last executing test programs:

2m58.526328082s ago: executing program 1 (id=1273):
r0 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0)
syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000100)='./file1\x00', 0x101880a, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x1, 0x550b, &(0x7f00000079c0)="$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")
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0xc)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x16b)
write$cgroup_pressure(r5, &(0x7f0000000040)={'some', 0x20, 0xfffffffffffffffe, 0x20, 0x3}, 0x2f)
r6 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x103042, 0x0)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0)
pwrite64(r7, &(0x7f0000000140)='2', 0x1, 0xfece)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x13)
sendfile(r6, r8, 0x0, 0x100001)
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000003, 0x13, r0, 0x1e67e000)
socket(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./bus\x00', 0xc618, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x1, 0x5519, &(0x7f00000079c0)="$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")
getpid()

2m55.057862227s ago: executing program 1 (id=1278):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20181, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_X86_DISABLE_EXITS(r1, 0x4068aea3, &(0x7f0000000500)={0x8f, 0x0, 0xd})
r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0xc2d41, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000180)=ANY=[], 0x0)
ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r2, 0x80083313, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00'})
sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x200040d5}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r6 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r6, &(0x7f0000000440)={0x28, 0x0, 0x0, @local}, 0x10)
listen(r6, 0xa)
r7 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r7, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10)
r8 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r8, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10)
close_range(r5, r7, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
rt_sigprocmask(0x2, &(0x7f0000000200)={[0x99f]}, 0x0, 0x8)
gettid()
getpid()
syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f00000000c0)={[{@errors_remount}, {@nomblk_io_submit}, {@mblk_io_submit}, {@minixdf}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [], 0x2e}, 0x84, 0x450, &(0x7f0000000940)="$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")
quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000000)='./file0\x00')

2m53.741354664s ago: executing program 1 (id=1282):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x10, 0x9, &(0x7f0000000280)=ANY=[@ANYBLOB="18410000fcffffff00000000000100001d4b0480001400001862000008000a000000000008000000093706000c00000000000000640000008500000059000000"], &(0x7f0000000080)='GPL\x00', 0x1ff, 0xd5, &(0x7f00000004c0)=""/213, 0x41000, 0x1b, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x7, 0x5}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, r1, 0x1, &(0x7f00000005c0)=[0x1], &(0x7f0000000600)=[{0x3, 0x3, 0x4, 0x3}], 0x10, 0xe, @void, @value}, 0x94)
r2 = syz_open_procfs(0x0, &(0x7f0000000740)='ns\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000180), 0x802, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="7961000000000000000f7e000000", @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4080}, 0x8000)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10)
r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r8 = ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r7, 0x4c81, r8)
sendmsg$nl_xfrm(r2, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x2240dc82}, 0xc, &(0x7f0000000800)={&(0x7f0000000a00)=@newsa={0x278, 0x10, 0x400, 0x70bd2c, 0x25dfdbfe, {{@in6=@mcast1, @in6=@mcast2, 0x4e22, 0xcef, 0x4e23, 0x5cd9, 0xa, 0x0, 0x20, 0x6c}, {@in6=@ipv4={'\x00', '\xff\xff', @local}, 0x4d3, 0xb4}, @in=@rand_addr=0x64010102, {0xf46, 0x80000001, 0xffffffffffffffff, 0x9a, 0x81, 0x1, 0x8, 0x81}, {0x3, 0x12, 0xffffffff, 0x3}, {0x18d, 0x9, 0x7}, 0x70bd2c, 0x0, 0xa, 0x2, 0xb, 0x8}, [@migrate={0x180, 0x11, [{@in6=@dev={0xfe, 0x80, '\x00', 0x17}, @in=@initdev={0xac, 0x1e, 0x7, 0x0}, @in6=@ipv4={'\x00', '\xff\xff', @empty}, @in6=@mcast1, 0xff, 0x4, 0x0, 0x3, 0xa, 0x2}, {@in=@loopback, @in=@private=0xa010102, @in6=@private2, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x2b, 0x0, 0x0, 0x3500, 0xa, 0xa}, {@in=@private=0xa010101, @in6=@remote, @in=@multicast1, @in6=@mcast2, 0x3c, 0x4, 0x0, 0x3502, 0x2, 0x2}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in=@loopback, @in6=@empty, @in=@multicast2, 0xff, 0x4, 0x0, 0x3504, 0x2, 0xa}, {@in=@empty, @in6=@private1, @in=@empty, @in=@private=0xa010102, 0x32, 0x3, 0x0, 0x3502, 0x2, 0x2}]}, @tfcpad={0x8, 0x16, 0xc}]}, 0x278}, 0x1, 0x0, 0x0, 0x48810}, 0x4000000)
connect$can_bcm(0xffffffffffffffff, 0x0, 0x0)

2m53.427393728s ago: executing program 1 (id=1286):
ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{}, 0x0, 0x0}, 0x20)
getitimer(0x1, &(0x7f00000001c0))
r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0xce56fe61a68fc369, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10)
socketpair(0x18, 0x0, 0x2, &(0x7f0000004080))
pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000380), 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r6 = socket$can_bcm(0x1d, 0x2, 0x2)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000007400"], 0xbc}}, 0x0)
connect$can_bcm(r6, &(0x7f0000001ff0), 0x10)
sendmsg$can_bcm(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="05"], 0x20000078}}, 0x0)
sendmsg$can_bcm(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="07000000009711da94dc87db8300", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB], 0x48}}, 0x0)
timerfd_create(0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x80000e, &(0x7f0000000340)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@quota}, {@errors_remount}, {@barrier}]}, 0x3, 0x44a, &(0x7f0000000bc0)="$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")

2m49.073178535s ago: executing program 1 (id=1288):
r0 = socket$tipc(0x1e, 0x5, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r2 = dup(r1)
lseek(0xffffffffffffffff, 0x8020100001, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_open_procfs(0x0, 0x0)
r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00"/12], 0x48)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000010100008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x2d)
sendmsg$inet(r2, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000140)="be38", 0x2}], 0x1, &(0x7f0000000c80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private}}}], 0x20}, 0x0)
bind$tipc(r0, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10)
r8 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r8}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)

2m48.407097524s ago: executing program 1 (id=1291):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x52)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x4f0c3000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x4000000000000c5, 0x400)
recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10)
r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$sock_linger(r5, 0x1, 0xd, &(0x7f0000000040)={0xc, 0x1}, 0x8)
shutdown(r5, 0x0)
syz_usb_connect$hid(0x5, 0x36, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f00000003c0)={[], [{@defcontext={'defcontext', 0x3d, 'staff_u'}}, {@seclabel}, {@dont_appraise}]}, 0x1, 0xb80, &(0x7f0000000c40)="$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")
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040), 0x0)
r6 = socket(0x10, 0x3, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r8)
getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r0}, 0x10)

2m33.081817285s ago: executing program 32 (id=1291):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x52)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x4f0c3000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x4000000000000c5, 0x400)
recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10)
r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$sock_linger(r5, 0x1, 0xd, &(0x7f0000000040)={0xc, 0x1}, 0x8)
shutdown(r5, 0x0)
syz_usb_connect$hid(0x5, 0x36, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f00000003c0)={[], [{@defcontext={'defcontext', 0x3d, 'staff_u'}}, {@seclabel}, {@dont_appraise}]}, 0x1, 0xb80, &(0x7f0000000c40)="$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")
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040), 0x0)
r6 = socket(0x10, 0x3, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r8)
getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r0}, 0x10)

10.092644138s ago: executing program 4 (id=1786):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x9e, 0x17, 0x36, 0x10, 0x17ef, 0x721e, 0xde06, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6}}]}}]}}, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000880)={0x44, &(0x7f0000000640)={0x0, 0x12, 0x4, 'x./v'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

7.131311907s ago: executing program 4 (id=1800):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
accept(r2, &(0x7f0000000180)=@l2tp6={0xa, 0x0, 0x0, @initdev}, 0x0)
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10)
socket$vsock_stream(0x28, 0x1, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext3\x00', &(0x7f0000000280)='./file0\x00', 0xfb2514f08c55c983, 0x0, 0x0, 0x0, &(0x7f0000000380))
mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000780)={[{@workdir={'workdir', 0x3d, './file0'}}, {@verity_require}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c})
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000300), 0x1, 0x0)
epoll_wait(r6, &(0x7f0000000340), 0x0, 0xfff)
setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, 0x0, 0x0)
syz_usb_connect$printer(0x1, 0x36, &(0x7f00000008c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x9, 0x30, 0xe, [{{0x9, 0x4, 0x0, 0x90, 0x2, 0x7, 0x1, 0x3, 0x3, "", {{{0x9, 0x5, 0x1, 0x2, 0x8, 0x8, 0xfd, 0xfa}}, [{{0x9, 0x5, 0x82, 0x2, 0x8, 0x0, 0x3, 0x8}}]}}}]}}]}}, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x0, 0x0}, {0x0, 0x0}]})
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='tlb_flush\x00', r7}, 0x10)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000280)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r8}, 0x10)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r9}, 0x10)

4.398820542s ago: executing program 0 (id=1820):
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x20, 0x9, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x44000)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@newtaction={0x1200, 0x30, 0x300, 0x70bd2b, 0x25dfdbf8, {}, [{0x11ec, 0x1, [@m_skbedit={0x168, 0xc, 0x0, 0x0, {{0xc}, {0x4}, {0x139, 0x6, "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"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_bpf={0x1080, 0x12, 0x0, 0x0, {{0x8}, {0x58, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x6}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x4, 0x0, 0x5, 0x6, 0x400}}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0xa}, @TCA_ACT_BPF_OPS={0xc, 0x4, [{0x81, 0x0, 0x3, 0xfb}]}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1000, 0x7fff, 0x6, 0x2, 0x7}}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x3}]}, {0x1001, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x1200}}, 0x0)
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400})

4.342883503s ago: executing program 0 (id=1821):
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000740)={'syztnl2\x00', <r0=>0x0, 0x4, 0x5, 0xd, 0xaa6, 0x28, @local, @empty, 0x20, 0x7, 0xc43, 0x1707}})
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', r0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r2 = io_uring_setup(0x13b9, &(0x7f0000000100)={0x0, 0x1105})
close(r2)
syz_usb_disconnect(0xffffffffffffffff)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, @void, @value}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[], 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000500)='kmem_cache_free\x00', r3}, 0x18)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000))
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x18, 0x5, &(0x7f0000000a00)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x51, 0x0, 0x0, 0x41100, 0x60, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r4 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_tx_ring(r4, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c)
close(r4)
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f00000002c0)=[{0x6}]}, 0x10)
r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r6, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6)
bind$bt_hci(r5, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6)
bpf$MAP_DELETE_ELEM(0x15, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x20000000}, 0x20)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x76)
renameat2(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', r1, &(0x7f0000000800)='./file0\x00', 0x1)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r7}, 0x10)
pause()

3.699106032s ago: executing program 5 (id=1822):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000006900000000000000001811", @ANYRES32=r0, @ANYRESOCT=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
bind$802154_raw(0xffffffffffffffff, 0x0, 0x0)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mkdir(&(0x7f0000000440)='./file1\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f00000001c0)='./bus\x00')
bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
syz_emit_ethernet(0x62, &(0x7f00000002c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x2c, 0x6, 0x1, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xb, 0x2, 0x0, 0x0, 0x0, {[@window={0x3, 0x3, 0x8b}, @mptcp=@add_addr={0x1e, 0xf, 0x0, 0xf, 0x5, @dev={0xac, 0x14, 0x14, 0x32}, 0x91, '](9TM'}, @exp_smc={0xfe, 0x6}]}}}}}}}}, 0x0)
rmdir(&(0x7f0000000380)='./file0/../file0\x00')
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0xf)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)

3.02389678s ago: executing program 4 (id=1828):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000340)={r0, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x10)
setregid(0x0, 0x0)

2.837846403s ago: executing program 4 (id=1831):
bpf$MAP_CREATE(0x0, 0x0, 0x50)
chdir(&(0x7f0000000480)='./cgroup\x00')
r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x100)
syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x88, &(0x7f0000000200)={[{@nogrpid}, {@min_batch_time}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@nobarrier}, {@nodiscard}, {@test_dummy_encryption_v1}]}, 0x3, 0x42f, &(0x7f0000000940)="$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")
setreuid(0xee01, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = socket$key(0xf, 0x3, 0x2)
prctl$PR_MCE_KILL(0x21, 0x1, 0x1)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, 0xffffffffffffffff, 0x0)
sendmsg$key(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x4045)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0)
sendmmsg(r4, &(0x7f0000000180), 0x400008a, 0x0)
lseek(r0, 0x1, 0x1)
getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10)
pipe2$9p(&(0x7f00000000c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x0)
io_setup(0x5, &(0x7f0000000000)=<r7=>0x0)
r8 = eventfd2(0x2a23, 0x0)
io_submit(r7, 0x1, &(0x7f0000000500)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x3, 0xffffffffffffffff, &(0x7f0000000100), 0x0, 0xa, 0x0, 0x1, r8}])
mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x80000, &(0x7f0000000340)=ANY=[@ANYBLOB="7472616e733d60e92c7266056e6f3d", @ANYRESHEX=r5, @ANYRESHEX=r6, @ANYBLOB=',cache=fscache,dont_measure,euid>', @ANYRESDEC=0x0, @ANYBLOB="2c736d61636b6673666c6f6f723d7266646e6f2c7375626a5f747970653d27402d242c2ea12c6f626a5f726f6c653d002c66736e616d653d76657273696f6e3d3970323030302c6f626a5f757365723d7472616e733d66642c2c00"])

2.768951174s ago: executing program 5 (id=1833):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x20000000000000ee, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)

2.711624064s ago: executing program 3 (id=1836):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_GET(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)={0x2c, r2, 0x1, 0x0, 0x25dfdbfc, {0x1c}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}]}]}, 0x2c}}, 0x4000000)

2.711252284s ago: executing program 5 (id=1837):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$TCFLSH(r0, 0x400455c8, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r1, 0x400448de, &(0x7f00000007c0))

2.690277875s ago: executing program 3 (id=1839):
bpf$MAP_CREATE(0x0, 0x0, 0x50)
chdir(&(0x7f0000000480)='./cgroup\x00')
r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x100)
syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x88, &(0x7f0000000200)={[{@nogrpid}, {@min_batch_time}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@nobarrier}, {@nodiscard}, {@test_dummy_encryption_v1}]}, 0x3, 0x42f, &(0x7f0000000940)="$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")
setreuid(0xee01, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, 0xffffffffffffffff, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x4045)
lseek(r0, 0x1, 0x1)
getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8)

1.912211285s ago: executing program 3 (id=1841):
bpf$MAP_CREATE(0x0, 0x0, 0x50)
chdir(&(0x7f0000000480)='./cgroup\x00')
r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x100)
syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x88, &(0x7f0000000200)={[{@nogrpid}, {@min_batch_time}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@nobarrier}, {@nodiscard}, {@test_dummy_encryption_v1}]}, 0x3, 0x42f, &(0x7f0000000940)="$eJzs289rHFUcAPDvzCat/WViqT+aVo1WMfgjadJae/CiKHhQEPRQjzFJS+y2kSaCLUGjSD1Kwbt4FPwLPOlF1JPgVe9SKJJLq6eV2Z1Jdje7aZJustX9fGCS92be8t53Z97ue/N2AuhZw9mfJGJ/RPweEQO1bGOB4dq/W8uLU38vL04lUam89VdSLXdzeXGqKFq8bl+R6YtIP0viSIt65y9fOT9ZLs9cyvNjCxfeH5u/fOW52QuT52bOzVycOH365InxF05NPN+ROLO4bg59NHf08GvvXHtj6sy1d3/+Ninib4qjQ4bXO/hkpdLh6rrrQF066etiQ9iUUq2bRn+1/w9EKVZP3kC8+mlXGwdsq0qlUnmg/eGlCvA/lkS3WwB0R/FFn81/i22Hhh53hRsv1SZAWdy38q12pC/SvEx/0/y2k4Yj4szSP19lW2zPfQgAgAbfZ+OfZ1uN/9Kovy90b76GMhgR90XEwYg4FRGHIuL+iGrZByPioU3W37xIsnb8k17fUmAblI3/XszXthrHf8XoLwZLee5ANf7+5OxseeZ4/p6MRP/uLD++Th0/vPLbF+2O1Y//si2rvxgL5u243re78TXTkwuTdxJzvRufRAz1tYo/WVkJSCLicEQMbbGO2ae/Odru2O3jX0cH1pkqX0c8VTv/S9EUfyFZf31y7J4ozxwfK66KtX759eqb7eq/o/g7IDv/e1te/yvxDyb167Xzm6/j6h+ft53TbPX635W83bDvw8mFhUvjEbuS12uNrt8/0VRuYrV8Fv/Isdb9/2CsvhNHIiK7iB+OiEci4tG87Y9FxOMRcWyd+H96+Yn3th7/9srin97U+V9N7IrmPa0TpfM/ftdQ6eBm4s/O/8lqaiTfs5HPv420a2tXMwAAAPz3pBGxP5J0dCWdpqOjtd/wH4q9aXlufuGZs3MfXJyuPSMwGP1pcadroO5+6Hg+rS/yE035E/l94y9Le6r50am58nS3g4cet69N/8/8Wep264Bt53kt6F36P/Qu/R96l/4PvatF/9/TjXYAO6/V9//HXWgHsPOa+r9lP+gh5v/Qu/R/6F36P/Sk+T1x+4fkJSTWJCK9K5ohsU2Jbn8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdMa/AQAA//9QOObV")
setreuid(0xee01, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = socket$key(0xf, 0x3, 0x2)
prctl$PR_MCE_KILL(0x21, 0x1, 0x1)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, 0xffffffffffffffff, 0x0)
sendmsg$key(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x4045)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0)
sendmmsg(r4, &(0x7f0000000180), 0x400008a, 0x0)
lseek(r0, 0x1, 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10)
pipe2$9p(&(0x7f00000000c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x0)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
io_setup(0x5, &(0x7f0000000000)=<r8=>0x0)
r9 = eventfd2(0x2a23, 0x0)
io_submit(r8, 0x1, &(0x7f0000000500)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x3, r7, &(0x7f0000000100), 0x0, 0xa, 0x0, 0x1, r9}])
mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x80000, &(0x7f0000000340)=ANY=[@ANYBLOB="7472616e733d60e92c7266056e6f3d", @ANYRESHEX=r5, @ANYRESHEX=r6, @ANYBLOB=',cache=fscache,dont_measure,euid>', @ANYRESDEC=0x0, @ANYBLOB="2c736d61636b6673666c6f6f723d7266646e6f2c7375626a5f747970653d27402d242c2ea12c6f626a5f726f6c653d002c66736e616d653d76657273696f6e3d3970323030302c6f626a5f757365723d7472616e733d66642c2c00"])

1.818318636s ago: executing program 0 (id=1843):
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000740)={'syztnl2\x00', <r0=>0x0, 0x4, 0x5, 0xd, 0xaa6, 0x28, @local, @empty, 0x20, 0x7, 0xc43, 0x1707}})
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', r0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r2 = io_uring_setup(0x13b9, &(0x7f0000000100)={0x0, 0x1105})
close(r2)
syz_usb_disconnect(0xffffffffffffffff)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[], 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000500)='kmem_cache_free\x00', r3}, 0x18)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000))
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x18, 0x5, &(0x7f0000000a00)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x51, 0x0, 0x0, 0x41100, 0x60, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r4 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_tx_ring(r4, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c)
close(r4)
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f00000002c0)=[{0x6}]}, 0x10)
r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r6, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6)
bind$bt_hci(r5, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6)
bpf$MAP_DELETE_ELEM(0x15, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x20000000}, 0x20)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x76)
renameat2(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', r1, &(0x7f0000000800)='./file0\x00', 0x1)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r7}, 0x10)
pause()

1.52596754s ago: executing program 4 (id=1844):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000006900000000000000001811", @ANYRES32=r0, @ANYRESOCT=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
bind$802154_raw(0xffffffffffffffff, 0x0, 0x0)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mkdir(&(0x7f0000000440)='./file1\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f00000001c0)='./bus\x00')
bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
syz_emit_ethernet(0x62, &(0x7f00000002c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x2c, 0x6, 0x1, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xb, 0x2, 0x0, 0x0, 0x0, {[@window={0x3, 0x3, 0x8b}, @mptcp=@add_addr={0x1e, 0xf, 0x0, 0xf, 0x5, @dev={0xac, 0x14, 0x14, 0x32}, 0x91, '](9TM'}, @exp_smc={0xfe, 0x6}]}}}}}}}}, 0x0)
rmdir(&(0x7f0000000380)='./file0/../file0\x00')
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0xf)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)

946.642468ms ago: executing program 3 (id=1846):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0xf, {[@local=@item_4={0x3, 0x2, 0x2, '\x00\b\x00'}, @main=@item_4={0x3, 0x0, 0x9, "c3079b7d"}, @main=@item_012={0x2, 0x0, 0xb, "518b"}, @global=@item_012={0x1, 0x1, 0x7, "84"}]}}, 0x0}, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
getsockname$inet(r1, 0x0, 0x0)

640.828122ms ago: executing program 5 (id=1847):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000000)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)

637.468612ms ago: executing program 4 (id=1848):
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000006900000000000000001811", @ANYRES32=r0, @ANYRESOCT=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
bind$802154_raw(0xffffffffffffffff, 0x0, 0x0)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mkdir(&(0x7f0000000440)='./file1\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f00000001c0)='./bus\x00')
bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
syz_emit_ethernet(0x62, &(0x7f00000002c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x2c, 0x6, 0x1, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xb, 0x2, 0x0, 0x0, 0x0, {[@window={0x3, 0x3, 0x8b}, @mptcp=@add_addr={0x1e, 0xf, 0x0, 0xf, 0x5, @dev={0xac, 0x14, 0x14, 0x32}, 0x91, '](9TM'}, @exp_smc={0xfe, 0x6}]}}}}}}}}, 0x0)
rmdir(&(0x7f0000000380)='./file0/../file0\x00')
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0xf)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)

526.106753ms ago: executing program 5 (id=1849):
syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000040)='mnt\x00', 0x4, &(0x7f0000000000), 0x0, 0x236, &(0x7f00000006c0)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='mnt/encrypted_dir\x00', 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x800, 0x0)
openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r0, 0xc0096616, 0x0)

525.715643ms ago: executing program 5 (id=1850):
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000740)={'syztnl2\x00', <r0=>0x0, 0x4, 0x5, 0xd, 0xaa6, 0x28, @local, @empty, 0x20, 0x7, 0xc43, 0x1707}})
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', r0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r2 = io_uring_setup(0x13b9, &(0x7f0000000100)={0x0, 0x1105})
close(r2)
syz_usb_disconnect(0xffffffffffffffff)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[], 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000500)='kmem_cache_free\x00', r3}, 0x18)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000))
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x18, 0x5, &(0x7f0000000a00)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x51, 0x0, 0x0, 0x41100, 0x60, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r4 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_tx_ring(r4, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c)
close(r4)
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f00000002c0)=[{0x6}]}, 0x10)
r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r6, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6)
bind$bt_hci(r5, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6)
bpf$MAP_DELETE_ELEM(0x15, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x20000000}, 0x20)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x76)
renameat2(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', r1, &(0x7f0000000800)='./file0\x00', 0x1)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r7}, 0x10)
pause()

232.498707ms ago: executing program 3 (id=1851):
bpf$MAP_CREATE(0x0, 0x0, 0x50)
chdir(&(0x7f0000000480)='./cgroup\x00')
r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x100)
syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x88, &(0x7f0000000200)={[{@nogrpid}, {@min_batch_time}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@nobarrier}, {@nodiscard}, {@test_dummy_encryption_v1}]}, 0x3, 0x42f, &(0x7f0000000940)="$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")
setreuid(0xee01, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, 0xffffffffffffffff, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x4045)
lseek(r0, 0x1, 0x1)
getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8)

232.035537ms ago: executing program 0 (id=1852):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r0}, 0x10)
r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301)
ioctl$USBDEVFS_CONTROL(r1, 0xc0105500, &(0x7f0000000000)={0x0, 0xb, 0x10, 0x5, 0x0, 0x10001, 0x0})

224.374777ms ago: executing program 0 (id=1853):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r1}, 0x10)
syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0)

204.075817ms ago: executing program 0 (id=1854):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f00000001c0)=0x102, 0x4)
bind$inet6(r0, &(0x7f0000000240)={0xa, 0x8000002, 0x2000}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0)

138.194638ms ago: executing program 3 (id=1855):
r0 = io_uring_setup(0x2e31, &(0x7f0000000780)={0x0, 0x579d, 0x1, 0x0, 0x2c})
close_range(r0, 0xffffffffffffffff, 0x0)
io_setup(0x7f, &(0x7f0000000300)=<r1=>0x0)
clock_gettime(0x0, &(0x7f0000000000))
io_pgetevents(r1, 0x1, 0x1, &(0x7f0000000580)=[{}], 0x0, 0x0)

75.712609ms ago: executing program 2 (id=1856):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x4, 0x7fdf, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfe}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = dup2(r1, r0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r2}, 0x10)
mincore(&(0x7f0000ffa000/0x4000)=nil, 0x4000, &(0x7f00000004c0)=""/190)

75.202179ms ago: executing program 2 (id=1857):
socket$packet(0x11, 0xa, 0x300)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4)
syz_emit_ethernet(0x3e, &(0x7f0000000080)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x3c, 0x30, 0x0, 0x0, 0xfc, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x4e20, 0x1c, 0x0, @wg=@data={0x4, 0x5, 0x7, 'Fc$u'}}}}}}, 0x0)

65.184949ms ago: executing program 2 (id=1858):
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x100000002)
mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0)
ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000002600)='\x00\x00\x03\x06\x00\x00\x00\x05\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80`4/\xe9\x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a|c\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b7\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Xd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\x16\\n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x04;\xc5[\nja\xb9\'\xc9#\xfcx\x00\x00X\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~~\x84\\\xe4\x00B\x05\xd4\xea\xea\x7f=\xc6:\\N\xc3\xb7Vw\xc6\x9c\x96s\xaaHL\x96\xc72\n\x18Ynj\xceTS\xfbl\x0f\x9f8M\f\x89\xa1\xd2Hs`\x8bp\x8a\xc4%\xf8\x1d3\nV\x9a\xaf\x1f\xf96^\x93\xc1\xaf)\rg\x86\xd6\xea\xa9\x0f\x9a\xf1V\x1b\xbf\x8b\'-\xab\x8e\t7\xd3\xf7\xa9v\xfbY\xe6\x9b^d\x8c\xb1\xdd')
ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000300)='\x00\x00\x00\x06\x00\x00\x03\x00\x00x\x92\x12\xbc\x00\x00\xbb\x0642\x9c\x1a\xd1\xcbx\xb0\xd6\x1e\x10gQ\xca\x0e;\xf7\'\x8c\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn\x05\x00\x00\x00-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \xac\xc4K\x03\xfa\x13Vz\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\xfe[H\xaf\x01\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafd%\xf1\xdbjE\x01\xd1sD5hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\x851Y9OB\xdeB\xe1\x02-&\"1hS\x92\xe4$-\x02\x00\xe4\x8e\"\x85\xc9x\xef\x81E.r\x89\xe5\x00\x9e\x97\x96\xb8j\x81\xf0\xdca\xfb\xa6\xff\xff\xff\xff\x00\x00\x00\x00d\xf0\xf1j\x11\x12\xc0\xbb\xfdq~#\xf7\xa8\"$,\xf4\x84|\x89o\x00<\xa6-\xb0\xd3\x80\xbe\xcf\a\x00\xfc\xa6\xb1\x05\x94\x84l\xbfA\xeb\xd8\t\x00\x00\x00CvNhx461\x04N<\xedV\xcet\xaa~\xf3j\x94\xec\x92\x86uY\xf6\xb5\t?,~\xa67\\\xb9\xc9K\xf8\x9d\x96\xc0\xb5\xc7wF\x99\x12\x97T\x90.\x9c\xe3\x9a\xf1\xb9\x9c\x13\xbc\x19\xde/\xaahB\t\x97\a03\xcd\xb3\xc8\xd5l\x14!\xf9Xg2\x1d\xeeB\xccT\x0e\xd8\xef\xc8\xe9\xb4\xf3l\xc3\xf2\x998\xc8\xc2|2\xee\xb4W\x99f.\xeb\xe9\x05\xcbkz3+\xdd\xe1*8\x95@0t0\xad\xe3#\xd7\x19\xe7Q\xdfmI\xe5\x1e\xe4\x87\xc9\x8f\xa7\xe0\xd9v\xf6\x01\x9d\x8f`,\x1a8\x81I\x86l\x8f2\r:\xc1\x02\xd6Z%\xa7Ks\x8bUolS\x05\xbe\x97\x1fGe\x94\xa6\xa3\xab\xdb\r\x17\xff[\xb1\x00\xff\x7f\x00\x00\x00\x00')

33.374569ms ago: executing program 2 (id=1859):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10)
time(0x0)

21.340669ms ago: executing program 2 (id=1860):
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f})
write$uinput_user_dev(r0, &(0x7f0000000380)={'syz0\x00', {0xff, 0x6, 0x7fff, 0x8d5}, 0x24, [0x10000, 0xeba, 0x7, 0xe6a, 0x8, 0x1, 0x5, 0x7ff, 0x54, 0x7fffdfff, 0x2, 0xc, 0x8, 0x9, 0x9, 0xfffffff7, 0x7, 0x40000, 0xa, 0x23, 0x2, 0x0, 0x3ff, 0xfffffff4, 0x1, 0xda6, 0x3, 0xa7, 0xeb36, 0x2, 0x9, 0x76c9, 0x200, 0x1, 0x1, 0x1, 0x7, 0x9, 0xf, 0xb, 0x10, 0x80000000, 0x9, 0xb50, 0x0, 0x800, 0x3, 0xffffffff, 0x7, 0xfffffffe, 0x5, 0x8, 0x24, 0x7fff, 0x8, 0x1, 0x200, 0x0, 0x0, 0x7f, 0x964e, 0x2d5, 0x149, 0x1], [0x66ac, 0xfffffff9, 0x4, 0x3, 0x8e, 0x7, 0x13e, 0x9, 0x4, 0x2, 0x0, 0x7, 0x6, 0x8001, 0x9, 0x8, 0x2, 0x5, 0x40, 0x7ff, 0x7ff, 0x5, 0x9, 0xc00, 0x89, 0x7ff, 0x0, 0x1, 0xfffffff7, 0x9, 0x9, 0x4d26, 0x10000, 0x8, 0x1, 0x6, 0x0, 0x4, 0x4c, 0x9, 0x8, 0x5, 0xe66, 0x8, 0x2, 0x81, 0x4b, 0x80, 0x6, 0xb, 0x4, 0x9, 0x1, 0x8d1, 0x8fd, 0xfffffffa, 0xe0, 0x8e, 0x10001, 0x4, 0x401, 0xade, 0x7f, 0x9], [0x8396, 0x7, 0x6, 0x9, 0x8000, 0x1, 0x9, 0xe88, 0x8, 0x6, 0x0, 0x400, 0x1000, 0x9, 0x6e, 0x8000, 0x7, 0x3, 0x6, 0x5, 0x3, 0xc9, 0x2, 0x3, 0x0, 0x2, 0x2, 0xc, 0x5, 0xb0f, 0x1e, 0x3, 0x800, 0x8, 0x9, 0x3, 0x4, 0xfffffff7, 0x4, 0xe, 0x464b, 0x6, 0x2e7, 0x7ff, 0x1ff, 0x6, 0x87ff, 0x2, 0x7fffffff, 0xffffffff, 0x4, 0xffff, 0xd5d, 0xa0c787d, 0xffffff4e, 0x9, 0x4, 0x40, 0x3, 0x0, 0x1fc1, 0x9, 0x1, 0x3], [0x10000010, 0x7, 0x9, 0x2, 0xa5e, 0xfe, 0xff, 0x3, 0x80000000, 0x0, 0xe, 0x2, 0x4, 0x7, 0x7, 0x0, 0xfffffffd, 0xfffffff8, 0xc, 0x4, 0x3, 0x103, 0x6, 0xcc, 0x6, 0x4000400, 0xffffffff, 0xfffffffb, 0x40, 0x80000000, 0x4, 0x7, 0xfff, 0x40, 0x9, 0x0, 0x9, 0x1, 0x0, 0x7, 0x8ac1, 0x3, 0x4, 0x80000002, 0x80000002, 0xff, 0x6, 0x3, 0xfffff801, 0xffffffff, 0x37d, 0xfffffff8, 0xd, 0x7, 0xd, 0x9, 0x6eaf, 0x0, 0x401, 0x5e02, 0x2, 0x3, 0x5, 0x400]}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
ioctl$UI_DEV_CREATE(r0, 0x5501)

0s ago: executing program 2 (id=1861):
bpf$MAP_CREATE(0x0, 0x0, 0x50)
chdir(&(0x7f0000000480)='./cgroup\x00')
r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x100)
syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x88, &(0x7f0000000200)={[{@nogrpid}, {@min_batch_time}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@nobarrier}, {@nodiscard}, {@test_dummy_encryption_v1}]}, 0x3, 0x42f, &(0x7f0000000940)="$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")
setreuid(0xee01, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = socket$key(0xf, 0x3, 0x2)
prctl$PR_MCE_KILL(0x21, 0x1, 0x1)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, 0xffffffffffffffff, 0x0)
sendmsg$key(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x4045)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0)
sendmmsg(r4, &(0x7f0000000180), 0x400008a, 0x0)
getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10)
pipe2$9p(&(0x7f00000000c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x0)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
io_setup(0x5, &(0x7f0000000000)=<r8=>0x0)
r9 = eventfd2(0x2a23, 0x0)
io_submit(r8, 0x1, &(0x7f0000000500)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x3, r7, &(0x7f0000000100), 0x0, 0xa, 0x0, 0x1, r9}])
mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x80000, &(0x7f0000000340)=ANY=[@ANYBLOB="7472616e733d60e92c7266056e6f3d", @ANYRESHEX=r5, @ANYRESHEX=r6, @ANYBLOB=',cache=fscache,dont_measure,euid>', @ANYRESDEC=0x0, @ANYBLOB="2c736d61636b6673666c6f6f723d7266646e6f2c7375626a5f747970653d27402d242c2ea12c6f626a5f726f6c653d002c66736e616d653d76657273696f6e3d3970323030302c6f626a5f757365723d7472616e733d66642c2c00"])

kernel console output (not intermixed with test programs):

rch=c000003e syscall=202 compat=0 ip=0x7f0741b8e969 code=0x7ffc0000
[  243.790343][   T28] audit: type=1326 audit(1747352964.287:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2200 comm="syz.2.418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0741b8e969 code=0x7ffc0000
[  243.815067][   T28] audit: type=1326 audit(1747352964.287:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2200 comm="syz.2.418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f0741b8e969 code=0x7ffc0000
[  243.838461][   T28] audit: type=1326 audit(1747352964.287:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2200 comm="syz.2.418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0741b8e969 code=0x7ffc0000
[  244.550101][ T2216] loop1: detected capacity change from 0 to 128
[  245.390121][ T2216] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  245.626146][ T2216] EXT4-fs (loop1): unmounting filesystem.
[  247.315881][ T2232] IPv6: sit1: Disabled Multicast RS
[  247.862616][ T2255] ./file0: Can't open blockdev
[  248.146402][ T2255] loop4: detected capacity change from 0 to 40427
[  248.157579][ T2255] F2FS-fs (loop4): Unrecognized mount option "whint_mode=off" or missing value
[  248.516085][ T2264] overlayfs: failed to clone upperpath
[  249.060291][ T2271] loop1: detected capacity change from 0 to 1024
[  249.082362][ T2271] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  249.526416][   T28] kauditd_printk_skb: 47 callbacks suppressed
[  249.526431][   T28] audit: type=1400 audit(1747352970.367:392): avc:  denied  { sqpoll } for  pid=2275 comm="syz.3.437" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[  249.784682][ T2289] loop2: detected capacity change from 0 to 256
[  249.808830][   T28] audit: type=1326 audit(1747352970.647:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2280 comm="syz.2.438" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0741b8e969 code=0x0
[  249.993053][  T282] EXT4-fs (loop1): unmounting filesystem.
[  250.297506][   T28] audit: type=1400 audit(1747352971.137:394): avc:  denied  { read } for  pid=2291 comm="syz.3.442" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  251.254375][ T2298] sch_tbf: burst 1399 is lower than device veth0_to_team mtu (1514) !
[  252.516025][ T2307] 9pnet_virtio: no channels available for device syz
[  253.127819][ T2316] loop0: detected capacity change from 0 to 128
[  253.135073][ T2316] EXT4-fs (loop0): Test dummy encryption mode enabled
[  253.144251][ T2316] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  253.153188][ T2316] ext4 filesystem being mounted at /97/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  253.298269][ T2323] can0: slcan on ptm0.
[  253.315028][   T28] audit: type=1400 audit(1747352974.147:395): avc:  denied  { watch watch_reads } for  pid=2313 comm="syz.0.448" path="/97/mnt" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  253.333888][ T2323] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni"
[  253.345292][   T28] audit: type=1400 audit(1747352974.147:396): avc:  denied  { read } for  pid=141 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1
[  253.377132][ T2329] futex_wake_op: syz.0.448 tries to shift op by -1; fix this program
[  253.390899][   T28] audit: type=1400 audit(1747352974.147:397): avc:  denied  { search } for  pid=141 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  253.430968][   T28] audit: type=1400 audit(1747352974.147:398): avc:  denied  { read } for  pid=141 comm="dhcpcd" name="n15" dev="tmpfs" ino=4020 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  253.476122][   T28] audit: type=1400 audit(1747352974.147:399): avc:  denied  { open } for  pid=141 comm="dhcpcd" path="/run/udev/data/n15" dev="tmpfs" ino=4020 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  253.541365][   T28] audit: type=1400 audit(1747352974.147:400): avc:  denied  { getattr } for  pid=141 comm="dhcpcd" path="/run/udev/data/n15" dev="tmpfs" ino=4020 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  253.573004][   T28] audit: type=1400 audit(1747352974.417:401): avc:  denied  { read } for  pid=2332 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=494 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  253.664324][ T1726] IPv6: ADDRCONF(NETDEV_CHANGE): can0: link becomes ready
[  254.117313][ T2356] fuse: Invalid rootmode
[  254.123255][ T2356] overlayfs: missing 'workdir'
[  254.253393][ T2316] can0 (unregistered): slcan off ptm0.
[  254.414329][  T284] EXT4-fs (loop0): unmounting filesystem.
[  254.891026][ T2379] capability: warning: `syz.3.455' uses deprecated v2 capabilities in a way that may be insecure
[  255.744922][ T2405] loop1: detected capacity change from 0 to 8192
[  255.761619][ T2402] loop2: detected capacity change from 0 to 512
[  255.768661][ T2402] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  255.799755][ T2402] EXT4-fs (loop2): 1 truncate cleaned up
[  255.809434][ T2402] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  255.841110][ T2402] EXT4-fs error (device loop2): mb_free_blocks:1815: group 0, inode 16: block 33:freeing already freed block (bit 32); block bitmap corrupt.
[  256.666999][ T2408] netlink: 8 bytes leftover after parsing attributes in process `syz.3.460'.
[  257.034514][ T2402] EXT4-fs (loop2): Remounting filesystem read-only
[  257.070177][ T2409] netlink: 44 bytes leftover after parsing attributes in process `syz.1.458'.
[  257.080844][ T2409] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2409 comm=syz.1.458
[  257.097918][ T2402] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #16: comm syz.2.459: invalid indirect mapped block 3489660928 (level 0)
[  257.112892][ T2402] EXT4-fs (loop2): Remounting filesystem read-only
[  257.119574][ T2402] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #16: comm syz.2.459: invalid indirect mapped block 6 (level 1)
[  257.133413][ T2402] EXT4-fs (loop2): Remounting filesystem read-only
[  257.721560][ T2421] overlayfs: overlapping lowerdir path
[  258.264347][ T2425] overlayfs: failed to clone upperpath
[  258.432791][  T286] EXT4-fs (loop2): unmounting filesystem.
[  258.524851][ T2433] netlink: 24 bytes leftover after parsing attributes in process `syz.0.468'.
[  258.734346][ T2440] input: syz1 as /devices/virtual/input/input5
[  258.810846][  T287] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[  259.050728][  T287] usb 1-1: Using ep0 maxpacket: 32
[  259.057095][  T287] usb 1-1: config 0 has an invalid interface number: 250 but max is 2
[  259.065395][  T287] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  259.075557][  T287] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 3
[  259.084636][  T287] usb 1-1: config 0 has no interface number 0
[  259.094827][  T287] usb 1-1: New USB device found, idVendor=0408, idProduct=3090, bcdDevice=a6.3f
[  259.104653][  T287] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  259.114274][  T287] usb 1-1: Product: syz
[  259.121608][  T287] usb 1-1: Manufacturer: syz
[  259.126407][  T287] usb 1-1: SerialNumber: syz
[  259.168954][  T287] usb 1-1: config 0 descriptor??
[  259.383024][  T849] usb 1-1: USB disconnect, device number 2
[  261.202413][ T2465] incfs: mount failed -22
[  261.625945][ T2475] netlink: 16 bytes leftover after parsing attributes in process `syz.3.478'.
[  261.986970][ T2489] loop4: detected capacity change from 0 to 256
[  261.997614][   T28] kauditd_printk_skb: 10 callbacks suppressed
[  261.997629][   T28] audit: type=1400 audit(1747352982.837:412): avc:  denied  { name_bind } for  pid=2488 comm="syz.4.485" src=65530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=rawip_socket permissive=1
[  261.999858][ T2489] device wg2 left promiscuous mode
[  262.054780][ T2491] loop4: detected capacity change from 0 to 256
[  262.081429][  T326] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  266.872824][ T2540] syz.2.498[2540] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  266.873358][ T2540] syz.2.498[2540] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  266.967376][ T2540] loop2: detected capacity change from 0 to 512
[  267.061302][ T2540] loop2: detected capacity change from 0 to 4096
[  267.067995][ T2540] ext4: Unknown parameter 'euid<00000000000000000000'
[  267.330795][   T28] audit: type=1400 audit(1747352988.127:413): avc:  denied  { write } for  pid=2533 comm="syz.2.498" name="config" dev="proc" ino=4026532715 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1
[  269.828085][ T2556] loop4: detected capacity change from 0 to 512
[  269.863116][   T28] audit: type=1400 audit(1747352990.707:414): avc:  denied  { unmount } for  pid=286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1
[  269.960206][ T2556] EXT4-fs error (device loop4): ext4_orphan_get:1400: inode #15: comm syz.4.503: casefold flag without casefold feature
[  269.997999][ T2556] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.503: couldn't read orphan inode 15 (err -117)
[  270.021738][ T2556] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  270.031188][ T2561] overlayfs: failed to clone upperpath
[  270.312021][ T2577] overlayfs: failed to resolve './file2': -2
[  270.764992][  T285] EXT4-fs (loop4): unmounting filesystem.
[  271.194143][ T2592] overlayfs: failed to clone upperpath
[  271.446649][ T2596] netlink: 20 bytes leftover after parsing attributes in process `syz.0.513'.
[  272.219449][ T2605] overlayfs: failed to clone upperpath
[  272.236131][ T2605] netlink: 68 bytes leftover after parsing attributes in process `syz.3.515'.
[  272.963898][ T2615] xt_hashlimit: max too large, truncated to 1048576
[  274.544278][ T2646] hub 8-0:1.0: USB hub found
[  274.549908][ T2646] hub 8-0:1.0: 1 port detected
[  274.930458][ T2652] loop0: detected capacity change from 0 to 256
[  275.044012][ T2655] loop2: detected capacity change from 0 to 512
[  275.400280][ T2655] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  275.414714][ T2655] ext4 filesystem being mounted at /93/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  275.549367][  T286] EXT4-fs (loop2): unmounting filesystem.
[  275.923043][ T2674] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  277.715679][ T2675] overlayfs: missing 'lowerdir'
[  277.853033][ T2681] loop0: detected capacity change from 0 to 512
[  277.906951][ T2681] EXT4-fs: Ignoring removed nobh option
[  277.916682][ T2681] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  277.967807][ T2681] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.534: invalid indirect mapped block 256 (level 2)
[  277.969153][ T2683] loop1: detected capacity change from 0 to 2048
[  277.987812][ T2683] EXT4-fs: Ignoring removed mblk_io_submit option
[  278.000795][ T2683] EXT4-fs: dax option not supported
[  278.023303][ T2681] EXT4-fs (loop0): 2 truncates cleaned up
[  278.029494][ T2681] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  278.105782][ T2694] loop2: detected capacity change from 0 to 128
[  279.446763][ T2699] FAT-fs (loop2): error, invalid access to FAT (entry 0x0fffff00)
[  279.454689][ T2699] FAT-fs (loop2): Filesystem has been set read-only
[  279.461459][ T2699] FAT-fs (loop2): error, invalid access to FAT (entry 0x0fffff00)
[  279.476273][  T284] EXT4-fs (loop0): unmounting filesystem.
[  280.271454][ T2717] 9pnet_virtio: no channels available for device syz
[  280.606544][ T2721] overlayfs: failed to clone upperpath
[  281.079207][ T2727] loop4: detected capacity change from 0 to 128
[  281.151611][ T2727] FAT-fs (loop4): bogus number of reserved sectors
[  281.158517][ T2727] FAT-fs (loop4): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero
[  281.167904][ T2727] FAT-fs (loop4): Can't find a valid FAT filesystem
[  282.764464][ T2743] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  282.772398][ T2743] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  283.639758][ T2742] fuse: Invalid rootmode
[  284.144251][ T2764] usb usb8: usbfs: process 2764 (syz.4.555) did not claim interface 0 before use
[  284.167763][ T2764] netlink: 12 bytes leftover after parsing attributes in process `syz.4.555'.
[  284.720969][ T2766] xt_l2tp: wrong L2TP version: 0
[  284.727018][ T2766] netlink: 24 bytes leftover after parsing attributes in process `syz.1.554'.
[  287.046775][ T2785] loop2: detected capacity change from 0 to 256
[  287.058400][ T2785] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d)
[  287.188705][ T2788] loop4: detected capacity change from 0 to 256
[  287.211265][ T2788] exFAT-fs (loop4): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d)
[  288.362487][ T2805] loop4: detected capacity change from 0 to 1024
[  288.369202][ T2805] EXT4-fs: Ignoring removed orlov option
[  288.388020][ T2805] ext4: Unknown parameter 'fowner>00000000000000000000'
[  288.392434][ T2808] loop2: detected capacity change from 0 to 1024
[  288.510262][ T2808] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  289.784455][ T2815] device pim6reg1 entered promiscuous mode
[  289.935873][   T28] audit: type=1400 audit(1747353010.777:415): avc:  denied  { rmdir } for  pid=286 comm="syz-executor" name=".index" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1
[  290.165541][  T286] EXT4-fs (loop2): unmounting filesystem.
[  290.749769][   T28] audit: type=1326 audit(1747353011.587:416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2826 comm="syz.1.574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06da58e969 code=0x7ffc0000
[  291.453362][ T2828] netlink: 8 bytes leftover after parsing attributes in process `syz.4.573'.
[  292.031140][ T2833] netlink: 8 bytes leftover after parsing attributes in process `syz.1.574'.
[  292.098677][ T2830] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  292.821635][   T28] audit: type=1326 audit(1747353011.587:417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2826 comm="syz.1.574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f06da590887 code=0x7ffc0000
[  292.845042][   T28] audit: type=1326 audit(1747353011.587:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2826 comm="syz.1.574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f06da5907fc code=0x7ffc0000
[  292.897164][   T28] audit: type=1326 audit(1747353011.587:419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2826 comm="syz.1.574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f06da590734 code=0x7ffc0000
[  292.928144][   T28] audit: type=1326 audit(1747353011.587:420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2826 comm="syz.1.574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f06da590734 code=0x7ffc0000
[  292.952099][   T28] audit: type=1326 audit(1747353011.587:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2826 comm="syz.1.574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f06da58d5ca code=0x7ffc0000
[  292.975466][   T28] audit: type=1326 audit(1747353011.587:422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2826 comm="syz.1.574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06da58e969 code=0x7ffc0000
[  292.999216][   T28] audit: type=1326 audit(1747353011.587:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2826 comm="syz.1.574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f06da58e969 code=0x7ffc0000
[  293.023572][   T28] audit: type=1326 audit(1747353011.587:424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2826 comm="syz.1.574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06da58e969 code=0x7ffc0000
[  293.776216][ T2857] loop4: detected capacity change from 0 to 128
[  293.789271][ T2857] EXT4-fs (loop4): Test dummy encryption mode enabled
[  293.815666][ T2857] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  293.824666][ T2857] ext4 filesystem being mounted at /113/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  293.926221][ T2866] can0: slcan on ptm0.
[  293.940922][ T2866] futex_wake_op: syz.4.582 tries to shift op by -1; fix this program
[  295.109873][ T2865] loop1: detected capacity change from 0 to 512
[  295.130534][ T2877] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  295.138130][ T2877] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  295.277440][ T2865] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  295.307760][ T2865] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2186: inode #15: comm syz.1.584: corrupted in-inode xattr
[  295.321795][ T2865] EXT4-fs (loop1): Remounting filesystem read-only
[  295.328643][ T2865] EXT4-fs (loop1): 1 truncate cleaned up
[  295.334423][ T2865] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  295.431649][ T2857] can0 (unregistered): slcan off ptm0.
[  295.547403][  T285] EXT4-fs (loop4): unmounting filesystem.
[  295.561345][  T282] EXT4-fs (loop1): unmounting filesystem.
[  295.579557][   T28] kauditd_printk_skb: 25 callbacks suppressed
[  295.579572][   T28] audit: type=1326 audit(1747353016.417:450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2904 comm="syz.3.588" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f769218e969 code=0x0
[  295.582267][ T2903] loop2: detected capacity change from 0 to 256
[  295.661270][ T2903] bridge0: port 2(bridge_slave_1) entered disabled state
[  295.668510][ T2903] bridge0: port 1(bridge_slave_0) entered disabled state
[  295.896882][ T2914] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  296.662944][ T2913] IPv6: sit1: Disabled Multicast RS
[  296.799893][ T2923] loop2: detected capacity change from 0 to 2048
[  297.023850][ T2923] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  297.225699][   T28] audit: type=1400 audit(1747353018.067:451): avc:  denied  { read append open } for  pid=2922 comm="syz.2.590" path="/108/file0/hugetlb.2MB.usage_in_bytes" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[  297.305171][   T28] audit: type=1400 audit(1747353018.147:452): avc:  denied  { map } for  pid=2922 comm="syz.2.590" path="/108/file0/hugetlb.2MB.usage_in_bytes" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[  297.330062][   T28] audit: type=1400 audit(1747353018.147:453): avc:  denied  { write } for  pid=2922 comm="syz.2.590" path="/108/file0/hugetlb.2MB.usage_in_bytes" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[  297.373494][ T2931] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.590: bg 0: block 234: padding at end of block bitmap is not set
[  297.390119][ T2931] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28
[  297.404740][ T2931] EXT4-fs (loop2): This should not happen!! Data will be lost
[  297.404740][ T2931] 
[  297.414755][ T2931] EXT4-fs (loop2): Total free blocks count 0
[  297.421020][ T2931] EXT4-fs (loop2): Free/Dirty block details
[  297.426979][ T2931] EXT4-fs (loop2): free_blocks=0
[  297.432255][ T2931] EXT4-fs (loop2): dirty_blocks=2592
[  297.437598][ T2931] EXT4-fs (loop2): Block reservation details
[  297.454955][ T2942] netlink: 4 bytes leftover after parsing attributes in process `syz.1.596'.
[  297.463905][ T2931] EXT4-fs (loop2): i_reserved_data_blocks=162
[  297.502317][  T304] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 538 with error 28
[  297.601137][   T28] audit: type=1400 audit(1747353018.447:454): avc:  denied  { ioctl } for  pid=2922 comm="syz.2.590" path="/108/file0/hugetlb.2MB.usage_in_bytes" dev="loop2" ino=18 ioctlcmd=0xae67 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[  297.629547][ T2946] netlink: 4 bytes leftover after parsing attributes in process `syz.1.596'.
[  297.983768][ T2942] loop1: detected capacity change from 0 to 40427
[  298.011083][ T2942] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[  298.028149][ T2953] loop2: detected capacity change from 0 to 128
[  298.037731][ T2942] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  298.050789][ T2942] F2FS-fs (loop1): Unrecognized mount option "·" or missing value
[  298.068513][ T2953] EXT4-fs (loop2): Test dummy encryption mode enabled
[  298.089950][ T2953] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  298.217888][ T2956] loop0: detected capacity change from 0 to 128
[  298.248794][ T2953] ext4 filesystem being mounted at /109/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  298.320295][ T2956] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  299.352161][ T2956] EXT4-fs (loop0): unmounting filesystem.
[  299.373031][ T2960] can0: slcan on ptm0.
[  299.542460][ T2958] futex_wake_op: syz.2.598 tries to shift op by -1; fix this program
[  299.619687][ T2967] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  300.012288][  T287] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  300.091685][ T2953] can0 (unregistered): slcan off ptm0.
[  300.117184][  T286] EXT4-fs (loop2): unmounting filesystem.
[  300.430700][  T287] usb 5-1: Using ep0 maxpacket: 32
[  300.438112][  T287] usb 5-1: config 0 has an invalid descriptor of length 219, skipping remainder of the config
[  300.521172][ T3005] sch_tbf: burst 1399 is lower than device veth0_to_team mtu (1514) !
[  301.072451][  T287] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  301.086089][  T287] usb 5-1: New USB device found, idVendor=06cb, idProduct=73f6, bcdDevice= 0.00
[  301.095418][  T287] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  301.105466][  T287] usb 5-1: config 0 descriptor??
[  301.369398][ T3009] IPv6: sit1: Disabled Multicast RS
[  302.744208][  T287] usb 5-1: string descriptor 0 read error: -71
[  302.750945][  T287] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[  302.760441][  T287] usb 5-1: USB disconnect, device number 2
[  302.989315][ T3030] loop4: detected capacity change from 0 to 512
[  303.463314][ T3030] EXT4-fs (loop4): 1 orphan inode deleted
[  303.469191][ T3030] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  303.479139][ T3030] ext4 filesystem being mounted at /117/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  303.911379][  T304] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14
[  303.929867][  T304] EXT4-fs error (device loop4): ext4_release_dquot:6812: comm kworker/u4:3: Failed to release dquot type 1
[  305.250598][  T285] EXT4-fs (loop4): unmounting filesystem.
[  307.278605][ T3081] sch_tbf: burst 1399 is lower than device veth0_to_team mtu (1514) !
[  308.077428][ T3084] device pim6reg1 entered promiscuous mode
[  308.504402][ T3086] loop2: detected capacity change from 0 to 2048
[  308.512073][ T3086] EXT4-fs: Ignoring removed mblk_io_submit option
[  308.528596][ T3086] EXT4-fs: dax option not supported
[  311.638575][ T3135] xt_hashlimit: size too large, truncated to 1048576
[  311.935191][ T3142] device pim6reg1 entered promiscuous mode
[  312.807151][ T3156] IPv6: sit1: Disabled Multicast RS
[  315.167061][ T3170] fuse: Invalid rootmode
[  315.181333][ T3179] netlink: 8 bytes leftover after parsing attributes in process `syz.2.650'.
[  315.759879][ T3183] netlink: 24 bytes leftover after parsing attributes in process `syz.3.651'.
[  316.452005][ T3196] loop4: detected capacity change from 0 to 512
[  316.462799][ T3196] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  316.471872][ T3196] ext4 filesystem being mounted at /124/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  316.682158][ T3204] tipc: Started in network mode
[  316.687303][ T3204] tipc: Node identity aaaaaaaaaa32, cluster identity 4711
[  316.694831][ T3204] tipc: Enabled bearer <eth:vlan0>, priority 10
[  317.332998][  T285] EXT4-fs (loop4): unmounting filesystem.
[  318.231963][  T287] tipc: Node number set to 10005162
[  319.945423][ T3239] overlayfs: failed to resolve './file0': -2
[  320.751507][ T3247] loop4: detected capacity change from 0 to 256
[  320.760900][ T3247] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x36e06c6e, utbl_chksum : 0xe619d30d)
[  321.598136][ T3266] overlayfs: failed to clone upperpath
[  323.797680][ T3270] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  324.039826][ T3286] overlayfs: failed to clone upperpath
[  324.360718][  T287] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  324.561205][  T287] usb 5-1: Using ep0 maxpacket: 32
[  324.568248][  T287] usb 5-1: config 0 has an invalid descriptor of length 219, skipping remainder of the config
[  324.578914][  T287] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  324.592251][  T287] usb 5-1: New USB device found, idVendor=06cb, idProduct=73f6, bcdDevice= 0.00
[  324.601696][  T287] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  324.611162][  T287] usb 5-1: config 0 descriptor??
[  325.034791][   T28] audit: type=1326 audit(1747353045.767:455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3288 comm="syz.1.681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06da58e969 code=0x7ffc0000
[  325.068380][   T28] audit: type=1326 audit(1747353045.767:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3288 comm="syz.1.681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06da58e969 code=0x7ffc0000
[  325.106900][   T28] audit: type=1326 audit(1747353045.777:457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3288 comm="syz.1.681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=252 compat=0 ip=0x7f06da58e969 code=0x7ffc0000
[  325.130378][   T28] audit: type=1326 audit(1747353045.777:458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3288 comm="syz.1.681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06da58e969 code=0x7ffc0000
[  325.161187][   T28] audit: type=1326 audit(1747353045.777:459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3288 comm="syz.1.681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06da58e969 code=0x7ffc0000
[  325.184849][   T28] audit: type=1326 audit(1747353045.777:460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3288 comm="syz.1.681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f06da58e969 code=0x7ffc0000
[  325.209283][   T28] audit: type=1326 audit(1747353045.787:461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3288 comm="syz.1.681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06da58e969 code=0x7ffc0000
[  325.239874][   T28] audit: type=1326 audit(1747353045.787:462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3288 comm="syz.1.681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06da58e969 code=0x7ffc0000
[  325.263695][   T28] audit: type=1326 audit(1747353045.787:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3288 comm="syz.1.681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=151 compat=0 ip=0x7f06da58e969 code=0x7ffc0000
[  325.287225][   T28] audit: type=1326 audit(1747353045.837:464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3288 comm="syz.1.681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06da58e969 code=0x7ffc0000
[  325.406514][ T3300] syz.2.683[3300] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  325.406617][ T3300] syz.2.683[3300] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  326.542914][  T287] usb 5-1: string descriptor 0 read error: -71
[  326.577630][  T287] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[  326.855421][  T287] usb 5-1: USB disconnect, device number 3
[  329.503735][ T3324] input: syz1 as /devices/virtual/input/input6
[  329.926736][ T3332] ./file0: Can't open blockdev
[  331.070552][ T3334] netlink: 8 bytes leftover after parsing attributes in process `syz.0.690'.
[  332.309033][ T3340] IPv6: sit1: Disabled Multicast RS
[  332.704007][ T3349] loop4: detected capacity change from 0 to 512
[  332.732717][ T3349] EXT4-fs (loop4): 1 orphan inode deleted
[  332.738619][ T3349] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  332.747958][ T3349] ext4 filesystem being mounted at /131/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  332.759421][   T10] __quota_error: 2 callbacks suppressed
[  332.759437][   T10] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14
[  332.809302][   T10] EXT4-fs error (device loop4): ext4_release_dquot:6812: comm kworker/u4:1: Failed to release dquot type 1
[  334.348868][ T3366] netlink: 20 bytes leftover after parsing attributes in process `syz.1.698'.
[  334.395216][ T3366] device vlan3 entered promiscuous mode
[  334.400896][ T3366] device bridge0 entered promiscuous mode
[  335.538296][   T28] audit: type=1400 audit(1747353056.377:467): avc:  denied  { execute } for  pid=3348 comm="syz.4.695" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  335.574141][   T28] audit: type=1400 audit(1747353056.377:468): avc:  denied  { execute_no_trans } for  pid=3348 comm="syz.4.695" path="/131/file1/file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  338.414523][  T285] EXT4-fs (loop4): unmounting filesystem.
[  338.621195][   T28] audit: type=1400 audit(1747353059.467:469): avc:  denied  { read write } for  pid=3395 comm="syz.2.707" name="binder1" dev="binder" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  338.923359][ T3402] netlink: 8 bytes leftover after parsing attributes in process `syz.3.706'.
[  338.984354][   T28] audit: type=1400 audit(1747353059.467:470): avc:  denied  { open } for  pid=3395 comm="syz.2.707" path="/dev/binderfs/binder1" dev="binder" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  339.331132][ T3405] loop4: detected capacity change from 0 to 256
[  339.337911][   T28] audit: type=1400 audit(1747353060.177:471): avc:  denied  { remount } for  pid=3404 comm="syz.4.708" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  340.772081][ T3417] netlink: 12 bytes leftover after parsing attributes in process `syz.4.708'.
[  340.800746][ T3419] bridge0: port 3(gretap0) entered blocking state
[  340.807267][ T3419] bridge0: port 3(gretap0) entered disabled state
[  340.815123][ T3419] device gretap0 entered promiscuous mode
[  340.821374][ T3419] bridge0: port 3(gretap0) entered blocking state
[  340.827854][ T3419] bridge0: port 3(gretap0) entered forwarding state
[  340.843141][ T3419] device gretap0 left promiscuous mode
[  340.848909][ T3419] bridge0: port 3(gretap0) entered disabled state
[  346.053782][ T3474] loop4: detected capacity change from 0 to 512
[  346.060978][ T3474] EXT4-fs: Ignoring removed i_version option
[  346.067063][ T3474] EXT4-fs: Ignoring removed mblk_io_submit option
[  346.099042][ T3474] EXT4-fs (loop4): Test dummy encryption mode enabled
[  346.429518][ T3474] EXT4-fs error (device loop4): ext4_orphan_get:1400: comm syz.4.722: inode #13: comm syz.4.722: iget: illegal inode #
[  346.442988][ T3474] EXT4-fs (loop4): Remounting filesystem read-only
[  346.449537][ T3474] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.722: couldn't read orphan inode 13 (err -117)
[  346.462619][ T3474] EXT4-fs (loop4): Remounting filesystem read-only
[  346.469202][ T3474] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  346.505898][ T3478] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 426: padding at end of block bitmap is not set
[  346.842468][ T3478] EXT4-fs (loop4): Remounting filesystem read-only
[  346.953933][  T285] EXT4-fs (loop4): unmounting filesystem.
[  347.116509][   T28] audit: type=1400 audit(1747353067.957:472): avc:  denied  { read } for  pid=3468 comm="syz.1.723" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1
[  347.522330][   T28] audit: type=1400 audit(1747353068.347:473): avc:  denied  { accept } for  pid=3494 comm="syz.3.728" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  347.555691][ T3496] netlink: 156 bytes leftover after parsing attributes in process `syz.3.728'.
[  347.828942][ T3499] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=256 sclass=netlink_route_socket pid=3499 comm=syz.3.728
[  348.135773][ T3501] loop4: detected capacity change from 0 to 128
[  348.470263][ T3510] FAT-fs (loop4): error, invalid access to FAT (entry 0x0fffff00)
[  348.478190][ T3510] FAT-fs (loop4): Filesystem has been set read-only
[  348.485612][ T3510] FAT-fs (loop4): error, invalid access to FAT (entry 0x0fffff00)
[  350.686131][ T3517] I/O error, dev loop9, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2
[  350.695886][   T28] audit: type=1400 audit(1747353071.527:474): avc:  denied  { ioctl } for  pid=3516 comm="syz.4.731" path="/dev/binderfs/binder0" dev="binder" ino=7 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  350.726861][ T3517] EXT4-fs (loop9): unable to read superblock
[  350.736608][   T28] audit: type=1400 audit(1747353071.527:475): avc:  denied  { set_context_mgr } for  pid=3516 comm="syz.4.731" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1
[  350.758001][   T28] audit: type=1400 audit(1747353071.527:476): avc:  denied  { create } for  pid=3516 comm="syz.4.731" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  350.779004][   T28] audit: type=1400 audit(1747353071.527:477): avc:  denied  { mounton } for  pid=3516 comm="syz.4.731" path="/138/file0" dev="tmpfs" ino=904 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  352.281387][ T3534] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=10 sclass=netlink_route_socket pid=3534 comm=syz.0.736
[  352.341729][ T3534] input: syz1 as /devices/virtual/input/input7
[  352.618136][   T28] audit: type=1400 audit(1747353073.457:478): avc:  denied  { unlink } for  pid=285 comm="syz-executor" name="file0" dev="tmpfs" ino=904 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  352.878860][ T3549] netlink: 12 bytes leftover after parsing attributes in process `syz.2.740'.
[  354.188477][   T28] audit: type=1400 audit(1747353074.977:479): avc:  denied  { sys_module } for  pid=3560 comm="syz.2.743" capability=16  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[  355.008422][ T3574] netlink: 8 bytes leftover after parsing attributes in process `syz.1.746'.
[  355.018488][ T3574] netlink: 8 bytes leftover after parsing attributes in process `syz.1.746'.
[  355.027790][ T3574] netlink: 8 bytes leftover after parsing attributes in process `syz.1.746'.
[  357.585411][ T3597] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=10 sclass=netlink_route_socket pid=3597 comm=syz.4.752
[  357.687069][ T3597] input: syz1 as /devices/virtual/input/input8
[  360.402408][ T3627] loop4: detected capacity change from 0 to 256
[  360.421026][ T3627] FAT-fs (loop4): bogus number of FAT sectors
[  360.427231][ T3627] FAT-fs (loop4): Can't find a valid FAT filesystem
[  364.838585][ T3654] loop4: detected capacity change from 0 to 40427
[  364.912090][ T3654] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[  364.919890][ T3654] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  364.928255][ T3654] F2FS-fs (loop4): Unrecognized mount option "xœìÜÏk#U" or missing value
[  365.052336][ T3660] netlink: 8 bytes leftover after parsing attributes in process `syz.2.769'.
[  372.325905][ T3687] input: syz0 as /devices/virtual/input/input9
[  374.574681][ T3701] bridge0: port 3(gretap0) entered blocking state
[  374.581258][ T3701] bridge0: port 3(gretap0) entered disabled state
[  374.597060][ T3701] device gretap0 entered promiscuous mode
[  374.604405][ T3701] bridge0: port 3(gretap0) entered blocking state
[  374.610875][ T3701] bridge0: port 3(gretap0) entered forwarding state
[  374.656740][ T3701] device gretap0 left promiscuous mode
[  374.663825][ T3701] bridge0: port 3(gretap0) entered disabled state
[  375.737550][   T28] audit: type=1400 audit(1747353095.117:480): avc:  denied  { associate } for  pid=3688 comm="syz.2.779" name="blkio.bfq.group_wait_time" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[  375.777510][   T28] audit: type=1400 audit(1747353095.117:481): avc:  denied  { lock } for  pid=3688 comm="syz.2.779" path="socket:[26385]" dev="sockfs" ino=26385 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1
[  375.801542][   T28] audit: type=1400 audit(1747353096.557:482): avc:  denied  { unmount } for  pid=286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[  376.718171][ T3716] netlink: 8 bytes leftover after parsing attributes in process `syz.0.783'.
[  378.602660][ T3738] overlayfs: failed to resolve './file1': -2
[  380.967756][ T3751] loop4: detected capacity change from 0 to 40427
[  381.186565][ T3751] F2FS-fs (loop4): Found nat_bits in checkpoint
[  381.637851][ T3751] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  382.085254][ T3763] bio_check_eod: 18 callbacks suppressed
[  382.085310][ T3763] syz.4.791: attempt to access beyond end of device
[  382.085310][ T3763] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  382.717389][   T28] audit: type=1400 audit(1747353102.917:483): avc:  denied  { create } for  pid=3750 comm="syz.4.791" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1
[  382.747318][  T285] syz-executor: attempt to access beyond end of device
[  382.747318][  T285] loop4: rw=2049, sector=45104, nr_sectors = 8 limit=40427
[  382.871867][   T28] audit: type=1400 audit(1747353103.007:484): avc:  denied  { read } for  pid=3750 comm="syz.4.791" name="file0" dev="loop4" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1
[  383.053980][ T3768] netlink: 20 bytes leftover after parsing attributes in process `syz.0.794'.
[  383.064743][ T3768] device vlan2 entered promiscuous mode
[  383.070317][ T3768] device bridge0 entered promiscuous mode
[  383.821654][   T28] audit: type=1400 audit(1747353104.667:485): avc:  denied  { mount } for  pid=3778 comm="syz.4.793" name="/" dev="ramfs" ino=26533 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1
[  383.952899][ T3780] netlink: 8 bytes leftover after parsing attributes in process `syz.0.796'.
[  384.399392][ T3785] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1
[  384.408756][ T3785] FAT-fs (loop9): unable to read boot sector
[  384.456675][   T28] audit: type=1400 audit(1747353105.217:486): avc:  denied  { create } for  pid=3778 comm="syz.4.793" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=blk_file permissive=1
[  384.504061][   T28] audit: type=1400 audit(1747353105.237:487): avc:  denied  { mounton } for  pid=3778 comm="syz.4.793" path="/file0" dev="ramfs" ino=26800 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=blk_file permissive=1
[  384.534158][   T28] audit: type=1400 audit(1747353105.277:488): avc:  denied  { mount } for  pid=3778 comm="syz.4.793" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1
[  386.330360][ T3807] loop4: detected capacity change from 0 to 16
[  386.346213][ T3807] erofs: (device loop4): mounted with root inode @ nid 36.
[  386.639788][ T3816] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop4 ino=46
[  386.649345][ T3816] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop4 ino=46
[  386.658744][ T3816] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop4 ino=46
[  386.668097][ T3816] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop4 ino=46
[  388.875176][ T3843] netlink: 8 bytes leftover after parsing attributes in process `syz.3.810'.
[  390.874963][ T3866] netlink: 'syz.4.816': attribute type 12 has an invalid length.
[  390.883126][ T3866] netlink: 'syz.4.816': attribute type 29 has an invalid length.
[  390.891150][ T3866] netlink: 148 bytes leftover after parsing attributes in process `syz.4.816'.
[  390.900275][ T3866] netlink: 13 bytes leftover after parsing attributes in process `syz.4.816'.
[  390.927718][ T3866] loop4: detected capacity change from 0 to 2048
[  390.975629][ T3866] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  390.985268][ T3866] ext4 filesystem being mounted at /157/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  392.895536][ T3882] fuse: Bad value for 'user_id'
[  393.187892][  T285] EXT4-fs (loop4): unmounting filesystem.
[  394.052620][ T3888] netlink: 'syz.1.820': attribute type 1 has an invalid length.
[  394.071956][   T28] audit: type=1400 audit(1747353114.667:489): avc:  denied  { create } for  pid=3884 comm="syz.1.820" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1
[  394.343503][ T3897] incfs: Error accessing: ./file0.
[  394.348761][ T3897] incfs: mount failed -2
[  395.640721][ T3899] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  395.801211][ T3898] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  395.808563][ T3898] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  395.828895][ T3898] device veth0_vlan left promiscuous mode
[  395.835707][ T3898] device veth0_vlan entered promiscuous mode
[  395.843138][ T3898] tipc: Resetting bearer <eth:vlan0>
[  395.848635][ T3898] tipc: Resetting bearer <eth:vlan0>
[  395.854307][ T3898] device veth1_macvtap left promiscuous mode
[  395.861297][ T3898] device veth1_macvtap entered promiscuous mode
[  395.907998][  T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  396.022015][  T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  396.042148][  T304] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  396.051238][  T304] bridge0: port 1(bridge_slave_0) entered blocking state
[  396.058710][  T304] bridge0: port 1(bridge_slave_0) entered forwarding state
[  396.066419][  T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  396.075022][  T304] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  396.083983][  T304] bridge0: port 2(bridge_slave_1) entered blocking state
[  396.091083][  T304] bridge0: port 2(bridge_slave_1) entered forwarding state
[  396.098862][  T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  396.107525][  T304] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready
[  396.116016][  T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  396.132918][  T304] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready
[  396.158562][  T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  396.167145][  T304] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  396.181038][  T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  396.318440][ T3911] netlink: 8 bytes leftover after parsing attributes in process `syz.2.824'.
[  396.366610][  T304] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  396.483371][  T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  396.493450][  T304] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  396.501975][  T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  396.510429][  T304] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  396.518915][  T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  396.527486][  T304] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  396.535863][  T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  396.544078][  T304] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  396.557366][  T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  396.571791][  T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  396.585455][  T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  396.599087][  T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  396.613457][  T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  396.628538][  T304] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  396.642145][  T304] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  396.661004][  T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  398.120996][ T3925] overlayfs: failed to clone upperpath
[  399.009069][  T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  399.037315][  T304] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  399.062800][  T304] IPv6: ADDRCONF(NETDEV_CHANGE): macsec1: link becomes ready
[  399.088011][  T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth3: link becomes ready
[  399.112037][  T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth2: link becomes ready
[  399.132964][  T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth5: link becomes ready
[  399.158101][  T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth4: link becomes ready
[  399.399873][ T3911] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12
[  399.409405][ T3911] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12
[  399.447186][  T304] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  399.846003][ T3939] overlayfs: overlapping lowerdir path
[  409.940393][ T3962] fuse: Bad value for 'rootmode'
[  410.209657][ T3965] netlink: 8 bytes leftover after parsing attributes in process `syz.3.840'.
[  412.833256][   T28] audit: type=1400 audit(1747353132.467:490): avc:  denied  { getopt } for  pid=3984 comm="syz.0.844" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  414.409156][  T305] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  414.525125][ T4003] netlink: 8 bytes leftover after parsing attributes in process `syz.1.845'.
[  414.900630][  T305] usb 1-1: Using ep0 maxpacket: 32
[  415.107722][  T305] usb 1-1: device descriptor read/all, error -71
[  416.096031][ T4019] netlink: 'syz.3.851': attribute type 12 has an invalid length.
[  416.103992][ T4019] netlink: 'syz.3.851': attribute type 29 has an invalid length.
[  416.111990][ T4019] netlink: 148 bytes leftover after parsing attributes in process `syz.3.851'.
[  416.121241][ T4019] netlink: 13 bytes leftover after parsing attributes in process `syz.3.851'.
[  416.675492][ T4026] netlink: 8 bytes leftover after parsing attributes in process `syz.3.852'.
[  416.694309][ T4028] fuse: Bad value for 'fd'
[  417.722479][ T4037] netlink: 8 bytes leftover after parsing attributes in process `syz.2.855'.
[  421.352279][ T4051] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=10 sclass=netlink_route_socket pid=4051 comm=syz.2.858
[  421.482915][ T4051] input: syz1 as /devices/virtual/input/input10
[  422.361686][ T4057] netlink: 'syz.4.860': attribute type 13 has an invalid length.
[  422.380527][ T4057] bridge0: port 2(bridge_slave_1) entered disabled state
[  422.387898][ T4057] bridge0: port 1(bridge_slave_0) entered disabled state
[  422.420988][ T4057] tipc: Resetting bearer <eth:vlan0>
[  423.501621][ T4073] netlink: 8 bytes leftover after parsing attributes in process `syz.2.862'.
[  425.431772][ T4084] input: syz0 as /devices/virtual/input/input11
[  426.418594][ T4096] overlayfs: failed to resolve './file0': -2
[  428.298091][ T4121] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=10 sclass=netlink_route_socket pid=4121 comm=syz.1.873
[  428.455033][ T4121] input: syz1 as /devices/virtual/input/input12
[  433.829435][ T4153] bridge0: port 3(gretap0) entered blocking state
[  433.835985][ T4153] bridge0: port 3(gretap0) entered disabled state
[  433.842999][ T4153] device gretap0 entered promiscuous mode
[  433.851014][ T4153] device gretap0 left promiscuous mode
[  433.856567][ T4153] bridge0: port 3(gretap0) entered disabled state
[  436.560013][ T4172] overlayfs: failed to resolve './file1': -2
[  437.560507][ T4190] overlayfs: './file0' not a directory
[  437.588112][ T4187] overlayfs: overlapping lowerdir path
[  437.776933][ T4193] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=10 sclass=netlink_route_socket pid=4193 comm=syz.4.889
[  437.892071][ T4193] input: syz1 as /devices/virtual/input/input13
[  438.435704][ T4205] xt_CT: You must specify a L4 protocol and not use inversions on it
[  438.523061][ T4205] hub 8-0:1.0: USB hub found
[  438.528753][ T4205] hub 8-0:1.0: 1 port detected
[  443.397032][   T28] audit: type=1400 audit(1747353160.457:491): avc:  denied  { write } for  pid=4220 comm="syz.3.898" path="socket:[27534]" dev="sockfs" ino=27534 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  443.475360][ T4227] IPv6: sit1: Disabled Multicast RS
[  444.314411][   T24] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  445.514039][ T4249] overlayfs: overlapping lowerdir path
[  445.521385][ T4252] overlayfs: failed to clone upperpath
[  446.260674][   T28] audit: type=1400 audit(1747353166.487:492): avc:  denied  { map } for  pid=4242 comm="syz.3.902" path="socket:[28169]" dev="sockfs" ino=28169 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1
[  446.397377][ T4261] netlink: 56 bytes leftover after parsing attributes in process `syz.1.906'.
[  446.408921][   T28] audit: type=1400 audit(1747353167.247:493): avc:  denied  { mounton } for  pid=4257 comm="syz.1.906" path="/174/file0" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:devpts_t tclass=dir permissive=1
[  446.605933][ T4264] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=10 sclass=netlink_route_socket pid=4264 comm=syz.3.904
[  448.527849][ T4259] syz.2.907 (4259): /proc/4256/oom_adj is deprecated, please use /proc/4256/oom_score_adj instead.
[  448.534431][   T28] audit: type=1326 audit(1747353169.367:494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4256 comm="syz.2.907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0741b8e969 code=0x7ffc0000
[  448.564640][   T28] audit: type=1326 audit(1747353169.367:495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4256 comm="syz.2.907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=448 compat=0 ip=0x7f0741b8e969 code=0x7ffc0000
[  448.589189][   T28] audit: type=1326 audit(1747353169.367:496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4256 comm="syz.2.907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0741b8e969 code=0x7ffc0000
[  448.678734][   T28] audit: type=1326 audit(1747353169.367:497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4256 comm="syz.2.907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7f0741b8e969 code=0x7ffc0000
[  448.712211][   T28] audit: type=1326 audit(1747353169.407:498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4256 comm="syz.2.907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0741b8e969 code=0x7ffc0000
[  448.736065][   T28] audit: type=1326 audit(1747353169.407:499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4256 comm="syz.2.907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0741b8e969 code=0x7ffc0000
[  448.760201][   T28] audit: type=1326 audit(1747353169.407:500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4256 comm="syz.2.907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0741b8e969 code=0x7ffc0000
[  448.837632][ T4282] input: syz1 as /devices/virtual/input/input14
[  449.295781][   T28] audit: type=1326 audit(1747353169.407:501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4256 comm="syz.2.907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0741b8e969 code=0x7ffc0000
[  449.456544][   T28] audit: type=1400 audit(1747353169.677:502): avc:  denied  { create } for  pid=4274 comm="syz.4.909" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[  449.745025][ T4295] fuse: Bad value for 'fd'
[  452.450026][ T4323] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value
[  454.577583][ T4341] overlayfs: overlapping lowerdir path
[  455.249724][   T28] audit: type=1400 audit(1747353176.087:503): avc:  denied  { unmount } for  pid=285 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1
[  455.599705][ T4359] IPv6: sit2: Disabled Multicast RS
[  455.702531][ T4361] fuse: Bad value for 'fd'
[  456.352469][   T28] audit: type=1400 audit(1747353177.197:504): avc:  denied  { create } for  pid=4362 comm="syz.2.930" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  456.390658][   T28] audit: type=1400 audit(1747353177.207:505): avc:  denied  { setopt } for  pid=4362 comm="syz.2.930" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  458.986710][ T4389] bridge0: port 3(gretap0) entered blocking state
[  458.986753][ T4389] bridge0: port 3(gretap0) entered disabled state
[  458.987944][ T4389] device gretap0 entered promiscuous mode
[  458.991922][ T4389] device gretap0 left promiscuous mode
[  458.992175][ T4389] bridge0: port 3(gretap0) entered disabled state
[  459.718178][   T28] audit: type=1400 audit(1747353180.497:506): avc:  denied  { create } for  pid=4384 comm="syz.0.939" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  461.162175][ T4390] tty tty24: ldisc open failed (-12), clearing slot 23
[  461.377699][ T4405] ./file0: Can't open blockdev
[  465.497731][ T4443] overlayfs: './file0' not a directory
[  468.228031][ T4479] overlayfs: './file0' not a directory
[  469.876137][ T4494] xt_ecn: cannot match TCP bits for non-tcp packets
[  470.331073][ T4494] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  470.340066][ T4494] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  471.640663][ T4508] netlink: 'syz.3.966': attribute type 3 has an invalid length.
[  472.273074][ T4518] netlink: 8 bytes leftover after parsing attributes in process `syz.1.969'.
[  472.281917][ T4518] netlink: 4 bytes leftover after parsing attributes in process `syz.1.969'.
[  472.714893][   T28] audit: type=1400 audit(1747353193.557:507): avc:  denied  { create } for  pid=4524 comm="syz.1.971" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1
[  473.682262][   T28] audit: type=1400 audit(1747353194.487:508): avc:  denied  { bind } for  pid=4524 comm="syz.1.971" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  473.902423][   T28] audit: type=1400 audit(1747353194.487:509): avc:  denied  { node_bind } for  pid=4524 comm="syz.1.971" saddr=172.20.20.170 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1
[  475.917985][ T4570] netlink: 156 bytes leftover after parsing attributes in process `syz.0.982'.
[  475.968983][ T4572] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=256 sclass=netlink_route_socket pid=4572 comm=syz.0.982
[  476.313626][ T4578] fuse: Bad value for 'fd'
[  476.612571][ T4580] netlink: 44 bytes leftover after parsing attributes in process `syz.3.983'.
[  476.622366][ T4580] tipc: Started in network mode
[  476.627243][ T4580] tipc: Node identity 4, cluster identity 4711
[  476.633455][ T4580] tipc: Node number set to 4
[  477.929456][ T4595] input: syz1 as /devices/virtual/input/input15
[  481.319664][ T4618] overlayfs: failed to clone upperpath
[  481.881346][ T4622] IPv6: Can't replace route, no match found
[  482.770263][ T4641] fuse: Bad value for 'rootmode'
[  483.476711][ T4642] IPv6: sit1: Disabled Multicast RS
[  484.910730][   T28] audit: type=1400 audit(1747353203.567:510): avc:  denied  { associate } for  pid=4630 comm="syz.3.997" name="fuse" scontext=root:object_r:etc_runtime_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1
[  484.960596][   T28] audit: type=1400 audit(1747353203.607:511): avc:  denied  { mounton } for  pid=4630 comm="syz.3.997" path="/file0" dev="rootfs" ino=29391 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1
[  487.696153][   T28] audit: type=1400 audit(1747353207.827:512): avc:  denied  { name_bind } for  pid=4654 comm="syz.3.1000" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1
[  487.926854][   T28] audit: type=1400 audit(1747353208.757:513): avc:  denied  { accept } for  pid=4665 comm="syz.0.1004" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1
[  488.063365][ T4675] overlayfs: unrecognized mount option "verity=require" or missing value
[  488.860943][   T28] audit: type=1400 audit(1747353209.557:514): avc:  denied  { create } for  pid=4664 comm="syz.1.1001" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  489.137150][   T28] audit: type=1400 audit(1747353209.577:515): avc:  denied  { write } for  pid=4664 comm="syz.1.1001" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  489.171758][   T28] audit: type=1400 audit(1747353209.577:516): avc:  denied  { nlmsg_write } for  pid=4664 comm="syz.1.1001" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  489.360625][   T24] usb 1-1: new low-speed USB device number 5 using dummy_hcd
[  489.592382][   T24] usb 1-1: config 1 interface 0 altsetting 144 endpoint 0x1 is Bulk; changing to Interrupt
[  489.658341][   T24] usb 1-1: config 1 interface 0 altsetting 144 endpoint 0x82 is Bulk; changing to Interrupt
[  489.743800][   T24] usb 1-1: config 1 interface 0 has no altsetting 0
[  489.754267][   T24] usb 1-1: string descriptor 0 read error: -22
[  489.760832][   T24] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  489.769947][   T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  489.802486][   T28] audit: type=1400 audit(1747353210.647:517): avc:  denied  { checkpoint_restore } for  pid=4687 comm="syz.3.1008" capability=40  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  489.898299][ T4676] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  489.905672][ T4676] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  491.309392][ T4707] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1013'.
[  491.755472][  T305] usb 1-1: USB disconnect, device number 5
[  492.098915][ T4714] fuse: Bad value for 'fd'
[  497.093721][ T4759] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1026'.
[  500.124803][ T4785] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  500.335553][   T24] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  500.480588][ T4790] netlink: 25 bytes leftover after parsing attributes in process `syz.2.1032'.
[  500.489646][ T4790] device gretap0 entered promiscuous mode
[  500.532500][ T4790] netlink: 45349 bytes leftover after parsing attributes in process `syz.2.1032'.
[  500.542202][ T4790] 0ªX¹¦Dö»: renamed from gretap0
[  500.551659][ T4790] device 
00ªX¹¦Dö» left promiscuous mode
[  500.646232][  T710] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  500.690218][   T24] usb 1-1: Using ep0 maxpacket: 16
[  500.796885][   T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  500.808245][   T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  500.818128][   T24] usb 1-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00
[  500.827279][   T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  500.836460][   T24] usb 1-1: config 0 descriptor??
[  502.090693][  T710] usb 5-1: Using ep0 maxpacket: 32
[  502.235456][   T24] input: HID 05ac:8241 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:05AC:8241.0002/input/input16
[  502.390406][ T4812] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1036'.
[  504.439234][  T710] usb 5-1: device descriptor read/all, error -71
[  504.725509][ T4821] block device autoloading is deprecated and will be removed.
[  504.734118][ T4821] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1
[  504.743425][ T4821] FAT-fs (loop5): unable to read boot sector
[  504.828513][  T939] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  505.056900][ T4825] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1039'.
[  505.334297][   T24] appleir 0003:05AC:8241.0002: input,hiddev96,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.0-1/input0
[  505.422144][   T24] usb 1-1: USB disconnect, device number 6
[  505.472266][ T4845] fido_id[4845]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory
[  505.565211][ T4846] IPv6: sit2: Disabled Multicast RS
[  506.754627][ T4860] netlink: 25 bytes leftover after parsing attributes in process `syz.3.1047'.
[  506.763760][ T4860] device gretap0 entered promiscuous mode
[  506.772874][ T4860] netlink: 45349 bytes leftover after parsing attributes in process `syz.3.1047'.
[  506.782273][ T4860] 0ªX¹¦Dö»: renamed from gretap0
[  506.790151][ T4860] device 
00ªX¹¦Dö» left promiscuous mode
[  508.760790][ T4877] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1051'.
[  509.354141][ T4881] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1052'.
[  511.862065][ T4901] x_tables: duplicate underflow at hook 1
[  513.964464][ T4918] block device autoloading is deprecated and will be removed.
[  513.973036][ T4918] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1
[  513.982458][ T4918] FAT-fs (loop9): unable to read boot sector
[  514.405553][ T4926] netlink: 25 bytes leftover after parsing attributes in process `syz.1.1062'.
[  514.415156][ T4926] device gretap0 entered promiscuous mode
[  514.478379][ T4926] netlink: 45349 bytes leftover after parsing attributes in process `syz.1.1062'.
[  514.487980][ T4926] 0ªX¹¦Dö»: renamed from gretap0
[  514.497388][ T4926] device 
00ªX¹¦Dö» left promiscuous mode
[  514.707410][   T28] audit: type=1400 audit(1747353235.547:518): avc:  denied  { bind } for  pid=4931 comm="syz.4.1066" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  514.707918][ T4932] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1066'.
[  514.728231][   T28] audit: type=1400 audit(1747353235.547:519): avc:  denied  { setopt } for  pid=4931 comm="syz.4.1066" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  514.759970][ T4932] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1066'.
[  514.769201][ T4932] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1066'.
[  515.095732][ T4939] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1068'.
[  516.991524][   T28] audit: type=1400 audit(1747353237.827:520): avc:  denied  { write } for  pid=4948 comm="syz.0.1071" path="socket:[31105]" dev="sockfs" ino=31105 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  517.015106][   T28] audit: type=1400 audit(1747353237.827:521): avc:  denied  { accept } for  pid=4948 comm="syz.0.1071" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  517.035297][   T28] audit: type=1400 audit(1747353237.827:522): avc:  denied  { read } for  pid=4948 comm="syz.0.1071" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  517.281693][ T4958] input: syz0 as /devices/virtual/input/input17
[  517.432112][ T4954] futex_wake_op: syz.2.1073 tries to shift op by -1; fix this program
[  518.084833][   T28] audit: type=1400 audit(1747353238.917:523): avc:  denied  { ioctl } for  pid=4976 comm="syz.3.1080" path="socket:[31159]" dev="sockfs" ino=31159 ioctlcmd=0x7436 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  520.468676][ T5004] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1088'.
[  522.879913][ T5028] tipc: Started in network mode
[  522.885271][ T5028] tipc: Node identity fffffffb, cluster identity 4711
[  522.892203][ T5028] tipc: Node number set to 4294967291
[  526.022491][ T5083] block device autoloading is deprecated and will be removed.
[  526.033910][ T5083] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1
[  526.043619][ T5083] FAT-fs (loop5): unable to read boot sector
[  526.581280][ T5096] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1113'.
[  526.971528][ T5100] kvm: emulating exchange as write
[  527.067301][ T5103] IPv6: sit1: Disabled Multicast RS
[  528.036696][ T5119] netlink: 'syz.1.1121': attribute type 4 has an invalid length.
[  528.067079][ T5119] netlink: 'syz.1.1121': attribute type 4 has an invalid length.
[  529.223302][ T5128] serio: Serial port ptm0
[  529.660603][  T939] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  529.874649][  T939] usb 1-1: Using ep0 maxpacket: 16
[  531.296996][ T5144] overlayfs: failed to clone upperpath
[  531.610477][  T939] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  531.652497][  T939] usb 1-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00
[  531.661876][  T939] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  531.684159][  T939] usb 1-1: config 0 descriptor??
[  531.875470][ T5152] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1128'.
[  532.700003][  T939] usbhid 1-1:0.0: can't add hid device: -71
[  532.727038][  T939] usbhid: probe of 1-1:0.0 failed with error -71
[  532.753853][  T939] usb 1-1: USB disconnect, device number 7
[  537.905263][ T5202] bridge0: port 3(syz_tun) entered blocking state
[  537.911777][ T5202] bridge0: port 3(syz_tun) entered disabled state
[  537.941814][ T5202] device syz_tun entered promiscuous mode
[  538.207709][ T5212] syz.4.1147[5212] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  538.207788][ T5212] syz.4.1147[5212] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  538.223615][ T5212] xt_hashlimit: size too large, truncated to 1048576
[  538.353902][   T28] audit: type=1400 audit(1747353259.197:524): avc:  denied  { write } for  pid=5196 comm="syz.1.1144" path="socket:[31622]" dev="sockfs" ino=31622 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  538.507724][ T5213] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  538.613415][ T5217] device bridge3 entered promiscuous mode
[  538.619403][ T5217] IPv6: ADDRCONF(NETDEV_CHANGE): bridge3: link becomes ready
[  538.984233][   T24] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  539.004428][ T5235] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1150'.
[  539.017098][ T5235] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1150'.
[  539.180640][   T24] usb 3-1: Using ep0 maxpacket: 32
[  539.188806][   T24] usb 3-1: config 0 has an invalid descriptor of length 219, skipping remainder of the config
[  539.269890][   T24] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  539.392700][   T24] usb 3-1: New USB device found, idVendor=06cb, idProduct=73f6, bcdDevice= 0.00
[  539.506007][   T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  539.622424][   T24] usb 3-1: config 0 descriptor??
[  541.115373][   T24] usb 3-1: string descriptor 0 read error: -71
[  541.205601][   T24] usbhid 3-1:0.0: couldn't find an input interrupt endpoint
[  541.420621][   T24] usb 3-1: USB disconnect, device number 4
[  547.648445][ T5287] overlayfs: failed to clone upperpath
[  548.504429][ T5290] tipc: New replicast peer: 0.0.0.0
[  548.509842][ T5290] tipc: Enabled bearer <udp:syz2>, priority 10
[  549.835762][   T28] audit: type=1400 audit(1747353270.677:525): avc:  denied  { read } for  pid=5296 comm="syz.4.1177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  555.330689][   T28] audit: type=1400 audit(1747353276.167:526): avc:  denied  { getattr } for  pid=5337 comm="syz.4.1178" name="/" dev="incremental-fs" ino=1513 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[  556.402042][   T28] audit: type=1400 audit(1747353277.237:527): avc:  denied  { write } for  pid=5337 comm="syz.4.1178" name="file0" dev="overlay" ino=1514 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  556.915810][   T28] audit: type=1400 audit(1747353277.237:528): avc:  denied  { open } for  pid=5337 comm="syz.4.1178" path="/235/bus/file0" dev="overlay" ino=1514 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  556.939315][   T28] audit: type=1400 audit(1747353277.237:529): avc:  denied  { setattr } for  pid=5337 comm="syz.4.1178" name="#1523" dev="tmpfs" ino=1523 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  556.996444][   T28] audit: type=1400 audit(1747353277.237:530): avc:  denied  { link } for  pid=5337 comm="syz.4.1178" name="#1523" dev="tmpfs" ino=1523 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  557.039391][   T28] audit: type=1400 audit(1747353277.247:531): avc:  denied  { mounton } for  pid=5337 comm="syz.4.1178" path="/235/bus/file0" dev="overlay" ino=1514 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  557.063957][   T28] audit: type=1400 audit(1747353277.417:532): avc:  denied  { unlink } for  pid=285 comm="syz-executor" name="file0" dev="tmpfs" ino=1523 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  557.152436][   T28] audit: type=1400 audit(1747353277.997:533): avc:  denied  { execute } for  pid=5347 comm="syz.4.1179" name="file0" dev="tmpfs" ino=1529 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  557.178856][   T28] audit: type=1400 audit(1747353277.997:534): avc:  denied  { execute_no_trans } for  pid=5347 comm="syz.4.1179" path="/236/file0" dev="tmpfs" ino=1529 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  557.288107][ T5363] overlayfs: failed to clone upperpath
[  557.722328][ T5367] netlink: 'syz.0.1182': attribute type 12 has an invalid length.
[  558.016656][ T5370] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1185'.
[  558.943525][ T5383] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1184'.
[  559.026221][   T28] audit: type=1400 audit(1747353279.867:535): avc:  denied  { map } for  pid=5368 comm="syz.4.1185" path="socket:[32494]" dev="sockfs" ino=32494 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  559.681962][ T5399] xt_CT: You must specify a L4 protocol and not use inversions on it
[  561.873054][ T5423] netlink: 25 bytes leftover after parsing attributes in process `syz.4.1194'.
[  561.882263][ T5423] device gretap0 entered promiscuous mode
[  562.021514][ T5423] netlink: 45349 bytes leftover after parsing attributes in process `syz.4.1194'.
[  562.032137][ T5423] 0ªX¹¦Dö»: renamed from gretap0
[  562.524083][ T5423] device 
00ªX¹¦Dö» left promiscuous mode
[  562.705340][ T5430] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  563.821704][   T28] kauditd_printk_skb: 1 callbacks suppressed
[  563.821730][   T28] audit: type=1400 audit(1747353284.657:537): avc:  denied  { accept } for  pid=5421 comm="syz.0.1197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  564.027401][   T24] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  564.440746][   T24] usb 2-1: Using ep0 maxpacket: 32
[  564.468891][   T24] usb 2-1: config 0 has an invalid descriptor of length 219, skipping remainder of the config
[  564.550464][   T24] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  564.646566][   T24] usb 2-1: New USB device found, idVendor=06cb, idProduct=73f6, bcdDevice= 0.00
[  564.693411][   T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  564.718669][   T24] usb 2-1: config 0 descriptor??
[  564.818140][   T24] usb 2-1: string descriptor 0 read error: -71
[  564.826299][   T24] usbhid 2-1:0.0: couldn't find an input interrupt endpoint
[  564.839506][   T24] usb 2-1: USB disconnect, device number 4
[  567.284715][   T28] audit: type=1400 audit(1747353288.127:538): avc:  denied  { read write } for  pid=5461 comm="syz.1.1204" name="file2" dev="tmpfs" ino=1385 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  567.310679][ T5465] block device autoloading is deprecated and will be removed.
[  567.365442][   T28] audit: type=1400 audit(1747353288.127:539): avc:  denied  { open } for  pid=5461 comm="syz.1.1204" path="/229/file2" dev="tmpfs" ino=1385 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  567.388787][   T28] audit: type=1400 audit(1747353288.167:540): avc:  denied  { ioctl } for  pid=5461 comm="syz.1.1204" path="/229/file2" dev="tmpfs" ino=1385 ioctlcmd=0x4c00 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  567.547776][ T5478] loop2: detected capacity change from 0 to 1024
[  567.571055][ T5478] EXT4-fs: Ignoring removed orlov option
[  567.575884][   T28] audit: type=1400 audit(1747353288.417:541): avc:  denied  { mounton } for  pid=5468 comm="syz.2.1207" path="/231/bus" dev="tmpfs" ino=1340 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  567.831456][ T5478] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  567.958129][ T5497] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1212'.
[  567.962575][ T5478] EXT4-fs (loop2): unmounting filesystem.
[  568.929891][   T28] audit: type=1400 audit(1747353289.767:542): avc:  denied  { create } for  pid=5492 comm="syz.4.1211" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1
[  570.158306][ T5515] xt_bpf: check failed: parse error
[  573.012975][ T5527] syz.0.1218[5527] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  573.013061][ T5527] syz.0.1218[5527] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  573.140157][ T5535] usb usb1: usbfs: process 5535 (syz.2.1220) did not claim interface 0 before use
[  574.069410][ T5539] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1218'.
[  574.090875][ T5539] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1218'.
[  577.613897][  T849] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  579.866615][ T5584] netlink: 392 bytes leftover after parsing attributes in process `syz.4.1230'.
[  585.680367][ T5621] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1238'.
[  595.672664][ T5700] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1258'.
[  595.922987][  T849] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  596.890592][  T849] usb 3-1: Using ep0 maxpacket: 16
[  596.904128][  T849] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  596.955515][  T849] usb 3-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00
[  596.965612][  T849] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  596.983542][  T849] usb 3-1: config 0 descriptor??
[  597.288192][ T5694] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1257'.
[  597.382165][ T5694] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1257'.
[  597.977901][ T5735] block device autoloading is deprecated and will be removed.
[  598.095642][  T849] usbhid 3-1:0.0: can't add hid device: -71
[  598.101783][  T849] usbhid: probe of 3-1:0.0 failed with error -71
[  598.123735][  T849] usb 3-1: USB disconnect, device number 6
[  601.936326][ T5779] random: crng reseeded on system resumption
[  602.150722][ T5782] xt_bpf: check failed: parse error
[  602.365904][   T28] audit: type=1400 audit(1747353323.207:543): avc:  denied  { ioctl } for  pid=5778 comm="syz.1.1278" path="/dev/snapshot" dev="devtmpfs" ino=91 ioctlcmd=0x3313 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[  609.554500][ T5840] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1291'.
[  609.605042][ T5840] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1291'.
[  610.197942][ T5838] xt_bpf: check failed: parse error
[  611.769089][   T28] audit: type=1400 audit(1747353332.497:544): avc:  denied  { create } for  pid=5854 comm="syz.0.1297" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=unix_stream_socket permissive=1
[  611.820993][ T5860] netlink: 'syz.4.1296': attribute type 12 has an invalid length.
[  613.413215][   T28] audit: type=1400 audit(1747353332.497:545): avc:  denied  { bind } for  pid=5854 comm="syz.0.1297" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=unix_stream_socket permissive=1
[  613.454772][   T28] audit: type=1400 audit(1747353332.497:546): avc:  denied  { listen } for  pid=5854 comm="syz.0.1297" path=2F3236362FE91F7189591E9233614B scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=unix_stream_socket permissive=1
[  613.478857][   T28] audit: type=1400 audit(1747353332.497:547): avc:  denied  { shutdown } for  pid=5854 comm="syz.0.1297" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=unix_stream_socket permissive=1
[  613.501338][   T28] audit: type=1400 audit(1747353332.497:548): avc:  denied  { connect } for  pid=5854 comm="syz.0.1297" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=unix_stream_socket permissive=1
[  613.574417][   T28] audit: type=1400 audit(1747353332.497:549): avc:  denied  { connectto } for  pid=5854 comm="syz.0.1297" path=2F3236362FE91F7189591E9233614B scontext=system_u:object_r:hugetlbfs_t tcontext=system_u:object_r:hugetlbfs_t tclass=unix_stream_socket permissive=1
[  613.631760][   T28] audit: type=1400 audit(1747353332.507:550): avc:  denied  { create } for  pid=5854 comm="syz.0.1297" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=rawip_socket permissive=1
[  613.651991][   T28] audit: type=1400 audit(1747353332.507:551): avc:  denied  { write } for  pid=5854 comm="syz.0.1297" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=rawip_socket permissive=1
[  613.672650][   T28] audit: type=1400 audit(1747353332.507:552): avc:  denied  { create } for  pid=5854 comm="syz.0.1297" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=can_socket permissive=1
[  613.692737][   T28] audit: type=1400 audit(1747353332.507:553): avc:  denied  { getopt } for  pid=5854 comm="syz.0.1297" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=can_socket permissive=1
[  619.265661][ T5896] netlink: 'syz.2.1307': attribute type 4 has an invalid length.
[  619.310041][ T5896] netlink: 'syz.2.1307': attribute type 4 has an invalid length.
[  619.548013][   T28] audit: type=1400 audit(1747353340.387:554): avc:  denied  { read write } for  pid=5891 comm="syz.4.1308" name="raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  619.597022][   T28] audit: type=1400 audit(1747353340.417:555): avc:  denied  { open } for  pid=5891 comm="syz.4.1308" path="/dev/raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  619.623853][   T28] audit: type=1400 audit(1747353340.417:556): avc:  denied  { ioctl } for  pid=5891 comm="syz.4.1308" path="/dev/raw-gadget" dev="devtmpfs" ino=258 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  621.608686][   T24] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  621.962114][   T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  621.980583][   T24] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  622.022094][   T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  622.081015][   T24] usb 5-1: config 0 descriptor??
[  622.094014][   T24] usb 5-1: can't set config #0, error -71
[  622.129026][   T24] usb 5-1: USB disconnect, device number 6
[  623.906275][   T43] device ip6gretap0 left promiscuous mode
[  623.913772][ T5932] syz.2.1325[5932] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  623.913852][ T5932] syz.2.1325[5932] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  623.950124][ T5929] bridge0: port 1(bridge_slave_0) entered blocking state
[  623.968772][ T5929] bridge0: port 1(bridge_slave_0) entered disabled state
[  623.978174][ T5929] device bridge_slave_0 entered promiscuous mode
[  623.985633][ T5929] bridge0: port 2(bridge_slave_1) entered blocking state
[  624.070704][ T5929] bridge0: port 2(bridge_slave_1) entered disabled state
[  624.549202][ T5943] xt_bpf: check failed: parse error
[  625.276827][ T5929] device bridge_slave_1 entered promiscuous mode
[  626.642470][ T5954] overlayfs: failed to clone upperpath
[  627.174644][ T5947] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1325'.
[  627.183840][ T5949] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1325'.
[  628.759037][   T28] audit: type=1326 audit(1747353349.537:557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5965 comm="syz.4.1323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad45d8e969 code=0x7fc00000
[  628.865475][ T5977] netlink: 'syz.0.1318': attribute type 12 has an invalid length.
[  629.082485][  T997] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  629.090367][  T997] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  629.133673][  T997] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  629.159049][  T997] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  629.177741][  T997] bridge0: port 1(bridge_slave_0) entered blocking state
[  629.184859][  T997] bridge0: port 1(bridge_slave_0) entered forwarding state
[  629.253469][ T5981] syz.2.1324[5981] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  629.253805][ T5981] syz.2.1324[5981] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  629.707762][  T997] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  629.828882][  T997] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  629.843056][  T997] bridge0: port 2(bridge_slave_1) entered blocking state
[  629.850164][  T997] bridge0: port 2(bridge_slave_1) entered forwarding state
[  629.881951][ T5991] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=256 sclass=netlink_route_socket pid=5991 comm=syz.4.1329
[  629.903319][  T997] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  630.279595][ T5985] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1329'.
[  630.290030][ T5985] device syz_tun left promiscuous mode
[  630.295727][ T5985] bridge0: port 3(syz_tun) entered disabled state
[  630.315071][  T997] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  630.323383][  T997] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  630.364405][  T997] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  630.674862][  T997] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  631.199408][   T43] device bridge_slave_1 left promiscuous mode
[  631.214670][   T43] bridge0: port 2(bridge_slave_1) entered disabled state
[  631.222430][   T43] device bridge_slave_0 left promiscuous mode
[  631.228635][   T43] bridge0: port 1(bridge_slave_0) entered disabled state
[  631.237002][   T43] device bridge0 left promiscuous mode
[  631.242695][   T43] device veth0_vlan left promiscuous mode
[  632.112278][ T5929] device veth0_vlan entered promiscuous mode
[  632.122377][ T2221] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  632.404604][ T2221] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  632.424571][ T2221] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  632.432768][ T2221] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  632.441557][ T6004] netlink: 'syz.3.1332': attribute type 4 has an invalid length.
[  632.450223][ T6008] netlink: 'syz.3.1332': attribute type 4 has an invalid length.
[  632.459189][ T6010] netlink: 'syz.0.1333': attribute type 3 has an invalid length.
[  632.472324][ T2221] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  632.479991][ T2221] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  632.489024][ T6017] netlink: 'syz.3.1332': attribute type 4 has an invalid length.
[  632.506110][ T2221] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  632.515076][ T2221] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  632.525798][ T5929] device veth1_macvtap entered promiscuous mode
[  632.537543][ T2221] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  632.545706][ T2221] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  632.554825][ T2221] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  632.579712][ T2221] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  632.648023][ T2221] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  632.656488][   T28] audit: type=1400 audit(1747353353.487:558): avc:  denied  { mount } for  pid=5929 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  632.679747][   T28] audit: type=1400 audit(1747353353.487:559): avc:  denied  { mounton } for  pid=5929 comm="syz-executor" path="/root/syzkaller.3GPec0/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1
[  635.071231][ T6076] block device autoloading is deprecated and will be removed.
[  635.078953][ T6076] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  635.088393][ T6076] FAT-fs (loop7): unable to read boot sector
[  636.642295][ T6088] xt_bpf: check failed: parse error
[  637.152129][ T6094] syz.4.1354[6094] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  637.152272][ T6094] syz.4.1354[6094] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  638.982506][ T6102] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1354'.
[  639.402287][ T6102] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1354'.
[  644.309524][ T6143] netlink: 'syz.5.1366': attribute type 4 has an invalid length.
[  644.721653][ T6144] netlink: 'syz.5.1366': attribute type 4 has an invalid length.
[  644.730906][ T6149] netlink: 'syz.5.1366': attribute type 4 has an invalid length.
[  645.150627][   T45] Bluetooth: hci0: sending frame failed (-49)
[  645.170645][ T6069] Bluetooth: hci0: Opcode 0x1003 failed: -49
[  645.218446][ T6162] syz.3.1370[6162] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  645.218528][ T6162] syz.3.1370[6162] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  648.355839][ T6169] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1370'.
[  648.376539][ T6170] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1370'.
[  650.628958][ T6200] SELinux:  Context system_u:object_r:man_t:s0 is not valid (left unmapped).
[  650.643844][   T28] audit: type=1400 audit(1747353371.487:560): avc:  denied  { relabelto } for  pid=6191 comm="syz.4.1375" name="278" dev="tmpfs" ino=1749 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:man_t:s0"
[  650.690458][   T28] audit: type=1400 audit(1747353371.517:561): avc:  denied  { associate } for  pid=6191 comm="syz.4.1375" name="278" dev="tmpfs" ino=1749 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:man_t:s0"
[  650.744078][ T6200] can0: slcan on ptm0.
[  650.749902][   T28] audit: type=1400 audit(1747353371.587:562): avc:  denied  { watch watch_reads } for  pid=6191 comm="syz.4.1375" path="/278" dev="tmpfs" ino=1749 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:man_t:s0"
[  650.803954][   T28] audit: type=1400 audit(1747353371.647:563): avc:  denied  { write } for  pid=6191 comm="syz.4.1375" name="278" dev="tmpfs" ino=1749 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:man_t:s0"
[  650.833392][ T6208] futex_wake_op: syz.4.1375 tries to shift op by -1; fix this program
[  651.122818][   T28] audit: type=1400 audit(1747353371.677:564): avc:  denied  { add_name } for  pid=6191 comm="syz.4.1375" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:man_t:s0"
[  651.335437][   T28] audit: type=1400 audit(1747353371.677:565): avc:  denied  { associate } for  pid=6191 comm="syz.4.1375" name="file0" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  651.599895][   T28] audit: type=1400 audit(1747353371.927:566): avc:  denied  { write } for  pid=6191 comm="syz.4.1375" name="file1" dev="tmpfs" ino=1755 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1
[  651.659869][ T6196] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1376'.
[  651.668975][   T28] audit: type=1400 audit(1747353371.927:567): avc:  denied  { add_name } for  pid=6191 comm="syz.4.1375" name="file2" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1
[  651.715141][   T28] audit: type=1400 audit(1747353371.947:568): avc:  denied  { remove_name } for  pid=6191 comm="syz.4.1375" name="file0" dev="tmpfs" ino=1754 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:man_t:s0"
[  651.760552][   T28] audit: type=1400 audit(1747353371.947:569): avc:  denied  { rename } for  pid=6191 comm="syz.4.1375" name="file0" dev="tmpfs" ino=1754 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1
[  651.862405][ T6193] can0 (unregistered): slcan off ptm0.
[  651.949790][ T6236] netlink: 160 bytes leftover after parsing attributes in process `syz.2.1382'.
[  651.959133][ T6236] netlink: 160 bytes leftover after parsing attributes in process `syz.2.1382'.
[  651.968809][ T6236] netlink: 160 bytes leftover after parsing attributes in process `syz.2.1382'.
[  652.003180][ T6247] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1383'.
[  652.092716][ T6250] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=256 sclass=netlink_route_socket pid=6250 comm=syz.2.1383
[  652.457372][ T6251] netlink: 'syz.4.1393': attribute type 4 has an invalid length.
[  652.467200][ T6251] netlink: 'syz.4.1393': attribute type 4 has an invalid length.
[  652.478761][ T6251] netlink: 'syz.4.1393': attribute type 4 has an invalid length.
[  660.447294][   T28] kauditd_printk_skb: 5 callbacks suppressed
[  660.447319][   T28] audit: type=1400 audit(1747353380.167:575): avc:  denied  { ioctl } for  pid=6278 comm="syz.2.1390" path="/dev/fuse" dev="devtmpfs" ino=93 ioctlcmd=0xe500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1
[  661.583330][   T28] audit: type=1326 audit(1747353382.427:576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6311 comm="syz.4.1401" exe="/root/syz-executor" sig=31 arch=c000003e syscall=15 compat=0 ip=0x7fad45d2ab39 code=0x0
[  662.074862][   T28] audit: type=1400 audit(1747353382.917:577): avc:  denied  { create } for  pid=6319 comm="syz.3.1403" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1
[  662.507108][ T6330] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1402'.
[  662.518163][ T6330] device vlan2 entered promiscuous mode
[  662.523883][ T6330] device syz_tun entered promiscuous mode
[  662.990461][ T6341] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1407'.
[  670.281253][   T28] audit: type=1400 audit(1747353390.927:578): avc:  denied  { listen } for  pid=6392 comm="syz.2.1421" path="/275/file0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1
[  671.066690][ T6422] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1424'.
[  671.076593][ T6422] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1424'.
[  673.078478][ T6438] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1430'.
[  675.889296][ T6458] xt_CT: You must specify a L4 protocol and not use inversions on it
[  677.086159][   T28] audit: type=1400 audit(1747353397.927:579): avc:  denied  { append } for  pid=6464 comm="syz.3.1438" name="file0" dev="tmpfs" ino=1742 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  677.110646][ T6471] syz.5.1437[6471] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  677.110721][ T6471] syz.5.1437[6471] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  677.121797][ T6470] block device autoloading is deprecated and will be removed.
[  677.428421][ T6479] netlink: 'syz.2.1439': attribute type 4 has an invalid length.
[  678.237608][ T6481] netlink: 'syz.2.1439': attribute type 4 has an invalid length.
[  678.246475][ T6486] netlink: 'syz.2.1439': attribute type 4 has an invalid length.
[  678.362395][ T6489] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1437'.
[  678.373802][ T6489] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1437'.
[  682.261285][   T28] audit: type=1400 audit(1747353402.147:580): avc:  denied  { module_request } for  pid=6507 comm="syz.2.1444" kmod="net-pf-16-proto-16-family-mptcp_pm" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[  682.308549][ T6516] block device autoloading is deprecated and will be removed.
[  682.317169][ T6516] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  682.326535][ T6516] FAT-fs (loop5): unable to read boot sector
[  686.392949][ T6535] overlayfs: failed to clone upperpath
[  688.644561][ T6150] Bluetooth: hci0: sending frame failed (-49)
[  688.651347][ T6069] Bluetooth: hci0: Opcode 0x1003 failed: -49
[  692.731705][ T6559] netlink: 'syz.0.1453': attribute type 4 has an invalid length.
[  692.746810][ T6559] netlink: 'syz.0.1453': attribute type 4 has an invalid length.
[  692.829265][ T6559] netlink: 'syz.0.1453': attribute type 4 has an invalid length.
[  693.026918][ T6150] Bluetooth: hci0: sending frame failed (-49)
[  693.036121][ T6069] Bluetooth: hci0: Opcode 0x1003 failed: -49
[  697.834602][ T6611] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1470'.
[  699.667974][   T28] audit: type=1400 audit(1747353419.797:581): avc:  denied  { mounton } for  pid=6613 comm="syz.2.1472" path="/proc/1132/task" dev="proc" ino=37396 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1
[  700.240598][   T28] audit: type=1326 audit(1747353421.037:582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6631 comm="syz.5.1477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba8818e969 code=0x7fc00000
[  700.520145][   T28] audit: type=1326 audit(1747353421.037:583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6631 comm="syz.5.1477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba8818e969 code=0x7fc00000
[  700.544144][  T710] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  701.443020][   T28] audit: type=1326 audit(1747353421.037:584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6631 comm="syz.5.1477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba8818e969 code=0x7fc00000
[  701.476984][   T28] audit: type=1326 audit(1747353421.037:585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6631 comm="syz.5.1477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba8818e969 code=0x7fc00000
[  702.454481][   T28] audit: type=1326 audit(1747353421.037:586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6631 comm="syz.5.1477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba8818e969 code=0x7fc00000
[  702.477997][   T28] audit: type=1326 audit(1747353421.037:587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6631 comm="syz.5.1477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba8818e969 code=0x7fc00000
[  702.501560][   T28] audit: type=1326 audit(1747353421.037:588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6631 comm="syz.5.1477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba8818e969 code=0x7fc00000
[  702.530304][   T28] audit: type=1326 audit(1747353421.037:589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6631 comm="syz.5.1477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba8818e969 code=0x7fc00000
[  702.553748][   T28] audit: type=1326 audit(1747353421.047:590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6631 comm="syz.5.1477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba8818e969 code=0x7fc00000
[  704.914913][  T710] usb 6-1: device descriptor read/64, error -71
[  704.924184][   T28] kauditd_printk_skb: 705 callbacks suppressed
[  704.924200][   T28] audit: type=1326 audit(1747353425.767:1296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6631 comm="syz.5.1477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba8818e969 code=0x7fc00000
[  704.988665][ T6662] overlayfs: failed to clone upperpath
[  705.943013][ T6669] loop5: detected capacity change from 0 to 128
[  707.691764][   T28] audit: type=1400 audit(1747353428.527:1297): avc:  denied  { mount } for  pid=6658 comm="syz.3.1483" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1
[  708.011471][   T10] kworker/u4:1: attempt to access beyond end of device
[  708.011471][   T10] loop5: rw=1, sector=145, nr_sectors = 896 limit=128
[  708.086064][ T6688] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1490'.
[  708.105595][ T6688] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1490'.
[  709.770783][ T6708] overlayfs: failed to clone upperpath
[  711.333155][ T6732] syz.0.1504[6732] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  711.333234][ T6732] syz.0.1504[6732] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  713.777401][ T6754] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1504'.
[  713.943050][ T6754] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1504'.
[  717.482925][ T6771] loop5: detected capacity change from 0 to 512
[  717.491003][ T6771] EXT4-fs: Ignoring removed i_version option
[  717.497146][ T6771] EXT4-fs: Ignoring removed mblk_io_submit option
[  717.641205][ T6771] EXT4-fs (loop5): Test dummy encryption mode enabled
[  718.464562][ T6771] EXT4-fs error (device loop5): ext4_orphan_get:1400: comm syz.5.1510: inode #13: comm syz.5.1510: iget: illegal inode #
[  718.477907][ T6771] EXT4-fs (loop5): Remounting filesystem read-only
[  718.484508][ T6771] EXT4-fs error (device loop5): ext4_orphan_get:1405: comm syz.5.1510: couldn't read orphan inode 13 (err -117)
[  721.236677][ T6771] EXT4-fs (loop5): Remounting filesystem read-only
[  721.243312][ T6771] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  721.580976][ T6796] overlayfs: unrecognized mount option "verity=require" or missing value
[  722.726638][ T5929] EXT4-fs (loop5): unmounting filesystem.
[  723.870956][ T6817] loop5: detected capacity change from 0 to 512
[  723.881814][ T6817] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  723.981489][ T6817] EXT4-fs (loop5): 1 truncate cleaned up
[  723.987287][ T6817] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  724.850140][ T6150] Bluetooth: hci0: command 0x1003 tx timeout
[  724.866620][ T6069] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  725.000122][ T5929] EXT4-fs (loop5): unmounting filesystem.
[  725.291973][ T6824] overlayfs: failed to resolve './file0': -2
[  726.643773][ T6150] Bluetooth: hci0: sending frame failed (-49)
[  726.649907][ T6069] Bluetooth: hci0: Opcode 0x1003 failed: -49
[  726.787152][ T6867] hub 8-0:1.0: USB hub found
[  726.792028][ T6867] hub 8-0:1.0: 1 port detected
[  730.681042][ T6908] overlayfs: failed to resolve './file0': -2
[  730.962813][  T618] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  731.370517][  T618] usb 6-1: Using ep0 maxpacket: 16
[  731.388554][  T618] usb 6-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=29.00
[  731.402773][  T618] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  731.411124][  T618] usb 6-1: Product: syz
[  731.415337][  T618] usb 6-1: Manufacturer: syz
[  731.419932][  T618] usb 6-1: SerialNumber: syz
[  731.440551][  T618] usb 6-1: config 0 descriptor??
[  731.448870][  T618] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected
[  731.458405][  T618] usb 6-1: Detected FT4233HP
[  731.969705][  T618] ftdi_sio ttyUSB0: Unable to read latency timer: -32
[  732.178867][  T618] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  732.259404][ T6966] overlayfs: failed to resolve './file0': -2
[  732.394847][  T618] usb 6-1: USB disconnect, device number 3
[  732.406264][  T618] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  732.420895][  T618] ftdi_sio 6-1:0.0: device disconnected
[  733.830581][  T939] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  734.021696][ T6992] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1584'.
[  736.531500][ T6150] Bluetooth: hci0: sending frame failed (-49)
[  736.537725][ T6069] Bluetooth: hci0: Opcode 0x1003 failed: -49
[  736.633073][ T6996] overlayfs: failed to clone upperpath
[  737.150547][  T349] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  737.158205][ T4801] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  737.340501][ T4801] usb 3-1: Using ep0 maxpacket: 16
[  737.346873][  T349] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[  737.359892][ T4801] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  737.370839][  T710] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  737.378342][  T349] usb 1-1: New USB device found, idVendor=056a, idProduct=0307, bcdDevice= 0.00
[  737.387485][ T4801] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  737.397366][  T349] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  737.405404][ T4801] usb 3-1: New USB device found, idVendor=17ef, idProduct=6009, bcdDevice= 0.00
[  737.414745][ T4801] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  737.422999][  T349] usb 1-1: config 0 descriptor??
[  737.429248][ T4801] usb 3-1: config 0 descriptor??
[  737.520549][  T939] usb 5-1: device not accepting address 7, error -71
[  737.580548][  T710] usb 6-1: Using ep0 maxpacket: 8
[  737.586996][  T710] usb 6-1: unable to get BOS descriptor or descriptor too short
[  737.595546][  T710] usb 6-1: config 7 has an invalid interface number: 204 but max is 0
[  737.603818][  T710] usb 6-1: config 7 has no interface number 0
[  737.610107][  T710] usb 6-1: config 7 interface 204 has no altsetting 0
[  737.619248][  T710] usb 6-1: string descriptor 0 read error: -22
[  737.625726][  T710] usb 6-1: New USB device found, idVendor=0789, idProduct=0160, bcdDevice=82.fe
[  737.636900][  T710] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  737.839805][  T349] wacom 0003:056A:0307.0003: hidraw0: USB HID v0.00 Device [HID 056a:0307] on usb-dummy_hcd.0-1/input0
[  737.851044][  T710] asix 6-1:7.204 (unnamed net_device) (uninitialized): invalid hw address, using random
[  737.861512][ T4801] lenovo 0003:17EF:6009.0004: unknown main item tag 0x0
[  737.868487][ T4801] lenovo 0003:17EF:6009.0004: unknown main item tag 0x0
[  737.876670][ T4801] lenovo 0003:17EF:6009.0004: unknown main item tag 0x0
[  737.883968][ T4801] lenovo 0003:17EF:6009.0004: unknown main item tag 0x0
[  737.891077][ T4801] lenovo 0003:17EF:6009.0004: unknown main item tag 0x0
[  737.899081][ T4801] lenovo 0003:17EF:6009.0004: hidraw1: USB HID v0.00 Device [HID 17ef:6009] on usb-dummy_hcd.2-1/input0
[  737.910492][  T939] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  738.044149][  T618] usb 1-1: USB disconnect, device number 8
[  738.061672][ T4801] usb 3-1: USB disconnect, device number 7
[  738.100564][  T939] usb 5-1: Using ep0 maxpacket: 16
[  738.107364][  T939] usb 5-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  738.120301][  T939] usb 5-1: config 0 interface 0 has no altsetting 0
[  738.126944][  T939] usb 5-1: New USB device found, idVendor=056a, idProduct=00e3, bcdDevice= 0.00
[  738.136107][  T939] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  738.145110][  T939] usb 5-1: config 0 descriptor??
[  738.252238][  T710] asix 6-1:7.204 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  738.263535][  T710] asix 6-1:7.204 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9
[  738.440745][  T710] asix 6-1:7.204 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  738.451022][  T710] asix 6-1:7.204 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9
[  738.588046][  T939] wacom 0003:056A:00E3.0005: unknown main item tag 0x3
[  738.600815][  T939] wacom 0003:056A:00E3.0005: hidraw0: USB HID v10.00 Device [HID 056a:00e3] on usb-dummy_hcd.4-1/input0
[  738.682985][  T710] asix 6-1:7.204 eth1: register 'asix' at usb-dummy_hcd.5-1, ASIX AX88178 USB 2.0 Ethernet, 3a:5f:0f:ed:95:e5
[  738.697327][  T710] usb 6-1: USB disconnect, device number 4
[  738.703380][  T710] asix 6-1:7.204 eth1: unregister 'asix' usb-dummy_hcd.5-1, ASIX AX88178 USB 2.0 Ethernet
[  739.203600][  T710] usb 5-1: USB disconnect, device number 8
[  740.143543][  T710] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  740.170677][ T4801] usb 1-1: new full-speed USB device number 9 using dummy_hcd
[  741.009681][   T28] audit: type=1326 audit(1747353461.797:1298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7039 comm="syz.2.1601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0741b8e969 code=0x7fc00000
[  741.047937][   T28] audit: type=1326 audit(1747353461.797:1299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7039 comm="syz.2.1601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0741b8e969 code=0x7fc00000
[  742.162754][ T7054] overlayfs: failed to resolve './file0': -2
[  742.390560][  T710] usb 6-1: Using ep0 maxpacket: 16
[  742.412715][ T4801] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  742.424186][  T710] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  742.434535][ T4801] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  742.445671][  T710] usb 6-1: config 0 has no interfaces?
[  742.462145][ T4801] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  742.495685][ T4801] usb 1-1: New USB device strings: Mfr=145, Product=0, SerialNumber=0
[  742.515857][ T4801] usb 1-1: Manufacturer: syz
[  742.524032][  T710] usb 6-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d
[  742.577208][  T710] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  742.635447][ T4801] usb 1-1: config 0 descriptor??
[  742.643732][  T710] usb 6-1: Product: syz
[  742.648061][  T710] usb 6-1: Manufacturer: syz
[  742.653525][ T4801] hub 1-1:0.0: USB hub found
[  742.658839][  T710] usb 6-1: SerialNumber: syz
[  742.669014][  T710] usb 6-1: config 0 descriptor??
[  742.706354][ T7079] 9pnet_fd: Insufficient options for proto=fd
[  742.854607][ T4801] hub 1-1:0.0: config failed, can't read hub descriptor (err -90)
[  742.882226][  T939] usb 6-1: USB disconnect, device number 5
[  742.950531][  T710] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  743.058434][ T4801] usbhid 1-1:0.0: can't add hid device: -71
[  743.064514][ T4801] usbhid: probe of 1-1:0.0 failed with error -71
[  743.100973][ T4801] usb 1-1: USB disconnect, device number 9
[  743.154826][  T710] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  743.174000][  T710] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  743.184024][  T710] usb 3-1: New USB device found, idVendor=056a, idProduct=ff62, bcdDevice= 0.f5
[  743.193121][  T710] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  743.201643][  T710] usb 3-1: config 0 descriptor??
[  744.468097][ T7094] overlayfs: failed to resolve './file0': -2
[  744.628027][  T710] wacom 0003:056A:FF62.0006: Unknown device_type for 'HID 056a:ff62'. Ignoring.
[  744.721354][ T7109] overlayfs: unrecognized mount option "verity=require" or missing value
[  744.969046][  T939] usb 3-1: USB disconnect, device number 8
[  745.039735][  T710] usb 1-1: new low-speed USB device number 10 using dummy_hcd
[  745.250557][ T4801] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  745.272433][  T710] usb 1-1: config 1 interface 0 altsetting 144 endpoint 0x1 is Bulk; changing to Interrupt
[  745.283257][  T710] usb 1-1: config 1 interface 0 altsetting 144 endpoint 0x82 is Bulk; changing to Interrupt
[  745.295221][  T710] usb 1-1: config 1 interface 0 has no altsetting 0
[  745.307765][  T710] usb 1-1: string descriptor 0 read error: -22
[  745.314154][  T710] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  745.323312][  T710] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  745.332567][ T7109] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  745.339753][ T7109] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  745.430508][ T4801] usb 6-1: Using ep0 maxpacket: 32
[  745.436794][ T4801] usb 6-1: config 0 has an invalid interface number: 85 but max is 0
[  745.445042][ T4801] usb 6-1: config 0 has no interface number 0
[  745.451259][ T4801] usb 6-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  745.462317][ T4801] usb 6-1: config 0 interface 85 has no altsetting 0
[  745.470536][ T4801] usb 6-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[  745.479724][ T4801] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  745.487796][ T4801] usb 6-1: Product: syz
[  745.492064][ T4801] usb 6-1: Manufacturer: syz
[  745.496686][ T4801] usb 6-1: SerialNumber: syz
[  745.502074][ T4801] usb 6-1: config 0 descriptor??
[  745.538895][ T7123] pim6reg0: tun_chr_ioctl cmd 35111
[  745.625657][   T28] audit: type=1400 audit(1747353466.467:1300): avc:  denied  { compute_member } for  pid=7126 comm="syz.2.1633" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1
[  745.927836][ T4801] usb 6-1: USB disconnect, device number 6
[  746.189093][ T7133] overlayfs: failed to clone upperpath
[  746.840500][  T939] usb 3-1: new full-speed USB device number 9 using dummy_hcd
[  747.021704][  T939] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  747.032794][  T939] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  747.042603][  T939] usb 3-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00
[  747.051714][  T939] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  747.060367][  T939] usb 3-1: config 0 descriptor??
[  747.335312][   T28] audit: type=1400 audit(1747353468.177:1301): avc:  denied  { map } for  pid=7159 comm="syz.5.1645" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  747.460621][ T7166] overlayfs: failed to resolve './file0': -2
[  747.468670][  T939] zydacron 0003:13EC:0006.0007: item fetching failed at offset 5/7
[  747.477264][  T939] zydacron 0003:13EC:0006.0007: parse failed
[  747.483982][  T939] zydacron: probe of 0003:13EC:0006.0007 failed with error -22
[  747.540433][ T4801] usb 1-1: USB disconnect, device number 10
[  748.964556][ T4801] usb 3-1: USB disconnect, device number 9
[  749.713474][ T7207] overlayfs: unrecognized mount option "verity=require" or missing value
[  750.600623][ T4801] usb 3-1: new low-speed USB device number 10 using dummy_hcd
[  750.812250][ T4801] usb 3-1: config 1 interface 0 altsetting 144 endpoint 0x1 is Bulk; changing to Interrupt
[  750.823194][ T4801] usb 3-1: config 1 interface 0 altsetting 144 endpoint 0x82 is Bulk; changing to Interrupt
[  750.835360][ T4801] usb 3-1: config 1 interface 0 has no altsetting 0
[  750.846172][ T4801] usb 3-1: string descriptor 0 read error: -22
[  750.853748][ T4801] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  750.864176][ T4801] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  750.942334][ T7209] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  750.949513][ T7209] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  751.391759][ T7241] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1674'.
[  752.553272][  T939] usb 3-1: USB disconnect, device number 10
[  753.242214][ T7274] xt_bpf: check failed: parse error
[  753.270276][ T7278] syz.5.1688[7278] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  753.270385][ T7278] syz.5.1688[7278] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  753.588614][ T7286] overlayfs: unrecognized mount option "verity=require" or missing value
[  753.995765][ T4801] usb 6-1: new low-speed USB device number 7 using dummy_hcd
[  754.182229][ T4801] usb 6-1: config 1 interface 0 altsetting 144 endpoint 0x1 is Bulk; changing to Interrupt
[  754.192943][ T4801] usb 6-1: config 1 interface 0 altsetting 144 endpoint 0x82 is Bulk; changing to Interrupt
[  754.204955][ T4801] usb 6-1: config 1 interface 0 has no altsetting 0
[  754.215463][ T4801] usb 6-1: string descriptor 0 read error: -22
[  754.222103][ T4801] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  754.232930][ T4801] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  754.272244][ T7287] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  754.279468][ T7287] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  756.368907][ T4801] usb 6-1: USB disconnect, device number 7
[  756.635985][ T7371] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1715'.
[  758.149134][ T7373] overlayfs: failed to clone upperpath
[  758.701678][ T4801] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  758.888357][ T7404] tap0: tun_chr_ioctl cmd 1074025680
[  758.893949][ T4801] usb 6-1: Using ep0 maxpacket: 16
[  758.900828][ T4801] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  758.911850][ T4801] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  758.925019][ T4801] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  758.934311][ T4801] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  758.944982][ T4801] usb 6-1: config 0 descriptor??
[  759.192442][ T6150] Bluetooth: hci0: sending frame failed (-49)
[  759.198694][ T6069] Bluetooth: hci0: Opcode 0x1003 failed: -49
[  760.685048][ T7426] overlayfs: failed to resolve './file0': -2
[  761.314346][  T939] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  761.701662][  T939] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  761.711945][  T939] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  761.721684][  T939] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  761.730880][  T939] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  761.739273][  T939] usb 5-1: SerialNumber: syz
[  761.935671][ T7458] overlayfs: failed to clone upperpath
[  761.949611][  T939] usb 5-1: 0:2 : does not exist
[  761.964280][  T939] usb 5-1: USB disconnect, device number 9
[  761.987589][ T4801] usbhid 6-1:0.0: can't add hid device: -71
[  761.990133][ T7077] udevd[7077]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  761.993712][ T4801] usbhid: probe of 6-1:0.0 failed with error -71
[  762.038914][ T4801] usb 6-1: USB disconnect, device number 8
[  763.467108][  T710] usb 1-1: new full-speed USB device number 11 using dummy_hcd
[  764.182493][  T710] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  764.749281][  T710] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  765.299296][   T28] audit: type=1400 audit(1747353999.136:1302): avc:  denied  { load_policy } for  pid=7498 comm="syz.5.1769" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1
[  765.319921][ T7499] SELinux: failed to load policy
[  765.442993][  T710] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40
[  765.452186][  T710] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  765.463025][  T710] usb 1-1: can't set config #1, error -71
[  765.469353][  T710] usb 1-1: USB disconnect, device number 11
[  766.600869][ T7536] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1784'.
[  768.360564][  T939] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  768.850491][  T939] usb 5-1: Using ep0 maxpacket: 16
[  768.859609][  T939] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  768.869002][  T939] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  768.877312][  T939] usb 5-1: Product: syz
[  768.881692][  T939] usb 5-1: Manufacturer: syz
[  768.886326][  T939] usb 5-1: SerialNumber: syz
[  768.898251][  T939] r8152-cfgselector 5-1: config 0 descriptor??
[  769.331741][  T939] r8152-cfgselector 5-1: Unknown version 0x0000
[  769.338096][  T939] r8152-cfgselector 5-1: bad CDC descriptors
[  769.344589][  T939] r8152-cfgselector 5-1: Unknown version 0x0000
[  769.351493][  T939] r8152-cfgselector 5-1: USB disconnect, device number 10
[  769.859756][   T28] audit: type=1400 audit(1747354003.702:1303): avc:  denied  { ioctl } for  pid=7586 comm="syz.0.1810" path="/360/file0/.pending_reads" dev="incremental-fs" ino=2 ioctlcmd=0x6727 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  770.494766][ T7591] overlayfs: unrecognized mount option "verity=require" or missing value
[  770.523370][   T10] Bluetooth: hci0: Frame reassembly failed (-84)
[  771.753953][ T7611] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1809'.
[  771.859337][ T7613] sch_tbf: burst 0 is lower than device sit0 mtu (1480) !
[  771.920561][  T939] usb 5-1: new low-speed USB device number 11 using dummy_hcd
[  772.101543][  T939] usb 5-1: config 1 interface 0 altsetting 144 endpoint 0x1 is Bulk; changing to Interrupt
[  772.111649][  T939] usb 5-1: config 1 interface 0 altsetting 144 endpoint 0x82 is Bulk; changing to Interrupt
[  772.121793][  T939] usb 5-1: config 1 interface 0 has no altsetting 0
[  772.130328][  T939] usb 5-1: string descriptor 0 read error: -22
[  772.136746][  T939] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  772.145861][  T939] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  772.154918][ T7591] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  772.162170][ T7591] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  772.530507][ T6150] Bluetooth: hci0: command 0x1003 tx timeout
[  772.530515][ T6069] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  773.955930][  T710] usb 5-1: USB disconnect, device number 11
[  773.968560][   T28] audit: type=1326 audit(1747354007.812:1304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7650 comm="syz.3.1829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f769218e969 code=0x7ffc0000
[  773.992183][   T28] audit: type=1326 audit(1747354007.812:1305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7650 comm="syz.3.1829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f769218e969 code=0x7ffc0000
[  774.017213][   T28] audit: type=1326 audit(1747354007.812:1306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7650 comm="syz.3.1829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f769218e969 code=0x7ffc0000
[  774.041461][   T28] audit: type=1326 audit(1747354007.812:1307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7650 comm="syz.3.1829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f769218e969 code=0x7ffc0000
[  774.067375][   T28] audit: type=1326 audit(1747354007.812:1308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7650 comm="syz.3.1829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f769218e969 code=0x7ffc0000
[  774.097048][   T28] audit: type=1326 audit(1747354007.812:1309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7650 comm="syz.3.1829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f769218e969 code=0x7ffc0000
[  774.103605][ T7653] futex_wake_op: syz.3.1830 tries to shift op by 32; fix this program
[  774.122326][   T28] audit: type=1326 audit(1747354007.862:1310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7650 comm="syz.3.1829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f769218e969 code=0x7ffc0000
[  774.276493][ T1726] Bluetooth: hci0: Frame reassembly failed (-84)
[  776.304106][   T45] Bluetooth: hci0: command 0x1003 tx timeout
[  776.310225][ T6069] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  776.320320][ T7668] Bluetooth: hci0: Opcode 0x0c20 failed: -22
[  776.914142][   T28] audit: type=1400 audit(1747354010.762:1311): avc:  denied  { map } for  pid=7723 comm="syz.2.1858" path="/dev/ashmem" dev="devtmpfs" ino=269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  776.958523][ T7728] input: syz0 as /devices/virtual/input/input30
[  777.330475][    C0] ==================================================================
[  777.338605][    C0] BUG: KASAN: use-after-free in enqueue_timer+0xae/0x480
[  777.345743][    C0] Write of size 8 at addr ffff8881134c8a00 by task syz.2.1861/7731
[  777.353655][    C0] 
[  777.356073][    C0] CPU: 0 PID: 7731 Comm: syz.2.1861 Tainted: G        W          6.1.134-syzkaller-00015-g218e2bd24587 #0
[  777.367361][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[  777.377428][    C0] Call Trace:
[  777.380700][    C0]  <IRQ>
[  777.383534][    C0]  __dump_stack+0x21/0x24
[  777.387868][    C0]  dump_stack_lvl+0xee/0x150
[  777.392455][    C0]  ? __cfi_dump_stack_lvl+0x8/0x8
[  777.397477][    C0]  ? __cfi__printk+0x8/0x8
[  777.401887][    C0]  ? enqueue_timer+0xae/0x480
[  777.406558][    C0]  print_address_description+0x71/0x210
[  777.412098][    C0]  print_report+0x4a/0x60
[  777.416423][    C0]  kasan_report+0x122/0x150
[  777.420920][    C0]  ? enqueue_timer+0xae/0x480
[  777.425598][    C0]  __asan_report_store8_noabort+0x17/0x20
[  777.431314][    C0]  enqueue_timer+0xae/0x480
[  777.435815][    C0]  __mod_timer+0x79f/0xb30
[  777.440228][    C0]  mod_timer+0x1f/0x30
[  777.444288][    C0]  neigh_timer_handler+0x937/0xf00
[  777.449396][    C0]  ? __cfi_neigh_timer_handler+0x10/0x10
[  777.455021][    C0]  call_timer_fn+0x46/0x2a0
[  777.459519][    C0]  ? __cfi_neigh_timer_handler+0x10/0x10
[  777.465144][    C0]  __run_timers+0x639/0x9a0
[  777.469655][    C0]  ? calc_index+0x200/0x200
[  777.474151][    C0]  ? kvm_sched_clock_read+0x18/0x40
[  777.479346][    C0]  run_timer_softirq+0x6a/0xf0
[  777.484104][    C0]  handle_softirqs+0x1d7/0x600
[  777.488859][    C0]  ? irqtime_account_irq+0xc4/0x240
[  777.494053][    C0]  __irq_exit_rcu+0x52/0xf0
[  777.498547][    C0]  irq_exit_rcu+0x9/0x10
[  777.502866][    C0]  sysvec_apic_timer_interrupt+0xa9/0xc0
[  777.508493][    C0]  </IRQ>
[  777.511411][    C0]  <TASK>
[  777.514334][    C0]  asm_sysvec_apic_timer_interrupt+0x1b/0x20
[  777.520316][    C0] RIP: 0010:_raw_spin_unlock_irqrestore+0x55/0x80
[  777.526727][    C0] Code: 40 e4 ed 86 e8 bc 92 c4 fc 4c 89 f7 48 83 3d d1 3d fe 01 00 74 30 e8 1e 0d 00 00 90 f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 <e8> f6 e3 5b fc 65 8b 05 37 c7 12 7b 85 c0 74 05 5b 41 5e 5d c3 e8
[  777.546337][    C0] RSP: 0018:ffffc90007e0f5a0 EFLAGS: 00000206
[  777.552404][    C0] RAX: 0000000000000001 RBX: 0000000000000a06 RCX: dffffc0000000000
[  777.560366][    C0] RDX: ffffc900097af698 RSI: 0000000000000a06 RDI: 0000000000000001
[  777.568326][    C0] RBP: ffffc90007e0f5b0 R08: dffffc0000000000 R09: ffffed10227d0a21
[  777.576288][    C0] R10: ffffed10227d0a21 R11: 1ffff110227d0a20 R12: ffff88813f65b8c0
[  777.584252][    C0] R13: 0000000000000010 R14: 0000000000000001 R15: 0000000000000000
[  777.592229][    C0]  __wake_up_sync_key+0x166/0x280
[  777.597347][    C0]  ? __cfi___wake_up_sync_key+0x10/0x10
[  777.602890][    C0]  ? __skb_try_recv_datagram+0x3da/0x4d0
[  777.608519][    C0]  ? __cfi_sk_busy_loop_end+0x10/0x10
[  777.613905][    C0]  __unix_dgram_recvmsg+0x495/0xd50
[  777.619115][    C0]  ? __cfi___unix_dgram_recvmsg+0x10/0x10
[  777.624844][    C0]  ? irqentry_exit+0x37/0x40
[  777.629439][    C0]  ? ____sys_recvmsg+0x40/0x590
[  777.634300][    C0]  unix_dgram_recvmsg+0xc7/0xe0
[  777.639167][    C0]  ? __cfi_unix_dgram_recvmsg+0x10/0x10
[  777.644707][    C0]  ____sys_recvmsg+0x2a0/0x590
[  777.649474][    C0]  ? asm_sysvec_call_function_single+0x1b/0x20
[  777.655623][    C0]  ? __sys_recvmsg_sock+0x50/0x50
[  777.660651][    C0]  ? import_iovec+0x7c/0xb0
[  777.665154][    C0]  ___sys_recvmsg+0x1b2/0x510
[  777.669829][    C0]  ? __sys_recvmsg+0x270/0x270
[  777.674594][    C0]  ? cgroup_rstat_updated+0xf5/0x370
[  777.679882][    C0]  ? asm_sysvec_call_function_single+0x1b/0x20
[  777.686028][    C0]  ? do_recvmmsg+0x371/0x7a0
[  777.690610][    C0]  do_recvmmsg+0x359/0x7a0
[  777.695017][    C0]  ? __sys_recvmmsg+0x280/0x280
[  777.699878][    C0]  __x64_sys_recvmmsg+0x18d/0x240
[  777.704903][    C0]  ? __cfi___x64_sys_recvmmsg+0x10/0x10
[  777.710442][    C0]  ? fpregs_assert_state_consistent+0xb1/0xe0
[  777.716506][    C0]  x64_sys_call+0x3e7/0x9a0
[  777.721006][    C0]  do_syscall_64+0x4c/0xa0
[  777.725420][    C0]  ? clear_bhb_loop+0x15/0x70
[  777.730087][    C0]  ? clear_bhb_loop+0x15/0x70
[  777.734756][    C0]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  777.740658][    C0] RIP: 0033:0x7f0741b8e969
[  777.745077][    C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  777.764674][    C0] RSP: 002b:00007f0742a15038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[  777.773168][    C0] RAX: ffffffffffffffda RBX: 00007f0741db6080 RCX: 00007f0741b8e969
[  777.781133][    C0] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000004
[  777.789094][    C0] RBP: 00007f0741c10ab1 R08: 0000000000000000 R09: 0000000000000000
[  777.797074][    C0] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000
[  777.805144][    C0] R13: 0000000000000001 R14: 00007f0741db6080 R15: 00007fffe1a83b28
[  777.813131][    C0]  </TASK>
[  777.816149][    C0] 
[  777.818482][    C0] Allocated by task 7668:
[  777.822799][    C0]  kasan_set_track+0x4b/0x70
[  777.827389][    C0]  kasan_save_alloc_info+0x25/0x30
[  777.832501][    C0]  __kasan_kmalloc+0x95/0xb0
[  777.837084][    C0]  __kmalloc+0xb1/0x1e0
[  777.841240][    C0]  hci_alloc_dev_priv+0x27/0x1bd0
[  777.846267][    C0]  hci_uart_tty_ioctl+0x3c8/0xa00
[  777.851284][    C0]  tty_ioctl+0x8ef/0xc60
[  777.855524][    C0]  __se_sys_ioctl+0x12f/0x1b0
[  777.860197][    C0]  __x64_sys_ioctl+0x7b/0x90
[  777.864781][    C0]  x64_sys_call+0x58b/0x9a0
[  777.869279][    C0]  do_syscall_64+0x4c/0xa0
[  777.873693][    C0]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  777.879584][    C0] 
[  777.881896][    C0] Freed by task 7668:
[  777.885884][    C0]  kasan_set_track+0x4b/0x70
[  777.890487][    C0]  kasan_save_free_info+0x31/0x50
[  777.895545][    C0]  ____kasan_slab_free+0x132/0x180
[  777.900654][    C0]  __kasan_slab_free+0x11/0x20
[  777.905421][    C0]  slab_free_freelist_hook+0xc2/0x190
[  777.910794][    C0]  __kmem_cache_free+0xb7/0x1b0
[  777.915645][    C0]  kfree+0x6f/0xf0
[  777.919399][    C0]  hci_release_dev+0x13ad/0x1500
[  777.924328][    C0]  bt_host_release+0x82/0x90
[  777.928910][    C0]  device_release+0xa4/0x1d0
[  777.933491][    C0]  kobject_put+0x19d/0x280
[  777.937924][    C0]  put_device+0x1f/0x30
[  777.942070][    C0]  hci_dev_cmd+0x265/0x720
[  777.946484][    C0]  hci_sock_ioctl+0x41e/0x7f0
[  777.951151][    C0]  sock_do_ioctl+0x101/0x310
[  777.955734][    C0]  sock_ioctl+0x4d8/0x6e0
[  777.960051][    C0]  __se_sys_ioctl+0x12f/0x1b0
[  777.964744][    C0]  __x64_sys_ioctl+0x7b/0x90
[  777.969330][    C0]  x64_sys_call+0x58b/0x9a0
[  777.973829][    C0]  do_syscall_64+0x4c/0xa0
[  777.978245][    C0]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  777.984137][    C0] 
[  777.986450][    C0] Last potentially related work creation:
[  777.992148][    C0]  kasan_save_stack+0x3a/0x60
[  777.996814][    C0]  __kasan_record_aux_stack+0xb6/0xc0
[  778.002185][    C0]  kasan_record_aux_stack_noalloc+0xb/0x10
[  778.007991][    C0]  insert_work+0x51/0x300
[  778.012335][    C0]  __queue_work+0x9b1/0xd30
[  778.016838][    C0]  queue_work_on+0xd2/0x140
[  778.021342][    C0]  __hci_cmd_sync_sk+0xa3e/0xcf0
[  778.026285][    C0]  hci_cmd_sync_status+0x53/0x120
[  778.031326][    C0]  hci_dev_cmd+0x628/0x720
[  778.035752][    C0]  hci_sock_ioctl+0x41e/0x7f0
[  778.040446][    C0]  sock_do_ioctl+0x101/0x310
[  778.045038][    C0]  sock_ioctl+0x4d8/0x6e0
[  778.049372][    C0]  __se_sys_ioctl+0x12f/0x1b0
[  778.054048][    C0]  __x64_sys_ioctl+0x7b/0x90
[  778.058638][    C0]  x64_sys_call+0x58b/0x9a0
[  778.063138][    C0]  do_syscall_64+0x4c/0xa0
[  778.067548][    C0]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  778.073440][    C0] 
[  778.075753][    C0] Second to last potentially related work creation:
[  778.082323][    C0]  kasan_save_stack+0x3a/0x60
[  778.087000][    C0]  __kasan_record_aux_stack+0xb6/0xc0
[  778.092368][    C0]  kasan_record_aux_stack_noalloc+0xb/0x10
[  778.098179][    C0]  insert_work+0x51/0x300
[  778.102505][    C0]  __queue_work+0x9b1/0xd30
[  778.107002][    C0]  queue_work_on+0xd2/0x140
[  778.111499][    C0]  hci_cmd_timeout+0x191/0x200
[  778.116259][    C0]  process_one_work+0x71f/0xc40
[  778.121093][    C0]  worker_thread+0xa29/0x11f0
[  778.125771][    C0]  kthread+0x281/0x320
[  778.129827][    C0]  ret_from_fork+0x1f/0x30
[  778.134236][    C0] 
[  778.136547][    C0] The buggy address belongs to the object at ffff8881134c8000
[  778.136547][    C0]  which belongs to the cache kmalloc-8k of size 8192
[  778.150589][    C0] The buggy address is located 2560 bytes inside of
[  778.150589][    C0]  8192-byte region [ffff8881134c8000, ffff8881134ca000)
[  778.164035][    C0] 
[  778.166368][    C0] The buggy address belongs to the physical page:
[  778.172763][    C0] page:ffffea00044d3200 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1134c8
[  778.182990][    C0] head:ffffea00044d3200 order:3 compound_mapcount:0 compound_pincount:0
[  778.191301][    C0] flags: 0x4000000000010200(slab|head|zone=1)
[  778.197391][    C0] raw: 4000000000010200 dead000000000100 dead000000000122 ffff888100043500
[  778.205985][    C0] raw: 0000000000000000 0000000080020002 00000001ffffffff 0000000000000000
[  778.214557][    C0] page dumped because: kasan: bad access detected
[  778.220958][    C0] page_owner tracks the page as allocated
[  778.226659][    C0] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 3135, tgid 3130 (syz.1.640), ts 311638192876, free_ts 311551806173
[  778.249311][    C0]  post_alloc_hook+0x1f5/0x210
[  778.254074][    C0]  prep_new_page+0x1c/0x110
[  778.258570][    C0]  get_page_from_freelist+0x2c6e/0x2ce0
[  778.264105][    C0]  __alloc_pages+0x19e/0x3a0
[  778.268690][    C0]  alloc_slab_page+0x6e/0xf0
[  778.273276][    C0]  new_slab+0x98/0x3d0
[  778.277342][    C0]  ___slab_alloc+0x6f6/0xb50
[  778.281922][    C0]  __slab_alloc+0x5e/0xa0
[  778.286246][    C0]  __kmem_cache_alloc_node+0x203/0x2c0
[  778.291696][    C0]  __kmalloc+0xa1/0x1e0
[  778.295855][    C0]  vhost_dev_set_owner+0x41c/0xa20
[  778.300957][    C0]  vhost_dev_ioctl+0xbe/0xf70
[  778.305630][    C0]  vhost_vsock_dev_ioctl+0x21d/0xd90
[  778.310911][    C0]  __se_sys_ioctl+0x12f/0x1b0
[  778.315689][    C0]  __x64_sys_ioctl+0x7b/0x90
[  778.320280][    C0]  x64_sys_call+0x58b/0x9a0
[  778.324780][    C0] page last free stack trace:
[  778.329440][    C0]  free_unref_page_prepare+0x742/0x750
[  778.334891][    C0]  free_unref_page+0x8f/0x530
[  778.339563][    C0]  __free_pages+0x67/0x100
[  778.343971][    C0]  __free_slab+0xca/0x1a0
[  778.348293][    C0]  __unfreeze_partials+0x160/0x190
[  778.353401][    C0]  put_cpu_partial+0xa9/0x100
[  778.358074][    C0]  __slab_free+0x1c4/0x280
[  778.362483][    C0]  ___cache_free+0xbf/0xd0
[  778.366891][    C0]  qlist_free_all+0xc6/0x140
[  778.371478][    C0]  kasan_quarantine_reduce+0x14a/0x170
[  778.376935][    C0]  __kasan_slab_alloc+0x24/0x80
[  778.381777][    C0]  slab_post_alloc_hook+0x4f/0x2d0
[  778.386878][    C0]  kmem_cache_alloc_node+0x181/0x340
[  778.392156][    C0]  __alloc_skb+0xdf/0x7e0
[  778.396487][    C0]  inet_netconf_notify_devconf+0x169/0x220
[  778.402291][    C0]  inetdev_event+0x831/0x10e0
[  778.406963][    C0] 
[  778.409274][    C0] Memory state around the buggy address:
[  778.414891][    C0]  ffff8881134c8900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  778.422947][    C0]  ffff8881134c8980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  778.431538][    C0] >ffff8881134c8a00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  778.439582][    C0]                    ^
[  778.443644][    C0]  ffff8881134c8a80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  778.451690][    C0]  ffff8881134c8b00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  778.459754][    C0] ==================================================================
[  778.467818][    C0] Disabling lock debugging due to kernel taint
[  778.474382][    C0] general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN
[  778.486111][    C0] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007]
[  778.494526][    C0] CPU: 0 PID: 7731 Comm: syz.2.1861 Tainted: G    B   W          6.1.134-syzkaller-00015-g218e2bd24587 #0
[  778.505805][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[  778.516113][    C0] RIP: 0010:__queue_work+0x575/0xd30
[  778.521406][    C0] Code: 39 2b 0f 84 b9 00 00 00 e8 58 ce 28 00 4c 89 ff e8 30 8d a8 03 49 bc 00 00 00 00 00 fc ff df 4c 8b 6d d0 4c 89 e8 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 ef e8 7c 20 6d 00 49 8b 7d 00 e8 13 89
[  778.541020][    C0] RSP: 0018:ffffc90000007c70 EFLAGS: 00010046
[  778.547087][    C0] RAX: 0000000000000000 RBX: 000000007fffffff RCX: ffff8881140a9440
[  778.555074][    C0] RDX: 0000000000000100 RSI: 000000007fffffff RDI: 000000007fffffff
[  778.563039][    C0] RBP: ffffc90000007d08 R08: fffffffffffffffb R09: 0000000000000007
[  778.571001][    C0] R10: ffffed1022699139 R11: 1ffff11022699139 R12: dffffc0000000000
[  778.578966][    C0] R13: 0000000000000000 R14: ffff8881134c89c8 R15: 0000000000000008
[  778.586927][    C0] FS:  00007f0742a156c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000
[  778.595862][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  778.602441][    C0] CR2: 00007f0742a15d58 CR3: 00000001199b4000 CR4: 00000000003506b0
[  778.610407][    C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  778.618391][    C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  778.626354][    C0] Call Trace:
[  778.629623][    C0]  <IRQ>
[  778.632462][    C0]  delayed_work_timer_fn+0x61/0x80
[  778.637574][    C0]  ? __cfi_delayed_work_timer_fn+0x10/0x10
[  778.643374][    C0]  call_timer_fn+0x46/0x2a0
[  778.647877][    C0]  ? __cfi_delayed_work_timer_fn+0x10/0x10
[  778.653679][    C0]  __run_timers+0x667/0x9a0
[  778.658266][    C0]  ? calc_index+0x200/0x200
[  778.662780][    C0]  ? kvm_sched_clock_read+0x18/0x40
[  778.667980][    C0]  run_timer_softirq+0x6a/0xf0
[  778.672739][    C0]  handle_softirqs+0x1d7/0x600
[  778.677498][    C0]  ? irqtime_account_irq+0xc4/0x240
[  778.682725][    C0]  __irq_exit_rcu+0x52/0xf0
[  778.687223][    C0]  irq_exit_rcu+0x9/0x10
[  778.691456][    C0]  sysvec_apic_timer_interrupt+0xa9/0xc0
[  778.697080][    C0]  </IRQ>
[  778.700002][    C0]  <TASK>
[  778.702925][    C0]  asm_sysvec_apic_timer_interrupt+0x1b/0x20
[  778.708906][    C0] RIP: 0010:_raw_spin_unlock_irqrestore+0x55/0x80
[  778.715322][    C0] Code: 40 e4 ed 86 e8 bc 92 c4 fc 4c 89 f7 48 83 3d d1 3d fe 01 00 74 30 e8 1e 0d 00 00 90 f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 <e8> f6 e3 5b fc 65 8b 05 37 c7 12 7b 85 c0 74 05 5b 41 5e 5d c3 e8
[  778.735014][    C0] RSP: 0018:ffffc90007e0f5a0 EFLAGS: 00000206
[  778.741073][    C0] RAX: 0000000000000001 RBX: 0000000000000a06 RCX: dffffc0000000000
[  778.749034][    C0] RDX: ffffc900097af698 RSI: 0000000000000a06 RDI: 0000000000000001
[  778.757170][    C0] RBP: ffffc90007e0f5b0 R08: dffffc0000000000 R09: ffffed10227d0a21
[  778.765135][    C0] R10: ffffed10227d0a21 R11: 1ffff110227d0a20 R12: ffff88813f65b8c0
[  778.773097][    C0] R13: 0000000000000010 R14: 0000000000000001 R15: 0000000000000000
[  778.781065][    C0]  __wake_up_sync_key+0x166/0x280
[  778.786092][    C0]  ? __cfi___wake_up_sync_key+0x10/0x10
[  778.791634][    C0]  ? __skb_try_recv_datagram+0x3da/0x4d0
[  778.797266][    C0]  ? __cfi_sk_busy_loop_end+0x10/0x10
[  778.802632][    C0]  __unix_dgram_recvmsg+0x495/0xd50
[  778.807835][    C0]  ? __cfi___unix_dgram_recvmsg+0x10/0x10
[  778.813551][    C0]  ? irqentry_exit+0x37/0x40
[  778.818133][    C0]  ? ____sys_recvmsg+0x40/0x590
[  778.822985][    C0]  unix_dgram_recvmsg+0xc7/0xe0
[  778.827952][    C0]  ? __cfi_unix_dgram_recvmsg+0x10/0x10
[  778.833490][    C0]  ____sys_recvmsg+0x2a0/0x590
[  778.838251][    C0]  ? asm_sysvec_call_function_single+0x1b/0x20
[  778.844408][    C0]  ? __sys_recvmsg_sock+0x50/0x50
[  778.849453][    C0]  ? import_iovec+0x7c/0xb0
[  778.853955][    C0]  ___sys_recvmsg+0x1b2/0x510
[  778.858639][    C0]  ? __sys_recvmsg+0x270/0x270
[  778.863413][    C0]  ? cgroup_rstat_updated+0xf5/0x370
[  778.868709][    C0]  ? asm_sysvec_call_function_single+0x1b/0x20
[  778.875292][    C0]  ? do_recvmmsg+0x371/0x7a0
[  778.879877][    C0]  do_recvmmsg+0x359/0x7a0
[  778.884327][    C0]  ? __sys_recvmmsg+0x280/0x280
[  778.889174][    C0]  __x64_sys_recvmmsg+0x18d/0x240
[  778.894189][    C0]  ? __cfi___x64_sys_recvmmsg+0x10/0x10
[  778.899988][    C0]  ? fpregs_assert_state_consistent+0xb1/0xe0
[  778.906054][    C0]  x64_sys_call+0x3e7/0x9a0
[  778.910556][    C0]  do_syscall_64+0x4c/0xa0
[  778.914972][    C0]  ? clear_bhb_loop+0x15/0x70
[  778.919638][    C0]  ? clear_bhb_loop+0x15/0x70
[  778.924308][    C0]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  778.930199][    C0] RIP: 0033:0x7f0741b8e969
[  778.934605][    C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  778.954205][    C0] RSP: 002b:00007f0742a15038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[  778.962611][    C0] RAX: ffffffffffffffda RBX: 00007f0741db6080 RCX: 00007f0741b8e969
[  778.970578][    C0] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000004
[  778.978540][    C0] RBP: 00007f0741c10ab1 R08: 0000000000000000 R09: 0000000000000000
[  778.986504][    C0] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000
[  778.994468][    C0] R13: 0000000000000001 R14: 00007f0741db6080 R15: 00007fffe1a83b28
[  779.002434][    C0]  </TASK>
[  779.005454][    C0] Modules linked in:
[  779.009346][    C0] ---[ end trace 0000000000000000 ]---
[  779.014783][    C0] RIP: 0010:__queue_work+0x575/0xd30
[  779.020065][    C0] Code: 39 2b 0f 84 b9 00 00 00 e8 58 ce 28 00 4c 89 ff e8 30 8d a8 03 49 bc 00 00 00 00 00 fc ff df 4c 8b 6d d0 4c 89 e8 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 ef e8 7c 20 6d 00 49 8b 7d 00 e8 13 89
[  779.039660][    C0] RSP: 0018:ffffc90000007c70 EFLAGS: 00010046
[  779.045719][    C0] RAX: 0000000000000000 RBX: 000000007fffffff RCX: ffff8881140a9440
[  779.053681][    C0] RDX: 0000000000000100 RSI: 000000007fffffff RDI: 000000007fffffff
[  779.061645][    C0] RBP: ffffc90000007d08 R08: fffffffffffffffb R09: 0000000000000007
[  779.069604][    C0] R10: ffffed1022699139 R11: 1ffff11022699139 R12: dffffc0000000000
[  779.077595][    C0] R13: 0000000000000000 R14: ffff8881134c89c8 R15: 0000000000000008
[  779.085555][    C0] FS:  00007f0742a156c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000
[  779.094476][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  779.101057][    C0] CR2: 00007f0742a15d58 CR3: 00000001199b4000 CR4: 00000000003506b0
[  779.109033][    C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  779.117000][    C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  779.124972][    C0] Kernel panic - not syncing: Fatal exception in interrupt
[  779.132449][    C0] Kernel Offset: disabled
[  779.136778][    C0] Rebooting in 86400 seconds..