last executing test programs:

20.726440088s ago: executing program 3 (id=58):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0/file1\x00', 0x40, 0x0, 0x11, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x2000008, &(0x7f0000001440)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]})
linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x400)
llistxattr(&(0x7f0000000300)='./file0/file1\x00', &(0x7f0000000400)=""/128, 0x80)

20.620697021s ago: executing program 3 (id=59):
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) (rerun: 64)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x5, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffe}, [@cb_func={0x18, 0x8, 0x4, 0x0, 0xffffffffffffffff}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async)
syz_usb_connect$uac3(0x5, 0x89, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x86a, 0x1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x77, 0x3, 0x1, 0x45, 0x10, 0xe4, {0x8, 0xb, 0x0, 0x2, 0x1, 0x1, 0x30, 0x4e}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0xd, 0xa, 0x8}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x8, 0x69, 0xd, 0x9, 0x40}]}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0xe, 0x9, 0x9, {0xa, 0x25, 0x25, 0x8, 0x4, 0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x2, 0xfd, 0x0, {0xa, 0x25, 0x25, 0xc9c, 0xd, 0xd}}}}}}}}]}}, 0x0)

20.136840442s ago: executing program 3 (id=61):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'sit0\x00', <r1=>0x0})
r2 = socket$netlink(0x10, 0x3, 0x10)
r3 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r3, 0x0)
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000180)={0x8, {"bd2af2adfb5b061c3ca5dae01a134486c194089195a326cff7bf41d5486235b0604a0d1bcaa1d4c9cf948b7da2ba910eadba18e098f2782dec4aaed64e07696a1f388d897cea87ef8fde32a7b91c76a2334aeffa19ab9e7a870245585d624a4d0ac2fd315a05a8fe7988ad70d72f1d40e1c050bd113ed1f7517f6e8555ad7ce65f8dc986194a72c5c4cbbf7bb37865a73a159e5b950de92c0e5b4ef4c9fda68a19991f2490925979ac04da692e39e73d025299e57ee7ef7a117427de7245a04884f71bf5759890eef09d562e8444de3316e5ab99903057fbf1ecbd7ba093cb3cdf25f8ad6092ce24dad55c63fd5b589b8c1cdd04651be0229404986ade51c29af05a53d764ad854a11f9a2fbc3bb1f21fa282af73cae0607de434cfd9a4899a979f70c807044239aac67cbafaecca42dc1553612c220ede0cae19d30f15d2513ad1f96aaaf51054d5b9b0ba1b55762d65d6f1a61a4f7a4a738b0a037f017e6a24db2ac63f5f5b114b5899df2ad132432c75fde2438efe6b7af8f9c15ef0186ea703b3b3225a2f27f50e6b3031d2ca8e416cf64ca442b5700a2aae18a873b7fbae430f1625fc16a99c0a0e5dd38cc0bb5964349c8fe7f9b1f5e37d6e91fd6c476a46aba077e1b0569e71d52e763f13936a9f3857b866e22ecab499f4185badc8620599b5ab2e2f5232286ef72f8eda0287f0cb3c9e41a1cca48b44f2deb5237852bf9831ee8dca86c5e62a12b5a81e526dfc176646f203b116e118c040bbfd1a89cfa0430a8dd9ea7c120c7091991f866f9814adf5df7ce76278b3b4a2a91829df21c609021dcb35a83f0dbe786fff33b2bb0384938204ac7b43f78ac4806fa2000501d15bdaa14e14c1391bb4b359da837564442061bc5a9d3f75ee655e2c3857dd57aa8c50cb8b54b3b0c3fd0811033a4881bd4249dd0decaffbd010a8796c71da358e1b5cb1be7ded4529aa7feddb304d32a0b0efd3cf29b06f9433f821a16779374a4cea67e14a80ca7ad183d17a537f428cc454f1357e956a2a794dfd899c4737a9ec5f934e7b86bc552b9ea62179bbeb531689b0e047f707ab9709e77bac19e31445b3d93c8ce221e7d66d29039d7c4de0106d856b9e086401371fbca691dfab7ebfcff0f2cafc4401049e9f2e88e47949560ffd88f937e9b689ce4cdd78cf12faa712c1ba94c83ef39a5822d0ebad020c5ac01ff485e1c5aba394999e3957f889df6be6a5cc0573a3c686728f5492a4759c4c3b2f32499102b04e5de169f43d6b5872ab671109fa60db3f90f85dab3e73dc9b3ec8396e96bfe9df695be533a33cb2529eb2c79d6a172596d5df4373705fdd85a7253977f0c43b18da12b65b1361f00bf11f27b39f8a65664b4e27555b8ac93b45e2ea3452297af9f2788e072274e6f37cf643e9c5ac0d43dc4ee69293dbeca1df9d69199f54d8e39a546478c2114f2d235cfa5644db3867c530dfd0b6730c4f75cf200a40c3d542a4935a492cc5d1d0b413ed6326da405ab31745da2753d5a1fecbb754e05c6cb256f134229a247775623fa1683f093553d0d4de43fbb13c58df7645e9bb1da8bdd0758083dee09a2556d5daaff47b43b1e6f78a50be3f7bd32d0d86e4d5b45fb3a10c4f04e5aef36626a7313eca229bcfc4bd798e92334ac56a1ddfd4cead19f359701a23a4309197c0d707371d0f2fe9031c06e8c836ceb70f1a06bf182e979538d5d44544dc2a7ec3bbf66293b57784e35d882a9f43d3bc568e5e9da1f4e891ae931b7effe7eb94c6aa969b084f218c0d3cb11fc474beb3f169963fb9d64486b05e191c20af38ae504d8aae3349d4c6cecaa1971982f112fc4d0d59ea88d35a092cba171af35d7430c05fea852257a6cd08029cd5e12ac31622a9579d90283dd44f6e7d7413b368e06a4263ba1bfb12d3c0ad1f75a0ae2865aa26a913c6132cdf7cfec168417515956c5867c1917ad1c17df1de73ff4e1f90f4ee4eb13b8b006888d735df7e0f7cd5e7f9daf5da42fed239e0c84e3bbef0ef2fef1ae543f0e8ad4d7c9c8939461c8ffed61ed859053cc4451d2c300f00b18c56b8dce2b093c9774c740f6297a2b56cdb2f7a62deb51a249d6888cae11855ae0605877543f3c5665d41c585e7b68f137798590e8d347989fc4e49f2cc731a6cf0192d5af22e8ad7e260644c76d75d76b8f70056ef7d2a55f3c1896bfe34dfc399c58b626e52aed98515b509198ee23214009ce45fef2ea830820591d43ea3571af4a203f01c4a2f5b1f3501bcd4a7c95a1c7ef3aae4047ccae2025960b583064983d1c892ff956738497f20b4ddd17550007b844c3dd86daf4db5446490fae4b566a93ba6e42f651bb71e9445d002337e581528f1964e17ae52fe99a5100e388d4cea37528ca9e0165c8afcb5a1212090881e242a97d1bd7b91785dc5922582c5d8912c7106d5b254c8fc0cca2457976706bd4836728ab101ad224eee7adfc2f3bff52eb282661663924e37ce574f0cdf34cfba0113c882efebd3f8c0bd109cf35c56f618809de9a41ff28a946443e16437363c8adb31a6eedb289b1b2dd6677d780f2efe74a6003a491655967d088bc9fc5930e9f3460c51afb4f8ecd5e57090b1b291cce18db1b3bf71fd8d78f54dedb60cf1258c1976d06ad3a9c070d6016f99c6554821945295d702a1820f05c080e7c71b9d59be5018df62f221d7da2e82a9faf4679646f517c658a891d8c1bb349ffbcb835db12767a89cffcf18e634ecd5f5b5413f7a8d862bd7125d1e00788af106f63275607a9d25c23b9aee06db57499be43757774ebc3cf9c9d2db2781db3daa32a752c843a4233ceb5ae9b54c75b5b7f8d336eb0388477ca05e5b40b7cccea5cf71b16490073be089e6bf467eebfa1a03bae9c115ff8c751d4edd3d0f731224affb5554d306c04ff19b45f09a9a4129f6d044527e1afe4dc04dc09aa186e7daede408994378b303f77dec1b0e815171ad34bf69a34e27259cbf6be96d08e9b03fd6367b8a000da24e6097d5f5671b00ff1fb053fbe734a74a711df78ef86fe0a5c2728788142f42f0e661d2af960c5a357e4c234375ddd88c810419fe3f2f8e4ad3864e77772d683ce7452fdcbfd693ebe7dd7d0c369cba59c466d230415bd9a09945bc356f887537c7d01449fc6cb999f5c7eca8b40c5687197c6366dbc2ddd8120fb5169c61716e5acdbfdcf884694116c6b7d40ab2c782bb6d2d33a49adeb98f115e996686e121c05c93de04a706085c1b917afc9228a62b17efd6f70a1e44ab8ca73ca777da3aaf646002e8144ea5b6c107a9abf2dd1a15f2dd67a1578950795b05642b4d4d2c3b1d838e617c169d704a2f0cd5c6fac24eccf8ea33511b72c0fd32499f221ff649d008ecb96fdfd8b064201f99f29836b2b4894a3c9d579bda416742d70fdfc27857856507079edf2a7872b1c12a74d97deeedac9bef4d3428c44884e32ad6b5527684aaafe1b14b3c6147f226f91ae5a5ec931d82bcc7c96801445d671a368ada9a6831ca07b121c22da8421c7239f746dda0a531c38856f3b427f578170e885ee39ae600c6b7357e5904ccece51a13471c78e46ce45ffcaec7ee1f8ca7b2869b91921a09aa402ff909aed4b54d993e3fc0d51ecf1bad387dbc863ea0beddc39431e3372092ee559c12db5379a131ad15c6f64b408246e5f88f14bbdce8de3803db3f531d69406c87546e8daba7ed9b878bd5405d174b884ee4ea3638c640e181853be4d45d54c66c820331c6044f5ed386df7bfede1fdb2e153726efe9f4238ca34f238b568427d02ccf724114c01d8303090c5cd1f572e7b3bbeb74c521f2c588ed7efe0d9c71e3826796ac08c786213bd39d9460218781a7eb480fd9477b8d8bd1fa3893bbd789cc0d3b921e64b7a8c2296091babd739459b5bc615f631059197d36b18bf8f6a316f79dc350a39f8c68e1ca059f119abbbcc08bea4521f16876e928cb00d037ca1bd424bc46f176fd6dd1d365e34ad975a53f1e6d2a85610e540ad18b88a593005a554a4b0735e73ff798cf09fe7af065413967b4fb0f8c6ac593fecfb9c36daca0631f7ea46b9995210ee3edfc12cf8de5fdc5149cc9bde82b59d9f7531fa7a3e06fd6c8616c7bf9616c32eef292005313bebaa9a03eeec33389c7903d73d6ac35bed319bd040a166a1af07b14b70d72e590eabf8e310b3b16916a88636f65bd06b091a26f9760cfbe7320d019805d7f25dbf6b8cc0f11562a288cfd6448d1eba1b7854aa81ffa2006c61e97802f8628e11ed43b71d0dd0f2e2720782089d7ec170b76e6e628d10f46b61925fec011baebabdac89a15f606011381bbc6ea4e0c03bef784f53ad7ddfb847bd582ca38491e793b4ef2d1dc11659f9beb17051d071df74b80a721cc4ebf093c9503dfa957284fdd61498f94dadadda985c123f9596a1e165ccf0e4698e3ba00d32fa672359acfffb7212af72b373b188e3e1c0bc93ccaa312bdcb097ecd4a18f5949b9d543a1f10859634f0addca88cd5dd483e232e77285bdb5d44b5b97eca49d7236c55b0f19bcbf7f507e555bd2859bb814e61e1634c92ad19c8870066ee71d3fbbe4aa74cf957e34118e60ba3477e24dffcdf7257a20af81ad29835a6176b1d4f76f722d8a76f3edb9cad7f2a51652ba80fb2e8535fe90b8f63e0083a84026d93719ba7f2804c08e8ee69ecc5b426b270b3a4227257e380203731d9aea7f1dd5e6bf5e75bced0cc70b853bff5cd1f916a4404464a0b49a3aa7aae4ac63146a89aa966bcda589af3c77ad5cbf5bac88dfa72b04eb6132e04e91c0dbca4e348a76befa629f6086b7ec066bd820c7501b367608e09cf8c46b8a828650d1aa0fbd91781b1084b37cd981ed96d899ec5919b379bf7b9745a27cb8d64e8469ba27b40cdad8f5c863c236b67b81a49a84e741d34d01cc8c0603027818a38e439ab146c8b0f245fb687d95c6b01e3e0da6e41917baf9eba7e056ac45f4a7a424e824a103533008e3cf14239e6de1621fd3654eee3ebaca605f2547348e206b86fa5662c292ae543d312de1a06ba7a7162c2e771c350785c49a4ffe379b89cdd1d95cdb70fefd970293b13e2a176615a669c1c3abf4a1dad6c9666e0c6a0cf29ce8d4d4f278335131a857d2a70a9a8d56b4e51d08086b07233b14ec3d4c6c19be51bb988afb56e6c298ead33faef2d113e50ba22f567e365117b0d96469e62420de207dbfba07f07350e7f1894b98e049905c800f61eafa853dbdeef546d9866c623c971448ec44786d5a3b760584fc5f021739f4a27179d72e30b21b2009bc45a8b6e2a8f7a6aecb887816b2ebcb173fcc7e93078543beef2c935a465d9cf2df9d002dd3edfd9bdcb03ab9fc50d2722df146f924e586187b688dc9f8e9c9794fc371d885b399c9e31c1fa597b2e47c3e0b950e76a8b0c588065cff7e29dcae16fe4a6e3201df7b545918840fc6fb430248bcaada3ef62212224333ec549ac0771d1b96ba1a67cf654dbd5328d642fe97b33b8f55eea6b9872f3810c8e60a1d3597dabf5421c3eb2f27fca37a23eb397400bde3a3c53e7e0b40d1edd7b2cc8cbc9302e088eeb4f3f23f2477e4eaa5e581f1d73621fffe6c9028ea2199332f45435efae52ba5ccb7a00fecfa66a3a298e118eb1c3f3f4dd7a5aa4ea9cc36e04e4b938d8df8ee0411d95de51cb987f82a8495c3ec58b1d743a68ff30298383b9dc14f8a0f0c2395c8716c051448dc3535de39b6b3a7926895e17e2df2904bd53b2d54a653d3fcdb4f7b3d9f43457a8e63fd37044525868026cfe71f97", 0x1000}}, 0x1006)
signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x800)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c0000001c00070c27bd7000000000fe06000000", @ANYRES32=r1, @ANYBLOB="4000a2000a000100"], 0x3c}, 0x1, 0x0, 0x0, 0x4000800}, 0x0)
syz_mount_image$f2fs(&(0x7f00000000c0), &(0x7f0000000500)='./file1\x00', 0x1805a, &(0x7f00000001c0)=ANY=[@ANYRES64=0x0, @ANYRES32=0x0, @ANYRESDEC, @ANYBLOB="bd", @ANYRESDEC, @ANYRESOCT=0x0], 0xff, 0x10652, &(0x7f0000000f80)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file7\x00', 0x1c4)

18.816564395s ago: executing program 3 (id=65):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r1=>0x0})
sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000001140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001100)={&(0x7f0000000880)={0x880, r0, 0x4, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0xd52, 0x3e}}}}, [@NL80211_ATTR_HE_OBSS_PD={0x34, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_PARTIAL_BSSID_BITMAP={0xc, 0x5, "29b11c45bd75996a"}, @NL80211_HE_OBSS_PD_ATTR_NON_SRG_MAX_OFFSET={0x5, 0x3, 0xe}, @NL80211_HE_OBSS_PD_ATTR_SR_CTRL={0x5}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x6}]}, @acl_policy=[@NL80211_ATTR_MAC_ADDRS={0x58, 0xa6, 0x0, 0x1, [{0xa}, {0xa}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa}, {0xa}, {0xa}]}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_MAC_ADDRS={0x10, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}]}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_MAC_ADDRS={0x10, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}]}], @NL80211_ATTR_HE_BSS_COLOR={0x24, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xa}]}, @NL80211_ATTR_PRIVACY={0x4}, @crypto_settings=[@NL80211_ATTR_AKM_SUITES={0x18, 0x4c, [0xfac11, 0xcd55452426ac23d0, 0xfac07, 0xfac11, 0xfac04]}], @beacon=[@NL80211_ATTR_IE={0x1c3, 0x2a, [@random={0x4, 0xf0, "6b3daf505b9061ae44b26ed2bad1152c07c122d40b4e70350cbfe2a4ff4b7000146bccdfa11d0a02c0ee9338912eaeca00efe0b98f69df58ca9d397c1ea4569757afdba4c8a8ceb5360c9555e10aba508abed6f3405b4428aed32526a3140120d4efe878663c5b3b131d40f214c38a57d5457263487ed36c1d6d40fc073c0b7a501360355a9781fbd9cac14af987f1404c18cfb39c7248b663a4142818603c168ddac9da029037bf3e26b869a7208b1d96f1663402fc205b2df4ced7d8d1e9407982e189c7653c8a7cfef400073b3c147407680032d960305dd70f83ec3b4bc4150c157a22efab7225c43c63abdfb206"}, @ht={0x2d, 0x1a, {0x800, 0x1, 0x4, 0x0, {0x4, 0x0, 0x0, 0xc, 0x0, 0x1, 0x1, 0x0, 0x1}, 0x300, 0x5, 0x4}}, @cf={0x4, 0x6, {0xf7, 0x5, 0x9, 0x1dbf}}, @random_vendor={0xdd, 0x3d, "91c559331f7021065e3d09018bd407da85adb4333dc8f98d0abbd7964733705ddf4f45ebe5e2fcba809f4edbe984a59c0ecd3190ea383eebe2838f3734"}, @fast_bss_trans={0x37, 0x60, {0x9, 0x1, "ad5b480671071387252ee8820d654bde", "5cbea89e640c94eefbb94f4009d94f09a6c568ea40e1113c97f2510d34843502", "8d25eb024327e0a29a5073a578d7a188534f2d16e2d161944913474cd4751e63", [{0x2, 0xc, "ec5ec64dbc620922076f89df"}]}}, @peer_mgmt={0x75, 0x6, {0x0, 0xfff8, @void, @val=0x39, @void}}]}, @NL80211_ATTR_FTM_RESPONDER={0x1d4, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_CIVICLOC={0x1a, 0x3, "e30f9e3f7315f5442658e61148bfb2b7a2a98d66f213"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0xb4, 0x3, "4cda3abbe9de67f65d9a4e0c0754d9c34770448c50cf735f994664d6cc4b119e61d584774d1f98baff39a846b0dc2f973c34f166a20f82caa337c298b91c3ebece145c05cd89e2482a80b3baa7c826c3a7108d1f2423ca6c99ad847e18ee275e66cfe121a630cb009f9ec9b7ee2bedd7b6374472e133d56727ac486674574cef32246723662f7c630ac69a57d2b9474d98d3066e4d2699f98de87cd8008934801694fd0fda4c7ae18451f29cb48488ad"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0xf6, 0x3, "408d4a1d7a583b9c0605be03634a3dd2fd09ffc09fb327a87ab8608e857dfce7dbf1ee504ba6586bd8927211dba289ae1a0cd951205eba0ae317d97b8889fdac268bbf71791c8ac72695c8b1b628918eb5f05a5bbefffff74c8946a863db09c8cb7f4f79ba1b9bab9e76ce4d4042f76fda1beffeeaa0933d11b9befdd5058fb3a20099f934b2b39b2f6d635fcf005ffad2d62dec1a33d51a7dd58bddde0fe3c700201850f8861dd1aa5437ea2f91cad7ffb0b823bf030091c7362a3da99f548bf60672846b6b813adac1e023fe42909ae4b52c3f780f4c0663eafc0259a283db7855561ac963f0a68c127c7d1c1fb16ff410"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}, @NL80211_ATTR_BEACON_HEAD={0x3b2, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x7ff6}, @broadcast, @broadcast, @random="072012a3e8e9", {0x9, 0x7f}, @value=@ver_80211n={0x0, 0x3982, 0x1, 0x2, 0x0, 0x2, 0x0, 0x0, 0x1, 0x1}}, 0x9f31, @random=0x1, 0x40, @void, @void, @void, @val={0x4, 0x6, {0x80, 0xff, 0x7, 0x5}}, @void, @val={0x5, 0xc1, {0x2, 0xc7, 0x9, "db512dd3f3192be799b34958aceb545c29955f76e5483a2c6582230727d61cb3817332252bea1737a0c368899585d7ed4509ed7e4e055e16e89e118ea836501f2a823564e6ef5030ba8d43a776d20d91bda46517e697fbadd8a283419b7dddd6e9ab147db5134a4c023bfd66a8e8871371f9ab29029a379f9652767b77baa7e1883635201c4353a6afba2342ff3bfa4c29d0f049dbd6c927d47762ad6a902291904f1b731fc221446631d273f880fb0e45d80a3284f9122c1d6935aecc02"}}, @void, @void, @void, @void, @void, @val={0x71, 0x7, {0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0, 0x1, 0x68}}, @val={0x76, 0x6, {0xf, 0x4, 0x25, 0x62}}, [{0xdd, 0xd7, "693dc71c960034b3e2b7ef3d22a43130756313572ec146743831d79dfc2f3b7462d8e8800b6975a3f23153877759296e3dfe210434184691cd84068f9e7570985aab7488f38c99da4a6d1a8cf5edc6ba3268a8e3dbbbcc7237504f75357f784c6f18b274dec071ce4aac213f8fad8175d50d09f4ef8b6c70aedd01b6dabdb796857b8c517415a29e9a9abd4c9cd7e8278720c15526513569073cc900ceb07dbff7d8c746612081f9c6e24a2c2ac48c99de98e0bded9833e2258703d286866f588a1228685b955a70768342f0111d6a30350812a0ff894f"}, {0xdd, 0x16, "04773fa16401d54653d3721c8a947eec25f6253ca078"}, {0xdd, 0xc7, "adab6073df4a4ec20d2dc470add768d5775cd5eb10d52eec903a90183805b82ef6d07b822c6dde27b71a7bc1877c3b750aab3b94815727e2a958fcb3de50b305bc7425955d3ca57aab3363ae8597d25d98ea7c5272f74fa70eb774922319cede9ab4dea3d07a0ed5a3227bc4b3ff3c562631e019e35ad661de1d6bd09776f24d165bce10a289d7f0c9b562bb1333797220db8786194851604252589b8d80319009078760efa1d59723f5855ffc9880cceb57c189d50059b2457889575f472e0ee862a47428a881"}, {0xdd, 0xee, "66bfd9c2af892998c3625ab79de9b13d16a801e8da2d9b871eb69fd7a856b6e8921878750d134424f89b7cb61fb0b2444263a747c81b0fdba90000d3f04dd16a6bb26fbc8c9d8a1005fecb5a1a678d1b71637229bb581c47ae6834b2d42e5c12bfe7a4019e97a5a18147de17162be2255040b6703c1362a488f683c91367b4d8cd071a980580bb1965ebe7d095ca3c206a1529778a1a73376253428fb82d8916df42fb61e1ea749be99186886a4bf84853ab3917139384e77855521432735e0d59e032705f725980d07103d3dd5f6722ded0f811547ea7392119539e4fe1ffb7c2f0f639f4ba8496a061ab5cbb62"}]}}]]}, 0x880}, 0x1, 0x0, 0x0, 0x64000041}, 0x40004001)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000840)=ANY=[@ANYBLOB="240000001000010700000000000000000a000000060001001300000008000a0005"], 0x24}, 0x1, 0x0, 0x0, 0x8040}, 0x0)
r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
setpgid(r2, r2)
setpgid(0x0, r2)
tkill(r2, 0x7)
wait4(r2, 0x0, 0x2, 0x0)
syz_open_procfs(r2, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000002f00090027bd70000000000004000000"], 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x10)
listen(r3, 0x2)
r4 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', <r5=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=@bridge_dellink={0x20, 0x11, 0x5, 0x1000000, 0xfffffffe, {0x7, 0x0, 0x0, r5, 0x62001}}, 0x20}, 0x1, 0x0, 0x0, 0x800c000}, 0x0)
close(0x3)

18.449537153s ago: executing program 3 (id=67):
socket$netlink(0x10, 0x3, 0x0)
mkdir(&(0x7f0000000000)='./my_sysfs\x00', 0x1ff)
mount(0x0, &(0x7f0000000200)='./my_sysfs\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./my_sysfs/bus/pci/devices/0000:00:03.0/resource0\x00', 0x0, 0x0)
pread64(r0, &(0x7f0000000240)=""/1, 0x1, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000140)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r4)
r5 = socket$igmp6(0xa, 0x3, 0x2)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c80)={'lo\x00', <r7=>0x0})
ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000440)={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1e}}, 0x7e, r7})
mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000)
ioctl$sock_inet6_SIOCDIFADDR(r5, 0x8936, &(0x7f0000000140)={@loopback, 0x80, r7})
r8 = creat(&(0x7f00000000c0)='./tracing/dynamic_events\x00', 0x102)
write$binfmt_script(r8, &(0x7f0000000100)={'#! ', './tracing/dynamic_events', [], 0xa, "de"}, 0x1d)
ioctl$sock_bt_hci(r8, 0x400448e6, &(0x7f0000000180)="ebd5ab43a486be03f18dc2af0b9a9a81b5f3f7ebdca014bbeacc00abdb52270b8a6d543c19bf89f585fd22e6d1b1e9fae92d73b90ae58518e4a6f2b194b362f9ba3f033e721370e8e8e375b8887cf971e46f2aa57e2c3e4698a0bfe44f65ce9f0f0811ea1a31e1d4910ddf451300ecb60b02b236b26be2fa152beb1e64fe89e0af74793f0dc0b49faa9e6d6fca164eca7c2bc073fda21ee69a9a0364937f16896edf58f2fafca05caef3c8e85308077897e3035e68ed4439c427d2729d086a4145953e6ec76f98901fc66e96fbd3087f8d4343f019bce8481cc537540c5a3cbd66d7d387")

17.512757056s ago: executing program 3 (id=71):
r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="120100020000000800000000000000000001090224000100000021090400000303000100092100000001222600090581030800070f02e78bdda75b5a6e73f389138a6f4484b9098b9c9a66364075e5c4385d850d0295b448baad1e762a55ef24e9346a3d29bc247821b9305815ce7a30a4e4bc2306a4d1003892e4ee94a3b32c192efa8964e0e7b12074cff80dbad844eceb5619df01f476b5a10f5f1b522cb9bf66a469f07e4783254908f486d09ee7dcff29ac5f71799411f6b85ebfe2f2375aa86c001d473559f13788896240b5dd08fd29aec4770d7f5ebef7eedccac95e851c86693f09"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f00000002c0)='./proc\x00', &(0x7f0000000300)='proc\x00', 0x140006, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./proc/sys/kernel/printk_devkmsg\x00', 0x2, 0x0)
write(r1, &(0x7f0000000180)="6f050d05d60400", 0x7)
syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="4021270000002701f70ba3810300001b00000085e839c924d0d39ddf0000cb4fdca0560fb30d54f325bc85d43e"], 0x0, 0x0, 0x0, 0x0}, 0x0)

10.600559263s ago: executing program 1 (id=98):
r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x406281)
ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f0000000080)=[0xa8e, 0x2913579c])
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000200)=@file={0x0, './file1\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480))
clock_gettime(0x0, &(0x7f00000000c0)={<r4=>0x0, <r5=>0x0})
clock_gettime(0x0, &(0x7f0000000180)={<r6=>0x0, <r7=>0x0})
setitimer(0x2, &(0x7f0000000040)={{r4, r5/1000+10000}, {r6, r7/1000+60000}}, 0x0)
syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000200)='./file0\x00', 0x800, &(0x7f0000000340)=ANY=[@ANYRES32=0x0, @ANYRES64, @ANYRES64, @ANYRES16], 0x1, 0x374, &(0x7f0000000f80)="$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")
r8 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0xdc)
fallocate(r8, 0x0, 0x0, 0x8800000)
r9 = open(&(0x7f0000000100)='./file1\x00', 0x147842, 0xc6244a827d8cfb40)
preadv2(r9, &(0x7f0000000040)=[{&(0x7f0000001200)=""/4096, 0xfffffdef}], 0x1, 0x0, 0x0, 0x7)

9.364297563s ago: executing program 1 (id=105):
r0 = gettid()
timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
capget(&(0x7f0000000000)={0x19980330}, &(0x7f0000000040)={0x0, 0x6, 0x4000, 0x8b, 0x2, 0xfffffffc})
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x20001b, &(0x7f0000000040), 0x3, 0x54f, &(0x7f0000000b80)="$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")
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
ptrace(0x8, r0)
fstat(r1, 0x0)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000180)='batadv0\x00', 0x10)
gettid() (async)
timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) (async)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) (async)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) (async)
timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) (async)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) (async)
capget(&(0x7f0000000000)={0x19980330}, &(0x7f0000000040)={0x0, 0x6, 0x4000, 0x8b, 0x2, 0xfffffffc}) (async)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x20001b, &(0x7f0000000040), 0x3, 0x54f, &(0x7f0000000b80)="$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") (async)
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
ptrace(0x8, r0) (async)
fstat(r1, 0x0) (async)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000180)='batadv0\x00', 0x10) (async)

9.07927182s ago: executing program 1 (id=107):
r0 = syz_open_dev$loop(&(0x7f0000000440), 0x6, 0x14f882)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000040)={{{@in=@rand_addr=0x64010100, @in6=@local, 0x4e23, 0x0, 0x3, 0x8000, 0x2, 0x0, 0x0, 0x2b}, {0x0, 0x1, 0x0, 0x1000080000000, 0x95, 0xfffffffffffffffd}, {0x40, 0x0, 0x0, 0x2}, 0x8, 0x0, 0x1, 0x1, 0x3}, {{@in6=@private2, 0x0, 0x33}, 0xa, @in=@empty, 0x3507, 0x4, 0x0, 0x0, 0x0, 0x7c, 0xfffffffe}}, 0xe8)
r1 = socket(0x1, 0x5, 0x0)
close(r1) (async)
close(r1)
openat$procfs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/slabinfo\x00', 0x0, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r2 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000500)={0xe000200c}) (async)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000500)={0xe000200c})
epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000040)={0x80002017})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) (async)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000005c0)={r3, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0xfffffffffffffffd, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x4, 0x40000000000000]}}) (async)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000005c0)={r3, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0xfffffffffffffffd, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x4, 0x40000000000000]}})
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000700)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x78, 0x78, 0x6, [@typedef={0x10, 0x0, 0x0, 0x8, 0x5}, @volatile={0x7, 0x0, 0x0, 0x9, 0x5}, @decl_tag={0xb, 0x0, 0x0, 0x11, 0x3, 0xffffffffffffffff}, @var={0x9, 0x0, 0x0, 0xe, 0x5, 0x2}, @ptr={0x5, 0x0, 0x0, 0x2, 0x4}, @enum={0x10, 0x5, 0x0, 0x6, 0x4, [{0x10, 0x200}, {0x2, 0x3}, {0x7, 0x7}, {0x2, 0x401}, {0x7, 0xf}]}]}, {0x0, [0x61, 0x2e, 0x2e, 0x2e]}}, &(0x7f00000007c0)=""/190, 0x96, 0xbe, 0x1, 0x7}, 0x28)
syz_usb_connect(0x3, 0xb3, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010002ef020140000000000001000000010902a1000201008032080b00020e03000009040000000e0100000d240100012700006cdc020101112402010102000000000000000002000009240302010100010009020000000e020000c7240101470081000200000001001b2404"], &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x7, [{0xc9, &(0x7f0000000440)=@string={0xc9, 0x3, "609e6d41a67552b9baf541a3d5ffe30394fbadbe90daa11f6a9b7f90a6834f4095ffcc845d725a032c4fde4825bd39d7bedb528460eb126ac1dd87ec9caaba7c1a3aa721e965b214bfa046a985bf32d9831b46f4187721a5d1ba40894a745bdf177997274570d92cce508fe543ed790e829cc9a4994fd545c6177890cd33daf1eecf023f3bc6f3c5b5d7565986fbf879815a2c5467e491b61b7fc80a26a6482723c87f711e5b42dc907122743c1e9a3a53947eea3db48483e100bf1f1fcc96b8c6f0584ea717fd"}}, {0xc2, &(0x7f00000000c0)=@string={0xc2, 0x3, "ffdf8fec36ef0bdce8e673a0924a1e367822ed3e689ef79a66cb178cfb9ecb03d4c2740350a70d92e1cc62c93ece63cd458d4b9966ad7b17a47bb14521c486716e070adc6af0b0ec322f797c272cfcc138ac5a784b94a080e24b759aae4bb16b985f9694ceb4f2c318053bd93c5ce21c5795d939279b454fcafe9d1f1a621f74570e2d52634f5d0208398045b680e9b0ee7ab17904a60f280e35b8f937f89808877421ce2f63abdd334a0e7f982b9362396427ef7e4e5e84df2b807b1e85a314"}}, {0xe, &(0x7f0000000000)=@string={0xe, 0x3, "344b9de281061afd5317de1a"}}, {0x41, &(0x7f0000000200)=@string={0x41, 0x3, "52b8f19ed6e124fc510601fe52d65466627b1f7c633784ca673ad9db156205a226bd690e8d0b41c3ba8e31560b362fd603320728d3b48a7b4b4ada8e37950f"}}, {0x1f, &(0x7f0000000080)=@string={0x1f, 0x3, "f495afcd1c85297f45e27ae7ca593775c81a9621e91ea11ed6200e639c"}}, {0x58, &(0x7f00000002c0)=@string={0x58, 0x3, "1a4657df9970455990276cb4e44d66515b85e409c2a406864c385ebf1f30e0ed85bb605193221cb2cad8ba7745dae55ee4fa1ba4d9cdf6422ac3a75d98a2e8f432d0f779cfac7aa776100f32ed9c1c3c9fc45b8c6e6a"}}, {0x2e, &(0x7f0000000040)=@string={0x2e, 0x3, "cf40cef7e6997790fdfca75b8abe63d7f16ef328e6080e5e3c55c90d033cd58238eb96ef8711f74dd30aa528"}}]})

6.506772372s ago: executing program 2 (id=122):
mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000500)='./proc\x00', &(0x7f0000000600)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./proc/sys/net/ipv6/conf/syz_tun/addr_gen_mode\x00', 0x1, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
r2 = getpgrp(0xffffffffffffffff)
write$cgroup_pid(r0, &(0x7f0000000040)=r2, 0x12)
read$FUSE(r1, &(0x7f0000000c00)={0x2020}, 0x2020)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1)
r3 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x80001)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0)
mkdirat(r4, &(0x7f0000000200)='./file1/file4\x00', 0xd0)
renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file4\x00', 0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x4)
move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0x8, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x0, 0xd80, 0x0, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)
read$FUSE(r1, &(0x7f0000002100)={0x2020}, 0xfd22)
syz_usb_connect$uac2(0x3, 0xa8, &(0x7f0000000280)=ANY=[@ANYBLOB="120110030000004082054c00400001020301090296000301053009080b00010107208c0904000000010120000924010040041d000708240b0001ff23000c240302070300040007008109040100000102f700090401010101022000090501090002030b04082501000040040009040200000102200009040201010102200009240201000f0e07011024010201000400000008b8000000030905820908"], &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0})

5.964515335s ago: executing program 1 (id=123):
syz_usb_connect(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0xe9, 0x79, 0x56, 0x40, 0x781, 0x5, 0x5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x2, 0x95, 0x10, 0x99, "", [{{0x9, 0x4, 0x2b, 0xd, 0x2, 0x39, 0xb3, 0x92, 0x9, [], [{{0x9, 0x5, 0x1, 0x2, 0x40, 0x9, 0xb9, 0x1}}, {{0x9, 0x5, 0x82, 0x12, 0x8, 0x4, 0x4, 0x3f}}]}}]}}]}}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0)
r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x109082, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x218888, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}})
r4 = socket$igmp(0x2, 0x3, 0x2)
syz_usb_connect$uac1(0x1, 0xb2, &(0x7f0000000380)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x47f, 0xc010, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa0, 0x3, 0x1, 0xbf, 0x90, 0x3, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x7, 0x1b}, [@feature_unit={0xb, 0x24, 0x6, 0x4, 0x4, 0x2, [0x63cf7a501284af52, 0x2], 0x5b}, @mixer_unit={0x6, 0x24, 0x4, 0x6, 0x7, "a4"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x1000, 0xcd2, 0xc, 0x7}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x6, 0x4, 0x1, 0x17, 0x3}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x2, 0x7f, 0x5, {0x7, 0x25, 0x1, 0xc, 0x6, 0x1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0xbcac, 0x0, 0x2, 0x8a}, @format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x8, 0x700, 0xf0, "d444ad332cfe267c87"}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x6, 0x4, 0x4, {0x7, 0x25, 0x1, 0x8, 0x40, 0xa}}}}}}}}]}}, &(0x7f00000004c0)={0xa, &(0x7f0000000440)={0xa, 0x6, 0x310, 0xb4, 0x66, 0x5, 0xff, 0x8}, 0x23, &(0x7f0000000480)={0x5, 0xf, 0x23, 0x3, [@ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x7, "eab48952ba22d966afe67d89f5121fc3"}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x9, 0xb, 0x1}]}})
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'netdevsim0\x00', <r5=>0x0})
r6 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x25, &(0x7f0000000200)=0x471e, 0x4)
bind$inet(r6, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f)
ioctl$int_in(r6, 0x5452, &(0x7f0000000040)=0xf)
connect$inet(r6, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10)
sendmmsg(r6, &(0x7f0000007fc0), 0x800001d, 0x300)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r7, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
setsockopt$inet_udp_encap(r7, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4)
syz_emit_ethernet(0x6f, &(0x7f00000001c0)={@link_local, @random="4bb7e00d2cac", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x61, 0x100, 0x0, 0x2, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x4e20, 0x4d, 0x0, @gue={{0x2, 0x1, 0x0, 0x3, 0x100, @val=0x80}, "4b4a3d695ab6daa636d9ad08d8e5d666fb880aa86a09aa516859ef5777074786bf872105f67a387310159baa155c824691098b3ea9dabd1c7c8d3a7b96"}}}}}}, 0x0)
recvmmsg(r6, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0)
sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="5c0100001000130700000000ffdbdf25fc010000000000000000000000000000ff0200000000000000000000000000010004fffe4e2100020000000021000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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", @ANYRES32=r5, @ANYRES16=r0], 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2014)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a28000000000a030000000000000000000300000308000240000000040900010073797a300000000028000000000a010400000000000000000300000a0900010073797a30000000000800024000000006"], 0x78}, 0x1, 0x0, 0x0, 0x24040010}, 0x20000080)
sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000b80)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0800034000000004400000000e0a010200000000000000000a0000020900010073797a31000000000900020073797a320000000014000380100000800c00018006000100c87e0000140000001100010000000000000000000100000ae321e59ea84a80a022bff4191f3a25a6b0"], 0xac}, 0x1, 0x0, 0x0, 0x4000850}, 0x8000)
stat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, <r10=>0x0})
getresuid(&(0x7f0000000780)=<r11=>0x0, &(0x7f00000007c0), &(0x7f0000000800))
sendmsg$nl_xfrm(r1, &(0x7f0000000b40)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000840)=@flushpolicy={0x2a4, 0x1d, 0x400, 0x70bd2a, 0x25dfdbfd, "", [@address_filter={0x28, 0x1a, {@in6=@mcast2, @in6=@mcast2, 0x2, 0x4, 0x93}}, @proto={0x5, 0x19, 0xff}, @iptfs_init_delay={0x8}, @policy={0xac, 0x7, {{@in=@remote, @in=@loopback, 0x4e20, 0x1821, 0x4e24, 0x1, 0x2, 0x20, 0xa0, 0x2b, r5, r10}, {0x2, 0x2b, 0x3, 0x6, 0x5, 0x40, 0x8001, 0xe00000}, {0x6, 0x9, 0x2, 0x7fffffffffffffff}, 0x2, 0x6e6bb3, 0x1, 0x1, 0x1, 0x3}}, @replay_esn_val={0x20, 0x17, {0x1, 0x70bd27, 0x70bd26, 0x70bd27, 0x70bd25, 0xfffffffb, [0x4]}}, @sa_dir={0x5}, @mark={0xc, 0x15, {0x350759, 0x1}}, @etimer_thresh={0x8, 0xc, 0x1}, @sa={0xe4, 0x6, {{@in6=@private1, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4e24, 0x0, 0x4e22, 0xff5c, 0xa, 0x20, 0x80, 0x2c, r5, r11}, {@in=@rand_addr=0x64010102, 0x4d4, 0x2b}, @in=@private=0xa010101, {0x1, 0x3, 0x26a3b8b5, 0x6, 0x2, 0x6, 0x7, 0x206b}, {0x5, 0x92ab, 0x9, 0x800}, {0x2, 0x7, 0x3}, 0x70bd2d, 0x0, 0x2, 0x5, 0xff, 0xca}}, @algo_auth_trunc={0x8d, 0x14, {{'sha256-ni\x00'}, 0x208, 0x40, "0d33f0d7a4dd7322ccd034d638f189b19507bb0c92a0b0fef3fedfadedb659d7dcfc54ede46d2390b794eaddf904f3c34cd81b6e86087f25e71b9ddede7f41e487"}}]}, 0x2a4}, 0x1, 0x0, 0x0, 0x84}, 0x40880)

5.599530224s ago: executing program 0 (id=124):
r0 = socket$netlink(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x5}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x800}, @TCA_TBF_PARMS={0x28, 0x1, {{0x81, 0x0, 0xe, 0x7f, 0x800, 0x5}, {0x7, 0x2, 0x7, 0x1003, 0x2, 0x20000007}, 0x6db6312a, 0x7, 0x1257}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40008c1}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0x3}, {0xfff2, 0xb}, {0x0, 0x1}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0xc0c0}, 0x44850)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, {0xb, 0xd}, {}, {0x8}}}, 0x24}}, 0x41814)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x2000003, &(0x7f0000000800)={[{@quota}, {@noblock_validity}, {@journal_dev={'journal_dev', 0x3d, 0x3}}, {@journal_dev={'journal_dev', 0x3d, 0xb}}, {@journal_async_commit}, {@sb}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40}}]}, 0x1, 0x4f9, &(0x7f00000009c0)="$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")

5.399399739s ago: executing program 0 (id=125):
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001d00)={0xffffffffffffffff, 0xe0, &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0xa, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001ac0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], <r0=>0x0, 0x72, &(0x7f0000001b00)=[{}], 0x8, 0x10, &(0x7f0000001b40), &(0x7f0000001b80), 0x8, 0x49, 0x8, 0x0, 0x0}}, 0x10)
r1 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000640)=@newtaction={0x154, 0x30, 0x829, 0x0, 0x0, {}, [{0x140, 0x1, [@m_skbedit={0x13c, 0x1, 0x0, 0x0, {{0xc}, {0x4a, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_PRIORITY={0x8}]}, {0xf0, 0x6, "0bc71ed9be22e5ef46670625815938084a30cdca4d7448f5e3c89f4652d3c0da667c94e956e40faa7ac6ae85fc4bfbdc5947f90687d29bba0d39585935638f484fd5e237d0575a3bd2bd7cc9ad0a0e943c05a69b52ffb2f9d501992c0aa9b4781613f5a9f1d45724c9b72c47d15e1644f342dd2a163aba9e9e7f28a9ed8b49eeb115c5ec4791c624dc831506d94c639c9e439b5828c7c42bebb7eede5281448c4a8e5438f3c2a678a3475a12cb4f51cfc310253c7e2e4aefc793ca02dece90b4ddbe3b36828dbcaf7156d864337d324664525816137ec2eb763c309242b61f345d5bd73948a10a5aab4ef93e"}, {0xc}, {0xc}}}]}]}, 0x154}}, 0x0)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=r0, 0x4)
r2 = socket$inet6_udplite(0xa, 0x2, 0x88)
recvmmsg(r2, &(0x7f0000005c80)=[{{&(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000140)=""/216, 0xd8}, {&(0x7f00000002c0)}, {&(0x7f0000000300)=""/94, 0x5e}, {&(0x7f0000000380)=""/85, 0x55}], 0x4, &(0x7f0000000500)=""/111, 0x6f}, 0x15b}, {{&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000840)=""/64, 0x40}, {&(0x7f0000000880)=""/247, 0xf7}], 0x2, &(0x7f0000000240)=""/45, 0x2d}, 0x4}, {{&(0x7f0000000ac0)=@xdp, 0x80, &(0x7f0000001000), 0x0, &(0x7f0000001280)=""/192, 0xc0}, 0x8}, {{&(0x7f0000002f80)=@nl=@proc, 0x80, &(0x7f0000003040)=[{&(0x7f0000003000)=""/14, 0xe}], 0x1, &(0x7f0000003080)=""/55, 0x37}, 0x1}, {{&(0x7f00000030c0)=@alg, 0x80, &(0x7f0000003340)=[{&(0x7f0000003140)=""/208, 0xd0}, {&(0x7f0000003240)=""/233, 0xe9}], 0x2, &(0x7f0000003380)=""/4096, 0x1000}, 0xe}, {{&(0x7f0000004380)=@x25={0x9, @remote}, 0x80, &(0x7f0000005400)=[{&(0x7f0000001d40)=""/4106, 0x100a}], 0x1, &(0x7f0000005440)=""/55, 0x37}}, {{&(0x7f0000005480)=@x25, 0x80, &(0x7f0000000580)=[{&(0x7f0000005500)=""/107, 0x6b}, {&(0x7f0000005580)=""/151, 0x97}, {&(0x7f0000005640)=""/70, 0x46}, {&(0x7f0000000b40)=""/89, 0x59}], 0x4, &(0x7f0000000a80)=""/38, 0x26}, 0x3ff}, {{&(0x7f00000057c0)=@l2tp={0x2, 0x0, @multicast2}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000005840)}, {&(0x7f0000000bc0)=""/16, 0x10}, {&(0x7f00000058c0)=""/73, 0x49}, {&(0x7f0000000980)=""/137, 0x89}, {&(0x7f0000005a00)=""/216, 0xd8}], 0x5, &(0x7f0000001180)=""/219, 0xdb}, 0x54}], 0x8, 0x40000041, &(0x7f0000005e80))
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x5d, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000009800000001"], 0x50)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x129042, 0x15)
openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0)
r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
setpgid(r5, r5)
setpgid(0x0, r5)
wait4(r5, 0x0, 0x2, 0x0)
r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
socket(0x10, 0x3, 0x0)
waitid(0x2, r5, 0x0, 0x4, 0x0)
setpgid(r6, r6)
setpgid(0x0, r6)
syz_emit_ethernet(0x11, 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0xd)
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r8, 0x4008ae8a, &(0x7f0000000080)={0x2, 0x0, [{0x1, 0x200, 0xa, 0x6, 0x9}, {0xa, 0x6, 0x8b4c, 0xb635, 0x401}]})
getsockopt$sock_buf(r4, 0x1, 0x1f, &(0x7f0000000e40)=""/166, &(0x7f0000000f00)=0xa6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x4000)
bind$netlink(r4, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfb, 0x4}, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

4.725081675s ago: executing program 2 (id=127):
openat(0xffffffffffffffff, 0x0, 0x0, 0x1c0)
r0 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2009406, &(0x7f0000000480)={[{@dax_always}, {@init_itable}, {@noload}, {@i_version}, {@dioread_lock}, {@grpjquota_path={'grpjquota', 0x3d, './file0'}}], [{@permit_directio}, {@obj_user={'obj_user', 0x3d, 'journal_ioprio'}}, {@obj_user={'obj_user', 0x3d, 'min_batch_time'}}, {@pcr={'pcr', 0x3d, 0x19}}, {@context={'context', 0x3d, 'sysadm_u'}}, {@smackfsfloor={'smackfsfloor', 0x3d, '$'}}]}, 0x1, 0x45a, &(0x7f0000001740)="$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")
flock(r0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x9)
prlimit64(0x0, 0x7, &(0x7f0000000040)={0x0, 0x100}, 0x0)
r2 = dup(r1)
openat$cgroup_ro(r2, &(0x7f0000000140)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0)
r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r3, 0x40045402, &(0x7f0000000040)=0x1)
readv(r3, &(0x7f0000000200)=[{&(0x7f0000000640)=""/201, 0xc9}], 0x1)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000280)={{0x1, 0x1}})
read(r3, &(0x7f0000000740)=""/4096, 0x1000)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r3, 0x40505412, &(0x7f00000000c0)={0x7, 0x9dc5, 0x0, 0x0, 0xf})
socket$netlink(0x10, 0x3, 0xa)
memfd_create(&(0x7f0000000040)='rootmode', 0x0)
socket$netlink(0x10, 0x3, 0x2)
userfaultfd(0x80001)
socket$packet(0x11, 0x3, 0x300)
socket$igmp(0x2, 0x3, 0x2)
socket$inet_udp(0x2, 0x2, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2)
ioctl$KVM_SET_CPUID2(r6, 0x4008ae90, &(0x7f0000000300))
syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_tables_targets\x00')
ioctl$KVM_RUN(r6, 0xae80, 0x0)
socket$inet6(0xa, 0x80001, 0x0)
socket$inet6(0xa, 0x2, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0)
pipe(&(0x7f0000000040))

4.621193888s ago: executing program 2 (id=128):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80)
ftruncate(r1, 0x2007ffb)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000100), 0x2, 0x4fd, &(0x7f0000000b00)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000500)={0xc2fe, {{0x2, 0x4e22, @local}}}, 0x88)
r2 = getpid()
sched_setscheduler(r2, 0x1, &(0x7f0000000240)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[], 0x48)
ptrace$pokeuser(0x6, r2, 0x3, 0x467a)
close(r5)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0100000004000052fe1877000000000000000000", @ANYRES32=0x1, @ANYBLOB="7eba00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200e60000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r7=>0x0})
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r8, r7, 0x25, 0x0, @void}, 0x10)
syz_emit_ethernet(0x4e, &(0x7f00000005c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0000000000008100160086dd600a8435001406fffe800000000000000000000000000000aa00004e2100"/62, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5002000090780000"], 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x4000087, 0x2, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000140)={'syzkaller0\x00', 0xd132})
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="9601"], 0x6e8a)
syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000008000/0x400000)=nil)
mkdir(&(0x7f0000000100)='./bus\x00', 0xe8)
sendmsg$nl_route(r0, 0x0, 0x20000050)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4400000010006b0400000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="40180000042c0400240012800b00010062726964676500001400028005002b00000000e14bc799ba708a373e040028e188c107548dea39cfb7f22e217e3fc0c78e85c80125fee61923eff3b6c6255a9b9d37960f9fd1f6d729dd59ebea371971459082701b82e7550600000073f40e882cce517c2d72454770f7d0b090644f5b70e46db74be9600f71bf52066d3236ce9b74a26e30278d7ed555548b6e62d271778a836b6de27442789157efca60bab047ed8f5c55009bffbb5f8693da0793f8ae93a92f6b7bcbd4bc13daa5dee0c78788c448e89c5f4018d343132b6f13b9736cbe02e89f8c3db64d79737fb38db7c56b178a35a1"], 0x44}}, 0x24)

4.484616001s ago: executing program 0 (id=129):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
syz_usb_connect(0x0, 0x63, 0x0, 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000700)='notify_on_release\x00', 0x2, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
write$cgroup_int(r1, &(0x7f00000003c0)=0x1ff, 0x12)
mkdirat$cgroup(r0, &(0x7f00000001c0)='syz0\x00', 0x1ff)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0xfff, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x1}, 0x50)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='ns\x00')
fchdir(r3)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000480)={0x1b, 0x0, 0x0, 0xe, 0x0, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4}, 0x50)
r5 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000540)=@generic={&(0x7f0000000500)='./file0\x00', 0x0, 0x8}, 0x18)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0xc, 0x5, 0xfae, 0x6, 0x70400, 0xffffffffffffffff, 0x100, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x4}, 0x50)
r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000600)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0xb4, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2}, 0x50)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000740)=@bpf_ext={0x1c, 0x14, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@ldst={0x3, 0x1, 0x4, 0x8, 0x6, 0x50, 0xffffffffffffffff}, @exit, @btf_id={0x18, 0x6, 0x3, 0x0, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0x4}], {{}, {}, {0x85, 0x0, 0x0, 0x1}}}, &(0x7f0000000400)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f0000000440)={0x5, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x2ea20, 0xffffffffffffffff, 0x0, &(0x7f0000000680)=[r4, r5, r6, r7, 0x1], 0x0, 0x10, 0xffffffff}, 0x94)
r8 = socket$inet_udp(0x2, 0x2, 0x0)
unshare(0x6020400)
bpf$MAP_LOOKUP_ELEM(0x15, 0x0, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
r9 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402609333340000000000109022400010000000009040000010301000009210000000122010009058103"], 0x0)
syz_usb_disconnect(r9)
syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201100100000040580403"], 0x0)
syz_usb_control_io(r9, 0x0, 0x0)
ioctl$sock_inet_udp_SIOCOUTQ(r8, 0x5421, &(0x7f00000000c0))
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0700000004000000000900000500000028000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000d0367648b2d3491568b1d144eb0000000000000000"], 0x50)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000440)={r10, &(0x7f0000000140), 0x0}, 0x20)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000200)={[{@fat=@nfs}, {}, {@fat=@flush}, {@shortname_winnt}, {@utf8}, {@numtail}, {@utf8}, {@uni_xlate}, {@uni_xlate}, {@numtail}, {@shortname_mixed}, {@fat=@codepage={'codepage', 0x3d, '932'}}, {@iocharset={'iocharset', 0x3d, 'cp850'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-7'}}, {@iocharset={'iocharset', 0x3d, 'cp874'}}, {@fat=@check_strict}]}, 0x41, 0x38c, &(0x7f0000000380)="$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")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0)

4.012743613s ago: executing program 4 (id=130):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
prlimit64(r0, 0x5, &(0x7f0000000240)={0x10001, 0xff}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = inotify_init1(0x0)
inotify_add_watch(r4, &(0x7f00000006c0)='.\x00', 0x40001a2)
socket$key(0xf, 0x3, 0x2)
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDSIGACCEPT(r5, 0x5607, 0xe)
ioctl$TIOCL_BLANKSCREEN(r5, 0x541c, &(0x7f0000000080))
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000740)={@multicast1, @loopback}, 0xc)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r6, 0x1, 0x9, &(0x7f00000000c0)=0x1, 0x4)

3.599661682s ago: executing program 2 (id=131):
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000280), 0x1, 0x783, &(0x7f0000001f80)="$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")
chdir(&(0x7f00000001c0)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101080, 0x1c9)
getdents64(r0, &(0x7f0000000200)=""/42, 0x2a)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0)
getdents64(r0, 0xfffffffffffffffe, 0x29)

3.400676827s ago: executing program 2 (id=132):
timer_create(0x1, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300))
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x1fc)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6)
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
getrlimit(0xa, &(0x7f0000000200))
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, 0x0, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0xe22, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}, 0x1c)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10)
connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10)
ioctl$int_in(r2, 0x5452, &(0x7f00000000c0)=0xf)
pselect6(0x40, &(0x7f0000000100)={0x0, 0xf, 0x1000, 0x0, 0x801, 0x100}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0)
sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0)
recvfrom$inet(r2, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25)
rmdir(&(0x7f0000000040)='./cgroup/../file0\x00')

3.29895749s ago: executing program 2 (id=133):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x2)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x806}, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r2}, 0xc)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x40)
ioctl$sock_inet_udp_SIOCINQ(r4, 0x541b, &(0x7f0000000040))
fallocate(r4, 0x0, 0xd5a0, 0x8ffff)
copy_file_range(r4, 0x0, r4, &(0x7f0000000500)=0xffff, 0x9, 0x0)
write$P9_RVERSION(r4, &(0x7f0000000240)=ANY=[@ANYBLOB="15004f000065ffff0200000007000000323030302e811b8673a76a9503aeaae42c423023cdc388bc05eb010e91b13febd9"], 0x15)
r5 = socket$nl_route(0x10, 0x3, 0x0)
socketpair(0x1e, 0x3, 0x630, &(0x7f0000000200))
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'lo\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x7, 0x2, {0xf, "0000000f0f000000000100000e00"}}}]}, 0x48}}, 0x0)
setsockopt$sock_int(r3, 0x1, 0x12, &(0x7f00000005c0)=0x80000001, 0x4)
ioctl$KDSIGACCEPT(r0, 0x4b4e, 0x1)
ftruncate(0xffffffffffffffff, 0x8008976)
mremap(&(0x7f0000000000/0x9000)=nil, 0x600000, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil)
r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r8, 0x6, 0x2, 0x0, 0x0)
ioctl$KDSIGACCEPT(r0, 0x4b4e, 0x40)

3.256544701s ago: executing program 32 (id=133):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x2)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x806}, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r2}, 0xc)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x40)
ioctl$sock_inet_udp_SIOCINQ(r4, 0x541b, &(0x7f0000000040))
fallocate(r4, 0x0, 0xd5a0, 0x8ffff)
copy_file_range(r4, 0x0, r4, &(0x7f0000000500)=0xffff, 0x9, 0x0)
write$P9_RVERSION(r4, &(0x7f0000000240)=ANY=[@ANYBLOB="15004f000065ffff0200000007000000323030302e811b8673a76a9503aeaae42c423023cdc388bc05eb010e91b13febd9"], 0x15)
r5 = socket$nl_route(0x10, 0x3, 0x0)
socketpair(0x1e, 0x3, 0x630, &(0x7f0000000200))
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'lo\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x7, 0x2, {0xf, "0000000f0f000000000100000e00"}}}]}, 0x48}}, 0x0)
setsockopt$sock_int(r3, 0x1, 0x12, &(0x7f00000005c0)=0x80000001, 0x4)
ioctl$KDSIGACCEPT(r0, 0x4b4e, 0x1)
ftruncate(0xffffffffffffffff, 0x8008976)
mremap(&(0x7f0000000000/0x9000)=nil, 0x600000, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil)
r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r8, 0x6, 0x2, 0x0, 0x0)
ioctl$KDSIGACCEPT(r0, 0x4b4e, 0x40)

3.100263895s ago: executing program 4 (id=135):
unshare(0x22020600) (async)
unshare(0x22020600)
r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4)
r2 = socket$packet(0x11, 0x3, 0x300)
sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, 0x0, 0x20004840)
setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4)
socket$inet(0x2, 0x5, 0x1) (async)
r3 = socket$inet(0x2, 0x5, 0x1)
setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f00000003c0)={'filter\x00', 0x7, 0x4, 0x400, 0x0, 0x0, 0x0, 0x318, 0x318, 0x318, 0x4, &(0x7f0000000080), {[{{@uncond, 0xc0, 0x100}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "7d2a8c20cf2bd67989488ffab2d57a50bc5d9032aab3b4698128cdcb6000"}}, {{@uncond, 0xc0, 0x108}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x0, 0x0, {0x5}}}}, {{@arp={@rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xff, 0xffffffff, 0x1, 0x7, {@empty, {[0x0, 0x0, 0xff, 0xff, 0xff, 0xff]}}, {@empty, {[0x0, 0x0, 0xff, 0x0, 0xff, 0xff]}}, 0x401, 0x2, 0xa66, 0x7ff, 0x2, 0x4, 'dvmrp1\x00', 'pim6reg\x00', {0xdf060ce873dfa40f}, {0xff}, 0x0, 0x63}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x450)
setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x1, 0x8000}, 0x4) (async)
setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x1, 0x8000}, 0x4)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'wg0\x00', <r4=>0x0})
sendto$packet(r2, &(0x7f0000000180)="0b03feff4f12021202004788aa96a13bb1000011000088ca1a00", 0x1fffc, 0x0, &(0x7f0000000140)={0x11, 0x0, r4}, 0x14) (async)
sendto$packet(r2, &(0x7f0000000180)="0b03feff4f12021202004788aa96a13bb1000011000088ca1a00", 0x1fffc, 0x0, &(0x7f0000000140)={0x11, 0x0, r4}, 0x14)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1e, 0x13, r0, 0x0)
syz_clone3(&(0x7f0000000340)={0x23820000, 0x0, 0x0, 0x0, {0x29}, 0x0, 0x0, 0x0, 0x0}, 0x58)
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40), 0xfc, 0x582, &(0x7f0000005a80)="$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") (async)
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40), 0xfc, 0x582, &(0x7f0000005a80)="$eJzs3U1rG9caAOB35I983hsHQrj3Li6BLJqSRo7tfqRQaLosbWig3afCVkywHAVLDrEbaLJoNt2UUCilgdIf0H2XoX+gvyLQBkIJpl2UgsrII0exJcty5EiJngcmOUcz43NenTlH52gkFMDQOpH+k4v4b0R8lUQcado3GtnOE+vHrT2+OZtuSdRqH/+eRJI91jg+yf4/lGX+ExE/fxFxOre13MrK6kKhVCouZfnJ6uK1ycrK6pkri4X54nzx6vTMzLk3ZqbffuvNnsX66sU/v/3o/vvnvjy59s2PD4/eTeJ8HM72NcfxDG41Z04U/s5SY3F+04FTPShskCT9rgC7MpL187FIx4AjMZL1euDl93lE1IAhlbTs//uNC/DSa8wDGmv7Hq2DXxiP3ltfANVjH2+Of3T9vZHYX18bHVxLnloZpevdiR6Un5bx02/37qZbbP8+xIEOeYCu3LodEWdHR7eO/0k2/u3e2fqbx9vbXMawvf5AP91P5z+vtZr/5TbmP9Fi/nOoRd/djc79P/ewB8W0lc7/3mk5/90YuiZGsty/6nO+seTylVLxbET8OyJORa3jrY9zaw9q7fY1z//SLS2/MRfM6vFwdN/T58wVqoWIGN9lyE95dDvif6Ot4k822j9p0f7p83Fxh2UcL977f7t9nePfW7UfIl5p2f5PmjXZ/v7kZP16mGxcFVv9cef4L+3K73f8afsf3D7+iaT5fm2l+zK+3/9Xsd2+9fj3dX39jyef1NONTnCjUK0uTUWMJx9ufXz6ybmNfOP4NP5TJ7cf/1pd/+ni69Mdxn/n2J22hw5C+8911f7dJx588Nl37crf2fj3ej11KnskG/9ay66VnVbwWZ8/AAAAAAAAGCS5iDgcSS6/kc7l8vn1z3cci4O5UrlSPX25vHx1LurflZ2IsVzjTveRps9DTGWfh23kpzflZyLiaER8PXKgns/Plktz/Q4eAAAAAAAAAAAAAAAAAAAABsShNt//T/060u/aAXuu/sMG+/pdC6AfOv7kfy9+6QkYSB37P/DS0v9heOn/MLz0fxhe3fT/JOLWHlYFeM68/sPw0v9heOn/AAAAAAAAAAAAAAAAAAAAAAAAAAAA0FMXL1xIt9ra45uzaX7u+sryQvn6mbliZSG/uDybny0vXcvPl8vzpWJ+trzY6e+VyuVrU9OxfGOyWqxUJysrq5cWy8tXq5euLBbmi5eKY88lKgAAAAAAAAAAAAAAAAAAAHixVFZWFwqlUnFJom3i3RiIauxlgOt2dfrooEQh0SZxO2ve7s7q46AEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJv8EwAA//+vny2S")
r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x109342, 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r5, 0xc0096616, 0x0)

2.944336078s ago: executing program 1 (id=136):
r0 = syz_open_dev$loop(&(0x7f0000000440), 0xfffffffffffffffe, 0x201)
ioctl$BLKIOMIN(r0, 0x1278, &(0x7f0000000480))
r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x28, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x8, "", [{{0x9, 0x4, 0x0, 0xfe, 0x1, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x8, 0x3, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x6, 0xc1}}}}}]}}]}}, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r2 = getpid()
sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
pipe(0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, &(0x7f0000000080)={0x2c, &(0x7f0000000180)={0x0, 0x23, 0xb0, {0xb0, 0x5, "826313612b8526792c3cbdeace918d0fb74237cc6e446c4e88e78881ce2a52973661d67a0c9d00b5ccb870fe006561cace4defe397a9615c589c4fceb412cff2cefed0f72a9422ab68496a6c7984a318438bab79d73d64f9c4b213fd7b00333375977538fd89d8a07d0a79681406a6b4ff06db82a18df566009c7a16c1eba4d38cddd071d793fd1cf05998cfe89791f3cc603500848546b72f7b0d00dcaedd1f360d8a28df38801c960ba36ae9bc"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_open_dev$loop(&(0x7f0000000440), 0xfffffffffffffffe, 0x201) (async)
ioctl$BLKIOMIN(r0, 0x1278, &(0x7f0000000480)) (async)
syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x28, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x8, "", [{{0x9, 0x4, 0x0, 0xfe, 0x1, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x8, 0x3, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x6, 0xc1}}}}}]}}]}}, 0x0) (async)
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async)
getpid() (async)
sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)) (async)
connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) (async)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) (async)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async)
pipe(0x0) (async)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) (async)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) (async)
syz_usb_control_io(r1, 0x0, 0x0) (async)
syz_usb_control_io(r1, &(0x7f0000000080)={0x2c, &(0x7f0000000180)={0x0, 0x23, 0xb0, {0xb0, 0x5, "826313612b8526792c3cbdeace918d0fb74237cc6e446c4e88e78881ce2a52973661d67a0c9d00b5ccb870fe006561cace4defe397a9615c589c4fceb412cff2cefed0f72a9422ab68496a6c7984a318438bab79d73d64f9c4b213fd7b00333375977538fd89d8a07d0a79681406a6b4ff06db82a18df566009c7a16c1eba4d38cddd071d793fd1cf05998cfe89791f3cc603500848546b72f7b0d00dcaedd1f360d8a28df38801c960ba36ae9bc"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) (async)

2.931836459s ago: executing program 4 (id=137):
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x280440e, &(0x7f0000000040), 0x1, 0xbdb, &(0x7f0000001000)="$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") (async)
r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_HYPERV_ENLIGHTENED_VMCS(r2, 0x4068aea3, &(0x7f0000000140)={0xa3, 0x0, &(0x7f0000000100)}) (async)
symlinkat(&(0x7f00000000c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async)
capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) (async)
setpriority(0x2, 0x0, 0x2131) (async)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000016c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x840e, &(0x7f0000000140)={[{@init_itable_val}, {@dioread_nolock}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x6}}, {@jqfmt_vfsold}, {@bsdgroups}, {@grpjquota}]}, 0x3, 0x42f, &(0x7f00000017c0)="$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") (async)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0)
write$binfmt_script(r3, &(0x7f0000000040), 0x208e24b) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) (async, rerun: 32)
ioctl$EXT4_IOC_CLEAR_ES_CACHE(r3, 0x6628) (rerun: 32)
fdatasync(r3)
r4 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async)
read$FUSE(r3, &(0x7f0000001c00)={0x2020, 0x0, <r5=>0x0}, 0x2020)
write$FUSE_IOCTL(r3, &(0x7f0000003c40)={0x20, 0x0, r5, {0x8, 0x4, 0x3, 0xc1}}, 0x20)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) (async)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) (async, rerun: 32)
getrandom(&(0x7f0000000240)=""/286, 0x11e, 0x100000000000001) (async, rerun: 32)
ioperm(0x2, 0x7ff, 0x8)
ioperm(0xd, 0x2, 0xd3) (async, rerun: 32)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x40d, &(0x7f0000000800)={[{@errors_remount}, {@stripe={'stripe', 0x3d, 0x3334}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@jqfmt_vfsv1}, {@nombcache}, {@quota}, {@nobh}]}, 0x3, 0x442, &(0x7f0000000300)="$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") (rerun: 32)
r6 = socket$nl_audit(0x10, 0x3, 0x9)
splice(r4, &(0x7f0000000080)=0x9, r6, &(0x7f0000000200)=0x5, 0x400, 0x8)

2.85417513s ago: executing program 4 (id=138):
unshare(0x40000400)
r0 = socket$key(0xf, 0x3, 0x2)
r1 = socket(0x18, 0x800, 0x2)
unshare(0x2020600)
connect$tipc(r1, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10)
r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r3 = dup2(r2, r0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80102, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60)
r6 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000000)=0x13)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x10)
ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r8 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2)
r9 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
getsockname$packet(r9, &(0x7f0000000140)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c000000100039042abd70000000000000000000", @ANYRESDEC=r10, @ANYBLOB="01180200031100002c0012800e00010069703665727370616e0000001800028008001500a8bc0d00040012"], 0x4c}, 0x1, 0x0, 0x0, 0x8c0}, 0x10)
r11 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x401, 0x70bd26, 0x200003, {0x0, 0x0, 0x0, r10, 0x42024, 0xad85}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0xc112}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4040014}, 0x20008848)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f0000000440)={[0x5836, 0x1038000000000001, 0x9, 0x40, 0x1, 0x6, 0x1037, 0x6, 0xfffffffffffffffc, 0x10, 0x3, 0x800100000002, 0x9, 0x504, 0x2, 0x7fffffffffffffff], 0x2000, 0x385813})
ioctl$KVM_RUN(r8, 0xae80, 0x0)
ioctl$TCSETSW2(r6, 0x402c542c, &(0x7f0000000040)={0xfffffff8, 0x4, 0xfffbff7d, 0x9, 0x2, "0c37b50805000000000800", 0x4, 0x203})
ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000080)=0x8)
ioctl$VT_ACTIVATE(r6, 0x5606, 0xffffffff)
r12 = eventfd2(0xe5c, 0x80000)
ioctl$KVM_IRQFD(r5, 0x4020ae76, &(0x7f0000000080)={r12, 0x1, 0x2, r3})

2.397834611s ago: executing program 33 (id=71):
r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="120100020000000800000000000000000001090224000100000021090400000303000100092100000001222600090581030800070f02e78bdda75b5a6e73f389138a6f4484b9098b9c9a66364075e5c4385d850d0295b448baad1e762a55ef24e9346a3d29bc247821b9305815ce7a30a4e4bc2306a4d1003892e4ee94a3b32c192efa8964e0e7b12074cff80dbad844eceb5619df01f476b5a10f5f1b522cb9bf66a469f07e4783254908f486d09ee7dcff29ac5f71799411f6b85ebfe2f2375aa86c001d473559f13788896240b5dd08fd29aec4770d7f5ebef7eedccac95e851c86693f09"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f00000002c0)='./proc\x00', &(0x7f0000000300)='proc\x00', 0x140006, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./proc/sys/kernel/printk_devkmsg\x00', 0x2, 0x0)
write(r1, &(0x7f0000000180)="6f050d05d60400", 0x7)
syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="4021270000002701f70ba3810300001b00000085e839c924d0d39ddf0000cb4fdca0560fb30d54f325bc85d43e"], 0x0, 0x0, 0x0, 0x0}, 0x0)

2.356551672s ago: executing program 4 (id=140):
r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./bus\x00', 0x200000, &(0x7f00000005c0)={[{@block_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@norecovery}]}, 0x1, 0x56a, &(0x7f00000015c0)="$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") (async)
quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000100)={<r1=>0x0, <r2=>0x0})
futimesat(r0, &(0x7f0000000080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f00000001c0)={{0x77359400}, {r1, r2/1000+60000}}) (async, rerun: 64)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) (async, rerun: 64)
r3 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) (async)
r4 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000040)={0x80042, 0x1}, 0x10) (async)
r5 = socket$tipc(0x1e, 0x2, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) (async)
setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2}, 0x10) (async)
r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) (async)
r7 = syz_open_dev$vcsa(&(0x7f0000000380), 0x7b95b611, 0x802)
writev(r7, &(0x7f0000000b00)=[{&(0x7f0000000000)="c1", 0x1}, {&(0x7f00000001c0)="06000000", 0x4}, {&(0x7f00000006c0)="e7cfab", 0x3}], 0x3) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r6, 0x0) (async)
syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000800)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x3b8742e, 0x0, 0x7, 0x0, &(0x7f0000006380))

2.351759893s ago: executing program 4 (id=141):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x200000c0, 0xffffffff, 0xfffffff8}, 0x10)
sendmsg$nl_route(r1, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@ipv4_newroute={0x1c, 0x1a, 0x1, 0x70bd2b, 0x1fff, {0x2, 0x20, 0x20, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2000}}, 0x1c}}, 0x20002000)
ioctl$NILFS_IOCTL_RESIZE(r1, 0x40086e8b, &(0x7f0000000000)=0x4)
syz_usb_connect$printer(0x3, 0x0, 0x0, 0x0)
connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0)
sendmsg(0xffffffffffffffff, 0x0, 0x80000)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
syz_usb_connect$uac1(0x3, 0xf1, &(0x7f0000000140)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0xff, 0x582, 0x23, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xdf, 0x3, 0x1, 0x17, 0xc0, 0x0, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x5, 0x38}, [@processing_unit={0xa, 0x24, 0x7, 0x1, 0x1, 0x0, "7d0317"}, @output_terminal={0x9, 0x24, 0x3, 0x1, 0x1ff, 0x5, 0x6, 0xb2}, @mixer_unit={0x8, 0x24, 0x4, 0x3, 0xd0, "c47d75"}, @mixer_unit={0x7, 0x24, 0x4, 0x5, 0xff, "56df"}, @input_terminal={0xc, 0x24, 0x2, 0x4, 0x401, 0x6, 0x5, 0xfff, 0x6, 0x7f}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0xd, 0x2, 0x9f, 0x1, "8a567a20ca028b"}, @as_header={0x7, 0x24, 0x1, 0x7f, 0x40, 0x4}, @format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x9e, 0x2, 0x0, 0x2, "47e5d3", "edea"}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x4, 0x3, 0x2, 0x7, 0x9}, @format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0xfffc, 0x0, 0x35, "8d"}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x2c, 0x1, 0x2, {0x7, 0x25, 0x1, 0xc, 0x2, 0xc}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x4, 0x2, 0x4}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x4, 0x0, 0x0, 0x4}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x5, 0x10f, 0x9}]}, {{0x9, 0x5, 0x82, 0x9, 0x80, 0x3, 0x2, 0xff, {0x7, 0x25, 0x1, 0xc, 0x7, 0xfff5}}}}}}}}]}}, &(0x7f0000000300)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x250, 0x1, 0xff, 0x2, 0x8, 0xbf}, 0x5, &(0x7f0000000280)={0x5, 0xf, 0x5}, 0x1, [{0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0xc09}}]})
recvfrom$unix(0xffffffffffffffff, 0x0, 0x0, 0x40010120, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0x1b, {[@global=@item_4={0x3, 0x1, 0x9, "d800e5ba"}, @main=@item_012={0x0, 0x0, 0x2}, @local=@item_4={0x3, 0x2, 0x3, "844c6c6f"}, @global, @local=@item_4={0x3, 0x2, 0x0, "191b65fc"}, @local=@item_012={0x2, 0x2, 0x2, "b015"}, @local=@item_012={0x1, 0x2, 0x7, '\x00'}, @local=@item_4={0x3, 0x2, 0x3}]}}, 0x0}, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x125)

2.267614524s ago: executing program 5 (id=134):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
prlimit64(r0, 0x5, &(0x7f0000000240)={0x10001, 0xff}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = inotify_init1(0x0)
inotify_add_watch(r4, &(0x7f00000006c0)='.\x00', 0x40001a2)
socket$key(0xf, 0x3, 0x2)
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDSIGACCEPT(r5, 0x5607, 0xe)
ioctl$TIOCL_BLANKSCREEN(r5, 0x541c, &(0x7f0000000080))
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000740)={@multicast1, @loopback}, 0xc)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r6, 0x1, 0x9, &(0x7f00000000c0)=0x1, 0x4)
connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c)
syz_open_procfs(0x0, &(0x7f00000009c0)='net/tcp6\x00')
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=@framed={{0x2e, 0xa, 0xa, 0x0, 0x0, 0x61, 0x10, 0x14}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80)

1.572518992s ago: executing program 6 (id=139):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x10d200, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x3e)
r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000080)={'ip6_vti0\x00', @random="aaed49422ab1"})
r3 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r3, &(0x7f00000000c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, r2, 0x1, 0x1, 0x1, 0x4, {0xa, 0x4e21, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, 0x3a)
setsockopt$inet_tcp_TLS_RX(r2, 0x11a, 0x2, &(0x7f0000000100)=@ccm_128={{0x304}, "378ceacaa247998a", "bef5f9da5bc12648691b68815105840b", "fc11a8e6", "b3cd998b370fbfd2"}, 0x28)
r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x90000, 0x0)
r5 = socket$inet(0x2, 0x80000, 0x5)
ioctl$INCFS_IOC_PERMIT_FILL(r4, 0x40046721, &(0x7f0000000180)={r5})
ioctl$BTRFS_IOC_BALANCE(r1, 0x5000940c, 0x0)
r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), r2)
sendmsg$TIPC_CMD_GET_NODES(r4, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r6, 0x8, 0x70bd27, 0x25dfdbfe, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x800)
r7 = ioctl$KVM_GET_STATS_FD_vm(r1, 0xaece)
ioctl$VHOST_SET_OWNER(r7, 0xaf01, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
r8 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000340), 0x611100, 0x0)
ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000380)={'\x00', 0x1, 0x5, 0x5, 0x4, 0x4, <r9=>0x0})
fcntl$lock(r8, 0x5, &(0x7f0000000400)={0x2, 0x2, 0x1, 0x123, r9})
ioctl$KVM_CAP_HYPERV_SYNIC(r2, 0x4068aea3, &(0x7f0000000440))
ioctl$VT_WAITACTIVE(r7, 0x5607)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000000540)={'ip6gre0\x00', &(0x7f00000004c0)={'syztnl1\x00', <r10=>0x0, 0x29, 0x9, 0x4, 0x1000, 0x43, @remote, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x20, 0x1, 0x3, 0x2}})
setsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000580)={{{@in6=@remote, @in=@multicast1, 0x4e23, 0x200, 0x4e24, 0xff, 0x2, 0x0, 0x20, 0x9, r10, 0xffffffffffffffff}, {0x9cd, 0x6, 0x8000000000000000, 0xb, 0x3f80000000, 0x9, 0x6, 0xffffffffffffeebd}, {0xf5, 0x7f, 0xa0, 0x4}, 0x7, 0x6e6bc0, 0x1, 0x1, 0x0, 0x2}, {{@in6=@loopback, 0x4d4, 0x2b}, 0xa, @in=@rand_addr=0x64010100, 0x3503, 0x7, 0x3, 0x2, 0xc, 0x5, 0xe}}, 0xe8)
getsockname$packet(r7, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000006c0)=0x14)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r8)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000000800)={'syztnl2\x00', &(0x7f0000000700)={'gretap0\x00', <r11=>r10, 0x0, 0x7, 0x7fff, 0x4, {{0x2e, 0x4, 0x3, 0x3, 0xb8, 0x67, 0x0, 0x1, 0x29, 0x0, @remote, @multicast2, {[@ssrr={0x89, 0x7, 0x4, [@rand_addr=0x64010102]}, @timestamp_prespec={0x44, 0x3c, 0x14, 0x3, 0x7, [{@dev={0xac, 0x14, 0x14, 0x40}, 0x5}, {@private=0xa010101, 0x5f2}, {@local, 0x401}, {@multicast1, 0xb52}, {@remote, 0x8001}, {@empty, 0x7fffffff}, {@remote, 0x40}]}, @cipso={0x86, 0x1d, 0x3, [{0x0, 0x10, "bd9820720f670188b95ad69aeee5"}, {0x6, 0x5, "1237b5"}, {0x2, 0x2}]}, @rr={0x7, 0x1b, 0x53, [@local, @remote, @dev={0xac, 0x14, 0x14, 0x37}, @local, @broadcast, @empty]}, @noop, @lsrr={0x83, 0x27, 0xfc, [@loopback, @dev={0xac, 0x14, 0x14, 0x27}, @loopback, @multicast1, @broadcast, @remote, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2]}]}}}}})
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f00000008c0)={'syztnl0\x00', &(0x7f0000000840)={'syztnl2\x00', r11, 0x29, 0x3, 0x6, 0x1, 0x11, @private1, @empty, 0x1, 0x1, 0x40, 0xfffffffe}})
ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(0xffffffffffffffff, 0x942e, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000900)='./cgroup/syz0\x00', 0x1ff)
ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000980)={[{0x1, 0x2, 0x9, 0x5, 0x9, 0x2, 0x7, 0xe7, 0x5, 0xf8, 0xd3, 0x7, 0x8}, {0x4, 0x9, 0xf, 0x5, 0xf8, 0x6, 0x0, 0x3, 0xb, 0x6, 0x7f, 0x3, 0x1}, {0x9, 0x0, 0xff, 0x4, 0x2, 0x4, 0x2, 0x80, 0xa, 0xff, 0x7, 0x4, 0x10}]})

1.500796713s ago: executing program 6 (id=142):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000380)})
mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', 0x0, 0xb80420, &(0x7f00000000c0)=ANY=[@ANYBLOB='rootcontext=\"'])
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
capset(&(0x7f0000000280)={0x20071026}, &(0x7f00000002c0)={0x0, 0x6, 0x1000002, 0x3, 0xffffffff, 0x40})
mkdir(&(0x7f0000000740)='./file0\x00', 0x0)
listxattr(&(0x7f0000001e80)='./file0\x00', 0x0, 0x2)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000080)="b918020000b8a0890000ba000000000f303e660f38801e8fe84ca23b4165360fe0c5c4e259bc9005880000c4c27d5a041cc4c255adf866b88e008ee0b9800000c00f3235000800000f300f35", 0x4c}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000040)=@x86={0x9, 0xd, 0x3f, 0x0, 0xffffffff, 0xc6, 0x5f, 0x8, 0x3, 0xb, 0xf9, 0xa3, 0x0, 0xc, 0x9, 0xee, 0x17, 0x0, 0x7f, '\x00', 0x9, 0x1})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) (async)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000380)}) (async)
mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', 0x0, 0xb80420, &(0x7f00000000c0)=ANY=[@ANYBLOB='rootcontext=\"']) (async)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)
capset(&(0x7f0000000280)={0x20071026}, &(0x7f00000002c0)={0x0, 0x6, 0x1000002, 0x3, 0xffffffff, 0x40}) (async)
mkdir(&(0x7f0000000740)='./file0\x00', 0x0) (async)
listxattr(&(0x7f0000001e80)='./file0\x00', 0x0, 0x2) (async)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000080)="b918020000b8a0890000ba000000000f303e660f38801e8fe84ca23b4165360fe0c5c4e259bc9005880000c4c27d5a041cc4c255adf866b88e008ee0b9800000c00f3235000800000f300f35", 0x4c}], 0x1, 0x18, 0x0, 0x0) (async)
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000040)=@x86={0x9, 0xd, 0x3f, 0x0, 0xffffffff, 0xc6, 0x5f, 0x8, 0x3, 0xb, 0xf9, 0xa3, 0x0, 0xc, 0x9, 0xee, 0x17, 0x0, 0x7f, '\x00', 0x9, 0x1}) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)

1.364102067s ago: executing program 6 (id=143):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="4000000010000104fcffffff8000000000000000", @ANYRES32=0x0, @ANYBLOB="937b01000000000020001280080001007369740014000280050009"], 0x40}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={'netdevsim0\x00', {0x2, 0x4e20, @private=0xa010101}}) (async)
ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={'netdevsim0\x00', {0x2, 0x4e20, @private=0xa010101}})
openat(0xffffffffffffff9c, &(0x7f00000004c0)='./dev/mapper/control\x00', 0x2, 0x0) (async)
r1 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./dev/mapper/control\x00', 0x2, 0x0)
chdir(&(0x7f0000000040)='./cgroup\x00')
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x3, 0x7fff0000}]})
openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x32f000, 0x0) (async)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x32f000, 0x0)
ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
close_range(r2, 0xffffffffffffffff, 0x0) (async)
close_range(r2, 0xffffffffffffffff, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000140)='./cgroup\x00', 0x2d19ccc, 0x0, 0x82, 0x0, &(0x7f0000000000)) (async)
syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000140)='./cgroup\x00', 0x2d19ccc, 0x0, 0x82, 0x0, &(0x7f0000000000))
ioctl(r1, 0xc178fd0b, &(0x7f0000000138)="0400000000000000000000007801")
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x4c0, 0x0, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f0, 0xffffffff, 0xffffffff, 0x3f0, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'syz1\x00'}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x4}}}]}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x2}}}, {{@ipv6={@remote, @private0={0xfc, 0x0, '\x00', 0x1}, [0x0, 0x0, 0xffffff00], [0x0, 0x0, 0xffffffff], 'erspan0\x00', 'netdevsim0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x6e}, 0x0, 0x258, 0x280, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'vcan0\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0xfffd, 0xa}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x520)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0xf, 0x7fff8001}]})
setresuid(0xee01, 0x0, 0x0)
r7 = syz_create_resource$binfmt(0x0)
openat$binfmt(0xffffffffffffff9c, r7, 0x42, 0x1ff)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@struct={0x0, 0x2, 0x0, 0x4, 0x0, 0x0, [{0x0, 0x3}, {0x1000000, 0x3}]}]}}, 0x0, 0x3e}, 0x28)
syz_genetlink_get_family_id$nl802154(&(0x7f0000002600), 0xffffffffffffffff) (async)
r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000002600), 0xffffffffffffffff)
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, r8, 0xf21, 0x70bd28, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4044085}, 0x24008840)
membarrier(0x2, 0x0)
syz_usb_connect(0x2, 0x62, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000fb5d7d086d04c308166b0102030109025000010000000009041f0000ff0100000a24010400050201020724070500000508240805040004960d240601e2030200010006000609240305050306058109240306010304050507240405"], 0x0) (async)
syz_usb_connect(0x2, 0x62, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000fb5d7d086d04c308166b0102030109025000010000000009041f0000ff0100000a24010400050201020724070500000508240805040004960d240601e2030200010006000609240305050306058109240306010304050507240405"], 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

1.015143425s ago: executing program 0 (id=144):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
prlimit64(r0, 0x5, &(0x7f0000000240)={0x10001, 0xff}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = inotify_init1(0x0)
inotify_add_watch(r4, &(0x7f00000006c0)='.\x00', 0x40001a2)
socket$key(0xf, 0x3, 0x2)
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDSIGACCEPT(r5, 0x5607, 0xe)
ioctl$TIOCL_BLANKSCREEN(r5, 0x541c, &(0x7f0000000080))
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000740)={@multicast1, @loopback}, 0xc)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r6, 0x1, 0x9, &(0x7f00000000c0)=0x1, 0x4)

851.733929ms ago: executing program 1 (id=145):
add_key$user(&(0x7f0000000140), 0x0, 0x0, 0x0, 0xfffffffffffffffe)
syz_read_part_table(0x618, &(0x7f00000001c0)="$eJzs3D9olGccB/DvJXlzRsF0cHKpcegkFMXRDFWSq2IhRKUQHOw/RJopQuCkhym69AbFDNKxixSuQ4yTMYOTQaFzEQeLkKFLwS5SO+TK3b0xV0r/0ZRS+vkM9/zeux/P9/1x7/q84T9tIEVZtavd5c33f699oT36qh5KzrQmJo+32+326aSSsykyVuxe7v32i12zP8lw30a3vti5+tkPbxetJ6devHHuQXNgMyDVvJZkV39zRn59J5W/Pivbb2l8bfTK1bnatc5FrbG+8W5y+/nE9MrJ5uLyieLYh53vLycPy/7egzGSi6nnUj7Oe0N/OurTrXLrz18q1kYXOvn18QuPa431z1vPDm7srQ3ePX/k5b7V6/cPJfOdiKl0H/Ytw39z8M38zfnL/PmxGzOLjaMH7uy5ebh+79H0d4M/tnvKyGJ7cgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+GcsdT6uztWuVZKFTv3N1+/cfj4xvXKyubh8YvjY07LvYbkOlevF1HMpRZLZzOajzG1t2fyDyJlKf/742uiVTn59/MLj2k87k2cHN/bWWnfPH3k5uXr9/qFuVyVTnWVgm4b+zfzG+vzYjZnFxtEDd/bcPFy/92h6sDtjMlvNB2WZ6vbfBgAAAAAAAAAAAAAAAAAAAP9zE5PH9029NX06qeTsjiTff9I9Zd+ujnyV7sn7nv3l+rSa7E5ya0fvXQCtJ6deDJ970Py2PBS/kGr3PQK7vlw5k7z+Kudy/2ZJ0X/Bv+fnAAAA//+K5o2v")
keyctl$join(0x1, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/keys\x00', 0x0, 0x0)
r2 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$restrict_keyring(0xa, r2, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000000)='id:\x88\xfe\xf7\x01')
sendfile(r0, r1, &(0x7f0000002b00)=0x223b, 0xffffffff)

849.093159ms ago: executing program 5 (id=146):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0xa7) (async, rerun: 64)
mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) (rerun: 64)
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) (async)
sendmmsg(r0, &(0x7f00000061c0)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x8, @dev={0xfe, 0x80, '\x00', 0x17}, 0x7, 0x4}, 0x80, 0x0}}], 0x1, 0x800) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/mass_storage.usb0\x00', 0x1ff)
write(0xffffffffffffffff, &(0x7f0000000500)='4\x00', 0x1) (async)
close(0xffffffffffffffff)
r1 = socket$nl_route(0x10, 0x3, 0x0) (async)
r2 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(r2, 0x10e, 0xc, &(0x7f0000000040)=0x8, 0x4) (async, rerun: 32)
sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="200100de12005cf21e2b6c000000", @ANYRES32=0x0, @ANYBLOB="0000000000000400"], 0x20}}, 0x0) (rerun: 32)
sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="e2a200001a00010000000000000000000a00fc003a2a5e247b0000000800e72c060000007d000000"], 0x28}], 0x1}, 0x0)
setsockopt$ARPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000140)={'filter\x00', 0x4}, 0x68)
symlinkat(&(0x7f0000000200)='./config/usb_gadget/g1/functions/mass_storage.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/configs/c.1/mass_storage.usb0\x00') (async)
unlinkat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/configs/c.1/mass_storage.usb0\x00', 0x0) (async)
ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) (async)
rmdir(&(0x7f0000000200)='./config/usb_gadget/g1/functions/mass_storage.usb0\x00')

232.98µs ago: executing program 0 (id=147):
r0 = open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0)
ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001f40)={{r0}, 0x0, 0x10, @unused=[0x8, 0x1d116dae, 0x5404, 0x2], @name="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"})
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)={0x44, 0x3, 0x1, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@CTA_TUPLE_REPLY={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @mcast1}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x2404c000}, 0x4004800)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x80)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@volatile={0x4, 0x0, 0x0, 0x9, 0x1}]}, {0x0, [0x5f, 0x5f, 0x0, 0x2e]}}, &(0x7f0000000f40)=""/4077, 0x2a, 0xfed, 0x2, 0x0, 0x10000, @value=r2}, 0x28)

0s ago: executing program 0 (id=148):
getpid()

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.1.17' (ED25519) to the list of known hosts.
[   22.814606][   T24] audit: type=1400 audit(1787437385.740:64): avc:  denied  { mounton } for  pid=271 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[   22.818292][  T271] cgroup: Unknown subsys name 'net'
[   22.837645][   T24] audit: type=1400 audit(1787437385.740:65): avc:  denied  { mount } for  pid=271 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   22.864974][   T24] audit: type=1400 audit(1787437385.770:66): avc:  denied  { unmount } for  pid=271 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   22.865491][  T271] cgroup: Unknown subsys name 'devices'
[   23.040972][  T271] cgroup: Unknown subsys name 'hugetlb'
[   23.046714][  T271] cgroup: Unknown subsys name 'rlimit'
[   23.186951][   T24] audit: type=1400 audit(1787437386.110:67): avc:  denied  { setattr } for  pid=271 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   23.210565][   T24] audit: type=1400 audit(1787437386.110:68): avc:  denied  { mounton } for  pid=271 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1
[   23.226889][  T273] SELinux:  Context root:object_r:swapfile_t is not valid (left unmapped).
[   23.235981][   T24] audit: type=1400 audit(1787437386.110:69): avc:  denied  { mount } for  pid=271 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1
Setting up swapspace version 1, size = 127995904 bytes
[   23.267013][   T24] audit: type=1400 audit(1787437386.170:70): avc:  denied  { relabelto } for  pid=273 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   23.292567][   T24] audit: type=1400 audit(1787437386.170:71): avc:  denied  { write } for  pid=273 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   23.357693][   T24] audit: type=1400 audit(1787437386.280:72): avc:  denied  { read } for  pid=271 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   23.383437][   T24] audit: type=1400 audit(1787437386.280:73): avc:  denied  { open } for  pid=271 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   23.409659][  T271] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   23.951357][  T280] bridge0: port 1(bridge_slave_0) entered blocking state
[   23.958625][  T280] bridge0: port 1(bridge_slave_0) entered disabled state
[   23.966262][  T280] device bridge_slave_0 entered promiscuous mode
[   23.976192][  T280] bridge0: port 2(bridge_slave_1) entered blocking state
[   23.983439][  T280] bridge0: port 2(bridge_slave_1) entered disabled state
[   23.991033][  T280] device bridge_slave_1 entered promiscuous mode
[   24.030185][  T279] bridge0: port 1(bridge_slave_0) entered blocking state
[   24.037258][  T279] bridge0: port 1(bridge_slave_0) entered disabled state
[   24.044823][  T279] device bridge_slave_0 entered promiscuous mode
[   24.052761][  T279] bridge0: port 2(bridge_slave_1) entered blocking state
[   24.059899][  T279] bridge0: port 2(bridge_slave_1) entered disabled state
[   24.067226][  T279] device bridge_slave_1 entered promiscuous mode
[   24.082491][  T281] bridge0: port 1(bridge_slave_0) entered blocking state
[   24.089689][  T281] bridge0: port 1(bridge_slave_0) entered disabled state
[   24.097050][  T281] device bridge_slave_0 entered promiscuous mode
[   24.104188][  T281] bridge0: port 2(bridge_slave_1) entered blocking state
[   24.111449][  T281] bridge0: port 2(bridge_slave_1) entered disabled state
[   24.118974][  T281] device bridge_slave_1 entered promiscuous mode
[   24.144969][  T283] bridge0: port 1(bridge_slave_0) entered blocking state
[   24.152124][  T283] bridge0: port 1(bridge_slave_0) entered disabled state
[   24.159695][  T283] device bridge_slave_0 entered promiscuous mode
[   24.166595][  T283] bridge0: port 2(bridge_slave_1) entered blocking state
[   24.173747][  T283] bridge0: port 2(bridge_slave_1) entered disabled state
[   24.181288][  T283] device bridge_slave_1 entered promiscuous mode
[   24.307812][  T282] bridge0: port 1(bridge_slave_0) entered blocking state
[   24.315048][  T282] bridge0: port 1(bridge_slave_0) entered disabled state
[   24.322612][  T282] device bridge_slave_0 entered promiscuous mode
[   24.349304][  T282] bridge0: port 2(bridge_slave_1) entered blocking state
[   24.356377][  T282] bridge0: port 2(bridge_slave_1) entered disabled state
[   24.364045][  T282] device bridge_slave_1 entered promiscuous mode
[   24.403635][  T280] bridge0: port 2(bridge_slave_1) entered blocking state
[   24.410832][  T280] bridge0: port 2(bridge_slave_1) entered forwarding state
[   24.418120][  T280] bridge0: port 1(bridge_slave_0) entered blocking state
[   24.425193][  T280] bridge0: port 1(bridge_slave_0) entered forwarding state
[   24.440870][  T279] bridge0: port 2(bridge_slave_1) entered blocking state
[   24.448036][  T279] bridge0: port 2(bridge_slave_1) entered forwarding state
[   24.455335][  T279] bridge0: port 1(bridge_slave_0) entered blocking state
[   24.462417][  T279] bridge0: port 1(bridge_slave_0) entered forwarding state
[   24.485231][  T281] bridge0: port 2(bridge_slave_1) entered blocking state
[   24.492395][  T281] bridge0: port 2(bridge_slave_1) entered forwarding state
[   24.499730][  T281] bridge0: port 1(bridge_slave_0) entered blocking state
[   24.506781][  T281] bridge0: port 1(bridge_slave_0) entered forwarding state
[   24.519994][  T283] bridge0: port 2(bridge_slave_1) entered blocking state
[   24.527078][  T283] bridge0: port 2(bridge_slave_1) entered forwarding state
[   24.534405][  T283] bridge0: port 1(bridge_slave_0) entered blocking state
[   24.541485][  T283] bridge0: port 1(bridge_slave_0) entered forwarding state
[   24.566806][  T282] bridge0: port 2(bridge_slave_1) entered blocking state
[   24.573923][  T282] bridge0: port 2(bridge_slave_1) entered forwarding state
[   24.581218][  T282] bridge0: port 1(bridge_slave_0) entered blocking state
[   24.588269][  T282] bridge0: port 1(bridge_slave_0) entered forwarding state
[   24.609107][  T112] bridge0: port 1(bridge_slave_0) entered disabled state
[   24.617507][  T112] bridge0: port 2(bridge_slave_1) entered disabled state
[   24.624928][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   24.633539][  T112] bridge0: port 2(bridge_slave_1) entered disabled state
[   24.640847][  T112] bridge0: port 1(bridge_slave_0) entered disabled state
[   24.648000][  T112] bridge0: port 2(bridge_slave_1) entered disabled state
[   24.655376][  T112] bridge0: port 1(bridge_slave_0) entered disabled state
[   24.662632][  T112] bridge0: port 2(bridge_slave_1) entered disabled state
[   24.670334][  T112] bridge0: port 1(bridge_slave_0) entered disabled state
[   24.677500][  T112] bridge0: port 2(bridge_slave_1) entered disabled state
[   24.685289][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   24.692730][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   24.702094][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   24.709595][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   24.720454][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   24.728712][  T112] bridge0: port 2(bridge_slave_1) entered blocking state
[   24.735811][  T112] bridge0: port 2(bridge_slave_1) entered forwarding state
[   24.762559][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   24.771675][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   24.780590][  T112] bridge0: port 1(bridge_slave_0) entered blocking state
[   24.787690][  T112] bridge0: port 1(bridge_slave_0) entered forwarding state
[   24.795441][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   24.803645][  T112] bridge0: port 2(bridge_slave_1) entered blocking state
[   24.810719][  T112] bridge0: port 2(bridge_slave_1) entered forwarding state
[   24.818125][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   24.826363][  T112] bridge0: port 1(bridge_slave_0) entered blocking state
[   24.833545][  T112] bridge0: port 1(bridge_slave_0) entered forwarding state
[   24.840967][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   24.849220][  T112] bridge0: port 2(bridge_slave_1) entered blocking state
[   24.856254][  T112] bridge0: port 2(bridge_slave_1) entered forwarding state
[   24.863717][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   24.871712][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   24.893342][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   24.901912][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   24.909967][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   24.917955][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   24.926684][  T112] bridge0: port 1(bridge_slave_0) entered blocking state
[   24.933800][  T112] bridge0: port 1(bridge_slave_0) entered forwarding state
[   24.941377][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   24.949822][  T112] bridge0: port 2(bridge_slave_1) entered blocking state
[   24.956890][  T112] bridge0: port 2(bridge_slave_1) entered forwarding state
[   24.970937][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   24.978573][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   24.989751][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   24.997918][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   25.008138][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   25.016344][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   25.032015][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   25.040207][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   25.048164][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   25.057243][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   25.065711][  T112] bridge0: port 1(bridge_slave_0) entered blocking state
[   25.072808][  T112] bridge0: port 1(bridge_slave_0) entered forwarding state
[   25.080373][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   25.088399][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   25.109345][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   25.117759][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   25.126665][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   25.135079][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   25.143433][  T112] bridge0: port 2(bridge_slave_1) entered blocking state
[   25.150498][  T112] bridge0: port 2(bridge_slave_1) entered forwarding state
[   25.166117][  T279] device veth0_vlan entered promiscuous mode
[   25.174459][  T280] device veth0_vlan entered promiscuous mode
[   25.183800][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   25.192716][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   25.201247][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   25.209943][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   25.217864][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   25.226529][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   25.234837][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   25.242868][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   25.251166][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   25.259017][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   25.267231][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   25.275706][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   25.284437][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   25.292230][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   25.299815][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   25.307258][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   25.318810][  T283] device veth0_vlan entered promiscuous mode
[   25.331222][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   25.339672][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   25.347759][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   25.356690][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   25.365683][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   25.373333][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   25.390378][  T280] device veth1_macvtap entered promiscuous mode
[   25.397211][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   25.405809][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   25.415022][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   25.423591][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   25.432093][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   25.440408][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   25.448601][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   25.458367][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   25.466527][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   25.475110][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   25.482718][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   25.496014][  T283] device veth1_macvtap entered promiscuous mode
[   25.503642][  T281] device veth0_vlan entered promiscuous mode
[   25.510493][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   25.518128][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   25.527114][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   25.538688][  T282] device veth0_vlan entered promiscuous mode
[   25.550122][  T279] device veth1_macvtap entered promiscuous mode
[   25.557139][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   25.565106][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   25.573398][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   25.582038][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   25.590501][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   25.598664][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   25.607206][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   25.614787][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   25.626681][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   25.635210][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   25.643631][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   25.652405][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   25.667159][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   25.682445][  T281] device veth1_macvtap entered promiscuous mode
[   25.691764][  T282] device veth1_macvtap entered promiscuous mode
[   25.698743][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   25.707331][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   25.715873][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   25.723782][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   25.732152][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   25.750180][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   25.758698][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   25.775166][  T283] request_module fs-gadgetfs succeeded, but still no fs?
[   25.793857][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   25.803782][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   25.812306][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   25.821078][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   25.829677][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   25.837875][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   25.846589][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   25.855046][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   25.863847][  T283] cgroup: cgroup: disabling cgroup2 socket matching due to net_prio or net_cls activation
[   25.894802][  T304] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   25.932431][  T306] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1'.
[   25.942592][  T306] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=306 comm=syz.0.1
[   26.049419][  T315] ======================================================
[   26.049419][  T315] WARNING: the mand mount option is being deprecated and
[   26.049419][  T315]          will be removed in v5.15!
[   26.049419][  T315] ======================================================
[   26.090382][  T323] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8'.
[   26.099177][  T323] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8'.
[   26.108503][  T322] SELinux: failed to load policy
[   26.115970][  T322] binder: BINDER_SET_CONTEXT_MGR already set
[   26.122087][  T322] binder: 321:322 ioctl 4018620d 200000001000 returned -16
[   26.130322][  T310] new mount options do not match the existing superblock, will be ignored
[   26.135991][  T315] EXT4-fs (loop4): dax option not supported
[   26.229148][   T52] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   26.249900][  T325] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   26.269318][  T325] exFAT-fs (loop0): Medium has reported failures. Some data may be lost.
[   26.288761][  T325] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x7399340e, utbl_chksum : 0xe619d30d)
[   26.330587][  T325] device erspan0 entered promiscuous mode
[   26.340410][  T315] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue
[   26.469821][  T345] fuse: Bad value for 'group_id'
[   26.476755][   T52] usb 4-1: Using ep0 maxpacket: 32
[   26.492348][  T300] Bluetooth: hci0: Frame reassembly failed (-84)
[   26.599265][   T52] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[   26.607440][   T52] usb 4-1: config 0 has no interface number 0
[   26.613658][   T52] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   26.625188][   T52] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   26.635196][   T52] usb 4-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00
[   26.648052][  T358] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32d8364b, utbl_chksum : 0xe619d30d)
[   26.668827][  T358] capability: warning: `syz.0.14' uses deprecated v2 capabilities in a way that may be insecure
[   26.714400][   T52] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   26.743073][   T52] usb 4-1: config 0 descriptor??
[   26.905869][  T369] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   26.916796][  T369] exFAT-fs (loop0): Medium has reported failures. Some data may be lost.
[   26.927268][  T369] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[   27.029266][  T356] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   27.176577][  T385] EXT4-fs (loop2): Test dummy encryption mode enabled
[   27.184576][  T385] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   27.198067][  T385] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   27.214358][  T385] EXT4-fs error (device loop2): ext4_orphan_get:1427: comm syz.2.20: bad orphan inode 131072
[   27.229730][  T385] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption,inode_readahead_blks=0x0000000000000004,norecovery,,errors=continue
[   27.266324][  T398] Mass Storage Function, version: 2009/09/11
[   27.272635][  T356] usb 5-1: Using ep0 maxpacket: 32
[   27.278154][  T398] LUN: removable file: (no medium)
[   27.285126][  T397] netlink: 124 bytes leftover after parsing attributes in process `syz.3.23'.
[   27.294460][   T52] usbhid 4-1:0.1: can't add hid device: -71
[   27.300618][   T52] usbhid: probe of 4-1:0.1 failed with error -71
[   27.308104][   T52] usb 4-1: USB disconnect, device number 2
[   27.365740][  T404] bridge0: port 3(syz_tun) entered blocking state
[   27.366372][  T395] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue
[   27.373617][  T404] bridge0: port 3(syz_tun) entered disabled state
[   27.388336][  T404] device syz_tun entered promiscuous mode
[   27.390314][  T356] usb 5-1: config 2 has an invalid interface number: 32 but max is 0
[   27.395017][  T404] bridge0: port 3(syz_tun) entered blocking state
[   27.408657][  T404] bridge0: port 3(syz_tun) entered forwarding state
[   27.427665][  T356] usb 5-1: config 2 has no interface number 0
[   27.445120][  T356] usb 5-1: config 2 interface 32 has no altsetting 0
[   27.452048][  T400] fscrypt: AES-256-CTS-CBC using implementation "cts(cbc-aes-aesni)"
[   27.733612][  T410] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[   27.749162][  T410] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[   27.761611][  T410] F2FS-fs (loop3): invalid crc value
[   27.777502][  T410] F2FS-fs (loop3): Found nat_bits in checkpoint
[   27.799190][  T356] usb 5-1: New USB device found, idVendor=04b4, idProduct=6831, bcdDevice=6b.27
[   27.808288][  T356] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   27.827585][  T356] usb 5-1: Product: syz
[   27.832031][  T356] usb 5-1: Manufacturer: syz
[   27.836669][  T356] usb 5-1: SerialNumber: syz
[   27.842551][  T410] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[   27.849906][  T410] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[   27.867177][  T410] SELinux:  Context system_u:object_r:hwdata_t:s0 is not valid (left unmapped).
[   27.876699][   T24] kauditd_printk_skb: 150 callbacks suppressed
[   27.876711][   T24] audit: type=1400 audit(1787437390.810:224): avc:  denied  { relabelto } for  pid=409 comm="syz.3.25" name="/" dev="loop3" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:hwdata_t:s0"
[   28.035662][  T424] EXT4-fs (loop3): Ignoring removed oldalloc option
[   28.044302][  T424] EXT4-fs (loop3): mounted filesystem without journal. Opts: i_version,noauto_da_alloc,oldalloc,,errors=continue
[   28.066337][   T24] audit: type=1400 audit(1787437390.990:225): avc:  denied  { read write } for  pid=423 comm="syz.3.27" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   28.109664][   T24] audit: type=1400 audit(1787437390.990:226): avc:  denied  { open } for  pid=423 comm="syz.3.27" path="/5/bus/file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   28.133222][   T24] audit: type=1400 audit(1787437391.000:227): avc:  denied  { read } for  pid=423 comm="syz.3.27" dev="nsfs" ino=4026532369 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[   28.154706][   T24] audit: type=1400 audit(1787437391.000:228): avc:  denied  { open } for  pid=423 comm="syz.3.27" path="net:[4026532369]" dev="nsfs" ino=4026532369 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[   28.183049][   T24] audit: type=1400 audit(1787437391.010:229): avc:  denied  { ioctl } for  pid=423 comm="syz.3.27" path="socket:[15551]" dev="sockfs" ino=15551 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   28.213763][   T24] audit: type=1400 audit(1787437391.010:230): avc:  denied  { read } for  pid=423 comm="syz.3.27" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1
[   28.257766][   T24] audit: type=1400 audit(1787437391.030:231): avc:  denied  { unmount } for  pid=280 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[   28.339192][   T25] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   28.390781][  T430] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue
[   28.399861][   T24] audit: type=1400 audit(1787437391.330:232): avc:  denied  { mount } for  pid=429 comm="syz.3.29" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[   28.539309][  T290] Bluetooth: hci0: command 0x1003 tx timeout
[   28.545480][  T348] Bluetooth: hci0: sending frame failed (-49)
[   28.579175][   T25] usb 3-1: Using ep0 maxpacket: 16
[   28.659200][    T5] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   28.669252][   T15] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[   28.699486][   T25] usb 3-1: config index 0 descriptor too short (expected 51443, got 18)
[   28.719622][  T356] ums-cypress 5-1:2.32: USB Mass Storage device detected
[   28.792057][  T356] usb 5-1: USB disconnect, device number 2
[   28.859703][   T25] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[   28.868910][   T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   28.877010][   T25] usb 3-1: Product: syz
[   28.881289][   T25] usb 3-1: Manufacturer: syz
[   28.885913][   T25] usb 3-1: SerialNumber: syz
[   28.891185][   T25] usb 3-1: config 0 descriptor??
[   28.929253][   T15] usb 4-1: Using ep0 maxpacket: 32
[   29.029213][    T5] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   29.040365][    T5] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   29.053273][   T15] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   29.064287][   T15] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   29.074100][   T15] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[   29.083210][   T15] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   29.092031][   T15] usb 4-1: config 0 descriptor??
[   29.131117][   T15] hub 4-1:0.0: USB hub found
[   29.131863][   T24] audit: type=1400 audit(1787437392.060:233): avc:  denied  { read write } for  pid=427 comm="syz.2.28" name="uinput" dev="devtmpfs" ino=257 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[   29.159165][  T356] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[   29.179426][   T25] r8152 3-1:0.0: Unknown version 0x4820
[   29.199252][    T5] usb 1-1: New USB device found, idVendor=0925, idProduct=0005, bcdDevice= 0.00
[   29.208475][    T5] usb 1-1: New USB device strings: Mfr=151, Product=13, SerialNumber=0
[   29.216816][    T5] usb 1-1: Product: syz
[   29.221218][    T5] usb 1-1: Manufacturer: syz
[   29.226578][    T5] usb 1-1: config 0 descriptor??
[   29.339621][  T430] EXT4-fs error (device loop3): ext4_mb_generate_buddy:824: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[   29.354543][  T430] EXT4-fs error (device loop3) in ext4_setattr:5745: error 28
[   29.379173][   T15] hub 4-1:0.0: config failed, can't read hub descriptor (err -22)
[   29.388493][   T20] usb 3-1: USB disconnect, device number 2
[   29.469441][  T434] udc-core: couldn't find an available UDC or it's busy
[   29.476665][  T434] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[   29.479498][   T15] usbhid 4-1:0.0: can't add hid device: -71
[   29.484663][  T434] udc-core: couldn't find an available UDC or it's busy
[   29.491544][   T15] usbhid: probe of 4-1:0.0 failed with error -71
[   29.497269][  T434] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[   29.511446][  T434] udc-core: couldn't find an available UDC or it's busy
[   29.518532][  T434] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[   29.526177][  T434] udc-core: couldn't find an available UDC or it's busy
[   29.533452][  T434] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[   29.541125][  T434] udc-core: couldn't find an available UDC or it's busy
[   29.548090][  T434] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[   29.555718][  T356] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   29.566663][  T356] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   29.576465][  T356] usb 5-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00
[   29.585811][  T356] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   29.594479][  T356] usb 5-1: config 0 descriptor??
[   29.709721][   T15] usb 4-1: USB disconnect, device number 3
[   29.790404][    T5] smartjoyplus 0003:0925:0005.0001: unknown main item tag 0x0
[   29.797970][    T5] smartjoyplus 0003:0925:0005.0001: unknown main item tag 0x0
[   29.805551][    T5] smartjoyplus 0003:0925:0005.0001: unknown main item tag 0x0
[   29.813167][    T5] smartjoyplus 0003:0925:0005.0001: unknown main item tag 0x0
[   29.820978][    T5] smartjoyplus 0003:0925:0005.0001: unknown main item tag 0x0
[   29.828468][    T5] smartjoyplus 0003:0925:0005.0001: unknown main item tag 0x0
[   29.835997][    T5] smartjoyplus 0003:0925:0005.0001: unknown main item tag 0x0
[   29.843626][    T5] smartjoyplus 0003:0925:0005.0001: unknown main item tag 0x0
[   29.851318][    T5] smartjoyplus 0003:0925:0005.0001: unknown main item tag 0x0
[   29.864276][    T5] smartjoyplus 0003:0925:0005.0001: unknown main item tag 0x0
[   29.871910][    T5] smartjoyplus 0003:0925:0005.0001: report_id 0 is invalid
[   29.879190][    T5] smartjoyplus 0003:0925:0005.0001: item 0 1 1 8 parsing failed
[   29.886970][    T5] smartjoyplus 0003:0925:0005.0001: parse failed
[   29.893431][    T5] smartjoyplus: probe of 0003:0925:0005.0001 failed with error -22
[   29.915278][  T450] netlink: 72 bytes leftover after parsing attributes in process `syz.2.33'.
[   29.924489][  T450] netlink: 12 bytes leftover after parsing attributes in process `syz.2.33'.
[   29.933762][  T450] netlink: 20 bytes leftover after parsing attributes in process `syz.2.33'.
[   29.942767][  T450] netlink: 20 bytes leftover after parsing attributes in process `syz.2.33'.
[   29.959135][  T356] usbhid 5-1:0.0: can't add hid device: -71
[   29.965298][  T356] usbhid: probe of 5-1:0.0 failed with error -71
[   29.982905][  T356] usb 5-1: USB disconnect, device number 3
[   29.991596][  T415] usb 1-1: USB disconnect, device number 2
[   30.059311][   T15] usb 4-1: new low-speed USB device number 4 using dummy_hcd
[   30.239256][    T5] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[   30.299457][   T15] usb 4-1: Invalid ep0 maxpacket: 32
[   30.449220][   T15] usb 4-1: new low-speed USB device number 5 using dummy_hcd
[   30.479203][    T5] usb 3-1: Using ep0 maxpacket: 8
[   30.619543][  T301] Bluetooth: hci0: command 0x1001 tx timeout
[   30.625699][  T348] Bluetooth: hci0: sending frame failed (-49)
[   30.680041][  T461] EXT4-fs (loop0): Mount option "nodelalloc" incompatible with ext2
[   30.689197][   T15] usb 4-1: Invalid ep0 maxpacket: 32
[   30.694672][   T15] usb usb4-port1: attempt power cycle
[   30.759242][    T5] usb 3-1: New USB device found, idVendor=0a92, idProduct=1020, bcdDevice= 0.40
[   30.768363][    T5] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   30.776559][    T5] usb 3-1: Product: syz
[   30.781590][    T5] usb 3-1: Manufacturer: syz
[   30.786221][    T5] usb 3-1: SerialNumber: syz
[   30.909958][  T464] F2FS-fs (loop4): Fix alignment : done, start(4096) end(16896) block(12288)
[   30.919571][  T464] F2FS-fs (loop4): invalid crc value
[   30.925234][  T464] F2FS-fs (loop4): invalid crc value
[   30.930957][  T464] F2FS-fs (loop4): Failed to get valid F2FS checkpoint
[   31.029733][  T456] udc-core: couldn't find an available UDC or it's busy
[   31.036809][  T456] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[   31.047389][  T456] udc-core: couldn't find an available UDC or it's busy
[   31.054448][  T456] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[   31.062568][  T456] udc-core: couldn't find an available UDC or it's busy
[   31.069579][  T456] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[   31.109757][   T15] usb 4-1: new low-speed USB device number 6 using dummy_hcd
[   31.172100][  T483] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue
[   31.182685][  T483] ext4 filesystem being mounted at /11/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[   31.189605][    T5] usb 3-1: MIDIStreaming interface descriptor not found
[   31.226678][   T15] usb 4-1: Invalid ep0 maxpacket: 32
[   31.235973][    T7] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[   31.248323][    T7] EXT4-fs (loop3): This should not happen!! Data will be lost
[   31.248323][    T7] 
[   31.255715][    T5] usb 3-1: USB disconnect, device number 3
[   31.264761][   T52] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[   31.272468][    T7] EXT4-fs (loop3): Total free blocks count 0
[   31.278850][    T7] EXT4-fs (loop3): Free/Dirty block details
[   31.284964][    T7] EXT4-fs (loop3): free_blocks=2415919104
[   31.290862][    T7] EXT4-fs (loop3): dirty_blocks=48
[   31.295976][    T7] EXT4-fs (loop3): Block reservation details
[   31.302047][    T7] EXT4-fs (loop3): i_reserved_data_blocks=3
[   31.308591][    T7] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 2 with error 28
[   31.321080][    T7] EXT4-fs (loop3): This should not happen!! Data will be lost
[   31.321080][    T7] 
[   31.411757][  T496] process 'syz.3.44' launched '/dev/fd/-1/./file0' with NULL argv: empty string added
[   31.469560][  T355] udevd[355]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   31.549178][   T52] usb 5-1: device descriptor read/64, error -71
[   31.556610][  T496] F2FS-fs (loop3): Small segment_count (9 < 1 * 24)
[   31.563280][  T496] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[   31.573703][  T498] EXT4-fs (loop0): Test dummy encryption mode enabled
[   31.583534][  T496] F2FS-fs (loop3): invalid crc value
[   31.593789][  T496] F2FS-fs (loop3): Found nat_bits in checkpoint
[   31.603090][  T498] EXT4-fs (loop0): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000000008,inode_readahead_blks=0x0000000000004000,noload,test_dummy_encryption=v1,nodiscard,min_batch_time=0x0000000000000001,usrquota,journal_ioprio=0x0000000000000000,resuid=0x0000000000000000,errors=continue
[   31.653834][  T496] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[   31.661309][  T496] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[   31.680774][  T496] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability
[   31.685639][  T498] fscrypt: AES-256-XTS using implementation "xts-aes-aesni"
[   31.716283][  T496] attempt to access beyond end of device
[   31.716283][  T496] loop3: rw=34817, want=79872, limit=40427
[   31.812325][  T280] attempt to access beyond end of device
[   31.812325][  T280] loop3: rw=2049, want=45104, limit=40427
[   31.959164][   T52] usb 5-1: device descriptor read/64, error -71
[   32.069888][  T522] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[   32.077815][  T522] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[   32.098487][  T522] F2FS-fs (loop2): Found nat_bits in checkpoint
[   32.105765][  T301] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[   32.144162][  T522] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[   32.151387][  T522] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[   32.239124][   T52] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[   32.574451][   T52] usb 5-1: device descriptor read/64, error -71
[   32.699170][    T5] Bluetooth: hci0: command 0x1009 tx timeout
[   32.729227][  T301] usb 1-1: unable to get BOS descriptor or descriptor too short
[   32.809312][  T301] usb 1-1: config 250 has an invalid interface number: 222 but max is 1
[   32.817882][  T301] usb 1-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config
[   32.828531][  T301] usb 1-1: config 250 has 1 interface, different from the descriptor's value: 2
[   32.838007][  T301] usb 1-1: config 250 has no interface number 0
[   32.844437][  T301] usb 1-1: config 250 interface 222 altsetting 22 has an invalid endpoint with address 0x80, skipping
[   32.855507][  T301] usb 1-1: config 250 interface 222 altsetting 22 endpoint 0xC has invalid maxpacket 1024, setting to 64
[   32.866839][  T301] usb 1-1: config 250 interface 222 altsetting 22 endpoint 0x8 has invalid maxpacket 983, setting to 64
[   32.878060][  T301] usb 1-1: config 250 interface 222 altsetting 22 has an invalid endpoint with address 0x80, skipping
[   32.889118][  T301] usb 1-1: config 250 interface 222 altsetting 22 has 4 endpoint descriptors, different from the interface descriptor's value: 6
[   32.902561][  T301] usb 1-1: config 250 interface 222 has no altsetting 0
[   32.939722][  T541] EXT4-fs (loop3): bad geometry: first data block 0 is beyond end of filesystem (0)
[   32.989131][   T52] usb 5-1: device descriptor read/64, error -71
[   33.029825][  T547] exfat: Unknown parameter '00000000000000000000003'
[   33.069242][  T301] usb 1-1: New USB device found, idVendor=0b49, idProduct=064f, bcdDevice=d4.fd
[   33.078437][  T301] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   33.086879][  T301] usb 1-1: Product: syz
[   33.095578][  T301] usb 1-1: Manufacturer: syz
[   33.100017][  T550] overlayfs: failed to resolve './bus': -2
[   33.100423][  T301] usb 1-1: SerialNumber: syz
[   33.119484][   T52] usb usb5-port1: attempt power cycle
[   33.130130][  T518] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[   33.175396][   T24] kauditd_printk_skb: 162 callbacks suppressed
[   33.175408][   T24] audit: type=1400 audit(1787437396.100:396): avc:  denied  { ioctl } for  pid=555 comm="syz.2.60" path="/dev/rtc0" dev="devtmpfs" ino=258 ioctlcmd=0x5868 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[   33.350115][  T557] udc-core: couldn't find an available UDC or it's busy
[   33.357183][  T557] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[   33.430721][  T301] usb 1-1: USB disconnect, device number 3
[   33.449179][  T415] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[   33.569180][   T52] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[   33.645751][  T560] netlink: 'syz.3.61': attribute type 1 has an invalid length.
[   33.653399][  T560] netlink: 20 bytes leftover after parsing attributes in process `syz.3.61'.
[   33.749193][   T52] usb 5-1: device descriptor read/8, error -71
[   33.889173][  T415] usb 3-1: config 3 has an invalid interface number: 191 but max is 2
[   33.901520][  T415] usb 3-1: config 3 has an invalid interface number: 79 but max is 2
[   33.909932][  T415] usb 3-1: config 3 has an invalid interface number: 205 but max is 2
[   33.918297][  T415] usb 3-1: config 3 contains an unexpected descriptor of type 0x1, skipping
[   33.928443][  T415] usb 3-1: config 3 has no interface number 0
[   33.934713][  T415] usb 3-1: config 3 has no interface number 1
[   33.941011][  T415] usb 3-1: config 3 has no interface number 2
[   33.947498][  T415] usb 3-1: config 3 interface 191 altsetting 34 has an invalid endpoint with address 0xA1, skipping
[   33.959640][  T562] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   33.973787][  T415] usb 3-1: config 3 interface 191 altsetting 34 has an invalid endpoint with address 0x0, skipping
[   33.981004][  T562] exFAT-fs (loop0): Medium has reported failures. Some data may be lost.
[   34.001434][  T562] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[   34.026504][  T415] usb 3-1: config 3 interface 191 altsetting 34 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[   34.059156][  T415] usb 3-1: config 3 interface 79 altsetting 8 bulk endpoint 0xB has invalid maxpacket 1024
[   34.094657][  T415] usb 3-1: config 3 interface 79 altsetting 8 bulk endpoint 0xD has invalid maxpacket 1023
[   34.100041][   T52] usb 5-1: device descriptor read/8, error -71
[   34.120267][  T415] usb 3-1: config 3 interface 79 altsetting 8 has a duplicate endpoint with address 0x1, skipping
[   34.131048][  T415] usb 3-1: config 3 interface 205 altsetting 11 has a duplicate endpoint with address 0xD, skipping
[   34.141950][  T415] usb 3-1: config 3 interface 205 altsetting 11 has an invalid endpoint descriptor of length 6, skipping
[   34.153694][  T415] usb 3-1: config 3 interface 205 altsetting 11 has a duplicate endpoint with address 0xE, skipping
[   34.164601][  T415] usb 3-1: config 3 interface 205 altsetting 11 endpoint 0x8 has invalid maxpacket 1023, setting to 64
[   34.269431][  T560] F2FS-fs (loop3): Invalid log sectorsize (67108873)
[   34.409409][  T560] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[   34.433681][  T560] F2FS-fs (loop3): invalid crc value
[   34.498965][  T560] F2FS-fs (loop3): Found nat_bits in checkpoint
[   34.621307][  T560] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[   34.644989][  T560] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4
[   34.971738][  T572] F2FS-fs (loop4): Corrupted extension count (64 + 1 > 64)
[   34.988660][  T572] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[   35.007307][  T572] F2FS-fs (loop4): Unrecognized mount option "noflcsh_merge" or missing value
[   35.111271][  T415] usb 3-1: config 3 interface 205 altsetting 11 has a duplicate endpoint with address 0x4, skipping
[   35.122186][  T415] usb 3-1: config 3 interface 205 altsetting 11 has a duplicate endpoint with address 0xE, skipping
[   35.133022][  T415] usb 3-1: config 3 interface 205 altsetting 11 has a duplicate endpoint with address 0x1, skipping
[   35.144041][  T415] usb 3-1: config 3 interface 205 altsetting 11 has 13 endpoint descriptors, different from the interface descriptor's value: 12
[   35.157386][  T415] usb 3-1: config 3 interface 191 has no altsetting 0
[   35.164225][  T415] usb 3-1: config 3 interface 79 has no altsetting 0
[   35.170942][  T415] usb 3-1: config 3 interface 205 has no altsetting 0
[   35.206644][   T24] audit: type=1400 audit(1787437398.130:397): avc:  denied  { getopt } for  pid=579 comm="syz.0.66" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   35.241809][   T24] audit: type=1400 audit(1787437398.160:398): avc:  denied  { read write } for  pid=579 comm="syz.0.66" name="ppp" dev="devtmpfs" ino=153 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[   35.241866][   T24] audit: type=1400 audit(1787437398.160:399): avc:  denied  { open } for  pid=579 comm="syz.0.66" path="/dev/ppp" dev="devtmpfs" ino=153 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[   35.241882][   T24] audit: type=1400 audit(1787437398.160:400): avc:  denied  { ioctl } for  pid=579 comm="syz.0.66" path="/dev/ppp" dev="devtmpfs" ino=153 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[   35.314623][   T24] audit: type=1400 audit(1787437398.240:401): avc:  denied  { listen } for  pid=581 comm="syz.3.65" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   35.349274][  T415] usb 3-1: New USB device found, idVendor=07aa, idProduct=003c, bcdDevice=59.23
[   35.358664][  T415] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   35.366980][  T415] usb 3-1: Product: 홤엔ᠾ貥搡梳⭇ᰨ⌽䖒倅⑬㻚趌竊深⺝劾粫⥏ꯇ辔많ᡈ㐾䵂唫裄㋐㋥컉켂幝䦢劅薞ᒯ戜딀⠆┶䋪䃆耈帖朗ߕ坎㩠횦㏳芀⠵கⳎ⬂넾ᾮ껷㟈Ზ붩㡥짹蛺怱ﺪ집盝꺥᧠截㽘减ᐖ쬽譱㓟ꄭ恌궭蕊꿲奺⣾㟅啼겏䶗㪠县ೠ樰斈䘳푖ꨔ離础̺﵂攤褀芩磩䣿㵵Ü眡
[   35.403622][  T415] usb 3-1: Manufacturer: Ї
[   35.408171][  T415] usb 3-1: SerialNumber: ࠄ
[   35.427072][  T584] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d)
[   35.439449][  T556] raw-gadget.2 gadget: fail, usb_ep_enable returned -22
[   35.451737][   T24] audit: type=1400 audit(1787437398.380:402): avc:  denied  { ioctl } for  pid=586 comm="syz.3.67" path="socket:[15815]" dev="sockfs" ino=15815 ioctlcmd=0x8916 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   35.535454][   T24] audit: type=1400 audit(1787437398.460:403): avc:  denied  { create } for  pid=591 comm="syz.0.68" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[   35.555534][   T24] audit: type=1400 audit(1787437398.460:404): avc:  denied  { connect } for  pid=591 comm="syz.0.68" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[   35.577884][   T24] audit: type=1400 audit(1787437398.500:405): avc:  denied  { create } for  pid=594 comm="syz.0.69" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   35.941421][  T597] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[   36.579811][  T612] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[   36.791874][  T415] usb 3-1: USB disconnect, device number 4
[   36.873335][  T621] EXT4-fs (loop0): 1 truncate cleaned up
[   36.882425][  T621] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,
[   37.291203][  T605] F2FS-fs (loop4): Test dummy encryption mode enabled
[   37.306996][  T605] F2FS-fs (loop4): invalid crc value
[   37.339346][  T605] F2FS-fs (loop4): Found nat_bits in checkpoint
[   37.369657][  T634] Illegal XDP return value 4294967274, expect packet loss!
[   37.431347][  T638] netlink: 28 bytes leftover after parsing attributes in process `syz.0.76'.
[   37.449938][  T621] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.76: bg 0: block 465: padding at end of block bitmap is not set
[   37.466680][  T605] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=80000000, run fsck to fix.
[   37.477616][  T605] F2FS-fs (loop4): Cannot turn on quotas: -2 on 0
[   37.484418][  T621] EXT4-fs (loop0): Remounting filesystem read-only
[   37.491375][  T605] F2FS-fs (loop4): Start checkpoint disabled!
[   37.498240][  T605] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6
[   37.560260][  T281] EXT4-fs error (device loop0): htree_dirblock_to_tree:1092: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0
[   37.624335][  T647] netlink: 200 bytes leftover after parsing attributes in process `syz.0.81'.
[   37.699196][   T52] usb 3-1: new low-speed USB device number 5 using dummy_hcd
[   37.781877][  T651] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended
[   37.791250][   T20] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[   37.810754][  T651] EXT4-fs error (device loop0): ext4_orphan_get:1427: comm syz.0.82: bad orphan inode 13
[   37.822089][  T651] ext4_test_bit(bit=12, block=18) = 1
[   37.827607][  T651] is_bad_inode(inode)=0
[   37.832408][  T651] NEXT_ORPHAN(inode)=0
[   37.836512][  T651] max_ino=32
[   37.840557][  T651] i_nlink=1
[   37.843786][  T651] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue
[   37.860657][  T651] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1047: updating to rev 1 because of new feature flag, running e2fsck is recommended
[   37.875638][  T651] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.82: bg 0: block 248: padding at end of block bitmap is not set
[   37.890369][  T651] EXT4-fs error (device loop0): ext4_acquire_dquot:6230: comm syz.0.82: Failed to acquire dquot type 1
[   37.989118][   T52] usb 3-1: device descriptor read/64, error -71
[   38.079121][   T20] usb 5-1: device descriptor read/64, error -71
[   38.413502][  T112] __quota_error: 16 callbacks suppressed
[   38.413513][  T112] Quota error (device loop0): remove_tree: Getting block too big (0 >= 6)
[   38.428289][   T52] usb 3-1: device descriptor read/64, error -71
[   38.435108][  T112] EXT4-fs error (device loop0): ext4_release_dquot:6266: comm kworker/u4:2: Failed to release dquot type 1
[   38.509171][   T20] usb 5-1: device descriptor read/64, error -71
[   38.649511][  T656] exfat: Bad value for 'uid'
[   38.699143][   T52] usb 3-1: new low-speed USB device number 6 using dummy_hcd
[   38.799143][   T20] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[   38.889367][  T656] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue
[   38.900963][  T656] ext4 filesystem being mounted at /22/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   39.019103][   T52] usb 3-1: device descriptor read/64, error -71
[   39.110652][   T20] usb 5-1: device descriptor read/64, error -71
[   39.389519][   T24] audit: type=1400 audit(1787437402.310:420): avc:  denied  { map } for  pid=661 comm="syz.0.84" path="socket:[16890]" dev="sockfs" ino=16890 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1
[   39.429632][   T24] audit: type=1400 audit(1787437402.350:421): avc:  denied  { accept } for  pid=661 comm="syz.0.84" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1
[   39.459268][   T52] usb 3-1: device descriptor read/64, error -71
[   39.520041][    T7] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=80000000, run fsck to fix.
[   39.539157][   T20] usb 5-1: device descriptor read/64, error -71
[   39.589167][   T52] usb usb3-port1: attempt power cycle
[   39.659491][   T20] usb usb5-port1: attempt power cycle
[   39.759125][  T301] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[   39.990494][   T24] audit: type=1400 audit(1787437402.920:422): avc:  denied  { bind } for  pid=669 comm="syz.4.87" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   40.010368][  T301] usb 1-1: Using ep0 maxpacket: 16
[   40.019273][   T52] usb 3-1: new low-speed USB device number 7 using dummy_hcd
[   40.092766][  T670] EXT4-fs (loop4): Ignoring removed nobh option
[   40.128992][  T670] fscrypt (loop4, inode 2): Error -61 getting encryption context
[   40.129734][  T301] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   40.147409][  T670] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -61
[   40.156287][  T301] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0
[   40.156304][  T301] usb 1-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   40.156336][  T301] usb 1-1: config 0 interface 0 has no altsetting 0
[   40.185706][  T301] usb 1-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00
[   40.194839][  T301] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   40.206898][  T301] usb 1-1: config 0 descriptor??
[   40.219121][  T670] EXT4-fs error (device loop4): ext4_orphan_get:1401: inode #13: comm syz.4.87: inode has both inline data and extents flags
[   40.219590][   T52] usb 3-1: device descriptor read/8, error -71
[   40.250703][  T670] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.87: couldn't read orphan inode 13 (err -117)
[   40.269592][  T670] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsold,nouid32,nobh,stripe=0x000000000000ffff,block_validity,grpjquota=",errors=continue
[   40.320959][  T670] fscrypt (loop4, inode 2): Error -61 getting encryption context
[   40.339547][  T670] fscrypt (loop4, inode 2): Error -61 getting encryption context
[   40.347563][  T670] fscrypt (loop4, inode 2): Error -61 getting encryption context
[   40.499129][   T52] usb 3-1: device descriptor read/8, error -71
[   40.891120][  T665] udc-core: couldn't find an available UDC or it's busy
[   40.898212][  T665] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[   40.911215][  T301] input: HID 041e:2801 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:041E:2801.0002/input/input5
[   40.923633][   T24] audit: type=1400 audit(1787437403.850:423): avc:  denied  { read } for  pid=79 comm="acpid" name="event3" dev="devtmpfs" ino=583 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   40.947266][  T301] prodikeys 0003:041E:2801.0002: input,hidraw0: USB HID v0.00 Joystick [HID 041e:2801] on usb-dummy_hcd.0-1/input0
[   40.972537][   T24] audit: type=1400 audit(1787437403.850:424): avc:  denied  { open } for  pid=79 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=583 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   40.999154][   T52] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[   41.006891][   T24] audit: type=1400 audit(1787437403.930:425): avc:  denied  { ioctl } for  pid=79 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=583 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   41.125487][  T375] usb 1-1: USB disconnect, device number 4
[   41.131493][   T20] usb 2-1: new full-speed USB device number 2 using dummy_hcd
[   41.189172][   T52] usb 3-1: device descriptor read/8, error -71
[   41.519667][   T20] usb 2-1: not running at top speed; connect to a high speed hub
[   41.569266][   T52] usb 3-1: device descriptor read/8, error -71
[   41.609793][   T20] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   41.635240][   T20] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2
[   41.699401][   T52] usb usb3-port1: unable to enumerate USB device
[   41.709009][   T20] usb 2-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00
[   41.811732][   T20] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   42.189473][   T52] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[   42.249182][   T20] usb 2-1: string descriptor 0 read error: -71
[   42.257772][   T20] uvcvideo: Found UVC 1.00 device <unnamed> (046d:0825)
[   42.275854][   T20] uvcvideo: No valid video chain found.
[   42.288914][   T20] usb 2-1: USB disconnect, device number 2
[   42.422513][   T24] audit: type=1400 audit(1787437405.350:426): avc:  denied  { unmount } for  pid=282 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[   42.495475][  T696] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: inode #2: comm syz.4.94: missing EA_INODE flag
[   42.507361][  T696] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.94: error while reading EA inode 2 err=-117
[   42.520162][  T696] EXT4-fs (loop4): 1 orphan inode deleted
[   42.525949][  T696] EXT4-fs (loop4): mounted filesystem without journal. Opts: nombcache,nogrpid,,errors=continue
[   42.547704][  T696] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=696 comm=syz.4.94
[   42.749198][   T52] usb 1-1: New USB device found, idVendor=0582, idProduct=0089, bcdDevice= 0.40
[   42.768681][   T52] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   42.779041][   T52] usb 1-1: Product: syz
[   42.783783][   T52] usb 1-1: Manufacturer: syz
[   42.788413][   T52] usb 1-1: SerialNumber: syz
[   42.819904][   T24] audit: type=1400 audit(1787437405.750:427): avc:  denied  { remount } for  pid=699 comm="syz.1.95" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[   42.829281][  T290] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[   43.065205][   T24] audit: type=1400 audit(1787437405.990:428): avc:  denied  { relabelfrom } for  pid=710 comm="syz.1.97" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1
[   43.079277][  T290] usb 5-1: Using ep0 maxpacket: 16
[   43.179232][   T52] usb 1-1: Can't get UAC3 power state for id 10
[   43.209146][  T290] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   43.219425][  T290] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[   43.229264][   T52] usb 1-1: 2:1 : incorrect wMaxPacketSize for BADD profile
[   43.555082][  T717] attempt to access beyond end of device
[   43.555082][  T717] loop1: rw=16777216, want=1041, limit=128
[   43.589383][  T290] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   43.649796][  T290] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   43.747322][  T290] usb 5-1: Product: syz
[   43.811820][  T290] usb 5-1: Manufacturer: syz
[   43.890532][  T290] usb 5-1: SerialNumber: syz
[   44.148401][  T733] synth uevent: /devices/platform/pcspkr: unknown uevent action string
[   44.167027][  T733] platform pcspkr: uevent: failed to send synthetic uevent
[   44.223043][   T24] kauditd_printk_skb: 2 callbacks suppressed
[   44.223058][   T24] audit: type=1400 audit(1787437407.150:431): avc:  denied  { ioctl } for  pid=734 comm="syz.0.103" path="/dev/uinput" dev="devtmpfs" ino=257 ioctlcmd=0x55ca scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[   44.239087][    C1] sched: RT throttling activated
[   44.245844][   T52] usb 1-1: incorrect wMaxPacketSize 0x10 for BADD profile
[   44.266511][   T52] snd-usb-audio: probe of 1-1:1.0 failed with error -22
[   44.275286][   T52] usb 1-1: USB disconnect, device number 5
[   44.296609][  T696] udc-core: couldn't find an available UDC or it's busy
[   44.303725][  T696] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[   44.389232][  T290] usb 5-1: 0:2 : does not exist
[   44.409194][  T301] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[   44.419575][  T737] exfat: Deprecated parameter 'utf8'
[   44.424932][  T737] exfat: Deprecated parameter 'utf8'
[   44.435075][  T290] usb 5-1: USB disconnect, device number 11
[   44.475761][  T740] capability: warning: `syz.1.105' uses 32-bit capabilities (legacy support in use)
[   44.501077][  T737] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x18acca35, utbl_chksum : 0xe619d30d)
[   44.578856][  T740] EXT4-fs (loop1): orphan cleanup on readonly fs
[   44.585998][  T740] EXT4-fs warning (device loop1): ext4_enable_quotas:6495: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix.
[   44.601199][  T740] EXT4-fs (loop1): Cannot turn on quotas: error -22
[   44.607825][  T740] EXT4-fs error (device loop1): ext4_orphan_get:1427: comm syz.1.105: bad orphan inode 768
[   44.618497][  T740] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue
[   44.648407][   T24] audit: type=1400 audit(1787437407.570:432): avc:  denied  { setopt } for  pid=739 comm="syz.1.105" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   44.668809][  T355] udevd[355]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   44.719984][  T730] netlink: 100 bytes leftover after parsing attributes in process `syz.2.101'.
[   44.739138][  T730] netlink: 36 bytes leftover after parsing attributes in process `syz.2.101'.
[   44.819111][  T301] usb 3-1: unable to get BOS descriptor or descriptor too short
[   44.889198][  T301] usb 3-1: unable to read config index 0 descriptor/start: -71
[   44.901966][  T301] usb 3-1: can't read configurations, error -71
[   44.909096][  T744] F2FS-fs (loop0): Invalid SB checksum offset: 0
[   44.915473][  T744] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock
[   44.926079][  T744] F2FS-fs (loop0): invalid crc value
[   44.951614][  T744] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437)
[   44.990123][  T744] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0
[   44.999911][  T744] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[   45.059097][   T52] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[   45.409215][   T52] usb 2-1: device descriptor read/64, error -71
[   45.448983][   T24] audit: type=1400 audit(1787437408.370:433): avc:  denied  { read write } for  pid=772 comm="syz.2.112" dev="sockfs" ino=16084 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   45.471613][  T773] 9pnet: Insufficient options for proto=fd
[   45.640368][  T744] attempt to access beyond end of device
[   45.640368][  T744] loop0: rw=2049, want=53256, limit=40427
[   45.652643][   T24] audit: type=1400 audit(1787437408.580:434): avc:  denied  { unlink } for  pid=743 comm="syz.0.106" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop0" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1
[   45.704537][  T281] attempt to access beyond end of device
[   45.704537][  T281] loop0: rw=2049, want=40992, limit=40427
[   45.799092][   T52] usb 2-1: device descriptor read/64, error -71
[   46.037924][   T24] audit: type=1326 audit(1787437408.960:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=787 comm="syz.4.117" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1be7ad50d9 code=0x7fc00000
[   46.069109][   T52] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[   46.089133][    T5] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[   46.096842][   T24] audit: type=1400 audit(1787437409.010:436): avc:  denied  { read write } for  pid=787 comm="syz.4.117" name="vhost-vsock" dev="devtmpfs" ino=262 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[   46.141195][   T24] audit: type=1400 audit(1787437409.010:437): avc:  denied  { open } for  pid=787 comm="syz.4.117" path="/dev/vhost-vsock" dev="devtmpfs" ino=262 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[   46.392078][   T52] usb 2-1: device descriptor read/64, error -71
[   46.772489][   T24] audit: type=1326 audit(1787437409.700:438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=787 comm="syz.4.117" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f1be7ad50d9 code=0x7fc00000
[   46.827610][   T24] audit: type=1326 audit(1787437409.720:439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=787 comm="syz.4.117" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1be7ad50d9 code=0x7fc00000
[   46.940014][   T52] usb 2-1: device descriptor read/64, error -71
[   46.946404][   T24] audit: type=1326 audit(1787437409.720:440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=787 comm="syz.4.117" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1be7ad50d9 code=0x7fc00000
[   46.971315][    T5] usb 1-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00
[   46.983970][    T5] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   47.069411][   T52] usb usb2-port1: attempt power cycle
[   47.227157][    T5] usb 1-1: Product: syz
[   47.231433][    T5] usb 1-1: Manufacturer: syz
[   47.236055][    T5] usb 1-1: SerialNumber: syz
[   47.289321][   T20] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[   47.519183][   T52] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[   47.529238][   T20] usb 5-1: Using ep0 maxpacket: 16
[   47.549207][   T25] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[   47.649264][   T20] usb 5-1: config 1 interface 0 altsetting 8 bulk endpoint 0x82 has invalid maxpacket 32
[   47.659692][   T20] usb 5-1: config 1 interface 0 altsetting 8 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[   47.672973][   T20] usb 5-1: config 1 interface 0 has no altsetting 0
[   47.699159][   T52] usb 2-1: device descriptor read/8, error -71
[   47.839179][   T20] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   47.848355][   T20] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   47.856725][   T20] usb 5-1: Product: 굿⪍岪驐ꖻ麊㳼礬娝겳볧亏崛䨴㞒鶦즃熖㹉䐦㦎깆᱀漖싩㣏↝⹸；
[   47.870375][   T20] usb 5-1: Manufacturer: ᫴뭅顋펲睺捔㘬캹㞛ࢋ瞖ꋖᗠ騖䢻수汎廕乒룄摍胐ʄ웿{ꋺ덽앛鋗儲㼊櫐⑃普
[   47.884096][   T20] usb 5-1: SerialNumber: syz
[   47.909170][   T52] usb 2-1: device descriptor read/8, error -71
[   47.915565][  T805] raw-gadget.2 gadget: fail, usb_ep_enable returned -22
[   47.922892][  T805] raw-gadget.2 gadget: fail, usb_ep_enable returned -22
[   47.949842][   T25] usb 3-1: unable to get BOS descriptor or descriptor too short
[   48.029160][   T25] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   48.039687][   T25] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[   48.219562][   T20] cdc_ether: probe of 5-1:1.0 failed with error -22
[   48.220704][  T816] EXT4-fs (loop0): unsupported inode size: 0
[   48.226573][   T25] usb 3-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40
[   48.244391][  T816] EXT4-fs (loop0): blocksize: 4096
[   48.264130][   T20] usb 5-1: USB disconnect, device number 12
[   48.270230][   T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   48.283416][   T25] usb 3-1: Product: syz
[   48.287650][   T25] usb 3-1: Manufacturer: syz
[   48.292780][   T25] usb 3-1: SerialNumber: syz
[   48.386235][  T819] netlink: 224 bytes leftover after parsing attributes in process `syz.0.125'.
[   48.395567][  T819] netlink: 224 bytes leftover after parsing attributes in process `syz.0.125'.
[   48.404650][  T819] netlink: 38 bytes leftover after parsing attributes in process `syz.0.125'.
[   48.419140][   T52] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[   48.589862][   T25] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found
[   48.609221][   T25] usb 3-1: 2:1 : no or invalid class specific endpoint descriptor
[   48.629693][   T52] usb 2-1: config 2 has an invalid interface number: 43 but max is 0
[   48.638834][   T25] usb 3-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -71)
[   48.648426][   T52] usb 2-1: config 2 has no interface number 0
[   48.654862][   T52] usb 2-1: config 2 interface 43 altsetting 13 bulk endpoint 0x1 has invalid maxpacket 64
[   48.665328][   T52] usb 2-1: config 2 interface 43 altsetting 13 bulk endpoint 0x82 has invalid maxpacket 8
[   48.675586][   T52] usb 2-1: config 2 interface 43 has no altsetting 0
[   48.749165][   T25] usb 3-1: USB disconnect, device number 11
[   48.849202][   T52] usb 2-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05
[   48.858855][   T52] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   48.882345][   T52] usb 2-1: Product: syz
[   48.889237][   T52] usb 2-1: Manufacturer: syz
[   48.894097][   T52] usb 2-1: SerialNumber: syz
[   48.929275][  T811] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[   48.936579][  T811] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[   48.985353][  T352] udevd[352]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   49.212707][  T833] udc-core: couldn't find an available UDC or it's busy
[   49.220343][  T833] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[   49.294521][  T835] cgroup: syz.0.129 (835) created nested cgroup for controller "memory" which has incomplete hierarchy support. Nested cgroups may change behavior in the future.
[   49.333284][  T831] EXT4-fs error (device loop2): ext4_orphan_get:1427: comm syz.2.128: bad orphan inode 11862016
[   49.349461][  T835] cgroup: "memory" requires setting use_hierarchy to 1 on the root
[   49.368893][  T831] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue
[   49.391522][  T831] ext4 filesystem being mounted at /32/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   49.551646][  T843] netlink: 8 bytes leftover after parsing attributes in process `syz.2.128'.
[   50.275978][  T850] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue
[   50.293727][   T24] kauditd_printk_skb: 47 callbacks suppressed
[   50.293741][   T24] audit: type=1400 audit(1787437413.220:488): avc:  denied  { read } for  pid=849 comm="syz.2.131" name="file1" dev="loop2" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1
[   50.334290][  T283] EXT4-fs error (device loop2): ext4_mb_generate_buddy:824: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters
[   50.350548][   T24] audit: type=1400 audit(1787437413.280:489): avc:  denied  { unlink } for  pid=283 comm="syz-executor" name="blkio.bfq.io_wait_time_recursive" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   50.429169][    T5] rtl8150 1-1:1.0: couldn't reset the device
[   50.435429][    T5] rtl8150: probe of 1-1:1.0 failed with error -5
[   50.450769][    T5] usb 1-1: USB disconnect, device number 6
[   50.607413][   T24] audit: type=1400 audit(1787437413.530:490): avc:  denied  { mounton } for  pid=856 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1
[   50.680150][   T24] audit: type=1400 audit(1787437413.610:491): avc:  denied  { setopt } for  pid=860 comm="syz.4.135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   50.707203][  T856] bridge0: port 1(bridge_slave_0) entered blocking state
[   50.718614][  T856] bridge0: port 1(bridge_slave_0) entered disabled state
[   50.729001][  T856] device bridge_slave_0 entered promiscuous mode
[   50.736624][  T856] bridge0: port 2(bridge_slave_1) entered blocking state
[   50.743850][  T856] bridge0: port 2(bridge_slave_1) entered disabled state
[   50.751555][  T856] device bridge_slave_1 entered promiscuous mode
[   50.759878][  T861] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue
[   50.829202][    T5] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[   50.876838][  T856] bridge0: port 2(bridge_slave_1) entered blocking state
[   50.883958][  T856] bridge0: port 2(bridge_slave_1) entered forwarding state
[   50.890071][   T52] ums-usbat 2-1:2.43: USB Mass Storage device detected
[   50.891496][  T856] bridge0: port 1(bridge_slave_0) entered blocking state
[   50.905137][  T856] bridge0: port 1(bridge_slave_0) entered forwarding state
[   50.929603][   T52] ums-usbat 2-1:2.43: Quirks match for vid 0781 pid 0005: 1
[   50.974429][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   50.983203][  T112] bridge0: port 1(bridge_slave_0) entered disabled state
[   50.991935][  T112] bridge0: port 2(bridge_slave_1) entered disabled state
[   51.017267][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   51.030052][   T52] ums-usbat: probe of 2-1:2.43 failed with error 3
[   51.042543][   T52] usb 2-1: USB disconnect, device number 6
[   51.043590][  T112] bridge0: port 1(bridge_slave_0) entered blocking state
[   51.043599][  T112] bridge0: port 1(bridge_slave_0) entered forwarding state
[   51.043754][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   51.043920][  T112] bridge0: port 2(bridge_slave_1) entered blocking state
[   51.043928][  T112] bridge0: port 2(bridge_slave_1) entered forwarding state
[   51.057463][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   51.057747][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   51.060120][    T9] device bridge_slave_1 left promiscuous mode
[   51.060190][    T9] bridge0: port 2(bridge_slave_1) entered disabled state
[   51.060745][    T9] device bridge_slave_0 left promiscuous mode
[   51.060797][    T9] bridge0: port 1(bridge_slave_0) entered disabled state
[   51.061862][    T9] device veth1_macvtap left promiscuous mode
[   51.061899][    T9] device veth0_vlan left promiscuous mode
[   51.189202][    T5] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   51.189216][    T5] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   51.189238][    T5] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[   51.189254][    T5] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   51.189988][    T5] usb 1-1: config 0 descriptor??
[   51.249392][  T879] netlink: 44 bytes leftover after parsing attributes in process `syz.4.138'.
[   51.270199][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   51.293886][  T856] device veth0_vlan entered promiscuous mode
[   51.306216][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   51.314874][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   51.322575][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   51.336302][  T856] device veth1_macvtap entered promiscuous mode
[   51.343825][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   51.356501][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   51.383045][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   51.429221][   T52] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[   51.450105][  T590] bridge0: port 3(syz_tun) entered disabled state
[   51.457747][  T590] device syz_tun left promiscuous mode
[   51.463322][  T590] bridge0: port 3(syz_tun) entered disabled state
[   51.474316][   T24] audit: type=1400 audit(1787437414.400:492): avc:  denied  { mounton } for  pid=856 comm="syz-executor" path="/root/syzkaller.yalymQ/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1
[   51.563613][  T891] bridge0: port 1(bridge_slave_0) entered blocking state
[   51.571017][  T891] bridge0: port 1(bridge_slave_0) entered disabled state
[   51.578545][  T891] device bridge_slave_0 entered promiscuous mode
[   51.585927][  T891] bridge0: port 2(bridge_slave_1) entered blocking state
[   51.593348][  T891] bridge0: port 2(bridge_slave_1) entered disabled state
[   51.601072][  T891] device bridge_slave_1 entered promiscuous mode
[   51.634310][  T835] udc-core: couldn't find an available UDC or it's busy
[   51.641576][  T835] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[   51.664204][  T891] bridge0: port 2(bridge_slave_1) entered blocking state
[   51.671289][  T891] bridge0: port 2(bridge_slave_1) entered forwarding state
[   51.678550][  T891] bridge0: port 1(bridge_slave_0) entered blocking state
[   51.685638][  T891] bridge0: port 1(bridge_slave_0) entered forwarding state
[   51.739503][   T52] usb 2-1: Using ep0 maxpacket: 16
[   51.869798][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   51.882659][  T112] bridge0: port 1(bridge_slave_0) entered disabled state
[   51.891110][  T112] bridge0: port 2(bridge_slave_1) entered disabled state
[   51.919334][   T52] usb 2-1: config 0 interface 0 has no altsetting 0
[   51.963890][   T24] audit: type=1400 audit(1787437414.890:493): avc:  denied  { associate } for  pid=834 comm="syz.0.129" name="blkio.bfq.io_wait_time_recursive" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[   51.970728][  T301] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[   51.999504][   T52] usb 2-1: New USB device found, idVendor=056a, idProduct=0028, bcdDevice= 0.00
[   52.008656][   T52] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   52.017888][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   52.026379][  T112] bridge0: port 1(bridge_slave_0) entered blocking state
[   52.033531][  T112] bridge0: port 1(bridge_slave_0) entered forwarding state
[   52.033711][   T52] usb 2-1: config 0 descriptor??
[   52.041688][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   52.054128][  T112] bridge0: port 2(bridge_slave_1) entered blocking state
[   52.061262][  T112] bridge0: port 2(bridge_slave_1) entered forwarding state
[   52.082708][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   52.092109][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   52.100223][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   52.110931][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   52.121306][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   52.128840][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   52.137522][  T891] device veth0_vlan entered promiscuous mode
[   52.148475][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   52.158118][  T891] device veth1_macvtap entered promiscuous mode
[   52.170718][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   52.181227][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   52.210372][  T903] Unknown ioctl 35108
[   52.215723][  T903] Unknown ioctl -1069018509
[   52.221424][  T903] Unknown ioctl 1080602275
[   52.239130][  T301] usb 5-1: Using ep0 maxpacket: 16
[   52.241917][  T905] SELinux: security_context_str_to_sid( ) failed for (dev binder, type binder) errno=-22
[   52.244472][   T24] audit: type=1400 audit(1787437415.170:494): avc:  denied  { remount } for  pid=904 comm="syz.6.142" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[   52.443339][  T913] netlink: 8 bytes leftover after parsing attributes in process `syz.6.143'.
[   52.493766][  T914] udc-core: couldn't find an available UDC or it's busy
[   52.522901][  T914] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[   52.644795][   T52] wacom 0003:056A:0028.0003: unknown main item tag 0x6
[   52.652261][   T52] wacom 0003:056A:0028.0003: ignoring exceeding usage max
[   52.667909][   T52] wacom 0003:056A:0028.0003: Unknown device_type for 'HID 056a:0028'. Assuming pen.
[   52.677545][  T301] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   52.681447][   T52] wacom 0003:056A:0028.0003: hidraw0: USB HID v0.08 Device [HID 056a:0028] on usb-dummy_hcd.1-1/input0
[   52.688536][  T301] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   52.704310][   T52] input: Wacom Intuos5 touch L Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:056A:0028.0003/input/input7
[   52.709344][  T301] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[   52.709380][  T301] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[   52.709391][  T301] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   52.723269][  T301] usb 5-1: config 0 descriptor??
[   52.822740][  T442] usb 7-1: new full-speed USB device number 2 using dummy_hcd
[   52.843972][    T5] usbhid 1-1:0.0: can't add hid device: -71
[   52.859795][    T5] usbhid: probe of 1-1:0.0 failed with error -71
[   52.873836][    T5] usb 1-1: USB disconnect, device number 7
[   52.884387][   T15] usb 2-1: USB disconnect, device number 7
[   53.096808][  T890] udc-core: couldn't find an available UDC or it's busy
[   53.174707][  T890] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[   53.199634][   T24] audit: type=1400 audit(1787437416.130:495): avc:  denied  { mounton } for  pid=924 comm="syz.5.146" path="/1/config" dev="configfs" ino=1063 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[   53.214757][  T928] Mass Storage Function, version: 2009/09/11
[   53.228646][  T928] LUN: removable file: (no medium)
[   53.236693][   T24] audit: type=1400 audit(1787437416.130:496): avc:  denied  { search } for  pid=924 comm="syz.5.146" name="/" dev="configfs" ino=1063 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[   53.251093][  T926] ------------[ cut here ]------------
[   53.264442][  T926] refcount_t: addition on 0; use-after-free.
[   53.270716][  T926] WARNING: CPU: 1 PID: 926 at lib/refcount.c:25 refcount_warn_saturate+0x104/0x1a0
[   53.280028][  T926] Modules linked in:
[   53.283969][  T926] CPU: 1 PID: 926 Comm: syz.5.146 Not tainted syzkaller #0
[   53.291206][  T926] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   53.301305][  T926] RIP: 0010:refcount_warn_saturate+0x104/0x1a0
[   53.307461][  T926] Code: 04 01 48 c7 c7 00 4e 40 85 e8 08 0f 3b 02 0f 0b eb df e8 7f a8 26 ff c6 05 9c 8b 82 04 01 48 c7 c7 40 4d 40 85 e8 ec 0e 3b 02 <0f> 0b eb c3 e8 63 a8 26 ff c6 05 81 8b 82 04 01 48 c7 c7 a0 4d 40
[   53.327083][  T926] RSP: 0018:ffffc90000e6fc98 EFLAGS: 00010246
[   53.333170][  T926] RAX: cd60d5566d1c8b00 RBX: 0000000000000002 RCX: ffff8881273293c0
[   53.341526][  T926] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000
[   53.349637][  T926] RBP: ffffc90000e6fca8 R08: ffffc90000e6f627 R09: fffff520001cdef8
[   53.357621][  T926] R10: dffffc0000000000 R11: fffff520001cdec5 R12: ffff888113404648
[   53.365607][  T926] R13: dffffc0000000000 R14: 0000000000000002 R15: 0000000000000000
[   53.373605][  T926] FS:  00007f1913e8f6c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000
[   53.382722][  T926] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   53.389508][  T926] CR2: 00007f1913e4cff8 CR3: 0000000110e1a000 CR4: 00000000003506a0
[   53.397755][  T926] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[   53.405760][  T926] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[   53.413787][  T926] Call Trace:
[   53.417091][  T926]  config_item_get+0x8c/0x90
[   53.421829][  T926]  configfs_symlink+0x44f/0x1320
[   53.426777][  T926]  ? show_sid+0x1b0/0x1b0
[   53.431306][  T926]  ? __lookup_hash+0x122/0x250
[   53.436084][  T926]  ? detach_groups+0x370/0x370
[   53.440985][  T926]  ? selinux_inode_symlink+0x22/0x30
[   53.446280][  T926]  ? security_inode_symlink+0xba/0x100
[   53.451818][  T926]  vfs_symlink+0x339/0x4c0
[   53.456241][  T926]  do_symlinkat+0x10e/0x3d0
[   53.460930][  T926]  __x64_sys_symlinkat+0x7b/0x90
[   53.465886][  T926]  do_syscall_64+0x31/0x40
[   53.470401][  T926]  entry_SYSCALL_64_after_hwframe+0x61/0xcb
[   53.476315][  T926] RIP: 0033:0x7f19154360d9
[   53.480752][  T926] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   53.500513][  T926] RSP: 002b:00007f1913e8f028 EFLAGS: 00000246 ORIG_RAX: 000000000000010a
[   53.508937][  T926] RAX: ffffffffffffffda RBX: 00007f19156bdfa0 RCX: 00007f19154360d9
[   53.516992][  T926] RDX: 0000200000000300 RSI: ffffffffffffff9c RDI: 0000200000000200
[   53.525064][  T926] RBP: 00007f19154cd024 R08: 0000000000000000 R09: 0000000000000000
[   53.533159][  T926] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   53.541160][  T926] R13: 00007f19156be038 R14: 00007f19156bdfa0 R15: 00007ffe92f2d338
[   53.549180][  T926] ---[ end trace f5e9d9112eeb1903 ]---
[   53.559049][  T923]  loop1: p1 < p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 p18 p19 p20 p21 p22 p23 p24 p25 p26 p27 p28 p29 p30 p31 p32 p33 p34 p35 p36 p37 p38 p39 p40 p41 p42 p43 p44 p45 p46 p47 p48 p49 p50 p51 p52 p53 p54 p55 p56 p57 p58 p59 p60 p61 p62 p63 p64 p65 p66 p67 p68 p69 p70 p71 p72 p73 p74 p75 p76 p77 p78 p79 p80 p81 p82 p83 p84 p85 p86 p87 p88 p89 p90 p91 p92 p93 p94 p95 p96 p97 p98 p99 p100 p101 p102 p103 p104 p105 p106 p107 p108 p109 p110 p111 p112 p113 p114 p115 p116 p117 p118 p119 p120 p121 p122 p123 p124 p125 p126 p127 p128 p129 p130 p131 p132 p133 p134 p135 p136 p137 p138 p139 p140 p141 p142 p143 p144 p145 p146 p147 p148 p149 p150 p151 p152 p153 p154 p155 p156 p157 p158 p159 p160 p161 p162 p163 p164 p165 p166 p167 p168 p169 p170 p171 p172 p173 p174 p175 p176 p177 p178 p179 p180 p181 p182 p183 p184 p185 p186 p187 p188 p189 p190 p191 p192 p193 p194 p195 p196 p197 p198 p199 p200 p201 p202 p203 p204 p205 p206 p207 p208 p209 p210 p211 p212 p213 p214 p215 p216 
[   53.563625][   T24] audit: type=1400 audit(1787437416.130:497): avc:  denied  { write } for  pid=924 comm="syz.5.146" name="functions" dev="configfs" ino=15533 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[   53.682373][  T442] usb 7-1: device descriptor read/64, error -71
[   53.747801][  T926] ==================================================================
[   53.755948][  T926] BUG: KASAN: use-after-free in config_item_put+0x33/0x210
[   53.763173][  T926] Write of size 4 at addr ffff88811592d424 by task syz.5.146/926
[   53.770909][  T926] 
[   53.773263][  T926] CPU: 0 PID: 926 Comm: syz.5.146 Tainted: G        W         syzkaller #0
[   53.781861][  T926] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   53.791961][  T926] Call Trace:
[   53.795287][  T926]  __dump_stack+0x21/0x24
[   53.799658][  T926]  dump_stack_lvl+0x1a7/0x208
[   53.804547][  T926]  ? show_regs_print_info+0x18/0x18
[   53.809776][  T926]  ? thaw_kernel_threads+0x220/0x220
[   53.815110][  T926]  print_address_description+0x7f/0x2c0
[   53.820703][  T926]  ? config_item_put+0x33/0x210
[   53.825596][  T926]  kasan_report+0x100/0x140
[   53.830141][  T926]  ? config_item_put+0x33/0x210
[   53.835035][  T926]  kasan_check_range+0x249/0x2a0
[   53.840009][  T926]  __kasan_check_write+0x14/0x20
[   53.844991][  T926]  config_item_put+0x33/0x210
[   53.849709][  T926]  configfs_symlink+0x4a6/0x1320
[   53.854830][  T926]  ? show_sid+0x1b0/0x1b0
[   53.859194][  T926]  ? __lookup_hash+0x122/0x250
[   53.863993][  T926]  ? detach_groups+0x370/0x370
[   53.868802][  T926]  ? selinux_inode_symlink+0x22/0x30
[   53.874123][  T926]  ? security_inode_symlink+0xba/0x100
[   53.879626][  T926]  vfs_symlink+0x339/0x4c0
[   53.884081][  T926]  do_symlinkat+0x10e/0x3d0
[   53.888623][  T926]  __x64_sys_symlinkat+0x7b/0x90
[   53.893605][  T926]  do_syscall_64+0x31/0x40
[   53.898074][  T926]  entry_SYSCALL_64_after_hwframe+0x61/0xcb
[   53.904035][  T926] RIP: 0033:0x7f19154360d9
[   53.908578][  T926] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   53.928361][  T926] RSP: 002b:00007f1913e8f028 EFLAGS: 00000246 ORIG_RAX: 000000000000010a
[   53.936807][  T926] RAX: ffffffffffffffda RBX: 00007f19156bdfa0 RCX: 00007f19154360d9
[   53.944814][  T926] RDX: 0000200000000300 RSI: ffffffffffffff9c RDI: 0000200000000200
[   53.952816][  T926] RBP: 00007f19154cd024 R08: 0000000000000000 R09: 0000000000000000
[   53.960815][  T926] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   53.968814][  T926] R13: 00007f19156be038 R14: 00007f19156bdfa0 R15: 00007ffe92f2d338
[   53.976811][  T926] 
[   53.979164][  T926] Allocated by task 928:
[   53.983447][  T926]  __kasan_kmalloc+0xd4/0x100
[   53.988193][  T926]  kmem_cache_alloc_trace+0x179/0x2e0
[   53.993598][  T926]  fsg_alloc_inst+0x61/0x5a0
[   53.998232][  T926]  usb_get_function_instance+0xe2/0x2f0
[   54.003831][  T926]  function_make+0x118/0x350
[   54.008480][  T926]  configfs_mkdir+0x5d2/0xd90
[   54.013190][  T926]  vfs_mkdir+0x42c/0x600
[   54.017465][  T926]  do_mkdirat+0x14c/0x340
[   54.021834][  T926]  __x64_sys_mkdirat+0x7b/0x90
[   54.026631][  T926]  do_syscall_64+0x31/0x40
[   54.031086][  T926]  entry_SYSCALL_64_after_hwframe+0x61/0xcb
[   54.036994][  T926] 
[   54.039354][  T926] Freed by task 927:
[   54.043277][  T926]  kasan_set_track+0x4a/0x70
[   54.047898][  T926]  kasan_set_free_info+0x23/0x40
[   54.052874][  T926]  ____kasan_slab_free+0x125/0x160
[   54.058014][  T926]  __kasan_slab_free+0x11/0x20
[   54.062829][  T926]  slab_free_freelist_hook+0xc5/0x190
[   54.068238][  T926]  kfree+0xc0/0x270
[   54.072080][  T926]  fsg_free_inst+0x33c/0x420
[   54.076710][  T926]  usb_put_function_instance+0x85/0xa0
[   54.082216][  T926]  fsg_attr_release+0x15/0x20
[   54.086931][  T926]  config_item_put+0x158/0x210
[   54.091723][  T926]  configfs_rmdir+0x89f/0x960
[   54.096431][  T926]  vfs_rmdir+0x1ab/0x3c0
[   54.100707][  T926]  do_rmdir+0x232/0x630
[   54.104896][  T926]  __x64_sys_rmdir+0x49/0x50
[   54.109501][  T926]  do_syscall_64+0x31/0x40
[   54.113940][  T926]  entry_SYSCALL_64_after_hwframe+0x61/0xcb
[   54.119832][  T926] 
[   54.122178][  T926] The buggy address belongs to the object at ffff88811592d400
[   54.122178][  T926]  which belongs to the cache kmalloc-512 of size 512
[   54.136250][  T926] The buggy address is located 36 bytes inside of
[   54.136250][  T926]  512-byte region [ffff88811592d400, ffff88811592d600)
[   54.149450][  T926] The buggy address belongs to the page:
[   54.155122][  T926] page:ffffea0004564b00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x11592c
[   54.165369][  T926] head:ffffea0004564b00 order:2 compound_mapcount:0 compound_pincount:0
[   54.173703][  T926] flags: 0x4000000000010200(slab|head)
[   54.179180][  T926] raw: 4000000000010200 dead000000000100 dead000000000122 ffff888100043080
[   54.187774][  T926] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000
[   54.196390][  T926] page dumped because: kasan: bad access detected
[   54.202818][  T926] page_owner tracks the page as allocated
[   54.208562][  T926] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 83, ts 31330916905, free_ts 31267461627
[   54.228879][  T926]  prep_new_page+0x176/0x190
[   54.233480][  T926]  get_page_from_freelist+0x225f/0x23f0
[   54.239040][  T926]  __alloc_pages_nodemask+0x29a/0x640
[   54.244427][  T926]  new_slab+0x84/0x3f0
[   54.248507][  T926]  ___slab_alloc+0x2f8/0x4c0
[   54.253102][  T926]  __slab_alloc+0x63/0xa0
[   54.257436][  T926]  __kmalloc_track_caller+0x1e4/0x310
[   54.262817][  T926]  __alloc_skb+0xdc/0x520
[   54.267155][  T926]  alloc_skb_with_frags+0xa3/0x560
[   54.272277][  T926]  sock_alloc_send_pskb+0x87f/0x9a0
[   54.277479][  T926]  unix_dgram_sendmsg+0x6f3/0x18f0
[   54.282597][  T926]  __sys_sendto+0x467/0x620
[   54.287104][  T926]  __x64_sys_sendto+0xe5/0x100
[   54.291868][  T926]  do_syscall_64+0x31/0x40
[   54.296338][  T926]  entry_SYSCALL_64_after_hwframe+0x61/0xcb
[   54.302234][  T926] page last free stack trace:
[   54.306922][  T926]  __free_pages_ok+0x80b/0x830
[   54.311694][  T926]  __free_pages+0xd8/0x390
[   54.316118][  T926]  free_pages+0x82/0x90
[   54.320285][  T926]  __stack_depot_save+0x492/0x4c0
[   54.325316][  T926]  kasan_set_track+0x5b/0x70
[   54.329915][  T926]  kasan_set_free_info+0x23/0x40
[   54.334856][  T926]  ____kasan_slab_free+0x125/0x160
[   54.339978][  T926]  __kasan_slab_free+0x11/0x20
[   54.344746][  T926]  slab_free_freelist_hook+0xc5/0x190
[   54.350124][  T926]  kfree+0xc0/0x270
[   54.353953][  T926]  release_card_device+0xbf/0x100
[   54.358980][  T926]  device_release+0x96/0x1c0
[   54.363573][  T926]  kobject_put+0x18a/0x270
[   54.367989][  T926]  put_device+0x1f/0x30
[   54.372172][  T926]  snd_card_free_when_closed+0x41/0x50
[   54.377656][  T926]  usb_audio_disconnect+0x6d7/0x7d0
[   54.382883][  T926] 
[   54.385215][  T926] Memory state around the buggy address:
[   54.390855][  T926]  ffff88811592d300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[   54.399096][  T926]  ffff88811592d380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[   54.407179][  T926] >ffff88811592d400: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   54.415243][  T926]                                ^
[   54.420362][  T926]  ffff88811592d480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   54.428428][  T926]  ffff88811592d500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   54.436491][  T926] ==================================================================
[   54.444564][  T926] Disabling lock debugging due to kernel taint
[   54.450779][   T25] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[   54.466583][  T926] ------------[ cut here ]------------
[   54.485554][  T926] refcount_t: underflow; use-after-free.
[   54.510891][  T926] WARNING: CPU: 1 PID: 926 at lib/refcount.c:28 refcount_warn_saturate+0x120/0x1a0
[   54.522993][  T926] Modules linked in:
[   54.526976][  T926] CPU: 1 PID: 926 Comm: syz.5.146 Tainted: G    B   W         syzkaller #0
[   54.536609][  T926] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   54.555383][  T926] RIP: 0010:refcount_warn_saturate+0x120/0x1a0
[   54.567158][  T926] Code: 04 01 48 c7 c7 40 4d 40 85 e8 ec 0e 3b 02 0f 0b eb c3 e8 63 a8 26 ff c6 05 81 8b 82 04 01 48 c7 c7 a0 4d 40 85 e8 d0 0e 3b 02 <0f> 0b eb a7 e8 47 a8 26 ff c6 05 62 8b 82 04 01 48 c7 c7 c0 4c 40
[   54.587155][  T301] usbhid 5-1:0.0: can't add hid device: -71
[   54.593392][  T301] usbhid: probe of 5-1:0.0 failed with error -71
[   54.599976][  T926] RSP: 0018:ffffc90000e6fc78 EFLAGS: 00010246
[   54.606251][  T926] RAX: cd60d5566d1c8b00 RBX: 0000000000000003 RCX: ffff8881273293c0
[   54.614474][  T926] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000
[   54.623934][  T301] usb 5-1: USB disconnect, device number 13
[   54.630889][  T926] RBP: ffffc90000e6fc88 R08: ffff8881f7152fbf R09: 1ffff1103ee2a5f7
[   54.639256][  T442] usb 7-1: device descriptor read/64, error -71
[   54.640279][  T926] R10: dffffc0000000000 R11: ffffed103ee2a5f8 R12: 00000000ffffffea
[   54.653737][  T926] R13: dffffc0000000000 R14: 0000000000000003 R15: 00000000c0000000
[   54.661933][  T926] FS:  00007f1913e8f6c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000
[   54.675143][  T926] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   54.681979][  T926] CR2: 00007ff9f2452d90 CR3: 0000000110e1a000 CR4: 00000000003506b0
[   54.690365][  T926] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[   54.698504][  T926] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[   54.706704][  T926] Call Trace:
[   54.710210][  T926]  config_item_put+0x200/0x210
[   54.713234][   T25] usb 1-1: Using ep0 maxpacket: 16
[   54.715418][  T926]  configfs_symlink+0x4a6/0x1320
[   54.725318][  T926]  ? show_sid+0x1b0/0x1b0
[   54.729815][  T926]  ? __lookup_hash+0x122/0x250
[   54.734686][  T926]  ? detach_groups+0x370/0x370
[   54.739761][  T926]  ? selinux_inode_symlink+0x22/0x30
[   54.745162][  T926]  ? security_inode_symlink+0xba/0x100
[   54.750852][  T926]  vfs_symlink+0x339/0x4c0
[   54.755494][  T926]  do_symlinkat+0x10e/0x3d0
[   54.760314][  T926]  __x64_sys_symlinkat+0x7b/0x90
[   54.765439][  T926]  do_syscall_64+0x31/0x40
[   54.770018][  T926]  entry_SYSCALL_64_after_hwframe+0x61/0xcb
[   54.776107][  T926] RIP: 0033:0x7f19154360d9
[   54.780687][  T926] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   54.800647][  T926] RSP: 002b:00007f1913e8f028 EFLAGS: 00000246 ORIG_RAX: 000000000000010a
[   54.809221][  T926] RAX: ffffffffffffffda RBX: 00007f19156bdfa0 RCX: 00007f19154360d9
[   54.817404][  T926] RDX: 0000200000000300 RSI: ffffffffffffff9c RDI: 0000200000000200
[   54.825594][  T926] RBP: 00007f19154cd024 R08: 0000000000000000 R09: 0000000000000000
[   54.833957][  T926] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   54.842125][  T926] R13: 00007f19156be038 R14: 00007f19156bdfa0 R15: 00007ffe92f2d338
[   54.850521][  T926] ---[ end trace f5e9d9112eeb1904 ]---
[   54.859319][   T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   54.870664][   T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   54.881017][   T25] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[   54.894016][   T25] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[   54.904348][  T937] udevd[937]: inotify_add_watch(7, /dev/loop1p9, 10) failed: No such file or directory
[   54.907691][  T303] udevd[303]: inotify_add_watch(7, /dev/loop1p14, 10) failed: No such file or directory
[   54.917143][  T355] udevd[355]: inotify_add_watch(7, /dev/loop1p15, 10) failed: No such file or directory
[   54.927206][  T353] udevd[353]: inotify_add_watch(7, /dev/loop1p18, 10) failed: No such file or directory
[   54.934201][  T442] usb 7-1: new full-speed USB device number 3 using dummy_hcd
[   54.951795][  T344] udevd[344]: inotify_add_watch(7, /dev/loop1p16, 10) failed: No such file or directory
[   54.953957][  T350] udevd[350]: inotify_add_watch(7, /dev/loop1p17, 10) failed: No such file or directory
[   54.972503][  T940] udevd[940]: inotify_add_watch(7, /dev/loop1p12, 10) failed: No such file or directory
[   54.974296][  T939] udevd[939]: inotify_add_watch(7, /dev/loop1p11, 10) failed: No such file or directory
[   54.993002][   T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   55.001578][  T941] udevd[941]: inotify_add_watch(7, /dev/loop1p13, 10) failed: No such file or directory
[   55.011664][  T352] udevd[352]: inotify_add_watch(7, /dev/loop1p20, 10) failed: No such file or directory
[   55.022406][   T25] usb 1-1: config 0 descriptor??
[   55.190809][    T9] device bridge_slave_1 left promiscuous mode
[   55.197007][    T9] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.210873][    T9] device bridge_slave_0 left promiscuous mode
[   55.222831][    T9] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.248481][    T9] device veth1_macvtap left promiscuous mode
[   55.259658][    T9] device veth0_vlan left promiscuous mode
[   55.289173][  T442] usb 7-1: device descriptor read/64, error -71
[   55.557306][  T936] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x1fe4a43c, utbl_chksum : 0xe619d30d)
[   55.572531][   T24] kauditd_printk_skb: 12 callbacks suppressed
[   55.572543][   T24] audit: type=1400 audit(1787437418.500:510): avc:  denied  { connect } for  pid=935 comm="syz.0.149" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   55.669163][   T25] usbhid 1-1:0.0: can't add hid device: -71
[   55.675173][   T25] usbhid: probe of 1-1:0.0 failed with error -71
[   55.683054][   T25] usb 1-1: USB disconnect, device number 8