExL0RsTUi7ouIbRFxf0S17IMR8dAq659syt84/kkvdBXYLcrGfy/la1uN479i9BcTI3luSzX+UnL4aHlxT/43mYrShiw/26GOn1/746t2x+rHf9mW1V+MBfN2XBjd0HjOwtzK3O3EXO/iuYgdo63iT66tBCQRsT0idnRZx9Gnv9/V7tjN4++gB+tMle8inqpd/7PRFH8h6bw+OXNXlBf3zBR3xY1++/382+3qv634eyC7/ne3vP+vxT+R1K/XLq++jvN/fdF2TtPt/T+WvFtNj+X7Pp5bWTk5GzGWHKo1un7/3uvnFvmifBb/1O7W/X9r3u+z+HdGRHYTPxwRj0TEo3nbH4uIxyNid4f4f331iQ+6j7+/svgXVnX9ryfGonlP68TIsV9+bKh04ob4r3a+/vurqal8z628/91Ku7q7mwEAAOD/J42IzZGk09fSaTo9Xfu+/LaItLy0vPLM4aWPTizUfiMwEZEWT7rG656HzubT+lr+XETUvlpQHN+XPzf+ZmRjNT89v1ReGHTwMOQ2ten/mb9HBt06oO/8XguGl/4Pw0v/h+Gl/8PwatH/Nw6iHcDaa/X5/+kA2gGsvab+b9kPhoj5Pwwv/R+Gl/4PQ2l5Y9z8R/IdE8UrdXn6HZuI0rpoRt8Ska6LZqzbRGm994tiia9NmcG8HwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPTafwEAAP//LnvZfQ==")
mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1)
symlink(&(0x7f0000000440)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000980)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
creat(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x14c)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2f00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000006000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x10)
exit(0x0)
rename(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')

7.270344632s ago: executing program 1 (id=338):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x1, 0x8, 0x8}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x200000000000001a, &(0x7f0000000180)=ANY=[@ANYRES16=r0], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000380)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000001c0)='rss_stat\x00', r4}, 0x10)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mremap(&(0x7f00007fd000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000ffe000/0x2000)=nil)
madvise(&(0x7f00003c1000/0x1000)=nil, 0xdfc3efff, 0x15)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="48000000100005042abd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b00010065727370616e0000180002800800140000000000050016000100000004001200"], 0x48}}, 0x0)
recvmmsg(r5, &(0x7f0000002580)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/116, 0x74}, 0x4}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=""/161, 0xa1}, 0x80000000}, {{0x0, 0x0, &(0x7f0000000680)}, 0x292}, {{0x0, 0x0, &(0x7f0000002440)=[{0x0}, {&(0x7f0000002280)=""/112, 0x70}, {&(0x7f0000002300)=""/92, 0x5c}, {0x0}], 0x4}, 0xffffffff}], 0x4, 0xe0, &(0x7f0000000340)={0x77359400})
syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000080)='./file0\x00', 0x400, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x1, 0x5514, &(0x7f0000005d80)="$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")
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, 0x0)
socket$xdp(0x2c, 0x3, 0x0)

5.919794291s ago: executing program 1 (id=343):
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x2, 0x96, 0xd1, 0xca, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0xd, 0x0, 0x6}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0)
r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000300000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80)
close(r1)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x6, 0x13, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020200828500000073000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0x3, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, &(0x7f00000003c0)={0x0, 0x17, 0x4, "abe763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, &(0x7f00000004c0)={0x2c, &(0x7f0000000580)={0x20, 0x30, 0x4, "c53fe07a"}, 0x0, 0x0, 0x0, 0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x10}, 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c00000010004b0400f4ed00000000007a000900", @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800b00010062726964676500001c00028008000400000000000600060000000000060009"], 0x4c}}, 0x0)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SCAN(r2, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000380)={0x1c, r6, 0xf21, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000015}, 0x4000)

3.849467893s ago: executing program 2 (id=350):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0})
r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00')
read$FUSE(r0, &(0x7f0000003480)={0x2020}, 0x2020)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b000085"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94)
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x280008a, &(0x7f00000007c0)=ANY=[@ANYBLOB="6e6f6e756d7461696c3d302c73686f72746e616d653d77696e39352c73686f72746e616d653d6c6f7765722c696f636861727365743d64656661756c742c756e695f786c6174653d302c6e6f6e756d7461696c3d302c757466383d302c616c6c6f775f7574696d653d30303030303030303030303030303030303030303030322c726f6469722c73686f72866e616d653d6d697865642c73686f72746e616d653d6d697865642c73686f72746e616d653d77696e39352c7569643d", @ANYRESHEX=0x0, @ANYBLOB=',uni_xlate=0,utf8=0,shortname=mixed,uni_xlate=0,shortname=winnt,\x00'], 0x96, 0x2a9, &(0x7f0000000500)="$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")
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket(0x10, 0x3, 0x4)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000020601020000000000000000000000000900020073797a31000000000500010007000000050005000a00f2ff0b00078008001240fffffffb"], 0x3c}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[], 0xb8}}, 0x0)
sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="5000000014"], 0x188}}, 0x40810)
waitid(0x0, r1, &(0x7f0000000340), 0x1000000, &(0x7f00000003c0))
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x94)
syz_open_dev$vcsa(&(0x7f0000000300), 0x1, 0x102)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18)
r5 = dup(0xffffffffffffffff)
connect$bt_rfcomm(r5, &(0x7f0000000040)={0x1f, @any, 0x6}, 0xa)
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6)

2.842721267s ago: executing program 2 (id=355):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="09000000070000000080000001"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0, <r1=>0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = syz_open_procfs(0x0, 0x0)
syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
write$binfmt_script(r6, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r6, 0x0)
read(0xffffffffffffffff, 0x0, 0x0)
r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b707000008000000850000006900000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x18)
prctl$PR_SET_NAME(0xf, 0x0)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c00", @ANYRES16=r4, @ANYBLOB="796100000000fcffffff7e00"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x494)
r9 = socket$netlink(0x10, 0x3, 0x0)
r10 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_ADD_MFC(r10, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x809}, {0xa, 0x8, 0xfffffffe, @empty}, 0x2, {[0x0, 0x1, 0xfffffffe, 0xfff, 0x2, 0x4]}}, 0x5c)
setsockopt$MRT6_ADD_MFC(r10, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x0, {[0x1, 0x0, 0x0, 0x0, 0x9]}}, 0x5c)
setsockopt$MRT6_ADD_MFC(r10, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x0, 0x0, @remote, 0x6}, {0xa, 0x4e22, 0x0, @mcast1}, 0x0, {[0x4, 0x7fff, 0x0, 0x0, 0x3fd, 0x0, 0x58, 0x200]}}, 0x5c)
setsockopt$MRT6_ADD_MFC(r10, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private2}, {0xa, 0x0, 0x0, @empty}}, 0x5c)
setsockopt$MRT6_FLUSH(r10, 0x29, 0xd4, &(0x7f00000000c0)=0x7, 0x4)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sched_kthread_stop\x00', r2}, 0x10)
sendmsg$nl_route(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000010001fff000000000000000000060000", @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800e0001007769726567756172640000000400028008000a00b8"], 0x40}}, 0x0)

2.520804262s ago: executing program 2 (id=356):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000080000085000000d0000000a50000009700000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r2 = dup2(r1, r1)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r2}, 0x10)
faccessat2(0xffffffffffffffff, 0x0, 0x1a6, 0x200)
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r3}, 0x10)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) (async)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) (async)
ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60)
ioctl$KVM_CREATE_PIT2(r5, 0x4040ae77, &(0x7f0000000040))
ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) (async)
ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x2})
r7 = socket(0x1e, 0x800, 0x10000)
ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000200)={'veth0_to_batadv\x00', &(0x7f0000000180)=@ethtool_sfeatures})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000740)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
ioctl$TUNSETSNDBUF(r6, 0x400454d4, &(0x7f0000000380)=0x2)
ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000100)={'macsec0\x00', @broadcast}) (async)
ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000100)={'macsec0\x00', @broadcast})
socket$inet6(0xa, 0x1, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) (async)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000680)=ANY=[@ANYBLOB="18400000000000000000000000000000181121b1", @ANYRESOCT=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000185000000b700000000000000950b9be2ae43f09d024e75e6be1fc29892f45c9432ee1e1fa48d6ad1"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000680)=ANY=[@ANYBLOB="18400000000000000000000000000000181121b1", @ANYRESOCT=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000185000000b700000000000000950b9be2ae43f09d024e75e6be1fc29892f45c9432ee1e1fa48d6ad1"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
io_setup(0x8, &(0x7f0000004200)) (async)
io_setup(0x8, &(0x7f0000004200)=<r11=>0x0)
r12 = socket$tipc(0x1e, 0x5, 0x0)
io_submit(r11, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r12, 0x0, 0x0, 0x4}])
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r10}, 0x10) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r10}, 0x10)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x4000000000, 0x7, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x1, 0x0, 0x9, 0x0, 0xfffffffffffffffd, 0x7fffffff}, 0x0, 0x0)
getsockopt$SO_TIMESTAMP(r8, 0x1, 0x1d, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async)
getsockopt$SO_TIMESTAMP(r8, 0x1, 0x1d, &(0x7f0000000000), &(0x7f0000000040)=0x4)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xe, 0x7fff0000}]})

2.323047295s ago: executing program 0 (id=359):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001a001b00000000010000000081000000000000000000000014000200c8904e26da282b7f9e0000cb12fe880000000000000000000000000001"], 0x30}}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x1, 0x17d, &(0x7f00000004c0)="$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")
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x80000, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10012, r2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x181)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009c0000000b"], 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000500000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000380)='sys_enter\x00', r4}, 0x18)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
r5 = socket(0x10, 0x3, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket(0x10, 0x803, 0x0)
r8 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r7)
r9 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000001c0)={'bridge0\x00', <r10=>0x0})
setsockopt$packet_int(r9, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4)
sendto$packet(r9, &(0x7f0000000100)="3f031c000302140006001e00890000004a1b7880610cc945000088a800dd8600000081000000", 0x26, 0x1, &(0x7f0000000540)={0xc9, 0x8100, r10, 0x1, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}, 0x14)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00be3a44312b830000ffffffffffffff000000", @ANYRES32=r11, @ANYRESOCT=r5, @ANYRESDEC=r6, @ANYRESDEC=r8], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x4}}}}]}, 0x78}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newtfilter={0x60, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x30, 0x2, [@TCA_BASIC_EMATCHES={0x2c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x20, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1}, @TCF_EM_META={0xc, 0x2, 0x0, 0x0, {{0x0, 0x4, 0xffff}}}]}]}]}}]}, 0x60}}, 0x0)

2.259177876s ago: executing program 0 (id=360):
socket$inet6_tcp(0xa, 0x1, 0x0) (async, rerun: 32)
io_setup(0xb2, &(0x7f0000000200)) (rerun: 32)
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000014f96055b5d12f371545fffe800b7d0b090000000000000000000000000000000000000000000010"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000000)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) (async)
r2 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYRESHEX=r2, @ANYRESOCT=r2, @ANYRES32=r2], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYRES64=r3, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) (async)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
sendmsg$inet(r5, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000013c0)="d080", 0xfdef}], 0x1, 0x0, 0x0, 0x800300}, 0x20000801) (async)
recvmsg(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x40002002) (async)
recvmsg(r6, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0xa3) (async)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, 0x0) (async)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6)
r7 = gettid()
tkill(r7, 0x7) (async, rerun: 32)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) (rerun: 32)
r8 = getpid()
sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff})
connect$unix(r10, &(0x7f0000000380)=@abs, 0x6e) (async)
sendmmsg$unix(r10, &(0x7f0000000000), 0x651, 0x0) (async)
recvmmsg(r9, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async)
r11 = io_uring_setup(0x669, &(0x7f00000002c0))
ioctl$sock_SIOCETHTOOL(r9, 0x8946, 0x0) (async)
io_uring_register$IORING_REGISTER_PERSONALITY(r11, 0x9, 0x0, 0x0)
close_range(r11, 0xffffffffffffffff, 0x0)

2.109596519s ago: executing program 2 (id=361):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
open_tree(0xffffffffffffffff, 0x0, 0x0)
getdents64(0xffffffffffffffff, &(0x7f0000001280)=""/4089, 0xff9)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r6 = syz_open_procfs(0x0, &(0x7f0000000440)='net/route\x00')
preadv(r6, &(0x7f00000001c0)=[{&(0x7f0000002380)=""/169, 0xa9}], 0x1, 0x80, 0x1)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)={0x2c, r1, 0x205, 0x800000, 0x25dfdbfd, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008040}, 0x48810)
syz_emit_ethernet(0x66, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa7e415aedf6b3810038000800450000540000000000019078ac1e0001ac1414aa03009078030000004e0c00010000000000290000000000000020000089030886210000000200120001632a3a835e9504005d8b0000000000094ef661e96b4014"], 0x0)

2.105426359s ago: executing program 1 (id=362):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000500)='hrtimer_start\x00', r0}, 0x18)
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f00000001c0), 0x4000, &(0x7f0000000740)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYRESDEC=r1, @ANYBLOB=',group_id=', @ANYRESOCT]) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e) (async)
r4 = syz_open_dev$rtc(&(0x7f0000000280), 0xa, 0x0)
ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) (async)
ioctl$RTC_ALM_READ(r4, 0x80247008, &(0x7f0000000440)) (async)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={<r5=>0xffffffffffffffff})
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x2, 0x2, 0x0, 0x9, 0xffa4, 0xc00, 0x5}, 0x20) (async)
listen(r5, 0x3841b273)
pselect6(0x40, &(0x7f0000000080)={0x3, 0x3, 0x3, 0x8, 0x10, 0x800, 0x8, 0x3}, &(0x7f0000000180)={0xfffffffffffffffa, 0x7, 0x7fff, 0x8001, 0xd, 0x7, 0xf4da, 0x4}, &(0x7f00000002c0)={0x5, 0x831c, 0x2, 0x6, 0x606e56da, 0x0, 0x10001, 0x6}, &(0x7f0000000300), &(0x7f00000003c0)={&(0x7f0000000340)={[0x8f]}, 0x8})
timer_create(0x0, 0x0, &(0x7f0000000000))
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000500)='hrtimer_start\x00', r7}, 0x10)
timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)

1.99569176s ago: executing program 1 (id=363):
socket$inet6(0xa, 0x800000000000002, 0x0) (async)
r0 = socket$inet6(0xa, 0x800000000000002, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x3c, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x4}]}, 0x3c}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e000000080000000000180003801400038010000180"], 0x44}}, 0x20008000) (async)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e000000080000000000180003801400038010000180"], 0x44}}, 0x20008000)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x8, @mcast2, 0x6}, 0x1c)
socketpair(0x2c, 0x6, 0x6300, &(0x7f0000000080)={<r3=>0xffffffffffffffff})
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c)
close(r3)
write(r0, &(0x7f0000000200)="89", 0x3f80)

1.99480525s ago: executing program 0 (id=364):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000001850000001b000000b70000000000070095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0xff58)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000000000b7030000000000008500000070"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r2}, 0x10) (async)
pselect6(0x40, &(0x7f00000001c0)={0x5611, 0x0, 0x2, 0x6, 0x0, 0x1000, 0x4, 0x100000001}, &(0x7f0000000280)={0x9, 0x6e9, 0xb7, 0x8, 0x2, 0x1ff, 0xb7, 0x800}, &(0x7f0000000300)={0x8, 0x3, 0x3, 0x4, 0x9, 0x7ff, 0xac5, 0x1}, &(0x7f0000000340)={0x77359400}, &(0x7f00000003c0)={&(0x7f0000000380)={[0x8]}, 0x8}) (async)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r3}, 0x10) (async)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r4, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) (async)
r5 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r5, &(0x7f00000000c0), 0x10)
write(r5, &(0x7f0000000500)="a20111d4ab00ac8221a103549f5964fe7b01d6778b5ebf58f2aaf92012c55b8aab77c6068c26584a46b8e9766564b441d2a1c5837b07e783bc", 0x39)
socket$nl_route(0x10, 0x3, 0x0)
syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x2db4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0x0, [{{0x9, 0x4, 0x0, 0xff, 0x2, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x800, 0x5, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x8, 0x2, 0x3}}}}}]}}]}}, 0x0)

1.99233882s ago: executing program 1 (id=365):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000200008385000000710000001801000002696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000300)='kmem_cache_free\x00', r0}, 0x18)
syz_mount_image$exfat(&(0x7f0000000340), &(0x7f0000000240)='./file0\x00', 0x3000050, &(0x7f0000000040)=ANY=[@ANYRESHEX=0x0, @ANYRES32=0x0, @ANYRESDEC=r0, @ANYRES16, @ANYRES32=r0, @ANYRESOCT=r0, @ANYRESOCT=r0], 0x2, 0x1513, &(0x7f0000000380)="$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")
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f00000018c0)={0xfffffffffffffff9, 0xd000, 0x2, r1, 0xa})
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = syz_usb_connect$cdc_ncm(0x0, 0x8f, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109027d0002010080000904000001020d0000052406000105240000000d240f0103000000fd0000000406241aff072908241c0101090000142413099f33760bf14377323063f9c8a04d113905241510000905810300020800040904010000020d00000904010102020d0000090582020002e1ad00090503020002"], 0x0)
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f0000001a00)=ANY=[@ANYBLOB='allow_utime=00000000000000000000302,namecase=1,errors=remount-ro,umask=00000000000000000000020,fmask=00000000000000000000005,iocharset=iso8859-14,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c756d61736b3d30303030303030303030303030303030303030000000002c646973636172642c7569643d020331dcd7706de469da08a27f989c2c8492e71601372cb14bdcaee57b93e3d030470bd060999c22775e7b5ed20cdc0d19238d47a5ad1a7e4bb598f5658bf54b4ca97cce85a6296d1725", @ANYRESHEX=0x0, @ANYBLOB=',allow_utime=00000000000000020000002,defcontext=user_u,obj_user=iocharset,\x00'], 0x1, 0x152a, &(0x7f0000000340)="$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")
r4 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
getdents(r4, &(0x7f0000001fc0)=""/184, 0xb8)
syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r3, 0x0, &(0x7f0000000000)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x20, 0x80, 0x1c, {0x80, 0x2070, 0x1000, 0x9, 0x4, 0x8000, 0xfffd, 0x8, 0x3906, 0xfffc, 0x401, 0xfb}}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r3, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r3, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_delrule={0x24, 0x21, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10004}, [@FIB_RULE_POLICY=@FRA_PROTOCOL={0x5, 0x15, 0x3}]}, 0x24}}, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = dup(r5)
setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x4, 0x0, 0x0)
sendmsg$SEG6_CMD_DUMPHMAC(r6, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000228bd7000fbdbdf25020000001400010000f8ffffffba050005000200000014000100fe80000000000000000d000000000000000000003d6cdbba1c8bd9d9b8265949fc2becc10b2734c3d0a79e47bb0f658442bd918cdb641df3fa204751b04081c4eb7aa5474add60daad5f9ad9d514f02791560159000000050000"], 0x44}, 0x1, 0x0, 0x0, 0x20000001}, 0x840)

1.575664806s ago: executing program 4 (id=368):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000dfff75390000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='io_uring_register\x00', r0}, 0x10)
r1 = syz_io_uring_setup(0x14f, &(0x7f0000000e80)={0x0, 0x657f, 0x1000, 0x1, 0x290}, &(0x7f0000000f00), &(0x7f0000000f40))
io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f00000012c0)={0x0}, 0x1)
r2 = creat(&(0x7f0000000200)='./file0\x00', 0x0)
close(r2)
r3 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x402, 0x0)
mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}})
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'pim6reg\x00', 0x1})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000dfff75390000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='io_uring_register\x00', r0}, 0x10) (async)
syz_io_uring_setup(0x14f, &(0x7f0000000e80)={0x0, 0x657f, 0x1000, 0x1, 0x290}, &(0x7f0000000f00), &(0x7f0000000f40)) (async)
io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f00000012c0)={0x0}, 0x1) (async)
creat(&(0x7f0000000200)='./file0\x00', 0x0) (async)
close(r2) (async)
openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x402, 0x0) (async)
mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) (async)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'pim6reg\x00', 0x1}) (async)

1.447644308s ago: executing program 4 (id=369):
syz_mount_image$erofs(&(0x7f00000003c0), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000240)=ANY=[], 0x0, 0x17d, &(0x7f0000001ac0)="$eJzsmLFP+kAUx7/vyg/yMy6uLg4SxcHSFjUuxLA5mogaNwlUghYx0EGYdPH/cHZwdvOPMM7qYFwY3Uxqej3oQQR10MT4PsPj+7h313evyXcoGIb5szw+vNyvFe+EAWASaaTU/89GXCO0+tfb83Jraj1/OfeUv041robPIwBB8PnnJwDcFAz4Kg+Cwd1p9VuE6OstCCwovQOCqfQeBLaVdkHYVfpA042w3jT3a55rlhteJRRWGOwwOGHIDffXPSNUtP5IW2+1O4clz3Ob3yg+ml+3IJDX+tPfV282ljY/GwK20jkQNpVeRao3m2gk2v2nE/H5xg/fnwULFr9NxP4UXBDmNX9KaP6R9evH2Va7s1irl6pu1T1ynNyKtWRZy05WGlEUx/jff+lPE9r5/0bUJimJk5LvN+0o9nMniu85rpD+J5CZjfLQ+5Mju4nWSe0jqTLGmHKGYRiGYRiGYRiGYRiGYZgvMAOSX0EldIo4GcDZkNVvAQAA///an3MA") (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (async)
mkdir(&(0x7f00000004c0)='./bus\x00', 0x92) (async)
mount$overlay(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={[{@redirect_dir_follow}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@redirect_dir_nofollow}, {@metacopy_off}]})
chdir(&(0x7f0000000140)='./bus\x00') (async)
rename(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0)='./bus\x00') (async)
r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) (async)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) (async)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000640)=ANY=[@ANYBLOB="1800030000090000000000000000000010210000b7c71b2c508f6294e323d508089932c99b44b1c7fd516246d20f5c13cbd954b2ca4c6a07fc01e9cb8cd4ac2ba81e8bb4fb56d9913cb5e79fc234b782342334eea33f280978", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) (async)
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000680)=ANY=[], 0x50)
r5 = inotify_init()
inotify_add_watch(r5, &(0x7f0000000000)='.\x00', 0x1400037e) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0xb) (async)
read$FUSE(r5, &(0x7f0000001fc0)={0x2020}, 0x2020)
mkdir(&(0x7f0000000540)='./file0\x00', 0x108) (async)
mkdir(&(0x7f0000000040)='./file1\x00', 0x0) (async)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)

1.447117458s ago: executing program 3 (id=370):
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000000c0)='./file2\x00', 0x280880f, &(0x7f0000000040), 0x3a, 0x527, &(0x7f0000000100)="$eJzs3c9vHFcdAPDvjL1tNnFZt/RQKtFWtMiOIGu7Jq3VQ6ESglOlQrkHY2+M5bU3stdpbBXqiD8ACSFAQkJwgQsSB46VUP4EhBSJ3BEgEIIEDhwCg3Z3NjjOrn80u57E/nyk8bx5O7vf79NoZ+e9Gc8EcGq9FBGTEZGlWXY+Iip5fZpPsdOZWuvduf3+QmtKIsve/Xs5kryu+1lP5vNz+dvORMRXvxzxjeTBuBtb2yvz9XptPV+eaq4md7Ns+8Ly6vxSbam2Njs789rc63MX56YH0s7xiHjzi3/+wXd/8aU3f/PZ9/5w6a+T3+40sGN3OwYpifIDdaMRsT6MYAVptaeUly8etPL14ecDAEB/reP9ZyLiUxFxPiox0j6aAwAAAE6S7PNjcTeJyAAAAIATK42IsUjSakRcfbZVTtNqtXMN77NxNq03NpqfySr3xgvGo5ReXq7XpvNrB8ajlLSWZ/JrbLvLr+5Zno2IpyPi+5Vye7m60KgvFjryAQAAAKfHuV39/zQi/lXp9P8BAACAE2b8iOuPDCkPAAAAYHiO2v8HAAAAHj9H7f+/tfnr2SGlAgAAAAzeO2+/3X5Yd/f514tXtzZXGlcvLNY2VqqrmwvVhcb6lepSo7HUvmff6kGfV280rnwu1javTTVrG82pja3tS6uNzbXmpeX248ABAACAAjz94o1bSUTsvFFOu3VP5PNSRNb9V/8Pf/6T54rJEBiW9Cgr/2l4eQDHz6184PQaLToBoDClohMACvfgfuD+I4O+F+/89uDPTu5m2UdMCwAAGKCJT9y41T3U33mj3J53z/8nHxSXFzB8+fn/JCk6EeDYOf8Pp1dn3P+b5aLzAI5fab8jAJ0COPHSQ3zVH+b8f4drAAAAoGhj7SlJq3k/YOzFNK1WI55qPxaglFxertemI+JjEfH7SunJ1vJM+52J4QEAAAAAAAAAAAAAAAAAAAAAAAAAOKQsSyIDAAAATrSI9C9JexxgJCYqr4ztHR94Ivl3pT2PiPd+/O4Pr803m+szrfp/3Ktv/iivf7WIEQwAAABgr24/vduPBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBBunP7/YXudJxx//ZWRIz3ij8aZ9rzM1GKiLP/TGJ01/uSiBgZQPyd6xHxXK/4SSutGM+z2Bs/jYhywfHPDSA+nGY3WvufL/T6/qXxUnve+/s3mk8Pq//+L723/xvps/976pAxnr/5q6m+8a9HPD/ae//TjZ/0if/yIeN//Wvb2/1ey34WMdHz9ye5L9ZUc/XK1MbW9oXl1fml2lJtbXZ25rW51+cuzk1PXV6u1/K/PWN875Mf/ne/9p/tE3/8gPa/csj2/+fmtdsf7xRLe14qxU+zbPLlXvG/9U7WVsn2xu/+9n06/x1oLU90yzud8m4v/PJ3L+zX/sU+7T9o+08esv3nv/KdPx5yVQDgGGxsba/M1+u19cep8Ew8Emk80oU038A9Xiofez7lXmkMqzAfj8gm+KD/JngMCgXulAAAgKH4/0H/fdVpYQkBAAAAAAAAAAAAAAAAAADAKXTQbcBiALcT2xtzp5imAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADs638BAAD//2PM4P8=")
mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[])
r0 = socket$pptp(0x18, 0x1, 0x2)
write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0)
statx(0xffffffffffffff9c, 0x0, 0x100, 0x405, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001000)=@base={0xb, 0x5, 0x4, 0xa932, 0x9, 0xffffffffffffffff, 0x800008}, 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000182a0000", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00'], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r2}, 0x10)
futimesat(0xffffffffffffff9c, 0x0, 0x0)
bind$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x0, @dev}}, 0x1e)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x64, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='hrtimer_start\x00', r4}, 0x3d)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x3, 0xd, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000008b0000000000000000000000850000001300000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b708000008ea00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
close(0xffffffffffffffff)
ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0))
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r7, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000080)="b9ff03076003008cb89e08f088a8", 0x0, 0x5da0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='page_pool_release\x00', r5}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)

1.444003638s ago: executing program 4 (id=371):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', <r1=>0x0}) (async)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) (async)
r3 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000240), 0x840, 0x0)
ioctl$RNDADDENTROPY(r3, 0x40085203, 0x0)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x20044e, &(0x7f0000000340)={[{@minixdf}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1ff}}, {@stripe}, {@noblock_validity}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6}}]}, 0x3, 0x451, &(0x7f0000000f80)="$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")
symlink(&(0x7f00000005c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f00000002c0)='.\x02\x00') (async)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) (async)
rename(&(0x7f0000000040)='./file1\x00', &(0x7f0000000100)='.\x02\x00') (async)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x10) (async)
r5 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff)
r7 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)={0x800c0, 0x140, 0x2d}, 0x18)
r8 = syz_open_procfs$userns(0x0, &(0x7f00000001c0))
mount_setattr(r7, &(0x7f0000000100)='./file0\x00', 0x9000, &(0x7f0000000280)={0x1, 0x0, 0x1a0000, {r8}}, 0x20) (async)
sendmsg$ETHTOOL_MSG_PAUSE_GET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000340)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000001e0000000c00018008000100", @ANYRES32=r1], 0x20}}, 0x0)

1.256539351s ago: executing program 3 (id=372):
bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000e0ff000000000000000000000000000000004da0c6fa2e21cb45c647e4759a7e67a384e7ef96bc146fc9f845815e46887a836e7102001ce5a11d13c62805a1229d45763ce7c06dbfe03da96393132054644606e58ba95f364fe9a4e300e1dedd5a232539f4cc596b323f9bbd32d77c9ef5c7a756df15fb2e44b5c029fc72ec4d28bf019100a53ce018228e02964f242c79e8524dcf216083c769d70af6"], 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) (async)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, 0x0, 0x0, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000007000000020000000400000005000000", @ANYRES32, @ANYBLOB="000004000000d40000000000000000000000000d", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0100"/28], 0x50) (async)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000007000000020000000400000005000000", @ANYRES32, @ANYBLOB="000004000000d40000000000000000000000000d", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0100"/28], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000010400007b8af8ffe1000000bfa200000000000007020000f8ffff00000085000000030000009500"/72], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) (async)
sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8)
getpid() (async)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) (async)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10)
r6 = open_tree(0xffffffffffffff9c, 0x0, 0x81000)
move_mount(r6, &(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', r6, 0x0, 0x10)
symlinkat(&(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', r6, 0x0) (async)
symlinkat(&(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', r6, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x0) (async)
sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x0)
r8 = openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0)
write$cgroup_pid(r8, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]})
sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, 0x2, 0x3, 0x5}, 0x14}}, 0x0)

1.240047811s ago: executing program 4 (id=373):
unshare(0x22020400)
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0x2000000000000218, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10)
r2 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=<r3=>0x0)
timer_settime(r3, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r4, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r4, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9)
socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sys_enter\x00', r6}, 0x10)
futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0)
r8 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x81, 0x0)
write$FUSE_NOTIFY_DELETE(r8, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x206a2e2c, 0x0)

1.176342503s ago: executing program 2 (id=374):
r0 = syz_open_dev$hiddev(&(0x7f0000000000), 0x2, 0x88183)
ioctl$HIDIOCGUCODE(r0, 0xc018480d, &(0x7f0000000040)={0x3, 0xffffffff, 0x6, 0x0, 0x6, 0x1})
r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000100)={'sit0\x00', &(0x7f00000000c0)={'syztnl2\x00', <r2=>0x0, 0x8, 0x80, 0x6, 0x9, {{0x6, 0x4, 0x0, 0x36, 0x18, 0x65, 0x0, 0xff, 0x4, 0x0, @private=0xa010102, @multicast1, {[@ra={0x94, 0x4, 0x1}]}}}}})
r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140), 0x4)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)={0x2, 0x4, 0x8, 0x1, 0x80, r1, 0x46c4aba0, '\x00', r2, r3, 0x5, 0x0, 0x4}, 0x50)
mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ffd000/0x1000)=nil)
ioctl$UI_DEV_CREATE(r1, 0x5501) (async)
ioctl$UI_DEV_CREATE(r1, 0x5501)
r5 = getpid()
statx(r1, &(0x7f0000000540)='./file0\x00', 0x6000, 0x8, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, <r6=>0x0})
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000680)={0x0, 0x0, <r7=>0x0}, &(0x7f00000006c0)=0xc)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000700), &(0x7f0000000740)=0xc) (async)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000700)={0x0, 0x0, <r8=>0x0}, &(0x7f0000000740)=0xc)
r9 = ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f0000000a40)={0x5, 0x5})
openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000a80), 0x2, 0x0) (async)
r10 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000a80), 0x2, 0x0)
r11 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000ac0)=0xffffffffffffffff, 0x4)
statx(r1, &(0x7f0000000b00)='./file0\x00', 0x400, 0x100, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, <r12=>0x0})
read$FUSE(r1, &(0x7f0000000c40)={0x2020, 0x0, 0x0, 0x0, <r13=>0x0}, 0x2020)
openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) (async)
r14 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000002c80)={{{@in=@empty, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r15=>0x0}}, {{@in6=@ipv4={""/10, ""/2, @loopback}}, 0x0, @in6=@ipv4}}, &(0x7f0000002d80)=0xe8)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000002dc0)={0x0, 0x0, <r16=>0x0}, &(0x7f0000002e00)=0xc)
r17 = syz_open_pts(r1, 0x42000)
syz_mount_image$fuse(&(0x7f0000002e40), &(0x7f0000002e80)='./file0\x00', 0x800000, &(0x7f0000002ec0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id', 0x3d, 0xee01}, 0x2c, {'group_id', 0x3d, 0xee01}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x800}}, {@allow_other}, {@blksize={'blksize', 0x3d, 0x800}}, {@max_read={'max_read', 0x3d, 0x7fffffffffffffff}}, {@default_permissions}, {@allow_other}, {@default_permissions}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x6}}, {@max_read={'max_read', 0x3d, 0x3}}], [{@fowner_lt={'fowner<', 0xffffffffffffffff}}, {@uid_lt={'uid<', 0xffffffffffffffff}}, {@obj_user={'obj_user', 0x3d, 'syztnl2\x00'}}, {@context={'context', 0x3d, 'system_u'}}, {@fsname={'fsname', 0x3d, 'syztnl2\x00'}}, {@appraise}, {@uid_eq}, {@fsmagic={'fsmagic', 0x3d, 0x80000001}}]}}, 0x1, 0x0, &(0x7f00000030c0)="cd62f21b51ac5634b55c655ce0e39b6dc4bef2268eb6bf27a59e6e99155aa4d08937ff5f5a48e3fc7cd0a02855b7902f38f05097cc27067d63182fa91769d922b2921e352430123115864906f6dc7631edaf1fc36e8ecf055cbe1ab3bc85217e5580b79cbcdeedd90d7ba5327c1c6d5b84b992e6404800") (async)
r18 = syz_mount_image$fuse(&(0x7f0000002e40), &(0x7f0000002e80)='./file0\x00', 0x800000, &(0x7f0000002ec0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id', 0x3d, 0xee01}, 0x2c, {'group_id', 0x3d, 0xee01}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x800}}, {@allow_other}, {@blksize={'blksize', 0x3d, 0x800}}, {@max_read={'max_read', 0x3d, 0x7fffffffffffffff}}, {@default_permissions}, {@allow_other}, {@default_permissions}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x6}}, {@max_read={'max_read', 0x3d, 0x3}}], [{@fowner_lt={'fowner<', 0xffffffffffffffff}}, {@uid_lt={'uid<', 0xffffffffffffffff}}, {@obj_user={'obj_user', 0x3d, 'syztnl2\x00'}}, {@context={'context', 0x3d, 'system_u'}}, {@fsname={'fsname', 0x3d, 'syztnl2\x00'}}, {@appraise}, {@uid_eq}, {@fsmagic={'fsmagic', 0x3d, 0x80000001}}]}}, 0x1, 0x0, &(0x7f00000030c0)="cd62f21b51ac5634b55c655ce0e39b6dc4bef2268eb6bf27a59e6e99155aa4d08937ff5f5a48e3fc7cd0a02855b7902f38f05097cc27067d63182fa91769d922b2921e352430123115864906f6dc7631edaf1fc36e8ecf055cbe1ab3bc85217e5580b79cbcdeedd90d7ba5327c1c6d5b84b992e6404800")
r19 = geteuid()
statx(r4, &(0x7f0000003700)='./file0\x00', 0x100, 0x2, &(0x7f0000003740)) (async)
statx(r4, &(0x7f0000003700)='./file0\x00', 0x100, 0x2, &(0x7f0000003740)={0x0, 0x0, 0x0, 0x0, 0x0, <r20=>0x0})
getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000003f80)={{{@in=@broadcast, @in=@loopback}}, {{@in=@loopback}, 0x0, @in=@private}}, &(0x7f0000004080)=0xe8) (async)
getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000003f80)={{{@in=@broadcast, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r21=>0x0}}, {{@in=@loopback}, 0x0, @in=@private}}, &(0x7f0000004080)=0xe8)
getresgid(&(0x7f00000040c0), &(0x7f0000004100), &(0x7f0000004140)) (async)
getresgid(&(0x7f00000040c0)=<r22=>0x0, &(0x7f0000004100), &(0x7f0000004140))
r23 = socket$pppl2tp(0x18, 0x1, 0x1)
accept$nfc_llcp(r1, &(0x7f0000004180), &(0x7f0000004200)=0x60) (async)
r24 = accept$nfc_llcp(r1, &(0x7f0000004180), &(0x7f0000004200)=0x60)
sendmmsg$unix(r1, &(0x7f0000004300)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000200)="93c99a789db0fadcfc5f7609d6e3e609ed5ea001f48747386894f633d59b6662a9f770df0e", 0x25}, {&(0x7f0000000240)="6c82db51218f78b3c8af986b46053386cd566b45c88f51ebe48fb334ab85efa6b67648a91c275da80afe79dcd8e2da6878cd2f7bbb98506552d0a67bce87cf824257b7cf685c8fe63884d4269f6820b39a469e6b9202b8fbbf8196ecc3c995b281e71235b60dd7fa4cb14293685e3ed8d0d2e5f38d2f83fdf4ae513c5188108d9056d78b9b3b282dce50d2ab493a9983e1283f16b45c738d28c0af7da157ac", 0x9f}, {&(0x7f0000000300)="50d22bd0162d227fb525d68d0229c2aa071e537fa5630b4657d64df11000018f63d75645ffbe6df1cbef89ef7c075129d7ca2aa639d7e350665b6e8a747bc7d215d791e93854cd08", 0x48}, {&(0x7f0000000380)="77201895349541914c400dec53fba4a774565d5b34c8f16284126f505a6d35006ab694723a981429ce529871a3d76ffe8f4e7205ddadc125cc7fca5144131943d93fcfc22670f5674616a65360561f47a6c5e59fe58725d22a6d19b769506da0e43b676fbb4d4b", 0x67}, {&(0x7f0000000400)="5733cd5adc7846128e340d8824272e472fd5292febb53f12206bb3d425e9a0b95781", 0x22}, {&(0x7f0000000440)="f37421c6baa038a905bb0cfeda8c5082fc8a156683e7c4f7837653774115dd0006bfa22d2ed36caca5373cf1707782f1f58ba2f78dddb2ffee338963d1fd252465254167a1c0131d47538bbccaa0a672635e4796d3cf83439f6b6bd848555d3d20c3dfc4f7", 0x65}], 0x6, &(0x7f0000000780)=[@cred={{0x1c, 0x1, 0x2, {r5, r6, r7}}}, @cred={{0x1c, 0x1, 0x2, {r5, 0x0, r8}}}], 0x40, 0x24040000}}, {{&(0x7f00000007c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000a00)=[{&(0x7f0000000840)="4b0c6edbc8c4eb07cb39a0e2abcce0e59f5350b378192bbe895eda70a4e6c897b35cf04d4748c455fa64e348cedd9994ea1cf44156205fce81071f09cc0d57be3bb62d54125d8cfb163c7d6827733d74cd3efeae5d33fb73066346bb8a3d23dfa012690cc62dd61513908d83a3fe113987b3a04cca51806b1bdcf7fa73ecd8ecab5b1e7ec7993a291a01a677ba46c1ec37ae16dc316ad52b25595702d3c12cc4e3a7c6519edd79b780a14115cd08bd18295697e6af93ad69a7141fa76c00c70ce992bdbcb71f225fd79f4f7860d028b19c01a1555b9c591ab48f23412fe0b0b764af960b9a29bf1b1b", 0xe9}, {&(0x7f0000000940)="e9564b70c37ac194195b3c57009708bffdec3b6241877ce1d3a8dd717e5e49c95574f5e28260363c", 0x28}, {&(0x7f0000000980)="8edf3b3830301dd2bd9361791c33436b70d2a2a1b3af73a8ef07a9c43763ed9b24ac1aab8a0eb37c7f1b10ee1eaf6fd8c81feea80345", 0x36}, {&(0x7f00000009c0)="0c87063d766a915a56f3b4c37bb6a84afcf166", 0x13}], 0x4, &(0x7f0000003140)=[@cred={{0x1c, 0x1, 0x2, {r5, 0xffffffffffffffff, 0xffffffffffffffff}}}, @rights={{0x38, 0x1, 0x1, [r1, r9, r0, r0, r10, r0, r0, r3, r1, r11]}}, @rights={{0x18, 0x1, 0x1, [r0, r3]}}, @cred={{0x1c, 0x1, 0x2, {r5, r12, r13}}}, @rights={{0x18, 0x1, 0x1, [r14, r1]}}, @cred={{0x1c, 0x1, 0x2, {r5, r15, r16}}}, @rights={{0x38, 0x1, 0x1, [r17, r0, r4, r3, r0, r3, r4, r18, r0, r3]}}, @rights={{0x18, 0x1, 0x1, [r3, r3]}}], 0x118, 0x1}}, {{&(0x7f0000003280)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000003400)=[{&(0x7f0000003300)="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", 0xff}], 0x1, 0x0, 0x0, 0x40428d4}}, {{&(0x7f0000003440)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f00000036c0)=[{&(0x7f00000034c0)="951fb629cdffa672c62b1d3ac1f0955bcf408d967801e78f697bde7275765a5cbe81f33212525bd4c535b6750141e6aac02d68f2f2d8abf9cdeddd646397e1d109213b764340487a36eb69c2feb9dfe4b24e095fb21f4f115ca01355fe7e6bcf320679a088c0f626ef9ccfeea8871144f3884451b0500cd827598ae9779b409d9dbcb2e609e8b96833a4c9dd4682eb25114ff7374f5b3953857c2476299b16a3c3cd45d09da9a0076ded29b5ba1effb5eb7d0d41e2ac97fef0d7267b56c01d7818b1c21d3b74b0725810b23a7e3ca853e1e64ab7fc", 0xd5}, {&(0x7f00000035c0)="c8de3e8d29f00d4340c9cce3a7c82e76a4cef576fc237fb2d14dac83290904b7799b861cbc950778808d229722", 0x2d}, {&(0x7f0000003600)="b947fcb58462e27c9e10bf39f36b5d5b8bafe19710d127d0e73b0ca2b691e3497893670edb750a726149a7b90c98f37ca309b2f114b401842c89d4cac09f438dbe4501f0", 0x44}, {&(0x7f0000003680)="2fae1327902e9926833c49fc4295511ff8c7e35f9b1510bc37889322b3363034d8d7fa52dc7c6ad780e2a13a5652d9e5b3318c610bfd3af3", 0x38}], 0x4, &(0x7f0000003840)=[@cred={{0x1c, 0x1, 0x2, {r5, r19, r20}}}], 0x20, 0x94}}, {{&(0x7f0000003880)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000003c80)=[{&(0x7f0000003900)="a62524c9eac2d8161520c1fb89ffdc7652b4b4dc16b3887bffa4244cc5ba56e99de2913420667e19ebe1bf1dd114a740a21f98b324f7f5fe193c5f23e7eb238490a363cdc58617b678792c1d703a0ad6f18978310b6534189294739564408f66a6f347a7de2bd289d1200502353f2999d25ece4f653df48fd50becae5a84be322aacef395479d79dfc9f26b36606982a918df35aca2d642fd83e9cb599163b973884a5e19a7e53e3a834c1eda30747c675", 0xb1}, {&(0x7f00000039c0)="8923f6c320d13d5b6495c4b229331ecfdac5d2c53499c96a47ac947afb38b7c536fb91", 0x23}, {&(0x7f0000003a00)="0263af4e86964c167f8f9baa161f8364ffc2332bb94a9a9693bfb969fac6c1b28238a79bcf541eae0e9aec1cd0a4c446e723da476bb7c749e8f20eba5f82b61d8dae243ebafa7508a032e957963512fd95fc734111160615fb42f73ea1f2c95d", 0x60}, {&(0x7f0000003a80)="0c93e3e8f5017ffedbf3b10d47043e6275141491d3e42d9aa92ddfe4ef1efb13e6362e55a45ac5dd8f8e3d1c490e0f1c80fd256e1e73d4ca764d73a216da4dffebc48b7c4efcde0e9f305fec30969c90f1948f5afb942b46f63069814517b91a75e10d3404ee3c018339fc2354e2a5688a2bef99bdb12fb5643ff32736f206ee9331cfffa5399a4a19518fe9a40e8757a62a16d221fa012e76dae2816c225c8dfae3c5afd30fb1171378fc16e143a39d05a1607bff470bf0a7a85113822aa1a663bf73c79be53f733c4151cd30ad54", 0xcf}, {&(0x7f0000003b80)="1ebf9e8074ba920158118e7a3eb9d7d7d43c860643fc8d2599947dfded8c33798c867d5ffa99b8ce220d7ba7d73e229b0a0c0a1c7d33d645eb415e3cf758a13f1ce034eae6004766e712b4fdd5807d26ba39b59dceef73bf4200a5eaa7faef5d88e30a807078660a8de14196d3c972699a080052943a488f39546133ac61a62b67ab140220d5039e4a9c4b547e88b4752432bdc959b15dada8e3ae6288f3254bd396ac35faa1359bcb9196ea47e6f7f1d1e3e064905a88ee11132c382846182d032ecdf49ed83fa8269ad653680b16d855c2c25b4e7a0514d682a71f896225247552a22d", 0xe4}], 0x5, 0x0, 0x0, 0x4010}}, {{&(0x7f0000003d00)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000003f40)=[{&(0x7f0000003d80)="e9c3530e51dd6e5b398c5736f1daf8c1ea", 0x11}, {&(0x7f0000003dc0)="0cf34c3c3e8dcd86fa96e0ac3c13c9c5a2060cfba5b0d752870c3edb03f86c35a1a0cad5e72e9c079dc497e39328f55dcbefced602d0ec2b2df9d7d71dec35ed0422a7ab894ef5765f8d540ee6b5ead390843d6ac70e9b1d8a773d0915da8970b003424ad3dc3a59978e3103b8f489145dac9400fcc9b4ab91a089b7f39dc806f817ea6303df3d919801a9766f2953a177f072128a2f73b815a0a606c7e31d60ef56b42e06a8fc9027ee7937130ba3a9522aab033e099e95573173e4599fa6335056eda145ab6f951b9a613afe4432597941", 0xd2}, {&(0x7f0000003ec0)="187866a41e58fe67e5c8369796509646c936b28778db5e61dbbd29da37e90988b4f8ea063192e3b814da262f4cde9cd1146fd9a2143686bccd1301a61ca46450b68ae4683d3a7eb2dd7445c5ea12fda24d01ebd5b2aee43ec36c33d0", 0x5c}], 0x3, &(0x7f0000004240)=[@rights={{0x24, 0x1, 0x1, [r0, r0, r0, r1, r0]}}, @cred={{0x1c, 0x1, 0x2, {r5, r21, r22}}}, @rights={{0x28, 0x1, 0x1, [r1, r1, r0, r1, r1, r23]}}, @rights={{0x2c, 0x1, 0x1, [r1, r1, r24, r1, r0, r0, r4]}}], 0xa0, 0x24020000}}], 0x6, 0x4000000) (async)
sendmmsg$unix(r1, &(0x7f0000004300)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000200)="93c99a789db0fadcfc5f7609d6e3e609ed5ea001f48747386894f633d59b6662a9f770df0e", 0x25}, {&(0x7f0000000240)="6c82db51218f78b3c8af986b46053386cd566b45c88f51ebe48fb334ab85efa6b67648a91c275da80afe79dcd8e2da6878cd2f7bbb98506552d0a67bce87cf824257b7cf685c8fe63884d4269f6820b39a469e6b9202b8fbbf8196ecc3c995b281e71235b60dd7fa4cb14293685e3ed8d0d2e5f38d2f83fdf4ae513c5188108d9056d78b9b3b282dce50d2ab493a9983e1283f16b45c738d28c0af7da157ac", 0x9f}, {&(0x7f0000000300)="50d22bd0162d227fb525d68d0229c2aa071e537fa5630b4657d64df11000018f63d75645ffbe6df1cbef89ef7c075129d7ca2aa639d7e350665b6e8a747bc7d215d791e93854cd08", 0x48}, {&(0x7f0000000380)="77201895349541914c400dec53fba4a774565d5b34c8f16284126f505a6d35006ab694723a981429ce529871a3d76ffe8f4e7205ddadc125cc7fca5144131943d93fcfc22670f5674616a65360561f47a6c5e59fe58725d22a6d19b769506da0e43b676fbb4d4b", 0x67}, {&(0x7f0000000400)="5733cd5adc7846128e340d8824272e472fd5292febb53f12206bb3d425e9a0b95781", 0x22}, {&(0x7f0000000440)="f37421c6baa038a905bb0cfeda8c5082fc8a156683e7c4f7837653774115dd0006bfa22d2ed36caca5373cf1707782f1f58ba2f78dddb2ffee338963d1fd252465254167a1c0131d47538bbccaa0a672635e4796d3cf83439f6b6bd848555d3d20c3dfc4f7", 0x65}], 0x6, &(0x7f0000000780)=[@cred={{0x1c, 0x1, 0x2, {r5, r6, r7}}}, @cred={{0x1c, 0x1, 0x2, {r5, 0x0, r8}}}], 0x40, 0x24040000}}, {{&(0x7f00000007c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000a00)=[{&(0x7f0000000840)="4b0c6edbc8c4eb07cb39a0e2abcce0e59f5350b378192bbe895eda70a4e6c897b35cf04d4748c455fa64e348cedd9994ea1cf44156205fce81071f09cc0d57be3bb62d54125d8cfb163c7d6827733d74cd3efeae5d33fb73066346bb8a3d23dfa012690cc62dd61513908d83a3fe113987b3a04cca51806b1bdcf7fa73ecd8ecab5b1e7ec7993a291a01a677ba46c1ec37ae16dc316ad52b25595702d3c12cc4e3a7c6519edd79b780a14115cd08bd18295697e6af93ad69a7141fa76c00c70ce992bdbcb71f225fd79f4f7860d028b19c01a1555b9c591ab48f23412fe0b0b764af960b9a29bf1b1b", 0xe9}, {&(0x7f0000000940)="e9564b70c37ac194195b3c57009708bffdec3b6241877ce1d3a8dd717e5e49c95574f5e28260363c", 0x28}, {&(0x7f0000000980)="8edf3b3830301dd2bd9361791c33436b70d2a2a1b3af73a8ef07a9c43763ed9b24ac1aab8a0eb37c7f1b10ee1eaf6fd8c81feea80345", 0x36}, {&(0x7f00000009c0)="0c87063d766a915a56f3b4c37bb6a84afcf166", 0x13}], 0x4, &(0x7f0000003140)=[@cred={{0x1c, 0x1, 0x2, {r5, 0xffffffffffffffff, 0xffffffffffffffff}}}, @rights={{0x38, 0x1, 0x1, [r1, r9, r0, r0, r10, r0, r0, r3, r1, r11]}}, @rights={{0x18, 0x1, 0x1, [r0, r3]}}, @cred={{0x1c, 0x1, 0x2, {r5, r12, r13}}}, @rights={{0x18, 0x1, 0x1, [r14, r1]}}, @cred={{0x1c, 0x1, 0x2, {r5, r15, r16}}}, @rights={{0x38, 0x1, 0x1, [r17, r0, r4, r3, r0, r3, r4, r18, r0, r3]}}, @rights={{0x18, 0x1, 0x1, [r3, r3]}}], 0x118, 0x1}}, {{&(0x7f0000003280)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000003400)=[{&(0x7f0000003300)="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", 0xff}], 0x1, 0x0, 0x0, 0x40428d4}}, {{&(0x7f0000003440)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f00000036c0)=[{&(0x7f00000034c0)="951fb629cdffa672c62b1d3ac1f0955bcf408d967801e78f697bde7275765a5cbe81f33212525bd4c535b6750141e6aac02d68f2f2d8abf9cdeddd646397e1d109213b764340487a36eb69c2feb9dfe4b24e095fb21f4f115ca01355fe7e6bcf320679a088c0f626ef9ccfeea8871144f3884451b0500cd827598ae9779b409d9dbcb2e609e8b96833a4c9dd4682eb25114ff7374f5b3953857c2476299b16a3c3cd45d09da9a0076ded29b5ba1effb5eb7d0d41e2ac97fef0d7267b56c01d7818b1c21d3b74b0725810b23a7e3ca853e1e64ab7fc", 0xd5}, {&(0x7f00000035c0)="c8de3e8d29f00d4340c9cce3a7c82e76a4cef576fc237fb2d14dac83290904b7799b861cbc950778808d229722", 0x2d}, {&(0x7f0000003600)="b947fcb58462e27c9e10bf39f36b5d5b8bafe19710d127d0e73b0ca2b691e3497893670edb750a726149a7b90c98f37ca309b2f114b401842c89d4cac09f438dbe4501f0", 0x44}, {&(0x7f0000003680)="2fae1327902e9926833c49fc4295511ff8c7e35f9b1510bc37889322b3363034d8d7fa52dc7c6ad780e2a13a5652d9e5b3318c610bfd3af3", 0x38}], 0x4, &(0x7f0000003840)=[@cred={{0x1c, 0x1, 0x2, {r5, r19, r20}}}], 0x20, 0x94}}, {{&(0x7f0000003880)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000003c80)=[{&(0x7f0000003900)="a62524c9eac2d8161520c1fb89ffdc7652b4b4dc16b3887bffa4244cc5ba56e99de2913420667e19ebe1bf1dd114a740a21f98b324f7f5fe193c5f23e7eb238490a363cdc58617b678792c1d703a0ad6f18978310b6534189294739564408f66a6f347a7de2bd289d1200502353f2999d25ece4f653df48fd50becae5a84be322aacef395479d79dfc9f26b36606982a918df35aca2d642fd83e9cb599163b973884a5e19a7e53e3a834c1eda30747c675", 0xb1}, {&(0x7f00000039c0)="8923f6c320d13d5b6495c4b229331ecfdac5d2c53499c96a47ac947afb38b7c536fb91", 0x23}, {&(0x7f0000003a00)="0263af4e86964c167f8f9baa161f8364ffc2332bb94a9a9693bfb969fac6c1b28238a79bcf541eae0e9aec1cd0a4c446e723da476bb7c749e8f20eba5f82b61d8dae243ebafa7508a032e957963512fd95fc734111160615fb42f73ea1f2c95d", 0x60}, {&(0x7f0000003a80)="0c93e3e8f5017ffedbf3b10d47043e6275141491d3e42d9aa92ddfe4ef1efb13e6362e55a45ac5dd8f8e3d1c490e0f1c80fd256e1e73d4ca764d73a216da4dffebc48b7c4efcde0e9f305fec30969c90f1948f5afb942b46f63069814517b91a75e10d3404ee3c018339fc2354e2a5688a2bef99bdb12fb5643ff32736f206ee9331cfffa5399a4a19518fe9a40e8757a62a16d221fa012e76dae2816c225c8dfae3c5afd30fb1171378fc16e143a39d05a1607bff470bf0a7a85113822aa1a663bf73c79be53f733c4151cd30ad54", 0xcf}, {&(0x7f0000003b80)="1ebf9e8074ba920158118e7a3eb9d7d7d43c860643fc8d2599947dfded8c33798c867d5ffa99b8ce220d7ba7d73e229b0a0c0a1c7d33d645eb415e3cf758a13f1ce034eae6004766e712b4fdd5807d26ba39b59dceef73bf4200a5eaa7faef5d88e30a807078660a8de14196d3c972699a080052943a488f39546133ac61a62b67ab140220d5039e4a9c4b547e88b4752432bdc959b15dada8e3ae6288f3254bd396ac35faa1359bcb9196ea47e6f7f1d1e3e064905a88ee11132c382846182d032ecdf49ed83fa8269ad653680b16d855c2c25b4e7a0514d682a71f896225247552a22d", 0xe4}], 0x5, 0x0, 0x0, 0x4010}}, {{&(0x7f0000003d00)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000003f40)=[{&(0x7f0000003d80)="e9c3530e51dd6e5b398c5736f1daf8c1ea", 0x11}, {&(0x7f0000003dc0)="0cf34c3c3e8dcd86fa96e0ac3c13c9c5a2060cfba5b0d752870c3edb03f86c35a1a0cad5e72e9c079dc497e39328f55dcbefced602d0ec2b2df9d7d71dec35ed0422a7ab894ef5765f8d540ee6b5ead390843d6ac70e9b1d8a773d0915da8970b003424ad3dc3a59978e3103b8f489145dac9400fcc9b4ab91a089b7f39dc806f817ea6303df3d919801a9766f2953a177f072128a2f73b815a0a606c7e31d60ef56b42e06a8fc9027ee7937130ba3a9522aab033e099e95573173e4599fa6335056eda145ab6f951b9a613afe4432597941", 0xd2}, {&(0x7f0000003ec0)="187866a41e58fe67e5c8369796509646c936b28778db5e61dbbd29da37e90988b4f8ea063192e3b814da262f4cde9cd1146fd9a2143686bccd1301a61ca46450b68ae4683d3a7eb2dd7445c5ea12fda24d01ebd5b2aee43ec36c33d0", 0x5c}], 0x3, &(0x7f0000004240)=[@rights={{0x24, 0x1, 0x1, [r0, r0, r0, r1, r0]}}, @cred={{0x1c, 0x1, 0x2, {r5, r21, r22}}}, @rights={{0x28, 0x1, 0x1, [r1, r1, r0, r1, r1, r23]}}, @rights={{0x2c, 0x1, 0x1, [r1, r1, r24, r1, r0, r0, r4]}}], 0xa0, 0x24020000}}], 0x6, 0x4000000)
lsetxattr$trusted_overlay_opaque(&(0x7f0000004480)='./file0\x00', &(0x7f00000044c0), &(0x7f0000004500), 0x2, 0x3)

1.103751964s ago: executing program 2 (id=375):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000deab44f4850000002d00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sys_enter\x00', r0}, 0x10)
futimesat(0xffffffffffffffff, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f00000006c0)='ext4\x00', &(0x7f0000000640)='./file2\x00', 0x3800008, &(0x7f0000000700)={[{@discard}, {@user_xattr}, {@data_journal}, {@resgid}, {@dax_inode}]}, 0x3f, 0x540, &(0x7f0000000100)="$eJzs3d9rZFcdAPDvvclks7upk6pILViLrewW3ZlNY9sgovVFnwpqfV9jMhvCzmSWzKRuQrEp/Q9EUPDJJ18E/wBB+uAfIIWCvogPoqKIbhURqr3l3rlDt/MjCd3JTDf5fODunHN/fc+5Q86ce+/ZewM4tx6PiOcjYi4inoqIajk/Lacbeeawt95bd1/eyKcksuzFfySRlPP6+8rz8xFxubdJLEbEt74e8d1kOG5n/+DWerPZ2C3z9W7rdr2zf3Btu7W+1dhq7Kyurjy79tzaM2vXs9J91XO5n/jZ1778q89/7483/nb1+3mxvvSJqMRAPSapV/VKcSz68mO0exrBZmCurE9l1gUBAOBE8j7+RyPiM0X/vxpzRW9uwNwsSgYAAABMSvaVpfhfEpEBAAAAZ1YaEUuRpLVyLMBSpOlCeW3g43EpbbY73c/dbO/tbObLIpajkt7cbjaul2OFl6OS5PmVcoxtP//0QH41Ih6OiB9WLxb52ka7uTnjax8AAABwXlweOP//dzUt0scr/p9AetrlAwAAACZkeWwGAAAAOCuc8gMAAMDZN3j+73n/AAAAcKZ844UX8inrv/9686X9vVvtl65tNjq3aq29jdpGe/d2bavd3iqe2dc6bn/Ndvv2F2Jn70692+h06539gxut9t5O98b2+16BDQAAAEzRw59+/XdJRBx+8WIxhYf6AaP8edYFACbpPof66SrAA2x+1gUAZqYy6wIAM5ccs9zgHQAAePBd+eTw/f/++/9dG4CzzQ08ADh/3P+H86syOALwP7MqCTBt8+U1gI/0shfGrTf2/v9vThopyyLeqN47x/VFAACYrqViStJaeR6wFGlaq0U8FJEuRyW5ud1sXC/PD35brVzI8yvFlsmxY4YBAAAAAAAAAAAAAAAAAAAAAAAAgJ4sSyIDAAAAzrSI9K/J21E8y/9K9cmlwesDC8l/q/GXMvOTF390Z73b3V3J5/+zeJfXQkR0f1zOf3rs68MAAACASUsOxy7qnaeXnytTLRUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA58Bbd1/e6E/TjPv3r0bE8qj487FYfC5GJSIu/SuJ+Xu2SyJibgLxD1+NiEdGxU/inSx7JcpSjIp/8ZTjLxeHZnT8NCIuTyA+nGev5+3P86P+/tJ4vPgc/fc3X073a3z7l5aRH4nqmPbnoaG9tUbGePTNX9R7qcpw/FcjHp0f3f70299kTPwnhvb2dpZlw/G/8+2Dg3H1z34acWXk70/yvlj1but2vbN/cG27tb7V2GrsrK6uPLv23Noza9frN7ebjfLfkTF+8KlfvjMufl7/SyPi/+H3vfb3qPo/OXKPw79K/3/zzt2P9ZJDX0Ae/+oTI39/F2NM/LSM8tkynS+/0k8f9tL3euznbzx2VP03xxz/477/q+N2OuCpb772pxOuCgBMQWf/4NZ6s9nYPSKxeIJ1jkjk/Yj72Px0EpVo7P56cebF+ACJ7JXeN/dhKc8HTeS91ffm9Gv1ISjYPYlsKrEuFP35k261MNnoAy3Aa2W7sN48SeuxcFrNEgAAcAre6/3PuiQAAAAAAAAAAAAAAAAAAABwfk3jUWqDMQ9nU1UAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgCO9GwAA///rlNhr")
r1 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904010001020d0000052406000105240000000d240f0100000000000000000006241a00000008241c00000008000905810300020000000904010000020d00000904010102020d0000090582020002000000090503"], 0x0)
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)
syz_open_dev$usbfs(&(0x7f0000000000), 0x3, 0x40)
syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f00000007c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x80, 0x1c, {0x0, 0x4000, 0xb, 0x0, 0x1, 0x4, 0x7, 0x40, 0x6, 0xe, 0x0, 0x1000}}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)

1.002621105s ago: executing program 3 (id=376):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge0\x00', <r4=>0x0})
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@ipv6_newrule={0x38, 0x20, 0x1, 0x70bd27, 0x0, {0xa, 0x0, 0x20, 0x40, 0xff, 0x0, 0x0, 0x7, 0x20002}, [@FIB_RULE_POLICY=@FRA_SUPPRESS_PREFIXLEN={0x8, 0xe, 0xe48}, @FRA_SRC={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x17}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24040804}, 0x0)
sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0)
sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@delneigh={0x28, 0x1d, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r4, 0x0, 0x96, 0x4}, [@NDA_LLADDR={0xa, 0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$SEG6_CMD_GET_TUNSRC(r7, &(0x7f0000000700)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000006c0)={&(0x7f0000000540)={0x30, 0x0, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @mcast2}, @SEG6_ATTR_ALGID={0x5, 0x6, 0xe}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000010}, 0x8044080)
r8 = socket(0x10, 0x803, 0x0)
getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r10 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0), 0x4)
signalfd4(r1, &(0x7f00000004c0)={[0x6]}, 0x8, 0x800)
r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, r10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94)
r12 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r12, 0x29, 0x2e, &(0x7f0000000340)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x6}}, {{0xa, 0xfffe, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x80000000}}}, 0x108)
setsockopt$inet6_group_source_req(r12, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0xa4ffffff, @rand_addr=' \x01\x00'}}}, 0x15a)
r13 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00')
preadv(r13, &(0x7f00000000c0)=[{&(0x7f0000000580)=""/128, 0x80}], 0x1, 0x12e, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r11}, 0x10)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0)

964.200146ms ago: executing program 3 (id=377):
syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f00000000c0), 0x2, 0xbd1, &(0x7f0000001340)="$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")
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async)
syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f00000002c0)='./bus\x00', 0x0, &(0x7f0000000300)={[{@utf8}, {@shortname_winnt}, {@shortname_win95}, {@iocharset={'iocharset', 0x3d, 'cp860'}}, {@shortname_win95}, {@numtail}, {@uni_xlate}, {@uni_xlate}, {@uni_xlate}, {@fat=@usefree}, {@numtail}, {@utf8no}, {@utf8no}]}, 0x1, 0x36a, &(0x7f00000007c0)="$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") (async)
socketpair$unix(0x1, 0x1, 0x0, 0x0) (async)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x4)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0xc0185879, &(0x7f0000000000)={@desc={0x1, 0x0, @auto="21000600"}}) (async)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file3\x00', 0x0, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) (async)
ioctl$FS_IOC_ENABLE_VERITY(r1, 0x40806685, &(0x7f0000000200)={0x1, 0x1, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
r2 = socket$nl_route(0x10, 0x3, 0x0) (async)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f00000000c0)='netlink_extack\x00', r3}, 0x10)
sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="200000006a000105fefdffffffdbdf25001700000000000008000a"], 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x20008000)

955.439075ms ago: executing program 4 (id=378):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="09000000070000000080000001"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0, <r1=>0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = syz_open_procfs(0x0, 0x0)
syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
write$binfmt_script(r6, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r6, 0x0)
read(0xffffffffffffffff, 0x0, 0x0)
r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b707000008000000850000006900000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x18)
prctl$PR_SET_NAME(0xf, 0x0)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000", @ANYRES16=r4, @ANYBLOB="796100000000fcffffff7e00"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x494)
r9 = socket$netlink(0x10, 0x3, 0x0)
r10 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_ADD_MFC(r10, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x809}, {0xa, 0x8, 0xfffffffe, @empty}, 0x2, {[0x0, 0x1, 0xfffffffe, 0xfff, 0x2, 0x4]}}, 0x5c)
setsockopt$MRT6_ADD_MFC(r10, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x0, {[0x1, 0x0, 0x0, 0x0, 0x9]}}, 0x5c)
setsockopt$MRT6_ADD_MFC(r10, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x0, 0x0, @remote, 0x6}, {0xa, 0x4e22, 0x0, @mcast1}, 0x0, {[0x4, 0x7fff, 0x0, 0x0, 0x3fd, 0x0, 0x58, 0x200]}}, 0x5c)
setsockopt$MRT6_ADD_MFC(r10, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private2}, {0xa, 0x0, 0x0, @empty}}, 0x5c)
setsockopt$MRT6_FLUSH(r10, 0x29, 0xd4, &(0x7f00000000c0)=0x7, 0x4)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sched_kthread_stop\x00', r2}, 0x10)
sendmsg$nl_route(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000010001fff000000000000000000060000", @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800e0001007769726567756172640000000400028008000a00b8"], 0x40}}, 0x0)

863.725517ms ago: executing program 3 (id=379):
syz_emit_ethernet(0x3a, &(0x7f0000000580)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000008004dd4395ec1882502e0b195657fc909808617e83a45e271605900002c0000000000119078000000000000000000004e64248b8b1464b73f9737a0543b5391c04c6b66845b4cdf66aa812e9482198b7b1114cf96e8cf7c9f13ab35cf4899a8cbe322df13481f7fd246640f0f2b9fa00545d92b27fff65d415d0bae9b2a69642799f5d9346f58bb9afb5c00196b4bc49beb3ab13349f3de6452fb598e7b6b32cbf2d559bd94c75e858a71b6534b0f7a64f53bcfef796090b9fd085da7afdc000000"], 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x20000845, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, 0x0, 0x0)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r5}, 0x10)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc00000019000100000000000000000000000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000007000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000001000000000000004400050020010000000000000000000000000000000000022b0000000a000000fc0118000000000000000000000000000000000004"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r7, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10)
setsockopt$sock_int(r7, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4)
connect$inet(r7, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10)
sendmmsg$inet(r7, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf1c)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r4}, &(0x7f0000000040), &(0x7f0000000080)=r5}, 0x20)
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x6001)
quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x3)
r8 = syz_io_uring_setup(0x82e, &(0x7f0000000500), &(0x7f0000000100), &(0x7f0000000080))
io_uring_register$IORING_REGISTER_PBUF_RING(r8, 0x16, &(0x7f0000000380)={&(0x7f000000b000)={[{0x0}]}, 0x1}, 0x1)

851.203907ms ago: executing program 4 (id=380):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000000000040de28421100000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0)
flock(r1, 0x5)
r2 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
syz_mount_image$exfat(&(0x7f0000001500), &(0x7f0000001540)='./file1\x00', 0x0, &(0x7f0000000100)=ANY=[], 0x1, 0x14fe, &(0x7f0000002ac0)="$eJzs3QuYjtX6MPB1r7UexjTxNslhWPe6H940WCZJckiSQ5IkSZJTQtIkSUJiyCkJSchxkhyGkBwmJo3z+ZBz0mRLkiSnnML6rqndtve//b/s/e39//y/Pffvutb1rvtaz72etd6beZ/nuebwQ9fhtZrUrt6IiMS/BH57SRFCxAghBgkh8gkhAiFE+fjy8dnjeRSk/GsnYf9ej6Zd6xWwa4nrn7Nx/XM2rn/OxvXP2bj+ORvXP2fj+udsXH/GcrKtMwvfwC3ntn/9+X/Mby/8/P//Q/z5n7Nx/f/TnM7zzxzN9f9Pctl7/89lcP1zNq5/zsb1z9m4/jkb1z9n4/ozlpNd6+fP3K5tu9b//hhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOM5Qzn/BVaCPF7/1qvizHGGGOMMcYYY/8+Pve1XgFjjDHGGGOMMcb+54GQQgktApFL5BYxIo+IFdeJOHG9yCvyiYi4QcSLG0V+cZMoIAqKQqKwSBBFRFFhBAorSISimCguouJmUULcIhJFSVFKlBZOlBFJ4lZRVtwmyonbRXlxh6gg7hQVRSVRWVQRd4mq4m5RTdwjqot7RQ1RU9QStcV9oo64X9QVD4h64kFRXzwkGoiHRUPxiGgkHhWNxWOiiXhcNBVPiGaiuWghWopW/1f5r4ie4lXRS/QWKaKP6CteE/1EfzFADBSDxOtisHhDDBFviqFimBgu3hIjxNtipHhHjBKjxRjxrhgrxonxYoKYKCaJVPGemCzeF1PEB2KqmCamixkiTcwUs8SHYraYI+aKj8Q88bGYLxaIhWKRSBefiMViicgQn4ql4jORKZaJ5WKFWClWidVijVgr1on1YoPYKDaJzWKL2Co+F9vEdrFD7BS7xG6xR3wh9oovxT7xlcgSX/+T+Wf/S343ECBAggQNGnJBLoiBGIiFWIiDOMgLeSECEYiHeMgP+aEAFIBCUAgSIAGKQlFAQCAgKAbFIApRKAElIBESoRSUAgcOkiAJysJtUA7KQXkoDxWgAlSESlAJqkAVqApVoRpUg+pQHWpADagFteA+uA/uh7pQF+pBPagP9aEBNICG0BAaQSNoDI2hCTSBptAUmkEzaAEtoBW0gtbQGtpAG2gH7aA9tIcO0AGSIRk6QkfoBJ2gM3SGLtAFukJX6AbdoTu8Aq/Aq/Aq9IYasg/0hb7QD/rBABgIA+F1GAxvwBvwJgyFYTAc3oK34G0YCWdgFIyGMTAGqspxMB4mAMlJkAqpMBkmwxSYAlNhGkyDGZAGM2EWzILZMAfmwEcwDz6Gj2EBLIBFkA7psBiWQAZkwFI4C5mwDJbDClgJq2AlrIG1sAbWwwZYD5tgE2yBLfA5fA7bYTvshJ2wG3bDF/AFfAlfwlDIgizYD/vhAByAg3AQDsEhOAyH4QgcgaNwFI7BMTgOJ+AknIDTcBrOwFk4B+fgAlyAi3ARLsPl7P/8MpuWWuaSuWSMjJGxMlbGyTiZV+aVERmR8TJe5pf5ZQFZQBaShWSCTJBFZVGJEiXJUBaTxWRURmUJWUImykRZSpaSTjqZJJNkWVlWlpPlZHl5h6wg75QVZSXZ1lWRVWRV2c5Vk/fI6rK6rCFrylqytqwt68g6sq6sK+vJerK+rC8byIdlQ9kHBsCjMrsyTeQwaCqHQzPZXLaQLeXb8KRsLUdCG9lWtpNPy9EwCjrI1i5ZPic7yvHQSb4gJ8CLsoucBF3ly7Kb7C57yFdkT9nG9ZK95VToI/vKGdBP9pcD5EA5G2rK7IrVkm/KoXKYHC7fkovgbTlSviNHydFyjHxXjpXj5Hg5QU6Uk2SqfE9Olu/LKfIDOVVOk9PlDJkmZ8pZ8kM5W86Rc+VHcp78WM6XC+RCuUimy0/kYrlEZshP5VL5mcyUy+RyuUKulKvkarlGrpXr5Hq5QW6Um+RmuUVulZ/LbXK73CF3yl1yt9wjv5B75Zdyn/xKZsmv5X75J3lAfiMPym/lIfmdPCy/l0fkD/Ko/FEekz/J4/KEPClPydPyZ3lGnpXn5Hl5Qf4iL8pL8rL0UihQUimlVaByqdwqRuVRseo6FaeuV3lVPhVRN6h4daPKr25SBVRBVUgVVgmqiCqqjEJlFalQFVPFVVTdrEqoW1SiKqlKqdLKqTIqSd2qyqrbVDl1uyqv7lAV1J2qoqqkKqsq6i5VVd2tqql7VHV1r6qhaqpaqra6T9VR96u66gFVTz2o6quHVAP1sGqoHlGN1KOqsXpMNVGPq6bqCdVMNVctVEvVSj2pWqunVBvVVrVTT6v26hnVQT2rktVzqqN6XnVSL6jO6kXVRb2kuqqXVTfVXfVQl9Rl5VUv1VulqD6qr3pN9VP91QA1UA1Sr6vB6g01RL2phqpharh6S41Qb6uR6h01So1WY9S7aqwap8arCWqimqRS1XtqsnpfTVEfqKlqmpquZqg0NVMN+PNMc/+B/Pf/Tv6QX8++RW1Vn6ttarvaoXaqXWq32qP2qL1qr9qn9qkslaX2q/3qgDqgDqqD6pA6pA6rw+qIOqKOqqPqmDqmjqsT6rw6pU6rn9UZdVadVefVBXVBXfzzeyA0aKmV1jrQuXRuHaPz6Fh9nY7T1+u8Op+O6Bt0vL5R59c36QK6oC6kC+sEXUQX1Uajtpp0qIvp4jqqb9Yl9C06UZfUpXRp7XQZnaRv/Zfzr7a+VrqVbq1b6za6jW6n2+n2ur3uoDvoZJ2sO+qOupPupDvrzrqL7qK76q66m+6me+geuqfuqb0QIkWn6L76Nd1P99cD9EA9SL+uB+vBeogeoofqoXq4Hq5H6BF6pB6pR+lReoweo8fqsXq8Hq8n6ok6VafqyXqynqKn6Kl6qp6up+s0naZn6Vl6tp6t5+q5ep6ep+fr+XqhXqjTdbperBfrDJ2hl+qlOlMv08v0Cr1Cr9Kr9Bq9Rq/T6/QGvUFv0pt0pv79GzR36B16l96l9+g9eq/eq/fpfTpLZ+n9er8+oA/og/qgPqQP6cP6sD6ij+ij+qg+po/p4/q4PqlP6tP6tD6jz+hz+py+oC/oi/qivqwvZ1/2BTKQgQ50kCvIFcQEMUFsEBvEBXFB3iBvEAkiQXwQH+QPbgoKBAWDQkHhICEoEhQNTICBDSgIg2JB8SAa3ByUCG4JEoOSQamgdOCCMkFScGtQNrgtKBfcHpQP7ggqBHcGFYNKQeWgSnBXUDW4O6gW3BNUD+4NagQ1g1pB7eC+oE5wf1A3eCCoFzwY1A8eChoEDwcNg0eCRsGjQePgsaBJ8HjQNHgiaBY0D1oELYNW/9b5vT9T8CnXy/Q2KaaP6WteM/1MfzPADDSDzOtmsHnDDDFvmqFmmBlu3jIjzNtmpHnHjDKjzRjzrhlrxpnxZoKZaCaZVPOemWzeN1PMB2aqmWammxkmzcw0s8yHZraZY+aaj8w887GZbxaYhWaRSTefmMVmickwn5ql5jOTaZaZ5WaFWWlWmdVmjVlr1pn1ZoPZaDaZzWaL2Wo+N9vMdrPD7DS7zG6zx3xh9povzT7zlckyX5v95k/mgPnGHDTfmkPmO3PYfG+OmB/MUfOjOWZ+MsfNCXPSnDKnzc/mjDlrzpnz5oL5xVw0l8xl47Mv7rM/3lGjxlyYC2MwBmMxFuMwDvNiXoxgBOMxHvNjfiyABbAQFsIETMCiWBSzERIWw2IYxSiWwBKYiIlYCkuhQ4dJmIRlsSyWw3JYHstjBayAFbEiVsbs+5G78G68G+/Be/BevBdrYk2sjbWxDtbBulgX62E9rI/1sQE2wIbYEBthI2yMjbEJNsGm2BSbYTNsgS2wFbbC1tga22AbbIftsD22xw7YAZMxGTtiR+yEnbAzdsYu2AW7Ylfsht2wB/bAntgTe2EvTMEU7It9sR/2wwE4AAfhIByMg3EIDsGhOBSH43AcgSNwJI7EUTgax+C7OBbH4XicgBNxEqZiKk7GyTgFp+BUnIrTcTqmYRrOwlk4G2fjXJyL83Aezsf5uBAXYjqm42JcjBmYgUtxKWZiJi7H5bgSV+JqXI1rcS2ux/W4ETfiZtyMW3ErbsNtuAN34C7chXtwD+7FvbgP92EWZuF+3I8H8AAexIN4CA/hYTyMR/AIHsWjeAyP4XE8DifxJJ7G03gGz+A5PIcX8Be8iJfwMnqMsXlsrL3OxtnrbV6bz8bYPL2FEH+JC9nCNsEWsUWtsQVswb+J0VqbaEvaUra0dbaMTbK3/iGuaCvZyraKvctWtXfban+I69j7bV37gK1nH7S17X1/E9e3D9kG9nHb0D5hG9nmtrFtaZvYx21T+4RtZpvbFralbW+fsR3sszbZPmc72uf/EC+2S+xau86utxvsXvulPWfP2yP2B3vB/mJ72d52kH3dDrZv2CH2TTvUDvtDPMa+a8facXa8nWAn2kl/iKfbGTbNzrSz7Id2tp3zhzjdfmLn2Qw73y6wC+2iX+PsNWXYT+1S+5nNtMvscrvCrrSr7Gq75i9rXWE32c12i91jv7Db7Ha7w+60u+zuX+PsfeyzX9ks+7U9bL+3B+w39qA9ag/Z736Ns/d31P5oj9mf7HF7wp60p+xp+7M9Y8/+uv/svZ+yl+xl660gIEmKNAWUi3JTDOWhWLqO4uh6ykv5KEI3UDzdSPnpJipABakQFaYEKkJFyRCSJaKQilFxitLNVIJuoUQqSaWoNDkqQ0l0K5Wl26gc3U7l6Q6qQHdSRapElakK3UVV6W6qRvdQdbqXalBNqkW16T6qQ/dTXXqA6tGDVJ8eogb0MDWkR6gRPUqN6TFqQo9TU3qCmlFzakEtqRU9Sa3pKWpDbakdPU3t6RnqQM9SMj1HHel56kQvUGd6kbrQS9SVXqZu1J160CvUk16lXtSbUqgP9aXXqB/1pwE0kAbR6zSY3qAh9CYNpWE0nN6iEfQ2jaR3aBSNpjH0Lo2lcTSeJtBEmkSp9B5NpvdpCn1AU2kaTacZlEYzaRZ9SLNpDs2lj2gefUzzaQEtpEWUTp/QYlpCGfQpLaXPKJOW0XJaQStpFa2mNbSW1tF62kAbaRNtpi20lT6nbbSddtBO2kW7aQ99QXvpS9pHX1EWfU376U90gL6hg/QtHaLv6DB9T0foBzpKP9Ix+omO0wk6SafoNP1MZ+gsnaPzdIF+oYt0iS6TJxFCKEMV6jAIc4W5w5gwTxgbXhfGhdeHecN8YSS8IYwPbwzzhzeFBcKCYaGwcJgQFgmLhibE0IYUhmGxsHgYDW8OS4S3hIlhybBUWDp0YZkwKbw1LBveFpYLbw/Lh3eEFcI7w4phpbByWCW8K6wa3h1WC+8Jq4f3hjXCmmGtsHZ4X1gnvD+sGz4Q1gsfDMuFD4UNwofDhuEjYaPw0bBx+FjYJHw8bBo+ETYLm4ctwpZhq/DJsHX4VNgmbBu2C58O24fPhB3CZ8Pk8LmwY/j8VcdTwj5h3/C18LXQ+wfUwuiiaHr0k+ji6JJoRvTT6NLoZ9HM6LLo8uiK6Mroqujq6Jro2ui66ProhujG6Kbo5uiWqPe1cwsHTjrltAtcLpfbxbg8LtZd5+Lc9S6vy+ci7gYX7250+d1NroAr6Aq5wi7BFXFFnXHorCMXumKuuIu6m10Jd4tLdCVdKVfaOVfGJbmWrpVr5Vq7p1wb19a1c0+7p90z7hn3rHvWPec6uuddJ/eC6+xedF3cS+4l97Lr5rq7Hu4V19O96nq53i7Fpbi+rq/r5/q5AW6AG+QGucFusBvihrihbqgb7oa7EW6EG+lGulFulBvjxrixbqwb78a7iW6iS3WpbrKb7Ka4KW6qm+qmu+kuzaW5WW6Wm+1mu7lurpvn5rn5br5b6Ba6dJfuFrvFLsNluKVuqct0mW65W+5WupVutVvt1rq1br1b7za6jW6z2+y2uq1um9vmdrgdbpfb5fa4PW6v2+v2uX0uy2W5/W6/O+AOuIPuW3fIfecOu+/dEfeDO+p+dMfcT+64O+FOulPutPvZnXFn3Tl33l1wv7iL7pK77LxLjbwXmRx5PzIl8kFkamRaZHpkRiQtMjMyK/JhZHZkTmRu5KPIvMjHkfmRBZGFkUWR9MgnkcWRJZGMyKeRpZHPIpmRZZHlkRWRlZFVEe+LbAt9MV/cR/3NvoS/xSf6kr6UL+2dL+OT/K2+rL/Nl/O3+/L+Dl/B3+kr+kq+sn/CN/PNfQvf0rfyT/rW/infxrf17fzTvr1/xnfwz/pk/5zv6J/3nfwLvrN/0XfxL/mu/mXfzXf3Pfwrvqd/1ffyvX2K7+P7+td8P9/fD/AD/SD/uh/s3/BD/Jt+qB/mh/u3/Aj/th/p3/Gj/Gg/xr/rx/pxfryf4Cf6ST7Vv+cn+/f9FP+Bn+qn+el+hk/zM/0s/6Gf7ef4uf4jP89/7Of7BX6hX+TT/Sd+sV/iM/ynfqn/zGf6ZX65X+FX+lV+tV/j1/p1fr3f4Df6TX6z3+K3+s/9Nr/d7/A7/S6/2+/xX/i9/ku/z3/ls/zXfr//kz/gv/EH/bf+kP/OH/bf+yP+B3/U/+iP+Z/8cX/Cn/Sn/Gn/sz/jz/pz/ry/4H/xF/0lf5l/Zo0xxhhj7B+irjLe57/JkX/u9xVCXL+98KH/Or6xwG/9/rkT2keEEM/17vro761GjZSUlD8fm6lEUHyBECJyJT+XuBIvE+3EMyJZtBVl/zIe81fn6i+7X6CrzB+9Q4jYv8rJzv89vjL/bX93//3luHlXnX+BEInFr+TkEVfiK/OX+2/mL9j6KvPn+SZViDZ/lRMnrsRX5k8ST4nnRfLfHMkYY4wxxhhjjP2mv6zc+Wr3t9n35wn6Sk5ucSX+e/fnjDHGGGOMMcYY+9/lxe49nn0yObltZ+78T3V8vt/e6v8t6+EOd/6BzrX+ysQYY4wxxhj7d7ty0X+tV8IYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjOVc/y9+ndjv57ra3xpkjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHG/lP9nwAAAP//sjE7Eg==")
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x103042, 0x0)
ioctl$FS_IOC_ENABLE_VERITY(r3, 0x8004587d, &(0x7f000001ff40)={0x2, 0x2, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0})
r4 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
fsync(r4)
r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0)
flock(r5, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x18, 0x10, &(0x7f0000000a00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x40000ff}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffff7fc}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000780)='GPL\x00', 0xa, 0x32, &(0x7f00000007c0)=""/50, 0x1e00, 0x7c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000800)={0x1, 0x8, 0x7, 0x3}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000840)=[0x1, 0x1], &(0x7f0000000880)=[{0x0, 0x1, 0xa, 0x6}, {0x1, 0x1, 0x8, 0xb}, {0x4, 0x1, 0xc, 0xa}, {0x1, 0x3, 0x8000000a, 0x1}, {0x3, 0x4}], 0x10, 0x3d1}, 0x94)
syz_open_dev$vcsa(&(0x7f0000000740), 0x4, 0x40400)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000009c0)={&(0x7f00000006c0)='signal_deliver\x00', r6, 0x0, 0x2}, 0x18)
syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, &(0x7f0000000e80)=ANY=[@ANYBLOB="000005"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, &(0x7f0000000180)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="203138000000380536b2b3700f8ee536c53fb1bf050ba90c038602d8754e79a84b997efaed7aae4de6724756bcff4b7376e696e47821fa158d7b931de394"], &(0x7f0000000b40)=ANY=[@ANYBLOB="00ea45332975c9f6a0f5d040e82e0301fc580403e0e48badac3e"], &(0x7f0000000a80)=ANY=[@ANYBLOB="000f347dbcbfbf6e4d050000009162000000050f620005061002128c04003e100a35603d88bcc44e6544f831b395dc5243894b797752ed6854248d03ca71ef1345a1e5bf0df199c305b50e33aaae44d1483b063e5b6de3e44600dde76c81890e50d9a89716ef69d98334c1a507100202e6915c0a10030208000fe4070007100202b58900"], &(0x7f0000000100)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x80, 0x6, 0x5, "2b1ddfaa", "46725ab0"}}, &(0x7f0000000140)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xa, 0x3, 0x0, 0x80, 0x1, 0xfff0, 0x7}}}, &(0x7f0000000600)={0x84, &(0x7f00000001c0)={0x0, 0x14, 0x4a, "2e04bf338de144bd3e26f32b7e88d0b7cda9bd275ea8d7fdf41e97dfa7a98afada01f61b5b12189be813148e4b43299ee221003af56e323d6e46ba509f162460e3d64bd1f204589b7ee1"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x5}, &(0x7f00000002c0)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f0000000300)=ANY=[@ANYBLOB="2000080000713f6140a904710000"], &(0x7f0000000340)={0x40, 0x7, 0x2, 0x3f31}, &(0x7f0000000380)={0x40, 0x9, 0x1, 0xb}, &(0x7f00000003c0)={0x40, 0xb, 0x2, "a585"}, &(0x7f0000000400)={0x40, 0xf, 0x2, 0x6d0}, &(0x7f0000000440)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000480)={0x40, 0x17, 0x6, @local}, &(0x7f00000004c0)={0x40, 0x19, 0x2, "c8fa"}, &(0x7f0000000500)={0x40, 0x1a, 0x2}, &(0x7f0000000540)={0x40, 0x1c, 0x1, 0x7}, &(0x7f0000000580)={0x40, 0x1e, 0x1, 0x98}, &(0x7f00000005c0)={0x40, 0x21, 0x1, 0x3}})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000700)={0x5, &(0x7f0000000080)=[{0x7, 0x81, 0x7f, 0x14}, {0x0, 0x2, 0x0, 0x6}, {0x1000, 0x0, 0x9, 0xffffffff}, {0xfffb, 0x9, 0x7f, 0x298}, {0x216a, 0x5, 0x4, 0x7554}]})

761.256098ms ago: executing program 0 (id=381):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
getpid() (async)
r0 = getpid()
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='leases_conflict\x00', r2}, 0x10)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) (async)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0)
fcntl$setlease(r3, 0x400, 0x0) (async)
fcntl$setlease(r3, 0x400, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000340)='leases_conflict\x00', r4}, 0x18)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) (async)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000007000000020000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000faffffff7b8af8ff00000000ae6200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095000000000000001cd8c0fff68dd59ee744ed36ec00e1d14002383cf455af02c8bd06db0049e2de44804df66b44c1ce4b119266aec1911fc5cbb737c86af5769e3056f3bcabf103042265894b0deb83343ffee511e7987db7100e39df58b7fe760c6aa1a2fef758cde666a7ac1de67c73c9a610d66df0e0b3033f060b7b33f9b258d9b5c677aae47a55bd4840745726090d0b46535c80eaf3414082f34f8b6a899e8c19e3feb23525b90e4c25dcea"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00'}, 0x10)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r8}, 0x10) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r8}, 0x10)
syz_open_procfs$namespace(0x0, 0xfffffffffffffffe)
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x8000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r9}, 0x18)
r10 = socket(0x1, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1e000000fdffffff070000000900000040180000", @ANYRES32, @ANYBLOB="fdffff010000000100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000003000000020000000f00"/28], 0x50) (async)
r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1e000000fdffffff070000000900000040180000", @ANYRES32, @ANYBLOB="fdffff010000000100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000003000000020000000f00"/28], 0x50)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r11, &(0x7f0000000600), &(0x7f0000001380)=@udp=r10}, 0x20)

459.793353ms ago: executing program 0 (id=382):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1d, 0x4, 0x2, 0x0, 0x201}, 0x48)
bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x2, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e22, @broadcast}, 0x10)

458.199123ms ago: executing program 0 (id=383):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x2fe3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f0000000480), 0x400034f, 0x2, 0x0)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
openat$zero(0xffffffffffffff9c, 0x0, 0x121000, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d)
openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040), 0x40200, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000004380)=@newtaction={0x48, 0x30, 0xffff, 0x0, 0x0, {}, [{0x34, 0x1, [@m_police={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4, 0x2, 0x0, 0x1, [[]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0)
syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3008080, &(0x7f0000000100)={[{@block_validity}, {@auto_da_alloc}, {@usrquota}]}, 0x5, 0x4df, &(0x7f0000000c40)="$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")
bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x9, 0x3, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0xbb, 0x54}}, &(0x7f0000281ffc)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x48)

0s ago: executing program 3 (id=384):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
open_tree(0xffffffffffffffff, 0x0, 0x0)
getdents64(0xffffffffffffffff, &(0x7f0000001280)=""/4089, 0xff9)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r6 = syz_open_procfs(0x0, &(0x7f0000000440)='net/route\x00')
preadv(r6, &(0x7f00000001c0)=[{&(0x7f0000002380)=""/169, 0xa9}], 0x1, 0x80, 0x1)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)={0x2c, r1, 0x205, 0x800000, 0x25dfdbfd, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008040}, 0x48810)
syz_emit_ethernet(0x66, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa7e415aedf6b3810038000800450000540000000000019078ac1e0001ac1414aa03009078030000004e0c00010000000000290000000000000020000089030886210000000200120001632a3a835e9504005d8b0000000000094ef661e96b4014"], 0x0)

kernel console output (not intermixed with test programs):

70] syz.4.14 (370) used greatest stack depth: 22144 bytes left
[   34.712881][  T401] loop1: detected capacity change from 0 to 256
[   34.755345][  T398] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   34.794367][  T398] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   34.816200][  T398] EXT4-fs (loop2): 1 truncate cleaned up
[   34.821891][  T398] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[   34.845369][  T401] FAT-fs (loop1): Unrecognized mount option "shor�name=mixed" or missing value
[   34.916545][  T287] EXT4-fs (loop2): unmounting filesystem.
[   34.961437][  T413] loop2: detected capacity change from 0 to 256
[   34.987982][  T413] FAT-fs (loop2): Unrecognized mount option "shor�name=mixed" or missing value
[   37.892659][   T28] kauditd_printk_skb: 8 callbacks suppressed
[   37.945403][   T28] audit: type=1400 audit(1752432505.410:161): avc:  denied  { sqpoll } for  pid=418 comm="syz.3.26" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[   38.218593][   T28] audit: type=1400 audit(1752432507.440:162): avc:  denied  { read write } for  pid=434 comm="syz.1.30" name="vhost-vsock" dev="devtmpfs" ino=268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[   38.263428][   T28] audit: type=1400 audit(1752432507.470:163): avc:  denied  { open } for  pid=434 comm="syz.1.30" path="/dev/vhost-vsock" dev="devtmpfs" ino=268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[   38.289281][  T431] loop3: detected capacity change from 0 to 256
[   38.301685][   T28] audit: type=1400 audit(1752432507.470:164): avc:  denied  { read write } for  pid=434 comm="syz.1.30" name="raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   39.383696][  T448] sch_fq: defrate 4294967295 ignored.
[   39.773611][   T28] audit: type=1400 audit(1752432507.470:165): avc:  denied  { open } for  pid=434 comm="syz.1.30" path="/dev/raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   39.810093][   T28] audit: type=1400 audit(1752432507.470:166): avc:  denied  { ioctl } for  pid=434 comm="syz.1.30" path="/dev/raw-gadget" dev="devtmpfs" ino=258 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   39.835209][   T28] audit: type=1400 audit(1752432508.620:167): avc:  denied  { read } for  pid=441 comm="syz.4.31" name="ppp" dev="devtmpfs" ino=158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[   39.913117][  T454] loop3: detected capacity change from 0 to 256
[   39.920077][   T28] audit: type=1400 audit(1752432508.620:168): avc:  denied  { open } for  pid=441 comm="syz.4.31" path="/dev/ppp" dev="devtmpfs" ino=158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[   39.935922][  T454] FAT-fs (loop3): Unrecognized mount option "shor�name=mixed" or missing value
[   39.946115][  T455] netlink: 8 bytes leftover after parsing attributes in process `syz.0.33'.
[   39.985004][  T304] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   40.185075][  T450] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   40.374978][  T450] usb 5-1: Using ep0 maxpacket: 32
[   40.382629][  T450] usb 5-1: config 0 has an invalid interface number: 184 but max is 0
[   40.465026][  T304] usb 2-1: Using ep0 maxpacket: 8
[   40.470224][  T450] usb 5-1: config 0 has no interface number 0
[   40.476583][  T450] usb 5-1: config 0 interface 184 has no altsetting 0
[   40.477730][  T455] syz.0.33 (455) used greatest stack depth: 21248 bytes left
[   40.490073][  T450] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[   40.501261][  T450] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   40.501332][  T304] usb 2-1: too many endpoints for config 1 interface 0 altsetting 1: 255, using maximum allowed: 30
[   40.509619][  T450] usb 5-1: Product: syz
[   40.525008][  T450] usb 5-1: Manufacturer: syz
[   40.529693][  T450] usb 5-1: SerialNumber: syz
[   40.542823][  T450] usb 5-1: config 0 descriptor??
[   40.548297][  T304] usb 2-1: config 1 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   40.556848][  T450] smsc75xx v1.0.0
[   40.559506][  T304] usb 2-1: config 1 interface 0 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 32
[   40.573132][  T304] usb 2-1: config 1 interface 0 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8
[   40.583688][  T304] usb 2-1: config 1 interface 0 altsetting 1 has 3 endpoint descriptors, different from the interface descriptor's value: 255
[   40.598819][  T464] loop0: detected capacity change from 0 to 256
[   40.608771][  T464] FAT-fs (loop0): Unrecognized mount option "shor�name=mixed" or missing value
[   40.618062][  T304] usb 2-1: config 1 interface 0 has no altsetting 0
[   40.633478][  T304] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   40.651915][  T304] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[   40.668266][  T304] usb 2-1: SerialNumber: syz
[   40.682809][  T436] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[   40.692196][  T436] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[   40.760979][  T304] cdc_acm 2-1:1.0: Control and data interfaces are not separated!
[   41.132997][  T304] cdc_acm 2-1:1.0: ttyACM0: USB ACM device
[   41.141122][  T304] usb 2-1: USB disconnect, device number 2
[   41.427496][  T473] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[   41.450727][   T28] audit: type=1400 audit(1752432510.670:169): avc:  denied  { ioctl } for  pid=456 comm="syz.4.34" path="socket:[16239]" dev="sockfs" ino=16239 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   41.505209][   T28] audit: type=1400 audit(1752432510.710:170): avc:  denied  { read } for  pid=475 comm="syz.0.38" dev="nsfs" ino=4026532301 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[   41.535404][  T478] loop0: detected capacity change from 0 to 8192
[   41.943248][  T450] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): EEPROM read operation timeout
[   41.971848][  T483] input: syz0 as /devices/virtual/input/input4
[   42.137902][  T450] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[   42.157264][  T450] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71
[   42.177278][  T450] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset
[   42.200186][  T450] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71
[   42.219060][  T450] smsc75xx: probe of 5-1:0.184 failed with error -71
[   42.235790][  T450] usb 5-1: USB disconnect, device number 2
[   42.270551][  T487] loop1: detected capacity change from 0 to 40427
[   42.281004][  T487] F2FS-fs (loop1): Invalid log blocks per segment (83886089)
[   42.288884][  T487] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock
[   42.298611][  T487] F2FS-fs (loop1): invalid crc value
[   42.364803][  T487] F2FS-fs (loop1): Found nat_bits in checkpoint
[   42.426212][  T487] F2FS-fs (loop1): Start checkpoint disabled!
[   42.481521][  T487] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0
[   42.488915][  T487] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6
[   43.314677][   T28] kauditd_printk_skb: 15 callbacks suppressed
[   43.432519][  T492] loop2: detected capacity change from 0 to 256
[   43.439938][  T492] exfat: Deprecated parameter 'utf8'
[   43.445342][  T492] exfat: Deprecated parameter 'utf8'
[   43.450848][  T492] exfat: Deprecated parameter 'utf8'
[   43.495743][   T28] audit: type=1400 audit(1752432512.040:186): avc:  denied  { read write } for  pid=490 comm="syz.2.43" name="fuse" dev="devtmpfs" ino=93 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1
[   43.524073][  T492] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011f3f, chksum : 0x96b62a4c, utbl_chksum : 0xe619d30d)
[   43.615786][   T28] audit: type=1400 audit(1752432512.040:187): avc:  denied  { open } for  pid=490 comm="syz.2.43" path="/dev/fuse" dev="devtmpfs" ino=93 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1
[   43.639134][   T28] audit: type=1400 audit(1752432512.570:188): avc:  denied  { ioctl } for  pid=496 comm="syz.3.45" path="socket:[16451]" dev="sockfs" ino=16451 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   43.665261][   T28] audit: type=1400 audit(1752432512.650:189): avc:  denied  { create } for  pid=490 comm="syz.2.43" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:fusefs_t tclass=blk_file permissive=1
[   43.709250][   T28] audit: type=1400 audit(1752432512.770:190): avc:  denied  { write } for  pid=490 comm="syz.2.43" name="/" dev="loop2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   43.730972][   T28] audit: type=1400 audit(1752432512.770:191): avc:  denied  { remove_name } for  pid=490 comm="syz.2.43" name="file1" dev="loop2" ino=1048602 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   43.755008][   T28] audit: type=1400 audit(1752432512.770:192): avc:  denied  { unlink } for  pid=490 comm="syz.2.43" name="file1" dev="loop2" ino=1048602 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   43.777951][   T28] audit: type=1400 audit(1752432512.870:193): avc:  denied  { ioctl } for  pid=507 comm="syz.4.46" path="/dev/ppp" dev="devtmpfs" ino=158 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[   43.807022][   T28] audit: type=1400 audit(1752432513.030:194): avc:  denied  { unmount } for  pid=287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1
[   43.850766][   T28] audit: type=1400 audit(1752432513.070:195): avc:  denied  { write } for  pid=510 comm="syz.2.48" name="kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[   43.876082][   T39] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[   43.937956][  T514] loop2: detected capacity change from 0 to 256
[   43.944757][  T514] FAT-fs (loop2): Unrecognized mount option "shor�name=mixed" or missing value
[   43.954947][  T450] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   43.982046][  T517] loop0: detected capacity change from 0 to 512
[   43.997864][  T517] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[   44.010515][  T517] EXT4-fs (loop0): 1 truncate cleaned up
[   44.016532][  T517] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[   44.046463][  T283] EXT4-fs (loop0): unmounting filesystem.
[   44.066315][   T39] usb 2-1: config 1 has an invalid interface number: 2 but max is 1
[   44.075154][   T39] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   44.085608][   T39] usb 2-1: config 1 has 3 interfaces, different from the descriptor's value: 2
[   44.094732][   T39] usb 2-1: config 1 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   44.106206][   T39] usb 2-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[   44.120786][   T39] usb 2-1: config 1 interface 0 has no altsetting 0
[   44.133479][   T39] usb 2-1: config 1 interface 1 has no altsetting 0
[   44.147690][  T450] usb 4-1: config 254 has an invalid interface number: 204 but max is 2
[   44.192821][   T39] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   44.209644][  T450] usb 4-1: config 254 has an invalid descriptor of length 0, skipping remainder of the config
[   44.252521][   T39] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   44.307867][  T450] usb 4-1: config 254 has 1 interface, different from the descriptor's value: 3
[   44.337320][   T39] usb 2-1: Product: syz
[   44.359057][   T39] usb 2-1: Manufacturer: syz
[   44.366020][  T450] usb 4-1: config 254 has no interface number 0
[   44.372469][   T39] usb 2-1: SerialNumber: syz
[   44.377468][  T450] usb 4-1: config 254 interface 204 altsetting 64 has a duplicate endpoint with address 0xD, skipping
[   44.393468][  T450] usb 4-1: config 254 interface 204 altsetting 64 bulk endpoint 0x8 has invalid maxpacket 64
[   44.419324][  T450] usb 4-1: config 254 interface 204 altsetting 64 has 7 endpoint descriptors, different from the interface descriptor's value: 14
[   44.433187][  T450] usb 4-1: config 254 interface 204 has no altsetting 0
[   44.448836][  T450] usb 4-1: New USB device found, idVendor=19d2, idProduct=1108, bcdDevice=31.07
[   44.458027][  T450] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   44.466239][  T450] usb 4-1: Product: syz
[   44.470499][  T450] usb 4-1: Manufacturer: syz
[   44.475328][  T450] usb 4-1: SerialNumber: syz
[   44.484200][  T506] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[   44.502425][  T522] loop0: detected capacity change from 0 to 40427
[   44.509728][  T522] F2FS-fs (loop0): Invalid log blocks per segment (83886089)
[   44.517372][  T522] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock
[   44.526904][  T522] F2FS-fs (loop0): invalid crc value
[   44.546818][  T522] F2FS-fs (loop0): Found nat_bits in checkpoint
[   44.598084][  T522] F2FS-fs (loop0): Start checkpoint disabled!
[   44.606147][  T522] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0
[   44.613784][  T522] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6
[   45.135212][  T534] syz.4.53[534] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   45.135293][  T534] syz.4.53[534] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   45.647924][  T534] loop4: detected capacity change from 0 to 512
[   45.859808][  T534] netlink: 96 bytes leftover after parsing attributes in process `syz.4.53'.
[   46.198156][  T535] usb 2-1: USB disconnect, device number 3
[   46.212893][  T536] loop0: detected capacity change from 0 to 2048
[   46.270089][  T536] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[   46.342686][  T545] loop4: detected capacity change from 0 to 256
[   46.365929][  T545] FAT-fs (loop4): Unrecognized mount option "shor�name=mixed" or missing value
[   46.452644][  T312] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[   48.453189][  T283] EXT4-fs (loop0): unmounting filesystem.
[   48.523184][  T563] loop0: detected capacity change from 0 to 256
[   48.537634][  T563] FAT-fs (loop0): Unrecognized mount option "shor�name=mixed" or missing value
[   49.830773][  T580] loop0: detected capacity change from 0 to 512
[   49.845951][  T304] usb 4-1: USB disconnect, device number 2
[   49.905930][  T580] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[   49.918711][  T584] loop3: detected capacity change from 0 to 512
[   49.926165][  T584] EXT4-fs: Ignoring removed mblk_io_submit option
[   49.933090][  T584] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[   49.959848][  T584] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem
[   49.969129][  T580] EXT4-fs (loop0): 1 truncate cleaned up
[   49.974824][  T580] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[   50.035509][  T584] EXT4-fs (loop3): warning: checktime reached, running e2fsck is recommended
[   50.061311][  T283] EXT4-fs (loop0): unmounting filesystem.
[   50.067608][  T584] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a043c01c, mo2=0102]
[   50.182051][  T584] System zones: 0-2, 18-18, 34-34
[   50.209693][  T584] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1087: updating to rev 1 because of new feature flag, running e2fsck is recommended
[   50.224401][  T450] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[   50.254219][  T584] EXT4-fs (loop3): 1 truncate cleaned up
[   50.265091][  T584] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[   50.436069][  T450] usb 5-1: config 220 has an invalid interface number: 76 but max is 2
[   50.447125][  T450] usb 5-1: config 220 contains an unexpected descriptor of type 0x2, skipping
[   50.465732][  T450] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[   50.487022][  T450] usb 5-1: config 220 has no interface number 2
[   50.493359][  T450] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[   50.812725][  T597] loop0: detected capacity change from 0 to 256
[   50.824986][  T450] usb 5-1: config 220 interface 0 has no altsetting 0
[   50.844808][  T597] FAT-fs (loop0): Unrecognized mount option "shor�name=mixed" or missing value
[   50.855313][  T450] usb 5-1: config 220 interface 76 has no altsetting 0
[   50.901616][  T286] EXT4-fs (loop3): unmounting filesystem.
[   50.904139][  T450] usb 5-1: config 220 interface 1 has no altsetting 0
[   50.998400][  T450] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[   51.011888][  T450] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   51.023340][  T450] usb 5-1: Product: syz
[   51.031373][  T450] usb 5-1: Manufacturer: syz
[   51.039976][  T450] usb 5-1: SerialNumber: syz
[   51.286739][  T450] usb 5-1: selecting invalid altsetting 0
[   51.385538][  T450] usb 5-1: Found UVC 7.01 device syz (8086:0b07)
[   51.392163][  T450] usb 5-1: No valid video chain found.
[   51.417361][  T450] usb 5-1: USB disconnect, device number 3
[   51.474219][  T604] loop3: detected capacity change from 0 to 40427
[   51.481332][  T604] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[   51.489313][  T604] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[   51.498642][  T604] F2FS-fs (loop3): invalid crc value
[   51.506104][  T604] F2FS-fs (loop3): Found nat_bits in checkpoint
[   51.544527][  T604] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[   51.551836][  T604] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[   51.637410][   T28] kauditd_printk_skb: 8 callbacks suppressed
[   51.637447][   T28] audit: type=1400 audit(1752432520.840:204): avc:  denied  { read } for  pid=619 comm="syz.1.69" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[   51.671016][   T28] audit: type=1400 audit(1752432520.840:205): avc:  denied  { open } for  pid=619 comm="syz.1.69" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[   51.695493][   T28] audit: type=1400 audit(1752432520.840:206): avc:  denied  { ioctl } for  pid=619 comm="syz.1.69" path="/dev/binderfs/binder0" dev="binder" ino=13 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[   51.805294][  T628] loop1: detected capacity change from 0 to 256
[   51.815792][  T628] FAT-fs (loop1): Unrecognized mount option "shor�name=mixed" or missing value
[   52.003356][  T631] loop0: detected capacity change from 0 to 2048
[   52.672938][  T631] loop2: detected capacity change from 0 to 7
[   52.721685][   T28] audit: type=1400 audit(1752432521.940:207): avc:  denied  { ioctl } for  pid=642 comm="syz.3.77" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=16769 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[   52.798191][   T28] audit: type=1400 audit(1752432521.940:208): avc:  denied  { create } for  pid=642 comm="syz.3.77" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[   52.893734][   T28] audit: type=1400 audit(1752432521.940:209): avc:  denied  { write } for  pid=642 comm="syz.3.77" name="file0" dev="tmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[   52.916401][   T28] audit: type=1400 audit(1752432521.940:210): avc:  denied  { open } for  pid=642 comm="syz.3.77" path="/15/file0" dev="tmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[   52.955384][   T28] audit: type=1400 audit(1752432521.940:211): avc:  denied  { ioctl } for  pid=642 comm="syz.3.77" path="/15/file0" dev="tmpfs" ino=99 ioctlcmd=0x1260 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[   53.013099][   T28] audit: type=1400 audit(1752432522.220:212): avc:  denied  { ioctl } for  pid=650 comm="syz.2.80" path="socket:[16790]" dev="sockfs" ino=16790 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   53.181538][  T304] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   53.224342][  T643] syz.3.77 (643) used greatest stack depth: 20528 bytes left
[   53.231872][   T28] audit: type=1400 audit(1752432522.440:213): avc:  denied  { unlink } for  pid=286 comm="syz-executor" name="file0" dev="tmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[   53.243384][  T658] loop2: detected capacity change from 0 to 2048
[   53.300885][  T660] loop3: detected capacity change from 0 to 8192
[   53.310012][  T658] EXT4-fs (loop2): unable to read superblock
[   53.325935][  T660] =======================================================
[   53.325935][  T660] WARNING: The mand mount option has been deprecated and
[   53.325935][  T660]          and is ignored by this kernel. Remove the mand
[   53.325935][  T660]          option from the mount to silence this warning.
[   53.325935][  T660] =======================================================
[   53.361979][  T304] usb 1-1: device descriptor read/64, error -71
[   53.400947][  T662] loop2: detected capacity change from 0 to 512
[   53.435091][  T662] EXT4-fs error (device loop2): ext4_orphan_get:1426: comm syz.2.84: bad orphan inode 15
[   53.462152][  T662] ext4_test_bit(bit=14, block=18) = 1
[   53.468769][  T662] is_bad_inode(inode)=0
[   53.472960][  T662] NEXT_ORPHAN(inode)=1023
[   53.477850][  T662] max_ino=32
[   53.481077][  T662] i_nlink=0
[   53.484480][  T662] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2934: inode #15: comm syz.2.84: corrupted xattr block 19
[   53.497139][  T662] EXT4-fs warning (device loop2): ext4_evict_inode:299: xattr delete (err -117)
[   53.509386][  T662] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[   53.518421][  T662] ext4 filesystem being mounted at /19/�q�Y�3aK supports timestamps until 2038-01-19 (0x7fffffff)
[   53.544332][  T287] EXT4-fs (loop2): unmounting filesystem.
[   53.589690][  T674] loop2: detected capacity change from 0 to 1024
[   53.613238][  T674] EXT4-fs: Ignoring removed i_version option
[   53.619868][  T674] EXT4-fs (loop2): Test dummy encryption mode enabled
[   53.628969][  T674] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[   53.654966][  T304] usb 1-1: device descriptor read/64, error -71
[   53.672323][  T674] fscrypt: AES-256-XTS using blk-crypto-fallback
[   53.862851][  T689] syz.4.90 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[   54.024993][  T450] usb 3-1: new full-speed USB device number 2 using dummy_hcd
[   54.216929][  T450] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[   54.265783][  T450] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   54.323160][  T450] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[   54.376294][  T450] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   54.879976][  T450] usb 3-1: config 0 descriptor??
[   54.889601][  T450] hub 3-1:0.0: USB hub found
[   54.954908][    C0] sched: RT throttling activated
[   55.253889][  T450] hub 3-1:0.0: config failed, can't read hub descriptor (err -22)
[   55.311717][  T450] usbhid 3-1:0.0: can't add hid device: -71
[   55.335301][  T304] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[   55.348027][  T450] usbhid: probe of 3-1:0.0 failed with error -71
[   55.391501][  T697] loop1: detected capacity change from 0 to 8192
[   55.395557][  T450] usb 3-1: USB disconnect, device number 2
[   55.400738][  T694] cgroup: Unknown subsys name 'euid'
[   55.435564][  T697]  loop1: p1 p2 p4
[   55.439509][  T697] loop1: p1 size 65536 extends beyond EOD, truncated
[   55.447454][  T697] loop1: p2 start 861536256 is beyond EOD, truncated
[   55.455058][  T697] loop1: p4 size 65536 extends beyond EOD, truncated
[   55.466181][  T697] netlink: 8 bytes leftover after parsing attributes in process `syz.1.93'.
[   55.467125][  T103]  loop1: p1 p2 p4
[   55.475228][  T697] netlink: 8 bytes leftover after parsing attributes in process `syz.1.93'.
[   55.489771][  T103] loop1: p1 size 65536 extends beyond EOD, truncated
[   55.498518][  T103] loop1: p2 start 861536256 is beyond EOD, truncated
[   55.505335][  T304] usb 1-1: device descriptor read/64, error -71
[   55.512050][  T103] loop1: p4 size 65536 extends beyond EOD, truncated
[   55.532738][  T697] syz.1.93[697] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   55.532816][  T697] syz.1.93[697] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   55.537834][  T312] udevd[312]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory
[   55.564030][  T318] udevd[318]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory
[   55.579674][  T312] udevd[312]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory
[   55.579812][  T318] udevd[318]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory
[   56.578110][  T304] usb 1-1: device descriptor read/64, error -71
[   56.643791][  T287] EXT4-fs (loop2): unmounting filesystem.
[   56.677006][  T712] loop1: detected capacity change from 0 to 40427
[   56.734476][  T304] usb usb1-port1: attempt power cycle
[   56.742774][  T712] F2FS-fs (loop1): invalid crc value
[   56.744668][  T726] loop3: detected capacity change from 0 to 256
[   57.514612][  T712] F2FS-fs (loop1): Found nat_bits in checkpoint
[   57.638443][  T712] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4
[   57.646022][   T28] kauditd_printk_skb: 7 callbacks suppressed
[   57.646038][   T28] audit: type=1400 audit(1752432526.860:221): avc:  denied  { create } for  pid=741 comm="syz.3.104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[   57.718774][  T748] loop3: detected capacity change from 0 to 256
[   57.790054][  T748] FAT-fs (loop3): Directory bread(block 64) failed
[   57.840162][  T748] FAT-fs (loop3): Directory bread(block 65) failed
[   57.861129][  T748] FAT-fs (loop3): Directory bread(block 66) failed
[   57.881080][  T748] FAT-fs (loop3): Directory bread(block 67) failed
[   57.905704][  T748] FAT-fs (loop3): Directory bread(block 68) failed
[   57.922072][  T748] FAT-fs (loop3): Directory bread(block 69) failed
[   57.936378][  T748] FAT-fs (loop3): Directory bread(block 70) failed
[   57.951976][  T748] FAT-fs (loop3): Directory bread(block 71) failed
[   57.968864][  T748] FAT-fs (loop3): Directory bread(block 72) failed
[   57.983174][  T748] FAT-fs (loop3): Directory bread(block 73) failed
[   58.221167][  T760] loop4: detected capacity change from 0 to 512
[   58.229356][  T762] netlink: 8 bytes leftover after parsing attributes in process `syz.2.108'.
[   58.241106][  T760] EXT4-fs error (device loop4): ext4_orphan_get:1400: inode #15: comm syz.4.107: casefold flag without casefold feature
[   58.245172][  T304] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[   58.262998][  T284] syz-executor: attempt to access beyond end of device
[   58.262998][  T284] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[   58.283009][  T760] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.107: couldn't read orphan inode 15 (err -117)
[   58.295207][  T760] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[   58.305412][  T304] usb 1-1: Using ep0 maxpacket: 16
[   58.311779][  T304] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   58.353532][  T304] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   58.371021][  T285] EXT4-fs (loop4): unmounting filesystem.
[   58.392158][  T304] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[   58.426051][  T304] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[   58.435837][  T304] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   58.696275][  T304] usb 1-1: config 0 descriptor??
[   58.745013][  T535] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[   58.910583][  T304] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0001/input/input5
[   58.927539][  T304] microsoft 0003:045E:07DA.0001: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0
[   59.106796][  T304] usb 1-1: USB disconnect, device number 4
[   59.156083][  T535] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   59.178331][  T535] usb 4-1: New USB device found, idVendor=0566, idProduct=3004, bcdDevice= 0.00
[   59.184087][  T796] fido_id[796]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory
[   59.207407][  T535] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   59.216906][  T535] usb 4-1: config 0 descriptor??
[   59.666925][  T535] monterey 0003:0566:3004.0002: item fetching failed at offset 6/7
[   59.675138][  T535] monterey: probe of 0003:0566:3004.0002 failed with error -22
[   59.764116][   T28] audit: type=1400 audit(1752432528.980:222): avc:  denied  { create } for  pid=818 comm="syz.1.120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[   59.783655][  T821] loop1: detected capacity change from 0 to 1024
[   59.790996][  T821] EXT4-fs: Ignoring removed nomblk_io_submit option
[   59.797846][  T821] ext4: Unknown parameter 'fowner'
[   59.834666][  T312] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[   59.865813][  T304] usb 4-1: USB disconnect, device number 3
[   59.918085][   T28] audit: type=1400 audit(1752432529.140:223): avc:  denied  { wake_alarm } for  pid=826 comm="syz.1.122" capability=35  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[   59.943259][  T827] Zero length message leads to an empty skb
[   60.184717][  T832] loop1: detected capacity change from 0 to 2048
[   60.245624][   T28] audit: type=1400 audit(1752432529.470:224): avc:  denied  { setopt } for  pid=838 comm="syz.2.125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   60.278077][  T832] Alternate GPT is invalid, using primary GPT.
[   60.297038][  T832]  loop1: p1 p2 p3
[   60.303307][   T28] audit: type=1400 audit(1752432529.490:225): avc:  denied  { accept } for  pid=838 comm="syz.2.125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   60.473473][  T845] sch_tbf: burst 25 is lower than device ip6gre0 mtu (1448) !
[   60.925694][  T304] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[   61.046167][   T28] audit: type=1326 audit(1752432530.270:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=855 comm="syz.0.129" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe87578e929 code=0x0
[   61.106427][  T304] usb 5-1: unable to get BOS descriptor or descriptor too short
[   61.118228][  T304] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 129, changing to 11
[   61.137842][  T304] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16
[   61.156746][  T304] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1023
[   61.177227][  T304] usb 5-1: language id specifier not provided by device, defaulting to English
[   61.196164][  T304] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   61.214984][  T304] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   61.231966][  T304] usb 5-1: Product: syz
[   61.241706][  T304] usb 5-1: Manufacturer: 񰄉
[   61.250917][  T304] usb 5-1: SerialNumber: syz
[   61.324279][  T862] loop1: detected capacity change from 0 to 512
[   61.387150][  T862] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2
[   61.398411][  T862] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2
[   61.407502][  T862] EXT4-fs (loop1): 1 truncate cleaned up
[   61.413364][  T862] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[   61.452379][   T28] audit: type=1400 audit(1752432530.670:227): avc:  denied  { bind } for  pid=861 comm="syz.1.131" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[   61.476675][  T304] cdc_ncm 5-1:1.0: bind() failure
[   61.483872][  T304] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found
[   61.490806][  T304] cdc_ncm 5-1:1.1: bind() failure
[   61.500331][  T304] usb 5-1: USB disconnect, device number 4
[   61.507901][   T28] audit: type=1400 audit(1752432530.740:228): avc:  denied  { relabelfrom } for  pid=861 comm="syz.1.131" name="NETLINK" dev="sockfs" ino=17116 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   61.536189][   T28] audit: type=1400 audit(1752432530.740:229): avc:  denied  { relabelto } for  pid=861 comm="syz.1.131" name="NETLINK" dev="sockfs" ino=17116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=netlink_netfilter_socket permissive=1
[   61.561450][   T28] audit: type=1400 audit(1752432530.740:230): avc:  denied  { ioctl } for  pid=861 comm="syz.1.131" path="socket:[17116]" dev="sockfs" ino=17116 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=sock_file permissive=1
[   61.591950][  T875] loop3: detected capacity change from 0 to 128
[   61.615280][  T875] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[   61.625111][  T875] ext4 filesystem being mounted at /29/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   62.011097][  T882] device ip6_vti0 entered promiscuous mode
[   62.039159][  T882] device ip6_vti0 left promiscuous mode
[   62.174583][  T284] EXT4-fs (loop1): unmounting filesystem.
[   62.250964][  T895] loop4: detected capacity change from 0 to 256
[   62.280915][  T895] FAT-fs (loop4): Unrecognized mount option "shor�name=mixed" or missing value
[   62.423303][  T897] loop1: detected capacity change from 0 to 512
[   62.437909][  T897] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   62.462522][  T897] EXT4-fs (loop1): orphan cleanup on readonly fs
[   62.472584][  T897] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.138: bg 0: block 248: padding at end of block bitmap is not set
[   62.489953][  T897] EXT4-fs error (device loop1): ext4_acquire_dquot:6801: comm syz.1.138: Failed to acquire dquot type 1
[   62.504614][  T897] EXT4-fs (loop1): 1 truncate cleaned up
[   62.511884][  T897] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[   63.794940][  T718] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[   63.909445][  T311] usb 1-1: new full-speed USB device number 5 using dummy_hcd
[   63.917554][  T284] EXT4-fs (loop1): unmounting filesystem.
[   63.984953][  T718] usb 3-1: Using ep0 maxpacket: 32
[   63.991521][  T718] usb 3-1: config 0 has an invalid interface number: 184 but max is 0
[   64.018225][  T718] usb 3-1: config 0 has no interface number 0
[   64.034667][  T718] usb 3-1: config 0 interface 184 has no altsetting 0
[   64.056374][  T718] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[   64.082225][  T718] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   64.103357][  T718] usb 3-1: Product: syz
[   64.114186][  T718] usb 3-1: Manufacturer: syz
[   64.116089][  T311] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[   64.124423][  T718] usb 3-1: SerialNumber: syz
[   64.134038][  T311] usb 1-1: New USB device found, idVendor=1e71, idProduct=2019, bcdDevice= 0.00
[   64.159376][  T718] usb 3-1: config 0 descriptor??
[   64.164429][  T311] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   64.166773][  T718] smsc75xx v1.0.0
[   64.182153][  T311] usb 1-1: config 0 descriptor??
[   64.192219][  T311] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[   64.233129][  T286] EXT4-fs (loop3): unmounting filesystem.
[   64.359715][  T917] mmap: syz.4.144 (917) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[   64.490414][  T924] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[   64.542726][  T929] loop4: detected capacity change from 0 to 256
[   64.567189][  T929] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d)
[   64.624586][   T28] kauditd_printk_skb: 2 callbacks suppressed
[   64.624601][   T28] audit: type=1400 audit(1752432533.840:231): avc:  denied  { add_name } for  pid=928 comm="syz.4.148" name="memory.stat" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   64.672146][   T28] audit: type=1400 audit(1752432533.840:232): avc:  denied  { associate } for  pid=928 comm="syz.4.148" name="memory.stat" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[   64.699934][   T28] audit: type=1400 audit(1752432533.870:233): avc:  denied  { read append open } for  pid=928 comm="syz.4.148" path="/29/file0/memory.stat" dev="loop4" ino=1048607 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   64.732509][  T933] futex_wake_op: syz.4.149 tries to shift op by 32; fix this program
[   64.804747][   T28] audit: type=1400 audit(1752432534.020:234): avc:  denied  { validate_trans } for  pid=931 comm="syz.4.149" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1
[   65.068640][  T718] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000040: -71
[   65.091036][  T718] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error writing E2P_CMD
[   65.112418][  T718] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[   65.134658][  T718] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71
[   65.156572][  T718] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset
[   65.177094][  T718] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71
[   65.197001][  T718] smsc75xx: probe of 3-1:0.184 failed with error -71
[   65.206283][  T939] loop1: detected capacity change from 0 to 40427
[   65.228979][  T718] usb 3-1: USB disconnect, device number 3
[   65.237548][  T939] F2FS-fs (loop1): Insane cp_payload (553648128 >= 504)
[   65.253868][  T939] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[   65.263059][  T939] F2FS-fs (loop1): fault_type options not supported
[   65.284330][  T939] F2FS-fs (loop1): invalid crc value
[   65.306322][  T939] F2FS-fs (loop1): Found nat_bits in checkpoint
[   65.362731][  T939] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[   65.370984][  T939] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[   65.461015][   T28] audit: type=1400 audit(1752432534.680:235): avc:  denied  { ioctl } for  pid=938 comm="syz.1.150" path="/30/bus/memory.numa_stat" dev="loop1" ino=10 ioctlcmd=0x587d scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   65.498912][  T956] loop3: detected capacity change from 0 to 256
[   65.512480][   T28] audit: type=1400 audit(1752432534.730:236): avc:  denied  { remount } for  pid=938 comm="syz.1.150" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[   65.513700][   T43] kworker/u4:2: attempt to access beyond end of device
[   65.513700][   T43] loop1: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[   65.546367][  T956] FAT-fs (loop3): Unrecognized mount option "shor�name=mixed" or missing value
[   65.555816][  T939] VFS:Filesystem freeze failed
[   65.560749][  T957] F2FS-fs (loop1): fault_type options not supported
[   66.455070][   T28] audit: type=1400 audit(1752432535.570:237): avc:  denied  { bind } for  pid=960 comm="syz.4.152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   66.489079][  T304] usb 1-1: USB disconnect, device number 5
[   66.768935][   T28] audit: type=1400 audit(1752432535.610:238): avc:  denied  { read } for  pid=960 comm="syz.4.152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   66.885358][  T718] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[   66.921344][  T984] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[   67.044979][  T718] usb 3-1: device descriptor read/64, error -71
[   67.091524][  T995] loop1: detected capacity change from 0 to 256
[   67.116466][  T995] FAT-fs (loop1): Unrecognized mount option "shor�name=mixed" or missing value
[   67.138875][  T997] loop4: detected capacity change from 0 to 512
[   67.290843][  T997] Quota error (device loop4): find_tree_dqentry: Cycle in quota tree detected: block 3 index 0
[   67.301576][  T997] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0
[   67.311335][  T997] EXT4-fs error (device loop4): ext4_acquire_dquot:6801: comm syz.4.162: Failed to acquire dquot type 1
[   67.331153][  T997] EXT4-fs (loop4): 1 truncate cleaned up
[   67.338440][  T997] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[   67.349890][  T997] ext4 filesystem being mounted at /34/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   67.636247][  T718] usb 3-1: device descriptor read/64, error -71
[   68.717565][ T1002] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 248: padding at end of block bitmap is not set
[   68.776837][ T1015] netlink: 16 bytes leftover after parsing attributes in process `syz.0.164'.
[   68.914030][ T1020] loop0: detected capacity change from 0 to 256
[   68.933571][ T1020] FAT-fs (loop0): Unrecognized mount option "shor�name=mixed" or missing value
[   69.035000][  T311] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[   69.926160][ T1024] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=1556 sclass=netlink_xfrm_socket pid=1024 comm=syz.0.167
[   70.046921][  T311] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   70.125396][  T285] EXT4-fs (loop4): unmounting filesystem.
[   70.138427][ T1028] SELinux:  Context system_u:object_r:mouse_device_t:s0 is not valid (left unmapped).
[   70.142232][  T311] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   70.166272][   T28] kauditd_printk_skb: 4 callbacks suppressed
[   70.207795][   T28] audit: type=1400 audit(1752432539.390:243): avc:  denied  { relabelto } for  pid=1027 comm="syz.0.170" name="NETLINK" dev="sockfs" ino=19564 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=netlink_netfilter_socket permissive=1 trawcon="system_u:object_r:mouse_device_t:s0"
[   70.264958][  T311] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[   70.274051][  T311] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   70.296051][  T311] usb 2-1: config 0 descriptor??
[   70.514956][  T304] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[   70.704965][  T304] usb 5-1: Using ep0 maxpacket: 32
[   70.711454][  T304] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   70.733528][  T304] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   70.761368][  T304] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[   70.773244][  T304] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   70.788226][  T304] usb 5-1: config 0 descriptor??
[   70.801807][  T304] hub 5-1:0.0: USB hub found
[   70.833562][ T1040] loop2: detected capacity change from 0 to 256
[   70.844507][ T1040] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   70.855217][ T1040] exFAT-fs (loop2): Medium has reported failures. Some data may be lost.
[   70.868868][ T1040] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe5674ec2, utbl_chksum : 0xe619d30d)
[   70.883367][   T28] audit: type=1400 audit(1752432540.100:244): avc:  denied  { write } for  pid=1039 comm="syz.2.173" name="file1" dev="loop2" ino=1048608 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   70.884223][ T1040] exFAT-fs (loop2): hint_cluster is invalid (17)
[   70.928351][   T28] audit: type=1400 audit(1752432540.150:245): avc:  denied  { create } for  pid=1039 comm="syz.2.173" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1
[   70.949912][   T28] audit: type=1400 audit(1752432540.180:246): avc:  denied  { lock } for  pid=1039 comm="syz.2.173" path="/37/file1/cpuset.effective_cpus" dev="loop2" ino=1048609 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   70.999531][ T1032] loop4: detected capacity change from 0 to 256
[   71.028486][   T28] audit: type=1400 audit(1752432540.250:247): avc:  denied  { mounton } for  pid=1029 comm="syz.4.169" path="/35/file0" dev="incremental-fs" ino=210 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   71.077116][   T28] audit: type=1400 audit(1752432540.280:248): avc:  denied  { write } for  pid=1029 comm="syz.4.169" name="ppp" dev="devtmpfs" ino=158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[   71.080489][  T304] hub 5-1:0.0: 4 ports detected
[   71.370771][  T311] input: HID 256c:006d as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.0003/input/input6
[   71.383868][  T311] input: HID 256c:006d as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.0003/input/input7
[   71.395752][  T304] hub 5-1:0.0: hub_hub_status failed (err = -71)
[   71.399907][  T311] input: HID 256c:006d Touch Strip as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.0003/input/input8
[   71.402992][  T304] hub 5-1:0.0: config failed, can't get hub status (err -71)
[   71.417342][  T311] input: HID 256c:006d Dial as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.0003/input/input9
[   71.424193][  T304] usbhid 5-1:0.0: can't add hid device: -71
[   71.438179][  T311] uclogic 0003:256C:006D.0003: input,hiddev96,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.1-1/input0
[   71.440092][  T304] usbhid: probe of 5-1:0.0 failed with error -71
[   71.486739][  T304] usb 5-1: USB disconnect, device number 5
[   71.540451][ T1048] loop0: detected capacity change from 0 to 256
[   71.547130][ T1048] exfat: Deprecated parameter 'utf8'
[   71.552494][ T1048] exfat: Deprecated parameter 'namecase'
[   71.565032][ T1048] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d)
[   71.710406][   T28] audit: type=1400 audit(1752432540.920:249): avc:  denied  { setattr } for  pid=1046 comm="syz.0.175" name="/" dev="loop0" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   71.751700][   T28] audit: type=1400 audit(1752432540.970:250): avc:  denied  { set_context_mgr } for  pid=1052 comm="syz.0.177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1
[   71.765197][ T1055] netlink: 8 bytes leftover after parsing attributes in process `syz.2.176'.
[   71.797658][ T1053] tipc: Started in network mode
[   71.802994][ T1053] tipc: Node identity 4, cluster identity 4711
[   71.810209][ T1053] tipc: Node number set to 4
[   71.937250][   T28] audit: type=1400 audit(1752432541.160:251): avc:  denied  { write } for  pid=1052 comm="syz.0.177" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[   71.973541][ T1058] binder: 1052:1058 ioctl c0306201 2000000003c0 returned -22
[   71.989230][   T28] audit: type=1400 audit(1752432541.190:252): avc:  denied  { map } for  pid=1052 comm="syz.0.177" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[   72.825111][  T429] usb 2-1: reset high-speed USB device number 4 using dummy_hcd
[   72.848679][ T1066] loop4: detected capacity change from 0 to 512
[   72.871646][ T1066] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[   72.891421][ T1066] EXT4-fs (loop4): 1 truncate cleaned up
[   72.897480][ T1066] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[   73.042238][ T1070] loop2: detected capacity change from 0 to 256
[   73.075356][ T1070] FAT-fs (loop2): Unrecognized mount option "shor�name=mixed" or missing value
[   73.131030][ T1072] loop1: detected capacity change from 0 to 8192
[   73.296344][ T1078] syz.0.183[1078] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   73.296435][ T1078] syz.0.183[1078] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   73.407584][ T1081] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=1556 sclass=netlink_xfrm_socket pid=1081 comm=syz.2.181
[   73.690513][ T1080] loop0: detected capacity change from 0 to 128
[   74.003599][  T718] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[   74.133765][ T1080] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[   74.143410][ T1080] ext4 filesystem being mounted at /31/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[   74.406780][  T718] usb 5-1: config 0 has no interfaces?
[   74.412316][  T718] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[   74.444950][  T718] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   74.525611][  T718] usb 5-1: config 0 descriptor??
[   74.682393][ T1087] SELinux:  Context @ is not valid (left unmapped).
[   74.802620][ T1092] loop1: detected capacity change from 0 to 512
[   74.988121][ T1066] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   75.645197][   T28] kauditd_printk_skb: 1 callbacks suppressed
[   75.645240][   T28] audit: type=1400 audit(1752432543.920:254): avc:  denied  { relabelto } for  pid=1086 comm="syz.2.184" name="cgroup.controllers" dev="tmpfs" ino=234 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="@"
[   75.689597][   T60] usb 2-1: USB disconnect, device number 4
[   75.725138][  T283] EXT4-fs (loop0): unmounting filesystem.
[   75.807832][   T28] audit: type=1400 audit(1752432543.920:255): avc:  denied  { associate } for  pid=1086 comm="syz.2.184" name="cgroup.controllers" dev="tmpfs" ino=234 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="@"
[   75.834117][ T1066] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   75.844662][ T1092] EXT4-fs (loop1): 1 orphan inode deleted
[   75.851118][ T1092] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[   75.860192][  T449] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14
[   75.870917][ T1092] ext4 filesystem being mounted at /35/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   75.870923][  T304] usb 5-1: USB disconnect, device number 6
[   75.871498][  T449] EXT4-fs error (device loop1): ext4_release_dquot:6837: comm kworker/u4:6: Failed to release dquot type 1
[   75.937117][   T28] audit: type=1400 audit(1752432545.140:256): avc:  denied  { unlink } for  pid=287 comm="syz-executor" name="cgroup.controllers" dev="tmpfs" ino=234 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="@"
[   76.010421][   T28] audit: type=1400 audit(1752432545.230:257): avc:  denied  { create } for  pid=1106 comm="syz.2.189" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1
[   76.029985][ T1107] loop2: detected capacity change from 0 to 128
[   76.036723][ T1107] ext4: Unknown parameter 'smackfshat'
[   76.175168][ T1108] xt_CT: You must specify a L4 protocol and not use inversions on it
[   76.190875][ T1108] x_tables: duplicate underflow at hook 3
[   76.315372][   T28] audit: type=1400 audit(1752432545.430:258): avc:  denied  { ioctl } for  pid=1098 comm="syz.0.187" path="/dev/vhost-vsock" dev="devtmpfs" ino=268 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[   76.374970][  T718] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[   76.385473][  T284] EXT4-fs (loop1): unmounting filesystem.
[   76.457269][   T28] audit: type=1400 audit(1752432545.680:259): avc:  denied  { accept } for  pid=1106 comm="syz.2.189" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1
[   76.495949][ T1117] tipc: Started in network mode
[   76.500989][ T1117] tipc: Node identity 2e1ed197a55a, cluster identity 4711
[   76.508540][ T1117] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   76.516868][ T1117] device syzkaller0 entered promiscuous mode
[   76.584928][  T718] usb 4-1: Using ep0 maxpacket: 32
[   76.593399][  T718] usb 4-1: config 0 has an invalid interface number: 184 but max is 0
[   76.607854][  T718] usb 4-1: config 0 has no interface number 0
[   76.618124][  T718] usb 4-1: config 0 interface 184 has no altsetting 0
[   76.635372][  T718] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[   76.650719][  T718] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   76.667178][  T718] usb 4-1: Product: syz
[   76.677602][  T718] usb 4-1: Manufacturer: syz
[   76.687518][  T718] usb 4-1: SerialNumber: syz
[   76.746386][  T304] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[   76.758933][  T718] usb 4-1: config 0 descriptor??
[   76.826049][  T718] smsc75xx v1.0.0
[   76.830000][ T1117] tipc: Resetting bearer <eth:syzkaller0>
[   76.837876][ T1116] tipc: Resetting bearer <eth:syzkaller0>
[   76.844727][ T1116] tipc: Disabling bearer <eth:syzkaller0>
[   77.204242][ T1125] loop2: detected capacity change from 0 to 512
[   77.216191][ T1125] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   77.224999][  T304] usb 5-1: Using ep0 maxpacket: 16
[   77.233456][  T304] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   77.244090][  T304] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[   77.245890][ T1125] EXT4-fs (loop2): 1 truncate cleaned up
[   77.258936][ T1125] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[   77.270447][  T304] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 1.40
[   77.280861][ T1125] FAULT_INJECTION: forcing a failure.
[   77.280861][ T1125] name failslab, interval 1, probability 0, space 0, times 1
[   77.293647][  T304] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   77.301746][  T304] usb 5-1: Product: syz
[   77.306038][  T304] usb 5-1: Manufacturer: syz
[   77.310732][  T304] usb 5-1: SerialNumber: syz
[   77.318530][ T1125] CPU: 0 PID: 1125 Comm: syz.2.193 Not tainted 6.1.141-syzkaller-00038-ge2deb0b42a3a #0
[   77.328299][ T1125] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[   77.338504][ T1125] Call Trace:
[   77.341801][ T1125]  <TASK>
[   77.344746][ T1125]  __dump_stack+0x21/0x24
[   77.349124][ T1125]  dump_stack_lvl+0xee/0x150
[   77.353725][ T1125]  ? __cfi_dump_stack_lvl+0x8/0x8
[   77.358754][ T1125]  ? memset+0x35/0x40
[   77.362741][ T1125]  dump_stack+0x15/0x24
[   77.366897][ T1125]  should_fail_ex+0x3d4/0x520
[   77.371573][ T1125]  __should_failslab+0xac/0xf0
[   77.376462][ T1125]  should_failslab+0x9/0x20
[   77.380985][ T1125]  slab_pre_alloc_hook+0x30/0x1e0
[   77.386024][ T1125]  ? __cfi__raw_spin_lock+0x10/0x10
[   77.391231][ T1125]  kmem_cache_alloc_lru+0x49/0x280
[   77.396344][ T1125]  ? __d_alloc+0x34/0x6c0
[   77.400675][ T1125]  __d_alloc+0x34/0x6c0
[   77.404832][ T1125]  d_alloc+0x4b/0x1d0
[   77.408813][ T1125]  lookup_one_qstr_excl+0xcb/0x270
[   77.413930][ T1125]  do_renameat2+0x4de/0xf60
[   77.418441][ T1125]  ? __cfi_do_renameat2+0x10/0x10
[   77.423465][ T1125]  ? strncpy_from_user+0x17a/0x2d0
[   77.428579][ T1125]  ? getname_flags+0x206/0x500
[   77.433344][ T1125]  __x64_sys_rename+0x86/0x90
[   77.438017][ T1125]  x64_sys_call+0x300/0x9a0
[   77.442520][ T1125]  do_syscall_64+0x4c/0xa0
[   77.446933][ T1125]  ? clear_bhb_loop+0x30/0x80
[   77.451611][ T1125]  ? clear_bhb_loop+0x30/0x80
[   77.456317][ T1125]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   77.462233][ T1125] RIP: 0033:0x7f1b9018e929
[   77.466658][ T1125] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   77.486269][ T1125] RSP: 002b:00007f1b90f0e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000052
[   77.494685][ T1125] RAX: ffffffffffffffda RBX: 00007f1b903b5fa0 RCX: 00007f1b9018e929
[   77.502676][ T1125] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000200000000240
[   77.510645][ T1125] RBP: 00007f1b90f0e090 R08: 0000000000000000 R09: 0000000000000000
[   77.518614][ T1125] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   77.526668][ T1125] R13: 0000000000000000 R14: 00007f1b903b5fa0 R15: 00007ffe8474d428
[   77.534642][ T1125]  </TASK>
[   77.545054][  T304] usb 5-1: can't set config #1, error -71
[   77.553524][  T285] EXT4-fs (loop4): unmounting filesystem.
[   77.560431][  T287] EXT4-fs (loop2): unmounting filesystem.
[   77.561511][  T304] usb 5-1: USB disconnect, device number 7
[   78.408654][ T1146] netlink: 16 bytes leftover after parsing attributes in process `syz.4.199'.
[   78.419766][ T1144] loop1: detected capacity change from 0 to 1024
[   78.427115][ T1144] EXT4-fs: Ignoring removed bh option
[   78.442689][ T1147] xt_bpf: check failed: parse error
[   78.475103][ T1144] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c80ce018, mo2=0000]
[   78.494136][ T1144] EXT4-fs error (device loop1): ext4_map_blocks:635: inode #3: block 2: comm syz.1.198: lblock 2 mapped to illegal pblock 2 (length 1)
[   78.509237][ T1144] Quota error (device loop1): qtree_write_dquot: dquota write failed
[   78.518276][ T1144] EXT4-fs error (device loop1): ext4_map_blocks:635: inode #3: block 48: comm syz.1.198: lblock 0 mapped to illegal pblock 48 (length 1)
[   78.532968][ T1144] Quota error (device loop1): v2_write_file_info: Can't write info structure
[   78.541871][ T1144] EXT4-fs error (device loop1): ext4_acquire_dquot:6801: comm syz.1.198: Failed to acquire dquot type 0
[   78.553540][ T1144] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5916: Corrupt filesystem
[   78.563711][ T1144] EXT4-fs error (device loop1): ext4_evict_inode:279: inode #11: comm syz.1.198: mark_inode_dirty error
[   78.575728][ T1144] EXT4-fs warning (device loop1): ext4_evict_inode:282: couldn't mark inode dirty (err -117)
[   78.586039][ T1144] EXT4-fs (loop1): 1 orphan inode deleted
[   78.591832][ T1144] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[   78.630572][   T28] audit: type=1400 audit(1752432547.850:260): avc:  denied  { write } for  pid=1145 comm="syz.4.199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   79.401407][  T449] EXT4-fs error (device loop1): ext4_map_blocks:635: inode #3: block 1: comm kworker/u4:6: lblock 1 mapped to illegal pblock 1 (length 1)
[   79.421092][  T449] EXT4-fs error (device loop1): ext4_release_dquot:6837: comm kworker/u4:6: Failed to release dquot type 0
[   79.518956][  T718] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000040: -71
[   79.530330][  T718] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error writing E2P_CMD
[   79.539917][  T718] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[   79.550986][  T718] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71
[   79.584933][ T1093] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[   79.588280][  T718] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset
[   79.603267][  T718] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71
[   79.615412][  T718] smsc75xx: probe of 4-1:0.184 failed with error -71
[   79.649700][  T718] usb 4-1: USB disconnect, device number 4
[   79.677269][  T284] EXT4-fs (loop1): unmounting filesystem.
[   79.683220][  T284] EXT4-fs error (device loop1): __ext4_get_inode_loc:4509: comm syz-executor: Invalid inode table block 1 in block_group 0
[   79.699452][  T284] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5916: Corrupt filesystem
[   79.709129][  T284] EXT4-fs error (device loop1): ext4_quota_off:7107: inode #3: comm syz-executor: mark_inode_dirty error
[   79.787153][ T1093] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   79.819378][ T1093] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   79.888933][ T1093] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[   79.913411][ T1093] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   79.937583][ T1093] usb 3-1: config 0 descriptor??
[   79.985901][ T1179] loop1: detected capacity change from 0 to 1024
[   80.003535][ T1179] EXT4-fs: Ignoring removed i_version option
[   80.027504][ T1179] EXT4-fs (loop1): Test dummy encryption mode enabled
[   80.043684][ T1179] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[   80.129032][  T284] EXT4-fs (loop1): unmounting filesystem.
[   80.357233][ T1188] loop4: detected capacity change from 0 to 1024
[   80.379289][ T1188] EXT4-fs (loop4): revision level too high, forcing read-only mode
[   80.390943][ T1188] EXT4-fs (loop4): orphan cleanup on readonly fs
[   80.399246][ T1188] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.208: bg 0: block 10: padding at end of block bitmap is not set
[   80.413917][ T1188] EXT4-fs error (device loop4): ext4_acquire_dquot:6801: comm syz.4.208: Failed to acquire dquot type 0
[   80.426017][ T1188] EXT4-fs error (device loop4): ext4_acquire_dquot:6801: comm syz.4.208: Failed to acquire dquot type 0
[   80.437781][ T1188] EXT4-fs error (device loop4): ext4_free_blocks:6210: comm syz.4.208: Freeing blocks not in datazone - block = 0, count = 4096
[   80.451666][ T1188] EXT4-fs error (device loop4): ext4_acquire_dquot:6801: comm syz.4.208: Failed to acquire dquot type 0
[   80.463239][ T1188] EXT4-fs (loop4): 1 orphan inode deleted
[   80.469450][ T1188] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[   80.523293][  T285] EXT4-fs (loop4): unmounting filesystem.
[   80.564598][ T1192] loop4: detected capacity change from 0 to 512
[   80.588994][ T1192] EXT4-fs: Ignoring removed nobh option
[   80.602478][ T1192] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   80.631428][ T1192] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[   80.660798][ T1192] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842c018, mo2=0002]
[   80.674066][ T1192] System zones: 1-2, 4-12, 8-8
[   80.692611][ T1192] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.209: invalid indirect mapped block 256 (level 2)
[   80.715255][ T1192] EXT4-fs (loop4): 2 truncates cleaned up
[   80.721105][ T1192] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[   80.805797][ T1196] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm syz.4.209: bg 0: block 5: invalid block bitmap
[   80.818479][ T1196] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28
[   80.831423][ T1196] EXT4-fs (loop4): This should not happen!! Data will be lost
[   80.831423][ T1196] 
[   80.841402][ T1196] EXT4-fs (loop4): Total free blocks count 0
[   80.847572][ T1196] EXT4-fs (loop4): Free/Dirty block details
[   80.853550][ T1196] EXT4-fs (loop4): free_blocks=0
[   80.864964][ T1196] EXT4-fs (loop4): dirty_blocks=2380
[   80.870307][ T1196] EXT4-fs (loop4): Block reservation details
[   80.876570][ T1196] EXT4-fs (loop4): i_reserved_data_blocks=2380
[   80.884655][ T1194] loop0: detected capacity change from 0 to 40427
[   80.899302][  T399] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 328 with error 28
[   80.943887][ T1194] F2FS-fs (loop0): Found nat_bits in checkpoint
[   80.958280][ T1093] input: HID 256c:006d as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.0004/input/input10
[   80.971319][ T1093] input: HID 256c:006d as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.0004/input/input11
[   80.989330][ T1093] input: HID 256c:006d Touch Strip as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.0004/input/input12
[   80.993171][ T1201] loop3: detected capacity change from 0 to 512
[   81.003698][ T1093] input: HID 256c:006d Dial as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.0004/input/input13
[   81.028268][ T1201] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[   81.053577][ T1093] uclogic 0003:256C:006D.0004: input,hiddev96,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.2-1/input0
[   81.062474][ T1201] EXT4-fs (loop3): 1 truncate cleaned up
[   81.079264][ T1201] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[   81.098923][ T1194] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[   81.144398][ T1208] bridge0: port 3(vlan2) entered blocking state
[   81.151384][ T1208] bridge0: port 3(vlan2) entered disabled state
[   81.178629][ T1208] device vlan2 entered promiscuous mode
[   81.184248][ T1208] device dummy0 entered promiscuous mode
[   81.190642][  T304] usb 3-1: USB disconnect, device number 6
[   81.210890][  T286] EXT4-fs (loop3): unmounting filesystem.
[   81.239835][ T1206] fido_id[1206]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory
[   81.261620][ T1211] loop1: detected capacity change from 0 to 256
[   81.288529][ T1213] loop3: detected capacity change from 0 to 256
[   81.310649][ T1211] FAT-fs (loop1): Directory bread(block 64) failed
[   81.320413][ T1213] FAT-fs (loop3): Unrecognized mount option "shor�name=mixed" or missing value
[   81.329841][ T1211] FAT-fs (loop1): Directory bread(block 65) failed
[   81.337528][ T1211] FAT-fs (loop1): Directory bread(block 66) failed
[   81.344276][ T1211] FAT-fs (loop1): Directory bread(block 67) failed
[   81.351734][ T1211] FAT-fs (loop1): Directory bread(block 68) failed
[   81.358764][ T1211] FAT-fs (loop1): Directory bread(block 69) failed
[   81.371368][ T1211] FAT-fs (loop1): Directory bread(block 70) failed
[   81.378279][ T1211] FAT-fs (loop1): Directory bread(block 71) failed
[   81.503169][ T1211] FAT-fs (loop1): Directory bread(block 72) failed
[   81.509906][ T1211] FAT-fs (loop1): Directory bread(block 73) failed
[   81.608699][ T1218] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=1556 sclass=netlink_xfrm_socket pid=1218 comm=syz.3.214
[   81.687283][ T1211] syz.1.215: attempt to access beyond end of device
[   81.687283][ T1211] loop1: rw=0, sector=1192, nr_sectors = 4 limit=256
[   81.879610][ T1194] syz.0.210: attempt to access beyond end of device
[   81.879610][ T1194] loop0: rw=2049, sector=77824, nr_sectors = 4096 limit=40427
[   81.906580][ T1194] syz.0.210: attempt to access beyond end of device
[   81.906580][ T1194] loop0: rw=2049, sector=49152, nr_sectors = 3168 limit=40427
[   81.923321][   T28] kauditd_printk_skb: 10 callbacks suppressed
[   81.923337][   T28] audit: type=1400 audit(1752432551.140:261): avc:  denied  { mounton } for  pid=1210 comm="syz.1.215" path="/45/bus/file0" dev="loop1" ino=1048618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=file permissive=1
[   81.957380][ T1211] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[   81.986257][   T28] audit: type=1400 audit(1752432551.210:262): avc:  denied  { mount } for  pid=1222 comm="syz.1.217" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1
[   82.017653][   T28] audit: type=1400 audit(1752432551.230:263): avc:  denied  { remount } for  pid=1222 comm="syz.1.217" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1
[   82.047855][ T1194] syz.0.210: attempt to access beyond end of device
[   82.047855][ T1194] loop0: rw=524288, sector=77824, nr_sectors = 256 limit=40427
[   82.062165][ T1194] syz.0.210: attempt to access beyond end of device
[   82.062165][ T1194] loop0: rw=0, sector=77824, nr_sectors = 8 limit=40427
[   82.076169][ T1194] syz.0.210: attempt to access beyond end of device
[   82.076169][ T1194] loop0: rw=0, sector=77824, nr_sectors = 8 limit=40427
[   82.089820][ T1194] syz.0.210: attempt to access beyond end of device
[   82.089820][ T1194] loop0: rw=0, sector=77824, nr_sectors = 8 limit=40427
[   82.103480][ T1194] syz.0.210: attempt to access beyond end of device
[   82.103480][ T1194] loop0: rw=0, sector=77824, nr_sectors = 8 limit=40427
[   82.117164][ T1193] syz.0.210: attempt to access beyond end of device
[   82.117164][ T1193] loop0: rw=0, sector=77824, nr_sectors = 8 limit=40427
[   82.130724][ T1193] syz.0.210: attempt to access beyond end of device
[   82.130724][ T1193] loop0: rw=0, sector=77824, nr_sectors = 8 limit=40427
[   82.234997][  T304] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[   82.285030][  T288] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[   82.311555][ T1227] loop2: detected capacity change from 0 to 16
[   82.322886][ T1227] erofs: (device loop2): erofs_read_inode: unsupported chunk format 7fff of nid 36
[   82.425015][  T304] usb 5-1: Using ep0 maxpacket: 32
[   82.432191][  T304] usb 5-1: config 0 has an invalid interface number: 184 but max is 0
[   82.452619][  T304] usb 5-1: config 0 has no interface number 0
[   82.461461][  T304] usb 5-1: config 0 interface 184 has no altsetting 0
[   82.484855][  T304] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[   82.495151][  T288] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16
[   82.509310][  T288] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 14656, setting to 1024
[   82.525026][  T304] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   82.540833][  T288] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[   82.589171][ T1234] loop0: detected capacity change from 0 to 256
[   82.829673][ T1234] FAT-fs (loop0): error, corrupted file size (i_pos 196, 2097152)
[   82.856931][ T1234] FAT-fs (loop0): Filesystem has been set read-only
[   83.029758][  T304] usb 5-1: Product: syz
[   83.034145][  T304] usb 5-1: Manufacturer: syz
[   83.038992][  T304] usb 5-1: SerialNumber: syz
[   83.045791][  T304] usb 5-1: config 0 descriptor??
[   83.051017][  T288] usb 2-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32
[   83.060995][  T304] smsc75xx v1.0.0
[   83.064725][  T288] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   83.073146][  T288] usb 2-1: Product: syz
[   83.077382][  T288] usb 2-1: Manufacturer: syz
[   83.082265][  T288] usb 2-1: SerialNumber: syz
[   83.089749][  T288] usb 2-1: config 0 descriptor??
[   83.095148][ T1223] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[   83.102326][ T1223] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[   83.220086][ T1244] 9pnet: p9_errstr2errno: server reported unknown error �@��hQI���t
[   83.325882][ T1223] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[   83.346288][ T1223] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[   83.355039][  T396] usb 1-1: new full-speed USB device number 6 using dummy_hcd
[   83.576514][  T396] usb 1-1: not running at top speed; connect to a high speed hub
[   83.592632][  T396] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[   83.630863][  T396] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   83.641399][  T396] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[   83.656096][  T396] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   83.665352][  T396] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   83.673407][  T396] usb 1-1: Product: syz
[   83.677952][  T396] usb 1-1: Manufacturer: syz
[   83.682567][  T396] usb 1-1: SerialNumber: syz
[   83.841817][  T288] Error reading MAC address
[   83.891448][   T28] audit: type=1400 audit(1752432553.110:264): avc:  denied  { read } for  pid=1237 comm="syz.0.222" name="msr" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[   83.915515][   T28] audit: type=1400 audit(1752432553.130:265): avc:  denied  { open } for  pid=1237 comm="syz.0.222" path="/dev/cpu/0/msr" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[   83.919270][  T396] usb 1-1: 0:2 : does not exist
[   83.968496][ T1250] loop2: detected capacity change from 0 to 512
[   83.975878][  T396] usb 1-1: USB disconnect, device number 6
[   83.984241][ T1250] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   83.999692][ T1250] EXT4-fs (loop2): 1 truncate cleaned up
[   84.006044][ T1250] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[   84.016273][  T304] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000040: -71
[   84.028436][  T304] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error writing E2P_CMD
[   84.038276][  T304] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[   84.049244][  T304] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71
[   84.059088][  T304] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset
[   84.065166][  T287] EXT4-fs (loop2): unmounting filesystem.
[   84.070282][  T304] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71
[   84.111046][  T304] smsc75xx: probe of 5-1:0.184 failed with error -71
[   84.119616][  T304] usb 5-1: USB disconnect, device number 8
[   84.639525][ T1264] loop4: detected capacity change from 0 to 512
[   84.663957][   T28] audit: type=1400 audit(1752432553.880:266): avc:  denied  { map } for  pid=1261 comm="syz.0.228" path="socket:[19914]" dev="sockfs" ino=19914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   84.671556][ T1264] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   84.691493][   T28] audit: type=1400 audit(1752432553.920:267): avc:  denied  { read } for  pid=1261 comm="syz.0.228" path="socket:[19914]" dev="sockfs" ino=19914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   84.719020][ T1263] device wireguard0 entered promiscuous mode
[   84.729664][ T1264] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[   84.739188][ T1264] ext4 filesystem being mounted at /44/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   84.752461][   T28] audit: type=1400 audit(1752432553.970:268): avc:  denied  { execute } for  pid=1222 comm="syz.1.217" path="/46/file1" dev="tmpfs" ino=280 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[   84.780231][   T28] audit: type=1326 audit(1752432554.000:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1262 comm="syz.4.229" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1d98b8e929 code=0x0
[   84.814402][ T1269] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   84.823087][ T1269] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   84.932807][ T1274] fuse: Bad value for 'group_id'
[   85.206821][   T28] audit: type=1400 audit(1752432554.400:270): avc:  denied  { create } for  pid=1275 comm="syz.3.231" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   85.473639][  T285] EXT4-fs (loop4): unmounting filesystem.
[   85.559829][ T1288] Driver unsupported XDP return value 0 on prog  (id 177) dev N/A, expect packet loss!
[   85.623474][ T1293] loop4: detected capacity change from 0 to 256
[   85.640830][ T1293] FAT-fs (loop4): Unrecognized mount option "shor�name=mixed" or missing value
[   85.879857][ T1295] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=1556 sclass=netlink_xfrm_socket pid=1295 comm=syz.4.235
[   86.101150][  T288] usb 2-1: USB disconnect, device number 5
[   86.133736][ T1299] loop1: detected capacity change from 0 to 512
[   86.143739][ T1299] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   86.156394][ T1299] EXT4-fs (loop1): 1 truncate cleaned up
[   86.162105][ T1299] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[   88.103704][ T1310] tipc: Started in network mode
[   88.109682][  T284] EXT4-fs (loop1): unmounting filesystem.
[   88.199305][ T1310] tipc: Node identity 4, cluster identity 4711
[   88.231167][ T1310] tipc: Node number set to 4
[   88.437285][  T535] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[   88.504364][   T28] kauditd_printk_skb: 5 callbacks suppressed
[   88.504389][   T28] audit: type=1400 audit(1752432557.720:276): avc:  denied  { relabelfrom } for  pid=1318 comm="syz.4.243" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1
[   88.531680][   T28] audit: type=1400 audit(1752432557.720:277): avc:  denied  { relabelto } for  pid=1318 comm="syz.4.243" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1
[   88.629017][ T1325] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[   88.637208][ T1325] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[   89.465007][  T535] usb 3-1: Using ep0 maxpacket: 32
[   89.524776][  T535] usb 3-1: config 0 has an invalid interface number: 184 but max is 0
[   89.866056][ T1337] loop0: detected capacity change from 0 to 256
[   89.870477][  T535] usb 3-1: config 0 has no interface number 0
[   89.912450][  T535] usb 3-1: config 0 interface 184 has no altsetting 0
[   89.938612][  T535] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[   89.948335][ T1337] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x205a2abe, utbl_chksum : 0xe619d30d)
[   89.955008][  T535] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   89.974936][  T535] usb 3-1: Product: syz
[   89.985122][  T535] usb 3-1: Manufacturer: syz
[   89.990203][ T1348] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[   90.004942][  T535] usb 3-1: SerialNumber: syz
[   90.025251][  T535] usb 3-1: config 0 descriptor??
[   90.033830][  T535] smsc75xx v1.0.0
[   90.045598][   T28] audit: type=1400 audit(1752432559.270:278): avc:  denied  { create } for  pid=1349 comm="syz.4.250" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[   90.067315][ T1350] loop4: detected capacity change from 0 to 128
[   90.086250][ T1350] EXT4-fs: Ignoring removed nobh option
[   90.123303][ T1350] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[   90.135230][ T1350] ext4 filesystem being mounted at /51/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   90.158005][ T1328] loop3: detected capacity change from 0 to 40427
[   90.174919][ T1328] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[   90.204983][ T1328] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[   90.234858][ T1328] F2FS-fs (loop3): invalid crc value
[   90.258770][ T1347] loop1: detected capacity change from 0 to 40427
[   90.270102][ T1328] F2FS-fs (loop3): Found nat_bits in checkpoint
[   90.276752][ T1347] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[   90.284561][ T1347] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[   90.295004][ T1321] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[   90.317092][ T1347] F2FS-fs (loop1): Found nat_bits in checkpoint
[   90.335804][ T1328] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[   90.343005][ T1328] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[   90.376987][ T1347] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[   90.384314][ T1347] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[   90.441572][   T28] audit: type=1400 audit(1752432559.660:279): avc:  denied  { mounton } for  pid=1346 comm="syz.1.249" path="/49/bus/bus" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1
[   90.471271][   T28] audit: type=1400 audit(1752432559.660:280): avc:  denied  { write } for  pid=1346 comm="syz.1.249" name="bus" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1
[   90.496551][   T28] audit: type=1400 audit(1752432559.660:281): avc:  denied  { add_name } for  pid=1346 comm="syz.1.249" name="work" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1
[   90.496710][ T1321] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   90.516923][   T28] audit: type=1400 audit(1752432559.660:282): avc:  denied  { setattr } for  pid=1346 comm="syz.1.249" name="work" dev="loop1" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1
[   90.551496][   T28] audit: type=1400 audit(1752432559.660:283): avc:  denied  { remove_name } for  pid=1346 comm="syz.1.249" name="#3" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1
[   90.573499][   T28] audit: type=1400 audit(1752432559.660:284): avc:  denied  { rename } for  pid=1346 comm="syz.1.249" name="#3" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   90.595096][ T1321] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   90.605686][ T1321] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[   90.614298][   T28] audit: type=1400 audit(1752432559.660:285): avc:  denied  { unlink } for  pid=1346 comm="syz.1.249" name="#3" dev="loop1" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1
[   90.619855][ T1321] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   90.650275][ T1321] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   90.669990][ T1321] usb 1-1: config 0 descriptor??
[   90.835122][ T1365] loop1: detected capacity change from 0 to 1024
[   90.842481][ T1365] EXT4-fs: Mount option(s) incompatible with ext2
[   90.922250][  T285] EXT4-fs (loop4): unmounting filesystem.
[   90.947300][ T1370] netlink: 'syz.1.254': attribute type 3 has an invalid length.
[   90.982680][ T1372] loop4: detected capacity change from 0 to 512
[   90.998937][ T1372] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[   91.026924][ T1372] EXT4-fs (loop4): 1 truncate cleaned up
[   91.037971][  T535] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000040: -71
[   91.053852][ T1372] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[   91.062792][  T535] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error writing E2P_CMD
[   91.074279][  T535] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[   91.093166][  T535] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71
[   91.113924][  T285] EXT4-fs (loop4): unmounting filesystem.
[   91.124021][  T535] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset
[   91.134644][  T535] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71
[   91.145056][  T535] smsc75xx: probe of 3-1:0.184 failed with error -71
[   91.150744][ T1369] loop3: detected capacity change from 0 to 40427
[   91.153812][  T535] usb 3-1: USB disconnect, device number 7
[   91.197057][ T1369] F2FS-fs (loop3): Found nat_bits in checkpoint
[   91.227806][ T1387] loop4: detected capacity change from 0 to 512
[   91.257761][ T1387] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[   91.266798][ T1387] ext4 filesystem being mounted at /54/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   91.266910][ T1369] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[   91.289516][ T1321] usbhid 1-1:0.0: can't add hid device: -71
[   91.295899][ T1369] netlink: 4 bytes leftover after parsing attributes in process `syz.3.251'.
[   91.297160][ T1321] usbhid: probe of 1-1:0.0 failed with error -71
[   91.313493][ T1321] usb 1-1: USB disconnect, device number 7
[   92.171226][ T1403] loop3: detected capacity change from 0 to 512
[   92.230164][ T1403] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[   92.275253][ T1403] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002]
[   92.296372][ T1403] System zones: 1-12
[   92.305458][ T1403] EXT4-fs (loop3): 1 truncate cleaned up
[   92.321351][ T1403] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[   93.032679][  T285] EXT4-fs (loop4): unmounting filesystem.
[   93.457150][  T286] EXT4-fs (loop3): unmounting filesystem.
[   93.541619][   T28] kauditd_printk_skb: 6 callbacks suppressed
[   93.541636][   T28] audit: type=1400 audit(1752432562.760:292): avc:  denied  { name_bind } for  pid=1425 comm="syz.3.265" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1
[   93.582314][ T1424] netlink: 4 bytes leftover after parsing attributes in process `syz.4.264'.
[   93.604128][ T1429] loop2: detected capacity change from 0 to 512
[   93.611407][ T1429] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   93.637826][ T1429] EXT4-fs (loop2): 1 truncate cleaned up
[   93.643530][ T1429] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[   93.682128][  T287] EXT4-fs (loop2): unmounting filesystem.
[   93.718956][ T1435] loop2: detected capacity change from 0 to 512
[   93.766177][ T1435] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[   93.784963][   T60] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[   93.792672][ T1435] ext4 filesystem being mounted at /55/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   93.832135][  T287] EXT4-fs (loop2): unmounting filesystem.
[   93.932146][ T1093] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[   94.025069][ T1446] loop0: detected capacity change from 0 to 128
[   94.032721][ T1446] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22
[   94.044973][   T60] usb 2-1: Using ep0 maxpacket: 32
[   94.051756][   T60] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   94.199832][   T28] audit: type=1400 audit(1752432563.400:293): avc:  denied  { lock } for  pid=1453 comm="syz.0.274" path="/dev/usbmon0" dev="devtmpfs" ino=159 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[   94.294932][   T60] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   94.304803][   T60] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[   94.313912][ T1093] usb 5-1: Using ep0 maxpacket: 32
[   94.320152][ T1093] usb 5-1: config 0 has an invalid interface number: 67 but max is 0
[   94.334924][ T1093] usb 5-1: config 0 has no interface number 0
[   94.354922][   T60] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   94.364092][   T60] usb 2-1: config 0 descriptor??
[   94.369770][ T1093] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[   94.384924][ T1093] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   94.392955][ T1093] usb 5-1: Product: syz
[   94.414925][ T1093] usb 5-1: Manufacturer: syz
[   94.419602][ T1093] usb 5-1: SerialNumber: syz
[   94.435338][ T1093] usb 5-1: config 0 descriptor??
[   94.441222][ T1093] smsc95xx v2.0.0
[   94.504996][ T1321] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[   94.634959][  T450] usb 3-1: new full-speed USB device number 8 using dummy_hcd
[   94.686501][ T1321] usb 1-1: unable to read config index 0 descriptor/start: -61
[   94.694191][ T1321] usb 1-1: can't read configurations, error -61
[   94.813442][   T60] savu 0003:1E7D:2D5A.0005: hiddev96,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.1-1/input0
[   94.826699][  T450] usb 3-1: config 0 has an invalid interface number: 251 but max is 0
[   94.835617][  T450] usb 3-1: config 0 has no interface number 0
[   94.845227][ T1321] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[   94.845921][  T450] usb 3-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4
[   94.862609][  T450] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   94.870760][  T450] usb 3-1: Product: syz
[   94.875110][ T1093] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[   94.884999][  T288] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[   94.885914][  T450] usb 3-1: Manufacturer: syz
[   94.897955][ T1093] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[   94.907024][  T450] usb 3-1: SerialNumber: syz
[   94.912510][  T450] usb 3-1: config 0 descriptor??
[   95.026573][ T1321] usb 1-1: unable to read config index 0 descriptor/start: -61
[   95.034189][ T1321] usb 1-1: can't read configurations, error -61
[   95.040631][ T1321] usb usb1-port1: attempt power cycle
[   95.076321][  T288] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   95.086770][  T288] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[   95.099758][  T288] usb 4-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=4e.53
[   95.108875][  T288] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   95.118543][ T1093] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[   95.118864][  T288] usb 4-1: config 0 descriptor??
[   95.132400][ T1093] smsc95xx: probe of 5-1:0.67 failed with error -71
[   95.148973][ T1093] usb 5-1: USB disconnect, device number 9
[   95.177559][  T535] usb 2-1: USB disconnect, device number 6
[   95.319061][   T28] audit: type=1400 audit(1752432564.540:294): avc:  denied  { setopt } for  pid=1450 comm="syz.2.273" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   95.365146][  T288] usb 4-1: USB disconnect, device number 5
[   95.374714][ T1488] loop3: detected capacity change from 0 to 256
[   95.382295][ T1488] FAT-fs (loop3): bogus number of FAT sectors
[   95.390689][ T1488] FAT-fs (loop3): Can't find a valid FAT filesystem
[   95.455557][ T1321] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[   95.490551][ T1321] usb 1-1: unable to read config index 0 descriptor/start: -61
[   95.499240][ T1321] usb 1-1: can't read configurations, error -61
[   95.519618][  T450] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61
[   95.530091][  T450] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to read software interface selection register: -61
[   95.543324][  T450] asix: probe of 3-1:0.251 failed with error -61
[   95.565452][  T312] udevd[312]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   95.602672][ T1491] loop3: detected capacity change from 0 to 512
[   95.612929][ T1491] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   95.621597][ T1491] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors
[   95.632742][ T1491] EXT4-fs (loop3): group descriptors corrupted!
[   95.657012][ T1493] loop4: detected capacity change from 0 to 1024
[   95.664010][ T1493] EXT4-fs: Ignoring removed i_version option
[   95.667299][ T1321] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[   95.670269][ T1493] EXT4-fs: quotafile must be on filesystem root
[   95.724857][   T28] audit: type=1400 audit(1752432564.940:295): avc:  denied  { create } for  pid=1450 comm="syz.2.273" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1
[   95.726845][  T450] usb 3-1: USB disconnect, device number 8
[   95.752330][ T1321] usb 1-1: unable to read config index 0 descriptor/start: -61
[   95.764962][ T1321] usb 1-1: can't read configurations, error -61
[   95.781161][ T1321] usb usb1-port1: unable to enumerate USB device
[   95.821410][ T1504] loop1: detected capacity change from 0 to 512
[   95.829525][ T1494] netlink: 96 bytes leftover after parsing attributes in process `syz.4.280'.
[   95.839892][   T28] audit: type=1400 audit(1752432565.060:296): avc:  denied  { setattr } for  pid=1496 comm="syz.3.281" name="NETLINK" dev="sockfs" ino=20540 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   95.910249][ T1504] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[   95.919531][   T28] audit: type=1400 audit(1752432565.140:297): avc:  denied  { read } for  pid=1506 comm="syz.3.284" path="socket:[20563]" dev="sockfs" ino=20563 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   95.954170][ T1504] ext4 filesystem being mounted at /58/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   95.991809][ T1511] loop3: detected capacity change from 0 to 512
[   96.021572][ T1511] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[   96.030732][ T1511] ext4 filesystem being mounted at /58/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   96.058059][ T1511] netlink: 8 bytes leftover after parsing attributes in process `syz.3.284'.
[   96.265020][ T1321] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[   96.334107][   T28] audit: type=1400 audit(1752432565.550:298): avc:  denied  { setopt } for  pid=1514 comm="syz.2.285" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   96.446362][ T1321] usb 2-1: unable to get BOS descriptor or descriptor too short
[   96.457199][ T1321] usb 2-1: config 1 interface 1 has no altsetting 0
[   96.464650][   T28] audit: type=1400 audit(1752432565.680:299): avc:  denied  { mounton } for  pid=1517 comm="syz.2.286" path="/proc/218/task" dev="proc" ino=20581 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1
[   96.489722][   T28] audit: type=1400 audit(1752432565.680:300): avc:  denied  { associate } for  pid=1517 comm="syz.2.286" name="hugetlb.1GB.usage_in_bytes" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[   96.580816][ T1321] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   96.604975][ T1321] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   96.613035][ T1321] usb 2-1: Product: syz
[   96.624934][ T1321] usb 2-1: Manufacturer: syz
[   96.629584][ T1321] usb 2-1: SerialNumber: syz
[   96.660370][   T28] audit: type=1400 audit(1752432565.880:301): avc:  denied  { sqpoll } for  pid=1520 comm="syz.2.287" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[   96.748903][  T286] EXT4-fs (loop3): unmounting filesystem.
[   96.776542][ T1527] loop3: detected capacity change from 0 to 1024
[   96.816103][ T1527] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[   96.955815][ T1321] usb 2-1: found format II with max.bitrate = 2418, frame size=7
[   96.959118][ T1527] EXT4-fs (loop3): re-mounted. Quota mode: none.
[   97.008867][ T1321] usb 2-1: 2:1: All rates were zero
[   97.068070][ T1321] usb 2-1: USB disconnect, device number 7
[   97.141410][ T1209] udevd[1209]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   97.179989][  T286] EXT4-fs (loop3): unmounting filesystem.
[   97.309998][ T1534] netlink: 24 bytes leftover after parsing attributes in process `syz.3.290'.
[   97.402251][ T1537] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=1537 comm=syz.3.290
[   97.579109][  T284] EXT4-fs (loop1): unmounting filesystem.
[   97.653986][ T1549] loop4: detected capacity change from 0 to 256
[   97.708134][ T1549] FAT-fs (loop4): Unrecognized mount option "shor�name=mixed" or missing value
[   97.763157][  T288] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[   97.785028][    T6] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[   97.911302][ T1557] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=1556 sclass=netlink_xfrm_socket pid=1557 comm=syz.4.295
[   98.264991][  T288] usb 1-1: Using ep0 maxpacket: 16
[   98.274833][    T6] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   98.286793][  T288] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   98.296979][    T6] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024
[   98.307338][  T288] usb 1-1: New USB device found, idVendor=056a, idProduct=0028, bcdDevice= 0.00
[   98.316533][  T288] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   98.325968][    T6] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   98.335746][  T288] usb 1-1: config 0 descriptor??
[   98.340802][    T6] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   98.349050][    T6] usb 4-1: Product: syz
[   98.353565][    T6] usb 4-1: Manufacturer: syz
[   98.359367][    T6] usb 4-1: SerialNumber: syz
[   98.359740][ T1567] loop1: detected capacity change from 0 to 512
[   98.371917][    T6] cdc_mbim 4-1:1.0: skipping garbage
[   98.403070][ T1571] loop1: detected capacity change from 0 to 512
[   98.411972][ T1571] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   98.426205][ T1571] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: comm syz.1.300: inode #255: comm syz.1.300: iget: illegal inode #
[   98.439601][ T1571] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.300: error while reading EA inode 255 err=-117
[   98.452568][ T1571] EXT4-fs (loop1): 1 orphan inode deleted
[   98.459014][ T1571] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[   98.548695][   T28] kauditd_printk_skb: 11 callbacks suppressed
[   98.548711][   T28] audit: type=1400 audit(1752432567.770:313): avc:  denied  { ioctl } for  pid=1573 comm="syz.4.301" path="socket:[21557]" dev="sockfs" ino=21557 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   98.581571][ T1541] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[   98.595487][   T28] audit: type=1400 audit(1752432567.770:314): avc:  denied  { write } for  pid=1573 comm="syz.4.301" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   98.640083][  T284] EXT4-fs (loop1): unmounting filesystem.
[   98.654479][   T28] audit: type=1326 audit(1752432567.870:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1580 comm="syz.1.302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac1018e929 code=0x7ffc0000
[   98.679590][   T28] audit: type=1326 audit(1752432567.870:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1580 comm="syz.1.302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac1018e929 code=0x7ffc0000
[   98.712279][ T1582] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=none:owns=io+mem
[   98.717402][   T28] audit: type=1326 audit(1752432567.870:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1580 comm="syz.1.302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7fac1018e929 code=0x7ffc0000
[   98.733636][ T1582] loop1: detected capacity change from 0 to 256
[   98.747805][   T28] audit: type=1326 audit(1752432567.880:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1580 comm="syz.1.302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac1018e929 code=0x7ffc0000
[   98.763089][ T1582] exfat: Unknown parameter '$'
[   98.777384][   T28] audit: type=1326 audit(1752432567.880:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1580 comm="syz.1.302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fac1018e929 code=0x7ffc0000
[   98.804487][   T28] audit: type=1326 audit(1752432567.880:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1580 comm="syz.1.302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac1018e929 code=0x7ffc0000
[   98.829411][   T28] audit: type=1326 audit(1752432567.880:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1580 comm="syz.1.302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7fac1018e929 code=0x7ffc0000
[   98.860435][   T28] audit: type=1326 audit(1752432567.880:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1580 comm="syz.1.302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac1018e929 code=0x7ffc0000
[  101.195032][ T1593] loop2: detected capacity change from 0 to 40427
[  101.195949][    T6] cdc_mbim 4-1:1.0: failed GET_NTB_PARAMETERS
[  101.203053][ T1593] F2FS-fs (loop2): fault_injection options not supported
[  101.207899][    T6] cdc_mbim 4-1:1.0: bind() failure
[  101.215102][ T1593] F2FS-fs (loop2): Image doesn't support compression
[  101.220314][  T288] usbhid 1-1:0.0: can't add hid device: -71
[  101.233273][ T1593] F2FS-fs (loop2): invalid crc value
[  101.238815][  T288] usbhid: probe of 1-1:0.0 failed with error -71
[  101.246185][    T6] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found
[  101.254693][    T6] cdc_ncm 4-1:1.1: bind() failure
[  101.260231][  T288] usb 1-1: USB disconnect, device number 12
[  101.260256][ T1593] F2FS-fs (loop2): Found nat_bits in checkpoint
[  101.314217][ T1593] F2FS-fs (loop2): Start checkpoint disabled!
[  101.321333][ T1593] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6
[  101.515526][ T1610] fuse: Bad value for 'fd'
[  101.533704][   T10] bio_check_eod: 4077 callbacks suppressed
[  101.533721][   T10] kworker/u4:1: attempt to access beyond end of device
[  101.533721][   T10] loop2: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[  101.559990][ T1613] loop4: detected capacity change from 0 to 256
[  101.590990][ T1613] FAT-fs (loop4): Unrecognized mount option "shor�name=mixed" or missing value
[  101.810953][ T1618] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=1538 sclass=netlink_xfrm_socket pid=1618 comm=syz.4.311
[  101.825497][ T1618] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=1556 sclass=netlink_xfrm_socket pid=1618 comm=syz.4.311
[  102.077730][ T1621] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  102.249123][ T1633] loop1: detected capacity change from 0 to 1024
[  102.256391][ T1633] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 4398046511107)!
[  102.270257][ T1633] EXT4-fs (loop1): group descriptors corrupted!
[  102.299130][ T1637] loop0: detected capacity change from 0 to 16
[  102.306498][ T1637] erofs: (device loop0): mounted with root inode @ nid 36.
[  102.316591][ T1637] syz.0.316: attempt to access beyond end of device
[  102.316591][ T1637] loop0: rw=0, sector=14546590680, nr_sectors = 16 limit=16
[  102.373569][ T1641] netlink: 4 bytes leftover after parsing attributes in process `syz.0.319'.
[  102.392114][ T1641] loop0: detected capacity change from 0 to 512
[  102.408326][ T1641] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  102.439989][ T1641] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e12c, mo2=0102]
[  102.444979][ T1649] xt_ecn: cannot match TCP bits for non-tcp packets
[  102.460655][ T1641] EXT4-fs (loop0): orphan cleanup on readonly fs
[  102.467537][ T1641] EXT4-fs error (device loop0): ext4_clear_blocks:883: inode #11: comm syz.0.319: attempt to clear invalid blocks 1024 len 1
[  102.487118][ T1641] EXT4-fs (loop0): Remounting filesystem read-only
[  102.494188][ T1641] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.319: bg 0: block 361: padding at end of block bitmap is not set
[  102.513866][ T1656] loop1: detected capacity change from 0 to 512
[  102.520465][ T1641] EXT4-fs (loop0): Remounting filesystem read-only
[  102.520605][    T6] usb 4-1: USB disconnect, device number 6
[  102.527895][ T1656] ext4: Bad value for 'stripe'
[  102.536842][ T1641] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6170: Corrupt filesystem
[  102.561308][ T1641] EXT4-fs (loop0): Remounting filesystem read-only
[  102.578336][ T1641] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.319: invalid indirect mapped block 1811939328 (level 0)
[  102.592686][ T1641] EXT4-fs (loop0): Remounting filesystem read-only
[  102.603081][ T1641] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.319: invalid indirect mapped block 2185560079 (level 1)
[  102.617562][ T1641] EXT4-fs (loop0): Remounting filesystem read-only
[  102.624247][ T1641] EXT4-fs (loop0): 1 truncate cleaned up
[  102.630822][ T1641] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  102.644015][ T1641] kernel profiling enabled (shift: 63)
[  102.649750][ T1209] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  102.650429][ T1641] profiling shift: 63 too large
[  102.670261][ T1656] loop1: detected capacity change from 0 to 256
[  102.677573][ T1209] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  102.685322][ T1656] exfat: Bad value for 'uid'
[  102.698242][  T283] EXT4-fs (loop0): unmounting filesystem.
[  102.718473][ T1659] loop3: detected capacity change from 0 to 256
[  102.728496][ T1659] exFAT-fs (loop3): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0b83170a, utbl_chksum : 0xe619d30d)
[  102.772273][ T1656] kvm: vcpu 0: requested 56 ns lapic timer period limited to 200000 ns
[  102.844933][  T288] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  102.942442][ T1674] loop1: detected capacity change from 0 to 512
[  102.961674][ T1674] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  103.026081][  T288] usb 3-1: config 1 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  103.041347][  T288] usb 3-1: config 1 interface 0 altsetting 5 bulk endpoint 0x82 has invalid maxpacket 1023
[  103.051007][ T1674] EXT4-fs (loop1): 1 truncate cleaned up
[  103.052030][  T288] usb 3-1: config 1 interface 0 altsetting 5 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  103.070326][  T288] usb 3-1: config 1 interface 0 has no altsetting 0
[  103.077340][ T1674] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  103.133014][  T288] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  103.133047][  T288] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  103.133070][  T288] usb 3-1: Product: Є
[  103.133085][  T288] usb 3-1: Manufacturer: ɚ榾嘨ཥƒ䟝ꑜഴ姮⢌厼莕↘⑝孾쩍윟싫얏ꈘԑ搽꿧뻞ꖾ鍈沰삵졛☢붐恣婵洘퐆者ˮ쉼失롯ઓꠝﮯٵ袑េ彩葵⽳ﾾ韏氕濷ϒ싡圡ୄ⥿ꄁ墫틼
[  103.133112][  T288] usb 3-1: SerialNumber: 픫蘩ꖮፗ剮㸜漁宴Ỹ㥱匠藖沽沙ງ㞬舜ꂸ瓥刦䟲鈽摡昫ᮭ涹中仹퉅䭝᳠㧃둶㱡篮쯻뷘ˁ賒⹭괡뢊ᮊ埲⃽觗짅彾鲅綦 㒮稯挨뵙䛆㬧䰋灃텁〓牴鞋ퟌ腡봬甁ꎫ⬁ꎈ⳱᫮餺轝짵쾊ꇁ脦ꈅบ팯᪇饢鿅鍕㤍〟㾃⫌栔穴冔Ꮐ풕
[  103.135845][  T288] usb 3-1: rejected 1 configuration due to insufficient available bus power
[  103.254652][  T288] usb 3-1: no configuration chosen from 1 choice
[  103.294232][ T1681] syz.0.332[1681] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  103.294499][ T1681] syz.0.332[1681] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  103.329470][ T1683] syz.0.332[1683] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  103.361375][ T1687] loop0: detected capacity change from 0 to 256
[  103.390970][ T1687] FAT-fs (loop0): Unrecognized mount option "shor�name=mixed" or missing value
[  103.490702][ T1689] tipc: Started in network mode
[  103.495857][ T1689] tipc: Node identity ac14140f, cluster identity 4711
[  103.502918][ T1689] tipc: New replicast peer: 255.255.255.255
[  103.509411][ T1689] tipc: Enabled bearer <udp:syz2>, priority 10
[  103.623775][ T1698] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=1538 sclass=netlink_xfrm_socket pid=1698 comm=syz.0.333
[  103.638409][ T1698] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=1556 sclass=netlink_xfrm_socket pid=1698 comm=syz.0.333
[  103.920654][   T28] kauditd_printk_skb: 23 callbacks suppressed
[  103.920679][   T28] audit: type=1400 audit(1752432573.140:346): avc:  denied  { create } for  pid=1701 comm="syz.4.337" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  103.958996][  T284] EXT4-fs (loop1): unmounting filesystem.
[  104.635698][ T1715] loop1: detected capacity change from 0 to 40427
[  104.644568][    T6] tipc: Node number set to 2886997007
[  104.795163][ T1715] F2FS-fs (loop1): Found nat_bits in checkpoint
[  104.912558][ T1715] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  105.338608][  T288] usb 3-1: USB disconnect, device number 9
[  105.488124][ T1736] netlink: 16 bytes leftover after parsing attributes in process `syz.2.344'.
[  105.497126][ T1736] netlink: 8 bytes leftover after parsing attributes in process `syz.2.344'.
[  105.725002][    T6] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  106.766946][ T1746] loop0: detected capacity change from 0 to 256
[  106.804953][    T6] usb 2-1: Using ep0 maxpacket: 32
[  106.811859][    T6] usb 2-1: config 0 has an invalid interface number: 184 but max is 0
[  106.874062][    T6] usb 2-1: config 0 has no interface number 0
[  106.966585][    T6] usb 2-1: config 0 interface 184 has no altsetting 0
[  107.054575][    T6] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  107.091509][ T1749] incfs: Options parsing error. -22
[  107.132785][ T1749] incfs: mount failed -22
[  107.147704][    T6] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  107.231445][    T6] usb 2-1: Product: syz
[  107.281570][    T6] usb 2-1: Manufacturer: syz
[  107.374450][    T6] usb 2-1: SerialNumber: syz
[  107.412548][ T1051] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  107.440482][    T6] usb 2-1: config 0 descriptor??
[  107.466466][    T6] smsc75xx v1.0.0
[  107.479522][ T1754] loop2: detected capacity change from 0 to 256
[  107.494542][ T1754] FAT-fs (loop2): Unrecognized mount option "shor�name=mixed" or missing value
[  107.687362][ T1756] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=1538 sclass=netlink_xfrm_socket pid=1756 comm=syz.2.350
[  107.701452][ T1756] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=1556 sclass=netlink_xfrm_socket pid=1756 comm=syz.2.350
[  108.027635][ T1752] loop4: detected capacity change from 0 to 40427
[  108.040524][ T1752] F2FS-fs (loop4): Invalid segment count (1)
[  108.047215][ T1752] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  108.055877][ T1752] F2FS-fs (loop4): heap/no_heap options were deprecated
[  108.057524][ T1762] netlink: 24 bytes leftover after parsing attributes in process `syz.0.353'.
[  108.063116][ T1752] F2FS-fs (loop4): Unrecognized mount option "usrquota=mode=adaptive" or missing value
[  108.139300][ T1762] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=1762 comm=syz.0.353
[  108.197117][   T28] audit: type=1326 audit(1752432577.420:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1763 comm="syz.0.354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe87578e929 code=0x7ffc0000
[  108.220563][   T28] audit: type=1326 audit(1752432577.420:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1763 comm="syz.0.354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe87578e929 code=0x7ffc0000
[  108.244228][   T39] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  108.252008][   T28] audit: type=1326 audit(1752432577.420:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1763 comm="syz.0.354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe87578e929 code=0x7ffc0000
[  108.276028][   T28] audit: type=1326 audit(1752432577.420:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1763 comm="syz.0.354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fe87578e929 code=0x7ffc0000
[  108.276061][   T28] audit: type=1326 audit(1752432577.420:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1763 comm="syz.0.354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe87578e929 code=0x7ffc0000
[  108.276088][   T28] audit: type=1326 audit(1752432577.420:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1763 comm="syz.0.354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=325 compat=0 ip=0x7fe87578e929 code=0x7ffc0000
[  108.276114][   T28] audit: type=1326 audit(1752432577.420:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1763 comm="syz.0.354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe87578e929 code=0x7ffc0000
[  108.407837][   T28] audit: type=1326 audit(1752432577.420:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1763 comm="syz.0.354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe87578e929 code=0x7ffc0000
[  108.444073][   T28] audit: type=1326 audit(1752432577.420:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1763 comm="syz.0.354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe87578e929 code=0x7ffc0000
[  108.616055][   T39] usb 4-1: config 0 has an invalid interface number: 93 but max is 0
[  108.636750][   T39] usb 4-1: config 0 has no interface number 0
[  108.645348][   T39] usb 4-1: New USB device found, idVendor=1a0a, idProduct=0104, bcdDevice=3f.ac
[  108.654590][   T39] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  108.662919][   T39] usb 4-1: Product: syz
[  108.667481][   T39] usb 4-1: Manufacturer: syz
[  108.672637][   T39] usb 4-1: SerialNumber: syz
[  108.681664][   T39] usb 4-1: config 0 descriptor??
[  108.755089][    T6] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000040: -71
[  108.766588][    T6] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error writing E2P_CMD
[  108.833528][    T6] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[  108.844795][    T6] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71
[  108.854707][    T6] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset
[  108.865347][    T6] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71
[  108.874811][    T6] smsc75xx: probe of 2-1:0.184 failed with error -71
[  108.887571][    T6] usb 2-1: USB disconnect, device number 8
[  108.926610][ T1758] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  108.945167][ T1758] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  108.956404][ T1790] loop0: detected capacity change from 0 to 16
[  108.965073][ T1790] erofs: (device loop0): mounted with root inode @ nid 36.
[  108.972517][   T39] usb_ehset_test: probe of 4-1:0.93 failed with error -32
[  108.994980][   T46] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000]
[  109.103373][   T28] kauditd_printk_skb: 19 callbacks suppressed
[  109.103396][   T28] audit: type=1400 audit(1752432578.210:375): avc:  denied  { map } for  pid=1789 comm="syz.0.359" path="/69/file1/file2" dev="loop0" ino=89 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  109.141514][   T39] usb 4-1: USB disconnect, device number 7
[  109.227092][ T1801] fuse: Bad value for 'fd'
[  109.269734][ T1811] loop1: detected capacity change from 0 to 256
[  109.280515][ T1811] exfat: Unknown parameter '0x0000000000000000'
[  109.534944][ T1747] usb 1-1: new full-speed USB device number 13 using dummy_hcd
[  109.625083][    T6] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  109.709207][ T1824] loop3: detected capacity change from 0 to 16
[  109.716842][ T1824] erofs: (device loop3): mounted with root inode @ nid 36.
[  109.724110][   T28] audit: type=1400 audit(1752432578.950:376): avc:  denied  { append } for  pid=1821 comm="syz.4.368" name="rtc0" dev="devtmpfs" ino=263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  109.732539][ T1824] SELinux: (dev loop3, type erofs) getxattr errno 117
[  109.748939][ T1747] usb 1-1: config 0 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  109.767315][ T1747] usb 1-1: config 0 interface 0 has no altsetting 0
[  109.774083][ T1747] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00
[  109.784102][ T1747] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  109.793075][ T1747] usb 1-1: config 0 descriptor??
[  109.809899][    T6] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  109.822485][ T1834] loop3: detected capacity change from 0 to 512
[  109.837470][    T6] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  109.843710][ T1834] EXT4-fs (loop3): revision level too high, forcing read-only mode
[  109.852742][ T1837] loop4: detected capacity change from 0 to 512
[  109.860860][    T6] usb 2-1: Product: syz
[  109.864296][ T1834] EXT4-fs (loop3): orphan cleanup on readonly fs
[  109.865374][    T6] usb 2-1: Manufacturer: syz
[  109.872947][ T1834] EXT4-fs warning (device loop3): ext4_enable_quotas:7053: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[  109.877323][    T6] usb 2-1: SerialNumber: syz
[  109.897210][ T1837] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  109.906156][ T1834] EXT4-fs (loop3): Cannot turn on quotas: error -22
[  109.914156][ T1834] EXT4-fs error (device loop3): ext4_orphan_get:1400: inode #16: comm syz.3.370: iget: immutable or append flags not allowed on symlinks
[  109.929029][ T1834] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.370: couldn't read orphan inode 16 (err -117)
[  109.931524][ T1837] EXT4-fs (loop4): 1 truncate cleaned up
[  109.942395][ T1834] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  109.946983][ T1837] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  109.976178][   T28] audit: type=1400 audit(1752432579.200:377): avc:  denied  { bind } for  pid=1833 comm="syz.3.370" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  110.002930][ T1747] usbhid 1-1:0.0: can't add hid device: -71
[  110.009851][ T1747] usbhid: probe of 1-1:0.0 failed with error -71
[  110.023014][ T1747] usb 1-1: USB disconnect, device number 13
[  110.028922][  T286] EXT4-fs (loop3): unmounting filesystem.
[  110.036576][  T285] EXT4-fs (loop4): unmounting filesystem.
[  110.113899][ T1849] fuse: Bad value for 'user_id'
[  110.119838][ T1850] fuse: Bad value for 'user_id'
[  110.130974][ T1811] loop1: detected capacity change from 0 to 256
[  110.142599][ T1852] loop2: detected capacity change from 0 to 512
[  110.151108][ T1852] EXT4-fs: dax option not supported
[  110.160842][ T1811] exfat: Deprecated parameter 'namecase'
[  110.188349][ T1811] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x36bd6320, utbl_chksum : 0xe619d30d)
[  110.281543][ T1858] netlink: 36 bytes leftover after parsing attributes in process `syz.3.376'.
[  110.292677][ T1858] netlink: 12 bytes leftover after parsing attributes in process `syz.3.376'.
[  110.340198][ T1860] loop3: detected capacity change from 0 to 4096
[  110.353895][ T1860] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  110.372394][  T286] EXT4-fs (loop3): unmounting filesystem.
[  110.541939][   T60] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  110.874949][  T288] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  110.946523][   T60] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2
[  110.956094][   T60] usb 3-1: config 1 has no interface number 0
[  110.962261][   T60] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  110.973425][   T60] usb 3-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping
[  110.977573][ T1883] loop0: detected capacity change from 0 to 512
[  110.982613][   T60] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 31910, setting to 64
[  111.006116][   T60] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  111.015410][   T60] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  111.024455][   T60] usb 3-1: Product: syz
[  111.029068][   T60] usb 3-1: Manufacturer: syz
[  111.033774][   T60] usb 3-1: SerialNumber: syz
[  111.038841][ T1883] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.383: invalid indirect mapped block 256 (level 2)
[  111.053356][ T1883] EXT4-fs (loop0): 2 truncates cleaned up
[  111.060844][ T1883] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  111.070407][  T288] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  111.083755][  T288] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  111.093677][  T288] usb 5-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00
[  111.102906][  T288] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  111.111867][  T288] usb 5-1: config 0 descriptor??
[  111.135578][    T6] cdc_ncm 2-1:1.0: MAC-Address: 42:42:42:42:42:42
[  111.142216][    T6] cdc_ncm 2-1:1.0: setting tx_max = 184
[  111.337477][ T1872] loop4: detected capacity change from 0 to 256
[  111.347406][    T6] cdc_ncm 2-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.1-1, CDC NCM (NO ZLP), 42:42:42:42:42:42
[  111.360248][ T1872] exFAT-fs (loop4): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d)
[  111.428388][   T28] audit: type=1400 audit(1752432580.650:378): avc:  denied  { read } for  pid=142 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1
[  111.429823][    T6] usb 2-1: USB disconnect, device number 9
[  111.464394][   T28] audit: type=1400 audit(1752432580.680:379): avc:  denied  { search } for  pid=142 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  111.497551][  T288] hid-steam 0003:28DE:1142.0006: item fetching failed at offset 3/5
[  111.501353][   T28] audit: type=1400 audit(1752432580.680:380): avc:  denied  { read } for  pid=142 comm="dhcpcd" name="n15" dev="tmpfs" ino=4477 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  111.509656][  T288] hid-steam 0003:28DE:1142.0006: steam_probe:parse of hid interface failed
[  111.539049][    T6] cdc_ncm 2-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.1-1, CDC NCM (NO ZLP)
[  111.565537][  T288] hid-steam: probe of 0003:28DE:1142.0006 failed with error -22
[  111.594426][  T288] usb 5-1: USB disconnect, device number 10
[  111.614309][   T19] ==================================================================
[  111.622422][   T19] BUG: KASAN: use-after-free in __list_del_entry_valid+0xa6/0x130
[  111.622597][   T28] audit: type=1400 audit(1752432580.680:381): avc:  denied  { open } for  pid=142 comm="dhcpcd" path="/run/udev/data/n15" dev="tmpfs" ino=4477 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  111.630259][   T19] Read of size 8 at addr ffff888116fc8cf0 by task kworker/0:1/19
[  111.630284][   T19] 
[  111.630291][   T19] CPU: 0 PID: 19 Comm: kworker/0:1 Not tainted 6.1.141-syzkaller-00038-ge2deb0b42a3a #0
[  111.630311][   T19] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  111.630324][   T19] Workqueue: rcu_gp process_srcu
[  111.687873][   T19] Call Trace:
[  111.691200][   T19]  <TASK>
[  111.694169][   T19]  __dump_stack+0x21/0x24
[  111.698543][   T19]  dump_stack_lvl+0xee/0x150
[  111.703164][   T19]  ? __cfi_dump_stack_lvl+0x8/0x8
[  111.708215][   T19]  ? __list_del_entry_valid+0xa6/0x130
[  111.713681][   T19]  print_address_description+0x71/0x210
[  111.719335][   T19]  print_report+0x4a/0x60
[  111.723679][   T19]  kasan_report+0x122/0x150
[  111.728193][   T19]  ? __list_del_entry_valid+0xa6/0x130
[  111.734366][   T19]  __asan_report_load8_noabort+0x14/0x20
[  111.740039][   T19]  __list_del_entry_valid+0xa6/0x130
[  111.745349][   T19]  process_one_work+0x4b9/0xc40
[  111.750228][   T19]  worker_thread+0xa29/0x11f0
[  111.754922][   T19]  kthread+0x281/0x320
[  111.759000][   T19]  ? __cfi_worker_thread+0x10/0x10
[  111.764210][   T19]  ? __cfi_kthread+0x10/0x10
[  111.768808][   T19]  ret_from_fork+0x1f/0x30
[  111.773249][   T19]  </TASK>
[  111.776285][   T19] 
[  111.778622][   T19] Allocated by task 6:
[  111.782710][   T19]  kasan_set_track+0x4b/0x70
[  111.787314][   T19]  kasan_save_alloc_info+0x25/0x30
[  111.792443][   T19]  __kasan_kmalloc+0x95/0xb0
[  111.797042][   T19]  __kmalloc_node+0xb2/0x1e0
[  111.801638][   T19]  kvmalloc_node+0x294/0x480
[  111.806234][   T19]  alloc_netdev_mqs+0x8d/0xf90
[  111.811005][   T19]  alloc_etherdev_mqs+0x37/0x40
[  111.815883][   T19]  usbnet_probe+0x20c/0x2780
[  111.820492][   T19]  usb_probe_interface+0x610/0xaf0
[  111.825706][   T19]  really_probe+0x2cb/0x960
[  111.830221][   T19]  __driver_probe_device+0x198/0x280
[  111.835546][   T19]  driver_probe_device+0x54/0x3e0
[  111.840588][   T19]  __device_attach_driver+0x2e9/0x4a0
[  111.845977][   T19]  bus_for_each_drv+0x183/0x210
[  111.850835][   T19]  __device_attach+0x2a2/0x400
[  111.855608][   T19]  device_initial_probe+0x1a/0x20
[  111.860657][   T19]  bus_probe_device+0xc0/0x1f0
[  111.865424][   T19]  device_add+0xb4d/0xef0
[  111.869781][   T19]  usb_set_configuration+0x19c2/0x1f10
[  111.875253][   T19]  usb_generic_driver_probe+0x91/0x150
[  111.880714][   T19]  usb_probe_device+0x159/0x270
[  111.885570][   T19]  really_probe+0x2cb/0x960
[  111.890077][   T19]  __driver_probe_device+0x198/0x280
[  111.895365][   T19]  driver_probe_device+0x54/0x3e0
[  111.900482][   T19]  __device_attach_driver+0x2e9/0x4a0
[  111.905859][   T19]  bus_for_each_drv+0x183/0x210
[  111.910709][   T19]  __device_attach+0x2a2/0x400
[  111.915483][   T19]  device_initial_probe+0x1a/0x20
[  111.920503][   T19]  bus_probe_device+0xc0/0x1f0
[  111.925263][   T19]  device_add+0xb4d/0xef0
[  111.929588][   T19]  usb_new_device+0xa70/0x1520
[  111.934347][   T19]  hub_event+0x2a5d/0x4680
[  111.938827][   T19]  process_one_work+0x71f/0xc40
[  111.943683][   T19]  worker_thread+0xa29/0x11f0
[  111.948438][   T19]  kthread+0x281/0x320
[  111.952532][   T19]  ret_from_fork+0x1f/0x30
[  111.956959][   T19] 
[  111.959276][   T19] Freed by task 6:
[  111.962993][   T19]  kasan_set_track+0x4b/0x70
[  111.967594][   T19]  kasan_save_free_info+0x31/0x50
[  111.972655][   T19]  ____kasan_slab_free+0x132/0x180
[  111.977765][   T19]  __kasan_slab_free+0x11/0x20
[  111.982532][   T19]  slab_free_freelist_hook+0xc2/0x190
[  111.987909][   T19]  __kmem_cache_free+0xb7/0x1b0
[  111.992766][   T19]  kfree+0x6f/0xf0
[  111.996838][   T19]  kvfree+0x35/0x40
[  112.000651][   T19]  netdev_freemem+0x3f/0x60
[  112.005160][   T19]  netdev_release+0x7f/0xb0
[  112.009675][   T19]  device_release+0xa4/0x1d0
[  112.014263][   T19]  kobject_put+0x19d/0x280
[  112.018772][   T19]  put_device+0x1f/0x30
[  112.022937][   T19]  free_netdev+0x392/0x490
[  112.027351][   T19]  usbnet_disconnect+0x25a/0x3b0
[  112.032319][   T19]  usb_unbind_interface+0x223/0x8d0
[  112.037538][   T19]  device_release_driver_internal+0x508/0x820
[  112.043640][   T19]  device_release_driver+0x19/0x20
[  112.049287][   T19]  bus_remove_device+0x2ee/0x350
[  112.054224][   T19]  device_del+0x6a4/0xeb0
[  112.058556][   T19]  usb_disable_device+0x3a8/0x750
[  112.063590][   T19]  usb_disconnect+0x31e/0x860
[  112.068381][   T19]  hub_event+0x1bd5/0x4680
[  112.072846][   T19]  process_one_work+0x71f/0xc40
[  112.077705][   T19]  worker_thread+0xd2e/0x11f0
[  112.082390][   T19]  kthread+0x281/0x320
[  112.086459][   T19]  ret_from_fork+0x1f/0x30
[  112.090873][   T19] 
[  112.093188][   T19] Last potentially related work creation:
[  112.098894][   T19]  kasan_save_stack+0x3a/0x60
[  112.103563][   T19]  __kasan_record_aux_stack+0xb6/0xc0
[  112.108932][   T19]  kasan_record_aux_stack_noalloc+0xb/0x10
[  112.114740][   T19]  insert_work+0x51/0x300
[  112.119070][   T19]  __queue_work+0x9b1/0xd30
[  112.123566][   T19]  queue_work_on+0xd2/0x140
[  112.128067][   T19]  usbnet_link_change+0x176/0x1a0
[  112.133100][   T19]  usbnet_probe+0x1d55/0x2780
[  112.137789][   T19]  usb_probe_interface+0x610/0xaf0
[  112.142908][   T19]  really_probe+0x2cb/0x960
[  112.147413][   T19]  __driver_probe_device+0x198/0x280
[  112.152693][   T19]  driver_probe_device+0x54/0x3e0
[  112.157717][   T19]  __device_attach_driver+0x2e9/0x4a0
[  112.163084][   T19]  bus_for_each_drv+0x183/0x210
[  112.167934][   T19]  __device_attach+0x2a2/0x400
[  112.172695][   T19]  device_initial_probe+0x1a/0x20
[  112.177724][   T19]  bus_probe_device+0xc0/0x1f0
[  112.182511][   T19]  device_add+0xb4d/0xef0
[  112.186847][   T19]  usb_set_configuration+0x19c2/0x1f10
[  112.192417][   T19]  usb_generic_driver_probe+0x91/0x150
[  112.197879][   T19]  usb_probe_device+0x159/0x270
[  112.202735][   T19]  really_probe+0x2cb/0x960
[  112.207242][   T19]  __driver_probe_device+0x198/0x280
[  112.212528][   T19]  driver_probe_device+0x54/0x3e0
[  112.217546][   T19]  __device_attach_driver+0x2e9/0x4a0
[  112.222921][   T19]  bus_for_each_drv+0x183/0x210
[  112.227771][   T19]  __device_attach+0x2a2/0x400
[  112.232657][   T19]  device_initial_probe+0x1a/0x20
[  112.237710][   T19]  bus_probe_device+0xc0/0x1f0
[  112.242480][   T19]  device_add+0xb4d/0xef0
[  112.246813][   T19]  usb_new_device+0xa70/0x1520
[  112.251584][   T19]  hub_event+0x2a5d/0x4680
[  112.256024][   T19]  process_one_work+0x71f/0xc40
[  112.260878][   T19]  worker_thread+0xa29/0x11f0
[  112.265561][   T19]  kthread+0x281/0x320
[  112.269627][   T19]  ret_from_fork+0x1f/0x30
[  112.274056][   T19] 
[  112.276384][   T19] The buggy address belongs to the object at ffff888116fc8000
[  112.276384][   T19]  which belongs to the cache kmalloc-4k of size 4096
[  112.290435][   T19] The buggy address is located 3312 bytes inside of
[  112.290435][   T19]  4096-byte region [ffff888116fc8000, ffff888116fc9000)
[  112.304146][   T19] 
[  112.306478][   T19] The buggy address belongs to the physical page:
[  112.312883][   T19] page:ffffea00045bf200 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x116fc8
[  112.323129][   T19] head:ffffea00045bf200 order:3 compound_mapcount:0 compound_pincount:0
[  112.331457][   T19] flags: 0x4000000000010200(slab|head|zone=1)
[  112.337636][   T19] raw: 4000000000010200 dead000000000100 dead000000000122 ffff888100043380
[  112.346231][   T19] raw: 0000000000000000 0000000000040004 00000001ffffffff 0000000000000000
[  112.354824][   T19] page dumped because: kasan: bad access detected
[  112.361234][   T19] page_owner tracks the page as allocated
[  112.366940][   T19] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 933, tgid 931 (syz.4.149), ts 65362451469, free_ts 61005090562
[  112.389439][   T19]  post_alloc_hook+0x1f5/0x210
[  112.394213][   T19]  prep_new_page+0x1c/0x110
[  112.398716][   T19]  get_page_from_freelist+0x2c7b/0x2cf0
[  112.404280][   T19]  __alloc_pages+0x19e/0x3a0
[  112.408879][   T19]  alloc_slab_page+0x6e/0xf0
[  112.413492][   T19]  new_slab+0x98/0x3d0
[  112.417561][   T19]  ___slab_alloc+0x6f6/0xb50
[  112.422152][   T19]  __slab_alloc+0x5e/0xa0
[  112.426487][   T19]  __kmem_cache_alloc_node+0x203/0x2c0
[  112.431963][   T19]  kmalloc_trace+0x29/0xb0
[  112.436457][   T19]  ipv6_add_dev+0x614/0x1230
[  112.441067][   T19]  addrconf_notify+0x6d5/0xe40
[  112.445846][   T19]  raw_notifier_call_chain+0xa1/0x110
[  112.451233][   T19]  call_netdevice_notifiers+0x111/0x190
[  112.456815][   T19]  register_netdevice+0x10e2/0x14a0
[  112.462115][   T19]  register_netdev+0x3e/0x50
[  112.466710][   T19] page last free stack trace:
[  112.471375][   T19]  free_unref_page_prepare+0x742/0x750
[  112.476835][   T19]  free_unref_page+0x8f/0x530
[  112.481512][   T19]  __free_pages+0x67/0x100
[  112.485935][   T19]  __free_slab+0xca/0x1a0
[  112.490270][   T19]  discard_slab+0x29/0x40
[  112.494607][   T19]  __slab_free+0x201/0x280
[  112.499021][   T19]  ___cache_free+0xbf/0xd0
[  112.503432][   T19]  qlist_free_all+0xc6/0x140
[  112.508113][   T19]  kasan_quarantine_reduce+0x14a/0x170
[  112.513575][   T19]  __kasan_slab_alloc+0x24/0x80
[  112.518425][   T19]  slab_post_alloc_hook+0x4f/0x2d0
[  112.523544][   T19]  __kmem_cache_alloc_node+0x192/0x2c0
[  112.528997][   T19]  kmalloc_trace+0x29/0xb0
[  112.533411][   T19]  usb_control_msg+0x74/0x3f0
[  112.538082][   T19]  hub_ext_port_status+0x100/0x6b0
[  112.543187][   T19]  hub_port_reset+0x652/0x16e0
[  112.547969][   T19] 
[  112.550287][   T19] Memory state around the buggy address:
[  112.555992][   T19]  ffff888116fc8b80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  112.564051][   T19]  ffff888116fc8c00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  112.572112][   T19] >ffff888116fc8c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  112.580159][   T19]                                                              ^
[  112.587872][   T19]  ffff888116fc8d00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  112.595920][   T19]  ffff888116fc8d80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  112.603967][   T19] ==================================================================
[  112.612014][   T19] Disabling lock debugging due to kernel taint
[  112.634987][ T1841] EXT4-fs error (device loop0): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 5: invalid block bitmap
[  112.635688][   T28] audit: type=1400 audit(1752432580.680:382): avc:  denied  { getattr } for  pid=142 comm="dhcpcd" path="/run/udev/data/n15" dev="tmpfs" ino=4477 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  112.674169][   T60] cdc_ncm 3-1:1.1: bind() failure
[  112.735338][   T28] audit: type=1400 audit(1752432580.690:383): avc:  denied  { ioctl } for  pid=1871 comm="syz.4.380" path="/80/file1/file1" dev="loop4" ino=1048627 ioctlcmd=0x587d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  112.784923][   T28] audit: type=1400 audit(1752432580.790:384): avc:  denied  { read } for  pid=1890 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=493 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  112.900944][  T396] usb 3-1: USB disconnect, device number 10
[  113.179549][  T283] EXT4-fs (loop0): unmounting filesystem.