last executing test programs:

27.596963824s ago: executing program 4 (id=700):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70200001400a685b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='fdb_delete\x00', r2}, 0x10)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"})
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000040000000500000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\t\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r8 = eventfd(0x3)
read$eventfd(r8, &(0x7f0000000280), 0x8)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r6}, &(0x7f0000000800), &(0x7f0000000840)=r7}, 0x20)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r9}, 0x10)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0)
syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x1810714, &(0x7f0000000380)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x89cd}}, {@user_xattr}, {@grpjquota_path}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x81}}, {@prjquota}, {@usrjquota}, {@usrjquota}, {@min_batch_time={'min_batch_time', 0x3d, 0x409e}}, {@test_dummy_encryption}]}, 0xff, 0x46d, &(0x7f0000002040)="$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")
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="dc00000000010104000000000000000002000000240002801400018008000100e000000108000200e00000010c0002800500010000000000080004800400038008"], 0xdc}}, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10)
openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)

26.614914565s ago: executing program 4 (id=702):
r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./bus\x00', 0x400e, &(0x7f0000000180)={[{@data_journal}, {@jqfmt_vfsv0}, {@errors_continue}, {@nodelalloc}, {@init_itable_val={'init_itable', 0x3d, 0x4}}, {@acl}]}, 0x1, 0x42f, &(0x7f0000000280)="$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")
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r3 = getpid()
sched_setscheduler(r3, 0x1, &(0x7f0000000100)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
preadv(r0, &(0x7f0000000200)=[{&(0x7f00000006c0)=""/247, 0xf7}, {&(0x7f00000007c0)=""/142, 0x8e}], 0x2, 0x4, 0xc)
open(0x0, 0x0, 0x40)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x48)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f00000008c0)='rxrpc_conn\x00', r7, 0x0, 0x8}, 0x18)
pwrite64(0xffffffffffffffff, &(0x7f0000000080)='3', 0x500, 0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000880)='cpuset.effective_cpus\x00', 0x275a, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000ec0)={{r6, <r9=>0xffffffffffffffff}, &(0x7f0000000e40), &(0x7f0000000e80)=r8}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x15, 0x14, &(0x7f0000000900)=ANY=[@ANYBLOB="18010003696c6c2500000000002020207b1af8ff00000000bfa100000000000007015c4b7ee20b440000f8ffffa5fd3071a00e542c00b703000000ffffffff85100000030000008d49c0ff01000000186f11d54f598ddb7f727ea140d2606dbb529b59fb18ad8aad9d6300647f230f8cb1", @ANYBLOB="02daa91bc36e47e31905a598f038043a5525fb2740b4eeb3589251fc535e097c9c41a022da3dcdd2b1624e527a8cbeb30d8e70b3bb53f3791e8d0553e170872b833d3a5470b7f5b06ee33d822fdf2b9a4dfcce0665873151d7f5aac0262957a12e16ce945c1728de21b8e8b6505d91e11e4550bd", @ANYBLOB="0000000000000000b7080000030000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082000000"], &(0x7f0000000a40)='GPL\x00', 0xc, 0x65, &(0x7f0000000a80)=""/101, 0x0, 0x40, '\x00', 0x0, @fallback=0x5, r8, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000b00)={0x8, 0xe, 0x5, 0x75d}, 0x10, 0x0, r7, 0x4, &(0x7f0000000f00)=[r8, r1, r1, r1, r1, r2, r9, r2], &(0x7f0000000f40)=[{0x21, 0x4, 0x3, 0x2}, {0x1, 0x4, 0x5, 0x2}, {0x3, 0x2, 0x9}, {0x4, 0x3, 0xa}], 0x10, 0xd90d, @void, @value}, 0x94)
write$FUSE_BMAP(r1, 0x0, 0x0)
write$binfmt_script(r8, &(0x7f0000000140), 0xfcb8)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0x40305829, &(0x7f0000000000)={0x17c04, 0xffffffffffffffff, 0x0, 0x100000001})
ioctl$EXT4_IOC_MOVE_EXT(r1, 0x40305829, &(0x7f00000000c0)={0x17c04, 0xffffffffffffffff, 0x0, 0x100000004, 0x4, 0x5a2})

25.239852561s ago: executing program 4 (id=707):
rename(0x0, 0x0)
r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0)
syz_usb_disconnect(r0)
r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1}, 0x0, 0x0}, 0x20)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
prlimit64(0x0, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32], 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000008c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r6}, 0x10)
pwrite64(r2, &(0x7f0000000080)='3', 0x1, 0x0)
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000240), 0x21, 0x4cd, &(0x7f0000000a00)="$eJzs3c9vG1kdAPDvTJomm81usrAHQMCWZZeCqtqJu42qnsoFhKpKiIoThzYkbhTFjqPYKU3oIf0POCBRiRP8CRyQOCD1xJ0b3LiUA1KBCtQgcTCa8Th1fjYtJmbjz0cazbw3znzfszXzxt8k8wIYWhciYjsizkfE3YiYKuqTYokbnSV73YvnDxd2nj9cSKLdvv23JN+f1UXPz2TeLo45HhHf+3bED5ODcZubWyvztVp1vSiXW/W1cnNz6/JyfX6pulRdrVTmZudmrl25WulbXz+o/+rZt5Zvfv+3v/nS099vf+PHWbMmi329/ega7UPMpDjSZE/duYi42Ydj/z8YKfpzftAN4Y2kEfGZiPgwP/+nYiT/NAGAs6zdnor2VG8ZADjr0jwHlqSlIhcwGWlaKnVyeO/HRFprNFuX7jU2Vhc7ubLpGE3vLdeqM0WucDpGk6w8m2+/LFf2la9ExHsR8dOxt/JyaaFRWxzkjQ8ADLG3943//xzrjP8AwBk3PugGAACnzvgPAMPH+A8Aw8f4DwDDx/gPAMPH+A8Aw8f4DwBD5bu3bmVLe6d4/vXi/c2Nlcb9y4vV5kqpvrFQWmisr5WWGo2l/Jk99Vcdr9ZorM1+EhsPyq1qs1Vubm7dqTc2Vlt38ud636nueaZ2Px6wDQC8tvc+ePLHJCK2r7+VL9Ezl4PhGc62dNANAAZmZNANAAbGbF8wvHzHBw6ZonePI/9E6HH/2wKcjoufl/+HYSX/D8PrFfn/5JVfDIBPLfl/GF7tdmLOfwAYMnL8gN//AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwOubzJckLRVzgU9GmpZKEe9ExHSMJveWa9WZiHg3Iv4wNjqWlWcH3WgA4L+U/iUp5v+6OPXR5P6955N/jeXriPjRz2//7MF8q7U+m9X/fbe+9bior3RretfHMPk4AJyK7jjdHce7Xjx/uNBdTrM9z77ZmVw0i7tTLJ0954rbg/EYjYiJfyR7bhey+5WRPsTffhQRnzus/0meG5kuZj7dHz+L/c6pxk/3xE/zfZ119l58tg9tgWHzJLv+3Djs/EvjQr4+/Pwf79PXl+71b+fA9S/dvf6NHHH9u3DSGJ/87jtH7nsU8YVzh8VPduMnB+OPZXUfnTD+n7745Q/31nz8k3a7s9X+RcTFODx+b1/Lrfpaubm5dXm5Pr9UXaquVipzs3Mz165crZTzHHW5m6k+6K/XL717XP8neuOPxG788aP7n9d9fML+//Lfd3/wlWPif/2rh3/+7x8TPxsTv3bC+PMTvz5y+u4s/uIR7/8xn39ed+mE8Z/+eWvxhC8FAE5Bc3NrZb5Wq67bsGHDxu7GoK9MwP/ay5P+uFf1I9MOAAAAAAAAAAAAAAC8qdP4d6JB9xEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICz6z8BAAD//74k2rA=")
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r8}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r9}, 0x10)
write$cgroup_subtree(r7, 0x0, 0xda00)
syz_usb_connect(0x0, 0x3f, &(0x7f0000000540)=ANY=[], 0x0)

22.090521792s ago: executing program 4 (id=721):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0)
fcntl$lock(r0, 0x25, &(0x7f0000000000)={0x1})
fcntl$lock(r0, 0x25, &(0x7f0000000080)={0x2, 0x0, 0x9})
bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x5, 0x3, 0x8, 0x5, 0x0, 0xffffffffffffffff, 0xd, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000280)='./file1\x00', 0x200000, &(0x7f0000000540), 0x0, 0x55a, &(0x7f0000000f80)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00')
fchdir(r4)
mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0)
r5 = inotify_init1(0x0)
fcntl$setown(r5, 0x8, 0xffffffffffffffff)
fcntl$getownex(r5, 0x10, &(0x7f0000000140)={0x0, <r6=>0x0})
r7 = syz_open_procfs(r6, &(0x7f0000000600)='fd/4\x00')
ioctl$FS_IOC_SETFLAGS(r7, 0x40086602, &(0x7f0000000380)=0x40e4)

21.115826272s ago: executing program 4 (id=727):
getresuid(&(0x7f0000000040)=<r0=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
quotactl$Q_QUOTAON(0xffffffff80000202, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, r0, &(0x7f0000000100)='./file0\x00')
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000180)=@security={'security\x00', 0xe, 0x4, 0x550, 0xffffffff, 0x190, 0x318, 0x190, 0xffffffff, 0xffffffff, 0x480, 0x480, 0x480, 0xffffffff, 0x4, &(0x7f0000000140), {[{{@uncond, 0x0, 0x168, 0x190, 0x0, {}, [@common=@unspec=@mac={{0x30}, {@dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}, 0x1}}, @common=@srh1={{0x90}, {0x29, 0x80, 0x0, 0x9, 0x9, @empty, @local, @mcast1, [0xffffffff, 0xffffff00, 0xffffff00, 0xffffffff], [0xff000000, 0xff, 0xff000000, 0xff000000], [0x0, 0x0, 0xff], 0x4, 0x14}}]}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x9, 0x4}}}, {{@ipv6={@empty, @empty, [0xff000000, 0x0, 0xff], [0xffffff00, 0xffffffff, 0xffffff00, 0xffffff00], 'veth0\x00', 'sit0\x00', {0xff}, {0xff}, 0x2f, 0xf, 0x1, 0xa}, 0x0, 0x160, 0x188, 0x0, {}, [@common=@inet=@set1={{0x28}, {{0xffffffffffffffff, 0x5, 0x6}}}, @common=@srh1={{0x90}, {0x87, 0x18, 0x3e, 0x7, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [0xff000000, 0xff000000, 0xff000000, 0xffffffff], [0xffffff00, 0x453877d987af6a3b, 0xff, 0xffffffff], [0xff000000, 0xff000000, 0x0, 0xff000000], 0x0, 0x124}}]}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x1}}}, {{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, [0xff, 0x0, 0xff], [0xffffff00, 0xffffffff, 0xff, 0xff000000], 'pim6reg1\x00', 'veth1_to_hsr\x00', {}, {}, 0x0, 0x6, 0x5, 0x1}, 0x0, 0x138, 0x168, 0x0, {}, [@common=@unspec=@nfacct={{0x48}, {'syz0\x00'}}, @common=@dst={{0x48}, {0xa, 0x4, 0x0, [0xf, 0x8, 0x7fff, 0x4e, 0x3, 0xb, 0x3, 0x6, 0x8, 0x9, 0x8, 0xd8, 0x9017, 0x260, 0x6ddf, 0x1], 0x7}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x2, 0x1, 0x3}, {0xffffffffffffffff, 0x0, 0x2}, 0x4, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b0)
lgetxattr(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780)=@known='security.apparmor\x00', &(0x7f00000007c0)=""/91, 0x5b)
r2 = openat$tcp_congestion(0xffffff9c, &(0x7f0000000840), 0x1, 0x0)
close_range(r1, r2, 0x0)
socketpair$unix(0x1, 0x4, 0x0, &(0x7f0000000880)={<r3=>0xffffffffffffffff})
r4 = dup2(r1, r3)
dup3(r3, r4, 0x0)
r5 = openat$hwrng(0xffffff9c, &(0x7f00000008c0), 0x8002, 0x0)
fcntl$setlease(r5, 0x400, 0x1)
r6 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
socket$nl_xfrm(0x10, 0x3, 0x6)
setsockopt$packet_int(r4, 0x107, 0xb, &(0x7f0000000900)=0x9, 0x4)
recvmmsg(r6, &(0x7f0000001dc0)=[{{&(0x7f0000000940)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000001b40)=[{&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/65, 0x41}, {&(0x7f0000001a40)=""/252, 0xfc}], 0x3, &(0x7f0000001b80)=""/167, 0xa7}, 0x1}, {{&(0x7f0000001c40)=@nfc, 0x80, &(0x7f0000001cc0)}, 0xfffffff3}, {{&(0x7f0000001d00)=@ll, 0x80, &(0x7f0000001d80)}, 0x3d}], 0x3, 0xc0002021, &(0x7f0000001e80)={0x0, 0x989680})
truncate(&(0x7f0000001ec0)='./file0\x00', 0x2)
lsetxattr$trusted_overlay_upper(&(0x7f0000001f00)='./file0\x00', &(0x7f0000001f40), &(0x7f0000001f80)={0x0, 0xfb, 0x63, 0x4, 0xe5, "f0923b7817595ab15791a757992b19ea", "03c987282c5534ddf3e22599866d7c0c7e467793b49724136b483bfac072af5610f43d4da869e5d24afcbf7a6be08973625b43277d3764c235b95439c038a5ecb2bf90ced86aecd7c93e5008696c"}, 0x63, 0x3)
syz_genetlink_get_family_id$nl80211(&(0x7f0000002000), r4)
r7 = openat$selinux_avc_hash_stats(0xffffff9c, &(0x7f0000002040), 0x0, 0x0)
r8 = eventfd2(0x496d94f, 0x80801)
ioctl$VHOST_SET_VRING_KICK(r7, 0x4008af20, &(0x7f0000002080)={0x2, r8})
r9 = syz_usb_connect(0x2, 0x8a5, &(0x7f00000020c0)={{0x12, 0x1, 0x311, 0x8c, 0xb3, 0xc9, 0x8, 0x2357, 0xd, 0x1ece, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x893, 0x1, 0xf7, 0x8, 0x80, 0x3, [{{0x9, 0x4, 0x6f, 0x7f, 0x10, 0xff, 0x0, 0x0, 0xb, [@generic={0x7f, 0x23, "45144fd683489c2d922ca2c0d8973fdf4c4470ef5cbd5de1f42c41f2c60c1ad5483a56c089186c2e90a60b75a5ad0fa529ab13952eb7dbaf48b8ea36b8e604390da25d34b13edf1ca6f40c2250bea2677d1b097e33145aec2dd4d4cbbb8dbf67d61bf000537b647f42f780776ada544de87087e990f0e3a8171a394c39"}, @generic={0xc1, 0x7, "2b20750ecd9986346c02bbb367c4bda691109b8a8f77e5101cc5ff3f3db015f54840a41439a7c6131ad0f5df28f0f2f7dc544dc231fe0af2fcd2d71d7e1d098e6ee9698905e35486bd6300cdb5153d9de61092d3f65ba4d2a16d81c40dc84020324a5a9236d1dec6d408b846280b42bc7238607303ee130e2c03cfefabbd6717944fcafec913268c15796de5cdb35820dd070242306b60867a90998e3ecc0ff695ad51b8c23e49200ce2f7afb7ba53b58f56df6e125a73c9ac392babfcff4a"}], [{{0x9, 0x5, 0x9, 0x0, 0x40, 0x8, 0x7, 0x40, [@generic={0xeb, 0x8, "4261b1c7ade12645d453286e47ca0e1917660becbfa5d515bf98c697dece3d8b11fced8449f896b10e7f827056c6539ead728fcf4088a6c2f45953777c3760e8057667412361252f6b8e40f374517aacdda6ab9f991a967af07dabfbab65d0977826b3b9ae4273b476451b574fec539f12abe2a06377c0d8ab44e9d5ac129519f27f25f45467771bd2bf21c71a2eb6dffe949a4a9872bd6321b096e465149d42020fc8283e8a5a6f5e34d7fb9128a585df9017a85d86aa3d0d175f5b45fbf0bc7afe06b8baa797e8d183de31f814cb7904628a7cffb3adb67bfe1986f17550f03732ea98119d8f44c4"}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x1, 0x1}]}}, {{0x9, 0x5, 0x7, 0x0, 0x40, 0x81, 0xf8, 0x0, [@generic={0xe, 0x1, "c022dcb099cf4bfec0d22df5"}]}}, {{0x9, 0x5, 0xa, 0x1, 0x8, 0x6, 0x5, 0x7f, [@generic={0x4c, 0xa, "bcda4222cee2c8fb4a5b8f936fd9d1bda45d1d1579ee677eea78673cec8f0ee8b2b273edd5f47069c383409e826f62616cac31160d6533743f6f018f67bcad20a96a6435101966b75883"}]}}, {{0x9, 0x5, 0x5, 0x0, 0x3ff, 0x9, 0x89, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x9, 0x80}]}}, {{0x9, 0x5, 0xc, 0x1, 0x400, 0x5, 0x4, 0x58, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xf7, 0x4}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x2, 0xfffc}]}}, {{0x9, 0x5, 0x80, 0x0, 0x40, 0x8, 0xfb, 0xf7, [@generic={0x50, 0x5, "84b6c065263a7ec941dd9367b11b95a55cd2faf6fbbf1d087d91a5bf28a32b0d8e3b2f9ba1880660fd4771b2f8196e0ec9789e42c1480b1e41c95e66ee6ea1f003f5279d4f73cad65e7ef3e823af"}, @generic={0xf2, 0x4, "10450b291b20e49f36bce56ca67fe945f39665d50d0fd4fc7b719fb32827cd93e77ec6c7a5b39710ab87973548d14598774a688a07af72c444f4c8fbe3581a360d4ef39151da8728bac8fd98c4d7bd08d28c52bd19a3da6d634716279932bcdcf7010fd76f8043d9caf73fd143fc1c1761df2c1b216df24a1fd9c30e6b8da4746ba5e9976dd9d3bc4e84821f84cbb3c77c506194ae65119f61782170845f63440557f086a5c638618b8bed71c424dc54ffca9827f1f9b77f6fcd27316c3b643fc1703f91cdcb999bb3a742ec17be4e1d1af7c3ff504ab43654f9f2f45225557540e7aaf372d823b778b9c893af9f054e"}]}}, {{0x9, 0x5, 0x2, 0x2, 0x40, 0x7f, 0x8, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xb, 0x9}]}}, {{0x9, 0x5, 0xf, 0x0, 0x200, 0x25, 0xa, 0x7, [@generic={0x2e, 0x23, "2ce6233947ac0d90d9bee23079ced18173fadd0179038cfa158fbd6e02875bfea755fcb41f864f0b8471ad49"}]}}, {{0x9, 0x5, 0x9, 0x10, 0x20, 0x4b, 0x7, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x6, 0x1ff}]}}, {{0x9, 0x5, 0x3, 0x10, 0x400, 0x0, 0xf, 0xb, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x7, 0xa000}, @generic={0x83, 0xb, "d11a40444037cf676ad6d0f62dceabf4fc51961ceb256cd7d26a4fb833ef05b8b76a2c79208ae2472c662e1ebececfa1a5bdb7a7fe4884174c23f1a449d8034826d3db3ab3b182f1fe77e93efbc8b93778a682f2d3984f32c25c3cb45144cf2fc9366f92fc8007f7aa8a6416226b5c586d950de5579080e1c77e24f9215ea2c2b7"}]}}, {{0x9, 0x5, 0x8, 0x0, 0x8, 0xa, 0x0, 0x23, [@generic={0x7d, 0x5, "f63c97fc42af59fe5740c27f2684c52dad95f5bdb0257f0994b6750c59bb547b197e80a4e3979da78c3d54eed2dba45379b9521e1dfe8d3267d279b6f713ead220807f7f2e7477ecefd093cf4121cac02e4afe5308ee297d40631597417b1ecfbc5db89ed0af92786446f38ac4a4a37bd5bf5a5d76bd65303780ea"}]}}, {{0x9, 0x5, 0xc, 0x10, 0x20, 0x0, 0x5, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x1, 0x2}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x9}]}}, {{0x9, 0x5, 0xf, 0x1, 0x8, 0x3, 0xff, 0xb, [@generic={0xb7, 0x8, "62c1120d5dd98848f16256faa98e5d5ed5d1b4fbdd970c87fc921d7cc4fd695b109a0541eea5a261dd5fd144eebce9d81623f2f9f55547a1a773f637b4b17a1e2473e40fe11652236f7a35c36ae6a92bfeea9d8aac7d63bfd8770f1635e9354142e41f3f9393dc0192ba7f666888c4e57313bf7b38c011c25aaa4a4be9c817f5b4f8f92eb3c210fea327ac610ad887b72b809c723b265cbd1c6cd8a8cf5a406a1c34019015ff69cccfad7117e181e23e365c73c1e4"}]}}, {{0x9, 0x5, 0xe, 0xc, 0x20, 0x2, 0x10, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x80, 0x6}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x3, 0x4b}]}}, {{0x9, 0x5, 0xc, 0x10, 0x200, 0x3, 0x0, 0xa0, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x4, 0x8}, @generic={0x34, 0xf, "af66e7309a84fab8ecb2264f22c00ef21807a0f2ffda7fa65e7f65e7533e970dc78a18988efc2ec067df05a7f33a4341666e"}]}}, {{0x9, 0x5, 0x3, 0x10, 0x400, 0x3, 0x5, 0x0, [@generic={0xdb, 0x2, "0f3b89d73601c213e3d22c147ae81fe94b4fdbe68ecd70b3d1069d948ba4a674deb35a6f773a1b9c1293451333a663b77546000936925613d4fc4601abe1042febf7205cfe5afa946645e29eedd06950245a98ef5994417b1ebc6ab19528c1c37a8a723cf9ba1d17f922c227e70acc78316e735a4ebdb5c7b6836d5bcee5a3a52f2b38b7714294b8173e8a55607b8ad2541e700cab474ad2b5825267c7a520e582cdc340211c0751710a7fb29c5f9c77d627a0c5560c3ed7f32c2d34ac83f7574987952e88154b87f8041e9da6ff9f0432107b9f7d0fba8fff"}, @generic={0xe2, 0x20, "4ecf34ccd5524b08b40c752aa9dd63b0aaa4fff57a4f798d1f52bfc06b4305f70311bfa857e9b2a3cab5446e52b2e4c79181d6559d67011e28fe43388e2fcf950cc1f9d543a407de21a80ae1be498193706e8228079f209cc3a0efb63ec516c967d5f89e569c39fe96727a713bd277d7917d4f29be082116fbd92f1832b7181c913799cd41c774a88b128d4c1a9f2749138ad38b3e763e4fcdc4627a85be17407563e1530f35522b918c96d9a0876ba4b293b184d4b5b35bd56e14daf02c804532a524e00580e6a941784d23dcaafa15eff1ec14770ab733e9d958914fec50df"}]}}]}}]}}]}}, &(0x7f0000002a80)={0xa, &(0x7f0000002980)={0xa, 0x6, 0x200, 0x0, 0x10, 0x61, 0x20, 0xc}, 0xc, &(0x7f00000029c0)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x2, 0x4, 0x8}]}, 0x2, [{0x4, &(0x7f0000002a00)=@lang_id={0x4, 0x3, 0x422}}, {0x4, &(0x7f0000002a40)=@lang_id={0x4, 0x3, 0x404}}]})
syz_usb_control_io(r9, &(0x7f0000002c40)={0x2c, &(0x7f0000002ac0)={0x40, 0x22, 0x1a, {0x1a, 0xa, "7998ca37955c9990e7c14528b1d1244fea65a7bc4683559c"}}, &(0x7f0000002b00)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x812}}, &(0x7f0000002b40)={0x0, 0xf, 0x4a, {0x5, 0xf, 0x4a, 0x5, [@ext_cap={0x7, 0x10, 0x2, 0x4, 0x7, 0x4, 0x8}, @ext_cap={0x7, 0x10, 0x2, 0x6, 0x3, 0xb, 0x796a}, @ssp_cap={0xc, 0x10, 0xa, 0x5, 0x0, 0x80, 0xf00, 0x9}, @ext_cap={0x7, 0x10, 0x2, 0xa, 0x5, 0x7, 0x1}, @ssp_cap={0x24, 0x10, 0xa, 0x7, 0x6, 0x1, 0xf0f, 0xffff, [0xff000f, 0x0, 0xc000, 0x3f00, 0xff0030, 0xcf]}]}}, &(0x7f0000002bc0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x67, 0x0, 0x9, "ea457ff4", "4b43da5e"}}, &(0x7f0000002c00)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xcd, 0x4, 0xc, 0x7, 0x86, 0x3412, 0x9cc9}}}, &(0x7f0000003080)={0x84, &(0x7f0000002c80)={0x40, 0x3, 0xb, "35fe4b7ba65bd25110d3b4"}, &(0x7f0000002cc0)={0x0, 0xa, 0x1}, &(0x7f0000002d00)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000002d40)={0x20, 0x0, 0x4, {0x1}}, &(0x7f0000002d80)={0x20, 0x0, 0x4, {0x400, 0x4}}, &(0x7f0000002dc0)={0x40, 0x7, 0x2, 0x9}, &(0x7f0000002e00)={0x40, 0x9, 0x1, 0x9}, &(0x7f0000002e40)={0x40, 0xb, 0x2, "f65e"}, &(0x7f0000002e80)={0x40, 0xf, 0x2, 0x2}, &(0x7f0000002ec0)={0x40, 0x13, 0x6, @remote}, &(0x7f0000002f00)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000002f40)={0x40, 0x19, 0x2, "ad2b"}, &(0x7f0000002f80)={0x40, 0x1a, 0x2, 0x3}, &(0x7f0000002fc0)={0x40, 0x1c, 0x1, 0x9}, &(0x7f0000003000)={0x40, 0x1e, 0x1, 0x5}, &(0x7f0000003040)={0x40, 0x21, 0x1, 0xfd}})
syz_usb_control_io$cdc_ncm(r9, &(0x7f0000003280)={0x14, &(0x7f0000003140)={0x0, 0xf, 0xf2, {0xf2, 0xf, "aa6312188bb2f51a545081096fcdbd96a55ebfc5865627f1b0c6d06ff99b9f825a49bb61445992bdf0e3d34c87c6fe4484bd57d8ce643b3ec6d2303bc74a25defd064683b1ccc443d64899c0e5219860b1d83ad63de36abce4954dee4e8875b7b7092bffc0d8fde367881fc26c21c62fa4b8d8feda1ba3bb126da6039c135fd78047193b57174db184adb3c93aab559eb70ac1883fea7beccba89deb393a33944b98b3842c7f0987c2c40a70bc8bc0c1a7cd1724065b020c30c0ac5159532b73d70983fd70e8377e386c2086d510a30f695dae525d19ca3c1e9767675e684fbd865b45e059c834dcd0d2b1cb8b0e1e22"}}, &(0x7f0000003240)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000003580)={0x44, &(0x7f00000032c0)={0x0, 0x13, 0xf6, "7d9a6a8d44fe215cbd543135147079e6b011310d8bec5e23e234e866b84f0178f3609effebee7205097d0e4c8cdc479dfb1c06a5088d1a62937429922e6e728ec98dae95aa862c1187dced4cfcb4ba4442f54090bd43c66f4ba7b105c739fd379450fb955910178552b83e30b33e93bbf4cc8704d67ada4adf085f21c0f970d0e9f8d4b3176eb6db69f6b01989aedc6ce376c6e21fe8ebf2ff39c60f91d3b47f2a4962e8780ccb194849555361ae344fd91bf46725ceff295ae2e222545b0965c0c0018daa18854905d0ba161cee86d89ed76d8c2e2bc9e1ccebbc575873819cc6d80eb5d954ae306bda10d23b460062cc262be2d5f3"}, &(0x7f00000033c0)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000003400)={0x0, 0x8, 0x1, 0x80}, &(0x7f0000003440)={0x20, 0x80, 0x1c, {0xfbff, 0x3, 0x10, 0x0, 0x8, 0x0, 0x0, 0xaa82, 0xf9b3, 0x0, 0x0, 0x5}}, &(0x7f0000003480)={0x20, 0x85, 0x4, 0x8}, &(0x7f00000034c0)={0x20, 0x83, 0x2}, &(0x7f0000003500)={0x20, 0x87, 0x2, 0x2}, &(0x7f0000003540)={0x20, 0x89, 0x2}})
read$FUSE(r4, &(0x7f0000003600)={0x2020, 0x0, <r10=>0x0}, 0x2020)
write$FUSE_INIT(r5, &(0x7f0000005640)={0x50, 0x0, r10, {0x7, 0x28, 0x3, 0x2000010, 0x40, 0x6, 0xa53, 0x101}}, 0x50)
recvmsg$can_raw(r7, &(0x7f0000005c40)={0x0, 0x0, &(0x7f0000005ac0)=[{&(0x7f00000056c0)=""/23, 0x17}, {&(0x7f0000005700)=""/26, 0x1a}, {&(0x7f0000005740)=""/229, 0xe5}, {&(0x7f0000005840)=""/31, 0x1f}, {&(0x7f0000005880)=""/134, 0x86}, {&(0x7f0000005940)=""/146, 0x92}, {&(0x7f0000005a00)=""/112, 0x70}, {&(0x7f0000005a80)=""/30, 0x1e}], 0x8, &(0x7f0000005b40)=""/227, 0xe3}, 0x40000000)
r11 = socket$netlink(0x10, 0x3, 0x2)
setsockopt$netlink_NETLINK_RX_RING(r11, 0x10e, 0x6, &(0x7f0000005c80)={0x6, 0x10bebafe, 0x1, 0x7}, 0x10)

20.80685422s ago: executing program 4 (id=729):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="05010000000000107d1e222e00000000000109022400010000000009040000020300020009210000000122020009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000afa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYBLOB="8fcacb7907051175f37538e486dd6300800701082c00db5b686158bbcfe8875a060300000023000000000000000000000000ac1414aa"], 0xfdef)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r4)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})
write$cgroup_subtree(r3, &(0x7f0000000440)=ANY=[@ANYBLOB="8fedcb5d07081175f37538e486dd6372ce22fdb929"], 0xfdef)
syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000080)={0x0, 0x0, 0x4, {0x4, 0x0, "78e4"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
madvise(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x65)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000280)={&(0x7f00000004c0)={0x15c, 0x0, 0x1, 0x201, 0x0, 0x0, {0x0, 0x0, 0x7}, [@CTA_HELP={0xc, 0x5, 0x0, 0x1, {0x8, 0x1, 'RAS\x00'}}, @CTA_NAT_DST={0xa4, 0xd, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @remote}, @CTA_NAT_V4_MINIP={0x8, 0x1, @empty}, @CTA_NAT_PROTO={0x2c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}]}, @CTA_NAT_V6_MINIP={0x14, 0x4, @remote}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @private1}, @CTA_NAT_V4_MINIP={0x8, 0x1, @local}, @CTA_NAT_V6_MINIP={0x14, 0x4, @private0}, @CTA_NAT_V6_MINIP={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x2d}}]}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x3}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1002}, @CTA_PROTOINFO={0x30, 0x4, 0x0, 0x1, @CTA_PROTOINFO_DCCP={0x2c, 0x2, 0x0, 0x1, [@CTA_PROTOINFO_DCCP_HANDSHAKE_SEQ={0xc, 0x3, 0x1, 0x0, 0x1}, @CTA_PROTOINFO_DCCP_ROLE={0x5, 0x2, 0x5}, @CTA_PROTOINFO_DCCP_ROLE={0x5, 0x2, 0x3}, @CTA_PROTOINFO_DCCP_HANDSHAKE_SEQ={0xc, 0x3, 0x1, 0x0, 0xfffffffffffffffd}]}}, @CTA_TUPLE_MASTER={0x58, 0xe, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}]}]}, 0x15c}, 0x1, 0x0, 0x0, 0x40000}, 0x10)
socket$netlink(0x10, 0x3, 0xf)
syz_usb_control_io(r0, 0x0, &(0x7f0000000a40)={0x84, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
newfstatat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x1000)

14.571715706s ago: executing program 3 (id=749):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000012000000000000000095000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
socket$inet_tcp(0x2, 0x1, 0x0)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r6, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r7 = syz_open_dev$usbmon(&(0x7f0000000080), 0x56b, 0x0)
r8 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0)
dup3(r7, r8, 0x0)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x38, r1, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x4}]}]}, 0x38}}, 0x0)

13.302748703s ago: executing program 0 (id=750):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) (async)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413e850000000f00000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) (async)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1600000000000000040000000100000000000000", @ANYRES32=0x1, @ANYBLOB="00001a9f4c0000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/21], 0x48) (async)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x1, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
getsockopt$nfc_llcp(0xffffffffffffffff, 0x118, 0x1, &(0x7f0000000180)=""/13, 0xd)
bpf$BPF_LINK_CREATE(0xa, &(0x7f0000000340)={r7, 0xffffffffffffffff, 0x24, 0x7, @val=@kprobe_multi=@addrs={0x0, 0x5, 0x0, &(0x7f0000000500)=[0xffff, 0xfffffffffffffff7, 0x4, 0x518, 0x6]}}, 0x30)

13.298174023s ago: executing program 3 (id=753):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000100)='./bus\x00', 0x1000002, &(0x7f0000000500)=ANY=[@ANYBLOB="6e6f6e756d7461696c3d302c646973636172640061727365743d63703835322c757466383d202c6e6f6e756d7461696c3d302c6e6f6e75617461696c3d302c7574663c3d302c696f6368619615f9a9d8bc34fd234143727365743d69736f383835392d322c756e695f786c6174653d312c73686f72746e616d653d77696e6e742c756e695f786c6174653d312c757466383d312c756e695f786c6174653d302c756e695f786c6174653d302c73686f72746e616d653d6d697865642c726f6469722c756e695f786c"], 0x1, 0x368, &(0x7f0000000180)="$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")
creat(&(0x7f0000000000)='./bus\x00', 0x0)
r3 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
lseek(r3, 0xa0, 0x1)
ioctl$VFAT_IOCTL_READDIR_SHORT(r3, 0x82307202, &(0x7f0000000300)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r4}, 0x10)
readv(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000280)=""/144, 0x28}], 0x300)
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
ioctl$FS_IOC_GETFSLABEL(r5, 0x800452d2, &(0x7f0000000100))
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='mm_page_alloc\x00', r1}, 0x10)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101})
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000002c0)=@framed={{}, [@printk={@x}]}, &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r9}, 0x10)
close(r8)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000))
ioctl$SIOCSIFHWADDR(r8, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'})
close(r7)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$tipc(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$TIPC_CMD_GET_NETID(r10, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r11, 0x1, 0x0, 0x0, {{}, {0x0, 0x4107}}}, 0x1c}}, 0x0)
sendmsg$TIPC_CMD_SET_LINK_WINDOW(r6, &(0x7f00000001c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x81022000}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x68, r11, 0x20, 0x70bd2a, 0x259fdbff, {{}, {}, {0x4c, 0x18, {0xa3a, @link='broadcast-link\x00'}}}, ["", "", "", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x4010}, 0x21)
bpf$MAP_CREATE(0x0, 0x0, 0x0)

13.246213138s ago: executing program 0 (id=754):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x31, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000012000000000000000095000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
socket$inet_tcp(0x2, 0x1, 0x0)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r6 = syz_open_dev$usbmon(&(0x7f0000000080), 0x56b, 0x0)
r7 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0)
dup3(r6, r7, 0x0)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x38, r1, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x4}]}]}, 0x38}}, 0x0)
syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000020000202505a1a44000000001010902440001010000000904000016020200000524ab"], 0x0)

11.983473315s ago: executing program 2 (id=756):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x3007}, 0x4)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000980)={'wg2\x00', <r2=>0x0})
sendto$packet(r1, &(0x7f0000000180)="0b031407e0ff640f0200475400f6a13bb1000e000800080048", 0x19, 0x0, &(0x7f0000000140)={0x11, 0x0, r2}, 0x14)

11.982988105s ago: executing program 3 (id=757):
socket$inet_tcp(0x2, 0x1, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1600000000000000040000000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000c1b4668c7c5e9dd4000000f04c44b057e51af2513c9661928cb72365959acb41259e05e95c2d4dcab8b7dabf4a74434eb10b8ff870d2d7765a5e0393d27a8255901f19841c5e754eb46f5750f0e79bd598138d4aec0638b45f9967c63e7e0797847933d2121f91c01b7f32e63bb0caaf5a927d1c3deb75363f"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x5)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
fcntl$setlease(r1, 0x400, 0x2)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$ARPT_SO_GET_ENTRIES(r6, 0x0, 0x61, &(0x7f0000000400)=ANY=[@ANYBLOB='filter\x00'/26], &(0x7f00000004c0)=0x24)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0xffffffff, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x84)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r7}, 0x10)
r8 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_udp_int(r8, 0x11, 0x67, &(0x7f0000000140)=0x100, 0x4)
sendto$inet6(r8, 0x0, 0x0, 0xffffff8d, &(0x7f0000002800)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)

10.571045785s ago: executing program 1 (id=758):
syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, &(0x7f0000000240)=""/183, 0x26, 0xb7, 0x1, 0x0, 0x0, @void, @value}, 0x20)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r0, 0x0, 0x0}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000100"/28], 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r1, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='9p_client_res\x00', r2}, 0x10)
pipe2$9p(&(0x7f00000000c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='9p_client_res\x00', r5}, 0x10)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r4])
syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) (async)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, &(0x7f0000000240)=""/183, 0x26, 0xb7, 0x1, 0x0, 0x0, @void, @value}, 0x20) (async)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r0, 0x0, 0x0}, 0x10) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000100"/28], 0x48) (async)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r1, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async)
bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='9p_client_res\x00', r2}, 0x10) (async)
pipe2$9p(&(0x7f00000000c0), 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='9p_client_res\x00', r5}, 0x10) (async)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) (async)

10.569872055s ago: executing program 2 (id=759):
syz_mount_image$f2fs(&(0x7f00000004c0), &(0x7f0000000040)='./bus\x00', 0x2008410, &(0x7f0000001f80)=ANY=[@ANYBLOB="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", @ANYRESDEC], 0x1, 0x556b, &(0x7f00000024c0)="$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")
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
listen(r0, 0x0) (async)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) (async)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180), 0x200, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
ioctl(r1, 0x8b01, 0x0) (async)
ioctl$BTRFS_IOC_BALANCE(r1, 0x5000940c, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) (async)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async)
sched_setaffinity(0x0, 0x0, 0x0) (async)
getpid()
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x4002, &(0x7f0000000100)=ANY=[@ANYBLOB="696f636861727365743d69736f383835392d322c73686f72746e616d653d77696e6e742c636f6465706167653d313235350073686f72746e616d653d6d697865642c696f636861727365743d6d616363656e7465283d082f6b0e21243f0e1175726f2c756e695f786c6174653d312c726f6469722c696f636861727365743d69736f3838357fcf6a0559476faf392d372c73686f72746e616d654000696e39352c73686f72746e37cbc94ce83c6e4e3354f37ad4321e4ae1a1a405414303b014ce9a8de086a09a49d713584e772fffb467cbc4029fb6f90bd26032bcfad005edf2181113dafa9c077c882e3016fe4e7c03e5ef14946eb81fad488c8fe5932559cd37c9a8a9adb75dfb58aef6964dd28ab902a7f814887136b89a076aa41fcb54046ecaf8714fe71868a5e0bda04e6d5c43875dfd54bd0747598816fffb77a264eedacd5bea1477073c8cd06ff4bd1caad0cfe7557d5a2e992dac50a91bc7b6ca54a3453b1cbeb8d934b6584e9fc587a71ddf1adc8fb5f9b09f54a464ffb4c6f0fb0bb609a53616878056798abe262270b17f8f2740a7ae6f7886f83e9b38e8fc27f29da73b18ba4ee42f3172e542894c771f9ae5cdf1dd583ee31f56ded8fa2d2cca59ffb3372ca5ef74933d6bd97c04d3e61686a560202df974077ac77caf7756336b818b8d5cfb9279963c1428104d9dc0974014e606955281e9b773ce8a862b2639320120d8554b3c00000000f6dbe8e095d468ad48d22eb7f50402610937cf953bfc915361e8df53f117582022c04c214cd1a1c8b657d700d97d864ce7c31198065fd6f24677af5984fa93a0d983768a9e1e9e6257769da9b041f815d1d0e84f95949a476a72b96c331d3ee95f5df73983be5c6ec1c46a08bb3fe54dcfab2ba075c55d207f3c4478122653510e4556b2bff42fc58e3b"], 0x11, 0x22f, &(0x7f0000000880)="$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") (async)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) (async)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) (async)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1900000004000000080000000b00000000000000", @ANYRES32, @ANYBLOB="00000000000000d189db34dad43586020000000000000000000000000000000100000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x6, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000d8ffffffb703000008000000b70400000000925e850000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r5}, 0x10) (async)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x3, &(0x7f0000000140)=[{0x25}, {0x35}, {0x16}]})

10.567688695s ago: executing program 3 (id=760):
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7, 0x8b}, 0x0)
sendmsg$NFNL_MSG_ACCT_DEL(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x40001}, 0x2000c040)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00@\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b7000000000000009500"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x2d)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_buf(r1, 0x0, 0x8008000000010, &(0x7f0000000000)="170000000200010000ffbe8c5ee17688100033000201000a000002a257fce46de04bd65ad90200bb6a880000d6c8db0000dba67e06020000e28900000200df01800a000000fc0607bdff59100ac45761547ae81f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dfc060115003901000000000000ea000000000000000062068f5ee50ce5af9b1c568311ffff02ff030000ba000840024f0298e9e90539062a80e605007f71174aa951f3c63e5a1b47b6", 0xb8)
r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r7, 0x40345410, &(0x7f00000083c0)={{0x1}})
read(r7, &(0x7f00000002c0)=""/200, 0x39)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r7, 0x54a2)
syz_emit_ethernet(0x32, 0x0, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f00000006c0)=0x16)
bpf$PROG_LOAD(0x5, 0x0, 0x0)

9.058065064s ago: executing program 0 (id=761):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x6666, 0x8801, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0xb}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
socket$inet6(0xa, 0x3, 0x8000000003c) (async)
socket$inet6(0xa, 0x3, 0x8000000003c)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10)
unshare(0x6020400) (async)
unshare(0x6020400)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) (async)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r4, 0xaf01, 0x0) (async)
ioctl$VHOST_SET_OWNER(r4, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, 0x0) (async)
ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000140))
socket$inet(0x2, 0x3, 0x5)
socket$nl_xfrm(0x10, 0x3, 0x6)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r5 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) (async)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r8}, 0x10)
ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f00000000c0)=0x1)
write$binfmt_script(r3, &(0x7f0000000040), 0xfea7)
syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) (async)
syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0)

9.057443985s ago: executing program 1 (id=762):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = dup(r1)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, 0x0}], 0x1, 0x69, 0x0, 0x0)
ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000040)=ANY=[@ANYBLOB="7f0000000000000001000080", @ANYRESDEC])
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000200)={0x0, 0x3, 0x8}, 0xc)
ioctl$FS_IOC_GETFSMAP(r4, 0xc0c0583b, &(0x7f0000000680)=ANY=[@ANYBLOB="00000000000000000900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000600000004000000000000000300000000000000010000000000000001000000000000000000000000000000000000000000000000000000000000000900000003000000040000000000000001000000000000000008000000000000ffffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fa0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000071d200"/768])
socket$nl_generic(0x11, 0x3, 0x10)
r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kmem_cache_free\x00'}, 0x10)
syz_emit_ethernet(0x38, &(0x7f0000000000)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @broadcast, @remote}, @info_reply}}}}, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r6}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000040)='9p_protocol_dump\x00'}, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, <r7=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r7, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018400110800395032303030"], 0x15)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
r10 = dup(r9)
r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r11, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)=ANY=[@ANYRESDEC=r5, @ANYRESDEC=r5])
ioctl$KVM_RUN(r11, 0xae80, 0x0)
r12 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000c80)=ANY=[@ANYBLOB="12010000000000406d0422c2000000000001090224000100000000090400000103000000092100000001220b0009058103"], 0x0)
syz_usb_control_io$hid(r12, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0600000004000000030000000500000000000000", @ANYRES32, @ANYBLOB="004bed6a6e84ba588c09d000000000000012000100000000000000000000deae71597af6a37cc54b39c5f2e038fe293e6244633b48833414be2bc002b714ee4239acc07af5bc2bf517838a6f222464fef9ff00000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)

9.057125855s ago: executing program 2 (id=763):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000012000000000000000095000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
socket$inet_tcp(0x2, 0x1, 0x0)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r6, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r7 = syz_open_dev$usbmon(&(0x7f0000000080), 0x56b, 0x0)
r8 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0)
dup3(r7, r8, 0x0)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x38, r1, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x4}]}]}, 0x38}}, 0x0)

9.056620145s ago: executing program 3 (id=764):
r0 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x0, &(0x7f00000002c0), 0x0, 0x236, &(0x7f0000000300)="$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")
ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, 0x0)
pipe(0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
mkdir(0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r2 = socket$nl_route(0x10, 0x3, 0x0)
connect$netlink(r2, &(0x7f0000000540)=@proc={0x10, 0x0, 0x25dfdbfe, 0x8000}, 0xc)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0xc)
getpid()
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
io_setup(0x2, &(0x7f0000000200)=<r7=>0x0)
r8 = eventfd2(0x0, 0x0)
io_getevents(r7, 0x1, 0x1, &(0x7f0000000080)=[{}], 0x0)
io_submit(r7, 0x1, &(0x7f0000000680)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x3, r8}])
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000003680)='sched_switch\x00', r9}, 0x10)
mkdirat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x150)
syz_open_dev$tty1(0xc, 0x4, 0x1)

7.445862083s ago: executing program 2 (id=765):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r3}, 0x10)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2)
setsockopt$inet6_tcp_int(r4, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4)
connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c)
io_setup(0x6, &(0x7f0000000680)=<r5=>0x0)
setsockopt$SO_BINDTODEVICE_wg(r4, 0x1, 0x19, &(0x7f0000000200)='wg0\x00', 0x4)
io_submit(r5, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x180a, 0x0, 0x3, 0x1, 0x0, r4, 0x0}])
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
r6 = open(&(0x7f0000000000)='./file0\x00', 0x220c1, 0x42)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@bloom_filter={0x1e, 0x0, 0x1000, 0x3a0a, 0x10814, r6, 0x9b, '\x00', 0x0, r6, 0x2, 0x3, 0x2, 0xf, @void, @value, @value=r6}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x65, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r8 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0)
syz_usb_control_io$hid(r8, 0x0, 0x0)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000002c0)='mm_page_alloc\x00', r9}, 0x10)
syz_usb_control_io$hid(r8, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="00222200000096231306e53f070c0000002a9000070d00be0083"], 0x0}, 0x0)

7.444127103s ago: executing program 3 (id=766):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
setxattr$trusted_overlay_origin(0x0, &(0x7f0000000340), 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), 0xffffffffffffffff)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$TCFLSH(r4, 0x400455c8, 0x0)
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
ioctl$sock_bt_hci(r5, 0x800448d2, &(0x7f0000000100))
socket$nl_route(0x10, 0x3, 0x0)

5.698275195s ago: executing program 0 (id=767):
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000400)='./bus\x00', 0x800, &(0x7f0000000840)=ANY=[@ANYRES8=0x0, @ANYRES16, @ANYRES64], 0x1, 0x36e, &(0x7f0000000c00)="$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")
r0 = open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x11)
ftruncate(r1, 0x2007ffb)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000006000000000000000018110000", @ANYRES32=r2, @ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r3}, 0x10)
socket$packet(0x11, 0x3, 0x300)
sendfile(r0, r1, 0x0, 0x1000000201005)

5.697709615s ago: executing program 1 (id=768):
socketpair(0x0, 0x0, 0x0, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="180000006a00010500000000000000000000e202"], 0x18}}, 0x0)
r1 = socket$tipc(0x1e, 0x2, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2}, 0x0, &(0x7f0000000040)}, 0x20)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10)
syz_emit_ethernet(0x83, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030086dd601b8b97004d88c19edace00000000000000002100000002ff02000000000000000000000000000104004e20004d13"], 0x0)
bind$tipc(r1, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10)
r4 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x0, 0x3}, 0x10)
r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
unshare(0x20800)
timerfd_gettime(r5, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2}, 0x10)
sendmsg$tipc(r4, &(0x7f0000000540)={&(0x7f0000000200)=@name, 0x10, 0x0}, 0x0)
setsockopt$TIPC_GROUP_LEAVE(r1, 0x10f, 0x88)

3.918295058s ago: executing program 0 (id=769):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1038, 0x1410, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f00000003c0)=ANY=[@ANYBLOB="06000000000000fd070100"])
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x200000000622c, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x0)
r7 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0)
getsockname$packet(r7, &(0x7f0000000200)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newqdisc={0x64, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x38, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{}, {}, 0x0, 0x10000}}, @TCA_TBF_RATE64={0xc, 0x4, 0xa92c8ccfe08dc33}]}}]}, 0x64}}, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@deltclass={0x24, 0x28, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x2}}}, 0x24}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1}, 0x10)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000700)={0x2c, &(0x7f0000000380)={0x0, 0x0, 0x7, {0x7, 0x0, "b27814d066"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)

3.918029639s ago: executing program 1 (id=770):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x3007}, 0x4)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000980)={'wg2\x00'})
sendto$packet(r1, &(0x7f0000000180)="0b031407e0ff640f0200475400f6a13bb1000e00080008004803", 0x1a, 0x0, 0x0, 0x0)

3.916197459s ago: executing program 2 (id=771):
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1600000000000000040000000100000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB="000000e2ffffffff1200ff00"/28], 0x48)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x1, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x18)
socket$inet_tcp(0x2, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x16, 0x2180, &(0x7f0000000240)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000180000003d030100000000009500f000000000006926000000000000bf67000000000000560602000fff07006706000020000000170200000ee60000bf050000000000002d350000000000006507000002080000070700004c0000001f75000000000000bf54000000000000070400000400f9ffad3501000000000084040000000000001400000000000000950000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r6 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
getsockopt$nfc_llcp(r6, 0x118, 0x1, &(0x7f0000000180)=""/13, 0xd)
bpf$BPF_LINK_CREATE(0xa, &(0x7f0000000300)={r4, 0xffffffffffffffff, 0x24, 0x7, @val=@tracing={0xffffffffffffffff}}, 0x20)
sched_setaffinity(r0, 0x8, &(0x7f0000000380)=0x2)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0)
ioctl$KVM_SET_MP_STATE(r9, 0x4004ae99, &(0x7f0000000000)=0x7)

2.011322344s ago: executing program 1 (id=772):
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000400)='./bus\x00', 0x800, &(0x7f0000000840)=ANY=[@ANYRES8=0x0, @ANYRES16, @ANYRES64], 0x1, 0x36e, &(0x7f0000000c00)="$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")
r0 = open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x11)
ftruncate(r1, 0x2007ffb)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000006000000000000000018110000", @ANYRES32=r2], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r3}, 0x10)
socket$packet(0x11, 0x3, 0x300)
sendfile(r0, r1, 0x0, 0x1000000201005)

2.010506985s ago: executing program 2 (id=773):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x31, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000012000000000000000095000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
socket$inet_tcp(0x2, 0x1, 0x0)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r6 = syz_open_dev$usbmon(&(0x7f0000000080), 0x56b, 0x0)
r7 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0)
dup3(r6, r7, 0x0)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x38, r1, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x4}]}]}, 0x38}}, 0x0)
syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000020000202505a1a44000000001010902440001010000000904000016020200000524ab"], 0x0)

1.54872ms ago: executing program 0 (id=774):
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7, 0x8b}, 0x0)
sendmsg$NFNL_MSG_ACCT_DEL(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x40001}, 0x2000c040)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00@\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b7000000000000009500"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x2d)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_buf(r1, 0x0, 0x8008000000010, &(0x7f0000000000)="170000000200010000ffbe8c5ee17688100033000201000a000002a257fce46de04bd65ad90200bb6a880000d6c8db0000dba67e06020000e28900000200df01800a000000fc0607bdff59100ac45761547ae81f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dfc060115003901000000000000ea000000000000000062068f5ee50ce5af9b1c568311ffff02ff030000ba000840024f0298e9e90539062a80e605007f71174aa951f3c63e5a1b47b6", 0xb8)
r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r7, 0x40345410, &(0x7f00000083c0)={{0x1}})
read(r7, &(0x7f00000002c0)=""/200, 0x39)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r7, 0x54a2)
syz_emit_ethernet(0x32, 0x0, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f00000006c0)=0x16)
bpf$PROG_LOAD(0x5, 0x0, 0x0)

0s ago: executing program 1 (id=775):
syz_mount_image$ext4(&(0x7f0000000ac0)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x3810744, &(0x7f0000000700)={[{@noauto_da_alloc}, {@user_xattr}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x9}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x10000}}, {@jqfmt_vfsv0}, {@delalloc}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x400000}}, {@noauto_da_alloc}, {@test_dummy_encryption}]}, 0x1, 0x451, &(0x7f0000000d00)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x138}}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000003c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0xd0, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r2}, 0x0, &(0x7f0000000040)}, 0x20)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10)
syz_usb_control_io$hid(r1, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x0, "14db65a2"}]}}, 0x0}, 0x0)
r4 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r7}, 0x10)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r8, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
listen(r8, 0xfff)
openat$rtc(0xffffff9c, &(0x7f00000001c0), 0x400, 0x0)

kernel console output (not intermixed with test programs):

acl,,errors=continue
[  347.694950][   T24] audit: type=1326 audit(1727653445.440:935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2371 comm="syz.2.393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6ae3d3ff9 code=0x7ffc0000
[  347.736926][ T2419] FAT-fs (loop3): Unrecognized mount option "³8|'ÒœØi" or missing value
[  348.311857][ T2433] netlink: 16 bytes leftover after parsing attributes in process `syz.3.404'.
[  348.681276][ T2437] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities
[  348.711527][ T2432] attempt to access beyond end of device
[  348.711527][ T2432] loop2: rw=0, want=241, limit=128
[  348.742047][  T319] attempt to access beyond end of device
[  348.742047][  T319] loop2: rw=1, want=1041, limit=128
[  348.763546][ T2426] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[  348.771158][ T2426] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  348.780523][ T2426] F2FS-fs (loop1): invalid crc value
[  348.806762][ T2426] F2FS-fs (loop1): Found nat_bits in checkpoint
[  348.875300][ T2426] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  348.882616][ T2426] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  348.920521][ T2421] F2FS-fs (loop0): invalid crc value
[  348.964253][ T2421] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (15359802341028777995, 275811881701387)
[  348.987292][ T2421] F2FS-fs (loop0): Mounted with checkpoint version = 753bd00b
[  349.262971][ T2453] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  349.497637][ T2453] EXT4-fs (loop4): 1 truncate cleaned up
[  349.499516][  T278] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix.
[  349.503429][ T2453] EXT4-fs (loop4): mounted filesystem without journal. Opts: data=journal,jqfmt=vfsv0,errors=continue,nodelalloc,init_itable=0x0000000000000004,acl,,errors=continue
[  349.528738][  T278] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix.
[  351.012064][ T2480] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities
[  351.013093][ T2477] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3962bc8b, utbl_chksum : 0xe619d30d)
[  351.289903][ T2490] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  351.494451][ T2490] EXT4-fs (loop1): 1 truncate cleaned up
[  351.500535][ T2490] EXT4-fs (loop1): mounted filesystem without journal. Opts: data=journal,jqfmt=vfsv0,errors=continue,nodelalloc,init_itable=0x0000000000000004,acl,,errors=continue
[  351.974404][ T2501] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[  352.048614][ T2501] EXT4-fs (loop3): orphan cleanup on readonly fs
[  352.054869][ T2501] EXT4-fs error (device loop3): ext4_ext_check_inode:500: inode #3: comm syz.3.417: pblk 0 bad header/extent: invalid eh_max - magic f30a, entries 7, max 0(0), depth 0(0)
[  352.072209][ T2501] EXT4-fs error (device loop3): ext4_quota_enable:6426: comm syz.3.417: Bad quota inode: 3, type: 0
[  352.083414][ T2501] EXT4-fs warning (device loop3): ext4_enable_quotas:6467: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix.
[  352.095263][ T2498] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0xff6f124c, utbl_chksum : 0xe619d30d)
[  352.098119][ T2501] EXT4-fs (loop3): Cannot turn on quotas: error -117
[  352.116157][ T2501] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue
[  352.166698][ T2510] device pim6reg1 entered promiscuous mode
[  352.766333][ T2524] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue
[  352.777974][ T2524] ext4 filesystem being mounted at /9/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff)
[  352.895753][ T2531] tipc: Started in network mode
[  352.900592][ T2531] tipc: Own node identity 00000000000000000000000000000001, cluster identity 4711
[  352.910112][ T2531] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb
[  352.918473][ T2531] tipc: Enabled bearer <udp:syz1>, priority 10
[  353.352120][ T2536] EXT4-fs (loop1): couldn't mount as ext2 due to feature incompatibilities
[  353.722046][ T2543] syz.3.426[2543] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  353.723666][ T2543] syz.3.426[2543] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  353.775939][ T2541] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  353.819264][ T2541] EXT4-fs (loop4): 1 truncate cleaned up
[  353.824805][ T2541] EXT4-fs (loop4): mounted filesystem without journal. Opts: data=journal,jqfmt=vfsv0,errors=continue,nodelalloc,init_itable=0x0000000000000004,acl,,errors=continue
[  353.974348][ T2522] F2FS-fs (loop2): invalid crc value
[  354.037888][  T346] tipc: 32-bit node address hash set to 1000000
[  354.056484][ T2522] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (15359802341028777995, 275811881701387)
[  354.382328][ T2522] F2FS-fs (loop2): Mounted with checkpoint version = 753bd00b
[  354.944524][ T2568] EXT4-fs (loop0): can't mount with data=, fs mounted w/o journal
[  355.247361][ T2576] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  355.434698][ T2576] EXT4-fs (loop2): 1 truncate cleaned up
[  355.456267][ T2576] EXT4-fs (loop2): mounted filesystem without journal. Opts: data=journal,jqfmt=vfsv0,errors=continue,nodelalloc,init_itable=0x0000000000000004,acl,,errors=continue
[  356.724465][ T2585] attempt to access beyond end of device
[  356.724465][ T2585] loop1: rw=0, want=241, limit=128
[  356.753645][    T7] attempt to access beyond end of device
[  356.753645][    T7] loop1: rw=1, want=1041, limit=128
[  357.184406][ T2601] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  357.185648][ T2606] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[  357.207358][ T2601] EXT4-fs (loop0): 1 truncate cleaned up
[  357.213375][ T2601] EXT4-fs (loop0): mounted filesystem without journal. Opts: data=journal,jqfmt=vfsv0,errors=continue,nodelalloc,init_itable=0x0000000000000004,acl,,errors=continue
[  357.230355][ T2606] EXT4-fs (loop3): orphan cleanup on readonly fs
[  357.236572][ T2606] EXT4-fs error (device loop3): ext4_ext_check_inode:500: inode #3: comm syz.3.441: pblk 0 bad header/extent: invalid eh_max - magic f30a, entries 7, max 0(0), depth 0(0)
[  357.253895][ T2606] EXT4-fs error (device loop3): ext4_quota_enable:6426: comm syz.3.441: Bad quota inode: 3, type: 0
[  357.265450][ T2606] EXT4-fs warning (device loop3): ext4_enable_quotas:6467: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix.
[  357.285003][ T2618] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  357.299466][ T2606] EXT4-fs (loop3): Cannot turn on quotas: error -117
[  357.306122][ T2606] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue
[  357.355332][ T2618] EXT4-fs (loop1): 1 truncate cleaned up
[  357.361764][ T2618] EXT4-fs (loop1): mounted filesystem without journal. Opts: data=journal,jqfmt=vfsv0,errors=continue,nodelalloc,init_itable=0x0000000000000004,acl,,errors=continue
[  359.327967][ T2356] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  359.736610][ T2653] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue
[  359.758864][ T2653] ext4 filesystem being mounted at /16/mnt supports timestamps until 2038 (0x7fffffff)
[  359.768690][ T2356] usb 4-1: Using ep0 maxpacket: 32
[  359.773721][    T7] Bluetooth: hci0: Frame reassembly failed (-84)
[  359.812552][ T2657] overlayfs: missing 'lowerdir'
[  359.898539][ T2356] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  359.899093][ T2657] FAT-fs (loop0): Unrecognized mount option "nnonumtail=1" or missing value
[  359.911046][ T2356] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 22
[  360.007958][ T2356] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  360.017155][ T2356] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  360.025169][ T2356] usb 4-1: SerialNumber: syz
[  360.031251][ T2653] fscrypt: Adiantum using implementation "adiantum(xchacha12-simd,aes-aesni,nhpoly1305-generic)"
[  360.750545][ T2666] overlayfs: failed to resolve './file2': -2
[  360.776059][   T24] kauditd_printk_skb: 35 callbacks suppressed
[  360.823932][   T24] audit: type=1400 audit(1727653458.590:971): avc:  denied  { write } for  pid=2656 comm="syz.0.449" name="rtc0" dev="devtmpfs" ino=166 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  360.989977][ T2670] attempt to access beyond end of device
[  360.989977][ T2670] loop0: rw=0, want=241, limit=128
[  361.018686][    T7] attempt to access beyond end of device
[  361.018686][    T7] loop0: rw=1, want=1041, limit=128
[  362.308854][ T1418] Bluetooth: hci0: command 0x1003 tx timeout
[  362.548769][   T40] Bluetooth: hci0: sending frame failed (-49)
[  362.562668][  T365] usb 4-1: USB disconnect, device number 12
[  362.643496][ T2697] overlayfs: missing 'lowerdir'
[  362.654854][ T2699] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  362.665718][ T2699] EXT4-fs (loop2): 1 truncate cleaned up
[  362.671269][ T2699] EXT4-fs (loop2): mounted filesystem without journal. Opts: data=journal,jqfmt=vfsv0,errors=continue,nodelalloc,init_itable=0x0000000000000004,acl,,errors=continue
[  363.009819][ T2704] EXT4-fs (loop4): Test dummy encryption mode enabled
[  363.024374][ T2704] EXT4-fs error (device loop4): ext4_fill_super:4955: inode #2: comm syz.4.458: casefold flag without casefold feature
[  363.037007][ T2704] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended
[  363.047024][ T2704] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsv0,test_dummy_encryption,,errors=continue
[  363.141910][ T2711] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,debug_want_extra_isize=0x0000000000000088,barrier=0x0000000000000010,max_batch_time=0x0000000000000003,lazytime,errors=continue,data_err=abort,data_err=abort,,errors=continue
[  363.735922][ T2719] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0xff6f124c, utbl_chksum : 0xe619d30d)
[  363.948941][   T24] audit: type=1400 audit(1727653462.130:972): avc:  denied  { mount } for  pid=2723 comm="syz.2.464" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1
[  364.022089][   T24] audit: type=1400 audit(1727653462.160:973): avc:  denied  { remount } for  pid=2723 comm="syz.2.464" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1
[  364.073241][ T2729] overlayfs: missing 'lowerdir'
[  364.084129][   T24] audit: type=1400 audit(1727653462.260:974): avc:  denied  { unmount } for  pid=2323 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1
[  364.107965][ T2356] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  365.123451][ T1418] Bluetooth: hci0: command 0x1001 tx timeout
[  365.153993][   T40] Bluetooth: hci0: sending frame failed (-49)
[  365.259040][ T2741] EXT4-fs (loop4): Test dummy encryption mode enabled
[  365.275565][ T2741] EXT4-fs error (device loop4): ext4_fill_super:4955: inode #2: comm syz.4.466: casefold flag without casefold feature
[  365.288078][ T2741] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended
[  365.299249][ T2741] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsv0,test_dummy_encryption,,errors=continue
[  365.407939][ T2356] usb 4-1: config 1 has an invalid descriptor of length 180, skipping remainder of the config
[  365.418231][ T2356] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18
[  365.508212][ T2356] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  365.560007][ T2356] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  365.611457][ T2356] usb 4-1: SerialNumber: syz
[  365.688321][ T2356] cdc_ether: probe of 4-1:1.0 failed with error -22
[  365.739420][   T24] audit: type=1400 audit(1727653463.920:975): avc:  denied  { name_bind } for  pid=2754 comm="syz.4.472" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1
[  365.760910][   T24] audit: type=1326 audit(1727653463.950:976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2754 comm="syz.4.472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9f0691ff9 code=0x7ffc0000
[  365.784145][   T24] audit: type=1326 audit(1727653463.950:977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2754 comm="syz.4.472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9f0691ff9 code=0x7ffc0000
[  365.788029][ T2596] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  365.819677][   T24] audit: type=1326 audit(1727653463.950:978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2754 comm="syz.4.472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=47 compat=0 ip=0x7ff9f0691ff9 code=0x7ffc0000
[  365.862883][ T2759] overlayfs: missing 'lowerdir'
[  365.869399][   T24] audit: type=1326 audit(1727653463.950:979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2754 comm="syz.4.472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9f0691ff9 code=0x7ffc0000
[  365.892763][   T24] audit: type=1326 audit(1727653463.950:980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2754 comm="syz.4.472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9f0691ff9 code=0x7ffc0000
[  365.926213][   T24] audit: type=1326 audit(1727653463.950:981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2754 comm="syz.4.472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff9f0690990 code=0x7ffc0000
[  365.967936][   T24] audit: type=1326 audit(1727653463.960:982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2754 comm="syz.4.472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9f0691ff9 code=0x7ffc0000
[  365.994706][   T24] audit: type=1326 audit(1727653463.960:983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2754 comm="syz.4.472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9f0691ff9 code=0x7ffc0000
[  366.018228][   T24] audit: type=1326 audit(1727653463.960:984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2754 comm="syz.4.472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff9f0690990 code=0x7ffc0000
[  366.042302][   T24] audit: type=1326 audit(1727653464.000:985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2754 comm="syz.4.472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9f0691ff9 code=0x7ffc0000
[  366.065601][   T24] audit: type=1326 audit(1727653464.000:986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2754 comm="syz.4.472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff9f0691ff9 code=0x7ffc0000
[  366.068522][ T2760] EXT4-fs (loop4): Test dummy encryption mode enabled
[  366.090877][ T2596] usb 3-1: Using ep0 maxpacket: 32
[  366.103003][ T2760] EXT4-fs error (device loop4): ext4_fill_super:4955: inode #2: comm syz.4.474: casefold flag without casefold feature
[  366.120014][ T2760] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended
[  366.130021][ T2760] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsv0,test_dummy_encryption,,errors=continue
[  366.217964][ T2596] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  366.228074][ T2596] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 22
[  366.317975][ T2596] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  366.326924][ T2596] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  366.334889][ T2596] usb 3-1: SerialNumber: syz
[  366.559676][ T2765] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  366.570472][ T2765] EXT4-fs (loop0): 1 truncate cleaned up
[  366.575933][ T2765] EXT4-fs (loop0): mounted filesystem without journal. Opts: data=journal,jqfmt=vfsv0,errors=continue,nodelalloc,init_itable=0x0000000000000004,acl,,errors=continue
[  367.187931][ T1424] Bluetooth: hci0: command 0x1009 tx timeout
[  367.352910][  T430] usb 4-1: USB disconnect, device number 13
[  367.870226][ T2777] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended
[  367.895748][ T2777] EXT4-fs (loop0): orphan cleanup on readonly fs
[  367.902100][ T2777] EXT4-fs error (device loop0): ext4_ext_check_inode:500: inode #3: comm syz.0.478: pblk 0 bad header/extent: invalid eh_max - magic f30a, entries 7, max 0(0), depth 0(0)
[  367.919509][ T2777] EXT4-fs error (device loop0): ext4_quota_enable:6426: comm syz.0.478: Bad quota inode: 3, type: 0
[  367.931190][ T2777] EXT4-fs warning (device loop0): ext4_enable_quotas:6467: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix.
[  367.945740][ T2777] EXT4-fs (loop0): Cannot turn on quotas: error -117
[  367.959967][ T2777] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue
[  368.316772][  T430] usb 3-1: USB disconnect, device number 11
[  369.441457][ T2807] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.482: bg 0: block 248: padding at end of block bitmap is not set
[  369.466077][ T2807] EXT4-fs error (device loop3): ext4_acquire_dquot:6219: comm syz.3.482: Failed to acquire dquot type 1
[  369.489643][ T2807] EXT4-fs (loop3): 1 truncate cleaned up
[  369.501322][ T2807] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue
[  369.519378][ T2807] ext4 filesystem being mounted at /16/bus supports timestamps until 2038 (0x7fffffff)
[  369.576717][ T2790] F2FS-fs (loop2): invalid crc value
[  369.610310][ T2790] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (15359802341028777995, 275811881701387)
[  369.688141][ T2790] F2FS-fs (loop2): Mounted with checkpoint version = 753bd00b
[  369.700314][ T2818] overlayfs: missing 'lowerdir'
[  369.764671][ T2819] bridge0: port 1(bridge_slave_0) entered blocking state
[  369.771707][ T2819] bridge0: port 1(bridge_slave_0) entered disabled state
[  369.779127][ T2819] device bridge_slave_0 entered promiscuous mode
[  369.786171][ T2819] bridge0: port 2(bridge_slave_1) entered blocking state
[  369.793999][ T2819] bridge0: port 2(bridge_slave_1) entered disabled state
[  369.801567][ T2819] device bridge_slave_1 entered promiscuous mode
[  369.832192][ T2819] bridge0: port 2(bridge_slave_1) entered blocking state
[  369.839046][ T2819] bridge0: port 2(bridge_slave_1) entered forwarding state
[  369.846198][ T2819] bridge0: port 1(bridge_slave_0) entered blocking state
[  369.853044][ T2819] bridge0: port 1(bridge_slave_0) entered forwarding state
[  369.892408][ T2823] EXT4-fs (loop4): Test dummy encryption mode enabled
[  369.924139][ T2823] EXT4-fs error (device loop4): ext4_fill_super:4955: inode #2: comm syz.4.486: casefold flag without casefold feature
[  369.936748][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  369.938134][ T2823] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended
[  369.948317][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  369.954571][ T2823] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsv0,test_dummy_encryption,,errors=continue
[  369.978630][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  369.987430][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  370.017450][  T278] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  370.028632][  T278] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  370.050397][ T2819] device veth0_vlan entered promiscuous mode
[  370.065581][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  370.077113][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  370.093671][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  370.108848][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  370.129223][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  370.150177][ T2819] device veth1_macvtap entered promiscuous mode
[  370.166315][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  370.183292][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  370.756554][ T2833] F2FS-fs (loop1): invalid crc value
[  371.013067][ T2833] F2FS-fs (loop1): Found nat_bits in checkpoint
[  371.020355][  T278] device bridge_slave_1 left promiscuous mode
[  371.039440][  T278] bridge0: port 2(bridge_slave_1) entered disabled state
[  371.054119][  T278] device bridge_slave_0 left promiscuous mode
[  371.066655][  T278] bridge0: port 1(bridge_slave_0) entered disabled state
[  371.074978][  T278] device veth1_macvtap left promiscuous mode
[  371.083813][  T278] device veth0_vlan left promiscuous mode
[  371.111358][ T2833] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4
[  371.572117][ T2858] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3962bc8b, utbl_chksum : 0xe619d30d)
[  371.601970][ T2861] netlink: 32 bytes leftover after parsing attributes in process `syz.3.491'.
[  372.020436][ T1418] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  372.114627][ T2866] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended
[  372.125116][ T2866] EXT4-fs (loop1): orphan cleanup on readonly fs
[  372.131453][ T2866] EXT4-fs error (device loop1): ext4_ext_check_inode:500: inode #3: comm syz.1.493: pblk 0 bad header/extent: invalid eh_max - magic f30a, entries 7, max 0(0), depth 0(0)
[  372.149162][ T2866] EXT4-fs error (device loop1): ext4_quota_enable:6426: comm syz.1.493: Bad quota inode: 3, type: 0
[  372.160099][ T2866] EXT4-fs warning (device loop1): ext4_enable_quotas:6467: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix.
[  372.174602][ T2866] EXT4-fs (loop1): Cannot turn on quotas: error -117
[  372.181383][ T2866] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue
[  372.222845][ T2872] attempt to access beyond end of device
[  372.222845][ T2872] loop0: rw=0, want=241, limit=128
[  372.290304][    T7] attempt to access beyond end of device
[  372.290304][    T7] loop0: rw=1, want=1041, limit=128
[  372.737902][ T1418] usb 3-1: Using ep0 maxpacket: 32
[  373.070016][ T1418] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  373.084873][ T2892] overlayfs: missing 'lowerdir'
[  373.108555][ T1418] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 22
[  373.176661][ T2895] EXT4-fs (loop1): Test dummy encryption mode enabled
[  373.184271][ T2895] EXT4-fs error (device loop1): ext4_fill_super:4955: inode #2: comm syz.1.499: casefold flag without casefold feature
[  373.196878][ T2895] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended
[  373.206896][ T2895] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsv0,test_dummy_encryption,,errors=continue
[  373.227982][ T1418] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  373.245413][ T1418] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  373.261491][ T1418] usb 3-1: SerialNumber: syz
[  373.626744][ T2888] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[  373.645262][ T2888] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  373.707797][ T2888] F2FS-fs (loop0): Found nat_bits in checkpoint
[  373.742031][ T2912] EXT4-fs (loop4): couldn't mount as ext2 due to feature incompatibilities
[  373.754771][ T2888] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  373.762018][ T2888] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  374.293532][   T24] kauditd_printk_skb: 7 callbacks suppressed
[  374.293542][   T24] audit: type=1400 audit(1727653472.470:992): avc:  denied  { accept } for  pid=2927 comm="syz.1.506" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1
[  374.332756][ T2916] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[  374.344099][ T2916] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  374.349378][ T2928] EXT4-fs (loop1): mounted filesystem without journal. Opts: min_batch_time=0x0000000000000007,,errors=continue
[  374.379146][ T2916] F2FS-fs (loop0): Found nat_bits in checkpoint
[  374.414027][ T2916] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix.
[  374.426013][ T2916] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  374.433413][ T2916] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  374.801179][ T1418] usb 3-1: USB disconnect, device number 12
[  374.883307][ T2956] attempt to access beyond end of device
[  374.883307][ T2956] loop2: rw=0, want=241, limit=128
[  374.899769][    T7] attempt to access beyond end of device
[  374.899769][    T7] loop2: rw=1, want=1041, limit=128
[  376.033263][ T2971] overlayfs: missing 'lowerdir'
[  376.164920][ T2978] EXT4-fs (loop1): Test dummy encryption mode enabled
[  376.239969][ T2978] EXT4-fs error (device loop1): ext4_fill_super:4955: inode #2: comm syz.1.514: casefold flag without casefold feature
[  376.253310][ T2978] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended
[  376.290229][ T2978] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsv0,test_dummy_encryption,,errors=continue
[  376.574760][ T2990] syz.3.519[2990] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  376.574809][ T2990] syz.3.519[2990] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  377.239300][ T3002] attempt to access beyond end of device
[  377.239300][ T3002] loop1: rw=0, want=241, limit=128
[  377.266700][  T278] attempt to access beyond end of device
[  377.266700][  T278] loop1: rw=1, want=1041, limit=128
[  378.357887][   T25] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  378.488006][ T3024] F2FS-fs (loop1): invalid crc value
[  378.502258][ T3024] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (15359802341028777995, 275811881701387)
[  378.529074][ T3024] F2FS-fs (loop1): Mounted with checkpoint version = 753bd00b
[  378.622364][ T3039] overlayfs: missing 'lowerdir'
[  378.862237][   T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  378.876482][ T3042] EXT4-fs (loop4): Test dummy encryption mode enabled
[  378.883783][   T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  378.894075][   T25] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  378.906960][ T3042] EXT4-fs error (device loop4): ext4_fill_super:4955: inode #2: comm syz.4.532: casefold flag without casefold feature
[  378.930175][   T25] usb 3-1: New USB device found, idVendor=046d, idProduct=c293, bcdDevice= 0.00
[  378.939505][ T3042] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended
[  378.951668][ T3042] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsv0,test_dummy_encryption,,errors=continue
[  378.958009][   T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  378.974617][   T25] usb 3-1: config 0 descriptor??
[  379.448697][   T25] logitech 0003:046D:C293.0009: item fetching failed at offset 5/7
[  379.456651][   T25] logitech 0003:046D:C293.0009: parse failed
[  379.463347][   T25] logitech: probe of 0003:046D:C293.0009 failed with error -22
[  379.667896][  T430] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  379.691858][   T25] usb 3-1: USB disconnect, device number 13
[  380.007618][ T3060] F2FS-fs (loop4): invalid crc value
[  380.016262][ T3068] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  380.016871][ T3060] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (15359802341028777995, 275811881701387)
[  380.039385][ T3068] EXT4-fs (loop1): 1 truncate cleaned up
[  380.045514][ T3068] EXT4-fs (loop1): mounted filesystem without journal. Opts: data=journal,jqfmt=vfsv0,errors=continue,nodelalloc,init_itable=0x0000000000000004,acl,,errors=continue
[  380.057289][ T3060] F2FS-fs (loop4): Mounted with checkpoint version = 753bd00b
[  380.113385][  T430] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  380.124236][  T430] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  380.134086][  T430] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  380.157872][  T430] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  380.178065][  T430] usb 4-1: config 0 descriptor??
[  380.430434][ T3079] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities
[  381.668001][  T430] usbhid 4-1:0.0: can't add hid device: -71
[  381.673813][  T430] usbhid: probe of 4-1:0.0 failed with error -71
[  381.680647][  T430] usb 4-1: USB disconnect, device number 14
[  381.776956][ T3101] overlayfs: missing 'lowerdir'
[  381.879194][ T3105] EXT4-fs (loop2): Test dummy encryption mode enabled
[  381.895308][ T3105] EXT4-fs error (device loop2): ext4_fill_super:4955: inode #2: comm syz.2.545: casefold flag without casefold feature
[  381.908787][ T3105] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended
[  381.918985][ T3105] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsv0,test_dummy_encryption,,errors=continue
[  382.087870][ T1415] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  382.258101][ T3119] binder: 3115:3119 ioctl 4018620d 0 returned -22
[  382.278543][ T3119] device pim6reg1 entered promiscuous mode
[  382.510954][ T1415] usb 5-1: device descriptor read/64, error -71
[  383.060793][ T1415] usb 5-1: device descriptor read/64, error -71
[  383.083019][   T24] audit: type=1400 audit(1727653481.260:993): avc:  denied  { block_suspend } for  pid=3133 comm="syz.1.553" capability=36  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  383.105685][   T24] audit: type=1400 audit(1727653481.280:994): avc:  denied  { sys_module } for  pid=3133 comm="syz.1.553" capability=16  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[  383.126907][   T24] audit: type=1400 audit(1727653481.280:995): avc:  denied  { module_load } for  pid=3133 comm="syz.1.553" path="/sys/power/wakeup_count" dev="sysfs" ino=1423 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1
[  383.210476][ T3137] EXT4-fs (loop1): couldn't mount as ext2 due to feature incompatibilities
[  383.348240][ T1415] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  383.620054][ T3142] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  383.643488][ T3142] EXT4-fs (loop2): 1 truncate cleaned up
[  383.649190][ T3142] EXT4-fs (loop2): mounted filesystem without journal. Opts: data=journal,jqfmt=vfsv0,errors=continue,nodelalloc,init_itable=0x0000000000000004,acl,,errors=continue
[  383.697891][ T1415] usb 5-1: device descriptor read/64, error -71
[  384.446983][ T1415] usb 5-1: device descriptor read/64, error -71
[  384.567951][ T1415] usb usb5-port1: attempt power cycle
[  385.327724][ T3179] bridge0: port 2(bridge_slave_1) entered disabled state
[  385.334863][ T3179] bridge0: port 1(bridge_slave_0) entered disabled state
[  385.377937][   T25] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  385.627872][   T25] usb 2-1: Using ep0 maxpacket: 32
[  385.748360][   T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  385.759570][   T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  385.769442][   T25] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  385.778476][   T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  385.789953][   T25] usb 2-1: config 0 descriptor??
[  385.829549][   T25] hub 2-1:0.0: USB hub found
[  385.924958][ T3185] F2FS-fs (loop4): invalid crc value
[  385.943764][ T3185] F2FS-fs (loop4): Found nat_bits in checkpoint
[  385.980252][ T3185] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4
[  386.308016][   T25] hub 2-1:0.0: config failed, can't read hub descriptor (err -22)
[  386.315878][ T3207] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities
[  386.698159][   T25] usbhid 2-1:0.0: can't add hid device: -71
[  386.704018][   T25] usbhid: probe of 2-1:0.0 failed with error -71
[  386.726349][ T3213] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue
[  386.735258][ T3213] ext4 filesystem being mounted at /34/file1 supports timestamps until 2038 (0x7fffffff)
[  386.738242][   T25] usb 2-1: USB disconnect, device number 6
[  386.775774][ T3213] EXT4-fs error (device loop0): ext4_search_dir:1521: inode #2: block 3: comm syz.0.572: bad entry in directory: inode out of bounds - offset=60, inode=15, rec_len=16, size=2048 fake=0
[  386.795373][ T3213] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5897: Corrupt filesystem
[  386.805221][ T3213] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5897: Corrupt filesystem
[  386.814712][ T3213] EXT4-fs error (device loop0): ext4_evict_inode:283: inode #19: comm syz.0.572: mark_inode_dirty error
[  386.828088][ T3213] EXT4-fs warning (device loop0): ext4_evict_inode:286: couldn't mark inode dirty (err -117)
[  386.840416][ T3221] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3
[  386.846852][ T3213] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5897: Corrupt filesystem
[  386.856365][ T3213] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5897: Corrupt filesystem
[  386.865902][ T3213] EXT4-fs error (device loop0): ext4_evict_inode:283: inode #20: comm syz.0.572: mark_inode_dirty error
[  386.877123][ T3213] EXT4-fs warning (device loop0): ext4_evict_inode:286: couldn't mark inode dirty (err -117)
[  386.892255][ T2324] EXT4-fs error (device loop0): ext4_readdir:260: inode #2: block 3: comm syz-executor: path /34/file1: bad entry in directory: inode out of bounds - offset=24, inode=11, rec_len=20, size=2048 fake=0
[  387.188224][ T2356] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  387.252533][  T278] Bluetooth: hci0: Frame reassembly failed (-84)
[  387.261543][  T278] Bluetooth: hci0: Frame reassembly failed (-84)
[  387.415247][ T3228] bridge0: port 1(bridge_slave_0) entered blocking state
[  387.444213][ T3228] bridge0: port 1(bridge_slave_0) entered disabled state
[  387.452275][ T3228] device bridge_slave_0 entered promiscuous mode
[  387.471541][ T3228] bridge0: port 2(bridge_slave_1) entered blocking state
[  387.478645][ T3228] bridge0: port 2(bridge_slave_1) entered disabled state
[  387.485960][ T3228] device bridge_slave_1 entered promiscuous mode
[  387.492063][ T3240] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  387.492395][ T2356] usb 5-1: Using ep0 maxpacket: 32
[  387.508381][ T3240] EXT4-fs (loop1): 1 truncate cleaned up
[  387.513842][ T3240] EXT4-fs (loop1): mounted filesystem without journal. Opts: data=journal,jqfmt=vfsv0,errors=continue,nodelalloc,init_itable=0x0000000000000004,acl,,errors=continue
[  387.552504][ T3228] bridge0: port 2(bridge_slave_1) entered blocking state
[  387.559477][ T3228] bridge0: port 2(bridge_slave_1) entered forwarding state
[  387.566579][ T3228] bridge0: port 1(bridge_slave_0) entered blocking state
[  387.573443][ T3228] bridge0: port 1(bridge_slave_0) entered forwarding state
[  387.607560][  T278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  387.615064][  T278] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  387.623718][  T278] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  387.635385][  T278] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  387.644949][  T278] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  387.667926][ T2356] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  387.694891][ T2356] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  387.788714][ T2356] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  387.798866][ T2356] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  387.861351][ T2356] usb 5-1: config 0 descriptor??
[  387.866404][  T278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  387.882184][  T278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  387.890466][  T278] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  387.897968][  T278] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  387.898534][ T2356] hub 5-1:0.0: USB hub found
[  387.905365][ T3228] device veth0_vlan entered promiscuous mode
[  387.923229][  T278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  387.933347][ T3228] device veth1_macvtap entered promiscuous mode
[  387.944852][  T278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  387.965808][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  388.238566][    T7] device bridge_slave_1 left promiscuous mode
[  388.244708][    T7] bridge0: port 2(bridge_slave_1) entered disabled state
[  388.252158][    T7] device bridge_slave_0 left promiscuous mode
[  388.258517][    T7] bridge0: port 1(bridge_slave_0) entered disabled state
[  388.266457][    T7] device veth1_macvtap left promiscuous mode
[  388.272520][    T7] device veth0_vlan left promiscuous mode
[  388.377920][ T2356] hub 5-1:0.0: config failed, can't read hub descriptor (err -22)
[  388.595472][ T3254] F2FS-fs (loop1): invalid crc value
[  388.608317][ T3254] F2FS-fs (loop1): Found nat_bits in checkpoint
[  388.639520][ T3254] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4
[  388.777956][ T2356] usbhid 5-1:0.0: can't add hid device: -71
[  388.783865][ T2356] usbhid: probe of 5-1:0.0 failed with error -71
[  388.819116][ T2356] usb 5-1: USB disconnect, device number 12
[  389.268071][ T2356] Bluetooth: hci0: command 0x1003 tx timeout
[  389.284234][   T40] Bluetooth: hci0: sending frame failed (-49)
[  389.462870][   T24] audit: type=1400 audit(1727653487.640:996): avc:  denied  { create } for  pid=3273 comm="syz.1.584" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  389.483323][   T24] audit: type=1400 audit(1727653487.670:997): avc:  denied  { bind } for  pid=3273 comm="syz.1.584" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  389.871100][ T1418] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  390.170447][ T3284] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0xff6f124c, utbl_chksum : 0xe619d30d)
[  390.298558][ T3288] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  390.307962][ T1418] usb 2-1: device descriptor read/64, error -71
[  390.318795][ T3288] EXT4-fs (loop4): 1 truncate cleaned up
[  390.328830][ T3288] EXT4-fs (loop4): mounted filesystem without journal. Opts: data=journal,jqfmt=vfsv0,errors=continue,nodelalloc,init_itable=0x0000000000000004,acl,,errors=continue
[  390.637884][ T1416] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  390.697875][ T1418] usb 2-1: device descriptor read/64, error -71
[  390.977922][ T1418] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  390.998083][ T1416] usb 5-1: config 0 has an invalid interface number: 156 but max is 1
[  391.006062][ T1416] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  391.028892][ T1416] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2
[  391.046253][ T1416] usb 5-1: config 0 has no interface number 0
[  391.058765][ T1416] usb 5-1: config 0 interface 156 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0
[  391.078659][ T1416] usb 5-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[  391.100199][ T1416] usb 5-1: config 0 interface 156 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  391.119999][ T1416] usb 5-1: config 0 interface 156 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  391.147178][ T1416] usb 5-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9
[  391.165813][ T1416] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  391.182890][ T1416] usb 5-1: config 0 descriptor??
[  391.228581][ T1416] usb 5-1: MIDIStreaming interface descriptor not found
[  391.247865][ T1418] usb 2-1: device descriptor read/64, error -71
[  391.347928][ T1416] Bluetooth: hci0: command 0x1001 tx timeout
[  391.353818][   T40] Bluetooth: hci0: sending frame failed (-49)
[  391.637877][ T1418] usb 2-1: device descriptor read/64, error -71
[  391.757916][ T1418] usb usb2-port1: attempt power cycle
[  392.347881][ T1418] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  392.515735][ T1418] usb 2-1: device descriptor read/8, error -71
[  392.538464][ T3306] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  392.560230][ T3306] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  392.584106][   T24] audit: type=1400 audit(1727653490.760:998): avc:  denied  { bind } for  pid=3305 comm="syz.1.592" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  392.943223][ T1418] usb 2-1: device descriptor read/8, error -71
[  393.057113][ T3316] F2FS-fs (loop3): Invalid SB checksum offset: 0
[  393.063381][ T3316] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock
[  393.073707][ T3316] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437)
[  393.094099][ T3316] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0
[  393.101178][ T3316] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  393.272827][  T407] usb 5-1: USB disconnect, device number 13
[  393.427986][ T1426] Bluetooth: hci0: command 0x1009 tx timeout
[  393.489069][ T2322] attempt to access beyond end of device
[  393.489069][ T2322] loop3: rw=524288, want=45072, limit=40427
[  393.500428][ T2322] attempt to access beyond end of device
[  393.500428][ T2322] loop3: rw=0, want=45072, limit=40427
[  393.709700][    T7] attempt to access beyond end of device
[  393.709700][    T7] loop3: rw=2049, want=45120, limit=40427
[  393.891698][ T3342] bridge0: port 1(bridge_slave_0) entered blocking state
[  393.898604][ T3342] bridge0: port 1(bridge_slave_0) entered disabled state
[  393.905703][ T3342] device bridge_slave_0 entered promiscuous mode
[  393.912680][ T3342] bridge0: port 2(bridge_slave_1) entered blocking state
[  393.919727][ T3342] bridge0: port 2(bridge_slave_1) entered disabled state
[  393.926939][ T3342] device bridge_slave_1 entered promiscuous mode
[  393.960685][ T3342] bridge0: port 2(bridge_slave_1) entered blocking state
[  393.967530][ T3342] bridge0: port 2(bridge_slave_1) entered forwarding state
[  393.974730][ T3342] bridge0: port 1(bridge_slave_0) entered blocking state
[  393.981511][ T3342] bridge0: port 1(bridge_slave_0) entered forwarding state
[  393.999453][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  394.006827][    T7] bridge0: port 1(bridge_slave_0) entered disabled state
[  394.014128][    T7] bridge0: port 2(bridge_slave_1) entered disabled state
[  394.023142][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  394.031263][    T7] bridge0: port 1(bridge_slave_0) entered blocking state
[  394.038108][    T7] bridge0: port 1(bridge_slave_0) entered forwarding state
[  394.047326][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  394.055545][    T7] bridge0: port 2(bridge_slave_1) entered blocking state
[  394.062405][    T7] bridge0: port 2(bridge_slave_1) entered forwarding state
[  394.074684][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  394.090846][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  394.099577][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  394.111174][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  394.119054][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  394.126409][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  394.134669][ T3342] device veth0_vlan entered promiscuous mode
[  394.141572][  T278] tipc: Disabling bearer <udp:syz1>
[  394.146693][  T278] tipc: Left network mode
[  394.152055][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  394.162498][ T3342] device veth1_macvtap entered promiscuous mode
[  394.173406][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  394.192069][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  394.827990][ T1418] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  394.835850][  T278] device bridge_slave_1 left promiscuous mode
[  394.841880][  T278] bridge0: port 2(bridge_slave_1) entered disabled state
[  394.849157][  T278] device bridge_slave_0 left promiscuous mode
[  394.855067][  T278] bridge0: port 1(bridge_slave_0) entered disabled state
[  394.862698][  T278] device veth1_macvtap left promiscuous mode
[  394.868720][  T278] device veth0_vlan left promiscuous mode
[  395.067957][ T1418] usb 5-1: Using ep0 maxpacket: 16
[  395.198021][ T1418] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  395.209917][ T1418] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  395.222667][ T1418] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  395.231476][ T1418] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  395.243353][ T3367] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue
[  395.248571][ T1418] usb 5-1: config 0 descriptor??
[  395.254668][ T3367] ext4 filesystem being mounted at /28/file0 supports timestamps until 2038 (0x7fffffff)
[  395.495935][ T3372] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.605: bg 0: block 248: padding at end of block bitmap is not set
[  395.510480][ T3372] Quota error (device loop3): write_blk: dquota write failed
[  395.517691][ T3372] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota
[  395.527543][ T3372] EXT4-fs error (device loop3): ext4_acquire_dquot:6219: comm syz.3.605: Failed to acquire dquot type 1
[  395.539270][ T3372] EXT4-fs (loop3): 1 truncate cleaned up
[  395.544741][ T3372] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue
[  395.553698][ T3372] ext4 filesystem being mounted at /1/bus supports timestamps until 2038 (0x7fffffff)
[  395.709439][ T3362] device veth1_macvtap left promiscuous mode
[  395.761693][ T3362] EXT4-fs (loop4): 1 truncate cleaned up
[  395.767187][ T3362] EXT4-fs (loop4): mounted filesystem without journal. Opts: noauto_da_alloc,grpquota,errors=continue,data_err=ignore,nolazytime,errors=continue,grpjquota=,errors=remount-ro,nobarrier,
[  396.017900][ T1418] usbhid 5-1:0.0: can't add hid device: -71
[  396.023765][ T1418] usbhid: probe of 5-1:0.0 failed with error -71
[  396.031500][ T1418] usb 5-1: USB disconnect, device number 14
[  397.002640][ T3395] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue
[  397.049688][ T3410] exfat: Unknown parameter 'allo9Vutime'
[  397.317906][ T1418] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  397.435110][ T3417] bridge0: port 1(bridge_slave_0) entered blocking state
[  397.448010][ T3417] bridge0: port 1(bridge_slave_0) entered disabled state
[  397.459603][ T3417] device bridge_slave_0 entered promiscuous mode
[  397.485885][ T3417] bridge0: port 2(bridge_slave_1) entered blocking state
[  397.492767][ T3417] bridge0: port 2(bridge_slave_1) entered disabled state
[  397.500230][ T3417] device bridge_slave_1 entered promiscuous mode
[  397.567903][ T1418] usb 5-1: Using ep0 maxpacket: 8
[  397.664495][ T3417] bridge0: port 2(bridge_slave_1) entered blocking state
[  397.671384][ T3417] bridge0: port 2(bridge_slave_1) entered forwarding state
[  397.678462][ T3417] bridge0: port 1(bridge_slave_0) entered blocking state
[  397.685237][ T3417] bridge0: port 1(bridge_slave_0) entered forwarding state
[  397.698012][ T1418] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[  397.711892][ T1418] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[  397.732049][ T1418] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  397.795138][    T9] bridge0: port 1(bridge_slave_0) entered disabled state
[  397.808348][    T9] bridge0: port 2(bridge_slave_1) entered disabled state
[  397.821514][ T3432] EXT4-fs (loop3): can't mount with data=, fs mounted w/o journal
[  397.829905][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  397.837369][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  397.855533][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  397.863727][    T9] bridge0: port 1(bridge_slave_0) entered blocking state
[  397.870595][    T9] bridge0: port 1(bridge_slave_0) entered forwarding state
[  397.889917][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  397.898021][ T1418] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  397.898370][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  397.907051][ T1418] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  397.916760][    T9] bridge0: port 2(bridge_slave_1) entered blocking state
[  397.929456][    T9] bridge0: port 2(bridge_slave_1) entered forwarding state
[  397.937051][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  397.938705][ T1418] usb 5-1: Product: syz
[  397.945051][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  397.956899][ T1418] usb 5-1: Manufacturer: syz
[  397.961623][ T1418] usb 5-1: SerialNumber: syz
[  397.969743][ T3417] device veth0_vlan entered promiscuous mode
[  397.984064][  T278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  397.996781][  T278] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  398.004410][  T278] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  398.012701][  T278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  398.049661][ T3417] device veth1_macvtap entered promiscuous mode
[  398.061607][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  398.072394][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  398.147022][   T24] audit: type=1326 audit(1727653496.320:999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3494 comm="syz.3.620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3e0643ff9 code=0x7ffc0000
[  398.147169][ T3495] mmap: syz.3.620 (3495) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst.
[  398.173031][   T24] audit: type=1326 audit(1727653496.320:1000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3494 comm="syz.3.620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3e0643ff9 code=0x7ffc0000
[  398.205310][   T24] audit: type=1326 audit(1727653496.320:1001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3494 comm="syz.3.620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=216 compat=0 ip=0x7fe3e0643ff9 code=0x7ffc0000
[  398.238965][    T7] device bridge_slave_1 left promiscuous mode
[  398.244941][   T24] audit: type=1326 audit(1727653496.400:1002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3494 comm="syz.3.620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3e0643ff9 code=0x7ffc0000
[  398.244958][    T7] bridge0: port 2(bridge_slave_1) entered disabled state
[  398.275363][    T7] device bridge_slave_0 left promiscuous mode
[  398.281480][    T7] bridge0: port 1(bridge_slave_0) entered disabled state
[  398.289926][ T3499] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  398.306776][    T7] device veth1_macvtap left promiscuous mode
[  398.312821][    T7] device veth0_vlan left promiscuous mode
[  398.318692][ T3499] EXT4-fs (loop1): 1 truncate cleaned up
[  398.326235][ T3499] EXT4-fs (loop1): mounted filesystem without journal. Opts: data=journal,jqfmt=vfsv0,errors=continue,nodelalloc,init_itable=0x0000000000000004,acl,,errors=continue
[  398.334890][   T24] audit: type=1326 audit(1727653496.400:1003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3494 comm="syz.3.620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3e0643ff9 code=0x7ffc0000
[  398.371339][   T24] audit: type=1326 audit(1727653496.410:1004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3494 comm="syz.3.620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe3e0643ff9 code=0x7ffc0000
[  398.395722][   T24] audit: type=1326 audit(1727653496.410:1005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3494 comm="syz.3.620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3e0643ff9 code=0x7ffc0000
[  398.419210][   T24] audit: type=1326 audit(1727653496.410:1006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3494 comm="syz.3.620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3e0643ff9 code=0x7ffc0000
[  398.631662][   T25] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  398.768383][ T1418] usb 5-1: 0:2 : does not exist
[  398.775819][ T1418] usb 5-1: USB disconnect, device number 15
[  398.786044][ T2482] udevd[2482]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  398.907941][   T25] usb 3-1: device descriptor read/64, error -71
[  399.298041][   T25] usb 3-1: device descriptor read/64, error -71
[  399.440240][    T7] Bluetooth: hci0: Frame reassembly failed (-84)
[  399.598100][   T25] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  399.838838][ T3484] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[  399.867901][   T25] usb 3-1: device descriptor read/64, error -71
[  400.267973][ T3484] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  400.276427][   T25] usb 3-1: device descriptor read/64, error -71
[  400.281708][ T3484] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  400.294607][ T3484] usb 4-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00
[  400.303494][ T3484] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  400.311920][ T3484] usb 4-1: config 0 descriptor??
[  400.398149][   T25] usb usb3-port1: attempt power cycle
[  400.798680][ T3484] arvo 0003:1E7D:30D4.000A: unknown main item tag 0x0
[  400.805336][ T3484] arvo 0003:1E7D:30D4.000A: item fetching failed at offset 6/7
[  400.807886][   T25] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[  400.812924][ T3484] arvo 0003:1E7D:30D4.000A: parse failed
[  400.825670][ T3484] arvo: probe of 0003:1E7D:30D4.000A failed with error -22
[  400.928427][ T3540] FAT-fs (loop0): Unrecognized mount option "³8|'ÒœØi" or missing value
[  400.987925][   T25] usb 3-1: device descriptor read/8, error -71
[  401.095206][ T3524] erofs: (device loop3): erofs_read_inode: unsupported chunk format 0 of nid 36
[  401.257966][   T25] usb 3-1: device descriptor read/8, error -71
[  401.293973][ T3524] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue
[  401.434257][ T3524] EXT4-fs error (device loop3) in ext4_do_update_inode:5303: error 27
[  401.455546][ T3553] udc-core: couldn't find an available UDC or it's busy
[  401.462844][ T3524] EXT4-fs error (device loop3): ext4_dirty_inode:6107: inode #15: comm syz.3.628: mark_inode_dirty error
[  401.474290][ T3553] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  401.482040][  T430] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[  401.490059][ T3524] EXT4-fs error (device loop3) in ext4_do_update_inode:5303: error 27
[  401.716952][ T3524] EXT4-fs error (device loop3): __ext4_ext_dirty:182: inode #15: comm syz.3.628: mark_inode_dirty error
[  401.728565][ T3524] EXT4-fs error (device loop3) in ext4_do_update_inode:5303: error 27
[  401.736675][ T3524] EXT4-fs error (device loop3): __ext4_ext_dirty:182: inode #15: comm syz.3.628: mark_inode_dirty error
[  401.748363][ T3524] EXT4-fs error (device loop3) in ext4_do_update_inode:5303: error 27
[  401.756477][ T3524] EXT4-fs error (device loop3): ext4_truncate:4389: inode #15: comm syz.3.628: mark_inode_dirty error
[  401.768252][ T3555] udc-core: couldn't find an available UDC or it's busy
[  401.775014][ T3555] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  401.787129][   T25] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[  401.795080][ T3524] EXT4-fs error (device loop3) in ext4_setattr:5671: error 27
[  401.803824][ T3556] EXT4-fs error (device loop3) in ext4_do_update_inode:5303: error 27
[  401.813987][ T2356] usb 4-1: USB disconnect, device number 15
[  401.842119][ T3555] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  401.862041][ T3555] EXT4-fs (loop2): 1 truncate cleaned up
[  401.867892][ T3555] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue
[  401.912971][ T3548] netlink: 16 bytes leftover after parsing attributes in process `syz.0.632'.
[  401.922515][ T3449] Bluetooth: hci0: command 0x1003 tx timeout
[  401.927986][  T430] usb 5-1: Using ep0 maxpacket: 16
[  401.928416][   T40] Bluetooth: hci0: sending frame failed (-49)
[  401.967988][   T25] usb 3-1: device descriptor read/8, error -71
[  402.207956][  T430] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  402.217010][  T430] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  402.224965][  T430] usb 5-1: Product: syz
[  402.229253][  T430] usb 5-1: Manufacturer: syz
[  402.233699][  T430] usb 5-1: SerialNumber: syz
[  402.238234][   T25] usb 3-1: device descriptor read/8, error -71
[  402.248421][  T430] usb 5-1: config 0 descriptor??
[  402.357945][   T25] usb usb3-port1: unable to enumerate USB device
[  402.611147][ T3566] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities
[  403.309865][ T3574] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.637: bg 0: block 248: padding at end of block bitmap is not set
[  403.340852][ T3574] __quota_error: 29 callbacks suppressed
[  403.340858][ T3574] Quota error (device loop0): write_blk: dquota write failed
[  403.377851][ T3574] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota
[  403.406209][ T3574] EXT4-fs error (device loop0): ext4_acquire_dquot:6219: comm syz.0.637: Failed to acquire dquot type 1
[  403.478236][ T3574] EXT4-fs (loop0): 1 truncate cleaned up
[  403.483704][ T3574] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue
[  403.520345][ T3574] ext4 filesystem being mounted at /9/bus supports timestamps until 2038 (0x7fffffff)
[  403.997896][ T3449] Bluetooth: hci0: command 0x1001 tx timeout
[  404.003804][   T40] Bluetooth: hci0: sending frame failed (-49)
[  404.014650][ T3583] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  404.027255][ T3583] EXT4-fs (loop0): 1 truncate cleaned up
[  404.032871][ T3583] EXT4-fs (loop0): mounted filesystem without journal. Opts: data=journal,jqfmt=vfsv0,errors=continue,nodelalloc,init_itable=0x0000000000000004,acl,,errors=continue
[  404.127952][  T430] r8152 5-1:0.0: Unknown version 0x0000
[  404.136546][  T430] usb 5-1: USB disconnect, device number 16
[  405.272771][   T24] audit: type=1400 audit(1727653503.450:1036): avc:  denied  { read } for  pid=3595 comm="syz.3.642" path="socket:[28976]" dev="sockfs" ino=28976 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  405.488214][ T3604] FAT-fs (loop0): Unrecognized mount option "³8|'ÒœØi" or missing value
[  406.105826][ T3621] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities
[  406.245332][ T3624] attempt to access beyond end of device
[  406.245332][ T3624] loop4: rw=0, want=241, limit=128
[  406.281741][    T9] attempt to access beyond end of device
[  406.281741][    T9] loop4: rw=1, want=1041, limit=128
[  406.317517][ T3610] netlink: 16 bytes leftover after parsing attributes in process `syz.0.644'.
[  406.326642][ T3484] Bluetooth: hci0: command 0x1009 tx timeout
[  406.478152][ T3627] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  406.519166][ T3627] EXT4-fs (loop4): 1 truncate cleaned up
[  406.524803][ T3627] EXT4-fs (loop4): mounted filesystem without journal. Opts: data=journal,jqfmt=vfsv0,errors=continue,nodelalloc,init_itable=0x0000000000000004,acl,,errors=continue
[  406.561759][ T3630] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue
[  407.236467][   T24] audit: type=1400 audit(1727653505.410:1037): avc:  denied  { mounton } for  pid=3629 comm="syz.3.651" path="/16/file0/file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  407.770348][ T3648] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities
[  408.009637][ T3656] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  408.034316][ T3656] EXT4-fs (loop3): 1 truncate cleaned up
[  408.039919][ T3656] EXT4-fs (loop3): mounted filesystem without journal. Opts: init_itable,resuid=0x0000000000000000,stripe=0x0000000000000000,,errors=continue
[  408.065205][   T24] audit: type=1400 audit(1727653506.240:1038): avc:  denied  { setattr } for  pid=3655 comm="syz.3.656" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  408.215130][ T3664] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  408.309056][ T3664] EXT4-fs (loop3): 1 truncate cleaned up
[  408.316598][ T3664] EXT4-fs (loop3): mounted filesystem without journal. Opts: data=journal,jqfmt=vfsv0,errors=continue,nodelalloc,init_itable=0x0000000000000004,acl,,errors=continue
[  408.456770][   T24] audit: type=1400 audit(1727653506.630:1039): avc:  denied  { append } for  pid=3673 comm="syz.2.661" name="loop3" dev="devtmpfs" ino=114 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  408.829862][   T24] audit: type=1400 audit(1727653507.010:1040): avc:  denied  { getattr } for  pid=3673 comm="syz.2.661" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[  408.852382][ T3674] overlayfs: statfs failed on './file0'
[  409.000764][ T3683] binder: 3680:3683 ioctl 4018620d 0 returned -22
[  409.013490][   T24] audit: type=1326 audit(1727653507.190:1041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3680 comm="syz.2.662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8bcd46ff9 code=0x7ffc0000
[  409.050088][ T3683] ------------[ cut here ]------------
[  409.055429][   T24] audit: type=1326 audit(1727653507.210:1042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3680 comm="syz.2.662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7fd8bcd46ff9 code=0x7ffc0000
[  409.087348][ T3683] trace type BPF program uses run-time allocation
[  409.094262][ T3683] WARNING: CPU: 1 PID: 3683 at kernel/bpf/verifier.c:10493 check_map_prog_compatibility+0x65b/0x7c0
[  409.105315][ T3683] Modules linked in:
[  409.109519][ T3683] CPU: 1 PID: 3683 Comm: syz.2.662 Not tainted 5.10.225-syzkaller-00513-g8d23314f588a #0
[  409.119866][   T24] audit: type=1326 audit(1727653507.220:1043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3680 comm="syz.2.662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8bcd46ff9 code=0x7ffc0000
[  409.143367][ T3683] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
[  409.153758][ T3683] RIP: 0010:check_map_prog_compatibility+0x65b/0x7c0
[  409.160449][   T24] audit: type=1326 audit(1727653507.220:1044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3680 comm="syz.2.662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd8bcd46ff9 code=0x7ffc0000
[  409.184187][ T3683] Code: c8 e9 84 fe ff ff e8 34 f4 ee ff 31 db e9 85 fe ff ff e8 28 f4 ee ff c6 05 9e 15 65 05 01 48 c7 c7 40 76 45 85 e8 25 7a c2 ff <0f> 0b e9 42 fc ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 17 fa ff
[  409.205058][ T3683] RSP: 0018:ffffc90000cf6f90 EFLAGS: 00010246
[  409.211192][   T24] audit: type=1326 audit(1727653507.220:1045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3680 comm="syz.2.662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8bcd46ff9 code=0x7ffc0000
[  409.234969][ T3683] RAX: e45e54616cb58400 RBX: ffff88811508a800 RCX: 0000000000040000
[  409.242934][ T3683] RDX: ffffc90004c39000 RSI: 000000000000124e RDI: 000000000000124f
[  409.251108][ T3683] RBP: ffffc90000cf6fd0 R08: ffffffff81522098 R09: ffffed103ee2a5f8
[  409.259221][   T24] audit: type=1326 audit(1727653507.220:1046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3680 comm="syz.2.662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd8bcd46ff9 code=0x7ffc0000
[  409.282646][ T3683] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000011
[  409.298198][ T3683] R13: 1ffff9200001b604 R14: ffff888120824000 R15: ffffc900000db020
[  409.317897][ T3683] FS:  00007fd8bb99f6c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000
[  409.326928][   T24] audit: type=1326 audit(1727653507.220:1047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3680 comm="syz.2.662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8bcd46ff9 code=0x7ffc0000
[  409.357977][ T3683] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  409.380646][ T3683] CR2: 00007ffd5a7ab020 CR3: 000000011c77e000 CR4: 00000000003506a0
[  409.388774][ T3683] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  409.438259][   T24] audit: type=1326 audit(1727653507.220:1048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3680 comm="syz.2.662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd8bcd46ff9 code=0x7ffc0000
[  409.467970][ T3683] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  409.477991][ T3683] Call Trace:
[  409.481122][ T3683]  ? show_regs+0x58/0x60
[  409.485183][ T3683]  ? __warn+0x160/0x2f0
[  409.489808][ T3683]  ? check_map_prog_compatibility+0x65b/0x7c0
[  409.495810][ T3683]  ? report_bug+0x3d9/0x5b0
[  409.500324][ T3683]  ? check_map_prog_compatibility+0x65b/0x7c0
[  409.506339][ T3683]  ? handle_bug+0x41/0x70
[  409.510685][ T3683]  ? exc_invalid_op+0x1b/0x50
[  409.515278][ T3683]  ? asm_exc_invalid_op+0x12/0x20
[  409.520292][ T3683]  ? wake_up_klogd+0xb8/0xf0
[  409.524768][ T3683]  ? check_map_prog_compatibility+0x65b/0x7c0
[  409.530818][ T3683]  ? __fdget+0x1bc/0x240
[  409.534982][ T3683]  resolve_pseudo_ldimm64+0x586/0x1020
[  409.554321][ T3685] F2FS-fs (loop3): invalid crc value
[  409.567044][ T3683]  ? bpf_check+0xf2b0/0xf2b0
[  409.574791][ T3683]  ? kvmalloc_node+0x82/0x130
[  409.579754][ T3683]  bpf_check+0xaf21/0xf2b0
[  409.586650][ T3683]  ? stack_depot_save+0xe/0x10
[  409.598904][ T3685] F2FS-fs (loop3): Found nat_bits in checkpoint
[  409.678492][ T3692] bridge0: port 1(bridge_slave_0) entered blocking state
[  409.688378][ T3683]  ? __se_sys_bpf+0x9856/0x11cb0
[  409.693224][ T3683]  ? sched_clock+0x3a/0x40
[  409.717864][ T3692] bridge0: port 1(bridge_slave_0) entered disabled state
[  409.725167][ T3692] device bridge_slave_0 entered promiscuous mode
[  409.737898][ T3683]  ? bpf_prog_0cca8e9c42b3f556+0x5e4/0xe48
[  409.747936][ T3683]  ? bpf_get_btf_vmlinux+0x60/0x60
[  409.756294][ T3692] bridge0: port 2(bridge_slave_1) entered blocking state
[  409.769817][ T3683]  ? __kernel_text_address+0x9b/0x110
[  409.785878][ T3692] bridge0: port 2(bridge_slave_1) entered disabled state
[  409.793103][ T3683]  ? unwind_get_return_address+0x4d/0x90
[  409.799155][ T3685] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4
[  409.811854][ T3683]  ? arch_stack_walk+0xf3/0x140
[  409.816957][ T3692] device bridge_slave_1 entered promiscuous mode
[  409.934179][ T3683]  ? stack_trace_save+0x113/0x1c0
[  409.953830][ T3683]  ? stack_trace_snprint+0xf0/0xf0
[  409.962819][ T3683]  ? stack_trace_snprint+0xf0/0xf0
[  409.977947][ T3683]  ? selinux_bpf_prog_alloc+0x51/0x140
[  409.995782][ T3683]  ? selinux_bpf_prog_alloc+0x51/0x140
[  410.017994][ T3683]  ? ____kasan_kmalloc+0xed/0x110
[  410.023160][ T3683]  ? ____kasan_kmalloc+0xdb/0x110
[  410.042370][ T3683]  ? __kasan_kmalloc+0x9/0x10
[  410.046937][ T3683]  ? kmem_cache_alloc_trace+0x18a/0x2e0
[  410.099374][ T3683]  ? selinux_bpf_prog_alloc+0x51/0x140
[  410.119473][ T3683]  ? security_bpf_prog_alloc+0x62/0x90
[  410.140045][ T3683]  ? __se_sys_bpf+0x9f8c/0x11cb0
[  410.177210][ T3683]  ? __x64_sys_bpf+0x7b/0x90
[  410.399740][ T3683]  ? do_syscall_64+0x34/0x70
[  410.418210][ T3692] bridge0: port 2(bridge_slave_1) entered blocking state
[  410.425061][ T3692] bridge0: port 2(bridge_slave_1) entered forwarding state
[  410.427941][ T3683]  ? entry_SYSCALL_64_after_hwframe+0x61/0xcb
[  410.432268][ T3692] bridge0: port 1(bridge_slave_0) entered blocking state
[  410.444855][ T3692] bridge0: port 1(bridge_slave_0) entered forwarding state
[  410.468092][ T3683]  ? __kasan_kmalloc+0x9/0x10
[  410.477868][ T3683]  __se_sys_bpf+0x107a2/0x11cb0
[  410.499356][  T278] bridge0: port 1(bridge_slave_0) entered disabled state
[  410.506957][  T278] bridge0: port 2(bridge_slave_1) entered disabled state
[  410.514141][ T3683]  ? ktime_get_boot_fast_ns+0x19d/0x1d0
[  410.520332][  T278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  410.528551][ T3683]  ? __x64_sys_bpf+0x90/0x90
[  410.539130][  T278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  410.548099][ T3683]  ? audit_log_end+0x1c8/0x230
[  410.561758][ T3683]  ? bpf_trace_run2+0xf4/0x280
[  410.576528][ T3683]  ? kmem_cache_free+0xa9/0x1e0
[  410.614833][ T3683]  ? __bpf_trace_kmem_free+0x6f/0x90
[  410.620667][ T3683]  ? kmem_cache_free+0x1c0/0x1e0
[  410.625527][ T3683]  ? audit_log_end+0x1c8/0x230
[  410.630975][ T3683]  ? audit_log_end+0x1c8/0x230
[  410.635640][ T3683]  ? audit_seccomp+0x1a8/0x1e0
[  410.640315][ T3683]  ? __seccomp_filter+0xd03/0x1e10
[  410.645287][ T3683]  ? futex_exit_release+0x1e0/0x1e0
[  410.650485][ T3683]  ? __secure_computing+0x300/0x300
[  410.655540][ T3683]  ? alloc_file+0x3e5/0x4e0
[  411.023062][  T378] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  411.032903][ T3683]  ? alloc_file_pseudo+0x280/0x2f0
[  411.040391][  T378] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  411.076243][ T3683]  ? alloc_empty_file_noaccount+0x80/0x80
[  411.082406][  T378] bridge0: port 1(bridge_slave_0) entered blocking state
[  411.089370][  T378] bridge0: port 1(bridge_slave_0) entered forwarding state
[  411.096834][ T3683]  ? __se_sys_futex+0x355/0x470
[  411.101882][ T3683]  ? __secure_computing+0xf0/0x300
[  411.106926][ T3683]  __x64_sys_bpf+0x7b/0x90
[  411.121319][  T378] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  411.129660][ T3683]  do_syscall_64+0x34/0x70
[  411.133997][ T3683]  entry_SYSCALL_64_after_hwframe+0x61/0xcb
[  411.140722][  T378] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  411.148956][ T3683] RIP: 0033:0x7fd8bcd46ff9
[  411.153272][ T3683] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  411.175970][  T378] bridge0: port 2(bridge_slave_1) entered blocking state
[  411.182864][  T378] bridge0: port 2(bridge_slave_1) entered forwarding state
[  411.191898][  T378] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  411.199874][  T378] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  411.208213][ T3683] RSP: 002b:00007fd8bb99f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  411.216717][ T3683] RAX: ffffffffffffffda RBX: 00007fd8bceff058 RCX: 00007fd8bcd46ff9
[  411.227917][ T3683] RDX: 0000000000000022 RSI: 0000000020000440 RDI: 0000000000000005
[  411.236088][ T3683] RBP: 00007fd8bcdb9296 R08: 0000000000000000 R09: 0000000000000000
[  411.244288][ T3683] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  411.252296][ T3683] R13: 0000000000000000 R14: 00007fd8bceff058 R15: 00007ffd7706fd18
[  411.262684][  T278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  411.264814][ T3683] ---[ end trace 1a28b7a57c460289 ]---
[  411.272763][  T278] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  411.284291][  T278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  411.293421][  T278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  411.310988][  T278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  411.317999][ T3728] EXT4-fs (loop0): couldn't mount as ext2 due to feature incompatibilities
[  411.332735][  T278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  411.341921][ T3692] device veth0_vlan entered promiscuous mode
[  411.355754][ T3692] device veth1_macvtap entered promiscuous mode
[  411.400073][  T278] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  411.407523][  T278] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  411.415179][  T278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  411.424803][  T278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  411.433944][  T278] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  411.442398][  T278] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  411.451143][  T278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  411.459943][  T278] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  411.468507][  T278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  411.488604][    T9] device bridge_slave_1 left promiscuous mode
[  411.494572][    T9] bridge0: port 2(bridge_slave_1) entered disabled state
[  411.522658][    T9] device bridge_slave_0 left promiscuous mode
[  411.544385][ T3739] EXT4-fs (loop4): couldn't mount as ext2 due to feature incompatibilities
[  411.618115][    T9] bridge0: port 1(bridge_slave_0) entered disabled state
[  411.745509][    T9] device veth1_macvtap left promiscuous mode
[  411.758081][    T9] device veth0_vlan left promiscuous mode
[  412.680443][ T3750] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue
[  412.707910][ T1418] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[  412.719355][ T3736] F2FS-fs (loop1): Invalid Fs Meta Ino: node(1) meta(2) root(0)
[  412.748176][ T3736] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  412.762472][ T3736] F2FS-fs (loop1): invalid crc value
[  412.796425][ T3736] F2FS-fs (loop1): Found nat_bits in checkpoint
[  412.835056][ T3736] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  412.842406][ T3736] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  413.298723][ T3692] F2FS-fs (loop1): access invalid blkaddr:2048
[  413.305030][ T3692] CPU: 1 PID: 3692 Comm: syz-executor Tainted: G        W         5.10.225-syzkaller-00513-g8d23314f588a #0
[  413.316378][ T3692] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
[  413.326264][ T3692] Call Trace:
[  413.327845][ T1418] usb 4-1: Using ep0 maxpacket: 16
[  413.329396][ T3692]  dump_stack_lvl+0x1e2/0x24b
[  413.329415][ T3692]  ? f2fs_get_next_page_offset+0x750/0x750
[  413.338070][ T3483] usb 3-1: new high-speed USB device number 18 using dummy_hcd
[  413.338865][ T3692]  ? bfq_pos_tree_add_move+0x43b/0x43b
[  413.338881][ T3692]  dump_stack+0x15/0x17
[  413.361168][ T3692]  f2fs_is_valid_blkaddr+0xc87/0x1370
[  413.366371][ T3692]  f2fs_map_blocks+0x174c/0x3e50
[  413.371149][ T3692]  ? f2fs_do_map_lock+0x280/0x280
[  413.376091][ T3692]  ? bio_add_page+0x2cd/0x460
[  413.380620][ T3692]  ? xa_load+0x488/0x4a0
[  413.384682][ T3692]  f2fs_mpage_readpages+0xef9/0x24a0
[  413.389822][ T3692]  ? f2fs_verify_bio+0x440/0x440
[  413.394580][ T3692]  ? __this_cpu_preempt_check+0x13/0x20
[  413.399959][ T3692]  ? __mod_memcg_lruvec_state+0x131/0x310
[  413.405512][ T3692]  ? xas_nomem+0x19a/0x1d0
[  413.409769][ T3692]  ? __kasan_check_read+0x11/0x20
[  413.414625][ T3692]  f2fs_readahead+0xfd/0x250
[  413.419054][ T3692]  ? blk_start_plug+0x5a/0x170
[  413.423663][ T3692]  read_pages+0x17e/0xbf0
[  413.427907][ T3692]  ? page_cache_ra_unbounded+0x890/0x890
[  413.433379][ T3692]  ? add_to_page_cache_lru+0x221/0x2c0
[  413.438674][ T3692]  ? add_to_page_cache_locked+0x40/0x40
[  413.444048][ T3692]  ? xa_load+0x488/0x4a0
[  413.447936][ T1418] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  413.448128][ T3692]  page_cache_ra_unbounded+0x6be/0x890
[  413.464107][ T3692]  ? read_cache_pages_invalidate_pages+0x1c0/0x1c0
[  413.467874][ T1418] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0
[  413.470430][ T3692]  ? __kasan_check_read+0x11/0x20
[  413.470457][ T3692]  ? rotate_reclaimable_page+0x530/0x530
[  413.490312][ T3692]  ? __mod_memcg_lruvec_state+0x131/0x310
[  413.495869][ T3692]  ondemand_readahead+0x863/0xc60
[  413.497892][ T1418] usb 4-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  413.500730][ T3692]  page_cache_sync_ra+0x26c/0x2c0
[  413.518182][ T3692]  f2fs_readdir+0x4e7/0xb70
[  413.522510][ T3692]  ? f2fs_fill_dentries+0xe10/0xe10
[  413.523740][ T1418] usb 4-1: config 0 interface 0 has no altsetting 0
[  413.527554][ T3692]  ? security_file_permission+0x86/0xb0
[  413.539360][ T3692]  iterate_dir+0x265/0x580
[  413.543600][ T3692]  ? f2fs_fill_dentries+0xe10/0xe10
[  413.544464][ T1418] usb 4-1: New USB device found, idVendor=045e, idProduct=05da, bcdDevice= 0.00
[  413.548636][ T3692]  __se_sys_getdents64+0x1c1/0x460
[  413.548647][ T3692]  ? __x64_sys_getdents64+0x90/0x90
[  413.548654][ T3692]  ? filldir+0x680/0x680
[  413.548665][ T3692]  ? debug_smp_processor_id+0x17/0x20
[  413.548684][ T3692]  ? fpregs_assert_state_consistent+0xb6/0xe0
[  413.567868][ T1418] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  413.571560][ T3692]  ? irqentry_exit_to_user_mode+0x41/0x80
[  413.589107][ T1418] usb 4-1: config 0 descriptor??
[  413.590475][ T3692]  __x64_sys_getdents64+0x7b/0x90
[  413.605664][ T3692]  do_syscall_64+0x34/0x70
[  413.608878][ T3483] usb 3-1: device descriptor read/64, error -71
[  413.610092][ T3692]  entry_SYSCALL_64_after_hwframe+0x61/0xcb
[  413.621886][ T3692] RIP: 0033:0x7fad46766193
[  413.626136][ T3692] Code: c1 66 0f 1f 44 00 00 48 83 c4 08 48 89 ef 5b 5d e9 42 43 f8 ff 66 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 a8 ff ff ff f7 d8
[  413.645579][ T3692] RSP: 002b:00007ffe0e5a7b28 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9
[  413.653823][ T3692] RAX: ffffffffffffffda RBX: 000055555e26d4e0 RCX: 00007fad46766193
[  413.661631][ T3692] RDX: 0000000000008000 RSI: 000055555e26d4e0 RDI: 0000000000000005
[  413.669451][ T3692] RBP: 000055555e26d4b4 R08: 0000000000028b61 R09: 0000000000000000
[  413.677253][ T3692] R10: 00007fad468c1ca0 R11: 0000000000000293 R12: ffffffffffffffa8
[  413.685065][ T3692] R13: 0000000000000010 R14: 000055555e26d4b0 R15: 00007ffe0e5a9dd0
[  413.692928][   T24] kauditd_printk_skb: 19 callbacks suppressed
[  413.692938][   T24] audit: type=1400 audit(1727653511.810:1068): avc:  denied  { map } for  pid=3766 comm="syz.0.678" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=154 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[  413.723092][ T3692] attempt to access beyond end of device
[  413.723092][ T3692] loop1: rw=524288, want=45072, limit=40427
[  413.734877][ T3692] attempt to access beyond end of device
[  413.734877][ T3692] loop1: rw=0, want=45072, limit=40427
[  413.749357][   T24] audit: type=1400 audit(1727653511.810:1069): avc:  denied  { execute } for  pid=3766 comm="syz.0.678" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=154 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[  413.782519][  T319] attempt to access beyond end of device
[  413.782519][  T319] loop1: rw=2049, want=40984, limit=40427
[  413.850096][ T3767] netlink: 8 bytes leftover after parsing attributes in process `syz.0.678'.
[  413.859944][ T3767] binder: 3766:3767 ioctl 4018620d 0 returned -22
[  413.969321][ T3777] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue
[  413.978152][ T3777] ext4 filesystem being mounted at /20/bus supports timestamps until 2038 (0x7fffffff)
[  413.995472][   T24] audit: type=1400 audit(1727653512.170:1070): avc:  denied  { ioctl } for  pid=3776 comm="syz.0.681" path="/20/bus/file0/file0" dev="loop0" ino=13 ioctlcmd=0x6685 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  414.008760][ T3781] bridge0: port 1(bridge_slave_0) entered blocking state
[  414.027079][ T3781] bridge0: port 1(bridge_slave_0) entered disabled state
[  414.034356][ T3777] fs-verity: sha512 using implementation "sha512-avx2"
[  414.034362][ T3781] device bridge_slave_0 entered promiscuous mode
[  414.035030][ T3781] bridge0: port 2(bridge_slave_1) entered blocking state
[  414.041395][ T3483] usb 3-1: device descriptor read/64, error -71
[  414.047220][ T3781] bridge0: port 2(bridge_slave_1) entered disabled state
[  414.062102][ T1418] hid-generic 0003:045E:05DA.000B: ignoring exceeding usage max
[  414.067669][ T3781] device bridge_slave_1 entered promiscuous mode
[  414.091993][ T1418] hid-generic 0003:045E:05DA.000B: hidraw0: USB HID v0.00 Device [HID 045e:05da] on usb-dummy_hcd.3-1/input0
[  414.121660][ T3781] bridge0: port 2(bridge_slave_1) entered blocking state
[  414.128685][ T3781] bridge0: port 2(bridge_slave_1) entered forwarding state
[  414.135782][ T3781] bridge0: port 1(bridge_slave_0) entered blocking state
[  414.142608][ T3781] bridge0: port 1(bridge_slave_0) entered forwarding state
[  414.166916][  T378] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  414.174782][  T378] bridge0: port 1(bridge_slave_0) entered disabled state
[  414.182303][  T378] bridge0: port 2(bridge_slave_1) entered disabled state
[  414.195789][  T378] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  414.201372][ T3791] EXT4-fs (loop4): couldn't mount as ext2 due to feature incompatibilities
[  414.204086][  T378] bridge0: port 1(bridge_slave_0) entered blocking state
[  414.218891][  T378] bridge0: port 1(bridge_slave_0) entered forwarding state
[  414.227047][  T378] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  414.235291][  T378] bridge0: port 2(bridge_slave_1) entered blocking state
[  414.242143][  T378] bridge0: port 2(bridge_slave_1) entered forwarding state
[  414.253927][  T378] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  414.268290][  T378] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  414.281599][  T378] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  414.292907][ T3781] device veth0_vlan entered promiscuous mode
[  414.299775][  T378] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  414.302349][ T3726] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d)
[  414.321313][  T378] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  414.329211][  T378] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  414.358184][ T3483] usb 3-1: new high-speed USB device number 19 using dummy_hcd
[  414.376073][  T378] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  414.385692][ T3781] device veth1_macvtap entered promiscuous mode
[  414.422276][  T378] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  414.430947][  T378] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  414.442011][  T319] device bridge_slave_1 left promiscuous mode
[  414.450398][ T3795] attempt to access beyond end of device
[  414.450398][ T3795] loop1: rw=0, want=241, limit=128
[  414.460409][  T319] bridge0: port 2(bridge_slave_1) entered disabled state
[  414.694704][  T319] device bridge_slave_0 left promiscuous mode
[  414.700840][  T319] bridge0: port 1(bridge_slave_0) entered disabled state
[  414.709561][  T378] attempt to access beyond end of device
[  414.709561][  T378] loop1: rw=1, want=1041, limit=128
[  414.721284][  T319] device veth1_macvtap left promiscuous mode
[  414.727691][  T319] device veth0_vlan left promiscuous mode
[  414.793479][   T53] usb 4-1: USB disconnect, device number 16
[  414.837883][ T3483] usb 3-1: device descriptor read/64, error -71
[  414.973546][ T3809] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #15: comm syz.1.687: casefold flag without casefold feature
[  414.986149][ T3809] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: inode #12: comm syz.1.687: missing EA_INODE flag
[  414.998266][ T3809] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.687: error while reading EA inode 12 err=-117
[  415.012145][ T3809] EXT4-fs (loop1): 1 orphan inode deleted
[  415.017692][ T3809] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue
[  415.183294][   T24] audit: type=1400 audit(1727653513.360:1071): avc:  denied  { read } for  pid=3808 comm="syz.1.687" name="loop-control" dev="devtmpfs" ino=110 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[  415.218039][   T24] audit: type=1400 audit(1727653513.360:1072): avc:  denied  { open } for  pid=3808 comm="syz.1.687" path="/dev/loop-control" dev="devtmpfs" ino=110 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[  416.022871][ T3818] F2FS-fs (loop4): invalid crc value
[  416.112245][ T3818] F2FS-fs (loop4): Found nat_bits in checkpoint
[  416.149486][ T3818] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4
[  416.994695][ T3847] 9pnet: Insufficient options for proto=fd
[  417.068448][ T3850] FAT-fs (loop0): Unrecognized mount option "³8|'ÒœØi" or missing value
[  417.169082][ T3853] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities
[  417.937266][ T3855] netlink: 16 bytes leftover after parsing attributes in process `syz.0.695'.
[  417.957654][ T3486] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  418.145529][   T24] audit: type=1326 audit(1727653516.310:1073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3861 comm="syz.0.698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f882ea70ff9 code=0x7ffc0000
[  418.177896][   T24] audit: type=1400 audit(1727653516.350:1074): avc:  denied  { write } for  pid=3860 comm="syz.4.697" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  418.199637][   T24] audit: type=1400 audit(1727653516.350:1075): avc:  denied  { ioctl } for  pid=3860 comm="syz.4.697" path="socket:[29790]" dev="sockfs" ino=29790 ioctlcmd=0x941f scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  418.250195][ T3865] EXT4-fs (loop0): couldn't mount as ext2 due to feature incompatibilities
[  418.380057][ T3873] EXT4-fs (loop4): Test dummy encryption mode enabled
[  418.387478][ T3873] EXT4-fs error (device loop4): ext4_find_inline_data_nolock:163: inode #12: comm syz.4.700: inline data xattr refers to an external xattr inode
[  418.402282][ T3873] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.700: couldn't read orphan inode 12 (err -117)
[  418.414072][ T3873] EXT4-fs (loop4): mounted filesystem without journal. Opts: max_dir_size_kb=0x00000000000089cd,user_xattr,grpjquota=,auto_da_alloc=0x0000000000000081,prjquota,usrjquota=,usrjquota=,min_batch_time=0x000000000000409e,test_dummy_encryption,,errors=continue
[  418.463687][ T3871] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  418.481605][ T3871] EXT4-fs (loop2): 1 truncate cleaned up
[  418.487197][ T3871] EXT4-fs (loop2): mounted filesystem without journal. Opts: data=journal,jqfmt=vfsv0,errors=continue,nodelalloc,init_itable=0x0000000000000004,acl,,errors=continue
[  418.527490][ T3486] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  418.538462][ T3486] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  418.549107][ T3486] usb 2-1: New USB device found, idVendor=0419, idProduct=0001, bcdDevice= 0.00
[  418.558242][ T3486] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  418.566841][ T3486] usb 2-1: config 0 descriptor??
[  419.163694][ T3881] syz.1.694[3881] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  419.164577][   T24] audit: type=1326 audit(1727653517.340:1076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3844 comm="syz.1.694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae8d445ff9 code=0x7ffc0000
[  419.205764][   T24] audit: type=1326 audit(1727653517.380:1077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3844 comm="syz.1.694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae8d445ff9 code=0x7ffc0000
[  419.240572][   T24] audit: type=1326 audit(1727653517.380:1078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3844 comm="syz.1.694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fae8d445ff9 code=0x7ffc0000
[  419.263799][   T24] audit: type=1326 audit(1727653517.380:1079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3844 comm="syz.1.694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae8d445ff9 code=0x7ffc0000
[  419.289996][   T24] audit: type=1326 audit(1727653517.380:1080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3844 comm="syz.1.694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae8d445ff9 code=0x7ffc0000
[  419.313667][   T24] audit: type=1326 audit(1727653517.380:1081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3844 comm="syz.1.694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fae8d445ff9 code=0x7ffc0000
[  419.337397][   T24] audit: type=1326 audit(1727653517.380:1082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3844 comm="syz.1.694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae8d445ff9 code=0x7ffc0000
[  419.361034][   T24] audit: type=1326 audit(1727653517.380:1083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3844 comm="syz.1.694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae8d445ff9 code=0x7ffc0000
[  419.384401][   T24] audit: type=1326 audit(1727653517.380:1084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3844 comm="syz.1.694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=90 compat=0 ip=0x7fae8d445ff9 code=0x7ffc0000
[  419.408098][   T24] audit: type=1326 audit(1727653517.380:1085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3844 comm="syz.1.694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae8d445ff9 code=0x7ffc0000
[  419.677895][ T3486] usbhid 2-1:0.0: can't add hid device: -71
[  419.683737][ T3486] usbhid: probe of 2-1:0.0 failed with error -71
[  419.729609][ T3486] usb 2-1: USB disconnect, device number 11
[  419.732330][ T3887] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  419.758188][ T3887] EXT4-fs (loop4): 1 truncate cleaned up
[  419.781516][ T3887] EXT4-fs (loop4): mounted filesystem without journal. Opts: data=journal,jqfmt=vfsv0,errors=continue,nodelalloc,init_itable=0x0000000000000004,acl,,errors=continue
[  420.264883][ T3891] F2FS-fs (loop0): Invalid SB checksum offset: 0
[  420.271098][ T3891] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock
[  420.289158][ T3891] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437)
[  420.316295][ T3891] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0
[  420.323243][ T3891] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  420.437923][ T3486] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  420.475401][ T3885] F2FS-fs (loop2): invalid crc value
[  420.482823][ T3885] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (15359802341028777995, 275811881701387)
[  420.504879][ T3885] F2FS-fs (loop2): Mounted with checkpoint version = 753bd00b
[  420.697863][ T3486] usb 2-1: Using ep0 maxpacket: 32
[  420.707647][ T3916] attempt to access beyond end of device
[  420.707647][ T3916] loop0: rw=0, want=241, limit=128
[  420.721894][  T278] attempt to access beyond end of device
[  420.721894][  T278] loop0: rw=1, want=1041, limit=128
[  420.817996][  T365] usb 3-1: new high-speed USB device number 20 using dummy_hcd
[  420.819486][ T3919] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  420.838694][ T3919] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a042c118, mo2=0003]
[  420.846591][ T3919] System zones: 0-1, 3-12
[  420.851122][ T3919] EXT4-fs (loop0): mounted filesystem without journal. Opts: delalloc,debug,nojournal_checksum,norecovery,debug_want_extra_isize=0x0000000000000080,dioread_nolock,nodelalloc,nodelalloc,auto_da_alloc=0x0000000000000343,,errors=continue
[  420.878051][  T407] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[  420.887035][ T3228] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2806: Unable to expand inode 11. Delete some EAs or run e2fsck.
[  420.902703][ T3228] EXT4-fs error (device loop0): ext4_empty_dir:3102: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864)
[  420.919227][ T3486] usb 2-1: config 1 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  420.930020][ T3486] usb 2-1: config 1 interface 0 altsetting 8 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  420.948273][ T3228] EXT4-fs error (device loop0): ext4_empty_dir:3102: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864)
[  420.964822][ T3486] usb 2-1: config 1 interface 0 has no altsetting 0
[  420.976388][ T3228] EXT4-fs error (device loop0): ext4_empty_dir:3102: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864)
[  420.998150][ T3228] EXT4-fs error (device loop0): ext4_empty_dir:3102: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864)
[  421.020098][ T3228] EXT4-fs error (device loop0): ext4_empty_dir:3102: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864)
[  421.042123][ T3228] EXT4-fs error (device loop0): ext4_empty_dir:3102: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864)
[  421.063800][ T3228] EXT4-fs error (device loop0): ext4_empty_dir:3102: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864)
[  421.085613][ T3228] EXT4-fs error (device loop0): ext4_empty_dir:3102: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864)
[  421.107324][ T3228] EXT4-fs error (device loop0): ext4_empty_dir:3102: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864)
[  421.128303][  T407] usb 5-1: Using ep0 maxpacket: 32
[  421.130780][ T3228] EXT4-fs error (device loop0): ext4_empty_dir:3102: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864)
[  421.149758][ T3486] usb 2-1: New USB device found, idVendor=056a, idProduct=00ba, bcdDevice= 0.40
[  421.158635][ T3486] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  421.171789][ T3486] usb 2-1: Product: syz
[  421.175758][ T3486] usb 2-1: Manufacturer: syz
[  421.185356][ T3486] usb 2-1: SerialNumber: syz
[  421.238030][  T365] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  421.248932][  T365] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  421.258574][  T407] usb 5-1: config index 0 descriptor too short (expected 29220, got 36)
[  421.266780][  T365] usb 3-1: New USB device found, idVendor=6666, idProduct=8801, bcdDevice= 0.00
[  421.275698][  T407] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  421.284115][  T365] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  421.292056][  T407] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81
[  421.304632][  T365] usb 3-1: config 0 descriptor??
[  421.309589][  T407] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  421.319276][  T407] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  421.328948][  T407] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  421.342136][  T407] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  421.351208][  T407] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  421.364087][  T407] usb 5-1: config 0 descriptor??
[  421.504912][ T3925] bridge0: port 1(bridge_slave_0) entered blocking state
[  421.512683][ T3925] bridge0: port 1(bridge_slave_0) entered disabled state
[  421.519970][ T3925] device bridge_slave_0 entered promiscuous mode
[  421.527127][ T3925] bridge0: port 2(bridge_slave_1) entered blocking state
[  421.534272][ T3925] bridge0: port 2(bridge_slave_1) entered disabled state
[  421.541663][ T3925] device bridge_slave_1 entered promiscuous mode
[  421.588040][ T3925] bridge0: port 2(bridge_slave_1) entered blocking state
[  421.594923][ T3925] bridge0: port 2(bridge_slave_1) entered forwarding state
[  421.602001][ T3925] bridge0: port 1(bridge_slave_0) entered blocking state
[  421.608791][ T3925] bridge0: port 1(bridge_slave_0) entered forwarding state
[  421.616776][  T407] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 17 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  421.628564][  T407] usb 5-1: USB disconnect, device number 17
[  421.635285][  T407] usblp0: removed
[  421.654640][  T278] bridge0: port 1(bridge_slave_0) entered disabled state
[  421.662010][  T278] bridge0: port 2(bridge_slave_1) entered disabled state
[  421.662144][ T3893] udc-core: couldn't find an available UDC or it's busy
[  421.676099][  T278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  421.681190][ T3893] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  421.683921][  T278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  421.711527][  T278] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  421.719620][  T278] bridge0: port 1(bridge_slave_0) entered blocking state
[  421.726447][  T278] bridge0: port 1(bridge_slave_0) entered forwarding state
[  421.733732][  T278] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  421.742588][  T278] bridge0: port 2(bridge_slave_1) entered blocking state
[  421.749460][  T278] bridge0: port 2(bridge_slave_1) entered forwarding state
[  421.757733][  T278] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  421.765602][  T278] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  421.780936][  T278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  421.791652][ T3925] device veth0_vlan entered promiscuous mode
[  421.798144][  T278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  421.820160][ T3925] device veth1_macvtap entered promiscuous mode
[  421.837182][  T278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  421.846246][  T278] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  421.863983][  T278] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  421.877886][ T3486] usbhid 2-1:1.0: can't add hid device: -71
[  421.883698][ T3486] usbhid: probe of 2-1:1.0 failed with error -71
[  421.885214][  T278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  421.902030][ T3486] usb 2-1: USB disconnect, device number 12
[  421.920578][  T278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  422.109318][ T3929] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue
[  422.118683][ T3929] ext4 filesystem being mounted at /73/file0 supports timestamps until 2038 (0x7fffffff)
[  422.760523][ T3952] hub 6-0:1.0: USB hub found
[  422.765947][ T3952] hub 6-0:1.0: 1 port detected
[  422.911900][   T25] usb 5-1: new high-speed USB device number 18 using dummy_hcd
[  422.929276][ T3949] bridge0: port 1(bridge_slave_0) entered blocking state
[  422.936192][ T3949] bridge0: port 1(bridge_slave_0) entered disabled state
[  422.943546][ T3949] device bridge_slave_0 entered promiscuous mode
[  422.953130][ T3949] bridge0: port 2(bridge_slave_1) entered blocking state
[  422.960603][ T3949] bridge0: port 2(bridge_slave_1) entered disabled state
[  422.968080][ T3949] device bridge_slave_1 entered promiscuous mode
[  423.011837][ T3949] bridge0: port 2(bridge_slave_1) entered blocking state
[  423.018843][ T3949] bridge0: port 2(bridge_slave_1) entered forwarding state
[  423.025916][ T3949] bridge0: port 1(bridge_slave_0) entered blocking state
[  423.032757][ T3949] bridge0: port 1(bridge_slave_0) entered forwarding state
[  423.053431][  T278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  423.061164][  T278] bridge0: port 1(bridge_slave_0) entered disabled state
[  423.069635][  T278] bridge0: port 2(bridge_slave_1) entered disabled state
[  423.083418][  T278] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  423.091623][  T278] bridge0: port 1(bridge_slave_0) entered blocking state
[  423.098490][  T278] bridge0: port 1(bridge_slave_0) entered forwarding state
[  423.105975][  T278] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  423.114322][  T278] bridge0: port 2(bridge_slave_1) entered blocking state
[  423.121191][  T278] bridge0: port 2(bridge_slave_1) entered forwarding state
[  423.154447][  T278] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  423.171053][  T278] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  423.186699][  T278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  423.195832][  T278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  423.204705][  T278] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  423.213529][  T278] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  423.218820][   T25] usb 5-1: device descriptor read/64, error -71
[  423.222517][ T3949] device veth0_vlan entered promiscuous mode
[  423.235370][  T319] device bridge_slave_1 left promiscuous mode
[  423.241513][  T319] bridge0: port 2(bridge_slave_1) entered disabled state
[  423.249392][  T319] device bridge_slave_0 left promiscuous mode
[  423.255366][  T319] bridge0: port 1(bridge_slave_0) entered disabled state
[  423.263577][  T319] device veth1_macvtap left promiscuous mode
[  423.270325][  T319] device veth0_vlan left promiscuous mode
[  423.298696][ T3962] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities
[  423.376040][ T3949] device veth1_macvtap entered promiscuous mode
[  423.399650][  T278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  423.426045][  T278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  423.497123][  T365] usbhid 3-1:0.0: can't add hid device: -71
[  423.506271][  T365] usbhid: probe of 3-1:0.0 failed with error -71
[  423.560706][  T278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  423.607453][  T365] usb 3-1: USB disconnect, device number 20
[  423.674994][ T3968] attempt to access beyond end of device
[  423.674994][ T3968] loop1: rw=0, want=241, limit=128
[  423.689456][  T378] attempt to access beyond end of device
[  423.689456][  T378] loop1: rw=1, want=1041, limit=128
[  423.738276][ T3972] FAT-fs (loop0): Unrecognized mount option "ÿÿÿÿÿÿÿ" or missing value
[  423.870462][ T3981] EXT4-fs (loop2): Test dummy encryption mode enabled
[  423.877487][ T3981] EXT4-fs (loop2): Test dummy encryption mode enabled
[  423.884492][ T3976] EXT4-fs (loop4): couldn't mount as ext2 due to feature incompatibilities
[  423.897687][ T3981] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  423.911158][ T3981] EXT4-fs (loop2): 1 truncate cleaned up
[  423.916784][ T3981] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption,test_dummy_encryption,noauto_da_alloc,minixdf,errors=remount-ro,quota,
[  423.986974][ T3981] EXT4-fs (loop2): re-mounted. Opts: usrjquota=
[  424.058677][ T3978] F2FS-fs (loop1): invalid crc value
[  424.064956][ T3978] F2FS-fs (loop1): Found nat_bits in checkpoint
[  424.086578][ T3987] attempt to access beyond end of device
[  424.086578][ T3987] loop0: rw=0, want=241, limit=128
[  424.094449][ T3978] F2FS-fs (loop1): Start checkpoint disabled!
[  424.334259][ T3978] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6
[  424.412493][  T430] usb 3-1: new high-speed USB device number 21 using dummy_hcd
[  424.424601][    T9] attempt to access beyond end of device
[  424.424601][    T9] loop0: rw=1, want=1041, limit=128
[  424.509357][ T3996] EXT4-fs (loop3): Unrecognized mount option "grpjqu" or missing value
[  424.518515][   T24] kauditd_printk_skb: 222 callbacks suppressed
[  424.518526][   T24] audit: type=1400 audit(1727653522.700:1308): avc:  denied  { create } for  pid=3977 comm="syz.1.722" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1
[  424.518914][ T3998] 9pnet: Insufficient options for proto=fd
[  424.616008][ T4001] syz.0.726[4001] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  424.616061][ T4001] syz.0.726[4001] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  424.639823][  T319] device bridge_slave_1 left promiscuous mode
[  424.659244][  T319] bridge0: port 2(bridge_slave_1) entered disabled state
[  424.667167][  T319] device bridge_slave_0 left promiscuous mode
[  424.673582][  T319] bridge0: port 1(bridge_slave_0) entered disabled state
[  424.678650][   T24] audit: type=1400 audit(1727653522.860:1309): avc:  denied  { create } for  pid=3995 comm="syz.3.725" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  424.702825][  T319] device veth1_macvtap left promiscuous mode
[  424.714061][ T4004] netlink: 24 bytes leftover after parsing attributes in process `syz.3.725'.
[  424.723775][  T319] device veth0_vlan left promiscuous mode
[  424.742025][   T24] audit: type=1400 audit(1727653522.890:1310): avc:  denied  { create } for  pid=3995 comm="syz.3.725" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  424.762405][   T24] audit: type=1400 audit(1727653522.890:1311): avc:  denied  { write } for  pid=3995 comm="syz.3.725" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  424.776282][  T378] attempt to access beyond end of device
[  424.776282][  T378] loop1: rw=2049, want=40976, limit=40427
[  424.817911][  T430] usb 3-1: config 0 has an invalid interface number: 199 but max is 1
[  424.825927][  T430] usb 3-1: config 0 has no interface number 1
[  424.848086][  T430] usb 3-1: config 0 interface 199 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0
[  424.857753][  T430] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping
[  424.901997][   T24] audit: type=1400 audit(1727653523.080:1312): avc:  denied  { mount } for  pid=4006 comm="syz.1.728" name="/" dev="ramfs" ino=31257 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1
[  424.917205][ T4007] overlayfs: missing 'lowerdir'
[  424.977970][  T430] usb 3-1: New USB device found, idVendor=0002, idProduct=0000, bcdDevice= 0.00
[  424.993801][ T4009] EXT4-fs (loop1): Test dummy encryption mode enabled
[  425.000836][  T430] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  425.006240][ T4009] EXT4-fs error (device loop1): ext4_fill_super:4955: inode #2: comm syz.1.728: casefold flag without casefold feature
[  425.008672][  T430] usb 3-1: SerialNumber: syz
[  425.021602][ T4009] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended
[  425.029055][  T430] usb 3-1: config 0 descriptor??
[  425.037206][ T4009] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsv0,test_dummy_encryption,,errors=continue
[  425.321981][   T24] audit: type=1400 audit(1727653523.500:1313): avc:  denied  { unmount } for  pid=3925 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  425.327913][  T430] uvcvideo: Found UVC 0.00 device <unnamed> (0002:0000)
[  425.352803][  T430] uvcvideo: No valid video chain found.
[  425.361558][  T430] usb 3-1: USB disconnect, device number 21
[  425.551799][ T4018] F2FS-fs (loop0): invalid crc value
[  425.558460][ T4018] F2FS-fs (loop0): Found nat_bits in checkpoint
[  425.580380][ T4018] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4
[  425.708382][  T319] device bridge_slave_1 left promiscuous mode
[  425.714407][  T319] bridge0: port 2(bridge_slave_1) entered disabled state
[  425.722064][  T319] device bridge_slave_0 left promiscuous mode
[  425.728246][  T319] bridge0: port 1(bridge_slave_0) entered disabled state
[  425.736487][  T319] device veth0_vlan left promiscuous mode
[  425.802415][ T3417] EXT4-fs error (device loop2): htree_dirblock_to_tree:1092: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=16, rec_len=0, size=1024 fake=0
[  425.827199][ T3417] EXT4-fs (loop2): Remounting filesystem read-only
[  426.108508][ T3483] usb 4-1: new high-speed USB device number 17 using dummy_hcd
[  426.149167][   T24] audit: type=1400 audit(1727653524.330:1314): avc:  denied  { unmount } for  pid=3781 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1
[  426.218080][ T4030] attempt to access beyond end of device
[  426.218080][ T4030] loop1: rw=0, want=241, limit=128
[  426.234303][  T319] attempt to access beyond end of device
[  426.234303][  T319] loop1: rw=1, want=1041, limit=128
[  426.347854][ T3483] usb 4-1: Using ep0 maxpacket: 16
[  426.467892][ T3483] usb 4-1: config 0 has an invalid interface number: 2 but max is 0
[  426.475703][ T3483] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  426.485857][ T3483] usb 4-1: config 0 has no interface number 0
[  426.491887][ T3483] usb 4-1: config 0 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  427.134525][   T24] audit: type=1400 audit(1727653525.310:1315): avc:  denied  { read } for  pid=4036 comm="syz.0.734" name="usbmon7" dev="devtmpfs" ino=155 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  427.135530][ T3483] usb 4-1: New USB device found, idVendor=0582, idProduct=0005, bcdDevice= 0.88
[  427.157872][   T24] audit: type=1400 audit(1727653525.310:1316): avc:  denied  { open } for  pid=4036 comm="syz.0.734" path="/dev/usbmon7" dev="devtmpfs" ino=155 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  427.166565][ T3483] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3
[  427.197926][ T3483] usb 4-1: Product: syz
[  427.201824][ T3483] usb 4-1: SerialNumber: syz
[  427.207462][ T3483] usb 4-1: config 0 descriptor??
[  427.248432][ T3483] snd-usb-audio: probe of 4-1:0.2 failed with error -2
[  427.306235][   T24] audit: type=1400 audit(1727653525.480:1317): avc:  denied  { create } for  pid=4049 comm="syz.2.737" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  427.450033][ T4017] udc-core: couldn't find an available UDC or it's busy
[  427.456798][ T4017] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  427.466361][  T365] usb 4-1: USB disconnect, device number 17
[  428.199385][ T4061] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue
[  428.405434][ T4061] ext4 filesystem being mounted at /6/bus supports timestamps until 2038 (0x7fffffff)
[  429.108562][ T4081] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities
[  429.972187][  T430] usb 3-1: new full-speed USB device number 22 using dummy_hcd
[  430.021966][ T4086] device syzkaller0 entered promiscuous mode
[  430.042143][   T24] kauditd_printk_skb: 11 callbacks suppressed
[  430.042163][   T24] audit: type=1400 audit(1727653528.220:1329): avc:  denied  { create } for  pid=4078 comm="syz.1.742" dev="anon_inodefs" ino=31410 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  430.104330][   T24] audit: type=1400 audit(1727653528.280:1330): avc:  denied  { ioctl } for  pid=4078 comm="syz.1.742" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=31410 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  430.377909][  T430] usb 3-1: not running at top speed; connect to a high speed hub
[  430.457943][  T430] usb 3-1: config 15 has an invalid interface number: 155 but max is 0
[  430.465993][  T430] usb 3-1: config 15 has no interface number 0
[  430.472137][  T430] usb 3-1: config 15 interface 155 has no altsetting 0
[  430.637949][  T430] usb 3-1: New USB device found, idVendor=0403, idProduct=fd49, bcdDevice=31.8b
[  430.646784][  T430] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  430.654623][  T430] usb 3-1: Product: syz
[  430.658605][  T430] usb 3-1: Manufacturer: syz
[  430.663005][  T430] usb 3-1: SerialNumber: syz
[  430.908990][   T24] audit: type=1400 audit(1727653529.090:1331): avc:  denied  { block_suspend } for  pid=4074 comm="syz.2.743" capability=36  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  430.930256][   T24] audit: type=1400 audit(1727653529.090:1332): avc:  denied  { sys_module } for  pid=4074 comm="syz.2.743" capability=16  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[  430.951030][   T24] audit: type=1400 audit(1727653529.090:1333): avc:  denied  { module_load } for  pid=4074 comm="syz.2.743" path="/sys/power/wakeup_count" dev="sysfs" ino=1423 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1
[  430.988344][  T430] ftdi_sio 3-1:15.155: FTDI USB Serial Device converter detected
[  430.996302][  T430] usb 3-1: Detected FT-X
[  431.017952][  T430] ftdi_sio ttyUSB0: Unable to read latency timer: -71
[  431.046699][  T430] ftdi_sio ttyUSB0: Unable to write latency timer: -71
[  431.067922][  T430] ftdi_sio 3-1:15.155: GPIO initialisation failed: -71
[  431.074944][  T430] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  431.083715][  T430] usb 3-1: USB disconnect, device number 22
[  431.090141][  T430] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  431.099446][  T430] ftdi_sio 3-1:15.155: device disconnected
[  431.264529][   T24] audit: type=1400 audit(1727653529.440:1334): avc:  denied  { read } for  pid=4100 comm="syz.0.747" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  432.730005][ T4127] FAT-fs (loop3): Directory bread(block 64) failed
[  432.762381][ T4127] FAT-fs (loop3): Directory bread(block 65) failed
[  432.776952][ T4127] FAT-fs (loop3): Directory bread(block 66) failed
[  432.783553][ T4127] FAT-fs (loop3): Directory bread(block 67) failed
[  432.786367][ T4121] attempt to access beyond end of device
[  432.786367][ T4121] loop2: rw=0, want=241, limit=128
[  432.790526][ T4127] FAT-fs (loop3): Directory bread(block 68) failed
[  432.806677][ T4127] FAT-fs (loop3): Directory bread(block 69) failed
[  432.813029][ T4127] FAT-fs (loop3): Directory bread(block 70) failed
[  432.813833][    T9] attempt to access beyond end of device
[  432.813833][    T9] loop2: rw=1, want=1041, limit=128
[  432.819357][ T4127] FAT-fs (loop3): Directory bread(block 71) failed
[  432.837478][ T4127] FAT-fs (loop3): Directory bread(block 72) failed
[  432.844087][ T4127] FAT-fs (loop3): Directory bread(block 73) failed
[  432.888734][   T24] audit: type=1400 audit(1727653531.070:1335): avc:  denied  { ioctl } for  pid=4125 comm="syz.3.753" path="socket:[31460]" dev="sockfs" ino=31460 ioctlcmd=0x52d2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  433.883470][ T4142] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c09c, mo2=0002]
[  433.891587][ T4142] EXT4-fs (loop1): orphan cleanup on readonly fs
[  433.901542][ T4142] EXT4-fs warning (device loop1): ext4_enable_quotas:6467: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix.
[  433.916635][ T4142] EXT4-fs (loop1): Cannot turn on quotas: error -22
[  433.925468][ T4142] EXT4-fs error (device loop1): ext4_ext_check_inode:500: inode #13: comm syz.1.755: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0)
[  433.944884][ T4142] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.755: couldn't read orphan inode 13 (err -117)
[  433.976604][ T4142] EXT4-fs (loop1): mounted filesystem without journal. Opts: minixdf,noblock_validity,min_batch_time=0x000000000000082f,grpquota,debug,debug,grpid,,errors=continue
[  435.215677][   T24] audit: type=1400 audit(1727653533.390:1336): avc:  denied  { create } for  pid=4154 comm="syz.3.760" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  435.338646][   T24] audit: type=1400 audit(1727653533.520:1337): avc:  denied  { setopt } for  pid=4154 comm="syz.3.760" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  435.400800][ T4153] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x210)
[  435.408645][ T4153] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  435.418177][ T4153] F2FS-fs (loop2): invalid crc_offset: 12
[  435.423769][ T4153] F2FS-fs (loop2): Failed to get valid F2FS checkpoint
[  435.530456][   T24] audit: type=1400 audit(1727653533.710:1338): avc:  denied  { listen } for  pid=4152 comm="syz.2.759" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  435.557381][   T24] audit: type=1400 audit(1727653533.710:1339): avc:  denied  { write } for  pid=4152 comm="syz.2.759" name="pfkey" dev="proc" ino=4026532634 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1
[  436.781170][   T24] audit: type=1400 audit(1727653534.960:1340): avc:  denied  { write } for  pid=4168 comm="syz.1.762" name="kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  437.035120][ T4174] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue
[  437.043996][ T4174] ext4 filesystem being mounted at /13/mnt supports timestamps until 2038 (0x7fffffff)
[  437.181103][ T3479] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  437.597929][ T3479] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  437.608832][ T3479] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  437.619188][ T3479] usb 2-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00
[  437.628075][ T3479] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  437.636860][ T3479] usb 2-1: config 0 descriptor??
[  438.177964][ T3479] usbhid 2-1:0.0: can't add hid device: -71
[  438.183769][ T3479] usbhid: probe of 2-1:0.0 failed with error -71
[  438.190579][ T3479] usb 2-1: USB disconnect, device number 13
[  438.648299][    T9] Bluetooth: hci0: Frame reassembly failed (-84)
[  438.654707][    T9] Bluetooth: hci0: Frame reassembly failed (-84)
[  438.907886][ T2356] usb 3-1: new high-speed USB device number 23 using dummy_hcd
[  439.157856][ T2356] usb 3-1: Using ep0 maxpacket: 16
[  439.307959][ T2356] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  439.318738][ T2356] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  439.328195][ T2356] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  439.340804][ T2356] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  439.349810][ T2356] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  439.358312][ T2356] usb 3-1: config 0 descriptor??
[  439.839477][ T2356] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0
[  439.846755][ T2356] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0
[  439.853777][ T2356] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0
[  439.860785][ T2356] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0
[  439.867839][ T2356] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0
[  439.874831][ T2356] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0
[  439.882019][ T2356] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0
[  439.889042][ T2356] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0
[  439.896007][ T2356] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0
[  439.903087][ T2356] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0
[  439.913037][ T2356] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.000C/input/input7
[  439.924799][   T24] audit: type=1400 audit(1727653538.100:1341): avc:  denied  { read } for  pid=78 comm="acpid" name="event3" dev="devtmpfs" ino=884 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  439.946994][   T24] audit: type=1400 audit(1727653538.100:1342): avc:  denied  { open } for  pid=78 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=884 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  439.947541][ T2356] microsoft 0003:045E:07DA.000C: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0
[  439.988186][   T24] audit: type=1400 audit(1727653538.170:1343): avc:  denied  { ioctl } for  pid=78 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=884 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  440.040141][   T24] audit: type=1400 audit(1727653538.220:1344): avc:  denied  { setopt } for  pid=4197 comm="syz.1.768" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  440.141009][ T4199] attempt to access beyond end of device
[  440.141009][ T4199] loop0: rw=0, want=241, limit=128
[  440.154941][    T9] attempt to access beyond end of device
[  440.154941][    T9] loop0: rw=1, want=1041, limit=128
[  440.707879][   T53] Bluetooth: hci0: command 0x1003 tx timeout
[  440.713912][   T40] Bluetooth: hci0: sending frame failed (-49)
[  441.448370][   T53] usb 3-1: USB disconnect, device number 23
[  442.042716][   T24] audit: type=1400 audit(1727653540.200:1345): avc:  denied  { create } for  pid=4207 comm="syz.2.771" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  442.069684][   T24] audit: type=1400 audit(1727653540.220:1346): avc:  denied  { getopt } for  pid=4207 comm="syz.2.771" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  442.787918][  T430] Bluetooth: hci0: command 0x1001 tx timeout
[  442.794146][   T40] Bluetooth: hci0: sending frame failed (-49)
[  443.842807][ T4220] attempt to access beyond end of device
[  443.842807][ T4220] loop1: rw=0, want=241, limit=128
[  443.863474][    T9] attempt to access beyond end of device
[  443.863474][    T9] loop1: rw=1, want=1041, limit=128
[  444.177927][  T430] usb 3-1: new high-speed USB device number 24 using dummy_hcd
[  444.417937][  T430] usb 3-1: Using ep0 maxpacket: 32
[  444.537983][  T430] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  444.548026][  T430] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 22
[  444.637959][  T430] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  444.646797][  T430] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  444.654638][  T430] usb 3-1: SerialNumber: syz
[  444.867924][  T430] Bluetooth: hci0: command 0x1009 tx timeout
SYZFAIL: mmap of output file failed
want 0x1b2e420000, got 0xffffffffffffffff (errno 13: Permission denied)
SYZFAIL: mmap of output file failed
want 0x1b2e720000, got 0xffffffffffffffff (errno 13: Permission denied)
SYZFAIL: mmap of output file failed
want 0x1b2e820000, got 0xffffffffffffffff (errno 13: Permission denied)
SYZFAIL: mmap of output file failed
want 0x1b2ea20000, got 0xffffffffffffffff (errno 13: Permission denied)
SYZFAIL: mmap of output file failed
want 0x1b2f720000, got 0xffffffffffffffff (errno 13: Permission denied)
SYZFAIL: mmap of output file failed
want 0x1b2ff20000, got 0xffffffffffffffff (errno 13: Permission denied)
SYZFAIL: mmap of output file failed
want 0x1b30a20000, got 0xffffffffffffffff (errno 13: Permission denied)
SYZFAIL: mmap of output file failed
want 0x1b31720000, got 0xffffffffffffffff (errno 13: Permission denied)
SYZFAIL: mmap of output file failed
want 0x1b32420000, got 0xffffffffffffffff (errno 13: Permission denied)
SYZFAIL: mmap of output file failed
want 0x1b33720000, got 0xffffffffffffffff (errno 13: Permission denied)
SYZFAIL: mmap of output file failed
want 0x1b2bf20000, got 0xffffffffffffffff (errno 13: Permission denied)
SYZFAIL: mmap of output file failed
want 0x1b2cf20000, got 0xffffffffffffffff (errno 13: Permission denied)
SYZFAIL: mmap of output file failed
want 0x1b2e420000, got 0xffffffffffffffff (errno 13: Permission denied)
SYZFAIL: mmap of output file failed
want 0x1b2f120000, got 0xffffffffffffffff (errno 13: Permission denied)
SYZFAIL: mmap of output file failed
want 0x1b30220000, got 0xffffffffffffffff (errno 13: Permission denied)
SYZFAIL: mmap of output file failed
want 0x1b31520000, got 0xffffffffffffffff (errno 13: Permission denied)
SYZFAIL: mmap of output file failed
want 0x1b31f20000, got 0xffffffffffffffff (errno 13: Permission denied)
SYZFAIL: mmap of output file failed
want 0x1b32820000, got 0xffffffffffffffff (errno 13: Permission denied)
SYZFAIL: mmap of output file failed
want 0x1b33520000, got 0xffffffffffffffff (errno 13: Permission denied)
SYZFAIL: mmap of output file failed
want 0x1b2bf20000, got 0xffffffffffffffff (errno 13: Permission denied)
SYZFAIL: repeatedly failed to execute the program
proc=4 req=729 state=1 status=67 (errno 9: Bad file descriptor)
[  445.784988][   T24] audit: type=1400 audit(1727653543.960:1347): avc:  denied  { write } for  pid=274 comm="syz-executor" path="pipe:[13759]" dev="pipefs" ino=13759 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1
[  445.918518][ T4231] EXT4-fs (loop1): Test dummy encryption mode enabled
[  445.925575][ T4231] EXT4-fs: failed to create workqueue
[  445.931040][ T4231] EXT4-fs (loop1): mount failed
[  446.073076][  T430] usb 3-1: USB disconnect, device number 24
[  446.828440][    T9] device bridge_slave_1 left promiscuous mode
[  446.834579][    T9] bridge0: port 2(bridge_slave_1) entered disabled state
[  446.841895][    T9] device bridge_slave_0 left promiscuous mode
[  446.847942][    T9] bridge0: port 1(bridge_slave_0) entered disabled state
[  446.855464][    T9] device veth1_macvtap left promiscuous mode
[  446.861332][    T9] device veth0_vlan left promiscuous mode
[  448.268483][    T9] device bridge_slave_1 left promiscuous mode
[  448.274410][    T9] bridge0: port 2(bridge_slave_1) entered disabled state
[  448.281697][    T9] device bridge_slave_0 left promiscuous mode
[  448.287633][    T9] bridge0: port 1(bridge_slave_0) entered disabled state
[  448.295426][    T9] device bridge_slave_1 left promiscuous mode
[  448.301356][    T9] bridge0: port 2(bridge_slave_1) entered disabled state
[  448.308694][    T9] device bridge_slave_0 left promiscuous mode
[  448.314596][    T9] bridge0: port 1(bridge_slave_0) entered disabled state
[  448.322356][    T9] device veth1_macvtap left promiscuous mode
[  448.328246][    T9] device veth0_vlan left promiscuous mode
[  448.333946][    T9] device veth1_macvtap left promiscuous mode
[  448.339870][    T9] device veth0_vlan left promiscuous mode
[  449.908405][    T9] device bridge_slave_1 left promiscuous mode
[  449.914324][    T9] bridge0: port 2(bridge_slave_1) entered disabled state
[  449.921691][    T9] device bridge_slave_0 left promiscuous mode
[  449.927638][    T9] bridge0: port 1(bridge_slave_0) entered disabled state
[  449.935220][    T9] device veth1_macvtap left promiscuous mode
[  449.941073][    T9] device veth0_vlan left promiscuous mode