last executing test programs:

44.487965876s ago: executing program 1 (id=106):
socket$inet_udp(0x2, 0x2, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0)
syz_mount_image$vfat(&(0x7f00000003c0), &(0x7f0000000400)='./file0\x00', 0x8088, &(0x7f00000002c0)=ANY=[@ANYRES16=0x0, @ANYRES8, @ANYRES32, @ANYRES64], 0x6, 0x1291, &(0x7f0000000680)="$eJzs3U1rY1UYAOA3bTptOrapOo7OgHjQjSLEaReu3BSZAbGgVDugrjI21dD0g95QyCBOXLkS/BmiLt0J4h/oxo1rQRDpxuUsxCvtjUOb9Gvsx6A8zyaHk/O+95zccy+ccA93+7UvV5aXstpSvR1DpVKU10eifD9FiqEYjkI3Xrr98y/PvvPe+2/Ozs3dnE/p1uy706+mlCaf++GDT759/sf25dvfTX4/GltTQ9t/zPy6dXXr2vZf30QzS80sra61Uz3dWVtr1++0GmmxmS3XUnq71ahnjdRczRob+75faq2tr3dSfXVxYnx9o5Flqb7aScuNTmqXUnujk+of1ZurqVarpYnx4DQWvr6f53lEno/EpcjzPK/EeFyOx2IiJqMaU/F4PBFPxpV4Kq7G0/FMXNtt9aj7DQAAAAAAAAAAAAAAAAAAAP8vx+z/L9n/DwAAAAAAAAAAAAAAAAAAAOevf/9/OcL7/wEAAAAAAAAAAAAAAAAAAOCCHfP+/779/y/b/w8AAAAAAAAAAAAAAAAAAADnYaz4mE9pLGLl882FzYXis6ifXYpmtKIRN6Iaf8bu7v9CUb71xtzNG2nXVLyycq8Xf29zYXh//PRINaZKB8ZPVyIipbQ/fjTG98bPRDWuHHz8meL4ffFj8eILO/GfFfG1qMZPH8ZatGIxotQb/W78p9Mpvf7WXGV//PWddocaPufTAgAAAGeplh4YXL93e+vkA78v4nvr89RLVzri/4G+9Xk5rpcf3bgpZJ27y/VWq7HxLwuXDs9z6XSZBwo7c7Eee2smx3+b3zn4RjZ8kuH8M93OqD97CsNnnfDIwsjRbU5xTqO882Me2aZcFConmz8jcWzCvs53+2vyasTDDuf3r/bUjD10+OkKQ72fpt7qnniyRTfPz7VjAxdjpXN3efSoqMPvGaVzuhdx8fZeJgAAAAAAAAAAAPx3ZGMHPP1XiYiB5wE/Hqjp9nLsD3+QeaBm0BcXMEIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/mYHjgUAAAAAhPlbp9GxAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwVQAAAP//DKjCOw==")
mkdir(&(0x7f0000000140)='./control\x00', 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
rmdir(&(0x7f0000000100)='./control\x00')
fchdir(0xffffffffffffffff)
syz_usb_connect(0x5, 0x24, &(0x7f00000003c0)={{0x12, 0x1, 0x300, 0xfe, 0x75, 0xf0, 0x40, 0xa46, 0x6688, 0x4fe5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x5, 0x2, 0xd0, 0xf5, "", [{{0x9, 0x4, 0xa5, 0x81, 0x0, 0x8b, 0x81, 0x84, 0xff}}]}}]}}, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0})

42.663469552s ago: executing program 1 (id=110):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="0a00000004000000080000000a"], 0x50)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x6, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
close(r1)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0xfffffffc}, 0x50)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x1, 0x100, 0x0, 0x0, 0x3b8000, '\x00', 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000611800000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000150802000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000bfa200000000000007020000f8ffffff850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0xe, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000e00)={{r0}, &(0x7f0000000d80), &(0x7f0000000dc0)=r3}, 0x20)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc)
bpf$MAP_LOOKUP_ELEM(0x5, 0x0, 0x0)
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000700000000000000000000000105000000100010000000000001000085000000000000000002000000b703cc8c00000000da"], &(0x7f0000000340)=""/142, 0x52, 0x8e, 0x1}, 0x28)
syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="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", @ANYRES8=r4, @ANYRES8=r4, @ANYRESOCT=0x0, @ANYRES16=r4], 0x1, 0x5508, &(0x7f00000079c0)="$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")

42.278421082s ago: executing program 1 (id=113):
lstat(&(0x7f00000001c0)='./file0/file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, <r0=>0x0})
setxattr$incfs_size(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000140), &(0x7f0000000180)=0x10000, 0x8, 0x1)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1b00000000000000000000000080", @ANYRES64=0x0, @ANYRESOCT=r0], 0x48)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000200)={'\x00', 0x1, 0x4, 0xe26, 0x10000, 0x749})
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x1, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1021, 0x3}, [@IFLA_GROUP={0x8}, @IFLA_MTU={0x8, 0x4, 0x500}]}, 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x4000000)
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, 0x0)
pselect6(0x0, 0x0, 0x0, &(0x7f0000000140)={0xf9, 0x7fffffffffffffff, 0xff, 0x800, 0x8, 0xb81, 0x2, 0x5}, &(0x7f0000000180)={0x0, 0x989680}, 0x0)
r2 = socket(0xa, 0x3, 0xff)
sendmsg(r2, &(0x7f0000000500)={&(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x9, 0x2}, 0x80, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="1000007a5d1318ff0000290000000200f9cd5920685a657115000011c42970990e9783680fe55d4871fcb29f756adff2a95b43788d36ba617f029fe4779355df5bd6d3104207721915f5c55ecd67555129da89f194946dafd575a3549977e8bc00000089e468edca2f9a95ff64af64cdee41545c0b3ebf2147fb237710cb0108a11312a8587724ec8e1807ec788801ac7aa4e1585b9818890bd5e1fdc596935f3d70252baf0bf00c31a1f54246a26991c038c958c384ff81378f0a73114841be3fe0a6e499d8a992460ba505b33d75f3e795"], 0x10}, 0x20008810)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r3, &(0x7f0000000040)={0x2, 0x2383, @loopback}, 0x10)
r4 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xe, 0x6, &(0x7f0000000640)=ANY=[@ANYBLOB="18120000", @ANYRES32=r4, @ANYBLOB="000000000000ff7f0000000000000000b7040000d2000000008500000034000000950000000000008fbd31872468bb7f026ac5784ef4c1810cfc3cabd4a147bba2697089cf2ce3171278fe72e31835dd55410a0ad3fbacaf737fd183e7b39b4eb0a16f84843d2b4232ccb1e20a79db7966ffe9d8abf6018ab4ed7d49dadcfc2b951f70671084af643df5cedf2d81ebe2c9348b58d1f62761f5b04f522537ebf6d5b89231c60a6d899c00"/181], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000800)=ANY=[@ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="05000000000000008bbc750b18f3d27cfa21632d5f4388af1bbe9a72c7a295331a99bb67751d70c80a927ee03a1bf81187fb428c130c3b986612ec02de509bd80c87dbd2d186e4f5494fd514ef850f4af583b823bc2716b2353497652b7b834e8c20a200282501b39096a90ac037738f7dd60941bf3b", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB, @ANYRES64=0x0], 0x20)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r4, &(0x7f0000000340), &(0x7f0000000380)=@tcp=r3}, 0x20)
pipe2(&(0x7f0000000040)={<r6=>0xffffffffffffffff}, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000200)=[{0x6, 0xf5, 0x9, 0x7fff0000}]})
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$BPF_PROG_QUERY(0x9, &(0x7f0000000180)={@ifindex, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
sched_setattr(0x0, &(0x7f0000000100)={0x61, 0x5, 0x0, 0x7a, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0)
epoll_pwait(0xffffffffffffffff, &(0x7f00008c9fc4)=[{}], 0x1, 0xfffffffffffffff7, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r6, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x2, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, &(0x7f0000000040), &(0x7f0000000180)=r7}, 0x20)
r8 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r8, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10)

42.187207814s ago: executing program 1 (id=115):
syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000b80)='./file0\x00', 0x1008002, &(0x7f0000000d00)={[{@grpjquota}]}, 0x3, 0x5f0, &(0x7f0000000d40)="$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")
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', <r1=>0x0})
r2 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r1, @ANYBLOB="00007de41000e7ff1b001a80080072802d00ff0008000200", @ANYRES16=r2, @ANYRES32=r2], 0x44}, 0x1, 0x0, 0x0, 0x94}, 0x2000800)
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newtfilter={0x3c, 0x2c, 0x404, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x5, 0xffe0}, {0xfff3, 0xfff1}, {0xf, 0xb}}, [@TCA_RATE={0x6, 0x5, {0x2}}, @TCA_RATE={0x6, 0x5, {0x0, 0x7}}, @TCA_RATE={0x6, 0x5, {0x81, 0x7}}]}, 0x3c}}, 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000000100)='./bus\x00', 0x20020, 0x0, 0x1, 0x0, 0x0)
setxattr$trusted_overlay_origin(&(0x7f0000000180)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380), 0x64, 0x1)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@index_on}]})
setxattr$incfs_size(&(0x7f0000000040)='./bus\x00', &(0x7f0000000080), &(0x7f00000000c0)=0xffffffffffffffff, 0x8, 0x2)

42.016571498s ago: executing program 1 (id=116):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000006680)={0x0, 0x0, &(0x7f0000006640)={&(0x7f00000065c0)={0x18, 0x1, 0x2, 0x101, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASTER={0x4}]}, 0x18}}, 0x0)
syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000800)={0x0, &(0x7f0000002140)=[@nested_amd_vmcb_write_mask={0x17c, 0x38, {0x2, @save_area=0x4d5, 0x1, 0x4, 0x7f}}, @nested_amd_vmsave={0x183, 0x18, 0x1}, @enable_nested={0x12c, 0x18}, @uexit={0x0, 0x18, 0x1}, @wr_drn={0x68, 0x20, {0x0, 0x5}}, @set_irq_handler={0xc8, 0x20, {0xc, 0x1}}, @in_dx={0x69, 0x20, {0xf5d2}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x1, @control_area=0x97, 0x2, 0x4, 0xfb8}}, @enable_nested={0x12c, 0x18}, @nested_amd_clgi={0x17f, 0x10}, @set_irq_handler={0xc8, 0x20, {0xa8, 0x2}}, @nested_load_code={0x12e, 0x77, {0x2, "66ba410066b8f77f66ef0f20e035000040000f22e0c4e1fe1630b9e80a0000b8acb54bcaba000000000f300f7814e836660f2d0fb906090000b80001c0feba000000000f30b90f0a0000b83c000000ba000000000f303626f34490260f01c2"}}, @nested_amd_clgi={0x17f, 0x10}, @in_dx={0x69, 0x20, {0xa82b, 0x6}}, @out_dx={0x6a, 0x28, {0x9bcf, 0x4, 0x1}}, @nested_load_syzos={0x136, 0x78, {0x3, 0x4b, [@in_dx={0x69, 0x20, {0xb6b5, 0x6}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x2, @host32=0x4c00, 0x9557, 0x1, 0x80}}]}}, @enable_nested={0x12c, 0x18}, @nested_amd_inject_event={0x180, 0x38, {0x3, 0x6d, 0x3, 0xeb7, 0x1}}, @uexit={0x0, 0x18, 0x7fff}, @nested_amd_set_intercept={0x181, 0x30, {0x3, 0x7, 0x36, 0x1}}, @in_dx={0x69, 0x20, {0xaf5f, 0x4}}, @rdmsr={0x66, 0x18, {0x9be}}, @nested_amd_vmload={0x182, 0x18, 0x2}, @in_dx={0x69, 0x20, {0xbb97, 0x3}}, @nested_amd_clgi={0x17f, 0x10}, @wrmsr={0x65, 0x20, {0xbfe, 0xffffffffffffffff}}, @nested_load_code={0x12e, 0x53, {0x3, "f20f216b66b808008ee0c4e2b5a66e578f897c80e70fc77b0066b87d000f00d866660f38811366ba410066ed660f3882ab0b0000002664660faef5"}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @host32=0x4c00, 0x2, 0x0, 0x3}}, @in_dx={0x69, 0x20, {0xd8a2, 0x1}}, @rdmsr={0x66, 0x18, {0x347}}, @uexit={0x0, 0x18, 0x401}, @wr_crn={0x67, 0x20, {0x4, 0x10}}], 0x4da})
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
syz_mount_image$ext4(&(0x7f0000000300)='ext3\x00', &(0x7f0000000280)='./cgroup\x00', 0x11, &(0x7f0000000180)={[{@dioread_lock}, {@acl}]}, 0x1, 0x66a, &(0x7f0000000ec0)="$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")
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
mount$cgroup(0x0, &(0x7f0000000600)='.\x00', &(0x7f0000000640), 0x2208000, 0x0)
r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0)
ioctl$TCXONC(r4, 0x540a, 0x0)
write(r4, &(0x7f0000000140)="8d623e049410c8bdc32b3316f234a601a7a7a1c6d888b9d2d5113017d8778b9c91cf4c02ef9fb1aa00644f2b0d0abb7cbfc2661b96a15a8e433253c558e3", 0x3e)
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x7})
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
syz_open_dev$tty1(0xc, 0x4, 0x1)
r5 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000900), 0x2, 0x0)
write$UHID_INPUT(r5, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0x1006)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)

41.91799067s ago: executing program 1 (id=117):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x1001a, &(0x7f00000001c0)={[{@jqfmt_vfsold}, {@nojournal_checksum}, {@auto_da_alloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@errors_remount}, {@jqfmt_vfsv1}]}, 0xff, 0x439, &(0x7f00000004c0)="$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")
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000001c0)={[{@errors_remount}, {@nodioread_nolock}, {@data_err_ignore}, {@barrier}, {@auto_da_alloc}, {@nodioread_nolock}]}, 0x1, 0x59c, &(0x7f0000001840)="$eJzs3U9oHGUbAPBnZrNNm+b70g++Dz6lh6JChNJN0j9aPbVXsVDoQfCiYbMNJZtsySbahIDpvYg9iEov9aYHj4oHD+LFo1cvimeh2KDQ9qAruzubpmm2bmI3W7O/H8zmfWdm93nfmX0mOy8zTAB960j9JY14KiLOJxEjG5YNRLbwSHO9u2srxXtrK8UkarULvySRRMSdtZViDDbXT7L3HYyI1Yj4f0R8k484mq5/5L5Wobq0PDNZLpfms/rYwuzlserS8rFLs5PTpenS3IkXXzp1+uSpieMTG5t7r7axlt9eX6/9eP3da9+9cvP6p58dXi2+P5nEmRjOljX60QXNbZKPM5vmn+xGsB5Ket0AdiSX5Xk9lf4XI5HLsn4rtY0Hh8FdaR7QRbXBiNq6DUWgDySSHvpU63dA/fy3Ne3m749bZxsnIKNDzWrxnWjFH2iOTcT+xrnJ0K/JA2cm9fPNQ7vZUPak1asRMT4w8PD3P8m+fzs3/jgaSFd9fba5ox7e/+n68Se2OP4Mt8ZO/6bs+NcYW21Nm+Pn2hz/zncY4/fXf/qobfyrg/H0lvGT9fjJFvHTiHizw/g3XvvydLtltY8jRmPr+C3Jo8eHxy5eKpfGm69bxvhq9PDL7fsfMdQmfnPMdn+jIRv7vy9rU9ph/7/49vNnVh8R//lnH73/t9r+ByLivQ7j/+fOJ6+2W3branK7/itgu/s/iXzc7DD+C2eO/JAVjRoCAAAAAAAAAMBjlDauZUvSwno5TQuF5j28/42htFypLhy9WFmcm2pe83Yo8mnrSquRZj2p1yey63Fb9eOb6idyWcDcgUa9UKyUp3rcdwAAAAAAAAAAAAAAAAAAAHhSHNx0//9vucb9/5sfVw3sVe0f+Q3sdfIf+teD+Z/0rB3A7vP/H/pWTf5D/5L/0L/kP/Qv+Q/9S/5D/5L/0L/kPwAAAAAAAAAAAAAAAAAAAAAAAAAAdMX5c+fqU+3e2kqxXp8aWFqcqbx1bKpUnSnMLhYLxcr85cJ0pTJdLhWKldm/+rykUrk8HnOLV8YWStWFserS8huzlcW51jNFS/mu9wgAAAAAAAAAAAAAAAAAAAD+eYYbU5IWIvLNepoWChH/iohDSSQXL5VL4xHx74j4PpcfrNcnet1oAAAAAAAAAAAAAAAAAAAA2GOqS8szk+Vyab57hYEsVBdDdF4Y2M7KEbH6eJtR/8RtvyufbcAeb7q9Ucg9Gd/DJ7/Qw4MSAAAAAAAAAAAAAAAAAAD0qfs3/Xb6jj+62yAAAAAAAAAAAAAAAAAAAADoS+nPSUTUp9GR54Y3L92X3M01/kbE2zcufHBlcmFhfqI+//b6/IUPs/nHe9F+oFOtPE0jop7HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwH3VpeWZyXK5NL/DwmAH6/S6jwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA78WcAAAD//xO9yV0=")
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r1)
getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x40)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}]}}}]}, 0x3c}}, 0x40848c0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x34, 0x10, 0x401, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, 0x12e1b, 0x1a001}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x4}}}]}, 0x34}}, 0x20004000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000001200)='./file1\x00', 0x42, 0x0)
r4 = getpid()
kcmp(r4, r4, 0x3, 0xffffffffffffffff, 0xffffffffffffffff)
write$binfmt_format(r3, &(0x7f00000002c0)='0\x00', 0x2)
write$P9_RMKDIR(r3, &(0x7f0000001140)={0x14, 0x49, 0x1, {0x4, 0x1, 0x7}}, 0x14)

41.888793941s ago: executing program 32 (id=117):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x1001a, &(0x7f00000001c0)={[{@jqfmt_vfsold}, {@nojournal_checksum}, {@auto_da_alloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@errors_remount}, {@jqfmt_vfsv1}]}, 0xff, 0x439, &(0x7f00000004c0)="$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")
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000001c0)={[{@errors_remount}, {@nodioread_nolock}, {@data_err_ignore}, {@barrier}, {@auto_da_alloc}, {@nodioread_nolock}]}, 0x1, 0x59c, &(0x7f0000001840)="$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")
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r1)
getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x40)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}]}}}]}, 0x3c}}, 0x40848c0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x34, 0x10, 0x401, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, 0x12e1b, 0x1a001}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x4}}}]}, 0x34}}, 0x20004000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000001200)='./file1\x00', 0x42, 0x0)
r4 = getpid()
kcmp(r4, r4, 0x3, 0xffffffffffffffff, 0xffffffffffffffff)
write$binfmt_format(r3, &(0x7f00000002c0)='0\x00', 0x2)
write$P9_RMKDIR(r3, &(0x7f0000001140)={0x14, 0x49, 0x1, {0x4, 0x1, 0x7}}, 0x14)

29.123493478s ago: executing program 4 (id=189):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x17ef, 0x61ae, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x1, "", [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x10, 0x0, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0xfc, 0x4, 0x4}}}}}]}}]}}, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x10, &(0x7f0000000800)={[{@shortname_mixed}, {@iocharset={'iocharset', 0x3d, 'koi8-ru'}}, {@iocharset={'iocharset', 0x3d, 'cp860'}}, {@shortname_lower}, {@numtail}, {@utf8}, {@uni_xlateno}, {@utf8}, {@fat=@nfs_stale_rw}, {@fat=@codepage={'codepage', 0x3d, '864'}}, {@shortname_lower}, {@shortname_winnt}, {@utf8no}, {@utf8no}, {@utf8no}, {@utf8no}]}, 0x3, 0x297, &(0x7f0000000900)="$eJzs3c9qK2UUAPAzzX9dJAtXItwBXbi63Lp10yJXEAuCEkFdaPGmIEkotBBoFWNXPoFPIPg2bsQX8AEUd3YhjqQz+aeTpBHbFP39Nj2c851858tM6CqTT14a9p+dnp9cffFTNJtJ7B3EQVwn0Ym9mPoqSv34S3keAHjgrrMsfs1yjTx1sbyitqKzunfnwwEAd2Lx//+uZwEA7sd7H3z49uHR0dN307QZMfx61E0i/5vXD0/isxhEL55EO36PyGby+M23jp5GNZ3oxCvD8ag76Rx+/H3x+oc/R9z070c7OuX9+2luoX886tbiuWL/g0H03vk22vFCef9rJf3RrcerLy/M/zja8cOncRqDeFbMVvS//uV+mr6RffPb5x9NspP+ZDzqNmbritWVe70wAAAAAAAAAAAAAAAAAAAAAAD8pz1OZzrLz9+ZPvh/TX3N84HGC8/neZKmaZbk6+f91XixGtVdnh0AAAAAAAAAAAAAAAAAAAAeivOLy/7xYNA72xy0i5bB+xsXT7/WX1KKP5YzjYi4ze7lwaNtu6IyPUUSsd1etWjcdG5eXNnyFK3JPL2zpBr94++ylRelsc0blcwyrcXSo8j3mmRaebCQ+SeXYCloxk0wvbv6x8mmmZtlN8mqoHL7ebKS2291e/2vmVZxgpLFrTW7159fytRv+fnK2itKSUTUZm/m+tep/StXcP5JAQAAAAAAAAAAAAAAAAAA7tn8S78lxasdDAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOzD//f8tgnHR/LdS1o64uOxnlUmmGkVpx0cEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgf+DPAAAA//8H92Gg")
mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x11c0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="0022180000000501150025ff0904a1014de29c198c0508950129309102c0"], 0x0}, 0x0)

27.078524699s ago: executing program 4 (id=203):
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000106a053103000000000001090224000100008000090400101c0300010009210000000122f80409058103"], 0x0) (async)
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000106a053103000000000001090224000100008000090400101c0300010009210000000122f80409058103"], 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
getpid() (async)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7)
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x50011, &(0x7f00000014c0), 0x1, 0x793, &(0x7f0000000c00)="$eJzs3c1rXFUbAPDnTpKmb9r3TV4QbF0FBA2UTkyNrYKLigsRLBR0bTtMpqFmkimZSWlCoBYR3AhaXAi66dqPunPrx1b/Bd2ISEvVtFhxISN3PjqTZiadtvloze8Htz3n3jM595l77zln5h7mBrBjjab/ZCL2R8R7ScRwY30SEQO1VH/E0Xq5myvL+XRJolp99bekVubGynI+2l6T2tPI7IuIb96OOJBZW295cWkmVywW5hv58crsmfHy4tLB07O56cJ0Ye7wxOTkoSPPHBncuFj/+H5p79X3X3ry86N/vfXo5Xe/TeJo7G1sa49jo4zGaOM9GUjfwlVe3OjKtlmy3TvAPUkvzb76VR77Yzj6aqne9F4SAHiQnI+IKgCwwyT6fwDYYZrfA9xYWc6nS/X89n4fsdWuvRARu+vxN+9v1rf0N+7Z7a7dBx26kay635FExMgG1D8aER9/+fqn6RKbdB8SoJM3L0TEyZHRZvvfan+SNXMW6nqfkPFUD2VGb8tr/2DrfJWOf55tjf9a11/m1vgnOox/Bjtcu/diNGJXe37t9Z+5sgHVdJWO/54faM1tu9kWf8NIXyP339qYbyA5dbpYSNu2/0XEWAwMpvmJdeoYu/739VUr+lrJ9vHf7xff+CStP/2/VSJzpf+2JncqV8ndb9xN1y5EPNbfKf7k1vFPuox/j/dYx8vPvfNRt21p/Gm8zWV1/Js/q6x6KeKJ6Bx/U7Le/MTD47XTYbx5UnTwxU8fDnWrv/34p0taf/OzwFZIj//Q+vGPJO3zNct3X8d3l4a/7rbtzvF3Pv93Ja/V0s3G41yuUpmfiNiVvLJ2/aHWa5v5Zvk0/rHHO1//653/6WfCkz3G33/118/uPf7NlcY/dVfH/+4Tl2/O9HWrv7fjP1lLjTXW9NL+9bqD9/PeAQAAAAAAAAAAAAAAAAAAAAAAAECvMhGxN5JM9lY6k8lm68/wfiSGMsVSuXLgVGlhbipqz8oeiYFM86cuh9t+D3Wi8Xv4zfyh2/JPR8T/I+KDwf/U8tl8qTi13cEDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQMOeLs//T/0yuN17BwBsmt13LHG9sCU7AgBsmTv3/wDAv43+HwB2Hv0/AOw8+n8A2Hn0/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGyy48eOpUv1z5XlfJqfOru4MFM6e3CqUJ7Jzi7ks/nS/JnsdKk0XSxk86XZtpf+0OnvFUulM5Mxt3BuvFIoV8bLi0snZksLc5UTp2dz04UThYEtiwwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeldeXJrJFYuFeYmHJVEdrh+6B2V/Nj/x88Ef961X5qLTeOMT290yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwc/gkAAP//skMoxA==") (async)
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x50011, &(0x7f00000014c0), 0x1, 0x793, &(0x7f0000000c00)="$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")
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x11, 0xffffffffffffffff, 0x9a5eb000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]})
socket$nl_audit(0x10, 0x3, 0x9) (async)
socket$nl_audit(0x10, 0x3, 0x9)
syz_open_procfs(r1, &(0x7f0000000040)='net/ipv6_route\x00')
close_range(r3, 0xffffffffffffffff, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r4 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0)
r5 = fsmount(r4, 0x0, 0x0)
setresuid(0x0, 0xee00, 0x0)
fchdir(r5)
fsopen(&(0x7f00000014c0)='proc\x00', 0x0) (async)
r6 = fsopen(&(0x7f00000014c0)='proc\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) (async)
fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0)
r7 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0)
r8 = fsmount(r7, 0x0, 0x0)
fchdir(r8)
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) (async)
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0)
fsmount(r6, 0x0, 0xa) (async)
fsmount(r6, 0x0, 0xa)
mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) (async)
mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103)

23.833520069s ago: executing program 4 (id=225):
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'lo\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=@newqdisc={0x7c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x0, 0x0, 0x57b2}, [@TCA_NETEM_LOSS={0x4}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x7, 0x100, 0x40, 0x9, 0x2, 0x94}}]}}}]}, 0x7c}}, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.self_freezing\x00', 0x275a, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="0a00000004000000080000000a"], 0x50)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x6, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000006c07000000000000000000611820000000000018110000", @ANYRES32=r7, @ANYBLOB="00000000000000001d1802000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000bfa200000000000007020000f8ffffff85000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x728d9debdaa4f37e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0xe, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

22.947377761s ago: executing program 4 (id=228):
r0 = syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)={[{@test_dummy_encryption}, {@nogrpid}]}, 0xfd, 0x4b2, &(0x7f0000000e40)="$eJzs3M1rHOUfAPDvbDZJ35Nff/WltdpoFYsvSZNWLShUBcGDgqCHepKYpKU2baSJ0JZgo5R6EbTgXQQvon+BJ0+ingSvepdC0VxaPa1MZma7SXe3ed+8fD4w2Xl2npnn+c4zL8/M7CSATasn/ZNE7IiI3yOiKyJKtRm2ZkOa79b05NA/05NDSVQqb/6VpLPFzenJoSJrkn9uzxLldEGlK0m8WKfc8YuXzgyOjo6cz9N9E2ff7xu/eOnp02cHT42cGjk3cOzY0SP9zz078MyyxJnW6ea+D8f273317WuvD5249u7P3yUR24rptXEs0fNd1dHJ6jqZ67FlKmyt2FkznpRbWBEWpDMi0uZqn9n/u6Ltyq7qtK545eOWVg5YUZVKpTLQePJUBdjAkljMXG35sQNYv4oTfXr9Wwyr1PVYE268lF0ApXHfyodsSjm7D9KZXRvtXKHyeyLixNS/X6ZDLPg+RPsK1QoA2Mh+SPs/T9Xp/5Uj7s2y/H08Inblz4a6I+J/EbE7Iv4fEXsi4p7I8t4XEffXL6bnnQbl98xJ39n/KV1faozNpP2/F/JnW7P7f9WnYN1teWrnTPztycnToyOH83VyKNo703R/3aUnEVPp52+fNSq/tv+XDmn5RV8wr8f1cufseYYHJwaXHHjuxkcR+8r14k+ifDuK2BsR+xZZxuknvtk/+5u26tjd429iGZ4zVb6KeDxr/6mYE38haf58sm9LjI4c7iu2iojpOWX88uvVNxqVn8Vfiubxb116oA2k7b+t3vZ/vBp/d1L7vHb8jkV03K2Mq3980vCaZrHbf0fy1qzCLwxOTJzvj+hIXrvz+5ob3EX6wvC3M/nT+A8drL//787nSeN/ICLSjfjBiHgoIg7kdX84Ih6JiINN4v/p5Uffaxj/gflv/1PZx7I+XU3jH657/GvU/gsY2ZIv4cyP3zeMv2j/osHqtv/RIjFTqfkc/+Zb08WsMwAAAFhvShGxI5JSb3W8VOrtzX4vvye2lUbHxieePDn2wbnh7B2B7mgvFXe6umruh/bn94aL9ECevpynj+T3jb9o2zqT7h0aGx1udfCwyW1vsP+n/mxrde2AFVee+5papatVVQFWmfc1YfNa/P7vyAHr3V324tJq1QNYfc7isHnV2/8v1yaSyH4lD2w4zv+weVX3/8/nkbnmda+5L28C60+z87+fAsDGpv8Pm9Ki3utfSyPxdUTzPMlaqeqCRj5dyuzllapY5+1votTC9dPRkkYZaIto4SZRnu9/tYiLlctLLrTVRyYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDl8V8AAAD//3Y422k=")
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x20010, r0, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000102c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
r4 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r5, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88)
setsockopt$inet_MCAST_MSFILTER(r5, 0x0, 0x30, &(0x7f00000012c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x90)
mount$bind(&(0x7f0000000300)='.\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x185093, 0x0)
mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x20000, 0x0)
mount$bind(&(0x7f0000000200)='.\x00', &(0x7f00000004c0)='./file0\x00', 0x0, 0x2127099, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0)
write$cgroup_int(r8, &(0x7f0000001480)=0x2, 0x12)
setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x20, 0x4, 0x0, 0xfffff010}, {0x20, 0x0, 0x0, 0xfffff024}, {0x6, 0x0, 0x0, 0x3}]}, 0x10)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x50, 0x10, 0x401, 0xffffffff, 0x25dfdbfc, {0x0, 0x0, 0xffff, 0x0, 0x589c1, 0x28829}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x1}]}}}, @IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}]}, 0x50}}, 0x4008894)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000002d40)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="0556282d", 0x4}], 0x1}, 0x0)
sendmmsg(r6, &(0x7f0000001c00), 0x400000000000159, 0x40840)

22.793671465s ago: executing program 4 (id=229):
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94)
r0 = socket$packet(0x11, 0x2, 0x300)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00000022000102000000000000000002"], 0x1c}}, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0)
fcntl$lock(r3, 0x6, &(0x7f0000000000)={0x0, 0x2, 0x8})
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000000), 0x82, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00')
read$FUSE(r4, &(0x7f0000002c00)={0x2020}, 0x2020)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4)
r5 = socket$inet6(0xa, 0x2, 0x0)
sendto$inet6(r5, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000300)='./file0\x00', 0x0, &(0x7f00000003c0)={[{@lfs_mode}, {@usrjquota={'usrjquota', 0x3d, 'nouser_xattr'}}, {@acl}, {@resgid={'resgid', 0x3d, 0xee00}}, {@inline_xattr}, {@grpjquota={'grpjquota', 0x3d, '('}}, {@background_gc_on}, {@nouser_xattr}, {@noflush_merge}, {@user_xattr}, {@fsync_mode_strict}, {@noinline_dentry}, {@jqfmt_vfsold}, {@noinline_dentry}]}, 0x1, 0x552b, &(0x7f0000000b40)="$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")

22.638407569s ago: executing program 4 (id=230):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETGEN(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000040)={0xfffffffffffffffd}, 0x1, 0x0, 0x0, 0x20000000}, 0x8044)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x220102, 0x11)
madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1)
unlink(&(0x7f0000000100)='./file0/file0\x00')
syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r1)
ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000180))
ioctl$AUTOFS_IOC_PROTOVER(r0, 0x80049363, &(0x7f00000001c0))
chdir(&(0x7f0000000200)='./file0/file0\x00')
sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xb0, 0x1, 0x2, 0x201, 0x0, 0x0, {0x0, 0x0, 0x7}, [@CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x2}, @CTA_EXPECT_HELP_NAME={0x9, 0x6, 'pptp\x00'}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x3}, @CTA_EXPECT_MASK={0x14, 0x3, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_EXPECT_MASK={0xc, 0x3, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x2}, @CTA_EXPECT_MASTER={0x30, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x15}}}}]}, @CTA_EXPECT_MASTER={0x20, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}]}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0xfffffffc}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4000}, 0x40000)
write$cgroup_int(0xffffffffffffffff, &(0x7f00000003c0)=0x10001, 0x12)
clock_gettime(0x0, &(0x7f0000003040)={<r2=>0x0, <r3=>0x0})
recvmmsg$unix(r1, &(0x7f0000002ec0)=[{{&(0x7f0000000400), 0x6e, &(0x7f0000000800)=[{&(0x7f0000000480)=""/133, 0x85}, {&(0x7f0000000540)=""/127, 0x7f}, {&(0x7f00000005c0)=""/71, 0x47}, {&(0x7f0000000640)=""/139, 0x8b}, {&(0x7f0000000700)=""/56, 0x38}, {&(0x7f0000000740)=""/172, 0xac}], 0x6, &(0x7f0000000880)=[@cred={{0x1c, 0x1, 0x2, {<r4=>0x0}}}, @rights={{0x20, 0x1, 0x1, [<r5=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x40}}, {{&(0x7f00000008c0), 0x6e, &(0x7f0000000e80)=[{&(0x7f0000000940)=""/42, 0x2a}, {&(0x7f0000000980)=""/154, 0x9a}, {&(0x7f0000000a40)=""/248, 0xf8}, {&(0x7f0000000b40)=""/220, 0xdc}, {&(0x7f0000000c40)=""/150, 0x96}, {&(0x7f0000000d00)=""/117, 0x75}, {&(0x7f0000000d80)=""/204, 0xcc}], 0x7, &(0x7f0000000f00)=[@cred={{0x1c, 0x1, 0x2, {<r6=>0x0}}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r7=>0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xd0}}, {{&(0x7f0000001000)=@abs, 0x6e, &(0x7f00000012c0)=[{&(0x7f0000001080)=""/106, 0x6a}, {&(0x7f0000001100)=""/235, 0xeb}, {&(0x7f0000001200)=""/150, 0x96}], 0x3, &(0x7f0000001300)=[@rights={{0x18, 0x1, 0x1, [<r8=>0xffffffffffffffff, 0xffffffffffffffff]}}], 0x18}}, {{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000001340)=""/167, 0xa7}, {&(0x7f0000001400)=""/88, 0x58}, {&(0x7f0000001480)=""/20, 0x14}], 0x3, &(0x7f0000001500)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r11=>0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, <r12=>0xffffffffffffffff, 0xffffffffffffffff, <r13=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xf0}}, {{&(0x7f0000001600), 0x6e, &(0x7f00000019c0)=[{&(0x7f0000001680)=""/41, 0x29}, {&(0x7f00000016c0)=""/137, 0x89}, {&(0x7f0000001780)=""/4, 0x4}, {&(0x7f00000017c0)=""/95, 0x5f}, {&(0x7f0000001840)=""/131, 0x83}, {&(0x7f0000001900)=""/168, 0xa8}], 0x6, &(0x7f0000001a40)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, <r14=>0xffffffffffffffff, 0xffffffffffffffff, <r15=>0xffffffffffffffff, <r16=>0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [<r17=>0xffffffffffffffff, 0xffffffffffffffff, <r18=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r19=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x70}}, {{&(0x7f0000001ac0), 0x6e, &(0x7f0000002e40)=[{&(0x7f0000001b40)=""/139, 0x8b}, {&(0x7f0000001c00)=""/98, 0x62}, {&(0x7f0000001c80)=""/223, 0xdf}, {&(0x7f0000001d80)=""/173, 0xad}, {&(0x7f0000001e40)=""/4096, 0x1000}], 0x5}}], 0x6, 0x40002000, &(0x7f0000003080)={r2, r3+10000000})
process_vm_writev(r6, &(0x7f00000030c0), 0x0, &(0x7f0000003400)=[{&(0x7f0000003100)=""/246, 0xf6}, {&(0x7f0000003200)=""/213, 0xd5}, {&(0x7f0000003300)=""/87, 0x57}, {&(0x7f0000003380)=""/72, 0x48}], 0x4, 0x0)
sched_setscheduler(r4, 0x0, &(0x7f0000003440)=0x7)
r20 = open_tree(r16, &(0x7f0000003480)='./file0\x00', 0x800)
ioctl$LOOP_CTL_GET_FREE(r20, 0x4c82)
ioctl$BLKGETSIZE(r10, 0x1260, &(0x7f00000034c0))
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000035c0)={&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000003500)="38f7489513faa6ace89b6c89bfb58c50654dfbd6a73aa1e5de3bfd50088584f512329107be3608605cf08eaf1c143b42d69a66a0c326312f21ccf89694aef1ed90099642f431d61d578181a8412132440f1758735cb9a16483d0b225819a17c6647638b4fed23ba0837c62b1a01b881aaa78f59e8a411ac7bfb5dfd227b9f802726d3df020bfa3ca4bf79c4948192fd0c83e8724b8bb372452221b7b162d672dbdc8decd7c51011ce400", 0xaa, r19}, 0x68)
r21 = syz_open_procfs$userns(r6, &(0x7f0000003640))
io_submit(0x0, 0x3, &(0x7f00000038c0)=[&(0x7f0000003700)={0x0, 0x0, 0x0, 0x7, 0x1, r21, &(0x7f0000003680)="24968a05f470e039202e9e01680e9a8d62a4d92fc2224847bf8a92c0f9d13478e244f6885a9eebf67e5abd7dc08ae27cbde4923901f49e37f7a753edc2f5117dd9", 0x41, 0x1, 0x0, 0x3}, &(0x7f00000037c0)={0x0, 0x0, 0x0, 0x1, 0xf801, r12, &(0x7f0000003740)="7bf60486d5bce2aec753edadcae052df390ac6bed22fad10b8f5f741b21f5102f2218f3a6726709e6204a76123aae1667614a8dc9e37241acef351e2bac558a0881598e079d278ae1993a7ea1ae1486576b094b50a3a5133eda46f780a88", 0x5e, 0x200, 0x0, 0x1, r14}, &(0x7f0000003880)={0x0, 0x0, 0x0, 0x5, 0x0, r18, &(0x7f0000003800)="80de90d2b38553660ac6f5b749731cbb775b7c213e2269e7157fa16ca61499aed6940eabc71dac93d93bef5818a017318ed88f67bdec194917a9ec044c7a01b1fb075c2a73e1ccaff2630f5b28ca", 0x4e, 0x9, 0x0, 0x1, r16}])
r22 = syz_open_procfs$userns(r4, &(0x7f0000003900))
ioctl$NS_GET_OWNER_UID(r22, 0xb704, &(0x7f0000003940))
r23 = syz_genetlink_get_family_id$tipc2(&(0x7f00000039c0), r13)
sendmsg$TIPC_NL_PUBL_GET(r7, &(0x7f0000003cc0)={&(0x7f0000003980)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000003c80)={&(0x7f0000003a00)={0x250, r23, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}]}, @TIPC_NLA_BEARER={0x74, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x800}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'syz_tun\x00'}}]}, @TIPC_NLA_NODE={0xe4, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_ID={0xbc, 0x3, "9e4f096bd2a46344487b566948f4a30b28fab7c743274c99594d83fa9dc106cf1771dbee26367e9ec20895c18a0c1ed32cf6ad9f3255649c95fec92ac422f1d7e7a2780665ededdd6c8990168586f46bcb80b854d01563837de2c32b5711f7ba8c61a760025c209c6f61d51ccaaf8425263fd11ebdad5fcb36daa007504363503098c201c88cb946f94bf11d61754ea17153072a07be64e69755f8cb49dfa97586703eb5fabccdd5c8699f383148523cade90e0263ffdbd3"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x81}]}, @TIPC_NLA_MEDIA={0x9c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1fbdbadf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x21}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x231}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x62be}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}]}]}, @TIPC_NLA_SOCK={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xe40}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x250}, 0x1, 0x0, 0x0, 0x80}, 0x24000000)
ioctl$KDSKBMETA(r11, 0x4b63, &(0x7f0000003d00)=0x3)
ioctl$TIOCL_SETSEL(r5, 0x541c, &(0x7f0000003d40)={0x2, {0x2, 0x8, 0x6, 0xb3, 0x9, 0x2}})
socket$nl_xfrm(0x10, 0x3, 0x6)
bpf$PROG_BIND_MAP(0x23, &(0x7f0000003d80)={r9, r8}, 0xc)
renameat(r17, &(0x7f0000003dc0)='./file0/file0\x00', r15, &(0x7f0000003e00)='./file0\x00')

22.637738759s ago: executing program 33 (id=230):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETGEN(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000040)={0xfffffffffffffffd}, 0x1, 0x0, 0x0, 0x20000000}, 0x8044)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x220102, 0x11)
madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1)
unlink(&(0x7f0000000100)='./file0/file0\x00')
syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r1)
ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000180))
ioctl$AUTOFS_IOC_PROTOVER(r0, 0x80049363, &(0x7f00000001c0))
chdir(&(0x7f0000000200)='./file0/file0\x00')
sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xb0, 0x1, 0x2, 0x201, 0x0, 0x0, {0x0, 0x0, 0x7}, [@CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x2}, @CTA_EXPECT_HELP_NAME={0x9, 0x6, 'pptp\x00'}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x3}, @CTA_EXPECT_MASK={0x14, 0x3, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_EXPECT_MASK={0xc, 0x3, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x2}, @CTA_EXPECT_MASTER={0x30, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x15}}}}]}, @CTA_EXPECT_MASTER={0x20, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}]}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0xfffffffc}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4000}, 0x40000)
write$cgroup_int(0xffffffffffffffff, &(0x7f00000003c0)=0x10001, 0x12)
clock_gettime(0x0, &(0x7f0000003040)={<r2=>0x0, <r3=>0x0})
recvmmsg$unix(r1, &(0x7f0000002ec0)=[{{&(0x7f0000000400), 0x6e, &(0x7f0000000800)=[{&(0x7f0000000480)=""/133, 0x85}, {&(0x7f0000000540)=""/127, 0x7f}, {&(0x7f00000005c0)=""/71, 0x47}, {&(0x7f0000000640)=""/139, 0x8b}, {&(0x7f0000000700)=""/56, 0x38}, {&(0x7f0000000740)=""/172, 0xac}], 0x6, &(0x7f0000000880)=[@cred={{0x1c, 0x1, 0x2, {<r4=>0x0}}}, @rights={{0x20, 0x1, 0x1, [<r5=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x40}}, {{&(0x7f00000008c0), 0x6e, &(0x7f0000000e80)=[{&(0x7f0000000940)=""/42, 0x2a}, {&(0x7f0000000980)=""/154, 0x9a}, {&(0x7f0000000a40)=""/248, 0xf8}, {&(0x7f0000000b40)=""/220, 0xdc}, {&(0x7f0000000c40)=""/150, 0x96}, {&(0x7f0000000d00)=""/117, 0x75}, {&(0x7f0000000d80)=""/204, 0xcc}], 0x7, &(0x7f0000000f00)=[@cred={{0x1c, 0x1, 0x2, {<r6=>0x0}}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r7=>0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xd0}}, {{&(0x7f0000001000)=@abs, 0x6e, &(0x7f00000012c0)=[{&(0x7f0000001080)=""/106, 0x6a}, {&(0x7f0000001100)=""/235, 0xeb}, {&(0x7f0000001200)=""/150, 0x96}], 0x3, &(0x7f0000001300)=[@rights={{0x18, 0x1, 0x1, [<r8=>0xffffffffffffffff, 0xffffffffffffffff]}}], 0x18}}, {{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000001340)=""/167, 0xa7}, {&(0x7f0000001400)=""/88, 0x58}, {&(0x7f0000001480)=""/20, 0x14}], 0x3, &(0x7f0000001500)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r11=>0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, <r12=>0xffffffffffffffff, 0xffffffffffffffff, <r13=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xf0}}, {{&(0x7f0000001600), 0x6e, &(0x7f00000019c0)=[{&(0x7f0000001680)=""/41, 0x29}, {&(0x7f00000016c0)=""/137, 0x89}, {&(0x7f0000001780)=""/4, 0x4}, {&(0x7f00000017c0)=""/95, 0x5f}, {&(0x7f0000001840)=""/131, 0x83}, {&(0x7f0000001900)=""/168, 0xa8}], 0x6, &(0x7f0000001a40)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, <r14=>0xffffffffffffffff, 0xffffffffffffffff, <r15=>0xffffffffffffffff, <r16=>0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [<r17=>0xffffffffffffffff, 0xffffffffffffffff, <r18=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r19=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x70}}, {{&(0x7f0000001ac0), 0x6e, &(0x7f0000002e40)=[{&(0x7f0000001b40)=""/139, 0x8b}, {&(0x7f0000001c00)=""/98, 0x62}, {&(0x7f0000001c80)=""/223, 0xdf}, {&(0x7f0000001d80)=""/173, 0xad}, {&(0x7f0000001e40)=""/4096, 0x1000}], 0x5}}], 0x6, 0x40002000, &(0x7f0000003080)={r2, r3+10000000})
process_vm_writev(r6, &(0x7f00000030c0), 0x0, &(0x7f0000003400)=[{&(0x7f0000003100)=""/246, 0xf6}, {&(0x7f0000003200)=""/213, 0xd5}, {&(0x7f0000003300)=""/87, 0x57}, {&(0x7f0000003380)=""/72, 0x48}], 0x4, 0x0)
sched_setscheduler(r4, 0x0, &(0x7f0000003440)=0x7)
r20 = open_tree(r16, &(0x7f0000003480)='./file0\x00', 0x800)
ioctl$LOOP_CTL_GET_FREE(r20, 0x4c82)
ioctl$BLKGETSIZE(r10, 0x1260, &(0x7f00000034c0))
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000035c0)={&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000003500)="38f7489513faa6ace89b6c89bfb58c50654dfbd6a73aa1e5de3bfd50088584f512329107be3608605cf08eaf1c143b42d69a66a0c326312f21ccf89694aef1ed90099642f431d61d578181a8412132440f1758735cb9a16483d0b225819a17c6647638b4fed23ba0837c62b1a01b881aaa78f59e8a411ac7bfb5dfd227b9f802726d3df020bfa3ca4bf79c4948192fd0c83e8724b8bb372452221b7b162d672dbdc8decd7c51011ce400", 0xaa, r19}, 0x68)
r21 = syz_open_procfs$userns(r6, &(0x7f0000003640))
io_submit(0x0, 0x3, &(0x7f00000038c0)=[&(0x7f0000003700)={0x0, 0x0, 0x0, 0x7, 0x1, r21, &(0x7f0000003680)="24968a05f470e039202e9e01680e9a8d62a4d92fc2224847bf8a92c0f9d13478e244f6885a9eebf67e5abd7dc08ae27cbde4923901f49e37f7a753edc2f5117dd9", 0x41, 0x1, 0x0, 0x3}, &(0x7f00000037c0)={0x0, 0x0, 0x0, 0x1, 0xf801, r12, &(0x7f0000003740)="7bf60486d5bce2aec753edadcae052df390ac6bed22fad10b8f5f741b21f5102f2218f3a6726709e6204a76123aae1667614a8dc9e37241acef351e2bac558a0881598e079d278ae1993a7ea1ae1486576b094b50a3a5133eda46f780a88", 0x5e, 0x200, 0x0, 0x1, r14}, &(0x7f0000003880)={0x0, 0x0, 0x0, 0x5, 0x0, r18, &(0x7f0000003800)="80de90d2b38553660ac6f5b749731cbb775b7c213e2269e7157fa16ca61499aed6940eabc71dac93d93bef5818a017318ed88f67bdec194917a9ec044c7a01b1fb075c2a73e1ccaff2630f5b28ca", 0x4e, 0x9, 0x0, 0x1, r16}])
r22 = syz_open_procfs$userns(r4, &(0x7f0000003900))
ioctl$NS_GET_OWNER_UID(r22, 0xb704, &(0x7f0000003940))
r23 = syz_genetlink_get_family_id$tipc2(&(0x7f00000039c0), r13)
sendmsg$TIPC_NL_PUBL_GET(r7, &(0x7f0000003cc0)={&(0x7f0000003980)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000003c80)={&(0x7f0000003a00)={0x250, r23, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}]}, @TIPC_NLA_BEARER={0x74, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x800}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'syz_tun\x00'}}]}, @TIPC_NLA_NODE={0xe4, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_ID={0xbc, 0x3, "9e4f096bd2a46344487b566948f4a30b28fab7c743274c99594d83fa9dc106cf1771dbee26367e9ec20895c18a0c1ed32cf6ad9f3255649c95fec92ac422f1d7e7a2780665ededdd6c8990168586f46bcb80b854d01563837de2c32b5711f7ba8c61a760025c209c6f61d51ccaaf8425263fd11ebdad5fcb36daa007504363503098c201c88cb946f94bf11d61754ea17153072a07be64e69755f8cb49dfa97586703eb5fabccdd5c8699f383148523cade90e0263ffdbd3"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x81}]}, @TIPC_NLA_MEDIA={0x9c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1fbdbadf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x21}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x231}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x62be}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}]}]}, @TIPC_NLA_SOCK={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xe40}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x250}, 0x1, 0x0, 0x0, 0x80}, 0x24000000)
ioctl$KDSKBMETA(r11, 0x4b63, &(0x7f0000003d00)=0x3)
ioctl$TIOCL_SETSEL(r5, 0x541c, &(0x7f0000003d40)={0x2, {0x2, 0x8, 0x6, 0xb3, 0x9, 0x2}})
socket$nl_xfrm(0x10, 0x3, 0x6)
bpf$PROG_BIND_MAP(0x23, &(0x7f0000003d80)={r9, r8}, 0xc)
renameat(r17, &(0x7f0000003dc0)='./file0/file0\x00', r15, &(0x7f0000003e00)='./file0\x00')

5.969436402s ago: executing program 6 (id=301):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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")
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
r0 = syz_ublk_setup_io_uring(0x1480, &(0x7f0000000200)={0x0, 0x630d, 0x4000, 0x2, 0xec}, &(0x7f0000000280), &(0x7f0000000380), &(0x7f0000000300))
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e21, @broadcast}, 0x10)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'veth0\x00', <r4=>0x0})
setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='veth0\x00', 0x6)
sendto$inet6(r3, &(0x7f0000000200)='test', 0x4, 0x0, &(0x7f0000000240)={0xa, 0x1234, 0x0, @remote}, 0x1c)
sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000b00)=ANY=[@ANYBLOB="300000001d0001feffffff0000000000c930aa0a09ae47329bb44e75188d8a7ebc27a78bf88df2e5e06ddd73e443c535cfd12dc5c9285fd47d871a281922ce1cf5acd0e1b482685ecd73b2c555dfa5f01dbe84334a711d5f56567884bac3165ee7660d89ad6a94fefecc248ca1a66ecd7446943a39fe30dad870f488c6e04e", @ANYRES32=r4, @ANYBLOB="0000000014000100fe8000000000000000000000000000bb"], 0x30}}, 0x0)
ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x6)
r5 = socket$inet(0x2, 0x2, 0x1)
sendmsg$inet(r5, &(0x7f0000000600)={&(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="96bc1480bb58", 0x6}], 0x2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x0)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
r6 = gettid()
fcntl$setownex(r1, 0xf, &(0x7f0000000680)={0x2, r6})
shutdown(r1, 0x1)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x7fffffe, 0x2000007, 0x11, r0, 0x0)
futex(0x0, 0x86, 0x2, 0x0, 0x0, 0xfffffffc)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.empty_time\x00', 0x275a, 0x0)
write$binfmt_script(r7, &(0x7f0000000000), 0x208e24b)
r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_NEW_SERVICE(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0100000000000100000001000000450d18a916710a9628d266047d543c000180060001000a000000090006006c060b630000000008040900640000000c0007fa000000000000050008000500000000000800080004000000"], 0x50}}, 0x80)
ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000ac0)=0x80)
sendmsg$IPVS_CMD_NEW_DAEMON(r7, &(0x7f0000000480)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000440)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="cae81c8d03974200ce3603e7b449972d9682d443dbd7fa0a4ad408cc3472f8bb8bebf7bc6a33f05d73f4f6553ae91ce62b751b2929fb8daf9699051dd1095ffb5729a40d5f780b148cfba1d960e8e7ab7afa624dca9f1db6eafbaff7fd78a5d4585da52cb0886ff71135eb513132f80565a2058ed58f3d5457ccf3a6432f2c3b6fa1a93cdac55d145fc2015a05bb0e2ea11d5d574b0492897f76950bf9d706356e5f97703275d1bd0ac1983672d0df2b8a411e60855b97b97a13bea6b1c4c1c045b4d5fd6d70eb8476399d89c9", @ANYRES16=r8, @ANYBLOB="040025bd7000fedbdf250900000008000600090000000400038040000180060004004e230000080006006f76660008000600736564000c0007002900000008000000070006006e7100000600010000000000060001000a0000001c0001800800050002000000060004004e2300000800050001000000080004000b0000000800050006000000040002802c00038014000600fe800000000000000000000000000010140002007767320000000000000000000000000024000280080009000400000006000b000200000006000f002b00000005000d00000000001c000180080005000200000008000b007369700008000b0073697000"], 0xfc}, 0x1, 0x0, 0x0, 0x8010}, 0x480c0)
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000100)={[{@delalloc}, {@usrjquota_path={'usrjquota', 0x3d, './file0'}}]}, 0x4, 0x4f6, &(0x7f0000000540)="$eJzs3c9vVFsdAPDvnXZoX9/wytO3UKM+RBQNYfoDaAguhI3GEBIjceUCajs0TWeYptMirSzK0r2JJK70T3DnwoSVC3fudOcGFyaojYaauBhz71zaoe10KrQd6Hw+yZ17z7mX+Z4zwzln7oGZE0DfOhsR6xFxKiLuRcRonp/kW9xobel1Lzcez2xuPJ5Jotm8848kO5/mRdufSX2YP+dwRPzguxE/TnbHbayuLUxXq5WlPD22XFsca6yuXZov5DmTUxNT49cuX508tLp+WvvNi+/M3/rh7377ped/XP/mT9NilX52OjvXXo/D1Kp6MUpteYMRcesogvXIYP73h/dP2to+ExHnsvY/GgPZuwkAnGTN5mg0R9vTAMBJl97/lyIplPO5gFIUCuVyaw7vkxgpVOuN5Yuj9ZUHs5HNYZ2JYuH+fLUyns8VnolikqYnsuPt9OSO9OWI+Dgifj70QZYuz9Srs7384AMAfezDHeP/v4da4z8AcMIN97oAAMCxM/4DQP8x/gNA//k/xn/fDgSAE8L9PwD0H+M/APSfruP/k+MpBwBwLL5/+3a6NTfz37+efbi68q3Sw0uzlcZCubYyU56pLy2W5+r1uWqlPNNsdnu+ar2+OHFlK9lYXbtbq688WL47X5ueq9ytFI+4PgBAdx9/+uzPSUSsX/8g26JtLQdjNZxshV4XAOiZgV4XAOgZ3+eB/nWAe3zTAHDC7bFE72s6/hehpxZ/hffVhc+b/4d+Zf4f+tebzf9/+9DLARw/8//Qv5rNxJr/ANBnzPEDb/Xv/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANCnStmWFMrZWuDr6WOhXI44HRFnopjcn69WxiPio4j401BxKE1P9LrQAMBbKvwtydf/ujB6vrTz7KnkP0PZPiJ+8ss7v3g0vby8NJHm/3Mrf/lpnj95qhcVAADa3did1Rqn833bjfzLjcczr7bjLOKLm63FRdO4m/nWOjMYg9l+OIoRMfKvJE+3pJ9XBg4h/vqTiPjcdv0ftUUoZXMgrZVPd8ZPY58+gvjbr//O+IXX4heyc+m+mL0Wnz2EskC/eXaz1U/mbS9tYnn7K8TZbL93+x/Oeqi396r/29zV/xW2+r+BXfGTrM2f3UrvX5IXV37/vV2ZzdHWuScRXxjcK36yFT/p0P+eP2Ad//LFL5/rdK75q4gLsXf8llrWzY4t1xbHGqtrl+Zr03OVucqDycmpianxa5evTo5lc9Stxz/sFePv1y9+1Cl+Wv+RDvGHu9T/awes/6//e+9HX9kn/je+uvf7/8k+8dMx8etd4hby/fTIjY7Ld6fxZzvUv9v7f7FbxXPP/7o2e8BLAYBj0FhdW5iuVitLXQ7Sz5rdrnHwfh7EesQ7UAwH79RBr3sm4KhtN/pelwQAAAAAAAAAAAAAAOiksbq2MBRv/FWhjfw3Afa9uNd1BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4OT6XwAAAP//FWDMew==")
setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000100)=ANY=[@ANYBLOB="02000000000000000000"], 0x24, 0x0)

5.700356909s ago: executing program 6 (id=304):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000380)=[{0x200000000006, 0x1, 0x7, 0x7ffc1ffb}]})
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x80078b, &(0x7f00000000c0)={[{@usrjquota}, {@acl}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@barrier}, {@nobh}, {@errors_remount}, {@block_validity}]}, 0x0, 0x480, &(0x7f0000000500)="$eJzs3M1rXFUbAPDn3ny0ffuRvLV+tFaNFiEoJk1atQs3ioKLioIu6jIm0xI6baSJYkuxqUjdCFLQdXEp+Be4E0HUleBWN66kULSb1uJi5N65N51MMmljJpk0+f1gMufMPTP3eXK/zj1nkgA2rYHsRxKxIyJ+jYi+enV+g4H6083r58f/vn5+PIla7c0/k7zdjevnx8um5fu2F5XBNCL9OClWMt/02XMnx6rVypmiPjxz6t3h6bPnnnn/1NiJyonK6dEjRw4fGnn+udFn25JnlteNfR9O7d/76tuXXxs/dvmdH7/O4t1RLG/Mo10GssT/quWalz3Z7pV12M6GctLdwUBYlq6IyDZXT37890VX3N54ffHKRx0NDlhV2bVpS+vFszVgA0ui0xEAnVFe6LP73/KxRl2PdeHai/UboCzvm8WjvqQ70qJNT9P9bTsNRMSx2VtXskes0jgEAECjT8e/OFrribl7wNv9jzQeyJ9/z3/uKuZQ+iPi/xGxOyLui4g9EXF/RN72wYh4aIXxLOz/pFdX+JFLyvp/LxRzW/P7f2XvL/q7itrOPP+e5PhktXKw+J0MRs+WrD6yxDq+ffmXz1ota+z/ZY9s/WVfsIjjanfTAN3E2MxY3iltg2sXI/Z1L5Z/MjcTkETE3ojYt7yP3lUWJp/6an+rRnfOfwltmGeqfZmlN5vlPxtN+ZeSxvnJyQXzk8Nbo1o5OFzuFQv99POlN1qtf0X5t8G1Sv25Yfs3N+lPGudrp5e/jku/fdLynuY/7v9pb/JWPs/cW7z2wdjMzJmRiN7kaF6f9/ro7feW9bJ9tv8PHlj8+N9dvCfL/+GIyHbiRyLi0Yh4rIj98Yh4IiIOLJH/Dy+1XlbmH+mtK7ULHdj+FyMmFj3/ze3/Tdt/+YWuk99/02r9d7f9D+elweKV/Px3B4uFk50umgNcye8OAAAA7hVp/h34JB2aK6fp0FD9O/x74n9pdWp65unjU++dnqh/V74/etJypKuvGA+tTlYrI8ls8Yn18dHRYqy4HC89VIwbf961La8PjU9VJzqcO2x221sc/5k/ujodHbDKti366mjvmgcCdEDzPHo6v3rh9XAygI3K32vD5nWH4z9dqziAtef6D5vXYsf/haa6uQDYmFz/YfO66+P/nwX/xxK4l6XfdToCoIP0/2FTWsnf9a9iYev6CKMzhfW6UfJCRFlI10U8CqtU6PSZCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoD3+DQAA//8I+vHt")
mlock2(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0)

5.026561625s ago: executing program 6 (id=311):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}})
read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, <r4=>0x0}, 0x2020)
write$FUSE_INIT(r3, &(0x7f0000000080)={0x50, 0x0, r4, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4, 0x2}}, 0x50)
write$FUSE_GETXATTR(r2, &(0x7f0000000080)={0x18, 0x0, r4, {0x636d}}, 0x18)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(r1, r5, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, 0x0}], 0x1, 0x10, 0x0, 0x0)

4.906160238s ago: executing program 6 (id=314):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x80108906, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0)
syz_usb_connect$midi(0x3, 0x38, &(0x7f0000000180)=ANY=[@ANYBLOB="12011003000000400c200b1040000102030109022600010118d804090400000101033006072403016300f409058e0b00000fd702042501001a8b4db43daabb27ee1dc31616e2406ec7a064bee571dd28d39f1fce73f149134294391a0be256eddf78cf8568c52d03801b5b0881d452611950bf9d3dc01e8a"], &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0})
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000240)={0xdf, 0x0, 0x4000})
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000b80)={0x2, 0x0, @ioapic={0x56000, 0x8005, 0x1, 0xfffffffe, 0x0, [{0x0, 0xc, 0x7, '\x00', 0x38}, {0x9, 0xde, 0x7a, '\x00', 0x9}, {0x2, 0xb3, 0x3, '\x00', 0x5}, {0x5, 0x9, 0x6, '\x00', 0x1}, {0x5, 0x5, 0x6, '\x00', 0x7c}, {0x0, 0x80, 0x0, '\x00', 0x6}, {0x4, 0x8, 0xff, '\x00', 0x45}, {0xff, 0xc, 0x6, '\x00', 0x7}, {0x7, 0x6, 0x73, '\x00', 0x3}, {0x1, 0xb7, 0x89, '\x00', 0x7}, {0x16, 0x24, 0x3, '\x00', 0x81}, {0x5, 0x1, 0x17, '\x00', 0xb}, {0x6, 0x5, 0x5, '\x00', 0x3}, {0x19, 0x9, 0x3, '\x00', 0x4}, {0x5, 0x1, 0x3, '\x00', 0x1}, {0x7, 0x9, 0xcb, '\x00', 0x7}, {0x14, 0xe, 0xb, '\x00', 0x5}, {0x9, 0x7, 0x99, '\x00', 0x37}, {0x44, 0x3, 0x3, '\x00', 0x44}, {0xf4, 0x8, 0x7, '\x00', 0xf8}, {0x4, 0x7, 0x31, '\x00', 0xf7}, {0x7, 0x8b, 0xe6, '\x00', 0xf}, {0xff, 0x8, 0x3, '\x00', 0xa}, {0x7, 0x83, 0x4, '\x00', 0xff}]}})
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1200000008000000040008000000000000000000", @ANYRES32, @ANYBLOB="0300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r5)
wait4(r5, 0x0, 0x8, 0x0)
ptrace$setregset(0x4205, r5, 0x1, &(0x7f0000000100)={&(0x7f0000000040)="dcef58b7f29c1f7c93d183044aedba283413e674c7719c33a4b17f028f68610a6c55bb2bf8282853f3e16f8394a8676ff55a3507e2ad50248c6130863b0f7433c7fbc9b978a39eae88bffd05d139cedbee444f7c98e1f92b0f64462b4b470bedced2125e0b1f38fbaa348c6d75aa1a4011e9cdae15ecb9309b0101edbf6dd6d111d6132f1821a4e4cbec8438c571a70e7ca7b0451a6cc55c", 0x98})
ptrace$setregset(0x4205, r5, 0x200, &(0x7f0000000380)={&(0x7f00000002c0)="d0ef9dcd8246941bc1eb4a4f31027f46e618eb4ff98f64ab0e24470c9165e2ea1fd653063597c81b6e12b9f6c2c9fff7d25baeb947fb2374de18aae291cc4f8e5bd17d7390ed1aaafe95d822df9e1831ff7fd5d416", 0x55})
process_madvise(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000000)="680410472f039faef176f33931a3b68de71fe2b43bf290d28e32c25b303d42edd17e98345d77f8e16f0c3f5f72c1728f039379f37183160c305abfd089c0d372542c6e26f910445c4742981c12b5e4f767003ca090f9a3d28e1ff62392dfff79795a59b226c9be36e37ffd3a9922ba8994218f59fd8781ce4cd96571d38b4cd61a", 0x81}], 0x1, 0x15, 0x0)
listen(r4, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={r3, &(0x7f0000000480), &(0x7f0000000540)=@tcp=r4}, 0x20)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r3, &(0x7f0000000080), &(0x7f0000000180)=@tcp=r4}, 0x20)
r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4004800)
ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x10, 0x2, 0xb6, '\x00', 0x2})
ioctl$KVM_RUN(r6, 0xae80, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x9, 0x4, &(0x7f0000000040)=ANY=[@ANYRES16=r0], &(0x7f0000003ff6)='GPL\x00', 0x4797, 0xc3, &(0x7f000000cf3d)=""/195, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x38}, 0x94)
getsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f0000000080)=0x5, 0x0)
ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x40000070, 0x0, 0x400006}]})
openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
syz_open_dev$loop(&(0x7f00000002c0), 0x9, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)

4.374033822s ago: executing program 2 (id=319):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_int(r0, 0x0, 0x2, &(0x7f00000000c0)=0x4, 0x4)
getsockopt$inet_int(r0, 0x0, 0x2, 0x0, &(0x7f0000000080))
syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000001c0)='./file0\x00', 0x1a1088a, &(0x7f0000000880)=ANY=[@ANYBLOB='dmask=00000000000000000002621,utf8,umask=00000000000000000200000,namecase=1,discard,errors=remount-ro,umask=00000000000000000200004,umask=00000000000000000003377,namecase=1,utf8,iocharset=iso8859-4,allow_utime=00000000000000000000011,dmask=01777777777777777777770,errors=remount-ro,uid=', @ANYRES8, @ANYRES64, @ANYRESOCT, @ANYRES16, @ANYRES8=0x0, @ANYRESOCT, @ANYRESHEX, @ANYRES32, @ANYRES16, @ANYRES64, @ANYRES16], 0x21, 0x150f, &(0x7f00000034c0)="$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")
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0)
syz_emit_ethernet(0x2a, &(0x7f0000000580)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x20, 0x1c, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @multicast1}, {0x2001, 0x880b, 0x8}}}}}, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r1 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r1, 0x2, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
r2 = creat(&(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
unlinkat(0xffffffffffffff9c, 0x0, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="5800ff7f000001042bbd7400000000000000ffffea3406d228740d00fb0662a8cde4bb7d1c674b0b2391777f000000f3c846e4c265", @ANYRES32=0x0, @ANYBLOB="000003000a7400002400128009000100766c616e0000000014000280100003800c000100030000000700000014000300766c616e30000000000000000000000072e89870fb8823d129dd288dfd58ba21037f42c51672dca8d1c8ee03"], 0x58}, 0x1, 0x0, 0x0, 0x4002}, 0x10)
write$cgroup_type(r2, &(0x7f0000000240), 0x9)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0)

4.202537296s ago: executing program 2 (id=321):
socket$inet(0x2, 0x1, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
setpriority(0x0, 0x0, 0x200002a14b56)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x0, 0x0})
capget(0x0, 0x0)
timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x2}, &(0x7f00000003c0)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff})
timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0)
r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
setpgid(r1, 0x0)
timer_create(0x4, 0x0, &(0x7f0000000440)=<r2=>0x0)
socket$inet(0x2, 0x2, 0x1)
socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r3, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, 0x0)
bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$packet(0x11, 0x2, 0x300)
sendto$packet(r4, 0x0, 0x0, 0x6004812, 0x0, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
timer_settime(r2, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
syz_clone3(&(0x7f0000000680)={0x40004000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58)
prlimit64(0x0, 0xf, &(0x7f0000000040)={0xa, 0xfffffffffeffffff}, 0x0)
clock_nanosleep(0x2, 0x0, &(0x7f0000000140)={0x77359400}, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
unshare(0x20040400)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x4048000)
bpf$MAP_CREATE(0x0, &(0x7f0000001980)=ANY=[@ANYBLOB], 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)

3.173282781s ago: executing program 2 (id=325):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x76, 0x0)
r1 = epoll_create(0xfb)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a00000087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000001fcffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000fbffffffffffffff00000000000000000000000000000000000000000000010200"/112], 0xb8}}, 0x2c000010)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x112})
ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f0000000040)={'bridge_slave_0\x00', 0x400})
ioctl$TUNSETSNDBUF(r4, 0x400454d4, &(0x7f0000000140)=0xe)
sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x5, 0xfffffffffffffffb}, {0x0, 0x40000000000000, 0x200000000000000}, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000001040))
r5 = openat$incfs(0xffffffffffffff9c, &(0x7f00000000c0)='.pending_reads\x00', 0x200000, 0x81)
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff)
r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_trace', 0x1, 0x80)
write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[@ANYBLOB='-1C'], 0x9)
read$FUSE(r7, &(0x7f0000001080)={0x2020}, 0x2020)
sendmsg$ETHTOOL_MSG_STRSET_GET(r5, &(0x7f0000000440)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000400)={&(0x7f0000000200)={0x1d4, r6, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x1c0, 0x2, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}, {0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xa}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}]}]}, 0x1d4}, 0x1, 0x0, 0x0, 0x4080}, 0x0)
r8 = syz_clone(0x200000, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r8)
ptrace(0x4206, r8)
ptrace(0x4208, r8)
sched_setscheduler(r8, 0x3, &(0x7f0000000080)=0x10001)
syz_usb_connect$uac2(0x0, 0x7b, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x1235, 0x800c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x69, 0x3, 0x1, 0x80, 0xe0, 0x7, {0x8, 0xb, 0x1, 0x1, 0x1, 0xa}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x2, 0x3, 0x9, 0xc5}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x5, 0x4, 0x0, {0x8, 0x25, 0x1, 0x81, 0x9, 0x80, 0x2}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x5, 0x4, 0x10, {0x8, 0x25, 0x1, 0x83, 0x30, 0xa}}}}}}}}]}}, 0x0)

2.80223403s ago: executing program 3 (id=328):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b40000"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x33}, 0x94)
r0 = socket$inet6(0xa, 0x3, 0x5)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4)
sendmmsg(r0, &(0x7f0000008940)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @remote, 0x0, 0x3}, 0x80, 0x0}, 0x5b4}, {{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @remote, 0x7, 0x1000001}, 0x80, 0x0, 0x0, &(0x7f0000001580)=ANY=[@ANYBLOB, @ANYRES64=r0], 0x108}}], 0x2, 0xc040)

2.724064032s ago: executing program 3 (id=330):
prctl$PR_MCE_KILL(0x35, 0x0, 0x8)
prctl$PR_MCE_KILL(0x35, 0x0, 0x10)
openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0)
bind$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x14)
r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00')
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0)
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x8, &(0x7f0000000080), 0x2, 0x526, &(0x7f0000000700)="$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")
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r1=>0x0)
r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x2]}, 0x8, 0x0)
read$FUSE(r2, &(0x7f0000001b40)={0x2020}, 0x205c)
timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21}, &(0x7f0000bbdffc)=<r3=>0x0)
timer_settime(r3, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
r4 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r4, &(0x7f0000005440)=[{{0x0, 0x0, 0x0}, 0x165b2d73}], 0x1, 0x2, 0x0)
r5 = epoll_create1(0x0)
r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000340)='/sys/power/sync_on_suspend', 0x0, 0x0)
sendfile(r6, r6, 0x0, 0x4)
epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r0, &(0x7f0000000040)={0x1})
epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r0, &(0x7f0000000c40)={0x2000000f})
getpeername(r0, &(0x7f0000000080)=@ieee802154={0x24, @short}, &(0x7f0000000100)=0x80)

2.555877836s ago: executing program 2 (id=331):
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000480)={[{@errors_remount}, {@init_itable_val={'init_itable', 0x3d, 0x726e}}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@resuid}]}, 0x3, 0x577, &(0x7f0000000640)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x129042, 0x15)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000ffffffff0000000000000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071000000850000002300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r1, 0x0, 0xe, 0x0, &(0x7f0000000640)="0cffffdf71c8afefeba000dee560", 0x0, 0x3, 0x3800, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$MAP_CREATE(0x200000000000000, &(0x7f0000000040)=@base={0x4, 0x4, 0x4, 0x10000, 0x808, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3000000, 0xffffffff}, 0x48)
ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, &(0x7f0000001f40)=""/4099, 0x26, 0x1003, 0x1}, 0x28)

2.334486022s ago: executing program 2 (id=332):
r0 = syz_open_procfs(0x0, &(0x7f0000002100)='net/dev\x00')
read$FUSE(r0, &(0x7f00000000c0)={0x2020, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}, 0x2020)
r2 = socket(0x10, 0x3, 0x0)
lsetxattr$security_selinux(&(0x7f0000004340)='./file0\x00', &(0x7f0000004380), &(0x7f00000043c0)='system_u:object_r:dhcpc_state_t:s0\x00', 0x23, 0x2)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f00000000c0)={0x9}, 0x10)
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@gettaction={0x1c, 0x5a, 0x11d, 0x70bd32, 0x25dfdbf9, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x3}]}, 0x1c}}, 0x44800)
sched_setaffinity(r1, 0x8, &(0x7f0000004300)=0x7)
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f0000002140)="984374e06d3bcee55579c8f9d444fcc6", 0x10)
sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f00000042c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000004280)={&(0x7f00000041c0)={0x88, 0x1, 0x1, 0x3, 0x0, 0x0, {0xa, 0x0, 0x3}, [@CTA_TUPLE_REPLY={0x68, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0xfe}}]}, @CTA_TUPLE_ORIG={0xc, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004880)
pread64(r0, &(0x7f0000000000)=""/29, 0x1d, 0x2)
read$FUSE(r0, &(0x7f0000002180)={0x2020}, 0x2020)
syz_open_procfs(0x0, &(0x7f0000002100)='net/dev\x00') (async)
read$FUSE(r0, &(0x7f00000000c0)={0x2020}, 0x2020) (async)
socket(0x10, 0x3, 0x0) (async)
lsetxattr$security_selinux(&(0x7f0000004340)='./file0\x00', &(0x7f0000004380), &(0x7f00000043c0)='system_u:object_r:dhcpc_state_t:s0\x00', 0x23, 0x2) (async)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f00000000c0)={0x9}, 0x10) (async)
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@gettaction={0x1c, 0x5a, 0x11d, 0x70bd32, 0x25dfdbf9, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x3}]}, 0x1c}}, 0x44800) (async)
sched_setaffinity(r1, 0x8, &(0x7f0000004300)=0x7) (async)
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f0000002140)="984374e06d3bcee55579c8f9d444fcc6", 0x10) (async)
sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f00000042c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000004280)={&(0x7f00000041c0)={0x88, 0x1, 0x1, 0x3, 0x0, 0x0, {0xa, 0x0, 0x3}, [@CTA_TUPLE_REPLY={0x68, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0xfe}}]}, @CTA_TUPLE_ORIG={0xc, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004880) (async)
pread64(r0, &(0x7f0000000000)=""/29, 0x1d, 0x2) (async)
read$FUSE(r0, &(0x7f0000002180)={0x2020}, 0x2020) (async)

2.289724503s ago: executing program 2 (id=333):
syz_usb_connect$midi(0x2, 0x52, &(0x7f0000000040)=ANY=[@ANYBLOB="1201100100000020820545014000010203010902400001011810040904000003010300060905090220000004050725010345375309050602ff030600050525080b010725"], 0x0)
add_key$keyring(&(0x7f0000000000), &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffa)
r0 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$search(0xa, 0x0, 0xfffffffffffffffd, 0x0, r0)
socket$vsock_stream(0x28, 0x1, 0x28)
syz_usb_connect$cdc_ncm(0x2, 0x76, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x64, 0x2, 0x1, 0x73, 0x10, 0x8, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x8, 0x24, 0x6, 0x0, 0x1, "9309ed"}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x548, 0x6, 0x2, 0x3}, {0x6, 0x24, 0x1a, 0xfff9, 0x10}, [@call_mgmt={0x5}]}, {{0x9, 0x5, 0x81, 0x3, 0x8, 0x6b, 0x6, 0x9}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x0, 0x2, 0x7}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x9c, 0x7, 0xdf}}}}}}}]}}, &(0x7f00000002c0)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x300, 0x0, 0x61, 0x2, 0x40, 0x8}, 0x2e, &(0x7f0000000180)={0x5, 0xf, 0x2e, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0xa, 0x5, 0x9}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x3, 0x9, 0x3, 0x8}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x15, 0xfd, 0xa1, 0x5}, @wireless={0xb, 0x10, 0x1, 0x8, 0x40, 0x7, 0x1, 0xc, 0xb}]}, 0x3, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x413}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0xc01}}, {0x52, &(0x7f0000000240)=@string={0x52, 0x3, "74d92378eb02da38609c0890fa8721f551295975e58f12c6dd11298435fa1094de2ab8a5e20fff39cb5296affbe7f1872b2042c220d9071773110a3cd98b7db9c26d9cb8f9934c851ede0b9543142ddc"}}]})

1.942175152s ago: executing program 5 (id=335):
r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x581202, 0x0)
mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1)
ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r0, 0xf502, 0x0)
munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) (async)
r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
ioctl$XFS_IOC_RTGROUP_GEOMETRY(r1, 0xc0805841, &(0x7f0000000040)={0x9c08, 0x40, 0x200}) (async)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r3 = userfaultfd(0x1)
ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f00000000c0)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x4000, 0x1}) (async)
r4 = socket$igmp(0x2, 0x3, 0x2)
getsockopt$inet_buf(r4, 0x0, 0x4, &(0x7f0000000100)=""/220, &(0x7f0000000200)=0xdc) (async)
bind$inet(r4, &(0x7f0000000240)={0x2, 0x4e24, @loopback}, 0x10)
mlock2(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1) (async)
socket$unix(0x1, 0x5, 0x0) (async, rerun: 32)
ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000280)={&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x2000}) (async, rerun: 32)
madvise(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x14) (async, rerun: 32)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0x2, &(0x7f00000002c0)=0x18, 0x4) (rerun: 32)
chdir(&(0x7f0000000300)='./file0\x00') (async)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_ASSOCIATE_REQ(r5, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x40, 0x0, 0xc04, 0x70bd25, 0x25dfdbfb, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa3}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0xd}, @IEEE802154_ATTR_CAPABILITY={0x5, 0x11, 0x86}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc}]}, 0x40}, 0x1, 0x0, 0x0, 0xee93ede9769f4504}, 0x800) (async, rerun: 64)
clock_gettime(0x0, &(0x7f0000000500)={<r6=>0x0, <r7=>0x0}) (rerun: 64)
pselect6(0x40, &(0x7f0000000440)={0x5, 0xc, 0x2, 0xce9a, 0x3, 0x0, 0x1ff, 0x5}, &(0x7f0000000480)={0x10000, 0x1, 0x4, 0x0, 0xec9d, 0x1, 0xa11e, 0x3}, &(0x7f00000004c0)={0x5, 0x2, 0x7, 0x4, 0x7, 0x5, 0x6, 0x34a8}, &(0x7f0000000540)={r6, r7+10000000}, &(0x7f00000005c0)={&(0x7f0000000580)={[0x2]}, 0x8})
bind$tipc(0xffffffffffffffff, 0x0, 0x0)
setsockopt$nfc_llcp_NFC_LLCP_RW(r1, 0x118, 0x0, &(0x7f0000000600)=0x1, 0x4) (async)
mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x50, r1, 0x26bdb000) (async)
r8 = socket$inet6_udp(0xa, 0x2, 0x0)
getsockopt$IP6T_SO_GET_REVISION_MATCH(r8, 0x29, 0x44, &(0x7f0000000640)={'IDLETIMER\x00'}, &(0x7f0000000680)=0x1e) (async, rerun: 32)
r9 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32)
sendmsg$WG_CMD_GET_DEVICE(r9, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x1c, 0x0, 0x4, 0x70bd2d, 0x25dfdbfc, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e24}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40800) (async)
linkat(0xffffffffffffffff, &(0x7f0000000840)='./file0\x00', 0xffffffffffffffff, &(0x7f00000008c0)='./file0\x00', 0x7e71a8115abd0f86)

1.910206612s ago: executing program 6 (id=337):
arch_prctl$ARCH_SHSTK_UNLOCK(0x5004, 0x0)
mkdirat(0xffffffffffffffff, &(0x7f0000000540)='./file0\x00', 0x1c0)
syz_mount_image$ext4(&(0x7f0000000680)='ext4\x00', &(0x7f0000000580)='./file0/file0\x00', 0x10000, &(0x7f00000006c0), 0x1, 0xbdb, &(0x7f0000001000)="$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")
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7)
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x50011, &(0x7f00000014c0), 0x1, 0x793, &(0x7f0000000c00)="$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")
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
open_tree(0xffffffffffffff9c, 0x0, 0x89901)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_int(r3, 0x0, 0x7, &(0x7f00000002c0)=0x40000803, 0x4)
syz_emit_ethernet(0x52, &(0x7f0000000a00)={@local, @random="facfff00716e", @void, {@ipv4={0x800, @udp={{0xd, 0x4, 0x0, 0x26, 0x44, 0x2, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@rr={0x7, 0x1f, 0x1b, [@multicast2, @dev={0xac, 0x14, 0x14, 0xf9}, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @loopback, @dev={0xac, 0x14, 0x14, 0x27}, @initdev={0xac, 0x1e, 0x1, 0x0}]}]}}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x3}}}}}}}, 0x0)
recvmmsg(r3, &(0x7f0000001980)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2, 0x0)

1.875072523s ago: executing program 5 (id=338):
r0 = socket$inet_icmp(0x2, 0x2, 0x1)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000200)=@newlink={0x54, 0x10, 0x401, 0x2, 0x80000, {0x0, 0x0, 0x0, 0x0, 0x1000, 0x41042}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @vti={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VTI_LOCAL={0x8, 0x4, @rand_addr=0x64010100}, @IFLA_VTI_LOCAL={0x8, 0x4, @loopback}]}}}, @IFLA_IFNAME={0x14, 0x3, 'ip_vti0\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x8c5}, 0x0)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000000)=0x4, 0x4)
socket$inet6_tcp(0xa, 0x1, 0x0)
dup(0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x8b}, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0)
flock(r3, 0x3fc0fe33fd5c63f2)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1)
flock(r4, 0x2)
r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x10a)
flock(r5, 0x5)
bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10)
setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e21, @remote}}, 0x0, 0x0, 0x23, 0x0, "e83ae75240c2d6d8ec87bb53fab0910000000000000007a5922406b64cddaeb9d339ba3c35dc0a08df8e61740b7cf2d4e499d58654a4cf0fa0ce1f830c3079cffcfd00"}, 0xd8)
setsockopt$inet_tcp_int(r2, 0x6, 0x7, &(0x7f0000000040)=0xd0, 0x4)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
unshare(0x400)
connect$inet(r2, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10)
setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000140)=0x4, 0x4)
sendmsg$inet(r2, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0)
capset(0x0, 0x0)
recvmsg(r2, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x700)
munmap(&(0x7f0000002000/0x1000)=nil, 0x1000)
sched_setaffinity(0x0, 0x0, 0x0)
r6 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
setsockopt$bt_BT_POWER(r6, 0x112, 0x9, 0x0, 0x0)
r7 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x1, 0x80)
write$cgroup_subtree(r7, 0x0, 0x9)

1.870375473s ago: executing program 5 (id=339):
setns(0xc9, 0x0)
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r1, 0x29, 0xb, &(0x7f0000000040)=0x9, 0x4)
bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDSKBLED(r2, 0x4b65, 0xfffffffffffffffe)
setsockopt$inet6_int(r1, 0x29, 0x42, &(0x7f0000000100)=0x5, 0x4)
sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)
recvmmsg(r1, &(0x7f0000002b00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/161, 0xa1}, 0x9}], 0x1, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', <r4=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="280000006800010001fd00000e0000000200030004000000080006000100000008000500", @ANYRES32=r4, @ANYBLOB], 0x28}}, 0x0)

1.826563715s ago: executing program 3 (id=340):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000780)={'pim6reg0\x00', 0x400})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r1)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x41, 0x0)
writev(r2, &(0x7f0000000400)=[{&(0x7f0000000040)='U', 0x1}], 0x1)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'syz_tun\x00', 0x200})

1.825538225s ago: executing program 3 (id=341):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001100050000000001feffffff07", @ANYRESDEC=r0], 0x34}, 0x1, 0x0, 0x0, 0x44010}, 0x800)
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100), 0x2, 0x522, &(0x7f00000006c0)="$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")
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
removexattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000180)=ANY=[@ANYBLOB="747275737465642e6f7665726c617900885d206dcafb8b6ee786b96cbfd2901731acec54b05fe30d01aafa6ca1134a560f24717d7368ff3e1e0b27e64d5855b32dde8fc103ef4c70482c0e1714fb7eccf9adb120fdf6e2175182d7841f6df7e032d6a136c4973bafe0dfb7329e8ceef7ac9f61696de9"])
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000300)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x90e, &(0x7f0000000400)={[{@init_itable_val={'init_itable', 0x3d, 0x957}}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2a}}, {@stripe={'stripe', 0x3d, 0x8}}, {@orlov}, {@resgid={'resgid', 0x3d, 0xee00}}]}, 0x4, 0x46f, &(0x7f0000000780)="$eJzs289vFFUcAPDvTFt+IyviDxC1isbGH1sooBy8aDTxoImJFzzWthBkoYbWRAgRNAaPhsTEo/Fo4l/gSS9GPZl41bshIYaL6GnM7M6022W73ZYtK93PJ9nueztv+t533rzdN/N2AxhYo/mfJGJHRPweEbsa2aUFRhtPN29cnPrnxsWpJLLs7b+Serm/b1ycKouW+20vMmNpRPppEg+3qXfu/IXTk7XazLkiPz5/5v3xufMXnj91ZvLkzMmZsxPHjh05fOjFFyaO9iTOe/O27vtodv/e19+5+ubU8avv/vxtUsbfEkePjHba+FSW9bi6/trZlE6Gu9hhaB0bQ9fybsi7a6Q+/nfFUCx23q547ZO+Ng5YV1lhmc2XM2ADS6LfLQD6o/ygz69/y8edm3303/WXGxdAedw3i0djy3CkRZmRluvbXhqNiOOX//0qf8Tq70O4igYAVu37fP7z3C3zv62t5e6JzfW1oUqxlrI7Iu6LiD0RcX9EPBARD0bEQ+0q6bAg0LpIcuv8J7221ti6kc//XirWtpbO/8rZX1SGitzOevxH04jazMH6MYkYi5HNJ07VZg51qOOHV3/7fLltzfO//JHXX84Fi3ZcG968dJ/pyfnJ24m52fWPI/YNt4s/WVgJSCJib0TsW2Mdp575Zv9y21aOv4Nu1plWkH0d8XSj/y9HS/ylpPP65PiW/HwYz8+Cg23r+OXXK28tV/9txd8Def9va3v+L8RfSZrXa+dW898bo/vKH58te01TXdP5v/jCpuL5w8n5+XOHIjYlbzQa3fz6xOK+Zb4sn8c/dqD9+N9df84WDkR+Ej8SEY9GxGNFdI9HxBMRcaDDUfjplSff63SE2se/pcN/7J08/umW/q8sLdLS/4uJTdH6SvvE0Okfv1v6H7uJv5T3/5F6aqx4pf7+92XnuLpp12rPZgAAALhbpRGxI5K0upBO02q18R3+PbEtrc3OzT97YvaDs9ON3whUYiQt73Q17gePJOX9z0pTfqIlf7i4b/zF0NZ6vjo1W5vud/Aw4LY3j//yTme18fSnb5fAxteDdTTgLmX8w+Ay/mFwGf8wuNqM/1u+AA5sTO0+/y/1oR3Andcy/i37wQBx/Q+Da7jpR47AYGn+/PdGAANjbmus/CP5jZDIsiz7HzRj4yQi7bbwpX43deVEss6jYEe/A1x9ot/vTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAL3xXwAAAP//BL/saw==")
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x10a, 0x0, 0x400006}]})
syz_mount_image$fuse(0x0, 0x0, 0x3000019, 0x0, 0x1, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f00000006c0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x101142, 0xeaf9)

1.822843395s ago: executing program 3 (id=342):
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000380)={[0xff, 0xaec1, 0x1006, 0x4004, 0x48bd, 0x4, 0xefffffffffffffff, 0xec, 0x0, 0x2000000, 0x20000, 0x40000000014, 0x7ff, 0x1, 0x1, 0x900000000000], 0x8000000, 0x49b81})
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='dctcp', 0x5)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0x801, 0xfffffffd, 0x8000000, {0x0, 0x0, 0x0, 0x0, 0x0, 0x404a3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x5084)
sendto$inet(r0, &(0x7f0000000300)="89", 0x1, 0x4044880, 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="240000001000010027bd709bffdbdf25037c0000080001"], 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0xc010)

970.123906ms ago: executing program 5 (id=343):
sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff)
r1 = getpid()
sched_setaffinity(0x0, 0x24, &(0x7f00000002c0)=0x100000002)
r2 = socket(0x80000000000000a, 0x2, 0x0)
r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x1)
syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3)
ioctl(r2, 0x400452c8, &(0x7f0000000000)="00000000000000000000000000000074ef9e7a0a3f")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r4 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r4, 0x1, &(0x7f0000000240)=0x7)
mmap(&(0x7f00007e6000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x393a5000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x4000087, 0x2, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0})
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0b00000002010000324800007f00000001000000030efb4e817a105d2259e5256999b3cf441761382b29dcf764f81c24b323d26a233d139821239954164d67be9764de9be13f553e1254d84aa1d575069f8d1466ebca045f2aa5c48455576dfcbb1dd7fad255a95ba65b2829b7a392b8e89a7cb11a95e558b41ba6f0bd334d91d20880fb", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{r7}, &(0x7f0000000100)=0x7d8, &(0x7f0000000140)='%pi6   \x00', 0x7f00}, 0x20)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/rfcomm0\x00', 0x802, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r8, 0x5401, 0x0)
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {}, 0x2, 0x40, &(0x7f0000000000)={0x0, 0x1, 0xfffe, 0x42}, 0x8, 0x203ffffd, 0x300, 0x0, 0xeeb, 0x20002, 0x0})
close_range(r2, 0xffffffffffffffff, 0x0)
sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000)

952.327436ms ago: executing program 3 (id=344):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
socket$pptp(0x18, 0x1, 0x2)
getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94)
socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x400000000000000, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)={0x2, 0x17, 0x7, 0x2, 0x2a, 0x0, 0x70bd28, 0x25dfdbfb, [@sadb_sa={0x2, 0x1, 0x4d6, 0x5, 0x5, 0xd7, 0x4}, @sadb_sa={0x2, 0x1, 0x4d2, 0xf, 0x4, 0x5, 0x0, 0x80000001}, @sadb_x_sec_ctx={0x19, 0x18, 0x6, 0xe0, 0xbd, "dfb5a4eae7b34b46d9951e74060af91b2340b7f7749db6cb6090302375079c23043c524d5423f34defee7000fc62bc3a13d8fc8cd9f31553bf2d0030278e31bb488281b5195d31286abbfe306f8924367c61d3a368649a1e023b3cabe00c378352748877669d66057044f808ebf6138262dba5ebb7fece6b46692bf51b41d285476fca087967a0c88890d46bbbe0ea83447e297014e4f8c87b4d7a6afa2f3f76ef89ea8bb1365cfd8912b55f79eff7c5d26fce9505e93746ed2a6d329d"}, @sadb_x_kmaddress={0x7, 0x19, 0x0, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x34}}, @in6={0xa, 0x4e23, 0x5, @loopback, 0xbe}}, @sadb_x_nat_t_type={0x1, 0x14, 0x3}, @sadb_address={0x3, 0x17, 0x33, 0xa0, 0x0, @in={0x2, 0x4e20, @remote}}]}, 0x150}}, 0x40090)
syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r5, &(0x7f0000000040)='1', 0x1)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r3, 0x1, 0x0, &(0x7f0000000180)=0x2, 0x4)
setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x25, &(0x7f0000000080)=0x1f6, 0x4)
sendmmsg$inet(r4, &(0x7f0000000500)=[{{&(0x7f0000000100)={0x2, 0x4e23, @private=0xa010100}, 0x10, &(0x7f00000016c0)=[{&(0x7f0000001540)="8c", 0x1}], 0x1}}], 0x1, 0x4000800)

636.684764ms ago: executing program 6 (id=345):
r0 = syz_mount_image$vfat(&(0x7f0000000140), &(0x7f00000002c0)='./file0\x00', 0x2048c5, &(0x7f00000003c0)=ANY=[@ANYBLOB="64656275672c73686f72746e616d653d6d697865642c74696d655f6f66667365743d30783c3030303030303030303030303438622c6e6f6e756d7461696c3d302c756e695f786c6174653d312c73686f72746e616d653d6c6f7765722c757466383d312c756e695f786c6174653d302c757466383d302c73686f72746e616d653d77696e39352c6e66733d6e6f7374616c655f726f2c73686f72746e616d653d77696e6e742c757466383d302c757466383d302c00f63b3dd741110e0e5d26e8ef98580a4f2cd9021209ab3f3927660a4a0256f4d01c989bddbfdee0f483b5582ecd45248979c2feb3e5f0b88e435b491b3cc1139a8a1ee7"], 0x0, 0x2bf, &(0x7f0000002bc0)="$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")
signalfd(r0, &(0x7f0000000000)={[0x7]}, 0x8)
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='oom_score\x00')
utimensat(r1, 0x0, &(0x7f0000000040)={{0x0, 0x3ffffffe}, {0x0, 0x3fffffff}}, 0x0)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000000140)={[{@nobarrier}, {@errors_remount}, {@noinit_itable}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@quota}, {@dax_inode}], [{@obj_user}, {@fsname={'fsname', 0x3d, '\xad\x85vW\xec\xea\xbe\xfe\x89e\x02\xb2\x02\x8b\x8bf_\xb3\x91p\xf4\x05P\xe2\x87\x9c\xb5\x172=\x82\xdc\xfdh\xe5\x9dp\x85\xae\xd6W\x03J\xdc\xc6\xf78\b\xfa?$$J,\xf5\x8b\x03\xedc\x16W\xacO\xa9\xf6\xd8\xf8\x9e3\xa3\xb5\xc7\xd7\xc3\xfe\x92\x99> z\xba\xf7\xb3=\x17\x9b\x035\x8c\xb6\x8f0\x95M\xc8'}}, {@fowner_eq}, {@dont_appraise}]}, 0x1, 0x78e, &(0x7f0000000800)="$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")
utime(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)={0x54})

478.560268ms ago: executing program 0 (id=346):
r0 = syz_open_dev$loop(&(0x7f0000000040), 0x4bec, 0x8c100)
ioctl$LOOP_SET_CAPACITY(r0, 0x4c07)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x9, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="b400000000000000dd0a00000000000063010000000000009500000000000000de759eac6de9ad5d5fd9649b77f9189d4002b0a637e48b1c15a792730e699f36fad16ff8f9b44c4e8722921d795913dad36c48831da238b4254ebc0edbab6c01078c9b4a49fb61a0a6507fa02ae9479d6de75227d330c91e6a4f19f99c01825280eb17c577039f51279d244fc5d8802346ade4b2a651374d274105bdd3ed35f45c7d3de20347df4aadb5f513711382b3ba68e7d29aa130d28fc9cdfcc61894880a8d2d1ee8e42ba907458a"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x9, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7}, 0x48)

273.554963ms ago: executing program 0 (id=347):
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
setresuid(0x0, 0xee00, 0x0)
capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x804, 0x4, 0x7})
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xf, 0x3, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x19, 0x4, 0x8, 0x8}, 0x50)
fstat(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, <r1=>0x0})
quotactl$Q_SETQUOTA(0xffffffff80000802, &(0x7f0000000000)=@filename='./file0\x00', r1, &(0x7f0000000140)={0xb, 0x3, 0x2, 0x3, 0x0, 0x6, 0x2, 0xffffffffffffffff, 0x8})
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r4, 0x4008ae8a, &(0x7f0000000080))
r5 = syz_open_dev$MSR(&(0x7f0000000040), 0xc8, 0x0)
ioctl$X86_IOC_RDMSR_REGS(r5, 0xc02063a0, 0x0)
r6 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r6, &(0x7f0000000400)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$sock_int(r6, 0x1, 0x29, &(0x7f0000000100)=0x7c, 0x4)
open(&(0x7f0000000240)='./file0\x00', 0x400, 0x1)
sendto$inet(r6, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10)
setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x41, &(0x7f0000000040)=0x1b32, 0x4)
sendto$inet(r6, &(0x7f0000000540)='v', 0x1, 0x4040, 0x0, 0x0)
socket$can_raw(0x1d, 0x3, 0x1)
close(0x3)
ioctl$XFS_IOC_INUMBERS(r0, 0x80405880, &(0x7f00000003c0)={{0x200, 0x1, 0x40, 0x4, 0x2}, [{0x2, 0x4, 0x5, 0x4}, {0x8000000000000000, 0xa, 0x9, 0x7}, {0x3, 0xa, 0x55, 0x2}, {0x8, 0x100000000, 0x2, 0x80}]})
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000200)={0x0, r2}, 0x8)
bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x1e, 0x800004, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0xfffffffd, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x50)

244.545454ms ago: executing program 5 (id=348):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$sock_int(r1, 0x1, 0x10, &(0x7f0000000100)=0x7, 0x4)
write$cgroup_pressure(r0, &(0x7f0000000000)={'full', 0x20, 0x6, 0x20, 0x9}, 0x2f)
recvmsg$unix(r1, &(0x7f0000004980)={0x0, 0x0, 0x0, 0x0, &(0x7f0000004840)}, 0x20)
syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file1/file0\x00', 0x293058, &(0x7f0000000280)={[], [{@hash}, {@permit_directio}, {@measure}, {@context={'context', 0x3d, 'user_u'}}, {@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@subj_user={'subj_user', 0x3d, '#^$!#&%\\:'}}, {@measure}, {@hash}]}, 0xff, 0x4ad, &(0x7f0000000bc0)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181)
mmap$IORING_MAP_OFF_PARAM_REGION(0x0, 0x4, 0x4, 0x8bae1b9408580532, 0xffffffffffffffff, 0x20000000)
r2 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f0000000080), 0x18)
quotactl$Q_GETFMT(0xffffffff80000401, &(0x7f0000000c80)=@loop={'/dev/loop', 0x0}, 0x0, 0x0)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r2, 0x800c6613, &(0x7f0000000500)=@v1={0x0, @aes128, 0x3, @desc3})
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0)
statx(r2, &(0x7f00000001c0)='./file1\x00', 0x1000, 0x7ff, &(0x7f0000000340))
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000042, 0x0, 0x1, 0x0, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x800, 0x124)
mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
r3 = socket$pppl2tp(0x18, 0x1, 0x1)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
connect$pppl2tp(r3, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0xffff, @rand_addr=0x64010100}, 0x3, 0x0, 0xffffffff}}, 0x2e)
ioctl$F2FS_IOC_WRITE_CHECKPOINT(r3, 0xf507, 0x0)
setxattr$security_capability(&(0x7f0000000240)='./file0/file1\x00', 0x0, 0x0, 0x0, 0x0)

206.826445ms ago: executing program 0 (id=349):
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='uid_map\x00')
ioctl$BLKGETDISKSEQ(r0, 0x80081280, &(0x7f0000000000)) (async)
setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000040)={0x8, {{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x3a}}}}, 0x88) (async)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000480)={0x1c, 0x1, 0x1, 0x3, 0x0, 0x0, {0x2, 0x0, 0x9}, [@CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4080}, 0x8008) (async)
read$FUSE(r0, &(0x7f0000000400)={0x2020}, 0x2020)

206.366425ms ago: executing program 0 (id=350):
shutdown(0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mremap$dontunmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000291000/0x3000)=nil)
r0 = syz_clone(0x20220000, &(0x7f0000001c00), 0x0, 0x0, 0x0, 0x0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000200)='./dev\x00', 0x1000410, &(0x7f0000000840)=ANY=[@ANYBLOB="757466383d302c73686f72746e616d653d341e6d697865642c696f636861727365743d6d6163726f6d616e69616e2c757466383d302c73686f72746e616d653d6c6f7765722c73686f72746e616d653d77696e39352c73686f73746e616d653d6c6f7765722c6e6f6e756d7461696c3d302c756e695f786c6174653d312c636f6465706167653d3836362c757466383d302c757466383d312c71756965742c73686f72746e616d653d6c6f7765722c73686f72746e616d653d6c6f7765722c757466383d30"], 0x3, 0x2b2, &(0x7f0000000240)="$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")
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
r1 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
setns(0xc9, 0x0)
socketpair(0x27, 0x1, 0x1, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e)
tgkill(r0, r0, 0xe)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x4000087, 0x2, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x200000, &(0x7f0000000440)={[{@errors_remount}, {}, {@block_validity}, {@norecovery}, {@errors_continue}, {@oldalloc}, {@oldalloc}, {@max_batch_time={'max_batch_time', 0x3d, 0x29ea}}, {@norecovery}]}, 0x3, 0x566, &(0x7f00000015c0)="$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")
r2 = dup(0xffffffffffffffff)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000580)='/sys/power/pm_test', 0x202080, 0x1)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x370, 0xffffffff, 0x1d0, 0x100, 0x100, 0xffffffff, 0xffffffff, 0x2a0, 0x2a0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@empty, @empty}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@frag={{0xff0}, {[0x0, 0x3f3], 0x2}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x100}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x0, 'REJECT\x00', 0x0, {0x3}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x1d0}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x3d6)
write$P9_RVERSION(0xffffffffffffffff, 0x0, 0xffffffffffffffa1)
ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000500)={'\x00', 0x5, 0x6, 0x8, 0x8, 0x5, r1})

14.49047ms ago: executing program 0 (id=351):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) (async)
ioctl$PIO_CMAP(0xffffffffffffffff, 0x4b71, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x280440e, &(0x7f0000000500)={[{@data_err_ignore}, {@test_dummy_encryption_v1}, {@errors_continue}, {@delalloc}, {@noinit_itable}, {@norecovery}, {@inlinecrypt}, {@nodioread_nolock}, {@nouid32}, {@jqfmt_vfsv0}, {@usrquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x17}}, {@nouser_xattr}]}, 0x1, 0xbdb, &(0x7f0000001c00)="$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") (async)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
r1 = socket$inet6(0x10, 0x2, 0x0)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f0000000000)=[{0x50, 0x0, 0x0, 0xffe00001}, {0x16, 0x0, 0x0, 0xfffffffc}]}, 0x10) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x14, &(0x7f0000002780)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000db000000850000008200000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x42, 0xe)
ioctl$KVM_GET_XSAVE2(r4, 0x9000aecf, &(0x7f0000ffe000/0x1000)=nil)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{0xffffffffffffffff, <r5=>0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000003c0)}, 0x20)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000005"], 0x48)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r6}, &(0x7f0000000000), &(0x7f0000000800)=r7}, 0x20)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x1f, 0x24, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000001000000000000000300000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000040000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082000000804720000400000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000030000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200000018280000", @ANYRES32=r6, @ANYBLOB="0000000000100100bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x2, 0xc4, &(0x7f00000002c0)=""/196}, 0x94)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00', <r8=>0x0})
sendmsg$NL80211_CMD_GET_WOWLAN(r2, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1cc14163ea9d2355b60523e103a03e89ee90a0d4c14f965a12541770d1b6", @ANYRES16=0x0, @ANYBLOB="000025bd7000fedbdf254900000008000300", @ANYRES32=r8, @ANYBLOB], 0x1c}}, 0x24040000)
syz_read_part_table(0x1057, &(0x7f0000001080)="$eJzsz9GJwjAABuA/bbhrOY7eGjeQI7iHruMwjtJXHxQqDUWcQH34PkLyQ/InJLxVl9+krun/K8kx3WXaD33y0x+SoW1N28maDOXRrOXpmnFMzblveVnaUtZRbtc5+d4abZ6X/JVkfS2706v+CQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACf7B4AAP//9mIL1A==")
sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000c40)=ANY=[@ANYBLOB="14001f01", @ANYRES16=0x0, @ANYBLOB="04002bbd7000fddbdf2501000000"], 0x14}, 0x1, 0x0, 0x0, 0x50}, 0x80) (async)
setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0) (async)
r9 = epoll_create1(0x0) (async)
r10 = socket$unix(0x1, 0x1, 0x0)
close(r10) (async)
socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$sock_int(r10, 0x1, 0x2e, &(0x7f0000000040)=0x10009, 0x4) (async)
epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r10, &(0x7f00000002c0)={0xa002a014}) (async)
mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) (async)
setxattr$security_capability(&(0x7f0000000240)='./file0/file1\x00', &(0x7f0000000280), 0x0, 0x0, 0x0)

14.17702ms ago: executing program 0 (id=352):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x9, 0x4, 0x4, 0x100, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0}, 0x50)
bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xd, &(0x7f0000000280)=@framed={{}, [@generic={0x61, 0x8, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_fd={0x18, 0x1, 0x1, 0x0, r2}, @generic={0x15, 0x8, 0x0, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, r3}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x81, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket(0x10, 0x803, 0x0) (async)
r5 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', <r6=>0x0})
sendmsg$ETHTOOL_MSG_TSINFO_GET(r5, &(0x7f0000000c80)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000a40)={0x1ec, 0x0, 0x0, 0x70bd2b, 0x25dfdbfd, {}, [@HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x1ec}, 0x1, 0x0, 0x0, 0x44060}, 0x4010)
sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=@newtfilter={0x70, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0xb}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0x44, 0x2, [@TCA_U32_INDEV={0x14, 0x8, 'veth1_to_team\x00'}, @TCA_U32_SEL={0x24, 0x5, {0x5, 0xf, 0x1, 0x3d3f, 0x0, 0xfff, 0xb709, 0x58f, [{0x0, 0x20008000, 0x4, 0x5}]}}, @TCA_U32_LINK={0x8}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x4084}, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000640), r5)
unshare(0x22020600) (async)
unshare(0x22020600)
bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000240)=@generic={0x0}, 0x18)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000000)=r4, 0x4)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r2}, &(0x7f0000001bc0), &(0x7f0000000680)=r4}, 0x20) (async)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r2}, &(0x7f0000001bc0), &(0x7f0000000680)=r4}, 0x20)
sendmsg$unix(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000040)="ad47", 0x2}], 0x1, 0x0, 0x0, 0x40801}, 0x4000004)
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x1000000, &(0x7f0000000900)=ANY=[], 0x1, 0x267, &(0x7f0000000e80)="$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") (async)
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x1000000, &(0x7f0000000900)=ANY=[], 0x1, 0x267, &(0x7f0000000e80)="$eJzs3cFqE1EUANCbZpqMBbVrcTHgxpWofxCkghAQqrM30LppRZhuoqt8huAf+Dku/Yyuuou0M5p2qiI17UuccyDMZW7u5L0k5GVxX/Lm/ruDvfdHb+ffPkWeF5FFzOIkYjs2oh+1XnPcOIsHMYiFWQAA62Z3dzJKPQaWqHf5VFWNJpsRMbyUK7/c0KgAAAAAAAAAAABYsqv0/5+n/x8A1o/+//9fVY0mW833t4v0/wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADpnMznd+d/uKUeHwCwfNZ/AOge6z8AdI/1HwC659WdJiiKPOJ4Ni2nZX2sTz9/Md55XJzZXlQdT6flZhOPd57U+aKd32rqn57P/ygrB/HwQZ0/zT17OW7VD2PvWmcOAAAAAAAAAAAAAAAAAAAAq+NR8VNrf3+/zp/eYRi/yOcRny/8PkBr/34W97KbnAkAAAAAAAAAAAAAAAAAAACsr6MPHw8mh4f7VWeDr/2IZI8evfplSP0ktIJbcYWqfNVmsUZBPyL2h5HFv18wi9+/n1/f/vvrpP5kAgAAAAAAAAAAAAAAAACA7lls+k09EgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABIZ/H//9cXpJ4jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0A3fAwAA////soPi")
syz_read_part_table(0x5e4, &(0x7f0000000000)="$eJzs3D2LXFUYB/D/uXfeFiLrBxBcSCMKRrETF2Oha7og2gnaWqxILMRCdgcVwZcPYCtaGIUQawUFCWKsrERYYiFib2GacGTuy0xAsZlFCfx+xZznnHue57mXe9sz4c5Wd5Nakuvd7KO2GybNw33wW/L2NFm+8EQy7xOmQ2JJ8tzlJ5+6sHexzNdrq9Xj4ep802U2jJPsDdGXk3xw+eCdLj5OyVGGMNPPZ5ms9tY+78O/3/TNkrbbw/9s8nXtX8QsP+aLJIelXb38ebLMJ8ndWXT7ziVpa63daz5OdpJ2/VVs4cr+teXjQ7yT4Uub9rOjd0t9aLg2Ta21Njk6O2a2yT2Pnbv0T0W7/GX3eONSrXV6ZsxtNhcOb80mw+yR7345ynKxrp7abEqe7CSvnDzzYHcnpa8x3f7xAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4Zfe9ev83zTg53/2Wdfz0p2k2W49z7zreW5xS/yv713bffOtSk9f3X/rp5Td+Pfg9fyRp2xycSebrfS/2w9X3umEyrLZb9z+81cw++/jbnfXCULok35/9+WYdO5wM42uP3pa832zdHwAAAAAAAAAAAAAAAAAAAFau5sLexSbPfnWj5PlsjvvXLJJSxukiqbXWP2tnPPz/w3gOP9dvpKySUsvt1c8nu3cldf7+A93fCvSJtdZJ16L8J4/Iv/grAAD//x/vY/E=")
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt\x00', 0x1fd)

0s ago: executing program 5 (id=353):
r0 = socket$inet6(0xa, 0x3, 0x5)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000005ac0)={{{@in=@empty, @in=@broadcast, 0x0, 0x0, 0x4e20, 0xffff, 0xa, 0x20}, {0x2, 0x4, 0x0, 0x1000, 0x2, 0x0, 0x4000c}, {0x0, 0x0, 0x3}, 0x9, 0x0, 0x1, 0x0, 0x2, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x19}, 0x4d8, 0x33}, 0xa, @in=@remote, 0x0, 0x0, 0x2, 0x3, 0x0, 0x89586}}, 0xe8)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_print_times', 0x2000, 0x0)
sendfile(r0, r1, 0x0, 0x80)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r2=>0xffffffffffffffff})
ioctl$sock_SIOCETHTOOL(r2, 0x89f0, &(0x7f0000000000)={'ip6tnl0\x00', &(0x7f0000000180)=@ethtool_gfeatures})
bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@bloom_filter={0x1e, 0x1000, 0x9, 0x0, 0x40408, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x3, 0x7}, 0x50)
sendmsg$NL80211_CMD_SET_MPATH(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="080025bd7000fbdbdf25160000000c00990081ffffff2d0000000a001a0008021100000000000a001a0008021100000000040a17c899afffffffffff00"], 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x40)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
close(0x3)

kernel console output (not intermixed with test programs):

 28.134107][  T479] process 'syz.4.10' launched '/dev/fd/5' with NULL argv: empty string added
[   28.191932][  T471] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   28.205516][  T471] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[   28.224804][  T483] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[   28.241202][  T471] EXT4-fs (loop3): 1 truncate cleaned up
[   28.246913][  T471] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue
[   28.270171][  T471] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm syz.3.7: bg 0: block 4: invalid block bitmap
[   28.448376][  T492] ======================================================
[   28.448376][  T492] WARNING: the mand mount option is being deprecated and
[   28.448376][  T492]          will be removed in v5.15!
[   28.448376][  T492] ======================================================
[   28.703576][  T511] netlink: 52 bytes leftover after parsing attributes in process `syz.0.18'.
[   28.722240][  T511] bridge0: port 2(bridge_slave_1) entered disabled state
[   28.729572][  T511] bridge0: port 1(bridge_slave_0) entered disabled state
[   29.250767][  T512] EXT4-fs (loop0): Test dummy encryption mode enabled
[   29.288246][   T24] kauditd_printk_skb: 71 callbacks suppressed
[   29.288268][   T24] audit: type=1400 audit(1791090488.940:145): avc:  denied  { append } for  pid=514 comm="syz.4.19" name="001" dev="devtmpfs" ino=177 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[   29.334057][  T518] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it.
[   29.343241][  T518] overlayfs: missing 'lowerdir'
[   29.352779][  T512] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled
[   29.475075][  T512] EXT4-fs (loop0): mounted filesystem without journal. Opts: usrjquota=,test_dummy_encryption=v1,inlinecrypt,delalloc,noinit_itable,norecovery,minixdf,nodioread_nolock,errors=remount-ro,jqfmt=vfsv0,usrquota,max_dir_size_kb=0x0000000000000008,
[   29.574265][   T24] audit: type=1400 audit(1791090489.060:146): avc:  denied  { read } for  pid=516 comm="syz.3.20" name="kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[   29.691247][   T24] audit: type=1400 audit(1791090489.060:147): avc:  denied  { open } for  pid=516 comm="syz.3.20" path="/dev/kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[   29.857857][   T24] audit: type=1400 audit(1791090489.560:148): avc:  denied  { append } for  pid=510 comm="syz.0.18" path="/5/file0/memory.events" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   29.932320][  T511] netlink: 52 bytes leftover after parsing attributes in process `syz.0.18'.
[   29.987268][  T530] Zero length message leads to an empty skb
[   30.025365][   T24] audit: type=1400 audit(1791090489.750:149): avc:  denied  { read } for  pid=531 comm="syz.3.24" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   30.074851][   T24] audit: type=1400 audit(1791090489.780:150): avc:  denied  { read append } for  pid=531 comm="syz.3.24" name="usbmon5" dev="devtmpfs" ino=169 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[   30.123440][   T24] audit: type=1400 audit(1791090489.780:151): avc:  denied  { open } for  pid=531 comm="syz.3.24" path="/dev/usbmon5" dev="devtmpfs" ino=169 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[   30.129075][  T534] EXT4-fs (loop1): Unrecognized mount option "smackfsfloor=ext4" or missing value
[   30.167703][   T24] audit: type=1400 audit(1791090489.780:152): avc:  denied  { create } for  pid=535 comm="syz.0.22" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[   30.305995][  T539] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x0612b11d, utbl_chksum : 0xe619d30d)
[   30.340209][  T534] EXT4-fs (loop1): mounted filesystem without journal. Opts: bsdgroups,norecovery,prjquota,noquota,,errors=continue
[   30.352507][  T539] exFAT-fs (loop3): IO charset iso;859-7§92¼ø$N•-$°•Þ½òuØ.+ø	ä™y ¢¡[ÃÝë…S¡f
ÐŒIÕµQ´JËnðÕî¹öÆ
åÞ not found
[   30.453574][   T24] audit: type=1400 audit(1791090490.180:153): avc:  denied  { read write } for  pid=533 comm="syz.1.25" name="file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   30.484521][   T24] audit: type=1400 audit(1791090490.180:154): avc:  denied  { open } for  pid=533 comm="syz.1.25" path="/2/file1/file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   30.526957][  T300] EXT4-fs error (device loop1): ext4_mb_generate_buddy:824: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters
[   30.543171][  T300] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[   30.555537][  T300] EXT4-fs (loop1): This should not happen!! Data will be lost
[   30.555537][  T300] 
[   30.565473][  T300] EXT4-fs (loop1): Total free blocks count 0
[   30.571970][  T300] EXT4-fs (loop1): Free/Dirty block details
[   30.579288][  T300] EXT4-fs (loop1): free_blocks=66060288
[   30.585000][  T300] EXT4-fs (loop1): dirty_blocks=32
[   30.590484][  T300] EXT4-fs (loop1): Block reservation details
[   30.596627][  T300] EXT4-fs (loop1): i_reserved_data_blocks=2
[   30.604015][  T300] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 1 with error 28
[   30.616951][  T300] EXT4-fs (loop1): This should not happen!! Data will be lost
[   30.616951][  T300] 
[   30.646559][  T554] EXT4-fs (loop3): mounted filesystem without journal. Opts: lazytime,minixdf,,errors=continue
[   30.657179][  T554] ext4 filesystem being mounted at /7/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   30.683712][  T562] capability: warning: `syz.1.29' uses deprecated v2 capabilities in a way that may be insecure
[   30.786209][  T570] netlink: 'syz.3.31': attribute type 1 has an invalid length.
[   30.793912][    T5] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   30.827235][  T565] EXT4-fs error (device loop1): ext4_orphan_get:1405: inode #15: comm syz.1.29: inode has both inline data and extents flags
[   30.842174][  T565] EXT4-fs error (device loop1): ext4_orphan_get:1410: comm syz.1.29: couldn't read orphan inode 15 (err -117)
[   30.854824][  T576] udc-core: couldn't find an available UDC or it's busy
[   30.862505][  T565] EXT4-fs (loop1): mounted filesystem without journal. Opts: nobarrier,,errors=continue
[   30.874598][  T576] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[   30.887537][  T576] bridge0: port 1(bridge_slave_0) entered disabled state
[   30.895294][  T576] bridge0: port 2(bridge_slave_1) entered disabled state
[   30.918700][  T577] netlink: 'syz.4.32': attribute type 16 has an invalid length.
[   30.926623][  T577] netlink: 'syz.4.32': attribute type 17 has an invalid length.
[   30.943063][  T577] bridge0: port 1(bridge_slave_0) entered blocking state
[   30.950161][  T577] bridge0: port 1(bridge_slave_0) entered forwarding state
[   30.958726][  T577] bridge0: port 2(bridge_slave_1) entered blocking state
[   30.966235][  T577] bridge0: port 2(bridge_slave_1) entered forwarding state
[   30.990413][  T580] netlink: 'syz.4.32': attribute type 16 has an invalid length.
[   30.998307][  T580] netlink: 'syz.4.32': attribute type 17 has an invalid length.
[   31.016998][  T300] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready
[   31.024533][  T583] EXT4-fs (loop1): Unrecognized mount option "smackfsroot=./cgroup.cpu/syz0" or missing value
[   31.026151][  T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   31.043241][    T5] usb 3-1: Using ep0 maxpacket: 8
[   31.048419][  T287] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   31.054102][  T300] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready
[   31.064723][  T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   31.073760][  T300] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   31.082304][  T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   31.090814][  T300] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   31.099152][  T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   31.127673][  T312] usb 4-1: new full-speed USB device number 2 using dummy_hcd
[   31.157862][  T568] usb 5-1: new low-speed USB device number 2 using dummy_hcd
[   31.217827][    T5] usb 3-1: unable to get BOS descriptor or descriptor too short
[   31.298499][    T5] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 64
[   31.337766][  T581] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   31.397767][  T568] usb 5-1: Invalid ep0 maxpacket: 32
[   31.417806][  T287] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   31.428246][  T287] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[   31.438337][  T287] usb 1-1: config 1 interface 1 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[   31.448117][  T287] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   31.461202][  T287] usb 1-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00
[   31.470316][  T287] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   31.478414][    T5] usb 3-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40
[   31.487479][    T5] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   31.496077][    T5] usb 3-1: Product: syz
[   31.500667][    T5] usb 3-1: Manufacturer: syz
[   31.505311][    T5] usb 3-1: SerialNumber: syz
[   31.527749][  T312] usb 4-1: not running at top speed; connect to a high speed hub
[   31.527944][  T549] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[   31.543202][  T287] pl2303 1-1:1.0: required endpoints missing
[   31.550433][  T287] pl2303 1-1:1.1: required endpoints missing
[   31.557684][  T568] usb 5-1: new low-speed USB device number 3 using dummy_hcd
[   31.577721][  T581] usb 2-1: Using ep0 maxpacket: 32
[   31.627729][  T312] usb 4-1: config 8 has an invalid interface number: 29 but max is 2
[   31.635873][  T312] usb 4-1: config 8 contains an unexpected descriptor of type 0x1, skipping
[   31.644792][  T312] usb 4-1: config 8 has an invalid interface number: 254 but max is 2
[   31.653032][  T312] usb 4-1: config 8 has an invalid interface number: 146 but max is 2
[   31.661236][  T312] usb 4-1: config 8 has no interface number 0
[   31.667332][  T312] usb 4-1: config 8 has no interface number 1
[   31.673450][  T312] usb 4-1: config 8 has no interface number 2
[   31.679662][  T312] usb 4-1: config 8 interface 29 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0
[   31.689450][  T312] usb 4-1: config 8 interface 29 altsetting 1 has a duplicate endpoint with address 0x5, skipping
[   31.700591][  T312] usb 4-1: config 8 interface 29 altsetting 1 has an invalid endpoint with address 0x0, skipping
[   31.709129][  T581] usb 2-1: config 0 has an invalid descriptor of length 140, skipping remainder of the config
[   31.711253][  T312] usb 4-1: config 8 interface 29 altsetting 1 has a duplicate endpoint with address 0x7, skipping
[   31.732039][  T312] usb 4-1: config 8 interface 29 altsetting 1 has a duplicate endpoint with address 0x6, skipping
[   31.744045][  T312] usb 4-1: config 8 interface 29 altsetting 1 endpoint 0xA has invalid wMaxPacketSize 0
[   31.753915][  T312] usb 4-1: config 8 interface 29 altsetting 1 has an invalid endpoint with address 0x0, skipping
[   31.759357][  T549] udc-core: couldn't find an available UDC or it's busy
[   31.764734][  T312] usb 4-1: config 8 interface 29 altsetting 1 has a duplicate endpoint with address 0xE, skipping
[   31.772750][  T549] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[   31.783551][  T312] usb 4-1: config 8 interface 29 altsetting 1 has a duplicate endpoint with address 0xE, skipping
[   31.800465][  T312] usb 4-1: config 8 interface 254 altsetting 1 has an invalid endpoint with address 0x80, skipping
[   31.811167][  T568] usb 5-1: Invalid ep0 maxpacket: 32
[   31.811533][  T568] usb usb5-port1: attempt power cycle
[   31.817288][  T312] usb 4-1: config 8 interface 254 altsetting 1 endpoint 0x8 has invalid maxpacket 1024, setting to 64
[   31.833107][  T312] usb 4-1: config 8 interface 254 altsetting 1 has a duplicate endpoint with address 0x8, skipping
[   31.843904][  T312] usb 4-1: config 8 interface 254 altsetting 1 has a duplicate endpoint with address 0xE, skipping
[   31.854808][  T312] usb 4-1: config 8 interface 29 has no altsetting 0
[   31.861897][  T312] usb 4-1: config 8 interface 254 has no altsetting 0
[   31.868710][  T312] usb 4-1: config 8 interface 146 has no altsetting 0
[   31.875839][   T20] usb 1-1: USB disconnect, device number 2
[   31.890529][  T549] udc-core: couldn't find an available UDC or it's busy
[   31.897597][  T549] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[   31.907844][  T581] usb 2-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80
[   31.916967][  T581] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   31.925316][  T581] usb 2-1: Product: syz
[   31.929776][  T581] usb 2-1: Manufacturer: syz
[   31.934366][  T581] usb 2-1: SerialNumber: syz
[   31.939947][  T581] usb 2-1: config 0 descriptor??
[   31.978729][  T581] usb 2-1: bad CDC descriptors
[   31.983730][  T581] usb 2-1: unsupported MDLM descriptors
[   32.027754][  T312] usb 4-1: New USB device found, idVendor=29fe, idProduct=4d53, bcdDevice=5c.2c
[   32.036815][  T312] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   32.045075][  T312] usb 4-1: Product: ჾ⼢��鞊烌溳鷇ኡ贼⪢졙㴅寶᩻팎
[   32.053953][  T312] usb 4-1: Manufacturer: ᶩ�ᙻ�왽ᕥ떸ᜉᮮ蜼�瞳뷰�鈶ө濜貞胅厪蚡뙪牤턗ꌱ㑶౔퀎�⭦跰阼첗�䈣朔椓窪悙�铤癷泚�ஜ챛⥕壤冗螤曪떬᫪�㱋령刴陈͆⮕��㦘팶瞨梊ആ�롳�뽩艄狼�儼ₗ⒋伃儫笋ⴵ豅䓋⒳팹悱榥।붿ᾊ烯㷷㑰퇳㲷铣븄엪ᱹ詌雮㓡쬱蒾괱鰆�궩
[   32.089450][  T312] usb 4-1: SerialNumber: Ð’
[   32.101768][    T5] usb 3-1: USB disconnect, device number 2
[   32.107793][  T574] raw-gadget.2 gadget: fail, usb_ep_enable returned -22
[   32.179375][  T591] udc-core: couldn't find an available UDC or it's busy
[   32.186518][  T591] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[   32.230474][  T583] EXT4-fs (loop1): Unrecognized mount option "smackfsroot=./cgroup.cpu/syz0" or missing value
[   32.242518][  T581] usb 2-1: USB disconnect, device number 2
[   32.248501][  T568] usb 5-1: new low-speed USB device number 4 using dummy_hcd
[   32.318277][  T579] udevd[579]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   32.340802][  T596] EXT4-fs error (device loop0): ext4_xattr_inode_iget:401: inode #2: comm syz.0.35: missing EA_INODE flag
[   32.347879][  T568] usb 5-1: Invalid ep0 maxpacket: 32
[   32.353545][  T596] EXT4-fs error (device loop0): ext4_xattr_inode_iget:406: comm syz.0.35: error while reading EA inode 2 err=-117
[   32.369857][  T596] EXT4-fs (loop0): 1 orphan inode deleted
[   32.375656][  T596] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue
[   32.386247][  T596] syz.0.35 (pid 596) is setting deprecated v1 encryption policy; recommend upgrading to v2.
[   32.402137][  T599] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior.
[   32.416563][  T599] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior.
[   32.507697][  T568] usb 5-1: new low-speed USB device number 5 using dummy_hcd
[   32.571956][  T312] usb 4-1: USB disconnect, device number 2
[   32.597740][  T568] usb 5-1: Invalid ep0 maxpacket: 32
[   32.603212][  T568] usb usb5-port1: unable to enumerate USB device
[   32.694659][  T608] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xffade8b4, utbl_chksum : 0xe619d30d)
[   32.785393][  T612] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   33.057708][   T20] usb 2-1: new full-speed USB device number 3 using dummy_hcd
[   33.077690][  T568] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[   33.157671][  T312] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[   33.359418][  T568] usb 1-1: Using ep0 maxpacket: 16
[   33.527397][   T20] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   33.538926][   T20] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18
[   33.587891][  T312] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18
[   33.637811][   T20] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   33.647691][   T20] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[   33.655822][   T20] usb 2-1: SerialNumber: syz
[   33.694080][  T312] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   33.703624][   T20] usb 2-1: bad CDC descriptors
[   33.708529][  T312] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[   33.717892][  T568] usb 1-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   33.722514][  T312] usb 4-1: SerialNumber: syz
[   33.731553][  T568] usb 1-1: config 0 interface 0 has no altsetting 0
[   33.742539][  T568] usb 1-1: New USB device found, idVendor=320f, idProduct=5041, bcdDevice= 0.00
[   33.751736][  T568] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   33.760515][  T568] usb 1-1: config 0 descriptor??
[   33.969613][  T633] F2FS-fs (loop4): fault_injection options not supported
[   33.979553][  T633] F2FS-fs (loop4): invalid crc value
[   33.986202][  T633] F2FS-fs (loop4): Found nat_bits in checkpoint
[   34.018430][  T633] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[   34.038472][  T283] attempt to access beyond end of device
[   34.038472][  T283] loop4: rw=2049, want=45104, limit=40427
[   34.205683][  T581] kernel write not supported for file /uinput (pid: 581 comm: kworker/0:5)
[   34.229737][  T568] input: HID 320f:5041 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:320F:5041.0001/input/input4
[   34.261941][  T649] EXT4-fs (loop2): dax option not supported
[   34.269724][  T649] IPv6: Can't replace route, no match found
[   34.277941][  T312] cdc_ether: probe of 4-1:1.0 failed with error -71
[   34.285873][  T312] usb 4-1: USB disconnect, device number 3
[   34.306434][  T658] netlink: 27 bytes leftover after parsing attributes in process `syz.2.49'.
[   34.315957][   T24] kauditd_printk_skb: 43 callbacks suppressed
[   34.315970][   T24] audit: type=1400 audit(1791090494.040:198): avc:  denied  { read } for  pid=79 comm="acpid" name="event3" dev="devtmpfs" ino=555 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   34.348708][  T568] hid-generic 0003:320F:5041.0001: input,hiddev96,hidraw0: USB HID v0.04 Device [HID 320f:5041] on usb-dummy_hcd.0-1/input0
[   34.361932][   T24] audit: type=1400 audit(1791090494.040:199): avc:  denied  { open } for  pid=79 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=555 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   34.385438][   T24] audit: type=1400 audit(1791090494.040:200): avc:  denied  { ioctl } for  pid=79 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=555 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   34.415371][   T24] audit: type=1400 audit(1791090494.140:201): avc:  denied  { write } for  pid=657 comm="syz.2.49" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   34.446654][  T612] incfs: Error accessing: ./file0.
[   34.451929][  T612] incfs: mount failed -2
[   34.456689][  T612] netlink: 64 bytes leftover after parsing attributes in process `syz.0.39'.
[   34.473951][  T612] netlink: 64 bytes leftover after parsing attributes in process `syz.0.39'.
[   34.484326][   T20] usb 1-1: USB disconnect, device number 3
[   34.535158][   T24] audit: type=1400 audit(1791090494.260:202): avc:  denied  { mount } for  pid=661 comm="syz.2.50" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1
[   34.818348][  T665] EXT4-fs (loop3): Ignoring removed bh option
[   34.839263][  T665] EXT4-fs (loop3): mounted filesystem without journal. Opts: user_xattr,commit=0x0000000000000005,noquota,grpid,auto_da_alloc,grpid,bh,,errors=continue
[   34.855002][  T665] ext4 filesystem being mounted at /12/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   34.868107][   T24] audit: type=1400 audit(1791090494.600:203): avc:  denied  { block_suspend } for  pid=664 comm="syz.3.51" capability=36  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[   34.877232][  T665] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.51: bg 0: block 112: padding at end of block bitmap is not set
[   34.904017][  T665] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 1 with error 28
[   34.916426][  T665] EXT4-fs (loop3): This should not happen!! Data will be lost
[   34.916426][  T665] 
[   34.924047][   T24] audit: type=1400 audit(1791090494.650:204): avc:  denied  { unmount } for  pid=282 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1
[   34.929604][  T665] EXT4-fs (loop3): Total free blocks count 0
[   34.948634][   T24] audit: type=1400 audit(1791090494.680:205): avc:  denied  { ioctl } for  pid=664 comm="syz.3.51" path="/12/file1/file1" dev="loop3" ino=15 ioctlcmd=0x5829 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   34.967123][  T665] EXT4-fs (loop3): Free/Dirty block details
[   34.982068][  T665] EXT4-fs (loop3): free_blocks=0
[   34.987114][  T665] EXT4-fs (loop3): dirty_blocks=16
[   34.992301][  T665] EXT4-fs (loop3): Block reservation details
[   34.998471][  T665] EXT4-fs (loop3): i_reserved_data_blocks=1
[   35.027757][   T24] audit: type=1400 audit(1791090494.760:206): avc:  denied  { view } for  pid=673 comm="syz.2.52" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1
[   35.051014][   T24] audit: type=1400 audit(1791090494.780:207): avc:  denied  { read } for  pid=680 comm="syz.0.54" dev="nsfs" ino=4026532466 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[   35.143757][  T692] syzkaller1: tun_chr_ioctl cmd 3223345255
[   35.559629][  T697] EXT4-fs (loop0): Test dummy encryption mode enabled
[   35.587676][  T697] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled
[   35.597852][  T697] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled
[   35.607362][  T697] EXT4-fs (loop0): Ignoring removed mblk_io_submit option
[   35.627055][  T697] EXT4-fs (loop0): mounted filesystem without journal. Opts: auto_da_alloc,test_dummy_encryption=v1,nouid32,jqfmt=vfsv0,noinit_itable,norecovery,minixdf,nodioread_nolock,nouid32,jqfmt=vfsv0,auto_da_alloc,mblk_io_submit,,errors=continue
[   35.749188][  T700] F2FS-fs (loop3): invalid crc value
[   35.781299][   T52] usb 2-1: USB disconnect, device number 3
[   35.805234][  T700] F2FS-fs (loop3): Found nat_bits in checkpoint
[   35.856992][  T700] F2FS-fs (loop3): Start checkpoint disabled!
[   35.889163][  T700] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6
[   35.898748][  T712] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue
[   35.918953][  T712] ext4 filesystem being mounted at /6/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   35.980659][  T712] EXT4-fs error (device loop1): ext4_acquire_dquot:6230: comm syz.1.62: Failed to acquire dquot type 0
[   36.044294][  T721] netlink: 4 bytes leftover after parsing attributes in process `syz.2.63'.
[   36.116253][    T7] attempt to access beyond end of device
[   36.116253][    T7] loop3: rw=1, want=81920, limit=40427
[   36.201786][    T7] attempt to access beyond end of device
[   36.201786][    T7] loop3: rw=1, want=53248, limit=40427
[   36.257429][    T7] attempt to access beyond end of device
[   36.257429][    T7] loop3: rw=1, want=76656, limit=40427
[   36.280723][  T112] attempt to access beyond end of device
[   36.280723][  T112] loop3: rw=2049, want=40976, limit=40427
[   36.328151][  T705] F2FS-fs (loop4): Invalid segment/section count (458783, 24 x 150994945)
[   36.345444][  T705] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[   36.364336][  T705] F2FS-fs (loop4): invalid crc value
[   36.379224][  T705] F2FS-fs (loop4): Found nat_bits in checkpoint
[   36.453827][  T705] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[   36.460779][  T736] netlink: 28 bytes leftover after parsing attributes in process `syz.3.65'.
[   36.470045][  T736] netlink: 28 bytes leftover after parsing attributes in process `syz.3.65'.
[   36.475624][  T705] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4
[   36.478927][  T736] netlink: 28 bytes leftover after parsing attributes in process `syz.3.65'.
[   36.479016][  T736] netlink: 28 bytes leftover after parsing attributes in process `syz.3.65'.
[   36.504654][  T736] netlink: 28 bytes leftover after parsing attributes in process `syz.3.65'.
[   36.515930][  T736] netlink: 28 bytes leftover after parsing attributes in process `syz.3.65'.
[   36.608549][  T729] F2FS-fs (loop1): invalid crc value
[   36.618809][  T729] F2FS-fs (loop1): Found nat_bits in checkpoint
[   36.656676][  T729] F2FS-fs (loop1): Start checkpoint disabled!
[   36.663650][  T729] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6
[   36.791204][    T5] usb 1-1: new full-speed USB device number 4 using dummy_hcd
[   36.830871][  T751] overlayfs: missing 'lowerdir'
[   37.228120][  T300] attempt to access beyond end of device
[   37.228120][  T300] loop1: rw=2049, want=40976, limit=40427
[   37.267712][    T5] usb 1-1: config index 0 descriptor too short (expected 9, got 0)
[   37.280222][    T5] usb 1-1: can't read configurations, error -22
[   37.437725][    T5] usb 1-1: new full-speed USB device number 5 using dummy_hcd
[   37.707871][  T760] EXT4-fs (loop4): mounted filesystem without journal. Opts: block_validity,errors=remount-ro,
[   37.791900][  T760] EXT4-fs error (device loop4): ext4_mb_generate_buddy:824: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters
[   37.806740][  T760] EXT4-fs (loop4): Remounting filesystem read-only
[   37.813604][  T760] EXT4-fs error (device loop4) in ext4_evict_inode:260: Readonly filesystem
[   37.824730][  T760] overlayfs: upper fs does not support xattr, falling back to index=off and metacopy=off.
[   37.847745][  T578] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[   38.028187][  T779] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   38.042773][  T779] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.76: bg 0: block 384: padding at end of block bitmap is not set
[   38.057313][  T779] EXT4-fs (loop2): Remounting filesystem read-only
[   38.063946][  T779] EXT4-fs error (device loop2) in ext4_mb_clear_bb:5650: Corrupt filesystem
[   38.072917][  T779] EXT4-fs error (device loop2): ext4_clear_blocks:880: inode #11: comm syz.2.76: attempt to clear invalid blocks 983260 len 1
[   38.086226][  T779] EXT4-fs error (device loop2): __ext4_get_inode_loc:4451: comm syz.2.76: Invalid inode table block 0 in block_group 0
[   38.088747][  T783] EXT4-fs (loop4): Mount option "dioread_lock" incompatible with ext3
[   38.099155][    T5] usb 1-1: config index 0 descriptor too short (expected 9, got 0)
[   38.114889][  T578] usb 2-1: Using ep0 maxpacket: 16
[   38.119528][  T779] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5971: Corrupt filesystem
[   38.120397][    T5] usb 1-1: can't read configurations, error -22
[   38.130789][  T779] EXT4-fs error (device loop2) in ext4_orphan_del:3292: Corrupt filesystem
[   38.135990][    T5] usb usb1-port1: attempt power cycle
[   38.146401][  T779] EXT4-fs error (device loop2): __ext4_get_inode_loc:4451: comm syz.2.76: Invalid inode table block 0 in block_group 0
[   38.162696][  T779] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5971: Corrupt filesystem
[   38.172645][  T779] EXT4-fs error (device loop2): ext4_truncate:4403: inode #11: comm syz.2.76: mark_inode_dirty error
[   38.184339][  T779] EXT4-fs error (device loop2) in ext4_orphan_cleanup:3106: Corrupt filesystem
[   38.193826][  T779] EXT4-fs (loop2): 1 truncate cleaned up
[   38.199697][  T779] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,resuid=0x0000000000000000,max_dir_size_kb=0x00000000000001ff,noblock_validity,
[   38.219926][  T779] EXT4-fs error (device loop2): __ext4_get_inode_loc:4451: comm syz.2.76: Invalid inode table block 0 in block_group 0
[   38.232766][  T779] EXT4-fs (loop2): Remounting filesystem read-only
[   38.239844][  T780] EXT4-fs error (device loop2): __ext4_get_inode_loc:4451: comm syz.2.76: Invalid inode table block 0 in block_group 0
[   38.252569][  T578] usb 2-1: config index 0 descriptor too short (expected 51443, got 18)
[   38.261523][  T779] EXT4-fs error (device loop2): __ext4_get_inode_loc:4451: comm syz.2.76: Invalid inode table block 0 in block_group 0
[   38.274907][  T780] device veth1_macvtap left promiscuous mode
[   38.706567][  T578] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[   38.784855][  T578] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   38.795004][  T578] usb 2-1: Product: syz
[   38.806510][  T578] usb 2-1: Manufacturer: syz
[   38.815341][  T578] usb 2-1: SerialNumber: syz
[   38.833436][    T5] usb 1-1: new full-speed USB device number 6 using dummy_hcd
[   39.179577][  T578] usb 2-1: config 0 descriptor??
[   39.233535][  T134] device veth1_macvtap entered promiscuous mode
[   39.240252][  T300] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   39.447714][    T5] usb 1-1: config index 0 descriptor too short (expected 9, got 0)
[   39.457677][  T287] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[   39.465885][    T5] usb 1-1: can't read configurations, error -22
[   39.528458][   T24] kauditd_printk_skb: 42 callbacks suppressed
[   39.528469][   T24] audit: type=1400 audit(1791090499.260:248): avc:  denied  { getopt } for  pid=757 comm="syz.1.72" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[   39.607712][  T578] r8152 2-1:0.0: Unknown version 0x0000
[   39.620851][  T815] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue
[   39.630315][  T578] usb 2-1: USB disconnect, device number 4
[   39.728357][   T24] audit: type=1400 audit(1791090499.460:249): avc:  denied  { map } for  pid=811 comm="syz.4.80" path="/dev/ashmem" dev="devtmpfs" ino=263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   39.847682][  T287] usb 4-1: config 2 has an invalid interface number: 170 but max is 0
[   39.855882][  T287] usb 4-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[   39.866349][  T287] usb 4-1: config 2 has no interface number 0
[   39.872681][  T287] usb 4-1: config 2 interface 170 altsetting 128 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[   39.886094][  T287] usb 4-1: config 2 interface 170 has no altsetting 0
[   40.047697][  T287] usb 4-1: New USB device found, idVendor=0b57, idProduct=a6d1, bcdDevice=c4.a4
[   40.056774][  T287] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   40.064990][  T287] usb 4-1: Product: syz
[   40.069304][  T287] usb 4-1: Manufacturer: syz
[   40.073920][  T287] usb 4-1: SerialNumber: syz
[   40.129187][  T828] EXT4-fs (loop0): Mount option "dioread_lock" incompatible with ext3
[   40.906351][  T835] device bridge_slave_0 left promiscuous mode
[   40.913306][  T835] bridge0: port 1(bridge_slave_0) entered disabled state
[   41.013767][  T835] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[   41.228778][  T287] usb 4-1: USB disconnect, device number 4
[   41.287672][  T578] usb 2-1: new full-speed USB device number 5 using dummy_hcd
[   41.430562][  T844] F2FS-fs (loop0): invalid crc value
[   41.456551][  T844] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109)
[   41.488060][  T844] F2FS-fs (loop0): Start checkpoint disabled!
[   41.495002][  T844] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6
[   41.576978][   T24] audit: type=1400 audit(1791090501.300:250): avc:  denied  { ioctl } for  pid=841 comm="syz.0.88" path="/dev/uinput" dev="devtmpfs" ino=257 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[   41.601888][  T287] usb 4-1: new full-speed USB device number 5 using dummy_hcd
[   41.655812][    T7] attempt to access beyond end of device
[   41.655812][    T7] loop0: rw=2049, want=40976, limit=40427
[   41.677710][  T578] usb 2-1: config 127 has an invalid interface number: 107 but max is 0
[   41.688745][  T578] usb 2-1: config 127 has no interface number 0
[   41.696120][  T578] usb 2-1: config 127 interface 107 altsetting 0 endpoint 0xC has invalid maxpacket 1023, setting to 64
[   41.867794][  T578] usb 2-1: New USB device found, idVendor=04e6, idProduct=000c, bcdDevice= 1.00
[   41.876975][  T578] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   41.885288][  T578] usb 2-1: Product: syz
[   41.889951][  T578] usb 2-1: Manufacturer: syz
[   41.894602][  T578] usb 2-1: SerialNumber: syz
[   41.917691][  T831] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[   42.110844][   T24] audit: type=1400 audit(1791090501.780:251): avc:  denied  { ioctl } for  pid=851 comm="syz.4.90" path="/dev/ppp" dev="devtmpfs" ino=153 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[   42.308887][   T24] audit: type=1400 audit(1791090501.790:252): avc:  denied  { read } for  pid=851 comm="syz.4.90" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[   42.308908][   T24] audit: type=1400 audit(1791090501.790:253): avc:  denied  { open } for  pid=851 comm="syz.4.90" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[   42.308925][   T24] audit: type=1400 audit(1791090501.850:254): avc:  denied  { write } for  pid=851 comm="syz.4.90" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1
[   42.440733][  T831] EXT4-fs (loop1): Ignoring removed bh option
[   42.477090][  T831] EXT4-fs error (device loop1): ext4_free_branches:1026: inode #13: comm syz.1.83: invalid indirect mapped block 234881024 (level 0)
[   42.518124][   T24] audit: type=1400 audit(1791090502.250:255): avc:  denied  { remount } for  pid=861 comm="syz.2.92" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[   42.546822][  T831] EXT4-fs (loop1): Remounting filesystem read-only
[   42.565382][  T831] EXT4-fs (loop1): 1 truncate cleaned up
[   42.581853][  T831] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,dioread_lock,auto_da_alloc,stripe=0x00000000000000f0,journal_ioprio=0x0000000000000001,bh,noblock_validity,
[   42.616740][  T287] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[   42.626223][  T287] usb 4-1: config 1 has no interface number 0
[   42.632652][  T287] usb 4-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping
[   42.706068][   T24] audit: type=1400 audit(1791090502.430:256): avc:  denied  { connect } for  pid=858 comm="syz.4.91" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   42.752133][  T866] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xaa7a2127, utbl_chksum : 0xe619d30d)
[   42.780381][   T24] audit: type=1400 audit(1791090502.460:257): avc:  denied  { create } for  pid=858 comm="syz.4.91" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   42.795638][  T287] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 30, changing to 4
[   42.805766][  T866] exFAT-fs (loop0): bogus allocation bitmap size(need : 2, cur : 10)
[   42.811835][  T578] usb-storage 2-1:127.107: USB Mass Storage device detected
[   42.845536][  T578] usb-storage 2-1:127.107: Quirks match for vid 04e6 pid 000c: 4
[   42.857687][  T513] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[   42.866430][  T871] overlayfs: missing 'lowerdir'
[   42.871491][  T872] overlayfs: missing 'lowerdir'
[   42.876591][  T872] IPv6: NLM_F_CREATE should be specified when creating new route
[   42.884485][  T872] IPv6: Can't replace route, no match found
[   42.892098][  T578] usb 2-1: USB disconnect, device number 5
[   42.898982][  T871] IPv6: Can't replace route, no match found
[   42.913435][  T876] usb usb8: usbfs: process 876 (syz.0.95) did not claim interface 6 before use
[   42.962716][  T882] xt_l2tp: wrong L2TP version: 0
[   43.107822][  T287] usb 4-1: New USB device found, idVendor=245f, idProduct=931c, bcdDevice= 0.40
[   43.117190][  T287] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   43.125357][  T287] usb 4-1: Product: syz
[   43.129584][  T287] usb 4-1: Manufacturer: syz
[   43.134285][  T287] usb 4-1: SerialNumber: syz
[   43.167665][  T513] usb 3-1: device descriptor read/64, error -71
[   43.519030][  T889] EXT4-fs (loop1): Mount option "dioread_lock" incompatible with ext3
[   43.748366][  T898] EXT4-fs (loop4): Ignoring removed bh option
[   43.757742][  T513] usb 3-1: device descriptor read/64, error -71
[   43.796217][  T893] udc-core: couldn't find an available UDC or it's busy
[   43.819586][  T893] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[   43.862489][  T898] EXT4-fs warning (device loop4): dx_probe:845: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[   43.898015][  T898] EXT4-fs warning (device loop4): dx_probe:848: Enable large directory feature to access it
[   43.914390][  T898] EXT4-fs warning (device loop4): dx_probe:946: inode #2: comm syz.4.100: Corrupt directory, running e2fsck is recommended
[   43.957528][  T898] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117
[   43.966939][  T898] EXT4-fs error (device loop4): ext4_iget_extra_inode:4692: inode #15: comm syz.4.100: corrupted in-inode xattr
[   44.007865][  T898] EXT4-fs error (device loop4): ext4_orphan_get:1410: comm syz.4.100: couldn't read orphan inode 15 (err -117)
[   44.027769][  T513] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[   44.058500][  T898] EXT4-fs (loop4): mounted filesystem without journal. Opts: dioread_lock,noblock_validity,grpquota,jqfmt=vfsold,nolazytime,grpjquota=.dax=inode,resuid=0x0000000000000000,bh,minixdf,,,errors=continue
[   44.252872][  T898] EXT4-fs warning (device loop4): dx_probe:845: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[   44.289186][  T898] EXT4-fs warning (device loop4): dx_probe:848: Enable large directory feature to access it
[   44.326071][  T898] EXT4-fs warning (device loop4): dx_probe:946: inode #2: comm syz.4.100: Corrupt directory, running e2fsck is recommended
[   44.350785][  T912] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled
[   44.370168][  T912] EXT4-fs (loop0): Unrecognized mount option "subj_user=�" or missing value
[   44.407673][  T513] usb 3-1: device descriptor read/64, error -71
[   44.717727][  T287] usb 4-1: 1:0 : does not exist
[   44.722744][  T287] usb 4-1: BAAD SPEAKER p_chmask mismatch
[   44.730227][  T287] snd-usb-audio: probe of 4-1:1.1 failed with error -22
[   44.741005][  T287] usb 4-1: USB disconnect, device number 5
[   44.758360][  T710] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[   44.817727][  T513] usb 3-1: device descriptor read/64, error -71
[   44.937764][  T513] usb usb3-port1: attempt power cycle
[   44.967773][  T547] usb 5-1: new full-speed USB device number 6 using dummy_hcd
[   44.987718][   T20] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[   45.027723][  T710] usb 1-1: device descriptor read/64, error -71
[   45.317693][  T287] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[   45.347782][  T513] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[   45.387825][   T20] usb 2-1: unable to get BOS descriptor or descriptor too short
[   45.417693][  T710] usb 1-1: device descriptor read/64, error -71
[   45.467788][   T20] usb 2-1: config 5 has an invalid interface number: 165 but max is 0
[   45.476024][   T20] usb 2-1: config 5 has no interface number 0
[   45.482327][   T20] usb 2-1: config 5 interface 165 has no altsetting 0
[   45.489788][  T547] usb 5-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40
[   45.499021][  T547] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   45.507019][  T547] usb 5-1: Product: syz
[   45.511230][  T547] usb 5-1: Manufacturer: syz
[   45.515846][  T547] usb 5-1: SerialNumber: syz
[   45.537732][  T513] usb 3-1: device descriptor read/8, error -71
[   45.577658][  T287] usb 4-1: Using ep0 maxpacket: 16
[   45.657737][   T20] usb 2-1: New USB device found, idVendor=0a46, idProduct=6688, bcdDevice=4f.e5
[   45.666885][   T20] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   45.675051][   T20] usb 2-1: Product: syz
[   45.679401][   T20] usb 2-1: Manufacturer: syz
[   45.684025][   T20] usb 2-1: SerialNumber: syz
[   45.688738][  T710] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[   45.690915][  T931] F2FS-fs (loop2): Wrong MAIN_AREA boundary, start(4096) end(12800) block(12288)
[   45.705817][  T931] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[   45.714283][  T931] F2FS-fs (loop2): fault_type options not supported
[   45.721143][  T287] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   45.731490][  T931] F2FS-fs (loop2): fault_injection options not supported
[   45.738731][  T287] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[   45.747829][  T513] usb 3-1: device descriptor read/8, error -71
[   45.754424][  T931] F2FS-fs (loop2): invalid crc value
[   45.761387][  T931] F2FS-fs (loop2): Found nat_bits in checkpoint
[   45.791066][  T931] F2FS-fs (loop2): Start checkpoint disabled!
[   45.798335][  T931] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[   45.805474][  T931] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6
[   45.912912][  T937] FAT-fs (loop4): error, fat_free_clusters: deleting FAT entry beyond EOF
[   45.921680][  T287] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   45.930932][  T287] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   45.931119][  T937] FAT-fs (loop4): Filesystem has been set read-only
[   45.941618][  T287] usb 4-1: Product: syz
[   45.950163][  T287] usb 4-1: Manufacturer: syz
[   45.954813][  T287] usb 4-1: SerialNumber: syz
[   45.967785][  T710] usb 1-1: device descriptor read/64, error -71
[   46.018095][   T20] dm9601: probe of 2-1:5.165 failed with error -22
[   46.027791][   T20] usb 2-1: USB disconnect, device number 6
[   46.267797][  T287] usb 4-1: 0:2 : does not exist
[   46.320111][  T287] usb 4-1: USB disconnect, device number 6
[   46.357716][  T710] usb 1-1: device descriptor read/64, error -71
[   46.487844][  T710] usb usb1-port1: attempt power cycle
[   46.528086][  T579] udevd[579]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   46.617833][  T547] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found
[   46.637690][  T547] usb 5-1: unit 4 not found!
[   46.646811][  T942] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002]
[   46.655943][  T942] System zones: 1-12
[   46.660878][  T942] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: inode #12: comm syz.2.109: missing EA_INODE flag
[   46.681112][  T547] usb 5-1: USB disconnect, device number 6
[   46.707437][  T942] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.109: error while reading EA inode 12 err=-117
[   46.720059][  T942] EXT4-fs (loop2): 1 orphan inode deleted
[   46.733997][  T942] EXT4-fs (loop2): mounted filesystem without journal. Opts: debug,resuid=0x000000000000ee01,,errors=continue
[   46.746355][   T24] kauditd_printk_skb: 10 callbacks suppressed
[   46.746367][   T24] audit: type=1400 audit(1791090506.470:268): avc:  denied  { listen } for  pid=952 comm="syz.3.112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   46.783677][  T945] F2FS-fs (loop1): Fix alignment : internally, start(4096) end(16896) block(12288)
[   46.805533][  T945] F2FS-fs (loop1): Unrecognized mount option "noquot]" or missing value
[   46.814570][   T24] audit: type=1400 audit(1791090506.550:269): avc:  denied  { write } for  pid=947 comm="syz.4.111" name="kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[   46.843713][  T949] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[   46.857970][   T24] audit: type=1400 audit(1791090506.580:270): avc:  denied  { create } for  pid=941 comm="syz.2.109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1
[   46.897726][  T710] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[   46.920015][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready
[   46.934319][  T579] udevd[579]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   46.938857][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   46.989048][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready
[   46.997405][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   47.006044][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   47.014714][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   47.023861][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   47.032545][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   47.050110][  T962] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpjquota=,,errors=continue
[   47.073389][  T962] overlayfs: invalid origin (00000079000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000)
[   47.096890][  T279] EXT4-fs error (device loop1): ext4_ext_check_inode:500: inode #11: comm syz-executor: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0)
[   47.108188][  T710] usb 1-1: device descriptor read/8, error -71
[   47.121912][  T279] EXT4-fs error (device loop1): ext4_ext_check_inode:500: inode #11: comm syz-executor: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0)
[   47.321211][   T24] audit: type=1400 audit(1791090507.050:271): avc:  denied  { mounton } for  pid=967 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1
[   47.457690][  T710] usb 1-1: device descriptor read/8, error -71
[   47.469602][  T967] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.477811][  T967] bridge0: port 1(bridge_slave_0) entered disabled state
[   47.485404][  T967] device bridge_slave_0 entered promiscuous mode
[   47.494993][  T967] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.502170][  T967] bridge0: port 2(bridge_slave_1) entered disabled state
[   47.551846][  T967] device bridge_slave_1 entered promiscuous mode
[   47.800377][  T954] F2FS-fs (loop3): Invalid segment/section count (458783, 24 x 150994945)
[   47.831670][  T975] EXT4-fs (loop2): Ignoring removed oldalloc option
[   47.838410][  T975] EXT4-fs (loop2): Ignoring removed oldalloc option
[   47.845121][  T975] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   47.999244][  T954] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[   48.017912][  T975] EXT4-fs (loop2): mounted filesystem without journal. Opts: stripe=0x0000000000000004,bsddf,block_validity,norecovery,dioread_nolock,oldalloc,oldalloc,sysvgroups,norecovery,,errors=continue
[   48.477855][   T24] audit: type=1400 audit(1791090508.150:272): avc:  denied  { mounton } for  pid=968 comm="syz.2.119" path="/20/file1/file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   48.512849][  T954] F2FS-fs (loop3): Unrecognized mount option "01777777777777777777777ÿÿÿÿ" or missing value
[   48.780292][  T967] device veth0_vlan entered promiscuous mode
[   48.798466][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   48.840045][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   48.860322][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   48.882123][  T991] __nla_validate_parse: 15 callbacks suppressed
[   48.882132][  T991] netlink: 332 bytes leftover after parsing attributes in process `syz.4.122'.
[   48.889715][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   48.907289][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   48.915031][  T988] exfat: Unknown parameter 'À
'
[   48.920840][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   48.928650][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   48.936244][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   48.943908][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   48.953016][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   48.961678][    T9] bridge0: port 1(bridge_slave_0) entered blocking state
[   48.961688][    T9] bridge0: port 1(bridge_slave_0) entered forwarding state
[   48.961814][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   48.962040][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   48.962187][    T9] bridge0: port 2(bridge_slave_1) entered blocking state
[   48.962195][    T9] bridge0: port 2(bridge_slave_1) entered forwarding state
[   48.973948][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   48.979175][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   48.979394][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   48.980694][  T967] device veth1_macvtap entered promiscuous mode
[   48.999354][    T7] device bridge_slave_1 left promiscuous mode
[   48.999415][    T7] bridge0: port 2(bridge_slave_1) entered disabled state
[   49.000220][    T7] device bridge_slave_0 left promiscuous mode
[   49.000277][    T7] bridge0: port 1(bridge_slave_0) entered disabled state
[   49.001392][    T7] device veth1_macvtap left promiscuous mode
[   49.001427][    T7] device veth0_vlan left promiscuous mode
[   49.127796][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   49.128061][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   49.128267][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   49.129710][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   49.129907][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   49.153455][   T24] audit: type=1400 audit(1791090508.870:273): avc:  denied  { mounton } for  pid=967 comm="syz-executor" path="/root/syzkaller.V6Fjdc/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1
[   49.201138][  T954] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[   49.280109][  T954] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[   49.291487][  T954] F2FS-fs (loop3): invalid crc value
[   49.325434][   T24] audit: type=1400 audit(1791090509.050:274): avc:  denied  { ioctl } for  pid=1006 comm="syz.2.126" path="/dev/binderfs/binder0" dev="binder" ino=16 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[   49.352317][  T954] F2FS-fs (loop3): Found nat_bits in checkpoint
[   49.368434][ T1008] EXT4-fs (loop4): Mount option "dioread_lock" incompatible with ext3
[   49.410363][   T24] audit: type=1400 audit(1791090509.050:275): avc:  denied  { set_context_mgr } for  pid=1006 comm="syz.2.126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1
[   49.463677][  T954] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[   49.470803][  T954] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[   49.478452][   T24] audit: type=1400 audit(1791090509.050:276): avc:  denied  { map } for  pid=1006 comm="syz.2.126" path="/dev/binderfs/binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[   49.577175][   T24] audit: type=1400 audit(1791090509.050:277): avc:  denied  { call } for  pid=1006 comm="syz.2.126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1
[   49.610654][  T547] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[   49.877672][  T547] usb 1-1: Using ep0 maxpacket: 16
[   49.997939][  T547] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   50.091092][  T547] usb 1-1: config 0 has no interfaces?
[   50.407817][  T547] usb 1-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28
[   50.441006][  T547] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   50.467707][  T547] usb 1-1: Product: syz
[   50.482176][  T547] usb 1-1: Manufacturer: syz
[   50.486835][  T547] usb 1-1: SerialNumber: syz
[   50.525542][  T547] usb 1-1: config 0 descriptor??
[   50.551789][ T1003] F2FS-fs (loop5): fault_injection options not supported
[   50.581700][ T1003] F2FS-fs (loop5): fault_type options not supported
[   50.599727][ T1003] F2FS-fs (loop5): invalid crc value
[   50.616338][ T1003] F2FS-fs (loop5): Found nat_bits in checkpoint
[   50.653005][ T1003] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[   50.668549][ T1015] F2FS-fs (loop2): invalid crc value
[   50.689872][ T1015] F2FS-fs (loop2): Found nat_bits in checkpoint
[   50.724860][ T1015] F2FS-fs (loop2): Start checkpoint disabled!
[   50.735302][ T1015] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6
[   50.749933][  T710] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[   50.790407][  T287] usb 1-1: USB disconnect, device number 12
[   51.059845][  T710] usb 4-1: device descriptor read/64, error -71
[   51.088412][    T9] attempt to access beyond end of device
[   51.088412][    T9] loop2: rw=2049, want=40976, limit=40427
[   51.120922][  T967] attempt to access beyond end of device
[   51.120922][  T967] loop5: rw=2049, want=45104, limit=40427
[   51.222630][ T1059] netlink: 56 bytes leftover after parsing attributes in process `syz.4.134'.
[   51.309214][ T1069] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue
[   51.318444][ T1069] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   51.334257][  T280] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix.
[   51.334268][  T280] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix.
[   51.342218][  T280] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix.
[   51.350395][  T280] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix.
[   51.358248][  T280] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix.
[   51.365830][  T280] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix.
[   51.373721][  T280] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix.
[   51.434466][ T1077] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945)
[   51.453342][ T1077] EXT4-fs (loop0): revision level too high, forcing read-only mode
[   51.463536][ T1077] EXT4-fs (loop0): orphan cleanup on readonly fs
[   51.470617][ T1077] EXT4-fs warning (device loop0): ext4_enable_quotas:6495: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix.
[   51.485364][ T1077] EXT4-fs (loop0): Cannot turn on quotas: error -117
[   51.492370][ T1077] EXT4-fs error (device loop0): ext4_read_inode_bitmap:168: comm syz.0.138: Inode bitmap for bg 0 marked uninitialized
[   51.503591][  T578] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[   51.505735][ T1077] EXT4-fs (loop0): mounted filesystem without journal. Opts: data_err=abort,lazytime,,errors=continue
[   51.548351][ T1084] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=54561 sclass=netlink_route_socket pid=1084 comm=syz.5.140
[   51.683017][ T1091] netlink: 88 bytes leftover after parsing attributes in process `syz.3.137'.
[   51.782151][ T1084] F2FS-fs (loop5): Corrupted extension count (64 + 1 > 64)
[   51.789545][ T1084] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[   51.798707][ T1084] F2FS-fs (loop5): invalid crc value
[   51.806125][ T1084] F2FS-fs (loop5): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109)
[   51.817665][  T578] usb 3-1: device descriptor read/64, error -71
[   51.849267][ T1084] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0
[   51.856387][ T1084] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[   51.869023][   T24] kauditd_printk_skb: 6 callbacks suppressed
[   51.869035][   T24] audit: type=1400 audit(1791090511.600:283): avc:  denied  { map } for  pid=1083 comm="syz.5.140" path="socket:[17248]" dev="sockfs" ino=17248 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1
[   51.899517][  T967] attempt to access beyond end of device
[   51.899517][  T967] loop5: rw=2049, want=45104, limit=40427
[   51.999837][   T24] audit: type=1400 audit(1791090511.730:284): avc:  denied  { mount } for  pid=1098 comm="syz.5.142" name="/" dev="ramfs" ino=17608 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1
[   52.018178][  T581] usb 1-1: new low-speed USB device number 13 using dummy_hcd
[   52.030689][   T24] audit: type=1400 audit(1791090511.760:285): avc:  denied  { connect } for  pid=1098 comm="syz.5.142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   52.119597][ T1106] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability
[   52.257658][  T578] usb 3-1: device descriptor read/64, error -71
[   52.457702][  T581] usb 1-1: config 5 has an invalid interface number: 136 but max is 0
[   52.466147][  T581] usb 1-1: config 5 has no interface number 0
[   52.472543][  T581] usb 1-1: config 5 interface 136 altsetting 2 endpoint 0x2 has invalid wMaxPacketSize 0
[   52.482738][  T581] usb 1-1: config 5 interface 136 altsetting 2 endpoint 0x87 has invalid maxpacket 8224, setting to 8
[   52.494648][  T581] usb 1-1: config 5 interface 136 has no altsetting 0
[   52.527717][  T578] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[   52.561300][   T24] audit: type=1400 audit(1791090512.290:286): avc:  denied  { unmount } for  pid=280 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[   52.589753][ T1114] x_tables: unsorted underflow at hook 2
[   52.767733][  T581] usb 1-1: string descriptor 0 read error: -22
[   52.774087][  T581] usb 1-1: New USB device found, idVendor=0403, idProduct=e80d, bcdDevice=4f.70
[   52.783616][  T581] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   52.820033][   T24] audit: type=1400 audit(1791090512.550:287): avc:  denied  { map } for  pid=1107 comm="syz.4.144" path="/34/file2" dev="tmpfs" ino=204 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[   52.847662][  T578] usb 3-1: device descriptor read/64, error -71
[   52.856525][  T581] ftdi_sio 1-1:5.136: FTDI USB Serial Device converter detected
[   52.865207][  T581] usb 1-1: Detected FT-X
[   52.869658][  T581] ftdi_sio ttyUSB0: Overriding wMaxPacketSize on endpoint 2
[   53.154985][ T1119] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it.
[   53.164346][ T1119] overlayfs: bad mount option "redirect_dir=follow\"
[   53.253476][   T24] audit: type=1400 audit(1791090512.980:288): avc:  denied  { remount } for  pid=1120 comm="syz.4.147" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[   53.273712][  T578] usb 3-1: device descriptor read/64, error -71
[   53.293892][   T24] audit: type=1326 audit(1791090513.020:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1132 comm="syz.4.149" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe17d30a159 code=0x7ffc0000
[   53.322493][   T24] audit: type=1326 audit(1791090513.020:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1132 comm="syz.4.149" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe17d30a159 code=0x7ffc0000
[   53.347683][   T24] audit: type=1326 audit(1791090513.020:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1132 comm="syz.4.149" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe17d30a159 code=0x7ffc0000
[   53.372688][   T24] audit: type=1326 audit(1791090513.020:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1132 comm="syz.4.149" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fe17d309ec2 code=0x7ffc0000
[   53.399920][ T1138] tun0: tun_chr_ioctl cmd 1074025681
[   53.407879][  T578] usb usb3-port1: attempt power cycle
[   53.490918][  T710] usb 4-1: new full-speed USB device number 8 using dummy_hcd
[   53.507764][  T547] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[   53.627696][  T581] ftdi_sio ttyUSB0: Unable to read latency timer: -71
[   53.647744][  T581] ftdi_sio ttyUSB0: Unable to write latency timer: -71
[   53.667752][  T581] ftdi_sio 1-1:5.136: GPIO initialisation failed: -71
[   53.676946][  T581] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0
[   53.710332][  T581] usb 1-1: USB disconnect, device number 13
[   53.727914][  T581] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[   53.739861][  T581] ftdi_sio 1-1:5.136: device disconnected
[   53.787045][  T547] usb 6-1: Using ep0 maxpacket: 32
[   53.837739][  T578] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[   54.667703][  T547] usb 6-1: config 2 has an invalid interface number: 101 but max is 1
[   54.894693][  T710] usb 4-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40
[   54.904019][  T710] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   54.912510][  T547] usb 6-1: config 2 has an invalid interface number: 78 but max is 1
[   54.921407][  T710] usb 4-1: Product: syz
[   54.925672][  T710] usb 4-1: Manufacturer: syz
[   54.930625][  T547] usb 6-1: config 2 has no interface number 0
[   54.936774][  T547] usb 6-1: config 2 has no interface number 1
[   54.943125][  T710] usb 4-1: SerialNumber: syz
[   54.948274][  T547] usb 6-1: config 2 interface 101 altsetting 3 bulk endpoint 0xA has invalid maxpacket 1024
[   54.958560][  T547] usb 6-1: config 2 interface 101 altsetting 3 has a duplicate endpoint with address 0xA, skipping
[   54.969522][  T547] usb 6-1: config 2 interface 78 altsetting 0 endpoint 0x7 has invalid maxpacket 1560, setting to 64
[   54.980586][  T547] usb 6-1: config 2 interface 78 altsetting 0 has a duplicate endpoint with address 0xA, skipping
[   54.991422][  T547] usb 6-1: config 2 interface 78 altsetting 0 endpoint 0x1 has invalid maxpacket 512, setting to 64
[   55.002422][  T547] usb 6-1: config 2 interface 78 altsetting 0 has a duplicate endpoint with address 0xA, skipping
[   55.016311][ T1155] î³
[   55.017456][ T1154] î³
[   55.022046][ T1156] udc-core: couldn't find an available UDC or it's busy
[   55.031763][  T547] usb 6-1: config 2 interface 78 altsetting 0 has a duplicate endpoint with address 0x8, skipping
[   55.043926][ T1156] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[   55.052018][  T547] usb 6-1: config 2 interface 78 altsetting 0 endpoint 0x3 has an invalid bInterval 150, changing to 11
[   55.055074][ T1154] udc-core: couldn't find an available UDC or it's busy
[   55.068645][  T547] usb 6-1: config 2 interface 101 has no altsetting 0
[   55.073852][  T578] usb 3-1: device descriptor read/8, error -71
[   55.085923][ T1153] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities
[   55.099289][ T1154] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[   55.198241][ T1166] binder_alloc: 1165: binder_alloc_buf, no vma
[   55.204746][ T1166] binder_alloc: binder_alloc_mmap_handler: 1165 200000ffe000-200001000000 already mapped failed -16
[   55.227742][  T547] usb 6-1: New USB device found, idVendor=03eb, idProduct=7614, bcdDevice= 5.70
[   55.237115][  T547] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   55.245214][  T547] usb 6-1: Product: Г
[   55.249341][  T547] usb 6-1: Manufacturer: Я
[   55.254277][  T547] usb 6-1: SerialNumber: Д
[   55.277698][ T1129] raw-gadget.3 gadget: fail, usb_ep_enable returned -22
[   55.307684][  T578] usb 3-1: device descriptor read/8, error -71
[   55.404985][ T1153] F2FS-fs (loop4): Invalid SB checksum offset: 0
[   55.411606][ T1153] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock
[   55.420704][ T1153] F2FS-fs (loop4): invalid crc value
[   55.432282][ T1153] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437)
[   55.462323][ T1153] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0
[   55.469638][ T1153] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[   55.488436][  T710] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 8 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202
[   55.510785][  T283] attempt to access beyond end of device
[   55.510785][  T283] loop4: rw=2049, want=45104, limit=40427
[   55.620623][  T547] usb 6-1: USB disconnect, device number 2
[   55.797684][  T578] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[   55.967717][  T578] usb 3-1: device descriptor read/8, error -71
[   56.168828][ T1186] EXT4-fs (loop5): Ignoring removed orlov option
[   56.176129][ T1186] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a856c01c, mo2=0002]
[   56.184291][ T1186] System zones: 0-2, 18-18, 34-34
[   56.190055][ T1186] EXT4-fs (loop5): orphan cleanup on readonly fs
[   56.196862][ T1186] EXT4-fs error (device loop5): ext4_quota_enable:6451: inode #15: comm syz.5.160: iget: bad i_size value: 360287970189639690
[   56.210254][ T1186] EXT4-fs error (device loop5): ext4_quota_enable:6454: comm syz.5.160: Bad quota inode: 15, type: 2
[   56.221580][ T1186] EXT4-fs warning (device loop5): ext4_enable_quotas:6495: Failed to enable quota tracking (type=2, err=-117, ino=15). Please run e2fsck to fix.
[   56.236555][ T1186] EXT4-fs (loop5): Cannot turn on quotas: error -117
[   56.243469][ T1186] EXT4-fs (loop5): mounted filesystem without journal. Opts: sysvgroups,orlov,min_batch_time=0x00000000000007ff,grpquota,sysvgroups,debug,grpid,,errors=continue
[   56.267731][  T578] usb 3-1: device descriptor read/8, error -71
[   56.277011][ T1184] EXT4-fs (loop0): mounted filesystem without journal. Opts: noblock_validity,,errors=continue
[   56.304732][ T1184] fscrypt (loop0, inode 12): Error -61 getting encryption context
[   56.328031][ T1184] fscrypt (loop0, inode 12): Error -61 getting encryption context
[   56.336324][ T1184] fscrypt (loop0, inode 12): Error -61 getting encryption context
[   56.345703][ T1184] fscrypt (loop0, inode 12): Error -61 getting encryption context
[   56.387740][  T578] usb usb3-port1: unable to enumerate USB device
[   56.448365][ T1199] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[   56.460737][ T1199] EXT4-fs (loop4): 1 truncate cleaned up
[   56.466554][ T1199] EXT4-fs (loop4): mounted filesystem without journal. Opts: nojournal_checksum,jqfmt=vfsold,lazytime,usrquota,usrquota,,errors=continue
[   56.486713][  T578] usb 4-1: USB disconnect, device number 8
[   56.501190][  T578] usblp0: removed
[   56.684886][ T1203] F2FS-fs (loop3): invalid crc value
[   56.705386][ T1203] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109)
[   56.741228][ T1203] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[   56.757642][  T513] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[   56.758568][    T9] attempt to access beyond end of device
[   56.758568][    T9] loop3: rw=2049, want=40992, limit=40427
[   57.150637][   T24] kauditd_printk_skb: 259 callbacks suppressed
[   57.150661][   T24] audit: type=1400 audit(1791090516.880:552): avc:  denied  { map } for  pid=1198 comm="syz.4.165" path="/42/file1/file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   57.241519][   T24] audit: type=1400 audit(1791090516.970:553): avc:  denied  { create } for  pid=1224 comm="syz.0.173" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   57.296501][   T24] audit: type=1400 audit(1791090516.990:554): avc:  denied  { wake_alarm } for  pid=1224 comm="syz.0.173" capability=35  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[   57.504787][ T1235] fuse: Bad value for 'rootmode'
[   57.510663][ T1232] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpjquota=,journal_ioprio=0x0000000000000007,,errors=continue
[   57.523791][ T1232] ext4 filesystem being mounted at /10/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   57.541780][ T1235] EXT4-fs warning (device loop0): ext4_multi_mount_protect:300: Invalid MMP block in superblock
[   57.620964][ T1235] netlink: 72 bytes leftover after parsing attributes in process `syz.0.175'.
[   57.797670][  T710] usb 6-1: new low-speed USB device number 3 using dummy_hcd
[   57.897659][  T287] usb 1-1: new low-speed USB device number 14 using dummy_hcd
[   57.959811][ T1255] netlink: 8 bytes leftover after parsing attributes in process `syz.2.178'.
[   57.971318][ T1254] device ip6gre1 entered promiscuous mode
[   57.996262][ T1260] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1)
[   58.006091][  T513] usb 5-1: unable to get BOS descriptor or descriptor too short
[   58.037720][  T710] usb 6-1: Invalid ep0 maxpacket: 64
[   58.077693][  T513] usb 5-1: unable to read config index 0 descriptor/start: -71
[   58.086353][  T513] usb 5-1: can't read configurations, error -71
[   58.169194][   T24] audit: type=1400 audit(1791090517.900:555): avc:  denied  { write } for  pid=1326 comm="syz.4.182" path="socket:[18492]" dev="sockfs" ino=18492 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   58.198077][  T710] usb 6-1: new low-speed USB device number 4 using dummy_hcd
[   58.221669][ T1327] exfat: Unknown parameter 'iochars�t'
[   58.227392][ T1328] FAT-fs (loop2): Unrecognized mount option "ÿ" or missing value
[   58.265544][   T24] audit: type=1400 audit(1791090517.990:556): avc:  denied  { lock } for  pid=1332 comm="syz.4.183" path="socket:[18501]" dev="sockfs" ino=18501 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1
[   58.289560][  T287] usb 1-1: config index 0 descriptor too short (expected 1307, got 27)
[   58.304638][  T287] usb 1-1: config 231 has too many interfaces: 78, using maximum allowed: 32
[   58.315068][  T287] usb 1-1: config 231 has an invalid descriptor of length 127, skipping remainder of the config
[   58.325623][  T287] usb 1-1: config 231 has 0 interfaces, different from the descriptor's value: 78
[   58.486505][  T710] usb 6-1: Invalid ep0 maxpacket: 64
[   58.491990][  T710] usb usb6-port1: attempt power cycle
[   58.528084][ T1333] exfat: Deprecated parameter 'utf8'
[   58.533691][ T1333] exfat: Deprecated parameter 'utf8'
[   58.539101][ T1333] exfat: Deprecated parameter 'utf8'
[   58.544461][ T1333] exfat: Deprecated parameter 'namecase'
[   58.820168][  T287] usb 1-1: language id specifier not provided by device, defaulting to English
[   58.833603][ T1333] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d)
[   58.849386][ T1333] exFAT-fs (loop4): bogus allocation bitmap size(need : 2, cur : 10)
[   58.931802][ T1343] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d)
[   58.945876][   T24] audit: type=1400 audit(1791090518.670:557): avc:  denied  { read write } for  pid=1342 comm="syz.4.185" name="file1" dev="loop4" ino=1048603 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   58.968997][   T24] audit: type=1400 audit(1791090518.670:558): avc:  denied  { open } for  pid=1342 comm="syz.4.185" path="/46/file1/file1" dev="loop4" ino=1048603 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   59.036588][  T710] usb 6-1: new low-speed USB device number 5 using dummy_hcd
[   59.127772][  T710] usb 6-1: Invalid ep0 maxpacket: 64
[   59.167647][   T24] audit: type=1400 audit(1791090518.880:559): avc:  denied  { connect } for  pid=1342 comm="syz.4.185" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   59.548447][  T710] usb 6-1: new low-speed USB device number 6 using dummy_hcd
[   59.657822][  T710] usb 6-1: Invalid ep0 maxpacket: 64
[   59.663687][  T710] usb usb6-port1: unable to enumerate USB device
[   60.337667][  T578] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[   60.526868][ T1364] netlink: 8 bytes leftover after parsing attributes in process `syz.5.191'.
[   60.627707][  T287] usb 1-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=c3.de
[   60.646980][  T287] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   60.691025][  T287] usb 1-1: can't set config #231, error -71
[   60.698011][  T578] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 252, changing to 11
[   60.715130][  T287] usb 1-1: USB disconnect, device number 14
[   60.721350][  T578] usb 5-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   60.735165][  T578] usb 5-1: config 0 interface 0 has no altsetting 0
[   60.742467][  T578] usb 5-1: New USB device found, idVendor=17ef, idProduct=61ae, bcdDevice= 0.00
[   60.751749][  T578] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   60.763280][ T1369] F2FS-fs (loop0): invalid crc value
[   60.786241][  T578] usb 5-1: config 0 descriptor??
[   60.791301][ T1369] F2FS-fs (loop0): Found nat_bits in checkpoint
[   60.807669][  T581] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[   60.842063][ T1369] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[   60.877422][  T281] attempt to access beyond end of device
[   60.877422][  T281] loop0: rw=2049, want=45112, limit=40427
[   60.917731][  T513] usb 6-1: new full-speed USB device number 7 using dummy_hcd
[   60.988861][   T24] audit: type=1400 audit(1791090520.720:560): avc:  denied  { getopt } for  pid=1375 comm="syz.3.195" lport=141 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   61.010215][ T1376] x_tables: ip6_tables: connlimit.1 match: invalid size 32 (kernel) != (user) 72
[   61.020484][ T1377] netlink: 48 bytes leftover after parsing attributes in process `syz.3.195'.
[   61.031062][   T24] audit: type=1400 audit(1791090520.760:561): avc:  denied  { bind } for  pid=1382 comm="syz.0.194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   61.057655][  T581] usb 3-1: Using ep0 maxpacket: 8
[   61.088662][ T1387] sch_tbf: burst 4398 is lower than device lo mtu (65550) !
[   61.096623][ T1387] netlink: 4 bytes leftover after parsing attributes in process `syz.3.196'.
[   61.119423][ T1389] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue
[   61.128706][ T1389] ext4 filesystem being mounted at /46/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   61.141381][ T1389] EXT4-fs error (device loop0): ext4_mb_generate_buddy:824: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters
[   61.187795][  T581] usb 3-1: too many endpoints for config 0 interface 0 altsetting 5: 34, using maximum allowed: 30
[   61.204532][  T581] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   61.215606][  T581] usb 3-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 34
[   61.228722][  T581] usb 3-1: config 0 interface 0 has no altsetting 0
[   61.235368][  T581] usb 3-1: New USB device found, idVendor=056a, idProduct=00b1, bcdDevice= 0.00
[   61.245329][  T581] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   61.268557][  T513] usb 6-1: device descriptor read/64, error -71
[   61.280904][ T1399] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue
[   61.290105][ T1399] ext4 filesystem being mounted at /47/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   61.298727][  T578] hid-generic 0003:17EF:61AE.0002: ignoring exceeding usage max
[   61.305596][ T1399] fs-verity: sha512 using implementation "sha512-avx2"
[   61.310165][  T581] usb 3-1: config 0 descriptor??
[   61.326552][  T578] hid-generic 0003:17EF:61AE.0002: No inputs registered, leaving
[   61.585498][ T1406] EXT4-fs (loop0): Unrecognized mount option "pcr=00000000000000000040" or missing value
[   61.596743][  T578] hid-generic 0003:17EF:61AE.0002: hidraw0: USB HID v0.10 Joystick [HID 17ef:61ae] on usb-dummy_hcd.4-1/input0
[   61.613402][  T578] usb 5-1: USB disconnect, device number 9
[   61.627805][ T1408] fido_id[1408]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory
[   61.697787][  T513] usb 6-1: device descriptor read/64, error -71
[   61.768356][ T1406] EXT4-fs (loop0): warning: checktime reached, running e2fsck is recommended
[   61.778077][ T1406] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,nodioread_nolock,data_err=ignore,barrier,auto_da_alloc,nodioread_nolock,
[   61.793553][ T1406] ext4 filesystem being mounted at /48/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   61.810574][  T112] EXT4-fs error (device loop0): ext4_map_blocks:742: inode #15: comm kworker/u4:2: lblock 0 mapped to illegal pblock 0 (length 1)
[   61.824284][  T112] EXT4-fs (loop0): Remounting filesystem read-only
[   61.909010][ T1413] EXT4-fs (loop0): Mount option "dioread_nolock" incompatible with ext3
[   61.975322][  T513] usb 6-1: new full-speed USB device number 8 using dummy_hcd
[   62.008736][  T581] usbhid 3-1:0.0: can't add hid device: -71
[   62.018637][  T581] usbhid: probe of 3-1:0.0 failed with error -71
[   62.026203][  T581] usb 3-1: USB disconnect, device number 11
[   62.177758][   T24] kauditd_printk_skb: 2 callbacks suppressed
[   62.177780][   T24] audit: type=1400 audit(1791090521.820:564): avc:  denied  { write } for  pid=1412 comm="syz.0.202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   62.258581][   T24] audit: type=1400 audit(1791090521.830:565): avc:  denied  { accept } for  pid=1412 comm="syz.0.202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   62.309758][ T1424] udc-core: couldn't find an available UDC or it's busy
[   62.317983][ T1424] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[   62.427644][  T513] usb 6-1: device descriptor read/64, error -71
[   62.577668][  T547] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[   62.740046][   T24] audit: type=1400 audit(1791090522.470:566): avc:  denied  { create } for  pid=1429 comm="syz.0.206" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   62.760393][   T24] audit: type=1400 audit(1791090522.470:567): avc:  denied  { mounton } for  pid=1429 comm="syz.0.206" path="/50/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   62.817756][  T581] usb 3-1: new full-speed USB device number 12 using dummy_hcd
[   62.827708][  T547] usb 5-1: Using ep0 maxpacket: 16
[   62.833167][  T513] usb 6-1: device descriptor read/64, error -71
[   62.844130][   T24] audit: type=1400 audit(1791090522.570:568): avc:  denied  { create } for  pid=1443 comm="syz.0.208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[   62.864306][   T24] audit: type=1400 audit(1791090522.570:569): avc:  denied  { ioctl } for  pid=1443 comm="syz.0.208" path="socket:[18665]" dev="sockfs" ino=18665 ioctlcmd=0x6687 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[   62.889869][   T24] audit: type=1400 audit(1791090522.570:570): avc:  denied  { write } for  pid=1443 comm="syz.0.208" name="random" dev="devtmpfs" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1
[   62.914712][   T24] audit: type=1400 audit(1791090522.600:571): avc:  denied  { create } for  pid=1445 comm="syz.0.209" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[   62.935416][   T24] audit: type=1400 audit(1791090522.620:572): avc:  denied  { write } for  pid=1445 comm="syz.0.209" name="file0" dev="tmpfs" ino=323 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[   62.957738][   T24] audit: type=1400 audit(1791090522.620:573): avc:  denied  { open } for  pid=1445 comm="syz.0.209" path="/53/file0" dev="tmpfs" ino=323 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[   62.957746][  T513] usb usb6-port1: attempt power cycle
[   62.968038][  T547] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   62.996831][  T547] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0
[   63.006738][  T547] usb 5-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28
[   63.019960][  T547] usb 5-1: config 0 interface 0 has no altsetting 0
[   63.026604][  T547] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[   63.035702][  T547] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   63.047927][  T547] usb 5-1: config 0 descriptor??
[   63.137731][  T581] usb 3-1: device descriptor read/64, error -71
[   63.198027][ T1448] F2FS-fs (loop0): Fix alignment : done, start(4096) end(16896) block(12288)
[   63.206901][ T1448] F2FS-fs (loop0): Unrecognized mount option "noinline_xatnoquota" or missing value
[   63.495740][  T513] usb 6-1: new full-speed USB device number 9 using dummy_hcd
[   63.647716][  T547] usbhid 5-1:0.0: can't add hid device: -71
[   63.654911][  T547] usbhid: probe of 5-1:0.0 failed with error -71
[   63.672894][  T547] usb 5-1: USB disconnect, device number 10
[   63.884343][ T1466] netlink: 12 bytes leftover after parsing attributes in process `syz.0.214'.
[   63.897370][ T1466] : Can't open blockdev
[   64.017787][  T581] usb 3-1: device descriptor read/64, error -71
[   64.057779][  T513] usb 6-1: device not accepting address 9, error -71
[   64.150033][ T1473] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer.
[   64.222881][ T1476] fuse: Bad value for 'fd'
[   64.287649][  T581] usb 3-1: new full-speed USB device number 13 using dummy_hcd
[   64.289925][ T1464] F2FS-fs (loop5): Test dummy encryption mode enabled
[   64.322793][ T1464] F2FS-fs (loop5): invalid crc value
[   64.328232][ T1464] F2FS-fs (loop5): Wrong cp_pack_start_sum: 1
[   64.344556][ T1464] F2FS-fs (loop5): Failed to get valid F2FS checkpoint
[   64.557671][  T581] usb 3-1: device descriptor read/64, error -71
[   64.669398][ T1500] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue
[   64.680640][ T1500] ext4 filesystem being mounted at /13/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   64.692203][ T1501] netlink: 4 bytes leftover after parsing attributes in process `syz.3.223'.
[   64.709737][ T1506] netlink: 4 bytes leftover after parsing attributes in process `syz.3.223'.
[   64.777721][ T1283] usb 1-1: new full-speed USB device number 15 using dummy_hcd
[   64.947672][  T581] usb 3-1: device descriptor read/64, error -71
[   65.067741][  T581] usb usb3-port1: attempt power cycle
[   65.137767][ T1283] usb 1-1: config 1 has an invalid interface number: 36 but max is 1
[   65.145942][ T1283] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   65.156276][ T1283] usb 1-1: config 1 has no interface number 1
[   65.162656][ T1283] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[   65.175570][ T1283] usb 1-1: config 1 interface 36 has no altsetting 0
[   65.373489][ T1283] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   65.382634][ T1283] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   65.390998][ T1283] usb 1-1: Product: syz
[   65.395366][ T1283] usb 1-1: Manufacturer: syz
[   65.400466][ T1283] usb 1-1: SerialNumber: syz
[   65.438358][ T1283] cdc_ncm 1-1:1.0: bind() failure
[   65.467732][  T513] usb 6-1: new full-speed USB device number 11 using dummy_hcd
[   65.705635][  T581] usb 3-1: new full-speed USB device number 14 using dummy_hcd
[   65.787688][  T513] usb 6-1: device descriptor read/64, error -71
[   66.021082][ T1487] udc-core: couldn't find an available UDC or it's busy
[   66.028166][ T1487] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[   66.038898][ T1283] usb 1-1: USB disconnect, device number 15
[   66.177664][  T513] usb 6-1: device descriptor read/64, error -71
[   66.198531][  T581] usb 3-1: device not accepting address 14, error -71
[   66.280414][ T1524] EXT4-fs (loop4): Test dummy encryption mode enabled
[   66.288791][ T1524] EXT4-fs error (device loop4): ext4_orphan_get:1405: inode #11: comm syz.4.228: casefold flag without casefold feature
[   66.301642][ T1524] EXT4-fs error (device loop4): ext4_orphan_get:1410: comm syz.4.228: couldn't read orphan inode 11 (err -117)
[   66.313895][ T1524] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption,nogrpid,,errors=continue
[   66.341136][  T283] EXT4-fs error (device loop4): ext4_readdir:263: inode #2: block 13: comm syz-executor: path /50/file0: bad entry in directory: rec_len % 4 != 0 - offset=92, inode=16, rec_len=127, size=1024 fake=0
[   66.361553][  T283] EXT4-fs error (device loop4): ext4_lookup:1834: inode #2: comm syz-executor: deleted inode referenced: 11
[   66.373673][  T283] EXT4-fs error (device loop4): ext4_lookup:1834: inode #2: comm syz-executor: deleted inode referenced: 11
[   66.447682][  T513] usb 6-1: new full-speed USB device number 12 using dummy_hcd
[   66.585844][ T1528] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.593222][ T1528] bridge0: port 1(bridge_slave_0) entered disabled state
[   66.601084][ T1528] device bridge_slave_0 entered promiscuous mode
[   66.608505][ T1533] ip6_tables: ip6tables: counters copy to user failed while replacing table
[   66.608525][ T1528] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.624608][ T1528] bridge0: port 2(bridge_slave_1) entered disabled state
[   66.632456][ T1528] device bridge_slave_1 entered promiscuous mode
[   66.699685][ T1528] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.706822][ T1528] bridge0: port 2(bridge_slave_1) entered forwarding state
[   66.714141][ T1528] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.721303][ T1528] bridge0: port 1(bridge_slave_0) entered forwarding state
[   66.737926][  T513] usb 6-1: device descriptor read/64, error -71
[   66.755799][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   66.763776][  T112] bridge0: port 1(bridge_slave_0) entered disabled state
[   66.771370][  T112] bridge0: port 2(bridge_slave_1) entered disabled state
[   66.786842][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   66.795423][  T112] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.802513][  T112] bridge0: port 1(bridge_slave_0) entered forwarding state
[   66.810115][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   66.818399][  T112] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.825483][  T112] bridge0: port 2(bridge_slave_1) entered forwarding state
[   66.844534][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   66.853021][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   66.868441][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   66.876326][ T1530] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[   66.880705][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   66.892701][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   66.895857][ T1530] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[   66.904064][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   66.911154][ T1530] F2FS-fs (loop0): invalid crc value
[   66.921239][ T1528] device veth0_vlan entered promiscuous mode
[   66.934544][ T1530] F2FS-fs (loop0): Found nat_bits in checkpoint
[   66.938909][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   66.950842][ T1528] device veth1_macvtap entered promiscuous mode
[   66.962811][  T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   66.983148][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   66.999899][ T1530] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[   67.007138][ T1530] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[   67.028454][ T1544] syz.6.231 uses obsolete (PF_INET,SOCK_PACKET)
[   67.059752][    T9] device bridge_slave_1 left promiscuous mode
[   67.066037][    T9] bridge0: port 2(bridge_slave_1) entered disabled state
[   67.074894][    T9] device veth1_macvtap left promiscuous mode
[   67.081165][    T9] device veth0_vlan left promiscuous mode
[   67.087692][  T581] usb 3-1: new full-speed USB device number 15 using dummy_hcd
[   67.157796][  T513] usb 6-1: device descriptor read/64, error -71
[   67.257764][  T581] usb 3-1: not running at top speed; connect to a high speed hub
[   67.277712][  T513] usb usb6-port1: attempt power cycle
[   67.297745][  T585] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[   67.337736][  T581] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   67.348485][  T581] usb 3-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00
[   67.357591][  T581] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   67.373817][   T24] kauditd_printk_skb: 22 callbacks suppressed
[   67.373830][   T24] audit: type=1400 audit(1791090527.100:596): avc:  denied  { mount } for  pid=1548 comm="syz.0.235" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1
[   67.404471][   T24] audit: type=1400 audit(1791090527.110:597): avc:  denied  { search } for  pid=1548 comm="syz.0.235" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1
[   67.409942][  T581] uvcvideo: Found UVC 1.00 device <unnamed> (046d:0825)
[   67.426664][   T24] audit: type=1400 audit(1791090527.110:598): avc:  denied  { read write } for  pid=1548 comm="syz.0.235" name="synthetic_events" dev="tracefs" ino=12712 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1
[   67.447944][  T581] uvcvideo: No valid video chain found.
[   67.458672][   T24] audit: type=1400 audit(1791090527.110:599): avc:  denied  { open } for  pid=1548 comm="syz.0.235" path="/59/tracing/synthetic_events" dev="tracefs" ino=12712 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1
[   67.487212][   T24] audit: type=1326 audit(1791090527.210:600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1548 comm="syz.0.235" exe="/root/ci2-android-5-10/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcfcafb5159 code=0x0
[   67.636278][ T1533] udc-core: couldn't find an available UDC or it's busy
[   67.643543][ T1533] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[   67.677731][  T585] usb 7-1: unable to get BOS descriptor set
[   67.687796][  T513] usb 6-1: new full-speed USB device number 13 using dummy_hcd
[   67.778102][  T585] usb 7-1: config 7 has an invalid interface number: 201 but max is 0
[   67.789713][  T585] usb 7-1: config 7 has no interface number 0
[   67.798422][  T585] usb 7-1: config 7 interface 201 has no altsetting 0
[   67.867731][  T513] usb 6-1: device descriptor read/8, error -71
[   67.880690][ T1533] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[   67.897641][ T1533] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[   67.931878][ T1533] F2FS-fs (loop2): Found nat_bits in checkpoint
[   67.977737][  T585] usb 7-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05
[   67.991347][  T585] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   67.999421][ T1575] EXT4-fs (loop5): Test dummy encryption mode enabled
[   68.028052][ T1575] EXT4-fs error (device loop5): ext4_orphan_get:1405: inode #15: comm syz.5.241: inode has both inline data and extents flags
[   68.034945][  T585] usb 7-1: Product: syz
[   68.047437][ T1575] EXT4-fs error (device loop5): ext4_orphan_get:1410: comm syz.5.241: couldn't read orphan inode 15 (err -117)
[   68.053330][  T585] usb 7-1: Manufacturer: syz
[   68.063861][  T585] usb 7-1: SerialNumber: syz
[   68.068837][ T1533] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[   68.073309][ T1575] EXT4-fs (loop5): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue
[   68.075892][ T1533] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[   68.094710][  T513] usb 6-1: device descriptor read/8, error -71
[   68.103830][   T24] audit: type=1400 audit(1791090527.830:601): avc:  denied  { write open } for  pid=1532 comm="syz.2.233" path="/38/file0/file0/file1" dev="loop2" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   68.139410][   T24] audit: type=1400 audit(1791090527.830:602): avc:  denied  { read append } for  pid=1532 comm="syz.2.233" path="/38/file0/file0/cpuset.effective_cpus" dev="loop2" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   68.211775][   T24] audit: type=1400 audit(1791090527.940:603): avc:  denied  { unmount } for  pid=281 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1
[   68.250710][   T24] audit: type=1400 audit(1791090527.980:604): avc:  denied  { setopt } for  pid=1582 comm="syz.0.242" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   68.435834][ T1606] udc-core: couldn't find an available UDC or it's busy
[   68.443200][ T1606] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[   68.538292][  T585] ums-usbat 7-1:7.201: USB Mass Storage device detected
[   68.546567][  T585] ums-usbat 7-1:7.201: Quirks match for vid 0781 pid 0005: 1
[   68.594094][  T585] usb 7-1: USB disconnect, device number 2
[   68.617877][  T287] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[   68.641588][    T5] usb 3-1: USB disconnect, device number 15
[   68.876519][   T24] audit: type=1400 audit(1791090528.600:605): avc:  denied  { read } for  pid=1615 comm="syz.5.245" name="loop-control" dev="devtmpfs" ino=114 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[   68.901143][  T287] usb 1-1: device descriptor read/64, error -71
[   69.524992][ T1628] netlink: 8 bytes leftover after parsing attributes in process `syz.6.248'.
[   69.537703][  T513] usb 6-1: new high-speed USB device number 15 using dummy_hcd
[   69.586363][ T1632] EXT4-fs (loop6): Ignoring removed mblk_io_submit option
[   69.593687][ T1632] EXT4-fs (loop6): Ignoring removed bh option
[   69.600070][ T1632] EXT4-fs (loop6): external journal device major/minor numbers have changed
[   69.609451][ T1632] EXT4-fs (loop6): failed to open journal device unknown-block(0,3) -6
[   69.637735][  T287] usb 1-1: device descriptor read/64, error -71
[   69.778110][  T513] usb 6-1: Using ep0 maxpacket: 16
[   69.783503][ T1638] EXT4-fs (loop2): Mount option "dioread_lock" incompatible with ext3
[   69.907666][  T287] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[   69.918308][  T513] usb 6-1: config 0 has an invalid interface number: 105 but max is 0
[   69.926844][  T513] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   69.937801][  T513] usb 6-1: config 0 has no interface number 0
[   70.218076][  T513] usb 6-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28
[   71.260788][ T1655] sched: RT throttling activated
[   71.260835][  T513] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   71.274291][  T513] usb 6-1: Product: syz
[   71.278653][  T513] usb 6-1: Manufacturer: syz
[   71.283262][  T513] usb 6-1: SerialNumber: syz
[   71.297906][  T513] usb 6-1: config 0 descriptor??
[   71.310305][ T1657] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   71.410684][  T513] uvcvideo: Found UVC 0.00 device syz (046d:08f3)
[   71.439962][  T513] uvcvideo: No valid video chain found.
[   72.100321][ T1657] EXT4-fs (loop2): 1 truncate cleaned up
[   72.137734][ T1657] EXT4-fs (loop2): mounted filesystem without journal. Opts: nojournal_checksum,jqfmt=vfsold,lazytime,usrquota,usrquota,,errors=continue
[   72.517682][  T513] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[   72.547719][ T1283] usb 7-1: new full-speed USB device number 3 using dummy_hcd
[   72.817851][ T1283] usb 7-1: device descriptor read/64, error -71
[   73.088893][   T24] kauditd_printk_skb: 8 callbacks suppressed
[   73.088907][   T24] audit: type=1400 audit(1791090532.820:614): avc:  denied  { watch watch_reads } for  pid=1673 comm="syz.0.259" path="/63" dev="tmpfs" ino=377 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[   73.095224][ T1674] x_tables: duplicate entry at hook 4
[   73.137692][  T513] usb 3-1: unable to get BOS descriptor or descriptor too short
[   73.139508][  T585] usb 6-1: USB disconnect, device number 15
[   73.234058][  T513] usb 3-1: unable to read config index 0 descriptor/start: -71
[   73.241842][ T1283] usb 7-1: device descriptor read/64, error -71
[   73.248148][  T513] usb 3-1: can't read configurations, error -71
[   74.307198][ T1283] usb 7-1: new full-speed USB device number 4 using dummy_hcd
[   74.686587][ T1695] netlink: 8 bytes leftover after parsing attributes in process `syz.3.265'.
[   74.718442][ T1695] netlink: 8 bytes leftover after parsing attributes in process `syz.3.265'.
[   74.797406][ T1697] EXT4-fs (loop2): Mount option "dioread_lock" incompatible with ext3
[   74.901963][ T1283] usb 7-1: device descriptor read/64, error -71
[   75.283290][   T24] audit: type=1326 audit(1791090535.010:615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1694 comm="syz.3.265" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e85434159 code=0x7ffc0000
[   75.309460][   T24] audit: type=1326 audit(1791090535.040:616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1694 comm="syz.3.265" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=52 compat=0 ip=0x7f9e85434159 code=0x7ffc0000
[   75.373059][ T1706] bridge0: port 1(bridge_slave_0) entered disabled state
[   75.474616][   T24] audit: type=1326 audit(1791090535.040:617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1694 comm="syz.3.265" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e85434159 code=0x7ffc0000
[   75.527684][  T513] usb 6-1: new high-speed USB device number 16 using dummy_hcd
[   75.933619][   T24] audit: type=1326 audit(1791090535.040:618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1694 comm="syz.3.265" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e85434159 code=0x7ffc0000
[   75.990235][   T24] audit: type=1326 audit(1791090535.180:619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1694 comm="syz.3.265" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f9e8542ded7 code=0x7ffc0000
[   76.016622][   T24] audit: type=1326 audit(1791090535.640:620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1694 comm="syz.3.265" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9e853d54d9 code=0x7ffc0000
[   76.043705][   T24] audit: type=1326 audit(1791090535.650:621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1694 comm="syz.3.265" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e85434159 code=0x7ffc0000
[   76.068834][   T24] audit: type=1326 audit(1791090535.650:622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1694 comm="syz.3.265" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f9e85434159 code=0x7ffc0000
[   76.095042][   T24] audit: type=1326 audit(1791090535.660:623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1694 comm="syz.3.265" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e85434159 code=0x7ffc0000
[   76.205277][  T287] usb 1-1: new high-speed USB device number 18 using dummy_hcd
[   76.297762][  T513] usb 6-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64
[   76.308117][  T513] usb 6-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32
[   76.332664][  T513] usb 6-1: config 1 interface 0 has no altsetting 0
[   76.507721][  T513] usb 6-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40
[   76.516891][  T513] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   76.524978][  T513] usb 6-1: Product: syz
[   76.529270][  T513] usb 6-1: Manufacturer: syz
[   76.533891][  T513] usb 6-1: SerialNumber: syz
[   76.557711][ T1703] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[   76.564737][ T1703] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[   76.637655][  T287] usb 1-1: device descriptor read/64, error -71
[   76.662075][ T1283] usb usb7-port1: attempt power cycle
[   77.080924][ T1283] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[   77.287967][ T1283] usb 7-1: device descriptor read/8, error -71
[   77.497173][ T1740] EXT4-fs (loop2): Ignoring removed mblk_io_submit option
[   77.504641][ T1740] EXT4-fs (loop2): Ignoring removed bh option
[   77.511211][ T1740] EXT4-fs (loop2): external journal device major/minor numbers have changed
[   77.520639][ T1740] EXT4-fs (loop2): failed to open journal device unknown-block(0,3) -6
[   77.607706][ T1283] usb 7-1: device descriptor read/8, error -71
[   77.672049][ T1747] ip_tables: iptables: counters copy to user failed while replacing table
[   77.751596][  T513] (unnamed net_device) (uninitialized): Assigned a random MAC address: 92:fe:75:d9:ba:a3
[   77.764139][  T513] rtl8150 6-1:1.0: eth1: rtl8150 is detected
[   77.776148][  T513] usb 6-1: USB disconnect, device number 16
[   77.919856][ T1760] netlink: 'syz.2.277': attribute type 10 has an invalid length.
[   77.930904][ T1283] usb 7-1: new high-speed USB device number 6 using dummy_hcd
[   78.107912][ T1283] usb 7-1: device descriptor read/8, error -71
[   78.787823][ T1283] usb 7-1: device descriptor read/8, error -71
[   78.808906][ T1764]  loop5: p1 < > p4
[   78.813386][ T1764] loop5: p4 size 722688 extends beyond EOD, truncated
[   78.822168][ T1764] overlayfs: unrecognized mount option "verity=off" or missing value
[   78.907737][ T1283] usb usb7-port1: unable to enumerate USB device
[   78.937959][  T287] usb 1-1: config 0 interface 0 altsetting 11 has 1 endpoint descriptor, different from the interface descriptor's value: 10
[   78.942822][  T579] blk_update_request: I/O error, dev loop5, sector 8 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0
[   78.951343][  T287] usb 1-1: config 0 interface 0 has no altsetting 0
[   78.962421][  T967] __loop_clr_fd: partition scan of loop5 failed (rc=-16)
[   78.969939][  T287] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00
[   78.980824][  T330] blk_update_request: I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0
[   78.985987][  T287] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   79.006620][  T579] blk_update_request: I/O error, dev loop5, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   79.013486][  T287] usb 1-1: config 0 descriptor??
[   79.022366][  T330] blk_update_request: I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   79.028258][  T579] Buffer I/O error on dev loop5p4, logical block 1, async page read
[   79.036834][  T330] Buffer I/O error on dev loop5p1, logical block 0, async page read
[   79.052310][  T330] blk_update_request: I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   79.064801][  T330] Buffer I/O error on dev loop5p1, logical block 0, async page read
[   79.073156][  T330] blk_update_request: I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   79.084124][  T330] Buffer I/O error on dev loop5p1, logical block 0, async page read
[   79.092616][  T330] blk_update_request: I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   79.103607][  T330] Buffer I/O error on dev loop5p1, logical block 0, async page read
[   79.111982][  T330] blk_update_request: I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   79.123579][  T330] Buffer I/O error on dev loop5p1, logical block 0, async page read
[   79.189678][  T586] usb 3-1: new high-speed USB device number 18 using dummy_hcd
[   79.230855][ T1772] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue
[   79.240467][ T1772] ext4 filesystem being mounted at /9/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   79.287121][   T24] kauditd_printk_skb: 2 callbacks suppressed
[   79.287143][   T24] audit: type=1400 audit(1791090539.010:626): avc:  denied  { checkpoint_restore } for  pid=1778 comm="syz.3.290" capability=40  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[   79.904949][   T24] audit: type=1400 audit(1791090539.630:627): avc:  denied  { mount } for  pid=1778 comm="syz.3.290" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1
[   79.957741][ T1283] usb 6-1: new high-speed USB device number 17 using dummy_hcd
[   80.097724][ T1289] usb 7-1: new high-speed USB device number 7 using dummy_hcd
[   80.297645][ T1283] usb 6-1: device descriptor read/64, error -71
[   80.307663][  T287] usbhid 1-1:0.0: can't add hid device: -71
[   80.558022][ T1289] usb 7-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18
[   80.592230][  T287] usbhid: probe of 1-1:0.0 failed with error -71
[   80.600759][  T287] usb 1-1: USB disconnect, device number 18
[   80.687729][ T1289] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   80.703430][ T1289] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[   80.717810][ T1289] usb 7-1: SerialNumber: syz
[   80.737686][ T1283] usb 6-1: device descriptor read/64, error -71
[   80.757704][  T586] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   80.777650][  T586] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[   80.786736][  T586] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   80.818480][  T586] usb 3-1: config 0 descriptor??
[   81.008408][ T1283] usb 6-1: new high-speed USB device number 18 using dummy_hcd
[   81.268822][ T1819] dyndbg: expected <4096 bytes into control
[   81.298493][  T586] keytouch 0003:0926:3333.0003: fixing up Keytouch IEC report descriptor
[   81.317696][ T1283] usb 6-1: device descriptor read/64, error -71
[   81.320566][  T586] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0003/input/input10
[   81.420785][  T586] keytouch 0003:0926:3333.0003: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0
[   81.428390][ T1797] udc-core: couldn't find an available UDC or it's busy
[   81.444534][ T1797] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[   81.479489][ T1289] cdc_ether 7-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.6-1, CDC Ethernet Device, 42:42:42:42:42:42
[   81.647643][    C0] keytouch 0003:0926:3333.0003: Event data for report 0 was too short (8 vs 5)
[   81.701463][  T586] usb 3-1: USB disconnect, device number 18
[   81.737656][ T1283] usb 6-1: device descriptor read/64, error -71
[   81.832172][   T24] audit: type=1400 audit(1791090541.560:628): avc:  denied  { unmount } for  pid=281 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1
[   81.857874][ T1283] usb usb6-port1: attempt power cycle
[   82.104317][ T1541] attempt to access beyond end of device
[   82.104317][ T1541] loop5: rw=1, want=1041, limit=128
[   82.537008][ T1842] exFAT-fs (loop5): invalid boot record signature
[   82.583338][ T1287] usb 7-1: USB disconnect, device number 7
[   82.621937][ T1287] cdc_ether 7-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.6-1, CDC Ethernet Device
[   82.654952][ T1842] exFAT-fs (loop5): failed to read boot sector
[   82.667286][ T1845] netlink: 20 bytes leftover after parsing attributes in process `syz.2.297'.
[   82.792383][ T1842] exFAT-fs (loop5): failed to recognize exfat type
[   82.829984][ T1847] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003)
[   82.845259][ T1850] device vlan2 entered promiscuous mode
[   82.863049][ T1850] device macsec0 entered promiscuous mode
[   82.875428][ T1847] FAT-fs (loop6): Filesystem has been set read-only
[   82.959804][   T24] audit: type=1400 audit(1791090542.690:629): avc:  denied  { ioctl } for  pid=1846 comm="syz.6.299" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[   83.021541][ T1847] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0
[   83.325354][ T1870] EXT4-fs (loop6): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue
[   83.336439][ T1870] ext4 filesystem being mounted at /12/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   83.348604][ T1845] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[   83.356386][ T1845] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[   83.366606][ T1845] F2FS-fs (loop2): invalid crc value
[   83.373398][ T1845] F2FS-fs (loop2): Found nat_bits in checkpoint
[   83.390767][   T24] audit: type=1400 audit(1791090543.120:630): avc:  denied  { ioctl } for  pid=1869 comm="syz.6.301" path="/12/file1/blkio.bfq.empty_time" dev="loop6" ino=18 ioctlcmd=0x5412 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   83.428260][ T1867] EXT4-fs (loop5): dax option not supported
[   83.458047][ T1845] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[   83.465514][ T1845] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[   83.540090][  T579] blk_update_request: I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0
[   83.550105][  T334] blk_update_request: I/O error, dev loop5, sector 8 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0
[   83.553172][  T579] Buffer I/O error on dev loop5p1, logical block 0, async page read
[   83.572548][  T334] Buffer I/O error on dev loop5p4, logical block 1, async page read
[   83.581280][   T24] audit: type=1326 audit(1791090543.310:631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1902 comm="syz.6.304" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03f189d159 code=0x7ffc0000
[   83.606394][   T24] audit: type=1326 audit(1791090543.310:632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1902 comm="syz.6.304" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03f189d159 code=0x7ffc0000
[   83.633584][  T579] Buffer I/O error on dev loop5p1, logical block 0, async page read
[   83.648145][   T24] audit: type=1326 audit(1791090543.310:633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1902 comm="syz.6.304" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f03f189d159 code=0x7ffc0000
[   83.673105][   T24] audit: type=1326 audit(1791090543.310:634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1902 comm="syz.6.304" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f03f189cec2 code=0x7ffc0000
[   83.697952][   T24] audit: type=1326 audit(1791090543.320:635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1902 comm="syz.6.304" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f03f185d98e code=0x7ffc0000
[   83.709474][  T579] Buffer I/O error on dev loop5p1, logical block 0, async page read
[   83.731118][ T1908] netlink: 'syz.3.306': attribute type 4 has an invalid length.
[   83.745867][ T1908] netlink: 'syz.3.306': attribute type 4 has an invalid length.
[   83.762314][ T1904] EXT4-fs (loop6): Ignoring removed nobh option
[   83.784680][ T1904] EXT4-fs (loop6): orphan cleanup on readonly fs
[   83.806943][ T1904] EXT4-fs warning (device loop6): ext4_xattr_inode_get:492: inode #11: comm syz.6.304: ea_inode file size=1535 entry size=6
[   83.821273][ T1905]  loop2: p1 < > p3 < > p4
[   83.827152][ T1905] loop2: p4 size 851974 extends beyond EOD, truncated
[   83.838056][ T1904] EXT4-fs warning (device loop6): ext4_expand_extra_isize_ea:2802: Unable to expand inode 15. Delete some EAs or run e2fsck.
[   83.870980][ T1904] EXT4-fs error (device loop6) in ext4_do_update_inode:5362: error 27
[   83.889679][   T94]  loop2: p1 < > p3 < > p4
[   83.896669][   T94] loop2: p4 size 851974 extends beyond EOD, truncated
[   83.898904][ T1904] EXT4-fs (loop6): Remounting filesystem read-only
[   83.918545][ T1904] EXT4-fs error (device loop6): ext4_dirty_inode:6181: inode #15: comm syz.6.304: mark_inode_dirty error
[   83.937940][ T1904] EXT4-fs error (device loop6) in ext4_do_update_inode:5362: error 27
[   83.946634][ T1904] EXT4-fs error (device loop6): ext4_xattr_delete_inode:2946: inode #15: comm syz.6.304: mark_inode_dirty error
[   83.958880][ T1904] EXT4-fs error (device loop6): ext4_xattr_delete_inode:2949: inode #15: comm syz.6.304: mark inode dirty (error -27)
[   83.971807][ T1904] EXT4-fs warning (device loop6): ext4_evict_inode:305: xattr delete (err -27)
[   83.981325][ T1904] EXT4-fs (loop6): 1 orphan inode deleted
[   83.987307][ T1904] EXT4-fs (loop6): mounted filesystem without journal. Opts: usrjquota=,acl,debug_want_extra_isize=0x000000000000005c,barrier,nobh,errors=remount-ro,block_validity,
[   84.085339][ T1927] netem: change failed
[   84.530680][  T579] print_req_error: 6 callbacks suppressed
[   84.530697][  T579] blk_update_request: I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0
[   84.548983][  T330] blk_update_request: I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0
[   84.549133][  T334] blk_update_request: I/O error, dev loop2, sector 7937 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   84.560345][  T282] __loop_clr_fd: partition scan of loop2 failed (rc=-16)
[   84.572385][  T579] blk_update_request: I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   84.578816][  T586] usb 7-1: new high-speed USB device number 8 using dummy_hcd
[   84.590243][  T334] buffer_io_error: 2 callbacks suppressed
[   84.590322][  T334] Buffer I/O error on dev loop2p4, logical block 7936, async page read
[   84.611519][  T330] blk_update_request: I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   84.622752][  T579] Buffer I/O error on dev loop2p3, logical block 0, async page read
[   84.630949][  T330] Buffer I/O error on dev loop2p1, logical block 0, async page read
[   84.639309][  T579] blk_update_request: I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   84.650544][  T334] blk_update_request: I/O error, dev loop2, sector 7938 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   84.658928][  T330] blk_update_request: I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   84.663391][  T579] Buffer I/O error on dev loop2p3, logical block 0, async page read
[   84.680847][  T334] Buffer I/O error on dev loop2p4, logical block 7937, async page read
[   84.689392][  T334] blk_update_request: I/O error, dev loop2, sector 7939 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   84.701131][  T579] blk_update_request: I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   84.702258][  T330] Buffer I/O error on dev loop2p1, logical block 0, async page read
[   84.712675][  T334] Buffer I/O error on dev loop2p4, logical block 7938, async page read
[   84.728653][  T579] Buffer I/O error on dev loop2p3, logical block 0, async page read
[   84.736909][  T579] Buffer I/O error on dev loop2p3, logical block 0, async page read
[   84.738070][  T330] Buffer I/O error on dev loop2p1, logical block 0, async page read
[   84.833393][ T1956] exfat: Deprecated parameter 'utf8'
[   84.839215][ T1956] exfat: Deprecated parameter 'namecase'
[   84.845203][ T1956] exfat: Deprecated parameter 'namecase'
[   84.851180][ T1956] exfat: Deprecated parameter 'utf8'
[   84.874004][ T1956] exFAT-fs (loop2): failed to load upcase table (idx : 0x00012153, chksum : 0x6a70c6b9, utbl_chksum : 0xe619d30d)
[   84.901436][   T24] kauditd_printk_skb: 21 callbacks suppressed
[   84.901451][   T24] audit: type=1400 audit(1791090544.630:657): avc:  denied  { append } for  pid=1955 comm="syz.2.319" path="/54/file0/memory.events.local" dev="loop2" ino=1048610 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   85.047685][  T586] usb 7-1: unable to get BOS descriptor or descriptor too short
[   85.137988][  T586] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0
[   86.007438][ T1985] netlink: 104 bytes leftover after parsing attributes in process `syz.2.325'.
[   86.032134][ T1985] PM: Enabling pm_trace changes system date and time during resume.
[   86.032134][ T1985] PM: Correct system time has to be restored manually after resume.
[   86.238706][   T24] audit: type=1400 audit(1791090545.970:658): avc:  denied  { shutdown } for  pid=1998 comm="syz.0.327" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   86.272111][ T1948] overlayfs: failed to clone upperpath
[   86.279154][ T1948] SELinux:  duplicate or incompatible mount options
[   86.286099][ T1948] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1948 comm=syz.3.317
[   86.305861][   T24] audit: type=1400 audit(1791090545.990:659): avc:  denied  { map } for  pid=1998 comm="syz.0.327" path="socket:[20210]" dev="sockfs" ino=20210 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   86.329464][  T586] usb 7-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40
[   86.343834][   T24] audit: type=1400 audit(1791090546.070:660): avc:  denied  { read } for  pid=2000 comm="syz.0.329" name="rtc0" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[   86.367198][  T586] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   86.367522][ T2002] netlink: 'syz.0.329': attribute type 4 has an invalid length.
[   86.376197][  T586] usb 7-1: Product: syz
[   86.387794][  T586] usb 7-1: Manufacturer: syz
[   86.392474][  T586] usb 7-1: SerialNumber: syz
[   86.403031][   T24] audit: type=1400 audit(1791090546.090:661): avc:  denied  { ioctl } for  pid=2000 comm="syz.0.329" path="/dev/rtc0" dev="devtmpfs" ino=258 ioctlcmd=0x7002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[   86.692341][ T2014] EXT4-fs (loop2): Ignoring removed orlov option
[   86.730168][ T2014] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,init_itable=0x000000000000726e,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,resuid=0x0000000000000000,
[   86.829222][ T2021] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=257 sclass=netlink_route_socket pid=2021 comm=syz.2.332
[   86.844114][ T2023] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=257 sclass=netlink_route_socket pid=2023 comm=syz.2.332
[   86.954665][ T2030] netlink: 'syz.5.334': attribute type 4 has an invalid length.
[   86.966873][   T24] audit: type=1400 audit(1791090546.690:662): avc:  denied  { read write } for  pid=2028 comm="syz.5.334" name="vhost-vsock" dev="devtmpfs" ino=262 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[   86.991434][   T24] audit: type=1400 audit(1791090546.690:663): avc:  denied  { open } for  pid=2028 comm="syz.5.334" path="/dev/vhost-vsock" dev="devtmpfs" ino=262 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[   87.016485][   T24] audit: type=1400 audit(1791090546.690:664): avc:  denied  { ioctl } for  pid=2028 comm="syz.5.334" path="/dev/vhost-vsock" dev="devtmpfs" ino=262 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[   87.137679][  T585] usb 3-1: new full-speed USB device number 19 using dummy_hcd
[   87.173524][   T24] audit: type=1400 audit(1791090546.900:665): avc:  denied  { ioctl } for  pid=2035 comm="syz.5.335" path="socket:[20384]" dev="sockfs" ino=20384 ioctlcmd=0x5841 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[   87.204835][   T24] audit: type=1400 audit(1791090546.930:666): avc:  denied  { name_bind } for  pid=2035 comm="syz.5.335" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1
[   87.267578][ T2045] binder: 2044:2045 ioctl 8955 200000000400 returned -22
[   87.367789][ T2045] binder: 2044:2045 ioctl c0306201 200000001640 returned -14
[   87.379322][ T2058] netlink: 'syz.3.342': attribute type 1 has an invalid length.
[   87.396021][ T2058] netlink: 8 bytes leftover after parsing attributes in process `syz.3.342'.
[   87.424996][ T2054] bridge0: port 2(bridge_slave_1) entered disabled state
[   87.432221][ T2054] bridge0: port 1(bridge_slave_0) entered disabled state
[   87.444602][  T586] usb 7-1: USB disconnect, device number 8
[   87.557969][  T585] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   87.568507][  T585] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64
[   88.476463][  T585] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[   88.527502][ T2068] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[   88.611073][  T330] udevd[330]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   88.737729][  T585] usb 3-1: New USB device found, idVendor=0582, idProduct=0145, bcdDevice= 0.40
[   88.758227][  T585] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   88.768541][  T585] usb 3-1: Product: syz
[   88.772859][  T585] usb 3-1: Manufacturer: syz
[   88.785482][  T585] usb 3-1: SerialNumber: syz
[   88.807723][ T2027] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[   88.863478][ T2067] FAT-fs (loop6): Unrecognized mount option "time_offset=0x<00000000000048b" or missing value
[   89.029265][ T2027] udc-core: couldn't find an available UDC or it's busy
[   89.036368][ T2027] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[   89.122126][ T2067] EXT4-fs (loop6): Unrecognized mount option "mb_optimize_scan=0x0000000000000001" or missing value
[   89.139903][ T2102] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2102 comm=syz.0.352
[   89.158024][    C0] ==================================================================
[   89.166173][    C0] BUG: KASAN: use-after-free in rcu_cblist_dequeue+0x6c/0xb0
[   89.173577][    C0] Read of size 8 at addr ffff888111fad590 by task ksoftirqd/0/12
[   89.181283][    C0] 
[   89.183621][    C0] CPU: 0 PID: 12 Comm: ksoftirqd/0 Not tainted syzkaller #0
[   89.190930][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[   89.201011][    C0] Call Trace:
[   89.204314][    C0]  __dump_stack+0x21/0x24
[   89.208675][    C0]  dump_stack_lvl+0x1a7/0x208
[   89.213358][    C0]  ? show_regs_print_info+0x18/0x18
[   89.218576][    C0]  ? thaw_kernel_threads+0x220/0x220
[   89.223881][    C0]  print_address_description+0x7f/0x2c0
[   89.229438][    C0]  ? rcu_cblist_dequeue+0x6c/0xb0
[   89.234464][    C0]  kasan_report+0x100/0x140
[   89.238976][    C0]  ? rcu_cblist_dequeue+0x6c/0xb0
[   89.244005][    C0]  __asan_report_load8_noabort+0x14/0x20
[   89.249640][    C0]  rcu_cblist_dequeue+0x6c/0xb0
[   89.254501][    C0]  rcu_do_batch+0x448/0xaf0
[   89.259011][    C0]  ? local_bh_enable+0x20/0x20
[   89.263783][    C0]  ? __kasan_check_write+0x14/0x20
[   89.268922][    C0]  ? rcu_report_qs_rnp+0x2bc/0x390
[   89.274047][    C0]  rcu_core+0x50a/0xca0
[   89.278234][    C0]  ? rcu_cpu_kthread_park+0x90/0x90
[   89.283441][    C0]  ? __this_cpu_preempt_check+0x13/0x20
[   89.288988][    C0]  ? rcu_softirq_qs+0xd5/0x1d0
[   89.293750][    C0]  ? rcu_get_gp_kthreads_prio+0x10/0x10
[   89.299298][    C0]  rcu_core_si+0x9/0x10
[   89.303458][    C0]  __do_softirq+0x255/0x563
[   89.307964][    C0]  ? ksoftirqd_should_run+0x20/0x20
[   89.313170][    C0]  run_ksoftirqd+0x23/0x30
[   89.317621][    C0]  smpboot_thread_fn+0x464/0x820
[   89.322564][    C0]  kthread+0x324/0x3b0
[   89.326632][    C0]  ? cpu_report_death+0x1b0/0x1b0
[   89.331653][    C0]  ? kthread_blkcg+0xd0/0xd0
[   89.336255][    C0]  ret_from_fork+0x1f/0x30
[   89.340670][    C0] 
[   89.343007][    C0] Allocated by task 2089:
[   89.347357][    C0]  __kasan_kmalloc+0xd4/0x100
[   89.352043][    C0]  __kmalloc+0x19f/0x330
[   89.356288][    C0]  l2tp_session_create+0x39/0xb60
[   89.361317][    C0]  pppol2tp_connect+0xbf5/0x1640
[   89.366268][    C0]  __sys_connect+0x3ce/0x450
[   89.370960][    C0]  __x64_sys_connect+0x7a/0x90
[   89.375727][    C0]  do_syscall_64+0x31/0x40
[   89.380164][    C0]  entry_SYSCALL_64_after_hwframe+0x61/0xcb
[   89.386050][    C0] 
[   89.388383][    C0] Freed by task 9:
[   89.392105][    C0]  kasan_set_track+0x4a/0x70
[   89.396698][    C0]  kasan_set_free_info+0x23/0x40
[   89.401642][    C0]  ____kasan_slab_free+0x125/0x160
[   89.406752][    C0]  __kasan_slab_free+0x11/0x20
[   89.411518][    C0]  slab_free_freelist_hook+0xc5/0x190
[   89.416902][    C0]  kfree+0xc0/0x270
[   89.420714][    C0]  l2tp_session_put+0xb2/0x1a0
[   89.425475][    C0]  l2tp_session_delete+0x3a9/0x4a0
[   89.430594][    C0]  l2tp_tunnel_del_work+0x180/0x3d0
[   89.435829][    C0]  process_one_work+0x6fd/0xbc0
[   89.440698][    C0]  worker_thread+0xa8e/0x13c0
[   89.445377][    C0]  kthread+0x324/0x3b0
[   89.449443][    C0]  ret_from_fork+0x1f/0x30
[   89.453858][    C0] 
[   89.456192][    C0] Last potentially related work creation:
[   89.461953][    C0]  kasan_save_stack+0x3a/0x60
[   89.466632][    C0]  __kasan_record_aux_stack+0xd2/0x100
[   89.472102][    C0]  kasan_record_aux_stack_noalloc+0xb/0x10
[   89.477913][    C0]  call_rcu+0x11a/0x1090
[   89.482158][    C0]  pppol2tp_release+0x1e3/0x2b0
[   89.487007][    C0]  sock_close+0xb8/0x200
[   89.491270][    C0]  __fput+0x2dc/0x730
[   89.495282][    C0]  ____fput+0x15/0x20
[   89.499265][    C0]  task_work_run+0x127/0x190
[   89.503866][    C0]  exit_to_user_mode_loop+0xcb/0xe0
[   89.509069][    C0]  exit_to_user_mode_prepare+0x76/0xa0
[   89.514529][    C0]  syscall_exit_to_user_mode+0x1d/0x40
[   89.519990][    C0]  do_syscall_64+0x3d/0x40
[   89.524407][    C0]  entry_SYSCALL_64_after_hwframe+0x61/0xcb
[   89.530308][    C0] 
[   89.532646][    C0] The buggy address belongs to the object at ffff888111fad400
[   89.532646][    C0]  which belongs to the cache kmalloc-512 of size 512
[   89.546705][    C0] The buggy address is located 400 bytes inside of
[   89.546705][    C0]  512-byte region [ffff888111fad400, ffff888111fad600)
[   89.559984][    C0] The buggy address belongs to the page:
[   89.565659][    C0] page:ffffea000447eb00 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888111fadc00 pfn:0x111fac
[   89.577199][    C0] head:ffffea000447eb00 order:2 compound_mapcount:0 compound_pincount:0
[   89.585527][    C0] flags: 0x4000000000010200(slab|head)
[   89.591034][    C0] raw: 4000000000010200 ffffea0004b86600 0000000600000006 ffff888100043080
[   89.599713][    C0] raw: ffff888111fadc00 000000008010000f 00000001ffffffff 0000000000000000
[   89.608294][    C0] page dumped because: kasan: bad access detected
[   89.614724][    C0] page_owner tracks the page as allocated
[   89.620468][    C0] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 83, ts 31905364650, free_ts 31883425041
[   89.640781][    C0]  prep_new_page+0x176/0x190
[   89.645374][    C0]  get_page_from_freelist+0x225f/0x23f0
[   89.650955][    C0]  __alloc_pages_nodemask+0x29a/0x640
[   89.656330][    C0]  new_slab+0x84/0x3f0
[   89.660405][    C0]  ___slab_alloc+0x2f8/0x4c0
[   89.664994][    C0]  __slab_alloc+0x63/0xa0
[   89.669327][    C0]  __kmalloc_track_caller+0x1e4/0x310
[   89.674704][    C0]  __alloc_skb+0xdc/0x520
[   89.679038][    C0]  alloc_skb_with_frags+0xa3/0x560
[   89.684170][    C0]  sock_alloc_send_pskb+0x87f/0x9a0
[   89.689384][    C0]  unix_dgram_sendmsg+0x6f3/0x18f0
[   89.694502][    C0]  __sys_sendto+0x467/0x620
[   89.699007][    C0]  __x64_sys_sendto+0xe5/0x100
[   89.703776][    C0]  do_syscall_64+0x31/0x40
[   89.708200][    C0]  entry_SYSCALL_64_after_hwframe+0x61/0xcb
[   89.714111][    C0] page last free stack trace:
[   89.718793][    C0]  __free_pages_ok+0x80b/0x830
[   89.723573][    C0]  __free_pages+0xd8/0x390
[   89.727995][    C0]  free_pages+0x82/0x90
[   89.732160][    C0]  __stack_depot_save+0x492/0x4c0
[   89.737187][    C0]  kasan_set_track+0x5b/0x70
[   89.741777][    C0]  kasan_set_free_info+0x23/0x40
[   89.746713][    C0]  ____kasan_slab_free+0x125/0x160
[   89.751836][    C0]  __kasan_slab_free+0x11/0x20
[   89.756605][    C0]  slab_free_freelist_hook+0xc5/0x190
[   89.761989][    C0]  kfree+0xc0/0x270
[   89.765818][    C0]  usb_hcd_submit_urb+0x1079/0x17a0
[   89.771036][    C0]  usb_submit_urb+0xfcc/0x14e0
[   89.775814][    C0]  usb_start_wait_urb+0x123/0x380
[   89.780837][    C0]  usb_control_msg+0x243/0x3f0
[   89.785620][    C0]  hub_ext_port_status+0xf2/0x6a0
[   89.790645][    C0]  hub_port_debounce+0x52/0x250
[   89.795583][    C0] 
[   89.797917][    C0] Memory state around the buggy address:
[   89.803554][    C0]  ffff888111fad480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   89.811636][    C0]  ffff888111fad500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   89.819708][    C0] >ffff888111fad580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   89.827772][    C0]                          ^
[   89.832385][    C0]  ffff888111fad600: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[   89.840558][    C0]  ffff888111fad680: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[   89.848634][    C0] ==================================================================
[   89.856699][    C0] Disabling lock debugging due to kernel taint
[   89.877728][  T585] usb 3-1: MIDIStreaming interface descriptor not found
[   89.888791][  T330] print_req_error: 18 callbacks suppressed
[   89.888810][  T330] blk_update_request: I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0
[   89.898616][  T334] blk_update_request: I/O error, dev loop5, sector 8 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0
[   89.917219][  T330] blk_update_request: I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   89.917247][  T330] buffer_io_error: 14 callbacks suppressed
[   89.917280][  T330] Buffer I/O error on dev loop5p1, logical block 0, async page read
[   89.949290][  T585] usb 3-1: USB disconnect, device number 19
[   89.959162][  T330] blk_update_request: I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   89.971853][  T330] Buffer I/O error on dev loop5p1, logical block 0, async page read
[   89.981379][  T330] blk_update_request: I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   89.992971][  T334] blk_update_request: I/O error, dev loop5, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   90.003898][  T330] Buffer I/O error on dev loop5p1, logical block 0, async page read
[   90.004207][  T330] blk_update_request: I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   90.012698][  T334] Buffer I/O error on dev loop5p4, logical block 1, async page read
[   90.024151][  T330] Buffer I/O error on dev loop5p1, logical block 0, async page read
[   90.039071][  T330] blk_update_request: I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   90.049973][  T330] Buffer I/O error on dev loop5p1, logical block 0, async page read