last executing test programs:

6.136220258s ago: executing program 3 (id=89):
syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file0\x00', 0x180c8, &(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x1, 0x242, &(0x7f0000000300)="$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")
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='blkio.bfq.io_service_bytes_recursive\x00', 0x0, 0x0)
syz_mount_image$exfat(&(0x7f00000009c0), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='utf8,time_offset=0x0000000000000009,uid=', @ANYRESHEX=0xee01, @ANYBLOB="2c696f636861727365743d63703933362c6572726f72733d72656d6f756e742d726f2c757466382c6572726f72733d72656d6f756e742d726f2c646d61736b3d30303030303030303030303030303030303030303030342c74696d655f6f66667365743d3078303030303030303030303030303030362c6572726f72733d72656d6f756e742d726f2c007718493fa5e1236995baf2ad873ae8a6dcba132eaa9b3fc33fca0eae1117284d531e0b15de5920ba8a9def72ef71fa641ef945666de6243e41bb8a0d9891ba7da5b33fb6bf7c7523288c5ee3cd60793ca5e511de63ffdaff0aee632ad6e89f82002b43d590db5fc4d2f43254f8930172f330adcd3cc857a05479d5b30736918a2cadb61c826243c33db0e3bf385b005236710fa3aef32a9eca8f6978e6f582ddb2514f7178088106458bf95f327c8ec213f75eb9a7942bdef6afca47a252fe8d2e6dca8f25704e6e7031521fa0f8aad51387e033e016b1a9c460"], 0x1, 0x153b, &(0x7f0000000a00)="$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")
syz_mount_image$exfat(&(0x7f00000005c0), &(0x7f0000000000)='./file1\x00', 0x6, &(0x7f0000000600)=ANY=[], 0x49, 0x14fd, &(0x7f0000001c00)="$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")
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0)
utimensat(r1, 0x0, &(0x7f0000000080)={{0x0, 0xea60}, {0x0, 0x2710}}, 0x0)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuset.memory_pressure\x00', 0x275a, 0x0)
socket$xdp(0x2c, 0x3, 0x0)
syz_open_procfs(0x0, &(0x7f0000000300)='net/igmp6\x00')
r2 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000140)={0x4200, 0x7ff, 0x3}, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000010c0)=ANY=[@ANYBLOB="200000001600010a00000000000000000a0000000c0000800800", @ANYRES16=r2], 0x20}, 0x1, 0x0, 0x0, 0x20040041}, 0x0)
ioctl$KVM_RUN(r0, 0xae80, 0x0)
truncate(&(0x7f0000000140)='./file0/file1\x00', 0xe2)

6.081348982s ago: executing program 3 (id=91):
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
close(0xffffffffffffffff)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x10, 0x0, 0x0)
write$cgroup_devices(0xffffffffffffffff, 0x0, 0x9)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x5, 0x2, 0x7, 0x0, 0x1, 0x10000}, 0x50)
close(r0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0xb, 0x7, 0x10001, 0x8001, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffc}, 0x50)
bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r1}, &(0x7f00000002c0), &(0x7f0000000300)}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x5}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r2, r0}, 0xc)
syz_emit_ethernet(0x32, &(0x7f00000002c0)={@broadcast, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0)
syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000340)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x56a, 0xffffffff, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x4, 0x80, 0x10, "", [{{0x9, 0x4, 0x0, 0x8, 0x1, 0x3, 0x1, 0x2, 0x2, {0x9, 0x21, 0x401, 0x0, 0x1, {0x22, 0x5df}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0xf4, 0x7, 0x3}}}}}]}}]}}, &(0x7f0000000c40)={0xa, &(0x7f00000005c0)={0xa, 0x6, 0x300, 0x3, 0x4, 0x3, 0xff, 0xfe}, 0x65, &(0x7f00000006c0)={0x5, 0xf, 0x65, 0x2, [@ssp_cap={0x20, 0x10, 0xa, 0x1, 0x5, 0x1, 0xf0f, 0x7, [0xffc030, 0x3f28, 0x0, 0xf, 0xff30]}, @generic={0x40, 0x10, 0x4, "63d29f1be04fbded7329f4fbb2c4e5ca2e4a56cc7997a76f60c5f4c64817586d5b74fa0d81f4906e58095da63d5ab7a1e0c9a5914a1c5a605bce90bedb"}]}, 0x4, [{0x4, &(0x7f0000000780)=@lang_id={0x4, 0x3, 0x813}}, {0xf7, &(0x7f0000000880)=@string={0xf7, 0x3, "024c6f77914040fd9fbce2ce1bbf12afe2642786a9dd510dde0e5743456ed846461d2a9046b4b4364c11dfb5a008dbba299d9356328a2e9ea069927100e345eb9083c832701681b000bd963038fcfe504567f0b55a9f8811d34062271cf52eef63a59479a7037ed131efa24b6f2f72f435ac2d6c15f760369bd0e389b4adf67976d3d447c1ff1e2abe3924d1714520b7cdaceced7c1b40f0d19ee996dbdfd9326ed8da3ec15f8fcef24eff921efc149a5deaa6d4ea4c0f06f53df4ff006f84aa2c8ba4a339ba655afd840edbe4fe84a88b473942b69cbcc2125f219a35674a2308c8e64134c629fb7c3deeda968dd6e4af2da56b2f"}}, {0xb9, &(0x7f0000000a00)=@string={0xb9, 0x3, "212a17a85cb3b3b75f26bf956406e3c97232991f7fa6cd8786069a5d5727b8c5c32c805dd90d1f340ceddb0bfa8612c60085cf88eec776179274deb8f2681e429b27e9961e5c1f3177952f9b8fef0d87d5067bfd0946fdfbcccdb6d0046afd7c1efdf90b007a047b9447c5fce4bbec21eab54d8a2203865e9fe48bf0beb2dcba4e4881929e6e4b8b529cae8549eafdce6500bed83c4539281cdb730156dfd16a27df0d75c52975e04370399ef4e6431c2789d01feda85b"}}, {0xb9, &(0x7f0000000b80)=@string={0xb9, 0x3, "7d008192d2425892f69ea65063a5bb381a23f95c64c7d83dc6cd5a61488592c928a803b99201336ec71b6bcdd44ca95a4db29319029bd6db907cbad0e5ce06e16b972e605d570a6cfe659a651ed19f7b01d3878f1095c32bd9a1ab1c826afb6cf836a6feaac2ef8693a99ac9394aec648ca27e843e5ad3f0be9f02e57c234648666e811f48f5163ee1f7241d55ec2b8099bb0daf8db88249f1ececde0c456852dbfa96f4b554b5aca70b926c725e0df7cda426e04b3abd"}}]})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000ac0)=@newqdisc={0xa8, 0x24, 0x200, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xa, 0xffe7}, {0x7, 0x3}, {0x5, 0xffff}}, [@TCA_RATE={0x6, 0x5, {0xbb, 0x3}}, @TCA_STAB={0x6c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0x8, 0x4, 0xffffffff, 0x2, 0x6, 0x6}}, {0x4}}, {{0x1c, 0x1, {0x7, 0x0, 0x8f, 0x6, 0x2, 0x9, 0xf, 0x3}}, {0xa, 0x2, [0x7, 0x6, 0x9]}}, {{0x1c, 0x1, {0x81, 0x8, 0x8, 0x4, 0x0, 0x5, 0x200}}, {0x4}}]}, @TCA_RATE={0x6, 0x5, {0xc0, 0x9}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x9}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4000880}, 0x20008084)
close(0x3)
r6 = socket(0x10, 0x803, 0x0)
sendto(r6, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r6, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f, 0xa1}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400})
sendmsg$nl_generic(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001400)=ANY=[@ANYBLOB="14000000520001f6"], 0x14}, 0x1, 0x0, 0x0, 0x404c000}, 0x40)
r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r4)
sendmsg$TIPC_NL_BEARER_SET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100280000000000000002000000200001800d0001007564703a73797a32"], 0x34}}, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r8, 0x8913, &(0x7f00000000c0)={'dummy0\x00', @random='\x00\x00 \x00'})
sendmsg$TIPC_NL_PUBL_GET(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x7c, r7, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x4c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}]}, @TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xc5}]}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x81}, 0x20008024)

4.155612894s ago: executing program 3 (id=110):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c)
unshare(0x22020600)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000d00), 0x1, 0x0)
pwrite64(r1, 0x0, 0x0, 0xffffffff)
mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000010c0)}], 0x1, 0x1)
syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @random="5a01f3c2f136", @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x2, @local, @remote, @local, @remote}}}}, 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x20, 0x0, 0x0, 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x62)
setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10)
close(r2)
epoll_create(0x4)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x5, 0x6, 0x4932, 0x9, 0x41}, 0x50)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0xfffffffffffffe8b, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r4 = socket$packet(0x11, 0x2, 0x300)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000180)=r5, 0x4)
r6 = socket(0x11, 0x3, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000005c0)={'gre0\x00', <r8=>0x0})
bind$packet(r6, &(0x7f0000000280)={0x11, 0x0, r8, 0x1, 0x11, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}}, 0x14)
setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000240)=0x9, 0x4)
sendmsg$netlink(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="02011400012918000e1a80009f0001143f11002f0600ac141430e0000001808a8972bd0b72e41082b1a3d206", @ANYBLOB="363d60be312a894a0ad8b1847ecd706f971fd8ba38e2dcccbc09c00700e2aeacc799fc70e1a37aab31c9c653530627fd6245fa47050af6"], 0xdd12}], 0x1, 0x0, 0x0, 0x4000007}, 0x4000)
r9 = socket$unix(0x1, 0x5, 0x0)
bind$unix(r9, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x12)
listen(r9, 0x787)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000200), 0x2a10413, &(0x7f0000000780)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r9}})

3.78452027s ago: executing program 4 (id=114):
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x35, 0x0, &(0x7f0000000100)="b9ff03076844268cb89e14f088a847e04305000f4000631177fbac14144588a8030394029f034d2f87e589ca6aab845013f286dd1a", 0x0, 0xfe, 0x60000e1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0xc, 0xe, &(0x7f00000044c0)=ANY=[@ANYBLOB="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", @ANYRES16=r0], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb}, 0x94) (async)
r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x10b643, 0x0)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000600)=0x80000000)
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="726f6469722c73686f72746e616d653d77696e39352c6e6f6e756d7461696c3d302c757466383d302c696f636861727365743d63703836362c726f6469722c756e695f786c6174653d302c73686f72746e616d653d6d697865642c73686f72746e616d653d6c6f7765722c636f6465706167653d3835322c756e695f786c6174653d312c726f6469722c756e695f786c6174653d302c726f6469722c696f636861727365743d6b6f69382d722c6572726f72733d636f6e74696e75652c756e695f786c6174653d312c636865636b3d7374726963742c007dda7c45d5aad78cccfdc2ffc29d6a3b6e1b129f9d0266d865d85fd2bfa2ccc210c0dcd127a25f0d6c6d96a9a07afc56b8e1aba9cc2ada1d083e28a51159b7c76a012ba863bd2b72ca09635af17887064bb040ed8e5244d0f8d2cf2a0964bc96503d78291d"], 0x6, 0x2d5, &(0x7f0000000680)="$eJzs3T+LHGUcB/Df7O3tTrTYLaxEcEALq5BLa7OHJCBeZdhCLfQwCcjtIiRw4B+cTWUl2FhY+AoEwRdi4zsQbAU7IwRGZnYmM5vbXPbk9sTc59PcM8883+f5zdxwO1fccx+9Mj+6ncXdB1/+FmmaRG8Sk3iYxDh60VgUS/nycPJtAAD/Zw+LIv6sP9/PkksiIt1eWQDAFm32+d9vmz9fSFkAwBbdeu/9d/YPDm68m2Vp3Jx/fTwtf7Mvvy7P79+NT2IWd+JajOJRRPWisBvV20LZvFkURd7PSuN4fZ4fT8vk/MNf6vn3/4io8nsxinHV9fhto8q/fXBjL1vq5POyjhfq9Sdl/nqM4qXH4ZX89TX5mA7ijdc69V+NUfz6cXwas7hdFdHmv9rLsreK7/764oOyvDKf5MfTYTWuVex0j65czLcHAAAAAAAAAAAAAAAAAAAAAIDn1NV675xhVPv3lF31/js7j8qD3cga49X9eZb5pJmouz9QURR5ET80++tcy7KsqAe2+X683O9uLAgAAAAAAAAAAAAAAAAAAACX1/3PPj86nM3u3DuXRrMbQD8i/r4V8W/nmXR6Xo3TBw/rNQ9ns17dXB3T7/bETjMmiTi1jPIizum2PKtx5UTNdePHnzaaJ4lY1D3psxfdXb/WeTaap+voMFl/D4fR9KT1Q/L9IKIdM4inLbFY7Rk8rYwizvL4DdaeGm0W/6a+2nKeF6uevDm1OJmK5InCkqQz5s3fl3PVPcmTVzGo7uq6MiJtGm18dUy60fMc6TJ+8mdFYrcOAAAAAAAAAAAAAAAAAADYqvavf9ecfHBqtFcMt1YWAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFyo9v//n6GR1+ENBg/i3v3/+BIBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4BP4JAAD//47KXt4=")
syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000000)='./bus\x00', 0x2800088, &(0x7f0000000240)=ANY=[@ANYBLOB='shortname=lower,shortname=win95,rodir,iocharset=default,uni_xlate=0,nonumtail=1,utf8=0,flush,rodir,shortname=win95,shortname=winnt,shortname=win95,showexec,uni_xlate=0,utf8=0,utf8=0,uni_xlate=0,shortname=mixed,\x00'], 0x95, 0x2b8, &(0x7f0000000340)="$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") (async)
prlimit64(0x0, 0xe, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async)
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f00000002c0)='./file0\x00', 0x1200082, &(0x7f0000000500)=ANY=[@ANYBLOB="6572726f72733d636f6e74696e75652c757466382c756d61736b3d303030303030303030303030303030303030323136323935302c646973636172642c616c6c6f775f7574696d653d3030303030303030352c6572726f72733d72656d6f756e742d726f2c646973636172642c00d50194377d24b59539512129e54509e955e3ac3e9dd76061aeb341a8ae53564e806289fad8cab1be25d1de2b9d46be57d2e9c2ded432413ab147de643c400dba4f15a90c962bcd8d805d7d5f5700"/203], 0x5, 0x1530, &(0x7f0000002f80)="$eJzs3AuYjlX3MPC19t43Y5r0NMlh2Huvm4cG2yRJDklySJIkSc4JSZMkCYkhp6QhCTlOyGEIyWFi0jifDzknyStJkpCQZH/XdPj83/q/V/2/t/fz/t9Zv+u6r9lrnmetZ93Pmmvuw3PNfNVteK0mtas3IiL4p+DPX1IAIAYABgPANQAQAED5+PLx2Y/nkZjyz70I+2s9mH6lO2BXEs8/Z+P552w8/5yN55+z8fxzNp5/zsbzz9l4/ozlZNtmFbqWt5y7/XL/Pwb4/n8OxMf/nI3n/x/De9/nf5zE88/ZeP45G88/Z+P552w8/5yN55+z2N/EPH/GcrK/5D5y7l+K/cPniP/NnzP8+lb9k3WKBz+X+Vf1Gfw/5V2hHzvGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYYznMeX+ZAoBf11e6L8YYY4wxxhhjjP11fO4r3QFjjDHGGGOMMcb+9RBASVAQQC7IDTGQB2LhKoiDqyEvXAMRuBbi4TrIB9dDfigABaEQJEBhKAIaDFggCKEoFIMoFIcScAMkQkkoBaXBQRlIghuhLNwE5eBmKA+3QAW4FSpCJagMVeA2qAq3QzW4A6rDnVADakItqA13QR28G+rCPVAP7oX6cB80gPuhITwAjeBBaAwPQRN4GJpCM2gOLaAltILWv82HP5P/PPSCF6A39IEU6Av94EXoDwNgIAyCwfASDIGXYSi8AqkwDIbDqzACXoOR8DqMgtEwBt6AsTAOxsMEmAiTIA3ehMkwBabCWzANpsMMmAnpMAtmw9swB+bCPHgH5sO7sAAWwiJYDBnwHiyBpZAJ78My+ACyYDmsgJWwClbDGlgL62A9bICNsAk2wxbYCtvgQ9gOO2An7ILdsAf2wkewDz6G/fAJHIBP/4f5536T3x0BAQUKVKgwF+bCGIzBWIzFOIzDvJgXIxjBeIzHfJgP82N+LIgFMQEAi2ARNGiQkLAoFsUoRrEElsBETMRSWAodOkzCJCyLN2E5LIflsTxWwApYESthJayCVbAqVsVqWA2r37oQAGtgLayFd+FdeDfWxbpYD+thfayPDbABNsSG2AgbYWNsjE2wCTbFptgcm2NLbImtsTW2wTbYFttie2yPHbADdsSOmIzJ2Ak7YWfsjF2wC3bFrtgNu2F37IE98Hl8Hl/AF7AP1hB9sR/2w/7YHwfiIByEL+EQfBlfximYisNwOL6Kr+JrOBLP4igcjWNwDFYV43A8TkASkzAN03AyTsapOBWn4XScjjMxHWfhbJyNc3AuzsV3cD6+i+/iQlyIizEDM3AJLsVMzMRleA6zcDmuwJW4CgBX4Vpch2txA27EDbgZN+NW3Iof4oe4A3fgLtyFe3APfoQf4cf4MaZiMwA4iAfxEB7Cw3gYj+ARPIpH8Rgew+N4HE/gCTyJp/A0nsIzeAbP4jk8j+fxAl7Ai/hswheN95RcnwoimxJK5BK5RIyIEbEiVsSJOJFX5BURERHxIl7kE/lEfpFfFBQFRYJIEEVEEWGEESRCUVQUFVERFSVECZEoEkUpUUr0FU4kiSRRVpQV5UQ5UV7cIiqIW0VFUUm0c1VEFVFVtHfVxB2iuqguaoiaopaoLWqLOqKOqCvqinqinqgv6gsFAA1FXxyID4rsyTQRw7CpGI7NRQvRUrQSr+Ejoo0YiW1FO9FePCZG4yjsKNq4ZPGk6CTGY2fxtJiAz4iuYhJ2E8+J7qKH6CmeF71EW9db9BHTsK/oJ2ZifzFADBSDxBysKbInVku8IlLFMDFcvCoW42tipHhdjBKjxRjxhhgrxonxYoKYKCaJNPGmmCymiKniLTFNTBczxEyRLmaJ2eJtMUfMFfPEO2K+eFcsEAvFIrFYZIj3xBKxVGSK98Uy8YHIEsvFCrFSrBKrxRqxVqwT68UGsVFsEpvFFrFVbBMfiu1ih9gpdondYo/YKz4S+8THYr/4RBwQn4qD4m/ikPhMHBafiyPiC3FUfCmOia/EcfG1OCH6iJPilDgtvhVnxHfirDgnzovvxQXxg7gofhSXhBcgUQoppZKBzCVzyxiZR8bKq2ScvFrmldfIiLxWxsvrZD55vcwvC8iCspBMkIVlEamlkVaSDGVRWUxGZXFZQt4gE2VJWUqWlk6WkUnyRllW3iTLyZtleXmLrCBvlRVlJVlZVpG3yarydllN3iGryztlDVlT1pK15V2yjrxb1pX3yHryXllf3icbyPtlQ/mAbCQflI3lQ7KJfFg2lc1kc9lCtpStZGv5iGwjH5VtZTvZXj4mO8jHZUf5hEyWT8pO8inZWT4tu8hnZFf5rOwmn5PdZQ/ZU/4oL0kve8s+MkX2lf3ki7K/zD4WDpKD5UtyiHxZDpWvyFQ5TA6Xr8oR8jU5Ur4uR8nRcox8Q46V4+R4OUFOlJNkmnxTTpZT5FT5lpwmp8sZcqZMl7PkwF8qzfsT+VN+zff48yFZzpJDU1LlsJStcpv8UG6XO+ROuUvulnvkXrlX7pP75H65Xx6QB+RBeVAekofkYXlYHpFH5FF5VB6Tx+RxeVyekCfkSXlKfi+/lWfkd/KsPCfPye/lBXlBXvzlPQCFSiiplApULpVbxag8KlZdpeLU1SqvAAB1rYpX16l86nqVXxVQBVUhlaAKqyJKK6OsIhWqoqqYiqriqoS6QSWqkqqUKq2cKqOS1I0q8k/m/31/8tf+Vs74+Z1SrVVr1Ua1UW1VW9VetVcdVAfVUXVUySpZdVKdVGfVWXVRXVRX1VV1U91Ud9Vd9VQ9VS/VS/VGUCkqRfVTL6r+aoAaqAapweolNUQNUUPVUJWqUtVwNVyNUCPUSDVSjVKj1Bg1Ro1VY9V4NV5NVBNVmkpTk9VkNVVNVdPUNDVDzVDpKl3NVrPVHDVHzVPz1Hw1Xy1QC9QitUhlqAy1RC1RmSpTLVPLVJZarparlWqlWq1Wq7VqrVqv1quNaqParDarLLVNbVPb1Xa1U+1Uu9VutVftVfvUPrVf7VcH1AF1UB1Uh9QhdVgdVkfUEXVUHVXH1DF1XB1XJ9QJdVKdVKfVaXVGnVFn1Vl1Xp1XF9QFdVFdVJfUpezTvkAEIlCBCnIFuYKYICaIDWKDuCAuyBvkDSJBJIgP4oN8wfVB/qBAUDAoFCQEhYMigQ5MYAMKwqBoUCyIBsWDEsENQWJQMigVlA5cUCZICm4MygY3BeWCm4PywS1BheDWoGJQKagcVAluC6oGtwfVgjuC6sGdQY2gZlArqB3cFdQJ7g7qBvcE9YJ7g/rBfUGD4P6gYfBA0Ch4MGgcPBQ0CR4OmgbNguZBi6Bl0Cpo/VfVx+z63p8t8Kjrrfvo3NBX99Mv6v56gB6oB+nB+iU9RL+sh+pXdKoepofHvKpH6Nf0SP26HqVH6zH6DT1Wj9Pj9QQ9UU/SafpNPVlP0VP1W3qanq5n6Jk6Xc/Ss/Xbeo6eq+fpd/R8/a5eoBfqRXqxztDv6SV6qc7U7+tl+gOdpZfrFXqlXqVX6zV6rV6n1+sNeqPepDfrLXqr3qY/1Nv1Dr1T79K79R69V3+k9+mP9X79iT6gP9UH9d/0If2ZPqw/10f0F/qo/lIf01/p4/prfUJ/o0/qU/q0/laf0d/ps/qcPq+/1xf0D/qi/lFf0j775D778G6UUSaXyWViTIyJNbEmzsSZvCaviZiIiTfxJp/JZ/Kb/KagKWgSTIIpYoqYbGTIFDVFTdRETQlTwiSaRFPKlDLOOJNkkkxZU9aUM+VMeVPeVDAVTEVT0VQ2lc1t5jZzu7nd3GHuMHeaO01NU9PUNrVNHVPH1DV1TT1Tz9Q39U0D08A0NA1NI9PINDaNTRPTxDQ1TU1z09y0NC1Na9PatDFtTFvT1rQ37U0H08F0NB1Nskk2nUwn09l0Nl1MF9PVdDXdTDfT3XQ3PU1P08v0Mr1Nb5NiUkw/08/0N/3NQDPQDDaDzRAzxAw1Q02qSTXDzXAzwowwI81IM8qMNmPMG2asGWfGmwlmoplk0kyamWwmm6lmqplmppkZZoZJN+lmtplt5pg5Zp6ZZ+ab+WaBWWAWmUUmw2SYJWaJyTSZZplZZrJMlllhVphVZpVZY9aYdWad2WA2mE1mk9litphtZpvZbrabnWan2W12m71mr9ln9pn9Zr85YA6Yg+agOWQOmRg4bI6YI+aoOWqOmWPmuDluTpgT5qQ5aU6b0+aMOWPOmrPmvDlvLpgfzEXzo7lkvImxeWysvcrG2attXnuN/W1c0BayCbawLWK1zW8L/F1srLWJtqQtZUtbZ8vYJHvj7+KKtpKtbKvY22xVe7ut9ru4jr3b1rX32Hr2Xlvb3vV3cX17n21gH7YNbTPbyLawjW0r28Q+bJvaZra5bWFb2la2g33cdrRP2GT7pO1kn/pdvMQutevservBbrT77Mf2vP3eHrNf2Qv2B9vb9rGD7Ut2iH3ZDrWv2FQ77HfxGPuGHWvH2fF2gp1oJ/0unmFn2nQ7y862b9s5du7v4gz7np1vM+0Cu9Ausot/irN7yrTv22X2A5tll9sVdqVdZVfbNXbt/+11pd1st9itdq/9yG63O+xOu8vutnt+irP3Y7/9xB6wn9qj9kt7yH5mD9vj9oj94qc4e/+O26/tCfuNPWlP2dP2W3vGfmfP2nM/7X/2vn9rf7SXrLdASIIkKQooF+WmGMpDsXQVxdHVlJeuoQhdS/F0HeWj6yk/FaCCVIgSqDAVIU2GLBGFVJSKUZSKUwm6gRKpJJWi0uSoDCXRjVSWbqJydDOVp1uoAt1KFakSVaYqdBtVpdupGt1B1elOqkE1qRbVpruoDt1Ndekeqkf3Un26jxrQ/dSQHqBG9CA1poeoCT1MTakZNacW1JJaUWt6hNrQo9SW2lF7eow60OPUkZ6gZHqSOtFT1Jmepi70DHWlZ6kbPUfdqQf1pOepF71AvakPpVBf6kcvUn8aQANpEA2ml2oAAA2lVyiVhtFwepVG0Gs0kl6nUTSaxtAbNJbG0XiaQBNpEqXRmzSZptBUeoum0XSaQTMpnWbRbHqb5tBcmkfv0Hx6lxbQQlpEiymD3qMltJQy6X1aRh9QFi2nFbSSVtFqWkNrfW4A2kAbaRNtpi20lbbRh7SddhDSLtpNe2gvfUT76GPaT5/QAfqUDhLiIfqMDtPndIS+oKP0JR2jr+g4fU0n6Bs6SafoNH1LZ+g7Okvn6Dx9TxfoB7pIP9Il8gQhhiKUoQqDMFeYO4wJ84Sx4VVhXHh1mDe8JoyE14bx4XVhvvD6MH9YICwYFgoTwsJhkVCHJrQhhWFYNCwWRsPiYYnwhjAxLBmWCkuHLiwTJoU3hmXDm8Jy4c1h+fCWsEJ4a1gxrBQ+fG+V8Lawanh7WC28I6we3hnWCGuGtcLa4V1hnfDusG54T1gvvDcsF94XNgjvDxuGD4SNwgfDxuFDYZPw4bBp2CxsHrYIW4atwtbhI2Gb8NGwbdgubB8+FnYIHw87hk+EyeGTYafwqT98PCXsG/YLXwxfDL2/Ry6KLo5mRN+LLokujWZG348ui34QzYouj66Iroyuiq6Oromuja6Lro9uiG6Mbopujm6Jbo16Xzs3OHTCSadc4HK53C7G5XGx7ioX5652ed01LuKudfHuOpfPXe/yuwKuoCvkElxhV8RpZ5x15EJX1BVzUVfclXA3uERX0pVypZ1zZVySa+Vau9aujXvUtXXtXHv3mHvMPe4ed0+4J9yTrpN7ynV2T7su7hnX1T3rnnXPue6uh+vpnne93Auut+vjUlyK6+f6uf6uvxvoBrrBbrAb4oa4oW6oS3Wpbrgb7ka4EW6kG+lGuVFujBvjxrqxbrwb7yb6iS7NpbnJbrKb6qa6aW6am+FmuHSX7ma72W6Om+PmuXlufuJ8t8AtcIvcIpfhMtwSt8Rluky3zC1zWS7LrXAr3Cq3yq1xa9w6t85tcBvcJrfJbXFb3Da3zW13291Ot9PtdrvdXrfX7XP73H633x1wB9xBd/C8d4fcYfe5O+K+cEfdl+6Y+8odd1+7E+4bd9Kdcqfdt+6M+86ddefcefe9u+B+cBfdj+6S8y4t8mZkcmRKZGrkrci0yPTIjMjMSHpkVmR25O3InMjcyLwIwvzIu5EFkYWRRZHFkYzIe5ElkaWRzMj7kWWRDyJZkeWRFZGVkVWR1RHvC28PfVFfzEd9cV/C3+ATfUlfypf2zpfxSf5GX9bf5Mv5m315f4uv4G/1FX0lX9k38819C9/St/Kt/SO+jX/Ut/XtfHv/mO/gH/cd/RM+2T/pO/mnfGf/tO/in/Fd/bO+m3/Od/c9fE//vO/lX/C9fR+f4vv6fv5F398P8AP9ID/Yv+SH+Jf9UP+KT/XD/HD/qh/hX/Mj/et+lB/tx/g3/Fg/zo/3E/xEP8mn+Tf9ZD/FT/Vv+Wl+up/hZ/p0P8vP9m/7OX6un+ff8fP9u36BX+gX+cU+w7/nl/ilPtO/75f5D3yWX+5X+JUeYlb7NX6tX+fX+w1+o9/kN/stfqvf5j/02/0Ov9Pv8rv9Hr/Xf+T3+Y/9fv+JP+A/9Qf93/wh/5k/7D/3R/wX/qj/0h/zX/nj/mt/wn/jT/pT/rT/1p/x3/mz/pw/77/3F/wP/qL/0V/iv1ljjDHGGPtT5B883ve/+Z74ZcvWDwCu3lHoyG9rbsr/83qASOgQAYAn+3R78JdPN1Jq1EhJSfnluVkSgmILASByOT8XXI6XQ3t4HJKhHZT9b/sbIHpcoF/q/7r9tn70FoDY/5ITA5fjy/Vv+gf1x83/w/oLARKLXc7JA5fjy/XL/YP6Bdr8Qf08n6UBtP0vOXFwOb5cPwkehacg+Y8G+rODf+pZjDHGGGOMMcb+YwwQlbv80fVt9vV5grqckxsux390ff6TP3dNyhhjjDHGGGOMsX+RZ3r0fOKR5OR2Xa7UAuBKvjov/swi179HG/9hC/nv0cY/Wlzp30yMMcYYY4yxv9rlk/4r3QljjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMZZz/f/4d2JXeh8ZY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4yxK+3/BAAA//9MkSIw") (async)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000440)=ANY=[], 0x32600) (async)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) (async)
socket$inet(0x2, 0x4000000000000001, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
pipe(&(0x7f0000000040)) (async)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', <r4=>0x0})
r5 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r4, @ANYBLOB="00339d91422d000000500000001c001a80080700000000000000000200", @ANYRES8, @ANYRESDEC=r3], 0x44}}, 0x2000800) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async)
sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0) (async)
sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r6, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x4b301, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r8, &(0x7f0000000000)={0x30000011})

3.330596801s ago: executing program 4 (id=116):
r0 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, 0x0, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000002100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newtfilter={0x54, 0x2c, 0xf3f, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xb, 0xfff3}, {}, {0x7, 0xffff}}, [@filter_kind_options=@f_flow={{0x9}, {0x24, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x25cb}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_MODE={0x8}, @TCA_FLOW_MODE={0x8}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20041090}, 0xd0)
r2 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
r3 = fcntl$dupfd(r2, 0x406, r2)
sendmsg$TIPC_NL_NODE_GET(r3, &(0x7f0000000480)={0x0, 0x34, &(0x7f00000000c0)={&(0x7f00000000c0)=ANY=[], 0x134}, 0x1, 0x0, 0x0, 0x40d0}, 0x5404cc09)
write$binfmt_elf64(r3, &(0x7f0000000040)=ANY=[], 0xdb)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r3)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), r3)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r3)
mkdirat(r3, &(0x7f0000000000)='./file0\x00', 0x22)
syz_usb_connect$midi(0x2, 0x38, &(0x7f0000000180)=ANY=[@ANYBLOB="120100030000002099045c1040000102030109022600010106a0020904000001010320fd07240301b3000909050c02ff03b6530904250100ac05eba2f6390d544f422dd212f1cf05999fafb2eb282e5291607e5ed63dcc3e16747a8420831ec76d11b961f43978276fd23cbc8e2ca1b6edcdfc9ee419a8eeeabf6465e74a54ce94c3251424a2927b19e81f74c28a81cc743d0bd7f447c2342b3c0b6e1d9c3b80c9b5815b114a2b3f9ca4b40fcac710b119d69a73eb99a1e2074e3da3ff370676f817e0a34043ba7403158430c2ae6482174c597faf4a3d5f55bd15b62352f85fee91"], &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0})

3.218513269s ago: executing program 3 (id=117):
sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x110400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x1, 0x2, 0x5, 0x0, 0x0, {0x5, 0x0, 0x6}, [@CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x3}, @CTA_EXPECT_NAT={0x34, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x20, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0xc885)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, r1, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x18, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'macsec0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x0)
pipe(&(0x7f0000000280)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14)
r5 = dup(r3)
r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000380), r2)
sendmsg$DEVLINK_CMD_RATE_GET(r5, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x54, r6, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @DEVLINK_ATTR_PORT_INDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000800}, 0x20000004)
openat$cgroup_procs(r2, &(0x7f00000004c0)='tasks\x00', 0x2, 0x0)
fsopen(&(0x7f0000000500)='fuseblk\x00', 0x0)
ioctl$sock_SIOCBRDELBR(r3, 0x89a1, &(0x7f0000000540)='pimreg1\x00')
sendmsg$DEVLINK_CMD_SB_GET(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000006c0)={&(0x7f00000005c0)={0xd0, r6, 0x4, 0x70bd28, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x9}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xb1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xc7a}}]}, 0xd0}}, 0x40082)
sendmsg$nl_route(r5, &(0x7f00000008c0)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000780)=@dellinkprop={0x100, 0x6d, 0x400, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, 0x84, 0x4002}, [@IFLA_PHYS_SWITCH_ID={0xc, 0x24, "f2f3d03b80e3c9ae"}, @IFLA_PROP_LIST={0x7c, 0x34, 0x0, 0x1, [{0x14, 0x35, 'pimreg\x00'}, {0x14, 0x35, 'wg2\x00'}, {0x14, 0x35, 'syz_tun\x00'}, {0x14, 0x35, 'team_slave_1\x00'}, {0x14, 0x35, 'dvmrp0\x00'}, {0x14, 0x35, 'nicvf0\x00'}]}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x70fb5}, @IFLA_TARGET_NETNSID={0x8, 0x2e, 0x4}, @IFLA_PHYS_PORT_ID={0x11, 0x22, "8c81271b3ca5020050f8ef0892"}, @IFLA_XDP={0x2c, 0x2b, 0x0, 0x1, [@IFLA_XDP_EXPECTED_FD={0x8, 0x8, r5}, @IFLA_XDP_EXPECTED_FD={0x8, 0x8, r3}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x2}, @IFLA_XDP_EXPECTED_FD={0x8, 0x8, r2}, @IFLA_XDP_FD={0x8, 0x1, r3}]}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0xe41d}]}, 0x100}, 0x1, 0x0, 0x0, 0x4000040}, 0x4000004)
sendmsg$nl_route(r2, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)=@RTM_GETMDB={0x18, 0x56, 0x8, 0x70bd28, 0x25dfdbfd, {0x7, r4}, ["", "", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x8000}, 0x40010)
r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000a00), 0x8040, 0x0)
ioctl$TCSETSW2(r7, 0x402c542c, &(0x7f0000000a40)={0x7, 0xfffffffa, 0x5, 0x16ba58de, 0x7, "d28f92645673f12c0bddb7980060ad345e70dc", 0x5, 0x7})
recvmmsg(r2, &(0x7f0000003380)=[{{&(0x7f0000000a80)=@isdn, 0x80, &(0x7f0000000e00)=[{&(0x7f0000000b00)=""/124, 0x7c}, {&(0x7f0000000b80)=""/126, 0x7e}, {&(0x7f0000000c00)=""/196, 0xc4}, {&(0x7f0000000d00)=""/92, 0x5c}, {&(0x7f0000000d80)=""/127, 0x7f}], 0x5, &(0x7f0000000e80)=""/4096, 0x1000}}, {{0x0, 0x0, &(0x7f0000003240)=[{&(0x7f0000001e80)}, {&(0x7f0000001ec0)=""/69, 0x45}, {&(0x7f0000001f40)=""/149, 0x95}, {&(0x7f0000002000)=""/4096, 0x1000}, {&(0x7f0000003000)=""/195, 0xc3}, {&(0x7f0000003100)=""/149, 0x95}, {&(0x7f00000031c0)=""/86, 0x56}], 0x7, &(0x7f00000032c0)=""/158, 0x9e}, 0x8}], 0x2, 0x20, &(0x7f0000003400)={0x77359400})
timer_create(0x6, &(0x7f0000003580)={0x0, 0x28, 0x2, @thr={&(0x7f0000003440)="1b795a201c024d1d02044bb663ac5eb0ad33015b295cf54c8a419ce76dd3fa2bd5abefd8f1ad88e25b05bc2323d828eb38b4636f6a2c92889678f5efd624d61aadb2067a1407d0b6d410478503089fdc26b726ba0a81fa06985fab763971ddf08b0378aae9ca66579ec65d5a2109f8cfc51a32d7e374afced217d053a0b16618cb85477934a835a513", &(0x7f0000003500)="50945ce46c12b6a1cfae714f2bdc6cd22ce239bad2c855ff355e92c64851236da3b849dd9378f677c310b5b22b5a542db57bdd31ca8af30a76bf658318d29ce1ba02b86feaa93498767f25d553d8f286a08869eba25013bab043dc59dd1cba8e0f99f6087dae5de25de120f773ec6f5f4910657a6a"}}, &(0x7f00000035c0)=<r8=>0x0)
r9 = getpid()
sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r3, &(0x7f00000036c0)={&(0x7f0000003600)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000003680)={&(0x7f0000003640)={0x14, 0x7, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x880}, 0x15)
timer_create(0x7, &(0x7f0000003700)={0x0, 0x54ca22e0, 0x2, @tid=r9}, &(0x7f0000003740))
sched_getaffinity(r9, 0x8, &(0x7f0000003780))
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r7, 0xc038943b, &(0x7f0000003840)={0x401, 0x48, '\x00', 0x1, &(0x7f00000037c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
syz_usb_connect(0x3, 0x1dd, &(0x7f0000003880)={{0x12, 0x1, 0x50, 0x2c, 0xb9, 0x54, 0x8, 0xcf3, 0x4, 0xed29, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1cb, 0x1, 0xfa, 0xfb, 0x40, 0x7b, "", [{{0x9, 0x4, 0xac, 0x9, 0x5, 0x45, 0xfc, 0xaf, 0x81, [], [{{0x9, 0x5, 0xc, 0x0, 0x3ff, 0x5, 0x8, 0x4, [@generic={0x31, 0x2, "e9a8f9318af41b3a5c0512c177d62fca05fdf919e5cdb09960258dd21e86ee00a6dadfdec7be93ca9a0caaa8f695a0"}]}}, {{0x9, 0x5, 0x6, 0x10, 0x3ff, 0x0, 0x9, 0x80, [@generic={0xc3, 0x22, "d5354e36fd67bc526fa3e3beafddcf70661a037ec4cc606a0b0daeccd62e65ce6feb4220e9359d398b3df935e5799f853212e32b9fc64c3959f4bc5e471590243e2a8d6c80df5182e6facd8d91b378cf464e92604bb307445bcbd18c753b2d1ac07db6c33d7aa3a03628c72a1443a331fd83c08b67178677379f1f40b13a660b828d6f9eb0251eb695941360f73169307a0a255736a097e1d56f56e607a3d17f4ffc7425f5b0c602ee5f2c2e683d8c64b2f0d5a379ab1d8e94bbb79db3d9436067"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x61, 0x2}]}}, {{0x9, 0x5, 0x1, 0x1, 0x40, 0x7, 0x1, 0x7}}, {{0x9, 0x5, 0xe, 0x10, 0x8, 0x5, 0x2, 0xff, [@generic={0x30, 0xa, "6e08c474db65527b050caff633ff50d08386575b5aec2f12c9b3b2634356452fd2ea149b4dc43fde25433cc05bbe"}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x4, 0x400}]}}, {{0x9, 0x5, 0xa, 0x10, 0x40, 0x9, 0xbc, 0x10, [@generic={0x5a, 0x11, "5a2f49228c92aa91e7ca4ba419e7342e56c072c0e11bfe076a300379a7fd6f9f1ebcf5bcbd43f72ee8418a85c1d7e018693899e8de7474916e74def6fb535a3efab6c560566b401cd64f30569509e6aa8b8ab49b2af3fc0b"}]}}]}}]}}]}}, &(0x7f0000003e00)={0xa, &(0x7f0000003a80)={0xa, 0x6, 0x310, 0x4, 0x4, 0x1, 0x8, 0x9}, 0x119, &(0x7f0000003ac0)={0x5, 0xf, 0x119, 0x5, [@wireless={0xb, 0x10, 0x1, 0x4, 0x22, 0x3, 0xfd, 0x1, 0xd}, @wireless={0xb, 0x10, 0x1, 0xc, 0x10, 0x3, 0x7, 0x1000, 0x3}, @generic={0xe8, 0x10, 0x4, "6e7bd5a1c2182f5449bbc994e92179ab7b2ccaf242eed144c7324b516cd3bdaea2a8200f2fc2133a99b62587d04924b88ab9948e38b3f727761fcd3e7e216b7bbda44964da8db7f7a7683f57f9b57b346fbe49573303a498d6467b44e7e4b1eb6f887fe6bcb3e973748b0153978c3b0b4fa342e2f086e55092645653975359659437b10b1215141ec27e6e829de7c3e417f6a8345cc767f5b44a97e5f29536299991ad306ae24fe9585da7dd9212aa067701b0c3943c6bc5f3a73eaf63a043217a205576c43c72ce256ff834154a52fe9e67c9e053812d5b69732e527036930a9e516d9f6b"}, @wireless={0xb, 0x10, 0x1, 0x4, 0x2, 0x6, 0x3, 0x7, 0x81}, @wireless={0xb, 0x10, 0x1, 0x8, 0x40, 0x6, 0x6, 0x6, 0x2}]}, 0x5, [{0x4, &(0x7f0000003c00)=@lang_id={0x4, 0x3, 0x804}}, {0xcd, &(0x7f0000003c40)=@string={0xcd, 0x3, "13f524261cdeb94639e986a90d28a47ea4b9cc5e41eb173b7dbc4ea02893bcb93ffc836fa8164d13b5684c1f79fc370df45cb81cd94fbfdd7bb01b7a2c5f38230e18fbef895269e1ea1e8cda10351276dc117c8bcd0a4e3846a27da95027ceddc6c3730538ccc34777a0d89ecbbf73568ea8dd738001e14f2ae3a15857b3775227a1fcde34e4894d58f87b64d34fcfedfda5e9f14d19fe42a60c1177484b7eb7950b8fc954bb37c5286469aefa76a1bd3fbb3e1911aa16374114feb9060b608606a99d9959bfc277becc37"}}, {0xa, &(0x7f0000003d40)=@string={0xa, 0x3, "9aef8faa4d637a9a"}}, {0x4, &(0x7f0000003d80)=@lang_id={0x4, 0x3, 0x455}}, {0x4, &(0x7f0000003dc0)=@lang_id={0x4, 0x3, 0x3009}}]})
timer_settime(r8, 0x1, &(0x7f0000003e80)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0)
r10 = socket$unix(0x1, 0x2, 0x0)
fchdir(r10)
sendmsg$sock(r2, &(0x7f0000005140)={&(0x7f0000003ec0)=@caif=@util={0x25, "b378339f47711474f3c8dc228f2b3515"}, 0x80, &(0x7f0000005040)=[{&(0x7f0000003f40)="97cf7ffd3641f3a8b339be4ffb0bab94870fc702884eea0ddbcc2f282ab19d8d029810a55c2434ed9d3071a0b43fc531c45713e1fccabca38b810f274d92efc36bafb7f8d15447f4e315d8ff11762599b796a527883c099ee7daa687b9921e58fed85a4b13f00f5a1e9140", 0x6b}, {&(0x7f0000003fc0)="326990a6fd60a8caa2b013ee4717a2df68d9fa4497e60695be5ab8b3e8ef9be079a0ca81d9f9f04f3d35fa18b4da087ca9a81bd566aacab133f5aa924ab223e6b8296e4205fbcb5226524f98d7ab8a6ac28f732c87396d4de61787b342f1400a1f5e0b652ab0dbb30bfb294341fd4b1724787ede345a13", 0x77}, {&(0x7f0000004040)="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", 0x1000}], 0x3, &(0x7f0000005080)=[@txtime={{0x18, 0x1, 0x3d, 0xe67}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0xffffffffffffff0b}}, @timestamping={{0x14, 0x1, 0x25, 0xffffff4a}}, @txtime={{0x18, 0x1, 0x3d, 0x5}}, @txtime={{0x18, 0x1, 0x3d, 0x8}}], 0x90}, 0x4000804)
ioctl$KVM_IRQ_LINE_STATUS(r2, 0xc008ae67, &(0x7f0000005180)={0x2, 0x6})

2.855357284s ago: executing program 1 (id=120):
r0 = socket(0x11, 0x3, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000400), 0x200100, 0x0)
recvmmsg$unix(r1, 0x0, 0x0, 0x1, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000005c0)={'gre0\x00', <r3=>0x0})
bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r3}, 0x14)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x2000e8, 0x4)
sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001300)={0x400, 0x3d, 0x100, 0x70bd27, 0x25dfdbfe, "", [@generic="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", @generic="07fb233b3d57ce82c476a8f67e017970e0106e6ba070a8f857d404a53c23b02916e3c5f00576c689471ffca5e14b4dc10c38ea6a796adc7ec5e746eabe01f05e1691666f7ff47ca7d471ca49a7cd942f98528a1261359261d7b05afe6a845cb132d5e4acd47161a1992167a4f15ac8bcad0d7547e1d044a6950425b4b429decdca416608967640465505ad15c1333865dfb2e0737f2af0891a5d71ebbc8be7da47a661e1902a201be0c0", @typed={0x8, 0x3, 0x0, 0x0, @pid}, @nested={0x14d, 0x2b, 0x0, 0x1, [@typed={0x7, 0xe8, 0x0, 0x0, @str='.[\x00'}, @generic="f0f855a5cc2310d48ed1494fcc801563a0d7e54bf8751fd04772a5531e8a138bc68cecaf87a7a8583ef19a0f076554e28f9ba2d7688868f0c0382918fb42", @generic="264953e8344b2eaa134f9405387697198ce56b36cfb59372016a5b122c79a81ce92b98f94ba2ce0328a384774f28d98db62c035291d5aad4e832044cd1eea4a704edf7c6ad7f12cd8fb06f2d434f25f17688b99038fff87ce65fc3877269b2e9822af8e5a5c25409207932ca601ad1d69787ddf9d2", @generic="674769ffe2bff56947b146ffb03e6427902c2cee0e9e342d517b1feb360fb1ad934ffdd67a9fa7de5124f814b063ed77a6e3ef3870587a6fd1a963b02ff5033eba0f9147eb1086f28fa40ab4aac23e314e7a461e4022d583e3ed59caeb3b2bdb13b90fae14af4447c30968e958e41c3b6b3e6ddbeb302774a07b058139dd8b233a0b3bb12c81", @nested={0x4, 0x19}, @nested={0x4, 0x15a}]}, @generic="a9ae7da2083622246f222937ebec13d5ba8258817b97430147c60a407f72063cc6d0d00bb8a57333a143167458dafda4a5f34ae3289d21dd914403d20677f974634ccbd3c1d57b9c70e963f5513c414c59b09da7831b57fb3628c38914f5d99fd2e51a7d641c0d9224409bea9dd9cbd69219f4d4cb0df732852311fc018dce873006d81eab43dc984385f98f6494a36b7ec45c937b03c6", @generic="f60d1d24368d75068f3004e1c98fe2d677bde5ff1a61498172ae1a8ce4fb512320c2799b61fe010f1f06b30905d661a149279c72caa1b751e911d2d1108478acc705aaa654f14c5c67ff3d9192c83b39685bf0db8bc1dcfb"]}, 0x400}], 0x1}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x1d}, [@ldst={0x6, 0x0, 0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48)

2.776034409s ago: executing program 1 (id=121):
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x100000001, 0x400)
ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0xe09, 0x6, 0x0, 0x6, "f7049b275bca3db54bdab7e6d55327d5b448ad11d81dff91993011f5890e2d0f7ec1fb8a536ceaf7a2c1211111a1619bec9474c0e3891cf757e435618870429e", "e73b8ef1d2060fb460da1be1da5bf1d8b0ef4b84fd00c8537242a2eb85abb221", [0x2, 0xcc]})
ioctl$BLKFINISHZONE(r0, 0x40101288, &(0x7f0000000100)={0xfffffffffffffffa, 0x2}) (async)
ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000140)) (async)
r1 = openat2(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x40001, 0xa, 0x2}, 0x18)
ioctl$USBDEVFS_GETDRIVER(r1, 0x41045508, &(0x7f0000000200)={0xb3a3, "59ef76622c88c5eccbcef036d29483bcc19908c18816844856f0689819f8a632fe88028a9231cae3ad3a5873532706daaaa6d6da2e80a706660c690c6806e7817e2afd9eafd83d3c0f8b375fa2006d24d2db9e8fa0dd97cc05d0f1dd91c533cca0c544de38cb42dd54bdac4bffbc426c91a21e3031643c8d568b3bdaace471a36f59b5bf121cd600f84e0efc878fe6cb6e0fbea9b94b61385f844216191863a1cafdfcd6a23358e86c696925fd724e279b2959acea78997a043b429e708c99092b3859f1cc1cced401f79e73eeb8dcc0378feab0d617f81bad03c203a16d661f120438feffee5819dee8b94a42f2059bcd0e60bbbbb52cf8e67eb09276d1f751"}) (async)
fadvise64(r0, 0x4fd, 0x7fffffffffffffff, 0x3) (async)
ioctl$FITRIM(r1, 0xc0185879, &(0x7f0000000340)={0x9, 0x3, 0x1}) (async, rerun: 64)
r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000380), 0x802, 0x0) (rerun: 64)
write$uinput_user_dev(r2, &(0x7f00000003c0)={'syz0\x00', {0xfffd, 0x4, 0x6, 0xa12c}, 0x5, [0x3e5, 0x1, 0xffffffff, 0x4, 0x2, 0x0, 0x5, 0x9, 0x7, 0x1, 0xdb1, 0x4, 0x4, 0x9, 0x0, 0x0, 0x4, 0x4, 0x1, 0x2, 0xf, 0x6, 0x1, 0x5, 0x3ff, 0x6, 0x3907089f, 0xe6, 0x8, 0x3, 0x7f, 0xad, 0x28, 0x9, 0x4, 0x9, 0xfc7, 0x2, 0x3, 0x9, 0x7, 0x1, 0x6, 0x788, 0x7, 0x4, 0x80000, 0x1, 0xff, 0xfffffffe, 0x400, 0x80, 0x7, 0x9, 0x4a, 0x101, 0x3, 0x8001, 0x7, 0x7, 0x6, 0x1ff, 0x1ff, 0x4], [0x2, 0x5, 0x3, 0x401, 0xfff, 0x8, 0x8, 0x8, 0x2, 0x5, 0x4, 0x5, 0x5, 0x9, 0xfffffffa, 0x7, 0x794a, 0xa63582d, 0x35a3, 0x2, 0xf65, 0x5, 0x200, 0x10001, 0x84fd, 0x9c, 0xff, 0x4, 0x9fb9, 0x7, 0x838, 0x1, 0x7, 0x7, 0x800, 0x2, 0x7f, 0x8, 0x5, 0xfffffffa, 0x9, 0x8, 0x1, 0x5, 0x5, 0x4e18, 0x0, 0x0, 0x5, 0x1, 0x8, 0x7fffffff, 0x8, 0x9, 0x0, 0xdad, 0x0, 0xb3a6, 0x2, 0x3ff, 0x7, 0x4, 0x2, 0xd34e], [0x5, 0x1, 0x1, 0x1, 0xa44, 0x7, 0xf, 0x2, 0x5, 0x8, 0xffff, 0xfffffffc, 0x4, 0x5, 0xff, 0x6, 0x3d, 0x6, 0xffff, 0x4, 0x5, 0x8, 0x7f, 0x22ed, 0x0, 0x10, 0x3, 0x6, 0x1, 0x4, 0x4, 0x7, 0x6, 0x3, 0x9, 0xfa52, 0x2, 0x0, 0xfffff596, 0x5, 0x2, 0x1ff, 0x3, 0x8, 0x1ff, 0xf8, 0x3ff, 0x0, 0x8, 0xffff, 0x8, 0x0, 0x777, 0x80000001, 0x3, 0x80000000, 0x400, 0x8, 0x5, 0x7ff, 0x1, 0x2bc, 0x2800000, 0x8a2d], [0xffffffff, 0x554, 0x6, 0x6, 0x8, 0xf, 0xfffff581, 0x0, 0x6, 0x6, 0xadd3, 0x9, 0x8, 0xa2a, 0xfff, 0xfffff001, 0x1, 0x1b, 0x4, 0x0, 0xfffffff7, 0xffff7d6a, 0x3, 0x8001, 0x0, 0xa, 0x3, 0x632, 0x6, 0x0, 0x7, 0x7, 0x2, 0xdf, 0x8001, 0x80000001, 0x9, 0x820, 0x6, 0xa, 0x5, 0x100, 0x5, 0x3, 0xffff8001, 0x7, 0x4, 0xa, 0xa735, 0x1, 0x9, 0x200, 0x3, 0x7fff, 0xef1, 0xfffffffd, 0x80000000, 0xee, 0x5, 0x6, 0xd, 0xfffffffe, 0x2, 0x3]}, 0x45c) (async)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000840)={0x42, 0x4}, 0x10)
ppoll(&(0x7f0000000880)=[{r0, 0x8000}], 0x1, &(0x7f00000008c0)={0x77359400}, &(0x7f0000000900)={[0x6]}, 0x8) (async)
r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), r1)
sendmsg$IPVS_CMD_SET_SERVICE(r1, &(0x7f0000000b40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000b00)={&(0x7f00000009c0)={0x12c, r3, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xf661}, @IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @remote}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x40}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}, @IPVS_CMD_ATTR_DAEMON={0x64, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x34, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xb}]}, @IPVS_CMD_ATTR_DEST={0x30, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x3}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@remote}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xcc}]}, 0x12c}, 0x1, 0x0, 0x0, 0x40000}, 0x400c0c5) (async)
munlockall() (async)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000bc0), r1)
sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000ec0)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000c00)={0x280, r4, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x800, @private1, 0x8}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x8, @local, 0x7fff}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x93}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_UPPER={0x8}]}, @TIPC_NLA_BEARER={0x48, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'ipvlan0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @broadcast}}, {0x14, 0x2, @in={0x2, 0x4e20, @multicast1}}}}]}, @TIPC_NLA_NODE={0x88, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x48, 0x4, {'gcm(aes)\x00', 0x20, "df32431805e15a378a768b553678571c52a4905070d8f17b8c02152832c9f2b9"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xc678}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x3}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x6b05}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x9}]}, @TIPC_NLA_SOCK={0x38, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x38}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xffffffff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xf3d}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x80}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6e8}]}, @TIPC_NLA_NODE={0xc4, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x101}, @TIPC_NLA_NODE_ID={0xb7, 0x3, "7ae769e4603dfe1b005f8c2fc26345ee9ed37ec9fde1353123164f18cd851e37ce19b3d31f1cee47ccab44fa841e514323b6307570497362c41a91bc4e2438f9611c1918639f2464fc3a6c836d6202843484498b1b51d0236244674c4fde0d7e8d39d52b42e0ac366c498c4e54b02911e003d96057b5139b3ce6f5a8b837f1c69ef1f2157d7811b122b2995222f28541f220c0d64b054ba9251dbeefdfa6dbc64a4a2d0db8ed9182a9a821f4e1e3e37d759a11"}]}]}, 0x280}, 0x1, 0x0, 0x0, 0x4000}, 0x8000)
r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000f40), r2)
sendmsg$TIPC_CMD_SET_LINK_PRI(r1, &(0x7f0000001040)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001000)={&(0x7f0000000f80)={0x68, r5, 0x200, 0x70bd29, 0x25dfdbfe, {{}, {}, {0x4c, 0x18, {0x1, @media='udp\x00'}}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x40000}, 0x64008000)
mount(&(0x7f0000001080)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000010c0)='./file0\x00', &(0x7f0000001100)='tmpfs\x00', 0x2004, &(0x7f0000001140)='udp\x00') (async)
sendto(r1, &(0x7f0000001180)="d9c4c34bb69816248e899b30dea42101025b90dc757fe8dd8df5117a1ad89e15ec59e0432ede121fd9024f4d0493fdea34ccfd47e1e1420951aec7fe9571857df60034bb76b9b889128c1396a8098f44d7817a0a541e439be6107718ba991e8b62c43a0659cad3086403a08c7888218cfec7019b118aaef34c39684d4b21ebff181e862fb816e1367a4f92486e58761349b545c509ae8dc95477a39655a81d7ed3960865d811e223af828d807fbe46b13cf25e2db4cd86c61d17ab1186fed3fceb845753ab3a6544243185b8f188f550d732edc01b522cf65278883f48be5cd673f80c875604741c4578941aa651", 0xee, 0x4040044, &(0x7f0000001280)=@nfc_llcp={0x27, 0x0, 0x0, 0x1, 0x1, 0x0, "d10125e8e2acf81fb2609f53d2ff31057144e252420f594586bcaf0618326f7e581999b104a54db9fa16dda3f013b6cb2b779b22f025d39edb6846d21a6f48", 0x18}, 0x80) (async)
ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r1, 0x8983, &(0x7f0000001300)) (async)
ioctl$KVM_SET_GUEST_DEBUG_x86(r1, 0x4048ae9b, &(0x7f0000001340)={0xc0000, 0x0, {[0x7, 0x9, 0x2, 0x1, 0x8, 0x0, 0x1, 0x2]}}) (async)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000001580)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x20040000}, 0xc, &(0x7f0000001540)={&(0x7f0000001400)={0x120, 0x0, 0x100, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x0, 0x1c}}}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x9760}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x99}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x14e}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x32e}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x165}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xbd5}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x14b4}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x93f}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16f3}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x5}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1cf}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x308}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x21}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x6360}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}], @NL80211_ATTR_DURATION={0x8}, @NL80211_ATTR_DURATION={0x8, 0x57, 0xe8d}]}, 0x120}}, 0x24008000)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001600), r1)
sendmsg$NL80211_CMD_SET_CQM(r6, &(0x7f0000001700)={&(0x7f00000015c0), 0xc, &(0x7f00000016c0)={&(0x7f0000001640)={0x80, r7, 0x400, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x8, 0x6f}}}}, [@NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x4}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x2}, @NL80211_ATTR_CQM_RSSI_HYST={0x8}]}, @NL80211_ATTR_CQM={0x44, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xd}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x4d}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x36}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x8}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x7}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x55}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x3a0}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x60}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x10}, 0x810) (async)
io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f0000001780)={0x401, 0x0, &(0x7f0000001740)=[r2]}, 0x1) (async, rerun: 32)
r8 = openat2$dir(0xffffffffffffff9c, &(0x7f00000017c0)='./file0\x00', &(0x7f0000001800)={0x443881, 0x94, 0x29}, 0x18) (rerun: 32)
mknodat(r8, &(0x7f0000001840)='./file0\x00', 0x0, 0x9)

2.773898229s ago: executing program 1 (id=122):
r0 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece)
sendmsg$sock(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="e581836e64f2d795b3f61d294b64c4e4ed595512b81d74b1f9cb7db595b8062ca9ef47672c3f907a71e3ad388f250fdd296a6c16df0cebffa93d91e6da5a6b0f906d", 0x42}, {&(0x7f0000000080)="913c70c3edb68607973d806021ee3a68ad2f4e8b56eb4d9179f90ebc4a35564cdfd2432c14b5112c9a43ee46f303394b7eb310b008847f4d240a6db06b8a8fedd211c970", 0x44}], 0x2, &(0x7f0000000140)=[@txtime={{0x18, 0x1, 0x3d, 0x3}}, @timestamping={{0x14, 0x1, 0x25, 0xfffffff7}}, @timestamping={{0x14, 0x1, 0x25, 0x35}}, @mark={{0x14, 0x1, 0x24, 0x6}}, @mark={{0x14, 0x1, 0x24, 0x9}}], 0x78}, 0x20040000)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f0000000580)={0x25, {{0x2, 0x4e21, @multicast2}}, {{0x2, 0x4e24, @empty}}}, 0x108) (async)
setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f0000000580)={0x25, {{0x2, 0x4e21, @multicast2}}, {{0x2, 0x4e24, @empty}}}, 0x108)
close(r1)

2.742949212s ago: executing program 1 (id=123):
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f0000000000))
r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x3)
ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000040)={0x4c5, 0x379, 0x3, 0xfffffffc, 0x3, "e97a9d4c2d0fc42cfedd1f046c75005b381a34", 0xb32, 0x67f})
r2 = dup3(r1, r0, 0x80000)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000001c0)={'ip_vti0\x00', &(0x7f0000000100)={'syztnl2\x00', <r4=>0x0, 0x8, 0x80, 0x7, 0xee68, {{0x20, 0x4, 0x2, 0x33, 0x80, 0x67, 0x0, 0x3, 0x2f, 0x0, @local, @private=0xa010101, {[@rr={0x7, 0xb, 0xc9, [@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @rr={0x7, 0x13, 0x9, [@multicast1, @multicast2, @private=0xa010101, @multicast1]}, @rr={0x7, 0x7, 0x21, [@broadcast]}, @rr={0x7, 0xb, 0x70, [@broadcast, @empty]}, @timestamp={0x44, 0x18, 0x67, 0x0, 0x7, [0x10, 0x4, 0xb6, 0x6, 0x5]}, @ssrr={0x89, 0xf, 0xe8, [@private=0xa010100, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1]}, @timestamp={0x44, 0x8, 0xcd, 0x0, 0xd, [0xaf1]}, @generic={0x88, 0xa, "f60f511562a005ca"}]}}}}})
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={0x1, 0x58, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r5=>0x0}}, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'batadv_slave_0\x00', <r6=>0x0})
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000380)={'tunl0\x00', &(0x7f0000000300)={'erspan0\x00', <r7=>0x0, 0x700, 0x1, 0x6, 0x800000, {{0x18, 0x4, 0x0, 0x35, 0x60, 0x64, 0x0, 0xcc, 0x2f, 0x0, @remote, @multicast1, {[@timestamp={0x44, 0x28, 0x18, 0x0, 0x8, [0x2, 0x1, 0x7ff, 0x10000, 0x6, 0x7, 0x8001, 0x1, 0x20000]}, @end, @timestamp={0x44, 0x20, 0xa4, 0x0, 0x8, [0xffffffff, 0x5, 0x8001, 0x2, 0x800, 0x7, 0xfffffffe]}]}}}}})
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000440)={'erspan0\x00', &(0x7f00000003c0)={'syztnl1\x00', <r8=>0x0, 0x7, 0x8, 0xb90b, 0x80000000, {{0xf, 0x4, 0x3, 0x14, 0x3c, 0x67, 0x0, 0x9a, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@ssrr={0x89, 0x27, 0x1a, [@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @rand_addr=0x64010100, @loopback, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, @multicast2, @loopback]}]}}}}})
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000005c0)={'gre0\x00', &(0x7f0000000480)={'erspan0\x00', <r9=>0x0, 0x80, 0x40, 0x101, 0x3, {{0x3e, 0x4, 0x1, 0x36, 0xf8, 0x68, 0x0, 0x8e, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, {[@ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0x44, 0x14, 0x3, 0x5, [{@rand_addr=0x64010102, 0x10001}, {@private=0xa010102, 0x2}, {@empty, 0xd465}, {@loopback, 0x2}, {@private=0xa010101, 0x7}, {@rand_addr=0x64010100, 0x1}, {@empty, 0x5}, {@rand_addr=0x64010100}]}, @timestamp_prespec={0x44, 0x44, 0x6d, 0x3, 0x7, [{@remote, 0x9}, {@remote, 0x2}, {@rand_addr=0x64010100, 0x100}, {@private=0xa010100, 0xe1}, {@local, 0x6}, {@rand_addr=0x64010102}, {@local, 0x1ff}, {@remote, 0x9}]}, @timestamp_prespec={0x44, 0x1c, 0xbc, 0x3, 0xe, [{@local, 0xffffffff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x6}, {@multicast2, 0xff}]}, @timestamp={0x44, 0x24, 0x66, 0x0, 0xa, [0xfffffffc, 0x4ad0, 0x5, 0x6, 0x2e, 0x9, 0x1, 0x51]}, @timestamp={0x44, 0x18, 0xe5, 0x0, 0x7, [0x9, 0x6, 0xd39, 0x7ff, 0x6]}]}}}}})
sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f0000000780)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000740)={&(0x7f0000000600)={0x120, r3, 0x300, 0x70bd27, 0x25dfdbfc, {}, [@HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}]}, 0x120}, 0x1, 0x0, 0x0, 0x4800}, 0x80)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r2, &(0x7f00000007c0)="2af7b73a224aeeb4f0220bf0042f78f9bf77d4ccff3a15679cfb61ace2f9c05bc8", &(0x7f0000000800)=@udp=r2, 0x2}, 0x20)
socket$nl_route(0x10, 0x3, 0x0)
bind$inet(r2, &(0x7f0000000880)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
mkdirat(r2, &(0x7f00000008c0)='./file0\x00', 0x4)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000b00)={r2, &(0x7f0000000900)="fbd8e6c1840a0c32d0e583d975181d281e0f561944bfb33baf717f7d34990f6864e0edd5558e1629021ad699523869c6281a9ad3c125ecac675a55246a7eb1b51d2130ef7bde7d4cc1a580fb8953cdae6a0eb3820a31269008a01c8b6c0f1d0f1e87365e516d55eeaa6a18d7843c7c10e95240d684b7c1c46de3b1ae6daf26ee69725b6d46d996ce3fbf8c12577fcbace6948f03eb92e5b479294f5255cae6c428fafd17286c9ba4b9cfb7961f7ac89cb7d2702524cb136d329c4dd87fece91ad33c76d5b26c0de353", &(0x7f0000000a00)=""/228}, 0x20)
sendto$inet6(r2, &(0x7f0000000b40)="198544c0ff90f2b95712beddcc0b08f6651a756240d2832ef7bc2daa79ebe5", 0x1f, 0x40080, &(0x7f0000000b80)={0xa, 0x4e24, 0x7ff, @dev={0xfe, 0x80, '\x00', 0x41}, 0x4631}, 0x1c)
read$FUSE(r2, &(0x7f0000000bc0)={0x2020, 0x0, 0x0, 0x0, 0x0, <r10=>0x0}, 0x2020)
ioctl$TIOCSPGRP(r0, 0x5410, &(0x7f0000002c00)=r10)
ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000002c40)={@remote, 0x31, r8})
getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000002c80)={{{@in6=@local, @in6}}, {{@in6=@empty}, 0x0, @in=@multicast1}}, &(0x7f0000002d80)=0xe8)
setsockopt$inet6_int(r2, 0x29, 0x3c, &(0x7f0000002dc0)=0xe8d, 0x4)
ioctl$FS_IOC_MEASURE_VERITY(r2, 0xc0046686, &(0x7f0000002e00)={0x3, 0x29, "2677bcdc883665a66997c6c8e4497eb82f22d1c2b10f044a103c7ee34a7ea6aa7a1eafe1fc8402b5dc"})
r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000002e40)={0x1b, 0x0, 0x0, 0x3, 0x0, 0xffffffffffffffff, 0x9, '\x00', r7, 0xffffffffffffffff, 0x5, 0x1}, 0x50)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000030c0)={'pim6reg\x00', <r12=>0x0})
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000003400)={0xffffffffffffffff, 0xe0, &(0x7f0000003300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000003140)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0xa, &(0x7f0000003180)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000031c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], <r13=>0x0, 0x95, &(0x7f0000003200)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000003240), &(0x7f0000003280), 0x8, 0x16, 0x8, 0x8, &(0x7f00000032c0)}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000003480)={0x13, 0x14, &(0x7f0000002ec0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r11}}, {}, [@map_val={0x18, 0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x6}, @ldst={0x3, 0x0, 0x0, 0x3, 0xb, 0x30, 0xfffffffffffffffc}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x3}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000002f80)='GPL\x00', 0x400, 0xc2, &(0x7f0000002fc0)=""/194, 0x41100, 0x0, '\x00', r12, @fallback=0x13, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f0000003100)={0x4, 0x0, 0x80000001, 0x1ff}, 0x10, r13, r2, 0x0, &(0x7f0000003440)=[r2, r2], 0x0, 0x10, 0x2}, 0x94)
prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000003580)={0x6, &(0x7f0000003540)=[{0x9f3f, 0x80, 0x86, 0x5800}, {0xfff, 0x0, 0x5, 0x4022}, {0xe, 0x0, 0xd, 0x7fffffff}, {0x4, 0x80, 0x40, 0x2f}, {0x3, 0x2, 0x8, 0x8000}, {0x401, 0x8, 0x2, 0x8}]})

2.435807553s ago: executing program 2 (id=125):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_SET_DEF(r0, 0x4b52, 0x0)
syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./bus\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYRES8=0x0, @ANYRESDEC=0x0, @ANYBLOB="2c6a71666d743d76667376312c7573726a71756f74613d2d29242d2e25272a2c2c00a40988e362019a69db5cb2a8b125934e5652c7c1af7aa1b29a3326b2ca0000000000"], 0xff, 0x5512, &(0x7f00000079c0)="$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")
r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x182)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000340), 0x802, 0x0)
write$uinput_user_dev(r3, &(0x7f0000000d80)={'syz1\x00', {0x3, 0x4eb2, 0x2, 0x5770}, 0x26, [0xede, 0x100, 0x2, 0xfffffffa, 0x4, 0x7, 0x1, 0xffffffff, 0x488f9e54, 0xff, 0x8, 0x8, 0x9, 0xfff, 0xfffffffa, 0x401, 0x0, 0x5, 0x8, 0xfff, 0x1, 0x9, 0x1000, 0x1, 0x3, 0x8, 0x200, 0x59, 0x4, 0x7, 0x97a8, 0x7ff, 0x36, 0xfe5, 0x75, 0x7f1b, 0x2, 0x2, 0x3, 0x7, 0xf, 0xd704, 0x4, 0x2, 0x10001, 0x5, 0x0, 0x1, 0x851, 0x1, 0x2, 0x401, 0x8, 0x1, 0x5, 0x4, 0x582, 0x1, 0x3ff, 0x3, 0xd7, 0x541f1d1e, 0xb, 0xb639], [0x400, 0x0, 0x5bba, 0x0, 0x101, 0x3, 0x3, 0x7fff, 0x1, 0x50, 0x5, 0x2, 0xff, 0xc00000, 0x7, 0x30, 0x5, 0x0, 0x4, 0x3, 0x5, 0x7f, 0x3, 0x7, 0x6, 0xb7f, 0x3, 0x4, 0x3, 0x200, 0x1000, 0x6, 0x0, 0x8, 0xfffffffb, 0x9, 0x200, 0x766, 0x9, 0x2, 0x9, 0x0, 0x1, 0x2, 0x69, 0x2, 0xa7, 0x20, 0x3, 0xa, 0x1f, 0x631, 0x8, 0x100, 0xfff, 0x8, 0x8, 0x2, 0x81, 0x3, 0x7, 0x3e6d, 0x6, 0xffffffff], [0x7, 0x9, 0x2, 0x5, 0xc0e3, 0x2, 0x8, 0x200, 0x4, 0x4, 0x7, 0x6, 0x4, 0x10, 0x8, 0xfff, 0x6, 0x5, 0x6, 0x2, 0x3, 0x1, 0x3ff, 0x6, 0x2c0, 0xff800000, 0x6, 0x713c, 0x6, 0x58, 0x5, 0xc, 0x6, 0x7ff, 0x2d5f, 0x7, 0x1, 0x10001, 0x200, 0x7, 0x3, 0x35, 0xffff, 0x7, 0x10000, 0x6, 0x8, 0x1, 0x371e, 0x9, 0xb, 0xa, 0x6, 0x7, 0x7f, 0x1bd2, 0x8, 0x0, 0x3, 0x5, 0x4, 0xffffffff, 0x2, 0x2], [0x0, 0x5, 0x2c06, 0x7ff, 0x3, 0x894, 0x8, 0x8e, 0x80000000, 0xfffffe00, 0x2, 0x3, 0x7, 0x6, 0xffff, 0x1ff, 0xe, 0x5, 0xffffffff, 0x4, 0x5, 0x0, 0x9, 0x80000001, 0x241, 0x3, 0x1, 0x7, 0x80000000, 0x0, 0x6, 0x5, 0x127, 0x7fff, 0x40, 0x1794, 0x81, 0x5, 0x80000001, 0x6, 0x80000000, 0x6, 0x6, 0x2, 0x6, 0x349, 0x4, 0x81, 0xfffffffb, 0xffffe000, 0x1, 0x2, 0x6b, 0x9, 0xa4089f6, 0xb7e, 0x7, 0x1, 0x7, 0x3, 0x2, 0x7, 0xffff, 0x4]}, 0x45c)
ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x3)
ioctl$UI_DEV_SETUP(r3, 0x5501, 0x0)
write$uinput_user_dev(r3, &(0x7f0000000900)={'syz1\x00', {0x9, 0x0, 0x6}, 0x37b4, [0xfeff, 0x4, 0x9, 0x0, 0x0, 0x20000, 0x0, 0xfffffffd, 0x0, 0x1, 0x10001, 0x8, 0x3, 0x5, 0x1ff, 0x0, 0xfff, 0x10000, 0x0, 0x0, 0x0, 0x10000000, 0x10000000, 0xbffffffe, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffd, 0x0, 0x8, 0x1, 0x0, 0x9, 0x3, 0xffffffff, 0x0, 0x4, 0x80, 0x5, 0x6, 0x3a3, 0x0, 0x0, 0x0, 0x8, 0x3, 0xfffffffd, 0x0, 0x6, 0x200, 0x7, 0x2, 0x6, 0x0, 0x2000002, 0x20004, 0x0, 0x0, 0x105, 0x0, 0x800000], [0x11, 0xffff0003, 0x7, 0x0, 0xfffffffe, 0x9, 0xad9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4f3, 0x0, 0xff, 0xbb, 0x1, 0xfffffffc, 0x5, 0x800, 0x218001, 0xfffffffe, 0x6, 0x100, 0x40, 0x10000, 0xec6a, 0xca86, 0x40000000, 0xffffffff, 0xfffffff9, 0x8, 0xfffffffd, 0x7fffffff, 0xfffffffc, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffc, 0x4, 0x18c, 0x0, 0xffffffff, 0x4000802, 0x5, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x4, 0x9dd, 0x80, 0x8000, 0x40000004, 0x6, 0x3, 0x8f, 0x7], [0xf, 0x4, 0x0, 0x0, 0xffffffff, 0x3, 0xa000000, 0x0, 0xfff, 0xffff7fff, 0xfffffffd, 0x0, 0x7, 0x0, 0x0, 0x6, 0x0, 0x0, 0x401, 0x0, 0x2, 0x420, 0xc, 0x0, 0x0, 0x0, 0x1ff, 0xe, 0xfffffffa, 0x7, 0xfffffffc, 0x2af, 0x5, 0x9, 0x0, 0x10000, 0x3, 0x0, 0x0, 0x0, 0x8, 0x401, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x1, 0x0, 0xff, 0x4000005, 0x0, 0x4, 0x3ff, 0x400000, 0x0, 0x6, 0x0, 0x0, 0x1, 0x0, 0xffffffdb], [0x2, 0x0, 0x4, 0x6, 0x0, 0x401, 0x1000, 0x215, 0x4, 0x7ff, 0x100, 0x3, 0x4, 0xf862, 0x80, 0x0, 0x3, 0x0, 0x7d, 0x4, 0x7ffd, 0x9, 0x4, 0x72, 0x0, 0xfffffffe, 0x0, 0x8, 0x5d66, 0x1, 0x800000, 0x9, 0x3, 0x0, 0x0, 0x6, 0xbfb6, 0x4, 0x8, 0x3, 0x0, 0xfffffffd, 0x1, 0xffffffff, 0x100, 0x40074, 0x6, 0x3, 0xfffffffd, 0x53591a27, 0x3fffffd, 0x0, 0x0, 0x2, 0x400, 0x7, 0x9, 0x0, 0x0, 0x80000000, 0x1000000, 0x80000000, 0x5, 0x400]}, 0x45c)
sendmsg$NL802154_CMD_SET_LBT_MODE(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="04"], 0x14}}, 0x0)
r4 = socket(0x10, 0x80003, 0x0)
write(r4, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd000000", 0x85)
ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000080)={'sit0\x00'})
recvfrom$inet6(r4, 0x0, 0x0, 0x2042, 0x0, 0x0)
syz_genetlink_get_family_id$nfc(&(0x7f0000000cc0), r2)
r5 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000080), r2)
sendmsg$NLBL_CALIPSO_C_LISTALL(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="01002cbd7000fcdbdf2506"], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004044)
openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x1ab341, 0x114)
ioctl$F2FS_IOC_SET_PIN_FILE(r1, 0x4004f50d, &(0x7f0000000100)=0xfffffdfd)
fallocate(r1, 0x0, 0x1, 0x2000402)
creat(&(0x7f0000000040)='./bus\x00', 0x0)

1.887210551s ago: executing program 1 (id=127):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/custom0\x00', 0x800, 0x0)
r1 = socket$igmp(0x2, 0x3, 0x2)
ioctl$EXT4_IOC_CLEAR_ES_CACHE(r1, 0x6628)
r2 = socket$inet_icmp(0x2, 0x2, 0x1)
setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000000c0)='bond_slave_0\x00', 0x10)
sendto$inet(r1, 0x0, 0x0, 0x40, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x2)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x801, 0x0)
r4 = dup3(r3, r0, 0x0)
ioctl$sock_TIOCINQ(r4, 0x541b, 0x0)
ioctl$BTRFS_IOC_QGROUP_CREATE(0xffffffffffffffff, 0x4010942a, &(0x7f0000000140)={0x1, 0x401})
r5 = dup(r4)
io_uring_register$IORING_REGISTER_CLOCK(r5, 0x1d, &(0x7f0000000740)={0x4}, 0x0)
r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x141c1, 0x100)
ioctl$XFS_IOC_READLINK_BY_HANDLE(r6, 0xc038586c, &(0x7f0000000700)={r3, &(0x7f0000000600)='936', 0x208000, &(0x7f0000000640)={@_ha_fsid={[0x3, 0x1ff]}, {0x4, 0x1, 0x1, 0x3}}, 0x0, &(0x7f0000000680)={@_ha_fsid}, &(0x7f00000006c0)=0x11e})
socket$pppl2tp(0x18, 0x1, 0x1)
openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1)

1.841243803s ago: executing program 1 (id=128):
syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x20, 0x0, 0x0, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0)
close(r0)
epoll_create(0x4)
r1 = socket$unix(0x1, 0x5, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="19000000040000203a34040000000019ffe94babb501e2b053fb0000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
r3 = socket$inet6(0xa, 0x1, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="5800000010000800000000000000000000110000a7526136d33cc71ae75312358098cefb27c7f425e4586e1bcddae453b38bdb2f6df970f381c28785b4bf515c4233fa28538cef7419a43b7e5b28030cef863dd8050cf4f6dd1e830758976847ec3b62f176f2b6e9b3", @ANYRES32=0x0, @ANYBLOB="fab0817dbcb5f31a24001280110001006272696467655f736c617665000000000c0005800500010003000000140003006272696467655f736c6176655f300000"], 0x58}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040)
ioctl$sock_SIOCOUTQ(r3, 0x5411, &(0x7f0000000000))
syz_usb_connect_ath9k(0x3, 0xa, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x225, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)=ANY=[], 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r2, &(0x7f0000000080), &(0x7f0000000000)=""/3, 0x2}, 0x20)
bind$unix(r1, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x12)
listen(r1, 0x787)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000200), 0x2a10413, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}, {@version_L}, {@cachetag={'cachetag', 0x3d, 'wfdno'}}]}})

1.600237711s ago: executing program 2 (id=129):
socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000000180)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x10, 0x0, 0x20040001, 0x0, 0x2, 0x0, 0x2, 0x1, 0xfffffffd}})
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
fchdir(r2)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000380))
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x3f, 0x0, 0x7fffffff}]})
r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002d80), 0x2, 0x0)
syz_mount_image$fuse(&(0x7f0000002d00), &(0x7f0000002d40)='./file0\x00', 0x0, &(0x7f0000000100)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0)
statx(0xffffffffffffffff, 0x0, 0x1000, 0x40, 0x0)
timer_create(0x0, 0x0, &(0x7f0000000300)=<r5=>0x0)
timer_settime(r5, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0)
timer_delete(r5)
close_range(r3, 0xffffffffffffffff, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x100)
socketpair(0x2c, 0x80000, 0x7, &(0x7f0000000080))
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{0xffffffffffffffff, <r6=>0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x3, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000002000000000000000100008018150000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000450000001801000020756c2500000000002020207b1a00ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r8, 0x0, 0xe, 0x0, &(0x7f00000002c0)="e02742e86c0d85ff9782762f0800", 0x0, 0x46b, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r6}, &(0x7f0000000240), &(0x7f00000002c0)=r8}, 0x20)
unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$AUTOFS_IOC_FAIL(r9, 0x4c80, 0xffffffffffffffb3)
read$FUSE(r4, &(0x7f0000002dc0)={0x2020}, 0x2020)

1.577950482s ago: executing program 0 (id=131):
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
fstat(r0, &(0x7f00000001c0)) (async)
fstat(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r1=>0x0})
setreuid(r1, r1) (async)
setreuid(r1, r1)
r2 = syz_mount_image$ext4(&(0x7f0000000600)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x15, &(0x7f0000000140)={[{@nodioread_nolock}, {@init_itable_val}, {@mblk_io_submit}, {@minixdf}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [{@uid_eq={'uid', 0x3d, r1}}], 0x2e}, 0x84, 0x459, &(0x7f0000000640)="$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")
r3 = syz_open_dev$usbfs(&(0x7f0000000000), 0x4, 0x400000)
ioctl$USBDEVFS_FREE_STREAMS(r3, 0x8008551d, &(0x7f0000000040)=ANY=[@ANYBLOB="bc3dcdb25900080084838a8c8d0b"]) (async)
ioctl$USBDEVFS_FREE_STREAMS(r3, 0x8008551d, &(0x7f0000000040)=ANY=[@ANYBLOB="bc3dcdb25900080084838a8c8d0b"])
bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0b0000009d000000010001000900000001"], 0x50) (async)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0b0000009d000000010001000900000001"], 0x50)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r4, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20) (async)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r4, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000016c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x840e, &(0x7f0000001ac0)={[{@init_itable_val}, {@dioread_nolock}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x8}}, {@jqfmt_vfsold}, {@bsdgroups}, {@grpjquota}], [{@context={'context', 0x3d, 'staff_u'}}]}, 0x3, 0x42f, &(0x7f0000000940)="$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")
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r4, &(0x7f0000000080), 0x0}, 0x20)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$XFS_IOC_PATH_TO_FSHANDLE(r2, 0xc0385868, &(0x7f0000000400)={<r6=>r5, &(0x7f0000000100)='\xd7)\x00', 0x40, &(0x7f0000000340)={@_ha_fsid={[0x5, 0x10000]}, {0x0, 0x8, 0x1, 0x9}}, 0x4, &(0x7f0000000380), &(0x7f00000003c0)=0x6})
ioctl$KDGKBDIACR(r6, 0x4b4a, &(0x7f0000000ac0)=""/4096) (async)
ioctl$KDGKBDIACR(r6, 0x4b4a, &(0x7f0000000ac0)=""/4096)
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file0\x00', 0x210000, &(0x7f0000002f40), 0xfc, 0x56f, &(0x7f0000003780)="$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")
syz_mount_image$fuse(0x0, &(0x7f0000000100)='./bus\x00', 0x20020, 0x0, 0x1, 0x0, 0x0)
pipe(&(0x7f0000000080)={<r7=>0xffffffffffffffff})
vmsplice(r7, &(0x7f00000001c0)=[{&(0x7f0000000640)="ec", 0x1}], 0x100000000000029d, 0xf) (async)
vmsplice(r7, &(0x7f00000001c0)=[{&(0x7f0000000640)="ec", 0x1}], 0x100000000000029d, 0xf)
close(0x3)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
pipe2(&(0x7f0000000440), 0x80000)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r8=>0x0)
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) (async)
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r8, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) (async)
timer_settime(r8, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) (async)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x3000010, &(0x7f0000000340)={[{@errors_remount}, {@nodioread_nolock}]}, 0x1, 0x512, &(0x7f0000000380)="$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")
r9 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x4)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r9, 0xc0185879, &(0x7f0000000000)={@desc={0x1, 0x0, @desc3}})
ioctl$BLKPBSZGET(r6, 0x127b, &(0x7f0000000280))

1.492149408s ago: executing program 0 (id=132):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x4}, 0x1c) (async)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x4}, 0x1c)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10)
setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4)
connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10)
sendmmsg$inet(r1, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x400000000000284, 0xf00) (async)
sendmmsg$inet(r1, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x400000000000284, 0xf00)

1.491687188s ago: executing program 0 (id=133):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x404, &(0x7f00000003c0)={[{@nobarrier}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@errors_remount}, {@user_xattr}]}, 0x1, 0x42f, &(0x7f0000000940)="$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")
symlink(&(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000002040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
r0 = syz_open_dev$tty1(0xc, 0x4, 0x4)
r1 = dup(r0)
write$UHID_INPUT(r1, &(0x7f0000001040)={0xf, {"a2e3ad21ed0d09f91b5b090987f70906d038e7ff7fc6e5539b0d3d0e8b089b32356d63060890e0878f0e1ac6e7049b334a959b669a240d5b67f3988f7ef319520100ffe8d17c708c523c921b1b5b31070b07580936cd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08cdc339081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383701d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9d6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bad8deff4b05f60cea0da7710ac0000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f74a2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bcff00000000000000fec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420ae305fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42f48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b6080000007a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fadf9ffffff238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3b99caf6b00d84a604047497022d9c30e23ef4df5c89644f48bb536f7946b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6020048cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffee738d97b9b5ef828ee9fb06ffc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c65a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c3329c8a6b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2d06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d2a89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d009000000c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb15da202d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb7847c7148b6ce431bb90e29389f22fc5b59a70efaea2bd40195af4486220d70bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24622a4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744d9b6c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de99258842cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b9906009af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006)

1.432929752s ago: executing program 2 (id=134):
syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x2800000, &(0x7f0000000140)={[{@init_itable_val={'init_itable', 0x3d, 0x101}}, {@stripe={'stripe', 0x3d, 0x61}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x6}}, {@minixdf}, {@nodiscard}, {@nomblk_io_submit}, {@acl}, {@nojournal_checksum}, {@resuid}]}, 0x1, 0xbb4, &(0x7f00000017c0)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x767d181779ddb4b8)
ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffff7}}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
chdir(&(0x7f0000000140)='./file0\x00')
io_setup(0xe16, &(0x7f0000000380)=<r0=>0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000000000)={0x0, 0xea60}, 0x10)
io_submit(r0, 0x1, &(0x7f0000000140)=[&(0x7f00000001c0)={0x0, 0x4, 0x0, 0x0, 0x0, r1, &(0x7f0000000200)=' ', 0x1, 0x0, 0x0, 0x2}])
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r2, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000000301010100000000000000000a00000304000180140019"], 0x2c}, 0x1, 0x0, 0x0, 0x20000800}, 0x40002)
r3 = syz_open_dev$loop(&(0x7f0000000080), 0x7fffffffffffffff, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f00000002c0)={r4, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xd, "fee8a2a478fc179fd2f8dda1af1ea89de2b7fb0a0100000000000000000300000000000004000000000000000000000000000500", "2809e8dbe108598948224ad54afac11d865397b9b22d0000b420a1a93c0000b0ec5f100000a500", "90be8b1c551265406c7f306003d8a0f4bd00000014000800000000000000007f"}})

1.307083251s ago: executing program 0 (id=135):
socket$inet6_tcp(0xa, 0x1, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42792000)
openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff)
r1 = socket$inet(0x2, 0x1, 0x0)
setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_BEACON(r2, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f00000001c0)={0x50, r3, 0x1, 0x4, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0xfffffffd}}}}, [@NL80211_ATTR_IE_ASSOC_RESP={0x28, 0xe, [@perr={0x84, 0x22, {0x2, 0x2, [{{}, @device_b, 0x0, @void, 0x2b}, {{0x0, 0x1}, @device_a, 0xeb0, @value=@broadcast, 0x24}]}}]}]}, 0x50}}, 0x10)
shutdown(r1, 0x0)
recvmmsg(r1, &(0x7f00000066c0), 0xa0d, 0x0, 0x0)

1.220209546s ago: executing program 0 (id=136):
syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file0\x00', 0x180c8, &(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x1, 0x242, &(0x7f0000000300)="$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")
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='blkio.bfq.io_service_bytes_recursive\x00', 0x0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
io_setup(0x7ff, &(0x7f0000000100)=<r2=>0x0)
r3 = eventfd2(0x8, 0x0)
io_submit(r2, 0x1, &(0x7f0000004500)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x1, r3, 0x0}])
read(r3, &(0x7f0000000480)=""/82, 0x52)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x183081, 0x0)
r5 = socket(0x200000000000011, 0x4000000000080002, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'sit0\x00', <r6=>0x0})
bind$packet(r5, &(0x7f0000001100)={0x11, 0x3, r6, 0x1, 0x0, 0x6, @multicast}, 0x14)
bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0100000006000000080000000800000040000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=r6, @ANYRES32, @ANYBLOB="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"], 0x50)
close(r4)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080))
r7 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20)
setuid(0xee01)
r8 = gettid()
timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r8}, &(0x7f0000bbdffc)=<r9=>0x0)
timer_settime(r9, 0x1, &(0x7f0000000280)={{0x77359400}}, 0x0)
select(0x0, 0x0, 0x0, 0x0, 0x0)
r10 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r10, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000500)={'syzkaller0\x00', @link_local})
write$cgroup_subtree(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="8fedcb5d07081196f37538e486dd6372ce22667f2c00dbf6e97158b33d4fec877f1b6d76745b686158bbcfe8875afdef00010000000029"], 0x66)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuset.memory_pressure\x00', 0x275a, 0x0)

1.194850088s ago: executing program 3 (id=137):
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000003c0))
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0e0000000408000004000089054aac54fb90f500f1ee13cac548e7f5d386962628495a47ca5b97e6af0ad94e2eb2401b6f5432e8231fd65a1f1130c82a9276196965684e5c917da9d800438bd12cdb61b3045a3f15d27654dcf9136d1334fd29786af3cc8a2318ff08be664b41a032dcbb84985f13f296", @ANYRES32=0x1, @ANYBLOB="fcffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$inet_tcp(0x2, 0x1, 0x0) (async)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r3=>0x0})
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x80)
ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000280)={0xa, &(0x7f0000000040)=[{0x5, 0x2, 0x81, 0xffffffff}, {0x2, 0x31, 0x1}, {0x4, 0x5, 0x0, 0x84f7}, {0x80, 0x7, 0x6, 0x7}, {0x4, 0x3, 0x7, 0x5}, {0x1, 0xac, 0x7, 0x401}, {0x5, 0x99, 0x1, 0x3}, {0xf, 0x3, 0x96, 0xfeac}, {0x5, 0x80, 0x9, 0x5}, {0x0, 0x6, 0x8, 0x4}]}) (async)
ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000280)={0xa, &(0x7f0000000040)=[{0x5, 0x2, 0x81, 0xffffffff}, {0x2, 0x31, 0x1}, {0x4, 0x5, 0x0, 0x84f7}, {0x80, 0x7, 0x6, 0x7}, {0x4, 0x3, 0x7, 0x5}, {0x1, 0xac, 0x7, 0x401}, {0x5, 0x99, 0x1, 0x3}, {0xf, 0x3, 0x96, 0xfeac}, {0x5, 0x80, 0x9, 0x5}, {0x0, 0x6, 0x8, 0x4}]})
pipe(&(0x7f0000000480)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file2\x00', 0x10040, &(0x7f0000000140)={[{@nodioread_nolock}, {@noload}]}, 0x4, 0x523, &(0x7f00000018c0)="$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") (async)
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file2\x00', 0x10040, &(0x7f0000000140)={[{@nodioread_nolock}, {@noload}]}, 0x4, 0x523, &(0x7f00000018c0)="$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")
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mount$incfs(&(0x7f00000007c0)='.\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000840), 0x1004002, 0x0) (async)
mount$incfs(&(0x7f00000007c0)='.\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000840), 0x1004002, 0x0)
chdir(&(0x7f00000001c0)='./bus\x00')
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000300)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
removexattr(&(0x7f0000000000)='./file0/file1\x00', 0x0)
io_setup(0x3ff, &(0x7f0000000500)) (async)
io_setup(0x3ff, &(0x7f0000000500)=<r7=>0x0)
io_submit(r7, 0x1, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r5, 0x0}]) (async)
io_submit(r7, 0x1, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r5, 0x0}])
vmsplice(r6, &(0x7f0000000200)=[{&(0x7f0000000540)="1a62", 0x2}], 0x1, 0x0) (async)
vmsplice(r6, &(0x7f0000000200)=[{&(0x7f0000000540)="1a62", 0x2}], 0x1, 0x0)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r1, r3, 0x25, 0x2, @void}, 0x10)
syz_emit_ethernet(0x11, &(0x7f00000005c0)={@remote, @random="001a00e100", @void, {@mpls_uc={0x8847, {[], @llc={@llc={0x42, 0xaa, "d4"}}}}}}, 0x0)

1.108287784s ago: executing program 2 (id=138):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/custom0\x00', 0x800, 0x0)
r1 = socket$igmp(0x2, 0x3, 0x2)
ioctl$EXT4_IOC_CLEAR_ES_CACHE(r1, 0x6628)
r2 = socket$inet_icmp(0x2, 0x2, 0x1)
setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000000c0)='bond_slave_0\x00', 0x10)
sendto$inet(r1, 0x0, 0x0, 0x40, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x2)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x801, 0x0)
r4 = dup3(r3, r0, 0x0)
ioctl$sock_TIOCINQ(r4, 0x541b, 0x0)
ioctl$BTRFS_IOC_QGROUP_CREATE(0xffffffffffffffff, 0x4010942a, &(0x7f0000000140)={0x1, 0x401})
r5 = dup(r4)
io_uring_register$IORING_REGISTER_CLOCK(r5, 0x1d, &(0x7f0000000740)={0x4}, 0x0)
r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x141c1, 0x100)
ioctl$XFS_IOC_READLINK_BY_HANDLE(r6, 0xc038586c, &(0x7f0000000700)={r3, &(0x7f0000000600)='936', 0x208000, &(0x7f0000000640)={@_ha_fsid={[0x3, 0x1ff]}, {0x4, 0x1, 0x1, 0x3}}, 0x0, &(0x7f0000000680)={@_ha_fsid}, &(0x7f00000006c0)=0x11e})
socket$pppl2tp(0x18, 0x1, 0x1)
openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1)

1.003901351s ago: executing program 3 (id=139):
ioctl$EXT4_IOC_GETFSUUID(0xffffffffffffffff, 0x8008662c, &(0x7f0000000000))
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x12, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000001000000000000000000000061180c000000000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

1.003583941s ago: executing program 4 (id=140):
syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x20, 0x0, 0x0, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0)
close(r0)
epoll_create(0x4)
r1 = socket$unix(0x1, 0x5, 0x0)
bind$unix(r1, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x12)
listen(r1, 0x787)
mount$9p_fd(0x3000000, &(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000200), 0x2a10413, &(0x7f0000000780)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

1.002897711s ago: executing program 2 (id=141):
r0 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10)
r1 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10)
sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000)
sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000)
recvmmsg$unix(r0, &(0x7f00000043c0)=[{{0x0, 0x0, &(0x7f0000002d00)=[{&(0x7f0000000900)=""/174, 0xae}], 0x1}}], 0x1, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0)
lseek(r2, 0xffffffffffffffff, 0x1)
r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r3, &(0x7f0000009b80)=""/102392, 0x18ff8)

939.944816ms ago: executing program 4 (id=142):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x8, 0xffffffffffffffff}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]})
ioperm(0x0, 0x2, 0x2)
ioperm(0x0, 0x9d, 0x0)
faccessat2(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x48, 0x200)
r0 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x620400, 0x4, 0x3}, 0x18)
move_mount(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', r0, &(0x7f0000000280)='./file0/../file0\x00', 0x40)

925.379157ms ago: executing program 4 (id=143):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0)
ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000000300)=""/102392, 0x18ff8)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xe0}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x3}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0x50}, {0x7, 0x1, 0xb, 0x2, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@ipv6_getaddrlabel={0x24, 0x4a, 0x1, 0x0, 0x0, {}, [@IFAL_LABEL={0x8}]}, 0x24}}, 0x0)

210.579106ms ago: executing program 0 (id=144):
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
ioctl$F2FS_IOC_DEFRAGMENT(r0, 0xc010f508, &(0x7f00000000c0)={0x8001, 0x8000})
mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) (async)
syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') (async)
ioctl$F2FS_IOC_DEFRAGMENT(r0, 0xc010f508, &(0x7f00000000c0)={0x8001, 0x8000}) (async)
mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (async)

20.069899ms ago: executing program 2 (id=145):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000001740)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1c, 0x3, &(0x7f0000000640)=ANY=[@ANYBLOB="18020000000000000008000300000000950000000000000097073a82b13a4c8a5edb4bc77165d404e52afc534cb36ccf0c5915a63c6b3b77d65c09972b4378f4b53bf09ad6466f758f4d3abdc257932f58158ba20d5b426cc74fbeee093cd6ec2dc1ac59aa7b5a193912aba9dd08409768e05df0addaef4f6ed954a50dbd488e520ca95ad21649945d134027b274109ecde138ef08e3d4bfd28e"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000740)=""/4096, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r2}, 0x80)
syz_usb_connect$uac3(0x5, 0x169, &(0x7f00000008c0)=ANY=[@ANYBLOB="1201000200000040820582054000010203010902570103010750d8080b0002012430060904000000010130000a24010d6000000200001d240a040303000000000000000200000003000000020000000200000007240c050273660600200400fa1124090106010000000200000001000000152409010202000000000000000100000003000000060020ff8e06090401"], 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDSETMODE(r5, 0x4b3a, 0x1)
ioctl$KDSETMODE(r5, 0x4b3a, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_GET_NESTED_STATE(r6, 0xc080aebe, &(0x7f0000000440))
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000024c0)=ANY=[@ANYBLOB="400000001000390400000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="360600000313000020001280080001007361740014000280080002000a010102000000002100000026d5f8ff77f298b3befe0112bea9f7063d6e90617ff7b96f11907efd6e76af26f38a779bc0cb90ec5c934a6f7efaab3d78d2e2fe1eaf9bf3cf3daf32e892b9ea28f430068d9b7b943fc0581ff55e683b20c7bbce46aab439461ba5f30637b313cc529f533c090000007e8999275aa0e4ae29000000000000"], 0x40}}, 0x0)

0s ago: executing program 4 (id=146):
r0 = socket$inet6(0xa, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1700000005000000020000000000000008"], 0x50) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1700000005000000020000000000000008"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={r1, 0x27, 0xe, 0x0, &(0x7f0000000000)="f8ad1dcc02cb29dcc80032008100", 0x0, 0x4000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x50)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) (async)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup(r3)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
pipe2(&(0x7f0000000040)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x0)
pipe2$9p(&(0x7f00000000c0)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff}, 0x4000)
write$binfmt_script(r8, &(0x7f0000000800)={'#! ', './file0'}, 0xb)
tee(r7, r6, 0x9, 0x8)
read$FUSE(r5, &(0x7f0000000840)={0x2020}, 0x2020)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="020000"], 0x48)
write$tun(r2, &(0x7f0000000440)={@val={0x70}, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x4000, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x0, 0xffffdd86}}}}}}}, 0xfdef) (async)
write$tun(r2, &(0x7f0000000440)={@val={0x70}, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x4000, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x0, 0xffffdd86}}}}}}}, 0xfdef)
mmap$binder(&(0x7f0000ff7000/0x7000)=nil, 0x7000, 0x1, 0x11, 0xffffffffffffffff, 0x6)
ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000000)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x48})
setsockopt$inet6_int(r0, 0x29, 0x16, 0x0, 0x0) (async)
setsockopt$inet6_int(r0, 0x29, 0x16, 0x0, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.1.175' (ED25519) to the list of known hosts.
[   26.585490][   T30] audit: type=1400 audit(1775824153.953:64): avc:  denied  { mounton } for  pid=273 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[   26.589868][  T273] cgroup: Unknown subsys name 'net'
[   26.609340][   T30] audit: type=1400 audit(1775824153.953:65): avc:  denied  { mount } for  pid=273 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   26.637018][   T30] audit: type=1400 audit(1775824153.983:66): avc:  denied  { unmount } for  pid=273 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   26.637520][  T273] cgroup: Unknown subsys name 'devices'
[   26.815349][  T273] cgroup: Unknown subsys name 'hugetlb'
[   26.821042][  T273] cgroup: Unknown subsys name 'rlimit'
[   27.024179][   T30] audit: type=1400 audit(1775824154.393:67): avc:  denied  { setattr } for  pid=273 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   27.048036][   T30] audit: type=1400 audit(1775824154.393:68): avc:  denied  { mounton } for  pid=273 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1
Setting up swapspace version 1, size = 127995904 bytes
[   27.071107][  T275] SELinux:  Context root:object_r:swapfile_t is not valid (left unmapped).
[   27.074648][   T30] audit: type=1400 audit(1775824154.393:69): avc:  denied  { mount } for  pid=273 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1
[   27.106611][   T30] audit: type=1400 audit(1775824154.453:70): avc:  denied  { relabelto } for  pid=275 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   27.120481][  T273] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   27.135728][   T30] audit: type=1400 audit(1775824154.453:71): avc:  denied  { write } for  pid=275 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   27.170052][   T30] audit: type=1400 audit(1775824154.473:72): avc:  denied  { read } for  pid=273 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   27.197090][   T30] audit: type=1400 audit(1775824154.473:73): avc:  denied  { open } for  pid=273 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   27.774022][  T282] bridge0: port 1(bridge_slave_0) entered blocking state
[   27.781568][  T282] bridge0: port 1(bridge_slave_0) entered disabled state
[   27.789433][  T282] device bridge_slave_0 entered promiscuous mode
[   27.797487][  T282] bridge0: port 2(bridge_slave_1) entered blocking state
[   27.805205][  T282] bridge0: port 2(bridge_slave_1) entered disabled state
[   27.812713][  T282] device bridge_slave_1 entered promiscuous mode
[   27.839139][  T281] bridge0: port 1(bridge_slave_0) entered blocking state
[   27.846696][  T281] bridge0: port 1(bridge_slave_0) entered disabled state
[   27.854555][  T281] device bridge_slave_0 entered promiscuous mode
[   27.880376][  T281] bridge0: port 2(bridge_slave_1) entered blocking state
[   27.888116][  T281] bridge0: port 2(bridge_slave_1) entered disabled state
[   27.896373][  T281] device bridge_slave_1 entered promiscuous mode
[   27.937269][  T284] bridge0: port 1(bridge_slave_0) entered blocking state
[   27.944432][  T284] bridge0: port 1(bridge_slave_0) entered disabled state
[   27.951933][  T284] device bridge_slave_0 entered promiscuous mode
[   27.969942][  T284] bridge0: port 2(bridge_slave_1) entered blocking state
[   27.977504][  T284] bridge0: port 2(bridge_slave_1) entered disabled state
[   27.985480][  T284] device bridge_slave_1 entered promiscuous mode
[   28.019974][  T283] bridge0: port 1(bridge_slave_0) entered blocking state
[   28.027534][  T283] bridge0: port 1(bridge_slave_0) entered disabled state
[   28.035349][  T283] device bridge_slave_0 entered promiscuous mode
[   28.047213][  T285] bridge0: port 1(bridge_slave_0) entered blocking state
[   28.055073][  T285] bridge0: port 1(bridge_slave_0) entered disabled state
[   28.063114][  T285] device bridge_slave_0 entered promiscuous mode
[   28.069984][  T283] bridge0: port 2(bridge_slave_1) entered blocking state
[   28.077724][  T283] bridge0: port 2(bridge_slave_1) entered disabled state
[   28.085688][  T283] device bridge_slave_1 entered promiscuous mode
[   28.120903][  T285] bridge0: port 2(bridge_slave_1) entered blocking state
[   28.128120][  T285] bridge0: port 2(bridge_slave_1) entered disabled state
[   28.136143][  T285] device bridge_slave_1 entered promiscuous mode
[   28.245854][  T281] bridge0: port 2(bridge_slave_1) entered blocking state
[   28.253050][  T281] bridge0: port 2(bridge_slave_1) entered forwarding state
[   28.260565][  T281] bridge0: port 1(bridge_slave_0) entered blocking state
[   28.267893][  T281] bridge0: port 1(bridge_slave_0) entered forwarding state
[   28.284084][  T283] bridge0: port 2(bridge_slave_1) entered blocking state
[   28.291772][  T283] bridge0: port 2(bridge_slave_1) entered forwarding state
[   28.299291][  T283] bridge0: port 1(bridge_slave_0) entered blocking state
[   28.306622][  T283] bridge0: port 1(bridge_slave_0) entered forwarding state
[   28.369793][  T282] bridge0: port 2(bridge_slave_1) entered blocking state
[   28.376998][  T282] bridge0: port 2(bridge_slave_1) entered forwarding state
[   28.384699][  T282] bridge0: port 1(bridge_slave_0) entered blocking state
[   28.391865][  T282] bridge0: port 1(bridge_slave_0) entered forwarding state
[   28.403453][  T284] bridge0: port 2(bridge_slave_1) entered blocking state
[   28.410728][  T284] bridge0: port 2(bridge_slave_1) entered forwarding state
[   28.418088][  T284] bridge0: port 1(bridge_slave_0) entered blocking state
[   28.425686][  T284] bridge0: port 1(bridge_slave_0) entered forwarding state
[   28.442737][  T285] bridge0: port 2(bridge_slave_1) entered blocking state
[   28.449965][  T285] bridge0: port 2(bridge_slave_1) entered forwarding state
[   28.457409][  T285] bridge0: port 1(bridge_slave_0) entered blocking state
[   28.464684][  T285] bridge0: port 1(bridge_slave_0) entered forwarding state
[   28.507667][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   28.515853][   T45] bridge0: port 1(bridge_slave_0) entered disabled state
[   28.523646][   T45] bridge0: port 2(bridge_slave_1) entered disabled state
[   28.531324][   T45] bridge0: port 1(bridge_slave_0) entered disabled state
[   28.539161][   T45] bridge0: port 2(bridge_slave_1) entered disabled state
[   28.546744][   T45] bridge0: port 1(bridge_slave_0) entered disabled state
[   28.554251][   T45] bridge0: port 2(bridge_slave_1) entered disabled state
[   28.561679][   T45] bridge0: port 1(bridge_slave_0) entered disabled state
[   28.569096][   T45] bridge0: port 2(bridge_slave_1) entered disabled state
[   28.576848][   T45] bridge0: port 1(bridge_slave_0) entered disabled state
[   28.584901][   T45] bridge0: port 2(bridge_slave_1) entered disabled state
[   28.614990][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   28.622960][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   28.631575][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   28.640596][   T45] bridge0: port 1(bridge_slave_0) entered blocking state
[   28.648187][   T45] bridge0: port 1(bridge_slave_0) entered forwarding state
[   28.655824][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   28.664747][   T45] bridge0: port 2(bridge_slave_1) entered blocking state
[   28.672071][   T45] bridge0: port 2(bridge_slave_1) entered forwarding state
[   28.680083][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   28.688554][   T45] bridge0: port 1(bridge_slave_0) entered blocking state
[   28.695944][   T45] bridge0: port 1(bridge_slave_0) entered forwarding state
[   28.703453][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   28.711031][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   28.719747][   T45] bridge0: port 2(bridge_slave_1) entered blocking state
[   28.726917][   T45] bridge0: port 2(bridge_slave_1) entered forwarding state
[   28.735043][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   28.743392][   T45] bridge0: port 1(bridge_slave_0) entered blocking state
[   28.750630][   T45] bridge0: port 1(bridge_slave_0) entered forwarding state
[   28.758270][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   28.767019][   T45] bridge0: port 2(bridge_slave_1) entered blocking state
[   28.774391][   T45] bridge0: port 2(bridge_slave_1) entered forwarding state
[   28.794582][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   28.802714][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   28.811136][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   28.819393][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   28.827455][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   28.836294][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   28.844834][   T45] bridge0: port 1(bridge_slave_0) entered blocking state
[   28.851975][   T45] bridge0: port 1(bridge_slave_0) entered forwarding state
[   28.859712][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   28.869303][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   28.878372][   T45] bridge0: port 1(bridge_slave_0) entered blocking state
[   28.885851][   T45] bridge0: port 1(bridge_slave_0) entered forwarding state
[   28.893851][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   28.902350][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   28.911132][   T45] bridge0: port 2(bridge_slave_1) entered blocking state
[   28.918349][   T45] bridge0: port 2(bridge_slave_1) entered forwarding state
[   28.926383][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   28.935289][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   28.943610][   T45] bridge0: port 2(bridge_slave_1) entered blocking state
[   28.950741][   T45] bridge0: port 2(bridge_slave_1) entered forwarding state
[   28.970476][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   28.978782][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   28.987242][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   28.995744][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   29.004547][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   29.013440][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   29.037167][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   29.045600][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   29.054016][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   29.062354][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   29.070974][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   29.080204][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   29.101973][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   29.110548][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   29.119268][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   29.128260][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   29.137448][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   29.146573][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   29.160159][  T281] device veth0_vlan entered promiscuous mode
[   29.172911][  T283] device veth0_vlan entered promiscuous mode
[   29.181901][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   29.190294][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   29.199495][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   29.208299][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   29.216671][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   29.224978][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   29.234541][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   29.243719][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   29.252243][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   29.260722][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   29.268505][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   29.276389][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   29.290586][  T285] device veth0_vlan entered promiscuous mode
[   29.306032][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   29.314284][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   29.321843][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   29.329932][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   29.339077][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   29.347275][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   29.355554][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   29.363455][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   29.371898][  T282] device veth0_vlan entered promiscuous mode
[   29.383761][  T281] device veth1_macvtap entered promiscuous mode
[   29.390662][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   29.399640][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   29.408569][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   29.417034][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   29.426641][  T285] device veth1_macvtap entered promiscuous mode
[   29.440375][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   29.461819][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   29.470559][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   29.478350][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   29.486211][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   29.495044][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   29.504024][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   29.512418][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   29.521102][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   29.530023][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   29.542375][  T284] device veth0_vlan entered promiscuous mode
[   29.551433][  T283] device veth1_macvtap entered promiscuous mode
[   29.558843][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   29.567095][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   29.575820][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   29.584963][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   29.595191][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   29.604077][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   29.622063][  T282] device veth1_macvtap entered promiscuous mode
[   29.635913][  T281] request_module fs-gadgetfs succeeded, but still no fs?
[   29.644588][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   29.657671][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   29.666915][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   29.679306][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   29.713405][  T284] device veth1_macvtap entered promiscuous mode
[   29.731906][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   29.745363][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   29.754087][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   29.762601][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   29.771632][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   29.781259][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   29.808322][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   29.828229][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   29.838124][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   29.853735][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   29.917822][  T311] loop0: detected capacity change from 0 to 512
[   29.935648][  T314] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   29.955634][  T311] =======================================================
[   29.955634][  T311] WARNING: The mand mount option has been deprecated and
[   29.955634][  T311]          and is ignored by this kernel. Remove the mand
[   29.955634][  T311]          option from the mount to silence this warning.
[   29.955634][  T311] =======================================================
[   30.138435][  T306] loop2: detected capacity change from 0 to 40427
[   30.167730][  T306] F2FS-fs (loop2): fault_injection options not supported
[   30.396210][  T306] F2FS-fs (loop2): fault_type options not supported
[   30.616087][  T306] F2FS-fs (loop2): invalid crc value
[   31.608340][  T306] F2FS-fs (loop2): Found nat_bits in checkpoint
[   31.669290][   T30] kauditd_printk_skb: 49 callbacks suppressed
[   31.669308][   T30] audit: type=1400 audit(1775824159.033:123): avc:  denied  { name_bind } for  pid=332 comm="syz.4.8" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1
[   31.688363][  T335] 9pnet: Insufficient options for proto=fd
[   31.732635][   T30] audit: type=1400 audit(1775824159.033:124): avc:  denied  { node_bind } for  pid=332 comm="syz.4.8" saddr=224.0.0.2 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1
[   31.763440][   T30] audit: type=1400 audit(1775824159.093:125): avc:  denied  { create } for  pid=334 comm="syz.0.9" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1
[   31.794749][   T30] audit: type=1400 audit(1775824159.093:126): avc:  denied  { read write } for  pid=334 comm="syz.0.9" name="raw-gadget" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   31.852868][   T30] audit: type=1400 audit(1775824159.093:127): avc:  denied  { open } for  pid=334 comm="syz.0.9" path="/dev/raw-gadget" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   31.916425][  T306] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[   31.927278][   T30] audit: type=1400 audit(1775824159.093:128): avc:  denied  { ioctl } for  pid=334 comm="syz.0.9" path="/dev/raw-gadget" dev="devtmpfs" ino=254 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   31.973440][   T30] audit: type=1400 audit(1775824159.313:129): avc:  denied  { mount } for  pid=305 comm="syz.2.3" name="/" dev="loop2" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[   32.036278][   T30] audit: type=1400 audit(1775824159.403:130): avc:  denied  { write } for  pid=305 comm="syz.2.3" name="/" dev="loop2" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   32.043002][   T26] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   32.067501][  T306] attempt to access beyond end of device
[   32.067501][  T306] loop2: rw=2049, want=45112, limit=40427
[   32.084166][   T30] audit: type=1400 audit(1775824159.403:131): avc:  denied  { add_name } for  pid=305 comm="syz.2.3" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   32.104690][  T306] attempt to access beyond end of device
[   32.104690][  T306] loop2: rw=2049, want=45112, limit=40427
[   32.132965][   T30] audit: type=1400 audit(1775824159.403:132): avc:  denied  { create } for  pid=305 comm="syz.2.3" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   32.239612][  T285] attempt to access beyond end of device
[   32.239612][  T285] loop2: rw=2049, want=45120, limit=40427
[   32.259410][  T342] loop1: detected capacity change from 0 to 256
[   32.338235][  T342] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   32.352829][   T26] usb 1-1: Using ep0 maxpacket: 16
[   32.522397][  T315] loop3: detected capacity change from 0 to 131072
[   32.535852][  T345] loop2: detected capacity change from 0 to 256
[   32.550267][  T315] F2FS-fs (loop3): Test dummy encryption mode enabled
[   32.553492][   T26] usb 1-1: config 0 has an invalid interface number: 255 but max is 0
[   32.561039][  T315] F2FS-fs (loop3): invalid crc value
[   32.584623][   T26] usb 1-1: config 0 has no interface number 0
[   32.608004][   T26] usb 1-1: too many endpoints for config 0 interface 255 altsetting 0: 64, using maximum allowed: 30
[   32.624134][  T347] netlink: 60 bytes leftover after parsing attributes in process `syz.1.10'.
[   32.736283][   T26] usb 1-1: config 0 interface 255 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 64
[   32.790596][  T315] F2FS-fs (loop3): Found nat_bits in checkpoint
[   32.903080][   T26] usb 1-1: New USB device found, idVendor=054c, idProduct=002e, bcdDevice= 5.00
[   32.997607][   T26] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   33.508000][   T26] usb 1-1: Product: syz
[   33.512332][   T26] usb 1-1: Manufacturer: syz
[   33.527647][   T26] usb 1-1: SerialNumber: syz
[   33.539879][  T353] loop4: detected capacity change from 0 to 256
[   33.556648][   T26] usb 1-1: config 0 descriptor??
[   33.587688][  T353] FAT-fs (loop4): Directory bread(block 64) failed
[   33.613000][  T353] FAT-fs (loop4): Directory bread(block 65) failed
[   33.633403][   T26] usb-storage 1-1:0.255: USB Mass Storage device detected
[   33.651729][  T353] FAT-fs (loop4): Directory bread(block 66) failed
[   33.661653][   T26] usb-storage 1-1:0.255: Quirks match for vid 054c pid 002e: 1
[   33.669750][  T353] FAT-fs (loop4): Directory bread(block 67) failed
[   33.677263][   T26] usb-storage 1-1:0.255: This device (054c,002e,0500 S 04 P 00) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller)
[   33.677263][   T26]    Please send a copy of this message to <linux-usb@vger.kernel.org> and <usb-storage@lists.one-eyed-alien.net>
[   33.708659][  T353] FAT-fs (loop4): Directory bread(block 68) failed
[   33.716092][  T353] FAT-fs (loop4): Directory bread(block 69) failed
[   33.723213][  T353] FAT-fs (loop4): Directory bread(block 70) failed
[   33.740088][  T353] FAT-fs (loop4): Directory bread(block 71) failed
[   33.753665][  T353] FAT-fs (loop4): Directory bread(block 72) failed
[   33.760740][  T353] FAT-fs (loop4): Directory bread(block 73) failed
[   33.917224][  T286] usb 3-1: new full-speed USB device number 2 using dummy_hcd
[   33.990330][  T365] loop1: detected capacity change from 0 to 128
[   34.029059][  T376] loop4: detected capacity change from 0 to 4096
[   34.042633][  T376] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option
[   34.063971][  T376] EXT4-fs (loop4): mounted filesystem without journal. Opts: init_itable=0x0000000000000101,stripe=0x0000000000000061,journal_ioprio=0x0000000000000006,minixdf,nodiscard,nomblk_io_submit,acl,nojournal_checksum,resuid=0x0000000000000000,,errors=continue. Quota mode: writeback.
[   34.292928][  T286] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[   34.310574][  T286] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[   34.325034][  T286] usb 3-1: New USB device found, idVendor=044f, idProduct=b304, bcdDevice= 0.00
[   34.334524][  T286] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   34.344360][  T286] usb 3-1: config 0 descriptor??
[   34.359882][   T60] usb 1-1: USB disconnect, device number 2
[   34.363409][  T345] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[   34.429073][  T385] netlink: 'syz.0.20': attribute type 4 has an invalid length.
[   34.630379][  T381] loop3: detected capacity change from 0 to 131072
[   34.735098][  T391] loop1: detected capacity change from 0 to 512
[   34.863133][  T286] thrustmaster 0003:044F:B304.0001: unknown main item tag 0x0
[   35.162053][  T400] set_capacity_and_notify: 1 callbacks suppressed
[   35.162072][  T400] loop3: detected capacity change from 0 to 1024
[   35.307616][  T400] EXT4-fs (loop3): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,barrier,auto_da_alloc,inlinecrypt,,errors=continue. Quota mode: none.
[   35.361966][  T400] ext4 filesystem being mounted at /2/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   35.390797][  T400] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.24: bg 0: block 112: padding at end of block bitmap is not set
[   35.592960][   T60] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   35.703075][  T329] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[   35.713645][  T414] overlayfs: "xino" feature enabled using 2 upper inode bits.
[   35.832953][   T60] usb 2-1: Using ep0 maxpacket: 16
[   35.866072][  T286] thrustmaster 0003:044F:B304.0001: unknown main item tag 0x0
[   35.874879][  T286] thrustmaster 0003:044F:B304.0001: unknown main item tag 0x0
[   35.882391][  T286] thrustmaster 0003:044F:B304.0001: unknown main item tag 0x0
[   35.890983][  T286] thrustmaster 0003:044F:B304.0001: unknown main item tag 0x0
[   35.898736][  T286] thrustmaster 0003:044F:B304.0001: unknown main item tag 0x0
[   35.906899][  T286] thrustmaster 0003:044F:B304.0001: unknown main item tag 0x0
[   35.914951][  T286] thrustmaster 0003:044F:B304.0001: unknown main item tag 0x0
[   35.922540][  T286] thrustmaster 0003:044F:B304.0001: unknown main item tag 0x0
[   35.930956][  T286] thrustmaster 0003:044F:B304.0001: unknown main item tag 0x0
[   35.938612][  T286] thrustmaster 0003:044F:B304.0001: unknown main item tag 0x0
[   35.947140][  T286] thrustmaster 0003:044F:B304.0001: unknown main item tag 0x0
[   35.955004][  T286] thrustmaster 0003:044F:B304.0001: unknown main item tag 0x0
[   35.963177][  T286] thrustmaster 0003:044F:B304.0001: unknown main item tag 0x0
[   35.971382][  T286] thrustmaster 0003:044F:B304.0001: unknown main item tag 0x0
[   35.973162][   T60] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   35.979871][  T286] thrustmaster 0003:044F:B304.0001: unknown main item tag 0x0
[   35.992067][   T60] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[   35.998519][  T286] thrustmaster 0003:044F:B304.0001: unknown main item tag 0x0
[   36.009401][   T20] usb 5-1: new full-speed USB device number 2 using dummy_hcd
[   36.017101][  T286] thrustmaster 0003:044F:B304.0001: unknown main item tag 0x0
[   36.030584][  T286] thrustmaster 0003:044F:B304.0001: unknown main item tag 0x0
[   36.038341][  T286] thrustmaster 0003:044F:B304.0001: unknown main item tag 0x0
[   36.046039][  T286] thrustmaster 0003:044F:B304.0001: unknown main item tag 0x0
[   36.053671][  T286] thrustmaster 0003:044F:B304.0001: unknown main item tag 0x0
[   36.061168][  T286] thrustmaster 0003:044F:B304.0001: unknown main item tag 0x0
[   36.069218][  T286] thrustmaster 0003:044F:B304.0001: unknown main item tag 0x0
[   36.077594][  T286] thrustmaster 0003:044F:B304.0001: unknown main item tag 0x0
[   36.085460][  T286] thrustmaster 0003:044F:B304.0001: unknown main item tag 0x0
[   36.093256][  T329] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7
[   36.093333][  T286] thrustmaster 0003:044F:B304.0001: unknown main item tag 0x0
[   36.106077][  T329] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 250, changing to 7
[   36.112599][  T286] thrustmaster 0003:044F:B304.0001: unknown main item tag 0x0
[   36.131340][  T286] thrustmaster 0003:044F:B304.0001: unknown main item tag 0x0
[   36.139209][  T286] thrustmaster 0003:044F:B304.0001: unknown main item tag 0x0
[   36.147396][  T286] thrustmaster 0003:044F:B304.0001: unknown main item tag 0x0
[   36.156267][  T286] thrustmaster 0003:044F:B304.0001: unknown main item tag 0x0
[   36.164044][  T286] thrustmaster 0003:044F:B304.0001: unknown main item tag 0x0
[   36.172972][  T286] thrustmaster 0003:044F:B304.0001: unknown main item tag 0x0
[   36.180919][  T286] thrustmaster 0003:044F:B304.0001: unknown main item tag 0x0
[   36.188771][  T286] thrustmaster 0003:044F:B304.0001: unknown main item tag 0x0
[   36.196421][  T286] thrustmaster 0003:044F:B304.0001: unknown main item tag 0x0
[   36.204303][  T286] thrustmaster 0003:044F:B304.0001: unknown main item tag 0x0
[   36.211998][  T286] thrustmaster 0003:044F:B304.0001: unknown main item tag 0x0
[   36.219899][  T286] thrustmaster 0003:044F:B304.0001: unknown main item tag 0x0
[   36.223132][   T60] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   36.227906][  T286] thrustmaster 0003:044F:B304.0001: unknown main item tag 0x0
[   36.238224][   T60] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   36.247802][  T286] thrustmaster 0003:044F:B304.0001: hidraw0: USB HID v0.05 Device [HID 044f:b304] on usb-dummy_hcd.2-1/input0
[   36.255786][   T60] usb 2-1: Product: syz
[   36.265376][  T286] thrustmaster 0003:044F:B304.0001: no inputs found
[   36.269567][   T60] usb 2-1: Manufacturer: syz
[   36.281276][   T60] usb 2-1: SerialNumber: syz
[   36.287672][  T286] usb 3-1: USB disconnect, device number 2
[   36.342933][  T329] usb 1-1: New USB device found, idVendor=0763, idProduct=1033, bcdDevice= 0.40
[   36.364453][  T417] fido_id[417]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory
[   36.365478][  T329] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   36.389263][  T329] usb 1-1: Product: syz
[   36.399496][  T329] usb 1-1: Manufacturer: syz
[   36.404884][  T329] usb 1-1: SerialNumber: syz
[   36.443089][   T20] usb 5-1: unable to get BOS descriptor or descriptor too short
[   36.514021][  T427] loop3: detected capacity change from 0 to 512
[   36.585133][  T427] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   36.599254][  T427] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[   36.641028][  T427] EXT4-fs (loop3): 1 truncate cleaned up
[   36.647554][  T427] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[   37.043109][   T30] kauditd_printk_skb: 58 callbacks suppressed
[   37.043133][   T30] audit: type=1400 audit(1775824164.073:191): avc:  denied  { checkpoint_restore } for  pid=424 comm="syz.3.32" capability=40  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[   37.072292][   T20] usb 5-1: not running at top speed; connect to a high speed hub
[   37.083790][   T60] usb 2-1: 0:2 : does not exist
[   37.104151][  T286] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[   37.127979][   T60] usb 2-1: USB disconnect, device number 2
[   37.203032][  T329] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found
[   37.222941][  T329] usb 1-1: unit 6 not found!
[   37.235133][  T329] usb 1-1: USB disconnect, device number 3
[   37.332948][   T20] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   37.342645][   T20] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   37.342971][  T286] usb 3-1: Using ep0 maxpacket: 32
[   37.365874][   T20] usb 5-1: Product: syz
[   37.370118][   T20] usb 5-1: Manufacturer: syz
[   37.375715][   T20] usb 5-1: SerialNumber: syz
[   37.388012][  T432] loop1: detected capacity change from 0 to 512
[   37.453492][  T379] udevd[379]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory
[   37.478819][  T307] udevd[307]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   37.503015][  T433] mmap: syz.3.33 (433) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst.
[   37.515399][  T286] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   37.530731][  T286] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   37.633248][   T30] audit: type=1400 audit(1775824165.003:192): avc:  denied  { ioctl } for  pid=438 comm="syz.0.36" path="/dev/binderfs/binder0" dev="binder" ino=10 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[   37.662055][   T30] audit: type=1400 audit(1775824165.033:193): avc:  denied  { set_context_mgr } for  pid=438 comm="syz.0.36" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1
[   37.687566][  T286] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[   37.701073][  T286] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[   37.710375][  T286] usb 3-1: Product: syz
[   37.722167][  T447] loop0: detected capacity change from 0 to 512
[   37.732670][  T286] usb 3-1: Manufacturer: syz
[   37.735153][   T20] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found
[   37.762933][   T20] usb 5-1: 2:1: invalid format type 0x1001 is detected, processed as PCM
[   37.772888][   T60] usb 2-1: new low-speed USB device number 3 using dummy_hcd
[   37.783629][  T286] hub 3-1:4.0: USB hub found
[   37.848753][   T20] usb 5-1: USB disconnect, device number 2
[   38.032859][  T327] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   38.073661][  T303] udevd[303]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   38.082982][   T26] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[   38.142907][   T60] usb 2-1: No LPM exit latency info found, disabling LPM.
[   38.167204][   T30] audit: type=1400 audit(1775824165.533:194): avc:  denied  { read } for  pid=459 comm="syz.4.44" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   38.201959][  T462] loop4: detected capacity change from 0 to 512
[   38.242915][   T60] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0xD has invalid maxpacket 64, setting to 8
[   38.253617][   T60] usb 2-1: config 1 interface 0 altsetting 0 has a duplicate endpoint with address 0xD, skipping
[   38.260258][  T462] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a816c018, mo2=0002]
[   38.272827][  T327] usb 4-1: Using ep0 maxpacket: 8
[   38.275490][  T462] System zones: 0-2, 18-18, 34-35
[   38.284464][  T462] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,nodioread_nolock,debug,,errors=continue. Quota mode: writeback.
[   38.298567][  T462] ext4 filesystem being mounted at /13/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   38.311548][   T30] audit: type=1400 audit(1775824165.673:195): avc:  denied  { read write } for  pid=461 comm="syz.4.45" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   38.334882][   T26] usb 1-1: Using ep0 maxpacket: 16
[   38.340162][   T30] audit: type=1400 audit(1775824165.673:196): avc:  denied  { open } for  pid=461 comm="syz.4.45" path="/13/file1/file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   38.422969][  T327] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 128, changing to 7
[   38.452231][   T30] audit: type=1400 audit(1775824165.813:197): avc:  denied  { write } for  pid=461 comm="syz.4.45" path="socket:[16594]" dev="sockfs" ino=16594 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   38.473180][   T26] usb 1-1: config 1 has an invalid descriptor of length 194, skipping remainder of the config
[   38.476796][   T30] audit: type=1400 audit(1775824165.823:198): avc:  denied  { getopt } for  pid=461 comm="syz.4.45" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   38.495254][   T26] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[   38.526350][   T30] audit: type=1400 audit(1775824165.823:199): avc:  denied  { ioctl } for  pid=461 comm="syz.4.45" path="socket:[16595]" dev="sockfs" ino=16595 ioctlcmd=0x9361 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   38.574247][   T60] usb 2-1: New USB device found, idVendor=0582, idProduct=002b, bcdDevice= 0.40
[   38.592806][   T60] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   38.603047][  T327] usb 4-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40
[   38.611538][   T60] usb 2-1: Product: ␉
[   38.617138][   T60] usb 2-1: Manufacturer: 還⼷ꙴ拺눍逽ႅȹ랿쁟圴쥪欅⨕炊蘓㲙僋☲혏꾽᱅ᖽ⎯”忨燰ଅ럁ͽ띨瘌钫냙闩⽡᧩땛ꀢ骨년㡑Ꮣ錆噐設糘釨浒㡋傅馬ྙ餜뷛쐎묈Ⰵ⩍踭ܾ愙塣䎁혳텄谕诅ڼꉭ鼲邻༬ᓏ猖梨蒻ᚴ멪뭇
[   38.653258][  T327] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   38.664767][  T327] usb 4-1: Product: syz
[   38.672313][  T327] usb 4-1: Manufacturer: syz
[   38.672880][   T60] usb 2-1: SerialNumber: ᲂ詞朂⢇®熚߽Е䴅蛐仃皅䚑⎚뺑Й⫕ヘ醪檯시눶腭缍뇖稠헭킉棽〆ꆱ璠錠࣡萄렍们떠❓쟈郬℘Ꮱ䩛䅙˯绬ҋ젆Ȿ祂⾳垹ᶇ䏪觤줰ꊅꈘꕊ㩂ὸ獾狿ਦ폹䉤꡾돜⻃샾妡關훢ዪꅏ莐ᲊ탵즜╫⭱恒힜언贏䚶勤ㆤ㈓莃惜颚種茐⃙⩫㼁᥽ϻ죮䤧㹯ဧ䄑攺ﮯ桁
[   38.683449][  T327] usb 4-1: SerialNumber: syz
[   38.720331][   T26] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   38.740154][   T26] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   38.749492][   T26] usb 1-1: Product: syz
[   38.755995][   T26] usb 1-1: Manufacturer: syz
[   38.765140][   T26] usb 1-1: SerialNumber: syz
[   39.018169][   T30] audit: type=1400 audit(1775824166.383:200): avc:  denied  { mounton } for  pid=448 comm="syz.3.40" path="/8/file0" dev="tmpfs" ino=62 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1
[   39.018329][  T449] 9pnet: Insufficient options for proto=fd
[   39.073395][  T327] usb 4-1: selecting invalid altsetting 1
[   39.171934][  T467] syz.4.46 (467): /proc/466/oom_adj is deprecated, please use /proc/466/oom_score_adj instead.
[   39.195948][  T469] loop4: detected capacity change from 0 to 256
[   39.241712][  T436] UDC core: couldn't find an available UDC or it's busy: -16
[   39.249735][  T436] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[   39.262919][   T26] usb 1-1: 0:2 : does not exist
[   39.320644][  T456] syz.2.30 (456) used greatest stack depth: 20576 bytes left
[   39.364603][  T471] loop2: detected capacity change from 0 to 4096
[   39.392843][  T286] hub 3-1:4.0: config failed, can't read hub descriptor (err -22)
[   39.400585][  T471] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option
[   39.441724][  T471] EXT4-fs (loop2): mounted filesystem without journal. Opts: init_itable=0x0000000000000101,stripe=0x0000000000000061,journal_ioprio=0x0000000000000006,minixdf,nodiscard,nomblk_io_submit,acl,nojournal_checksum,resuid=0x0000000000000000,,errors=continue. Quota mode: writeback.
[   39.481445][  T286] usb 3-1: USB disconnect, device number 3
[   39.689402][  T455] UDC core: couldn't find an available UDC or it's busy: -16
[   39.700137][  T455] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[   39.747054][   T26] usb 1-1: USB disconnect, device number 4
[   39.762881][  T327] usb 4-1: cannot request logical cluster ID: 0 (err: -71)
[   39.772450][  T327] usb 4-1: invalid MIXER UNIT descriptor 6
[   39.784264][  T327] snd-usb-audio: probe of 4-1:1.0 failed with error -71
[   39.794102][  T327] usb 4-1: selecting invalid altsetting 1
[   39.872212][  T479] loop2: detected capacity change from 0 to 512
[   39.922959][   T60] usb 2-1: MIDIStreaming interface descriptor not found
[   39.952853][  T327] usb 4-1: cannot request logical cluster ID: 0 (err: -71)
[   39.964072][  T327] usb 4-1: invalid MIXER UNIT descriptor 6
[   39.975730][  T327] snd-usb-audio: probe of 4-1:1.1 failed with error -71
[   39.989797][  T327] usb 4-1: selecting invalid altsetting 1
[   39.999131][  T481] netlink: 12 bytes leftover after parsing attributes in process `syz.2.51'.
[   40.022863][  T327] usb 4-1: cannot request logical cluster ID: 0 (err: -71)
[   40.032963][  T327] usb 4-1: invalid MIXER UNIT descriptor 6
[   40.039247][  T327] snd-usb-audio: probe of 4-1:1.2 failed with error -71
[   40.063651][  T327] usb 4-1: USB disconnect, device number 2
[   40.119430][  T484] loop4: detected capacity change from 0 to 256
[   40.138743][  T436] UDC core: couldn't find an available UDC or it's busy: -16
[   40.147745][  T484] FAT-fs (loop4): codepage cp1350 not found
[   40.159293][  T436] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[   40.180018][   T60] usb 2-1: USB disconnect, device number 3
[   40.255951][  T476] loop3: detected capacity change from 0 to 131072
[   40.266631][  T488] loop0: detected capacity change from 0 to 1024
[   40.333894][  T476] F2FS-fs (loop3): invalid crc value
[   40.356819][  T488] EXT4-fs (loop0): mounted filesystem without journal. Opts: noquota,data_err=ignore,,errors=continue. Quota mode: none.
[   40.379599][  T476] F2FS-fs (loop3): Found nat_bits in checkpoint
[   40.705857][  T476] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4
[   40.780341][  T476] Zero length message leads to an empty skb
[   40.850508][  T512] 9pnet: p9_errstr2errno: server reported unknown error 00000000000000000000006
[   40.931761][  T486] loop4: detected capacity change from 0 to 40427
[   40.964120][  T486] F2FS-fs (loop4): Wrong MAIN_AREA boundary, start(4096) end(12800) block(12288)
[   40.982932][  T486] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[   41.022199][  T486] F2FS-fs (loop4): fault_type options not supported
[   41.029344][  T486] F2FS-fs (loop4): fault_injection options not supported
[   41.038547][  T486] F2FS-fs (loop4): invalid crc value
[   41.051768][  T514] loop1: detected capacity change from 0 to 4096
[   41.060072][  T486] F2FS-fs (loop4): Found nat_bits in checkpoint
[   41.083885][  T514] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option
[   41.125940][  T486] F2FS-fs (loop4): Start checkpoint disabled!
[   41.173575][  T486] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[   41.186424][  T510] loop0: detected capacity change from 0 to 40427
[   41.195483][  T514] EXT4-fs (loop1): mounted filesystem without journal. Opts: init_itable=0x0000000000000101,stripe=0x0000000000000061,journal_ioprio=0x0000000000000006,minixdf,nodiscard,nomblk_io_submit,acl,nojournal_checksum,resuid=0x0000000000000000,,errors=continue. Quota mode: writeback.
[   41.222987][  T486] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6
[   41.249212][  T486] F2FS-fs (loop4): Checkpoint should be enabled.
[   41.279605][  T336] attempt to access beyond end of device
[   41.279605][  T336] loop4: rw=2049, want=40976, limit=40427
[   41.293433][  T510] F2FS-fs (loop0): Invalid SB checksum offset: 0
[   41.311029][  T510] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock
[   41.370114][  T510] F2FS-fs (loop0): invalid crc value
[   41.448372][  T510] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437)
[   41.512995][  T501] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[   41.533207][  T510] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0
[   41.540306][  T510] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[   41.549793][  T529] SELinux:  policydb version -1343305134 does not match my version range 15-33
[   41.559211][  T529] SELinux: failed to load policy
[   41.580886][  T508] attempt to access beyond end of device
[   41.580886][  T508] loop0: rw=10241, want=53256, limit=40427
[   41.644217][  T283] attempt to access beyond end of device
[   41.644217][  T283] loop0: rw=2049, want=45104, limit=40427
[   41.846578][  T539] capability: warning: `syz.1.65' uses 32-bit capabilities (legacy support in use)
[   41.882909][  T501] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7
[   41.912951][  T501] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 21, changing to 7
[   41.930713][  T529] loop4: detected capacity change from 0 to 40427
[   41.936027][  T501] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 9232, setting to 1024
[   41.961964][  T529] F2FS-fs (loop4): Unrecognized mount option "0x0000000000000006" or missing value
[   41.979345][  T548] process 'syz.0.63' launched './file0' with NULL argv: empty string added
[   41.991314][  T548] 9pnet: Insufficient options for proto=fd
[   42.031855][  T554] input: syz1 as /devices/virtual/input/input4
[   42.068473][  T554] loop1: detected capacity change from 0 to 256
[   42.077790][   T30] kauditd_printk_skb: 18 callbacks suppressed
[   42.077804][   T30] audit: type=1400 audit(1775824169.443:219): avc:  denied  { mounton } for  pid=553 comm="syz.1.68" path="/syzcgroup/unified/syz1/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[   42.132902][  T501] usb 3-1: New USB device found, idVendor=0582, idProduct=1089, bcdDevice= 0.40
[   42.319435][  T526] loop3: detected capacity change from 0 to 131072
[   42.326772][  T501] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   42.335505][  T501] usb 3-1: Product: syz
[   42.340086][  T501] usb 3-1: Manufacturer: syz
[   42.347011][  T501] usb 3-1: SerialNumber: syz
[   42.357824][  T562] loop4: detected capacity change from 0 to 256
[   42.367632][  T526] F2FS-fs (loop3): Test dummy encryption mode enabled
[   42.379717][  T526] F2FS-fs (loop3): invalid crc value
[   42.400350][  T526] F2FS-fs (loop3): Found nat_bits in checkpoint
[   42.404897][  T562] FAT-fs (loop4): Unrecognized mount option "shortname" or missing value
[   42.494604][  T526] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[   42.516597][  T526] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni"
[   42.516904][  T575] loop4: detected capacity change from 0 to 4096
[   42.531407][   T30] audit: type=1400 audit(1775824169.893:220): avc:  denied  { mounton } for  pid=525 comm="syz.3.59" path="/10/file0/file0" dev="loop3" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1
[   42.568717][  T575] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option
[   42.579562][  T575] EXT4-fs (loop4): mounted filesystem without journal. Opts: init_itable=0x0000000000000101,stripe=0x0000000000000061,journal_ioprio=0x0000000000000006,minixdf,nodiscard,nomblk_io_submit,acl,nojournal_checksum,resuid=0x0000000000000000,,errors=continue. Quota mode: writeback.
[   42.604867][  T520] UDC core: couldn't find an available UDC or it's busy: -16
[   42.614737][  T520] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[   42.752829][   T60] usb 2-1: new low-speed USB device number 4 using dummy_hcd
[   42.788964][  T581] xt_hashlimit: size too large, truncated to 1048576
[   42.793416][  T501] usb 3-1: Can't get UAC3 power state for id 10
[   42.892871][  T501] usb 3-1: cannot get ctl value: req = 0x83, wValue = 0x201, wIndex = 0x200, type = 4
[   42.912938][  T501] usb 3-1: 2:0: cannot get min/max values for control 2 (id 2)
[   42.948460][  T501] usb 3-1: USB disconnect, device number 4
[   43.012066][  T585] EXT4-fs error (device loop3): ext4_xattr_inode_iget:401: comm syz.3.75: inode #1: comm syz.3.75: iget: illegal inode #
[   43.035323][  T585] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.75: error while reading EA inode 1 err=-117
[   43.055801][  T585] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2807: Unable to expand inode 15. Delete some EAs or run e2fsck.
[   43.069974][  T585] EXT4-fs error (device loop3): ext4_xattr_inode_iget:401: comm syz.3.75: inode #1: comm syz.3.75: iget: illegal inode #
[   43.088308][  T585] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.75: error while reading EA inode 1 err=-117
[   43.102720][  T585] EXT4-fs (loop3): 1 orphan inode deleted
[   43.108909][  T585] EXT4-fs (loop3): mounted filesystem without journal. Opts: minixdf,stripe=0x0000000000000000,norecovery,noinit_itable,max_batch_time=0x0000000000000006,minixdf,usrjquota=,debug_want_extra_isize=0x000000000000005c,errors=continue,dioread_lock,noblock_validity,noquota,,errors=continue. Quota mode: none.
[   43.152982][   T60] usb 2-1: config 32 has 1 interface, different from the descriptor's value: 2
[   43.193243][  T437] udevd[437]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   43.212549][   T30] audit: type=1400 audit(1775824170.583:221): avc:  denied  { wake_alarm } for  pid=590 comm="syz.2.78" capability=35  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[   43.220473][   T60] usb 2-1: config 32 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 10
[   43.250950][   T60] usb 2-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 255, setting to 8
[   43.263562][   T60] usb 2-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7
[   43.273231][   T60] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   43.290359][  T591] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xd509bb81, utbl_chksum : 0xe619d30d)
[   43.303221][  T573] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[   43.318042][   T30] audit: type=1400 audit(1775824170.683:222): avc:  denied  { mounton } for  pid=590 comm="syz.2.78" path="/8/bus/file0" dev="loop2" ino=1048603 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   43.342034][   T30] audit: type=1400 audit(1775824170.683:223): avc:  denied  { write } for  pid=590 comm="syz.2.78" name="file0" dev="loop2" ino=1048603 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   43.364890][  T591] incfs: iterate_incfs_dir / -22
[   43.371134][   T30] audit: type=1400 audit(1775824170.683:224): avc:  denied  { add_name } for  pid=590 comm="syz.2.78" name=".index" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   43.402674][   T30] audit: type=1400 audit(1775824170.683:225): avc:  denied  { associate } for  pid=590 comm="syz.2.78" name=".index" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[   43.425419][   T30] audit: type=1400 audit(1775824170.763:226): avc:  denied  { unmount } for  pid=285 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[   43.447011][   T30] audit: type=1400 audit(1775824170.763:227): avc:  denied  { remove_name } for  pid=285 comm="syz-executor" name=".index" dev="loop2" ino=1048604 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   43.471227][   T30] audit: type=1400 audit(1775824170.763:228): avc:  denied  { rmdir } for  pid=285 comm="syz-executor" name=".index" dev="loop2" ino=1048604 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   43.481155][   T39] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[   43.552879][   T60] usb 2-1: string descriptor 0 read error: -71
[   43.563729][   T60] usb 2-1: USB disconnect, device number 4
[   43.612910][  T286] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[   43.732831][   T39] usb 5-1: Using ep0 maxpacket: 8
[   43.773146][  T437] udevd[437]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:32.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   43.783704][  T609] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[   43.797668][  T607] EXT4-fs (loop2): EXT4-fs: inode_readahead_blks must be 0 or a power of 2 smaller than 2^31
[   43.810241][  T609] netlink: 'syz.3.82': attribute type 4 has an invalid length.
[   43.818805][  T609] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.82'.
[   43.862974][  T286] usb 1-1: Using ep0 maxpacket: 16
[   43.873192][   T39] usb 5-1: config 179 has an invalid interface number: 65 but max is 0
[   43.882092][   T39] usb 5-1: config 179 has no interface number 0
[   43.889049][   T39] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[   43.900883][   T39] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[   43.912581][   T39] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[   43.932251][   T39] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[   43.952952][   T39] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[   43.967832][   T39] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[   43.977312][   T39] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   44.013001][  T593] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[   44.022911][  T286] usb 1-1: unable to get BOS descriptor or descriptor too short
[   44.095333][  T620] netlink: 8 bytes leftover after parsing attributes in process `syz.1.86'.
[   44.104618][  T286] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   44.112992][  T620] netlink: 20 bytes leftover after parsing attributes in process `syz.1.86'.
[   44.117601][  T286] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[   44.125159][  T620] netlink: 28 bytes leftover after parsing attributes in process `syz.1.86'.
[   44.253860][   T39] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input5
[   44.292928][  T286] usb 1-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40
[   44.302687][  T286] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   44.310808][  T286] usb 1-1: Product: syz
[   44.315083][  T286] usb 1-1: Manufacturer: syz
[   44.319716][  T286] usb 1-1: SerialNumber: syz
[   44.352808][   T60] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[   44.438089][   T20] usb 5-1: USB disconnect, device number 3
[   44.449576][  T626] FAULT_INJECTION: forcing a failure.
[   44.449576][  T626] name failslab, interval 1, probability 0, space 0, times 1
[   44.462691][  T626] CPU: 0 PID: 626 Comm: syz.3.88 Not tainted syzkaller #0
[   44.462865][    C1] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[   44.470248][  T626] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[   44.470284][  T626] Call Trace:
[   44.492658][  T626]  <TASK>
[   44.495632][  T626]  __dump_stack+0x21/0x30
[   44.500155][  T626]  dump_stack_lvl+0x110/0x170
[   44.504979][  T626]  ? show_regs_print_info+0x20/0x20
[   44.510218][  T626]  ? proc_fail_nth_write+0x180/0x200
[   44.515517][  T626]  ? proc_fail_nth_read+0x220/0x220
[   44.520895][  T626]  ? security_file_permission+0x79/0xa0
[   44.526529][  T626]  dump_stack+0x15/0x20
[   44.530988][  T626]  should_fail+0x3c1/0x510
[   44.535730][  T626]  __should_failslab+0xa4/0xe0
[   44.540649][  T626]  should_failslab+0x9/0x20
[   44.545435][  T626]  slab_pre_alloc_hook+0x3b/0xe0
[   44.550410][  T626]  ? getname_flags+0xb9/0x500
[   44.555214][  T626]  kmem_cache_alloc+0x44/0x260
[   44.560169][  T626]  getname_flags+0xb9/0x500
[   44.564779][  T626]  user_path_at_empty+0x30/0x1c0
[   44.569830][  T626]  do_sys_truncate+0xb6/0x1c0
[   44.574541][  T626]  ? break_lease+0xd0/0xd0
[   44.579108][  T626]  ? debug_smp_processor_id+0x17/0x20
[   44.584901][  T626]  __x64_sys_truncate+0x5b/0x70
[   44.589906][  T626]  x64_sys_call+0x212/0x9a0
[   44.594536][  T626]  do_syscall_64+0x4c/0xa0
[   44.598961][  T626]  ? clear_bhb_loop+0x50/0xa0
[   44.603641][  T626]  ? clear_bhb_loop+0x50/0xa0
[   44.608339][  T626]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   44.614706][  T626] RIP: 0033:0x7fabc06e3819
[   44.619244][  T626] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   44.639354][  T626] RSP: 002b:00007fabbf13e028 EFLAGS: 00000246 ORIG_RAX: 000000000000004c
[   44.648232][  T626] RAX: ffffffffffffffda RBX: 00007fabc095cfa0 RCX: 00007fabc06e3819
[   44.656524][  T626] RDX: 0000000000000000 RSI: 00000000000000e2 RDI: 0000200000000140
[   44.664882][  T626] RBP: 00007fabbf13e090 R08: 0000000000000000 R09: 0000000000000000
[   44.673109][  T626] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   44.681226][  T626] R13: 00007fabc095d038 R14: 00007fabc095cfa0 R15: 00007ffe04895e88
[   44.689323][  T626]  </TASK>
[   44.693457][   T20] xpad 5-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19
[   44.713569][  T286] usb 1-1: Audio class v2/v3 interfaces need an interface association
[   44.722131][  T286] snd-usb-audio: probe of 1-1:1.0 failed with error -22
[   44.822934][   T60] usb 3-1: Using ep0 maxpacket: 32
[   44.913262][  T596] UDC core: couldn't find an available UDC or it's busy: -16
[   44.920963][  T596] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[   44.992886][   T60] usb 3-1: unable to get BOS descriptor or descriptor too short
[   45.082927][   T60] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   45.132887][  T327] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[   45.143396][  T596] UDC core: couldn't find an available UDC or it's busy: -16
[   45.150871][  T596] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[   45.176585][  T286] usb 1-1: USB disconnect, device number 5
[   45.252892][   T60] usb 3-1: New USB device found, idVendor=16c0, idProduct=75e1, bcdDevice= 0.40
[   45.272140][   T60] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   45.282709][   T60] usb 3-1: Product: syz
[   45.290594][   T60] usb 3-1: Manufacturer: syz
[   45.300714][   T60] usb 3-1: SerialNumber: syz
[   45.414067][  T307] udevd[307]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.1/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   45.447033][  T637] set_capacity_and_notify: 5 callbacks suppressed
[   45.447056][  T637] loop4: detected capacity change from 0 to 40427
[   45.470495][  T637] F2FS-fs (loop4): Insane cp_payload (553648128 >= 504)
[   45.480609][  T637] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[   45.496397][  T637] F2FS-fs (loop4): invalid crc value
[   45.502068][  T637] F2FS-fs (loop4): Ignore s_resuid=0, s_resgid=65535 w/o reserve_root and reserve_node
[   45.514877][  T637] F2FS-fs (loop4): Found nat_bits in checkpoint
[   45.556700][  T637] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[   45.564366][  T637] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[   45.600401][  T637] attempt to access beyond end of device
[   45.600401][  T637] loop4: rw=2049, want=45104, limit=40427
[   45.614653][  T637] attempt to access beyond end of device
[   45.614653][  T637] loop4: rw=2049, want=45128, limit=40427
[   45.623269][  T327] usb 4-1: config 1 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 244, changing to 11
[   45.640575][  T327] usb 4-1: config 1 interface 0 has no altsetting 0
[   45.757844][  T653] netlink: 24 bytes leftover after parsing attributes in process `syz.1.98'.
[   45.763251][   T60] usbhid 3-1:1.0: can't add hid device: -71
[   45.783006][   T60] usbhid: probe of 3-1:1.0 failed with error -71
[   45.803482][   T60] usb 3-1: USB disconnect, device number 5
[   45.823047][  T327] usb 4-1: New USB device found, idVendor=056a, idProduct=ffff, bcdDevice= 0.40
[   45.842673][  T327] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   45.851016][  T327] usb 4-1: Product: ⨡ꠗ덜랳♟閿٤짣㉲ᾙꙿ蟍چ嶚❗언ⳃ嶀ෙ㐟௛蛺옒蔀裏쟮᝶璒룞棲䈞➛雩尞ㄟ長鬯蜍ەﵻ䘉ﯽ췌킶樄糽ﴞ௹稀笄䞔ﳅ믤⇬뗪詍̢庆늾뫜䡎銁溞譋鱒薮컽e䔼⠹ų櫑甍⧅灃鸹᱃褧ῐ꣭
[   45.885388][  T327] usb 4-1: Manufacturer: 䰂睯䂑﵀벟컢뼛꼒擢蘧൑ໞ䍗湅䛘ᵆ逪둆㚴ᅌ뗟ࢠ뫛鴩嚓訲鸮榠熒莐㋈ᙰ낁봀ゖﰸ僾杅뗰齚ᆈ䃓❢ꕣ禔Χ텾䮢⽯갵氭㙠킛解궴秶퍶䟔￁⨞㦾턤䕱뜠곍᭼黑雩㋙㻚忁캏仲鋿ﰞ騔풦䳪؏㷵￴漀ꪄ謬ꎤ먹婥蓽ﻤꢄ䞋䈹鲶슼弒騡朵⍊절䇦옴﬩㵼趖⶯殥
[   45.921213][  T327] usb 4-1: SerialNumber: }銁䋒鉘黶傦ꕣ㢻⌚峹읤㷘췆慚蕈즒꠨뤃ƒ渳ᯇ쵫䳔媩뉍ᦓ鬂粐킺컥靫怮坝氊旾斚턞箟팁辇锐⯃ꇙᲫ檂泻㛸ﺦ슪蛯ꦓ즚䨹擬ꊌ葾娾龾⍼䡆湦ᾁ㸖ᴤ耫뮙꼍뢍䦂䔌剨﫛咵겵஧沒干꓍㩋
[   45.993373][  T661] loop4: detected capacity change from 0 to 4096
[   46.022839][   T20] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[   46.033685][  T661] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option
[   46.051813][  T661] EXT4-fs (loop4): mounted filesystem without journal. Opts: init_itable=0x0000000000000101,stripe=0x0000000000000061,journal_ioprio=0x0000000000000006,minixdf,nodiscard,nomblk_io_submit,acl,nojournal_checksum,resuid=0x0000000000000000,,errors=continue. Quota mode: writeback.
[   46.115241][  T670] device syzkaller0 entered promiscuous mode
[   46.145111][  T672] netlink: 144 bytes leftover after parsing attributes in process `syz.1.104'.
[   46.204885][  T632] netlink: 12 bytes leftover after parsing attributes in process `syz.3.91'.
[   46.241912][  T675] loop2: detected capacity change from 0 to 256
[   46.292509][  T678] capability: warning: `syz.1.104' uses deprecated v2 capabilities in a way that may be insecure
[   46.305912][  T675] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0xd9218ae8, utbl_chksum : 0xe619d30d)
[   46.392914][   T20] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   46.404741][   T20] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   46.421320][   T20] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[   46.435211][   T20] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   46.444713][   T20] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   46.454215][   T20] usb 1-1: config 0 descriptor??
[   46.462917][  T327] usbhid 4-1:1.0: can't add hid device: -71
[   46.473126][  T685] loop2: detected capacity change from 0 to 1024
[   46.481529][  T327] usbhid: probe of 4-1:1.0 failed with error -71
[   46.493140][  T327] usb 4-1: USB disconnect, device number 3
[   46.540246][  T687] loop4: detected capacity change from 0 to 512
[   46.547711][  T685] EXT4-fs (loop2): Ignoring removed mblk_io_submit option
[   46.564377][  T685] EXT4-fs (loop2): mounted filesystem without journal. Opts: dioread_lock,resgid=0x0000000000000000,mblk_io_submit,norecovery,debug_want_extra_isize=0x0000000000000080,resgid=0x0000000000000000,nobarrier,grpid,jqfmt=vfsv0,,errors=continue. Quota mode: none.
[   46.599145][  T687] EXT4-fs (loop4): Unrecognized mount option "bsdgroups.journal_async_commit" or missing value
[   46.661009][  T693] loop2: detected capacity change from 0 to 128
[   46.787490][  T687] loop4: detected capacity change from 0 to 40427
[   46.840319][  T687] F2FS-fs (loop4): fault_injection options not supported
[   46.848363][  T687] F2FS-fs (loop4): fault_type options not supported
[   46.868627][  T687] F2FS-fs (loop4): invalid crc value
[   46.899986][  T687] F2FS-fs (loop4): Found nat_bits in checkpoint
[   46.908218][  T724] netlink: 'syz.1.112': attribute type 4 has an invalid length.
[   46.930138][  T724] netlink: 'syz.1.112': attribute type 4 has an invalid length.
[   46.939428][   T20] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0
[   46.948958][  T727] loop2: detected capacity change from 0 to 2048
[   46.956064][   T20] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0
[   46.964236][   T20] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0
[   46.978021][   T20] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0
[   46.997603][  T687] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[   47.008238][   T20] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0
[   47.029253][   T20] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0
[   47.051557][   T20] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0
[   47.060458][  T284] attempt to access beyond end of device
[   47.060458][  T284] loop4: rw=2049, want=45104, limit=40427
[   47.073997][   T20] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0
[   47.087183][  T724] syz.1.112 (724) used greatest stack depth: 20512 bytes left
[   47.096845][   T20] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0
[   47.107460][   T20] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving
[   47.130081][   T20] plantronics 0003:047F:FFFF.0002: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0
[   47.143274][   T30] kauditd_printk_skb: 27 callbacks suppressed
[   47.143289][   T30] audit: type=1326 audit(1775824174.513:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=649 comm="syz.0.97" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd2b2ce819 code=0x7ffc0000
[   47.198632][   T30] audit: type=1326 audit(1775824174.513:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=649 comm="syz.0.97" exe="/root/syz-executor" sig=0 arch=c000003e syscall=210 compat=0 ip=0x7fdd2b2ce819 code=0x7ffc0000
[   47.231618][   T39] usb 1-1: USB disconnect, device number 6
[   47.283085][   T30] audit: type=1326 audit(1775824174.513:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=649 comm="syz.0.97" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd2b2ce819 code=0x7ffc0000
[   47.284923][  T727] EXT4-fs (loop2): mounted filesystem without journal. Opts: init_itable=0x0000000000000001,errors=remount-ro,resgid=0x0000000000000000,barrier,quota,delalloc,. Quota mode: writeback.
[   47.348672][  T732] fido_id[732]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory
[   47.389016][   T30] audit: type=1326 audit(1775824174.513:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=649 comm="syz.0.97" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fdd2b28f04e code=0x7ffc0000
[   47.415671][  T736] loop4: detected capacity change from 0 to 256
[   47.424663][  T727] ext4 filesystem being mounted at /18/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   47.469503][  T736] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   47.486754][   T30] audit: type=1326 audit(1775824174.593:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=649 comm="syz.0.97" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd2b2ce819 code=0x7ffc0000
[   47.511098][  T726] EXT4-fs error (device loop2): ext4_ext_check_inode:501: inode #16: comm syz.2.113: pblk 0 bad header/extent: invalid eh_max - magic f30a, entries 7, max 0(0), depth 0(0)
[   47.528986][   T30] audit: type=1326 audit(1775824174.593:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=649 comm="syz.0.97" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fdd2b28f04e code=0x7ffc0000
[   47.559478][   T30] audit: type=1326 audit(1775824174.593:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=649 comm="syz.0.97" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd2b2ce819 code=0x7ffc0000
[   47.564062][  T726] EXT4-fs (loop2): Remounting filesystem read-only
[   47.585652][   T30] audit: type=1326 audit(1775824174.593:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=649 comm="syz.0.97" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdd2b2ce819 code=0x7ffc0000
[   47.610748][  T727] EXT4-fs error (device loop2): ext4_ext_check_inode:501: inode #16: comm syz.2.113: pblk 0 bad header/extent: invalid eh_max - magic f30a, entries 7, max 0(0), depth 0(0)
[   47.614898][   T30] audit: type=1326 audit(1775824174.593:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=649 comm="syz.0.97" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd2b2ce819 code=0x7ffc0000
[   47.631848][  T727] EXT4-fs (loop2): Remounting filesystem read-only
[   47.692837][   T30] audit: type=1326 audit(1775824174.593:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=649 comm="syz.0.97" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdd2b2ce819 code=0x7ffc0000
[   47.783503][  T747] loop2: detected capacity change from 0 to 4096
[   47.794464][  T747] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option
[   47.805335][  T747] EXT4-fs (loop2): mounted filesystem without journal. Opts: init_itable=0x0000000000000101,stripe=0x0000000000000061,journal_ioprio=0x0000000000000006,minixdf,nodiscard,nomblk_io_submit,acl,nojournal_checksum,resuid=0x0000000000000000,,errors=continue. Quota mode: writeback.
[   47.932831][   T20] usb 5-1: new full-speed USB device number 4 using dummy_hcd
[   47.952989][   T60] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[   48.192952][   T60] usb 4-1: Using ep0 maxpacket: 8
[   48.294571][  T749] F2FS-fs (loop0): QUOTA feature is enabled, so ignore qf_name
[   48.308212][  T749] F2FS-fs (loop0): invalid crc value
[   48.314900][   T60] usb 4-1: config 250 has an invalid interface number: 172 but max is 0
[   48.325818][   T60] usb 4-1: config 250 contains an unexpected descriptor of type 0x2, skipping
[   48.336452][  T749] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (15359802341028777995, 275811881701387)
[   48.344656][   T20] usb 5-1: unable to get BOS descriptor or descriptor too short
[   48.372882][   T60] usb 4-1: config 250 has no interface number 0
[   48.379921][   T60] usb 4-1: config 250 interface 172 altsetting 9 endpoint 0xC has invalid maxpacket 1023, setting to 64
[   48.391722][   T60] usb 4-1: config 250 interface 172 altsetting 9 endpoint 0x6 has invalid maxpacket 1023, setting to 64
[   48.414159][   T60] usb 4-1: config 250 interface 172 has no altsetting 0
[   48.422995][   T20] usb 5-1: not running at top speed; connect to a high speed hub
[   48.434315][  T749] F2FS-fs (loop0): recover fsync data on readonly fs
[   48.441250][  T749] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=60000, run fsck to fix.
[   48.450965][  T749] F2FS-fs (loop0): Bad quota inode 2:393216
[   48.458252][  T749] F2FS-fs (loop0): Failed to enable quota tracking (type=2, err=-22). Please run fsck to fix.
[   48.468870][  T749] F2FS-fs (loop0): Cannot turn on quota_ino: -22
[   48.475802][  T749] F2FS-fs (loop0): Mounted with checkpoint version = 753bd00b
[   48.502880][   T20] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 1023, setting to 64
[   48.573258][   T60] usb 4-1: New USB device found, idVendor=0cf3, idProduct=0004, bcdDevice=ed.29
[   48.589888][   T60] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   48.598472][   T60] usb 4-1: Product: ꪏ捍驺
[   48.603812][   T60] usb 4-1: Manufacturer: ☤䚹ꦆ⠍纤릤廌㬗뱽ꁎ錨림ﰿ澃ᚨፍ梵Ὄﱹഷ峴Ჸ俙끻稛弬⌸᠎劉Ừ㔐瘒ᇜ譼્㡎ꉆ꥽❐쏆ճ참䟃ꁷ默뿋噳ꢎ珝ƀ信墡덗剷ꄧ䶉摻俓ꗽ᥍䋾ದ眑䭈띾க즏뭔씷搨깩盺붡묿᤾ꨑ㜖ᑁ맾ଆ虠꤆馝뽙矂첾
[   48.634246][   T60] usb 4-1: SerialNumber: ѕ
[   48.972900][   T20] usb 5-1: New USB device found, idVendor=0499, idProduct=105c, bcdDevice= 0.40
[   48.988912][  T769] F2FS-fs (loop2): invalid crc value
[   49.009953][   T20] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   49.025204][  T769] F2FS-fs (loop2): Found nat_bits in checkpoint
[   49.062236][   T20] usb 5-1: Product: syz
[   49.071676][   T20] usb 5-1: Manufacturer: syz
[   49.077316][   T20] usb 5-1: SerialNumber: syz
[   49.110849][  T769] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[   49.113357][  T741] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[   49.131285][  T769] input: syz1 as /devices/virtual/input/input6
[   49.154547][  T769] netlink: 8 bytes leftover after parsing attributes in process `syz.2.125'.
[   49.217854][  T769] attempt to access beyond end of device
[   49.217854][  T769] loop2: rw=2049, want=45104, limit=40427
[   49.259119][   T60] usb 4-1: USB disconnect, device number 4
[   49.475056][   T20] usb 5-1: USB disconnect, device number 4
[   49.484085][  T793] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[   49.500298][  T798] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option
[   49.511153][  T793] EXT4-fs (loop0): 1 truncate cleaned up
[   49.516969][  T793] EXT4-fs (loop0): mounted filesystem without journal. Opts: nobarrier,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,user_xattr,errors=remount-ro,user_xattr,. Quota mode: none.
[   49.542587][  T798] EXT4-fs (loop2): mounted filesystem without journal. Opts: init_itable=0x0000000000000101,stripe=0x0000000000000061,journal_ioprio=0x0000000000000006,minixdf,nodiscard,nomblk_io_submit,acl,nojournal_checksum,resuid=0x0000000000000000,,errors=continue. Quota mode: writeback.
[   49.726793][  T303] udevd[303]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   49.754452][  T807] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodioread_nolock,noload,,errors=continue. Quota mode: writeback.
[   49.767899][  T807] ext4 filesystem being mounted at /19/bus/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   49.913961][  T282] ------------[ cut here ]------------
[   49.919753][  T282] WARNING: CPU: 1 PID: 282 at fs/inode.c:335 drop_nlink+0xc5/0x110
[   49.930467][  T282] Modules linked in:
[   49.935065][  T282] CPU: 1 PID: 282 Comm: syz-executor Not tainted syzkaller #0
[   49.944245][  T282] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[   49.956007][  T282] RIP: 0010:drop_nlink+0xc5/0x110
[   49.961576][  T282] Code: 1b 48 8d bb b8 04 00 00 be 08 00 00 00 e8 a3 03 f2 ff f0 48 ff 83 b8 04 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 db d2 b2 ff <0f> 0b eb 86 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 5e ff ff ff 4c
[   49.981886][  T282] RSP: 0018:ffffc90000a07b28 EFLAGS: 00010293
[   49.988615][  T282] RAX: ffffffff81b6f405 RBX: ffff88811d15cfc8 RCX: ffff88811dd03b40
[   49.997049][  T282] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[   50.022894][  T282] RBP: ffffc90000a07b50 R08: 0000000000000003 R09: 0000000000000004
[   50.031842][  T282] R10: dffffc0000000000 R11: fffff52000140f54 R12: dffffc0000000000
[   50.042385][  T282] R13: 1ffff11023a2ba02 R14: ffff88811d15d010 R15: 0000000000000000
[   50.051032][  T282] FS:  0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000
[   50.069241][  T282] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   50.084989][  T282] CR2: 000000110c2c3c55 CR3: 000000012b003000 CR4: 00000000003506b0
[   50.100408][  T282] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[   50.109801][  T282] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[   50.121538][  T282] Call Trace:
[   50.129902][  T282]  <TASK>
[   50.138550][  T282]  shmem_rmdir+0x5b/0x90
[   50.144269][  T282]  vfs_rmdir+0x313/0x460
[   50.152311][  T282]  incfs_kill_sb+0x105/0x220
[   50.158200][  T282]  deactivate_locked_super+0xa0/0x100
[   50.165641][  T282]  deactivate_super+0xaf/0xe0
[   50.186559][  T282]  cleanup_mnt+0x45b/0x510
[   50.206145][  T282]  __cleanup_mnt+0x19/0x20
[   50.225573][  T282]  task_work_run+0x127/0x190
[   50.242527][  T282]  do_exit+0xa9e/0x27e0
[   50.253329][  T282]  ? put_task_struct+0x90/0x90
[   50.259155][  T282]  ? __fdget_pos+0x1f7/0x380
[   50.268649][  T282]  ? ksys_write+0x1e4/0x250
[   50.278641][  T282]  ? __ia32_sys_read+0x90/0x90
[   50.291428][  T282]  do_group_exit+0x141/0x310
[   50.302879][  T282]  ? debug_smp_processor_id+0x17/0x20
[   50.310774][  T282]  __x64_sys_exit_group+0x3f/0x40
[   50.316589][  T282]  x64_sys_call+0x832/0x9a0
[   50.322575][  T282]  do_syscall_64+0x4c/0xa0
[   50.327435][  T282]  ? clear_bhb_loop+0x50/0xa0
[   50.333037][  T282]  ? clear_bhb_loop+0x50/0xa0
[   50.338526][  T282]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   50.346377][  T282] RIP: 0033:0x7fabc06e3819
[   50.351655][  T282] Code: Unable to access opcode bytes at RIP 0x7fabc06e37ef.
[   50.359928][  T282] RSP: 002b:00007ffe04893ef8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
[   50.368629][  T282] RAX: ffffffffffffffda RBX: 00007fabc07790a8 RCX: 00007fabc06e3819
[   50.377856][  T282] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001
[   50.386884][  T282] RBP: 0000000000000009 R08: 0000000000000000 R09: 00007fabc0779048
[   50.395863][  T282] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe048951b0
[   50.405809][  T282] R13: 00007fabc0779048 R14: 00005555563a44e8 R15: 00007ffe04896280
[   50.414847][  T282]  </TASK>
[   50.418372][  T282] ---[ end trace e63b3034b3a07293 ]---
[   50.425203][  T282] ------------[ cut here ]------------
[   50.431608][  T282] WARNING: CPU: 0 PID: 282 at fs/inode.c:335 drop_nlink+0xc5/0x110
[   50.440011][  T282] Modules linked in:
[   50.444662][  T282] CPU: 0 PID: 282 Comm: syz-executor Tainted: G        W         syzkaller #0
[   50.454021][  T282] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[   50.464434][  T282] RIP: 0010:drop_nlink+0xc5/0x110
[   50.469597][  T282] Code: 1b 48 8d bb b8 04 00 00 be 08 00 00 00 e8 a3 03 f2 ff f0 48 ff 83 b8 04 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 db d2 b2 ff <0f> 0b eb 86 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 5e ff ff ff 4c
[   50.490259][  T282] RSP: 0018:ffffc90000a07b28 EFLAGS: 00010293
[   50.497007][  T282] RAX: ffffffff81b6f405 RBX: ffff88811d15f260 RCX: ffff88811dd03b40
[   50.505730][  T282] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[   50.514330][  T282] RBP: ffffc90000a07b50 R08: 0000000000000003 R09: 0000000000000004
[   50.522919][  T282] R10: dffffc0000000000 R11: fffff52000140f54 R12: dffffc0000000000
[   50.531323][  T282] R13: 1ffff11023a2be55 R14: ffff88811d15f2a8 R15: 0000000000000000
[   50.540312][  T282] FS:  0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000
[   50.550704][  T282] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   50.557875][  T282] CR2: 000000110c302f7c CR3: 0000000126670000 CR4: 00000000003506b0
[   50.567184][  T282] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[   50.579009][  T282] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[   50.588249][  T282] Call Trace:
[   50.592076][  T282]  <TASK>
[   50.595746][  T282]  shmem_rmdir+0x5b/0x90
[   50.600837][  T282]  vfs_rmdir+0x313/0x460
[   50.607221][  T282]  incfs_kill_sb+0x198/0x220
[   50.612429][  T282]  deactivate_locked_super+0xa0/0x100
[   50.618935][  T282]  deactivate_super+0xaf/0xe0
[   50.624345][  T282]  cleanup_mnt+0x45b/0x510
[   50.630205][  T282]  __cleanup_mnt+0x19/0x20
[   50.635592][  T282]  task_work_run+0x127/0x190
[   50.641534][  T282]  do_exit+0xa9e/0x27e0
[   50.646852][  T282]  ? put_task_struct+0x90/0x90
[   50.651911][  T282]  ? __fdget_pos+0x1f7/0x380
[   50.656977][  T282]  ? ksys_write+0x1e4/0x250
[   50.662318][  T282]  ? __ia32_sys_read+0x90/0x90
[   50.667854][  T282]  do_group_exit+0x141/0x310
[   50.683538][  T282]  ? debug_smp_processor_id+0x17/0x20
[   50.689226][  T282]  __x64_sys_exit_group+0x3f/0x40
[   50.694991][  T282]  x64_sys_call+0x832/0x9a0
[   50.699681][  T282]  do_syscall_64+0x4c/0xa0
[   50.704973][  T282]  ? clear_bhb_loop+0x50/0xa0
[   50.710048][  T282]  ? clear_bhb_loop+0x50/0xa0
[   50.715012][  T282]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   50.721192][  T282] RIP: 0033:0x7fabc06e3819
[   50.726337][  T282] Code: Unable to access opcode bytes at RIP 0x7fabc06e37ef.
[   50.735639][  T282] RSP: 002b:00007ffe04893ef8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
[   50.771922][  T282] RAX: ffffffffffffffda RBX: 00007fabc07790a8 RCX: 00007fabc06e3819
[   50.781136][  T282] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001
[   50.796785][  T282] RBP: 0000000000000009 R08: 0000000000000000 R09: 00007fabc0779048
[   50.805586][  T282] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe048951b0
[   50.813906][  T282] R13: 00007fabc0779048 R14: 00005555563a44e8 R15: 00007ffe04896280
[   50.813930][  T282]  </TASK>
[   50.813936][  T282] ---[ end trace e63b3034b3a07294 ]---
[   50.893433][  T282] ==================================================================
[   50.901693][  T282] BUG: KASAN: use-after-free in fast_dput+0x1e9/0x290
[   50.908950][  T282] Read of size 4 at addr ffff88810d3dddd0 by task syz-executor/282
[   50.917157][  T282] 
[   50.919528][  T282] CPU: 0 PID: 282 Comm: syz-executor Tainted: G        W         syzkaller #0
[   50.929300][  T282] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[   50.939974][  T282] Call Trace:
[   50.944025][  T282]  <TASK>
[   50.947452][  T282]  __dump_stack+0x21/0x30
[   50.951899][  T282]  dump_stack_lvl+0x110/0x170
[   50.957328][  T282]  ? show_regs_print_info+0x20/0x20
[   50.962719][  T282]  ? load_image+0x3e0/0x3e0
[   50.967711][  T282]  print_address_description+0x7f/0x2c0
[   50.973493][  T282]  ? fast_dput+0x1e9/0x290
[   50.978041][  T282]  kasan_report+0xf1/0x140
[   50.982674][  T282]  ? fast_dput+0x1e9/0x290
[   50.987193][  T282]  __asan_report_load4_noabort+0x14/0x20
[   50.992976][  T282]  fast_dput+0x1e9/0x290
[   50.997475][  T282]  dput+0x26/0x90
[   51.001311][  T282]  incfs_free_mount_info+0x60/0x200
[   51.006885][  T282]  incfs_kill_sb+0x1b8/0x220
[   51.011599][  T282]  deactivate_locked_super+0xa0/0x100
[   51.016994][  T282]  deactivate_super+0xaf/0xe0
[   51.021687][  T282]  cleanup_mnt+0x45b/0x510
[   51.026127][  T282]  __cleanup_mnt+0x19/0x20
[   51.030575][  T282]  task_work_run+0x127/0x190
[   51.035320][  T282]  do_exit+0xa9e/0x27e0
[   51.039704][  T282]  ? put_task_struct+0x90/0x90
[   51.044498][  T282]  ? __fdget_pos+0x1f7/0x380
[   51.049140][  T282]  ? ksys_write+0x1e4/0x250
[   51.053764][  T282]  ? __ia32_sys_read+0x90/0x90
[   51.058546][  T282]  do_group_exit+0x141/0x310
[   51.063162][  T282]  ? debug_smp_processor_id+0x17/0x20
[   51.068676][  T282]  __x64_sys_exit_group+0x3f/0x40
[   51.073904][  T282]  x64_sys_call+0x832/0x9a0
[   51.078707][  T282]  do_syscall_64+0x4c/0xa0
[   51.083481][  T282]  ? clear_bhb_loop+0x50/0xa0
[   51.088420][  T282]  ? clear_bhb_loop+0x50/0xa0
[   51.093318][  T282]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   51.099344][  T282] RIP: 0033:0x7fabc06e3819
[   51.104204][  T282] Code: Unable to access opcode bytes at RIP 0x7fabc06e37ef.
[   51.113172][  T282] RSP: 002b:00007ffe04893ef8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
[   51.121735][  T282] RAX: ffffffffffffffda RBX: 00007fabc07790a8 RCX: 00007fabc06e3819
[   51.129820][  T282] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001
[   51.138880][  T282] RBP: 0000000000000009 R08: 0000000000000000 R09: 00007fabc0779048
[   51.147435][  T282] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe048951b0
[   51.155812][  T282] R13: 00007fabc0779048 R14: 00005555563a44e8 R15: 00007ffe04896280
[   51.164281][  T282]  </TASK>
[   51.167425][  T282] 
[   51.169853][  T282] Allocated by task 808:
[   51.174201][  T282]  __kasan_slab_alloc+0xbd/0xf0
[   51.179142][  T282]  slab_post_alloc_hook+0x4f/0x2b0
[   51.184424][  T282]  kmem_cache_alloc+0xf7/0x260
[   51.189326][  T282]  __d_alloc+0x2d/0x6a0
[   51.193518][  T282]  d_alloc_parallel+0xe2/0x1370
[   51.198389][  T282]  __lookup_slow+0x14c/0x410
[   51.203001][  T282]  lookup_one_len+0x19d/0x2d0
[   51.207831][  T282]  incfs_lookup_dentry+0x60/0xb0
[   51.212870][  T282]  open_or_create_special_dir+0x4f/0x1d0
[   51.218617][  T282]  incfs_mount_fs+0x42f/0x890
[   51.223404][  T282]  legacy_get_tree+0xed/0x190
[   51.228162][  T282]  vfs_get_tree+0x89/0x260
[   51.232597][  T282]  do_new_mount+0x25a/0xa20
[   51.237551][  T282]  path_mount+0x659/0xff0
[   51.241907][  T282]  __se_sys_mount+0x320/0x390
[   51.246687][  T282]  __x64_sys_mount+0xbf/0xd0
[   51.251321][  T282]  x64_sys_call+0x6bf/0x9a0
[   51.255851][  T282]  do_syscall_64+0x4c/0xa0
[   51.260285][  T282]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   51.266197][  T282] 
[   51.268594][  T282] Freed by task 13:
[   51.272518][  T282]  kasan_set_track+0x4a/0x70
[   51.277134][  T282]  kasan_set_free_info+0x23/0x40
[   51.282090][  T282]  ____kasan_slab_free+0x125/0x160
[   51.287481][  T282]  __kasan_slab_free+0x11/0x20
[   51.292358][  T282]  slab_free_freelist_hook+0xc2/0x190
[   51.297962][  T282]  kmem_cache_free+0x100/0x320
[   51.303305][  T282]  __d_free+0x23/0x30
[   51.307346][  T282]  rcu_do_batch+0x532/0xbe0
[   51.311960][  T282]  rcu_core+0x5ee/0xf80
[   51.316226][  T282]  rcu_core_si+0x9/0x10
[   51.320427][  T282]  handle_softirqs+0x250/0x560
[   51.325490][  T282]  run_ksoftirqd+0x28/0x40
[   51.330142][  T282]  smpboot_thread_fn+0x45a/0x8c0
[   51.335100][  T282]  kthread+0x411/0x500
[   51.339329][  T282]  ret_from_fork+0x1f/0x30
[   51.343785][  T282] 
[   51.346119][  T282] Last potentially related work creation:
[   51.351929][  T282]  kasan_save_stack+0x3a/0x60
[   51.356798][  T282]  __kasan_record_aux_stack+0xd2/0x100
[   51.362484][  T282]  kasan_record_aux_stack_noalloc+0xb/0x10
[   51.368514][  T282]  call_rcu+0x10b/0xf80
[   51.372715][  T282]  dentry_free+0xbd/0x150
[   51.377073][  T282]  __dentry_kill+0x50a/0x650
[   51.381762][  T282]  dentry_kill+0xc0/0x2a0
[   51.386200][  T282]  dput+0x47/0x90
[   51.389874][  T282]  incfs_free_mount_info+0x60/0x200
[   51.395308][  T282]  incfs_kill_sb+0x1b8/0x220
[   51.400133][  T282]  deactivate_locked_super+0xa0/0x100
[   51.405545][  T282]  deactivate_super+0xaf/0xe0
[   51.410331][  T282]  cleanup_mnt+0x45b/0x510
[   51.415076][  T282]  __cleanup_mnt+0x19/0x20
[   51.419811][  T282]  task_work_run+0x127/0x190
[   51.424697][  T282]  do_exit+0xa9e/0x27e0
[   51.428989][  T282]  do_group_exit+0x141/0x310
[   51.433768][  T282]  __x64_sys_exit_group+0x3f/0x40
[   51.438831][  T282]  x64_sys_call+0x832/0x9a0
[   51.443562][  T282]  do_syscall_64+0x4c/0xa0
[   51.448149][  T282]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   51.454575][  T282] 
[   51.456936][  T282] Second to last potentially related work creation:
[   51.463972][  T282]  kasan_save_stack+0x3a/0x60
[   51.468786][  T282]  __kasan_record_aux_stack+0xd2/0x100
[   51.474282][  T282]  kasan_record_aux_stack_noalloc+0xb/0x10
[   51.480264][  T282]  call_rcu+0x10b/0xf80
[   51.484449][  T282]  dentry_free+0xbd/0x150
[   51.488884][  T282]  __dentry_kill+0x50a/0x650
[   51.493578][  T282]  dentry_kill+0xc0/0x2a0
[   51.497919][  T282]  dput+0x47/0x90
[   51.501765][  T282]  do_unlinkat+0x34a/0x6d0
[   51.506384][  T282]  __x64_sys_unlink+0x49/0x50
[   51.511561][  T282]  x64_sys_call+0x878/0x9a0
[   51.516236][  T282]  do_syscall_64+0x4c/0xa0
[   51.520781][  T282]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   51.526692][  T282] 
[   51.529212][  T282] The buggy address belongs to the object at ffff88810d3dddd0
[   51.529212][  T282]  which belongs to the cache dentry of size 208
[   51.543256][  T282] The buggy address is located 0 bytes inside of
[   51.543256][  T282]  208-byte region [ffff88810d3dddd0, ffff88810d3ddea0)
[   51.557397][  T282] The buggy address belongs to the page:
[   51.563344][  T282] page:ffffea000434f740 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x10d3dd
[   51.574107][  T282] flags: 0x4000000000000200(slab|zone=1)
[   51.579961][  T282] raw: 4000000000000200 dead000000000100 dead000000000122 ffff8881001c4000
[   51.588576][  T282] raw: 0000000000000000 00000000000f000f 00000001ffffffff 0000000000000000
[   51.597452][  T282] page dumped because: kasan: bad access detected
[   51.603900][  T282] page_owner tracks the page as allocated
[   51.609798][  T282] page last allocated via order 0, migratetype Reclaimable, gfp_mask 0x12cd0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_RECLAIMABLE), pid 108, ts 7699746867, free_ts 0
[   51.627038][  T282]  post_alloc_hook+0x192/0x1b0
[   51.632431][  T282]  prep_new_page+0x1c/0x110
[   51.638029][  T282]  get_page_from_freelist+0x2d3a/0x2dc0
[   51.643649][  T282]  __alloc_pages+0x1a2/0x460
[   51.648461][  T282]  new_slab+0xa1/0x4d0
[   51.652754][  T282]  ___slab_alloc+0x381/0x810
[   51.657725][  T282]  __slab_alloc+0x49/0x90
[   51.662346][  T282]  kmem_cache_alloc+0x138/0x260
[   51.667489][  T282]  __d_alloc+0x2d/0x6a0
[   51.671864][  T282]  d_alloc+0x4b/0x260
[   51.676245][  T282]  lookup_one_qstr_excl+0xcb/0x250
[   51.681822][  T282]  filename_create+0x235/0x470
[   51.686700][  T282]  do_symlinkat+0x65/0x5a0
[   51.691533][  T282]  __x64_sys_symlink+0x7e/0x90
[   51.697136][  T282]  x64_sys_call+0x759/0x9a0
[   51.702364][  T282]  do_syscall_64+0x4c/0xa0
[   51.708050][  T282] page_owner free stack trace missing
[   51.715639][  T282] 
[   51.718206][  T282] Memory state around the buggy address:
[   51.724734][  T282]  ffff88810d3ddc80: fc fc fc fc fc fc fc fc 00 00 00 00 00 00 00 00
[   51.734330][  T282]  ffff88810d3ddd00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[   51.745212][  T282] >ffff88810d3ddd80: 00 00 fc fc fc fc fc fc fc fc fa fb fb fb fb fb
[   51.754938][  T282]                                                  ^
[   51.762838][  T282]  ffff88810d3dde00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   51.771702][  T282]  ffff88810d3dde80: fb fb fb fb fc fc fc fc fc fc fc fc fa fb fb fb
[   51.781330][  T282] ==================================================================
[   51.789973][  T282] Disabling lock debugging due to kernel taint
[   51.796926][  T282] ------------[ cut here ]------------
[   51.803473][  T282] WARNING: CPU: 0 PID: 282 at fs/dcache.c:769 fast_dput+0x210/0x290
[   51.811917][  T282] Modules linked in:
[   51.816081][  T282] CPU: 0 PID: 282 Comm: syz-executor Tainted: G    B   W         syzkaller #0
[   51.825732][  T282] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[   51.836214][  T282] RIP: 0010:fast_dput+0x210/0x290
[   51.841361][  T282] Code: e5 f2 ff e9 46 fe ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 99 fe ff ff 48 89 df e8 ea e4 f2 ff e9 8c fe ff ff e8 50 b6 b3 ff <0f> 0b e9 0b ff ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c e4 fe ff
[   51.862011][  T282] RSP: 0018:ffffc90000a07b40 EFLAGS: 00010293
[   51.868723][  T282] RAX: ffffffff81b61090 RBX: ffff88810d3dddd0 RCX: ffff88811dd03b40
[   51.878092][  T282] RDX: 0000000000000000 RSI: 00000000ffffff80 RDI: 0000000000000001
[   51.886709][  T282] RBP: ffffc90000a07b70 R08: 0000000000000003 R09: 0000000000000004
[   51.895001][  T282] R10: dffffc0000000000 R11: fffff52000140f58 R12: 00000000ffffff80
[   51.903187][  T282] R13: dffffc0000000000 R14: ffff88810d3dde28 R15: 1ffff11021a7bbc5
[   51.911465][  T282] FS:  0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000
[   51.920689][  T282] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   51.927358][  T282] CR2: 00007fc38c1ac6b8 CR3: 000000000660f000 CR4: 00000000003506b0
[   51.935917][  T282] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[   51.944551][  T282] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[   51.953237][  T282] Call Trace:
[   51.956744][  T282]  <TASK>
[   51.959817][  T282]  dput+0x26/0x90
[   51.963581][  T282]  incfs_free_mount_info+0x60/0x200
[   51.968899][  T282]  incfs_kill_sb+0x1b8/0x220
[   51.973620][  T282]  deactivate_locked_super+0xa0/0x100
[   51.979342][  T282]  deactivate_super+0xaf/0xe0
[   51.984622][  T282]  cleanup_mnt+0x45b/0x510
[   51.989279][  T282]  __cleanup_mnt+0x19/0x20
[   51.994198][  T282]  task_work_run+0x127/0x190
[   52.000791][  T282]  do_exit+0xa9e/0x27e0
[   52.007421][  T282]  ? put_task_struct+0x90/0x90
[   52.012614][  T282]  ? __fdget_pos+0x1f7/0x380
[   52.017355][  T282]  ? ksys_write+0x1e4/0x250
[   52.022299][  T282]  ? __ia32_sys_read+0x90/0x90
[   52.027393][  T282]  do_group_exit+0x141/0x310
[   52.032033][  T282]  ? debug_smp_processor_id+0x17/0x20
[   52.037843][  T282]  __x64_sys_exit_group+0x3f/0x40
[   52.043190][  T282]  x64_sys_call+0x832/0x9a0
[   52.047731][  T282]  do_syscall_64+0x4c/0xa0
[   52.052576][  T282]  ? clear_bhb_loop+0x50/0xa0
[   52.057475][  T282]  ? clear_bhb_loop+0x50/0xa0
[   52.062174][  T282]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   52.068168][  T282] RIP: 0033:0x7fabc06e3819
[   52.072844][  T282] Code: Unable to access opcode bytes at RIP 0x7fabc06e37ef.
[   52.080326][  T282] RSP: 002b:00007ffe04893ef8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
[   52.089908][  T282] RAX: ffffffffffffffda RBX: 00007fabc07790a8 RCX: 00007fabc06e3819
[   52.098203][  T282] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001
[   52.106306][  T282] RBP: 0000000000000009 R08: 0000000000000000 R09: 00007fabc0779048
[   52.114638][  T282] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe048951b0
[   52.122856][  T282] R13: 00007fabc0779048 R14: 00005555563a44e8 R15: 00007ffe04896280
[   52.130861][  T282]  </TASK>
[   52.134728][  T282] ---[ end trace e63b3034b3a07295 ]---
[   52.142248][  T282] ------------[ cut here ]------------
[   52.148306][  T282] WARNING: CPU: 0 PID: 282 at fs/dcache.c:644 retain_dentry+0x158/0x2a0
[   52.157172][  T282] Modules linked in:
[   52.161223][  T282] CPU: 0 PID: 282 Comm: syz-executor Tainted: G    B   W         syzkaller #0
[   52.170394][  T282] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[   52.180961][  T282] RIP: 0010:retain_dentry+0x158/0x2a0
[   52.186776][  T282] Code: 31 ff e8 4b b8 b3 ff 44 89 e8 83 e0 40 0f 84 a5 00 00 00 e8 8a b4 b3 ff b0 01 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 78 b4 b3 ff <0f> 0b e9 f9 fe ff ff e8 6c b4 b3 ff 31 c0 eb e0 e8 63 b4 b3 ff 31
[   52.206632][  T282] RSP: 0018:ffffc90000a07b48 EFLAGS: 00010293
[   52.212736][  T282] RAX: ffffffff81b61268 RBX: ffff88810d3ddbb0 RCX: ffff88811dd03b40
[   52.221058][  T282] RDX: 0000000000000000 RSI: 0000000010000000 RDI: 0000000000000000
[   52.229297][  T282] RBP: ffffc90000a07b70 R08: 0000000000000003 R09: 0000000000000004
[   52.237464][  T282] R10: dffffc0000000000 R11: fffff52000140f50 R12: 1ffff11021a7bb76
[   52.245707][  T282] R13: ffff8881282f33c8 R14: 0000000010000000 R15: dffffc0000000000
[   52.254202][  T282] FS:  0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000
[   52.262943][   T30] kauditd_printk_skb: 19 callbacks suppressed
[   52.263005][   T30] audit: type=1400 audit(1775824179.613:285): avc:  denied  { read } for  pid=83 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1
[   52.263471][  T282] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   52.273227][   T30] audit: type=1400 audit(1775824179.613:286): avc:  denied  { search } for  pid=83 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   52.291589][  T282] CR2: 00007fc38c1ac6b8 CR3: 000000000660f000 CR4: 00000000003506b0
[   52.291616][  T282] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[   52.336925][  T282] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[   52.345245][  T282] Call Trace:
[   52.348779][  T282]  <TASK>
[   52.351920][  T282]  dput+0x3b/0x90
[   52.355636][  T282]  incfs_free_mount_info+0x80/0x200
[   52.361133][  T282]  incfs_kill_sb+0x1b8/0x220
[   52.365952][  T282]  deactivate_locked_super+0xa0/0x100
[   52.371610][  T282]  deactivate_super+0xaf/0xe0
[   52.376410][  T282]  cleanup_mnt+0x45b/0x510
[   52.380928][  T282]  __cleanup_mnt+0x19/0x20
[   52.385507][  T282]  task_work_run+0x127/0x190
[   52.390173][  T282]  do_exit+0xa9e/0x27e0
[   52.394510][  T282]  ? put_task_struct+0x90/0x90
[   52.399309][  T282]  ? __fdget_pos+0x1f7/0x380
[   52.403053][   T30] audit: type=1400 audit(1775824179.613:287): avc:  denied  { write } for  pid=83 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   52.404148][  T282]  ? ksys_write+0x1e4/0x250
[   52.430205][  T282]  ? __ia32_sys_read+0x90/0x90
[   52.435272][  T282]  do_group_exit+0x141/0x310
[   52.436468][   T30] audit: type=1400 audit(1775824179.613:288): avc:  denied  { add_name } for  pid=83 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   52.440028][  T282]  ? debug_smp_processor_id+0x17/0x20
[   52.440059][  T282]  __x64_sys_exit_group+0x3f/0x40
[   52.440081][  T282]  x64_sys_call+0x832/0x9a0
[   52.462372][   T30] audit: type=1400 audit(1775824179.613:289): avc:  denied  { create } for  pid=83 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   52.466361][  T282]  do_syscall_64+0x4c/0xa0
[   52.472625][   T30] audit: type=1400 audit(1775824179.613:290): avc:  denied  { append open } for  pid=83 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   52.476207][  T282]  ? clear_bhb_loop+0x50/0xa0
[   52.498332][   T30] audit: type=1400 audit(1775824179.613:291): avc:  denied  { getattr } for  pid=83 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   52.501573][  T282]  ? clear_bhb_loop+0x50/0xa0
[   52.501609][  T282]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   52.565715][  T282] RIP: 0033:0x7fabc06e3819
[   52.570344][  T282] Code: Unable to access opcode bytes at RIP 0x7fabc06e37ef.
[   52.578539][  T282] RSP: 002b:00007ffe04893ef8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
[   52.588123][  T282] RAX: ffffffffffffffda RBX: 00007fabc07790a8 RCX: 00007fabc06e3819
[   52.596641][  T282] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001
[   52.605175][  T282] RBP: 0000000000000009 R08: 0000000000000000 R09: 00007fabc0779048
[   52.613550][  T282] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe048951b0
[   52.622046][  T282] R13: 00007fabc0779048 R14: 00005555563a44e8 R15: 00007ffe04896280
[   52.630898][  T282]  </TASK>
[   52.634037][  T282] ---[ end trace e63b3034b3a07296 ]---
[   52.639604][  T282] ------------[ cut here ]------------
[   52.645536][  T282] WARNING: CPU: 0 PID: 282 at fs/dcache.c:420 __dentry_kill+0x553/0x650
[   52.655410][  T282] Modules linked in:
[   52.659493][  T282] CPU: 0 PID: 282 Comm: syz-executor Tainted: G    B   W         syzkaller #0
[   52.669686][  T282] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[   52.680035][  T282] RIP: 0010:__dentry_kill+0x553/0x650
[   52.685688][  T282] Code: 89 ff e8 90 0c fe 02 2e 2e 2e 31 c0 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 77 9d b3 ff e9 b3 fe ff ff e8 6d 9d b3 ff <0f> 0b e9 36 fc ff ff e8 61 9d b3 ff e9 7e fe ff ff 89 d9 80 e1 07
[   52.705542][  T282] RSP: 0018:ffffc90000a07ae8 EFLAGS: 00010293
[   52.711763][  T282] RAX: ffffffff81b62973 RBX: ffff88810d3ddbb0 RCX: ffff88811dd03b40
[   52.719881][  T282] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 00000000ffffffff
[   52.728331][  T282] RBP: ffffc90000a07b30 R08: 0000000000000003 R09: 0000000000000004
[   52.736975][  T282] R10: dffffc0000000000 R11: fffff52000140f44 R12: 1ffff11021a7bb76
[   52.745511][  T282] R13: dffffc0000000000 R14: 0000000000100000 R15: ffff88810d3ddc08
[   52.755615][  T282] FS:  0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000
[   52.765151][  T282] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   52.772439][  T282] CR2: 00007fc38c1ac6b8 CR3: 000000000660f000 CR4: 00000000003506b0
[   52.780730][  T282] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[   52.789343][  T282] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[   52.798012][  T282] Call Trace:
[   52.801620][  T282]  <TASK>
[   52.804798][  T282]  dentry_kill+0xc0/0x2a0
[   52.809380][  T282]  dput+0x47/0x90
[   52.813371][  T282]  incfs_free_mount_info+0x80/0x200
[   52.818853][  T282]  incfs_kill_sb+0x1b8/0x220
[   52.823715][  T282]  deactivate_locked_super+0xa0/0x100
[   52.829249][  T282]  deactivate_super+0xaf/0xe0
[   52.834109][  T282]  cleanup_mnt+0x45b/0x510
[   52.838578][  T282]  __cleanup_mnt+0x19/0x20
[   52.843802][  T282]  task_work_run+0x127/0x190
[   52.849330][  T282]  do_exit+0xa9e/0x27e0
[   52.853762][  T282]  ? put_task_struct+0x90/0x90
[   52.858776][  T282]  ? __fdget_pos+0x1f7/0x380
[   52.863552][  T282]  ? ksys_write+0x1e4/0x250
[   52.868263][  T282]  ? __ia32_sys_read+0x90/0x90
[   52.873664][  T282]  do_group_exit+0x141/0x310
[   52.879341][  T282]  ? debug_smp_processor_id+0x17/0x20
[   52.887003][  T282]  __x64_sys_exit_group+0x3f/0x40
[   52.892266][  T282]  x64_sys_call+0x832/0x9a0
[   52.897227][  T282]  do_syscall_64+0x4c/0xa0
[   52.902152][  T282]  ? clear_bhb_loop+0x50/0xa0
[   52.906959][  T282]  ? clear_bhb_loop+0x50/0xa0
[   52.911675][  T282]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   52.917935][  T282] RIP: 0033:0x7fabc06e3819
[   52.922561][  T282] Code: Unable to access opcode bytes at RIP 0x7fabc06e37ef.
[   52.930456][  T282] RSP: 002b:00007ffe04893ef8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
[   52.939137][  T282] RAX: ffffffffffffffda RBX: 00007fabc07790a8 RCX: 00007fabc06e3819
[   52.948093][  T282] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001
[   52.957034][  T282] RBP: 0000000000000009 R08: 0000000000000000 R09: 00007fabc0779048
[   52.965475][  T282] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe048951b0
[   52.974386][  T282] R13: 00007fabc0779048 R14: 00005555563a44e8 R15: 00007ffe04896280
[   52.982427][  T282]  </TASK>
[   52.985641][  T282] ---[ end trace e63b3034b3a07297 ]---
[   52.991213][  T282] list_del corruption. prev->next should be ffff88810d3ddc40, but was ffff88810d3dd2b0
[   53.001495][  T282] ------------[ cut here ]------------
[   53.007117][  T282] kernel BUG at lib/list_debug.c:61!
[   53.012704][  T282] invalid opcode: 0000 [#1] PREEMPT SMP KASAN
[   53.018882][  T282] CPU: 0 PID: 282 Comm: syz-executor Tainted: G    B   W         syzkaller #0
[   53.027753][  T282] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[   53.038084][  T282] RIP: 0010:__list_del_entry_valid+0x10c/0x120
[   53.044709][  T282] Code: 48 89 de e8 f6 bd 56 02 0f 0b 48 c7 c7 40 a4 63 85 48 89 de e8 e5 bd 56 02 0f 0b 48 c7 c7 a0 a4 63 85 48 89 de e8 d4 bd 56 02 <0f> 0b 48 c7 c7 00 a5 63 85 48 89 de e8 c3 bd 56 02 0f 0b 00 55 48
[   53.065641][  T282] RSP: 0018:ffffc90000a07ab8 EFLAGS: 00010246
[   53.072054][  T282] RAX: 0000000000000054 RBX: ffff88810d3ddc40 RCX: 253c8d92905a0900
[   53.080543][  T282] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000000
[   53.088963][  T282] RBP: ffffc90000a07ad8 R08: ffffc90000a07527 R09: 1ffff92000140ea4
[   53.097370][  T282] R10: dffffc0000000000 R11: fffff52000140ea5 R12: dffffc0000000000
[   53.105736][  T282] R13: dffffc0000000000 R14: ffff88810d3dd2b0 R15: ffff888111c7c3c0
[   53.114672][  T282] FS:  0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000
[   53.125364][  T282] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   53.132370][  T282] CR2: 00007fc38c1ac6b8 CR3: 000000000660f000 CR4: 00000000003506b0
[   53.140378][  T282] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[   53.148455][  T282] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[   53.156890][  T282] Call Trace:
[   53.160344][  T282]  <TASK>
[   53.163463][  T282]  __dentry_kill+0x24c/0x650
[   53.168819][  T282]  dentry_kill+0xc0/0x2a0
[   53.174133][  T282]  dput+0x47/0x90
[   53.177926][  T282]  incfs_free_mount_info+0x80/0x200
[   53.183427][  T282]  incfs_kill_sb+0x1b8/0x220
[   53.188352][  T282]  deactivate_locked_super+0xa0/0x100
[   53.193971][  T282]  deactivate_super+0xaf/0xe0
[   53.198957][  T282]  cleanup_mnt+0x45b/0x510
[   53.203523][  T282]  __cleanup_mnt+0x19/0x20
[   53.208035][  T282]  task_work_run+0x127/0x190
[   53.212683][  T282]  do_exit+0xa9e/0x27e0
[   53.217138][  T282]  ? put_task_struct+0x90/0x90
[   53.222068][  T282]  ? __fdget_pos+0x1f7/0x380
[   53.226692][  T282]  ? ksys_write+0x1e4/0x250
[   53.231370][  T282]  ? __ia32_sys_read+0x90/0x90
[   53.236617][  T282]  do_group_exit+0x141/0x310
[   53.241567][  T282]  ? debug_smp_processor_id+0x17/0x20
[   53.247069][  T282]  __x64_sys_exit_group+0x3f/0x40
[   53.252437][  T282]  x64_sys_call+0x832/0x9a0
[   53.257146][  T282]  do_syscall_64+0x4c/0xa0
[   53.262199][  T282]  ? clear_bhb_loop+0x50/0xa0
[   53.267002][  T282]  ? clear_bhb_loop+0x50/0xa0
[   53.271904][  T282]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   53.278021][  T282] RIP: 0033:0x7fabc06e3819
[   53.282467][  T282] Code: Unable to access opcode bytes at RIP 0x7fabc06e37ef.
[   53.290869][  T282] RSP: 002b:00007ffe04893ef8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
[   53.299926][  T282] RAX: ffffffffffffffda RBX: 00007fabc07790a8 RCX: 00007fabc06e3819
[   53.308400][  T282] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001
[   53.316706][  T282] RBP: 0000000000000009 R08: 0000000000000000 R09: 00007fabc0779048
[   53.325126][  T282] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe048951b0
[   53.333480][  T282] R13: 00007fabc0779048 R14: 00005555563a44e8 R15: 00007ffe04896280
[   53.341641][  T282]  </TASK>
[   53.344706][  T282] Modules linked in:
[   53.348925][  T282] ---[ end trace e63b3034b3a07298 ]---
[   53.354536][  T282] RIP: 0010:__list_del_entry_valid+0x10c/0x120
[   53.361011][  T282] Code: 48 89 de e8 f6 bd 56 02 0f 0b 48 c7 c7 40 a4 63 85 48 89 de e8 e5 bd 56 02 0f 0b 48 c7 c7 a0 a4 63 85 48 89 de e8 d4 bd 56 02 <0f> 0b 48 c7 c7 00 a5 63 85 48 89 de e8 c3 bd 56 02 0f 0b 00 55 48
[   53.380985][  T282] RSP: 0018:ffffc90000a07ab8 EFLAGS: 00010246
[   53.387414][  T282] RAX: 0000000000000054 RBX: ffff88810d3ddc40 RCX: 253c8d92905a0900
[   53.395499][  T282] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000000
[   53.403736][  T282] RBP: ffffc90000a07ad8 R08: ffffc90000a07527 R09: 1ffff92000140ea4
[   53.411942][  T282] R10: dffffc0000000000 R11: fffff52000140ea5 R12: dffffc0000000000
[   53.420217][  T282] R13: dffffc0000000000 R14: ffff88810d3dd2b0 R15: ffff888111c7c3c0
[   53.428514][  T282] FS:  0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000
[   53.437751][  T282] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   53.444803][  T282] CR2: 00007fc38c1ac6b8 CR3: 000000000660f000 CR4: 00000000003506b0
[   53.453456][  T282] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[   53.461982][  T282] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[   53.470307][  T282] Kernel panic - not syncing: Fatal exception
[   53.476751][  T282] Kernel Offset: disabled
[   53.481500][  T282] Rebooting in 86400 seconds..