last executing test programs:

8.502461704s ago: executing program 1 (id=325):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000020000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000000))
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
unshare(0x40021100)

8.144132963s ago: executing program 2 (id=327):
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010000000009040000010300"], 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0)
syz_mount_image$msdos(&(0x7f0000000240), &(0x7f0000000040)='./file0\x00', 0x204400, &(0x7f0000000100)=ANY=[@ANYBLOB="6e6f646f74732c6e6f646f74732c666c7573682c646f74732c666c7573682c636865636b3d72656c617865642c71756965742c6572726f72733d72656d6f756e742d726f2c6e6f646f74732c10"], 0x1, 0x226, &(0x7f0000000300)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
pipe2$9p(&(0x7f0000000240), 0x0)
r3 = dup(0xffffffffffffffff)
ioctl$TCSETAF(r3, 0x5408, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "f9ffffffffffffff"})
openat$procfs(0xffffffffffffff9c, &(0x7f0000001600)='/proc/slabinfo\x00', 0x0, 0x0)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/mem_sleep', 0x102, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x800)

7.912996812s ago: executing program 3 (id=328):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x0, 0x0, 0x0, 0x1}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{}, 0x0, &(0x7f00000005c0)}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
setxattr$trusted_overlay_origin(0x0, &(0x7f0000000340), &(0x7f0000000380), 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10)
openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000087b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000850000000f00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000000c0)='kfree\x00', r6}, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r7, &(0x7f000000e280)={0x2020, 0x0, <r8=>0x0}, 0x2020)
mknod$loop(&(0x7f00000002c0)='./file0/../file0/file0\x00', 0x0, 0x0)
write$FUSE_INIT(r7, &(0x7f0000000380)={0x50, 0x0, r8, {0x7, 0x27}}, 0x50)
syz_fuse_handle_req(r7, &(0x7f00000102c0)="03680f2a20da68ab7a58c28b635d19c32b6efabb6ae3b5eee5a74d8943c613539e166c8baef50500824343a2f05093a5c21f746caefe9f9bccd83cca0fc28da20e2706308c61398dfce5f54ea9f266791ba29a4c7da158637def8b816aa296815ff13c06d632df45feaec1fd272ec1b510eaf58fe6b26cc36df3ecc0f5b1f258a190304e2519dd39ba9f5bc1788926ced5202e3b1e3afa16ae0b5d66dc05b36d3a00f72e5f318f8bdfc7eddc94238c50031d0657a22445ad0b3b90a86b086eed837a00bf0a3888bf61b4db57d6d8d6b286bbb13ba3b246def60ac34241eb843f89fe77d7e3e52573e90d791f21d4a8dfcc24ba95db60e2135634c02bd4b14535285df4fbe381ec036d876c4c8057c79371fa9717414590890e182a7b9e0ab927812083acf0d04e04c20c0555c8ceedc5bcf9b0e814be6eca98ce7b2f9f17d098bea541b75a1617c09fa99902ad746811f89a1fc5e6a80d77528247d6c104395715d2c9f9102f070a295f20c4307b9e848d3928b50985bfa2486893139761925b8fab96d26291243db23c4fd4d96864f4db860731a4e3e10b52d8d0487f5a8536cb4507dbdc111570ad0321b918edbc52807c2e0676d3257553702d9c1bd6741e9cd5cdeb3b8f636b6eb02a3b0066d7f677d586de5018850000f000ab3960f6656fb98039ceb6400d0299c356fc22b7298ed157c667bed5563fac2192a8ff7706a9e58d9d2f92632d6b25d8b090642e3f323bf7ff4d8264617a43a97099dd7347fbe3b1c439737913f17eff57f3e1ff4fdac374fb554e9a6a1ff32daa69507698d660d8d5f591801d8e4a9309342c3dc84966dbfcd2652800200bcb0dde9d456b7a07c5409f4f5387d0150daa34dbc865c6108d34dcc51eedb277e9638b43ce3c9afac5d7aa0f8542e58b0a84632a07557b041845d0012cf016ef065f97660b731ce1b79493de71def047277a3ae6d4a0d86591847d3475926039848c5baf6e1b43bc83053855182423156e54cadc8c85089265b49da853d15e5a701fedf2bf7986a723abf72e513fa05cb178345f2fcc859df49e74c8ccef196000a05cb090f22986ffb6f8f74ab41d2d88b6b535507a23b03d2fc2743f6f69fbcd43b8ff52b1ba32fa0137d542c515569b7f486f8ffa02ad1f54767f51701eb4c141437720884d529a57e17bc2837799124f7f112f42bd90f5b435d7a5d7524f7667bb7a6266263e62bf7ebf6896888d584c65a530b766111f078630d8629ffa91acb5ed02498549bd7e042acae0fab7ccb23278088a364be3da9619d91e1061bbaa9b33c3c5fbbcbc725ce8c2cc9ab0f2b4d30078040d3ca79d3ca056c360381ee87e743dea73a25ea2b4843f9ef280feb507f933fb556c718d8bf8f8618db72805b65d381b319f65c745c1e5060dae2f498852e79aff8dd9c88fd939a31871a430d3ba96fb118c79d1b08a397af23b1a188d1802106f588c768a1e6c9d244ac9a38d2a54ed50f19b78bf25e0ae1f9337ceaa8ff5ca8640104b19bcd643b51501d4e03ed5ffb383e7ed0ab78d540ae10bbd64fba1af59a4190215b7d10230992bbb4ff618d8284a2e2446990511fc2bff07cce9ba94a11d3db041e220e3d931fdf129d8ec2c9b17d6587a0044c9e09f52848db43ddc0df94513cc9e94e9d427623502a910deea0f21d86b16366769a46bf0d6d9fc0d2cd6b98ed885e9e2d765bdd051196bf20bd27c46ec902726d96de352c346d904fa00d63b67d272f116dce489f9d636cef61b441b9c113addec983b8b2fbdb2b32049e436c972b2fcf5140dc7b094c5047cb6226da700b72aeb3febdf16a75b6f61a311f606251c99b377c775c8fb3446ccf25dc4cca24290b3939f948019b05c80b5a6382112f63e0990b324c16a087c72aaec08796afc769f678e3634100a5a9da8215cb5d7a6a6b50a81676ef4edca35595b11f9606bef2fb84fe1f0a0703c886579f09986086f0dca6eb8061f9a74c79c1f758684a7363974b14561b9d2efdaba6c4cd8cb70627da1e195fcae3d8b2fa751278e8f220c83e677e14731eccd6fe0c357b011ed88b6df0c266b383f224b8e95384e401b717030b1227582d0d1042bd90377c4f2c7206a19983fc5905e4eb87edb6532b26ca9e28e160202606d19d9f5da34762f4b3fa842d7bff382ad70dcbc411f8b3e4cace8c8e0c72898d24023545e0dfdc4176209276a535491ce11c045c57b45c40f19b12dcf6ffbf78ab23e7fe9bdc404cf47db9855f2b835e1fce57debfa071803ec38da3c77a904080a4c737ce2b20e14e8449762f1ca0b1ce71779d2e6ee5299e1cf230e8070045c23c1d0e52f66fe9039f95cdc0b448dc12d24de39157934270345991948fce921b5d8e739315cc75d4b3b49928437b88672c1a7770365207b43895f45909d5d972f48aa66de609152a5afa2c7d75f0a14189d0409f0b623eab3b6e7d81025cde140893ed71b6f24f5a36d21dafb62af6be9da845403bc8ed36672efa74d7da19d5794cb4b79fa1c86940b1890c012e14b7c3bb261f16bdd99efaa9819b0bc00af842a6b94c6086d15b16ab81af9331ba3a5bd6941ef35239e85455ceab02c598ccee8fbad97ed37daebfe3b26a5a6c9eda5f65a1cfaf7a1f1688267c812a56c552ae11b465dac030e18f9008ad03cad80bf2cb91a7d99dcfa54d323ae0a4c3a6dc0f80d7ff703870610a945eb0ab5b6d14e81869c8872f6b123d98edcf6bba10d76d35cff4b0bb73db8b6695a8351785bcba1e160a42ed367c4da727da38f91562e941e5c4fa90cd585c5f1cd3a7d6892f18a5aa3c74a4fc00bf5909267489b937a928d9d8ff92530b5226eedf8ab9a957e5ffec45bc3a55e6955b38393ce52892655265d1f741e0b744808eb568a08d145a8bc5ada9b079f6d0bec5fc2ace0502b3f926372dff49478fbd10451f0de4b3d1a63b9d4e17ade45628d2e9dca041fcf7fc1e105e1fc44089fde9caf418ba8454dc361df4a59e1bd79143d280613e3c79ad18e922a43e199aa5927bb9553dd31e6223ad19bf8aff6e1dac8b3680feea3138bc61742b03f047b3d77039c1a4c2d05bd89c4bc12a1b83d78b4e7023f690fce6a44608c423d8cbc2e80942b9d9df2f4bf5606640fa47692f3e003885983a73e1dc313b243bbab5c3c6348afab796da766044ba142eda5a9d3713e3eda8c54c1708909c5da89ba67d29cd7f409c9b759cba316c42028754e3cb6eae2cc4f6d66982f212320f199b2e837bb4c54c54bcdcd2ac240ef6295d38e9889b4213819ef0f9aba6ceead4e0fd2c4becdc1f8ee3049831996c9a74a5fd4e12a1fd21ed47cf27e29f9d61e4b673d88914c36eefa53d3c49d94b463b7f8462c1951dfe33c10993d5cfcd0ededd50ad55009528f1e79fbc2fa70c3338b32c40ae3bb45d7079c7ae8433fb1aa19affbd3fbce0cb5ab0d557afb3be036856066eea45c28e93528b35477fc97fe9ff3641e5bb0f0e46069eb653c027daabff38541250081c77e0e3a1d030a73289e771cc41db10819af60599b5df0ad978fcf0b46af821c6b717b265e07d3a85397ea94de26f510290ddb5df8fcff76fe624843c8577802809c145916afce01d9dfdfa8bf07633e98f14fc73d5ef58ae5cb0c308bc74ca38259692a1cd4cf16752786a1c816f24612c27393d7e40a2df9a3dfa23a0c59613c8a7ccdd97c3fc67ecab94dcd8cc4b4517ed2414d41ce574074ffebd156e3d65c4421b0f339bc9f29abbfe49db62122248cf96b74d9639b3ef9d935cd81315a7ecfb0dc6ea1ee053c2e5c3615fbc10782f16a564fcabe1df70da7de989e00eedc346cef5b5cf880e9d563fc15302f056d37f98a939fd1dd5478b4318c256e93b77e31f87d8f7fe31755191b40d778ddb2ada1480bb9fcb96a09783fcf2c2c9fac2c3a2771dd0e2fb113cd460ee2c9cf4a712f04eb1b1a746091109f7ce0655e1ff7781fbe853e3d03bb91c9d8f4f416f5745c6b607bbf72786bd3c0ac4761e6e6d70f12dbefa1b13542086f793b72c6102ac06e75be17bdbb1efbf7e007f07f9bd433fd9d9cbf93e760757b792f15231895561fe49d9d683ccc066f38af581422b71702627162c0f0f35c36a61eaaa92129114b7334281e35fd39576e51d8593c149c9326e0c710ea4dcc9ef39a432a48ae1834f5046b954f9c033d6035cde0dbffe3e97f48a1dc695f4b2f6fe5d4eee83008318def105c37e11c9015670f13417ed036e68f6fbfca2a8289829677feb23079f3f2ee53b26e491924fefc1c50e54f288a8c4b6ba6d319054c3a9e39e14bba81b423acbd44b51279bbea6b0bb2047325837ce8b2191454f52ffa2cd04abe89e3de5bc102e9fdf740d3efd975bc9503af796e6aeee711ef8797de5d507a964730aa70cb9d3840054d4e1ffc57de378b511f7649666a54a6b3d91ed517198d76322bf99d13bef530a43ed3f13196bf2def6dcfb39f76471c75c5779bedf105717e546057fb478bfd24e8fdf3c12d028b542d1f424a9d45bb9e026e6098eb1cb0a77378300ec1b4c9f006aa4dfb7fb5c57cf1b035cbe96009ead1ca25ea1e5fae40312a4e9fe250684a1c8653bb303209e0fc6a498f3a08f6c5b946378a349f3aea45104a2badb8a45f500bb4f0f6cd620ce794e0f390e1cb7f2f1fc0039f4250a577544a6862b47bf89eea3a8c1516b7a9dd111c2ca719190e8feb1a7079e9fdfdb8224dc50791c986825469c087c8f081616edaa4193e161281aa68b7286a364cbb336b2459f0892e57c40afcfda7d16ea1877efb4e4b0d4b5c31e8cba15066903d3a91bdc7fb64452fb9843436110596f0b038da167a86f97d32c807270a1c994fe88e2517e11bdd210dd982d3c8158459440108308a936c9d2370b9d157c3f9caec36ff05bc40b37f095edf33bf4fad440f38c3f52129456936c07014140be5618f4e9d07b66679238023390cd676b1a3a28d0e90d5ad9ef13a31fcdc5a435454309367c437424e340a1f91c6483bce1026d85a16fb854252ea4ede39a4e69702ecff76432de508e064eda0df9f263a25c0f626d1c1ffaa6783be2975451ee936cc2178648935a924f6fb2db2f8ba34e348920d903114520918cc6872b842e3744fc18d1363583a107ec7b89c7792c0d8069e12f873f6d668f6fdeb47b72986914e45c2b061c5c936c73c9bcf1475ea0d25edaad21cf193405c8acef3bff4e4f1b2b321d70dba59e856a8849c2bba9508bad775370669b2bb7f5e53181af8bff525e13a4935d7e28b997b4ff15da9e36f1353a154ab701ad15420786daaf27ba7e122f7b825c668185b685630420378b4142ec4e4242c2cf0bf6e143f7e55cb12fb9dd59a8df9959ce4fc5fff68ae7174977a31ad7fd644bc94a20bae76f0af474034990fdfec8ceca0e6cd93fe21d84837b7e9d74c17b6d3054f0c008ee05764745fd8773a0c1c31bb3eef5b7e261b54805b5c805a4eeef05c812fcdede200442e7340c63490645ebd09c235d5c52a785542526edfe3875ad08267faed1d0a15236f00c6736b94c1a3821302ff610697ad7becdbc96f54b55138b585cd122e0d5aeaf43c9ba373e8aa1c1297e3415552cc57cd60ee1f3c04500ed0eed37775c873de3066c034c176c67c5bfbe9899a47732030855781341374641da058eee61d01d11b9db8f19fd4558957897340e32cdfbc39713f1f439be0638f614cdb5361433a45a6ff024e39c94141dc5403af101404ce5f2efa97b90d9ecdb7c361785dab977feded32554d1a74d5cbfe2435be7f0329ba382455c2ac11fbe29fe3826796d4bea03dc53a37f63f5be2773f83faf282f0ae24d9fe5762b71b499fd37b4ce7e71f93c3a983f80fed477708bbf2261c89893c4b76e34fac9b42671b6cc81678cc867f53e8c3ec47716206212743ca0c4941c2c61ed3177fccf85921e998d2b826df751173944bb07eeaae4001f677a0687a2550eeac8bb5128ecad9c7b6a514596a30b8292fbacc09ab488193507b6785d7a35c979db774b2c413246f1ae88d35d1914b20b8fb501034321642fb0b0baba3378e4c31fb5e247c177e573295df0194462b99079a436400ba1be2e30d39b8714c0fb2bdcd981d5a5cd514f8d4f14e4e0437108630355d8f2b60a6d18cb14ceb2b5d0704aa6e93e180bd79cb17e176bc4f81a03db12a03413de6189896955bb9e3cc69b6f9a50a7eda3742527f98c71d7ea8ba75e253c2b783f7104813c619949e6a0765179b1b9cbe68b703335ab5986928d86384357a2f4189f4b4ffcd61a3d29709bbc93b5371f0e7798cb72ae4c17bcee24f8e566f2777803c3d182d15a63ac40063f0ccdf4bd790404524eae02eafb6b54c699578486490033f0be866c74a134083003d330498658ba973ea674c4a0ff158403987b4c4752b07c8637a119b019fd5093406960144445056f6ffe73eda0235dc1871bb6058d4a9feecac628265689d58a81453d33290ab56eb691f3180d0288449f41844e56f5c6cf522d4a5866b24fb9552fde71946c4d25dcceaa41cfddb5a33c51c54c0a0a5abd31be8fb6ec53c1d14ba648e183979dbd0db01b9e51ba3803be7e7d3dee752668367264c783f74838121797ae5706ef3aa460682d1bf55808c70e69ae29d7683368470d08e7e9a1095305dce250b5b4bd48c02e098d241b1089736e8306a737e3a1a93e554cc3ab24672b8c74bfb8825004ca869e347f873de14575493836662ad741d79269904f905d7df64d0581ab8d76ee51a32d72ccb719f3a25c0a856b5bd2b2a1269e208d70c32e1d5ad0dfdc0ef43f0230e95eb85871eb4d6033abbf0be7025382d878eeaeea73c94270e79bd5757dc1bac95236a62545cd467830b12dcc30d7cc81e889d360d073db40058e9a1c7b41fc53e67740bc984132a1452cf7d000378f14ef93a7eb0dc9bacf23584ad6761139576607f8214757f71fc47b2944127116ca3e83b9d9643bce8d7bb44b4d16b5d5cff70a9e1114cd920b6fc1f409672648ad56ac3136ef0a314adb458faf3d3f171cb2fc513d76e43e6bda2f1a68e6fcf4a4ecbe6bc87716e2a82ea0c4657983ca0caaf8d75fdf5b0d7930e4f3e95eb1271485f938e7ad2bf0c97b7c11745de45518a1e3a74341968588558e7197b407d24eda0671ee28f219e4c5f809a7ea6f9f5b9705f4634a96112eb262bd5967db5237285b865d3f64516495ea6d1ec20dbed7af02362370bcc98671a61241fa1ef5b3095609d66ecc16010f6f67a280d1c6d215ec224ead17d68bbc9bc64b363b5be9b479b7aa2cbc8587a6b48cf653fde7a262a11ab3a10356f55f122310feac77c32ce0994d6e8a70f1c53331cb473a8e29427322fb6da292c4443b1678877f1c981fa05fbdef96520e5895aeb2a3a8e62652f9d8830c3b144b9598873e2ef41b7ade943807766877d609972cca74855eaedce07cda35b50557de96e736ca3107c154d31aeee78db214687b9964517bcd2c6c9ec047514b45c831aee4588166dc3ec9ab36bd1033e74b3d02d731c5bd84f659fa9fe55cac08c12cb999a2e64fac52f6cb7d1fffbf45d9a1126787d0060fd1be563ccbc278ac97dab0c1bee664675f273f5fa429bdc24b21ff1cf0a3ad3c687fb07ffd88bad6ab6c6b422a43b77ff76f96bf405c07f8a667bb8ff54d6714aaa21ceba2e78ce03146b2ab9f49e6d65081119b8e7cf3843e91349790d2b975c9f9c305df0ab4f2b1b2f30f629313cc66a325e4037f38f29842ee5781ba73d2f30f506cf7ff2237a72b4075aefa32cdd5ba0ae4e65cb6fa47a3e06f0d5f684b7172d6b58f5f7d783c4122db4f4b8b4f9d3296c9d115f432710c29d40dfca0010ecbe2f42fac899911d65c84f08aaa1923c8add5af518286211db14e1187a8839f3b2ae8bd914eafc16a576bbe3eba6271a4c5b3170c3f543761f11f1326a05c575bde1b5c6afd3876bea4fbb649071a95caf74de9f7b3421803ec351f934b8d0932ce72a13abf3627d9a396c10875fc167ef1ae98ff92af9ca366033c99d30306fd540a09d67d26ab192504e7c09f9e4d06287a2b1748f1761ba3c16d9d08be7562b7351c4b4679f5d4b38681bfd86c7f2003a9749b20b602112a95803469f5d252c564912b55c4bf3409298dbd066d877cc70a89b484b9ee6bb836c9acd1e53086c4be85e9a3bc5969c7016db9c72b68620c241409d06f4d7f72fe2289c9b4921055922783b8b886bc22926b7d194820af2b90e3c60e87e1a7851f38a970c07c1da120d1da75de2bb994ff7d05a313522373326f160914a9589711e0439d694f5221afe8cc118722ce4927e9543e61a12a76bcf2da1d01a0f258095d32063387349b4e9f253d8b73c6e834b6866f8a56b4797b92d521fa732aa0d55c8e9d6c56011ee6fb450853dc564d18e97c463609c27a63f9c91c46d7bd80ace4edc0615ca342f43ca3b3d0cc36ed52b7d1f457e5b4b26b5eca0d91abe4f1a42a2eec40ec2faff1222f71dc226d6344e947b45155691205c09913fc3c6ab3fe76f4d1b11fa45869e20694b5f0a1074780a07332764212533b797dd24d8df157d4172f91253b77eb2ec90c8222307ed59136463057b7f469116086410b7503b44cef401c47811c1390060da5b3321d34096b67468a7702978d98d4bd721c18a25ed541249638e90281dc8e3565dc33e66d7b832a9bd62c02c5ed0e92935c92472499653d2d842ea6697c733ee80d775884074b3a0c250a4aa021bb6ea93514f9cc5f09feb5719d270cd184e364ca966f1416e10f111bc425f32a993fc5cd75503f99d89d91d7ddc6dee70193057cb946e5fbf8663c53e12cebffe5dbd4a86bfcf5f35f0d8aa43763a60e00356b4f8bc2bca01b02cfddde38f0c4df1e7f98709fdebc5abb5eb9631bdc3dbfcf15517fabcf16931eb7381e83713b081ad1947274d4896ee8953d772e9e71f363b6f1147317bc739ec128e4ec865f8f0ea34cd5ff19fb2c28931d2c85846735358504ae9161535cd7890e8b95c814cfec116b78e6d0eb5097cd4f35888121452e27391d865c15f0b986925d0d0c623bcbb4d8ca66603720253af17853967ea5954eb5ef0dc43de185ec4925026c680464e66d1caff1f4c7c757bd55ec2515ffe7183e3481ff6f626c2228a3fc3d15f63e4bfbec76a2a170206142cbbcf204a1cbfe0ee56eb47dfb79c80894c0a0fbf8a2955d861678fc2f8f9ad7a28052197b5992bced1273658da5b1f42fca48c80883600c24d8515a0c7113deb4c97df918ab64bca16a0c14f2547dc91d5ce4f884978c95fe54899f77ffc20a2c4b27350bc451bef72a46d8e144ad57a8d5f8ac039f58b8a53ea1f3fd5fce612a171bf82ba17c0681cf46ce5c8181a522ed2e986361903903159643046c7be1787dac6ccab09d18a30997541dc6e9efa260f1ff0392bc1890f19d8bb725f4fe7d8bc618f46e0c23be6b9ca67777dd3f5a89b41ccfb11a526a3bed045a2906f86cc5186a1db7a70391261b694b423e5a44d374f9d3720330e083574083f8950b2b35c8bb5b6c0a7fe259f235dc1c069d4581a9f0a7451890561a0829bb290de6aefe4d243ae0b00ca61a1dc4262bb4951242b21d88148eb7b6a9718d6433274f2b3c9bcdbb6d5df67b48ff42692d8cd7f4b7f41728de68ea1ce0f3e4a2843c5b9ffc43f69b8a0445dce44081f5b443a327084b0d00d07cbdbbfd2da5d67bf8d4bb4ee408d17eeee48b61decd06bd3dac9a1adbeb069b49ec96608b9179bb3af4c10f2ade6778b31fd4c22c2961cb949a64e9a8a4879c550f8d8783064cb304511e40e2e562ba83c08ba8ae011a784ed9db03db5527a7aae222c856c8df0a94f9c4def0f94244c5b8e3db9f39dbd337928e24d9d8562f231fea72116c01089163d2c5f4ca17faab20b73c9957fa1a9af20837a804870034d4e64281125b070d8ee0dbf05f95e5fb079e2a57e9af977222e90b664189114dccbca81ee58b7de90a813768a2049052b339a608d3e9966bdb3b584291fbf7694a7d1dea7f72ca604894e6cca5d326ed5e48c15eff5e6a8cc11c40f84ca920d79a5c55d07001909bf6338921c656a39d59d03f62bb5b8870189f0416ec8c317b03ccdcbbeb3e1a9bf2661813f4966b57eb56a2757de5f7745851b5f7bf75e41eb1646e61a41923c5c0e58c2ea478d95b5c39c450744aea0aad3706fce684cb7338ff3dacab60e8d968f0e6fc070693ae3ca16996b34a50afb7e6e377546ae28dc8de7a2ea3a657b4b0003a91a488e347c61971d62f32eaf843d4d4c4f86cc4033c1244c8408def09188dde509c629323f34072f9089a3846680894e8b000a03865438b2ea212b68fdef7f17583f92014eef2c8115a37c9c82dee06213c1407c1433690f68cdc8e91971104039dfe06774b946f43b68b7957a5ca3ee763eafbb7437850eb0a285c413bcf6965232d593d8da47a2a06abc635ae38e596a9dae55b43f341bcc6fe72d79b453ac1c259da37f64cbc1f1508caf280aa6a3f4cd2ff5564cc5a8727f222431454a5ac93398a29fb95b4e057686cd6fcd920992f74e5870749676a36e043bec5fc1b0fce5563affe9addfaa3689e857383ccd1f2924080449d2cfb006e855570b711c1dedd1df2629afaa3806f4ae229a9a8ef1940ddf2c55dac7812d2374c0684b7ba27b2f0849ee4c055d2b8ccc8e41c593378340d7546bb974bc8032f220b37099e3b04c6591c40d2c50a855a491e03c1c9cbb32c400f6104341262d92daaf3e2c04936cf28788fdff8e0a77770a9deb9089a9e32eb5d9e2581aecd98f83881ca8e7d49e603556dc03a9aa19a8f3a4735aaee347b25ea35b36fa57484c0b6d591979b4a3da894fa0c15966d6a5e02e397cccdb9c314b504372b81ef6913877767001263c05dae362b49e5928ef36f554ce245b4111486417634f1e7f4530a760ae6ffd3123f5736ac12c5bf506c5dca03079c0fd0776cdb56c938cdf480fb9b97b1685dfa3be6f712aae107e2dda726bec137b2ebdf56c0fcaecca4350bd7b5c84d57f29c2a2c99ae10c30cece4831d71ae4ee3362983cc816bb6cb9225b9db08503a1be23a26a0425a8628a2e718feae5df91d829f27966f766b623a0a4958a57642aefae259713733670d5b1d027fb8eb2d0d3a0b4acd482076dfa09ffe883f556b2db2262bc0872e1bd713f100dd7a8a8f2d725b46e09c625d513179872bbcc9a41e596a18b2471d977f4ca2bebd06cdaba31b70ef25e098f214fef16f16f725cad4311eb91457fdb70b471eddb65ecafb1e2b03c5ff21356241e3cab2c8ba601f9ef1aec9006b7cd0b81da29be01cb4c1d52e563298e373013886ebb1889bd5616647c6c418ea6bc1f3c0853b65cae48467b35f08318e3a9d034af7224cc3520ab1ece7751ba15407298b21e4f84ef7c23d7993739403d4f116cba2d0ae2d4003a28334c461c734d4555105b986ad0af28aac36c753ab52b91b7e23ae3ab07d3b170fe53a2249efe5b65463a3f237cec72091b04005f95a15ae595191ba39d0ae1d91d8e00b132ae9339884bc57bbb79978a308e1c31c5f213b092f380a7ba58f55869e9c29a5a6e7a7aa4f8d58e5787cc05e5", 0x2000, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90}, 0x0, 0x0, 0x0, 0x0})

7.134921396s ago: executing program 1 (id=330):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB], 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000580)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x804, &(0x7f00000000c0)={[{@shortname_win95}, {@shortname_lower}, {@utf8}, {@shortname_win95}, {@shortname_mixed}, {@utf8no}, {@rodir}, {@utf8no}, {@fat=@check_normal}, {@fat=@codepage={'codepage', 0x3d, '775'}}, {@fat=@check_strict}, {@utf8no}, {@numtail}, {@iocharset={'iocharset', 0x3d, 'iso8859-6'}}, {@shortname_win95}, {@shortname_winnt}]}, 0x1, 0x276, &(0x7f00000003c0)="$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")
syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x4800, 0x0, 0x2, 0x0, &(0x7f0000000000))
chdir(&(0x7f00000003c0)='./bus\x00')
r4 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
getdents(r4, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x0, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r5, 0xae01, 0x300)

7.045719663s ago: executing program 3 (id=331):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008f00850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10)
r1 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000300)='/proc/thread-self/attr/current\x00', 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x0, 0x4, 0xfff, 0x5}, 0x48)
syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000001c0)='./file2\x00', 0x3000cd1, &(0x7f00000001c0)=ANY=[], 0x1, 0x150a, &(0x7f0000000bc0)="$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")
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
signalfd(0xffffffffffffffff, 0x0, 0x0)
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
r6 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r6, &(0x7f0000000440), 0x10)
listen(r6, 0x0)
r7 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r7, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10)
writev(r7, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x900}], 0x1)
r8 = accept4$unix(r6, 0x0, 0x0, 0x0)
recvmmsg(r8, &(0x7f0000001680), 0x0, 0x0, 0x0)
mount$cgroup(0x0, 0x0, &(0x7f0000000040), 0x80, &(0x7f0000000300)={[{@subsystem='perf_event'}, {@xattr}]})
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x0, 0x0, 0x8, 0x8}, 0x48)
write$selinux_attr(r1, &(0x7f00000001c0)='system_u:object_r:power_device_t:s0\x00', 0x24)

4.587611964s ago: executing program 2 (id=332):
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x56)
r1 = socket(0x0, 0x0, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000840}, 0x40000)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000000000000000000000186800000000000090737c73267beee600000000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000001800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r4 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
recvmmsg(r1, &(0x7f0000000000), 0x0, 0x0, 0x0)
sendmmsg$unix(r6, &(0x7f0000002fc0)=[{{&(0x7f0000000300)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f00000001c0)=[{&(0x7f0000000680)="4a635c7b245e58db98fdbe746ad3dd6afb3efdda4baa1b6eb7abb72e3b99b80306aa6149a50e71cf5caa21186d65631ae98394fe1c7a9814e0123e1fcd311dacb5c74ff64aceb86e2f56231b4b3dc9e6c429b9796159195fdf1836480df675676c511db03916b9dfab4fde1756652902cfdabf8ff7d781824fff6229b0c56ee5b6a7a99cc34d199a21465f0dabec742cfe447295fb834a8ce872158a9d90a732a1481cd3330224a813628b37171e95eeb0e48e2d9e0c07d2be864b8fc598f6d81d5ab451119699d3f85e50e285362b81a85a4e46a2b36d9c2a538c292facc7d73f3a8c64f0", 0xe5}], 0x1, &(0x7f0000000280)=[@cred={{0x1c}}], 0x20, 0x20008000}}, {{&(0x7f00000004c0)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000000380), 0x0, &(0x7f0000000840)=[@rights={{0x20, 0x1, 0x1, [r6, r6, r5, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, r2, r0, 0xffffffffffffffff, r5, r0, r5, r5]}}, @rights={{0x18, 0x1, 0x1, [r5, r0]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {r4}}}], 0x118, 0x80}}], 0x2, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r7 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r8 = dup(r7)
r9 = socket$inet6(0xa, 0x2, 0x0)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="8000000000020104000000000000000002000000240002801400018008000100e000000108000200ac1e00010c0002800500010000000000240003801400018008000100ffffffff08000200e00000010c0002800500010000000000240001800c000280050001000000000014000180080001"], 0x80}}, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r9, 0x29, 0x20, &(0x7f00000000c0)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20)
setsockopt$inet6_int(r8, 0x29, 0x1000000000021, &(0x7f0000000000)=0x4, 0x4)
r11 = socket$nl_route(0x10, 0x3, 0x0)
socket$inet6(0xa, 0x6, 0x7)
sendmsg$nl_route(r11, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="f8000000180009090000000000000000020000000000000000000000080007"], 0xf8}}, 0x0)
sendmsg$inet6(r9, &(0x7f0000000100)={&(0x7f0000000080)={0xa, 0x4622, 0xfffffffc, @mcast1, 0x9}, 0x1c, 0x0, 0xffb7}, 0x40448c0)

4.483594933s ago: executing program 1 (id=334):
syz_open_procfs$namespace(0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0)
getrlimit(0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000840)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = gettid()
prctl$PR_SET_PTRACER(0x59616d61, r4)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
syz_clone3(&(0x7f00000002c0)={0x300, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000100)=[0x0], 0x1}, 0x58)

4.482098903s ago: executing program 3 (id=335):
r0 = syz_io_uring_setup(0x2633, &(0x7f00000006c0), &(0x7f0000000740), &(0x7f0000000780))
io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0x2, &(0x7f0000002d40)={0x0, 0x0, 0x0, 0x0}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000010700"/16, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001180)={&(0x7f0000000080)='sched_switch\x00'}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x12, 0x8, 0x3, 0x7cb4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48)
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x2030, &(0x7f0000000500)=ANY=[@ANYBLOB="d98e55243daa168aa6340a315a449b578a50760f11900749aca2ebc2d403e77a2782e9e0a4ff4e70860888e20361a7a6c58e126c2995bdda7c24b5f9b1fb219062d918a3cc7949d5637467a704f463ffe9da3a2e179a8ba11450943ce72ad046b04ae31a922c798f60a95b5ece75463e9333c9dd4b238cd3c16c2f09eb2952a4d7522d900acdb2ea81b60e7457b022d1de40038927e56a111d3166eeceefa309c67ea959e6363782e9a869a8522df3389a7c7c89c333c84ca4c6b5bd94b72e5e757811cedca3acdc0b0e98721e14"], 0x2, 0x21e, &(0x7f0000000a40)="$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")
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_mount_image$ext4(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
syz_extract_tcp_res(&(0x7f00000001c0), 0x200, 0x40)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1800b2dcb05380000000", @ANYRES8], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f00000007c0)=ANY=[@ANYBLOB="05000000000000007111b000000006008510000002000000850000002a0000418b976229fd36dc0095000000000000000698a766c30d28ffc9216b5a0c3bd12fd0427f5e9f0704f8659963aa1955df35bd3e024abcc669b3efe9ce208a7c18cdde295e4559bcc3e157e7a80d10fba623a89773c1f2f1cc607e8c10960da99b975a8356548e81aa430cb55902710b395cd9cdf19be78bc22b8f12f8c1786760e3d557f055dc4fb34937da6a254538f4da9842dbc7eda4a20b"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x70)
bind$inet(r1, &(0x7f0000000040)={0x2, 0x0, @private=0xa010102}, 0x10)
clock_gettime(0x0, &(0x7f0000000180))

3.869471773s ago: executing program 0 (id=338):
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000057230600f0ffffff95000000000000005a272b57c888cd692aed584eb466e7a72daa000400000000000035b33e4890a5e823ef4a88a3fe2bf0db3e34207c765f9f8ff681cde7d9aff9397d3168620e0265af111efe1a117d9fbca9047cec0c582ea06c9ca81259a555cfa83b9c6eea9f569e0b8ae51cd28a18ac7a7c92efb7ec01c3028647"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
dup(0xffffffffffffffff)
read$FUSE(0xffffffffffffffff, &(0x7f0000006140)={0x2020, 0x0, 0x0, <r0=>0x0, <r1=>0x0, <r2=>0x0}, 0x2020)
syz_mount_image$exfat(&(0x7f0000001500), &(0x7f0000001540)='./file0\x00', 0x20010080, &(0x7f0000000480)=ANY=[@ANYBLOB='allow_utime=00000000000000000000007,dmask=00000000000000001,iocharset=macroman,allow_utime=00000000000000000000002,uid=', @ANYRES64=r2, @ANYRESOCT=r0, @ANYBLOB="2a3a6dc4d70cd8504afe4f20df34ad3cf37d706dd73fd000", @ANYBLOB="00001b0087e1e85631dc26e7a9ce3c4396436bc6736574e997938c382c009cd0aeba477396b2cb852b9c7a6a4bf39e0368bfe3e9c44e297aeade0000000000fb4fffa3da2229249f9eae67b594fb6fa71518c4638f5e66923f2ba986156feb62be500e4840d9758d3d1f11577798871b0a2d0009ae68165160d76495fc48f43da2e2147ad0809022a1a0c2d4", @ANYRESHEX=r1], 0x1, 0x14ee, &(0x7f0000004000)="$eJzs3Au0jtX2MPA511qPW9Kb5L7mmg9v2lgkSS5JckmSJElyS0iSJAmJTW5JSELuSe4hucVO7vdb7klyJEkSEpKsb+ic89ep842+b5y+z/8/9vyNscZecz97rneud77jfZ/n2WPvbzsOrlq/WqW6zAz/Efz7l1QAyAQA/QDgGgCIAKBU9lLZLx3PrDH1P3sQ8dd6aNqVrkBcSdL/9E36n75J/9M36X/6Jv1P36T/6Zv0P32T/guRnm2dnudaGel3yP3/9Ew+/9M36X/6Jv1P36T/6Zv0P32T/qdv0v/0Tfqfvkn/hUjPrvT95/85I+M/nrErXcdfO67wy08IIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghRDpxLlxmAOCf8ytdlxBCCCGEEEIIIf46IeOVrkAIIYQQQgghhBD/7yEo0GAgggyQETJBZsgCV0FWuBqywTWQgGshO1wHOeB6yAm5IDfkgbyQD/KDBQIHDDEUgIKQhBugENwIKVAYikBR8FAMisNNUAJuhpJwC5SCW6E03AZloCyUg/JwO1SAO6Ai3AmV4C6oDFWgKlSDu6E63AM14F6oCfdBLbgfzpX5e5V14SGoBw9DfXgEGsCj0BAaQWNoAk1/n48I8Jv82vAA1IEHf5f/InSFl6AbdIdU6AE94WXoBb2hD/SFfvAK9IdXYQC8BgNhEAyG12EIvAFD4U0YBsNhBLwFI2EUjIYxMBbGwXh4GybAOzAR3oVJMBmmwFSYBtNhBrwHM2EWzIb3YQ58AHNhHsyHBbAQPoRFsBjS4CNYAh/DUlgGy2EFrIRVsBrWwFpYB+thA2yETbAZtsBW+AS2wXbYATthF+yGPfAp7IXPYB98Dvvhi//L/LO/y++EgIAKFRo0mAEzYCbMhFkwC2bFrJgNs2ECE5gds//XiyU35sa8mBfzY34kJGRkLIAFMIlJLISFMAVTsAgWQY8ei2NxLIE3Y0ksiaWwFJbG0lgGy2JZLI/lsQJWwIpYESthJayMlbEqVsW78W68B2tgDayJNbEW1sLaWBvrYB2si3WxHtbD+lgfG2ADbIgNsTE2xqbYFJthM2yOzbEltsRW2ApbY2tsg22wLbbFdtgO22N77IAdsCN2xE7YGTvji/givoQvYXesrHpgT+yJvbAX9sG+2Bdfwf74Kr6Kr+FAHISD8XV8Hd/AoXgGh+FwHIEjsIIahaNxDLIah+NxPE7ACTgRJ+IknIyTcSpOw+k4A2fgTJyFs/B9nIMf4Ac4D+fhAlyIC3ERLsY0TMMleBaX4jJcjitwJa7ClbgG1+IaXI8bcD1uwk24BbfgJ/gJbsftuBN34m7cjZ/ip/gZfoYDcT/uxwN4AA/iQTyEh/AwHsYjeASP4lE8hsfwOB7HE3gST+FJPI2n8QyexXN4Ds/jebyAz+f9ut7uwusGgrrEKKMyqAwqk8qksqgsKqvKqrKpbCqhEiq7yq5yqBwqp8qpcqvcKq/Kq/Kr/IoUKVaxKqAKqKRKqkKqkEpRKaqIKqK88qq4Kq5KqBKqpCqpSqlbVWl1myqjyqoWvrwqryqolr6iulNVUpVUZVVFVVXVVDVVXVVXNVQNVVPVVLVULVVbPaDqqB7YBx9SlzpTXw3CBmowNlSNVGPVRL2Bj6lmaig2Vy1US/WEGo7DsLVq5tuop1VbNRrbqWfVGHxOdVDjsKN6QXVSnVUX9aLqqpr7bqq7moQ9VE81FXup3qqP6qtmYhV1qWNV1WtqoBqkBqvX1QJ8Qw1Vb6phargaod5SI9UoNVqNUWPVODVeva0mqHfURPWumqQmqylqqpqmpqsZ6j01U81Ss9X7ao76QM1V89R8tUAtVB+qRWqxSlMfqSXqY7VULVPL1Qq1Uq1Sq9UatVatU+vVBrVRbVKb1Ra1VX2itqntaofaqXap3WqP+lTtVZ+pfepztV99oQ4oTAX4Uh1SX6nD6mt1RH2jjqpv1TH1nTquvlcn1El1Sv2gTqsf1Zlf3xsBQP2sLqhf1EUVFGjUSmttdKQz6Iw6k86ss+irdFZ9tc6mr9EJfa3Orq/TOfT1OqfOpXPrPDqvzqfza6tJO8061gV0QZ3UN+hC+kadogvrIrqo9rqYLq5v0iX0zbqkvkWX0rfq0vo2XUaX1eV0eX27rqDv0BX1nbqSvktX1lV0VV1N362r63t0DX2vrqnv07X0/bq2fkDX0Q/quvohXU8/rOvrR3QD/ahuqBvpxrqJbqof083047q5bqFb6id0K/2kbq2f0m3007qtfka308/q9vo53UE/rzvqF3Qn3Vl30b/oizrobrq7TtU9dE/9su6le+s+uq/up1/R/fWreoB+TQ/Ug/Rg/boeot/QQ/Wbepgerkfot/RIPUqP1mP0WD1Oj9dv6wn6HT1Rv6sn6cl6ip6qp+npus8/Vpr9f5D/zr/JH/Dro2/RW/UnepvernfonXqX3q336D16r96r9+l9er/erw/oA/qgPqgP6UP6sD6sj+gj+qg+qo/pY/q4Pq5P6JP6J/2DPq1/1Gf0WX1W/6TP6/P6wj+eAzBolNHGmMhkMBlNJpPZZDFXmazmapPNXGMS5lqT3VxncpjrTU6Ty+Q2eUxek8/kN9aQcYZNbAqYgiZpbjCFzI0mxRQ2RUxR400xU9zc9B/n/1l9TU1T08w0M81Nc9PStDStTCvT2rQ2bUwb09a0Ne1MO9PetDcdTAfT0XQ0nUwn08V0MV1NV9PNdDOpJtX0NC+bXqa36WP6mn7mFdPf9DcDzAAz0Aw0g81gM8QMMUPNUDPMDDMjzAgz0ow0o81oM9aMNePNeDPBTDATzUQzyUwyU8wUM81MMzPMDDPTzDSzzWwzx8wxc81cM9/MNwvNQrPILDJpJs0sMUvMUrPMLDMrzAqzyqwya8was86sMxvMBrPJbDJLzVaz1Wwz28wOs8PsMrvMHrPH7DV7zT6zz+w3+80Bc8AcNAfNIXPIHDaHzRFzxBw1R80xc8wcN8fNCXPCnDKnzGlz2pwxZ8w5c86cN+fNBXPBXDQXL532RSpSkYlMlCHKEGWKMkVZoixR1ihrlC3KFiWiRJQ9yh7liK6Pcka5otxRnihvlC/KH9mIIhdxFEcFooJRMrohKhTdGKVEhaMiUdHIR8Wi4tFNUYno5qhkdEtUKro1Kh3dFpWJykblovLR7VGF6I6oYnRnVCm6K6ocVYmqRtWiu6Pq0T1RjejeqGZ0X1Qruj+qHT0Q1YkejOpGD0X1ooej+tEjUYPo0ahh1ChqHDWJmv6l64dwJtfjvpvtblNtD9vTvmx72d62j+1r+9lXbH/7qh1gX7MD7SA72L5uh9g37FD7ph1mh9sR9i070o6yo+0YO9aOs+Pt23aCfcdOtO/aSXaynWKn2ml2up1h37Mz7Sw7275v59gP7Fw7z863C+xC+6FdZBfbNPuRXWI/tkvtMrvcrrAr7Sq72q6xa+06u95usBvtJrvZbrFb7Sd2m91ud9iddpfdbffYT+1e+5ndZz+3++0X9oD9m1XwpT1kv7KH7df2iP3GHrXf2mP2O3vcfm9P2JP2lP3BnrY/2jP2rD1nf7Ln7c/2gv3FXrTh0sn9pY93MmQoA2WgTJSJslAWykpZKRtlowQlKDtlpxyUg3JSTspNuSkv5aX8lJ8uYWIqQAUoSUkqRIUohVKoCBUhT56KU3EqQSWoJJWkUlSKSlNpKkNlqByVo9vpdrqD7qA76U66i+6iKlSFqlE1qk7VqQbVoJpUk2pRLapNtakO1aG6VJfqUT2qT/WpATWghtSQGlNjakpNqRk1o+bUnFpSS2pFrag1taY21IbaUltqR+2oPbWnDtSBOlJH6kSdqAt1oa7UlbpRN0qlVOpJPakX9aI+1If6UT/qT/1pAA2ggTSQBtNgGkJDaCgNpWE0nEbQWzSSRtFoGkNjaRyNp/E0gSbQRJpIk2gSTaEpNI2m0QyaQTNpJs2m2TSH5tBcmkvzaT4tpIW0iBZRGqXRElpCS2kpLafltJJW0mpaTWtpLa2n9bSRNtJm2kxbaStto220g3bQLtpFe2gP7aW9tI/20X7aTwfoAB2kg3SIDtFhOkxH6AgdpaN0jI7RcTpOJ+gEnaJTdJpO0xk6Q+foHJ2nn+kC/UIXKVAml9llcVe5rO5ql81d434f53Z5XF6Xz+V31uV0uf4lJudciivsiriizrtirri76Q9xGVfWlXPl3e2ugrvDVfxDXN3d42q4e11Nd5+r5u7+l7iWu9/Vdo+4Ou5RV9c1cvVcE1ffPeIauEddQ9fINXZNXCv3pGvtnnJt3NOurXvmD/Eit9itdevcerfB7XWfuXPuJ3fUfevOu59dN9fd9XOvuP7uVTfAveYGukF/iEe4t9xIN8qNdmPcWDfuD/EUN9VNc9PdDPeem+lm/SFe6D50c1yam+vmufluwa/xpZrS3EduifvYLXXL3HK3wq10q9xqt+a/al3hNrnNbovb4z5129x2t8PtdLvc7l/jS/vY5z53+90X7oj7xh10X7pD7pg77L7+Nb60v2PuO3fcfe9OuJPulPvBnXY/ujPu7K/7v7T3H9wv7qILDhhZsWbDEWfgjJyJM3MWvoqz8tWcja/hBF/L2fk6zsHXc07Oxbk5D+flfJyfLRM7Zo65ABfkJN/AhfhGTuHCXISLsudiXJxv4hJ8M5fkW7gU38ql+TYuw2W5HJfn27kC38EV+U6uxHdxZa7CVbka383V+R6uwfdyTb6Pa/H9XJsf4Dr8INflh7geP8z1+RFuwI9yQ27EjbkJN+XHuBk/zs25BbfkJ7gVP8mt+Sluw09zW36G2/Gz3J6f4w78PHfkF7gTd+Yu/CJ35Ze4G3fnVO7BPfll7sW9uQ/35X78CvfnV3kAv8YDeRAP5td5CL/BQ/lNHsbDeQS/xSN5FI/mMTyWx/F4fpsn8Ds8kd/lSTyZp/BUnsbTeQa/xzN5Fs/m93kOf8BzeR7P5wW8kD/kRbyY0/gjXsIf81Jexst5Ba/kVbya1/BaXsfreQNv5E28mbfwVv6Et/F23sE7eRfv5j38Ke/lz3gff877+Qs+wH/jg/wlH+Kv+DB/zUf4Gz7K3/Ix/o6P8/d8gk/yKf6BT/OPfIbP8jn+ic/zz3yBf+GLHBhijFWsYxNHcYY4Y5wpzhxnia+Ks8ZXx9nia+JEfG2cPb4uzhFfH+eMc8W54zxx3jhfnD+2McUu5jiOC8QF42R8Q1wovjFOiQvHReKisY+LxcXjm+IS8c1xyfiWuFR8a1w6vi0uE5eNH7mvfHx7XCG+I64Y3xlXiu+KK8dV4qpxtfjuuHp8T1wjvjeuGd8Xl4zvj2vHD8R14gfjuvFDcb344bh+/EjcIH40bhg3ihvHTeKm8WNxs/jxuHncIm4ZPxG3ip+MW8dPxW3ip+O28TN/ejw17hH3jF+OX45DuFfPTy5ILkx+mFyUXJxMS36UXJL8OLk0uSy5PLkiuTK5Krk6uSa5NrkuuT65IbkxuSm5ObklGUK1jODRK6+98ZHP4DP6TD6zz+Kv8ln91T6bv8Yn/LU+u7/O5/DX+5w+l8/t8/i8Pp/P760n7zz72BfwBX3S3+AL+Rt9ii/si/ii3vtivrhv4pv6pr6Zf9w39y18S/+Ef8I/6Z/0T/mn/NO+rX/Gt/PP+vb+Od/BP++f9y/4Tr6z7+Jf9F39S76b7+5Tfarv6Xv6Xr6X7xOB7+f7+f6+vx/gB/iBfqAf7Af7IX6IH+qH+mF+mB/hR/iRfqQf7Uf7sX6sH+/H+wl+gp/oJ/pJfpKf4qf4aX6an+Fn+Jl+pp/tZ/s5KXP8XD/Xz/fz/UK/0C/yi3yaT/NL/BK/1C/1y/1yv9Kv9Kv9ar/Wr/Xr/Xq/0W/0m/1mv9Vv9dv8Nr/D7/C7/C6/x+/xe/1ev8/v8/v9fn/AH/AH/UF/yH/lD/uv/RH/jT/qv/XH/Hf+uP/en/An/Sn/gz/tf/Rn/Fl/zv/kz/uf/QX/i7/ogx+feDsxIfFOYmLi3cSkzJMTUxJTE9MS0xMzEu8lZiZmJWYn3k/MSXyQmJuYl5ifWJBYmPgwsSixOJGW+CixJPFxYmliWWJ5YkViZWJVIoR82+JQIBQMyXBDKBRuDCmhcCgSigYfioXi4aZQItwcSoZbQqlwaygdbgtlQtlQLjwaGoZGoXFoEpqGx0Kz8HhoHlqEluGJ0Co8GVqHp0Kb8HRoG54J7cKzoX14LnQIz4eO4YXQKXQOXcKLoWt4KXQL3UNq6BF6hpdDr9A79Al9Q7/wSugfXg0DwmthYBgUBofXw5DwRhga3gzDwvAwIrwVRoZRYXQYE8aGcWF8eDtMCO+EieHdMClMDlPC1DAtTA8zwnthZpgVZof3w5zwQZgb5oX5YUFYGD4Mi8LikBY+CkvCx2FpWBaWhxVhZVgVVoc1YW1YF9aHDWFj2BQ2hy1ha/gkbAvbw46wM+wKu8Oe8GnYGz4L+8LnYX/4IhwIfwsHw5fhUPgqHA5fhyPhm3A0fBuOhe/C8fB9OBFOhlPhh3A6/BjOhLPhXPgpnA8/hwvhl3Dx179Z636lbqILIYQQQvyPkfonx3v8m++pf4xLegLA1dvzHP7tcQ0AG3P+fd5b5W2VAICnu3d86J+jcuXU1H8+7lINUcF5AJC4nJ8BLsfLoCU8CW2gBZSAf/766rd6q87n+U/WT94KkOU3OZngcnx5/Zv/7f57q1Fz/nT9eQApBS/nZIbL8eX1S/5v1s/V7E/Wz/zleIDmv8nJCpfjy+sXh8fhGWjzLz8phBBCCCGEEEL8XW9Vrv2fXd9euj7Pay7nZITL8W+vz4UQQgghhBBCCPHf03Oduzz1WJs2LdrL5L/jZLe0SSZXZnKF35iEEEIIIYQQf7nLJ/1XuhIhhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEECL9+v/x78Su9B6FEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEKIK+1/BQAA///apiom")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xe, 0x3, 0x0, 0x0}, 0x90)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x10)
r4 = socket$inet(0x2, 0x3, 0x4)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000440)='blkio.throttle.io_serviced\x00', 0x0, 0x0)
write$cgroup_devices(0xffffffffffffffff, 0x0, 0x8)
prlimit64(0x0, 0xe, &(0x7f0000000140), 0x0)
sched_setscheduler(0x0, 0x0, &(0x7f0000000080))
getpid()
sched_setaffinity(0x0, 0x0, 0x0)
ioctl$BTRFS_IOC_SUBVOL_CREATE(0xffffffffffffffff, 0x5000940e, 0x0)
sched_setscheduler(0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
setsockopt$inet_opts(r4, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5)
setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f00000000c0)='ip6_vti0\x00', 0x10)
sendmmsg$inet(r4, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x1, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00'}, 0x10)

3.699351607s ago: executing program 2 (id=340):
syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8052, &(0x7f0000000000), 0x7, 0x4c6, &(0x7f0000000100)="$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")
mkdir(&(0x7f0000000000)='./control\x00', 0x0)
r0 = open(&(0x7f0000022ff6)='./control\x00', 0x0, 0x0)
getdents64(r0, &(0x7f0000fc4fbe)=""/34, 0x22)
lseek(r0, 0x8, 0x1)
getdents64(r0, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
creat(0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x20000000000002d0, 0x0, &(0x7f0000000600)='syzkaller\x00', 0xa74e, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, 0x2}, 0x90)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0})
ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000003380))
r2 = eventfd2(0x0, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f00000001c0)={0x0, r2})
ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f00000016c0)=""/175, 0x0})
ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000000)={0x0, r2})
ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f00000000c0)=0x1)
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x0, 0x2172, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000000000/0x4000)=nil)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000380)=0x14)
getuid()
fstat(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, <r4=>0x0})
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000003c0)={{{@in=@multicast2, @in=@remote, 0x4e22, 0x6, 0x4e21, 0xd7, 0x2, 0xa0, 0x20, 0x29, r3, r4}, {0x0, 0x7fffffff, 0x1, 0x1, 0x4, 0x0, 0x800, 0x3f}, {0x7fffffff, 0x3, 0x84, 0x7}, 0x0, 0x6e6bb3, 0x0, 0x1, 0x0, 0x2}, {{@in6=@local, 0x0, 0x3c}, 0x2, @in6=@mcast1, 0x3501, 0x0, 0x1, 0x40, 0x0, 0x2, 0x10000}}, 0xe8)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x5, &(0x7f0000000640)=ANY=[@ANYBLOB="0400000000000000000000000000000018230000", @ANYRES32=r0, @ANYBLOB="00000000000004009500000000000000"], &(0x7f0000000100)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$BPF_PROG_ATTACH(0x2, &(0x7f00000005c0)={@map, 0xffffffffffffffff, 0x14, 0x2c, 0xffffffffffffffff, @link_id}, 0x20)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_opts(r5, 0x0, 0x8000000000000c, &(0x7f0000000280)='u', 0x1)

3.596002376s ago: executing program 3 (id=342):
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x13, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240))
nanosleep(0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs={0x1, 0x0, 0x4e23}, 0x6e)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000900)={0x98, 0x0, 0x2, 0x401, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASTER={0x4}, @CTA_EXPECT_MASK={0x44, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x0, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0xffffffd0, 0x4, @local}}}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x40040}, 0x20040001)
r4 = syz_usb_connect(0x0, 0x49, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x98, 0x33, 0x65, 0x40, 0x18ec, 0x3290, 0xc447, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x37, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe, 0x1, 0x0, 0x0, [@cdc_ncm={{0x6, 0x24, 0x6, 0x0, 0x1, 'X'}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x0, 0x2}, {0x6}, [@network_terminal={0x7, 0x24, 0xa, 0x9}]}]}}]}}]}}, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2b, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000100)={0x4, 0x0, 0x3ff}, 0x10}, 0x90)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000980)=ANY=[@ANYBLOB="1400000042000b06"], 0x14}}, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000000540), 0x55, 0x40010101, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0x1f2f, 0xe, 0x0, &(0x7f00000007c0)="9f449487219195806840106a86dd", 0x0, 0xfd33, 0x0, 0x0, 0x63, &(0x7f0000000700), &(0x7f0000000480)="675901b49f4914256e6e8d2aa26c9567dbec07a38cc0bec64eeba31aad6c0da339f977f6873cf1c73e0218cc94c8c0b4b438ca1e7f4987540d92492448791407e6f37a521ba9b42d969a3ce903efb9a39fa05bdbe7424e36a542c3b00485fcef3be43c", 0x0, 0x0, 0x2}, 0x50)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$printer(r4, &(0x7f00000001c0)={0x14, &(0x7f0000000380)={0x40, 0x30, 0xc6, {0xc6, 0x30, "4a5192fa1db0128b7103b4b123eabe0cfc95d68e9aaada854a425a0ac0149a7afcb9bf7c32e4948e0f305b6c437f4476447f81015a3a461008eab1f296b94fd712037641b08f59a34bec2b8d45b825cda809bdc6392f1a2c8288ada2eca2ba5b146e6132b9cf778abfefbbc53239739c6d0a746683c58805e2f4f604e6f1e1f34a5c69bbf4cdec5b3cca456195ea7779a0f5f490d5395ff14e757bb0d4c5f2fbe0a2e840902ba6f6745c014ac5274dbd5b0cfeb661d15d3f6659a6b684c4e1b6c1474d16"}}, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x827}}}, &(0x7f0000000d80)={0x34, &(0x7f0000000580)=ANY=[@ANYBLOB="401684000000e67ba74347e45f81aa70f13e2b210667d3daccc11e48015caaa69bea6cd99862193e275bf0e22a71220ea952fc859cb168d198a8c5914ec65692dff4ed021d39bdd445aa8d7c58a6c3529c41473f0c293328829b82825bafeb3317912227857fb3667c4d7d7a121b69559252c333aa2c0ce5412c325db7d221b92b5b3d4248d5bd03a49d"], &(0x7f0000000300)={0x0, 0xa, 0x1}, &(0x7f0000000640)={0x0, 0x8, 0x1, 0xc}, &(0x7f0000000680)={0x20, 0x0, 0x42, {0x40, "e27dd86582ffa123214025d69e00fe7eccc616fdaa79c01c3832a3dcf99012c6f88b84d1c8111fd94e41a0353ad68551d44a1695311c23974c1bef643c0d3f70"}}, &(0x7f0000000b80)={0x20, 0x1, 0x1, 0x2}, &(0x7f0000000bc0)={0x20, 0x0, 0x1, 0x8}})
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
timerfd_create(0x8, 0x80800)
dup(r7)
r8 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x232500, 0x0)
ioctl$TIOCSETD(r8, 0x5423, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)

3.41220296s ago: executing program 1 (id=343):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = gettid()
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2000022, &(0x7f0000000080), 0x1, 0x53a, &(0x7f0000000a80)="$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")
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
syz_open_dev$evdev(0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff)
mount$bind(0x0, &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x0, 0x0)
r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x89901)
move_mount(r5, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000440)='./file0\x00', &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x10a5840, 0x0)
rt_sigaction(0x1a, &(0x7f0000000080)={&(0x7f0000000440)="c4a23d0643b9f0430fc079fff3460f1ec9f081035c000000f30faed446a900000000660f7ed238c461915492db8876efa1efa12eb22d233333f30fa7d0", 0x98000004, 0x0}, 0x0, 0x8, &(0x7f0000000200))
rt_sigsuspend(&(0x7f0000000000), 0x8)
tkill(r1, 0x16)
syz_genetlink_get_family_id$ieee802154(0x0, r0)
sendmsg$IEEE802154_LLSEC_DEL_DEV(0xffffffffffffffff, 0x0, 0x0)
r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_FLUSHABLE(r6, 0x112, 0x8, &(0x7f0000000180)=0x1, 0x4)
syz_usb_connect$uac1(0x0, 0xa5, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0)

3.30192471s ago: executing program 2 (id=344):
prctl$PR_SET_DUMPABLE(0x4, 0x3)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef)
r0 = syz_usb_connect(0x0, 0x10b, &(0x7f0000000000)=ANY=[@ANYBLOB="05010900b24b6a10e6040300770100000001090224000b010000000904000302ccd4280009050b02000000040009058a02"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
dup(0xffffffffffffffff)
syz_usb_control_io(r0, 0x0, 0x0)

2.757139425s ago: executing program 0 (id=345):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB], 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000580)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x804, &(0x7f00000000c0)={[{@shortname_win95}, {@shortname_lower}, {@utf8}, {@shortname_win95}, {@shortname_mixed}, {@utf8no}, {@rodir}, {@utf8no}, {@fat=@check_normal}, {@fat=@codepage={'codepage', 0x3d, '775'}}, {@fat=@check_strict}, {@utf8no}, {@numtail}, {@iocharset={'iocharset', 0x3d, 'iso8859-6'}}, {@shortname_win95}, {@shortname_winnt}]}, 0x1, 0x276, &(0x7f00000003c0)="$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")
syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x4800, 0x0, 0x2, 0x0, &(0x7f0000000000))
chdir(&(0x7f00000003c0)='./bus\x00')
r4 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
getdents(r4, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x0, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r5, 0xae01, 0x300)

2.268090355s ago: executing program 4 (id=349):
setgroups(0x0, 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
r0 = socket$netlink(0x10, 0x3, 0x14)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc)
socket$packet(0x11, 0x3, 0x300)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
madvise(&(0x7f0000491000/0x4000)=nil, 0x4000, 0x10)

2.166657243s ago: executing program 4 (id=350):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x4, 0x0, 0x1}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=<r1=>r0, @ANYBLOB="0000000000000000b70800000000e0ff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xd, &(0x7f0000000d40)=ANY=[@ANYBLOB="180000000000e3ff000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r2}, 0x10)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002a20702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001380)={&(0x7f00000013c0)='writeback_pages_written\x00', r3}, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000047c0)=@ipv6_getmulticast={0x14, 0x3a, 0x101}, 0x14}}, 0x0)
recvmmsg(r4, &(0x7f0000002500)=[{{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000000200)=""/98, 0x62}], 0x2}}], 0x1, 0x0, 0x0)
mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0, 0x0)
mount_setattr(0xffffffffffffff9c, 0x0, 0x0, &(0x7f0000000000), 0x48)

2.156218304s ago: executing program 4 (id=351):
r0 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10)
r1 = socket$tipc(0x1e, 0x5, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0)
recvmmsg(r1, &(0x7f0000004a00)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001400)=""/119, 0x77}], 0x1, &(0x7f0000000800)=""/177, 0xb1}}], 0x1, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000008, 0x810, r1, 0x0)
r3 = socket$packet(0x11, 0x3, 0x300)
r4 = socket$igmp6(0xa, 0x3, 0x2)
getsockopt$MRT6(r4, 0x29, 0x1, 0x0, &(0x7f0000000040))
setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000080), 0x62)
syz_open_dev$usbfs(&(0x7f00000000c0), 0xff, 0x80)

2.101130068s ago: executing program 4 (id=352):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x7, 0x2, 0x4, 0x5}, 0x48)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001100)={{r0, <r1=>0xffffffffffffffff}, &(0x7f0000001080), &(0x7f00000010c0)='%pI4   \x00'}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x0, 0x4, 0x0, 0x0}, 0x90)
syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x0)
r2 = syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a010000190581"], 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_disconnect(r2)
syz_usb_connect(0x0, 0x5cc, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x19, 0x0})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180))
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x3, 0x4, 0x4, 0x401}, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x10000}, 0x48)
syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0)
syz_open_dev$usbmon(0x0, 0x0, 0x0)
syz_open_procfs(0x0, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket(0x0, 0x3, 0x0)
r3 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r3, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="020300000e0000002abd70000000000005000600000000000a0000000000000000000000000000000000000000000000000000000000000002000100000000000000030c0000000005000500000000000a00000000000000ff0100000000000000000000000000010000000000000000"], 0x70}, 0x1, 0x7}, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r1, <r4=>0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000300)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018910000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000010000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f00000007c0)='skb_copy_datagram_iovec\x00', r5}, 0x10)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000001f40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f00000007c0)='skb_copy_datagram_iovec\x00', r6}, 0x10)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0))
pipe(&(0x7f0000000080))
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/net\x00')
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f0000000a80)=ANY=[@ANYBLOB="180000000000002000000000ff000000850000000f000000850000000500000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r7}, 0x10)
socket(0x10, 0x3, 0x0)

1.905911194s ago: executing program 0 (id=353):
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10)
socket$xdp(0x2c, 0x3, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0)
openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socket$tipc(0x1e, 0x0, 0x0)
unshare(0x400)
ppoll(&(0x7f0000000480)=[{r1}, {r0}], 0x2, 0x0, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@nfs_export_on}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c})
r3 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0)
lseek(r3, 0xfffffffffffffffc, 0x1)

1.687484412s ago: executing program 3 (id=354):
r0 = syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x1810714, &(0x7f0000000400)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40000}}, {@init_itable_val}, {@nolazytime}, {@jqfmt_vfsv1}, {@prjquota}, {@init_itable_val={'init_itable', 0x3d, 0x7fff}}, {@grpquota}, {@errors_continue}, {@errors_continue}, {@test_dummy_encryption}]}, 0x1, 0x472, &(0x7f0000000c00)="$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")
gettid()
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
r2 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00'})
r3 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[], 0x448}, 0x1, 0x0, 0x0, 0x4040000}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_SET_BEACON(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000540)={&(0x7f0000000300)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000128bd7000fcdbdf250e00000008000300", @ANYRES32=0x0, @ANYRESOCT=r0], 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xb, &(0x7f0000000180)=ANY=[@ANYRESHEX=r5], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x10)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/fscaps', 0x202, 0x3e)
socket$inet_udp(0x2, 0x2, 0x0)
r9 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$inet_int(r9, 0x0, 0x17, &(0x7f0000000040), &(0x7f00000010c0)=0x4)
syz_open_dev$tty1(0xc, 0x4, 0x1)
syz_mount_image$ext4(&(0x7f00000004c0)='ext2\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000c00)={[], [{@dont_measure}, {@dont_hash}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@dont_appraise}, {@appraise_type}, {@measure}]}, 0x3, 0x4fd, &(0x7f00000012c0)="$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")
iopl(0x3)
madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2)
lsetxattr$trusted_overlay_upper(0x0, &(0x7f00000000c0), &(0x7f0000000040)=ANY=[], 0xfe37, 0x0)

1.014889267s ago: executing program 0 (id=355):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000006000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000700)={{r0, <r2=>0xffffffffffffffff}, &(0x7f0000000680), &(0x7f00000006c0)='%+9llu \x00'}, 0x20)
syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000))
r3 = accept4$tipc(0xffffffffffffffff, 0x0, &(0x7f0000000300), 0x80800)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x2d41, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x761ec000)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r7 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000240)=ANY=[@ANYRES64=r2, @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYBLOB="147249ee5d9e1663d402ae3c318a8a9040d6cdce68", @ANYRES32=r6, @ANYRESDEC=0x0])
read$FUSE(0xffffffffffffffff, &(0x7f0000004200)={0x2020}, 0x2020)
write$FUSE_NOTIFY_STORE(r7, &(0x7f0000000e00)=ANY=[@ANYBLOB="28000000040005000000000000000000010400"/40], 0x28)
ioctl$SIOCGETLINKNAME(r3, 0x89e0, &(0x7f0000000340)={0x0, 0x1})
pipe2$9p(&(0x7f0000000180), 0x0)
epoll_create1(0x80000)
r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip6_tables_matches\x00')
read$FUSE(r8, &(0x7f0000007700)={0x2020}, 0x2020)
pread64(r8, &(0x7f0000004c40)=""/103, 0x67, 0x0)

820.020834ms ago: executing program 3 (id=356):
syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x458, 0x5011, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0)
setreuid(0xee00, 0x0)
syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB='iocharset=cp865,utf8=1,utf8=0,utf8=1,iocharset=utf8,sys_immutable,uni_xlate=0,uni_xlate=1,uni_xlate=1,gid=', @ANYRESHEX, @ANYBLOB='A\x00'], 0x1, 0x193, &(0x7f0000000b00)="$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")
open_tree(0xffffffffffffff9c, 0x0, 0x0)
mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x18d811, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r3}, 0x0, &(0x7f00000002c0)}, 0x20)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10)
mount$incfs(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x480, 0x0)

366.865861ms ago: executing program 1 (id=357):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000580)='./file0\x00', 0x0, 0x223216, 0x0)
syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file1\x00', 0x1002801, &(0x7f0000000680)=ANY=[], 0x2, 0x1e7, &(0x7f00000001c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYRESHEX=r0], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, 0x2, r0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000000c0)='kfree\x00'}, 0x10)
socket$can_bcm(0x1d, 0x2, 0x2)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
syz_emit_ethernet(0x0, 0x0, 0x0)
syz_emit_ethernet(0xfe, &(0x7f0000000800)=ANY=[@ANYRES32=0x41424344, @ANYBLOB="8000000090780000080a0000000000000000010502080a0000000000000000051a000000000000000000000000000000080000000000000000000cda16dde4790cfecea6cc1e0c100000"], 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1f, 0x1, 0x3, 0x7, 0x20, 0xffffffffffffffff, 0x1ff, '\x00', 0x0, r0, 0x1, 0x1, 0x3}, 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00'}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10)
syz_open_procfs(r2, &(0x7f0000000040)='stack\x00')
pwritev(0xffffffffffffffff, &(0x7f0000000040)=[{0x0}], 0x1, 0x0, 0x0)
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10)
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='net/igmp6\x00')
preadv(r5, &(0x7f00000007c0), 0x0, 0x4fe, 0x0)
open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x0)

285.186288ms ago: executing program 1 (id=358):
r0 = syz_io_uring_setup(0x2633, &(0x7f00000006c0), &(0x7f0000000740), &(0x7f0000000780))
io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0x2, &(0x7f0000002d40)={0x0, 0x0, 0x0, 0x0}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000010700"/16, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001180)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x12, 0x8, 0x3, 0x7cb4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48)
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x2030, &(0x7f0000000500)=ANY=[@ANYBLOB="d98e55243daa168aa6340a315a449b578a50760f11900749aca2ebc2d403e77a2782e9e0a4ff4e70860888e20361a7a6c58e126c2995bdda7c24b5f9b1fb219062d918a3cc7949d5637467a704f463ffe9da3a2e179a8ba11450943ce72ad046b04ae31a922c798f60a95b5ece75463e9333c9dd4b238cd3c16c2f09eb2952a4d7522d900acdb2ea81b60e7457b022d1de40038927e56a111d3166eeceefa309c67ea959e6363782e9a869a8522df3389a7c7c89c333c84ca4c6b5bd94b72e5e757811cedca3acdc0b0e98721e14"], 0x2, 0x21e, &(0x7f0000000a40)="$eJzs3T9rU18YB/Cn/36/UJB0EIoieMXFKbQV9xSpIAYUJYNOFpuiNLFgIKBD6+ab0Lego6vgIK6+ARGkCi526yBE6o2NrYm9UpMr9vNZ8pB7vvc+5ybkTDn35onGytJqc3lzcyMKhZEYL0c5tkZiKkZjLFIPAwD4l2y12/G5ncq7FwBgOKz/AHD4ZFz/rwyxJQBgwDKu/6MRhSF2BQAM0rXrNy7NVyoLV5OkENF41Kq2qulrenx+Oe5EPWoxE8X4EtHekdYXLlYWZpJtH6ai2ljv5Ndb1bHd+dkoxlTv/GyS2p2fiMlO/u1k1GIuinG0d36uZ/6/OHP6h+uXohhvbsVq1GMptrPd/Npskpy/XNmT///bOAAAAAAAAAAAAAAAAAAAAAAAGIRSsqPn/j2lUr/jaT77/kB79+cZj+Pj+c4dAAAAAAAAAAAAAAAAAAAA/hbN+w9WFuv12r1fFXdfP32535iMxUjnugc9z8GLI6feP+43Zuz37s+fLV6czPO2ZCxebdw+drY5fS63NiYi4ud3+n61PhUjBtTPs1w/i++z3nfw9JPy4vO1dx+znnnoP0UAAAAAAAAAAAAAAAAAAHDodf/0m3cnAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJCf7vP/B1fkPUcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPgaAAD//3inndU=")
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_mount_image$ext4(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
syz_extract_tcp_res(&(0x7f00000001c0), 0x200, 0x40)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1800b2dcb05380000000", @ANYRES8], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f00000007c0)=ANY=[@ANYBLOB="05000000000000007111b000000006008510000002000000850000002a0000418b976229fd36dc0095000000000000000698a766c30d28ffc9216b5a0c3bd12fd0427f5e9f0704f8659963aa1955df35bd3e024abcc669b3efe9ce208a7c18cdde295e4559bcc3e157e7a80d10fba623a89773c1f2f1cc607e8c10960da99b975a8356548e81aa430cb55902710b395cd9cdf19be78bc22b8f12f8c1786760e3d557f055dc4fb34937da6a254538f4da9842dbc7eda4a20b"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x70)
bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @private=0xa010102}, 0x10)
clock_gettime(0x0, &(0x7f0000000180))

268.911238ms ago: executing program 4 (id=360):
setgroups(0x0, 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
r0 = socket$netlink(0x10, 0x3, 0x14)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
madvise(&(0x7f0000491000/0x4000)=nil, 0x4000, 0x10)

209.060784ms ago: executing program 0 (id=361):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x4, 0x0, 0x1}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=<r1=>r0, @ANYBLOB="0000000000000000b70800000000e0ff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xd, &(0x7f0000000d40)=ANY=[@ANYBLOB="180000000000e3ff000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r2}, 0x10)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002a20702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001380)={&(0x7f00000013c0)='writeback_pages_written\x00', r3}, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000047c0)=@ipv6_getmulticast={0x14, 0x3a, 0x101}, 0x14}}, 0x0)
recvmmsg(r4, &(0x7f0000002500)=[{{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000000200)=""/98, 0x62}], 0x2}}], 0x1, 0x0, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0, 0x0)
mount_setattr(0xffffffffffffff9c, 0x0, 0x0, &(0x7f0000000000), 0x48)

137.896839ms ago: executing program 0 (id=362):
r0 = socket$netlink(0x10, 0x3, 0x8ab0117d794ff86)
setsockopt$sock_int(r0, 0x1, 0x8, 0x0, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/raw\x00')
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
preadv(r1, &(0x7f0000000540)=[{&(0x7f0000000200)=""/48, 0x30}, {&(0x7f00000021c0)=""/4096, 0x1000}, {&(0x7f0000000380)=""/136, 0x88}, {&(0x7f0000000640)=""/250, 0xfa}, {&(0x7f0000000300)=""/46, 0x2e}], 0x5, 0xffffff81, 0xffffffff)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001280)={0x0, 0xffffffffffffffff, 0x0, 0x81, &(0x7f0000001480)='\x00\x00\x00\x00\x00\x00\x00\xe7\xa8j\x8b\x8fWZ^\xef\x10J\xbaT\xf6\x8ff`g\xbf\xb2H\xceU\x82\a\x18\xd0\x87\x17\xe4\xff\xdb\x8f,L\xdb\xb5\xf1\xd1\'zr\x8aN\x9ffz{\x83\xf2N\xf4#\x14yF\xc8\xba&\x9c\x8e;6=\xe0d[\xbc\xfd\xfb4\x7f\xa1\x05\x90\xb8\xc8\x04\x9d-\xeb~\x19\x93\xb2\x9bz]^\xa6w\x01\x84\x99)s2\xdbBW\a1A\xa8\x10D>Xz\xdcH\x03h\xf1\xd9\xc0\x1b\xfd\x05\xe0\xebY'}, 0x30)
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x2000480, &(0x7f0000000080), 0x1, 0x7a9, &(0x7f0000001a00)="$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")
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_sys\x00', 0x275a, 0x0)
r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0)
r4 = eventfd(0x4)
ioctl$VHOST_SET_LOG_FD(r3, 0x4004af07, &(0x7f0000000240)=r4)
ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f0000000040)={0x1, r4})
ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0})
ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000980))
ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74})
ioctl$VHOST_SET_LOG_BASE(r3, 0x4008af04, &(0x7f0000000500)=&(0x7f0000000340))
ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000000)=0x1)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4008004)
write$binfmt_script(r2, &(0x7f0000000040)={'#! ', './file0'}, 0xb)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
clock_gettime(0x0, &(0x7f0000000340))
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r6 = openat$cgroup_ro(r5, &(0x7f00000000c0)='cpu.stat\x00', 0x275a, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
preadv(r6, &(0x7f0000000100), 0x0, 0x3, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1806000000000000"], &(0x7f0000000000)='syzkaller\x00'}, 0x90)

135.720659ms ago: executing program 2 (id=363):
syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1810714, &(0x7f0000000440)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x1}}, {@init_itable_val}, {@nolazytime}, {@grpid}, {@prjquota}, {@norecovery}, {@lazytime}, {@errors_continue}, {@auto_da_alloc}, {@test_dummy_encryption}]}, 0xff, 0x468, &(0x7f0000000780)="$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") (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async, rerun: 32)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000500)={0x0, <r0=>0x0}) (rerun: 32)
sched_setscheduler(r0, 0x1, &(0x7f0000000080)=0x4) (async, rerun: 32)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x9, &(0x7f0000000400)=0x80, 0x4) (rerun: 32)
r1 = getpid() (async)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
setuid(0x0) (async)
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000180)={@loopback={0xfec0ffff00000000}, 0x0, 0x0, 0x3}, 0x20)
socket$netlink(0x10, 0x3, 0x0) (async)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x58, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {}, {0xfff3}}, [@filter_kind_options=@f_fw={{0x7}, {0x10, 0x2, [@TCA_FW_CLASSID={0x8}, @TCA_FW_MASK={0x8}, @TCA_FW_INDEV={0x14, 0x3, 'bridge0\x00'}, @TCA_FW_ACT={0x4}]}}]}, 0x58}}, 0x0)
syz_emit_ethernet(0xdb, &(0x7f0000000600)={@multicast, @dev, @val, {@ipv4={0x800, @dccp={{0x5, 0x4, 0x0, 0x0, 0xc5, 0x0, 0x0, 0x0, 0x21, 0x0, @broadcast, @dev={0xac, 0x14, 0x14, 0x20}}, {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, '=.R', 0x0, "b09809"}, "d8c019446ece7d542e4c4cbc2a970fb5c02b695ad203fbfab29527fe64380091d5ab20a787f9d8ca1f4bc87857a555cfa9473a06a5f88931a7e8c2c556293dc526bc3e40c8329589f1acf46b7ff2cfbfd6c1d8abfa5c6a1157a4c01a320641bccb5f12a13695f507973c5db5425aa19f79ec5a543f3675b47da58f4e8dddce63fde335b60fc63c7b0bdd6f603d7f92da15264bbd7d2fceac5449c7a3ce4ca43602"}}}}}, 0x0)
setitimer(0x0, 0x0, 0x0) (async)
r5 = socket$unix(0x1, 0x1, 0x0) (async)
lstat(&(0x7f0000000340)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000380)) (async, rerun: 32)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x21, 0x3, 0x2b0, 0x268, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private2, @local, [], [], 'geneve1\x00', 'syzkaller1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48}}, {{@ipv6={@empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'erspan0\x00', 'veth1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x310) (rerun: 32)
r6 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r7 = dup(r6)
ioctl$PTP_EXTTS_REQUEST2(r7, 0xc0603d06, &(0x7f0000000000)) (async)
bind$unix(r5, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)

37.765298ms ago: executing program 2 (id=364):
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x0, 0x0)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x2d)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xffffff90, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x2c}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x50}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x4, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x70)

0s ago: executing program 4 (id=365):
socket$netlink(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010026bd7000000000001400080008000012000008000000000000000000"], 0x24}}, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[], &(0x7f0000000340)='syzkaller\x00'}, 0x90)
syz_emit_ethernet(0x26, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaa0200000000000000a82b0081001000000c00000000020200001731e664032d30a7"], 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r7, 0x81f8943c, &(0x7f0000000880))
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r7, 0x18000000000002a0, 0xfe, 0x0, &(0x7f0000000100)="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", 0x0, 0x26, 0x60000000, 0xb2, 0xb, &(0x7f00000004c0)="ce3860a3f62eb212070a0ca6cc35f600df5be2543e9bca7cae3559c1dd9c40b86999530a6c53e9b7132a31ef86f84c32ffbc7a4298c26ad2b14162bc6aced464313502db3fc98ffdc38b7800b40b8e7e71324d1d3844869436cdd58a55e7bd380165733d3326e23d4d9f812e88c70061866ed3d1790e73983851cef3093a1c5b082ebda828a7224ba1dce058d169b50c91d34f766c6861ad9e617e2f9732b000024d647e290303ab58d6898b17ac18ac4fc4", &(0x7f0000000440)="f5215660f92418f7223ffe", 0x0, 0x0, 0x458}, 0x50)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="ed00000000008e00b708000000000010f35cd2927799c3087c0900000000000000009be4a414afb20500de00074228623acd69b146636f75adf9f520b3bacb1fa3cf5b9fda16b6da0980cd58f6d98631c277608fd4ea8dd351b578d48a784631e041cbf868495d9bb623cf8a3f32036b000000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x790adf78e4095ab)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000140), r8)
syz_emit_ethernet(0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa12000000000086dd60922ff50018210000000000000000000000fffffffffffffe8000000000000000000000000000aa000000006600fc00090000000401907800114f8400800000"], 0x0)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
getegid()
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r9}, 0x2d)

kernel console output (not intermixed with test programs):

7] bridge0: port 1(bridge_slave_0) entered forwarding state
[   38.745716][    T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   38.753269][    T6] bridge0: port 1(bridge_slave_0) entered disabled state
[   38.760598][    T6] bridge0: port 2(bridge_slave_1) entered disabled state
[   38.772855][  T324] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   38.781185][  T324] bridge0: port 1(bridge_slave_0) entered blocking state
[   38.788031][  T324] bridge0: port 1(bridge_slave_0) entered forwarding state
[   38.800178][  T295] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   38.810222][  T295] usb 5-1: New USB device found, idVendor=0e8d, idProduct=2000, bcdDevice=21.c6
[   38.819122][  T295] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   38.828049][   T19] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   38.828104][  T295] usb 5-1: config 0 descriptor??
[   38.839285][   T19] bridge0: port 2(bridge_slave_1) entered blocking state
[   38.847598][   T19] bridge0: port 2(bridge_slave_1) entered forwarding state
[   38.860647][  T410] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   38.868491][  T410] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   38.900401][  T295] cdc_acm 5-1:0.0: skipping garbage
[   38.905454][  T295] cdc_acm 5-1:0.0: invalid descriptor buffer length
[   38.924391][  T577] device veth0_vlan entered promiscuous mode
[   38.934413][  T410] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   38.942958][  T410] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   38.951219][  T410] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   38.958607][  T410] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   38.958878][  T294] EXT4-fs (loop3): unmounting filesystem.
[   38.971671][  T314] usbhid 2-1:0.0: can't add hid device: -71
[   38.977552][  T314] usbhid: probe of 2-1:0.0 failed with error -71
[   38.979467][  T577] device veth1_macvtap entered promiscuous mode
[   38.993812][  T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   38.994247][  T314] usb 2-1: USB disconnect, device number 3
[   39.013824][  T410] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   39.028542][  T324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   39.042464][   T28] kauditd_printk_skb: 27 callbacks suppressed
[   39.042502][   T28] audit: type=1400 audit(1722676820.379:195): avc:  denied  { mount } for  pid=577 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[   39.074276][  T336] device bridge_slave_1 left promiscuous mode
[   39.089932][  T336] bridge0: port 2(bridge_slave_1) entered disabled state
[   39.114934][  T336] device bridge_slave_0 left promiscuous mode
[   39.121404][  T336] bridge0: port 1(bridge_slave_0) entered disabled state
[   39.129536][  T336] device veth1_macvtap left promiscuous mode
[   39.137796][  T336] device veth0_vlan left promiscuous mode
[   39.141842][   T28] audit: type=1400 audit(1722676820.419:196): avc:  denied  { write } for  pid=550 comm="syz.4.58" name="hwrng" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1
[   39.167000][   T28] audit: type=1400 audit(1722676820.419:197): avc:  denied  { mounton } for  pid=577 comm="syz-executor" path="/dev/binderfs" dev="devtmpfs" ino=370 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1
[   39.267008][  T588] loop2: detected capacity change from 0 to 1024
[   39.290238][  T470] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[   39.303430][  T588] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[   39.415652][  T596] device pim6reg1 entered promiscuous mode
[   39.530125][  T470] usb 1-1: Using ep0 maxpacket: 32
[   39.600122][    T6] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[   39.730182][  T470] usb 1-1: config 129 has an invalid interface number: 151 but max is 3
[   39.738516][  T470] usb 1-1: config 129 has an invalid interface number: 110 but max is 3
[   39.747185][  T470] usb 1-1: config 129 contains an unexpected descriptor of type 0x2, skipping
[   39.756414][  T470] usb 1-1: config 129 has an invalid interface number: 134 but max is 3
[   39.764908][  T470] usb 1-1: config 129 has an invalid interface number: 193 but max is 3
[   39.773544][  T470] usb 1-1: config 129 has no interface number 0
[   39.779681][  T470] usb 1-1: config 129 has no interface number 1
[   39.786171][  T470] usb 1-1: config 129 has no interface number 2
[   39.792447][  T470] usb 1-1: config 129 has no interface number 3
[   39.798634][  T470] usb 1-1: config 129 interface 151 altsetting 129 endpoint 0x7 has invalid maxpacket 1024, setting to 64
[   39.936344][  T470] usb 1-1: config 129 interface 151 altsetting 129 endpoint 0xD has invalid maxpacket 1024, setting to 64
[   39.949738][  T470] usb 1-1: config 129 interface 151 altsetting 129 has an invalid endpoint with address 0xC1, skipping
[   39.960845][  T470] usb 1-1: config 129 interface 151 altsetting 129 endpoint 0x84 has invalid wMaxPacketSize 0
[   39.971053][  T470] usb 1-1: config 129 interface 151 altsetting 129 has a duplicate endpoint with address 0xE, skipping
[   39.971237][    T6] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[   39.981993][  T470] usb 1-1: config 129 interface 151 altsetting 129 bulk endpoint 0xA has invalid maxpacket 1023
[   39.982022][  T470] usb 1-1: config 129 interface 151 altsetting 129 has an invalid endpoint with address 0x0, skipping
[   39.982043][  T470] usb 1-1: config 129 interface 151 altsetting 129 has 10 endpoint descriptors, different from the interface descriptor's value: 9
[   39.982074][  T470] usb 1-1: config 129 interface 110 altsetting 136 has a duplicate endpoint with address 0xA, skipping
[   39.982096][  T470] usb 1-1: config 129 interface 110 altsetting 136 has a duplicate endpoint with address 0xB, skipping
[   39.982117][  T470] usb 1-1: config 129 interface 110 altsetting 136 has a duplicate endpoint with address 0xD, skipping
[   39.982137][  T470] usb 1-1: config 129 interface 110 altsetting 136 has a duplicate endpoint with address 0x4, skipping
[   39.982158][  T470] usb 1-1: config 129 interface 110 altsetting 136 has a duplicate endpoint with address 0x9, skipping
[   40.002556][    T6] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[   40.026402][  T470] usb 1-1: config 129 interface 110 altsetting 136 has a duplicate endpoint with address 0x4, skipping
[   40.137286][  T609] loop3: detected capacity change from 0 to 16
[   40.146936][  T609] erofs: (device loop3): erofs_read_inode: unsupported chunk format 7fff of nid 36
[   40.201482][  T470] usb 1-1: config 129 interface 110 altsetting 136 endpoint 0x8 has invalid maxpacket 512, setting to 64
[   40.214119][  T470] usb 1-1: config 129 interface 110 altsetting 136 endpoint 0xC has invalid maxpacket 1023, setting to 64
[   40.226979][  T470] usb 1-1: config 129 interface 134 altsetting 7 has a duplicate endpoint with address 0x8, skipping
[   40.237767][    T6] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   40.238320][  T470] usb 1-1: config 129 interface 134 altsetting 7 endpoint 0x1 has invalid maxpacket 512, setting to 64
[   40.256683][  T470] usb 1-1: config 129 interface 134 altsetting 7 has a duplicate endpoint with address 0xC, skipping
[   40.268534][  T470] usb 1-1: config 129 interface 134 altsetting 7 endpoint 0x2 has invalid wMaxPacketSize 0
[   40.278560][  T470] usb 1-1: config 129 interface 134 altsetting 7 endpoint 0x6 has invalid maxpacket 512, setting to 64
[   40.289613][  T470] usb 1-1: config 129 interface 193 altsetting 131 has a duplicate endpoint with address 0x4, skipping
[   40.294005][    T6] snd-usb-audio: probe of 3-1:27.0 failed with error -2
[   40.300671][  T470] usb 1-1: config 129 interface 193 altsetting 131 has an invalid endpoint with address 0x80, skipping
[   40.313783][  T380] udevd[380]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   40.318370][  T470] usb 1-1: config 129 interface 193 altsetting 131 has a duplicate endpoint with address 0xD, skipping
[   40.360276][  T470] usb 1-1: config 129 interface 193 altsetting 131 has a duplicate endpoint with address 0xF, skipping
[   40.380084][  T470] usb 1-1: config 129 interface 193 altsetting 131 has a duplicate endpoint with address 0xD, skipping
[   40.382575][   T28] audit: type=1326 audit(1722676821.719:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=612 comm="syz.3.70" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f18617779f9 code=0x0
[   40.400094][  T470] usb 1-1: config 129 interface 193 altsetting 131 has an invalid endpoint with address 0x0, skipping
[   40.424064][  T470] usb 1-1: config 129 interface 151 has no altsetting 0
[   40.430852][  T470] usb 1-1: config 129 interface 110 has no altsetting 0
[   40.437577][  T470] usb 1-1: config 129 interface 134 has no altsetting 0
[   40.444947][  T470] usb 1-1: config 129 interface 193 has no altsetting 0
[   40.540895][  T615] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[   40.620188][  T470] usb 1-1: New USB device found, idVendor=10ac, idProduct=0102, bcdDevice=5a.04
[   40.629066][  T470] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   40.636951][  T470] usb 1-1: Product: ᎜듶尸튞⵫㓦鱒⏧뛃됹죋ꂰ砲鵖ി⊪Ⰹ㮿앎㋟Ḵ㝑ﻇ弄춶ꎾ⊄跨삧、ㅣꩭ뀥뺀밵汰䣤ᖿ铊ᐶ੿얘줶ꢏ鲄⯎꿥睆ꓰ༳飒㨟泔ℸꞎꍉጼ遙买㟢췯풡똴髐䫭促⑙믺㏝劏ﵥⷲ⌥컘‣␉㣵ꨌ脐㾔햲놦걨㮛腅괣丙܉៌
[   40.667767][  T470] usb 1-1: Manufacturer: 㕯蠍㙗㕞鼴酸䢾㩄켩೉䅢倉焴ﲻ꣧㨙欵ꭾ筼㋈錭諣뀮裾䙳녲챇뤏霧䄞፴暝녀獓嬧뙆綗Ᏼဓ傀펊떨짷⦭䲨賺澮궈왯⮄垡率᧭磷ఆᾇ修ᰎ笢ଐ摟撗Ӷ젔ʉ퓦暑珔罭깏쀁ᬨ嗽貰↠䤜箩㧏珅땟撻⹓ꊳ먛销⮖錯
[   40.738235][  T470] usb 1-1: SerialNumber: ▌ᡰֳ㯥汲ꊿ䝴꣟ꍆ棕Ꭸ哭㘈쑣뎽玈⸥욼쭪੄䴁㗧䢖ꅎ軄淹Ｗ䫡橛뾽勁럵큊ꮞ쐳拤壚陨噤⡔⺷喨샖惓좐⠧믔ᇿ랃흈Ｅ㭎┛䡓䖌숂ⱽ婓蠻뿿Ꮇ㏼὿旃Ե衩얺ࡋᳵ㫾묪䀓퓩붙쉸㳃㗣愉ⓞ캋ⱖ䪓얷졚ᚮ໥蕞ꞙ豏鿌閎뢶薻滶뷄襑
[   40.758627][  T619] loop1: detected capacity change from 0 to 1024
[   40.790248][  T584] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[   40.815834][  T619] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[   40.839059][   T28] audit: type=1400 audit(1722676822.169:199): avc:  denied  { create } for  pid=618 comm="syz.1.71" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   40.881341][   T28] audit: type=1400 audit(1722676822.189:200): avc:  denied  { write open } for  pid=618 comm="syz.1.71" path="/17/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   40.884199][  T619] overlayfs: unrecognized mount option "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" or missing value
[   40.948223][   T28] audit: type=1400 audit(1722676822.219:201): avc:  denied  { ioctl } for  pid=618 comm="syz.1.71" path="/17/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop1" ino=18 ioctlcmd=0x8912 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   41.029566][   T28] audit: type=1400 audit(1722676822.219:202): avc:  denied  { mounton } for  pid=618 comm="syz.1.71" path="/17/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   41.075242][  T292] EXT4-fs (loop1): unmounting filesystem.
[   41.084226][  T295] usb 5-1: USB disconnect, device number 3
[   41.247809][  T584] loop0: detected capacity change from 0 to 512
[   41.367968][  T470] usb 1-1: USB disconnect, device number 4
[   41.524967][  T584] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a802c018, mo2=0003]
[   41.544750][  T584] System zones: 0-2, 18-18, 34-35
[   41.550699][  T584] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[   41.559600][  T584] ext4 filesystem being mounted at /9/file0/file0 supports timestamps until 2038 (0x7fffffff)
[   41.674641][  T632] loop3: detected capacity change from 0 to 40427
[   41.681173][  T582] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[   41.689079][  T632] F2FS-fs (loop3): Invalid SB checksum offset: 0
[   41.695741][  T632] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock
[   41.709733][  T632] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437)
[   41.736673][  T632] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0
[   41.743650][  T632] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[   42.219626][  T647] loop4: detected capacity change from 0 to 1024
[   42.344463][  T647] EXT4-fs: Ignoring removed nomblk_io_submit option
[   42.354814][  T647] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   42.367638][  T647] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[   42.368195][   T19] usb 3-1: USB disconnect, device number 4
[   42.387418][  T647] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[   42.399528][   T28] audit: type=1400 audit(1722676823.729:203): avc:  denied  { append } for  pid=646 comm="syz.4.76" path="/17/bus/memory.events" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   42.482580][  T577] EXT4-fs (loop2): unmounting filesystem.
[   42.505803][  T294] syz-executor: attempt to access beyond end of device
[   42.505803][  T294] loop3: rw=2049, sector=45096, nr_sectors = 16 limit=40427
[   42.513898][   T28] audit: type=1400 audit(1722676823.849:204): avc:  denied  { sqpoll } for  pid=650 comm="syz.2.77" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[   42.541048][  T582] usb 2-1: device descriptor read/64, error -71
[   42.554390][  T657] loop2: detected capacity change from 0 to 128
[   42.610758][  T660] loop2: detected capacity change from 0 to 2048
[   42.657918][  T293] EXT4-fs (loop0): unmounting filesystem.
[   42.671316][  T660] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[   42.992997][  T291] EXT4-fs (loop4): unmounting filesystem.
[   43.080149][  T582] usb 2-1: device descriptor read/64, error -71
[   43.232191][   T19] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[   43.290346][  T410] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[   43.380719][  T582] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[   43.498085][  T577] EXT4-fs (loop2): unmounting filesystem.
[   43.530462][  T410] usb 4-1: Using ep0 maxpacket: 8
[   43.592913][  T410] usb 4-1: no configurations
[   43.611117][  T410] usb 4-1: can't read configurations, error -22
[   43.748521][  T684] loop2: detected capacity change from 0 to 512
[   43.800167][  T410] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[   43.886779][  T684] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[   43.908014][   T19] usb 1-1: Using ep0 maxpacket: 16
[   43.913848][  T684] ext4 filesystem being mounted at /4/bus supports timestamps until 2038 (0x7fffffff)
[   44.060113][  T410] usb 4-1: Using ep0 maxpacket: 8
[   44.100209][  T410] usb 4-1: no configurations
[   44.104658][  T410] usb 4-1: can't read configurations, error -22
[   44.120224][  T410] usb usb4-port1: attempt power cycle
[   44.297888][   T28] kauditd_printk_skb: 8 callbacks suppressed
[   44.297903][   T28] audit: type=1400 audit(1722676825.629:213): avc:  denied  { create } for  pid=692 comm="syz.4.87" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[   44.600253][   T19] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   44.612464][   T19] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   44.620113][  T410] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[   44.622173][   T28] audit: type=1400 audit(1722676825.949:214): avc:  denied  { name_bind } for  pid=683 comm="syz.2.85" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1
[   44.651043][   T19] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[   44.659984][   T19] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   44.680447][   T19] usb 1-1: config 0 descriptor??
[   44.720199][  T410] usb 4-1: Using ep0 maxpacket: 8
[   44.760180][  T410] usb 4-1: no configurations
[   44.764667][  T410] usb 4-1: can't read configurations, error -22
[   44.847590][  T577] EXT4-fs (loop2): unmounting filesystem.
[   44.920168][  T410] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[   45.020157][  T410] usb 4-1: Using ep0 maxpacket: 8
[   45.060190][  T410] usb 4-1: no configurations
[   45.096018][  T410] usb 4-1: can't read configurations, error -22
[   45.102282][  T410] usb usb4-port1: unable to enumerate USB device
[   45.111661][  T707] loop1: detected capacity change from 0 to 128
[   45.190011][  T714] device ipip0 entered promiscuous mode
[   45.233673][   T28] audit: type=1400 audit(1722676826.569:215): avc:  denied  { setopt } for  pid=720 comm="syz.4.96" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   45.255866][   T28] audit: type=1400 audit(1722676826.589:216): avc:  denied  { write } for  pid=720 comm="syz.4.96" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   45.356649][   T28] audit: type=1400 audit(1722676826.689:217): avc:  denied  { read } for  pid=720 comm="syz.4.96" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   45.380777][   T28] audit: type=1400 audit(1722676826.709:218): avc:  denied  { bind } for  pid=720 comm="syz.4.96" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   45.440148][   T19] usbhid 1-1:0.0: can't add hid device: -71
[   45.446052][   T19] usbhid: probe of 1-1:0.0 failed with error -71
[   45.450205][  T410] usb 3-1: new low-speed USB device number 5 using dummy_hcd
[   45.456646][   T19] usb 1-1: USB disconnect, device number 5
[   45.700119][  T410] usb 3-1: Invalid ep0 maxpacket: 64
[   45.850429][  T410] usb 3-1: new low-speed USB device number 6 using dummy_hcd
[   45.897903][  T728] loop0: detected capacity change from 0 to 512
[   45.904638][  T728] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[   45.915444][  T728] EXT4-fs (loop0): 1 truncate cleaned up
[   45.921067][  T728] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[   46.090112][  T410] usb 3-1: Invalid ep0 maxpacket: 64
[   46.099160][   T28] audit: type=1400 audit(1722676827.429:219): avc:  denied  { map } for  pid=734 comm="syz.4.99" path="socket:[17607]" dev="sockfs" ino=17607 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1
[   46.101636][  T410] usb usb3-port1: attempt power cycle
[   46.127452][   T28] audit: type=1400 audit(1722676827.459:220): avc:  denied  { setattr } for  pid=732 comm="syz.3.98" name="" dev="pipefs" ino=14358 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1
[   46.141199][  T728] netlink: 8 bytes leftover after parsing attributes in process `syz.0.97'.
[   46.164569][  T737] loop1: detected capacity change from 0 to 2048
[   46.171053][   T28] audit: type=1400 audit(1722676827.459:221): avc:  denied  { remove_name } for  pid=732 comm="syz.3.98" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   46.183673][  T739] loop3: detected capacity change from 0 to 128
[   46.196147][   T28] audit: type=1400 audit(1722676827.459:222): avc:  denied  { unlink } for  pid=732 comm="syz.3.98" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[   46.237483][  T293] EXT4-fs (loop0): unmounting filesystem.
[   46.252977][  T737] EXT4-fs error (device loop1): ext4_orphan_get:1422: comm syz.1.100: bad orphan inode 8192
[   46.267486][  T737] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[   46.303891][  T751] loop0: detected capacity change from 0 to 256
[   46.321502][  T751] exfat: Deprecated parameter 'namecase'
[   46.329101][  T751] exfat: Deprecated parameter 'namecase'
[   46.337136][  T751] exFAT-fs (loop0): failed to load upcase table (idx : 0x00011f41, chksum : 0xf6e84b2e, utbl_chksum : 0xe619d30d)
[   46.531363][  T756] loop0: detected capacity change from 0 to 2048
[   46.579918][  T756] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[   46.594286][  T763] loop3: detected capacity change from 0 to 512
[   46.617392][  T763] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem
[   46.627037][  T763] EXT4-fs error (device loop3): ext4_orphan_get:1396: inode #15: comm syz.3.108: iget: bad i_size value: -67835469387268086
[   46.640544][  T763] EXT4-fs error (device loop3): ext4_orphan_get:1401: comm syz.3.108: couldn't read orphan inode 15 (err -117)
[   46.653023][  T763] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[   46.672176][  T763] ext2 filesystem being mounted at /22/file0 supports timestamps until 2038 (0x7fffffff)
[   46.711849][  T410] usb 3-1: new low-speed USB device number 7 using dummy_hcd
[   46.806271][  T293] EXT4-fs (loop0): unmounting filesystem.
[   46.830196][  T324] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[   46.851200][  T410] usb 3-1: Invalid ep0 maxpacket: 64
[   47.012150][  T410] usb 3-1: new low-speed USB device number 8 using dummy_hcd
[   47.163383][  T410] usb 3-1: Invalid ep0 maxpacket: 64
[   47.176505][  T410] usb usb3-port1: unable to enumerate USB device
[   47.210442][  T324] usb 5-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad
[   47.221550][  T324] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   47.254522][  T324] usb 5-1: config 0 descriptor??
[   47.449782][  T294] EXT4-fs (loop3): unmounting filesystem.
[   48.030123][  T582] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[   48.123356][  T794] loop2: detected capacity change from 0 to 128
[   48.146906][  T796] netlink: 4 bytes leftover after parsing attributes in process `syz.2.115'.
[   48.209756][  T797] netlink: 12 bytes leftover after parsing attributes in process `syz.2.115'.
[   48.282135][   T19] usb 5-1: USB disconnect, device number 4
[   48.410238][  T582] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   48.421095][  T582] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   48.430682][  T582] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[   48.443443][  T582] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   48.452241][  T582] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   48.470439][  T582] usb 1-1: config 0 descriptor??
[   48.524732][  T803] loop3: detected capacity change from 0 to 512
[   48.570189][  T324] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[   48.592631][  T380] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[   48.810086][  T324] usb 3-1: Using ep0 maxpacket: 32
[   48.931740][  T787] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   48.980430][  T787] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   48.998383][  T808] loop4: detected capacity change from 0 to 1024
[   49.024650][  T787] loop0: detected capacity change from 0 to 1024
[   49.031261][  T787] EXT4-fs: Ignoring removed nomblk_io_submit option
[   49.054680][  T787] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   49.069233][  T787] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[   49.080162][  T324] usb 3-1: config 33 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 183, changing to 7
[   49.101472][  T324] usb 3-1: config 33 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 59294, setting to 1024
[   49.175932][  T787] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[   49.236962][  T816] loop3: detected capacity change from 0 to 128
[   49.310189][  T324] usb 3-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=33.f9
[   49.320092][  T324] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   49.327904][  T324] usb 3-1: Product: syz
[   49.332775][  T324] usb 3-1: Manufacturer: syz
[   49.337248][  T324] usb 3-1: SerialNumber: syz
[   49.463601][  T823] loop4: detected capacity change from 0 to 256
[   49.566179][   T28] kauditd_printk_skb: 13 callbacks suppressed
[   49.566195][   T28] audit: type=1400 audit(1722676830.899:236): avc:  denied  { setopt } for  pid=822 comm="syz.4.123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[   49.890136][  T324] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[   50.250129][  T324] usb 5-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config
[   50.260369][  T324] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   50.271174][  T324] usb 5-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 8
[   50.370162][  T410] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[   50.440158][  T324] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   50.449062][  T324] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   50.457030][  T324] usb 5-1: Product: syz
[   50.461071][  T324] usb 5-1: Manufacturer: syz
[   50.465483][  T324] usb 5-1: SerialNumber: syz
[   50.510651][  T324] usb 5-1: selecting invalid altsetting 1
[   50.730222][  T410] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   50.740187][  T410] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[   50.786650][  T293] EXT4-fs (loop0): unmounting filesystem.
[   50.802649][  T829] loop0: detected capacity change from 0 to 128
[   50.820194][  T410] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[   50.829711][  T410] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[   50.829936][  T832] netlink: 32 bytes leftover after parsing attributes in process `syz.0.126'.
[   50.837930][  T410] usb 4-1: SerialNumber: syz
[   50.846760][  T582] usbhid 1-1:0.0: can't add hid device: -71
[   50.857415][  T832] loop0: detected capacity change from 0 to 512
[   50.859311][  T582] usbhid: probe of 1-1:0.0 failed with error -71
[   50.871034][  T582] usb 1-1: USB disconnect, device number 6
[   50.882056][  T832] EXT4-fs error (device loop0): ext4_do_update_inode:5212: inode #3: comm syz.0.126: corrupted inode contents
[   50.893845][  T832] EXT4-fs error (device loop0): ext4_dirty_inode:6074: inode #3: comm syz.0.126: mark_inode_dirty error
[   50.905443][  T832] EXT4-fs error (device loop0): ext4_do_update_inode:5212: inode #3: comm syz.0.126: corrupted inode contents
[   50.917230][  T832] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #3: comm syz.0.126: mark_inode_dirty error
[   50.928795][  T832] Quota error (device loop0): write_blk: dquota write failed
[   50.936307][  T832] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota
[   50.946217][  T832] EXT4-fs error (device loop0): ext4_acquire_dquot:6764: comm syz.0.126: Failed to acquire dquot type 0
[   50.957908][  T832] EXT4-fs error (device loop0): ext4_do_update_inode:5212: inode #16: comm syz.0.126: corrupted inode contents
[   50.969875][  T832] EXT4-fs error (device loop0): ext4_dirty_inode:6074: inode #16: comm syz.0.126: mark_inode_dirty error
[   50.981076][  T324] usb 5-1: selecting invalid altsetting 1
[   50.981330][  T832] EXT4-fs error (device loop0): ext4_do_update_inode:5212: inode #16: comm syz.0.126: corrupted inode contents
[   50.986668][  T324] cdc_ncm 5-1:1.0: bind() failure
[   51.000544][  T832] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #16: comm syz.0.126: mark_inode_dirty error
[   51.014384][  T832] EXT4-fs error (device loop0): ext4_do_update_inode:5212: inode #16: comm syz.0.126: corrupted inode contents
[   51.026255][  T832] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem
[   51.034789][  T832] EXT4-fs error (device loop0): ext4_do_update_inode:5212: inode #16: comm syz.0.126: corrupted inode contents
[   51.046616][  T832] EXT4-fs error (device loop0): ext4_truncate:4302: inode #16: comm syz.0.126: mark_inode_dirty error
[   51.057661][  T832] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem
[   51.066952][  T832] EXT4-fs (loop0): 1 truncate cleaned up
[   51.072456][  T832] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[   51.081346][  T832] ext4 filesystem being mounted at /19/file1 supports timestamps until 2038 (0x7fffffff)
[   51.153987][  T582] usb 3-1: USB disconnect, device number 9
[   51.160927][  T410] usb 4-1: 0:2 : does not exist
[   51.166510][  T410] usb 4-1: unit 5 not found!
[   51.174134][  T410] usb 4-1: USB disconnect, device number 8
[   51.184936][  T823] loop4: detected capacity change from 0 to 16
[   51.196676][  T823] erofs: (device loop4): mounted with root inode @ nid 36.
[   51.245231][  T382] udevd[382]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   51.387133][  T823] erofs: (device loop4): z_erofs_pcluster_readmore: readmore error at page 0 @ nid 36
[   51.423480][  T823] erofs: (device loop4): z_erofs_read_folio: failed to read, err [-117]
[   51.442616][  T324] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found
[   51.454758][  T324] cdc_ncm 5-1:1.1: bind() failure
[   51.483735][   T28] audit: type=1400 audit(1722676832.819:237): avc:  denied  { read } for  pid=837 comm="syz.2.128" name="msr" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[   51.507421][   T28] audit: type=1400 audit(1722676832.819:238): avc:  denied  { open } for  pid=837 comm="syz.2.128" path="/dev/cpu/0/msr" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[   51.535823][   T28] audit: type=1400 audit(1722676832.869:239): avc:  denied  { bind } for  pid=837 comm="syz.2.128" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   51.666267][  T582] usb 5-1: USB disconnect, device number 5
[   51.694343][  T293] EXT4-fs (loop0): unmounting filesystem.
[   51.709862][  T844] loop3: detected capacity change from 0 to 16
[   51.738315][  T844] erofs: (device loop3): mounted with root inode @ nid 36.
[   53.179103][  T862] loop3: detected capacity change from 0 to 512
[   53.215251][  T867] loop2: detected capacity change from 0 to 128
[   53.232393][  T870] bridge: RTM_NEWNEIGH with invalid ether address
[   53.235301][  T862] EXT4-fs (loop3): 1 orphan inode deleted
[   53.245016][  T862] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[   53.254344][  T862] ext4 filesystem being mounted at /30/file1 supports timestamps until 2038 (0x7fffffff)
[   53.277038][   T28] audit: type=1400 audit(1722676834.609:240): avc:  denied  { setattr } for  pid=861 comm="syz.3.135" path="/30/file1/cgroup.controllers" dev="loop3" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   53.301986][   T28] audit: type=1400 audit(1722676834.639:241): avc:  denied  { ioctl } for  pid=861 comm="syz.3.135" path="socket:[18060]" dev="sockfs" ino=18060 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   53.337979][  T294] EXT4-fs (loop3): unmounting filesystem.
[   53.353251][   T28] audit: type=1400 audit(1722676834.689:242): avc:  denied  { create } for  pid=871 comm="syz.4.137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1
[   53.375635][   T28] audit: type=1400 audit(1722676834.689:243): avc:  denied  { ioctl } for  pid=871 comm="syz.4.137" path="socket:[18084]" dev="sockfs" ino=18084 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1
[   53.412763][  T877] overlayfs: missing 'lowerdir'
[   53.500979][  T881] loop4: detected capacity change from 0 to 512
[   53.532357][  T881] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[   53.560288][  T881] ext4 filesystem being mounted at /32/file0 supports timestamps until 2038 (0x7fffffff)
[   53.571918][  T858] binder: 854:858 ioctl 4018620d 0 returned -22
[   53.658923][  T885] loop0: detected capacity change from 0 to 512
[   53.685680][  T885] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   53.730115][   T19] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[   53.841729][  T885] EXT4-fs (loop0): inodes count not valid: 0 vs 32
[   54.012660][  T887] loop2: detected capacity change from 0 to 1024
[   54.023740][  T887] netlink: 'syz.2.142': attribute type 3 has an invalid length.
[   54.673316][  T291] EXT4-fs (loop4): unmounting filesystem.
[   54.741072][   T19] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   54.752143][   T19] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   54.762226][   T19] usb 4-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00
[   54.771356][   T19] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   54.780469][   T19] usb 4-1: config 0 descriptor??
[   55.145251][   T28] kauditd_printk_skb: 5 callbacks suppressed
[   55.145266][   T28] audit: type=1400 audit(1722676836.479:249): avc:  denied  { create } for  pid=905 comm="syz.0.146" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   55.175596][   T28] audit: type=1400 audit(1722676836.509:250): avc:  denied  { setopt } for  pid=905 comm="syz.0.146" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   55.571114][  T913] loop4: detected capacity change from 0 to 128
[   55.696192][  T879] loop3: detected capacity change from 0 to 40427
[   55.713571][  T879] F2FS-fs (loop3): Invalid Fs Meta Ino: node(1) meta(2) root(0)
[   55.721452][  T879] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[   55.734622][  T879] F2FS-fs (loop3): invalid crc value
[   55.741418][  T879] F2FS-fs (loop3): Found nat_bits in checkpoint
[   56.075222][  T924] loop2: detected capacity change from 0 to 1024
[   56.085143][  T879] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[   56.123095][  T879] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[   56.133797][  T924] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:477: comm syz.2.150: Invalid block bitmap block 0 in block_group 0
[   56.148746][  T292] EXT4-fs (loop1): unmounting filesystem.
[   56.181274][  T924] Quota error (device loop2): write_blk: dquota write failed
[   56.210516][  T924] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota
[   56.220673][  T924] EXT4-fs error (device loop2): ext4_acquire_dquot:6764: comm syz.2.150: Failed to acquire dquot type 0
[   56.240401][  T924] EXT4-fs error (device loop2): ext4_free_blocks:6211: comm syz.2.150: Freeing blocks not in datazone - block = 0, count = 4096
[   56.320262][  T924] EXT4-fs error (device loop2): ext4_read_inode_bitmap:140: comm syz.2.150: Invalid inode bitmap blk 0 in block_group 0
[   56.340235][   T10] Quota error (device loop2): do_check_range: Getting block 0 out of range 1-8
[   56.340270][  T924] EXT4-fs error (device loop2) in ext4_free_inode:362: Corrupt filesystem
[   56.363705][  T924] EXT4-fs (loop2): 1 orphan inode deleted
[   56.369300][   T10] EXT4-fs error (device loop2): ext4_release_dquot:6787: comm kworker/u4:1: Failed to release dquot type 0
[   56.371301][   T28] audit: type=1400 audit(1722676837.699:251): avc:  denied  { remove_name } for  pid=83 comm="syslogd" name="messages" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   56.406449][  T924] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[   56.433939][  T924] EXT4-fs (loop2): re-mounted. Quota mode: writeback.
[   56.451906][   T28] audit: type=1400 audit(1722676837.699:252): avc:  denied  { rename } for  pid=83 comm="syslogd" name="messages" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   56.510106][   T28] audit: type=1400 audit(1722676837.699:253): avc:  denied  { create } for  pid=83 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   56.552780][  T937] loop0: detected capacity change from 0 to 256
[   56.565652][  T931] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.568919][  T939] loop4: detected capacity change from 0 to 256
[   56.580622][  T931] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.595083][  T931] device bridge_slave_0 entered promiscuous mode
[   56.609918][  T931] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.617420][  T931] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.625758][  T380] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[   56.627103][  T931] device bridge_slave_1 entered promiscuous mode
[   56.931466][  T577] EXT4-fs (loop2): unmounting filesystem.
[   57.135481][  T931] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.142402][  T931] bridge0: port 2(bridge_slave_1) entered forwarding state
[   57.149487][  T931] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.156315][  T931] bridge0: port 1(bridge_slave_0) entered forwarding state
[   57.215005][  T314] bridge0: port 1(bridge_slave_0) entered disabled state
[   57.222409][  T314] bridge0: port 2(bridge_slave_1) entered disabled state
[   57.267539][   T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   57.276548][   T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   57.301375][  T324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   57.309916][  T324] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   57.318391][  T324] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.325297][  T324] bridge0: port 1(bridge_slave_0) entered forwarding state
[   57.340903][  T324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   57.349676][  T324] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   57.363414][  T324] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.370333][  T324] bridge0: port 2(bridge_slave_1) entered forwarding state
[   57.378722][  T324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   57.387065][  T324] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   57.456784][   T28] audit: type=1400 audit(1722676838.789:254): avc:  denied  { ioctl } for  pid=954 comm="syz.4.157" path="socket:[18288]" dev="sockfs" ino=18288 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   57.482151][   T10] device bridge_slave_1 left promiscuous mode
[   57.488119][   T10] bridge0: port 2(bridge_slave_1) entered disabled state
[   57.510682][   T10] device bridge_slave_0 left promiscuous mode
[   57.516660][   T10] bridge0: port 1(bridge_slave_0) entered disabled state
[   57.531284][   T10] device veth1_macvtap left promiscuous mode
[   57.537154][   T10] device veth0_vlan left promiscuous mode
[   57.664892][  T959] loop2: detected capacity change from 0 to 4096
[   57.684160][  T410] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   57.692066][  T959] EXT4-fs: Ignoring removed nomblk_io_submit option
[   57.700587][  T959] EXT4-fs (loop2): Test dummy encryption mode enabled
[   57.707592][  T410] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   57.707803][  T957] loop4: detected capacity change from 0 to 40427
[   57.729630][  T931] device veth0_vlan entered promiscuous mode
[   57.735704][  T324] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[   57.736196][  T957] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[   57.756177][  T959] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[   57.769520][   T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   57.770348][  T957] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[   57.778037][   T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   57.813054][  T957] F2FS-fs (loop4): Found nat_bits in checkpoint
[   57.830147][   T19] usbhid 4-1:0.0: can't add hid device: -71
[   57.836028][   T19] usbhid: probe of 4-1:0.0 failed with error -71
[   57.851074][   T19] usb 4-1: USB disconnect, device number 9
[   57.883650][   T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   57.900478][   T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   57.908941][   T24] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   57.927427][   T24] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   57.938848][  T966] loop3: detected capacity change from 0 to 256
[   57.973539][  T931] device veth1_macvtap entered promiscuous mode
[   58.004301][  T966] FAT-fs (loop3): Unrecognized mount option "shortname=win9=" or missing value
[   58.016567][  T410] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   58.027720][  T410] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   58.110316][  T324] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   58.127955][  T957] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[   58.137194][  T967] fscrypt: AES-256-XTS using implementation "xts-aes-aesni"
[   58.177593][  T957] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[   58.199324][  T324] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[   58.219324][   T28] audit: type=1400 audit(1722676839.549:255): avc:  denied  { write } for  pid=965 comm="syz.3.160" name="rtc0" dev="devtmpfs" ino=171 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[   58.247142][  T966] IPv4: Oversized IP packet from 127.202.26.0
[   58.270585][  T410] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   58.291104][  T324] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[   58.300122][  T324] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   58.308694][  T410] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   58.317017][  T324] usb 1-1: config 0 descriptor??
[   58.322215][  T410] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   58.331894][  T410] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   58.341111][  T410] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   58.656066][  T953] loop0: detected capacity change from 0 to 512
[   58.667514][  T977] loop3: detected capacity change from 0 to 512
[   58.700423][  T577] EXT4-fs (loop2): unmounting filesystem.
[   58.766858][  T977] request_module fs-cifs succeeded, but still no fs?
[   58.776594][  T953] netlink: 'syz.0.156': attribute type 2 has an invalid length.
[   58.920428][  T986] loop4: detected capacity change from 0 to 1024
[   58.926929][  T986] EXT4-fs: Ignoring removed bh option
[   58.934070][  T986] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   58.950201][   T19] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[   58.952249][  T986] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[   58.979019][  T291] EXT4-fs (loop4): unmounting filesystem.
[   59.260240][  T997] loop4: detected capacity change from 0 to 1024
[   59.266757][  T997] EXT4-fs: Ignoring removed bh option
[   59.272822][  T997] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   59.291971][  T997] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[   59.340157][   T19] usb 2-1: config index 0 descriptor too short (expected 3099, got 27)
[   59.348536][   T19] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   59.360672][   T19] usb 2-1: config 0 has no interfaces?
[   59.403790][ T1001] loop3: detected capacity change from 0 to 256
[   60.192778][  T291] EXT4-fs (loop4): unmounting filesystem.
[   60.220201][   T19] usb 2-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99
[   60.248709][   T19] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   60.265440][   T19] usb 2-1: Product: syz
[   60.298112][   T19] usb 2-1: Manufacturer: syz
[   60.312945][   T19] usb 2-1: SerialNumber: syz
[   60.328685][   T19] usb 2-1: config 0 descriptor??
[   60.557750][   T19] usb 1-1: USB disconnect, device number 7
[   60.561314][ T1015] loop4: detected capacity change from 0 to 40427
[   60.590168][ T1015] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[   60.597916][ T1015] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[   60.608117][  T314] usb 2-1: USB disconnect, device number 6
[   60.621028][ T1015] F2FS-fs (loop4): invalid crc value
[   60.655123][ T1015] F2FS-fs (loop4): Found nat_bits in checkpoint
[   60.678120][ T1023] loop0: detected capacity change from 0 to 512
[   60.709218][ T1023] EXT4-fs: Ignoring removed mblk_io_submit option
[   60.727489][ T1023] EXT4-fs error (device loop0): ext4_find_inline_data_nolock:164: inode #12: comm syz.0.172: inline data xattr refers to an external xattr inode
[   60.750361][ T1015] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[   60.757396][ T1015] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[   60.757424][ T1023] EXT4-fs error (device loop0): ext4_orphan_get:1401: comm syz.0.172: couldn't read orphan inode 12 (err -117)
[   60.783128][ T1023] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[   60.823709][ T1018] loop3: detected capacity change from 0 to 40427
[   60.883017][ T1018] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[   60.910064][ T1018] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[   61.252474][ T1031] usb usb8: usbfs: process 1031 (syz.4.170) did not claim interface 0 before use
[   61.301274][ T1005] loop2: detected capacity change from 0 to 131072
[   61.310612][ T1032] overlayfs: failed to resolve './file1': -2
[   61.316540][   T28] kauditd_printk_skb: 3 callbacks suppressed
[   61.316780][   T28] audit: type=1400 audit(1722676842.649:259): avc:  denied  { mounton } for  pid=1022 comm="syz.0.172" path="/27/file0/bus" dev="loop0" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1
[   61.336062][ T1005] F2FS-fs (loop2): Found nat_bits in checkpoint
[   61.346520][ T1018] F2FS-fs (loop3): Found nat_bits in checkpoint
[   61.449672][    T8] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix.
[   61.462620][    T8] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix.
[   61.472125][ T1018] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[   61.479180][ T1018] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[   61.487663][ T1005] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[   61.543329][  T293] EXT4-fs (loop0): unmounting filesystem.
[   61.645971][   T28] audit: type=1400 audit(1722676842.949:260): avc:  denied  { connect } for  pid=1049 comm="syz.0.177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   61.819730][ T1055] syz.1.176 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[   62.015101][ T1060] loop4: detected capacity change from 0 to 16
[   62.021683][ T1060] erofs: (device loop4): mounted with root inode @ nid 36.
[   62.334313][ T1068] loop3: detected capacity change from 0 to 512
[   62.346999][ T1062] loop0: detected capacity change from 0 to 40427
[   62.361650][ T1062] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[   62.374804][ T1068] EXT4-fs (loop3): 1 truncate cleaned up
[   62.381415][ T1068] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[   62.392803][ T1062] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[   62.457748][ T1062] F2FS-fs (loop0): invalid crc value
[   62.508478][ T1075] loop4: detected capacity change from 0 to 512
[   62.515536][ T1075] EXT4-fs: Ignoring removed nomblk_io_submit option
[   62.522355][ T1075] EXT4-fs (loop4): Test dummy encryption mode enabled
[   62.523283][ T1062] F2FS-fs (loop0): Found nat_bits in checkpoint
[   62.615989][ T1080] loop1: detected capacity change from 0 to 1024
[   62.762196][ T1075] EXT4-fs error (device loop4): ext4_orphan_get:1396: inode #17: comm syz.4.183: iget: bogus i_mode (0)
[   62.819474][ T1080] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[   62.860448][ T1075] EXT4-fs error (device loop4): ext4_orphan_get:1401: comm syz.4.183: couldn't read orphan inode 17 (err -117)
[   62.879181][ T1062] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[   62.880661][ T1075] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[   62.891022][ T1062] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[   62.948705][   T28] audit: type=1400 audit(1722676844.279:261): avc:  denied  { write } for  pid=1061 comm="syz.0.178" name="bus" dev="loop0" ino=455 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1
[   62.971152][   T28] audit: type=1400 audit(1722676844.279:262): avc:  denied  { add_name } for  pid=1061 comm="syz.0.178" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1
[   62.998733][  T294] EXT4-fs (loop3): unmounting filesystem.
[   63.012934][   T28] audit: type=1400 audit(1722676844.349:263): avc:  denied  { remove_name } for  pid=1061 comm="syz.0.178" name="#3" dev="loop0" ino=460 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1
[   63.050305][ T1062] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior.
[   63.071292][ T1062] overlayfs: conflicting lowerdir path
[   63.097761][ T1090] loop3: detected capacity change from 0 to 2048
[   63.125738][   T28] audit: type=1400 audit(1722676844.349:264): avc:  denied  { rename } for  pid=1061 comm="syz.0.178" name="#3" dev="loop0" ino=460 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   63.147742][  T582] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[   63.157579][   T28] audit: type=1400 audit(1722676844.369:265): avc:  denied  { unlink } for  pid=1061 comm="syz.0.178" name="#3" dev="loop0" ino=461 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1
[   63.180759][   T28] audit: type=1400 audit(1722676844.379:266): avc:  denied  { unlink } for  pid=1061 comm="syz.0.178" name="#4" dev="loop0" ino=460 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   63.202773][   T28] audit: type=1400 audit(1722676844.399:267): avc:  denied  { rmdir } for  pid=1061 comm="syz.0.178" name="work" dev="loop0" ino=458 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1
[   63.217312][ T1090] EXT4-fs error (device loop3): ext4_orphan_get:1422: comm syz.3.184: bad orphan inode 8192
[   63.234293][ T1090] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[   63.269425][  T291] EXT4-fs (loop4): unmounting filesystem.
[   63.668298][   T43] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix.
[   63.821270][   T43] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix.
[   63.955436][   T28] audit: type=1400 audit(1722676845.289:268): avc:  denied  { remove_name } for  pid=293 comm="syz-executor" name="bus" dev="loop0" ino=455 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   63.979082][  T294] EXT4-fs (loop3): unmounting filesystem.
[   64.043182][ T1104] mmap: syz.2.188 (1104) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[   64.062756][ T1106] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   64.090200][  T582] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   64.105548][  T582] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[   64.135393][  T582] usb 2-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00
[   64.144290][  T582] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   64.155711][  T582] usb 2-1: config 0 descriptor??
[   64.267755][ T1110] loop2: detected capacity change from 0 to 256
[   64.322740][ T1110] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 196)
[   64.670150][  T295] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[   64.910089][  T295] usb 3-1: Using ep0 maxpacket: 32
[   64.937538][ T1135] loop4: detected capacity change from 0 to 40427
[   64.951809][ T1135] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[   64.959378][ T1135] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[   64.973097][ T1135] F2FS-fs (loop4): Found nat_bits in checkpoint
[   65.016019][ T1135] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[   65.023292][ T1135] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[   65.030213][  T295] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 91, changing to 10
[   65.042305][  T295] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26316, setting to 1024
[   65.053674][  T295] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[   65.111422][  T295] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   65.140202][ T1110] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[   65.160762][  T295] hub 3-1:4.0: USB hub found
[   65.316485][ T1146] loop4: detected capacity change from 0 to 512
[   65.326674][ T1146] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.192: inode #1: comm syz.4.192: iget: illegal inode #
[   65.339753][ T1146] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.192: error while reading EA inode 1 err=-117
[   65.352479][ T1146] EXT4-fs (loop4): 1 orphan inode deleted
[   65.358138][ T1146] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[   65.373032][ T1146] Zero length message leads to an empty skb
[   65.391447][  T291] EXT4-fs (loop4): unmounting filesystem.
[   65.430552][  T295] hub 3-1:4.0: 1 port detected
[   65.441967][ T1149] loop4: detected capacity change from 0 to 512
[   65.448603][ T1149] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[   65.460225][ T1149] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #16: comm syz.4.193: invalid indirect mapped block 83886080 (level 1)
[   65.474081][ T1149] EXT4-fs (loop4): Remounting filesystem read-only
[   65.480789][ T1149] EXT4-fs (loop4): 1 orphan inode deleted
[   65.486405][ T1149] EXT4-fs (loop4): 1 truncate cleaned up
[   65.495700][ T1149] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[   65.506024][ T1149] EXT4-fs error (device loop4): ext4_find_dest_de:2112: inode #2: block 13: comm syz.4.193: bad entry in directory: rec_len is too small for name_len - offset=12, inode=2, rec_len=12, size=1024 fake=0
[   65.525921][  T931] EXT4-fs (loop1): unmounting filesystem.
[   65.527387][ T1149] EXT4-fs (loop4): Remounting filesystem read-only
[   65.550175][  T582] usb 2-1: string descriptor 0 read error: -71
[   65.557839][ T1149] netlink: 24 bytes leftover after parsing attributes in process `syz.4.193'.
[   65.561103][  T582] usb 2-1: USB disconnect, device number 7
[   65.578762][  T291] EXT4-fs (loop4): unmounting filesystem.
[   65.588687][ T1154] loop0: detected capacity change from 0 to 512
[   65.610676][ T1156] bridge0: port 3(gretap0) entered blocking state
[   65.612494][ T1154] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[   65.616955][ T1156] bridge0: port 3(gretap0) entered disabled state
[   65.626192][ T1154] ext4 filesystem being mounted at /31/file0 supports timestamps until 2038 (0x7fffffff)
[   65.632497][ T1156] device gretap0 entered promiscuous mode
[   65.646782][ T1154] EXT4-fs (loop0): unmounting filesystem.
[   65.647334][ T1156] bridge0: port 3(gretap0) entered blocking state
[   65.659005][ T1156] bridge0: port 3(gretap0) entered forwarding state
[   65.662223][ T1161] xt_CT: You must specify a L4 protocol and not use inversions on it
[   65.846056][ T1164] SELinux:  Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[   65.859790][ T1166] loop3: detected capacity change from 0 to 256
[   65.953193][ T1166] exfat: Deprecated parameter 'utf8'
[   65.953926][  T410] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[   65.958497][ T1166] exfat: Deprecated parameter 'namecase'
[   65.971513][    T6] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[   65.972030][ T1166] exfat: Deprecated parameter 'utf8'
[   65.986817][ T1166] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010253, chksum : 0xa98551aa, utbl_chksum : 0xe619d30d)
[   66.000427][ T1167] syz.3.198[1167] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   66.000505][ T1167] syz.3.198[1167] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   66.210086][  T410] usb 5-1: Using ep0 maxpacket: 16
[   66.340156][  T410] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 8
[   66.394559][    T6] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   66.410281][    T6] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[   66.429867][ T1169] loop3: detected capacity change from 0 to 131072
[   66.439100][ T1169] F2FS-fs (loop3): Found nat_bits in checkpoint
[   66.475989][ T1169] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[   66.483607][   T28] kauditd_printk_skb: 6 callbacks suppressed
[   66.483619][   T28] audit: type=1400 audit(1722676847.819:275): avc:  denied  { mount } for  pid=1168 comm="syz.3.199" name="/" dev="loop3" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[   66.500236][  T410] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00
[   66.524745][  T410] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   66.525087][   T28] audit: type=1400 audit(1722676847.859:276): avc:  denied  { unmount } for  pid=294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[   66.532884][  T410] usb 5-1: Product: syz
[   66.552312][    T6] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[   66.555925][  T410] usb 5-1: Manufacturer: syz
[   66.555942][  T410] usb 5-1: SerialNumber: syz
[   66.557111][  T410] usb 5-1: config 0 descriptor??
[   66.565749][    T6] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[   66.586431][    T6] usb 1-1: SerialNumber: syz
[   66.590234][  T295] hub 3-1:4.0: hub_hub_status failed (err = -32)
[   66.597694][  T295] hub 3-1:4.0: config failed, can't get hub status (err -32)
[   66.610910][  T410] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected
[   66.619224][  T410] usb 5-1: Detected FT232R
[   66.740263][  T313] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[   67.160348][  T577] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 196)
[   67.171401][    T6] usb 1-1: 0:2 : does not exist
[   67.180210][  T410] ftdi_sio ttyUSB0: Unable to read latency timer: -71
[   67.200699][  T410] ftdi_sio ttyUSB0: Unable to write latency timer: -71
[   67.212643][   T28] audit: type=1326 audit(1722676848.549:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1153 comm="syz.0.195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b4b5779f9 code=0x7ffc0000
[   67.240370][ T1154] loop0: detected capacity change from 0 to 512
[   67.248634][  T410] ftdi_sio 5-1:0.0: GPIO initialisation failed: -71
[   67.252797][   T28] audit: type=1326 audit(1722676848.549:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1153 comm="syz.0.195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=280 compat=0 ip=0x7f6b4b5779f9 code=0x7ffc0000
[   67.279920][  T410] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0
[   67.308662][ T1154] EXT4-fs (loop0): revision level too high, forcing read-only mode
[   67.318769][  T410] usb 5-1: USB disconnect, device number 6
[   67.335283][  T410] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[   67.346151][  T410] ftdi_sio 5-1:0.0: device disconnected
[   67.360259][  T324] usb 3-1: USB disconnect, device number 10
[   67.378573][ T1154] EXT4-fs (loop0): orphan cleanup on readonly fs
[   67.385371][ T1154] EXT4-fs warning (device loop0): ext4_enable_quotas:6999: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[   67.401424][   T28] audit: type=1326 audit(1722676848.549:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1153 comm="syz.0.195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b4b5779f9 code=0x7ffc0000
[   67.422630][ T1154] EXT4-fs (loop0): Cannot turn on quotas: error -22
[   67.433811][   T28] audit: type=1326 audit(1722676848.549:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1153 comm="syz.0.195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6b4b5779f9 code=0x7ffc0000
[   67.440123][  T313] usb 2-1: Using ep0 maxpacket: 16
[   67.457992][   T28] audit: type=1326 audit(1722676848.549:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1153 comm="syz.0.195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b4b5779f9 code=0x7ffc0000
[   67.470753][ T1154] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.195: bg 0: block 40: padding at end of block bitmap is not set
[   67.485368][   T28] audit: type=1326 audit(1722676848.549:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1153 comm="syz.0.195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f6b4b5779f9 code=0x7ffc0000
[   67.499483][ T1154] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6171: Corrupt filesystem
[   67.523471][   T28] audit: type=1326 audit(1722676848.549:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1153 comm="syz.0.195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b4b5779f9 code=0x7ffc0000
[   67.531095][ T1154] EXT4-fs (loop0): 1 truncate cleaned up
[   67.553911][   T28] audit: type=1326 audit(1722676848.549:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1153 comm="syz.0.195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6b4b5779f9 code=0x7ffc0000
[   67.559189][ T1154] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[   67.679134][ T1193] Illegal XDP return value 4294967274 on prog  (id 250) dev N/A, expect packet loss!
[   67.690146][  T313] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 8
[   67.740104][    T6] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[   67.750619][ T1194] block device autoloading is deprecated and will be removed.
[   67.815389][ T1198] loop4: detected capacity change from 0 to 16
[   67.821940][ T1198] erofs: (device loop4): mounted with root inode @ nid 36.
[   67.870184][  T313] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00
[   67.879312][  T313] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   67.887342][  T313] usb 2-1: Product: syz
[   67.891480][  T313] usb 2-1: Manufacturer: syz
[   67.896050][  T313] usb 2-1: SerialNumber: syz
[   67.905294][  T313] usb 2-1: config 0 descriptor??
[   67.961090][  T313] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected
[   67.972419][  T313] usb 2-1: Detected FT232R
[   67.990103][    T6] usb 3-1: Using ep0 maxpacket: 16
[   68.199705][    T8] Bluetooth: hci0: Frame reassembly failed (-84)
[   68.227317][    T8] Bluetooth: hci0: Frame reassembly failed (-84)
[   68.334620][    T6] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   68.344644][  T313] ftdi_sio ttyUSB0: Unable to read latency timer: -71
[   68.351333][    T6] usb 3-1: config 0 has no interfaces?
[   68.370133][  T313] ftdi_sio ttyUSB0: Unable to write latency timer: -71
[   68.390202][  T313] ftdi_sio 2-1:0.0: GPIO initialisation failed: -71
[   68.397284][  T313] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0
[   68.406859][  T313] usb 2-1: USB disconnect, device number 8
[   68.414051][  T313] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[   68.423457][  T313] ftdi_sio 2-1:0.0: device disconnected
[   68.520243][    T6] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00
[   68.529275][    T6] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   68.537169][    T6] usb 3-1: Product: syz
[   68.541321][    T6] usb 3-1: Manufacturer: syz
[   68.545770][    T6] usb 3-1: SerialNumber: syz
[   68.554826][    T6] usb 3-1: config 0 descriptor??
[   68.583680][ T1213] syz.3.209[1213] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   68.583739][ T1213] syz.3.209[1213] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   68.619161][ T1213] loop3: detected capacity change from 0 to 8192
[   68.636896][ T1213] FAT-fs (loop3): Unrecognized mount option "" or missing value
[   68.663351][ T1215] loop3: detected capacity change from 0 to 1024
[   68.672970][ T1215] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[   68.760986][ T1219] loop1: detected capacity change from 0 to 512
[   68.767709][ T1219] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   68.778627][ T1219] EXT4-fs (loop1): 1 truncate cleaned up
[   68.784162][ T1219] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[   68.956297][ T1225] loop2: detected capacity change from 0 to 2048
[   69.161688][ T1225] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[   70.038286][    T6] usb 1-1: USB disconnect, device number 8
[   70.106986][  T294] EXT4-fs (loop3): unmounting filesystem.
[   70.144238][  T293] EXT4-fs (loop0): unmounting filesystem.
[   70.150758][  T931] EXT4-fs (loop1): unmounting filesystem.
[   70.170334][   T45] Bluetooth: hci0: Opcode 0x1003 failed: -110
[   70.223301][ T1236] netlink: 16 bytes leftover after parsing attributes in process `syz.4.215'.
[   70.232300][ T1236] netlink: 12 bytes leftover after parsing attributes in process `syz.4.215'.
[   70.243143][ T1236] netlink: 16 bytes leftover after parsing attributes in process `syz.4.215'.
[   70.244267][ T1238] loop0: detected capacity change from 0 to 256
[   70.252150][ T1236] netlink: 16 bytes leftover after parsing attributes in process `syz.4.215'.
[   70.489083][  T295] usb 3-1: USB disconnect, device number 11
[   70.505998][  T577] EXT4-fs (loop2): unmounting filesystem.
[   70.778290][ T1251] loop0: detected capacity change from 0 to 2048
[   70.808385][ T1248] loop4: detected capacity change from 0 to 256
[   70.816157][ T1248] exfat: Bad value for 'dmask'
[   70.833178][ T1247] bridge0: port 1(bridge_slave_0) entered blocking state
[   70.840149][ T1247] bridge0: port 1(bridge_slave_0) entered disabled state
[   70.847401][ T1247] device bridge_slave_0 entered promiscuous mode
[   70.860502][ T1247] bridge0: port 2(bridge_slave_1) entered blocking state
[   70.862115][  T380] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[   70.869258][ T1247] bridge0: port 2(bridge_slave_1) entered disabled state
[   70.892739][ T1247] device bridge_slave_1 entered promiscuous mode
[   71.318306][ T1265] loop4: detected capacity change from 0 to 256
[   71.327235][ T1265] exFAT-fs (loop4): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d)
[   71.361214][  T386] bridge0: port 3(gretap0) entered disabled state
[   71.369647][  T386] device gretap0 left promiscuous mode
[   71.375127][  T386] bridge0: port 3(gretap0) entered disabled state
[   71.419807][  T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   71.427551][  T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   71.451067][  T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   71.459283][  T313] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   71.468577][  T313] bridge0: port 1(bridge_slave_0) entered blocking state
[   71.475471][  T313] bridge0: port 1(bridge_slave_0) entered forwarding state
[   71.482816][  T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   71.492110][  T313] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   71.500339][  T313] bridge0: port 2(bridge_slave_1) entered blocking state
[   71.503411][   T28] kauditd_printk_skb: 41 callbacks suppressed
[   71.503429][   T28] audit: type=1400 audit(1722676852.839:326): avc:  denied  { bind } for  pid=1267 comm="syz.4.224" lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   71.507180][  T313] bridge0: port 2(bridge_slave_1) entered forwarding state
[   71.507402][  T313] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   71.514360][   T28] audit: type=1400 audit(1722676852.849:327): avc:  denied  { node_bind } for  pid=1267 comm="syz.4.224" saddr=172.20.20.170 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1
[   71.535655][  T313] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   71.550117][  T295] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[   71.568914][  T314] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[   71.598516][   T28] audit: type=1400 audit(1722676852.929:328): avc:  denied  { getopt } for  pid=1269 comm="syz.4.225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   71.623090][ T1270] loop4: detected capacity change from 0 to 256
[   71.638917][ T1270] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d)
[   71.651570][  T313] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   71.652983][   T28] audit: type=1400 audit(1722676852.989:329): avc:  denied  { read write } for  pid=1269 comm="syz.4.225" name="file1" dev="loop4" ino=1048611 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   71.667036][ T1247] device veth0_vlan entered promiscuous mode
[   71.689773][  T386] device bridge_slave_1 left promiscuous mode
[   71.693827][   T28] audit: type=1400 audit(1722676853.019:330): avc:  denied  { open } for  pid=1269 comm="syz.4.225" path="/59/bus/file0/file1" dev="loop4" ino=1048611 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   71.698964][  T386] bridge0: port 2(bridge_slave_1) entered disabled state
[   71.719267][   T28] audit: type=1400 audit(1722676853.029:331): avc:  denied  { mounton } for  pid=1269 comm="syz.4.225" path="/59/bus/file0/file0" dev="loop4" ino=1048612 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   71.749862][  T386] device bridge_slave_0 left promiscuous mode
[   71.756605][  T386] bridge0: port 1(bridge_slave_0) entered disabled state
[   71.764470][   T28] audit: type=1400 audit(1722676853.099:332): avc:  denied  { unlink } for  pid=291 comm="syz-executor" name="file0" dev="loop4" ino=1048618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   71.787140][  T386] device veth1_macvtap left promiscuous mode
[   71.793052][  T386] device veth0_vlan left promiscuous mode
[   71.810173][  T295] usb 1-1: Using ep0 maxpacket: 16
[   71.882804][    T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   71.890322][  T314] usb 4-1: Using ep0 maxpacket: 32
[   71.895590][    T6] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   71.902941][    T6] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   71.910284][    T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   71.920233][  T582] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[   71.930365][  T295] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   71.945877][ T1247] device veth1_macvtap entered promiscuous mode
[   71.952085][  T295] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   71.961727][  T295] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   71.987644][  T295] usb 1-1: New USB device found, idVendor=056a, idProduct=0028, bcdDevice= 0.00
[   71.996854][  T295] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   72.005266][  T682] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   72.013553][  T295] usb 1-1: config 0 descriptor??
[   72.018857][  T682] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   72.030200][  T314] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   72.030389][  T682] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   72.049303][  T314] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   72.064352][  T314] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[   72.073468][  T314] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   72.089966][  T314] usb 4-1: config 0 descriptor??
[   72.140729][  T314] hub 4-1:0.0: USB hub found
[   72.180176][  T582] usb 3-1: Using ep0 maxpacket: 16
[   72.197628][ T1277] bridge0: port 1(bridge_slave_0) entered blocking state
[   72.204702][ T1277] bridge0: port 1(bridge_slave_0) entered disabled state
[   72.215165][ T1277] device bridge_slave_0 entered promiscuous mode
[   72.250772][ T1277] bridge0: port 2(bridge_slave_1) entered blocking state
[   72.267282][   T28] audit: type=1400 audit(1722676853.599:333): avc:  denied  { connect } for  pid=1274 comm="syz.1.217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[   72.305219][ T1277] bridge0: port 2(bridge_slave_1) entered disabled state
[   72.324470][ T1277] device bridge_slave_1 entered promiscuous mode
[   72.448309][ T1261] netlink: 8 bytes leftover after parsing attributes in process `syz.3.222'.
[   72.459232][  T314] hub 4-1:0.0: config failed, hub doesn't have any ports! (err -19)
[   72.503708][ T1287] loop3: detected capacity change from 0 to 512
[   72.522784][ T1287] EXT4-fs error (device loop3): ext4_do_update_inode:5212: inode #3: comm syz.3.231: corrupted inode contents
[   72.534729][ T1287] EXT4-fs error (device loop3): ext4_dirty_inode:6074: inode #3: comm syz.3.231: mark_inode_dirty error
[   72.550405][  T582] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[   72.563774][   T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   72.564731][ T1287] EXT4-fs error (device loop3): ext4_do_update_inode:5212: inode #3: comm syz.3.231: corrupted inode contents
[   72.573316][   T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   72.582432][  T314] usbhid 4-1:0.0: can't add hid device: -71
[   72.595482][ T1287] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #3: comm syz.3.231: mark_inode_dirty error
[   72.598721][  T582] usb 3-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00
[   72.619417][ T1287] Quota error (device loop3): write_blk: dquota write failed
[   72.621040][  T410] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   72.627083][  T314] usbhid: probe of 4-1:0.0 failed with error -71
[   72.641128][ T1287] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota
[   72.643379][  T410] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   72.651087][  T582] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   72.667376][ T1287] EXT4-fs error (device loop3): ext4_acquire_dquot:6764: comm syz.3.231: Failed to acquire dquot type 0
[   72.669948][  T410] bridge0: port 1(bridge_slave_0) entered blocking state
[   72.685203][  T410] bridge0: port 1(bridge_slave_0) entered forwarding state
[   72.690821][  T582] usb 3-1: config 0 descriptor??
[   72.700948][  T314] usb 4-1: USB disconnect, device number 10
[   72.707125][ T1287] EXT4-fs error (device loop3): ext4_do_update_inode:5212: inode #16: comm syz.3.231: corrupted inode contents
[   72.726929][   T24] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   72.734974][   T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   72.740598][ T1287] EXT4-fs error (device loop3): ext4_dirty_inode:6074: inode #16: comm syz.3.231: mark_inode_dirty error
[   72.743781][   T24] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   72.760725][  T582] usbhid 3-1:0.0: couldn't find an input interrupt endpoint
[   72.763758][   T24] bridge0: port 2(bridge_slave_1) entered blocking state
[   72.775996][   T24] bridge0: port 2(bridge_slave_1) entered forwarding state
[   72.784281][ T1287] EXT4-fs error (device loop3): ext4_do_update_inode:5212: inode #16: comm syz.3.231: corrupted inode contents
[   72.802038][ T1287] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #16: comm syz.3.231: mark_inode_dirty error
[   72.813989][   T24] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   72.829913][   T24] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   72.834392][ T1263] loop0: detected capacity change from 0 to 40427
[   72.837829][ T1287] EXT4-fs error (device loop3): ext4_do_update_inode:5212: inode #16: comm syz.3.231: corrupted inode contents
[   72.856266][ T1287] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem
[   72.864912][ T1287] EXT4-fs error (device loop3): ext4_do_update_inode:5212: inode #16: comm syz.3.231: corrupted inode contents
[   72.869007][ T1263] F2FS-fs (loop0): Found nat_bits in checkpoint
[   72.877378][ T1287] EXT4-fs error (device loop3): ext4_truncate:4302: inode #16: comm syz.3.231: mark_inode_dirty error
[   72.897946][  T410] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   72.906635][ T1287] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem
[   72.927292][ T1287] EXT4-fs (loop3): 1 truncate cleaned up
[   72.933231][ T1287] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[   72.942272][ T1287] ext4 filesystem being mounted at /54/file1 supports timestamps until 2038 (0x7fffffff)
[   72.973733][  T410] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   72.982041][  T410] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   72.984281][ T1295] loop1: detected capacity change from 0 to 512
[   72.989394][  T410] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   73.002850][ T1272] loop2: detected capacity change from 0 to 512
[   73.010139][ T1277] device veth0_vlan entered promiscuous mode
[   73.016094][ T1263] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[   73.024564][ T1295] EXT4-fs (loop1): 1 truncate cleaned up
[   73.040428][ T1295] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[   73.068103][   T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   73.077829][ T1277] device veth1_macvtap entered promiscuous mode
[   73.089187][   T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   73.096867][  T295] wacom 0003:056A:0028.0002: Unknown device_type for 'HID 056a:0028'. Assuming pen.
[   73.115350][  T295] wacom 0003:056A:0028.0002: hidraw0: USB HID v0.00 Device [HID 056a:0028] on usb-dummy_hcd.0-1/input0
[   73.123378][   T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   73.136397][ T1272] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[   73.138231][  T295] input: Wacom Intuos5 touch L Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:056A:0028.0002/input/input5
[   73.147598][ T1272] ext4 filesystem being mounted at /28/file0 supports timestamps until 2038 (0x7fffffff)
[   73.309144][  T386] bridge0: port 3(gretap0) entered disabled state
[   73.472087][ T1272] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   73.488470][  T386] device gretap0 left promiscuous mode
[   73.498635][ T1272] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   73.509323][  T294] EXT4-fs (loop3): unmounting filesystem.
[   73.514044][  T314] usb 1-1: USB disconnect, device number 9
[   73.516501][ T1247] EXT4-fs (loop1): unmounting filesystem.
[   73.520674][  T386] bridge0: port 3(gretap0) entered disabled state
[   73.537700][ T1272] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   73.587566][ T1272] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   73.603398][ T1309] input: syz0 as /devices/virtual/input/input8
[   73.644643][ T1312] loop4: detected capacity change from 0 to 1024
[   73.651461][ T1312] EXT4-fs: Ignoring removed orlov option
[   73.658142][ T1312] EXT4-fs (loop4): Test dummy encryption mode enabled
[   73.669599][ T1312] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[   73.684096][ T1312] fscrypt (loop4): Missing crypto API support for AES-256-CTS-CBC (API name: "cts(cbc(aes))")
[   73.690768][   T19] usb 3-1: USB disconnect, device number 12
[   73.700990][  T386] device bridge_slave_1 left promiscuous mode
[   73.706965][  T386] bridge0: port 2(bridge_slave_1) entered disabled state
[   73.707613][ T1277] EXT4-fs (loop4): unmounting filesystem.
[   74.032696][  T386] device bridge_slave_0 left promiscuous mode
[   74.038830][  T386] bridge0: port 1(bridge_slave_0) entered disabled state
[   74.047585][  T386] device veth1_macvtap left promiscuous mode
[   74.055306][  T386] device veth0_vlan left promiscuous mode
[   74.248581][ T1327] fuse: Bad value for 'fd'
[   74.259464][ T1327] loop4: detected capacity change from 0 to 16
[   74.262843][ T1329] loop1: detected capacity change from 0 to 512
[   74.272809][ T1327] erofs: (device loop4): mounted with root inode @ nid 36.
[   74.281812][ T1327] erofs: (device loop4): z_erofs_do_map_blocks: invalid logical cluster 0 at nid 36
[   74.292423][ T1329] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[   74.294623][ T1327] syz.4.237: attempt to access beyond end of device
[   74.294623][ T1327] loop4: rw=0, sector=296, nr_sectors = 8 limit=16
[   74.314056][ T1327] erofs: (device loop4): z_erofs_read_folio: failed to read, err [-117]
[   74.315723][ T1329] netlink: 'syz.1.238': attribute type 1 has an invalid length.
[   74.338779][ T1247] EXT4-fs (loop1): unmounting filesystem.
[   74.345333][  T293] syz-executor: attempt to access beyond end of device
[   74.345333][  T293] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[   74.440945][  T577] EXT4-fs (loop2): unmounting filesystem.
[   74.454709][ T1337] loop3: detected capacity change from 0 to 512
[   74.499177][ T1337] EXT4-fs (loop3): 1 truncate cleaned up
[   74.507411][ T1343] loop2: detected capacity change from 0 to 256
[   74.514600][   T10] Bluetooth: hci0: Frame reassembly failed (-84)
[   74.521851][ T1337] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[   74.640887][  T294] EXT4-fs (loop3): unmounting filesystem.
[   74.650792][  T295] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[   74.743014][ T1353] loop0: detected capacity change from 0 to 256
[   74.788536][ T1353] FAT-fs (loop0): Unrecognized mount option "" or missing value
[   74.912794][ T1369] loop0: detected capacity change from 0 to 512
[   74.931967][ T1369] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[   74.940194][  T295] usb 2-1: Using ep0 maxpacket: 8
[   74.940996][ T1369] ext4 filesystem being mounted at /38/bus supports timestamps until 2038 (0x7fffffff)
[   75.060194][  T295] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[   75.069216][  T295] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   75.078374][  T295] usb 2-1: config 0 descriptor??
[   75.525361][ T1377] loop2: detected capacity change from 0 to 128
[   75.749278][  T293] EXT4-fs (loop0): unmounting filesystem.
[   75.994747][ T1386] loop3: detected capacity change from 0 to 128
[   76.160396][  T295] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32
[   76.170822][  T295] asix: probe of 2-1:0.0 failed with error -32
[   76.570087][   T45] Bluetooth: hci0: Opcode 0x1003 failed: -110
[   76.570121][ T1209] Bluetooth: hci0: command 0x1003 tx timeout
[   76.742264][ T1399] loop3: detected capacity change from 0 to 512
[   76.760308][ T1399] EXT4-fs (loop3): 1 truncate cleaned up
[   76.766094][ T1399] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[   76.834293][  T294] EXT4-fs (loop3): unmounting filesystem.
[   76.873832][ T1408] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   77.202920][   T28] kauditd_printk_skb: 7 callbacks suppressed
[   77.202944][   T28] audit: type=1400 audit(1722676858.539:341): avc:  denied  { create } for  pid=1415 comm="syz.2.261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   77.423260][ T1418] overlayfs: failed to resolve './file2': -2
[   77.654725][  T295] usb 2-1: USB disconnect, device number 9
[   77.851970][ T1423] device ip6erspan0 entered promiscuous mode
[   77.906527][   T28] audit: type=1400 audit(1722676859.239:342): avc:  denied  { create } for  pid=1424 comm="syz.4.264" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[   77.965223][   T28] audit: type=1400 audit(1722676859.299:343): avc:  denied  { getopt } for  pid=1428 comm="syz.0.266" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   77.997086][ T1429] loop0: detected capacity change from 0 to 512
[   78.022764][ T1427] loop1: detected capacity change from 0 to 256
[   78.096270][ T1429] EXT4-fs error (device loop0): __ext4_fill_super:5386: inode #2: comm syz.0.266: casefold flag without casefold feature
[   78.114054][ T1429] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended
[   78.117993][ T1438] loop3: detected capacity change from 0 to 512
[   78.132868][ T1429] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[   78.142236][ T1438] EXT4-fs warning (device loop3): dx_probe:877: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[   78.153980][ T1438] EXT4-fs warning (device loop3): dx_probe:880: Enable large directory feature to access it
[   78.172589][ T1438] EXT4-fs warning (device loop3): dx_probe:965: inode #2: comm syz.3.269: Corrupt directory, running e2fsck is recommended
[   78.189427][ T1438] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117
[   78.197854][ T1438] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2213: inode #15: comm syz.3.269: corrupted in-inode xattr
[   78.255857][ T1438] EXT4-fs (loop3): Remounting filesystem read-only
[   78.264103][ T1438] EXT4-fs error (device loop3): ext4_orphan_get:1401: comm syz.3.269: couldn't read orphan inode 15 (err -117)
[   78.283082][   T28] audit: type=1400 audit(1722676859.619:344): avc:  denied  { create } for  pid=1428 comm="syz.0.266" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   78.300729][ T1438] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[   78.499954][ T1438] EXT4-fs warning (device loop3): dx_probe:877: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[   78.601465][ T1438] EXT4-fs warning (device loop3): dx_probe:880: Enable large directory feature to access it
[   78.619936][ T1438] EXT4-fs warning (device loop3): dx_probe:965: inode #2: comm syz.3.269: Corrupt directory, running e2fsck is recommended
[   78.639289][ T1450] EXT4-fs error (device loop3): ext4_empty_dir:3099: inode #2: block 3: comm syz.3.269: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0
[   78.697197][ T1450] EXT4-fs (loop3): Remounting filesystem read-only
[   78.721089][   T28] audit: type=1400 audit(1722676860.059:345): avc:  denied  { watch watch_reads } for  pid=1437 comm="syz.3.269" path="/64/file0" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   78.721312][ T1450] EXT4-fs warning (device loop3): ext4_empty_dir:3101: inode #2: comm syz.3.269: directory missing '.'
[   78.804244][ T1452] ------------[ cut here ]------------
[   78.809687][ T1452] WARNING: CPU: 0 PID: 1452 at mm/page_alloc.c:5690 __alloc_pages+0xc0/0x780
[   78.818335][ T1452] Modules linked in:
[   78.822040][ T1452] CPU: 0 PID: 1452 Comm: syz.4.271 Not tainted 6.1.90-syzkaller-00127-g6aafd06a463b #0
[   78.831495][ T1452] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
[   78.841497][ T1452] RIP: 0010:__alloc_pages+0xc0/0x780
[   78.846574][ T1452] Code: 0b 72 13 44 89 e8 25 00 20 00 00 75 09 80 3d 8b 9e b7 05 00 74 0d 83 fb 0a 76 16 45 31 e4 e9 4e 03 00 00 c6 05 75 9e b7 05 01 <0f> 0b 83 fb 0a 77 ea 89 1c 24 44 23 2d 57 c7 ba 05 65 48 8b 05 67
[   78.866103][ T1452] RSP: 0018:ffffc9000448fa40 EFLAGS: 00010246
[   78.871963][ T1452] RAX: 0000000000000000 RBX: 000000000000001a RCX: 0000000000000000
[   78.880146][ T1452] RDX: 0000000000000018 RSI: 0000000000000000 RDI: ffffc9000448fae8
[   78.888171][ T1452] RBP: ffffc9000448fb78 R08: dffffc0000000000 R09: ffffc9000448fad0
[   78.896118][ T1452] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000000
[   78.903869][ T1452] R13: 0000000000040dc0 R14: dffffc0000000000 R15: 1ffff92000891f54
[   78.911665][ T1452] FS:  00007f3bd04ae6c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000
[   78.920522][ T1452] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   78.926917][ T1452] CR2: 000000110c2f7aa9 CR3: 0000000129502000 CR4: 00000000003506b0
[   78.934760][ T1452] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[   78.942560][ T1452] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[   78.950368][ T1452] Call Trace:
[   78.953464][ T1452]  <TASK>
[   78.956243][ T1452]  ? show_regs+0x58/0x60
[   78.960355][ T1452]  ? __warn+0x160/0x3d0
[   78.964319][ T1452]  ? __alloc_pages+0xc0/0x780
[   78.968846][ T1452]  ? report_bug+0x4d5/0x7d0
[   78.973208][ T1452]  ? __alloc_pages+0xc0/0x780
[   78.977692][ T1452]  ? handle_bug+0x41/0x70
[   78.981933][ T1452]  ? exc_invalid_op+0x1b/0x50
[   78.986369][ T1452]  ? asm_exc_invalid_op+0x1b/0x20
[   78.991249][ T1452]  ? __alloc_pages+0xc0/0x780
[   78.995841][ T1452]  ? do_vfs_ioctl+0xba7/0x29a0
[   79.000534][ T1452]  ? schedule+0xda/0x180
[   79.004595][ T1452]  ? prep_new_page+0x110/0x110
[   79.009189][ T1452]  ? futex_unqueue+0x110/0x140
[   79.013911][ T1452]  __kmalloc_large_node+0x9e/0x1b0
[   79.018864][ T1452]  ? ioctl_has_perm+0x1f8/0x560
[   79.023565][ T1452]  ? input_mt_init_slots+0xcf/0xa50
[   79.028530][ T1452]  __kmalloc+0xef/0x1e0
[   79.032555][ T1452]  ? ioctl_has_perm+0x3f0/0x560
[   79.037206][ T1452]  input_mt_init_slots+0xcf/0xa50
[   79.042099][ T1452]  ? mutex_lock_interruptible+0xb1/0x1e0
[   79.047553][ T1452]  uinput_create_device+0x522/0x630
[   79.052605][ T1452]  uinput_ioctl_handler+0xa63/0x16a0
[   79.057692][ T1452]  ? selinux_file_ioctl+0x3cc/0x540
[   79.062756][ T1452]  ? uinput_release+0x50/0x50
[   79.067242][ T1452]  ? __fget_files+0x2cb/0x330
[   79.070073][  T295] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[   79.071812][ T1452]  uinput_ioctl+0x28/0x30
[   79.083323][ T1452]  ? uinput_poll+0x120/0x120
[   79.087720][ T1452]  __se_sys_ioctl+0x114/0x190
[   79.092268][ T1452]  __x64_sys_ioctl+0x7b/0x90
[   79.096659][ T1452]  x64_sys_call+0x98/0x9a0
[   79.100938][ T1452]  do_syscall_64+0x3b/0xb0
[   79.105161][ T1452]  ? clear_bhb_loop+0x55/0xb0
[   79.109677][ T1452]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   79.115438][ T1452] RIP: 0033:0x7f3bcf7779f9
[   79.119661][ T1452] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   79.139132][ T1452] RSP: 002b:00007f3bd04ae048 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   79.147381][ T1452] RAX: ffffffffffffffda RBX: 00007f3bcf905f80 RCX: 00007f3bcf7779f9
[   79.155336][ T1452] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000006
[   79.163188][ T1452] RBP: 00007f3bcf7e58ee R08: 0000000000000000 R09: 0000000000000000
[   79.170987][ T1452] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   79.178778][ T1452] R13: 000000000000000b R14: 00007f3bcf905f80 R15: 00007ffe5ef86668
[   79.186631][ T1452]  </TASK>
[   79.189452][ T1452] ---[ end trace 0000000000000000 ]---
[   79.219570][  T293] EXT4-fs (loop0): unmounting filesystem.
[   79.244923][ T1456] syz.4.274[1456] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   79.245004][ T1456] syz.4.274[1456] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   79.294879][ T1458] loop0: detected capacity change from 0 to 512
[   79.306961][ T1460] loop2: detected capacity change from 0 to 128
[   79.325793][ T1463] loop4: detected capacity change from 0 to 512
[   79.333156][ T1458] EXT4-fs (loop0): Test dummy encryption mode enabled
[   79.339825][ T1460] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1)
[   79.341411][ T1464] loop1: detected capacity change from 0 to 512
[   79.352048][ T1463] journal_path: Lookup failure for './file0'
[   79.361235][ T1464] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   79.373638][ T1458] EXT4-fs error (device loop0): __ext4_iget:5046: inode #11: block 1: comm syz.0.272: invalid block
[   79.380388][ T1463] EXT4-fs: error: could not find journal device path
[   79.384722][  T295] usb 4-1: device descriptor read/64, error -71
[   79.397639][ T1458] EXT4-fs error (device loop0): ext4_orphan_get:1401: comm syz.0.272: couldn't read orphan inode 11 (err -117)
[   79.413635][ T1458] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[   79.443335][ T1464] EXT4-fs error (device loop1): ext4_orphan_get:1396: inode #15: comm syz.1.276: casefold flag without casefold feature
[   79.461675][ T1463] loop4: detected capacity change from 0 to 2048
[   79.470807][ T1464] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: inode #12: comm syz.1.276: missing EA_INODE flag
[   79.485441][ T1464] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.276: error while reading EA inode 12 err=-117
[   79.503006][ T1463] EXT4-fs error (device loop4): __ext4_fill_super:5386: inode #2: comm syz.4.277: casefold flag without casefold feature
[   79.515832][ T1463] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended
[   79.526120][ T1463] EXT4-fs (loop4): Errors on filesystem, clearing orphan list.
[   79.533693][ T1463] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[   79.577426][ T1464] EXT4-fs (loop1): 1 orphan inode deleted
[   80.853103][   T28] audit: type=1326 audit(1722676861.399:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1459 comm="syz.2.275" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc5135779f9 code=0x0
[   80.878367][  T293] EXT4-fs (loop0): unmounting filesystem.
[   80.889793][ T1464] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[   80.958844][ T1477] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[   81.172614][ T1493] overlayfs: failed to resolve './file2': -2
[   81.268913][   T28] audit: type=1400 audit(1722676862.599:347): avc:  denied  { getopt } for  pid=1462 comm="syz.1.276" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   81.315800][ T1277] EXT4-fs (loop4): unmounting filesystem.
[   81.321614][  T295] usb 4-1: device descriptor read/64, error -71
[   81.449413][  T294] EXT4-fs (loop3): unmounting filesystem.
[   81.533365][ T1492] loop2: detected capacity change from 0 to 40427
[   81.567092][ T1492] F2FS-fs (loop2): invalid crc value
[   81.585978][ T1492] F2FS-fs (loop2): Found nat_bits in checkpoint
[   81.587561][ T1247] EXT4-fs (loop1): unmounting filesystem.
[   81.929825][   T28] audit: type=1400 audit(1722676863.259:348): avc:  denied  { watch } for  pid=1507 comm="syz.1.284" path="/10/file1" dev="tmpfs" ino=73 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[   81.958884][ T1508] EXT4-fs warning (device sda1): verify_group_input:151: Cannot add at group 25 (only 8 groups)
[   81.976401][ T1492] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[   82.045293][ T1510] loop0: detected capacity change from 0 to 256
[   82.059124][   T28] audit: type=1400 audit(1722676863.289:349): avc:  denied  { execute_no_trans } for  pid=1507 comm="syz.1.284" path="/10/file1" dev="tmpfs" ino=73 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[   82.085021][ T1499] loop3: detected capacity change from 0 to 40427
[   82.093065][ T1499] F2FS-fs (loop3): invalid crc value
[   82.100567][ T1499] F2FS-fs (loop3): Found nat_bits in checkpoint
[   82.167382][ T1499] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4
[   82.732124][ T1499] overlayfs: missing 'lowerdir'
[   82.885242][   T19] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[   82.924500][  T577] syz-executor: attempt to access beyond end of device
[   82.924500][  T577] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[   83.136887][ T1529] xt_l2tp: v2 doesn't support IP mode
[   83.171540][  T294] syz-executor: attempt to access beyond end of device
[   83.171540][  T294] loop3: rw=2049, sector=45096, nr_sectors = 24 limit=40427
[   83.344423][ T1531] loop4: detected capacity change from 0 to 2048
[   83.442641][ T1531] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[   83.457428][ T1529] 9pnet_fd: Insufficient options for proto=fd
[   83.463956][  T295] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[   83.479789][ T1277] EXT4-fs (loop4): unmounting filesystem.
[   83.640103][   T19] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[   83.656740][   T19] usb 2-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[   83.680474][   T19] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[   83.689465][   T19] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   83.753488][   T19] snd-usb-audio: probe of 2-1:27.0 failed with error -2
[   83.757038][  T380] udevd[380]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   83.900446][  T295] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   83.977554][  T295] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   83.987418][  T295] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 0.00
[   83.998284][  T314] usb 2-1: USB disconnect, device number 10
[   83.999654][  T295] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   84.024137][  T295] usb 3-1: config 0 descriptor??
[   84.170705][ T1548] loop0: detected capacity change from 0 to 2048
[   84.203159][ T1548] Alternate GPT is invalid, using primary GPT.
[   84.209636][ T1548]  loop0: p1 p2 p3
[   84.263516][   T28] audit: type=1400 audit(1722676865.599:350): avc:  denied  { set_context_mgr } for  pid=1543 comm="syz.0.291" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1
[   84.470213][ T1551] loop4: detected capacity change from 0 to 128
[   84.471606][ T1552] loop3: detected capacity change from 0 to 128
[   84.476960][ T1551] EXT4-fs (loop4): Test dummy encryption mode enabled
[   84.497065][ T1552] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1)
[   84.497858][ T1551] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[   84.514949][ T1551] ext4 filesystem being mounted at /15/mnt supports timestamps until 2038 (0x7fffffff)
[   84.534596][ T1526] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   84.545150][ T1526] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   84.556126][ T1526] loop2: detected capacity change from 0 to 512
[   84.581067][ T1526] EXT4-fs error (device loop2): ext4_find_inline_data_nolock:164: inode #12: comm syz.2.286: inline data xattr refers to an external xattr inode
[   84.599822][ T1526] EXT4-fs (loop2): Remounting filesystem read-only
[   84.600764][ T1277] EXT4-fs (loop4): unmounting filesystem.
[   84.608189][ T1526] EXT4-fs error (device loop2): ext4_orphan_get:1401: comm syz.2.286: couldn't read orphan inode 12 (err -117)
[   84.629960][ T1526] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[   84.719458][ T1560] loop4: detected capacity change from 0 to 512
[   85.215725][ T1562] loop1: detected capacity change from 0 to 1024
[   85.223899][ T1562] EXT4-fs: Mount option(s) incompatible with ext3
[   85.235135][ T1560] EXT4-fs error (device loop4): ext4_do_update_inode:5212: inode #16: comm syz.4.294: corrupted inode contents
[   85.247673][ T1560] EXT4-fs error (device loop4): ext4_dirty_inode:6074: inode #16: comm syz.4.294: mark_inode_dirty error
[   85.261563][ T1560] EXT4-fs error (device loop4): ext4_do_update_inode:5212: inode #16: comm syz.4.294: corrupted inode contents
[   85.263348][  T382] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[   85.284015][ T1560] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #16: comm syz.4.294: mark_inode_dirty error
[   85.295511][ T1560] EXT4-fs error (device loop4): ext4_do_update_inode:5212: inode #16: comm syz.4.294: corrupted inode contents
[   85.330808][  T295] usbhid 3-1:0.0: can't add hid device: -71
[   85.336619][ T1560] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem
[   85.345427][  T295] usbhid: probe of 3-1:0.0 failed with error -71
[   85.354621][  T295] usb 3-1: USB disconnect, device number 13
[   85.501315][   T43] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1)
[   85.519196][ T1560] EXT4-fs error (device loop4): ext4_do_update_inode:5212: inode #16: comm syz.4.294: corrupted inode contents
[   85.585917][ T1560] EXT4-fs error (device loop4): ext4_truncate:4302: inode #16: comm syz.4.294: mark_inode_dirty error
[   85.599408][ T1560] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem
[   85.609671][ T1560] EXT4-fs (loop4): 1 truncate cleaned up
[   85.615294][ T1560] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[   85.624220][ T1560] ext4 filesystem being mounted at /16/file1 supports timestamps until 2038 (0x7fffffff)
[   85.630432][  T398] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14
[   85.645290][  T398] EXT4-fs error (device loop4): ext4_release_dquot:6787: comm kworker/u4:6: Failed to release dquot type 1
[   85.673132][ T1575] loop3: detected capacity change from 0 to 512
[   85.684706][ T1575] EXT4-fs: Ignoring removed nomblk_io_submit option
[   85.684952][ T1277] EXT4-fs (loop4): unmounting filesystem.
[   85.696924][ T1575] EXT4-fs: journaled quota format not specified
[   85.712807][ T1577] loop4: detected capacity change from 0 to 512
[   85.722083][ T1577] EXT4-fs error (device loop4): ext4_ext_check_inode:520: inode #15: comm syz.4.299: pblk 0 bad header/extent: invalid eh_entries - magic f30a, entries 24833, max 4(4), depth 0(0)
[   85.742544][ T1577] EXT4-fs error (device loop4): ext4_orphan_get:1401: comm syz.4.299: couldn't read orphan inode 15 (err -117)
[   85.754685][   T19] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[   85.754894][  T577] EXT4-fs (loop2): unmounting filesystem.
[   85.768689][ T1580] loop3: detected capacity change from 0 to 256
[   85.780292][ T1577] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[   85.809292][   T28] audit: type=1400 audit(1722676867.139:351): avc:  denied  { mount } for  pid=1579 comm="syz.3.301" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1
[   85.837556][ T1584] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior.
[   85.859517][ T1585] fuse: Invalid rootmode
[   85.863973][ T1577] ext4 filesystem being mounted at /17/file2 supports timestamps until 2038 (0x7fffffff)
[   85.876262][   T28] audit: type=1400 audit(1722676867.169:352): avc:  denied  { mounton } for  pid=1579 comm="syz.3.301" path="/70/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1
[   85.913245][ T1580] FAT-fs (loop3): Directory bread(block 64) failed
[   85.926958][ T1580] FAT-fs (loop3): Directory bread(block 65) failed
[   85.934093][ T1584] overlayfs: filesystem on './bus' not supported as upperdir
[   85.943159][   T28] audit: type=1400 audit(1722676867.269:353): avc:  denied  { map } for  pid=1579 comm="syz.3.301" path="/" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[   85.963870][ T1580] FAT-fs (loop3): Directory bread(block 66) failed
[   85.997983][ T1580] FAT-fs (loop3): Directory bread(block 67) failed
[   86.013718][ T1580] FAT-fs (loop3): Directory bread(block 68) failed
[   86.030344][ T1580] FAT-fs (loop3): Directory bread(block 69) failed
[   86.046081][ T1580] FAT-fs (loop3): Directory bread(block 70) failed
[   86.059503][ T1580] FAT-fs (loop3): Directory bread(block 71) failed
[   86.066295][ T1580] FAT-fs (loop3): Directory bread(block 72) failed
[   86.072735][ T1580] FAT-fs (loop3): Directory bread(block 73) failed
[   86.090299][   T28] audit: type=1400 audit(1722676867.429:354): avc:  denied  { unmount } for  pid=294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1
[   86.150148][   T19] usb 2-1: config 0 has an invalid interface number: 156 but max is 1
[   86.180681][   T19] usb 2-1: config 0 has an invalid descriptor of length 229, skipping remainder of the config
[   86.194634][ T1596] loop0: detected capacity change from 0 to 512
[   86.195356][ T1277] EXT4-fs (loop4): unmounting filesystem.
[   86.207651][   T19] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2
[   86.259329][ T1596] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[   86.277168][   T19] usb 2-1: config 0 has no interface number 0
[   86.278049][ T1596] ext4 filesystem being mounted at /51/file1 supports timestamps until 2038 (0x7fffffff)
[   86.283725][   T19] usb 2-1: config 0 interface 156 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0
[   86.302838][   T19] usb 2-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 187, changing to 11
[   86.314242][   T19] usb 2-1: config 0 interface 156 altsetting 0 endpoint 0x3 has invalid maxpacket 34240, setting to 1024
[   86.330162][   T19] usb 2-1: config 0 interface 156 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[   86.333512][   T28] audit: type=1326 audit(1722676867.669:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1595 comm="syz.0.305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b4b5779f9 code=0x7ffc0000
[   86.347010][   T19] usb 2-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9
[   86.366344][   T28] audit: type=1400 audit(1722676867.679:356): avc:  denied  { bind } for  pid=1606 comm="syz.2.308" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   86.375352][   T19] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   86.394421][   T28] audit: type=1326 audit(1722676867.709:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1595 comm="syz.0.305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b4b5779f9 code=0x7ffc0000
[   86.426263][ T1609] netlink: 12 bytes leftover after parsing attributes in process `syz.3.302'.
[   86.441344][   T19] usb 2-1: config 0 descriptor??
[   86.460142][ T1562] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[   86.483042][   T19] usb 2-1: MIDIStreaming interface descriptor not found
[   86.562334][   T28] audit: type=1326 audit(1722676867.739:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1595 comm="syz.0.305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6b4b5779f9 code=0x7ffc0000
[   86.698428][  T293] EXT4-fs (loop0): unmounting filesystem.
[   87.138904][ T1620] loop0: detected capacity change from 0 to 1024
[   87.149658][ T1620] EXT4-fs: Ignoring removed orlov option
[   87.209716][ T1620] EXT4-fs: Ignoring removed nomblk_io_submit option
[   87.260614][ T1620] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[   87.285015][ T1629] 9pnet_fd: Insufficient options for proto=fd
[   87.703421][ T1640] loop4: detected capacity change from 0 to 512
[   87.731182][  T380] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[   87.970738][  T293] EXT4-fs (loop0): unmounting filesystem.
[   88.867709][   T19] usb 2-1: USB disconnect, device number 11
[   88.877048][ T1656] loop4: detected capacity change from 0 to 512
[   88.889720][ T1654] device pim6reg1 entered promiscuous mode
[   88.911095][ T1656] EXT4-fs (loop4): revision level too high, forcing read-only mode
[   88.919510][ T1656] EXT4-fs (loop4): orphan cleanup on readonly fs
[   88.926283][ T1656] EXT4-fs error (device loop4): ext4_orphan_get:1396: inode #16: comm syz.4.322: casefold flag without casefold feature
[   88.939703][ T1656] EXT4-fs error (device loop4): ext4_orphan_get:1396: inode #16: comm syz.4.322: unexpected EA_INODE flag
[   88.951928][ T1656] EXT4-fs error (device loop4): ext4_orphan_get:1401: comm syz.4.322: couldn't read orphan inode 16 (err -117)
[   88.963995][ T1656] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[   89.095089][ T1670] loop0: detected capacity change from 0 to 1024
[   89.104356][ T1670] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[   89.250068][  T682] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[   89.660409][  T682] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   89.671949][   T19] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[   90.257242][  T682] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   90.299977][  T682] usb 5-1: New USB device found, idVendor=04b4, idProduct=07b1, bcdDevice= 0.00
[   90.314653][  T293] EXT4-fs (loop0): unmounting filesystem.
[   90.329387][  T682] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   90.358171][  T682] usb 5-1: config 0 descriptor??
[   90.475485][ T1688] loop3: detected capacity change from 0 to 256
[   90.490435][ T1688] exfat: Unknown parameter './file2'
[   90.705123][ T1689] loop1: detected capacity change from 0 to 256
[   91.990777][   T28] kauditd_printk_skb: 35 callbacks suppressed
[   91.990856][   T28] audit: type=1400 audit(1722676873.079:394): avc:  denied  { bind } for  pid=1687 comm="syz.3.331" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   92.894361][ T1277] EXT4-fs (loop4): unmounting filesystem.
[   92.926302][   T28] audit: type=1400 audit(1722676873.319:395): avc:  denied  { listen } for  pid=1687 comm="syz.3.331" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   92.945959][   T28] audit: type=1400 audit(1722676873.549:396): avc:  denied  { write } for  pid=1687 comm="syz.3.331" path="socket:[21659]" dev="sockfs" ino=21659 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   93.000132][   T19] usb 3-1: device descriptor read/all, error -71
[   93.020579][ T1683] loop0: detected capacity change from 0 to 40427
[   93.029817][   T28] audit: type=1400 audit(1722676873.649:397): avc:  denied  { accept } for  pid=1687 comm="syz.3.331" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   93.044899][ T1699] loop3: detected capacity change from 0 to 256
[   93.060703][ T1683] F2FS-fs (loop0): invalid crc value
[   93.078631][ T1697] netlink: 8 bytes leftover after parsing attributes in process `syz.2.332'.
[   93.082374][ T1683] F2FS-fs (loop0): Found nat_bits in checkpoint
[   93.087358][ T1697] netlink: 8 bytes leftover after parsing attributes in process `syz.2.332'.
[   93.102226][  T682] usbhid 5-1:0.0: can't add hid device: -71
[   93.108656][ T1697] netlink: 212 bytes leftover after parsing attributes in process `syz.2.332'.
[   93.117817][  T682] usbhid: probe of 5-1:0.0 failed with error -71
[   93.125287][ T1708] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   93.206153][  T682] usb 5-1: USB disconnect, device number 7
[   93.230132][ T1683] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4
[   93.657190][ T1717] loop0: detected capacity change from 0 to 256
[   93.671075][ T1717] exfat: Bad value for 'uid'
[   93.734537][   T28] audit: type=1400 audit(1722676875.069:398): avc:  denied  { getopt } for  pid=1718 comm="syz.4.339" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   93.804378][ T1724] loop2: detected capacity change from 0 to 512
[   93.837934][ T1724] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm syz.2.340: bg 0: block 5: invalid block bitmap
[   93.851982][ T1724] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6171: Corrupt filesystem
[   93.861008][ T1724] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.340: invalid indirect mapped block 3 (level 2)
[   93.874577][ T1724] EXT4-fs (loop2): 1 orphan inode deleted
[   93.880843][ T1724] EXT4-fs (loop2): 1 truncate cleaned up
[   93.886439][ T1724] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[   93.990702][   T28] audit: type=1326 audit(1722676875.269:399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1723 comm="syz.2.340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5135779f9 code=0x7ffc0000
[   94.071868][   T28] audit: type=1326 audit(1722676875.269:400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1723 comm="syz.2.340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7fc5135779f9 code=0x7ffc0000
[   94.114382][   T28] audit: type=1326 audit(1722676875.269:401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1723 comm="syz.2.340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5135779f9 code=0x7ffc0000
[   94.141502][ T1738] loop1: detected capacity change from 0 to 512
[   94.150311][   T28] audit: type=1326 audit(1722676875.269:402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1723 comm="syz.2.340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc5135779f9 code=0x7ffc0000
[   94.173949][   T28] audit: type=1326 audit(1722676875.269:403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1723 comm="syz.2.340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5135779f9 code=0x7ffc0000
[   94.211217][  T577] EXT4-fs (loop2): unmounting filesystem.
[   94.330235][  T410] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[   94.580226][   T24] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[   94.800956][  T410] usb 4-1: New USB device found, idVendor=18ec, idProduct=3290, bcdDevice=c4.47
[   94.810511][  T682] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[   94.818037][  T410] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   94.827252][  T410] usb 4-1: config 0 descriptor??
[   94.839237][ T1748] serio: Serial port pts0
[   94.870184][   T24] usb 3-1: Using ep0 maxpacket: 16
[   94.945892][ T1750] loop0: detected capacity change from 0 to 256
[   95.082643][   T24] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 11
[   95.110171][  T682] usb 2-1: device descriptor read/64, error -71
[   95.167768][   T24] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0
[   95.170082][ T1754] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   95.177684][   T24] usb 3-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0
[   95.202105][   T24] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0
[   95.211914][   T24] usb 3-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0
[   95.221704][   T24] usb 3-1: config 1 interface 0 has no altsetting 0
[   95.228188][   T24] usb 3-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77
[   95.237305][   T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   95.300767][   T24] ums-sddr09 3-1:1.0: USB Mass Storage device detected
[   95.320186][  T410] usb 4-1: Found UVC 0.00 device <unnamed> (18ec:3290)
[   95.326979][  T410] usb 4-1: No valid video chain found.
[   95.336154][  T410] usb 4-1: USB disconnect, device number 13
[   95.510771][   T24] scsi host1: usb-storage 3-1:1.0
[   95.540093][  T682] usb 2-1: device descriptor read/64, error -71
[   95.640139][   T19] usb 5-1: new full-speed USB device number 8 using dummy_hcd
[   95.716798][ T1771] overlayfs: missing 'workdir'
[   95.830116][  T682] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[   95.837957][ T1773] loop3: detected capacity change from 0 to 512
[   95.845114][ T1773] EXT4-fs (loop3): Test dummy encryption mode enabled
[   95.853235][ T1773] EXT4-fs error (device loop3): ext4_find_inline_data_nolock:164: inode #12: comm syz.3.354: inline data xattr refers to an external xattr inode
[   95.868895][ T1773] EXT4-fs error (device loop3): ext4_orphan_get:1401: comm syz.3.354: couldn't read orphan inode 12 (err -117)
[   95.880831][ T1773] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[   96.150387][  T682] usb 2-1: device descriptor read/64, error -71
[   96.237422][   T19] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   96.247374][   T19] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2
[   96.256072][   T19] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 64
[   96.266818][   T19] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[   96.275655][   T19] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   96.300163][ T1766] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[   96.320708][   T19] hub 5-1:1.0: bad descriptor, ignoring hub
[   96.326521][   T19] hub: probe of 5-1:1.0 failed with error -5
[   96.332636][   T19] cdc_wdm 5-1:1.0: skipping garbage
[   96.337673][   T19] cdc_wdm 5-1:1.0: skipping garbage
[   96.343691][   T19] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device
[   96.513360][ T1781] fuse: Unknown parameter ''
[   96.560101][  T682] usb 2-1: device descriptor read/64, error -71
[   96.580536][   T24] scsi 1:0:0:0: Direct-Access     Sandisk  ImageMate SDDR09 0177 PQ: 0 ANSI: 0
[   96.640263][   T19] usb 5-1: USB disconnect, device number 8
[   96.690467][  T682] usb usb2-port1: attempt power cycle
[   96.696328][  T294] EXT4-fs (loop3): unmounting filesystem.
[   96.830981][  T410] usb 3-1: USB disconnect, device number 16
[   96.850148][ T1767] sddr09: could not read card info
[   96.855272][   T43] sd 1:0:0:0: [sdb] 0 512-byte logical blocks: (0 B/0 B)
[   96.862193][   T43] sd 1:0:0:0: [sdb] 0-byte physical blocks
[   96.867868][   T43] sd 1:0:0:0: [sdb] Write Protect is off
[   96.873621][   T43] sd 1:0:0:0: [sdb] Asking for cache data failed
[   96.879834][   T43] sd 1:0:0:0: [sdb] Assuming drive cache: write through
[   96.889091][   T43] sd 1:0:0:0: [sdb] Attached SCSI removable disk
[   96.910933][  T382] udevd[382]: inotify_add_watch(7, /dev/sdb, 10) failed: No such file or directory
[   96.935322][  T380] udevd[380]: inotify_add_watch(7, /dev/sdb, 10) failed: No such file or directory
[   96.970123][   T19] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[   97.110172][  T682] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[   97.210255][   T19] usb 4-1: Using ep0 maxpacket: 8
[   97.267669][   T28] kauditd_printk_skb: 49 callbacks suppressed
[   97.267686][   T28] audit: type=1400 audit(1722676878.599:453): avc:  denied  { mounton } for  pid=1790 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1
[   97.330341][   T19] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[   97.364015][   T19] usb 4-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00
[   97.373840][   T19] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   97.385844][   T19] usb 4-1: config 0 descriptor??
[   97.391718][ T1794] loop0: detected capacity change from 0 to 2048
[   97.439331][ T1794] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[   97.442254][   T19] usbhid 4-1:0.0: couldn't find an input interrupt endpoint
[   97.644987][ T1783] loop3: detected capacity change from 0 to 128
[   97.651758][ T1790] bridge0: port 1(bridge_slave_0) entered blocking state
[   97.658709][ T1790] bridge0: port 1(bridge_slave_0) entered disabled state
[   97.665753][  T682] usb 2-1: device not accepting address 14, error -71
[   97.672935][ T1790] device bridge_slave_0 entered promiscuous mode
[   97.673218][ T1783] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[   97.697580][ T1790] bridge0: port 2(bridge_slave_1) entered blocking state
[   97.706128][ T1790] bridge0: port 2(bridge_slave_1) entered disabled state
[   97.726555][ T1790] device bridge_slave_1 entered promiscuous mode
[   97.984427][ T1794] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[   98.061834][    T8] ------------[ cut here ]------------
[   98.067150][    T8] kernel BUG at fs/ext4/inode.c:2749!
[   98.072550][    T8] invalid opcode: 0000 [#1] PREEMPT SMP KASAN
[   98.078445][    T8] CPU: 0 PID: 8 Comm: kworker/u4:0 Tainted: G        W          6.1.90-syzkaller-00127-g6aafd06a463b #0
[   98.089376][    T8] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
[   98.099271][    T8] Workqueue: writeback wb_workfn (flush-7:0)
[   98.105085][    T8] RIP: 0010:ext4_writepages+0x3fab/0x3fd0
[   98.110636][    T8] Code: ac 80 ff 31 ff 89 de e8 53 ac 80 ff 45 84 f6 75 2a e8 b9 a9 80 ff 49 bc 00 00 00 00 00 fc ff df e9 6e f6 ff ff e8 a5 a9 80 ff <0f> 0b e8 9e a9 80 ff e8 95 90 0b ff e9 46 c3 ff ff e8 8f a9 80 ff
[   98.130077][    T8] RSP: 0018:ffffc90000087000 EFLAGS: 00010293
[   98.135974][    T8] RAX: ffffffff81f4f90b RBX: 0000008000000000 RCX: ffff888100398000
[   98.143788][    T8] RDX: 0000000000000000 RSI: 0000008000000000 RDI: 0000000000000000
[   98.151599][    T8] RBP: ffffc90000087410 R08: ffffffff81f4c06b R09: ffffed10200c40c2
[   98.159425][    T8] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff888137b70000
[   98.167231][    T8] R13: ffff888100620748 R14: 000000c410000000 R15: ffffc900000872e0
[   98.175037][    T8] FS:  0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000
[   98.183808][    T8] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   98.190232][    T8] CR2: 00007ffd2e231ff8 CR3: 000000012c87b000 CR4: 00000000003506b0
[   98.198039][    T8] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[   98.205846][    T8] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[   98.213658][    T8] Call Trace:
[   98.216784][    T8]  <TASK>
[   98.219577][    T8]  ? __die_body+0x62/0xb0
[   98.223730][    T8]  ? die+0x88/0xb0
[   98.227292][    T8]  ? do_trap+0x103/0x330
[   98.231367][    T8]  ? ext4_writepages+0x3fab/0x3fd0
[   98.236312][    T8]  ? handle_invalid_op+0x95/0xc0
[   98.241082][    T8]  ? ext4_writepages+0x3fab/0x3fd0
[   98.246031][    T8]  ? exc_invalid_op+0x32/0x50
[   98.250546][    T8]  ? asm_exc_invalid_op+0x1b/0x20
[   98.255409][    T8]  ? ext4_writepages+0x70b/0x3fd0
[   98.260271][    T8]  ? ext4_writepages+0x3fab/0x3fd0
[   98.265212][    T8]  ? ext4_writepages+0x3fab/0x3fd0
[   98.270170][    T8]  ? cpudl_cleanup+0x40/0x40
[   98.274595][    T8]  ? cpudl_cleanup+0x40/0x40
[   98.279012][    T8]  ? ext4_read_folio+0x240/0x240
[   98.283787][    T8]  ? xas_start+0x32c/0x3f0
[   98.288044][    T8]  ? xas_load+0x39d/0x3b0
[   98.292206][    T8]  ? __kasan_check_write+0x14/0x20
[   98.297155][    T8]  ? __filemap_get_folio+0x95e/0xae0
[   98.302277][    T8]  ? __kasan_check_write+0x14/0x20
[   98.307225][    T8]  ? folio_activate_fn+0xd20/0xd20
[   98.312183][    T8]  ? ext4_read_folio+0x240/0x240
[   98.316948][    T8]  do_writepages+0x385/0x620
[   98.321373][    T8]  ? __writepage+0x130/0x130
[   98.325796][    T8]  ? enqueue_task_fair+0xe57/0x24c0
[   98.330831][    T8]  ? __kasan_check_write+0x14/0x20
[   98.335776][    T8]  __writeback_single_inode+0xdc/0xb80
[   98.341072][    T8]  writeback_sb_inodes+0xb32/0x1910
[   98.346102][    T8]  ? _raw_spin_lock+0xa4/0x1b0
[   98.350717][    T8]  ? queue_io+0x520/0x520
[   98.354869][    T8]  ? __writeback_inodes_wb+0x3f0/0x3f0
[   98.360166][    T8]  ? queue_io+0x3d0/0x520
[   98.364329][    T8]  ? memset+0x35/0x40
[   98.368152][    T8]  wb_writeback+0x3b9/0x9f0
[   98.372491][    T8]  ? inode_cgwb_move_to_attached+0x3c0/0x3c0
[   98.378301][    T8]  ? set_worker_desc+0x158/0x1c0
[   98.383080][    T8]  ? __kasan_check_write+0x14/0x20
[   98.388033][    T8]  ? _raw_spin_unlock_irqrestore+0x5b/0x80
[   98.393667][    T8]  wb_workfn+0x399/0x1030
[   98.397841][    T8]  ? inode_wait_for_writeback+0x280/0x280
[   98.403387][    T8]  ? native_set_ldt+0x130/0x130
[   98.408076][    T8]  ? __this_cpu_preempt_check+0x13/0x20
[   98.413452][    T8]  ? tracing_record_taskinfo_sched_switch+0x84/0x390
[   98.419969][    T8]  ? probe_sched_switch+0x60/0x80
[   98.424827][    T8]  ? _raw_spin_unlock+0x4c/0x70
[   98.429511][    T8]  ? finish_task_switch+0x167/0x7b0
[   98.434553][    T8]  ? __kasan_check_read+0x11/0x20
[   98.439403][    T8]  ? read_word_at_a_time+0x12/0x20
[   98.444351][    T8]  ? strscpy+0x9c/0x260
[   98.448349][    T8]  process_one_work+0x73d/0xcb0
[   98.453036][    T8]  worker_thread+0xa60/0x1260
[   98.457619][    T8]  kthread+0x26d/0x300
[   98.461450][    T8]  ? worker_clr_flags+0x1a0/0x1a0
[   98.466312][    T8]  ? kthread_blkcg+0xd0/0xd0
[   98.470828][    T8]  ret_from_fork+0x1f/0x30
[   98.475080][    T8]  </TASK>
[   98.477938][    T8] Modules linked in:
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[   98.534843][    T8] ---[ end trace 0000000000000000 ]---
[   98.540392][    T8] RIP: 0010:ext4_writepages+0x3fab/0x3fd0
[   98.546095][    T8] Code: ac 80 ff 31 ff 89 de e8 53 ac 80 ff 45 84 f6 75 2a e8 b9 a9 80 ff 49 bc 00 00 00 00 00 fc ff df e9 6e f6 ff ff e8 a5 a9 80 ff <0f> 0b e8 9e a9 80 ff e8 95 90 0b ff e9 46 c3 ff ff e8 8f a9 80 ff
[   98.597145][   T43] device bridge_slave_1 left promiscuous mode
[   98.621213][   T43] bridge0: port 2(bridge_slave_1) entered disabled state
[   98.640820][   T43] device bridge_slave_0 left promiscuous mode
[   98.646798][   T43] bridge0: port 1(bridge_slave_0) entered disabled state
[   98.654057][    T8] RSP: 0018:ffffc90000087000 EFLAGS: 00010293
[   98.670175][    T8] RAX: ffffffff81f4f90b RBX: 0000008000000000 RCX: ffff888100398000
[   98.677995][    T8] RDX: 0000000000000000 RSI: 0000008000000000 RDI: 0000000000000000
[   98.692098][   T43] device veth1_macvtap left promiscuous mode
[   98.697961][   T43] device veth0_vlan left promiscuous mode
[   98.720128][    T8] RBP: ffffc90000087410 R08: ffffffff81f4c06b R09: ffffed10200c40c2
[   98.727951][    T8] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff888137b70000
[   98.753006][    T8] R13: ffff888100620748 R14: 000000c410000000 R15: ffffc900000872e0
[   98.761423][    T8] FS:  0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000
[   98.771640][    T8] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   98.778057][    T8] CR2: 000056383f3d0748 CR3: 000000010ee39000 CR4: 00000000003506b0
[   98.785934][    T8] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[   98.811582][    T8] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[   98.819407][    T8] Kernel panic - not syncing: Fatal exception
[   98.825594][    T8] Kernel Offset: disabled
[   98.829726][    T8] Rebooting in 86400 seconds..