last executing test programs:

32.526144569s ago: executing program 1 (id=98):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff, 0x0, 0x0, 0x41100}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) (async)
syz_emit_ethernet(0x66, &(0x7f0000000000)=ANY=[], 0x0)
syz_extract_tcp_res$synack(&(0x7f0000000040), 0x1, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000180), r2) (async)
getpeername$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000200)=0x14)
sendmsg$GTP_CMD_ECHOREQ(r3, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="040007000000fcdbdf2503000000080005000a010102080008000000000008000400e0000002080001000ac0f9538437673cfbe3addb0285bddef8ccdc0df3d92642acca32cf6505aea6a9f703146620ac77de06313f3e53a92b5f2ef1184e316f819cf7bfb3da3d550291f1e79d5c2cc1369b2f8eea874484cdf702e921d9489bc8dab221c703e4aecb00c74e34505be068e69f96b263b1da6a67f2cff97ab4cef0122ceacc4204e11060181049ad489fa523efc3aacc8548cb66933dcc892a0cf9e944a22e69742b370b449d79b17e01ae256f147f9a49fa8857ff55b6e5e8b3ed6a", @ANYRES32=r5, @ANYBLOB="14000b00fc000000000000000000000000000001"], 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x81)

32.471542044s ago: executing program 1 (id=99):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async)
r2 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r2, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0xfffffffd}}, 0x10) (async)
bind$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) (async)
r3 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r3, 0x0, 0x0) (async)
bind$tipc(r3, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) (async)
bind$tipc(r3, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) (async)
bind$tipc(r3, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x1, 0x3}}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) (async)
socket$packet(0x11, 0x2, 0x300)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) (async)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) (async)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xfe, 0x0, &(0x7f0000000100)="b9ff030f6044238cb89e14f088ca1bff430500001100630377fbac141414e000000162079f4b4d2f87e56dca6aab845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0xfe, 0x60000000, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x50) (async)
sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r6, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) (async)
connect$inet(r6, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
sendmmsg(r6, &(0x7f0000007fc0), 0x800001d, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r1}, 0x18)

32.388831572s ago: executing program 1 (id=100):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000002001000001"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="00000000000000009f0300000000000000000095b0a1003314fa3fd31140b1229c5ff638d3af64490000c98df22b0c5ee0ec0fdc1d5a"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000011c0)='kmem_cache_free\x00', r1}, 0x18) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async)
symlinkat(&(0x7f0000000000)='.\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00')
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, 0x1, 0x0, 0x0) (async)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x10000, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './file0/file2'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) (async)
pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x80000)
write$P9_RREADDIR(r2, &(0x7f0000000280)={0xb0, 0x29, 0x1, {0x775f, [{{0x0, 0x2, 0x1}, 0x0, 0x8, 0x7, './file0'}, {{0x20, 0x1}, 0x8, 0x7f, 0x5, './bus'}, {{0x4, 0x3, 0x3}, 0x14, 0x7d, 0xd, './file0/file2'}, {{0x40, 0x3, 0x6}, 0x30, 0x77, 0xd, './file0/file2'}, {{0x40, 0x2}, 0x1800, 0x5, 0x7, './file1'}]}}, 0xb0)
linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x0)

32.359753985s ago: executing program 1 (id=101):
syz_mount_image$vfat(&(0x7f0000001800), &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x18, &(0x7f0000000180)=ANY=[@ANYBLOB="00631dda01aef2456795dd9b2620df1c0f624854ea3dd5a00bd6df44035f5c3ae796fec6d633a0ffad0569794acfef7da01767fd4175f2cd82df769aa2ee7bfe3640554507d2e660c9f9e222a72e1e3e71145c480657d2864e5e276f028d64701ae31cde0ceaf408fdb05c0f4142da00e900000100000149e6d308cbe315789f4baffe39bbced9b1d421d2e290e9fc561a62225f002ee310e1fa7321000000000000d6231001a4b2d467825f3abb0c167e129cf1fa0e7854103f4bf2d3a0194983bc86cbd3d75ccef3c8ac4516dac102"], 0x4, 0x26d, &(0x7f00000005c0)="$eJzs281OE18Yx/EfL/8/CMJUURSM8YludDOBegUNgcTYRIPU+JKYDDLVpkNLOg2mxgg7t14HcenOxHgDbLwCF+7YuGRhHMNMLS2UqAuZaL+fzXnI4deck+dMcxadnXuvV8vF0C16dfX3mQalTe1KGfVrQIm+5tgf1/+r3aauTeQ/Xbxz/8HNXD4/v2i2kFu6njWz8Uvvn714c/lDffTu2/F3Q9rOPNr5kv28Pbk9tfNt6WkptFJolWrdPFuuVuvecuDbSiksu2a3A98LfStVQr/WMV8MqmtrDfMqK2MjazU/DM2rNKzsN6xetXqtYd4Tr1Qx13VtbET4mcLW4qKXS3sV+LNqtZw3J2n60ExhK5UFAQCAVHH/72Xc/3vB3v3/YfP57cT9HwAAAAAAAAAAAAAAAAAAAACAv8FuFDlRFDk/xv+k+A2fqPn3CUkjkkYlnZQ0JmlckiMpI+mUpNOSJiSdkXRW0qSkc5LOS5pq+6y094rDjur/AP3vCTz/vY3+97a2F3eHpdVX64X1QjIm87miSgrka0aOvsa9bErqhRv5+RmLZXRhdaOZ31gvDHTmZ+XsHZhu+dkkb535ofjctfJZOXsHrFs+2zU/rKtX2vKuHH18rKoCrcRncj//ctZs7lb+QH46/r9/nWstXfvnukfNJ/lfOB/RTNf+DGp6MN29Qwobz8teEPg1CgoKilaR9jcTjsN+09NeCQAAAAAAAAAAAAAAAADgdxzHzwnT3iMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAd9DwAA//+TC2AL")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000009840)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0)
ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000001380)={<r1=>0x0, "e220cc08a62b1e7d303fe904a4adce82"})
ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000002380)={r1, "36fb8fc29720b9f902dd3720f721864c"})
mkdir(&(0x7f0000000280)='./file0\x00', 0x324)
mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0)
mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000240), 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000001340)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000003c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setscheduler(0x0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000000)='sched_switch\x00', r6}, 0x10)
writev(0xffffffffffffffff, 0x0, 0x0)
getdents64(r2, 0x0, 0x11)
fstat(r0, &(0x7f0000000480))

30.193597943s ago: executing program 1 (id=113):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x5, 0x7fc00002}]})
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) (async)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10)
sched_setscheduler(0x0, 0x1, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r3, 0x0) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r3, 0x0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003c00), 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffdffffff, 0x20031, 0xffffffffffffffff, 0xbe9f5000)
userfaultfd(0x80001) (async)
r4 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x500})
ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4})
ioctl$UFFDIO_COPY(r4, 0xc028aa03, &(0x7f0000000080)={&(0x7f00006c6000/0x400000)=nil, &(0x7f000018b000/0x3000)=nil, 0x400000, 0x0, 0x18100})
sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000005bcb00001860000000010000680000000000000018", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000001800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00', r5}, 0x10)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) (async)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) (async)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0)
timer_create(0x0, &(0x7f0000000180)={0x0, 0x13}, &(0x7f0000000240)=<r6=>0x0)
timer_settime(r6, 0x0, &(0x7f0000000340)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48)

30.094354253s ago: executing program 1 (id=114):
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket(0x10, 0x3, 0x9)
syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x0)
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
r1 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
read(r0, &(0x7f00000013c0)=""/4100, 0x1004)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000ee408c193b114d11f3c46f84fe7279de3294653de1df2444f511de7b6f79f91f1e9a5335d5515f42f8056801dad14e991dd0083303182358b7a9503d3a117b818ca322052c66c82976a6117cae2e62e8e0a4e7ddb9c83e37161314d2f9735f2473d820e3271c75c4880d6e73d3e0753841de9e3bca58a76796be5dc9e2455d1c2bf30d78f1b3e42e897528fbf0554e579587afe8"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000040018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000030000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r7}, 0x18)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r5}, 0x10)
pselect6(0x40, &(0x7f00000001c0)={0x2, 0x0, 0x3, 0xfffffffffffffffd, 0x3, 0x0, 0x0, 0xe}, 0x0, &(0x7f0000000300)={0x3ff, 0x7e7, 0x0, 0x9, 0x4, 0x0, 0x7fffffff, 0x3f8}, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)

30.069832445s ago: executing program 32 (id=114):
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket(0x10, 0x3, 0x9)
syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x0)
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
r1 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
read(r0, &(0x7f00000013c0)=""/4100, 0x1004)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000ee408c193b114d11f3c46f84fe7279de3294653de1df2444f511de7b6f79f91f1e9a5335d5515f42f8056801dad14e991dd0083303182358b7a9503d3a117b818ca322052c66c82976a6117cae2e62e8e0a4e7ddb9c83e37161314d2f9735f2473d820e3271c75c4880d6e73d3e0753841de9e3bca58a76796be5dc9e2455d1c2bf30d78f1b3e42e897528fbf0554e579587afe8"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000040018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000030000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r7}, 0x18)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r5}, 0x10)
pselect6(0x40, &(0x7f00000001c0)={0x2, 0x0, 0x3, 0xfffffffffffffffd, 0x3, 0x0, 0x0, 0xe}, 0x0, &(0x7f0000000300)={0x3ff, 0x7e7, 0x0, 0x9, 0x4, 0x0, 0x7fffffff, 0x3f8}, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)

6.582516249s ago: executing program 0 (id=269):
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r0 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x77c})
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1})
madvise(&(0x7f0000130000/0xc00000)=nil, 0xc00000, 0x4)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r3 = syz_open_procfs$userns(0x0, &(0x7f00000000c0))
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0)
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00e9381ae7b7af2202f17f000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfffffffe}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$TCFLSH(r4, 0x400455c8, 0x4)
ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000080)=0x31)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r7=>0x0})
syz_clone3(&(0x7f0000000500)={0x2000, &(0x7f00000001c0), &(0x7f0000000280)=<r8=>0x0, &(0x7f00000002c0), {0x39}, &(0x7f0000000300)=""/155, 0x9b, &(0x7f00000003c0)=""/162, &(0x7f00000004c0)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0], 0x6}, 0x58)
r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r10 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', <r11=>0x0})
sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
r12 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r12, &(0x7f0000000100)={0x1f, 0xffffffffffffffff, 0x4}, 0x6)
write$bt_hci(r12, &(0x7f0000000240)=ANY=[@ANYBLOB="0000020008"], 0xe)
sendmsg$nl_route_sched(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003340)=@newtfilter={0x78, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r11, {0x0, 0x2400}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_bpf={{0x8}, {0x4c, 0x2, [@TCA_BPF_POLICE={0x40, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0x20000000, 0x5, 0xb, 0xfffff800, {0x3, 0x0, 0xe, 0x1390, 0x200}, {0x10, 0x2, 0x0, 0x1, 0x7, 0x7}, 0x2, 0xb, 0x3}}]}, @TCA_BPF_FD={0x8}]}}]}, 0x78}}, 0x0)
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f0000000600)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x3c, r2, 0x100, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x74}, @val={0x8}, @void}}, [@NL80211_ATTR_NETNS_FD={0x8, 0xdb, r3}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r7}, @NL80211_ATTR_PID={0x8, 0x52, r8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x400801d}, 0x44000)
ioctl$UFFDIO_CONTINUE(r0, 0xc020aa07, &(0x7f0000000180)={{&(0x7f0000926000/0x3000)=nil, 0x3000}, 0x1})
syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x10, &(0x7f0000000240)={[], [], 0x2c}, 0x84, 0x4d8, &(0x7f0000000e80)="$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")

6.498011037s ago: executing program 3 (id=277):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
io_getevents(0x0, 0x3, 0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000140000/0x2000)=nil, 0x2000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
ppoll(0x0, 0x0, &(0x7f0000001280), 0x0, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(r3, 0x0, 0x4)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@gettclass={0x24, 0x2a, 0x8a0, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x5, 0xd}, {0x6, 0x7}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x20008090}, 0x40c0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15)
getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902bf0002010650000900000000020d00000524060001082400a9b30d240f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c09000304240202042402000424"], 0x0)
syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x4, 0x14a, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r5}, &(0x7f0000000040), &(0x7f0000000280)}, 0x20)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r6}, 0x10)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0)

6.320867044s ago: executing program 2 (id=279):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x11a)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001cc0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18)
pipe2$9p(&(0x7f0000000240)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15)
r3 = dup(r2)
write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYRES64=r0, @ANYRESHEX=r3])
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x11a) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000001cc0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18) (async)
pipe2$9p(&(0x7f0000000240), 0x0) (async)
write$P9_RVERSION(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) (async)
dup(r2) (async)
write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) (async)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYRES64=r0, @ANYRESHEX=r3]) (async)

6.319635104s ago: executing program 2 (id=280):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='scsi_dispatch_cmd_start\x00', r1}, 0x10)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000740)='scsi_dispatch_cmd_start\x00', r2}, 0x10)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15)

6.315441634s ago: executing program 2 (id=281):
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60)
r1 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x200000, &(0x7f0000000100)={[{@minixdf}, {@errors_remount}, {@init_itable}, {@commit={'commit', 0x3d, 0x5}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@norecovery}, {@nobarrier}, {@nomblk_io_submit}]}, 0x0, 0x566, &(0x7f0000000ec0)="$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")
mkdirat(r1, &(0x7f0000000280)='./file1\x00', 0x3b8)
r2 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c)
recvmsg$unix(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20)
sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x65e, 0x9200000000000000)
r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0)
r4 = eventfd(0xc)
ioctl$VHOST_SET_LOG_FD(r3, 0x4004af07, &(0x7f0000000240)=r4)
ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f0000000040)={0x1, r4})
ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0})
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x9ffc)
ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0})
ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000700))
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
ioctl$VHOST_SET_VRING_ERR(r3, 0x4008af22, &(0x7f00000002c0)={0x1, r4})
ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000000)=0x1)
bpf$MAP_DELETE_BATCH(0x1b, &(0x7f00000001c0)={&(0x7f0000000300), 0x0, 0x0, 0x0, 0x6}, 0x38)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1600000000000000040000000100000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000316dd34c2e460242ffff00000000000007274c7ca021ad271f8d95f24254e003d41025dc46cbd0ab0fb637ab9a0fa20ce41bb23fbc682e36cf6322770b6b2a95823d95d35069278b10d8a0265950cd3345cb4a3b0a1cea48eea25e53ebe94cae0b400d6a84442f2f1ba6849555870fecd43312b736ef99d919acc0564d4e7589873e364c3dbaf9f7e0ec0aef20a53c24eb000e0fbea492c2690d9433326afbee7f0c27595c0e138f1192cda3c246ec264ab4a09cbebc0934a4ab3177bebcece7ccfbb38f902783a0877fdfda92d0", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x18)
rename(0x0, 0x0)
sendmsg$nl_route(r5, 0x0, 0x0)

5.799374163s ago: executing program 0 (id=282):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000110b0008850000007200000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r0, 0x0, 0x28, 0x0, &(0x7f0000000040)="c1188e99b95d02ff4284860186dd0ed2cc36533466a80562e25478652ca4ac2ff05706d1afc5c971", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000380)={[{@debug}, {@discard}, {@usrquota}, {@noinit_itable}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x10}}]}, 0x67, 0x52b, &(0x7f0000000a00)="$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")
sched_setscheduler(0x0, 0x2, 0x0)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2200c851, &(0x7f0000000000)={0xa, 0x2000, 0x0, @loopback={0x0, 0xa0211fffe000001}, 0x3}, 0x1c)
socket$inet(0x2, 0x3, 0x9)
r5 = socket$netlink(0x10, 0x3, 0x0)
writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000080)="290000001e00190f00003fffffffda060200000000e80001dd0008040d0008000c0000000005000000", 0x29}], 0x1)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mkdir(&(0x7f0000000240)='./file0\x00', 0x200)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000180)='sys_enter\x00', r6}, 0x10)
lookup_dcookie(0x162f, 0x0, 0x0)
r7 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r7, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc}, 0x1c)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000040), 0xfe, 0x4f2, &(0x7f0000000b00)="$eJzs3d9rHFsdAPDvTHbvbdpcN1d9uF6wLbaSFO0maWwbfKgKok8Ftb7XmGxDyCZbkk3bhKIp/gGCiAq+6JMvgn+AIP0TRCjou6gooq0++FAd2d3ZmKa7+UE3u97s5wMnc8782O85GebsnJlhJ4ChdTEiJiMiy7LsSkSU8vlpnmKnlRrrvXj+eKGRksiyO39LIsnntT/r7Xx6Lt/sTER87csR30xej7uxtb0yX61W1vPyVH01eZll21eXV+eXKkuVtdnZmRtzN+euz033pJ3jEXHri3/6wXd/9qVbv/r0w9/f/cvkt1oNbNnbjl5qNb3Y/F+0FSJi/SSCDUih2cKW6wOuCwAAB2uc7384Ij4REVeiFCPNszkAAADgNMk+NxYvk9b9PwAAAOB0SiNiLJK0nD/vOxZpWi63nuH9aJxNq7WN+qey0u71gvEopveWq5Xp/NmB8SgmjfJM/oxtu3xtX3k2It6NiO+XRpvl8kKtujjQKx8AAAAwPM7tG///s9Qa/wMAAACnzPigKwAAAACcOON/AAAAOP2M/wEAAOBU+8rt242Utd9/vfhga3Ol9uDqYmVjpby6uVBeqK3fLy/VakvN3+xbPezzqrXa/c/E2uajqXploz61sbV9d7W2uVa/u/zKK7ABAACAPnr3wtPfJRGx89nRNCKyZM+yYkQ2snflQv/rB5yc9Dgr//Hk6gH038igKwAMjFN6GF7FQVcAGLjD+oGuD+/8uvd1AQAATsbEx3bv/zdTw1v5smSgNQNOWn7/P3Gsw/Bx/x+Gl/t/MLyKB50BGBTAqZce4VB/8/v/WXasSgEAAD031kxJWs7HAWORpuVyxDvN1wIUk3vL1cp0RHwoIn5bKr7dKM80t0xcHgAAAAAAAAAAAAAAAAAAAAAAAACAI8qyJLIuRnfXAQAAAD7IItI/J/n7vyZKl8f2Xx94K/lXqTmNiIc/vvPDR/P1+vpMY/7fd+fXf5TPv9bvqxcAAABAJ+1xenscDwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC99OL544V26mfcv34hIsY7xS/Emeb0TBQj4uw/kijs2S6JiJEexN95EhHvdYqfNKoV43kt9sdPI2J0wPHP9SA+DLOnjf7n852OvzQuNqedj79Cnt5U9/4v3e3/Rrr0f+90+sD09VnvP/vFVNf4TyLeL3Tuf9rxky7xLx2xjd/4+vZ2t2XZTyMmOn7/JK/EmkoK96c2travLq/OL1WWKmuzszM35m7OXZ+bnrq3XK3kfzvG+N7Hf/mfg9p/tkv88UPaf/mI7f/3s0fPP9LKFvctKsZPsmzyUuf9/16X+O3vvk/mu7tRnmjnd1r5vc7//DfnLxzQ/sUu7T9s/08esf1XvvqdPxxxVQCgDza2tlfmq9XK+vEyScTOG2wuM1yZ0ehj0Pk4aJ32SWwf6vPtPNT/xS44dmZwfRIAAHAy/nfSP+iaAAAAAAAAAAAAAAAAAAAAwPA67GfAogc/J7Y/5s5gmgoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcKD/BgAA//+6ychX")
pselect6(0x40, &(0x7f0000000000)={0x4, 0xa5, 0x81, 0x9, 0x10, 0x7, 0xb96f, 0x8}, 0x0, &(0x7f0000000080)={0x8, 0x6, 0x4, 0x8, 0x6, 0x3ab1, 0x7, 0x80000001}, &(0x7f0000000100), 0x0)

5.457747457s ago: executing program 2 (id=283):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70200001400ffd9b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000005c0)='workqueue_queue_work\x00', r2}, 0x18)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000e40)=ANY=[@ANYBLOB="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"], &(0x7f0000000480)='syzkaller\x00'}, 0x80)
r3 = socket(0x8000000010, 0x2, 0x0)
write(r3, &(0x7f0000000500)="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", 0xfd)
syz_usb_control_io$hid(r0, &(0x7f0000000580)={0x24, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="002201"], 0x0}, 0x0)
syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, &(0x7f0000000140)={0x0, 0xb97b33abdbabbd81, 0xcf, {0xcf, 0x30, "01e0af7b27fc65bb9be076e01f108970cb0c8925a933e3845722d77552b07187a19e5318c35bd891b90e45884a3e8f9fc7c2151cd30c78efbbf9ba6163af7492742bfb903e0b448b9345da77669a97675aded4cc5a704f3327de57c6648b8ba763fdadf010106bef32a0db93754881120a5fe46130db42b781794db98e941a4117f805b4b76a0b16085703f968d3992a9640c7b2c041792dfb23184d3cd118f39bb0dc5775a7b2c4e068761b1f4f27bc20d4d2ba58f15c62596fcf0ee157cdaf93fd35086c674c6b8f0fab7b69"}}, &(0x7f0000000040)=ANY=[@ANYBLOB="000304000000a83c5c8f"], &(0x7f0000000080)={0x0, 0xf, 0xc, {0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x1e, 0xb, 0x2, 0x3}]}}, &(0x7f0000000240)={0x20, 0x29, 0xf, {0xf, 0x29, 0x9, 0x10, 0x8, 0x0, "10ca0100", "7efea128"}}, &(0x7f0000000280)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3, 0x18, 0x91, 0x7f, 0x9, 0x2, 0xf800}}}, &(0x7f00000007c0)={0x84, &(0x7f0000000880)=ANY=[@ANYBLOB="200640000000e4bbc087294cde211242224d134c933134934340d55b8927a63477e6a1eb25d18b44c9c34fff468d50f0e3ccd694729469edc1c1266195d20b0db8fa9f3e947720ba4cc321187fb1db72188d2b44ee4ee217682a1ed1bad7509f94802cc2bcfba747299336e7838e077a01882341a4bba45e50cafa05bd0b2b8b99bd178bb8596657f82ce7c3a265e1aaf2115fdeb02408b483d74334a24bfac8b2b501a144ecb22f9795923173eb7af58a0bf8d03ed6c5797c31596d8efb3d54430a9d5903123c5b37e5d0df4476b77fefb27aff62d3659a817cc45e00028f7ebf8d1af75f5bbbc479"], &(0x7f0000000380)={0x0, 0xa, 0x1, 0x2}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x3, 0x2}}, &(0x7f0000000440)={0x20, 0x0, 0x4, {0x60, 0x20}}, &(0x7f0000000480)={0x40, 0x7, 0x2, 0x3}, &(0x7f00000004c0)={0x40, 0x9, 0x1, 0x2}, &(0x7f0000000540)={0x40, 0xb, 0x2, "909c"}, &(0x7f00000005c0)={0x40, 0xf, 0x2, 0xfcc8}, &(0x7f0000000600)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000640)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000680)={0x40, 0x19, 0x2, "e1b0"}, &(0x7f00000006c0)={0x40, 0x1a, 0x2, 0x9}, &(0x7f0000000700)={0x40, 0x1c, 0x1, 0x4}, &(0x7f0000000740)={0x40, 0x1e, 0x1, 0x6}, &(0x7f0000000780)={0x40, 0x21, 0x1}})
syz_usb_ep_write(r0, 0x81, 0xffffffffffffffa7, &(0x7f00000000c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157f88010000003a5b0000000091ff000018e8f5b3371da3635b8b4fa637135839")

5.280777703s ago: executing program 0 (id=284):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x10, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xfffffffe}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@call={0x85, 0x0, 0x0, 0xe}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40efe, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = syz_open_dev$mouse(&(0x7f00000001c0), 0x5, 0x8080)
ioctl$KVM_GET_ONE_REG(r2, 0x4010aeab, &(0x7f0000000240)=@arm64_bitmap={0x6030000000160001, &(0x7f0000000200)=0x6})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10)

5.280089234s ago: executing program 0 (id=285):
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000000c0)={0x0, <r0=>0x0}, 0x8)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a9a4850000000400000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
syz_clone(0xa44440, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = getpid()
r3 = syz_pidfd_open(r2, 0x0)
setns(r3, 0x24020000)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r5}, 0x0, &(0x7f0000000040)}, 0x20)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r6}, 0x10)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0xc, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000400)='itimer_state\x00', r7}, 0x18)
setitimer(0x2, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
socket$inet6_tcp(0xa, 0x1, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r9 = socket(0x1, 0x2, 0x0)
setsockopt$sock_int(r9, 0x1, 0x2e, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r8}, 0x10)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)={<r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff})
sendmsg$inet(r11, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000042c0)="86", 0xff0f}], 0x1}, 0x0)
recvmsg(r10, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0)

5.131381758s ago: executing program 0 (id=286):
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, 0x0, 0x0, 0x0)
recvmmsg(r1, 0x0, 0x0, 0x2, 0x0)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7020000140000e5b7030000000700008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10)
r5 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r5, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x1, 0x0, 0x2, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private2}}]}, 0x60}}, 0x0)
syz_mount_image$exfat(&(0x7f0000000100), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000600)=ANY=[], 0x2, 0x1509, &(0x7f0000001c40)="$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")
r6 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r6, 0x1, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0)

4.715143618s ago: executing program 3 (id=287):
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x5, &(0x7f0000000540), 0x1, 0x783, &(0x7f0000001000)="$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") (async)
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x5, &(0x7f0000000540), 0x1, 0x783, &(0x7f0000001000)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x400042, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@remote, @in6=@rand_addr=' \x01\x00', 0x0, 0x7, 0x0, 0x0, 0xa, 0x40, 0xa0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1}}}, 0xb8}}, 0x4000)
pwrite64(r0, &(0x7f0000000240)="32913c", 0x3, 0x4) (async)
pwrite64(r0, &(0x7f0000000240)="32913c", 0x3, 0x4)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
sendfile(r2, r2, 0x0, 0xe3aa6ea)

4.512856007s ago: executing program 3 (id=288):
r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x40040, 0x0)
readv(r0, &(0x7f0000002240)=[{0x0}, {&(0x7f0000001180)=""/1, 0x1}], 0x2)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000080)={[{0x2b, 'perf_event'}, {0x2b, 'io'}, {0x2b, 'net'}, {0x0, 'rdma'}, {0x2d, 'perf_event'}, {0x2d, 'pids'}]}, 0x2d)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000680)=@nat={'nat\x00', 0x1b, 0x5, 0x470, 0x0, 0x1e0, 0xffffffff, 0x1e0, 0x0, 0x488, 0x488, 0xffffffff, 0x488, 0x488, 0x5, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2, [0xff000000, 0xff, 0xff, 0xffffffff], [0xffffffff, 0xffffff00, 0xffffffff, 0xffffffff], 'wg2\x00', 'veth1_virt_wifi\x00', {}, {0xff}, 0x2c, 0xa, 0x1, 0x2}, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0xe, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @gre_key=0x2, @gre_key=0x719}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0xe, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv6=@loopback, @port=0x4e21, @icmp_id=0x68}}}, {{@ipv6={@private1, @dev={0xfe, 0x80, '\x00', 0x2b}, [0xffffffff, 0xffffff00, 0x0, 0xffffff00], [0xffffff00, 0xff000000, 0xff], 'dummy0\x00', 'vcan0\x00', {0xff}, {}, 0x16, 0xe, 0x3, 0x80}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x3, 0x3, 0x4}, {0x4, 0x4, 0x6}}}}, {{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @remote, [0xffffffff, 0x0, 0x0, 0xff], [0xffffff00, 0xff, 0x0, 0xffffffff], 'veth1_macvtap\x00', 'gretap0\x00', {0xff}, {0xff}, 0x0, 0x4, 0x6, 0xc}, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x3, 'syz1\x00', {0x7}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d0)

4.496060549s ago: executing program 3 (id=289):
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='smaps\x00')
preadv2(r0, &(0x7f0000000600)=[{&(0x7f0000000480)=""/230, 0xe6}, {&(0x7f0000000340)}, {&(0x7f00000003c0)=""/18, 0x12}, {&(0x7f0000001900)=""/4096, 0x1000}, {&(0x7f0000000300)=""/45, 0x2d}, {&(0x7f0000000100)=""/3, 0x3}], 0x6, 0x2c5, 0x0, 0x16) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) (async)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) (async)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) (async)
unshare(0x4060400) (async)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f00000002c0)='./file1\x00', 0x0, 0x2925099, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000180)={'syztnl1\x00', <r1=>0x0, 0x29, 0x9, 0x7, 0x3, 0x10, @dev={0xfe, 0x80, '\x00', 0x31}, @empty, 0x720, 0x7, 0xdd7e, 0x9}})
bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@bloom_filter={0x1e, 0x44, 0x7ff, 0x40, 0xc, 0xffffffffffffffff, 0x6, '\x00', r1, 0xffffffffffffffff, 0x1, 0x1, 0x1}, 0x50)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x412c84, &(0x7f0000000400)={[{@data_writeback}, {@grpquota}, {@bh}, {@abort}, {@init_itable_val={'init_itable', 0x3d, 0x5}}, {@delalloc}], [{@obj_role={'obj_role', 0x3d, 'kcacVe_free\x00\x00\x00\x00\x00'}}]}, 0x1, 0x775, &(0x7f0000001180)="$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") (async)
r2 = open(0x0, 0x145142, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, r2, 0x0, 0x31, &(0x7f0000000000)='//sys\x00\x00\x00\x80\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) (async)
mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0)

4.492712259s ago: executing program 3 (id=290):
r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0xd2, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x36, [{{0x9, 0x4, 0x0, 0xb9, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x800, 0x5, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x7, 0x2, 0x1}}}}}]}}]}}, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x141442, 0x38)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x40)
write$UHID_INPUT(r1, &(0x7f0000001a40)={0x8, {"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", 0x1000}}, 0xffffff00) (async)
write$UHID_INPUT(r1, &(0x7f0000001a40)={0x8, {"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", 0x1000}}, 0xffffff00)
ioctl$HIDIOCGFIELDINFO(r1, 0xc038480a, &(0x7f00000004c0)={0x1, 0x3, 0x5, 0xd, 0x4, 0x3, 0x401, 0xaa96, 0x2, 0x2, 0x8, 0x7, 0x2, 0x6})
syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x28bd, 0x909, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x8, 0x10, 0x8, [{{0x9, 0x4, 0x0, 0x95, 0x2, 0x3, 0x1, 0x1, 0x5, {0x9, 0x21, 0x200, 0x10, 0x1, {0x22, 0x136}}, {{{0x9, 0x5, 0x81, 0x3, 0x220, 0xec, 0x7, 0xf9}}}}}]}}]}}, &(0x7f0000000440)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x110, 0x6, 0x3, 0x5, 0x10, 0x4}, 0x5, &(0x7f0000000140)={0x5, 0xf, 0x5}, 0x8, [{0x4, &(0x7f0000000180)=@lang_id={0x4}}, {0xbc, &(0x7f00000001c0)=@string={0xbc, 0x3, "01e05fc2a08d19ad13231502713677d6844c3322a1f3154c72772fcac26d43a5482d5a58250e75df7330a39b77dd0ac2891d877dfe34aef09832f31011ada508ed61519b21053c923842d861a0b06479117017e9cc33dfd64ad21c8f1da2d58a1e730eae7dcfe6eb1f5b8967d99874b9b069d09d23b8ac25530751365b5e599bc51205c612cd406c53be49b95a93da902bb338963b38f864dbb278b41fa53c8107462f8f21202fd670ac282be58671e37fabfb978b16ce6aa20d"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x410}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x1c0a}}, {0xe, &(0x7f0000000340)=@string={0xe, 0x3, "05e2c616dc50ac9b5a8868e3"}}, {0x69, &(0x7f0000000380)=@string={0x69, 0x3, "3effabb375670efafb6346fe51044877b7315edb5e7aecac048c829613ce26036facd1c2415626bd8a5e8595adee0831181307a016dca358b80dc853f7af1ffee9a553509f52659ee33b1fd5d809be6e4e923efbd187eb5cb623ace3829a6840e72936054eb8cb"}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x41c}}]})
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
syz_open_pts(r2, 0x0) (async)
syz_open_pts(r2, 0x0)
openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) (async)
r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
syz_kvm_setup_syzos_vm$x86(r4, &(0x7f0000c00000/0x400000)=nil) (async)
r5 = syz_kvm_setup_syzos_vm$x86(r4, &(0x7f0000c00000/0x400000)=nil)
r6 = syz_kvm_add_vcpu$x86(r5, &(0x7f0000000100)={0x0, &(0x7f00000001c0)=[@code={0xa, 0x51, {"660f3880210f78d0410fc7b23e000000470f01df66b8a1000f00d8b8010000000f01c1b805000000b9009000000f01d9670fc7b25000000066ba4200ec410f07"}}], 0x51})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) (async)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) (async)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60)
r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r8, r9, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000080)="67400f07c40249af4b8bb9800000c00f3235010200000f300f20a366450f769e00000100440f20c03588001d00445b66baf80cb88cf4b684ef66bafc0ced460f01c9c4827d24c366ba4cf0ff07ef87f345a57a43e16806a4", 0x58}], 0x1, 0x7c, 0x0, 0x0) (async)
syz_kvm_setup_cpu$x86(r8, r9, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000080)="67400f07c40249af4b8bb9800000c00f3235010200000f300f20a366450f769e00000100440f20c03588001d00445b66baf80cb88cf4b684ef66bafc0ced460f01c9c4827d24c366ba4cf0ff07ef87f345a57a43e16806a4", 0x58}], 0x1, 0x7c, 0x0, 0x0)
ioctl$KVM_RUN(r9, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r9, 0xae80, 0x0)
ioctl$KVM_SET_SREGS(r9, 0x4138ae84, &(0x7f00000001c0)={{0x2000, 0xeeee0000, 0x8, 0x9, 0xfb, 0x5, 0x40, 0x7, 0x0, 0x2e, 0x19}, {0x5000, 0xeeee6001, 0x3, 0x0, 0x40, 0x5, 0x7d, 0xf9, 0x5, 0x3, 0x3}, {0x2, 0xdddd0000, 0xe, 0x5, 0x3, 0x7, 0x0, 0x9, 0x4, 0xa7, 0x5, 0x81}, {0x6000, 0xeeee0000, 0xa, 0x6, 0x4, 0x42, 0xb, 0xff, 0x8, 0x7, 0xe, 0xff}, {0xeefe0000, 0x7777c000, 0xb, 0x3, 0x15, 0x7, 0xab, 0x7f, 0x7, 0x83, 0xf7, 0x83}, {0xdddd0000, 0x80a0000, 0xc, 0xa0, 0xb1, 0x8, 0x1, 0x9c, 0x80, 0xf, 0x1, 0x7}, {0x3000, 0x8000000, 0x6, 0x5, 0x7, 0x5, 0x7, 0x3, 0x5, 0x7f, 0xff, 0x5}, {0x100000, 0x1000, 0xe, 0x5, 0xf, 0x7, 0x1, 0x34, 0x2, 0xc, 0xb0, 0x9}, {0xeeef0000, 0x30}, {0x10000, 0x7}, 0x80000031, 0x0, 0x8000000, 0x44100, 0x8000000003, 0x0, 0x3000, [0x6, 0x4, 0x62, 0xff]})
ioctl$KVM_RUN(r9, 0xae80, 0x0)
ioctl$FS_IOC_READ_VERITY_METADATA(r1, 0xc0286687, &(0x7f0000000840)={0x3, 0x8000000, 0x30, &(0x7f0000000800)=""/48})
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x10, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x3, 0x27c, &(0x7f0000000580)="$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")
r10 = socket$inet6(0xa, 0x2, 0x0)
sendto$inet6(r10, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)
sendto$inet6(r10, &(0x7f0000000e80)="0d0ad7c36d6617110e434332d6ac582208222cfb7c37ce1148f448455bc37f5f70c92774dcb201629979039d7c8943b207e5bdf9ab8eed9ace110469c51f4f211dd9fad815eb5b273ac04e1edc679bcdf0a0d24482de5454be9003cb80714a95e136bb704ee58e707d1e69b3c3a1c2c37f9c0402e14abdeb32086a49aff25e5c0f0131d59b4783316b9fa2c71c51ce76942d5f519145c9e3bf0d4182b4a62970b2ce81d35a7afc8384b387b8e21f2051d90d92323a710cabe5275d335b64453e759251a140de480541d8dd7662a14296a59eba99b95bfdf5b22992c323865b471d13ad79867e2692fd4eece299a81e2b33336b6801f51c2ae8d73e4df90c9bd70cd535b72cbdf67754acdc44b3780450308d9c5527c3314eb7b2cc38b61e96403a30a8ba0c8a357aa04d3c62bc51bcf55cf214f44a909b29c30c18c3a43c86472612086664a80f2aa8490e58352732acb96eb46deab42895d1957a6029ad86e7a5ced6bde89c158aaee721954beeebe5973059007f7dd5459029af6d3f1d73d35f07d19b7cedfc80d1d7ef37f8b113f564afd0f093202929fef43e788619ca522c7f679dd2f27949d879b4dab46581a0e054b4ed1db37e43f528748b56ec5a54b7af198d4ae551046f7814fe3a5cbc1cc7cb6655fc198939b049f3c02443148c588e34d6ebef81096b4e48f468016d2bde0828664c0874d71e2d88b3bc04079d4a504255a83c3f07a4f1c3e5a4c66f55f36e51e344392487c8299d8d1bfb568780c0d57df48990cb5d6b35c3f7445f80312186d8598faf61072d4eefc961fb5a7e72b971c8f94a8346effd27362cee8d72a98b55e317de280d2d63ee83ca7140b7913122d402c536d914c8510c81d08f0ad1c952f5b7ad5e7ef72d7c58cb4d5bafbea535b381df6ebe94c62cf782cf7ab81c017c296a88ca91d641b45748d230cf5e87e5dbee4764ea4d131ae022e6bbf3ffc3ea7b264737d9db44354bfffa63d79bc403d3ac23fb615edc382d18b0daf1bbb2fbd708d1830ddac1c3f098b8cb1ef9a0019d804bf5d953110f12f3b9a8b9b7e0c61cb5d34116add1fc9a92721ffa5fdc83e1488cf88aa6e56ad2dd55e0aadd827cc7b4e7242f01241f49e905e5e7451092c28c3f6560a6a0002e5d91fc253a5a8fd8f27e42f4f02f5849528b7d93df9b0c568022acaff410e797e88d2f8eeadbba66e423335b843df734d203fa62a861b712da8f33d5ea721767871aa2cd53e659e505507de9a54d7e6fa3c20bbfb28cd6dd2b314dabbb59e9ce15c0a94ec3b3efc54eaaa27bd7576a687dcaf58dc182662539943014a02e76dc89f48c9f83cc7199038418f965ad3dc866098b89cabcac8691b0f51ffb71902337e49293309c4480a8f1b32411cc1b55a0ec0fe2c2572fe9d488a25bfc12ba74048e1d7beee93321c7aa49ea17cb9728dc46e5272154b3b995feacbacb8885621b335274af4df9365f8c8121ff323b572d320c8fc46acd6218b9579d43005e7b0506ccb14d9a0dac4cc6efaf5366c44342eaea8b5a11457f5afbea913ce4975ab67e6a85bc46e714ca5741da38a7cceb9e85d77fd03f83f7a5ecc7241e69e2bda327f769b48ba5f13662585c72778d12bd0e9a62a3d0dbe376d1aee81e6845c2cf23f42c458ae5668c8d387bf9ab224bc9703f1c08347be810d2f19278fe8d97560b3c9f1816667d0461a25e778eb1404dcaac1ed0a6a0745f3a5d2dc1b6babf98f5135d531cb26334ef2fec4c78c95b7193935139664fc65f17b047eb3dc39e251ba52ce33f8099719f1a789db1690347355e7b02d4c522692b9597fd31abb90f973ae4eb0bd0d900cdd887ff01d4845d7f0aee39b220a65a5aeee0fd386054070723c841c042d5339cc6325f07f0f733d124c6524f388ef7419f42c06278b8fceaa3a16b202dfb539b129762397e29cdd679ca6240272fa0c3e2e8c0a27aaa407f30b4024d0638dfca1bc9483db3ccc2880f", 0x5c6, 0x6d91fb6102d8910c, 0x0, 0xfffffffffffffe38)
sendto$inet6(r10, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
sendto$inet6(r10, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
syz_usb_control_io(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0x5, {[@main=@item_012={0x2, 0x0, 0xb, "fa9e"}, @main=@item_012={0x1, 0x0, 0x8, "92"}]}}, 0x0}, 0x0)

4.17117987s ago: executing program 0 (id=292):
socket$inet6(0xa, 0x1, 0x0)
bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x50)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x1, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110e22fff6)
write$cgroup_type(0xffffffffffffffff, &(0x7f0000000280), 0xfffffeed)
setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0xc)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0xe8034000, 0x0, 0x0, 0x0, 0x0, 0x5dc}, 0x50)
getrlimit(0x5, &(0x7f0000000000))
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00'}, 0x10)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r5)
ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r3, 0x4008941a, &(0x7f0000000180)=0x2)
sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r5, &(0x7f00000003c0)={0x0, 0x36, &(0x7f0000000000)={&(0x7f0000000100)={0x14, r6, 0xba87317d461c07c9, 0x70bd2d, 0x4004}, 0x14}, 0x1, 0x0, 0x0, 0x4005}, 0x40490c4)
r7 = syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000900)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1532, 0x11d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x8, 0x0, 0x1, {0x22, 0x2}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r7, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)

3.572699797s ago: executing program 5 (id=300):
sendmsg$OSF_MSG_REMOVE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f0000000f80)={0x4bc, 0x1, 0x5, 0x801, 0x0, 0x0, {0x2, 0x0, 0x8}, [{{0x254, 0x1, {{0x3, 0x9950}, 0xfe, 0x33, 0x81, 0x5, 0x10, 'syz1\x00', "5d6fddad2f0bbf0a54d7be8ed667fc25fb952e94f262ab2de6a28f3830509665", "d8956fa3871d9acbad4d22cd21f58d6327397552d7af65eade5ff3cddf9ba1de", [{0xfff9, 0x9, {0x0, 0x5}}, {0xa, 0x2, {0x2, 0x9}}, {0x7, 0x6, {0x2, 0x4916}}, {0x3, 0xd, {0x0, 0x101}}, {0x1, 0x2, {0x3, 0xe5e}}, {0x3, 0xf, {0x1, 0x7}}, {0x8, 0x3, {0x3, 0xe00}}, {0x40, 0x4, {0x0, 0xff}}, {0x3, 0x8, {0x2, 0x9}}, {0x3, 0x3, {0x0, 0x7}}, {0x0, 0x4, {0x2, 0x8}}, {0x6, 0x2, {0x2, 0x6}}, {0x3, 0x4, {0x1, 0x3}}, {0x6f8, 0xbee2, {0x3, 0x101}}, {0x800, 0x7, {0x1, 0x5198}}, {0x6, 0xa, {0x0, 0x8001}}, {0x3, 0x800, {0x3}}, {0x1, 0x1058, {0x0, 0x2}}, {0x4, 0x7d8, {0x0, 0x20000000}}, {0xfff, 0xc9, {0x2, 0x3}}, {0x8, 0x9a8, {0x0, 0x1}}, {0x2, 0xd301, {0x1, 0xffac}}, {0x4, 0x941, {0x3, 0x7}}, {0x2, 0x6, {0x2, 0x3}}, {0x6932, 0x1, {0x1, 0x1715}}, {0xff01, 0x5, {0x1, 0xb3ec}}, {0x9c98, 0xa93, {0x0, 0x3}}, {0xb, 0x1, {0x0, 0xc}}, {0x1, 0x400, {0x2, 0x3}}, {0xfffb, 0x2, {0x2, 0x1}}, {0x8000, 0xc9bc, {0x3, 0x7}}, {0x3, 0x8, {0x1, 0x3}}, {0x1, 0x6, {0x1, 0x4}}, {0x3, 0x0, {0x1, 0x9}}, {0x8, 0x3, {0x2, 0x1}}, {0x7, 0xea, {0x3, 0xffffffff}}, {0x4, 0x3, {0x0, 0xfff}}, {0x800, 0x1c74, {0x2, 0x5}}, {0x9, 0x800, {0x1, 0x8}}, {0x8, 0x4, {0x3, 0x5}}]}}}, {{0x254, 0x1, {{0x3, 0x7}, 0xe, 0xba, 0x4, 0x800, 0x11, 'syz0\x00', "ffc2867f1d044d66567dc275fddecd59b87e1ff3f2398ad67de8123774f6e3c7", "443755c1f435246dfcfb4f926d78f1ea7886bd40b72f40e8220caed407ea59ae", [{0xf4, 0xeb80, {0x3, 0x4}}, {0x4, 0x5, {0x1, 0x401}}, {0x2, 0x2, {0x2, 0xe0de}}, {0x0, 0x10, {0x3, 0x2ec}}, {0x4, 0x1, {0x2, 0x8000}}, {0xffff, 0x3, {0x3, 0x8}}, {0xfd, 0x7, {0x1, 0x9}}, {0x6, 0x61c8, {0x0, 0x6}}, {0x4, 0x6, {0x2, 0x200}}, {0x4, 0x4, {0x3, 0x2}}, {0x59, 0x4, {0x1, 0x6}}, {0x4, 0x9, {0x0, 0x5}}, {0x400, 0x1, {0x2, 0x2d44}}, {0xcde0, 0x1, {0x1}}, {0x8, 0x0, {0x0, 0x7fffffff}}, {0x81, 0xb8e, {0x0, 0x5}}, {0x100, 0x9, {0x3, 0x2}}, {0x7, 0x84, {0x0, 0x46}}, {0x280, 0x800, {0x1}}, {0x0, 0x8, {0x3, 0x8}}, {0x8001, 0x8, {0x0, 0x1}}, {0x8, 0x3, {0x2, 0x5}}, {0x6, 0xa29, {0x1, 0xfffffffa}}, {0x6, 0x1ff, {0x3, 0x5}}, {0xf, 0x101, {0x1, 0x9}}, {0x83a, 0x3, {0x1, 0x80}}, {0x81, 0x1, {0x0, 0x2}}, {0x8092, 0x8000, {0x0, 0xafd}}, {0xfaa, 0xd, {0x0, 0x9}}, {0x3, 0x2, {0x1, 0x9}}, {0x1000, 0x2e6, {0x3, 0x7}}, {0x9, 0x2, {0x2, 0x5}}, {0xf8d, 0x7f, {0x1, 0x9}}, {0x0, 0x9, {0x0, 0x200}}, {0x4, 0xa80a, {0x1, 0xe97}}, {0x93, 0x6, {0x3, 0x1}}, {0x8, 0x3, {0x1, 0x5}}, {0xfff, 0xa0c5, {0x0, 0x5}}, {0xc, 0x4, {0x0, 0x10}}, {0x3, 0x3, {0x3, 0x5}}]}}}]}, 0x4bc}, 0x1, 0x0, 0x0, 0x8800}, 0x80)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x35, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x80, 0x1, 0x28}, 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000000)='kfree\x00', r3}, 0x18)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0)
r6 = fsmount(r5, 0x0, 0x0)
fchdir(r6)
openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
close_range(r4, 0xffffffffffffffff, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000340)='sched_kthread_stop_ret\x00', r0}, 0x10)
sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000010001fff000000000000000000060000", @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800e0001007769726567756172640000000400028008000a00b8"], 0x40}}, 0x0)

3.496262315s ago: executing program 5 (id=301):
syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00')
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=<r0=>0xffffffffffffffff, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='br_fdb_add\x00', r1}, 0x10)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='br_fdb_add\x00', r2}, 0x10)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'bridge0\x00', <r6=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000001c000100000000000000000007000000", @ANYRES32=r6, @ANYBLOB="4000aa000a0002"], 0x28}, 0x1, 0x0, 0x0, 0x44800}, 0x0)
r7 = socket$igmp(0x2, 0x3, 0x2)
ioctl$INCFS_IOC_CREATE_FILE(r7, 0xc058671e, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00'}, 0x10)
socket$inet(0x2, 0x2, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r8 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
sched_setscheduler(r8, 0x3, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff})
connect$unix(r9, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r10, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r9, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48)
r11 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYRES16=r0], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sched_switch\x00', r11}, 0x18)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180))
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x40000, 0x0)

2.957597017s ago: executing program 4 (id=302):
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x0, 0x0)
recvmmsg(r0, 0x0, 0x0, 0x2, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x4000894)
r3 = socket$inet6(0xa, 0x2, 0x7)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x7, 0x0)
r4 = socket(0x400000000010, 0x3, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x50, 0x2c, 0xf3f, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xb, 0xfff3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x20, 0x2, [@TCA_BASIC_EMATCHES={0x1c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_META={0xc, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x9}}}]}]}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20041090}, 0x0)
sendmsg$MPTCP_PM_CMD_ANNOUNCE(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0xb4, 0x0, 0x2, 0x70bd2b, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x6}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x8}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x5}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xff}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x14}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x20000040}, 0x4054)
connect$inet6(r3, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}, 0x1c)
sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4001c00)
mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r7, 0x29, 0x17, &(0x7f0000000000)=0x7, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a500850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='hrtimer_init\x00', r8}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_clone(0x60220000, 0x0, 0x0, 0x0, 0x0, 0x0)

2.852615716s ago: executing program 4 (id=303):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800"/23], &(0x7f0000000000)='syzkaller\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r0}, 0x18)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) (async)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, &(0x7f0000000100)=ANY=[@ANYRESDEC=r1, @ANYRES32=r2, @ANYRESDEC=r0], &(0x7f0000000040)='syzkaller\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r3}, 0x10) (async)
mount$cgroup(0x0, &(0x7f0000000600)='.\x00', &(0x7f0000000640), 0x2208000, &(0x7f0000000340))
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async, rerun: 64)
r4 = getpid() (rerun: 64)
sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) (async)
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd5cd7000) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) (async)
sendmmsg$unix(r6, &(0x7f0000000000), 0x331, 0x0) (async)
recvmmsg(r5, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) (async, rerun: 64)
tkill(r4, 0x38) (async, rerun: 64)
bpf$PROG_LOAD(0x5, 0x0, 0x2c6d) (async)
syz_mount_image$exfat(&(0x7f0000001500), &(0x7f0000000180)='./file1\x00', 0x8010, &(0x7f0000000400)=ANY=[@ANYRES64=0x0], 0x1, 0x1509, &(0x7f0000002a80)="$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") (async, rerun: 64)
syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x3, 0x0, 0x0, 0x0, &(0x7f0000000000)) (async, rerun: 64)
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async, rerun: 32)
ptrace$setopts(0x4200, 0x0, 0x7fffffff, 0x30) (rerun: 32)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_SIOCETHTOOL(r7, 0x89f1, &(0x7f0000010640)={'ip6_vti0\x00', &(0x7f00000001c0)=@ethtool_cmd={0x0, 0x5, 0x5, 0x0, 0x7, 0x0, 0x0, 0xfc, 0x2, 0xb, 0x0, 0xfffffff9, 0x0, 0xff, 0xf7, 0x45, [0x2904, 0xb]}}) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)

2.851953907s ago: executing program 4 (id=304):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x13, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020642500000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x18)
r1 = memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xecz\xabq\x95t*T9\xa9\b X \x04\"\x17\xbf\xcb\xccF\xda\xcf\xdd^\xa0\x15\xc0\xcb^h>\x1b\xb5d\xc7\x7f0\x9a&\xb0\x12#\x9c`\xa6\xed\x05\x95g\a\xccYb\xaf\xe9\xb6G?\x9f\xf5\xfe\xc1\xc0JJ\xc8\xd9d\x80\x13\x8fX\xb4\x19\xc4\\\xcb\x89-)\x90\x01\v\xac^\xdbBQ|\xaej;\x92\\\xf8u\x19Y\xee\x99EI\xf1t\xadn<\x9b\xc9\x87\xd0\xa7\x1a\x81\xb9\xc87sq\xd7\x15\xd6\x91O\x9c\x99!9>\xff\xa8\xfa\xe6=d\xcf\xca\xa9\xc61!\xc6P\x13\xd0\x88gZ\xbe\xdfl\xfa\xff\xb0m;d07tx\xbb\xabd\xe5\x16\xc4\xae\xf0', 0x0)
write$binfmt_script(r1, &(0x7f0000000340)={'#! ', './file0'}, 0xb)
execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
mkdir(&(0x7f0000000440)='./file0\x00', 0x0)
pipe2$9p(&(0x7f00000000c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x1, 0xc, 0x9}, 0x50)
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0500000007000000020001000900000005000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000060000002d00895f5a3a80b2622f7c21", @ANYRES32, @ANYBLOB="0000000000000000b7080000070000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r4, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
getpeername$unix(r2, &(0x7f0000000380), &(0x7f0000000040)=0x6e)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r6}, 0x10)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4f, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r7}, 0x10)
mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3])

2.706034891s ago: executing program 4 (id=305):
mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x8) (async)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom1\x00', 0x2, 0x0)
mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async)
r1 = signalfd(r0, &(0x7f0000000040)={[0xfffffffffffffff8]}, 0x8)
setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000080), 0x4) (async)
r2 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r1, 0xae04)
mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, r2, 0x0, 0x10, r1, 0x0) (async)
r3 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff)
r4 = socket$netlink(0x10, 0x3, 0x8)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000100)=0xc) (async)
r5 = openat$cgroup(r1, &(0x7f0000000140)='syz1\x00', 0x200002, 0x0) (async)
getsockopt$CAN_RAW_LOOPBACK(r1, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4)
r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getpeername$netlink(r4, &(0x7f0000000200), &(0x7f0000000240)=0xc)
r7 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000280)={r1, r5, 0xa, 0x0, @void}, 0x10)
r8 = bpf$ITER_CREATE(0x21, &(0x7f00000002c0)={r7}, 0x8) (async)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={r1, <r9=>0xffffffffffffffff}, 0x4)
r10 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000500)={r8, <r11=>0xffffffffffffffff}, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1d, 0x1d, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@call={0x85, 0x0, 0x0, 0x19}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r9}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000440)='GPL\x00', 0xad55, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000480)={0x4, 0x6, 0xfffffffb, 0x1}, 0x10, 0xffffffffffffffff, r1, 0x1, &(0x7f0000000540)=[r8, r1, r8, 0x1, r10, r11], &(0x7f0000000580)=[{0x3, 0x5, 0x4, 0x8}], 0x10, 0xb}, 0x94)
r12 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0)
ioctl$RTC_WIE_OFF(r12, 0x7010) (async)
setsockopt$CAN_RAW_JOIN_FILTERS(r1, 0x65, 0x6, &(0x7f00000006c0)=0x1, 0x4) (async)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r6, 0x8982, &(0x7f0000000700)) (async)
connect$inet(0xffffffffffffffff, &(0x7f0000000740)={0x2, 0x4e23, @loopback}, 0x10)
splice(r12, &(0x7f0000000780)=0x9, r3, &(0x7f00000007c0)=0x4c3, 0x9, 0x8) (async)
sendmsg$NL80211_CMD_GET_MPP(r10, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x20, 0x0, 0x2, 0x70bd28, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x20}, 0x1, 0x0, 0x0, 0x20040080}, 0x0)
setsockopt$netlink_NETLINK_RX_RING(r1, 0x10e, 0x6, &(0x7f0000000900)={0x9, 0xff, 0xffffff81, 0x2c40fd5e}, 0x10) (async)
r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000980), r8)
sendmsg$NL80211_CMD_SET_PMK(r8, &(0x7f0000000b00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000ac0)={&(0x7f00000009c0)={0xc8, r13, 0x100, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x3, 0x13}}}}, [@NL80211_ATTR_PMK={0x14, 0xfe, "439a1c43369acd721eeb16eebde3d1a5"}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "5da6c34875520282687fa8be46f4762a"}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PMK={0x14, 0xfe, "166cde9c31a136fbf56cb117b7a5ffd9"}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "1beeafcb516de7cf1dc4b7942feac7a3"}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_PMK={0x14, 0xfe, "e4a0ff2fd3699d21dd9567e1ea65dcc3"}, @NL80211_ATTR_PMK={0x14, 0xfe, "feba96cde959d4f600836e19dbede016"}]}, 0xc8}, 0x1, 0x0, 0x0, 0x8000}, 0x20004080)

2.669659314s ago: executing program 4 (id=306):
r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x13, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0700000004000000080000000100000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000100000", @ANYRES32=0x0, @ANYRESHEX=r2, @ANYBLOB='\x00'/28], 0x50)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x8, &(0x7f0000000440)=ANY=[@ANYBLOB="1800bfb346f23cea974d1a000000000018120000c87fe520c73860c441", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000001b000000b7000000000000009500000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x52, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x18)
recvmmsg(r3, &(0x7f00000000c0), 0x0, 0x40000122, 0x0)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="40010000100013072cbd7000fcdbdf25fc02000000000000000000000000000020010000000000000000000000000001000000204e210002020000003b000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="fc010000000000000000000000000000000000fe32000000fe80000000000000000000000000001b000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000050000000000000043050000000000000500000000000000ffffffffffffff7f0000000000000000000000000000000000000000000000000000000028bd7000003500000a00040000000000000000004f001200726663343130362867636d2861657329290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000180000000400000000000000"], 0x140}, 0x1, 0x0, 0x0, 0x880}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
connect$unix(r8, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000001070000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='9p_client_res\x00', r10, 0x0, 0x8}, 0x18)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)

2.520504418s ago: executing program 5 (id=307):
openat$random(0xffffffffffffff9c, &(0x7f0000000100), 0x20000, 0x0) (async)
openat$random(0xffffffffffffff9c, &(0x7f0000000100), 0x20000, 0x0)
syz_open_procfs(0x0, &(0x7f0000000280)='smaps_rollup\x00') (async)
r0 = syz_open_procfs(0x0, &(0x7f0000000280)='smaps_rollup\x00')
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000680)=ANY=[@ANYRES64=r0, @ANYRES64=r0, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000680)=ANY=[@ANYRES64=r0, @ANYRES64=r0, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000d00000001"], 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r2, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=<r3=>r2], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x54, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r4}, 0x18)
setresuid(0xee01, 0x0, 0x0)
r5 = epoll_create1(0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0)
r8 = userfaultfd(0x80001)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) (async)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x11, r5, 0xec772000)
ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f0000000000)) (async)
ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f0000000000))
ioctl$UFFDIO_REGISTER(r8, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4}) (async)
ioctl$UFFDIO_REGISTER(r8, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x29}, 0x94)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYRES8=r1, @ANYBLOB="17000000000000000400000003", @ANYRES16=r6, @ANYBLOB="d966065670bb787d8befff78da2dbd", @ANYRES8=r3], 0x48)
openat$vsock(0xffffffffffffff9c, 0x0, 0x202000, 0x0) (async)
openat$vsock(0xffffffffffffff9c, 0x0, 0x202000, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9], 0x0}, 0x90)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r10}, 0x10)
syz_emit_ethernet(0x0, 0x0, 0x0)
r11 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r11, &(0x7f0000000180)={0x1f, 0xffff, 0x3}, 0x6)
io_setup(0x8f0, &(0x7f0000002400))

2.455547155s ago: executing program 5 (id=308):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x200000, &(0x7f0000000080)={[{@minixdf}, {}, {@barrier_val={'barrier', 0x3d, 0x9}}, {@commit={'commit', 0x3d, 0x5}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@usrjquota_path={'usrjquota', 0x3d, './file1'}}, {@nomblk_io_submit}]}, 0x1, 0x566, &(0x7f00000015c0)="$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")
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x121000, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10)
ioctl$KVM_X86_SET_MSR_FILTER(r1, 0x4188aec6, &(0x7f0000000ac0)={0x1, [{0x1, 0x270, 0x1, &(0x7f00000001c0)="94c6698a3abce5268149d5423c366632048482a2110f950a816f4ccd36870d76b413216e066eaa6a33578473edfec5182981dfbc1dfcf11730d4157b514e3c8bfe8a7310290f309755bc70cfa0a2"}, {0x1, 0x2a8, 0x4, &(0x7f00000002c0)="ec8f1dce0a437e60cee2360a3e07b238e9bc636ebc88636a52fff07314d46722f0ac997a44f40f16063aea0c7f45918892f54b09514125b6235211d63f715287b9870bb8f0f476d9f5cd375e40a702294965e8b9ee"}, {0x2, 0x10, 0x7fffffff, &(0x7f0000000000)="eb8a"}, {0x2, 0x3f8, 0x6, &(0x7f0000000340)="4e7286ab159eacd9a54d7d1e9e24a669ea586080433ebaf2cd14f99b0bacd3ca237a4a799c93ed119698296989f5007608709673e68767bb9bcc444fdcde5eca78df9d13f95f7e617a494dbfaef604173e343c1b60cf97d93f2c13a6d18ee7c7a55b01aaa67a19c81f45fd2d2431a24501b79bfdacfe77d712315cf87bd0a8"}, {0x2, 0xe8, 0x400, &(0x7f0000000080)="e2ab7325bff208919f289447b5658214ae1b6123fee8281345c4a1688e"}, {0x0, 0x0, 0x7, 0x0}, {0x2, 0x0, 0x200, 0x0}, {0x2, 0x2c8, 0x0, &(0x7f0000000500)="f11b50df5938f82d34ea9bec1bc5e3233811f8b46cc073cfbb96a12a54ea0aeb8773ac55d6c2b0521bdf45002d949b687659bd05375d476b8e9df263c9020539f5725ac59c6d4d536910273a199fee9dfcbac1b25dc43fa986"}, {0x2, 0x0, 0x1, 0x0}, {0x1, 0x350, 0x8, &(0x7f0000000640)="feb9cfa5d1a66a38431878d72d33216697996e6b78543ff3dfb45de56c5ba12ecd3d27bf47b11c69b48c0e0f622ce4b23e6449906685257001dd1eb052665ce0a624c2de64dbceeca6511864eac5be96ef0d43cda78f4c2a71b8a2f77353b71831577a729bba576dc72f"}, {0x1, 0x1b8, 0x0, &(0x7f0000000740)="e4fdbf013aa2df543e093b79c557d5a9e5f2e99c93db6c68ac74a3749ed0728cf4f271900668fb8919a9b979da84521c7ca76b89adb96b"}, {0x3, 0xe0, 0x1, &(0x7f0000000140)="17e0e90dc17eef69b14ec901e2a5a2e5eea7183ef9b0a852bd376784"}, {0x0, 0x0, 0x7fff, &(0x7f00000007c0)}, {0x3, 0x0, 0x2337, &(0x7f0000000840)}, {0x5, 0x0, 0x6, 0x0}, {0x3, 0x0, 0x9, 0x0}]})
lsetxattr$trusted_overlay_upper(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000180), &(0x7f00000001c0)=ANY=[], 0x361, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000001e40)=ANY=[@ANYBLOB="0b00000005000000020000000200000005"], 0x48)
fcntl$lock(0xffffffffffffffff, 0x24, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYRES64, @ANYRESDEC=0x0, @ANYRESHEX=r3], 0x48)
truncate(&(0x7f0000000900)='./file1\x00', 0x3000000)

2.39522208s ago: executing program 2 (id=309):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x13101}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @loopback}}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x43}]}}}]}, 0x58}}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000c00)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000180)='host1x_cdma_push\x00', r4}, 0x18)
r5 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000001040)=@filter={'filter\x00', 0x42, 0x4, 0x3b8, 0xffffffff, 0x238, 0x98, 0x98, 0xffffffff, 0xffffffff, 0x320, 0x320, 0x320, 0xffffffff, 0x5, 0x0, {[{{@uncond, 0x74000002, 0x70, 0x98, 0x1ba, {0x46010000, 0x2c000000000000}}, @REJECT={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, 0x0, 0x0, 'wg1\x00', 'ip6tnl0\x00', {}, {}, 0x6c}, 0x287, 0x178, 0x1a0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x2, 0x4, 'bm\x00', "17fe85b2e7794dbf95fa4bbcb6a91c1f280c1999b9e9c91aec32acf40242838b14641ee58ffb2807b1455049d59591426d860cbcf1d58ab1ffbb5187b72db33268933cac58623e417fbdbd0b8753f88cb456e7cd9ef85fd6861f486fb7bab7930c4e57def2f1e72aede0b46c35ed67a0549781a3d3fe2b88393de1719bea5584", 0x7e, 0x2, {0xf}}}, @common=@unspec=@limit={{0x48}, {0x7004, 0x80000, 0x0, 0xb}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8, 0x0, {}, [@common=@unspec=@time={{0x38}, {0x8000, 0x3ff, 0x89f0, 0xfeb9, 0x3f, 0x7f, 0x3}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "81d0042c436dbdac8bebde18b54dd11bf035c1d8b6b0e88ef5aee0eccad7"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x418)

2.240749755s ago: executing program 5 (id=310):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, 0x0, &(0x7f00000006c0)=r1}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x41, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x18)
r3 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000340)=0x7b43, 0x4)
setsockopt$inet6_int(r3, 0x29, 0x31, 0x0, 0x0)
sendto$inet6(r3, 0x0, 0x0, 0x24000800, &(0x7f00000002c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c)
recvmmsg(r3, &(0x7f00000066c0)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x2000, 0x0)
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[], 0x1, 0x311, &(0x7f0000000500)="$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")
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r4 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r4, 0x1, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x20)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x50, 0x10, 0x401, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x585d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @loopback}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ip6gre0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x840}, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="58010000100013070000000000000000ac1414aa000000000000000000000000fe8000000000000000000000000000bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ffffffff0000000000000000000000000000000032000000ac141400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000960000000000000048000200656362286369706865725f6e756c6c290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000efffffffff1f001700"], 0x158}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

1.725498955s ago: executing program 4 (id=311):
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2002)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xa, 0x4, 0x4, 0x12, 0x2}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r0, <r1=>0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000080)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='sched_process_fork\x00', r2}, 0x10)
syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = socket(0x10, 0x803, 0x0)
r4 = socket$inet6(0xa, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8)
r5 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff})
connect$unix(r6, 0x0, 0x0)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r7}, 0x10)
sendto$inet6(r4, 0x0, 0x0, 0x2409c8c1, 0x0, 0x0)
sendmsg$SMC_PNETID_GET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x437, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x20c89, 0x50108}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_LINK={0x8}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20008000}, 0x20000000)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r9}, 0x10)
syz_emit_ethernet(0xc4, &(0x7f0000000380)=ANY=[@ANYBLOB="0180c2000001aaaaaaaaaaaa86dd6002adf7008e3a00fe880000000000000000000000000001ff02000000000000000000000000000102"], 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x18, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48)

3.40763ms ago: executing program 2 (id=312):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000000)={0x3, {{0x2, 0x0, @multicast2}}}, 0x88)
setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000001040)={0x3, {{0x2, 0x0, @multicast1}}}, 0x88)
setsockopt$inet_mreq(r2, 0x0, 0x23, &(0x7f0000001140)={@multicast2, @local}, 0x8)
getsockopt$inet_buf(r2, 0x0, 0x30, &(0x7f0000000000)=""/4091, &(0x7f0000001000)=0xffb)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000240)='kfree\x00', r1}, 0x10)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0xffff}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8050}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r6, 0x89f2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x48)

1.31542ms ago: executing program 3 (id=313):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000003640), 0xffffffffffffffff)
sendmsg$NL802154_CMD_GET_WPAN_PHY(r1, &(0x7f0000003740)={0x0, 0x0, &(0x7f0000003700)={&(0x7f00000036c0)={0x20, r2, 0x609aaa44435c1f75, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x80)
r3 = syz_open_dev$mouse(0x0, 0x88d7, 0x80000)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid()
sched_setaffinity(0x0, 0x4c, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546000677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289d01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5467a932b77674e802a0d42bc6099ad238af770b5ed8925161729298700000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809b5b9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed3957f813567f7a95435ac15fc0288d9b2a169cdcacc413b48dafb7a2c8cb482bac0ac559eaf39027ceb379a902d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff7a1ef3282830689da6b53b263339863297771429d120000003341bf4abacac94500fca0493cf29b33dcc9ffffffffffffffd39f6ce0c6ff01589646efd1cf870cd7bb2366fdf870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1293b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd000c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c7df8be5877050c91301fb997316dbf17866fb84d4173731efe895ff2e1c55ef08235a0126e01254c44060926e90109b598502d3e959efc71f665c4d75cf2458e3542c9062ece84c99a861887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc74aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7ad333545794f37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f4df90400000000000000d6b2c5ea139376f24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff070000001e48418046c216c1f895778cb25122a2a998de0842a486721737390cbf3a74cb2003016f1514216bdf57d2a40dddb51ab63e96ec84ac3571f02f647b3385b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba2f58ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df986741517abf11389b751f4e109b60000000000000000d6d5210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288d139bd3da230ed05a8fe64680b0a3f9f2dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30235b9100000000a55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854356cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c776f4b4ce07e1c6fa66fcfc7a228805f76785efc0ceb1c8e5729c66418d169fc03aa18854693ad2a182068e1e3a0e2505bc7f41019645466ac96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a428f1da1f68df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7e478950aa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab848753203b458b97ec1afb079b4b4ba686fcdf240430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7db3c4be290159f6bcd75f0dda9de5532e71ae9e48b0ed1254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b70ebc660309e1e245b0fdf9743af932cd6db49a47613808bad959719c0000000000378ac2e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6ca0400966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e3030108000000000000c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bffef97dcecc467ace456597685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4cba6e6390a9f302c6eb2df7766411bef0ebb5000000000006065d6735eb7a00e127c0000000000000000000000bfb0bba79344643b1d8daa9f38e4b62c1e2af68c6f5054b078acd74b4a9c944e4505da485a3a4154387a0a88370d9ed9467b09c5888a06431df3f68abf0b366c4d5f8bea7b29c257ed756dff7a21c6b661cbdd43de65afd7f661d5c84f915c90e3d6ea012b68b787eb01d8320000000000000060176dacba0ec503a37fae6b472ec369c79ee6a420c0fd8d8d82fe136d5af6c30bfeb0a7275babfdb96a127aa9386e0671c6454245a18c1c8c49552cff5d27b547cdc34c0858c77a47a9ff86ee9fbd9ceda428716a4218821176d8067997527230fa67d26950d3e4f2750fa7c872874ad3a2d11f9f6eb08e6d7b6fa257b04d8ce36360f524e3dfd2211641f3d2637d86b80681eca50ce0eecafdd22d41fa515c15591e70ded4b70efac3cb42fb352d82e8f7573e8ed8248da356fa91a252976d3a4d8c1843a8d5bb7f5f1028453a0562a3ea93117076dd4940b7df50d78289fe66197525f6095f8662d232970bef61b03fa83027963a1a2e07cfee30c0d0b4c5877f93b3637ca21eab5afcf5d4638dfe8f9202aaad51c979049dd76d65368cbd4187d9f74257c7c4a23ac4a34eec5aa17e78c5167216f5e72138d20f8325dd5f8f96c32189c904eaef580987f1ce601a7cdc35461db9981ac42f9e24b0699bbe4e3d986e38952b0b7938eefd9e7a292bbb66367ad77045fdc18855c81c031dedd185c723238373fc698d676791d04f1ff5f0825a6619e844882f31ed190233d58ecee949e310bf2b1a51b8a33ae65a06d2b6ad386bf8dc49dd328bcd75d1843a13d68560175a18af7efc3c0f20e32f84f6aaaf000000000000000000000013a6c66bce74a8fb9092023df695da2714a7933d699d42de2bc4a85e0a0e22228290a7a7553ab93a16e42553ed86869a02df2f47d4088fac1772d3cd955c81cbf91c2ca7942942f61723b558079b82547844f92df2499c4b2c2ef2539e5daa8d8727baaa6b5755e6f83bbfca000000000000000000000509619f5f0cbc72eebc653946d3552236f0dfe485cfa71bd69f4ded6e131128c3875b785875addfcbd5931c12adbef75535e694f3a19f28f9f99fa32e8ff66e7b1ff674434fb63ba0e28aadccf77d387525c98e81476058c958eaccfa7d251d0671222dc9d06485f7f690d3d4227bd21bd7ff8338617705b7faec47c86789a488b43d0fedf1b0ee05d65c677ced1e8214b2f6cb74d73886eb"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e}, 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10)
syz_open_dev$vcsu(0x0, 0x4, 0x80000)
syz_genetlink_get_family_id$nl80211(0x0, r3)
sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x44)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
syz_mount_image$fuse(0x0, &(0x7f0000000180)='./bus\x00', 0x3000408, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000b80), 0x204008, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './cgroup'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@index_on}]})
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000100)={'wpan0\x00'})
sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x3c, r2, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_SEC_DEVKEY={0x4}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40004840}, 0x2400c004)

0s ago: executing program 5 (id=314):
statfs(0x0, &(0x7f0000000140))
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000800000000100000028"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x18)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
r3 = eventfd2(0xe5c, 0x80000)
r4 = eventfd2(0x4001, 0x800)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000300)={r4, 0x0, 0x2, r4})
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000000)={r3, 0x7, 0x2, r3})
r5 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r6, &(0x7f0000001700)=[{{&(0x7f0000000340)=@x25, 0x80, &(0x7f0000000180)=[{&(0x7f00000003c0)=""/148, 0x94}, {&(0x7f0000000100)=""/43, 0x2b}], 0x2, &(0x7f0000000480)=""/134, 0x86}, 0x1}, {{&(0x7f0000000580)=@generic, 0x80, &(0x7f0000000900)=[{&(0x7f0000000600)=""/71, 0x47}, {&(0x7f0000000740)=""/55, 0x37}, {&(0x7f00000007c0)=""/76, 0x4c}, {&(0x7f0000000840)=""/150, 0x96}], 0x4, &(0x7f0000000940)=""/223, 0xdf}, 0x9}, {{&(0x7f0000000a40)=@generic, 0x80, &(0x7f0000000c40)=[{&(0x7f0000000ac0)=""/150, 0x96}, {&(0x7f0000000b80)=""/57, 0x39}, {&(0x7f0000000bc0)=""/8, 0x8}, {&(0x7f0000000c00)=""/42, 0x2a}], 0x4}, 0x7}, {{&(0x7f0000000c80)=@nfc, 0x80, &(0x7f0000000d00), 0x0, &(0x7f0000000d40)=""/40, 0x28}, 0x3}, {{&(0x7f0000000d80)=@in6={0xa, 0x0, 0x0, @empty}, 0x80, &(0x7f0000001300)=[{&(0x7f0000000e00)=""/146, 0x92}, {&(0x7f0000000ec0)=""/195, 0xc3}, {&(0x7f0000000fc0)=""/150, 0x96}, {&(0x7f0000001080)=""/140, 0x8c}, {&(0x7f0000001140)=""/37, 0x25}, {&(0x7f0000001180)=""/169, 0xa9}, {&(0x7f0000001240)=""/161, 0xa1}], 0x7, &(0x7f0000001380)=""/76, 0x4c}, 0x6}, {{&(0x7f0000001400)=@alg, 0x80, &(0x7f00000015c0)=[{&(0x7f0000001480)=""/96, 0x60}, {&(0x7f0000001500)=""/64, 0x40}, {&(0x7f0000001540)=""/102, 0x66}], 0x3, &(0x7f0000001600)=""/248, 0xf8}, 0x4}], 0x6, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socket$packet(0x11, 0x3, 0x300)
sched_setaffinity(0x0, 0x0, 0x0)
sendmsg$key(r2, 0x0, 0x400c851)
r8 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r8, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02020409100000000000004c9e00000002001300027f0000000000000000004105000600200000000a000000000000000005000201080f00e0001f080000000000092000000000000200010020e9ffeeffff0702000098a805000500ea0000000a"], 0x80}}, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.167' (ED25519) to the list of known hosts.
[   20.915741][   T24] audit: type=1400 audit(1766542410.540:64): avc:  denied  { mounton } for  pid=267 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[   20.916892][  T267] cgroup: Unknown subsys name 'net'
[   20.938519][   T24] audit: type=1400 audit(1766542410.540:65): avc:  denied  { mount } for  pid=267 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   20.965844][   T24] audit: type=1400 audit(1766542410.580:66): avc:  denied  { unmount } for  pid=267 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   20.966058][  T267] cgroup: Unknown subsys name 'devices'
[   21.110718][  T267] cgroup: Unknown subsys name 'hugetlb'
[   21.116461][  T267] cgroup: Unknown subsys name 'rlimit'
[   21.313942][   T24] audit: type=1400 audit(1766542410.940:67): avc:  denied  { setattr } for  pid=267 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   21.337580][   T24] audit: type=1400 audit(1766542410.940:68): avc:  denied  { mounton } for  pid=267 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1
Setting up swapspace version 1, size = 127995904 bytes
[   21.341639][  T269] SELinux:  Context root:object_r:swapfile_t is not valid (left unmapped).
[   21.362615][   T24] audit: type=1400 audit(1766542410.940:69): avc:  denied  { mount } for  pid=267 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1
[   21.394452][   T24] audit: type=1400 audit(1766542411.010:70): avc:  denied  { relabelto } for  pid=269 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   21.394484][  T267] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   21.420182][   T24] audit: type=1400 audit(1766542411.010:71): avc:  denied  { write } for  pid=269 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   21.454799][   T24] audit: type=1400 audit(1766542411.020:72): avc:  denied  { read } for  pid=267 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   21.480302][   T24] audit: type=1400 audit(1766542411.020:73): avc:  denied  { open } for  pid=267 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   24.146668][  T275] bridge0: port 1(bridge_slave_0) entered blocking state
[   24.153913][  T275] bridge0: port 1(bridge_slave_0) entered disabled state
[   24.161375][  T275] device bridge_slave_0 entered promiscuous mode
[   24.169249][  T275] bridge0: port 2(bridge_slave_1) entered blocking state
[   24.176287][  T275] bridge0: port 2(bridge_slave_1) entered disabled state
[   24.183955][  T275] device bridge_slave_1 entered promiscuous mode
[   24.270616][  T277] bridge0: port 1(bridge_slave_0) entered blocking state
[   24.277682][  T277] bridge0: port 1(bridge_slave_0) entered disabled state
[   24.285319][  T277] device bridge_slave_0 entered promiscuous mode
[   24.292751][  T276] bridge0: port 1(bridge_slave_0) entered blocking state
[   24.299892][  T276] bridge0: port 1(bridge_slave_0) entered disabled state
[   24.307142][  T276] device bridge_slave_0 entered promiscuous mode
[   24.314279][  T276] bridge0: port 2(bridge_slave_1) entered blocking state
[   24.321362][  T276] bridge0: port 2(bridge_slave_1) entered disabled state
[   24.329043][  T276] device bridge_slave_1 entered promiscuous mode
[   24.335988][  T277] bridge0: port 2(bridge_slave_1) entered blocking state
[   24.343079][  T277] bridge0: port 2(bridge_slave_1) entered disabled state
[   24.350664][  T277] device bridge_slave_1 entered promiscuous mode
[   24.377415][  T279] bridge0: port 1(bridge_slave_0) entered blocking state
[   24.384636][  T279] bridge0: port 1(bridge_slave_0) entered disabled state
[   24.392069][  T279] device bridge_slave_0 entered promiscuous mode
[   24.398850][  T279] bridge0: port 2(bridge_slave_1) entered blocking state
[   24.406116][  T279] bridge0: port 2(bridge_slave_1) entered disabled state
[   24.413436][  T279] device bridge_slave_1 entered promiscuous mode
[   24.469039][  T278] bridge0: port 1(bridge_slave_0) entered blocking state
[   24.476222][  T278] bridge0: port 1(bridge_slave_0) entered disabled state
[   24.483929][  T278] device bridge_slave_0 entered promiscuous mode
[   24.492111][  T278] bridge0: port 2(bridge_slave_1) entered blocking state
[   24.499140][  T278] bridge0: port 2(bridge_slave_1) entered disabled state
[   24.506543][  T278] device bridge_slave_1 entered promiscuous mode
[   24.590280][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   24.597867][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   24.618121][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   24.626555][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   24.634839][    T7] bridge0: port 1(bridge_slave_0) entered blocking state
[   24.641933][    T7] bridge0: port 1(bridge_slave_0) entered forwarding state
[   24.649395][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   24.657716][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   24.666198][    T7] bridge0: port 2(bridge_slave_1) entered blocking state
[   24.673558][    T7] bridge0: port 2(bridge_slave_1) entered forwarding state
[   24.688317][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   24.729895][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   24.738454][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   24.746884][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   24.756029][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   24.764583][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   24.773228][    T7] bridge0: port 1(bridge_slave_0) entered blocking state
[   24.781013][    T7] bridge0: port 1(bridge_slave_0) entered forwarding state
[   24.789321][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   24.797602][    T7] bridge0: port 2(bridge_slave_1) entered blocking state
[   24.804656][    T7] bridge0: port 2(bridge_slave_1) entered forwarding state
[   24.812030][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   24.829682][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   24.837948][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   24.853092][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   24.861519][    T7] bridge0: port 1(bridge_slave_0) entered blocking state
[   24.868645][    T7] bridge0: port 1(bridge_slave_0) entered forwarding state
[   24.876300][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   24.886285][    T7] bridge0: port 2(bridge_slave_1) entered blocking state
[   24.893529][    T7] bridge0: port 2(bridge_slave_1) entered forwarding state
[   24.901915][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   24.922336][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   24.930130][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   24.938673][    T7] bridge0: port 1(bridge_slave_0) entered blocking state
[   24.945996][    T7] bridge0: port 1(bridge_slave_0) entered forwarding state
[   24.953746][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   24.962119][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   24.970135][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   24.978398][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   24.986581][    T7] bridge0: port 2(bridge_slave_1) entered blocking state
[   24.993652][    T7] bridge0: port 2(bridge_slave_1) entered forwarding state
[   25.005636][  T275] device veth0_vlan entered promiscuous mode
[   25.014637][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   25.022981][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   25.030576][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   25.038153][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   25.046737][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   25.054397][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   25.062710][    T7] bridge0: port 1(bridge_slave_0) entered blocking state
[   25.069834][    T7] bridge0: port 1(bridge_slave_0) entered forwarding state
[   25.077442][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   25.094205][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   25.102669][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   25.111026][    T7] bridge0: port 2(bridge_slave_1) entered blocking state
[   25.118047][    T7] bridge0: port 2(bridge_slave_1) entered forwarding state
[   25.133053][  T277] device veth0_vlan entered promiscuous mode
[   25.141130][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   25.150462][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   25.158309][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   25.166863][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   25.175182][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   25.182949][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   25.191216][  T275] device veth1_macvtap entered promiscuous mode
[   25.203198][  T279] device veth0_vlan entered promiscuous mode
[   25.210994][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   25.219585][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   25.227955][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   25.236507][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   25.245316][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   25.252988][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   25.261842][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   25.270106][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   25.287115][  T279] device veth1_macvtap entered promiscuous mode
[   25.297716][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   25.306175][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   25.314699][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   25.323407][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   25.331752][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   25.339386][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   25.347790][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   25.356298][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   25.364591][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   25.372828][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   25.380985][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   25.389081][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   25.397244][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   25.405215][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   25.412712][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   25.426947][  T277] device veth1_macvtap entered promiscuous mode
[   25.433830][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   25.442106][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   25.450768][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   25.459712][  T276] device veth0_vlan entered promiscuous mode
[   25.472462][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   25.480986][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   25.490454][  T275] request_module fs-gadgetfs succeeded, but still no fs?
[   25.494207][  T276] device veth1_macvtap entered promiscuous mode
[   25.508023][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   25.516456][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   25.524988][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   25.532778][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   25.541124][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   25.550038][  T275] cgroup: cgroup: disabling cgroup2 socket matching due to net_prio or net_cls activation
[   25.578836][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   25.587778][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   25.596824][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   25.605315][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   25.614177][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   25.622977][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   25.631669][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   25.640175][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   25.648837][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   25.657335][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   25.676360][  T278] device veth0_vlan entered promiscuous mode
[   25.691561][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   25.699932][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   25.708836][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   25.716864][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   25.735093][  T278] device veth1_macvtap entered promiscuous mode
[   25.749761][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   25.758350][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   25.766751][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   25.798895][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   25.903587][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   26.008922][   T24] kauditd_printk_skb: 27 callbacks suppressed
[   26.008932][   T24] audit: type=1400 audit(1766542415.520:101): avc:  denied  { prog_run } for  pid=303 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[   26.022569][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   26.045064][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   26.378116][   T24] audit: type=1400 audit(1766542416.000:102): avc:  denied  { create } for  pid=308 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   26.432399][  T311] ======================================================
[   26.432399][  T311] WARNING: the mand mount option is being deprecated and
[   26.432399][  T311]          will be removed in v5.15!
[   26.432399][  T311] ======================================================
[   27.595266][   T24] audit: type=1400 audit(1766542416.170:103): avc:  denied  { create } for  pid=308 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   27.620207][   T24] audit: type=1400 audit(1766542416.950:104): avc:  denied  { name_bind } for  pid=308 comm="syz.2.3" src=19968 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1
[   27.642211][   T24] audit: type=1400 audit(1766542416.950:105): avc:  denied  { create } for  pid=308 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   27.684734][  T318] erofs: (device loop2): mounted with root inode @ nid 36.
[   27.691569][   T24] audit: type=1400 audit(1766542417.310:106): avc:  denied  { read write } for  pid=322 comm="syz.1.7" name="raw-gadget" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   27.716166][   T24] audit: type=1400 audit(1766542417.310:107): avc:  denied  { open } for  pid=322 comm="syz.1.7" path="/dev/raw-gadget" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   27.740985][   T24] audit: type=1400 audit(1766542417.310:108): avc:  denied  { ioctl } for  pid=322 comm="syz.1.7" path="/dev/raw-gadget" dev="devtmpfs" ino=253 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   27.801469][   T24] audit: type=1400 audit(1766542417.320:109): avc:  denied  { mount } for  pid=308 comm="syz.2.3" name="/" dev="loop2" ino=36 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[   27.831863][   T24] audit: type=1400 audit(1766542417.460:110): avc:  denied  { create } for  pid=326 comm="syz.0.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[   27.854760][  T311] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1)
[   28.129436][  T311] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[   28.249255][   T53] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   28.489269][   T53] usb 2-1: Using ep0 maxpacket: 16
[   28.498896][  T336] F2FS-fs (loop2): Wrong CP boundary, start(512) end(1536) blocks(0)
[   28.519269][  T336] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[   28.535448][  T336] F2FS-fs (loop2): Unrecognized mount option "" or missing value
[   28.629418][   T53] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 8
[   28.647951][  T347] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   28.799334][   T53] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00
[   28.800527][  T345] netlink: 'syz.4.12': attribute type 3 has an invalid length.
[   28.810068][   T53] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   28.824647][   T53] usb 2-1: Product: syz
[   28.828937][   T53] usb 2-1: Manufacturer: syz
[   28.833989][   T53] usb 2-1: SerialNumber: syz
[   28.845561][  T345] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[   29.100948][   T53] usb 2-1: config 0 descriptor??
[   29.113556][  T345] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2802e12c, mo2=0002]
[   29.127813][  T345] System zones: 1-12
[   29.135699][  T345] EXT4-fs (loop4): orphan cleanup on readonly fs
[   29.139980][   T53] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected
[   29.150852][  T345] EXT4-fs error (device loop4): ext4_free_branches:1026: inode #11: comm syz.4.12: invalid indirect mapped block 12 (level 1)
[   29.166630][   T53] usb 2-1: Detected FT232RL
[   29.172161][  T345] EXT4-fs (loop4): Remounting filesystem read-only
[   29.180820][  T345] EXT4-fs error (device loop4): ext4_free_branches:1026: inode #11: comm syz.4.12: invalid indirect mapped block 2 (level 2)
[   29.195341][  T345] EXT4-fs (loop4): 1 truncate cleaned up
[   29.201423][  T345] EXT4-fs (loop4): mounted filesystem without journal. Opts: noinit_itable,jqfmt=vfsv1,noload,errors=remount-ro,i_version
[   29.359296][   T53] ftdi_sio ttyUSB0: Unable to read latency timer: -32
[   29.481729][  T375] EXT4-fs (loop4): Ignoring removed bh option
[   29.745715][  T375] EXT4-fs (loop4): mounted filesystem without journal. Opts: nodelalloc,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000005,bh,init_itable,
[   30.265299][  T361] F2FS-fs (loop3): invalid crc value
[   30.306929][  T361] F2FS-fs (loop3): Found nat_bits in checkpoint
[   30.345804][  T361] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[   30.380269][   T53] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0
[   30.390984][  T301] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   30.391901][   T53] usb 2-1: USB disconnect, device number 2
[   30.406373][   T53] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[   30.416035][   T53] ftdi_sio 2-1:0.0: device disconnected
[   30.430524][  T375] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2816: Unable to expand inode 12. Delete some EAs or run e2fsck.
[   30.459742][  T276] attempt to access beyond end of device
[   30.459742][  T276] loop3: rw=2049, want=45104, limit=40427
[   30.585575][  T407] binder: BINDER_SET_CONTEXT_MGR already set
[   30.592675][  T407] binder: 406:407 ioctl 4018620d 200000000280 returned -16
[   30.602583][  T408] binder: 406:408 ioctl ae60 0 returned -22
[   30.639403][  T301] usb 1-1: Using ep0 maxpacket: 8
[   30.662579][  T407] netlink: 12 bytes leftover after parsing attributes in process `syz.4.25'.
[   30.750722][  T414] fuse: Unknown parameter 'mo�2'
[   30.809290][  T301] usb 1-1: unable to get BOS descriptor or descriptor too short
[   30.870639][  T408] F2FS-fs (loop4): fault_injection options not supported
[   30.887872][  T408] F2FS-fs (loop4): fault_type options not supported
[   30.895617][  T408] F2FS-fs (loop4): invalid crc value
[   30.919999][  T408] F2FS-fs (loop4): Found nat_bits in checkpoint
[   30.929315][  T301] usb 1-1: config 8 interface 0 altsetting 7 endpoint 0x83 has invalid maxpacket 2560, setting to 1024
[   30.940702][  T301] usb 1-1: config 8 interface 0 altsetting 7 bulk endpoint 0x83 has invalid maxpacket 1024
[   30.959273][  T301] usb 1-1: config 8 interface 0 has no altsetting 0
[   30.984165][  T408] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[   31.115041][   T24] kauditd_printk_skb: 68 callbacks suppressed
[   31.115052][   T24] audit: type=1400 audit(1766542420.740:179): avc:  denied  { connect } for  pid=423 comm="syz.4.27" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   31.129350][  T301] usb 1-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=6a.e5
[   31.169248][  T301] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   31.177240][  T301] usb 1-1: Product: syz
[   31.184787][  T301] usb 1-1: Manufacturer: syz
[   31.189614][  T301] usb 1-1: SerialNumber: syz
[   31.337064][   T24] audit: type=1400 audit(1766542420.960:180): avc:  denied  { read } for  pid=439 comm="syz.2.31" name="ppp" dev="devtmpfs" ino=153 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[   31.337277][  T437] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   31.379335][  T437] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[   31.382066][   T24] audit: type=1400 audit(1766542420.960:181): avc:  denied  { open } for  pid=439 comm="syz.2.31" path="/dev/ppp" dev="devtmpfs" ino=153 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[   31.394312][  T440] incfs: mount failed -22
[   31.413227][   T24] audit: type=1400 audit(1766542420.990:182): avc:  denied  { ioctl } for  pid=439 comm="syz.2.31" path="/dev/ppp" dev="devtmpfs" ino=153 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[   31.431139][  T437] EXT4-fs (loop4): 1 truncate cleaned up
[   31.450344][   T24] audit: type=1400 audit(1766542420.990:183): avc:  denied  { write } for  pid=439 comm="syz.2.31" name="ppp" dev="devtmpfs" ino=153 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[   31.454749][  T437] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue
[   31.473493][   T24] audit: type=1400 audit(1766542420.990:184): avc:  denied  { ioctl } for  pid=439 comm="syz.2.31" path="socket:[15348]" dev="sockfs" ino=15348 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   31.506966][   T24] audit: type=1400 audit(1766542421.020:185): avc:  denied  { mounton } for  pid=439 comm="syz.2.31" path="/bus" dev="proc" ino=4026531853 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1
[   31.534319][   T24] audit: type=1400 audit(1766542421.050:186): avc:  denied  { create } for  pid=439 comm="syz.2.31" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[   31.562392][   T24] audit: type=1400 audit(1766542421.050:187): avc:  denied  { write } for  pid=439 comm="syz.2.31" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[   31.669792][  T301] usb 1-1: selecting invalid altsetting 0
[   31.765645][  T301] usb 1-1: USB disconnect, device number 2
[   31.787791][   T24] audit: type=1400 audit(1766542421.410:188): avc:  denied  { create } for  pid=453 comm="syz.4.35" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   31.859586][  T383] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[   32.304454][   T20] usb 3-1: new full-speed USB device number 2 using dummy_hcd
[   32.381314][  T466] erofs: Unknown parameter '00000000000000000007'
[   32.409564][  T299] udevd[299]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:8.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   32.549258][  T383] usb 2-1: Using ep0 maxpacket: 16
[   32.589358][  T383] usb 2-1: no configurations
[   32.594030][  T383] usb 2-1: can't read configurations, error -22
[   32.709272][   T20] usb 3-1: unable to get BOS descriptor or descriptor too short
[   32.718664][  T476] process 'syz.0.40' launched '/dev/fd/-1/./cgroup' with NULL argv: empty string added
[   32.749263][   T20] usb 3-1: not running at top speed; connect to a high speed hub
[   32.749363][  T383] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[   32.839379][   T20] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   32.934302][  T483] EXT4-fs (loop3): external journal device major/minor numbers have changed
[   32.953426][  T483] EXT4-fs (loop3): external journal has bad superblock
[   33.019240][  T383] usb 2-1: Using ep0 maxpacket: 16
[   33.059414][  T383] usb 2-1: no configurations
[   33.064334][  T383] usb 2-1: can't read configurations, error -22
[   33.071447][  T383] usb usb2-port1: attempt power cycle
[   33.152353][   T20] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 147, changing to 4
[   33.163874][   T20] usb 3-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[   33.332726][   T20] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   33.341871][   T20] usb 3-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3
[   33.350163][   T20] usb 3-1: Product: syz
[   33.354650][   T20] usb 3-1: Manufacturer: syz
[   33.359302][   T20] usb 3-1: SerialNumber: syz
[   33.489309][  T383] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[   33.589301][  T383] usb 2-1: Using ep0 maxpacket: 16
[   33.629580][  T383] usb 2-1: no configurations
[   33.649884][  T383] usb 2-1: can't read configurations, error -22
[   33.689333][  T489] capability: warning: `syz.2.33' uses deprecated v2 capabilities in a way that may be insecure
[   33.819298][  T383] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[   33.939266][  T383] usb 2-1: Using ep0 maxpacket: 16
[   33.973658][  T493] bridge0: port 1(bridge_slave_0) entered blocking state
[   33.982018][  T493] bridge0: port 1(bridge_slave_0) entered disabled state
[   33.989372][  T383] usb 2-1: no configurations
[   33.989608][  T493] device bridge_slave_0 entered promiscuous mode
[   33.998682][  T383] usb 2-1: can't read configurations, error -22
[   34.002243][  T493] bridge0: port 2(bridge_slave_1) entered blocking state
[   34.015915][  T493] bridge0: port 2(bridge_slave_1) entered disabled state
[   34.023751][  T493] device bridge_slave_1 entered promiscuous mode
[   34.026595][  T383] usb usb2-port1: unable to enumerate USB device
[   34.099667][  T492] bridge0: port 1(bridge_slave_0) entered blocking state
[   34.108712][  T492] bridge0: port 1(bridge_slave_0) entered disabled state
[   34.116802][  T492] device bridge_slave_0 entered promiscuous mode
[   34.124293][  T492] bridge0: port 2(bridge_slave_1) entered blocking state
[   34.132124][  T492] bridge0: port 2(bridge_slave_1) entered disabled state
[   34.140093][  T492] device bridge_slave_1 entered promiscuous mode
[   34.225705][  T493] bridge0: port 2(bridge_slave_1) entered blocking state
[   34.233471][  T493] bridge0: port 2(bridge_slave_1) entered forwarding state
[   34.241226][  T493] bridge0: port 1(bridge_slave_0) entered blocking state
[   34.248796][  T493] bridge0: port 1(bridge_slave_0) entered forwarding state
[   34.258800][    T9] device bridge_slave_1 left promiscuous mode
[   34.265575][    T9] bridge0: port 2(bridge_slave_1) entered disabled state
[   34.273505][    T9] device bridge_slave_0 left promiscuous mode
[   34.280785][    T9] bridge0: port 1(bridge_slave_0) entered disabled state
[   34.290306][    T9] device veth1_macvtap left promiscuous mode
[   34.297645][    T9] device veth0_vlan left promiscuous mode
[   34.330100][  T503] FAT-fs (loop4): bogus number of FAT sectors
[   34.336504][  T503] FAT-fs (loop4): Can't find a valid FAT filesystem
[   34.420724][  T492] bridge0: port 2(bridge_slave_1) entered blocking state
[   34.428014][  T492] bridge0: port 2(bridge_slave_1) entered forwarding state
[   34.435802][  T492] bridge0: port 1(bridge_slave_0) entered blocking state
[   34.443134][  T492] bridge0: port 1(bridge_slave_0) entered forwarding state
[   34.509442][  T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   34.517373][  T296] bridge0: port 1(bridge_slave_0) entered disabled state
[   34.525967][  T296] bridge0: port 2(bridge_slave_1) entered disabled state
[   34.533767][  T296] bridge0: port 1(bridge_slave_0) entered disabled state
[   34.541292][  T296] bridge0: port 2(bridge_slave_1) entered disabled state
[   34.571986][  T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   34.580479][  T296] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   34.589180][  T296] bridge0: port 1(bridge_slave_0) entered blocking state
[   34.596647][  T296] bridge0: port 1(bridge_slave_0) entered forwarding state
[   34.605070][  T296] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   34.614890][  T296] bridge0: port 2(bridge_slave_1) entered blocking state
[   34.622036][  T296] bridge0: port 2(bridge_slave_1) entered forwarding state
[   34.629643][  T296] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   34.637968][  T296] bridge0: port 1(bridge_slave_0) entered blocking state
[   34.645219][  T296] bridge0: port 1(bridge_slave_0) entered forwarding state
[   34.653769][  T296] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   34.662594][  T296] bridge0: port 2(bridge_slave_1) entered blocking state
[   34.669831][  T296] bridge0: port 2(bridge_slave_1) entered forwarding state
[   34.692655][  T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   34.701975][  T296] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   34.710869][  T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   34.725295][  T296] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   34.734547][  T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   34.743530][  T296] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   34.752194][  T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   34.760808][  T296] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   34.793820][  T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   34.805514][  T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   34.815382][  T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   34.824655][  T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   34.839560][  T493] device veth0_vlan entered promiscuous mode
[   34.848111][  T492] device veth0_vlan entered promiscuous mode
[   34.855174][  T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   34.864245][  T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   34.875149][  T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   34.885375][  T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   34.896298][  T296] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   34.906713][  T296] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   34.915222][  T296] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   34.923746][  T296] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   34.944136][  T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   34.968667][  T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   34.996331][  T492] device veth1_macvtap entered promiscuous mode
[   35.011347][  T296] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   35.029560][  T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   35.037876][  T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   35.053543][  T493] device veth1_macvtap entered promiscuous mode
[   35.134044][   T20] usb 3-1: cannot find UAC_HEADER
[   35.140259][  T309] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   35.145435][   T20] snd-usb-audio: probe of 3-1:1.0 failed with error -22
[   35.156944][   T20] usb 3-1: USB disconnect, device number 2
[   35.165972][  T309] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   35.175039][  T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   35.217512][  T309] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   35.226886][  T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   35.245062][  T530] netlink: 12 bytes leftover after parsing attributes in process `syz.4.54'.
[   35.258691][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   35.277113][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   35.295845][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   35.306392][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   35.370334][  T536] bridge0: port 3(vlan2) entered blocking state
[   35.510506][  T536] bridge0: port 3(vlan2) entered disabled state
[   35.643811][  T557] erofs: (device loop0): mounted with root inode @ nid 36.
[   35.655634][  T536] bridge0: port 3(vlan2) entered blocking state
[   35.682075][  T536] bridge0: port 3(vlan2) entered disabled state
[   35.771151][  T536] bridge0: port 3(vlan2) entered blocking state
[   35.777683][  T536] bridge0: port 3(vlan2) entered disabled state
[   35.792286][  T568] EXT4-fs (loop1): mounted filesystem without journal. Opts: quota,init_itable,,errors=continue
[   35.819408][  T568] ext4 filesystem being mounted at /8/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   35.894910][  T536] bridge0: port 3(vlan2) entered blocking state
[   35.901798][  T536] bridge0: port 3(vlan2) entered disabled state
[   36.006468][  T575] erofs: (device loop0): z_erofs_readahead: readahead error at page 2 @ nid 89
[   36.016505][  T575] attempt to access beyond end of device
[   36.016505][  T575] loop0: rw=524288, want=524304, limit=16
[   36.029022][  T575] erofs: (device loop0): z_erofs_readpage: failed to read, err [-117]
[   36.037755][  T575] erofs: (device loop0): z_erofs_readpage: failed to read, err [-117]
[   36.046349][  T575] erofs: (device loop0): z_erofs_readpage: failed to read, err [-117]
[   36.054869][  T575] erofs: (device loop0): z_erofs_readpage: failed to read, err [-117]
[   36.073391][   T42] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -5 in[4096, 0] out[4100]
[   36.089881][  T575] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -5 in[4096, 0] out[4096]
[   36.106504][  T575] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -5 in[4096, 0] out[4096]
[   36.123197][  T575] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -5 in[4096, 0] out[4096]
[   36.139842][  T575] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -5 in[4096, 0] out[4096]
[   36.280787][  T576] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -5 in[4096, 0] out[4096]
[   36.299241][  T576] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -5 in[4096, 0] out[4096]
[   36.628570][  T576] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -5 in[4096, 0] out[4096]
[   36.679915][  T576] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -5 in[4096, 0] out[4096]
[   36.725268][   T24] kauditd_printk_skb: 26 callbacks suppressed
[   36.725328][   T24] audit: type=1400 audit(1766542425.620:215): avc:  denied  { read } for  pid=556 comm="syz.0.60" name="file2" dev="loop0" ino=89 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   36.929892][   T24] audit: type=1400 audit(1766542425.620:216): avc:  denied  { open } for  pid=556 comm="syz.0.60" path="/4/file2/file2" dev="loop0" ino=89 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   36.953024][   T24] audit: type=1400 audit(1766542425.630:217): avc:  denied  { map } for  pid=556 comm="syz.0.60" path="/4/file2/file2" dev="loop0" ino=89 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   36.977531][   T24] audit: type=1400 audit(1766542425.910:218): avc:  denied  { ioctl } for  pid=556 comm="syz.0.60" path="socket:[16028]" dev="sockfs" ino=16028 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   37.036984][   T24] audit: type=1400 audit(1766542426.410:219): avc:  denied  { map } for  pid=567 comm="syz.1.62" path="/8/file0/memory.events.local" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   37.061950][   T24] audit: type=1400 audit(1766542426.590:220): avc:  denied  { block_suspend } for  pid=567 comm="syz.1.62" capability=36  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[   37.083501][    T9] device bridge_slave_1 left promiscuous mode
[   37.091051][    T9] bridge0: port 2(bridge_slave_1) entered disabled state
[   37.107589][    T9] device bridge_slave_0 left promiscuous mode
[   37.113900][    T9] bridge0: port 1(bridge_slave_0) entered disabled state
[   37.124317][    T9] device veth1_macvtap left promiscuous mode
[   37.144394][    T9] device veth0_vlan left promiscuous mode
[   37.193385][  T383] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[   37.461342][  T593] EXT4-fs (loop1): Ignoring removed mblk_io_submit option
[   37.468968][  T593] EXT4-fs (loop1): Invalid want_extra_isize 3696
[   37.599563][  T383] usb 3-1: Using ep0 maxpacket: 16
[   37.739492][  T383] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   37.812794][  T383] usb 3-1: config 0 has no interfaces?
[   38.039563][  T383] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00
[   38.098725][  T383] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   38.179903][  T383] usb 3-1: Product: syz
[   38.219918][  T383] usb 3-1: Manufacturer: syz
[   38.269006][  T383] usb 3-1: SerialNumber: syz
[   38.306690][  T383] usb 3-1: config 0 descriptor??
[   38.457944][   T24] audit: type=1400 audit(1766542428.080:221): avc:  denied  { ioctl } for  pid=610 comm="syz.0.71" path="socket:[16053]" dev="sockfs" ino=16053 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   38.689877][   T24] audit: type=1400 audit(1766542428.320:222): avc:  denied  { bind } for  pid=637 comm="syz.3.77" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   38.829736][  T341] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   38.861783][   T24] audit: type=1400 audit(1766542428.490:223): avc:  denied  { create } for  pid=645 comm="syz.3.78" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1
[   38.959281][  T634] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[   39.089314][  T341] usb 5-1: Using ep0 maxpacket: 16
[   39.199253][  T634] usb 1-1: Using ep0 maxpacket: 16
[   39.209313][  T341] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 8
[   39.319318][  T634] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[   39.328588][  T634] usb 1-1: config 1 has no interface number 1
[   39.335227][  T634] usb 1-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping
[   39.345838][  T634] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0
[   39.359244][  T634] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[   39.379328][  T341] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00
[   39.388491][  T341] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   39.396663][  T341] usb 5-1: Product: syz
[   39.401035][  T341] usb 5-1: Manufacturer: syz
[   39.405680][  T341] usb 5-1: SerialNumber: syz
[   39.411263][  T341] usb 5-1: config 0 descriptor??
[   39.450228][  T341] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected
[   39.458324][  T341] usb 5-1: Detected FT232RL
[   39.549368][  T634] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   39.559598][  T634] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   39.568585][  T634] usb 1-1: Product: syz
[   39.573513][  T634] usb 1-1: Manufacturer: syz
[   39.579135][  T634] usb 1-1: SerialNumber: syz
[   39.584653][  T652] F2FS-fs (loop1): invalid crc value
[   39.592966][  T652] F2FS-fs (loop1): Found nat_bits in checkpoint
[   39.622504][  T652] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[   39.659329][  T341] ftdi_sio ttyUSB0: Unable to read latency timer: -32
[   39.666684][  T279] attempt to access beyond end of device
[   39.666684][  T279] loop1: rw=2049, want=45104, limit=40427
[   39.743605][  T633] usb 3-1: USB disconnect, device number 3
[   39.810972][  T666] netlink: 64 bytes leftover after parsing attributes in process `syz.2.83'.
[   39.820260][   T24] audit: type=1400 audit(1766542429.450:224): avc:  denied  { bind } for  pid=664 comm="syz.3.82" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   39.870017][  T673] syz.3.84[673] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   39.870091][  T673] syz.3.84[673] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   39.882901][  T669] EXT4-fs error (device loop1): ext4_acquire_dquot:6224: comm syz.1.81: Failed to acquire dquot type 0
[   39.907765][  T669] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.81: bg 0: block 97: padding at end of block bitmap is not set
[   39.924014][  T669] EXT4-fs error (device loop1) in ext4_mb_clear_bb:5645: Corrupt filesystem
[   39.934116][  T669] EXT4-fs (loop1): 1 truncate cleaned up
[   39.939829][  T669] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue
[   39.960522][  T341] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0
[   40.089381][  T634] usb 1-1: 2:1 : format type 0 is detected, processed as PCM
[   40.351044][  T711] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=e000c018, mo2=0002]
[   40.362491][  T711] System zones: 0-2, 18-18, 34-35
[   40.370034][  T711] EXT4-fs (loop4): mounted filesystem without journal. Opts: i_version,nodioread_nolock,discard,debug,,errors=continue
[   40.403342][  T711] ext4 filesystem being mounted at /19/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   40.902990][  T731] EXT4-fs error (device loop2): ext4_orphan_get:1395: inode #15: comm syz.2.94: iget: bad i_size value: 38620345925642
[   40.915955][  T731] EXT4-fs error (device loop2): ext4_orphan_get:1400: comm syz.2.94: couldn't read orphan inode 15 (err -117)
[   40.928400][  T731] EXT4-fs (loop2): mounted filesystem without journal. Opts: nombcache,delalloc,data_err=ignore,nojournal_checksum,usrjquota=,bsdgroups,,errors=continue
[   40.992247][  T634] usb 1-1: USB disconnect, device number 3
[   41.109782][    T9] Bluetooth: hci0: Frame reassembly failed (-84)
[   41.237706][  T299] udevd[299]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   41.534869][   T53] usb 5-1: USB disconnect, device number 2
[   41.551506][   T53] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[   41.571488][   T53] ftdi_sio 5-1:0.0: device disconnected
[   41.690951][  T770] incfs: ino conflict with backing FS 1
[   41.734009][   T24] kauditd_printk_skb: 25 callbacks suppressed
[   41.814890][   T24] audit: type=1400 audit(1766542431.360:248): avc:  denied  { mounton } for  pid=769 comm="syz.1.101" path="/20/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0" dev="incremental-fs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   41.885717][   T24] audit: type=1400 audit(1766542431.360:249): avc:  denied  { getattr } for  pid=769 comm="syz.1.101" name="/" dev="incremental-fs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[   41.910893][  T779] overlayfs: filesystem on './file0' not supported as upperdir
[   42.136730][  T796] incfs: Unexpected inode type
[   43.158893][   T20] Bluetooth: hci0: command 0x1003 tx timeout
[   43.218029][  T741] Bluetooth: hci0: sending frame failed (-49)
[   43.424664][  T816] device veth2 entered promiscuous mode
[   43.620947][  T817] netlink: 8 bytes leftover after parsing attributes in process `syz.4.112'.
[   43.630752][  T817] netlink: 12 bytes leftover after parsing attributes in process `syz.4.112'.
[   43.639714][  T817] netlink: 20 bytes leftover after parsing attributes in process `syz.4.112'.
[   43.648650][  T817] netlink: 20 bytes leftover after parsing attributes in process `syz.4.112'.
[   43.678122][   T24] audit: type=1400 audit(1766542433.300:250): avc:  denied  { unmount } for  pid=279 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1
[   43.701446][  T804] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[   43.712441][  T804] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[   43.724976][  T804] F2FS-fs (loop3): invalid crc value
[   43.734999][  T804] F2FS-fs (loop3): Found nat_bits in checkpoint
[   43.760453][  T804] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[   43.767687][  T804] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[   43.853305][   T24] audit: type=1400 audit(1766542433.480:251): avc:  denied  { mounton } for  pid=824 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1
[   43.893079][  T824] bridge0: port 1(bridge_slave_0) entered blocking state
[   43.900397][  T824] bridge0: port 1(bridge_slave_0) entered disabled state
[   43.907903][  T824] device bridge_slave_0 entered promiscuous mode
[   43.915529][  T824] bridge0: port 2(bridge_slave_1) entered blocking state
[   43.922618][  T824] bridge0: port 2(bridge_slave_1) entered disabled state
[   43.930398][  T824] device bridge_slave_1 entered promiscuous mode
[   44.178475][   T24] audit: type=1400 audit(1766542433.800:252): avc:  denied  { audit_read } for  pid=830 comm="syz.0.116" capability=37  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[   44.234294][  T833] netlink: 32 bytes leftover after parsing attributes in process `syz.0.117'.
[   44.244740][   T24] audit: type=1400 audit(1766542433.830:253): avc:  denied  { ioctl } for  pid=830 comm="syz.0.116" path="pid:[4026532281]" dev="nsfs" ino=4026532281 ioctlcmd=0xb704 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[   44.285862][  T824] bridge0: port 2(bridge_slave_1) entered blocking state
[   44.293052][  T824] bridge0: port 2(bridge_slave_1) entered forwarding state
[   44.300548][  T824] bridge0: port 1(bridge_slave_0) entered blocking state
[   44.307592][  T824] bridge0: port 1(bridge_slave_0) entered forwarding state
[   44.328478][  T834] netlink: 288 bytes leftover after parsing attributes in process `syz.0.117'.
[   44.352250][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   44.361133][    T9] bridge0: port 1(bridge_slave_0) entered disabled state
[   44.368557][    T9] bridge0: port 2(bridge_slave_1) entered disabled state
[   44.385331][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   44.394145][    T9] bridge0: port 1(bridge_slave_0) entered blocking state
[   44.401311][    T9] bridge0: port 1(bridge_slave_0) entered forwarding state
[   44.410141][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   44.419965][    T9] bridge0: port 2(bridge_slave_1) entered blocking state
[   44.427031][    T9] bridge0: port 2(bridge_slave_1) entered forwarding state
[   44.442867][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   44.451195][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   44.468387][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   44.477359][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   44.485999][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   44.494116][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   44.503217][  T824] device veth0_vlan entered promiscuous mode
[   44.518057][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   44.528195][  T824] device veth1_macvtap entered promiscuous mode
[   44.539733][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   44.557738][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   44.606682][   T24] audit: type=1400 audit(1766542434.230:254): avc:  denied  { bind } for  pid=835 comm="syz.5.115" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   44.608669][   T53] hid-generic 0007:0005:0004.0001: item fetching failed at offset 0/156
[   44.636094][   T53] hid-generic: probe of 0007:0005:0004.0001 failed with error -22
[   44.644525][   T24] audit: type=1400 audit(1766542434.230:255): avc:  denied  { node_bind } for  pid=835 comm="syz.5.115" saddr=fec0:ffff::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1
[   44.665957][   T24] audit: type=1400 audit(1766542434.230:256): avc:  denied  { read write } for  pid=835 comm="syz.5.115" name="uhid" dev="devtmpfs" ino=261 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[   44.689796][   T24] audit: type=1400 audit(1766542434.230:257): avc:  denied  { open } for  pid=835 comm="syz.5.115" path="/dev/uhid" dev="devtmpfs" ino=261 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[   44.730983][  T838] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue
[   44.753084][  T840] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue
[   44.759591][  T838] xt_CT: You must specify a L4 protocol and not use inversions on it
[   44.763478][  T840] ext4 filesystem being mounted at /13/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   45.060734][  T309] device bridge_slave_1 left promiscuous mode
[   45.067061][  T309] bridge0: port 2(bridge_slave_1) entered disabled state
[   45.075884][  T309] device bridge_slave_0 left promiscuous mode
[   45.082239][  T309] bridge0: port 1(bridge_slave_0) entered disabled state
[   45.089970][  T309] device veth1_macvtap left promiscuous mode
[   45.096097][  T309] device veth0_vlan left promiscuous mode
[   45.266704][  T512] Bluetooth: hci0: command 0x1001 tx timeout
[   45.274467][  T741] Bluetooth: hci0: sending frame failed (-49)
[   45.361276][  T861] netlink: 16 bytes leftover after parsing attributes in process `syz.5.122'.
[   45.770575][  T870] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[   45.778807][  T870] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[   45.788273][  T870] F2FS-fs (loop3): invalid crc value
[   45.795050][  T870] F2FS-fs (loop3): Found nat_bits in checkpoint
[   45.818034][  T870] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[   45.826446][  T870] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[   46.190374][  T888] exfat: Unknown parameter '����	'
[   46.244174][  T888] netlink: 12 bytes leftover after parsing attributes in process `syz.0.129'.
[   46.342816][  T893] EXT4-fs (loop4): Ignoring removed mblk_io_submit option
[   46.360310][  T893] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13
[   46.369362][  T893] EXT4-fs error (device loop4): ext4_clear_blocks:880: inode #13: comm syz.4.130: attempt to clear invalid blocks 2 len 1
[   46.382872][  T893] EXT4-fs error (device loop4): ext4_mb_generate_buddy:808: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[   46.397482][  T893] EXT4-fs error (device loop4): ext4_free_branches:1026: inode #13: comm syz.4.130: invalid indirect mapped block 1819239214 (level 0)
[   46.411933][  T893] EXT4-fs error (device loop4): ext4_free_branches:1026: inode #13: comm syz.4.130: invalid indirect mapped block 1819239214 (level 1)
[   46.430027][  T893] EXT4-fs (loop4): 1 truncate cleaned up
[   46.435768][  T893] EXT4-fs (loop4): mounted filesystem without journal. Opts: nodioread_nolock,init_itable=0x0000000000000004,mblk_io_submit,minixdf,jqfmt=vfsv0,usrjquota=..,errors=continue
[   46.764659][  T893] EXT4-fs (loop4): Quota file not on filesystem root. Journaled quota will not work
[   46.774713][   T24] kauditd_printk_skb: 12 callbacks suppressed
[   46.774725][   T24] audit: type=1400 audit(1766542436.400:270): avc:  denied  { quotaon } for  pid=892 comm="syz.4.130" name="file0" dev="loop4" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   46.889371][   T24] audit: type=1326 audit(1766542436.520:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=902 comm="syz.0.132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd914c2749 code=0x7ffc0000
[   46.925553][   T24] audit: type=1326 audit(1766542436.520:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=902 comm="syz.0.132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd914c2749 code=0x7ffc0000
[   46.951343][   T24] audit: type=1326 audit(1766542436.520:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=902 comm="syz.0.132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=155 compat=0 ip=0x7fbd914c2749 code=0x7ffc0000
[   46.975826][   T24] audit: type=1326 audit(1766542436.520:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=902 comm="syz.0.132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd914c2749 code=0x7ffc0000
[   46.999331][   T24] audit: type=1326 audit(1766542436.520:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=902 comm="syz.0.132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fbd914c2749 code=0x7ffc0000
[   47.023286][   T24] audit: type=1326 audit(1766542436.520:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=902 comm="syz.0.132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd914c2749 code=0x7ffc0000
[   47.049849][   T24] audit: type=1326 audit(1766542436.520:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=902 comm="syz.0.132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7fbd914c2749 code=0x7ffc0000
[   47.073496][   T24] audit: type=1326 audit(1766542436.520:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=902 comm="syz.0.132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd914c2749 code=0x7ffc0000
[   47.100028][   T24] audit: type=1326 audit(1766542436.520:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=902 comm="syz.0.132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbd914c2749 code=0x7ffc0000
[   47.309343][  T633] Bluetooth: hci0: command 0x1009 tx timeout
[   47.439306][   T20] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[   47.799314][   T20] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   47.810690][   T20] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   47.820809][   T20] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[   47.834092][   T20] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   47.843329][   T20] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   47.853324][  T931] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[   47.855397][   T20] usb 6-1: config 0 descriptor??
[   47.868217][  T931] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[   47.880677][  T931] F2FS-fs (loop0): invalid crc value
[   47.887814][  T931] F2FS-fs (loop0): Found nat_bits in checkpoint
[   47.914023][  T931] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[   47.922092][  T931] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[   47.944088][  T931] overlayfs: invalid origin (00000079000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000)
[   47.965667][  T492] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix.
[   47.965677][  T492] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix.
[   47.973736][  T492] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix.
[   47.981649][  T492] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix.
[   47.989533][  T492] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix.
[   47.997785][  T492] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix.
[   48.005820][  T492] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix.
[   48.092847][  T938] EXT4-fs (loop3): Ignoring removed orlov option
[   48.108283][  T938] EXT4-fs (loop3): mounted filesystem without journal. Opts: orlov,min_batch_time=0x0000000000000004,,errors=continue
[   48.320604][  T944] EXT4-fs (loop4): Ignoring removed orlov option
[   48.329142][  T951] cgroup: syz.0.140 (951) created nested cgroup for controller "memory" which has incomplete hierarchy support. Nested cgroups may change behavior in the future.
[   48.336169][  T944] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.142: inode #1: comm syz.4.142: iget: illegal inode #
[   48.347409][   T20] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving
[   48.359712][  T944] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.142: error while reading EA inode 1 err=-117
[   48.370247][   T20] plantronics 0003:047F:FFFF.0002: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0
[   48.382055][  T944] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.142: inode #1: comm syz.4.142: iget: illegal inode #
[   48.394329][  T951] cgroup: "memory" requires setting use_hierarchy to 1 on the root
[   48.409544][  T944] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.142: error while reading EA inode 1 err=-117
[   48.427800][  T944] EXT4-fs (loop4): 1 orphan inode deleted
[   48.433712][  T944] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpjquota=,stripe=0x0000000000000003,norecovery,noinit_itable,orlov,minixdf,i_version,debug_want_extra_isize=0x000000000000005c,errors=continue,dioread_lock,noblock_validity,noquota,,errors=continue
[   48.536880][  T309] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready
[   48.548482][  T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   48.558922][  T309] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready
[   48.575982][  T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   48.584957][  T309] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   48.593701][  T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   48.602314][  T309] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   48.610771][  T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   48.619736][  T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth3: link becomes ready
[   48.628186][  T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth2: link becomes ready
[   49.606696][  T980] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[   49.631858][  T980] EXT4-fs error (device loop3): ext4_orphan_get:1395: inode #15: comm syz.3.148: inode has both inline data and extents flags
[   49.650981][  T983] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=35872 sclass=netlink_audit_socket pid=983 comm=syz.0.149
[   49.686213][  T980] EXT4-fs error (device loop3): ext4_orphan_get:1400: comm syz.3.148: couldn't read orphan inode 15 (err -117)
[   49.717351][  T980] EXT4-fs (loop3): mounted filesystem without journal. Opts: noload,nombcache,journal_ioprio=0x0000000000000003,stripe=0x0000000000000006,lazytime,minixdf,noquota,usrjquota=,,errors=continue
[   49.736519][  T512] usb 6-1: reset high-speed USB device number 2 using dummy_hcd
[   49.750190][  T983] netlink: 64 bytes leftover after parsing attributes in process `syz.0.149'.
[   50.529290][ T1004] 9pnet: p9_fd_create_tcp (1004): problem connecting socket to 127.0.0.1
[   50.720479][ T1026] kvm: emulating exchange as write
[   50.852184][ T1033] tipc: Started in network mode
[   50.857235][ T1033] tipc: Own node identity , cluster identity 4711
[   50.863946][ T1033] tipc: Failed to set node id, please configure manually
[   50.871323][ T1033] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[   50.936787][ T1040] netlink: 8 bytes leftover after parsing attributes in process `syz.3.161'.
[   51.119985][ T1049] FAT-fs (loop3): Directory bread(block 64) failed
[   51.127013][ T1049] FAT-fs (loop3): Directory bread(block 65) failed
[   51.134004][ T1049] FAT-fs (loop3): Directory bread(block 66) failed
[   51.145820][ T1049] FAT-fs (loop3): Directory bread(block 67) failed
[   51.152929][ T1049] FAT-fs (loop3): Directory bread(block 68) failed
[   51.160042][ T1049] FAT-fs (loop3): Directory bread(block 69) failed
[   51.166716][ T1049] FAT-fs (loop3): Directory bread(block 70) failed
[   51.173658][ T1049] FAT-fs (loop3): Directory bread(block 71) failed
[   51.180922][ T1049] FAT-fs (loop3): Directory bread(block 72) failed
[   51.187725][ T1049] FAT-fs (loop3): Directory bread(block 73) failed
[   51.199134][ T1055] Zero length message leads to an empty skb
[   51.266220][ T1057] EXT4-fs (loop4): Ignoring removed mblk_io_submit option
[   51.274765][ T1057] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13
[   51.284226][ T1057] EXT4-fs error (device loop4): ext4_clear_blocks:880: inode #13: comm syz.4.168: attempt to clear invalid blocks 2 len 1
[   51.297538][ T1057] EXT4-fs error (device loop4): ext4_mb_generate_buddy:808: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[   51.312254][ T1057] EXT4-fs error (device loop4): ext4_free_branches:1026: inode #13: comm syz.4.168: invalid indirect mapped block 1819239214 (level 0)
[   51.326875][ T1057] EXT4-fs error (device loop4): ext4_free_branches:1026: inode #13: comm syz.4.168: invalid indirect mapped block 1819239214 (level 1)
[   51.342772][ T1057] EXT4-fs (loop4): 1 truncate cleaned up
[   51.348527][ T1057] EXT4-fs (loop4): mounted filesystem without journal. Opts: nodioread_nolock,init_itable=0x0000000000000004,mblk_io_submit,minixdf,jqfmt=vfsv0,usrjquota=..,errors=continue
[   51.367507][ T1064] FAT-fs (loop3): error, corrupted directory (invalid entries)
[   51.375242][ T1064] FAT-fs (loop3): Filesystem has been set read-only
[   51.382444][ T1064] FAT-fs (loop3): error, corrupted directory (invalid entries)
[   51.818379][  T301] usb 6-1: USB disconnect, device number 2
[   51.824423][   T24] kauditd_printk_skb: 194 callbacks suppressed
[   51.824435][   T24] audit: type=1326 audit(1766542441.060:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1056 comm="syz.4.168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f4ba950e749 code=0x7ffc0000
[   51.870147][   T24] audit: type=1326 audit(1766542441.060:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1056 comm="syz.4.168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ba950e749 code=0x7ffc0000
[   51.894896][   T24] audit: type=1326 audit(1766542441.060:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1056 comm="syz.4.168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ba950e749 code=0x7ffc0000
[   51.925221][   T24] audit: type=1326 audit(1766542441.060:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1056 comm="syz.4.168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f4ba950e749 code=0x7ffc0000
[   51.951088][ T1068] SELinux:  Context @ is not valid (left unmapped).
[   51.956836][   T24] audit: type=1326 audit(1766542441.140:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1056 comm="syz.4.168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ba950e749 code=0x7ffc0000
[   51.982221][   T24] audit: type=1326 audit(1766542441.140:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1056 comm="syz.4.168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ba950e749 code=0x7ffc0000
[   52.006011][   T24] audit: type=1326 audit(1766542441.150:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1056 comm="syz.4.168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f4ba950e749 code=0x7ffc0000
[   52.092909][ T1073] netlink: 16 bytes leftover after parsing attributes in process `syz.2.169'.
[   52.315283][   T24] audit: type=1326 audit(1766542441.150:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1056 comm="syz.4.168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ba950e749 code=0x7ffc0000
[   52.339598][   T24] audit: type=1326 audit(1766542441.150:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1056 comm="syz.4.168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ba950e749 code=0x7ffc0000
[   52.384776][   T24] audit: type=1326 audit(1766542441.150:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1056 comm="syz.4.168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f4ba950e749 code=0x7ffc0000
[   52.444715][ T1074] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[   52.485970][ T1074] EXT4-fs (loop5): 1 orphan inode deleted
[   52.491816][ T1074] EXT4-fs (loop5): 1 truncate cleaned up
[   52.497568][ T1074] EXT4-fs (loop5): mounted filesystem without journal. Opts: quota,nodelalloc,debug_want_extra_isize=0x000000000000002e,nobarrier,auto_da_alloc=0x0000000000000007,quota,,errors=continue
[   52.561217][ T1072] EXT4-fs error (device loop5): ext4_search_dir:1521: inode #12: block 7: comm syz.5.171: bad entry in directory: directory entry overrun - offset=0, inode=13, rec_len=784, size=56 fake=0
[   52.594507][ T1080] exFAT-fs (loop4): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18d7c, utbl_chksum : 0xe619d30d)
[   52.643148][ T1086] EXT4-fs (loop2): Ignoring removed nobh option
[   52.656497][ T1086] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2
[   52.665238][ T1086] EXT4-fs error (device loop2): ext4_free_branches:1026: inode #13: comm syz.2.174: invalid indirect mapped block 256 (level 1)
[   52.678882][ T1086] EXT4-fs (loop2): Remounting filesystem read-only
[   52.685441][ T1086] EXT4-fs error (device loop2): ext4_free_branches:1026: inode #13: comm syz.2.174: invalid indirect mapped block 2683928664 (level 1)
[   52.702751][ T1086] EXT4-fs (loop2): 1 truncate cleaned up
[   52.708571][ T1086] EXT4-fs (loop2): mounted filesystem without journal. Opts: noblock_validity,dioread_lock,nobh,nouid32,errors=remount-ro,usrjquota=.noacl,nodiscard,jqfmt=vfsv0,delalloc,,
[   52.773735][ T1093] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities
[   52.784688][    T9] Bluetooth: hci0: Frame reassembly failed (-84)
[   52.792280][ T1086] EXT4-fs error (device loop2): ext4_free_branches:1026: inode #13: comm syz.2.174: invalid indirect mapped block 65536 (level 1)
[   52.807901][ T1086] EXT4-fs (loop2): Remounting filesystem read-only
[   52.814910][ T1086] EXT4-fs error (device loop2): ext4_free_branches:1026: inode #13: comm syz.2.174: invalid indirect mapped block 480848489 (level 1)
[   52.849286][  T383] usb 6-1: new full-speed USB device number 3 using dummy_hcd
[   52.884898][  T633] usb 4-1: new low-speed USB device number 2 using dummy_hcd
[   52.952131][ T1096] F2FS-fs (loop0): invalid crc value
[   52.966288][ T1096] F2FS-fs (loop0): Found nat_bits in checkpoint
[   52.986387][ T1096] F2FS-fs (loop0): Cannot turn on quotas: -2 on 0
[   52.993388][ T1096] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4
[   53.012519][  T492] attempt to access beyond end of device
[   53.012519][  T492] loop0: rw=2049, want=45104, limit=40427
[   53.219370][  T383] usb 6-1: config 0 has an invalid interface number: 16 but max is 0
[   53.227508][  T383] usb 6-1: config 0 has no interface number 0
[   53.233630][  T383] usb 6-1: config 0 interface 16 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64
[   53.244814][  T383] usb 6-1: config 0 interface 16 altsetting 0 endpoint 0x82 has invalid maxpacket 63147, setting to 64
[   53.249259][  T634] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[   53.279388][  T633] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   53.290391][  T633] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[   53.313084][ T1110] incfs_lookup_dentry err:-13
[   53.519298][  T634] usb 5-1: Using ep0 maxpacket: 16
[   53.579340][  T383] usb 6-1: New USB device found, idVendor=0499, idProduct=102a, bcdDevice=85.2d
[   53.588456][  T383] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   53.589305][  T633] usb 4-1: string descriptor 0 read error: -22
[   53.596883][  T383] usb 6-1: Product: syz
[   53.603270][  T633] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   53.607280][  T383] usb 6-1: Manufacturer: syz
[   53.616347][  T633] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   53.621049][  T383] usb 6-1: SerialNumber: syz
[   53.633949][  T383] usb 6-1: config 0 descriptor??
[   53.639321][  T634] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11
[   53.650731][  T634] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024
[   53.659349][ T1072] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[   53.667618][ T1072] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[   53.670410][  T633] usb 4-1: MIDIStreaming interface descriptor not found
[   53.819331][  T634] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   53.828588][  T634] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   53.836888][  T634] usb 5-1: Product: syz
[   53.841109][  T634] usb 5-1: Manufacturer: 뽡⒅鐐䊺룣䒚庵񟜰
[   53.847612][  T634] usb 5-1: SerialNumber: syz
[   53.875600][  T383] usb 4-1: USB disconnect, device number 2
[   54.169353][  T634] cdc_ncm 5-1:1.0: bind() failure
[   54.175144][  T634] cdc_ncm 5-1:1.1: bind() failure
[   54.186517][  T634] usb 5-1: USB disconnect, device number 3
[   54.789284][   T15] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[   54.829260][  T511] Bluetooth: hci0: command 0x1003 tx timeout
[   54.835367][  T741] Bluetooth: hci0: sending frame failed (-49)
[   55.084144][   T53] usb 6-1: USB disconnect, device number 3
[   55.141619][ T1140] EXT4-fs (loop5): Mount option "dioread_lock" incompatible with ext3
[   55.209270][   T15] usb 4-1: Using ep0 maxpacket: 16
[   55.250688][ T1140] erofs: (device loop5): mounted with root inode @ nid 36.
[   55.329385][   T15] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   55.340743][   T15] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   55.350618][   T15] usb 4-1: New USB device found, idVendor=1b96, idProduct=0008, bcdDevice= 0.00
[   55.359833][   T15] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   55.408296][   T15] usb 4-1: config 0 descriptor??
[   55.423171][ T1150] netlink: 20 bytes leftover after parsing attributes in process `syz.5.190'.
[   56.168485][ T1161] SELinux:  policydb table sizes (8,519) do not match mine (8,7)
[   56.176400][ T1161] SELinux: failed to load policy
[   56.200217][   T15] ntrig 0003:1B96:0008.0003: item fetching failed at offset 3/7
[   56.208282][   T15] ntrig 0003:1B96:0008.0003: parse failed
[   56.232646][   T15] ntrig: probe of 0003:1B96:0008.0003 failed with error -22
[   56.279695][ T1162] xt_CT: netfilter: NOTRACK target is deprecated, use CT instead or upgrade iptables
[   56.383378][ T1168] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended
[   56.404726][ T1168] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem
[   56.414206][ T1168] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended
[   56.424766][ T1168] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006]
[   56.434014][ T1168] System zones: 0-2, 18-18, 34-35
[   56.441524][  T301] usb 4-1: USB disconnect, device number 3
[   56.450843][ T1168] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue
[   56.465174][ T1168] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.199: bg 0: block 353: padding at end of block bitmap is not set
[   56.487564][ T1168] hub 6-0:1.0: USB hub found
[   56.493163][ T1168] hub 6-0:1.0: 1 port detected
[   56.584672][ T1174] F2FS-fs (loop0): Found nat_bits in checkpoint
[   56.609099][ T1174] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[   56.753468][ T1185] EXT4-fs (loop4): Ignoring removed mblk_io_submit option
[   56.761973][ T1185] EXT4-fs (loop4): Test dummy encryption mode enabled
[   56.768771][ T1185] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled
[   56.780006][ T1185] EXT4-fs (loop4): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000008000000,mblk_io_submit,data_err=abort,test_dummy_encryption,jqfmt=vfsv0,nodelalloc,noquota,debug_want_extra_isize=0x0000000000000040,,errors=continue
[   56.879430][ T1188] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 54)
[   56.890932][ T1188] FAT-fs (loop0): Filesystem has been set read-only
[   56.909024][   T24] kauditd_printk_skb: 40 callbacks suppressed
[   56.909035][   T24] audit: type=1400 audit(1766542446.530:524): avc:  denied  { unmount } for  pid=1187 comm="syz.0.201" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[   56.935411][  T301] Bluetooth: hci0: command 0x1001 tx timeout
[   56.942122][ T1188] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 54)
[   56.942590][  T741] Bluetooth: hci0: sending frame failed (-49)
[   57.177282][ T1200] netlink: 96 bytes leftover after parsing attributes in process `syz.3.206'.
[   57.491775][   T24] audit: type=1400 audit(1766542447.120:525): avc:  denied  { ioctl } for  pid=1217 comm="syz.4.208" path="/dev/loop-control" dev="devtmpfs" ino=114 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[   57.730204][ T1226] fuse: Unknown parameter '�
'
[   58.078584][ T1229] EXT4-fs (loop5): Ignoring removed bh option
[   58.094286][ T1229] EXT4-fs (loop5): Unrecognized mount option "smackfsfloor=noquota" or missing value
[   58.317976][   T24] audit: type=1326 audit(1766542447.930:526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1239 comm="syz.3.215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43bb433749 code=0x7ffc0000
[   58.442900][   T24] audit: type=1326 audit(1766542447.930:527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1239 comm="syz.3.215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43bb433749 code=0x7ffc0000
[   58.468483][   T24] audit: type=1326 audit(1766542447.930:528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1239 comm="syz.3.215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f43bb433749 code=0x7ffc0000
[   58.776511][   T24] audit: type=1326 audit(1766542447.930:529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1239 comm="syz.3.215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43bb433749 code=0x7ffc0000
[   58.800310][   T24] audit: type=1326 audit(1766542447.930:530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1239 comm="syz.3.215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43bb433749 code=0x7ffc0000
[   58.824873][   T24] audit: type=1326 audit(1766542447.930:531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1246 comm="syz.3.215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f43bb466005 code=0x7ffc0000
[   58.849851][   T24] audit: type=1326 audit(1766542447.940:532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1239 comm="syz.3.215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f43bb433749 code=0x7ffc0000
[   58.850757][ T1254] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue
[   58.873620][   T24] audit: type=1326 audit(1766542447.940:533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1239 comm="syz.3.215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43bb433749 code=0x7ffc0000
[   58.905905][ T1254] ext4 filesystem being mounted at /52/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[   58.948378][ T1256] netlink: 12 bytes leftover after parsing attributes in process `syz.0.218'.
[   58.990058][  T301] Bluetooth: hci0: command 0x1009 tx timeout
[   59.241642][ T1264] syz.5.222 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[   59.256565][ T1264] device veth1_to_team entered promiscuous mode
[   59.265509][ T1264] A link change request failed with some changes committed already. Interface veth1_to_team may have been left with an inconsistent configuration, please check.
[   59.339289][   T15] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[   59.429829][ T1269] F2FS-fs (loop5): Invalid SB checksum offset: 0
[   59.436728][ T1269] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock
[   59.446477][ T1269] F2FS-fs (loop5): invalid crc value
[   59.458205][ T1269] F2FS-fs (loop5): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437)
[   59.478080][ T1269] F2FS-fs (loop5): Failed to read root inode
[   59.579261][   T15] usb 4-1: Using ep0 maxpacket: 8
[   59.699304][   T15] usb 4-1: descriptor type invalid, skip
[   59.779605][   T15] usb 4-1: config 2 has an invalid interface number: 221 but max is 1
[   59.788054][   T15] usb 4-1: config 2 has an invalid interface number: 196 but max is 1
[   59.789073][ T1275] F2FS-fs (loop5): Invalid SB checksum offset: 0
[   59.796501][   T15] usb 4-1: config 2 has no interface number 0
[   59.809305][   T15] usb 4-1: config 2 has no interface number 1
[   59.815408][   T15] usb 4-1: config 2 interface 221 altsetting 6 endpoint 0x83 has an invalid bInterval 83, changing to 7
[   59.826787][   T15] usb 4-1: config 2 interface 221 altsetting 6 has an invalid endpoint with address 0x80, skipping
[   59.837502][ T1275] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock
[   59.838403][ T1275] F2FS-fs (loop5): invalid crc value
[   59.846062][   T15] usb 4-1: config 2 interface 221 altsetting 6 endpoint 0xB has invalid wMaxPacketSize 0
[   59.861154][   T15] usb 4-1: config 2 interface 221 altsetting 6 has a duplicate endpoint with address 0xB, skipping
[   59.872230][   T15] usb 4-1: config 2 interface 221 altsetting 6 endpoint 0x9 has invalid maxpacket 1023, setting to 64
[   59.883557][   T15] usb 4-1: config 2 interface 221 altsetting 6 has an invalid endpoint with address 0x80, skipping
[   59.890188][ T1275] F2FS-fs (loop5): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437)
[   59.894433][   T15] usb 4-1: config 2 interface 221 altsetting 6 has a duplicate endpoint with address 0x3, skipping
[   59.921868][   T15] usb 4-1: config 2 interface 221 altsetting 6 endpoint 0xA has invalid maxpacket 1431, setting to 1024
[   59.933400][   T15] usb 4-1: config 2 interface 221 altsetting 6 bulk endpoint 0xA has invalid maxpacket 1024
[   59.943850][   T15] usb 4-1: config 2 interface 221 altsetting 6 has an invalid endpoint with address 0x0, skipping
[   59.946826][ T1275] F2FS-fs (loop5): Try to recover 2th superblock, ret: 0
[   59.955081][   T15] usb 4-1: config 2 interface 221 altsetting 6 has a duplicate endpoint with address 0xA, skipping
[   59.972253][ T1275] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[   59.973316][   T15] usb 4-1: config 2 interface 221 altsetting 6 has an invalid endpoint with address 0x0, skipping
[   59.992240][   T15] usb 4-1: config 2 interface 221 altsetting 6 endpoint 0xE has invalid maxpacket 1024, setting to 64
[   60.003738][   T15] usb 4-1: config 2 interface 221 altsetting 6 has an invalid endpoint with address 0x0, skipping
[   60.014805][   T15] usb 4-1: config 2 interface 196 altsetting 5 has a duplicate endpoint with address 0x6, skipping
[   60.026423][   T15] usb 4-1: config 2 interface 196 altsetting 5 has a duplicate endpoint with address 0x6, skipping
[   60.037558][   T15] usb 4-1: config 2 interface 221 has no altsetting 0
[   60.044528][  T633] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[   60.044577][   T15] usb 4-1: config 2 interface 196 has no altsetting 0
[   60.068096][  T824] attempt to access beyond end of device
[   60.068096][  T824] loop5: rw=2049, want=45104, limit=40427
[   60.147679][ T1300] overlayfs: failed to resolve './file0': -2
[   60.155284][ T1300] netlink: 12 bytes leftover after parsing attributes in process `syz.5.230'.
[   60.229315][   T15] usb 4-1: Dual-Role OTG device on HNP port
[   60.249323][   T15] usb 4-1: New USB device found, idVendor=19d2, idProduct=0069, bcdDevice=45.d3
[   60.258645][   T15] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   60.271459][   T15] usb 4-1: Product: 궝ảᾍ鉜⌈ꍵ屔帿質崀ᵙ쎘彛ꖰ窦瓷禝罬䵉쇂簽》鱪셙肠ள홿蟡䖒颗辘䡔쎘ጥ涽ꜛ픁䘒Ě䘣짤浶펤ﺘ㡞䖫鿻㮳ᄧ挐⻩鼆皔㴟﷍耂漎謏৥鶣ꙿ⁲倒ᕫ헤䊔隟ꢟ烈媞⛫Ḓᆨ䳦뗚蝀쌾覔滟䯹瘥킩菌┼듢鶂疴划ꡫ埗쮎磌
[   60.302941][   T15] usb 4-1: Manufacturer: ཚ쟁갱⿍㦡龒淺ᴤᒐ䨑傾榗砨᥵菳ﵘˇ兛썻됦䓹鄓䈻䇢┪䝓ꢻ狹ς㧊듫
[   60.317289][   T15] usb 4-1: SerialNumber: ⠃
[   60.340806][ T1262] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[   60.499320][  T633] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[   60.512471][  T633] usb 5-1: config 1 interface 0 has no altsetting 1
[   60.679646][  T633] usb 5-1: New USB device found, idVendor=0536, idProduct=a4a8, bcdDevice= 0.40
[   60.723216][  T633] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   60.839240][  T633] usb 5-1: Product: syz
[   60.843437][  T633] usb 5-1: Manufacturer: syz
[   60.848025][  T633] usb 5-1: SerialNumber: syz
[   61.121549][  T633] usb 5-1: USB disconnect, device number 4
[   61.169348][   T20] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[   61.429298][   T20] usb 6-1: Using ep0 maxpacket: 8
[   61.452377][   T15] usb 4-1: USB disconnect, device number 4
[   61.549376][   T20] usb 6-1: New USB device found, idVendor=0403, idProduct=f0c8, bcdDevice= 2.56
[   61.558742][   T20] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   61.567695][   T20] usb 6-1: config 0 descriptor??
[   61.609943][   T20] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected
[   61.809297][   T15] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[   61.817814][ T1318] udc-core: couldn't find an available UDC or it's busy
[   61.825002][ T1318] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[   62.742260][ T1327] sched: RT throttling activated
[   62.742321][   T20] usb 6-1: Detected FT8U232AM
[   62.782624][   T24] kauditd_printk_skb: 163 callbacks suppressed
[   62.782704][   T24] audit: type=1400 audit(1766542452.410:697): avc:  denied  { remount } for  pid=1326 comm="syz.0.237" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[   62.819971][   T20] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0
[   62.833409][   T20] usb 6-1: USB disconnect, device number 4
[   62.856599][ T1337] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue
[   62.860643][   T20] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[   62.865740][ T1337] ext4 filesystem being mounted at /55/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   62.881353][   T20] ftdi_sio 6-1:0.0: device disconnected
[   63.049420][   T15] usb 4-1: Using ep0 maxpacket: 16
[   63.118064][   T24] audit: type=1400 audit(1766542452.740:698): avc:  denied  { map } for  pid=1343 comm="syz.0.242" path="socket:[19634]" dev="sockfs" ino=19634 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1
[   63.179398][   T15] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 8
[   63.531032][ T1352] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue
[   63.540198][ T1352] ext4 filesystem being mounted at /32/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   63.579899][   T15] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00
[   63.590843][   T15] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   63.602574][ T1365] netlink: 'syz.2.246': attribute type 12 has an invalid length.
[   63.604804][   T15] usb 4-1: Product: syz
[   63.615836][   T15] usb 4-1: Manufacturer: syz
[   63.621180][   T15] usb 4-1: SerialNumber: syz
[   63.627689][   T15] usb 4-1: config 0 descriptor??
[   63.669918][   T15] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected
[   63.677761][   T15] usb 4-1: Detected FT232RL
[   63.692443][   T24] audit: type=1400 audit(1766542453.320:699): avc:  denied  { read } for  pid=1369 comm="syz.2.247" name="rtc0" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[   63.722807][   T24] audit: type=1400 audit(1766542453.320:700): avc:  denied  { open } for  pid=1369 comm="syz.2.247" path="/dev/rtc0" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[   63.775518][ T1376] device bridge0 entered promiscuous mode
[   63.782204][ T1376] bridge0: port 3(macsec1) entered blocking state
[   63.789261][ T1376] bridge0: port 3(macsec1) entered disabled state
[   63.789922][ T1372] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12
[   63.803988][ T1372] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[   63.812443][ T1376] device bridge0 left promiscuous mode
[   63.819401][ T1372] F2FS-fs (loop5): invalid crc value
[   63.826743][ T1372] F2FS-fs (loop5): Found nat_bits in checkpoint
[   63.835120][ T1377] device bridge0 entered promiscuous mode
[   63.841747][ T1377] bridge0: port 3(macsec1) entered blocking state
[   63.848304][ T1377] bridge0: port 3(macsec1) entered disabled state
[   63.855884][ T1377] device bridge0 left promiscuous mode
[   63.861737][ T1372] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0
[   63.877561][ T1372] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[   63.889616][   T15] ftdi_sio ttyUSB0: Unable to read latency timer: -32
[   64.004257][   T24] audit: type=1400 audit(1766542453.630:701): avc:  denied  { lock } for  pid=1371 comm="syz.5.245" path="/33/bus/file0" dev="loop5" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   64.075165][ T1388] syz.0.250[1388] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   64.075205][ T1388] syz.0.250[1388] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   64.439885][   T24] audit: type=1400 audit(1766542454.070:702): avc:  denied  { read write } for  pid=1402 comm="syz.4.254" name="vga_arbiter" dev="devtmpfs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[   64.477770][   T15] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0
[   64.482785][   T24] audit: type=1400 audit(1766542454.110:703): avc:  denied  { open } for  pid=1402 comm="syz.4.254" path="/dev/vga_arbiter" dev="devtmpfs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[   64.541865][ T1404] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=none:owns=io+mem
[   65.100228][ T1413] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=e000c018, mo2=0002]
[   65.108701][ T1413] System zones: 0-2, 18-18, 34-35
[   65.114803][ T1413] EXT4-fs (loop3): mounted filesystem without journal. Opts: i_version,nodioread_nolock,discard,debug,,errors=continue
[   65.128006][ T1413] ext4 filesystem being mounted at /37/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   65.197225][ T1423] FAT-fs (loop2): Unrecognized mount option "00000000004294967295" or missing value
[   65.311601][ T1429] netlink: 96 bytes leftover after parsing attributes in process `syz.0.259'.
[   65.402011][ T1430] netlink: 8 bytes leftover after parsing attributes in process `syz.0.259'.
[   65.590981][ T1429] netlink: 8 bytes leftover after parsing attributes in process `syz.0.259'.
[   65.905256][ T1436] F2FS-fs (loop4): invalid crc value
[   65.957401][ T1436] F2FS-fs (loop4): Found nat_bits in checkpoint
[   65.997210][ T1436] F2FS-fs (loop4): Start checkpoint disabled!
[   66.113722][   T20] usb 4-1: USB disconnect, device number 5
[   66.147821][ T1436] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6
[   66.175939][   T24] audit: type=1400 audit(1766542455.790:704): avc:  denied  { ioctl } for  pid=1440 comm="syz.0.261" path="socket:[20599]" dev="sockfs" ino=20599 ioctlcmd=0x7436 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   66.201219][   T24] audit: type=1400 audit(1766542455.790:705): avc:  denied  { write } for  pid=1440 comm="syz.0.261" path="socket:[20599]" dev="sockfs" ino=20599 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   66.420129][   T20] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[   66.454309][   T20] ftdi_sio 4-1:0.0: device disconnected
[   66.460323][   T24] audit: type=1400 audit(1766542456.100:706): avc:  denied  { accept } for  pid=1444 comm="syz.0.263" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1
[   66.841778][ T1449] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   66.852815][ T1449] exFAT-fs (loop2): Medium has reported failures. Some data may be lost.
[   66.864794][ T1449] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[   67.267988][ T1476] netlink: 4 bytes leftover after parsing attributes in process `syz.3.267'.
[   67.277149][ T1476] netlink: 12 bytes leftover after parsing attributes in process `syz.3.267'.
[   67.348895][ T1493] incfs: Options parsing error. -22
[   67.355239][ T1493] incfs: mount failed -22
[   67.479275][  T511] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[   67.508768][ T1515] 9pnet: Insufficient options for proto=fd
[   67.544007][ T1522] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option
[   67.560319][ T1522] EXT4-fs (loop2): mounted filesystem without journal. Opts: minixdf,errors=remount-ro,init_itable,commit=0x0000000000000005,debug_want_extra_isize=0x0000000000000080,lazytime,norecovery,nobarrier,nomblk_io_submit,
[   67.649259][  T301] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[   67.719236][  T511] usb 6-1: Using ep0 maxpacket: 32
[   67.839279][  T511] usb 6-1: config 0 has an invalid interface number: 67 but max is 0
[   67.847370][  T511] usb 6-1: config 0 has no interface number 0
[   68.019262][  T301] usb 4-1: config 220 has an invalid interface number: 76 but max is 2
[   68.027726][  T301] usb 4-1: config 220 contains an unexpected descriptor of type 0x2, skipping
[   68.036885][  T511] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[   68.046033][  T301] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[   68.056332][  T511] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   68.064358][  T301] usb 4-1: config 220 has no interface number 2
[   68.071013][  T511] usb 6-1: Product: syz
[   68.075287][  T511] usb 6-1: Manufacturer: syz
[   68.080933][  T301] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[   68.094204][  T511] usb 6-1: SerialNumber: syz
[   68.100060][  T511] usb 6-1: config 0 descriptor??
[   68.107544][  T301] usb 4-1: config 220 interface 0 has no altsetting 0
[   68.114396][  T301] usb 4-1: config 220 interface 76 has no altsetting 0
[   68.122116][  T301] usb 4-1: config 220 interface 1 has no altsetting 0
[   68.139728][  T511] smsc95xx v2.0.0
[   68.279338][  T301] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[   68.294034][  T301] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   68.306599][  T301] usb 4-1: Product: syz
[   68.311134][ T1531] netlink: 'syz.0.282': attribute type 8 has an invalid length.
[   68.314729][  T301] usb 4-1: Manufacturer: syz
[   68.328925][  T301] usb 4-1: SerialNumber: syz
[   68.579363][  T511] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[   68.590363][  T511] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[   68.602463][ T1503] netlink: 12 bytes leftover after parsing attributes in process `syz.3.277'.
[   68.719458][  T301] usb 4-1: selecting invalid altsetting 0
[   68.726293][   T20] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[   68.734035][  T301] uvcvideo: Found UVC 7.01 device syz (8086:0b07)
[   68.741161][  T301] uvcvideo: No valid video chain found.
[   68.747248][   T24] kauditd_printk_skb: 2 callbacks suppressed
[   68.747260][   T24] audit: type=1400 audit(1766542458.380:709): avc:  denied  { mount } for  pid=1542 comm="syz.0.286" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1
[   68.849336][  T511] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[   68.862356][  T511] smsc95xx: probe of 6-1:0.67 failed with error -71
[   68.870490][  T511] usb 6-1: USB disconnect, device number 5
[   68.900780][  T301] usb 4-1: USB disconnect, device number 6
[   69.129293][   T20] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   69.140316][   T20] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[   69.149689][   T20] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   69.161034][   T20] usb 3-1: config 0 descriptor??
[   69.214279][ T1546] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue
[   69.562035][   T24] audit: type=1400 audit(1766542459.170:710): avc:  denied  { map } for  pid=1560 comm="syz.5.291" path="/dev/ashmem" dev="devtmpfs" ino=263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   69.673496][   T24] audit: type=1400 audit(1766542459.180:711): avc:  denied  { mounton } for  pid=1560 comm="syz.5.291" path="/36/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1
[   69.701701][ T1534] netlink: 'syz.2.283': attribute type 12 has an invalid length.
[   69.739263][  T402] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[   69.902622][   T24] audit: type=1400 audit(1766542459.530:712): avc:  denied  { bind } for  pid=1573 comm="syz.4.294" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   69.924001][   T24] audit: type=1400 audit(1766542459.530:713): avc:  denied  { connect } for  pid=1573 comm="syz.4.294" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   69.943968][   T24] audit: type=1400 audit(1766542459.530:714): avc:  denied  { listen } for  pid=1573 comm="syz.4.294" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   69.944103][   T20] keytouch 0003:0926:3333.0004: fixing up Keytouch IEC report descriptor
[   69.978577][   T20] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0004/input/input4
[   70.072131][   T20] keytouch 0003:0926:3333.0004: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0
[   70.073560][   T24] audit: type=1400 audit(1766542459.700:715): avc:  denied  { read } for  pid=80 comm="acpid" name="event3" dev="devtmpfs" ino=693 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   70.107612][   T24] audit: type=1400 audit(1766542459.700:716): avc:  denied  { open } for  pid=80 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=693 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   70.131004][   T24] audit: type=1400 audit(1766542459.700:717): avc:  denied  { ioctl } for  pid=80 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=693 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   70.169319][  T402] usb 4-1: config 0 interface 0 altsetting 185 endpoint 0x81 has invalid wMaxPacketSize 0
[   70.179424][   T24] audit: type=1400 audit(1766542459.780:718): avc:  denied  { mount } for  pid=1594 comm="syz.4.299" name="/" dev="configfs" ino=12949 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1
[   70.202302][  T402] usb 4-1: config 0 interface 0 has no altsetting 0
[   70.202323][  T402] usb 4-1: New USB device found, idVendor=056a, idProduct=00d2, bcdDevice= 0.00
[   70.202333][  T402] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   70.209837][  T402] usb 4-1: config 0 descriptor??
[   70.391232][ T1602] bridge: RTM_NEWNEIGH with invalid ether address
[   70.515341][ T1559] udc-core: couldn't find an available UDC or it's busy
[   70.530760][ T1559] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[   70.605511][ T1603] kvm: MWAIT instruction emulated as NOP!
[   70.930815][  T402] wacom 0003:056A:00D2.0005: Unknown device_type for 'HID 056a:00d2'. Assuming pen.
[   70.960021][  T402] wacom 0003:056A:00D2.0005: hidraw1: USB HID v8.00 Device [HID 056a:00d2] on usb-dummy_hcd.3-1/input0
Stopping sshd: [   70.987194][  T402] input: Wacom Bamboo Craft Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:056A:00D2.0005/input/input5
stopped /usr/sbin/sshd (pid 186)
OK
Stopping crond: stopped /usr/sbin/crond (pid 178)
OK
Stopping dhcpcd...
stopped /sbin/dhcpcd (pid 133)
Stopping network: OK
Stopping iptables: OK
Stopping system message bus: [   71.454344][ T1663] EXT4-fs (loop5): quotafile must be on filesystem root
[   71.467006][   T20] usb 3-1: USB disconnect, device number 4
done
[   71.510400][ T1669] netlink: 'syz.2.309': attribute type 5 has an invalid length.
[   71.660142][ T1675] FAT-fs (loop5): Unrecognized mount option "" or missing value
killall: can't kill pid 299: No such process
killall: can't kill pid 330: No such process
killall: can't kill pid 333: No such process
killall: can't kill pid 334: No such process
Stopping klogd: OK
Stopping acpid: [   72.389049][   T20] usb 4-1: USB disconnect, device number 7
[   72.639252][    T5] usb 3-1: new high-speed USB device number 5 using dummy_hcd
OK
Stopping syslogd: stopped /sbin/syslogd (pid 77)
OK
[   72.999336][    T5] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 3
[   73.015063][    T5] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   73.045240][    T5] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0
[   73.058269][ T1712] overlayfs: failed to clone upperpath
[   73.064552][    T5] usb 3-1: config 0 interface 0 has no altsetting 0
[   73.078735][    T5] usb 3-1: New USB device found, idVendor=0547, idProduct=03d5, bcdDevice= 0.00
[   73.097351][    T5] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   73.113295][    T5] usb 3-1: config 0 descriptor??
umount: can't remount debugfs read-only
[   73.378257][ T1718] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue
Connection to 10.128.0.167 closed by remote host.
[   73.399772][ T1718] ext4 filesystem being mounted at /75/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
umount: sysfs busy - remounted read-only
umount: devtmpfs busy - remounted read-only
umount: can't remou[   73.879388][    T5] usbhid 3-1:0.0: can't add hid device: -71
[   73.885491][    T5] usbhid: probe of 3-1:0.0 failed with error -71
[   73.899020][    T5] usb 3-1: USB disconnect, device number 5
[   74.389975][   T49] device bridge_slave_1 left promiscuous mode
[   74.396314][   T49] bridge0: port 2(bridge_slave_1) entered disabled state
[   74.403756][   T49] device bridge_slave_0 left promiscuous mode
[   74.410278][   T49] bridge0: port 1(bridge_slave_0) entered disabled state
[   74.417861][   T49] device veth1_macvtap left promiscuous mode
[   74.424060][   T49] device veth0_vlan left promiscuous mode
Sent SIGKILL to all processes
Requesting system poweroff
[   75.770929][ T1724] kvm: exiting hardware virtualization
[   75.777334][ T1724] sd 0:0:1:0: [sda] Synchronizing SCSI cache
[   75.784112][ T1724] ACPI: Preparing to enter system sleep state S5
[   75.790869][ T1724] reboot: Power down
serialport: VM disconnected.