last executing test programs:

8m34.062349575s ago: executing program 2 (id=34):
r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
bind$unix(0xffffffffffffffff, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000000280)=ANY=[], 0x8, 0x2ee, &(0x7f0000000a00)="$eJzs3E1PE10UwPHTF0pbAmXx5DGaGG50o5sJVNdKYyAxNpEgNb4kJgNMtenYkpkGU2NEV26NH8IFYcmORPkCbNzpxo07NiYuZGEc0+kMhTKAlNIi/H8JmcPcezr3zgzk3AnD+r23T4t5W8vrFQnHlYRERDZEBiUsvpC3DbtxTLZ6JZf7fnw+f+f+g1uZbHZsUqnxzNSVtFJqYOjDsxcJr9tKr6wNPlr/nv629v/a2fXfU08KtirYqlSuKF1Nl79W9GnTULMFu6gpNWEaum2oQsk2rHp7ud6eN8tzc1Wll2b7k3OWYdtKL1VV0aiqSllVrKqKPNYLJaVpmupPCvaTW5yc1DMtJs+0eTA4IpaV0SMiktjRklvsyoAAAEBXNdf/YVHtrP+XLqxW+u4uD3j1/0osqP6/+qX+Wdvq/7iIBNb//vED63/9YPX/zorodDlU/Y/jYSi2Y1eoEdYarYye9H5+Xa8fLg27AfU/AAAAAAAAAAAAAAAAAAAAAAD/gg3HSTmOk/K3/leviMRFxP8+IDUiIte7MGS00SGuP06Axot70QER8818bj5X33odVkXEFEOGJSW/3PvBU4v9N49UzaB8NBe8/IX5XMRtyeSl4OaPSKpHmvMdZ/xmdmxE1W3P75Hk1vy0pOS/4Px0YH5MLl3ckq9JSj7NSFlMmXXH0ch/OaLUjdvZpvyE2w8AAAAAgJNAU5sC1++atlt7PX9zfd38fCDSWF8PB67Po3Iu2t25AwAAAABwWtjV50XdNA1rjyAh+/dpPYge0Sf7M/zbLP9vGY5upnsE/sG3NcW9nW0/LaEDnJZdgrC0kjVUm4067Cz8x0a79ZGJ0c5fQTc48+79z1bS44FX+dpyfJ+Zth5E9r4Bejr2CwgAAABAxzSKfn/PaHcHBAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAKdSJ/47W7TkCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAx8WfAAAA///K5AOj")
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events.local\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000040), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
fdatasync(r2)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)

8m33.519161852s ago: executing program 0 (id=39):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_add_memb(r0, 0x107, 0x1, 0x0, 0x0)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4)
bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[], 0x50)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0), 0xc)
ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, &(0x7f0000000100)={0x6, 0xffffffff, 0x9, 0x4, 0xfb7})
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'veth1_to_bond\x00', <r2=>0x0})
setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000000)={r2, 0x1, 0x6, @remote}, 0x10)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x0, 0xfff1}, {0x0, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0xc015}, 0x0)

8m33.24225578s ago: executing program 0 (id=41):
close(0xffffffffffffffff)
socket$inet6(0xa, 0x2, 0x0)
socket$tipc(0x1e, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[], 0x50)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x4]}, 0x8, 0x80000)
read$FUSE(r1, &(0x7f0000003b80)={0x2020}, 0x2020)
timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21}, &(0x7f0000bbdffc)=<r2=>0x0)
timer_settime(r2, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)

8m32.62127906s ago: executing program 2 (id=46):
r0 = fsopen(0x0, 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
r1 = getpgid(0x0)
r2 = syz_pidfd_open(r1, 0x0)
r3 = pidfd_getfd(r2, r2, 0x0)
setns(r3, 0x66020000)
fchdir(0xffffffffffffffff)
r4 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
openat$dir(0xffffffffffffff9c, 0x0, 0xc0040, 0x2c)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000006100)='cmdline\x00')

8m32.527657862s ago: executing program 2 (id=47):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0)
getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32=r2, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r4)
getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000900)=@delchain={0x6c, 0x2c, 0xf31, 0x0, 0x2000, {0x0, 0x0, 0x0, r5, {}, {0xfff2, 0xffff}, {0xffff, 0x1}}, [@filter_kind_options=@f_u32={{0x8}, {0x40, 0x2, [@TCA_U32_SEL={0x34, 0x5, {0xa, 0xb, 0x2, 0x6, 0x80, 0x7, 0x2, 0x2, [{0x7, 0x1, 0x9, 0x7}, {0xb, 0x2, 0x6, 0x8}]}}, @TCA_U32_CLASSID={0x8, 0x1, {0xffff, 0x14}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4008844}, 0x4010)

8m32.414883796s ago: executing program 2 (id=48):
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000140)='./file2\x00', 0x8, &(0x7f0000000080)={[{@nodioread_nolock}, {@sb={'sb', 0x3d, 0x1}}]}, 0x4, 0x523, &(0x7f00000018c0)="$eJzs3cFvG1kZAPBvnLhJs+mmC3sABGxZFgqq6iTubrTqhfYCQlUlRMWJQxsSN4pi11Hsiib0kB65V6ISJ+A/4MYBqScO3LjBjUs5IBWoQA0SB6MZT1I3sZNAnbiJfz9pMvPeTP29F/e953mR5wUwtC5ExGZEnImIOxExlecn+RbX2lt63csXDxe2XjxcSKLVuvX3JDuf5kXHv0m9k7/meER8/zsRP0r2xm2sb6zMV6uVtTw93aytTjfWNy4vF/Kc8tzs3MynVz4p962uH9R+/fzbyzd+8NvffOnZHza/+ZO0WJM/PZed66xHP7WrXozJjrzRiLhxFMEGZDT//8PJk7a2z0TEh1n7n4qR7N0EAE6zVmsqWlOdaQDgtEvv/ycjKZTyuYDJKBRKpfYc3vsxUajWG81LU/X79xYjm8M6H8XC3eVqZSafKzwfxSRNz2bHr9Ll19KPK1ci4r2IeDx2NjtfWqhXFwf5wQcAhtg7u8b/f421x/9OxUEVDgA4OuODLgAAcOyM/wAwfIz/ADB8/ofx37cDAeCUcP8PAMPH+A8Aw+fA8f/R8ZQDADgW37t5M91aW+3nX28/qfvyYqWxUqrdXygt1NdWS0v1+lK1UlpotQ56vWq9vjr78U6ysb5xu1a/f695e7k2v1S5XfEsAQAYvPc+ePqndNDfvHo226JjLQdjNZxuhUEXABiYkUEXABgY3+eB4XWIe3zTAHDKdVmity2fIEh6XfDE4q9wUl38vPl/GFZvMv9v7gBOtv9v/v9bfS8HcPyM4TC8Wq3Emv8AMGTM8QM9//6f6/mIkCf9LwsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACcFJPZlhRK2Vrgm+nPQqkUcS4izkcxubtcrcxExLsR8cex4lianh10oQGAN1T4a5Kv/3Vx6qPJ3WfPJP8ey/YR8eOf3/rZg/lmc202zf/HTn7zSZp/trlWPjOICgAAna7tzcrG73K+77iRf/ni4cL2dpxFfH69vbhoGncr39pnRmM0249HMSIm/pnk6bb088pIH+JvPoqIz23XfzwedESYzOZA2iuf7o6fxj7X9/idv//d8Quv1beQnUv3xex38dnYVTjgQE+vt/vJvO2lTTxvf4W4kO27t//xrId6c2n/lzbXrT39X2Gn/xvZEz/J2vyFnfT+JXn+8e++uyezNdU+9yjiC6Pd4ic78ZPu/W/xo0PW8c9f/PKHvc61fhFxsWv9t1ekrmXd7HSztjrdWN+4vFybX6osVe6Vy3OzczOfXvmkPJ3NUbd//r5bjL9dvfRur/hp/Sd6xB/fv/7xtUPW/5f/ufPDr+wT/xtf7f7+v79P/HRM/Poh489PXOu5fHcaf7FH/Q94/+PSIeM/+8vG4iEvBQCOQWN9Y2W+Wq2sHXCQftY86BoHhz9I7+3fgmJkB7EZ0a8XzCYlIqLrNekn6rejykd1kAws+q/6/YKD7pmAo/aq0Q+6JAAAAAAAAAAAAAAAQC+N9Y2Vse7f1urbwaDrCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwOn13wAAAP//KHnENg==")
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x80001)
mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks=5'])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
ftruncate(r1, 0x8008976)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r1, 0x0)
open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x715})
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4})
ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000080)={&(0x7f00006c6000/0x400000)=nil, &(0x7f000018b000/0x3000)=nil, 0x400000, 0x0, 0x6040000})

8m32.169668463s ago: executing program 2 (id=50):
r0 = epoll_create1(0x0)
r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000040)='GPL\x00'}, 0x80)
r3 = epoll_create1(0x0)
r4 = fcntl$dupfd(r3, 0x2, 0xffffffffffffffff)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={@cgroup=r4, r2, 0x11, 0x0, r4}, 0x14)
bpf$BPF_PROG_ATTACH(0x9, &(0x7f0000000140)={@cgroup=r1, r2, 0x11, 0x0, r1}, 0x11)
r5 = epoll_create(0x6)
fcntl$addseals(r5, 0x409, 0xc)
ftruncate(0xffffffffffffffff, 0x81)
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000800)='./file1\x00', 0x1000080, &(0x7f00000005c0)=ANY=[@ANYRES8=0x0, @ANYBLOB="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", @ANYRESOCT=0x0, @ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRESOCT], 0x1, 0x339, &(0x7f0000000080)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000c80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x441, 0x104)

8m31.781878435s ago: executing program 0 (id=54):
mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', &(0x7f0000000300), 0x4800, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8])
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = socket$inet6(0xa, 0x80002, 0x0)
connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e23, 0x8, @loopback}, 0x1c)
setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8)
sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00)

8m31.531917032s ago: executing program 2 (id=56):
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/zoneinfo\x00', 0x0, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r2=>0x0)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0)
open(0x0, 0x0, 0x61)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf0667000)
sendfile(r0, r1, 0x0, 0x20200023896)
ioctl$TCSBRKP(r0, 0x5425, 0x3)
syz_emit_ethernet(0x16, 0x0, 0x0)

8m31.487107764s ago: executing program 32 (id=56):
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/zoneinfo\x00', 0x0, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r2=>0x0)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0)
open(0x0, 0x0, 0x61)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf0667000)
sendfile(r0, r1, 0x0, 0x20200023896)
ioctl$TCSBRKP(r0, 0x5425, 0x3)
syz_emit_ethernet(0x16, 0x0, 0x0)

8m31.376229507s ago: executing program 0 (id=59):
ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0)
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000300)='./file1\x00', 0xa00008, &(0x7f0000000000), 0x1, 0x7c8, &(0x7f0000001280)="$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")
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
getsockopt$inet6_int(r0, 0x29, 0x24, 0x0, 0x0)
futex(0x0, 0x86, 0x2, 0x0, 0x0, 0xfffffffc)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r1, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_open_dev$usbfs(0x0, 0x202, 0x82)
syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0)

8m30.720380757s ago: executing program 0 (id=62):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xffffd000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e25}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_GET(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, 0x1, 0x2, 0x101, 0x0, 0x0, {0x5, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x24000820)

8m30.500114584s ago: executing program 0 (id=65):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)={0xd})
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x4, 0x7, 0x3, 0x180, 0x2, 0xc, 0xf1, 0xfab3, 0x3, 0x5, 0x0, 0xd, 0x0, 0x6, 0x0, 0xbd9], 0x1000, 0x43102})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x1f, 0xc, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000300)={[0x7, 0x1000000000, 0x0, 0x200000000000043, 0x7, 0x0, 0x2004cb, 0x0, 0xa7e, 0x800000068ff, 0x7, 0x8000000009, 0x803, 0x0, 0x9], 0x8003000, 0x202})
ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x3000, 0x1, 0x8, 0x8, 0xb, 0xe6, 0x40, 0x0, 0x0, 0x81, 0x80}, {0x5000, 0x3000, 0x10, 0x0, 0x42, 0x5, 0x3a, 0x3, 0x36, 0xfe, 0x2, 0x87}, {0x0, 0xdddd0000, 0xe, 0x5, 0x3, 0x1, 0x0, 0x9, 0x1, 0x4, 0x5, 0x8}, {0x1, 0xeeee0000, 0x19, 0x6, 0x2, 0x42, 0x0, 0xff, 0x3, 0x7, 0x6}, {0xf000, 0xd000, 0xf, 0x3, 0x7, 0x7, 0xa9, 0x8, 0x9, 0x9, 0xfa, 0x97}, {0xeeefa000, 0xdddd0000, 0xd, 0xa0, 0x1, 0x8, 0x1, 0xa0, 0x82, 0x30, 0x1, 0x7}, {0x3000, 0xb000, 0xf, 0x5, 0x7, 0x5, 0x7, 0x3, 0x8, 0x81, 0x40, 0x70}, {0x7000, 0x4000, 0xa, 0x5, 0xcd, 0x7, 0xb, 0x9, 0x2, 0x5, 0xb0, 0x81}, {0xeeef9000, 0x30}, {0x9000, 0x9}, 0x80000031, 0x0, 0xc000, 0x2024, 0x800000a, 0xc001, 0x100000, [0xe5b5, 0x4, 0x3, 0x8]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

8m30.406904747s ago: executing program 33 (id=65):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)={0xd})
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x4, 0x7, 0x3, 0x180, 0x2, 0xc, 0xf1, 0xfab3, 0x3, 0x5, 0x0, 0xd, 0x0, 0x6, 0x0, 0xbd9], 0x1000, 0x43102})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x1f, 0xc, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000300)={[0x7, 0x1000000000, 0x0, 0x200000000000043, 0x7, 0x0, 0x2004cb, 0x0, 0xa7e, 0x800000068ff, 0x7, 0x8000000009, 0x803, 0x0, 0x9], 0x8003000, 0x202})
ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x3000, 0x1, 0x8, 0x8, 0xb, 0xe6, 0x40, 0x0, 0x0, 0x81, 0x80}, {0x5000, 0x3000, 0x10, 0x0, 0x42, 0x5, 0x3a, 0x3, 0x36, 0xfe, 0x2, 0x87}, {0x0, 0xdddd0000, 0xe, 0x5, 0x3, 0x1, 0x0, 0x9, 0x1, 0x4, 0x5, 0x8}, {0x1, 0xeeee0000, 0x19, 0x6, 0x2, 0x42, 0x0, 0xff, 0x3, 0x7, 0x6}, {0xf000, 0xd000, 0xf, 0x3, 0x7, 0x7, 0xa9, 0x8, 0x9, 0x9, 0xfa, 0x97}, {0xeeefa000, 0xdddd0000, 0xd, 0xa0, 0x1, 0x8, 0x1, 0xa0, 0x82, 0x30, 0x1, 0x7}, {0x3000, 0xb000, 0xf, 0x5, 0x7, 0x5, 0x7, 0x3, 0x8, 0x81, 0x40, 0x70}, {0x7000, 0x4000, 0xa, 0x5, 0xcd, 0x7, 0xb, 0x9, 0x2, 0x5, 0xb0, 0x81}, {0xeeef9000, 0x30}, {0x9000, 0x9}, 0x80000031, 0x0, 0xc000, 0x2024, 0x800000a, 0xc001, 0x100000, [0xe5b5, 0x4, 0x3, 0x8]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

8m26.180581986s ago: executing program 4 (id=95):
epoll_create1(0x0)
socket$nl_generic(0x10, 0x3, 0x10)
memfd_create(0x0, 0x3)
fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000180)='system.posix_acl_access\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB="0200000001000200d8000000040000000000fdff1000010000000000200004000000"], 0x24, 0x1)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
epoll_create1(0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)
syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x2800000, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x2, 0x5505, &(0x7f0000006a00)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183b41, 0x12b)
ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f0000000340)=0xfffffff9)
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x9, 0x4})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.kill\x00', 0x275a, 0x0)

8m25.862493096s ago: executing program 4 (id=96):
keyctl$get_keyring_id(0x0, 0x0, 0x802)
socket$nl_route(0x10, 0x3, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$BTRFS_IOC_SUBVOL_CREATE(0xffffffffffffffff, 0x5000940e, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x200, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet(r1, &(0x7f0000004880)=[{{&(0x7f0000000040)={0x2, 0x4e23, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_retopts={{0x34, 0x0, 0x7, {[@rr={0x7, 0xf, 0xa, [@multicast2, @local, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp_addr={0x44, 0x14, 0x6, 0x1, 0x0, [{@broadcast, 0x401}, {@loopback}]}]}}}], 0x38}}], 0x1, 0x4000080)

8m25.335708712s ago: executing program 4 (id=103):
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x23f}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)={0x450303, 0x8, 0x11}, 0x18)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x2c, 0x18, 0x229, 0x70bd25, 0x0, {0xa}, [@typed={0x8, 0x800, 0x0, 0x0, @u32}, @nested={0x10, 0x8, 0x0, 0x1, [@typed={0x8, 0x3f00, 0x0, 0x0, @fd}, @typed={0x4}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20048001}, 0x0)

8m22.615420005s ago: executing program 4 (id=115):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000000c0)=@ipv6_newroute={0x1c, 0x18, 0x111, 0xffffffff, 0x0, {0xa, 0x60, 0x0, 0x0, 0xff, 0x0, 0xff, 0x6}}, 0x1c}}, 0x0)
syz_mount_image$exfat(&(0x7f0000000040), &(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x880, &(0x7f00000005c0)=ANY=[@ANYBLOB='time_offset=0x0000000000000006,iocharset=iso8859-13,utf8,allow_utime=00000000000000000000003,discard,uid=', @ANYRESHEX=0x0, @ANYRES8=0x0], 0x1, 0x1548, &(0x7f0000003300)="$eJzs3AuYTlXbOPD7XmvtMSSeJjkMa6178ySHRZLkkCSHJEmSJKfklCZ5JSExhCQNSUgOQxJDSA4Tk8b5fD4kJEmTJCE5Jet/Tbi8vdW/vq++1/e9c/+ua1+z7mfve+21n3s/z7P2npnnm65DazauVa0hEcFfghd+JAJALAAMBIDcABAAQLm4cnGZ67NLTPxrO2F/rwdTrvQI2JXE9c/auP5ZG9c/a+P6Z21c/6yN65+1cf2zNq4/Y1nZpmkFruEl6y58////uNi/ksyf//9BMkqN/WJNqeu6AcT8ia2zA9c/y+P6/8cK/sxGXP+sjeufVf2laSP7P+DpP7ENv/6zgmy/u4brn7Vx/RnLyq70/ec/vyAA/P39QuR/2XNwJPuFwvyb9nelzz/GGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY1nDaX+ZAoBL7Ss9LsYYY4wxxhhjjP19fLYrPQLGGGOMMcYYY4z9z0MQIEFBADGQDWIhO+QAAQBXQy7IDRG4BuLgWsgD10FeyAf5oQDEQ0EoBBoMWCAIoTAUgShcD0XhBigGxaEElAQHpaA03Ahl4CYoCzdDObgFysOtUAEqQiWoDLdBFbgdqsIdUA3uhOpQA2pCLbgLasPdUAfugbpwL9SD+6A+3A8N4AFoCA9CI3gIGsPD0AQegabQDJpDC2j5+/ntEOB38p+DnvA89ILekAh9oC+8AP2gPwyAF2EgvASD4GUYDK9AEgyBofAqDIPXYDi8DiNgJIyCN2A0vAljYCyMg/GQDBNgIrwFk+BtmAzvwBSYCikwDabDuzADZsIseA9mw/swB+bCPJgPqfABLICFkAYfwiL4CNJhMSyBpbAMlsMKWAmrYDWsgbWwDtbDBtgIm2AzbIGtsA22ww74GHbCJ7ALdsMe+BT2wmf/xfxT/5LfDQEBBQpUqDAGYzAWYzEH5sCcmBNzYS6MYATjMA7zYB7Mi3kxP+bHeIzHQlgIDRokJCyMhTGKUSyKRbEYFsMSWAIdOiyNpbEM3oRlsSyWw3JYHstjBayIFbEyVsYqWAWrYlWshtWwOlbHmlgT78K7sA/WwTpYF+tiPax36fYUNsSG2AgbYWNsjE2wCTbFptgcm2NLbImtsBW2xtbYFttie2yPHbADJmACdsSO2Ak7YWfsjF2wC3bFrtgNu2P3jOeyAT6Pz2NvrC76YF/si/0wKdsAfBFfxJdwEL6ML+MrmIRDcCi+iq/iazgcT+IIHImjcBRWEW/iGByLJMZjMibjRJyIk3BS5ukG7+BUTMFpOB2n4wyciTPxPZyN7+P7OBfn4nxMxVRcgAsxDdNwEZ7CdFyMS3ApLsPluAxX4ipciWtwLa7B9bgeN+JG3IybcStuxe24HT9GBYCf4G7cjUm4F/fiPtyH+3E/HsADmIEZeBAP4iE8hIfxMB7BI3gUj+FxPIYn8ASexFN4Gk/jWTyL5/CZ+K8afVx8dRKITEooESNiRKyIFTlEDpFT5BS5RC4RERERJ+JEHpFH5BV5RX6RX8SLeFFIFBJGGEEijAEAERVRUVQUFcVEMVFClBBOOFFalBZlRBlRVpQV5cQtory4VVQQFUUbV1lUFlVEW1dV3CGqiWqiuqghaopaopaoLWqLOqKOqCvqinqinqgv7hcNRB8cgA+KzMo0FkOwiRiKTUUzIS++g7USw7G1aCPainZiJI7ADqKVSxBPio5iDHYS/xBj8WnRRYzHruJZ0U10Fz3Ec6KnaO16id5iMvYRfcVU7Cf6iwHiRTEDa4j3cHb2muIVkSSGiKHiVTEfXxPDxetihBgpRok3so8Wb4oxYqwYJ8aLZDFBTBRviUnibTFZvCOmiKkiRUwT08W7YoaYKWaJ98Rs8b6YI+aKeWK+SBUfiAVioUgTH4pF4iORLhaLJWKpWCaWixVipVglVos1Yq1YJ9aLDWKj2CQ2iy1iq9gmtosd4mOxU3widondYo/4VOwVn4l94nOxX3whDogvRYb4ShwUX4tD4htxWHwrjojvxFFxTBwX34sT4gdxUpwSp8UZcVb8KM6Jn8R54QVIlEJKqWQgY2Q2GSuzyxzyKplTBhef3WtknLxW5pHXybwyn8wvC8h4WVAWkloaaSXJUBaWRWRUXi+LyhtkMVlclpAlpZOlZGl5oywjb5Jl5c2ynLxFlpe3ygqyoqwkK8vbZBV5u4TIhX1UlzVkTVlL3iUT4W5ZR94j68p7ZT15n6wv75cN5AOyoXxQNpIPycbyYdlEPiKbymayuWwhW8pHZSv5mGwt28i2sp1sLx+XHeQTMkE+KTtKf/EUeVp2kc/IrvJZ2U12lz3kT/K89LKX7C2hD8i+8gXZT/aXA2IBQL4kB8mX5WD5ikySQ+RQ+aocJl+Tw+XrcoQcKUfJN+Ro+aYcI8fKcXK8TJYT5ET5lpwk35aT5TtyipwqU+Q0OUAO/LmnWVL+Yf5bv5E/+Oe9b5Sb5Ga5RW6V2+R2uUN+LHfKnXKX3CX3yD1yr9wr98l9cr/cLw/IAzJDZsiD8qA8JA/Jw/KwPCKPyKPymDwjv5cn5A/ypDwlT8kz8qw8K89dfA5AoRJKKqUCFaOyqViVXeVQV6mc6mqVS+VWEXWNist8F1bXqbwqn8qvCqh4VVAVUloZZRWpUBVWRVRUXY8XTxhVQpVUTpVSpdWNF/LVtSrPH+erouoGVUwV/0X+pfEl/s74WqqWqpVqpVqr1qqtaqvaq/aqg+qgElSC6qg6qk6qk+qsOqsuqovqqrqqbqqb6qF6qJ6qp+qleqlElaj6qhdUP9VfDVAvqoHqJTVIDVKD1WCVpJLUUDVUDVPD1HA1XI1QI9QoNUqNVqPVGDVGjVPjVLJKVhPVRDVJTVKT1WQ1RU1RKSpFTVfT1Qw1Q81Ss9RsNVvNUXPUPDVPpapUtUAtUGkqTS1Si1S6WqwWq6VqqVqulquVaqVarVartWqtWq/Wq3S1SW1SW9QWtU1tUzvUDrVT7VS71C61R+1Re9VetU/tU/vVfnVAHVAZKkMdVAfVIXVIHVaH1RF1RB1VR9VxdVydUCfUSXVSnVan1Vl1Vp1T59R5dT5z2heIQAQqUEFMEBPEBrFBjiBHkDPIGeQKcgWRIBLEBXFBnuC6IG+QL8gfFAjig4JBoUAHJrCBuFj0aHB9UDS4ISgWFA9KBCUDF5QKSgc3BmWCm4Kywc1BueCWoHxwa1AhqBhUCioHtwVVgtuDqsEdQbXgzqB6UCOoGdQK7gpqB3cHdYJ7grrBvUG94L6gfnB/0CB4IGgYPBg0Ch4KGgcPB02CR4KmQbOgedAiaPm39u/9yXyPuV66t07UfXRf/YLup/vrAfpFPVC/pAfpl/Vg/YpO0kP0UP2qHqZf08P163qEHqlH6Tf0aP2mHqPH6nF6vE7WE/RE/ZaepN/Wk/U7eoqeqlP0ND1dv6tn6Jl6ln5Pz9bv6zl6rp6n5+tU/YFeoBfqNP2hXqQ/0ul6sV6il+plerleoVfqVXq1XqPX6nV6vQK9UW/Sm/UWvVVv09v1Dv2x3qk/0bv0br1Hf6r36s/0Pv253q+/0Af0lzpDf6UP6q/1If2NPqy/1Uf0d/qoPqaP6+/1Cf2DPqlP6dP6jD6rf9Tn9E/6vPaZk/vMj3ejjDIxJsbEmliTw+QwOU1Ok8vkMhETMXEmzuQxeUxek9fkN/lNvIk3hUwhk4kMmcKmsImaqClqippippgpYUoYZ5wpbUqbMqaMKWvKmnKmnClvypsKpoKpZCqZ28xt5nZzu7nD3GHuNHeaGqaGqWVqmdqmtqlj6pi6pq6pZ+qZ+qa+aWAamIamoWlkGpnGprFpYpqYpqapaW6am5ampWllWpnWprVpa9qa9qa96WA6mASTYDqajqaT6WQ6m86mi+liupquppvpZnqYHqan6Wl6mV4m0SSavqav6Wf6mQFmgBloBppBZpAZbAabJJNkhpqhZpgZZoab4WaEGWlGZU5UzZtmjBlrxpnxJtkkm4lmoplkJpnJZrKZYqaYFJNippvpZoaZYWaZWWa2mW3mmDlmnplnUk2qWWAWmDSTZhaZRSbdpJslZolZZpaZFWaFWWVWmTVmjVkH68wGs8FsMpvMFrPFbDPbzA6zw+w0O80us8vsMXvMXrPXI4DZb/abA+aAyTAZ5qA5aA6ZQ+awOWyOmCPmqDlqjpvj5oQ5YU6ak+a0OW3OmnwXPy+9ibXZbQ57lc1pr7a5bG77r3F+W8DG24K2kNU2r833i9hYa4vZ4raELWmdLWVL2xt/FVewFW0lW9neZqvY223VX8W17d22jr3H1rX32lr2rl/E9ex9tr592DZABLDNbCPbwja2D9sm9hHb1DazzW0L294+bjvYJ2yCfdJ2tE/9Kl5gF9pVdrVdY9faXXa3PW3P2EP2G3vW/mh72d52oH3JDrIv28H2FZtkh/wqHmXfsKPtm3aMHWvH2fG/iqfYqTbFTrPT7bt2hp35qzjVfmBn2zQ7x8618+z8n+PMMaXZD+0i+5FNtwEssUvtMrvcrrArL43V57br7Qa70e60n9gtdqvdZrfbHZcmwna33WM/tXvtZ/ag/drut1/YA/awzbBf/RxnHt9h+609Yr+zR+0xe9x+b0/YH9Sl7Mxj/97+ZM9bb4GQgCQpCiiGslEsZaccdBXlpKspF+WmCF1DcXQt5aHrKC/lo/xUgOKpIBUiTYYsEYVUmIpQlK6nS8MrQSXJUSkqTTdSGbqJytLNVI5uofJ0K1WgilSJKtNtVIVup6p0B1WjO6k61aCaVIvuotp0N9Whe6gu3Uv16D6qT/dTA3qAGtKD1Igeosb0MDWhR6gpNaPm1IJa0qPUih6j1tSG2lI7ak+PUwd6ghLoSepIT1En+gd1pqepCz1DXelZ6kbdqQc9Rz3peepFvSmR+lBfeoH6UX8aQC/SQHqJBtHLNJheoSQaQkPpVRpGr9Fwep1G0EgaRW/QaHqTxtBYGkfjKZkm0ER6iybR2zSZ3qEpNJVSaBpNp3dpBs2kWfQezab3aQ7NpXk0n1LpA1pACymNPqRF9BGl02JaQktpGS2nFbSSVtFqWkNraR2tpw20kTbRZtpCW2kbbacd9DHtpE9oF+2mPfQp7aXPaB99TvvpCzpAX1IGfUUH6Ws6RN/QYfrW96bv6Cgdo+P0PZ2gH+gknaLTdIbO0o90jn6i8+QJQgxFKEMVBmFMmC2MDbOHOcKrwpzh1WGuMHcYCa8J48JrwzzhdWHeMF+YPywQxocFw0KhDk1oQwrDsHBYJIyG14dFwxvCYmHxsERYMnRhqbB0eGNYJrwpLBveHJYLbwnLh7eGFcKK4cP3Vg5vC6uEt4dVwzvCauGdYfWwRlgzrBXeFdYO7w7rhPeEdcN7w7LhfWH98P6wQfhA2DB8MGwUPhQ2Dh8Om4SPhE3DZmHzsEXYMnw0bBU+FrYO24Rtw3Zh+/DxsEP4RJgQPhl2DJ/6ef19C39/fWLYJ+wbvhC+EHp/j5wXnR9NjX4QXRBdGE2LfhhdFP0omh5dHF0SXRpdFl0eXRFdGV0VXR1dE10bXRddH90Q3Rj1vlY2cOiEk065wMW4bC7WZXc53FUup7va5XK5XcRd4+LctS6Pu87ldflcflfAxbuCrpDTzjjryIWusCviou56V9Td4Iq54q6EK+mcK+VKuxaupWvpWrnHXGvXxrV17Vw797h73D3hnnBPuo7uKdfJ/cN1dk+7Lu4Z94x71nVz3V0P95zr6SbkuvCaTHR9XV/Xz/VzA9wAN9ANdIPcIDfYDXZJLskNdUPdMDfMDXfD3Qg3wo1yo9xoN9qNcWPcODfOJbtkN9FNdJPcJDfZTXZT3BSX4lLcdDfdzXAzXJWZF/Yyx81x89w8l+pS3QKXOWdMc4vcIpfu0t0St8Qtc8vcCrfCrXKr3Bq3xq1z69wGt8FtcpvcFrfFbXPb3A63w+10O90un/tCp26v2+f2uf1uvzvgvnQZ7it30H3tDrlv3GH3rTvivnNH3TF33H3vTrgf3El3yp12Z9xZ96M7535y5513yZEJkYmRtyKTIm9HJkfeiUyJTI2kRKZFpkfejcyIzIzMirwXmR15PzInMjcyLzI/khr5ILIgsjCSFvkwsijyUSQ9sjiyJLI0siyyPOJ9wS2hL+yL+Ki/3hf1N/hivrgv4Ut650v50v5GX8bf5Mv6m305f4sv72/1FXxFX8k/4pv6Zr65b+Fb+kd9K/+Yb+3b+La+nW/vH/cd/BM+wT/pO/qnfCf/D9/ZP+27+Gd8V/+s7+a7+x7+Od/TP+97+d4+0ffxff0Lvp/v7wf4F/1A/5If5F/2g/0rPskP8UP9q36Yf80P96/7EX6kHxXzhh996RIZxvtkP8FP9G/5Sf5tP9m/46f4qT7FT/PT/bt+hp/pZ/n3/Gz/vp/j5/p5fr5P9R/4BX6hT/Mf+kX+I5/uF1+6qexX+JV+lV/t1/i1fp1f7zf4jX6T3+y3+K1+m9/ud/iP/U7/id/ld/s9/lO/13/m9/nP/X7/hT/gv/QZ/it/0H/tD/lv/GH/rT/iv/NH/TF/3H/vT/gf/El/yp/2Z/xZ/6M/53/y5/l/1hhjjDHG/pQJl5vil2su3M7v8xs54p827gsAV28tkPHP6zNnlOvyXmj3F/HtIwDwZO+uD15aqldPTEy8uG26hKDIXIBLvwnKFAOX48XQFh6HBGgDZX5z/P1F97P0B/1HbwHI8U85sXA5vtz/5wCY+Bv9P9pu1ILy4em4/0//cwGKFbmckx0ux4uh7c/3V9pA2d8Zf75WfzD+7F8kA7T+p5yccCk+ePHbGjLHXxoeg6cg4RdbMsYYY4wxxhhjF/QXlTpfuv689Befv3V9Hq8u52SDy/EfXZ8zxhhjjDHGGGPsynu6e48nHk1IaNP5v96o+t/K+tONJvA/1TM3frPhPcClRxQA/MUOATIb8t95FJv/LftKuvjS+ddVy874AP53lPLvaFzhNybGGGOMMcbY3+7ypP+Xj6srNSDGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYYywL+nd8ndiVPkbGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGPsSvt/AQAA///BeAKt")
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
mount$incfs(&(0x7f0000000300)='./file0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000280), 0x0, 0x0)
syz_open_dev$usbmon(&(0x7f0000000340), 0x2, 0x420000)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb006}, 0x4)
socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdirat(r1, 0x0, 0x2)
r2 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x80)
getdents(r2, &(0x7f0000001fc0)=""/184, 0x2000208e)

8m21.955491335s ago: executing program 4 (id=120):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000003900), 0x34aa945a513d639, 0x0)
recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
syz_mount_image$vfat(&(0x7f0000000540), &(0x7f0000000000)='./file0\x00', 0xa18c14, &(0x7f0000000080)={[{@uni_xlate}, {@utf8no}, {@shortname_winnt}, {@fat=@codepage={'codepage', 0x3d, '857'}}, {@shortname_lower}, {@shortname_win95}, {@utf8}, {@uni_xlate}, {@uni_xlateno}, {@fat=@check_strict}, {@shortname_mixed}, {@iocharset={'iocharset', 0x3d, 'macinuit'}}, {@utf8no}, {@rodir}]}, 0x81, 0x2a6, &(0x7f0000000180)="$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")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000a40)='memory.swap.current\x00', 0x275a, 0x0)

8m21.8043004s ago: executing program 4 (id=122):
syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, 0x0, 0x4)
r0 = gettid()
timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
signalfd4(0xffffffffffffffff, &(0x7f0000002140)={[0xffffffeffffffff5]}, 0x8, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x8, 0x10001, 0x9, 0x1}, 0x50)
bpf$MAP_GET_NEXT_KEY(0x3, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
recvmmsg(r1, &(0x7f0000004780)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x2, 0x0)
pselect6(0x40, &(0x7f0000000100)={0x0, 0x2, 0x1000, 0x0, 0x801, 0x100}, 0x0, &(0x7f0000000240)={0x1e, 0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0)

8m21.727698712s ago: executing program 34 (id=122):
syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, 0x0, 0x4)
r0 = gettid()
timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
signalfd4(0xffffffffffffffff, &(0x7f0000002140)={[0xffffffeffffffff5]}, 0x8, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x8, 0x10001, 0x9, 0x1}, 0x50)
bpf$MAP_GET_NEXT_KEY(0x3, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
recvmmsg(r1, &(0x7f0000004780)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x2, 0x0)
pselect6(0x40, &(0x7f0000000100)={0x0, 0x2, 0x1000, 0x0, 0x801, 0x100}, 0x0, &(0x7f0000000240)={0x1e, 0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0)

6m55.984346375s ago: executing program 7 (id=352):
getcwd(&(0x7f0000000080)=""/163, 0xa3)
r0 = socket$nl_route(0x10, 0x3, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r1 = userfaultfd(0x1)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x440})
close(0x4)
writev(0xffffffffffffffff, 0x0, 0x0)
sendmsg$netlink(r0, 0x0, 0x0)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x8000, 0x0)
setpriority(0x0, 0x0, 0x2a14b58)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=<r2=>0x0)
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
timer_settime(r2, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0)
ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, 0x0)
r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b40)={r3, 0xe0, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10)
poll(0x0, 0x0, 0x9)

6m55.626367436s ago: executing program 7 (id=355):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r0, &(0x7f0000000140)='\x00', 0x1, 0x2000c046, &(0x7f0000000100)={0xa, 0x2, 0xdffc, @remote, 0x3}, 0x1c)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6)
sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$KVM_GET_SUPPORTED_CPUID(0xffffffffffffffff, 0xc008ae05, 0x0)
write(0xffffffffffffffff, &(0x7f0000000000)="fc0000001a000700ab09", 0xa)
sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x64}, 0x1, 0x0, 0x0, 0x4000080}, 0x20000800)
shutdown(r0, 0x1)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf27, 0x500}, 0x48)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000)
syz_clone(0xe50c1700, 0x0, 0x0, 0x0, 0x0, 0x0)

6m53.663038556s ago: executing program 7 (id=357):
socket$netlink(0x10, 0x3, 0x0)
timer_create(0x5, &(0x7f0000000280)={0x0, 0x1e, 0x2}, &(0x7f0000000340))
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xffffd000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e25}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
getsockopt$IPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x43, &(0x7f00000008c0)={'IDLETIMER\x00'}, &(0x7f0000000900)=0x1e)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$team(&(0x7f0000000080), r4)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@getsadinfo={0x60, 0x23, 0x1, 0x70bd25, 0x25dfdbfb, 0x0, [@encap={0x1c, 0x4, {0xfffffffffffffffd, 0x4e22, 0x4e27, @in6=@remote}}, @lastused={0xc, 0xf, 0x8}, @replay_esn_val={0x24, 0x17, {0x2, 0x70bd2b, 0x70bd2d, 0x70bd27, 0x70bd27, 0x3, [0x7, 0x4]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4001}, 0x4000814)
sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x4000004)
syz_emit_ethernet(0x2a, 0x0, 0x0)

6m52.483072972s ago: executing program 7 (id=359):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
pipe2(&(0x7f0000000000)={<r1=>0xffffffffffffffff}, 0x0)
ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0)
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f00000000c0)={[{@abort}, {@block_validity}, {@grpid}]}, 0x1, 0x77f, &(0x7f0000000840)="$eJzs2M9rXNUXAPDzXib5pk2+nVRdWDcVK7QgnfxqQ1M3rQtBECwUXKkY7CQNmTQlk6LJaopLXbgQVETQblyINAuhG9GA4B+gG/svCKKiCxfCyJtM0pBOpmM76bPp5wN35t575uWcO5O5vDsBPLSezB6SiMGIGImIYnM+jYi+Rq8/orb+uuvjqxezlkS9fv7XJLssro2vXtz4W0nzeSAal8SxiHju+SQeffv2vNXllbmpSqW82BwPL81fHq4urxyfnZ+aKc+UL42NnTo5eWJ0YmKya2sdHY7XvvvqzMu1s1e+HHllYS6rd7AZ27qObkpazBUi4tXdSJaDnuZ6erbMJYUcCwIAoK3sPv+RiHiqcQ9XjJ64dfNWjJvf5locAAAA0BX1w3UAAABgj8v79wcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4M9XoSdQAAAGBPy/v3BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHizXxlcvbrT7mfeXsxExtJ7/erOtRwpRazz3R29E7P8jicKW65KIGOlC/trViHi81fqTRv6h6G+MtudPI+JcnvlrEa93IT88zNay/edMq+9furn/RIvvX2H9snu2sf9dv23/u5W/Z4f973KHOT7/8aV3d8x/NeKJQqv8yWb+ZIf8tQ7zf/PioY92itU/izgarfNvzTW8NH95uLq8cnx2fmqmPFO+NDZ26uTkidGJicnh6dlKeWT9sWWOT7545/t269+/U/4k2r7/73W4/iMHn/360zb5jx1p//m3ev+zmlY7zP/7Dwf+3imW5b+ww/rv9PmvdZj/hRvnbnT4UgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9og0IgYjSUub/TQtlSIGIuKx2J9WFqpLz0wvXLl0IYtFDEVvOj1bKY9ERHF9nGTj0Ub/1nhs23g8Ig5GxPvFfY1x6Y2FyoW8Fw8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMCmgYgYjCQtRUQaEX8W07RUyrsqAAAAoOuG8i4AAAAA2HXO/wAAALD3Of8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACwyw4eXruZRETt9L5Gy/Q1Y725VgbstjTvAoDc9LQPD9yvOoD7r5B3AUBunPGB5A7x/ruIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALD3HD20djOJiNrpfY2W6WvGenOtDNhtad4FALnpybsAIDeFvAsAcuOMDyR3iPffRQQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAvWew0ZK0FBFpo5+mpVLE/yNiKHqT6dlKeSQiDkTET8Xe/2Xj0byLBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoOuqyytzU5VKeVFHp32np/kv0/7FffEfKFXn3js5b0wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOSiurwyN1WplBereVcCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAvtKfk4jI2tHi04Pbo33JX8XGc0S8+fH5D96aWlpaHM3mf9ucX/qwOT+WR/0AAADAdhvn9I1zPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQKeqyytzU5VKeXEXO3mvEQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4d/4JAAD//06onQQ=")
r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000100)='./bus\x00', 0x0, 0x63d014, 0x0)
r3 = creat(&(0x7f00000007c0)='./bus\x00', 0x182)
write$UHID_INPUT(r3, &(0x7f0000000840)={0x8, {"a841df4f20ab6f0f1d84c6aed31e2b2a9dcfa56da084411abf7eccee3435a3da3dad033fd8b34d60278be66106b5aefcf7f7dd1072a9860d0fe785cedee9f4e00c672f79af822aa1cdb059d798e7a27d3dfc2599516141bce02f988edba5efd62144bd3b72c02070e3545729308e83e20dfc3160944c11c085f6d468bee4698031fb0ceabdf64f77364df06bca9c5c28996c4a50d15249d154f2cb4d28e90b3072dccec691025e1bac615a1498dcd88631acccdfb0d79129b6378647ceeab0bf173c4a0f7908439ed40d1117f19595c00c566fcf7ead6e34968b7269f1e1a1a0b3f5ce7e86131c3d4d8a82bcbcc01cd9d8a6816d054010cf1e364c01b9850aa1068837f81b5d45de23b6ce0b49f082ffd97822c2ab07eb23d1e4c89e008950f4e4c5cdf9ebe0e4f9fd46e288871a612b44317d30708c77a25626bc8c3b502ba42e7b39e43635b176abfc6846d45860c720522e6a05c2ea3113c6224f20698fdc4b7c4d6d702635e7164471ff19d99dc3ce9e97044b4ea6c9f9061cc3d9dc1acfe0ed2978555d90cdaff8d1acfa899e563e6fc80bd46a54ca0f53faead5cb1be1599e4f44ce1377d5ab779dab086a12ac6948d3e44bad0808dd330748ddbc05aa601a82896572e42a37afd3a9b95c8e6615be21f19333f900264a2ba93aa01fbbb5a7936e3a84666434f2d9b44eed8c1d2359474e588f39ba01a135478a13e0aebbd8c5fd0c51f9335ef38c6c101b3ddf694c9b015dd472933f8a82139f30b248bc3949da18c60db1a3a5249154692e1428ad5d94d8d1113d98dc74fec088cd8185c6789fee7456fa8adb4f81888da75d81973dcbbff543610c1080f41a9f76090900a24f1575d108b5d975f66e4c942dacf1eaedf1b141f466e232a535bdb3db70d2dd6fb899afce54df68227988d811c6bdfe9b21db6b9fb435c7b095ef6aaabd6de8778efe0c217a692a92d1784859de7e38a0a510cf580444067850f74034f0268446a56b1dec5c345d37d7619e13a7927a16d6773269210b18928d22dcc06122a9dfe8e2aa304e16b6f64597c8b82700f864c08456bb57ff3f029e5a1dfefaf21fd851b6abe51c5bb6cd236399115a87b776d59e7aaf6ae43a5a56c0db541cb35b1409a17347a150a173a934f1bf9f2c08c78786fba43d160f1573f609e209f62be3a7f50f5fc81b9831bedd61a52807347edffe447431d6dd0807932faee6b88f582805d46718da1ccae49d9f50822bc24d560198a3ed7e78757fbf4078f27aead6ced5ab3f3a496bb9c097e8f80dee024dfc2f3b05f5116ca473a42c078d00a234d1d251179b1d7c9b09f6b68bfdebd8ee3a782f1fe89db84bfc615594d62beca8c7daf8e59c75442052eeba0fd2872bcf954b3517f279f83714f1307f01d00acf746644e262f3b8131c2c781a2f2a2e7d4a3cacba8349018bc1617922577644c67838590133f4ab476cb0068647cdd76b865abf881924a49489290efa2bdc111de8b9c9b25f3e8df4b7e526f1133ea4ee4803a29992ccfadb13c8efa766339a434ceeeb2f9717ca5e03ff132d3b51458373e0af1000fd6223449e8b1c7ded0540cfd931a267bd43ed24447298fa82b9ed2d9b9913f19beebbfb97e55b89cb06db1364b33c49110fcddeaed36926500ec3a8df13441caf472c418d186ebe858df1c2522ac5e14492f4321b02ad9fcacb622a14345e271c12963a7f00c08c9f3aee630b81e5f95d932797908e0185c119de5908cf5fc8cf1b79dd05ca2ae2b0f7e36944198af65b9c71bfec03f73cff6c2caadf06f91729a34e0286d6368818a2bc7b565d2723aedcd2040aba57a08f17ead747915d463a6dfb3eade4f7adcb147cd7a3461bbc765b7bf5283db58ca6f2e7941a22eabe78d11b1693a68813bc1d8cd1f234f1b048c33f73dc8117a75e975bc7a2a9432fd61969b820fe0d1f5b29973a1ec6cc6cb7ca8687deb0e6a33564dbdf4a889c87a2189aadff998e4b5696c38fa1e33a64920e97f0ec57858891938d620f08f053582783c3e890dd605234b5b8b83fdb5fb5e00509a3324176f2036cef07c75b9cbe4c9a8761c9e8652f23f467ff7c4d3944e6f633d9cf82eb4fec91effcae6e6372d213e6d809817c7097e7b4054809a83388db11c6fed718e5fef413a54a0f9b63ff1015ebf491f7df343efffcf7a11793c4ac44b912d3226106dc35ab7646c5dcf9d934599f90838d37dec5cf2d2dd38a5abfeaf8bcb77fd89ba9c70cba3995b4ad6f6d26a73e869776674ed8fc84dd768bed478faed5b2413a67c87eadb73ab2d485a0ecfed88eec25109420a4dc37da1e8519bfa745dbf6c7aff2faa6dff0104b54af95d9dbc3b5524c94a9fce8db1596cf7fd4f0acccef45dec7313b75075e6e2260e093bdb823d4df7b4d3e9f071eb62b83d715cc2ea6d6a79667c840d9c2d825a495bfb02f7b33d34521aa2f18e0ab71dff9f9c46a1f1d518f01126ee82700e18e1935594ef12a00f6a339f780733fb1c1ba412fd18a3340c7c84964b9ef5fca682a35bc5da5d6c0473e6b2b532e57322b1798935bc3415e53335a1fbe2929ff2c44799e735c4f69e7b69070a458049069c35b24519c6b91e6942ff5fdee0438c5b4239f6877bc04eee196b19431256c5c711de43df2c3214755d213ad81c48e741ec636ee54feb5be26a5d1661785d88f5b439f67a5d6fd58257eea16a5d65d33feb65411f0729e53381562554c8c417dec4b6582b69de666b793bb60ac30ac62265c0469e97c16d1fb22ebbdca9ee1ffe2f73b1c507e9c8224906d7620876f4b82e53527583d10c55c3434f7a4485f03547c63e59357131dcebe31d1317a59707888441a01e3acf2723b7700f7bff0cde59ebdeae17f8c0ffe938c50a8f603995298a1810540ebf806a4a91999f5696d9b6babaf6012c5c80f9907e99fc8de93f400fdc27fb7a95dcf819463a4205dd9fcc765ed5fee3e669624f3e2776cea687344d795e98420962f9ed72985c915ffc38b3c84666bd0a938f0311494413b57500215c37131c21e3ef6e9a7722d094786f2e897f4303460356d6aae5ff0b9322fecc72c9f839ccd855352757165c056efb6352cac9a3aab0d72ab1702bcf967242bd1fdf91decbf633c7131ec99783c10fb0e46a45145957fb35d9e914f3fcefdba8527426113bc2601c84895a6a12ef2c8c12bef082f0a6c3b254543f8f8f5dc303f1837dfebbc1ab799476700fa2d6125553460e0aadd2de843d66f1a20d061a357e0bfc1fbda4d9e9aab07d37adaaf1ec74857add653c0467d6bf2be99fe2d4b9a27e33357e7723eb2e89510a7d88cb86b1ddfd046aa703d69bb6486ae760e551557185fe4e19f8ea46621282da4aaa31662c82a4ce8e09357c78850323f3580e9e25a27b30e1463445f6bc66c53efe45ed905d084f6785db513d171594dc1256545e75e18eaf1a511c3b2f05a7c8e543d6398306a31fc7b504079a92a747a8f1eace8b0881c42bf07dc3c6f196a850968c4c01a64419176e9f2f67a0d960247e963445a106c3b501974236adf9b119d222afe3fb9383b11176e1ef3d9a0e546d9b19e8d5b6820cf9171d18576e54042b3f5b61e46a350d518457714632089668f3fb077b2a50019a50e75511902c89cbfa85f5b44206bbb15bb33761efcc0e4461f8568723287f53e21b451c1ee7a91302e7ef75126a5a310e463ee812061d0d36d008bc2b9e6e83e607b54549415cc40f7d6a46ee3752bde4c5d25c1803c4c251ca2b422538c89acf0bdf2beceabe03049f420efc2a81c4de3284a596153eda6dd90ae2e53770dc05a332e4b56142612c43326c4ae0fe487882f9c59cdc065e927e8b8c799cfd4a5d60a8fa9ee00b6138418b85ac00d73d39b1e78c66a6d9bcddaf58338a2387b1e5c1fffc29488ebdfde9378bb45d9a6ff7865dc9c0e87d8c9c2ae9a0c3f8c8d8788d3df49c9561b72854bd93969dbcce6932ecbed9a10113fac13a2dda9dfc10604dff051741c98ac3390f60c31585eb7375eb51f16bd4dc4020972186b213404ab62d4a411c481103527b573df6ead3b821aad479e1ebaa9680d6ab36bdd3eea78e45e1ce346b605334daa69f0a129beae7a9c25b5376dadffb9d27ebc8210d7e61fd700719f03947dc97807e39909f59faf57f0ec194608137d4c0761005b05e2f4cf23e619bf0a85add7599e91e1c924e0e2a45aab2a7e2a241807633db34aa9b15d410371d7c8b25135a1a82c279c2d273dcfde6fe9986dabcbc76e2451d33f628acbb64ecb74d2aa7979b1ffed8fefce794c83b9ee30c63dab63aceaeb69b169c0582a62c43c62f318cc09baddce0132fe53c35875c85b35d4f67b28e2a82303473672a479d600c677e36f20c9b3fd7fec8754bc06fbf18da162478271d3daa13e5031b3e078c242c2ab547c38a2239e3b748a579d32afc3831e94aeff1e0d07909287e1d2af6086540e0340f584628c487fa549d5f5b6aa004f6a09473834ff949eee52f7150d5bfdf2ea7898cb0a5c3ed4c055e6231ae63cab8fd9d82baaf071456b7d4a74870ace72ad05113f68d176ef85b7ed2d0a1170903f87cf4244793576ba26eb2154cf93fc7d8f1c00a8ce73de7d5096f36a6674882d31d9185920e50b7abf9f338d8e9b8d6f8b7135fb8abceb1ea3f4a90581d9cdf1bec047c21d19d061aacbb363ec015a72907173994ec28e19904cec251bbab19cdd60b4d990dced547a6bfae0148f9403eefc7ec69bc9b2a30e7153cb83ff191beb3e25d3fc41800f3f9be58f6a48e63bed81ea38b63d4dd70a7da2265d4f0138e104c17602e805cba5ca227e88fcecf96095934dd8f42ba299207ec20264fdedc547fa6353debc9b3ef60986acb631a8c8c17e96e91fab5c3c16f91e7f7368131e7c432ede014f9841651b4bd0591b1a3c145a4557380f642526b382f2be3950ecf08923c6ed59353cbc207bb57a613269467dbde09feaae27d4ebda274e507f8d6602207fcee47d81e413bce36e5721362678c7b010d125c0c8b2b0d995fc8ecb905429cbaea205deae7a57dcda775ed287e528a5c2737b8b28f6d77cf4649726db1a25f78fc6fff058fe3e5abc62dec3798edb175fba5c3d13d9a6acdbfeb955c23ce051667f006f8344fe45fdb019097a2df34d49c539fe6f62223bcdf4d026573253f80f68b09c47e0953f2958bc15b005f37555ac5e406d2658527e7715db09b896950e67cf1c6f21443ae5d41eb678447950da3278a23ae797270efeb3199b9c1fd439515e3cb4d93ce12bc7e54cc09fe169538ba7367414dfceeeeeca195b2161d6e9bff036d58639d600c27a467053166c4593a30b3172cb7b04e56b79a17a7d517f8d3da53ce246d71938c81759705e5f538e3963a5fff9f98ffd30fa62d06938f67c4e6f354fbd7f4c4302a00af825a0bb335af30bb98bc86d1aff2e14cc5f5d1b7c9a67ad7dc66b7872f4b32783e998d50c1695e3c365b2e2e994b8dcd3aec122da79fb71a067413a4b892b8abec69d3d8523f41989c5d712ee6fda503d4b0d1daa6f05b1d34f23954085429af180158628f8fc886cfb50f1c6361cc98a95cf62aa26c93b4e3ae7e78266115ad0546047b275416f3ba5435401bf5cdc4c40bad0ea711487c951df0e49eb3404d4535d21105bdcdedb368be363a9e90d36a1c96f1f317259f39ddcbbe84e5fada9fa55018c5911b498899ed4ed87c140d4a6f428e1d19914b81e82acadad2cf838639dfcdbc9539f5b62ba402d56455a874f5fafecd09e7ff0cf5315a93a4554a728a2485aa27522b7", 0x1000}}, 0x1006)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r2, 0xc0185879, &(0x7f0000000080)={@desc={0x1, 0x0, @desc3}})
connect$bt_l2cap(r1, &(0x7f00000000c0)={0x1f, 0xfffd, @none, 0xffff}, 0xe)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r4, 0x1, 0x3d, &(0x7f0000000040), 0x4)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000001880)={0x0, 0x0, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}})
pipe2(&(0x7f0000000240)={0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791a480000000000710033000000000095000300"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x21)
tee(r1, r5, 0xfffffffffffffc01, 0x0)

6m51.093463415s ago: executing program 7 (id=365):
socket$inet6_udp(0xa, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
r4 = fsmount(r3, 0x0, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@cgroup=r4, 0x6, 0x0, 0x50d6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r5 = getpgid(0x0)
r6 = syz_pidfd_open(r5, 0x0)
r7 = pidfd_getfd(r6, r6, 0x0)
setns(r7, 0x66020000)

6m45.884122524s ago: executing program 7 (id=376):
syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x83)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r2 = fsmount(r1, 0x0, 0x80)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r0, r2, 0x16, 0x0, @void}, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
open(&(0x7f0000000140)='.\x00', 0x8000, 0x112)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f00000001c0)={0x0, 0x0}, 0x10)
write$binfmt_aout(r3, &(0x7f0000000000)=ANY=[], 0x33fe0)
socket$nl_route(0x10, 0x3, 0x0)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b"], 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="030000000400000004000000b5"], 0x50)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x4, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r6, 0x0, 0x37, 0x0, &(0x7f00000001c0)="c1dfb080cd21d398098ee68886ddfc30d80ce5ed87f6e9b83601f444ac505655d702cb0e4881a9fb5fbebe8f1e17d613fe24c2021a97a9", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

6m43.540626646s ago: executing program 35 (id=376):
syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x83)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r2 = fsmount(r1, 0x0, 0x80)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r0, r2, 0x16, 0x0, @void}, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
open(&(0x7f0000000140)='.\x00', 0x8000, 0x112)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f00000001c0)={0x0, 0x0}, 0x10)
write$binfmt_aout(r3, &(0x7f0000000000)=ANY=[], 0x33fe0)
socket$nl_route(0x10, 0x3, 0x0)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b"], 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="030000000400000004000000b5"], 0x50)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x4, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r6, 0x0, 0x37, 0x0, &(0x7f00000001c0)="c1dfb080cd21d398098ee68886ddfc30d80ce5ed87f6e9b83601f444ac505655d702cb0e4881a9fb5fbebe8f1e17d613fe24c2021a97a9", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

5m11.941879386s ago: executing program 8 (id=607):
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
pipe2$watch_queue(0x0, 0x80)
mmap$usbfs(&(0x7f00002ec000/0x4000)=nil, 0x4000, 0x4, 0x80010, 0xffffffffffffffff, 0x4)
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
mlock(&(0x7f00003ad000/0x1000)=nil, 0x1000)
r3 = syz_clone(0x2080, 0x0, 0x0, 0x0, 0x0, 0x0)
process_vm_writev(r3, &(0x7f0000001c80), 0x0, &(0x7f0000001d80), 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb010018000000000000007c0000007c00000002000000000000000000000e0000000000000000000000000600000d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e80c20000000000000000000000900000000000000000000000900000200000000000000000902"], 0x0, 0x96}, 0x28)
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x2}, 0x80)
socket$nl_xfrm(0x10, 0x3, 0x6)
syz_mount_image$exfat(&(0x7f0000000400), &(0x7f0000000240)='./file0\x00', 0x2000084c, &(0x7f0000000540)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,uid=', @ANYRESHEX, @ANYBLOB=',dmask=00000000000000000000152,fmask=00000000000000000000006,gid=', @ANYRESHEX, @ANYBLOB='\x00\x00\x00\x00\x00', @ANYRESHEX=0xee00, @ANYBLOB="2c646973636172642c00fb278330ab3b4884d36adf6908d11f57832035e96a1513231140da182ca77aeedc492bbc501d94f854a7e26909bde6e698d72a15ec808a86c25d"], 0x81, 0x14f3, &(0x7f0000002a80)="$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")
r5 = syz_open_pts(0xffffffffffffffff, 0x1f05019dc91e5a5f)
ioctl$TCSETAF(r5, 0x5408, &(0x7f0000000040)={0x744, 0x4c96, 0x8001, 0xd, 0x19, "8a16aa17cde585c5"})
mmap(&(0x7f000063b000/0x2000)=nil, 0x2000, 0x8, 0x50, r4, 0x63363000)
mount$9p_tcp(&(0x7f00000007c0), &(0x7f0000000800)='.\x00', &(0x7f0000000840), 0x8010, &(0x7f0000000180)={'trans=tcp,', {'port', 0x3d, 0x4e23}, 0x2c, {[{@access_uid}, {@loose}, {@access_client}], [{@seclabel}]}})

5m11.040335043s ago: executing program 8 (id=610):
socket$pptp(0x18, 0x1, 0x2)
syz_emit_ethernet(0x12, &(0x7f0000000240)=ANY=[@ANYBLOB="008026d73e7e295c6b97e0e10de2f5913dca4bf41430205224ee02a4d12237e9e8df4bf0b6cbb996dd2652a929c3a18efd4a84b86f6ed7f67061791ae7f225d29756563d629f66c844e52b65af4f9484693b36a994a5686ac48afd96544045467a568fb86dbdb06a498691f7ce715d257f7734eed939d3836cafc2"], 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@ipv6_getroute={0x1c, 0x1a, 0x116, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x200}}, 0x1c}, 0x1, 0x0, 0x0, 0x8804}, 0x240000d4)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x100002, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000036000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f0000000140)="470f01cb440f4319c74424000a000000c74424020d000000c7442406000000000f011c24430f61720d0f09c401c9fa8cd60098000066450f3a0eb1ec0000000365410f01dbb805000000b9030000000f01d90fc76808", 0x56}], 0x1, 0x49, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x189040, 0x136)
close(0x3)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x1, 0x8, 0x8}, 0x50)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r6, 0x0)
io_setup(0xc, &(0x7f0000000180)=<r7=>0x0)
io_submit(r7, 0x2, &(0x7f00000000c0)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0xfffd, r6, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r6, 0x0}])
syz_usb_connect$uac1(0x0, 0x72, &(0x7f0000000140)=ANY=[@ANYBLOB="12010102000000400c200b1040000102030109026000030103a0020904000000010100000a240112000a0002010209040100000102000009040101010102000009050109100002aa33b8f3e0a63691e34c893f7eacfcc6ca67f13e4c0ad7527f6c3c152f0459e3ccacc31ee0fe555071eeba68b6de91b411ea854583b7a0f8b61af055a28c6e1a54d961af1820d107441473b9e162503f83757603f1e81072cc746fea98ada5b327232f25102f8e2fdfbb7024bb546dab6094719c1b0a4a1aed18e70437c7512dbef9268f3eb7f04ad420655108fc645de01cd217f38ce5a3ebdc7dfe"], &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x1, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x48850, 0x1}, [@IFLA_GROUP={0x8}, @IFLA_IFALIAS={0x14, 0x14, 'veth1_to_batadv\x00'}, @IFLA_BROADCAST={0xa, 0x2, @remote}]}, 0x48}, 0x1, 0x0, 0x0, 0x24040051}, 0x4000000)
bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x21, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0x1}, @map_idx={0x18, 0x6, 0x5, 0x0, 0xc}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x100}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}, @map_val={0x18, 0xa, 0x2, 0x0, r4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x94)

5m7.198001861s ago: executing program 8 (id=625):
bind$netlink(0xffffffffffffffff, &(0x7f0000000180)={0x10, 0x0, 0x25dfdbfb, 0x4}, 0xc)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r0, @ANYBLOB="0000000002000000b705000008000000850000005d00000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x5}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x58)
listen(r1, 0x5)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
openat$urandom(0xffffffffffffff9c, 0x0, 0x80000, 0x0)
syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000640)='./bus\x00', 0x0, &(0x7f0000000440)=ANY=[], 0x1, 0x1268, &(0x7f0000002500)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xa27}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r6 = fsopen(&(0x7f0000000180)='cgroup2\x00', 0x0)
fsmount(r6, 0x0, 0x80)
sendto$inet6(r2, 0x0, 0x0, 0x240000d4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
close_range(r1, 0xffffffffffffffff, 0x0)

5m6.55674227s ago: executing program 8 (id=628):
syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x4000, &(0x7f0000000600), 0x1, 0x571, &(0x7f0000000640)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0xa0c42, 0x100)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
r2 = socket$tipc(0x1e, 0x5, 0x0)
sendmmsg$inet(r2, &(0x7f0000003740), 0x0, 0x4004040)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x4001, 0x3, 0x3e8, 0x158, 0x0, 0x148, 0x158, 0x148, 0x350, 0x240, 0x240, 0x350, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0x0, 'ip6gretap0\x00', 'nicvf0\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0xf8, 0x158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'wg1\x00', {0x0, 0x0, 0x1ff, 0x100000, 0x0, 0xed, 0x10000007}}}, @common=@unspec=@connmark={{0x30}, {0xfffffff9, 0x8}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x85d, 0xb, [0x10, 0x31, 0x1e, 0x32, 0x2b, 0x25, 0x3f, 0x17, 0x19, 0x22, 0x2c, 0x3d, 0x7, 0x3f, 0x1e, 0x31], 0x0, 0x2, 0x2}}}, {{@ip={@rand_addr=0x64010101, @local, 0xff, 0x0, 'tunl0\x00', 'lo\x00', {0xff}, {}, 0x2e, 0x3, 0x4}, 0x0, 0x190, 0x1f8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x8, 0x9, 0x1, 0x1, 'syz1\x00', 0x2}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0xfff, 0x7e, 0x1c, 'netbios-ns\x00', 'syz0\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x448)
sendto$inet(r1, &(0x7f0000000080)="b18da116e2641cf1e4371780a0fadc2d133dbc9fa96d9ed148f04e26d74de43842248ac539814ed84e224389bf0937342e2691cfeb320f78325917dd2fa808eda92371ca482379ec4cb5dd2c87c30779a9e2589385b78c0fc7", 0x59, 0x44000, 0x0, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10)
r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r4)
wait4(r4, 0x0, 0x40000000, 0x0)
ptrace$setregs(0xd, r4, 0x8, 0x0)
ptrace$getregset(0x4204, r4, 0x2, &(0x7f0000000200)={&(0x7f0000000700)=""/244, 0xd8})
r5 = socket(0x400000000010, 0x3, 0x0)
r6 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, 0xffffffffffffffff, &(0x7f0000000100)={0x201d})
ppoll(&(0x7f0000000340)=[{r6, 0x8233}, {0xffffffffffffffff, 0x4c}], 0x2, 0x0, &(0x7f0000001580)={[0xbef]}, 0x8)
socket$unix(0x1, 0x1, 0x0)
sendmsg$nl_route_sched(r5, 0x0, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001940)=@newtfilter={0x30, 0x2c, 0xd27, 0x30bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0xfff3}, {}, {0x10, 0x9}}, [@filter_kind_options=@f_bpf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x40004}, 0x800)
connect$inet(r3, 0x0, 0x0)
sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0)
read$FUSE(r0, &(0x7f0000000bc0)={0x2020}, 0x2020)

5m5.632949968s ago: executing program 8 (id=633):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = syz_clone3(0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r2 = getpid()
sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f00000002c0)=0x2)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f00000003c0)={0x5, r3, 'id1\x00'})
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xa, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64, 0x0, 0x0, 0x0}, 0x94)
setregid(0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="61153c000000000061138c0000000000bfa00000000000001503000008004e002d3501000000000095004100000000006916000000000000bf67000000000000350605000fff07906706000005000000160302000ee60060bf500000000000002c650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffbd4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe01c5473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc2300000008ac86d8a297dff0445a15f21dce4de9f29eff65aadc841848c9b562a31e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076ebae3f55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932c9a6aa57f1ad2e99e0e67ab93716d20000009fbb0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43010000207b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000f4000000000000000000000000c1eb2d91fb79ea00000000000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631d22a11dc3c6939628950000000000000001c7205a6b068fff496d2da7d632bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b30410856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db88aa3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fb9fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4ff010404faf0a4da65396174b4563d54b52f06c870edf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202ee1192b81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2b517dc4a29b9b5a8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2a3bc87b0da23c00d9ef418cf19e7a8c4c328be0ce95798adc2dca871073f6bd61dc18487b6feb89752cd600000000abc86b94f8cbde4d470667bee722a6a2af483ad0d3415ed0f9db059acaba9eaea93f811d434e00000000000000000000d154ba10a8e51489a614e69722bac30000000000000000000000000000c5dfd188ff555285b9743d3aac000583f42d168613151d681a2f71373f20d92c9048407c91fabecfe8b3f2d5454d127edab14ba61ba1cfc4336324c86f3dcb43e9a58208077e90f6ec1c7ac756f61dcc372cdd30b82507489f0bbfbd3c3f21752e81319c0161e154ceb16e00bc7f5a6962dff317f4d014786e432817064874d69a39cb0da31bcc5f81894d8a80756447322207b4007dff12eb95066cc6bc256f0a12282224d718b06ca80b57aa183dd0c3eee45891441f2b89b4c67aa9882281393954972046974f18df232cd7fca610e33f51c2d062020f403d85ff36c26e2f6bd1d82f4d3ceb3472d9a77e0057a3bfe697d9ab7585f4a1b381343d2cf855689232f4fc5135790662dc1419a374be9d7b3e5be2886d23add90d862f1a682ff11c798e338af3e5bb0f9d3952b15bf3e0c618c89d20ca1e18a031397693bf3cfbd8417e5b55e641c898c280356f2da222d5d68919d98158578dcf18efa404e508bcbbb8cfcf70086821ebdf34c9a1dff45af873df904c2bdbef81f246d26f4b40df949e12bdac18533d4e11c608cc31d60cb591c40a7b386fa1c753336d7220a35118d4919b45eff32aab684e62c6691de14e97aa7e9dc8ecf0cd50540246d2b746e41e5b4e2c095039dfe0f71db6265f7580d098be40ef36faee5d1695830d4242a23e541e6ce9fa1998d8961cf4fe3c8e8fbb566f148c8befc229614a4b7f80d237b8abc6fd0407de31d6e5532f360d379f20f054692b47207922fe6c14eba96c9a7ae906abc1ae1ae8c4fae92883cfa1978a04bbff4bbe0000000000000000000000000044585397feaadda3fcc64e7b0c08f7ac5c64cb190f1712a3b10fc34eb758705f1751d8c8b712eb39d2b8ad44f129c2c9aedb15"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48)
getresuid(&(0x7f0000002a00), &(0x7f0000002a40), &(0x7f0000002a80))
sendmsg$netlink(r5, &(0x7f0000003540)={0x0, 0x0, &(0x7f00000034c0), 0x0, 0x0, 0x0, 0x4}, 0x20044440)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_attach_bpf(r7, 0x1, 0x34, &(0x7f00000000c0), 0x4)
ioctl$sock_inet6_SIOCDELRT(r6, 0x890c, &(0x7f0000000240)={@loopback, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x6, 0xa, 0x10, 0x400, 0x8, 0x10})
prlimit64(r2, 0x8, &(0x7f0000000040)={0x1}, &(0x7f0000000180))
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x50, 0x10, 0xffffffffffffffff, 0x70bd28, 0x25dfdbf8, {0x0, 0x0, 0x0, 0x0, 0x4481, 0x609}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @rand_addr=' \x01\x00'}]}}}, @IFLA_MTU={0x8, 0x4, 0x101}]}, 0x50}}, 0x40014)

5m5.150763673s ago: executing program 8 (id=636):
getpid()
getdents(0xffffffffffffffff, 0xffffffffffffffff, 0x5a)
syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, &(0x7f0000000600), 0x1, 0x555, &(0x7f0000000640)="$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")
quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000100)={0x1, 0x1, 0x10000000000246, 0x5, 0x5, 0xfffffffffffffff8, 0x1, 0x9, 0xf6b})
open(&(0x7f00000001c0)='./file1\x00', 0x1c927f, 0x68)
timer_create(0x0, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_serviced\x00', 0x275a, 0x0)
fcntl$lock(r0, 0x6, 0x0)
fcntl$lock(r0, 0x25, &(0x7f0000000280))
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r1 = socket$unix(0x1, 0x2, 0x0)
recvmmsg(r1, 0x0, 0x0, 0x1000400101fe, 0x0)
r2 = syz_open_dev$evdev(0x0, 0x8000002, 0x0)
ioctl$GIO_UNIMAP(r0, 0x4b66, 0x0)
readv(r2, 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, 0x0)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0xc0406618, 0x0)

5m5.008573618s ago: executing program 36 (id=636):
getpid()
getdents(0xffffffffffffffff, 0xffffffffffffffff, 0x5a)
syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, &(0x7f0000000600), 0x1, 0x555, &(0x7f0000000640)="$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")
quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000100)={0x1, 0x1, 0x10000000000246, 0x5, 0x5, 0xfffffffffffffff8, 0x1, 0x9, 0xf6b})
open(&(0x7f00000001c0)='./file1\x00', 0x1c927f, 0x68)
timer_create(0x0, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_serviced\x00', 0x275a, 0x0)
fcntl$lock(r0, 0x6, 0x0)
fcntl$lock(r0, 0x25, &(0x7f0000000280))
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r1 = socket$unix(0x1, 0x2, 0x0)
recvmmsg(r1, 0x0, 0x0, 0x1000400101fe, 0x0)
r2 = syz_open_dev$evdev(0x0, 0x8000002, 0x0)
ioctl$GIO_UNIMAP(r0, 0x4b66, 0x0)
readv(r2, 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, 0x0)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0xc0406618, 0x0)

5.148349303s ago: executing program 1 (id=1995):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
ptrace$ARCH_SHSTK_ENABLE(0x1e, r0, 0x5, 0x5001)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, 0x0, 0x0, 0x2, 0x0)
r4 = socket$can_raw(0x1d, 0x3, 0x1)
bind$can_raw(r4, &(0x7f0000000080), 0x10)
setsockopt$CAN_RAW_FILTER(r4, 0x65, 0x1, 0x0, 0x0)
ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/seq/clients\x00', 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]})
creat(&(0x7f0000000280)='./file0\x00', 0x108)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0)
pread64(0xffffffffffffffff, 0x0, 0x0, 0x1c2a)
quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000008700)='./file0\x00', 0x0, 0x4000)

4.177298263s ago: executing program 1 (id=2007):
socket$unix(0x1, 0x5, 0x0)
symlink(&(0x7f0000000280)='.\x02\x00', &(0x7f0000000380)='.\x02\x00')
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6d71b000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e23}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0)
fsetxattr$security_selinux(r0, &(0x7f0000000340), &(0x7f00000000c0)='system_u:object_r:mtrr_device_t:s0\x00', 0x23, 0x3)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x1a, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2600}, 0x94)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f00000075c0)={@local, @mcast2, @private2={0xfc, 0x2, '\x00', 0x1}, 0xd432, 0x40, 0x409, 0x0, 0xa, 0x1})
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x400, 0x0)
fchown(r4, 0x0, 0xee01)
open(0x0, 0x591002, 0x50f)
unshare(0x62020600)
r5 = fsopen(0x0, 0x0)
fsmount(r5, 0x0, 0x17f)
symlinkat(0x0, 0xffffffffffffff9c, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
ptrace(0x11, r1)

3.092136617s ago: executing program 6 (id=2018):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r2 = getpid()
sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000540)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
openat$rtc(0xffffff9c, 0x0, 0xc2440, 0x0)
r5 = socket$pptp(0x18, 0x1, 0x2)
munmap(&(0x7f0000002000/0x1000)=nil, 0x1000)
r6 = syz_open_dev$tty1(0xc, 0x4, 0x4)
ioctl$TIOCL_SETSEL(r6, 0x541c, 0x0)
connect$pptp(r5, &(0x7f00000001c0)={0x18, 0x2, {0x0, @empty}}, 0x1e)
getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x50, 0x0, &(0x7f0000000180))
syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
close_range(r7, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x56, &(0x7f0000000080)=ANY=[], 0x0)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000600)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r1], 0x40}}, 0x0)

3.036877118s ago: executing program 1 (id=2020):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
ptrace$ARCH_SHSTK_ENABLE(0x1e, r0, 0x5, 0x5001)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = socket$can_raw(0x1d, 0x3, 0x1)
bind$can_raw(r4, &(0x7f0000000080), 0x10)
setsockopt$CAN_RAW_FILTER(r4, 0x65, 0x1, 0x0, 0x0)
ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/seq/clients\x00', 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]})
creat(&(0x7f0000000280)='./file0\x00', 0x108)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0)
pread64(0xffffffffffffffff, 0x0, 0x0, 0x1c2a)
quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000008700)='./file0\x00', 0x0, 0x4000)

2.584150162s ago: executing program 5 (id=2028):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x1, 0x8004, 0x4}, 0x50)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x15, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffff7}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x54b2ac04}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r2}, 0xc)

2.578548402s ago: executing program 5 (id=2029):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_buf(r0, 0x6, 0x21, &(0x7f0000000280)="dc8daf8d760c0b8caa98fa19c6a35a18", 0x10)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
getsockopt$inet_tcp_buf(r0, 0x6, 0x21, 0x0, &(0x7f0000000580))

2.567001272s ago: executing program 5 (id=2030):
socket$unix(0x1, 0x5, 0x0)
symlink(&(0x7f0000000280)='.\x02\x00', &(0x7f0000000380)='.\x02\x00')
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6d71b000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e23}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0)
fsetxattr$security_selinux(r0, &(0x7f0000000340), &(0x7f00000000c0)='system_u:object_r:mtrr_device_t:s0\x00', 0x23, 0x3)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x1a, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2600}, 0x94)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f00000075c0)={@local, @mcast2, @private2={0xfc, 0x2, '\x00', 0x1}, 0xd432, 0x40, 0x409, 0x0, 0xa, 0x1})
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x400, 0x0)
fchown(r4, 0x0, 0xee01)
open(0x0, 0x591002, 0x50f)
unshare(0x62020600)
r5 = fsopen(0x0, 0x0)
fsmount(r5, 0x0, 0x17f)
symlinkat(0x0, 0xffffffffffffff9c, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
ptrace(0x11, r1)

2.01327399s ago: executing program 1 (id=2031):
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000200), 0x42082)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x25104000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000000)={0x0, 'erspan0\x00', {0x4}, 0x40})
mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0)
execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0)
r3 = socket(0x10, 0x803, 0x0)
r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
write$vga_arbiter(r4, &(0x7f0000000480)=ANY=[], 0xb)
sendmsg$nl_route(r3, 0x0, 0x80)
open(0x0, 0x14927e, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x840, 0x0)
getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x30, 0x0, &(0x7f0000000000))

1.475267586s ago: executing program 9 (id=2035):
r0 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x21b0, 0x4)
sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0)
recvfrom(r0, 0x0, 0x12, 0x2000, 0x0, 0x0)

1.459758186s ago: executing program 6 (id=2036):
r0 = socket$netlink(0x10, 0x3, 0x10)
r1 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000300)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_link_settings={0x2, 0x1, 0x0, 0x0, 0x7, 0x0, 0x0, 0x4c, 0xf3, 0x8, [0x0, 0x0, 0x0, 0xc, 0x5, 0x1, 0x0, 0x40000002]}})

1.449404897s ago: executing program 9 (id=2038):
r0 = syz_usb_connect$uac2(0x1, 0x84, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x582, 0xc, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x72, 0x3, 0x1, 0x0, 0x20, 0x0, {0x8, 0xb, 0x3, 0x1, 0x1, 0x5, 0x20, 0x6}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0xb2e, 0x6, 0x9, 0x2}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x1, 0xf, 0xab, {0x8, 0x25, 0x1, 0x81, 0x33, 0xfa, 0x3}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x9, 0xb62, 0x7}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x7, 0x81, 0x0, {0x8, 0x25, 0x1, 0x3, 0x3, 0xe, 0x8}}}}}}}}]}}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x4, [{0x4, &(0x7f0000000000)=@lang_id={0x4, 0x3, 0x41f}}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]})
syz_usb_control_io(r0, &(0x7f0000000800)={0x2c, 0x0, &(0x7f00000002c0)=ANY=[], &(0x7f0000000700)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, 0x0, &(0x7f00000007c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x32, 0x0, 0x6, 0x1, 0x8, 0x7, 0x8}}}, 0x0)
syz_usb_control_io$uac2(r0, 0x0, 0x0)
syz_usb_control_io$uac2(r0, 0x0, 0x0)

1.272391212s ago: executing program 5 (id=2039):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$NILFS_IOCTL_GET_CPINFO(r2, 0x80186e82, 0x0)

1.094748778s ago: executing program 6 (id=2040):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r0, 0x0)
syz_emit_ethernet(0x4e, &(0x7f0000000540)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x1, 0x40, 0x0, 0x0, 0x8, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0xb, 0x2, 0xca, 0x0, 0x1000, {[@md5sig={0x13, 0x12, "fec1f2c74ceabdcb6f0a95a7fcfac79a"}, @fastopen={0x22, 0x5, "71d7f6"}]}}}}}}}, 0x0)

1.00833891s ago: executing program 5 (id=2041):
syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./bus\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='nodiscard,alloc_mode=default,acl,alloc_mode=reuse,mode=fragment:block,disable_roll_forward,background_gc=on,nouser_xattr,checkpoint=disable,fsync_mode=strict,nobarrier,jqfmt=vfsold,mode=fragment:block,\x00'], 0x1, 0x5505, &(0x7f0000002480)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183b41, 0x12b)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
getxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@known='user.incfs.metadata\x00', 0x0, 0x0)

1.00812471s ago: executing program 6 (id=2042):
socket$nl_route(0x10, 0x3, 0x0)
r0 = syz_clone3(0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, 0x0, 0x0, 0x2, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x2)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r5, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88)
setsockopt$inet_MCAST_MSFILTER(r5, 0x0, 0x30, &(0x7f0000000940)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000e00000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000064010102000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200"/652], 0x310)
close_range(r4, 0xffffffffffffffff, 0x0)

945.828982ms ago: executing program 1 (id=2043):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
ptrace$ARCH_SHSTK_ENABLE(0x1e, r0, 0x5, 0x5001)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, 0x0, 0x0, 0x2, 0x0)
r4 = socket$can_raw(0x1d, 0x3, 0x1)
bind$can_raw(r4, &(0x7f0000000080), 0x10)
setsockopt$CAN_RAW_FILTER(r4, 0x65, 0x1, 0x0, 0x0)
ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/seq/clients\x00', 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]})
creat(&(0x7f0000000280)='./file0\x00', 0x108)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0)
pread64(0xffffffffffffffff, 0x0, 0x0, 0x1c2a)
quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000008700)='./file0\x00', 0x0, 0x4000)

814.005956ms ago: executing program 9 (id=2048):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000005c0)={0x1, 0x0, [{0x4000009a, 0x0, 0xffffffffffffffff}]})

813.513126ms ago: executing program 3 (id=2049):
epoll_create1(0x0)
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file1\x00', 0x2000082, &(0x7f0000000cc0)={[{@utf8no}, {@shortname_mixed}, {@utf8}, {@shortname_win95}, {@fat=@quiet}, {@shortname_mixed}, {@rodir}, {@uni_xlate}, {@utf8no}, {@fat=@nfs_nostale_ro}, {@rodir}, {@shortname_win95}, {@uni_xlate}, {@iocharset={'iocharset', 0x3d, 'koi8-ru'}}, {@fat=@usefree}, {@shortname_winnt}, {@utf8}]}, 0x9, 0x353, &(0x7f0000002040)="$eJzs3T1sW9UXAPDjPid2o3//8YBUwWTYkFDVBDHAlKoqUkUGKLL4WrBoykccKsXCUhjieAFVTCAWJJjYOsDYGTEgxMbASpFQAbHQLVIjHvLHs59jhySDI6r+fkN0dO497x6/XMXJU3LzejvWr87Ftbt370S5XIjiysWV2C1EJU5FEn07MUVh56P5aXkA4D9vN03jr7Tv8NmfLGSR934AuH/13v/fPDNKlI5YWIyIG/+bVVsAwAztpmk5Dv/5//mp2eszawsAmKGJ5/+PjQ3ve8xfHP5OAABw/3rxlVefu7AacaVaLUdsfNiqtWrxzGj8wrV4OxqxFudjMfai/6gg+t8tdD8+e3n10vlq12+VqHUrWrWIU6P6pFdfiqVYjEpkjxqy+qRbv9Srr0bETru3fmwUWrW5WBis//NCrMVyLMZDE/URl1cvLVcHF6htZPXtiE6Usya6/Z+Lxfjxjbgejbga3dpR/9tL1erFdHWsvnWz1JsHAAAAAAAAAAAAAAAAAAAAAACzcK46VBmef5NutFsfXNk/oTJ2Pk6tPzw4H6jTPx8oLWWn89xI9p8PNH4+T6tWzJ0SBAAAAAAAAAAAAAAAAAAAAA+25tZ81BuNtc3m1vvr+aCdy7z7/Vffno5sqDgofScZVcUgOXadbGLuykkMl0iH5WkyNmcQJBHZ5J36zVvDjvNzSsNXMVHeDUoTQ4VBT/VG48yjv34+rervbrDTyyQxcVvGg8Jg/dzQxv+7iXJE7B1UdXCwfMic22maHlS+/dlkVRQiinHsNo4QfHfnrYefbJ59qpf5ZnDow+NPLL50+9Mv/1ivN6LTvzONxvxmcy89wpW7vU4OJbn9Uxjc58KUnTA96Iwync3mVj356c+XH/n4h32Tk+n7J81n3jt4ra/3Z+b7QSGikt2Ef2t1bsrmnx68dm+4e4//iTv7xUr91vYvvx+1KvdFwkEdAAAAAAAAAAAAAAAAAABwInJ/K34MT78wu44AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4OSN/v9/LuhMZI4S3GvH5FBpbbN54OKnT/SlAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwAPsnAAD//y8kcO4=")
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90)
getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000)

788.052847ms ago: executing program 9 (id=2050):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000500)={0x1, 0x0, [{0x4d0}]})

787.495896ms ago: executing program 3 (id=2051):
r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r0)
wait4(r0, 0x0, 0x40000000, 0x0)
ptrace$cont(0x15, r0, 0x800009, 0x8000000000006)

778.940887ms ago: executing program 9 (id=2052):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x7}, 0x48)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1}, 0xc)

751.181708ms ago: executing program 3 (id=2053):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f0000000100)={0x4, 0x1, 0x6})

750.915308ms ago: executing program 5 (id=2054):
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000200), 0x42082)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x25104000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000000)={0x0, 'erspan0\x00', {0x4}, 0x40})
mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0)
execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0)
r3 = socket(0x10, 0x803, 0x0)
r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
write$vga_arbiter(r4, &(0x7f0000000480)=ANY=[], 0xb)
sendmsg$nl_route(r3, 0x0, 0x80)
open(0x0, 0x14927e, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x840, 0x0)
getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x30, 0x0, &(0x7f0000000000))

737.303488ms ago: executing program 9 (id=2055):
r0 = syz_clone(0x22180, 0x0, 0xa42f, 0x0, 0x0, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
syz_open_procfs(r0, 0x0)
syz_usb_connect$uac1(0x3, 0x7a, &(0x7f0000000cc0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x20, 0x41e, 0x3048, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x68, 0x3, 0x1, 0xa2, 0xe0, 0x7, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x1, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x6, 0x0, 0xaa, {0x7, 0x25, 0x1, 0x0, 0x5, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x8, 0x1, 0x5, 0x2}]}, {{0x9, 0x5, 0x82, 0x9, 0x1ff, 0x0, 0x8, 0x8, {0x7, 0x25, 0x1, 0x0, 0x6, 0x2}}}}}}}}]}}, &(0x7f0000000f80)={0x0, 0x0, 0x5, &(0x7f0000000e00)={0x5, 0xf, 0x5}})

724.774509ms ago: executing program 3 (id=2056):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r2, 0x0)
futex(&(0x7f000000cffc)=0x1, 0x5, 0x2, 0x0, &(0x7f0000000040)=0x1, 0x43000000)

656.463771ms ago: executing program 3 (id=2057):
r0 = socket$packet(0x11, 0x3, 0x300)
socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x1, 0x4}, 0x4)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'xfrm0\x00', <r1=>0x0})
sendto$packet(r0, &(0x7f00000000c0)="4701", 0x2, 0x81, &(0x7f0000000340)={0x11, 0x0, r1, 0x1, 0xe, 0x6, @random="645bcc77540e"}, 0x14)

656.314411ms ago: executing program 3 (id=2058):
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000200), 0x42082)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x25104000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, 0x0)
mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0)
execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0)
r3 = socket(0x10, 0x803, 0x0)
r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
write$vga_arbiter(r4, &(0x7f0000000480)=ANY=[], 0xb)
sendmsg$nl_route(r3, 0x0, 0x80)
open(0x0, 0x14927e, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x840, 0x0)
getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000000340)=""/225, &(0x7f0000000000)=0xe1)

56.713719ms ago: executing program 6 (id=2059):
r0 = open(&(0x7f0000000000)='./file0\x00', 0x108943, 0x148)
r1 = open(&(0x7f00000001c0)='./file0\x00', 0x108843, 0x55)
fcntl$setlease(r1, 0x400, 0x1)
fcntl$setlease(r0, 0x400, 0x0)
fcntl$setlease(r0, 0x400, 0x0)

43.254859ms ago: executing program 1 (id=2060):
r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x80)
accept(r1, 0x0, 0x0)

0s ago: executing program 6 (id=2061):
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r0, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x2a}}, 0x2, 0x0, 0x2}}, 0x2e)
ioctl$PPPIOCGL2TPSTATS(r1, 0x40047452, 0x0)

kernel console output (not intermixed with test programs):

st: I/O error, dev loop1, sector 14720 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0
[  165.950580][ T1053] blk_update_request: I/O error, dev loop1, sector 3072 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0
[  165.978634][  T976] blk_update_request: I/O error, dev loop1, sector 32640 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  165.990735][ T1053] blk_update_request: I/O error, dev loop1, sector 3072 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  166.013817][  T953] blk_update_request: I/O error, dev loop1, sector 3072 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  166.025407][  T973] blk_update_request: I/O error, dev loop1, sector 14720 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  166.046352][  T975] blk_update_request: I/O error, dev loop1, sector 2056 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  166.062675][  T976] buffer_io_error: 90 callbacks suppressed
[  166.062687][  T976] Buffer I/O error on dev loop1p2, logical block 4080, async page read
[  166.077140][ T1053] Buffer I/O error on dev loop1p7, logical block 0, async page read
[  166.087147][  T953] Buffer I/O error on dev loop1p3, logical block 0, async page read
[  166.095457][  T973] Buffer I/O error on dev loop1p6, logical block 11648, async page read
[  166.107135][  T975] Buffer I/O error on dev loop1p1, logical block 1, async page read
[  166.117539][ T1053] Buffer I/O error on dev loop1p7, logical block 0, async page read
[  166.129069][  T953] Buffer I/O error on dev loop1p3, logical block 0, async page read
[  166.137454][  T973] Buffer I/O error on dev loop1p6, logical block 11649, async page read
[  166.154653][ T1053] Buffer I/O error on dev loop1p7, logical block 0, async page read
[  166.165117][  T953] Buffer I/O error on dev loop1p3, logical block 0, async page read
[  166.273749][  T568] usb 6-1: Using ep0 maxpacket: 16
[  168.598130][  T568] usb 6-1: unable to get BOS descriptor or descriptor too short
[  168.663795][  T568] usb 6-1: unable to read config index 0 descriptor/start: -71
[  168.671532][  T568] usb 6-1: can't read configurations, error -71
[  168.713271][ T2047] netlink: 'syz.6.451': attribute type 3 has an invalid length.
[  168.721000][ T2047] netlink: 3657 bytes leftover after parsing attributes in process `syz.6.451'.
[  168.745958][   T20] Bluetooth: hci0: command 0x1001 tx timeout
[  168.752234][ T2008] Bluetooth: hci0: sending frame failed (-49)
[  170.803780][   T20] Bluetooth: hci0: command 0x1009 tx timeout
[  172.137350][ T2081] 9pnet: Insufficient options for proto=fd
[  172.162914][  T976] print_req_error: 65 callbacks suppressed
[  172.162931][  T976] blk_update_request: I/O error, dev loop1, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0
[  172.163212][ T1053] blk_update_request: I/O error, dev loop1, sector 3072 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0
[  172.173201][  T953] blk_update_request: I/O error, dev loop1, sector 3072 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0
[  172.198749][  T973] blk_update_request: I/O error, dev loop1, sector 14720 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0
[  172.733817][   T24] kauditd_printk_skb: 59 callbacks suppressed
[  172.733830][   T24] audit: type=1400 audit(1782156083.380:3346): avc:  denied  { bind } for  pid=2075 comm="syz.6.459" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  172.761922][  T975] blk_update_request: I/O error, dev loop1, sector 2056 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0
[  172.782241][  T976] blk_update_request: I/O error, dev loop1, sector 32640 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  172.863906][  T975] blk_update_request: I/O error, dev loop1, sector 2056 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  173.133823][ T1053] blk_update_request: I/O error, dev loop1, sector 3072 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  173.145429][ T1053] buffer_io_error: 50 callbacks suppressed
[  173.145440][ T1053] Buffer I/O error on dev loop1p7, logical block 0, async page read
[  173.184070][  T976] Buffer I/O error on dev loop1p2, logical block 4080, async page read
[  173.206809][   T24] audit: type=1400 audit(1782156083.380:3347): avc:  denied  { name_bind } for  pid=2075 comm="syz.6.459" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1
[  173.216176][  T973] blk_update_request: I/O error, dev loop1, sector 14720 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  173.239220][  T973] Buffer I/O error on dev loop1p6, logical block 11648, async page read
[  173.244524][  T975] Buffer I/O error on dev loop1p1, logical block 1, async page read
[  173.247830][  T973] blk_update_request: I/O error, dev loop1, sector 14721 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  173.264567][ T1053] Buffer I/O error on dev loop1p7, logical block 0, async page read
[  173.300340][ T2093] EXT4-fs (loop1): couldn't mount as ext2 due to feature incompatibilities
[  173.309773][   T24] audit: type=1400 audit(1782156083.380:3348): avc:  denied  { node_bind } for  pid=2075 comm="syz.6.459" saddr=100.1.1.2 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1
[  173.321312][  T973] Buffer I/O error on dev loop1p6, logical block 11649, async page read
[  174.769899][  T953] Buffer I/O error on dev loop1p3, logical block 0, async page read
[  174.779882][  T973] Buffer I/O error on dev loop1p6, logical block 11648, async page read
[  174.793198][  T975] Buffer I/O error on dev loop1p1, logical block 1, async page read
[  174.803265][ T1053] Buffer I/O error on dev loop1p7, logical block 0, async page read
[  175.007277][ T2109] FAT-fs (loop6): Directory bread(block 64) failed
[  175.023814][ T2109] FAT-fs (loop6): Directory bread(block 65) failed
[  175.325438][ T2109] FAT-fs (loop6): Directory bread(block 66) failed
[  175.463627][ T2109] FAT-fs (loop6): Directory bread(block 67) failed
[  175.557331][ T2109] FAT-fs (loop6): Directory bread(block 68) failed
[  175.650107][ T2109] FAT-fs (loop6): Directory bread(block 69) failed
[  176.045696][ T2109] FAT-fs (loop6): Directory bread(block 70) failed
[  176.077594][ T2109] FAT-fs (loop6): Directory bread(block 71) failed
[  176.114644][ T2109] FAT-fs (loop6): Directory bread(block 72) failed
[  176.139745][ T2109] FAT-fs (loop6): Directory bread(block 73) failed
[  177.519524][  T953] print_req_error: 102 callbacks suppressed
[  177.519541][  T953] blk_update_request: I/O error, dev loop1, sector 14720 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0
[  177.541365][  T975] blk_update_request: I/O error, dev loop1, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0
[  177.554179][  T976] blk_update_request: I/O error, dev loop1, sector 3072 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0
[  177.567028][  T973] blk_update_request: I/O error, dev loop1, sector 3072 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0
[  177.600275][  T953] blk_update_request: I/O error, dev loop1, sector 14720 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  177.611736][  T953] blk_update_request: I/O error, dev loop1, sector 14721 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  177.623047][  T953] blk_update_request: I/O error, dev loop1, sector 14722 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  177.635725][  T953] blk_update_request: I/O error, dev loop1, sector 14723 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  177.663211][   T24] audit: type=1400 audit(1782156088.320:3349): avc:  denied  { mounton } for  pid=2104 comm="syz.8.466" path="/12/file0" dev="tmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1
[  177.967604][ T2105] EXT4-fs (loop8): Test dummy encryption mode enabled
[  178.170381][ T2105] EXT4-fs: failed to create workqueue
[  178.243380][ T2137] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 0)
[  178.252129][ T2137] FAT-fs (loop1): Filesystem has been set read-only
[  178.586077][ T2105] EXT4-fs (loop8): mount failed
[  179.681366][  T953] blk_update_request: I/O error, dev loop1, sector 3072 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0
[  179.701087][  T973] blk_update_request: I/O error, dev loop1, sector 14720 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0
[  179.815242][   T24] audit: type=1400 audit(1782156090.430:3350): avc:  denied  { ioctl } for  pid=2145 comm="syz.1.475" path="socket:[21846]" dev="sockfs" ino=21846 ioctlcmd=0x6722 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  179.918800][  T976] buffer_io_error: 81 callbacks suppressed
[  179.918887][  T976] Buffer I/O error on dev loop1p2, logical block 4080, async page read
[  180.122600][   T24] audit: type=1400 audit(1782156090.780:3351): avc:  denied  { connect } for  pid=2155 comm="syz.5.479" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  180.223479][ T2156] netlink: 'syz.5.479': attribute type 1 has an invalid length.
[  180.236414][ T2151] loop_reread_partitions: partition scan of loop1 () failed (rc=-16)
[  180.765057][ T2156] netlink: 'syz.5.479': attribute type 1 has an invalid length.
[  180.772845][ T2156] netlink: 'syz.5.479': attribute type 1 has an invalid length.
[  180.966707][  T953] udevd[953]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory
[  180.966784][ T1053] udevd[1053]: inotify_add_watch(7, /dev/loop1p7, 10) failed: No such file or directory
[  180.982675][  T973] udevd[973]: inotify_add_watch(7, /dev/loop1p6, 10) failed: No such file or directory
[  180.997410][  T976] udevd[976]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory
[  181.019981][  T975] udevd[975]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory
[  181.064538][ T2171] netlink: 12 bytes leftover after parsing attributes in process `syz.8.481'.
[  181.175257][ T2162] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue
[  181.236055][ T2162] ext4 filesystem being mounted at /85/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  181.418627][   T24] audit: type=1400 audit(1782156092.060:3352): avc:  denied  { connect } for  pid=2147 comm="syz.3.477" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  181.438745][   T24] audit: type=1400 audit(1782156092.060:3353): avc:  denied  { bind } for  pid=2147 comm="syz.3.477" lport=4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  182.055392][ T2178] netlink: 20 bytes leftover after parsing attributes in process `syz.1.480'.
[  182.374835][ T2181] device erspan0 entered promiscuous mode
[  182.381501][ T2181] device macsec1 entered promiscuous mode
[  182.674621][ T2181] device erspan0 left promiscuous mode
[  182.973558][ T2188] overlayfs: unrecognized mount option "\" or missing value
[  182.987628][  T287] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[  183.076331][ T2195] overlayfs: failed to clone upperpath
[  187.953900][  T287] usb 9-1: device descriptor read/all, error -71
[  190.909263][ T2234] netlink: 28 bytes leftover after parsing attributes in process `syz.5.498'.
[  191.021258][ T2239] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  191.043565][ T2239] device bridge_slave_0 left promiscuous mode
[  191.044310][   T24] audit: type=1400 audit(1782156101.700:3354): avc:  denied  { getopt } for  pid=2240 comm="syz.3.501" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  191.080724][ T2239] bridge0: port 1(bridge_slave_0) entered disabled state
[  191.104554][ T2239] device bridge_slave_1 left promiscuous mode
[  191.110906][ T2239] bridge0: port 2(bridge_slave_1) entered disabled state
[  191.178122][   T24] audit: type=1400 audit(1782156101.840:3355): avc:  denied  { getopt } for  pid=2231 comm="syz.8.497" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  191.207883][ T2242] EXT4-fs (loop6): Mount option "nouser_xattr" will be removed by 3.5
[  191.207883][ T2242] Contact linux-ext4@vger.kernel.org if you think we should keep it.
[  191.207883][ T2242] 
[  191.245398][ T2242] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869)
[  191.270599][ T2230] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[  191.283810][ T2230] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  191.307102][ T2230] F2FS-fs (loop1): Found nat_bits in checkpoint
[  191.361057][ T2242] EXT4-fs (loop6): mounted filesystem without journal. Opts: user_xattr,nouser_xattr,norecovery,errors=remount-ro,grpid,
[  191.375269][ T2230] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  191.382388][ T2230] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  191.538351][ T2257] fuse: Bad value for 'user_id'
[  192.685078][ T2270] netlink: 12 bytes leftover after parsing attributes in process `syz.5.505'.
[  195.596859][ T2276] exFAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  195.607603][ T2276] exFAT-fs (loop8): Medium has reported failures. Some data may be lost.
[  195.738440][ T2276] exFAT-fs (loop8): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c91aa, utbl_chksum : 0xe619d30d)
[  196.354825][ T2275] exFAT-fs (loop8): hint_cluster is invalid (17)
[  196.361844][ T2275] exFAT-fs (loop8): error, invalid access to FAT (entry 0xffffffff)
[  196.369956][ T2275] exFAT-fs (loop8): Filesystem has been set read-only
[  196.377246][   T24] audit: type=1400 audit(1782156107.010:3356): avc:  denied  { read write } for  pid=2271 comm="syz.8.506" name="file1" dev="loop8" ino=1048636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  196.401139][   T24] audit: type=1400 audit(1782156107.010:3357): avc:  denied  { open } for  pid=2271 comm="syz.8.506" path="/20/file0/file1" dev="loop8" ino=1048636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  196.489521][ T2291] usb usb8: check_ctrlrecip: process 2291 (syz.6.511) requesting ep 01 but needs 81
[  196.511963][ T2291] usb usb8: usbfs: process 2291 (syz.6.511) did not claim interface 0 before use
[  196.575472][ T2291] netlink: 56 bytes leftover after parsing attributes in process `syz.6.511'.
[  196.843242][ T2291] exFAT-fs (loop6): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbd11d127, utbl_chksum : 0xe619d30d)
[  196.994272][ T2294] EXT4-fs error (device loop1): ext4_orphan_get:1401: inode #15: comm syz.1.510: inode has both inline data and extents flags
[  197.024087][ T2294] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.510: couldn't read orphan inode 15 (err -117)
[  197.046095][ T2294] EXT4-fs (loop1): mounted filesystem without journal. Opts: noblock_validity,resgid=0x000000000000ee00,acl,noload,journal_dev=0x0000000000000003,nodiscard,,errors=continue
[  198.143754][   T15] usb 9-1: new full-speed USB device number 4 using dummy_hcd
[  198.865771][ T2323] EXT4-fs error (device loop8): ext4_orphan_get:1401: inode #15: comm syz.8.518: inode has both inline data and extents flags
[  198.879899][ T2323] EXT4-fs error (device loop8): ext4_orphan_get:1406: comm syz.8.518: couldn't read orphan inode 15 (err -117)
[  198.892618][ T2323] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue
[  201.164480][ T2337] FAT-fs (loop1): Unrecognized mount option "utf8=0Ù‚”LU)v shortname=lower" or missing value
[  201.302619][   T24] audit: type=1400 audit(1782156111.960:3358): avc:  denied  { create } for  pid=2340 comm="syz.6.523" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1
[  203.114159][ T2341] netlink: 28 bytes leftover after parsing attributes in process `syz.6.523'.
[  203.163948][   T24] audit: type=1400 audit(1782156112.760:3359): avc:  denied  { read } for  pid=2334 comm="syz.8.521" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  203.895830][ T2358] erofs: (device loop6): mounted with root inode @ nid 36.
[  204.138728][ T2346] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability
[  204.239692][ T2365] erofs: (device loop6): z_erofs_readahead: readahead error at page 15 @ nid 89
[  204.249055][ T2365] erofs: (device loop6): z_erofs_readahead: readahead error at page 5 @ nid 89
[  204.258138][ T2365] erofs: (device loop6): z_erofs_readahead: readahead error at page 4 @ nid 89
[  204.267922][ T2365] attempt to access beyond end of device
[  204.267922][ T2365] loop6: rw=524288, want=34359738368, limit=16
[  204.280430][ T2365] attempt to access beyond end of device
[  204.280430][ T2365] loop6: rw=524288, want=136, limit=16
[  204.291933][ T2365] attempt to access beyond end of device
[  204.291933][ T2365] loop6: rw=524288, want=88, limit=16
[  204.303187][ T2365] erofs: (device loop6): z_erofs_readpage: failed to read, err [-117]
[  204.311591][ T2365] erofs: (device loop6): z_erofs_readpage: failed to read, err [-117]
[  204.320018][ T2365] erofs: (device loop6): z_erofs_readpage: failed to read, err [-117]
[  204.328448][ T2365] erofs: (device loop6): z_erofs_readpage: failed to read, err [-117]
[  204.378150][   T24] audit: type=1400 audit(1782156115.040:3360): avc:  denied  { lock } for  pid=2363 comm="syz.1.529" path="socket:[22086]" dev="sockfs" ino=22086 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1
[  204.814473][ T2362] F2FS-fs (loop8): Invalid log_blocksize (268), supports only 12
[  204.822273][ T2362] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock
[  204.943235][ T2364] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue
[  204.952362][ T2362] F2FS-fs (loop8): invalid crc value
[  204.952527][ T2364] ext4 filesystem being mounted at /95/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  204.982536][ T2362] F2FS-fs (loop8): Found nat_bits in checkpoint
[  205.750406][ T2362] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0
[  205.757803][ T2362] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5
[  205.765554][ T2388] EXT4-fs (loop6): Ignoring removed bh option
[  205.787758][ T2388] EXT4-fs (loop6): mounted filesystem without journal. Opts: i_version,nogrpid,bh,,errors=continue
[  205.798616][ T2388] ext4 filesystem being mounted at /98/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  207.631293][   T24] audit: type=1400 audit(1782156118.290:3361): avc:  denied  { getopt } for  pid=2360 comm="syz.8.528" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  208.282395][ T2416] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue
[  208.291473][ T2416] ext4 filesystem being mounted at /97/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  208.829580][   T24] audit: type=1400 audit(1782156119.490:3362): avc:  denied  { accept } for  pid=2423 comm="syz.6.542" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  208.940086][ T2422] F2FS-fs (loop8): invalid crc value
[  208.969626][ T2422] F2FS-fs (loop8): Found nat_bits in checkpoint
[  209.024423][ T2422] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5
[  209.387214][ T2444] netlink: 'syz.6.545': attribute type 3 has an invalid length.
[  209.759669][ T2451] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a800e018, mo2=0002]
[  211.141153][ T2451] System zones: 0-5
[  211.150283][ T2451] EXT4-fs (loop1): mounted filesystem without journal. Opts: debug,journal_dev=0x0000000000000802,inlinecrypt,nouid32,grpjquota=,nobarrier,nodiscard,nodiscard,nodioread_nolock,,errors=continue
[  211.444048][ T2461] EXT4-fs (loop6): Test dummy encryption mode enabled
[  211.461183][ T2461] EXT4-fs (loop6): Mount option "journal_checksum" incompatible with ext2
[  212.790148][ T2473] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  213.043776][   T24] audit: type=1400 audit(1782156122.850:3363): avc:  denied  { name_bind } for  pid=2466 comm="syz.3.552" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1
[  213.103474][   T24] audit: type=1400 audit(1782156122.850:3364): avc:  denied  { node_bind } for  pid=2466 comm="syz.3.552" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1
[  213.174833][   T24] audit: type=1326 audit(1782156123.840:3365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2483 comm="syz.5.557" exe="/root/ci2-android-5-10/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb5ffbdfe59 code=0x0
[  213.526931][ T2477] EXT4-fs error (device loop6): ext4_fill_super:4959: inode #2: comm syz.6.554: iget: bad extended attribute block 2037609061
[  213.566153][ T2477] EXT4-fs (loop6): get root inode failed
[  213.571969][ T2477] EXT4-fs (loop6): mount failed
[  214.493781][   T24] audit: type=1326 audit(1782156125.150:3366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2495 comm="syz.1.559" exe="/root/ci2-android-5-10/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbc5339fe59 code=0x0
[  214.545501][ T1729] attempt to access beyond end of device
[  214.545501][ T1729] loop8: rw=2049, want=45112, limit=40427
[  214.732942][ T2509] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  215.384458][ T2509] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready
[  215.417505][ T2509] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready
[  215.428166][ T2509] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready
[  215.436993][ T2509] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready
[  215.445106][ T2509] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready
[  215.453285][ T2509] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready
[  215.461614][ T2512] netlink: 4 bytes leftover after parsing attributes in process `syz.6.563'.
[  215.576576][ T2514] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,init_itable,quota,,errors=continue
[  215.588428][ T2514] ext4 filesystem being mounted at /102/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  215.650853][ T2514] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  215.692940][ T2514] overlayfs: missing 'lowerdir'
[  215.705615][   T24] audit: type=1326 audit(1782156126.370:3367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2524 comm="syz.8.558" exe="/root/ci2-android-5-10/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2f4960be59 code=0x0
[  215.750929][   T24] audit: type=1400 audit(1782156126.400:3368): avc:  denied  { create } for  pid=2513 comm="syz.1.564" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=sock_file permissive=1
[  215.793308][   T24] audit: type=1400 audit(1782156126.400:3369): avc:  denied  { write } for  pid=2513 comm="syz.1.564" name="file0" dev="loop1" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=sock_file permissive=1
[  215.978539][ T2536] SELinux:  Context : is not valid (left unmapped).
[  216.063893][   T24] audit: type=1400 audit(1782156126.650:3370): avc:  denied  { relabelto } for  pid=2528 comm="syz.5.567" name="rdma.current" dev="tmpfs" ino=572 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=":"
[  216.205787][   T24] audit: type=1400 audit(1782156126.650:3371): avc:  denied  { associate } for  pid=2528 comm="syz.5.567" name="rdma.current" dev="tmpfs" ino=572 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon=":"
[  216.471201][ T2544] netlink: 24 bytes leftover after parsing attributes in process `syz.3.569'.
[  216.579881][ T2544] netlink: 4 bytes leftover after parsing attributes in process `syz.3.569'.
[  216.620133][   T24] audit: type=1400 audit(1782156127.280:3372): avc:  denied  { unlink } for  pid=489 comm="syz-executor" name="rdma.current" dev="tmpfs" ino=572 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=":"
[  217.923734][   T24] audit: type=1400 audit(1782156128.550:3373): avc:  denied  { getattr } for  pid=2533 comm="syz.1.568" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=22261 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  218.123538][   T24] audit: type=1326 audit(1782156128.580:3374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2560 comm="syz.3.575" exe="/root/ci2-android-5-10/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe33b364e59 code=0x0
[  218.576169][ T2570] overlayfs: failed to clone upperpath
[  219.727171][ T2585] tipc: Failed to remove local publication {66,0,0}/3495937897
[  219.734868][ T2585] tipc: Failed to remove local publication {66,0,0}/3495937896
[  220.651449][   T24] audit: type=1326 audit(1782156131.310:3375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2588 comm="syz.8.581" exe="/root/ci2-android-5-10/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2f4960be59 code=0x0
[  221.118461][   T24] audit: type=1400 audit(1782156131.710:3376): avc:  denied  { accept } for  pid=2596 comm="syz.3.583" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1
[  221.258056][ T2590] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue
[  221.267216][ T2590] ext4 filesystem being mounted at /104/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  223.902761][   T24] audit: type=1326 audit(1782156134.560:3377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2618 comm="syz.6.588" exe="/root/ci2-android-5-10/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcc680e5e59 code=0x0
[  225.625064][ T2637] netlink: 'syz.3.591': attribute type 16 has an invalid length.
[  225.660393][ T2637] netlink: 'syz.3.591': attribute type 17 has an invalid length.
[  226.043038][ T2637] bridge0: port 2(bridge_slave_1) entered blocking state
[  226.050295][ T2637] bridge0: port 2(bridge_slave_1) entered forwarding state
[  226.057667][ T2637] bridge0: port 1(bridge_slave_0) entered blocking state
[  226.064750][ T2637] bridge0: port 1(bridge_slave_0) entered forwarding state
[  226.209791][ T2637] bridge0: port 1(bridge_slave_0) entered disabled state
[  226.218185][ T2637] bridge0: port 2(bridge_slave_1) entered disabled state
[  226.283835][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth3: link becomes ready
[  226.291464][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth2: link becomes ready
[  226.299417][  T994] ip6_tunnel: syztnl2 xmit: Local address not yet configured!
[  226.311350][  T994] ip6_tunnel: syztnl2 xmit: Local address not yet configured!
[  226.333737][    C0] ip6_tunnel: syztnl2 xmit: Local address not yet configured!
[  226.483762][    C0] ip6_tunnel: syztnl2 xmit: Local address not yet configured!
[  226.831525][ T2647] netlink: 4 bytes leftover after parsing attributes in process `syz.3.595'.
[  227.283759][    C0] ip6_tunnel: syztnl2 xmit: Local address not yet configured!
[  227.661569][   T24] audit: type=1400 audit(1782156138.270:3378): avc:  denied  { append } for  pid=2664 comm="syz.8.601" name="rtc0" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  227.927619][ T2670] netlink: 8 bytes leftover after parsing attributes in process `syz.8.601'.
[  227.936750][ T2670] netlink: 'syz.8.601': attribute type 6 has an invalid length.
[  228.217064][   T24] audit: type=1326 audit(1782156138.830:3379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2674 comm="syz.3.603" exe="/root/ci2-android-5-10/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe33b364e59 code=0x0
[  229.625086][ T2696] exfat: Bad value for 'uid'
[  229.883927][ T2694] 9pnet: p9_fd_create_tcp (2694): problem connecting socket to 127.0.0.1
[  230.624266][   T24] audit: type=1400 audit(1782156141.210:3380): avc:  denied  { mount } for  pid=2713 comm="syz.1.612" name="/" dev="configfs" ino=14098 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1
[  230.653768][    C0] ip6_tunnel: syztnl2 xmit: Local address not yet configured!
[  230.707392][ T2716] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (46272!=20869)
[  230.796309][   T53] usb 9-1: new high-speed USB device number 5 using dummy_hcd
[  230.805517][ T2716] EXT4-fs (loop1): corrupt root inode, run e2fsck
[  230.812051][ T2716] EXT4-fs (loop1): mount failed
[  230.813927][   T24] audit: type=1400 audit(1782156141.220:3381): avc:  denied  { search } for  pid=2713 comm="syz.1.612" name="/" dev="configfs" ino=14098 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  230.839286][   T24] audit: type=1400 audit(1782156141.220:3382): avc:  denied  { setattr } for  pid=2713 comm="syz.1.612" name="/" dev="configfs" ino=14098 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  231.082067][   T24] audit: type=1326 audit(1782156141.740:3383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2725 comm="syz.3.616" exe="/root/ci2-android-5-10/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe33b364e59 code=0x0
[  231.801946][   T24] audit: type=1326 audit(1782156142.460:3384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2735 comm="syz.1.617" exe="/root/ci2-android-5-10/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbc5339fe59 code=0x0
[  231.863814][   T53] usb 9-1: unable to get BOS descriptor or descriptor too short
[  231.983837][   T53] usb 9-1: config 1 has an invalid descriptor of length 184, skipping remainder of the config
[  231.995376][   T53] usb 9-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  233.583912][   T53] usb 9-1: string descriptor 0 read error: -71
[  233.590286][   T53] usb 9-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40
[  233.891697][ T2758] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue
[  233.928731][   T53] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  233.964407][   T24] audit: type=1400 audit(1782156144.630:3385): avc:  denied  { lock } for  pid=2757 comm="syz.1.624" path="/108/file0/blkio.throttle.io_serviced" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[  234.004654][   T53] usb 9-1: can't set config #1, error -71
[  234.031076][   T53] usb 9-1: USB disconnect, device number 5
[  234.693729][  T994] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  234.763452][ T2777] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue
[  234.793003][ T2777] ext4 filesystem being mounted at /39/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  234.943702][  T994] usb 2-1: Using ep0 maxpacket: 16
[  234.973275][   T24] audit: type=1326 audit(1782156145.630:3386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2782 comm="syz.6.629" exe="/root/ci2-android-5-10/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcc680e5e59 code=0x0
[  235.103783][  T994] usb 2-1: unable to get BOS descriptor or descriptor too short
[  235.193821][  T994] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7
[  235.268878][   T24] audit: type=1326 audit(1782156145.930:3387): auid=4294967295 uid=3072 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2791 comm="syz.3.631" exe="/root/ci2-android-5-10/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe33b364e59 code=0x0
[  235.321628][ T2793] netlink: 'syz.3.631': attribute type 1 has an invalid length.
[  235.373833][  T994] usb 2-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40
[  235.383043][  T994] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  235.391447][  T994] usb 2-1: Product: syz
[  235.395865][  T994] usb 2-1: Manufacturer: syz
[  235.400566][  T994] usb 2-1: SerialNumber: syz
[  235.555164][ T1729] EXT4-fs error (device loop8): ext4_readdir:223: inode #11: comm syz-executor: path /39/file0/lost+found: directory fails checksum at offset 4096
[  235.570761][ T1729] EXT4-fs error (device loop8): ext4_empty_dir:3104: inode #11: block 4: comm syz-executor: Directory block failed checksum
[  235.584299][ T1729] EXT4-fs error (device loop8): ext4_readdir:223: inode #11: comm syz-executor: path /39/file0/lost+found: directory fails checksum at offset 4096
[  235.599651][ T1729] EXT4-fs error (device loop8): ext4_empty_dir:3104: inode #11: block 4: comm syz-executor: Directory block failed checksum
[  235.613727][ T1729] EXT4-fs error (device loop8): ext4_readdir:223: inode #11: comm syz-executor: path /39/file0/lost+found: directory fails checksum at offset 4096
[  235.629315][ T1729] EXT4-fs error (device loop8): ext4_empty_dir:3104: inode #11: block 4: comm syz-executor: Directory block failed checksum
[  235.642808][ T1729] EXT4-fs error (device loop8): ext4_readdir:223: inode #11: comm syz-executor: path /39/file0/lost+found: directory fails checksum at offset 4096
[  235.657969][   T24] audit: type=1326 audit(1782156146.310:3388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2796 comm="syz.5.634" exe="/root/ci2-android-5-10/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb5ffbdfe59 code=0x0
[  235.660066][ T1729] EXT4-fs error (device loop8): ext4_empty_dir:3104: inode #11: block 4: comm syz-executor: Directory block failed checksum
[  235.686051][  T994] usb 2-1: Audio class v2/v3 interfaces need an interface association
[  235.697391][ T1729] EXT4-fs error (device loop8): ext4_readdir:223: inode #11: comm syz-executor: path /39/file0/lost+found: directory fails checksum at offset 4096
[  235.716487][  T994] snd-usb-audio: probe of 2-1:1.0 failed with error -22
[  235.725437][ T1729] EXT4-fs error (device loop8): ext4_empty_dir:3104: inode #11: block 4: comm syz-executor: Directory block failed checksum
[  236.129158][  T994] usb 2-1: 2:1 : can't get High Capability descriptor
[  236.654866][ T2813] bridge0: port 1(bridge_slave_0) entered blocking state
[  236.662031][ T2813] bridge0: port 1(bridge_slave_0) entered disabled state
[  236.669880][ T2813] device bridge_slave_0 entered promiscuous mode
[  236.680050][ T2813] bridge0: port 2(bridge_slave_1) entered blocking state
[  236.687335][ T2813] bridge0: port 2(bridge_slave_1) entered disabled state
[  236.694937][ T2813] device bridge_slave_1 entered promiscuous mode
[  236.769006][ T2813] bridge0: port 2(bridge_slave_1) entered blocking state
[  236.776294][ T2813] bridge0: port 2(bridge_slave_1) entered forwarding state
[  236.783624][ T2813] bridge0: port 1(bridge_slave_0) entered blocking state
[  236.790716][ T2813] bridge0: port 1(bridge_slave_0) entered forwarding state
[  239.005790][    T7] bridge0: port 1(bridge_slave_0) entered disabled state
[  239.017746][   T15] usb 2-1: USB disconnect, device number 7
[  239.047143][    T7] bridge0: port 2(bridge_slave_1) entered disabled state
[  239.064532][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  239.072221][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  239.088013][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  239.096696][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  239.115869][    T7] bridge0: port 1(bridge_slave_0) entered blocking state
[  239.122959][    T7] bridge0: port 1(bridge_slave_0) entered forwarding state
[  239.137206][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  239.155715][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  239.167864][    T7] bridge0: port 2(bridge_slave_1) entered blocking state
[  239.175000][    T7] bridge0: port 2(bridge_slave_1) entered forwarding state
[  239.194876][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  239.203360][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  239.211701][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  239.443771][    C0] ip6_tunnel: syztnl2 xmit: Local address not yet configured!
[  240.127324][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  240.147331][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  240.156004][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  240.167026][ T2813] device veth0_vlan entered promiscuous mode
[  240.174255][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  240.182395][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  240.191915][ T2837] netlink: 36 bytes leftover after parsing attributes in process `syz.6.643'.
[  240.213174][ T1311] device bridge_slave_1 left promiscuous mode
[  240.219552][ T1311] bridge0: port 2(bridge_slave_1) entered disabled state
[  240.227719][ T1311] device bridge_slave_0 left promiscuous mode
[  240.239330][ T1311] bridge0: port 1(bridge_slave_0) entered disabled state
[  240.254556][ T1311] device veth1_macvtap left promiscuous mode
[  240.267955][ T1311] device veth0_vlan left promiscuous mode
[  240.428243][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  240.447588][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  240.494254][ T2813] device veth1_macvtap entered promiscuous mode
[  240.512308][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  240.527388][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  240.553469][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  240.586184][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  240.612191][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  240.638221][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  240.664621][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  240.734647][   T24] audit: type=1326 audit(1782156151.400:3389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2842 comm="syz.9.638" exe="/root/ci2-android-5-10/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f49323e5e59 code=0x0
[  240.788719][   T24] audit: type=1326 audit(1782156151.450:3390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2845 comm="syz.6.645" exe="/root/ci2-android-5-10/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcc680e5e59 code=0x0
[  241.587876][   T24] audit: type=1326 audit(1782156152.250:3391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2860 comm="syz.9.648" exe="/root/ci2-android-5-10/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f49323e5e59 code=0x0
[  243.527108][ T2891] netlink: 12 bytes leftover after parsing attributes in process `syz.3.657'.
[  244.166473][   T24] audit: type=1326 audit(1782156154.830:3392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2898 comm="syz.3.659" exe="/root/ci2-android-5-10/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe33b364e59 code=0x0
[  244.312843][   T24] audit: type=1326 audit(1782156154.970:3393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2903 comm="syz.5.660" exe="/root/ci2-android-5-10/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb5ffbdfe59 code=0x0
[  244.625517][ T2911] netlink: 'syz.9.661': attribute type 3 has an invalid length.
[  247.513711][  T994] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  247.980982][   T24] audit: type=1400 audit(1782156158.630:3394): avc:  denied  { create } for  pid=2936 comm="syz.6.669" name="file2" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  248.254641][   T24] audit: type=1400 audit(1782156158.630:3395): avc:  denied  { append } for  pid=2936 comm="syz.6.669" name="file2" dev="tmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  249.135060][   T24] audit: type=1400 audit(1782156158.630:3396): avc:  denied  { open } for  pid=2936 comm="syz.6.669" path="/129/file2" dev="tmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  249.157772][   T24] audit: type=1400 audit(1782156158.640:3397): avc:  denied  { ioctl } for  pid=2936 comm="syz.6.669" path="/129/file2" dev="tmpfs" ino=737 ioctlcmd=0x4c08 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  249.511726][   T24] audit: type=1400 audit(1782156159.640:3398): avc:  denied  { unlink } for  pid=535 comm="syz-executor" name="file2" dev="tmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  249.562890][   T24] audit: type=1326 audit(1782156160.220:3399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2951 comm="syz.6.673" exe="/root/ci2-android-5-10/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcc680e5e59 code=0x0
[  251.164197][   T24] audit: type=1326 audit(1782156161.820:3400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2965 comm="syz.3.676" exe="/root/ci2-android-5-10/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe33b364e59 code=0x0
[  252.163952][  T994] usb 2-1: device descriptor read/all, error -71
[  252.998653][ T2980] EXT4-fs error (device loop9): ext4_orphan_get:1401: inode #15: comm syz.9.678: iget: bad i_size value: 38620345925642
[  253.012229][ T2980] EXT4-fs error (device loop9): ext4_orphan_get:1406: comm syz.9.678: couldn't read orphan inode 15 (err -117)
[  253.024581][ T2980] EXT4-fs (loop9): mounted filesystem without journal. Opts: ,errors=continue
[  254.159320][ T2996] EXT4-fs error (device loop9): ext4_validate_block_bitmap:429: comm syz.9.678: bg 0: block 5: invalid block bitmap
[  254.300002][ T3002] EXT4-fs (loop9): shut down requested (1)
[  254.374371][ T2996] EXT4-fs (loop9): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1016 with error 28
[  254.664150][ T2996] EXT4-fs (loop9): This should not happen!! Data will be lost
[  254.664150][ T2996] 
[  254.692577][ T2996] EXT4-fs (loop9): Total free blocks count 0
[  254.705451][ T2996] EXT4-fs (loop9): Free/Dirty block details
[  254.720069][ T2996] EXT4-fs (loop9): free_blocks=0
[  254.732349][ T2996] EXT4-fs (loop9): dirty_blocks=1020
[  254.747290][ T2996] EXT4-fs (loop9): Block reservation details
[  254.794999][   T24] audit: type=1326 audit(1782156165.460:3401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3012 comm="syz.3.687" exe="/root/ci2-android-5-10/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe33b364e59 code=0x0
[  254.795493][ T2996] EXT4-fs (loop9): i_reserved_data_blocks=1020
[  256.368418][ T3031] xt_time: invalid argument - start or stop time greater than 23:59:59
[  256.694893][ T3037] netlink: 'syz.9.688': attribute type 6 has an invalid length.
[  256.805147][ T3031]  loop9: p1 p2 p3 < p5 p6 p7 >
[  257.063770][ T3031] loop9: p2 size 16775168 extends beyond EOD, truncated
[  257.092318][ T3031] loop9: p5 start 4294970168 is beyond EOD, truncated
[  257.103990][ T3040] exfat: Deprecated parameter 'utf8'
[  257.109614][ T3040] exfat: Deprecated parameter 'utf8'
[  257.115088][ T3040] exfat: Deprecated parameter 'namecase'
[  257.120821][ T3040] exfat: Deprecated parameter 'namecase'
[  257.170819][ T3040] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d)
[  257.185297][   T24] audit: type=1400 audit(1782156167.850:3402): avc:  denied  { mounton } for  pid=3033 comm="syz.1.692" path="/119/file0/file0" dev="loop1" ino=1048654 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  257.185318][ T3040] fuse: Unknown parameter '00000000000000000000'
[  257.218341][ T3040] tipc: Trying to set illegal importance in message
[  257.354590][ T2952] udevd[2952]: inotify_add_watch(7, /dev/loop9p3, 10) failed: No such file or directory
[  257.365092][ T2806] udevd[2806]: inotify_add_watch(7, /dev/loop9p2, 10) failed: No such file or directory
[  257.378429][ T2617] udevd[2617]: inotify_add_watch(7, /dev/loop9p6, 10) failed: No such file or directory
[  257.390721][ T2580] udevd[2580]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory
[  257.409686][ T3046] udevd[3046]: inotify_add_watch(7, /dev/loop9p7, 10) failed: No such file or directory
[  258.003813][    C0] ip6_tunnel: syztnl2 xmit: Local address not yet configured!
[  258.799702][   T24] audit: type=1400 audit(1782156168.490:3403): avc:  denied  { write } for  pid=3053 comm="syz.1.698" name="vga_arbiter" dev="devtmpfs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[  258.854908][   T24] audit: type=1400 audit(1782156168.490:3404): avc:  denied  { open } for  pid=3053 comm="syz.1.698" path="/dev/vga_arbiter" dev="devtmpfs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[  260.037729][ T3077] EXT4-fs (loop1): Unrecognized mount option "fowner>00000000000000000000" or missing value
[  260.193212][ T3049] EXT4-fs (loop9): mounted filesystem without journal. Opts: ,errors=continue
[  260.218087][ T3049] ext4 filesystem being mounted at /9/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  260.493031][ T3086] SELinux:  Context system_u:object_r:devlog_t:s0 is not valid (left unmapped).
[  261.614328][   T24] audit: type=1400 audit(1782156171.140:3405): avc:  denied  { create } for  pid=3082 comm="syz.3.705" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1
[  261.820266][   T24] audit: type=1400 audit(1782156171.150:3406): avc:  denied  { relabelfrom } for  pid=3082 comm="syz.3.705" name="NETLINK" dev="sockfs" ino=24195 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1
[  261.851121][   T24] audit: type=1400 audit(1782156171.160:3407): avc:  denied  { relabelto } for  pid=3082 comm="syz.3.705" name="NETLINK" dev="sockfs" ino=24195 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=netlink_nflog_socket permissive=1 trawcon="system_u:object_r:devlog_t:s0"
[  264.379244][ T3108] fuse: Unknown parameter '00000000000000000000'
[  264.543114][   T24] audit: type=1326 audit(1782156175.202:3408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3116 comm="syz.3.715" exe="/root/ci2-android-5-10/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe33b364e59 code=0x0
[  264.995563][ T3110] F2FS-fs (loop9): invalid crc value
[  265.018609][ T3110] F2FS-fs (loop9): Found nat_bits in checkpoint
[  265.063387][ T3110] F2FS-fs (loop9): Start checkpoint disabled!
[  265.073899][ T3110] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e6
[  265.220840][   T24] audit: type=1400 audit(1782156175.882:3409): avc:  denied  { setopt } for  pid=3109 comm="syz.9.712" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  265.585233][   T24] audit: type=1400 audit(1782156176.002:3410): avc:  denied  { write } for  pid=3109 comm="syz.9.712" path="socket:[24232]" dev="sockfs" ino=24232 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  265.650258][   T24] audit: type=1400 audit(1782156176.002:3411): avc:  denied  { create } for  pid=3109 comm="syz.9.712" name="file7" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1
[  265.770492][   T24] audit: type=1326 audit(1782156176.422:3412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3138 comm="syz.6.720" exe="/root/ci2-android-5-10/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcc680e5e59 code=0x0
[  265.771867][  T564] attempt to access beyond end of device
[  265.771867][  T564] loop9: rw=2049, want=40984, limit=40427
[  265.865791][ T3143] 9p: Unknown uid 18446744073709551615
[  266.660202][   T24] audit: type=1400 audit(1782156177.012:3413): avc:  denied  { associate } for  pid=3147 comm="syz.5.721" name="cgroup.controllers" scontext=root:object_r:etc_runtime_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1
[  270.704838][ T3163] overlayfs: missing 'lowerdir'
[  270.714005][ T3165] overlayfs: failed to clone upperpath
[  271.420449][ T3165] overlayfs: failed to resolve './file1': -2
[  271.480637][   T24] audit: type=1326 audit(1782156181.902:3414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3174 comm="syz.1.727" exe="/root/ci2-android-5-10/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbc5339fe59 code=0x0
[  273.643809][   T24] audit: type=1400 audit(1782156183.412:3415): avc:  denied  { create } for  pid=3188 comm="syz.6.730" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[  273.775793][ T3196] erofs: (device loop1): mounted with root inode @ nid 36.
[  273.783194][ T3196] erofs: (device loop1): init_inode_xattrs: xattr_isize 12 of nid 36 is not supported yet
[  273.793161][ T3196] SELinux: (dev loop1, type erofs) has no security xattr handler
[  274.739000][ T3203] tipc: Started in network mode
[  274.744087][ T3203] tipc: Own node identity ac1414aa, cluster identity 4711
[  274.752264][ T3203] tipc: Enabled bearer <udp:s>, priority 10
[  275.769649][   T20] tipc: 32-bit node address hash set to aa1414ac
[  278.232724][ T3215] netlink: 16 bytes leftover after parsing attributes in process `syz.6.733'.
[  279.559382][ T3218] EXT4-fs (loop1): 1 truncate cleaned up
[  279.566306][ T3218] EXT4-fs (loop1): mounted filesystem without journal. Opts: noload,stripe=0x000000000000030c,jqfmt=vfsv1,nojournal_checksum,jqfmt=vfsv1,usrjquota=,,errors=continue
[  280.546022][ T3251] EXT4-fs (loop1): Ignoring removed orlov option
[  280.566477][ T3251] EXT4-fs (loop1): mounted filesystem without journal. Opts: block_validity,bsddf,user_xattr,norecovery,debug_want_extra_isize=0x0000000000000010,orlov,usrquota,grpquota,norecovery,,errors=continue
[  280.610695][ T3237] F2FS-fs (loop9): Insane cp_payload (553648128 >= 504)
[  280.623993][ T3237] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock
[  280.638731][ T3237] F2FS-fs (loop9): invalid crc value
[  280.656895][ T3237] F2FS-fs (loop9): Ignore s_resuid=0, s_resgid=65535 w/o reserve_root
[  280.695058][ T3237] F2FS-fs (loop9): Found nat_bits in checkpoint
[  280.736133][ T3237] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0
[  280.743228][ T3237] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5
[  281.509130][ T3274] attempt to access beyond end of device
[  281.509130][ T3274] loop9: rw=10241, want=53256, limit=40427
[  281.532999][ T3274] attempt to access beyond end of device
[  281.532999][ T3274] loop9: rw=2049, want=53272, limit=40427
[  281.610092][   T24] audit: type=1326 audit(1782156192.272:3416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3272 comm="syz.5.749" exe="/root/ci2-android-5-10/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb5ffbdfe59 code=0x0
[  282.571695][ T2813] attempt to access beyond end of device
[  282.571695][ T2813] loop9: rw=2049, want=45104, limit=40427
[  282.583580][ T2813] attempt to access beyond end of device
[  282.583580][ T2813] loop9: rw=2049, want=45120, limit=40427
[  283.792571][   T24] audit: type=1326 audit(1782156194.452:3417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3299 comm="syz.5.756" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5ffbdfe59 code=0x7ffc0000
[  283.842323][   T24] audit: type=1326 audit(1782156194.482:3418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3299 comm="syz.5.756" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5ffbdfe59 code=0x7ffc0000
[  283.886291][   T24] audit: type=1326 audit(1782156194.482:3419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3299 comm="syz.5.756" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7fb5ffbdfe59 code=0x7ffc0000
[  283.924001][   T24] audit: type=1326 audit(1782156194.482:3420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3299 comm="syz.5.756" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5ffbdfe59 code=0x7ffc0000
[  283.963707][   T24] audit: type=1326 audit(1782156194.482:3421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3299 comm="syz.5.756" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5ffbdfe59 code=0x7ffc0000
[  284.015635][ T3295] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue
[  284.033459][   T24] audit: type=1326 audit(1782156194.482:3422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3299 comm="syz.5.756" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7fb5ffbdfe59 code=0x7ffc0000
[  284.103052][ T3295] ext4 filesystem being mounted at /130/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  284.118245][   T24] audit: type=1326 audit(1782156194.482:3423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3299 comm="syz.5.756" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5ffbdfe59 code=0x7ffc0000
[  284.391579][   T24] audit: type=1326 audit(1782156194.482:3424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3299 comm="syz.5.756" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5ffbdfe59 code=0x7ffc0000
[  284.487811][ T3308] xt_ecn: cannot match TCP bits for non-tcp packets
[  284.554620][   T24] audit: type=1326 audit(1782156194.482:3425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3299 comm="syz.5.756" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb5ffbdfe59 code=0x7ffc0000
[  284.891201][ T3311] netlink: 16 bytes leftover after parsing attributes in process `syz.1.754'.
[  289.587486][   T24] kauditd_printk_skb: 49 callbacks suppressed
[  289.587501][   T24] audit: type=1326 audit(1782156200.252:3475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3357 comm="syz.5.771" exe="/root/ci2-android-5-10/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb5ffbdfe59 code=0x0
[  289.675063][   T24] audit: type=1326 audit(1782156200.302:3476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3361 comm="syz.6.772" exe="/root/ci2-android-5-10/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcc680e5e59 code=0x0
[  289.737742][ T3351] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled
[  289.963798][ T3351] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled
[  289.981665][ T3351] EXT4-fs (loop1): Mount option "nouser_xattr" will be removed by 3.5
[  289.981665][ T3351] Contact linux-ext4@vger.kernel.org if you think we should keep it.
[  289.981665][ T3351] 
[  290.010590][ T3351] EXT4-fs (loop1): Test dummy encryption mode enabled
[  290.060677][ T3351] EXT4-fs (loop1): can't mount with journal_checksum, fs mounted w/o journal
[  292.388549][ T3401] xt_hashlimit: size too large, truncated to 1048576
[  293.224390][ T3402] EXT4-fs (loop1): Ignoring removed bh option
[  293.250461][ T3402] EXT4-fs (loop1): mounted filesystem without journal. Opts: i_version,nogrpid,bh,,errors=continue
[  293.261396][ T3402] ext4 filesystem being mounted at /133/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  293.843736][    C0] ip6_tunnel: syztnl2 xmit: Local address not yet configured!
[  294.671220][   T24] audit: type=1326 audit(1782156205.332:3477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3408 comm="syz.6.782" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fcc680dfbd7 code=0x7ffc0000
[  294.698852][   T24] audit: type=1326 audit(1782156205.332:3478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3408 comm="syz.6.782" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fcc680871d9 code=0x7ffc0000
[  294.724338][   T24] audit: type=1326 audit(1782156205.332:3479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3408 comm="syz.6.782" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fcc680dfbd7 code=0x7ffc0000
[  294.749515][   T24] audit: type=1326 audit(1782156205.332:3480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3408 comm="syz.6.782" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fcc680871d9 code=0x7ffc0000
[  294.774241][   T24] audit: type=1326 audit(1782156205.332:3481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3408 comm="syz.6.782" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fcc680dfbd7 code=0x7ffc0000
[  294.830738][   T24] audit: type=1326 audit(1782156205.332:3482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3408 comm="syz.6.782" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fcc680871d9 code=0x7ffc0000
[  294.993836][   T24] audit: type=1326 audit(1782156205.332:3483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3408 comm="syz.6.782" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fcc680dfbd7 code=0x7ffc0000
[  295.059240][   T24] audit: type=1326 audit(1782156205.332:3484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3408 comm="syz.6.782" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fcc680871d9 code=0x7ffc0000
[  295.104142][ T3426] netlink: 64 bytes leftover after parsing attributes in process `syz.5.785'.
[  295.113347][   T24] audit: type=1326 audit(1782156205.332:3485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3408 comm="syz.6.782" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fcc680dfbd7 code=0x7ffc0000
[  295.153718][   T24] audit: type=1326 audit(1782156205.332:3486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3408 comm="syz.6.782" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fcc680871d9 code=0x7ffc0000
[  295.199257][ T3427] netlink: 8 bytes leftover after parsing attributes in process `syz.5.785'.
[  295.304282][ T3419] netlink: 104 bytes leftover after parsing attributes in process `syz.1.784'.
[  297.194802][ T3453] x_tables: arp_tables: IDLETIMER target: not valid for this family
[  300.243120][   T24] kauditd_printk_skb: 59 callbacks suppressed
[  300.243132][   T24] audit: type=1326 audit(1782156210.901:3546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3481 comm="syz.3.800" exe="/root/ci2-android-5-10/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe33b364e59 code=0x0
[  300.857214][   T24] audit: type=1400 audit(1782156211.521:3547): avc:  denied  { create } for  pid=3491 comm="syz.9.802" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[  300.878214][ T3495] netlink: 'syz.5.803': attribute type 1 has an invalid length.
[  300.886714][ T3495] netlink: 'syz.5.803': attribute type 2 has an invalid length.
[  303.840493][ T3516] netlink: 'syz.6.809': attribute type 12 has an invalid length.
[  304.839182][ T3529] netlink: 44 bytes leftover after parsing attributes in process `syz.6.810'.
[  304.902450][ T3530] netlink: 68 bytes leftover after parsing attributes in process `syz.3.812'.
[  305.121076][ T3522] netlink: 8 bytes leftover after parsing attributes in process `syz.5.811'.
[  305.130418][ T3528] netlink: 8 bytes leftover after parsing attributes in process `syz.5.811'.
[  305.637896][   T24] audit: type=1326 audit(1782156216.301:3548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3540 comm="syz.3.815" exe="/root/ci2-android-5-10/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe33b364e59 code=0x0
[  308.607840][ T3561] netlink: 36 bytes leftover after parsing attributes in process `syz.6.819'.
[  308.754667][   T24] audit: type=1326 audit(1782156219.411:3549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3560 comm="syz.5.820" exe="/root/ci2-android-5-10/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb5ffbdfe59 code=0x0
[  309.404196][   T24] audit: type=1326 audit(1782156220.071:3550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3574 comm="syz.6.824" exe="/root/ci2-android-5-10/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcc680e5e59 code=0x0
[  311.417367][ T3588] netlink: 36 bytes leftover after parsing attributes in process `syz.5.825'.
[  312.091934][ T3601] netlink: 9 bytes leftover after parsing attributes in process `syz.6.830'.
[  312.354749][ T3601] device gretap0 entered promiscuous mode
[  312.703709][   T24] audit: type=1326 audit(1782156223.341:3551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3609 comm="syz.3.832" exe="/root/ci2-android-5-10/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe33b364e59 code=0x0
[  312.750769][   T24] audit: type=1400 audit(1782156223.411:3552): avc:  denied  { wake_alarm } for  pid=3613 comm="syz.6.833" capability=35  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  312.981898][ T3617] xt_policy: neither incoming nor outgoing policy selected
[  314.068726][   T24] audit: type=1326 audit(1782156224.731:3553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3621 comm="syz.3.835" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe33b364e59 code=0x7ffc0000
[  314.173693][   T24] audit: type=1326 audit(1782156224.771:3554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3621 comm="syz.3.835" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe33b364e59 code=0x7ffc0000
[  314.202279][ T3625] ------------[ cut here ]------------
[  314.208718][   T24] audit: type=1326 audit(1782156224.771:3555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3621 comm="syz.3.835" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe33b364e59 code=0x7ffc0000
[  314.223905][ T3625] trace type BPF program uses run-time allocation
[  314.260489][ T3625] WARNING: CPU: 1 PID: 3625 at kernel/bpf/verifier.c:10518 check_map_prog_compatibility+0x5d8/0x740
[  314.282049][   T24] audit: type=1326 audit(1782156224.771:3556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3621 comm="syz.3.835" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe33b364e59 code=0x7ffc0000
[  314.282128][ T3625] Modules linked in:
[  314.333678][   T24] audit: type=1326 audit(1782156224.771:3557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3621 comm="syz.3.835" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe33b364e59 code=0x7ffc0000
[  314.344755][ T3625] 
[  314.369378][   T24] audit: type=1326 audit(1782156224.771:3558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3621 comm="syz.3.835" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe33b364e59 code=0x7ffc0000
[  314.394598][ T3625] CPU: 0 PID: 3625 Comm: syz.6.836 Not tainted syzkaller #0
[  314.402100][ T3625] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  314.412377][   T24] audit: type=1326 audit(1782156224.771:3559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3621 comm="syz.3.835" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe33b364e59 code=0x7ffc0000
[  314.437353][ T3625] RIP: 0010:check_map_prog_compatibility+0x5d8/0x740
[  314.444135][ T3625] Code: 85 e9 14 fe ff ff e8 e7 da ef ff 31 c0 e9 15 fe ff ff e8 db da ef ff c6 05 a5 c7 4b 05 01 48 c7 c7 e0 d1 25 85 e8 68 ec 03 03 <0f> 0b e9 7d fc ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 9b fa ff
[  314.463916][   T24] audit: type=1326 audit(1782156224.771:3560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3621 comm="syz.3.835" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe33b364e59 code=0x7ffc0000
[  314.488797][ T3625] RSP: 0018:ffffc90000ebf430 EFLAGS: 00010246
[  314.495027][ T3625] RAX: 9d4f9fefa2d82300 RBX: 0000000000000001 RCX: 0000000000080000
[  314.516877][ T3625] RDX: ffffc90009b7e000 RSI: 000000000000d69c RDI: 000000000000d69d
[  314.524998][ T3625] RBP: ffffc90000ebf470 R08: ffff8881f7152fbf R09: 1ffff1103ee2a5f7
[  314.533462][ T3625] R10: dffffc0000000000 R11: ffffed103ee2a5f8 R12: ffff888110c40000
[  314.541899][ T3625] R13: 0000000000000011 R14: dffffc0000000000 R15: ffff88811157d800
[  314.550739][ T3625] FS:  00007fcc66b406c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000
[  314.562844][ T3625] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  314.569567][ T3625] CR2: 0000001b2e706ff8 CR3: 00000001178f2000 CR4: 00000000003506b0
[  314.577994][ T3625] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  314.593736][ T3625] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  314.613020][ T3625] Call Trace:
[  314.623786][ T3625]  ? __fdget+0x1a1/0x230
[  314.638337][ T3625]  resolve_pseudo_ldimm64+0x557/0x10b0
[  314.653347][ T3625]  ? bpf_check+0xdce0/0xdce0
[  314.658079][ T3625]  ? kvmalloc_node+0x88/0x130
[  314.662792][ T3625]  bpf_check+0x91f9/0xdce0
[  314.667334][ T3625]  ? get_page_from_freelist+0x225f/0x23f0
[  314.673277][ T3625]  ? __alloc_pages_nodemask+0x29a/0x640
[  314.679006][ T3625]  ? bpf_get_btf_vmlinux+0x60/0x60
[  314.684175][ T3625]  ? 0xffffffffa002a000
[  314.688543][ T3625]  ? is_bpf_text_address+0x177/0x190
[  314.693942][ T3625]  ? selinux_bpf_prog_alloc+0x51/0x140
[  314.699433][ T3625]  ? __kernel_text_address+0xa0/0x100
[  314.704953][ T3625]  ? unwind_get_return_address+0x4d/0x90
[  314.710639][ T3625]  ? stack_trace_save+0xf0/0xf0
[  314.723341][ T3625]  ? arch_stack_walk+0xee/0x140
[  314.728425][ T3625]  ? stack_trace_save+0xa6/0xf0
[  314.733329][ T3625]  ? stack_trace_snprint+0xe0/0xe0
[  314.738661][ T3625]  ? selinux_bpf_prog_alloc+0x51/0x140
[  314.744224][ T3625]  ? selinux_bpf_prog_alloc+0x51/0x140
[  314.749754][ T3625]  ? __kasan_kmalloc+0xe6/0x100
[  314.754895][ T3625]  ? __kasan_kmalloc+0xd4/0x100
[  314.759801][ T3625]  ? kmem_cache_alloc_trace+0x179/0x2e0
[  314.765474][ T3625]  ? selinux_bpf_prog_alloc+0x51/0x140
[  314.771026][ T3625]  ? security_bpf_prog_alloc+0x62/0x90
[  314.776622][ T3625]  ? bpf_prog_load+0x9fa/0x14e0
[  314.931790][ T3625]  ? __se_sys_bpf+0x49a/0x740
[  315.079128][ T3625]  ? __x64_sys_bpf+0x7b/0x90
[  315.115273][ T3625]  ? do_syscall_64+0x31/0x40
[  315.119996][ T3625]  ? entry_SYSCALL_64_after_hwframe+0x61/0xcb
[  315.127566][ T3625]  ? memset+0x35/0x40
[  315.131654][ T3625]  ? bpf_obj_name_cpy+0x193/0x1e0
[  315.141944][ T3625]  bpf_prog_load+0x1004/0x14e0
[  315.148989][ T3625]  ? map_freeze+0x330/0x330
[  315.153605][ T3625]  ? selinux_bpf+0xc7/0xf0
[  315.171438][ T3625]  ? security_bpf+0x82/0xa0
[  315.182246][ T3625]  __se_sys_bpf+0x49a/0x740
[  315.193139][ T3625]  ? __x64_sys_bpf+0x90/0x90
[  315.202975][ T3625]  ? ____fput+0x15/0x20
[  315.212375][ T3625]  ? __kasan_check_read+0x11/0x20
[  315.223694][ T3625]  __x64_sys_bpf+0x7b/0x90
[  315.233373][ T3625]  do_syscall_64+0x31/0x40
[  315.243052][ T3625]  entry_SYSCALL_64_after_hwframe+0x61/0xcb
[  315.253689][ T3625] RIP: 0033:0x7fcc680e5e59
[  315.258275][ T3625] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  315.297515][ T3625] RSP: 002b:00007fcc66b40028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  315.316202][ T3625] RAX: ffffffffffffffda RBX: 00007fcc6835efa0 RCX: 00007fcc680e5e59
[  315.333656][ T3625] RDX: 0000000000000094 RSI: 00002000000000c0 RDI: 0000000000000005
[  315.350376][ T3625] RBP: 00007fcc6817be6f R08: 0000000000000000 R09: 0000000000000000
[  315.358780][ T3625] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  315.367437][ T3625] R13: 00007fcc6835f038 R14: 00007fcc6835efa0 R15: 00007ffd75cd1b78
[  315.376066][ T3625] ---[ end trace 08cc1177913093cd ]---
[  315.489081][ T3641] netlink: 36 bytes leftover after parsing attributes in process `syz.9.839'.
[  319.909374][ T3673] xt_nat: multiple ranges no longer supported
[  322.945187][   T24] kauditd_printk_skb: 128 callbacks suppressed
[  322.945203][   T24] audit: type=1326 audit(1782156233.611:3689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3693 comm="syz.9.854" exe="/root/ci2-android-5-10/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f49323e5e59 code=0x0
[  324.106636][ T3696] netlink: 80 bytes leftover after parsing attributes in process `syz.3.853'.
[  324.125319][ T3696] 9pnet_virtio: no channels available for device syz
[  325.684524][ T3720] netlink: 8 bytes leftover after parsing attributes in process `syz.1.858'.
[  326.203663][ T3723] netlink: 12 bytes leftover after parsing attributes in process `syz.9.859'.
[  327.624458][ T3737] netlink: 36 bytes leftover after parsing attributes in process `syz.1.861'.
[  327.959259][ T3743] x_tables: arp_tables: IDLETIMER target: not valid for this family
[  327.987724][ T3740] netlink: 60 bytes leftover after parsing attributes in process `syz.6.865'.
[  328.569258][ T3740] netlink: 48 bytes leftover after parsing attributes in process `syz.6.865'.
[  328.658461][   T24] audit: type=1326 audit(1782156239.321:3690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3739 comm="syz.6.865" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc680e5e59 code=0x7fc00000
[  328.757301][   T24] audit: type=1326 audit(1782156239.321:3691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3739 comm="syz.6.865" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fcc680e5e59 code=0x7fc00000
[  328.789324][   T24] audit: type=1326 audit(1782156239.321:3692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3739 comm="syz.6.865" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc680e5e59 code=0x7fc00000
[  329.081270][ T3762] Module has invalid ELF structures
[  329.200565][   T24] audit: type=1326 audit(1782156239.321:3693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3739 comm="syz.6.865" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc680e5e59 code=0x7fc00000
[  329.293398][   T24] audit: type=1326 audit(1782156239.321:3694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3739 comm="syz.6.865" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc680e5e59 code=0x7fc00000
[  329.331112][   T24] audit: type=1326 audit(1782156239.321:3695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3739 comm="syz.6.865" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc680e5e59 code=0x7fc00000
[  329.403688][   T24] audit: type=1326 audit(1782156239.321:3696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3739 comm="syz.6.865" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc680e5e59 code=0x7fc00000
[  329.474380][   T24] audit: type=1326 audit(1782156239.321:3697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3739 comm="syz.6.865" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc680e5e59 code=0x7fc00000
[  329.499236][   T24] audit: type=1326 audit(1782156239.321:3698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3739 comm="syz.6.865" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc680e5e59 code=0x7fc00000
[  329.546459][   T24] audit: type=1326 audit(1782156239.321:3699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3739 comm="syz.6.865" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc680e5e59 code=0x7fc00000
[  329.735287][ T3773] xt_nat: multiple ranges no longer supported
[  332.097251][ T3792] netlink: 68 bytes leftover after parsing attributes in process `syz.1.877'.
[  334.390896][ T3802] x_tables: arp_tables: IDLETIMER target: not valid for this family
[  334.866396][ T3801] netlink: 36 bytes leftover after parsing attributes in process `syz.5.879'.
[  335.880526][   T24] kauditd_printk_skb: 447 callbacks suppressed
[  335.880540][   T24] audit: type=1400 audit(1782156246.041:4147): avc:  denied  { mount } for  pid=3806 comm="syz.3.883" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1
[  336.194732][ T3826] netlink: 24 bytes leftover after parsing attributes in process `syz.3.887'.
[  336.710720][ T3823] netlink: 24 bytes leftover after parsing attributes in process `syz.9.888'.
[  336.719714][ T3823] netlink: 'syz.9.888': attribute type 3 has an invalid length.
[  336.728089][ T3823] netlink: 24 bytes leftover after parsing attributes in process `syz.9.888'.
[  336.737222][ T3823] netlink: 'syz.9.888': attribute type 3 has an invalid length.
[  338.487817][ T3845] overlayfs: failed to clone lowerpath
[  338.493612][   T24] audit: type=1400 audit(1782156249.141:4148): avc:  denied  { mount } for  pid=3842 comm="syz.1.893" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1
[  338.793535][ T3849] ------------[ cut here ]------------
[  338.799131][ T3849] WARNING: CPU: 1 PID: 3849 at mm/page_alloc.c:5368 __alloc_pages_nodemask+0x350/0x640
[  338.808846][ T3849] Modules linked in:
[  338.812850][ T3849] CPU: 1 PID: 3849 Comm: syz.5.894 Tainted: G        W         syzkaller #0
[  338.821589][ T3849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  338.831731][ T3849] RIP: 0010:__alloc_pages_nodemask+0x350/0x640
[  338.837951][ T3849] Code: 48 3b 8c 24 e0 00 00 00 0f 85 a3 00 00 00 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 41 f7 c6 00 20 00 00 0f 85 ce fd ff ff <0f> 0b 31 c0 eb 94 31 c0 e9 9c fd ff ff 4c 89 ff 89 de 4c 89 e2 e8
[  338.857645][ T3849] RSP: 0018:ffffc90000fff900 EFLAGS: 00010246
[  338.863817][ T3849] RAX: ffffc90000fff990 RBX: 0000000000000000 RCX: 0000000000000000
[  338.871940][ T3849] RDX: 0000000000000018 RSI: 0000000000000000 RDI: ffffc90000fff9a8
[  338.880095][ T3849] RBP: ffffc90000fffa38 R08: ffffc90000fff9a7 R09: ffffc90000fff990
[  338.888163][ T3849] R10: dffffc0000000000 R11: fffff520001fff35 R12: dffffc0000000000
[  338.896221][ T3849] R13: 1ffff920001fff28 R14: 0000000000040d40 R15: 000000000000000b
[  338.904282][ T3849] FS:  00007fb5fe5f86c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000
[  338.913375][ T3849] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  338.920043][ T3849] CR2: 0000001b33a19ff8 CR3: 0000000143cdf000 CR4: 00000000003506a0
[  338.928123][ T3849] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  338.936173][ T3849] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  338.944208][ T3849] Call Trace:
[  338.947569][ T3849]  ? gfp_pfmemalloc_allowed+0x130/0x130
[  338.953171][ T3849]  ? __sched_text_start+0x8/0x8
[  338.958139][ T3849]  ? __kasan_check_read+0x11/0x20
[  338.963218][ T3849]  ? preempt_schedule_irq+0xca/0x120
[  338.968604][ T3849]  kmalloc_order+0x4c/0x160
[  338.973171][ T3849]  kmalloc_order_trace+0x16/0x80
[  338.978192][ T3849]  __kmalloc+0x1e6/0x330
[  338.982508][ T3849]  incfs_realloc_mount_info+0x99/0x420
[  338.988060][ T3849]  incfs_alloc_mount_info+0x476/0x540
[  338.993585][ T3849]  incfs_mount_fs+0x3c6/0x8d0
[  338.998348][ T3849]  ? incfs_unlink+0x80/0x80
[  339.002905][ T3849]  ? selinux_sb_eat_lsm_opts+0xa4e/0xbd0
[  339.008674][ T3849]  legacy_get_tree+0xed/0x190
[  339.013416][ T3849]  ? incfs_unlink+0x80/0x80
[  339.018000][ T3849]  vfs_get_tree+0x89/0x260
[  339.022487][ T3849]  do_new_mount+0x25a/0xa30
[  339.027084][ T3849]  path_mount+0x581/0xca0
[  339.031516][ T3849]  __se_sys_mount+0x320/0x390
[  339.036275][ T3849]  ? __x64_sys_mount+0xd0/0xd0
[  339.041145][ T3849]  __x64_sys_mount+0xbf/0xd0
[  339.045824][ T3849]  do_syscall_64+0x31/0x40
[  339.050402][ T3849]  entry_SYSCALL_64_after_hwframe+0x61/0xcb
[  339.056375][ T3849] RIP: 0033:0x7fb5ffbdfe59
[  339.060859][ T3849] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  339.080563][ T3849] RSP: 002b:00007fb5fe5f8028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  339.089084][ T3849] RAX: ffffffffffffffda RBX: 00007fb5ffe59180 RCX: 00007fb5ffbdfe59
[  339.097141][ T3849] RDX: 00002000000001c0 RSI: 0000200000000100 RDI: 0000200000000080
[  339.105208][ T3849] RBP: 00007fb5ffc75e6f R08: 0000200000000200 R09: 0000000000000000
[  339.113237][ T3849] R10: 0000000000010002 R11: 0000000000000246 R12: 0000000000000000
[  339.121315][ T3849] R13: 00007fb5ffe59218 R14: 00007fb5ffe59180 R15: 00007fff63298748
[  339.129466][ T3849] ---[ end trace 08cc1177913093ce ]---
[  339.135021][ T3849] incfs: Error allocating mount info. -12
[  339.140825][ T3849] incfs: mount failed -12
[  340.394200][ T3861] netlink: 36 bytes leftover after parsing attributes in process `syz.1.897'.
[  340.638268][   T24] audit: type=1400 audit(1782156251.281:4149): avc:  denied  { bind } for  pid=3862 comm="syz.3.899" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  340.792205][ T3863] netlink: 44 bytes leftover after parsing attributes in process `syz.3.899'.
[  341.203404][ T3870] overlayfs: failed to clone upperpath
[  342.700058][ T3895] fuse: Bad value for 'fd'
[  342.718168][ T3895] xt_time: unknown flags 0xc
[  343.257881][ T3913] netlink: 36 bytes leftover after parsing attributes in process `syz.1.912'.
[  343.270621][ T3914] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability
[  343.539166][ T3916] netlink: 80 bytes leftover after parsing attributes in process `syz.5.911'.
[  344.044685][   T24] audit: type=1400 audit(1782156254.711:4150): avc:  denied  { setopt } for  pid=3925 comm="syz.1.917" lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  344.174245][   T24] audit: type=1400 audit(1782156254.841:4151): avc:  denied  { read } for  pid=3925 comm="syz.1.917" path="socket:[26432]" dev="sockfs" ino=26432 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  345.766195][   T24] audit: type=1326 audit(1782156256.431:4152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3907 comm="syz.6.913" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc680e5e59 code=0x7fc00000
[  353.470067][ T3967] netlink: 36 bytes leftover after parsing attributes in process `syz.6.927'.
[  360.600208][ T4028] netlink: 36 bytes leftover after parsing attributes in process `syz.1.940'.
[  360.675275][   T24] audit: type=1326 audit(1782156271.341:4153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4019 comm="syz.5.942" exe="/root/ci2-android-5-10/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb5ffbdfe59 code=0x0
[  360.808849][ T4030] netlink: 8 bytes leftover after parsing attributes in process `syz.3.943'.
[  360.832191][ T4030] netlink: 8 bytes leftover after parsing attributes in process `syz.3.943'.
[  362.645291][   T24] audit: type=1326 audit(1782156273.311:4154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4029 comm="syz.3.943" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe33b364e59 code=0x7ffc0000
[  362.671947][   T24] audit: type=1326 audit(1782156273.331:4155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4029 comm="syz.3.943" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe33b35ebd7 code=0x7ffc0000
[  362.738216][   T24] audit: type=1326 audit(1782156273.331:4156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4029 comm="syz.3.943" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe33b3061d9 code=0x7ffc0000
[  362.772378][   T24] audit: type=1326 audit(1782156273.331:4157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4029 comm="syz.3.943" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe33b35ebd7 code=0x7ffc0000
[  362.804269][   T24] audit: type=1326 audit(1782156273.331:4158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4029 comm="syz.3.943" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe33b3061d9 code=0x7ffc0000
[  362.831695][   T24] audit: type=1326 audit(1782156273.331:4159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4029 comm="syz.3.943" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe33b35ebd7 code=0x7ffc0000
[  362.860260][   T24] audit: type=1326 audit(1782156273.331:4160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4029 comm="syz.3.943" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe33b3061d9 code=0x7ffc0000
[  363.012033][   T24] audit: type=1326 audit(1782156273.331:4161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4029 comm="syz.3.943" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe33b35ebd7 code=0x7ffc0000
[  363.050886][   T24] audit: type=1326 audit(1782156273.331:4162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4029 comm="syz.3.943" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe33b3061d9 code=0x7ffc0000
[  364.294831][ T4068] netlink: 'syz.1.953': attribute type 12 has an invalid length.
[  365.737364][ T4086] x_tables: duplicate underflow at hook 1
[  366.827459][ T4094] netlink: 64 bytes leftover after parsing attributes in process `syz.1.961'.
[  366.965161][ T4098] netlink: 12 bytes leftover after parsing attributes in process `syz.5.959'.
[  367.444111][    C0] ip6_tunnel: syztnl2 xmit: Local address not yet configured!
[  367.560425][ T4098] device vti0 entered promiscuous mode
[  370.373404][   T24] kauditd_printk_skb: 36 callbacks suppressed
[  370.373439][   T24] audit: type=1326 audit(1782156281.031:4199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4134 comm="syz.1.971" exe="/root/ci2-android-5-10/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbc5339fe59 code=0x0
[  371.260063][   T24] audit: type=1400 audit(1782156281.741:4200): avc:  denied  { bind } for  pid=4141 comm="syz.5.974" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  376.171212][   T24] audit: type=1326 audit(1782156286.832:4201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4186 comm="syz.3.987" exe="/root/ci2-android-5-10/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe33b364e59 code=0x0
[  378.211832][ T4217] overlayfs: failed to clone upperpath
[  379.531297][ T4225] netlink: 4 bytes leftover after parsing attributes in process `syz.3.995'.
[  380.631305][ T4238] netlink: 36 bytes leftover after parsing attributes in process `syz.5.999'.
[  382.103523][   T24] audit: type=1400 audit(1782156292.712:4202): avc:  denied  { nlmsg_write } for  pid=4251 comm="syz.1.1004" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1
[  384.293238][   T24] audit: type=1326 audit(1782156294.932:4203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4259 comm="syz.5.1005" exe="/root/ci2-android-5-10/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb5ffbdfe59 code=0x0
[  386.088130][ T4263] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1008'.
[  386.100023][ T4270] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1008'.
[  388.932775][ T4297] overlayfs: failed to clone upperpath
[  389.557003][ T4299] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1015'.
[  390.228737][   T24] audit: type=1326 audit(1782156300.892:4204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4306 comm="syz.5.1020" exe="/root/ci2-android-5-10/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb5ffbdfe59 code=0x0
[  390.792068][ T4319] fuse: Bad value for 'fd'
[  392.920835][ T4347] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1027'.
[  394.521366][ T4344] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1025'.
[  395.358471][ T4376] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1035'.
[  395.471337][ T4377] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1033'.
[  397.849013][ T4402] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1041'.
[  397.956142][ T4404] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1042'.
[  399.000683][ T4403] device batadv_slave_0 entered promiscuous mode
[  399.150927][ T4392] device batadv_slave_0 left promiscuous mode
[  399.165583][   T24] audit: type=1326 audit(2000000264.898:4205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4392 comm="syz.9.1040" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49323e5e59 code=0x7fc00000
[  399.645614][ T4423] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1048'.
[  399.780372][   T24] audit: type=1326 audit(2000000264.898:4206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4392 comm="syz.9.1040" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f49323e5e59 code=0x7fc00000
[  399.941095][   T24] audit: type=1326 audit(2000000264.898:4207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4392 comm="syz.9.1040" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49323e5e59 code=0x7fc00000
[  400.765539][   T24] audit: type=1326 audit(2000000264.898:4208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4392 comm="syz.9.1040" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49323e5e59 code=0x7fc00000
[  400.854060][   T24] audit: type=1326 audit(2000000264.898:4209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4392 comm="syz.9.1040" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49323e5e59 code=0x7fc00000
[  400.905629][   T24] audit: type=1326 audit(2000000264.898:4210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4392 comm="syz.9.1040" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49323e5e59 code=0x7fc00000
[  400.945478][   T24] audit: type=1326 audit(2000000264.898:4211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4392 comm="syz.9.1040" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49323e5e59 code=0x7fc00000
[  401.174398][   T24] audit: type=1326 audit(2000000264.898:4212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4392 comm="syz.9.1040" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49323e5e59 code=0x7fc00000
[  401.207107][   T24] audit: type=1326 audit(2000000264.898:4213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4392 comm="syz.9.1040" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49323e5e59 code=0x7fc00000
[  401.236435][   T24] audit: type=1326 audit(2000000264.898:4214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4392 comm="syz.9.1040" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49323e5e59 code=0x7fc00000
[  401.432197][ T4451] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1055'.
[  401.443885][ T4451] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1055'.
[  401.712593][ T4457] netlink: 36 bytes leftover after parsing attributes in process `syz.9.1056'.
[  402.105390][ T4464] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1059'.
[  402.746556][ T4472] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1061'.
[  402.996771][ T4479] device batadv_slave_0 entered promiscuous mode
[  403.013995][ T4479] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1064'.
[  403.024702][ T4479] bridge0: port 2(bridge_slave_1) entered disabled state
[  403.034838][ T4479] device bridge_slave_1 left promiscuous mode
[  403.042146][ T4479] bridge0: port 2(bridge_slave_1) entered disabled state
[  404.458843][ T4474] device batadv_slave_0 left promiscuous mode
[  404.483830][   T24] kauditd_printk_skb: 43 callbacks suppressed
[  404.483844][   T24] audit: type=1326 audit(2000000270.244:4258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4474 comm="syz.3.1064" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe33b364e59 code=0x7fc00000
[  404.516753][   T24] audit: type=1326 audit(2000000270.244:4259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4474 comm="syz.3.1064" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe33b364e59 code=0x7fc00000
[  404.550641][   T24] audit: type=1326 audit(2000000270.244:4260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4474 comm="syz.3.1064" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe33b364e59 code=0x7fc00000
[  404.576338][   T24] audit: type=1326 audit(2000000270.244:4261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4474 comm="syz.3.1064" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe33b364e59 code=0x7fc00000
[  404.667457][ T4498] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1068'.
[  404.689238][ T4498] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1068'.
[  404.797254][   T24] audit: type=1326 audit(2000000270.244:4262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4474 comm="syz.3.1064" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe33b364e59 code=0x7fc00000
[  404.898721][   T24] audit: type=1326 audit(2000000270.244:4263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4474 comm="syz.3.1064" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe33b364e59 code=0x7fc00000
[  404.962196][   T24] audit: type=1326 audit(2000000270.244:4264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4474 comm="syz.3.1064" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe33b364e59 code=0x7fc00000
[  404.987564][   T24] audit: type=1326 audit(2000000270.244:4265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4474 comm="syz.3.1064" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe33b364e59 code=0x7fc00000
[  405.091797][   T24] audit: type=1326 audit(2000000270.244:4266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4474 comm="syz.3.1064" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe33b364e59 code=0x7fc00000
[  405.250554][   T24] audit: type=1326 audit(2000000270.244:4267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4474 comm="syz.3.1064" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe33b364e59 code=0x7fc00000
[  405.472421][ T4514] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1073'.
[  405.983420][ T4515] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1074'.
[  406.478077][ T4522] netlink: 36 bytes leftover after parsing attributes in process `syz.9.1075'.
[  408.185936][ T4543] overlayfs: missing 'lowerdir'
[  409.710331][ T4562] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1087'.
[  409.975597][ T4569] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1090'.
[  410.040589][ T4569] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1090'.
[  410.314436][   T24] kauditd_printk_skb: 260 callbacks suppressed
[  410.314451][   T24] audit: type=1326 audit(2000000276.109:4528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4580 comm="syz.3.1094" exe="/root/ci2-android-5-10/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe33b364e59 code=0x0
[  410.603054][   T24] audit: type=1326 audit(2000000276.391:4529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4568 comm="syz.6.1090" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fcc680dfbd7 code=0x7ffc0000
[  410.658573][   T24] audit: type=1326 audit(2000000276.401:4530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4568 comm="syz.6.1090" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fcc680871d9 code=0x7ffc0000
[  410.728740][   T24] audit: type=1326 audit(2000000276.401:4531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4568 comm="syz.6.1090" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fcc680dfbd7 code=0x7ffc0000
[  410.762037][   T24] audit: type=1326 audit(2000000276.401:4532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4568 comm="syz.6.1090" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fcc680871d9 code=0x7ffc0000
[  410.831582][   T24] audit: type=1326 audit(2000000276.401:4533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4568 comm="syz.6.1090" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fcc680dfbd7 code=0x7ffc0000
[  410.883495][   T24] audit: type=1326 audit(2000000276.401:4534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4568 comm="syz.6.1090" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fcc680871d9 code=0x7ffc0000
[  410.950851][   T24] audit: type=1326 audit(2000000276.401:4535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4568 comm="syz.6.1090" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fcc680dfbd7 code=0x7ffc0000
[  410.995531][   T24] audit: type=1326 audit(2000000276.401:4536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4568 comm="syz.6.1090" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fcc680871d9 code=0x7ffc0000
[  411.020530][   T24] audit: type=1326 audit(2000000276.401:4537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4568 comm="syz.6.1090" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fcc680dfbd7 code=0x7ffc0000
[  411.445179][ T4604] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1 sclass=netlink_route_socket pid=4604 comm=syz.9.1099
[  411.753619][ T4606] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1100'.
[  414.045148][ T4656] bridge0: port 3(veth1_macvtap) entered blocking state
[  414.052252][ T4656] bridge0: port 3(veth1_macvtap) entered disabled state
[  414.059918][ T4656] A link change request failed with some changes committed already. Interface veth1_macvtap may have been left with an inconsistent configuration, please check.
[  415.343728][ T4672] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1118'.
[  415.773482][   T24] kauditd_printk_skb: 93 callbacks suppressed
[  415.773498][   T24] audit: type=1326 audit(2000000281.610:4631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4679 comm="syz.1.1122" exe="/root/ci2-android-5-10/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbc5339fe59 code=0x0
[  416.288320][ T4693] netlink: 'syz.3.1125': attribute type 12 has an invalid length.
[  416.352759][ T4695] device veth1_macvtap left promiscuous mode
[  416.359371][ T4695] device macsec0 entered promiscuous mode
[  416.648572][   T24] audit: type=1326 audit(2000000282.484:4632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4699 comm="syz.1.1127" exe="/root/ci2-android-5-10/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbc5339fe59 code=0x0
[  419.501553][ T4728] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1133'.
[  421.690178][   T24] audit: type=1326 audit(2000000287.403:4633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4741 comm="syz.9.1138" exe="/root/ci2-android-5-10/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f49323e5e59 code=0x0
[  422.525362][   T24] audit: type=1326 audit(2000000288.189:4634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4751 comm="syz.6.1139" exe="/root/ci2-android-5-10/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcc680e5e59 code=0x0
[  422.699280][ T4764] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1140'.
[  422.791312][   T24] audit: type=1326 audit(2000000288.414:4635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4757 comm="syz.9.1141" exe="/root/ci2-android-5-10/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f49323e5e59 code=0x0
[  423.763846][ T4777] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1146'.
[  423.879390][ T4779] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1145'.
[  423.917074][ T4779] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1145'.
[  423.953343][ T4779] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1145'.
[  424.006541][ T4779] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1145'.
[  425.193037][   T24] audit: type=1326 audit(2000000290.688:4636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4796 comm="syz.1.1151" exe="/root/ci2-android-5-10/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbc5339fe59 code=0x0
[  427.377049][ T4819] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1156'.
[  427.839105][   T24] audit: type=1326 audit(2000000293.168:4637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4822 comm="syz.9.1158" exe="/root/ci2-android-5-10/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f49323e5e59 code=0x0
[  427.988068][ T4832] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1159'.
[  430.618496][ T4853] overlayfs: failed to clone upperpath
[  436.669535][ T4873] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1169'.
[  436.836782][ T4878] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1172'.
[  439.148386][ T4885] netlink: 'syz.3.1173': attribute type 32 has an invalid length.
[  439.184223][ T4885] sch_tbf: burst 0 is lower than device lo mtu (18) !
[  439.314710][ T4891] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1175'.
[  441.555631][ T4927] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1185'.
[  442.819951][ T4941] SELinux:  Context system_u:object_r:mtrr_device_t:s0 is not valid (left unmapped).
[  443.101369][   T24] audit: type=1400 audit(2000000307.195:4638): avc:  denied  { relabelto } for  pid=4932 comm="syz.3.1187" name="PPPOL2TP" dev="sockfs" ino=27642 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=pppox_socket permissive=1 trawcon="system_u:object_r:mtrr_device_t:s0"
[  443.141683][ T4943] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1188'.
[  443.468013][   T24] audit: type=1326 audit(2000000307.598:4639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4940 comm="syz.5.1189" exe="/root/ci2-android-5-10/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb5ffbdfe59 code=0x0
[  446.660420][   T24] audit: type=1326 audit(2000000310.779:4640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4996 comm="syz.5.1203" exe="/root/ci2-android-5-10/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb5ffbdfe59 code=0x0
[  446.747910][ T5002] x_tables: arp_tables: IDLETIMER target: not valid for this family
[  447.819832][ T5027] mmap: syz.9.1208 (5027): VmData 17715200 exceed data ulimit 5. Update limits or use boot option ignore_rlimit_data.
[  449.324826][   T24] audit: type=1326 audit(2000000313.269:4641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5041 comm="syz.9.1216" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49323e5e59 code=0x7ffc0000
[  449.377072][   T24] audit: type=1326 audit(2000000313.269:4642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5041 comm="syz.9.1216" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f49323e5e59 code=0x7ffc0000
[  449.403318][ T5022] overlayfs: failed to clone upperpath
[  449.409020][   T24] audit: type=1326 audit(2000000313.269:4643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5041 comm="syz.9.1216" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49323e5e59 code=0x7ffc0000
[  449.434426][   T24] audit: type=1326 audit(2000000313.269:4644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5041 comm="syz.9.1216" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f49323e5e59 code=0x7ffc0000
[  449.459710][   T24] audit: type=1326 audit(2000000313.269:4645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5041 comm="syz.9.1216" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49323e5e59 code=0x7ffc0000
[  449.520228][   T24] audit: type=1326 audit(2000000313.269:4646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5041 comm="syz.9.1216" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f49323e5e59 code=0x7ffc0000
[  449.545645][   T24] audit: type=1326 audit(2000000313.269:4647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5041 comm="syz.9.1216" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49323e5e59 code=0x7ffc0000
[  449.571130][   T24] audit: type=1326 audit(2000000313.269:4648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5041 comm="syz.9.1216" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49323e5e59 code=0x7ffc0000
[  449.971780][   T24] audit: type=1326 audit(2000000313.269:4649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5041 comm="syz.9.1216" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=203 compat=0 ip=0x7f49323e5e59 code=0x7ffc0000
[  450.429329][   T24] audit: type=1326 audit(2000000313.269:4650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5041 comm="syz.9.1216" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49323e5e59 code=0x7ffc0000
[  456.349716][   T24] kauditd_printk_skb: 51 callbacks suppressed
[  456.349731][   T24] audit: type=1326 audit(2000000319.847:4702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5100 comm="syz.5.1234" exe="/root/ci2-android-5-10/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb5ffbdfe59 code=0x0
[  457.355651][ T5111] netlink: 'syz.1.1233': attribute type 15 has an invalid length.
[  457.363553][ T5111] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1233'.
[  457.555780][ T5118] Module has invalid ELF structures
[  457.860386][   T24] audit: type=1400 audit(2000000321.260:4703): avc:  denied  { shutdown } for  pid=5112 comm="syz.5.1237" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  457.886561][ T5113] netlink: 'syz.5.1237': attribute type 3 has an invalid length.
[  457.954820][ T5113] netlink: 92 bytes leftover after parsing attributes in process `syz.5.1237'.
[  461.686180][ T5149] fuse: Bad value for 'fd'
[  465.522149][ T5172] netlink: 104 bytes leftover after parsing attributes in process `syz.5.1254'.
[  467.883284][ T5226] netlink: 'syz.3.1276': attribute type 28 has an invalid length.
[  467.934979][ T5228] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1277'.
[  470.732345][   T24] audit: type=1326 audit(2000000333.304:4704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5268 comm="syz.6.1290" exe="/root/ci2-android-5-10/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcc680e5e59 code=0x0
[  470.808240][   T24] audit: type=1326 audit(2000000333.342:4705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5271 comm="syz.9.1291" exe="/root/ci2-android-5-10/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f49323e5e59 code=0x0
[  470.881445][   T24] audit: type=1400 audit(2000000333.426:4706): avc:  denied  { ioctl } for  pid=5279 comm="syz.1.1293" path="socket:[29299]" dev="sockfs" ino=29299 ioctlcmd=0x6722 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  471.181441][ T5310] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1305'.
[  472.801622][   T24] audit: type=1326 audit(2000000335.232:4707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5323 comm="syz.3.1310" exe="/root/ci2-android-5-10/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe33b364e59 code=0x0
[  474.459412][   T24] audit: type=1326 audit(2000000336.785:4708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5350 comm="syz.3.1319" exe="/root/ci2-android-5-10/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe33b364e59 code=0x0
[  474.496651][   T24] audit: type=1326 audit(2000000336.823:4709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5355 comm="syz.6.1321" exe="/root/ci2-android-5-10/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcc680e5e59 code=0x0
[  475.035773][ T5372] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1325'.
[  475.045073][ T5372] netlink: 20 bytes leftover after parsing attributes in process `syz.9.1325'.
[  475.054381][ T5372] netlink: 20 bytes leftover after parsing attributes in process `syz.9.1325'.
[  476.239917][   T24] audit: type=1326 audit(2000000338.460:4710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5426 comm="syz.5.1348" exe="/root/ci2-android-5-10/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb5ffbdfe59 code=0x0
[  477.274704][ T5448] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1356'.
[  477.389806][   T24] audit: type=1326 audit(2000000339.537:4711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5455 comm="syz.5.1359" exe="/root/ci2-android-5-10/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb5ffbdfe59 code=0x0
[  477.724455][ T5472] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1365'.
[  477.782289][ T5472] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1365'.
[  479.616041][   T24] audit: type=1326 audit(2000000341.614:4712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5522 comm="syz.9.1382" exe="/root/ci2-android-5-10/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f49323e5e59 code=0x0
[  479.938440][ T5532] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1386'.
[  480.101834][   T24] audit: type=1326 audit(2000000342.063:4713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5537 comm="syz.3.1390" exe="/root/ci2-android-5-10/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe33b364e59 code=0x0
[  480.166674][ T5544] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1391'.
[  480.176621][ T5544] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1391'.
[  480.186994][ T5545] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1389'.
[  481.144821][ T5576] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1403'.
[  481.154147][ T5576] netlink: 'syz.3.1403': attribute type 1 has an invalid length.
[  481.366906][   T24] audit: type=1326 audit(2000000343.252:4714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5591 comm="syz.3.1411" exe="/root/ci2-android-5-10/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe33b364e59 code=0x0
[  481.513498][ T5601] raw_sendmsg: syz.6.1412 forgot to set AF_INET. Fix it!
[  481.523662][   T24] audit: type=1326 audit(2000000343.401:4715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5598 comm="syz.1.1414" exe="/root/ci2-android-5-10/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbc5339fe59 code=0x0
[  481.623211][   T24] audit: type=1326 audit(2000000343.495:4716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5611 comm="syz.9.1419" exe="/root/ci2-android-5-10/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f49323e5e59 code=0x0
[  482.119550][   T24] audit: type=1400 audit(2000000343.954:4717): avc:  denied  { getopt } for  pid=5629 comm="syz.5.1425" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  483.369439][ T5677] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1443'.
[  483.399690][ T5681] netlink: 92 bytes leftover after parsing attributes in process `syz.6.1445'.
[  483.419582][   T24] audit: type=1326 audit(2000000345.179:4718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5682 comm="syz.9.1446" exe="/root/ci2-android-5-10/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f49323e5e59 code=0x0
[  483.505735][ T5693] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1444'.
[  483.558028][ T5695] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1449'.
[  483.766514][ T5703] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5703 comm=syz.3.1453
[  483.779410][ T5703] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=17 sclass=netlink_tcpdiag_socket pid=5703 comm=syz.3.1453
[  484.392400][   T24] audit: type=1326 audit(2000000346.087:4719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5740 comm="syz.9.1469" exe="/root/ci2-android-5-10/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f49323e5e59 code=0x0
[  484.495468][ T5747] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1467'.
[  485.299935][ T5768] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1478'.
[  485.975184][ T5794] xt_hashlimit: max too large, truncated to 1048576
[  486.204677][ T5796] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1490'.
[  486.239745][   T24] audit: type=1326 audit(2000000347.818:4720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5797 comm="syz.6.1491" exe="/root/ci2-android-5-10/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcc680e5e59 code=0x0
[  490.071934][   T24] audit: type=1326 audit(2000000351.374:4721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5840 comm="syz.5.1504" exe="/root/ci2-android-5-10/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb5ffbdfe59 code=0x0
[  492.328088][ T5894] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1525'.
[  494.341546][ T5930] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1537'.
[  494.511686][   T24] audit: type=1326 audit(2000000355.557:4722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5945 comm="syz.5.1547" exe="/root/ci2-android-5-10/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb5ffbdfe59 code=0x0
[  495.439622][ T5959] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1551'.
[  495.599230][   T24] audit: type=1400 audit(2000000356.577:4723): avc:  denied  { getopt } for  pid=5973 comm="syz.9.1559" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1
[  495.661471][   T24] audit: type=1326 audit(2000000356.634:4724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5976 comm="syz.1.1561" exe="/root/ci2-android-5-10/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbc5339fe59 code=0x0
[  496.777990][ T5980] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1563'.
[  496.930574][ T5996] netlink: 36 bytes leftover after parsing attributes in process `syz.9.1564'.
[  498.500699][   T24] audit: type=1400 audit(2000000359.282:4725): avc:  denied  { shutdown } for  pid=6037 comm="syz.6.1583" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  498.929065][ T6046] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1581'.
[  499.514270][   T24] audit: type=1326 audit(2000000360.236:4726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6055 comm="syz.5.1586" exe="/root/ci2-android-5-10/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb5ffbdfe59 code=0x0
[  499.545352][ T6059] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1587'.
[  499.866500][ T6074] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1593'.
[  500.123456][ T6069] netlink: 'syz.3.1590': attribute type 15 has an invalid length.
[  501.215459][ T6093] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1602'.
[  501.366418][ T6109] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1610'.
[  501.442946][ T6120] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1613'.
[  501.451961][ T6120] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1613'.
[  501.480944][ T6122] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1618'.
[  501.495756][ T6127] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1609'.
[  501.555522][   T24] audit: type=1400 audit(2000000362.146:4727): avc:  denied  { getopt } for  pid=6138 comm="syz.9.1624" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  501.721753][ T6164] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1625'.
[  504.246243][   T24] audit: type=1400 audit(2000000364.663:4728): avc:  denied  { getopt } for  pid=6245 comm="syz.6.1669" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  504.382141][ T6257] overlayfs: conflicting options: metacopy=on,redirect_dir=nofollow
[  504.541729][   T24] audit: type=1326 audit(2000000364.944:4729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6270 comm="syz.6.1680" exe="/root/ci2-android-5-10/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcc680e5e59 code=0x0
[  505.168407][ T6300] Module has invalid ELF structures
[  505.497400][   T24] audit: type=1326 audit(2000000365.833:4730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6306 comm="syz.3.1694" exe="/root/ci2-android-5-10/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe33b364e59 code=0x0
[  505.877953][   T24] audit: type=1326 audit(2000000366.198:4731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6335 comm="syz.6.1705" exe="/root/ci2-android-5-10/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcc680e5e59 code=0x0
[  505.942622][ T6339] __nla_validate_parse: 3 callbacks suppressed
[  505.942661][ T6339] netlink: 36 bytes leftover after parsing attributes in process `syz.9.1697'.
[  505.964199][ T6341] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1704'.
[  507.042483][   T24] audit: type=1326 audit(2000000367.283:4732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6359 comm="syz.6.1712" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc680e5e59 code=0x7ffc0000
[  507.080931][   T24] audit: type=1326 audit(2000000367.311:4733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6359 comm="syz.6.1712" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc680e5e59 code=0x7ffc0000
[  507.116171][   T24] audit: type=1326 audit(2000000367.311:4734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6359 comm="syz.6.1712" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc680e5e59 code=0x7ffc0000
[  507.175784][   T24] audit: type=1326 audit(2000000367.311:4735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6359 comm="syz.6.1712" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=8 compat=0 ip=0x7fcc680e5e59 code=0x7ffc0000
[  507.227339][   T24] audit: type=1326 audit(2000000367.311:4736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6359 comm="syz.6.1712" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc680e5e59 code=0x7ffc0000
[  507.260718][ T6380] netlink: 132 bytes leftover after parsing attributes in process `syz.9.1722'.
[  507.263176][   T24] audit: type=1326 audit(2000000367.311:4737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6359 comm="syz.6.1712" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fcc680e5e59 code=0x7ffc0000
[  507.302802][   T24] audit: type=1326 audit(2000000367.311:4738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6359 comm="syz.6.1712" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fcc680e5e59 code=0x7ffc0000
[  507.411606][ T6396] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1723'.
[  509.616708][ T6423] netlink: 36 bytes leftover after parsing attributes in process `syz.9.1732'.
[  511.990345][ T6493] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1765'.
[  512.046123][ T6495] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1768'.
[  513.954603][ T6521] incfs: Options parsing error. -22
[  514.056482][ T6521] incfs: mount failed -22
[  514.111174][ T6526] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1779'.
[  518.500876][ T6550] netlink: 36 bytes leftover after parsing attributes in process `syz.9.1787'.
[  518.786574][   T24] audit: type=1326 audit(2000000378.279:4739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6553 comm="syz.3.1790" exe="/root/ci2-android-5-10/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe33b364e59 code=0x0
[  521.698243][ T6599] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1802'.
[  522.015978][   T24] audit: type=1326 audit(2000000381.292:4740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6614 comm="syz.9.1812" exe="/root/ci2-android-5-10/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f49323e5e59 code=0x0
[  522.048985][ T6623] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1810'.
[  522.343901][    C0] ip6_tunnel: syztnl2 xmit: Local address not yet configured!
[  523.668879][ T6638] netlink: 'syz.9.1820': attribute type 8 has an invalid length.
[  524.039829][ T6662] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1831'.
[  524.048847][   T24] audit: type=1326 audit(2000000383.192:4741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6659 comm="syz.9.1830" exe="/root/ci2-android-5-10/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f49323e5e59 code=0x0
[  524.088125][ T6662] .30ªî{X¹¦: renamed from gretap0
[  524.104926][ T6662] IPv6: ADDRCONF(NETDEV_CHANGE): .30ªî{X¹¦: link becomes ready
[  524.132634][ T6662] A link change request failed with some changes committed already. Interface .30ªî{X¹¦ may have been left with an inconsistent configuration, please check.
[  524.602855][ T6691] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1843'.
[  524.631729][   T24] audit: type=1326 audit(2000000383.744:4742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6692 comm="syz.1.1844" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc5339fe59 code=0x7ffc0000
[  524.679683][   T24] audit: type=1326 audit(2000000383.762:4743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6692 comm="syz.1.1844" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fbc5339fe59 code=0x7ffc0000
[  524.708332][   T24] audit: type=1326 audit(2000000383.762:4744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6692 comm="syz.1.1844" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc5339fe59 code=0x7ffc0000
[  524.766785][   T24] audit: type=1326 audit(2000000383.762:4745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6692 comm="syz.1.1844" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fbc5339fe59 code=0x7ffc0000
[  524.800572][   T24] audit: type=1326 audit(2000000383.762:4746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6692 comm="syz.1.1844" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc5339fe59 code=0x7ffc0000
[  524.958715][ T6703] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1848'.
[  525.151447][ T6715] bridge: RTM_DELNEIGH with unconfigured vlan 1 on bridge_slave_0
[  525.544972][   T24] audit: type=1326 audit(2000000384.595:4747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6725 comm="syz.6.1858" exe="/root/ci2-android-5-10/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcc680e5e59 code=0x0
[  525.836892][ T6740] netlink: 47 bytes leftover after parsing attributes in process `syz.9.1863'.
[  526.553087][ T6758] netlink: 96 bytes leftover after parsing attributes in process `syz.6.1870'.
[  526.844456][   T24] audit: type=1326 audit(2000000385.812:4748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6781 comm="syz.6.1880" exe="/root/ci2-android-5-10/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcc680e5e59 code=0x0
[  526.871021][   T24] audit: type=1326 audit(2000000385.840:4749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6779 comm="syz.1.1881" exe="/root/ci2-android-5-10/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbc5339fe59 code=0x0
[  527.246556][ T6809] netlink: 'syz.9.1890': attribute type 1 has an invalid length.
[  527.510337][   T24] audit: type=1326 audit(2000000386.439:4750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6817 comm="syz.5.1894" exe="/root/ci2-android-5-10/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb5ffbdfe59 code=0x0
[  527.745748][   T24] audit: type=1326 audit(2000000386.654:4751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6824 comm="syz.6.1896" exe="/root/ci2-android-5-10/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcc680e5e59 code=0x0
[  528.287114][ T6842] netlink: 'syz.9.1903': attribute type 16 has an invalid length.
[  528.295258][ T6842] netlink: 'syz.9.1903': attribute type 17 has an invalid length.
[  528.798785][ T6870] 9pnet: Insufficient options for proto=fd
[  529.720826][ T6909] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1930'.
[  529.730695][ T6911] netlink: 'syz.6.1931': attribute type 1 has an invalid length.
[  530.224764][   T24] kauditd_printk_skb: 2 callbacks suppressed
[  530.224781][   T24] audit: type=1400 audit(2000000388.975:4754): avc:  denied  { lock } for  pid=6946 comm="syz.9.1946" path="socket:[33580]" dev="sockfs" ino=33580 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  531.981268][ T6992] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1964'.
[  534.145669][   T24] audit: type=1400 audit(2000000392.643:4755): avc:  denied  { name_bind } for  pid=7028 comm="syz.5.1979" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1
[  534.191629][   T24] audit: type=1326 audit(2000000392.690:4756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7034 comm="syz.5.1981" exe="/root/ci2-android-5-10/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb5ffbdfe59 code=0x0
[  534.230683][ T7040] xt_TPROXY: Can be used only with -p tcp or -p udp
[  538.195985][ T7135] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2018'.
[  538.331795][ T7137] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2021'.
[  538.361528][   T24] audit: type=1400 audit(2000000396.583:4757): avc:  denied  { rename } for  pid=7138 comm="syz.5.2022" name="file5" dev="tmpfs" ino=2039 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  539.683800][ T7165] device erspan0 entered promiscuous mode
[  540.322669][ T7195] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2047'.
[  541.126892][ T7229] ==================================================================
[  541.135166][ T7229] BUG: KASAN: use-after-free in mutex_lock+0x85/0xf0
[  541.141873][ T7229] Write of size 8 at addr ffff888127d7f550 by task syz.6.2061/7229
[  541.149778][ T7229] 
[  541.152156][ T7229] CPU: 1 PID: 7229 Comm: syz.6.2061 Tainted: G        W         syzkaller #0
[  541.160935][ T7229] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  541.171145][ T7229] Call Trace:
[  541.174655][ T7229]  __dump_stack+0x21/0x24
[  541.179126][ T7229]  dump_stack_lvl+0x1a7/0x208
[  541.183846][ T7229]  ? show_regs_print_info+0x18/0x18
[  541.189104][ T7229]  ? thaw_kernel_threads+0x220/0x220
[  541.194515][ T7229]  ? debug_smp_processor_id+0x17/0x20
[  541.199935][ T7229]  print_address_description+0x7f/0x2c0
[  541.205517][ T7229]  ? mutex_lock+0x85/0xf0
[  541.209912][ T7229]  kasan_report+0x100/0x140
[  541.214461][ T7229]  ? mutex_lock+0x85/0xf0
[  541.218826][ T7229]  kasan_check_range+0x249/0x2a0
[  541.223873][ T7229]  __kasan_check_write+0x14/0x20
[  541.228845][ T7229]  mutex_lock+0x85/0xf0
[  541.233036][ T7229]  ? mutex_trylock+0xb0/0xb0
[  541.237718][ T7229]  ? l2tp_session_put+0xb2/0x1a0
[  541.242794][ T7229]  ? l2tp_session_delete+0x3a9/0x4a0
[  541.248111][ T7229]  pppol2tp_release+0x178/0x2b0
[  541.253052][ T7229]  sock_close+0xb8/0x200
[  541.257332][ T7229]  ? sock_mmap+0xa0/0xa0
[  541.261674][ T7229]  __fput+0x2dc/0x730
[  541.265691][ T7229]  ____fput+0x15/0x20
[  541.269767][ T7229]  task_work_run+0x127/0x190
[  541.274443][ T7229]  exit_to_user_mode_loop+0xcb/0xe0
[  541.279682][ T7229]  exit_to_user_mode_prepare+0x76/0xa0
[  541.285172][ T7229]  syscall_exit_to_user_mode+0x1d/0x40
[  541.290659][ T7229]  do_syscall_64+0x3d/0x40
[  541.295109][ T7229]  entry_SYSCALL_64_after_hwframe+0x61/0xcb
[  541.301033][ T7229] RIP: 0033:0x7fcc680e5e59
[  541.305478][ T7229] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  541.325111][ T7229] RSP: 002b:00007ffd75cd1cd8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[  541.333646][ T7229] RAX: 0000000000000000 RBX: 00007ffd75cd1dc0 RCX: 00007fcc680e5e59
[  541.341648][ T7229] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[  541.349662][ T7229] RBP: 00000000000823e2 R08: 0000000000000001 R09: 0000000000000000
[  541.357669][ T7229] R10: 0000001b2ca20000 R11: 0000000000000246 R12: 00007ffd75cd1e00
[  541.365763][ T7229] R13: 00007fcc6835efac R14: 0000000000082417 R15: 00007fcc6835efa0
[  541.373764][ T7229] 
[  541.376125][ T7229] Allocated by task 7230:
[  541.380486][ T7229]  __kasan_kmalloc+0xd4/0x100
[  541.385287][ T7229]  __kmalloc+0x19f/0x330
[  541.389562][ T7229]  l2tp_session_create+0x39/0xb60
[  541.394613][ T7229]  pppol2tp_connect+0xbf5/0x1640
[  541.399580][ T7229]  __sys_connect+0x3ce/0x450
[  541.404196][ T7229]  __x64_sys_connect+0x7a/0x90
[  541.408994][ T7229]  do_syscall_64+0x31/0x40
[  541.413445][ T7229]  entry_SYSCALL_64_after_hwframe+0x61/0xcb
[  541.419357][ T7229] 
[  541.421711][ T7229] Freed by task 7229:
[  541.425726][ T7229]  kasan_set_track+0x4a/0x70
[  541.430345][ T7229]  kasan_set_free_info+0x23/0x40
[  541.435309][ T7229]  ____kasan_slab_free+0x125/0x160
[  541.440451][ T7229]  __kasan_slab_free+0x11/0x20
[  541.445251][ T7229]  slab_free_freelist_hook+0xc5/0x190
[  541.450649][ T7229]  kfree+0xc0/0x270
[  541.454486][ T7229]  l2tp_session_put+0xb2/0x1a0
[  541.459280][ T7229]  l2tp_session_delete+0x3a9/0x4a0
[  541.464420][ T7229]  pppol2tp_release+0x169/0x2b0
[  541.469298][ T7229]  sock_close+0xb8/0x200
[  541.473568][ T7229]  __fput+0x2dc/0x730
[  541.477582][ T7229]  ____fput+0x15/0x20
[  541.481592][ T7229]  task_work_run+0x127/0x190
[  541.486219][ T7229]  exit_to_user_mode_loop+0xcb/0xe0
[  541.491628][ T7229]  exit_to_user_mode_prepare+0x76/0xa0
[  541.497118][ T7229]  syscall_exit_to_user_mode+0x1d/0x40
[  541.502608][ T7229]  do_syscall_64+0x3d/0x40
[  541.507057][ T7229]  entry_SYSCALL_64_after_hwframe+0x61/0xcb
[  541.512978][ T7229] 
[  541.515405][ T7229] Last potentially related work creation:
[  541.521158][ T7229]  kasan_save_stack+0x3a/0x60
[  541.525876][ T7229]  __kasan_record_aux_stack+0xd2/0x100
[  541.531377][ T7229]  kasan_record_aux_stack_noalloc+0xb/0x10
[  541.537294][ T7229]  kvfree_call_rcu+0x117/0x670
[  541.542171][ T7229]  neigh_destroy+0x445/0x570
[  541.546815][ T7229]  neigh_cleanup_and_release+0x76/0x1a0
[  541.552401][ T7229]  neigh_remove_one+0x343/0x3b0
[  541.557315][ T7229]  ___neigh_create+0x48d/0x1a70
[  541.562196][ T7229]  __neigh_create+0x31/0x40
[  541.566836][ T7229]  ip6_finish_output2+0x8fe/0x1540
[  541.571980][ T7229]  __ip6_finish_output+0x5fd/0x790
[  541.577118][ T7229]  ip6_finish_output+0x33/0x1e0
[  541.582106][ T7229]  ip6_output+0x1fa/0x420
[  541.586555][ T7229]  mld_sendpack+0x61e/0xb00
[  541.591088][ T7229]  mld_ifc_timer_expire+0x862/0xc60
[  541.596378][ T7229]  call_timer_fn+0x38/0x290
[  541.600914][ T7229]  __run_timers+0x637/0x9a0
[  541.605451][ T7229]  run_timer_softirq+0x6a/0xf0
[  541.610249][ T7229]  __do_softirq+0x255/0x563
[  541.614760][ T7229] 
[  541.617114][ T7229] The buggy address belongs to the object at ffff888127d7f400
[  541.617114][ T7229]  which belongs to the cache kmalloc-512 of size 512
[  541.631192][ T7229] The buggy address is located 336 bytes inside of
[  541.631192][ T7229]  512-byte region [ffff888127d7f400, ffff888127d7f600)
[  541.644534][ T7229] The buggy address belongs to the page:
[  541.650235][ T7229] page:ffffea00049f5f00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x127d7c
[  541.660497][ T7229] head:ffffea00049f5f00 order:2 compound_mapcount:0 compound_pincount:0
[  541.668865][ T7229] flags: 0x4000000000010200(slab|head)
[  541.674359][ T7229] raw: 4000000000010200 dead000000000100 dead000000000122 ffff888100043080
[  541.682978][ T7229] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000
[  541.691586][ T7229] page dumped because: kasan: bad access detected
[  541.698029][ T7229] page_owner tracks the page as allocated
[  541.703796][ T7229] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52a20(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 112, ts 23186516641, free_ts 0
[  541.719980][ T7229]  prep_new_page+0x176/0x190
[  541.724609][ T7229]  get_page_from_freelist+0x225f/0x23f0
[  541.730193][ T7229]  __alloc_pages_nodemask+0x29a/0x640
[  541.735588][ T7229]  new_slab+0x84/0x3f0
[  541.739689][ T7229]  ___slab_alloc+0x2f8/0x4c0
[  541.744297][ T7229]  __slab_alloc+0x63/0xa0
[  541.748646][ T7229]  __kmalloc+0x1f9/0x330
[  541.752923][ T7229]  ___neigh_create+0x6ec/0x1a70
[  541.757798][ T7229]  __neigh_create+0x31/0x40
[  541.762329][ T7229]  ip6_finish_output2+0x8fe/0x1540
[  541.767464][ T7229]  __ip6_finish_output+0x5fd/0x790
[  541.772590][ T7229]  ip6_finish_output+0x33/0x1e0
[  541.777494][ T7229]  ip6_output+0x1fa/0x420
[  541.781845][ T7229]  mld_sendpack+0x61e/0xb00
[  541.786375][ T7229]  mld_ifc_timer_expire+0x862/0xc60
[  541.791600][ T7229]  call_timer_fn+0x38/0x290
[  541.796121][ T7229] page_owner free stack trace missing
[  541.801598][ T7229] 
[  541.804078][ T7229] Memory state around the buggy address:
[  541.809739][ T7229]  ffff888127d7f400: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  541.817845][ T7229]  ffff888127d7f480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  541.825909][ T7229] >ffff888127d7f500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  541.833969][ T7229]                                                  ^
[  541.840653][ T7229]  ffff888127d7f580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  541.848716][ T7229]  ffff888127d7f600: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  541.856787][ T7229] ==================================================================
[  541.864866][ T7229] Disabling lock debugging due to kernel taint