last executing test programs:

58.093985678s ago: executing program 32 (id=14):
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x14, 0x0, &(0x7f00000009c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xe, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000a00)={r0}, 0xc)
r1 = socket(0x10, 0x3, 0x0)
bind$netlink(r1, &(0x7f0000000280)={0x10, 0x0, 0x1, 0x2000000}, 0xc)
write(r1, &(0x7f00000002c0)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26)
connect$netlink(r1, &(0x7f0000000300)=@proc={0x10, 0x0, 0x1, 0x200}, 0xc)
setsockopt$sock_int(r1, 0x1, 0x21, &(0x7f0000000340)=0x10, 0x4)
write(r1, &(0x7f0000000380)='\"', 0x1)
recvmmsg(r1, &(0x7f00000003c0), 0x3ffffffffffff81, 0x2, 0x0)

56.938034995s ago: executing program 4 (id=17):
mlock(&(0x7f0000400000/0xc00000)=nil, 0xc00000)
mremap(&(0x7f0000bfd000/0x400000)=nil, 0x400000, 0x400000, 0x7, &(0x7f0000000000/0x400000)=nil)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19)
r0 = userfaultfd(0x801)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3})
ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f00000001c0)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1})
mlock(&(0x7f000025b000/0x400000)=nil, 0x400000)
r1 = syz_create_resource$binfmt(&(0x7f0000000140)='./file0\x00')
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000000)=0x207, 0x4)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'sit0\x00', <r4=>0x0})
sendto$packet(r3, &(0x7f0000000080)="05031600d3fc140000004788031c09103c28", 0xfce0, 0x4, &(0x7f00000000c0)={0x11, 0x86dd, r4, 0x1, 0x0, 0x6, @multicast}, 0x14)
execveat$binfmt(0xffffffffffffffff, r1, &(0x7f0000000200)={[&(0x7f0000000140)='/dev/md0\x00']}, 0x0, 0x400)

55.673850984s ago: executing program 4 (id=22):
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000040)={[0x5]}, 0x8)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
add_key(&(0x7f00000001c0)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x1d8, 0xfffffffffffffffe)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r1 = gettid()
timer_create(0x0, &(0x7f00000006c0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000780)=<r2=>0x0)
r3 = syz_open_dev$usbmon(&(0x7f0000000180), 0x2, 0x0)
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000001, 0x12, r3, 0x0)
ioctl$MON_IOCG_STATS(r3, 0x80089203, 0x0)
readv(r0, &(0x7f00000007c0)=[{&(0x7f0000011740)=""/4094, 0xffe}], 0x1)
timer_settime(r2, 0x1, &(0x7f0000012740)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9)

55.341161569s ago: executing program 4 (id=23):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000001100)=ANY=[@ANYBLOB="a4000000010201040000000000000000020000030800044000000001080004400000ffff8000018014000180080001"], 0xa4}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000)

55.282599854s ago: executing program 4 (id=24):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
syz_mount_image$exfat(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x80, &(0x7f0000000480)=ANY=[@ANYRES8=r1, @ANYRES16=r1, @ANYRES32=0x0], 0x1, 0x1548, &(0x7f0000000a00)="$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")
mkdir(&(0x7f0000001f80)='./bus\x00', 0x0)
mount$incfs(&(0x7f0000001fc0)='./bus\x00', &(0x7f0000002000)='./bus\x00', &(0x7f0000002040), 0x1804002, 0x0)
chdir(&(0x7f0000002080)='./bus\x00')
r2 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r2, &(0x7f00000020c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x8, 0x3, 0x220, 0x0, 0x11, 0x148, 0x0, 0x0, 0x190, 0x2a8, 0x2a8, 0x190, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x6, 0x6, 0xd04, 'netbios-ns\x00', {0x5}}}}, {{@ip={@multicast1, @private=0xa010102, 0xffffffff, 0xffffff00, 'nr0\x00', 'macsec0\x00', {0xff}, {}, 0x6, 0x2, 0x8}, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x288)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.stat\x00', 0x275a, 0x0)
write$binfmt_script(r3, &(0x7f0000000040), 0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0)
ioctl$EXT4_IOC_GET_ES_CACHE(r3, 0xc020662a, &(0x7f0000000080)={0x4f, 0x1f, 0x5, 0x5})
getsockopt$MRT(r3, 0x0, 0xce, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)=ANY=[@ANYBLOB="c8000000020201060000000000000000020000003400018014000180080001000102030408000200050607081c00028005000100060000000600020004d2000006000300001500003400028014000180080001"], 0xc8}}, 0x0)

55.071170656s ago: executing program 4 (id=26):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
close(r0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x7, @rand_addr=' \x01\x00', 0x23}, 0x1c)

54.561997448s ago: executing program 0 (id=32):
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9)

54.556047849s ago: executing program 4 (id=33):
syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x0, &(0x7f0000000280), 0xfe, 0x259, &(0x7f00000002c0)="$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")
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000580)=0x400)
r0 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./file1\x00', 0x42, 0x0)
pwrite64(r0, &(0x7f0000000600)='\f', 0x1, 0x8000c61)
openat(0xffffffffffffff9c, 0x0, 0x101042, 0x15)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
read$FUSE(r0, &(0x7f0000003800)={0x2020}, 0x2020)

54.109029705s ago: executing program 33 (id=33):
syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x0, &(0x7f0000000280), 0xfe, 0x259, &(0x7f00000002c0)="$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")
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000580)=0x400)
r0 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./file1\x00', 0x42, 0x0)
pwrite64(r0, &(0x7f0000000600)='\f', 0x1, 0x8000c61)
openat(0xffffffffffffff9c, 0x0, 0x101042, 0x15)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
read$FUSE(r0, &(0x7f0000003800)={0x2020}, 0x2020)

53.879764308s ago: executing program 0 (id=35):
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x14, &(0x7f0000000980)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0xe, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, 0x0, 0x0)
r0 = socket(0x10, 0x3, 0x0)
bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x1, 0x2000000}, 0xc)
write(r0, &(0x7f00000002c0)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26)
connect$netlink(r0, &(0x7f0000000300)=@proc={0x10, 0x0, 0x1, 0x200}, 0xc)
setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000000340)=0x10, 0x4)
write(r0, &(0x7f0000000380)='\"', 0x1)
recvmmsg(r0, 0x0, 0x0, 0x2, 0x0)

53.66262651s ago: executing program 0 (id=37):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./file0\x00', 0x2c41, 0x0)
pipe2$9p(&(0x7f00000002c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r3 = dup(r2)
bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e21, 0x4, @loopback, 0x72}, 0x1c)
write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="5300000007000046009d168d6e039e0aa7f17fe7a7b715186918464d", @ANYRES8=r1], 0xffffffffffffff36)
mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[], [], 0x6b}})

53.587328348s ago: executing program 0 (id=38):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1, 0x5, 0x8, 0x100, 0x0, 0x0, 0xffffffff, '\x00', 0x0, 0x0}, 0x50)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
close(0x3)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180)=0xffffffffffffffff, 0x4)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0x1, 0x0, r0, 0x2, '\x00', 0x0, r2, 0x3, 0x1, 0x5}, 0x50)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5b7d, 0x116245af0baa48c7}, [@IFLA_AF_SPEC={0x8, 0x1a, 0x0, 0x1, [@AF_INET6={0x4}]}]}, 0x28}}, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x9, 0x4, 0x8, 0x8}, 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=@framed={{}, [@generic={0x7a, 0xa, 0x0, 0xfffffff0}, @map_fd={0x18, 0x1, 0x1, 0x0, r0}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0xbf, 0x3, 0xa}, @generic={0x7, 0x3, 0x0, 0x0, 0xfffffff0}, @generic={0xb7, 0x4, 0x0, 0x0, 0x44}, @generic={0x85, 0x0, 0x0, 0x0, 0x2}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r6, 0x0, 0x0}, 0x10)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000700)={'syztnl1\x00', &(0x7f0000000680)={'syztnl1\x00', <r7=>0x0, 0x2f, 0x9, 0x0, 0x81, 0x27, @local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x10, 0x7800, 0xfea, 0x800}})
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[], 0x48)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x14, &(0x7f0000000900)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000018110000", @ANYRES32=r8], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000009c0)={r9, r8}, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x1d, 0x15, &(0x7f00000004c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xa}, {}, {}, [@jmp={0x5, 0x1, 0x3, 0x0, 0xb, 0x10, 0x1}, @map_fd={0x18, 0xa, 0x1, 0x0, r0}, @call={0x85, 0x0, 0x0, 0xce}, @map_fd={0x18, 0x3, 0x1, 0x0, r4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x109}}}, &(0x7f0000000580)='GPL\x00', 0x0, 0x2c, &(0x7f0000000640)=""/44, 0x41100, 0x0, '\x00', r7, @fallback=0x1c, r2, 0x8, &(0x7f0000000780)={0x7, 0x5}, 0x8, 0x10, &(0x7f00000007c0)={0x1, 0x3, 0x2, 0x34}, 0x10, 0x0, r5, 0x6, &(0x7f0000000a00)=[r0, r3, r4, r0, r4, r8], &(0x7f0000000a40)=[{0x2, 0x3, 0xd, 0x8}, {0x0, 0x5, 0xc, 0x4}, {0x2, 0x3, 0x0, 0x5}, {0x1, 0x1, 0x5, 0xa}, {0x0, 0x2, 0xf, 0x2}, {0x0, 0x1, 0x10, 0xb}], 0x10, 0x79ad}, 0x94)

53.401934737s ago: executing program 0 (id=39):
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r0, &(0x7f0000000440), 0x10)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
listen(r1, 0x1bde)
mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1)
r2 = open(&(0x7f0000000100)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000140)=0x10)
link(&(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
r3 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r3, &(0x7f0000000480)={0x28, 0x0, 0x0, @local}, 0x10)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0x6, &(0x7f0000000680)=ANY=[@ANYBLOB="05000000000000007111ae00000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f00000006c0)='GPL\x00', 0x5, 0x29e, &(0x7f0000000700)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={0xffffffffffffffff, 0xe0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x0, 0xfffffffffffffde1, 0x10, &(0x7f0000000940), &(0x7f0000000980), 0x8, 0x0, 0x8, 0x0, 0x0}}, 0x10)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000009c0)={r4, 0xe0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000540)={0x1, &(0x7f0000000580)=[{0x6, 0x0, 0xfd, 0x7fffffff}]})
close_range(r5, 0xffffffffffffffff, 0x0)

53.321381675s ago: executing program 0 (id=41):
r0 = syz_open_dev$evdev(&(0x7f0000000280), 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x841e, &(0x7f0000000d40)={[{@nojournal_checksum}, {@jqfmt_vfsold}, {@lazytime}, {@usrquota}, {@usrquota}], [{@fsname={'fsname', 0x3d, 'doraise\xff\x00^p`\xec\xe3\xabP\xcfr\x96\xa7^\x91\xae\x95d\x1dt\xb9\x9b\xa7\xbdY\xc1L\x9c\xac\xbai\xecvC\xee\x1f\x7f\xdeV\n\x16\xb4\x02\\\x9bt\xc8\xdb\xa8j\x98\x9c\xac>\xe8\xfa9gCW\x8f.\xc0*)S\x9ew\xe5\xf9\x8c\x81\x12\xb7\xa1\x1e\xd5/_\x8aM\x1a\xf4\x19\x95\xc5\xc8\xf4\xdd\a<F\xb7\xc5[\xf1\x04\xa3\x16\xc6L\xe3U\xa4\xf2\xcdi\xa4\xe2\xec\x12iC\xdf\xc6\xb8\xb6\xec\xd4\xeb\n\x1a\xb0@\"o\xd8gKr\xcf\x92#\x13:\xd4\xa6\xe91\xc8\xd4xv-\xcf$\xa9\xaa\xd8\xf5\x05\xaa>-\xe03\x882\xa7\xca\xc2ZH\xa5{\x19\xa8A\xd8\xfe\xb6\x92Z\xb7\xf5\x9a\xed\"\x92\x1c\xc9t\xea\x83\"Q\xfe^\xee\x04\xf3\x05\xb1\xd4-\x87\x05\a\xfb\x1f,\x91\xe4\xa7ZQmb\x9bn(}\xfd\xcc\xdd%\xa0\xc6\xa6|\x98I/\xa4\x1fVfe\xff\x0e?\xadC\x8c\xb0\x98\x03\xd7\\\x80\xaa\xaag\xc9\x9e\x0f\xab\x95Wy1\x19\xb4\xdb\x84\xd7`\x11\x8c\xd5\x96\xf9A\x8b\x9b\x9e(X?'}}, {@subj_role={'subj_role', 0x3d, 'fowner'}}, {@subj_role={'subj_role', 0x3d, 'veth1_to_batadv\x00'}}, {@dont_appraise}, {@appraise}, {@dont_appraise}]}, 0x3, 0x42f, &(0x7f0000000300)="$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")
r1 = openat(0xffffffffffffff9c, &(0x7f0000000740)='./file1\x00', 0x181042, 0x65)
pwrite64(r1, &(0x7f0000000780)='2', 0x1, 0x84fed0)
r2 = openat(0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0x129042, 0x15)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x4000)
syz_mount_image$vfat(&(0x7f0000000800), &(0x7f0000000840)='./file0\x00', 0x200008, &(0x7f00000002c0)=ANY=[@ANYRES8, @ANYRESOCT=r0, @ANYRES64], 0x1, 0x3a0, &(0x7f00000008c0)="$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")
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_GET_REG_LIST(r1, 0xc008aeb0, &(0x7f0000000cc0))
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000240)={0x1, 0x0, [{0x400000f4, 0x0, 0x6}]})
ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r5, 0x8002f515, &(0x7f0000000c80))
r6 = socket$inet6(0xa, 0x3, 0x7)
setsockopt$inet6_int(r6, 0x29, 0x4b, &(0x7f0000000d00)=0x2, 0x4)
keyctl$instantiate_iov(0x14, 0x0, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000f00)='./mnt\x00', 0x1ff)
mount(0x0, &(0x7f0000000f40)='./mnt\x00', &(0x7f0000000f80)='tracefs\x00', 0x0, 0x0)
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000fc0)='./mnt\x00', 0x80, 0x0)
r7 = openat(0xffffffffffffff9c, &(0x7f0000001000)='./mnt/trace_pipe\x00', 0x8000, 0x4)
r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000001100)=ANY=[@ANYBLOB="18000000", @ANYRES16=r8, @ANYBLOB="09072cbd707e0000002576409105051700eb95ab8f39c2"], 0x18}, 0x1, 0x0, 0x0, 0x40084}, 0x4000000)
read(r7, &(0x7f0000001140)=""/16384, 0x4000)
syz_usb_disconnect(r0)
r9 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00', <r10=>0x0})
ioctl$sock_inet6_SIOCADDRT(r9, 0x890b, &(0x7f0000000040)={@private0, @dev={0xfe, 0x80, '\x00', 0x2f}, @local, 0x8, 0x0, 0x0, 0x500, 0x0, 0x4d30356, r10})
r11 = open(&(0x7f00000000c0)='./cgroup.cpu/cpuset.cpus\x00', 0x121342, 0x0)
write$tcp_mem(r11, &(0x7f0000000180)={0x5e20, 0x2d, 0x80000000, 0x3a, 0x7, 0x2c}, 0xfffffffffffffee0)

38.246534984s ago: executing program 34 (id=41):
r0 = syz_open_dev$evdev(&(0x7f0000000280), 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x841e, &(0x7f0000000d40)={[{@nojournal_checksum}, {@jqfmt_vfsold}, {@lazytime}, {@usrquota}, {@usrquota}], [{@fsname={'fsname', 0x3d, 'doraise\xff\x00^p`\xec\xe3\xabP\xcfr\x96\xa7^\x91\xae\x95d\x1dt\xb9\x9b\xa7\xbdY\xc1L\x9c\xac\xbai\xecvC\xee\x1f\x7f\xdeV\n\x16\xb4\x02\\\x9bt\xc8\xdb\xa8j\x98\x9c\xac>\xe8\xfa9gCW\x8f.\xc0*)S\x9ew\xe5\xf9\x8c\x81\x12\xb7\xa1\x1e\xd5/_\x8aM\x1a\xf4\x19\x95\xc5\xc8\xf4\xdd\a<F\xb7\xc5[\xf1\x04\xa3\x16\xc6L\xe3U\xa4\xf2\xcdi\xa4\xe2\xec\x12iC\xdf\xc6\xb8\xb6\xec\xd4\xeb\n\x1a\xb0@\"o\xd8gKr\xcf\x92#\x13:\xd4\xa6\xe91\xc8\xd4xv-\xcf$\xa9\xaa\xd8\xf5\x05\xaa>-\xe03\x882\xa7\xca\xc2ZH\xa5{\x19\xa8A\xd8\xfe\xb6\x92Z\xb7\xf5\x9a\xed\"\x92\x1c\xc9t\xea\x83\"Q\xfe^\xee\x04\xf3\x05\xb1\xd4-\x87\x05\a\xfb\x1f,\x91\xe4\xa7ZQmb\x9bn(}\xfd\xcc\xdd%\xa0\xc6\xa6|\x98I/\xa4\x1fVfe\xff\x0e?\xadC\x8c\xb0\x98\x03\xd7\\\x80\xaa\xaag\xc9\x9e\x0f\xab\x95Wy1\x19\xb4\xdb\x84\xd7`\x11\x8c\xd5\x96\xf9A\x8b\x9b\x9e(X?'}}, {@subj_role={'subj_role', 0x3d, 'fowner'}}, {@subj_role={'subj_role', 0x3d, 'veth1_to_batadv\x00'}}, {@dont_appraise}, {@appraise}, {@dont_appraise}]}, 0x3, 0x42f, &(0x7f0000000300)="$eJzs289rHFUcAPDvzCat/WViqT+aVo1WMfgjadJae/CiKHhQEPRQjzFJS+y2kSaCLUGjSD1Kwbt4FPwLPOlF1JPgVe9SKJJLq6eV2Z1Jdje7aZJustX9fGCS92be8t53Z97ue/N2AuhZw9mfJGJ/RPweEQO1bGOB4dq/W8uLU38vL04lUam89VdSLXdzeXGqKFq8bl+R6YtIP0viSIt65y9fOT9ZLs9cyvNjCxfeH5u/fOW52QuT52bOzVycOH365InxF05NPN+ROLO4bg59NHf08GvvXHtj6sy1d3/+Ninib4qjQ4bXO/hkpdLh6rrrQF066etiQ9iUUq2bRn+1/w9EKVZP3kC8+mlXGwdsq0qlUnmg/eGlCvA/lkS3WwB0R/FFn81/i22Hhh53hRsv1SZAWdy38q12pC/SvEx/0/y2k4Yj4szSP19lW2zPfQgAgAbfZ+OfZ1uN/9Kovy90b76GMhgR90XEwYg4FRGHIuL+iGrZByPioU3W37xIsnb8k17fUmAblI3/XszXthrHf8XoLwZLee5ANf7+5OxseeZ4/p6MRP/uLD++Th0/vPLbF+2O1Y//si2rvxgL5u243re78TXTkwuTdxJzvRufRAz1tYo/WVkJSCLicEQMbbGO2ae/Odru2O3jX0cH1pkqX0c8VTv/S9EUfyFZf31y7J4ozxwfK66KtX759eqb7eq/o/g7IDv/e1te/yvxDyb167Xzm6/j6h+ft53TbPX635W83bDvw8mFhUvjEbuS12uNrt8/0VRuYrV8Fv/Isdb9/2CsvhNHIiK7iB+OiEci4tG87Y9FxOMRcWyd+H96+Yn3th7/9srin97U+V9N7IrmPa0TpfM/ftdQ6eBm4s/O/8lqaiTfs5HPv420a2tXMwAAAPz3pBGxP5J0dCWdpqOjtd/wH4q9aXlufuGZs3MfXJyuPSMwGP1pcadroO5+6Hg+rS/yE035E/l94y9Le6r50am58nS3g4cet69N/8/8Wep264Bt53kt6F36P/Qu/R96l/4PvatF/9/TjXYAO6/V9//HXWgHsPOa+r9lP+gh5v/Qu/R/6F36P/Sk+T1x+4fkJSTWJCK9K5ohsU2Jbn8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdMa/AQAA//9QOObV")
r1 = openat(0xffffffffffffff9c, &(0x7f0000000740)='./file1\x00', 0x181042, 0x65)
pwrite64(r1, &(0x7f0000000780)='2', 0x1, 0x84fed0)
r2 = openat(0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0x129042, 0x15)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x4000)
syz_mount_image$vfat(&(0x7f0000000800), &(0x7f0000000840)='./file0\x00', 0x200008, &(0x7f00000002c0)=ANY=[@ANYRES8, @ANYRESOCT=r0, @ANYRES64], 0x1, 0x3a0, &(0x7f00000008c0)="$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")
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_GET_REG_LIST(r1, 0xc008aeb0, &(0x7f0000000cc0))
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000240)={0x1, 0x0, [{0x400000f4, 0x0, 0x6}]})
ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r5, 0x8002f515, &(0x7f0000000c80))
r6 = socket$inet6(0xa, 0x3, 0x7)
setsockopt$inet6_int(r6, 0x29, 0x4b, &(0x7f0000000d00)=0x2, 0x4)
keyctl$instantiate_iov(0x14, 0x0, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000f00)='./mnt\x00', 0x1ff)
mount(0x0, &(0x7f0000000f40)='./mnt\x00', &(0x7f0000000f80)='tracefs\x00', 0x0, 0x0)
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000fc0)='./mnt\x00', 0x80, 0x0)
r7 = openat(0xffffffffffffff9c, &(0x7f0000001000)='./mnt/trace_pipe\x00', 0x8000, 0x4)
r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000001100)=ANY=[@ANYBLOB="18000000", @ANYRES16=r8, @ANYBLOB="09072cbd707e0000002576409105051700eb95ab8f39c2"], 0x18}, 0x1, 0x0, 0x0, 0x40084}, 0x4000000)
read(r7, &(0x7f0000001140)=""/16384, 0x4000)
syz_usb_disconnect(r0)
r9 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00', <r10=>0x0})
ioctl$sock_inet6_SIOCADDRT(r9, 0x890b, &(0x7f0000000040)={@private0, @dev={0xfe, 0x80, '\x00', 0x2f}, @local, 0x8, 0x0, 0x0, 0x500, 0x0, 0x4d30356, r10})
r11 = open(&(0x7f00000000c0)='./cgroup.cpu/cpuset.cpus\x00', 0x121342, 0x0)
write$tcp_mem(r11, &(0x7f0000000180)={0x5e20, 0x2d, 0x80000000, 0x3a, 0x7, 0x2c}, 0xfffffffffffffee0)

31.561094807s ago: executing program 7 (id=226):
io_submit(0x0, 0x1, &(0x7f00000002c0)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x5, 0xffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}])
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], &(0x7f00000004c0)=""/237, 0x37, 0xed, 0x1}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x9, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="850000000000000007200000000000009500000008000000"], &(0x7f00000006c0)='GPL\x00', 0x2, 0x1000, &(0x7f0000000b40)=""/4096, 0x0, 0x0, '\x00', 0x0, @fallback, r0, 0x14, &(0x7f0000001b40), 0x8, 0x10, &(0x7f0000001b80)={0x0, 0x3}, 0x10}, 0x94)
r1 = openat$rtc(0xffffff9c, &(0x7f0000000000), 0xa200, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r1, 0x7005, 0x0)
readv(r1, &(0x7f0000000040)=[{0x0}], 0x1)
r2 = gettid()
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000700))
timer_create(0x1, &(0x7f0000000340)={0x0, 0x21, 0x4, @tid=r2}, &(0x7f0000000380)=<r3=>0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000880)=@generic={&(0x7f0000000840)='./file0\x00', 0x0, 0x10}, 0x18)
setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000001e40)=@mangle={'mangle\x00', 0x64, 0x6, 0x670, 0x428, 0x1b8, 0x2e0, 0x1b8, 0x2e0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x9}}}, {{@ipv6={@mcast1, @local, [0xff000000], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@unspec=@connmark={{0x30}}, @common=@inet=@socket1={{0x28, 'socket\x00', 0x3}}]}, @common=@unspec=@CONNSECMARK={0x28}}, {{@uncond, 0x0, 0x120, 0x148, 0x0, {}, [@common=@frag={{0x30}}, @common=@hbh={{0x48}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6]}}]}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0x138, 0x178, 0x0, {}, [@common=@dst={{0x48}}, @common=@dst={{0x48}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6d0)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), r5)
sendmsg$NL802154_CMD_SET_CHANNEL(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x1c, r6, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x1c}}, 0x64010)
r7 = openat$uhid(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0)
r8 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r8, 0x107, 0x12, &(0x7f0000001d80)={0x0, 0x6}, 0x4)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
setsockopt$packet_fanout_data(r8, 0x107, 0x16, &(0x7f0000001dc0)={0x2, &(0x7f00000009c0)=[{0x30, 0x0, 0x6, 0x4ed}, {0x6}]}, 0x10)
readv(r7, &(0x7f0000000440)=[{&(0x7f0000000a40)=""/155, 0x9b}], 0x1)
timer_settime(r3, 0x1, &(0x7f0000000b00)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
pipe(&(0x7f00000008c0)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
write$binfmt_script(r9, &(0x7f0000000900)={'#! ', './file0', [{0x20, ','}, {0x20, '](-'}], 0xa, "c70f352968a4d43292f743b0c5927d39726961e9aeeb0d813460ce0d102071b5eb6df466bc31313d364f65c763edc538e0f70dee40312cf6bb86173d1630448d65173505e11244fbdbe2fd7bb46044f486477744ca0d6dd853e7a77a6d3778866cba6ff2a18971"}, 0x78)
syz_mount_image$fuse(0x0, &(0x7f0000000740)='./file0\x00', 0x2000032, 0x0, 0x1, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)='system.posix_acl_access\x00', &(0x7f0000000800)=ANY=[@ANYBLOB="0200000001000200001c00000400010000000000100005000000000020"], 0x24, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000980), 0x48241, 0x0)
r10 = socket$inet6_tcp(0xa, 0x1, 0x0)
r11 = dup(r10)
ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000a00)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})

30.473964538s ago: executing program 7 (id=237):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2840, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000000c0)={{0x8080000, 0x30000, 0x8, 0x9, 0x3, 0x0, 0xa, 0x2d, 0x0, 0x30, 0x19}, {0x1, 0x3000, 0x4, 0x9, 0x40, 0x5, 0x7d, 0x9, 0x1, 0x3, 0x3, 0x1}, {0xb000, 0xe000, 0xe, 0xf, 0x3, 0x7, 0xfe, 0x89, 0x1, 0xab, 0x1}, {0x30000, 0x8000000, 0x3, 0x5d, 0x4, 0x43, 0x9, 0xfa, 0x80, 0x7, 0xe}, {0xa000, 0x9000, 0xe, 0x2, 0x3, 0x7, 0xab, 0x7f, 0x47, 0x83, 0xf7, 0x82}, {0x1000, 0x80a0000, 0x8, 0xa0, 0xb1, 0x8, 0x1, 0xd, 0x88, 0xc, 0x1, 0xfd}, {0x54000, 0x2, 0x4, 0x5, 0x7, 0xff, 0xb, 0x0, 0x5, 0x81, 0xff, 0x70}, {0xd000, 0xb000, 0xe, 0x5, 0xf, 0x7, 0x1, 0x18, 0x5, 0x3, 0x7, 0x9}, {0x30000, 0x2d}, {0x10000, 0x8000}, 0xc0010000, 0x0, 0x50000, 0x42024, 0xb, 0x1, 0x3000, [0x6840000000000002, 0x3, 0x94, 0x80ff]})

30.390874107s ago: executing program 7 (id=238):
socket$can_raw(0x1d, 0x3, 0x1)
r0 = dup(0xffffffffffffffff) (async)
prlimit64(0x0, 0xe, &(0x7f00000002c0)={0x8, 0x8b}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40000) (async)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) (async)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0x2) (async)
sched_setscheduler(r1, 0x2, &(0x7f0000000380)=0x6) (async)
r2 = socket$tipc(0x1e, 0x4, 0x0) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000009, 0x10, 0xffffffffffffffff, 0x13d4b000) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async)
r6 = timerfd_create(0x0, 0x0)
timerfd_settime(r6, 0x3, &(0x7f00000000c0)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000)
readv(r6, 0x0, 0x0) (async)
recvmmsg(r5, &(0x7f0000000200)=[{{0x0, 0x0, 0x0}, 0x3}, {{&(0x7f00000004c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000000880)=[{&(0x7f0000001000)=""/41, 0x29}, {&(0x7f0000001040)=""/129, 0x81}], 0x2, &(0x7f0000001100)=""/161, 0xa1}, 0x5d2}], 0x2, 0x1, 0x0) (async)
sendmmsg$unix(r4, &(0x7f00000004c0), 0x400000000000041, 0x0)
recvmmsg(r3, &(0x7f0000000500), 0x80002c1, 0x2, 0x0) (async)
syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, 0x0) (async)
r7 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r7, 0x107, 0x12, 0x0, 0x0) (async)
syz_emit_ethernet(0x46, 0x0, 0x0) (async)
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
ioctl$XFS_IOC_FD_TO_HANDLE(r2, 0xc038586a, &(0x7f00000001c0)={<r8=>r5, &(0x7f0000000080)='-$\x00', 0x400000, &(0x7f0000000040)={@align=0x8, {0x2, 0x1, 0x4, 0x9}}, 0x6, &(0x7f0000000280)={@_ha_fsid}, &(0x7f0000000100)=0x11f2})
sendmsg$nl_xfrm(r8, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[], 0x160}, 0x1, 0x0, 0x0, 0x10810}, 0x48080) (async)
syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000780)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1, &(0x7f0000000140)={[], [{@fowner_lt}, {@smackfshat={'smackfshat', 0x3d, 'staff_u'}}, {@defcontext={'defcontext', 0x3d, 'staff_u'}}]}, 0xff, 0x740, &(0x7f00000008c0)="$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")
setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, 0x0, 0x0)

29.803128476s ago: executing program 7 (id=244):
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x841e, &(0x7f0000000080)={[{@nojournal_checksum}, {@jqfmt_vfsold}, {@lazytime}, {@usrquota}, {@usrquota}]}, 0x3, 0x42f, &(0x7f00000000c0)="$eJzs289rHFUcAPDvzCat/WViqT+aVo1WMfgjadJae/CiKHhQEPRQjzFJS+y2kSaCLUGjSD1Kwbt4FPwLPOlF1JPgVe9SKJJLq6eV2Z1Jdje7aZJustX9fGCS92be8t53Z97ue/N2AuhZw9mfJGJ/RPweEQO1bGOB4dq/W8uLU38vL04lUam89VdSLXdzeXGqKFq8bl+R6YtIP0viSIt65y9fOT9ZLs9cyvNjCxfeH5u/fOW52QuT52bOzVycOH365InxF05NPN+ROLO4bg59NHf08GvvXHtj6sy1d3/+Ninib4qjQ4bXO/hkpdLh6rrrQF066etiQ9iUUq2bRn+1/w9EKVZP3kC8+mlXGwdsq0qlUnmg/eGlCvA/lkS3WwB0R/FFn81/i22Hhh53hRsv1SZAWdy38q12pC/SvEx/0/y2k4Yj4szSP19lW2zPfQgAgAbfZ+OfZ1uN/9Kovy90b76GMhgR90XEwYg4FRGHIuL+iGrZByPioU3W37xIsnb8k17fUmAblI3/XszXthrHf8XoLwZLee5ANf7+5OxseeZ4/p6MRP/uLD++Th0/vPLbF+2O1Y//si2rvxgL5u243re78TXTkwuTdxJzvRufRAz1tYo/WVkJSCLicEQMbbGO2ae/Odru2O3jX0cH1pkqX0c8VTv/S9EUfyFZf31y7J4ozxwfK66KtX759eqb7eq/o/g7IDv/e1te/yvxDyb167Xzm6/j6h+ft53TbPX635W83bDvw8mFhUvjEbuS12uNrt8/0VRuYrV8Fv/Isdb9/2CsvhNHIiK7iB+OiEci4tG87Y9FxOMRcWyd+H96+Yn3th7/9srin97U+V9N7IrmPa0TpfM/ftdQ6eBm4s/O/8lqaiTfs5HPv420a2tXMwAAAPz3pBGxP5J0dCWdpqOjtd/wH4q9aXlufuGZs3MfXJyuPSMwGP1pcadroO5+6Hg+rS/yE035E/l94y9Le6r50am58nS3g4cet69N/8/8Wep264Bt53kt6F36P/Qu/R96l/4PvatF/9/TjXYAO6/V9//HXWgHsPOa+r9lP+gh5v/Qu/R/6F36P/Sk+T1x+4fkJSTWJCK9K5ohsU2Jbn8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdMa/AQAA//9QOObV")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./file1\x00', 0x101042, 0x65)
pwrite64(r0, &(0x7f0000000540)='2', 0x1, 0x84fed0)
r1 = open(&(0x7f0000000580)='./file1\x00', 0x147842, 0x88)
userfaultfd(0x801)
r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r4 = syz_ublk_setup_io_uring(0x1d, 0x0, &(0x7f0000000600)=<r5=>0x0, &(0x7f0000000640)=<r6=>0x0, 0x0)
r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0)
syz_ublk_add_dev(r4, r5, r6, 0x0, &(0x7f0000000680)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, r7, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000700)=@new_dev={0x4, 0x40d, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x68}}}, &(0x7f0000000740))
syz_ublk_add_dev(r2, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780))
ptrace(0x10, r3)
mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
ptrace$pokeuser(0x6, r3, 0x350, 0x10000)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0a000000030000000400000008"], 0x50)
r9 = epoll_create1(0x80000)
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f0000000800)={0x60000018})
epoll_pwait(r9, &(0x7f0000000840)=[{}], 0x1, 0xdf4, 0x0, 0x0)
ptrace$pokeuser(0x6, r3, 0x388, 0xffff7fffffffff7f)
preadv2(r1, &(0x7f00000005c0)=[{&(0x7f0000001840)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0xc)

29.381204359s ago: executing program 7 (id=249):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x16, 0xc, &(0x7f0000000b00)=@framed={{}, [@generic={0x7a, 0xa, 0x0, 0xfffffff0}, @map_fd={0x18, 0x1, 0x1, 0x0, r0}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0xbf, 0x3, 0xa}, @generic={0x7, 0x3, 0x0, 0x0, 0xfffffff0}, @generic={0xb7, 0x4}, @generic={0x85, 0x0, 0x0, 0x0, 0x2}]}, &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000bc0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000c40)='\x00'/14, 0x0, 0x3b66, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

28.697900189s ago: executing program 7 (id=258):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r2, &(0x7f0000000140)={0x2, 0x4e21, @multicast1}, 0x10)
setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000180)=0x8, 0x4)
connect$inet(r2, &(0x7f00000001c0)={0x2, 0x4e21, @local}, 0x10)
sendto$inet(r2, &(0x7f0000000200), 0xffffffffffffff94, 0xb, 0x0, 0x0)
recvfrom$inet(r2, &(0x7f0000000280)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f00000002c0)={0x0, 'syzkaller0\x00', {0x1}, 0xb5})
r3 = fcntl$dupfd(r0, 0x0, r0)
write$cgroup_int(r3, &(0x7f0000000000)=0x8000, 0x12)
fcntl$lock(0xffffffffffffffff, 0x7, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0)
r4 = eventfd2(0x1, 0x80001)
ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, &(0x7f00000000c0)={0x0, r4})
openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x400, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000440)={0x1, 0x0, [{0x202, 0x0, 0x1}]})
ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000480)={0x6, 0x58004, 0xd38126a114f2fd92, 0xffffffffffffffff, 0x4})
ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, &(0x7f00000004c0)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000500)=0x4})
r5 = openat$kvm(0xffffff9c, &(0x7f0000000540), 0x8000, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f00000005c0)={[0x4, 0x7, 0xfffffffffffffffd, 0x76, 0x2, 0x11, 0x4002004c4, 0x40001, 0x8000000000000000, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0x5, 0x8d], 0xeeee8000, 0x2010d3})
ioctl$KVM_RUN(r7, 0xae80, 0x0)

28.682776731s ago: executing program 35 (id=258):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r2, &(0x7f0000000140)={0x2, 0x4e21, @multicast1}, 0x10)
setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000180)=0x8, 0x4)
connect$inet(r2, &(0x7f00000001c0)={0x2, 0x4e21, @local}, 0x10)
sendto$inet(r2, &(0x7f0000000200), 0xffffffffffffff94, 0xb, 0x0, 0x0)
recvfrom$inet(r2, &(0x7f0000000280)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f00000002c0)={0x0, 'syzkaller0\x00', {0x1}, 0xb5})
r3 = fcntl$dupfd(r0, 0x0, r0)
write$cgroup_int(r3, &(0x7f0000000000)=0x8000, 0x12)
fcntl$lock(0xffffffffffffffff, 0x7, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0)
r4 = eventfd2(0x1, 0x80001)
ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, &(0x7f00000000c0)={0x0, r4})
openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x400, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000440)={0x1, 0x0, [{0x202, 0x0, 0x1}]})
ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000480)={0x6, 0x58004, 0xd38126a114f2fd92, 0xffffffffffffffff, 0x4})
ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, &(0x7f00000004c0)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000500)=0x4})
r5 = openat$kvm(0xffffff9c, &(0x7f0000000540), 0x8000, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f00000005c0)={[0x4, 0x7, 0xfffffffffffffffd, 0x76, 0x2, 0x11, 0x4002004c4, 0x40001, 0x8000000000000000, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0x5, 0x8d], 0xeeee8000, 0x2010d3})
ioctl$KVM_RUN(r7, 0xae80, 0x0)

16.932177641s ago: executing program 5 (id=347):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0xfffa, @empty}, 0x10)
syz_emit_ethernet(0x46, &(0x7f0000000080)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x39, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @multicast1, @multicast1}, "0018d135ae9b1c03"}}}}}, 0x0)

16.910307823s ago: executing program 5 (id=349):
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0)
ioctl$KVM_RUN(r1, 0xae80, 0x0)
ioctl$KVM_SET_SREGS(r1, 0x4138ae84, &(0x7f00000000c0)={{0x8080000, 0x30000, 0x8, 0x9, 0x3, 0x0, 0xa, 0x2d, 0x0, 0x30, 0x19}, {0x1, 0x3000, 0x4, 0x9, 0x40, 0x5, 0x7d, 0x9, 0x1, 0x3, 0x3, 0x1}, {0xb000, 0xe000, 0xe, 0xf, 0x3, 0x7, 0xfe, 0x89, 0x1, 0xab, 0x1}, {0x30000, 0x8000000, 0x3, 0x5d, 0x4, 0x43, 0x9, 0xfa, 0x80, 0x7, 0xe}, {0xa000, 0x9000, 0xe, 0x2, 0x3, 0x7, 0xab, 0x7f, 0x47, 0x83, 0xf7, 0x82}, {0x1000, 0x80a0000, 0x8, 0xa0, 0xb1, 0x8, 0x1, 0xd, 0x88, 0xc, 0x1, 0xfd}, {0x54000, 0x2, 0x4, 0x5, 0x7, 0xff, 0xb, 0x0, 0x5, 0x81, 0xff, 0x70}, {0xd000, 0xb000, 0xe, 0x5, 0xf, 0x7, 0x1, 0x18, 0x5, 0x3, 0x7, 0x9}, {0x30000, 0x2d}, {0x10000, 0x8000}, 0xc0010000, 0x0, 0x50000, 0x42024, 0xb, 0x1, 0x3000, [0x6840000000000002, 0x3, 0x94, 0x80ff]})

16.849013119s ago: executing program 5 (id=350):
syz_usb_connect(0x0, 0xb3, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010002ef0201406d0425080001000000010902a1000201008032080b00020e03000009040000000e0100000d240100012700006cdc020101112402010102000000000000000002001009240302010100010009"], 0x0)

15.502205007s ago: executing program 3 (id=360):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
connect$inet(r0, &(0x7f0000000040)={0x2, 0xfffa, @empty}, 0x10)
syz_emit_ethernet(0x46, &(0x7f0000000080)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x39, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @multicast1, @multicast1}, "0018d135ae9b1c03"}}}}}, 0x0)

15.489896758s ago: executing program 3 (id=361):
syz_emit_ethernet(0x136, &(0x7f0000000580)=ANY=[@ANYBLOB="aaaaaaaaaaaa1780c206050086dd6018232501002c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa08020209000000001f8800007c00000000000000000000012b1c00000000d274e3c430cc455e7c0000c910fe880000050000000000000000000101000100a0b5d2244d0f2397341354f755f716ac9202162748f90241ccf4762e745b"], 0x0)
syz_emit_ethernet(0x4e, &(0x7f0000000280)={@local, @link_local={0x17, 0x80, 0xc2, 0x6, 0x5, 0xe}, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "182325", 0x18, 0x2c, 0x0, @remote, @local, {[@routing={0x1, 0x2, 0x0, 0x7f, 0x300, [@private0]}]}}}}}, 0x0)

15.434064624s ago: executing program 3 (id=362):
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0)
write$UHID_CREATE2(r0, 0x0, 0x119)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$hidraw(&(0x7f0000000b40), 0x0, 0x81)
ioctl$HIDIOCSFEATURE(r1, 0xc0404806, 0x0)

15.366920931s ago: executing program 3 (id=363):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(r0, 0x107, 0x16, 0x0, 0x0)
syz_emit_ethernet(0x173, &(0x7f0000000240)={@remote, @random="303b3eefb0e5", @val={@void}, {@ipv6={0x86dd, @tcp={0xb, 0x6, "92ffc8", 0x139, 0x6, 0xff, @local, @loopback, {[@fragment={0x6c, 0x0, 0x5, 0x0, 0x0, 0x4, 0x66}], {{0x4e23, 0x4e23, 0x41424344, 0x41424344, 0x0, 0x0, 0xd, 0x8, 0x100, 0x0, 0x5, {[@mptcp=@ack={0x1e, 0x16, 0x18, 0x4, "40e41668e0188980d75bb255e5a92071af48"}, @sack_perm={0x4, 0x2}, @exp_smc={0xfe, 0x6}]}}, {"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"}}}}}}}, 0x0)

15.355322812s ago: executing program 3 (id=364):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x20002, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0)
ioctl$KVM_GET_SUPPORTED_HV_CPUID_sys(r1, 0xc008aec1, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0))
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1b"], 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="12000000090000000800000004"], 0x50)
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000004c0), 0x20000, 0x0)
io_uring_setup(0x650b, &(0x7f00000002c0)={0x0, 0x2c43, 0x0, 0x22, 0xab})
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000340), 0x20102, 0x0)
setresuid(0xee00, 0x0, 0xee01)
r3 = syz_clone(0x840000, 0x0, 0x0, 0x0, 0x0, 0x0)
fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f00000003c0)={0x0, r3})
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000500)={'batadv_slave_0\x00', <r4=>0x0})
setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f0000000540)={0x1, 0x0, 0x9, 0x3, @vifc_lcl_ifindex=r4, @broadcast}, 0x10)
ioctl(r0, 0x400c4d01, &(0x7f0000000140))

15.118107776s ago: executing program 5 (id=366):
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x804, &(0x7f0000000140)={[{@iocharset={'iocharset', 0x3d, 'cp950'}}, {@uni_xlateno}, {@iocharset={'iocharset', 0x3d, 'iso8859-7'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-6'}}, {@utf8no}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}, {@rodir}, {@utf8}, {@rodir}, {@fat=@codepage={'codepage', 0x3d, '932'}}, {@shortname_mixed}, {@shortname_mixed}, {@utf8}, {@shortname_lower}, {@uni_xlate}, {@rodir}]}, 0x1, 0x2a6, &(0x7f00000008c0)="$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")
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000010401010000000000000000090002000500014001"], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000010401010000000000000000000004000500010001"], 0x1c}, 0x1, 0x0, 0x0, 0x20008018}, 0x0)
close(r0)
mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000880)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
flistxattr(r2, 0x0, 0x0)
r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0)
r4 = eventfd(0xfffffdfe)
ioctl$VHOST_SET_LOG_FD(r3, 0x4004af07, &(0x7f0000000440)=r4)
ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f0000000480)={0x1, r4})
ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f00000004c0)={0x1, 0x1, 0x0, 0x0, &(0x7f0000000500)=""/61, 0x58000})
ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000540)=0x1)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000580)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1, 0xb, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000740)=r7, 0x4)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000007c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000c0000000500000002000084fdf7ffff0a000000020000000000000005000000020000000400000600000000000000010500000020000000006100302e615f5f610061"], 0x0, 0x58}, 0x28)
sendmsg$unix(r5, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x0)
syz_mount_image$vfat(&(0x7f0000000b80), &(0x7f0000000bc0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x802077, 0x0, 0xfc, 0x0, &(0x7f0000000c40))

14.98710922s ago: executing program 5 (id=368):
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace$pokeuser(0x6, r0, 0x388, 0x41d9fda7)
read$FUSE(0xffffffffffffffff, &(0x7f0000000940)={0x2020, 0x0, 0x0, <r1=>0x0}, 0x2020)
syz_mount_image$ext4(&(0x7f0000002980)='ext4\x00', &(0x7f00000029c0)='./file0\x00', 0x0, &(0x7f0000002a00)={[], [{@measure}, {@subj_type={'subj_type', 0x3d, 'qq\xa5\xe1\xd0\xd7\x1a\\\xb3\x96\xd6\x01\xc0\x7f\xec\x00\x8b\x93\xbd\x19i\x17\xe1\xda\xa3\x8cV+\x95\xb3\x9f\x83\x90F]\x02Md;\xbef&\x93\xe76Q\xa6\x80#\xfa\xc1\x16\va\xf8\xf6\xd7\xa8\xa1\x91\x01\x8485_S\xd4yi3\xfd\xaa\x8b\xce\xa6{\n\xccpq\x0f>\xee1\xc0F\x83M\xf3\n\x01\xa9\xab9/\x14\xc4}\xc70\xac9\x88\xdau\xf7L\xf1\x03\a\xc1G\x0eMJ\x95{ta\xf7=\xba\xf3\x0e\x02'}}, {@smackfsfloor={'smackfsfloor', 0x3d, '//^[^'}}, {@euid_lt={'euid<', r1}}, {@euid_gt={'euid>', r1}}, {@obj_role={'obj_role', 0x3d, '\'\x96\"-'}}, {@appraise_type}]}, 0x1, 0x62f, &(0x7f0000002b00)="$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")
newfstatat(0xffffffffffffff9c, &(0x7f0000003140)='./file0\x00', &(0x7f0000003180)={0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}, 0x6000)
r3 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0)
r4 = socket$packet(0x11, 0x2, 0x300)
pipe(&(0x7f0000003200)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = signalfd4(0xffffffffffffffff, &(0x7f0000003240)={[0x800]}, 0x8, 0x40800)
r7 = accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000003280), 0x81000)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003340)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000700)="c87e38430f33dde3c5ebe26b71885f6631854fe3a1e160b27f5dd3e8786c78869659ec", 0x23}], 0x1, 0x0, 0x0, 0x48000}}, {{&(0x7f0000000800)=@abs={0x0, 0x0, 0x8}, 0x6e, &(0x7f0000000900)=[{&(0x7f0000000880)="078586ab63bcca2d2e92373e58b21d2246f924e3a6c54d842382d43b817a451fffc74578a7dcc1eddb9e31b4165df287404652abca271f8616e3954285711f6de4eb9c67a5452edcefd0ce885b18a4e9f2e9fa38649f8015518cdb67448e65298f312e9d0a5f1e0eaa05761c3b59684f7c73958ae60516", 0x77}], 0x1, &(0x7f00000032c0)=[@cred={{0x1c, 0x1, 0x2, {r0, r1, r2}}}, @rights={{0x18, 0x1, 0x1, [r3, r4]}}, @rights={{0x1c, 0x1, 0x1, [r5, r6, r7]}}], 0x58, 0x4000}}], 0x2, 0x20040800)
r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="020000000400000000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000240)={r8}, 0x4)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0x5, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x2a}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r9, 0x0, 0x88, 0xe40, &(0x7f00000004c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000500)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
connect$inet(0xffffffffffffffff, &(0x7f00000007c0)={0x2, 0x0, @remote}, 0x10)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000780)='./trace\x00', 0x1da)
mount(0x0, &(0x7f00000033c0)='./trace\x00', &(0x7f0000003400)='tracefs\x00', 0x0, 0x0)
r12 = openat(0xffffffffffffff9c, &(0x7f0000003440)='./trace/events/kmem/kmalloc/filter\x00', 0x2, 0x0)
write$UHID_INPUT(r12, &(0x7f0000003480)={0x8, {"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", 0x1000}}, 0x1006)
sendmsg$TIPC_NL_KEY_SET(r10, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010029bd7000fedbdf25170000004800068008000600000000003c0004"], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x4000800)
getsockname(r10, &(0x7f0000000640)=@in6={0xa, 0x0, 0x0, @private0}, &(0x7f00000006c0)=0x80)
ioctl$NILFS_IOCTL_GET_SUINFO(0xffffffffffffffff, 0x80186e84, &(0x7f0000000100)={&(0x7f0000000040)=[{0x8}, {0x400, 0x8, 0x1}, {0xce2, 0x5}, {0x3, 0xc, 0x2}, {0x101, 0xe7c, 0x2}, {0x7, 0x10001, 0x2}, {0x3, 0x8, 0x2bbe701c5cd10cfc}, {0xffffffffffff8000, 0x200}, {0x8000000000000001, 0x2, 0x2}], 0x9, 0x10, 0x6, 0x3})
r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuset.effective_mems\x00', 0x275a, 0x0)
fcntl$lock(r13, 0x6, &(0x7f0000000180)={0x1, 0x1, 0x7, 0x8000000000000401})
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000800), 0x0, 0x0)
ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, &(0x7f0000000000))
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x14, 0x0, 0x0)

14.893120809s ago: executing program 3 (id=370):
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x40006)
sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, 0x0, 0x40048050)
r0 = getpid()
r1 = syz_pidfd_open(r0, 0x0)
setns(r1, 0x24020000)
umount2(&(0x7f0000000100)='.\x00', 0x0)

14.698053869s ago: executing program 5 (id=373):
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0)
write$UHID_CREATE2(r0, 0x0, 0x119)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$hidraw(&(0x7f0000000b40), 0x0, 0x81)
ioctl$HIDIOCSFEATURE(r1, 0xc0404806, 0x0)

14.629541076s ago: executing program 36 (id=373):
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0)
write$UHID_CREATE2(r0, 0x0, 0x119)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$hidraw(&(0x7f0000000b40), 0x0, 0x81)
ioctl$HIDIOCSFEATURE(r1, 0xc0404806, 0x0)

12.087299425s ago: executing program 9 (id=402):
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ppoll(&(0x7f0000000340)=[{r0, 0x408}, {r0, 0x8240}], 0x2, 0x0, &(0x7f0000000400)={[0xc]}, 0x8)

11.238630422s ago: executing program 9 (id=405):
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x26)
ioctl$KVM_IRQ_LINE_STATUS(r0, 0xc008ae67, &(0x7f0000000000)={0x4, 0x2})
ioctl$KVM_TDX_INIT_MEM_REGION(r0, 0xc008aeba, &(0x7f0000000080)={0x3, 0x1, &(0x7f0000000040)={&(0x7f0000fff000/0x1000)=nil, 0xe000, 0x4}})
quotactl_fd$Q_SETINFO(r0, 0xffffffff80000600, 0xee01, &(0x7f00000000c0)={0x5, 0x5, 0x1, 0x2})
ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r0, 0x8008f512, &(0x7f0000000100))
ioctl$KVM_HAS_DEVICE_ATTR_vm(r0, 0x4018aee3, &(0x7f0000000180)=@attr_other={0x0, 0xfffffffa, 0x8001, &(0x7f0000000140)=0x9})
r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000001c0), 0x28401, 0x0)
write$UHID_DESTROY(r1, &(0x7f0000000200), 0x4)
ioctl$TIOCGETD(r1, 0x5424, &(0x7f0000000240))
ioctl$KVM_UNREGISTER_COALESCED_MMIO(r0, 0x4010ae68, &(0x7f0000000280)={0x7000, 0x1000, 0x1})
write$selinux_validatetrans(r1, &(0x7f00000002c0)={'system_u:object_r:dpkg_exec_t:s0', 0x20, 'system_u:object_r:chkpwd_exec_t:s0', 0x20, 0x9, 0x20, 'unconfined\x00'}, 0x64)
ioctl$KVM_CAP_MEMORY_FAULT_INFO(r0, 0x4068aea3, &(0x7f0000000340))
setxattr$trusted_overlay_upper(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), &(0x7f0000000440)={0x0, 0xfb, 0x58, 0x1, 0x40, "74846179367a9c845edbe06118711a08", "61aec7fa323756c8980adbcdbbbdfcab74650b9b12a0716c4fe9a971cbce7b4de90f352f995c4c02e503020e09761389008fbf74031377dc9f2a8fde3f6789143a4470"}, 0x58, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000004c0)={0x79, 0x0, 0x450})
ioctl$KVM_CAP_HYPERV_VP_INDEX(r0, 0x4068aea3, &(0x7f0000000540))
r2 = syz_open_dev$hiddev(&(0x7f00000005c0), 0x7fffffff, 0x448441)
ioctl$HIDIOCINITREPORT(r2, 0x4805, 0x0)
syz_usb_connect$uac1(0x6, 0x7e, &(0x7f0000000600)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x10, 0x18d1, 0x2d04, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6c, 0x3, 0x1, 0x1, 0x80, 0x6, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xfff0, 0x16}, [@input_terminal={0xc, 0x24, 0x2, 0x2, 0x206, 0x1, 0x81, 0xff, 0x5, 0x5}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x8, 0x9, 0x4, {0x7, 0x25, 0x1, 0x0, 0x1, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0xf6, 0x4, 0x0, {0x7, 0x25, 0x1, 0x8, 0x9, 0x10}}}}}}}}]}}, &(0x7f0000000940)={0xa, &(0x7f0000000680)={0xa, 0x6, 0x110, 0x3, 0x48, 0x4, 0x20, 0x65}, 0xe0, &(0x7f00000006c0)={0x5, 0xf, 0xe0, 0x5, [@ssp_cap={0x18, 0x10, 0xa, 0x7f, 0x3, 0xcbc1, 0xf00, 0x2e93, [0xf, 0x30, 0xc000]}, @generic={0xab, 0x10, 0x2, "4a5447921b7ef1eb66987d9b9da605daf18627fc67320ba8c7b41107690db934bf1f4f76bfd9b043d71172ce32c03d4bf7fb0c51912ab7481d00d868d6f175b313582b8f27502169e260790975380f0e9d37096963ecc3201b315dada1274cf45eb573c4b64b3efb668a8cc71e062a7ea861a1766b4dd22c9392c58b39cd8ab204c7d47e96fbe336af9b7e45f6264d3f7319bae5be8425529e2a518c28aa1c699bd9ef1632958bd6"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0x5, 0x5, 0xc}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0xc, 0x3, 0x80, 0xe62, 0x65}]}, 0x6, [{0x4, &(0x7f00000007c0)=@lang_id={0x4, 0x3, 0x2009}}, {0x4, &(0x7f0000000800)=@lang_id={0x4, 0x3, 0x827}}, {0x4, &(0x7f0000000840)=@lang_id={0x4, 0x3, 0x400a}}, {0x4, &(0x7f0000000880)=@lang_id={0x4, 0x3, 0x439}}, {0x4, &(0x7f00000008c0)=@lang_id={0x4, 0x3, 0x1001}}, {0x4, &(0x7f0000000900)=@lang_id={0x4, 0x3, 0xc0c}}]})
rename(&(0x7f00000009c0)='./file0\x00', &(0x7f0000000a00)='./file0\x00')
ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f0000000a40))
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000ac0)=@generic={&(0x7f0000000a80)='./file0\x00', r1}, 0x18)
ioctl$HOT_ADD_DISK(r1, 0x928, 0x1)
ioctl$NILFS_IOCTL_GET_SUINFO(r0, 0x80186e84, &(0x7f0000000b40)={&(0x7f0000000b00)=[{0x0, 0x6}, {0x3, 0xffffff21, 0x1}, {0x7, 0x6}], 0x3, 0x10, 0x46f, 0x8})
ioctl$KVM_CAP_PTP_KVM(r1, 0x4068aea3, &(0x7f0000000b80))
ioctl$KVM_CAP_VM_COPY_ENC_CONTEXT_FROM(r1, 0x4068aea3, &(0x7f0000000c00)={0xc5, 0x0, r1})
ioctl$BTRFS_IOC_SUBVOL_CREATE(r1, 0x5000940e, &(0x7f0000000c80)={{r1}, "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"})
lstat(&(0x7f0000001cc0)='./file0\x00', &(0x7f0000001d00)={0x0, 0x0, 0x0, 0x0, <r3=>0x0})
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000001d80)={0x0, 0x0, <r4=>0x0}, &(0x7f0000001dc0)=0xc)
chown(&(0x7f0000001c80)='./file0\x00', r3, r4)
ioctl$NILFS_IOCTL_GET_CPSTAT(r2, 0x80186e83, &(0x7f0000001e00))

10.547366393s ago: executing program 9 (id=412):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xc, &(0x7f0000000100)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff}) (rerun: 64)
setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000001c0)=r0, 0x4)
syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f00000003c0)='./file2\x00', 0x2810400, &(0x7f0000000200)=ANY=[@ANYBLOB='nodots,dmask=00000000000000000000003,usefree,nodots,flush,dots,dots,gid=', @ANYRES16=r0, @ANYRES64=r1], 0x1, 0x214, &(0x7f0000000480)="$eJzs3D1rW1cYB/AjWa6tlhZPhXbpoV3a5bb10qVDS3GhVNCSRCEv0zWWEyFFAl8NksmgOVM+RwhkCWQL+QL+DFmymYDx5Ck3OJKs2NixE0dy4vx+ix6e/z1X5+jARVy9bP5+91ZjNUtW004ozRdC8Y/QDzuFsBCKYaQffnpwZfvOxavX/v2zUlm6MDvsx/jVd4+v377//ZPOF5cf7nYKIYStxWcbX298s/ni0s16FutZbLU7MY3L7XYnXW7W4ko9ayQx/t+spVkt1ltZbW1fvtpsj5861LIspq1ebNR6sdOOnbVeTG+k9VZMkiTOB06lem8nz8NWnuf5XD/kef62JyhMZl5Myyn3n4/c3kU97l5Nn/e71W518DjI//6nsvRLfGVhPGq7263O7OW/DvK4P58Nnw/zxUPzz8KPPwzy3eyv/yoH8nJYmfzyAQAAAADgXErinkPv7yfJUfmgeu3zgQP370vh29K4MzP5pQAAAABHyHrrjbS5Mrs2KJq1Myvmwv7Ob4+GUzxu+M9Pjz9mQsWXwyK843nKIYSjjymGM9+U6RSj75EPO6PfF5xseOl9TaP8gbwao2I+HBaVw3pjbjqbAgAAnC/jN/0nHlKc6IQAAAAAAAAAAAAAAAAAAADgEzSNPzM76zUCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALzJywAAAP//ixdW4w==") (async)
syz_mount_image$fuse(0x0, &(0x7f00000006c0)='.\x02\x00', 0x292888, 0x0, 0x10, 0x0, 0x0) (async, rerun: 64)
r2 = syz_io_uring_complete(0x0, 0x0) (rerun: 64)
r3 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0xc, &(0x7f0000000100)=0x7f, 0x4) (async)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="380000001a00010000000000000000000a"], 0x38}, 0x1, 0x0, 0x0, 0x20000805}, 0x0) (async, rerun: 32)
ioctl$USERFAULTFD_IOC_NEW(r2, 0xaa00) (async, rerun: 32)
r4 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r4, &(0x7f0000005d00)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async, rerun: 64)
connect$unix(r4, &(0x7f0000005d80)=@file={0x0, './file2\x00'}, 0x6e) (rerun: 64)

10.426540025s ago: executing program 9 (id=414):
r0 = syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x804, &(0x7f0000000140)={[{@iocharset={'iocharset', 0x3d, 'cp950'}}, {@uni_xlateno}, {@iocharset={'iocharset', 0x3d, 'iso8859-7'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-6'}}, {@utf8no}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}, {@rodir}, {@utf8}, {@rodir}, {@fat=@codepage={'codepage', 0x3d, '932'}}, {@shortname_mixed}, {@shortname_mixed}, {@utf8}, {@shortname_lower}, {@uni_xlate}, {@rodir}]}, 0x1, 0x2a6, &(0x7f00000008c0)="$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")
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000010401010000000000000000090002000500014001"], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000010401010000000000000000000004000500010001"], 0x1c}, 0x1, 0x0, 0x0, 0x20008018}, 0x0)
close(r1)
mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000880)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
flistxattr(r3, 0x0, 0x0)
r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0)
r5 = eventfd(0xfffffdfe)
ioctl$VHOST_SET_LOG_FD(r4, 0x4004af07, &(0x7f0000000440)=r5)
ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f0000000480)={0x1, r5})
ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f00000004c0)={0x1, 0x1, 0x0, 0x0, &(0x7f0000000500)=""/61, 0x58000})
ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000000540)=0x1)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000580)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1, 0xb, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f0000000740)=r8, 0x4)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000007c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000c0000000500000002000084fdf7ffff0a000000020000000000000005000000020000000400000600000000000000010500000020000000006100302e615f5f610061"], 0x0, 0x58}, 0x28)
sendmsg$unix(r6, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x0)
symlinkat(&(0x7f0000000240)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f00000002c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00')

10.247370143s ago: executing program 9 (id=415):
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000200)='./debug\x00', &(0x7f0000000240)='debugfs\x00', 0x0, 0x0)
fstat(0xffffffffffffffff, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./debug/bluetooth/rfcomm\x00', 0x0, 0x0)
read(r0, 0x0, 0x0)

10.08193612s ago: executing program 9 (id=417):
socket$inet6_udp(0xa, 0x2, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, 0x0, 0x4000000)
statx(0xffffffffffffffff, &(0x7f0000000140)='./file0/file0\x00', 0x100, 0x10, &(0x7f0000001d40))
setresgid(0xffffffffffffffff, 0xee00, 0xffffffffffffffff)
syz_btf_id_by_name$bpf_lsm(&(0x7f0000000700)='bpf_lsm_inode_killpriv\x00')
r1 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000740), 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x80000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000007c0)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f0000000800)=0x2)
r2 = getpid()
sched_setscheduler(r2, 0x1, &(0x7f0000000840)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000880)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f00000008c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000940), 0x318, 0x0)
recvmmsg(r3, &(0x7f0000000980), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000009c0)=0x2)
setitimer(0x2, &(0x7f0000000a00), &(0x7f0000000a40))
r5 = socket$inet6(0xa, 0x802, 0x0)
r6 = socket$vsock_stream(0x28, 0x1, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x4, 0x8, 0x8}, 0x48)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r7}, 0x38)
socket$vsock_stream(0x28, 0x1, 0x0)
writev(r5, &(0x7f0000000a80)=[{&(0x7f0000000ac0)="2399", 0xfffffffffffffe47}], 0x1)
connect$inet6(r5, &(0x7f0000000b00)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c)
fcntl$setstatus(r6, 0x4, 0x400)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0x4c80, &(0x7f0000000b40)={0x0, 0x0, "05d3000028000000000083eb29e46b4bfb57461914278705b6a55ba904cefb1f00536dfdc9ce9c12d1207f8a35d1dad7ed0fc16b2ccd00000000000000080000000c0996d78e489e96651d35ca509de7cf52e7578e9ce37700000000000032936e283ae72a84cc5a72f07fef2fec1463729b336e892b5aadc70f51cb7e5925747f779254377a6a42493fb7026e77fb899a2072631f76cd0a59b17031b431163758724ac0df2d95b9c3fbccef0111f1fc6db466c73268e04c38df1f6bf2cc88aa6126229c332b887eb8e67112000631988ad55f281047000000000000000003000000000100", "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"})
ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
ioctl$sock_netdev_private(r6, 0xc, &(0x7f0000001b40)="9111004c7eb3f184d498bab0d569f2c696b5beb05941380c46b86d7334a998f6212171322fd965fe3957adda46a81f63102ae455b72223f136dd17c99db4d5eea0abe1394b4c618be1ac6d73b599a2d250aeb8621c7ae55101168964e983")

10.068814322s ago: executing program 37 (id=417):
socket$inet6_udp(0xa, 0x2, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, 0x0, 0x4000000)
statx(0xffffffffffffffff, &(0x7f0000000140)='./file0/file0\x00', 0x100, 0x10, &(0x7f0000001d40))
setresgid(0xffffffffffffffff, 0xee00, 0xffffffffffffffff)
syz_btf_id_by_name$bpf_lsm(&(0x7f0000000700)='bpf_lsm_inode_killpriv\x00')
r1 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000740), 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x80000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000007c0)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f0000000800)=0x2)
r2 = getpid()
sched_setscheduler(r2, 0x1, &(0x7f0000000840)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000880)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f00000008c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000940), 0x318, 0x0)
recvmmsg(r3, &(0x7f0000000980), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000009c0)=0x2)
setitimer(0x2, &(0x7f0000000a00), &(0x7f0000000a40))
r5 = socket$inet6(0xa, 0x802, 0x0)
r6 = socket$vsock_stream(0x28, 0x1, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x4, 0x8, 0x8}, 0x48)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r7}, 0x38)
socket$vsock_stream(0x28, 0x1, 0x0)
writev(r5, &(0x7f0000000a80)=[{&(0x7f0000000ac0)="2399", 0xfffffffffffffe47}], 0x1)
connect$inet6(r5, &(0x7f0000000b00)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c)
fcntl$setstatus(r6, 0x4, 0x400)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0x4c80, &(0x7f0000000b40)={0x0, 0x0, "05d3000028000000000083eb29e46b4bfb57461914278705b6a55ba904cefb1f00536dfdc9ce9c12d1207f8a35d1dad7ed0fc16b2ccd00000000000000080000000c0996d78e489e96651d35ca509de7cf52e7578e9ce37700000000000032936e283ae72a84cc5a72f07fef2fec1463729b336e892b5aadc70f51cb7e5925747f779254377a6a42493fb7026e77fb899a2072631f76cd0a59b17031b431163758724ac0df2d95b9c3fbccef0111f1fc6db466c73268e04c38df1f6bf2cc88aa6126229c332b887eb8e67112000631988ad55f281047000000000000000003000000000100", "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"})
ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
ioctl$sock_netdev_private(r6, 0xc, &(0x7f0000001b40)="9111004c7eb3f184d498bab0d569f2c696b5beb05941380c46b86d7334a998f6212171322fd965fe3957adda46a81f63102ae455b72223f136dd17c99db4d5eea0abe1394b4c618be1ac6d73b599a2d250aeb8621c7ae55101168964e983")

5.865824491s ago: executing program 8 (id=443):
io_submit(0x0, 0x1, &(0x7f00000002c0)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x5, 0xffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}])
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], &(0x7f00000004c0)=""/237, 0x37, 0xed, 0x1}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x9, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="850000000000000007200000000000009500000008000000"], &(0x7f00000006c0)='GPL\x00', 0x2, 0x1000, &(0x7f0000000b40)=""/4096, 0x0, 0x0, '\x00', 0x0, @fallback, r0, 0x14, &(0x7f0000001b40), 0x8, 0x10, &(0x7f0000001b80)={0x0, 0x3}, 0x10}, 0x94)
r1 = openat$rtc(0xffffff9c, &(0x7f0000000000), 0xa200, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r1, 0x7005, 0x0)
readv(r1, &(0x7f0000000040)=[{&(0x7f0000000080)=""/200, 0xc8}], 0x1)
r2 = gettid()
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000700))
timer_create(0x1, &(0x7f0000000340)={0x0, 0x21, 0x4, @tid=r2}, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000880)=@generic={&(0x7f0000000840)='./file0\x00', 0x0, 0x10}, 0x18)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000001e40)=@mangle={'mangle\x00', 0x64, 0x6, 0x670, 0x428, 0x1b8, 0x2e0, 0x1b8, 0x2e0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x9}}}, {{@ipv6={@mcast1, @local, [0xff000000], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@unspec=@connmark={{0x30}}, @common=@inet=@socket1={{0x28, 'socket\x00', 0x3}}]}, @common=@unspec=@CONNSECMARK={0x28}}, {{@uncond, 0x0, 0x120, 0x148, 0x0, {}, [@common=@frag={{0x30}}, @common=@hbh={{0x48}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6]}}]}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0x138, 0x178, 0x0, {}, [@common=@dst={{0x48}}, @common=@dst={{0x48}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6d0)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), r4)
sendmsg$NL802154_CMD_SET_CHANNEL(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x1c, r5, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x1c}}, 0x64010)
r6 = openat$uhid(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0)
r7 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000001d80)={0x0, 0x6}, 0x4)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
setsockopt$packet_fanout_data(r7, 0x107, 0x16, &(0x7f0000001dc0)={0x2, &(0x7f00000009c0)=[{0x30, 0x0, 0x6, 0x4ed}, {0x6}]}, 0x10)
readv(r6, &(0x7f0000000440)=[{&(0x7f0000000a40)=""/155, 0x9b}], 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000b00)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
pipe(&(0x7f00000008c0)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
write$binfmt_script(r8, &(0x7f0000000900)={'#! ', './file0', [{0x20, ','}, {0x20, '](-'}], 0xa, "c70f352968a4d43292f743b0c5927d39726961e9aeeb0d813460ce0d102071b5eb6df466bc31313d364f65c763edc538e0f70dee40312cf6bb86173d1630448d65173505e11244fbdbe2fd7bb46044f486477744ca0d6dd853e7a77a6d3778866cba6ff2a18971"}, 0x78)
syz_mount_image$fuse(0x0, &(0x7f0000000740)='./file0\x00', 0x2000032, 0x0, 0x1, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)='system.posix_acl_access\x00', &(0x7f0000000800)=ANY=[@ANYBLOB="0200000001000200001c00000400010000000000100005000000000020"], 0x24, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000980), 0x48241, 0x0)
r9 = socket$inet6_tcp(0xa, 0x1, 0x0)
r10 = dup(r9)
ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000a00)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})

5.494906329s ago: executing program 2 (id=451):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f0000000080)=[{0x6, 0x5, 0x0, 0xfffffc}]}, 0x10)
syz_emit_ethernet(0x173, &(0x7f0000000240)={@remote, @random="303b3eefb0e5", @val={@void}, {@ipv6={0x86dd, @tcp={0xb, 0x6, "92ffc8", 0x139, 0x6, 0xff, @local, @loopback, {[@fragment={0x6c, 0x0, 0x5, 0x0, 0x0, 0x4, 0x66}], {{0x4e23, 0x4e23, 0x41424344, 0x41424344, 0x0, 0x0, 0xd, 0x8, 0x100, 0x0, 0x5, {[@mptcp=@ack={0x1e, 0x16, 0x18, 0x4, "40e41668e0188980d75bb255e5a92071af48"}, @sack_perm={0x4, 0x2}, @exp_smc={0xfe, 0x6}]}}, {"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"}}}}}}}, 0x0)

5.468930261s ago: executing program 2 (id=452):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x5, &(0x7f0000000180)=0x7, 0x4)
getsockopt$inet6_tcp_int(r0, 0x6, 0x5, 0x0, &(0x7f0000000280))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000080)='./bus\x00', 0x2900088, &(0x7f0000001680)=ANY=[@ANYRES8=0x0, @ANYRESDEC=0x0, @ANYBLOB="2c696f636861727365743d6575632d6a702c6572726f72733d72656d6f756e742d726f2c757466382c666d61736b3d30303030303030303030303030303030303030303133332c646d61736b3d30303030303030303030303030303030303030303030332c74696d655f6f66667365743d3078303030303030303030303030303030362c6572726f72733d72656d6f756e742d726f2c00e7f7a64e12768f24588c031e3a7d52e686581692b31c66f5320a14e587a7c28feef0f667bc0421879f8dd03f06fa51770cf06aece55ad1185a9caffc331fae3067bf"], 0x3, 0x152b, &(0x7f00000017c0)="$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")
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000002d00)={0x1, &(0x7f0000002d40)=[{0x6, 0x0, 0x0, 0x7fff7ffa}]})
getpid()
r2 = creat(&(0x7f0000002d80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x124)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000002e00)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000002e40)=0x8)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000002ec0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
unshare(0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002f00)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
unshare(0x28000100)
connect$unix(r4, &(0x7f0000002f40)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1, 0x8, 0x8, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f00000002c0)=0x2, 0x4)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000004000000040000000001"], 0x48)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0xd, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@generic={0x5d, 0x8, 0x1}, @generic={0x7a, 0xa, 0x0, 0xfffffff8, 0xfffffffe}, @map_fd={0x18, 0x1, 0x1, 0x0, r6}, @generic={0x5, 0x8, 0x0, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, r7}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xcd)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r8, 0x0, 0xe, 0x0, &(0x7f00000005c0)='\x00'/14, 0x0, 0xfeff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff)
sendmmsg$unix(r5, &(0x7f0000002fc0), 0x651, 0x0)
recvmmsg(r4, &(0x7f0000003000), 0x10106, 0x2, 0x0)
syz_emit_ethernet(0x2a, &(0x7f0000003040)=ANY=[@ANYBLOB="aaaaaa72ebe928256812fcaaaaaaffffffffff7425004733001c00650000082f9078ac1414aa0a010100"], 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000003080)='/proc/tty/ldiscs\x00', 0x0, 0x0)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000200)={0x3, &(0x7f0000000240)=[{0x20, 0x4, 0x0, 0xfffff010}, {0x20, 0x0, 0x0, 0xfffff024}, {0x6, 0x0, 0x0, 0x3}]}, 0x10)

5.033629896s ago: executing program 8 (id=457):
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='map_files\x00')
getdents64(r0, &(0x7f0000000080)=""/57, 0x39)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="dc00000000010104000000000000000002000000240002801400018008000100e000000108000200e00000010c000280050001000000000008000480040003800800084000000000080008400000000734000f"], 0xdc}}, 0x0)
syz_emit_ethernet(0x2a, &(0x7f0000000000)={@broadcast, @multicast, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @multicast, @multicast1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @private=0x2}}}}, 0x0)

4.860649474s ago: executing program 8 (id=460):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000002bc0)={0x0, 0x0, &(0x7f0000002c00)={&(0x7f0000002c40)=ANY=[@ANYBLOB="38010000100001000000000000000000fc010000000000000000000000000001fc0100000000000000000000000000014e2000004e2000000a00808000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc010000000000000000000000000001000004d26c000000fc0100000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff000000000000000000000000000000000000000000000000000000000a0001000200007f00000000480003006465666c6174650000000000000000"], 0x138}, 0x1, 0x0, 0x0, 0x20000080}, 0x0)
sendmsg$nl_xfrm(r0, &(0x7f0000002d80)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000002e00)=@delsa={0x28, 0x12, 0x1, 0x0, 0x0, {@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4d2, 0xa, 0x6c}}, 0x28}}, 0x0)

4.716245248s ago: executing program 8 (id=462):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f0000000080)=[{0x6, 0x5, 0x0, 0xfffffc}]}, 0x10)
syz_emit_ethernet(0x173, &(0x7f0000000240)={@remote, @random="303b3eefb0e5", @val={@void}, {@ipv6={0x86dd, @tcp={0xb, 0x6, "92ffc8", 0x139, 0x6, 0xff, @local, @loopback, {[@fragment={0x6c, 0x0, 0x5, 0x0, 0x0, 0x4, 0x66}], {{0x4e23, 0x4e23, 0x41424344, 0x41424344, 0x0, 0x0, 0xd, 0x8, 0x100, 0x0, 0x5, {[@mptcp=@ack={0x1e, 0x16, 0x18, 0x4, "40e41668e0188980d75bb255e5a92071af48"}, @sack_perm={0x4, 0x2}, @exp_smc={0xfe, 0x6}]}}, {"a772f218a90e9a787e2f76d2e780c9ebfe8c96ff8da0df8ee9e238a4a5186b183381aff90b87bc619f2fdbe30fe57c166838f41dee801c66c880b09242eb7b3a71310d77fb3c795648e44d753f856cbda69e2a404a7d802042e1b0383fcb7c07cf43646013bd5c2300d97d61fcdf60b4b6789aaee2b87dd378dd08c2fbe09827dc2e7c58409ba8d4188deb32e61a0b91fda9ba923296944068fae22dc644fd000aba089304269595535fa6b133ff4eeda4736acb2750123230c072caaac7d12b0f1fdc3f4c4f83ceedece7fed295c237acf789b0a48c5a182e6103e1b615a260b96671d7befc3f8d4a07f245ac5585d57cd34a7db82537766d0e0e5b85"}}}}}}}, 0x0)

4.680762872s ago: executing program 8 (id=464):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x5, 0xc, 0x40, 0x3, 0x41}, 0x50)
openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r0, &(0x7f0000000200), 0x0}, 0x20)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000002bc0)={0x0, 0x0, &(0x7f0000002c00)={&(0x7f0000002c40)=ANY=[@ANYBLOB="38010000100001000000000000000000fc010000000000000000000000000001fc0100000000000000000000000000014e2000004e2000000a00808000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc010000000000000000000000000001000004d26c000000fc0100000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff000000000000000000000000000000000000000000000000000000000a0001000200007f00000000480003006465666c6174650000000000000000"], 0x138}, 0x1, 0x0, 0x0, 0x20000080}, 0x0)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/zoneinfo\x00', 0x0, 0x0)
ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f00000000c0)={[{0x963f, 0x1, 0x5, 0x2, 0x8, 0xf6, 0x4, 0x5c, 0x6, 0xc0, 0x0, 0x1, 0x4}, {0x3, 0x0, 0x5a, 0x8, 0x5, 0x4, 0x7, 0x40, 0x9, 0x7, 0x80, 0xe, 0x9}, {0x7, 0x8, 0x29, 0x0, 0x7c, 0x5b, 0x9, 0x6, 0x81, 0x4, 0xad, 0x2, 0x8}], 0x7fffffff})
sendmsg$nl_xfrm(r1, &(0x7f0000002d80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000000)=ANY=[], 0x28}}, 0x894)

4.466744854s ago: executing program 8 (id=465):
ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000580)={0x0, 0x8000000002, 0x0, [0x806f, 0x2, 0x9, 0x7231, 0x1], [0x1000000000000002, 0x10000002, 0x1, 0x6, 0x800000000, 0x0, 0x5, 0x8000000000000001, 0x9, 0x0, 0x9, 0x8001, 0x0, 0xffffbffffffffff4, 0x8e42, 0x400, 0x100, 0x8, 0x4000000000000dd, 0x90, 0x0, 0x800000000002a9, 0x19, 0x10000, 0x3, 0x8, 0x4, 0x3, 0x0, 0x9, 0x2, 0x7, 0x7, 0xfffffffffffffffa, 0x8000, 0x100, 0x80, 0xfffffffffffffffb, 0x1, 0x3, 0x8004, 0x8000000000000000, 0xfffffffffffffffa, 0x6dcdcb08, 0x20000000003, 0x8, 0x1, 0x5d, 0x4, 0x80, 0x538a, 0x8001, 0xda, 0x4, 0x3, 0x4, 0x8, 0xce67, 0x4, 0x125, 0x6, 0x40000001fffff, 0x7, 0xb, 0xc2e, 0xffffffffffffffff, 0x4, 0xfba, 0x12f, 0x8, 0x40000000000006, 0xfffffffffffffff8, 0x82c, 0x8, 0xfffffffd, 0x8000000000000001, 0x2, 0xfffffffffffffffd, 0x3, 0x5, 0x4, 0x800, 0x2000000000000002, 0x8000000000000004, 0x6144, 0x8, 0x200000000000002, 0x6, 0x1ff, 0x40009, 0x8000007c54, 0x4, 0xffffffffffff8000, 0x5, 0xb, 0x1000ffff, 0xa, 0x1, 0x16d, 0x2, 0x8, 0x8, 0x8, 0x0, 0x7, 0x0, 0x0, 0x3, 0xffffffffffffffff, 0xb, 0x3fb, 0x0, 0x80000000008, 0x5, 0x0, 0x100000000006, 0x5a99, 0x40, 0x7, 0x9, 0x1]})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000009c0), 0x2, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000e40)=0xc9a, 0x4)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000e80)={'ip6gretap0\x00', <r3=>0x0})
sendto$packet(r2, &(0x7f0000000ec0)="0b0312002e0064000200475400f6a13bb1000000086086dd4803", 0x100a6, 0x0, &(0x7f0000000f00)={0x11, 0x86dd, r3}, 0x14)
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f0000000380)='./tracing\x00', &(0x7f00000003c0)='tracefs\x00', 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./tracing/events/sched/filter\x00', 0x1, 0x0)
write$FUSE_POLL(r5, &(0x7f0000000440)={0x27}, 0x18)
ioctl$KVM_SET_CPUID2(r4, 0x4008ae90, &(0x7f0000000a00)={0xeb, 0x0, [{0x1, 0x0, 0x5, 0x7, 0x800, 0x7fffffff, 0x2}]})
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x5, 0x5, 0x2, 0x7, 0x0, 0x1, 0x10000}, 0x50)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r6, <r7=>0xffffffffffffffff}, &(0x7f0000000a40), &(0x7f0000000a80)}, 0x20)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f0000000b40)=@base={0x6, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x16, 0x11, &(0x7f0000000c80)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffb}}, @map_fd={0x18, 0x1, 0x1, 0x0, r7}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f0000000d40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r9, 0x0, 0xe, 0x0, &(0x7f0000000e00)='\x00'/14, 0x0, 0x80000004, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r10 = syz_usb_connect$uac3(0x3, 0xaa, &(0x7f00000001c0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x103d, 0x100, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x98, 0x3, 0x1, 0xd8, 0x10, 0x10, {0x8, 0xb, 0x1, 0x2, 0x1, 0x20, 0x30, 0x2}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x10, 0xa, 0x7}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x2, 0x7, 0xff, 0x1, 0x9}, @format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0x68, 0x3, 0x3, 0x15, "a7af"}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x0, 0x0, 0x3, {0xa, 0x25, 0x25, 0x7fffffff, 0xc, 0x180}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@as_header={0x17, 0x24, 0x1, 0x6, 0x8000, 0x7, 0x2, 0x6, 0x4a, 0x9, 0x10}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x7f, 0x4, 0x0, {0xa, 0x25, 0x25, 0x400, 0x8f, 0x2}}}}}}}}]}}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac3(r10, &(0x7f0000000000)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xc, 0x4, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1009}, [@generic={0x73, 0x1, 0x1, 0x7d}]}, &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_usb_control_io$uac3(r10, &(0x7f0000000100)={0x14, &(0x7f0000000300)={0x0, 0x3, 0x6, {0x6, 0xa, "c39aed3c"}}, 0x0}, 0x0)
syz_usb_control_io$uac3(r10, &(0x7f0000000140)={0x14, &(0x7f0000000240)=ANY=[], 0x0}, 0x0)

4.466056874s ago: executing program 2 (id=466):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_BEACON(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010004000000fedbdf250e00000008000300", @ANYRES32, @ANYBLOB="0c00990000000000fd77ebff15000e001c"], 0x4c}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r3)
syz_mount_image$ext4(&(0x7f0000000640)='ext4\x00', &(0x7f0000000700)='./file1\x00', 0x200000, &(0x7f00000006c0), 0x0, 0x589, &(0x7f00000011c0)="$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")
syz_mount_image$vfat(&(0x7f0000001780), &(0x7f00000017c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x40, 0x0, &(0x7f0000000040))
mkdir(&(0x7f0000001900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(r5, 0x10e, 0xc, &(0x7f0000000040)=0x5, 0xd)
sendmsg$nl_generic(r5, &(0x7f00000003c0)={0x0, 0xfffffffffffffd2f, &(0x7f0000000600)={&(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x1c}}, 0x8000)
syz_mount_image$vfat(&(0x7f0000001a00), &(0x7f0000001a40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x824851, 0x0, 0x1, 0x0, &(0x7f0000001b40))
mknod$loop(&(0x7f0000001b80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000680)={0x4, 0xffffffffffffffff}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000740)=0x8)
sched_setaffinity(0x0, 0xffffffffffffff25, &(0x7f0000000780)=0x2)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r6 = open(&(0x7f0000000800)='./bus\x00', 0x141b42, 0x8)
pipe(&(0x7f0000000840)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
write$binfmt_script(0xffffffffffffffff, 0x0, 0xb)
splice(r7, 0x0, r6, 0x0, 0x1000, 0x1)
splice(0xffffffffffffffff, 0x0, r8, 0x0, 0x82, 0x0)
mknod(&(0x7f0000001c80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2c, 0xa7ed)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000280)={'wlan0\x00', <r9=>0x0})
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x6, &(0x7f0000000580)=ANY=[@ANYBLOB="050000000000000073119f00000000008510000002000000b8696ccf0000000095000000001000009500a50500000000"], &(0x7f0000000b00)='GPL\x00', 0x5, 0x29e, &(0x7f0000000b40)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x70)
sendmsg$NL80211_CMD_SET_PMKSA(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000ffdbdf253400000008000300", @ANYRES32=r9, @ANYBLOB="14005500b1d5562d4053a7eaf787ede3aa38f3550a0006005050505050500000"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x400c011)
sendmsg$NL80211_CMD_SET_MPATH(r0, &(0x7f0000000440)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="000127bd7000fddbdf251600000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900090000006e000000"], 0x28}, 0x1, 0x0, 0x0, 0x4000080}, 0x20004840)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x305400c, &(0x7f00000009c0)={[{@journal_path={'journal_path', 0x3d, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}}, {@dioread_nolock}]}, 0x1, 0x538, &(0x7f0000001d80)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0)

4.133688098s ago: executing program 2 (id=472):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
r1 = open(&(0x7f0000000c80)='./file1\x00', 0x8000, 0x10)
getdents(r1, &(0x7f0000000800)=""/171, 0xab)
ioctl$HIDIOCSREPORT(r1, 0x400c4808, &(0x7f00000008c0)={0x3, 0x3, 0x88})
ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000900)=<r2=>0x0)
syz_usb_connect$uac3(0x0, 0xa0, &(0x7f0000000940)=ANY=[@ANYBLOB="12011003000000403512100040000102030109028e000301002040080b0201012130c60904000000010130000a2401042a00ff0f0000132403050001020602028000000700100002000f24090202000000", @ANYRES16], &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0})
syz_pidfd_open(r2, 0x0)
connect$can_bcm(r0, &(0x7f0000000640), 0x10)
recvmmsg(r0, &(0x7f0000000a00), 0x0, 0x10002, 0x0)
ioctl$SIOCGSTAMP(r0, 0x8906, 0x0)
r3 = socket(0x10, 0x803, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000006c0)={0x1, &(0x7f0000000a80)=[{0x6, 0x80, 0x5, 0x7fff0003}]})
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000b40)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
fcntl$lock(r4, 0x26, &(0x7f00000007c0)={0x0, 0x0, 0x6})
fcntl$lock(r4, 0x5, &(0x7f0000000bc0)={0x1, 0x1, 0x100, 0x3})
getsockname$packet(r3, 0x0, &(0x7f0000000ac0))
sendmsg$can_bcm(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=<r5=>0x0, @ANYRES64=<r6=>0x2710], 0x48}}, 0x0)
renameat2(r1, &(0x7f0000000a00)='./file1\x00', r1, &(0x7f0000000a40)='./bus\x00', 0x5)
syz_mount_image$f2fs(&(0x7f0000000b00), &(0x7f0000002800)='./file1\x00', 0x800080, &(0x7f0000000dc0)=ANY=[@ANYBLOB='active_logs=4,jqfmt=vfsv0,prjjquota=f2fs\x00,mode=ad,norecovery,fsync_mode=posix,user_xattr,disable_roll_forward,\x00\x00\x00', @ANYBLOB="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", @ANYRES16=0x0, @ANYRESHEX=r5, @ANYRESOCT, @ANYRES8], 0x1, 0x105fc, &(0x7f0000012fc0)="$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")
r7 = open(&(0x7f0000012f80)='./bus\x00', 0x4ca7e, 0x10)
fallocate(r7, 0x0, 0x0, 0x1000f4)
r8 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000c00)={0x80}, 0x10)
sendmsg$nl_route(r8, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000d00)=ANY=[@ANYBLOB="9c00ee00680002002abd7000fddbdf250a0005000000000014000c8006000100030000000800030000000001a6270a0014000600ac141428000000000000000000000000140006006401010000000000000000000000000024000c800800030002000000060001000100000006000100e30a000000080005001cd0c375581600"/142, @ANYRES32=0x0, @ANYBLOB="08000100ec0000000800010002000000"], 0x9c}}, 0x20000051)
sendfile(r7, r7, 0x0, 0x40000000800)
r9 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x0, &(0x7f0000000080), 0x1, 0x50f, &(0x7f00000000c0)="$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")
r10 = openat(0xffffffffffffff9c, &(0x7f0000000600)='.\x00', 0x0, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
dup3(r10, r9, 0x80000)
ioctl$FS_IOC_GETFSMAP(r10, 0xc0c0583b, &(0x7f0000000b80)=ANY=[@ANYRES32=r6])

3.561116226s ago: executing program 6 (id=478):
syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000440)='./bus\x00', 0x2008042, &(0x7f0000000480)={[{@user_xattr}, {@errors_remount}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@delalloc}, {@data_err_ignore}]}, 0x1, 0x57e, &(0x7f0000000500)="$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")
r0 = socket(0x2, 0x3, 0x6)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x9, 0x3, 0x1d0, 0x0, 0xffffffff, 0xffffffff, 0x98, 0xffffffff, 0x0, 0xffffffff, 0xffffffff, 0x138, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x1, 0xffffffff, 0xffffffff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x230)
syz_emit_ethernet(0x7a, &(0x7f0000000240)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x6c, 0x67, 0x0, 0x7, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x16, 0xc2, 0x254e, 0x0, 0x0, {[@mptcp=@capable={0x1e, 0x14, 0xe, 0x8, 0x0, 0x80000000, [0xe]}, @timestamp={0x8, 0xa, 0x800, 0x30000}, @md5sig={0x13, 0x12, "4a671f39f73ac658beeb0d964e18d13e"}, @md5sig={0x13, 0x12, "1a9e6af92d291a78fa577251665a12d5"}]}}}}}}}, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1, 0x4, 0x8, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_CAP_HYPERV_SYNIC2(r4, 0x4068aea3, &(0x7f00000003c0))
ioctl$VHOST_VDPA_SET_CONFIG(0xffffffffffffffff, 0x4008af74, 0x0)
ioctl$KVM_SET_MSRS(r4, 0x4008ae89, 0x0)
close(0x3)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x1, 0x14, &(0x7f0000000b40)=ANY=[@ANYBLOB="18000000000000000000000000000000180300002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000f00000085000000060000007a0af0ff0000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000bfa200000000000007020000f8ffffffbfa300000000000007030000f0ffffffb704000000000000850000000200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0x14, &(0x7f0000000cc0)=ANY=[], &(0x7f0000000d00)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000d40)={r5}, 0xc)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000d80), r0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000dc0)={'batadv_slave_0\x00'})
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffff7, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000006340)='memory.events.local\x00', 0x275a, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000006380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
rename(&(0x7f0000006480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000006580)='./mnt\x00')

3.387532704s ago: executing program 6 (id=480):
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000000c0), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000000100), 0x10106, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000180)='./proc\x00', &(0x7f0000000440)='proc\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./proc/sys/vm/drop_caches\x00', 0x1, 0x0)
write(r1, &(0x7f0000000540)='2', 0x1)
truncate(0x0, 0x3)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./bus\x00', 0x1d7)
syz_mount_image$fuse(0x0, &(0x7f0000000340)='./file0/file0\x00', 0x4002, 0x0, 0x1, 0x0, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f0000000380)='./file0/file1\x00', 0x8000, 0x5)
syz_mount_image$fuse(&(0x7f00000003c0), &(0x7f0000000400)='./bus\x00', 0x322020, &(0x7f0000000440)=ANY=[], 0x1, 0x0, 0x0)
linkat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0/file0\x00', 0x400)

3.001851543s ago: executing program 1 (id=483):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2db700000000000000002600000004000180100002800c00018008"], 0x28}, 0x1, 0x0, 0x0, 0x24004084}, 0x0)

2.995034314s ago: executing program 1 (id=484):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2db700000000000000000100000004000180100002800c00018008"], 0x28}, 0x1, 0x0, 0x0, 0x24004084}, 0x0) (fail_nth: 5)

2.979019816s ago: executing program 6 (id=485):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6, 0x5, 0x0, 0xfffffc}]}, 0x10)
syz_emit_ethernet(0x0, 0x0, 0x0)

2.897830684s ago: executing program 6 (id=486):
r0 = syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x804, &(0x7f0000000140)={[{@iocharset={'iocharset', 0x3d, 'cp950'}}, {@uni_xlateno}, {@iocharset={'iocharset', 0x3d, 'iso8859-7'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-6'}}, {@utf8no}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}, {@rodir}, {@utf8}, {@rodir}, {@fat=@codepage={'codepage', 0x3d, '932'}}, {@shortname_mixed}, {@shortname_mixed}, {@utf8}, {@shortname_lower}, {@uni_xlate}, {@rodir}]}, 0x1, 0x2a6, &(0x7f00000008c0)="$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")
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000010401010000000000000000090002000500014001"], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000010401010000000000000000000004000500010001"], 0x1c}, 0x1, 0x0, 0x0, 0x20008018}, 0x0)
close(r1)
mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000880)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
flistxattr(r3, 0x0, 0x0)
r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0)
r5 = eventfd(0xfffffdfe)
ioctl$VHOST_SET_LOG_FD(r4, 0x4004af07, &(0x7f0000000440)=r5)
ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f0000000480)={0x1, r5})
ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f00000004c0)={0x1, 0x1, 0x0, 0x0, &(0x7f0000000500)=""/61, 0x58000})
ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000000540)=0x1)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000580)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1, 0xb, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000740)=r7, 0x4)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000007c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000c0000000500000002000084fdf7ffff0a000000020000000000000005000000020000000400000600000000000000010500000020000000006100302e615f5f610061"], 0x0, 0x58}, 0x28)
syz_mount_image$vfat(&(0x7f0000000b80), &(0x7f0000000bc0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x802077, 0x0, 0xfc, 0x0, &(0x7f0000000c40))
symlinkat(&(0x7f0000000240)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f00000002c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00')

2.553067859s ago: executing program 6 (id=487):
r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
syz_mount_image$f2fs(&(0x7f0000000080), &(0x7f00000000c0)='./bus\x00', 0x0, &(0x7f0000000140)=ANY=[], 0xfd, 0x553e, &(0x7f0000000240)="$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")
prlimit64(0x0, 0xe, &(0x7f0000005780)={0xa, 0x400000000008d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000057c0)=0x8)
r1 = getpid()
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000005800)={&(0x7f0000005840)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000005880)={&(0x7f00000058c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010027bd7000fcdbdf251400000008000d000400000005000c0001000000"], 0x24}, 0x1, 0x0, 0x0, 0x8084}, 0x8080)
sched_setaffinity(0x0, 0x8, &(0x7f0000005900)=0x2)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r2, 0x1, 0x2a, &(0x7f0000000100)=0xb6, 0x4)
bind$inet(r2, &(0x7f0000000140)={0x2, 0x4e20, @empty}, 0x10)
sendmmsg$inet(r2, &(0x7f0000000180)=[{{&(0x7f00000001c0)={0x2, 0x4e20, @local}, 0x10, 0x0}}], 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000006180)=@raw={'raw\x00', 0x9, 0x3, 0x230, 0xe0, 0xffffffff, 0xffffffff, 0xe0, 0xffffffff, 0x198, 0xffffffff, 0xffffffff, 0x198, 0xffffffff, 0x3, &(0x7f0000000200), {[{{@ip={@dev={0xac, 0x14, 0x14, 0x44}, @private=0xa010100, 0xffffffff, 0xff, 'caif0\x00', 'veth1_virt_wifi\x00', {0xff}, {}, 0x89, 0x2, 0x6d}, 0x0, 0xc0, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xa}}, @inet=@rpfilter={{0x28}, {0x6}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x21e2, 0xb, 0x9, 'pptp\x00', {0x7}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x290)
recvfrom(r2, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000005b80)=@updpolicy={0x17c, 0x19, 0x8, 0x0, 0x1, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@local, 0x0, 0x1973, 0x0, 0x0, 0x2}, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x0, 0xffffffffffffffff}, {0x0, 0x5, 0x3, 0x3}, 0x0, 0x6e6bb7, 0x0, 0x1}, [@tmpl={0xc4, 0x5, [{{@in=@local, 0x0, 0x33}, 0x0, @in=@private=0xa010100, 0x34ff, 0x1, 0x0, 0x0, 0x5, 0x0, 0x40}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x6c}, 0x0, @in=@rand_addr=0x64010101, 0x2000, 0x4, 0x0, 0x0, 0x81}, {{@in=@empty, 0x4d6, 0x6c}, 0x2, @in=@multicast1, 0x34fe, 0x0, 0x0, 0x0, 0x0, 0x9}]}]}, 0x17c}, 0x1, 0x0, 0x0, 0x1}, 0x8000080)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000005d00)={0x0, 0x0, &(0x7f0000005d40)={&(0x7f0000005d80)=ANY=[@ANYBLOB="fc0000001900010029bd7000fbdbdf25ac1e0101000000000000000000000000ffffffff00000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000001000080000000000000000000000000000000000000000000000000000000000200000000000000fdffffffefffffff0000000000000000100000000000000005000000000000000000000000200000000000000000000000000000000000000100020200000000440005"], 0xfc}, 0x1, 0x0, 0x0, 0x20000004}, 0x0)
r4 = socket(0x840000000002, 0x3, 0xff)
sendmsg$inet(r4, &(0x7f0000005e40)={&(0x7f0000005e80)={0x2, 0x4e23, @multicast1}, 0x10, &(0x7f0000005fc0)=[{&(0x7f00000060c0)="9745010000004000012c8cc5ff", 0xd}, {&(0x7f0000006100)="82f750e625d3c8d9d65198c3bd00fd", 0xf}], 0x2, &(0x7f0000006140)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x15}, @local}}}], 0x20}, 0x400c804)
sched_setscheduler(r1, 0x1, &(0x7f0000005940)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000005980)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f00000059c0)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f0000005a40), 0x651, 0x0)
inotify_add_watch(r0, &(0x7f0000005a80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x80000000)
recvmmsg(r5, &(0x7f0000005b80), 0x4000087, 0x2, 0x0)
r7 = openat(0xffffffffffffff9c, &(0x7f0000005a40)='./file0\x00', 0x42, 0x0)
ioctl$FIDEDUPERANGE(r7, 0xc0189436, &(0x7f0000006440)={0x3, 0x4, 0x0, 0xfdfd})
setxattr$system_posix_acl(&(0x7f0000005ec0)='.\x00', &(0x7f0000005f00)='system.posix_acl_default\x00', &(0x7f0000006680)={{}, {0x1, 0x6}, [], {0x4, 0x1}, [{0x8, 0x4}, {0x8, 0x7}]}, 0x34, 0x0)
open(&(0x7f0000005f80)='./bus\x00', 0x143943, 0x18)
lsetxattr$system_posix_acl(&(0x7f0000006000)='./bus\x00', &(0x7f0000006040)='system.posix_acl_access\x00', &(0x7f0000006080)=ANY=[@ANYBLOB="0200f8ff000002000000000004000000007222b0696f4d160017da7fc9a7f10000001000"], 0x24, 0x0)

2.478242647s ago: executing program 1 (id=488):
r0 = socket$can_raw(0x1d, 0x3, 0x1)
r1 = dup(r0)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r3 = socket(0xa, 0x1, 0x0)
setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000180)={0x3, {{0xa, 0x4e24, 0x2, @loopback={0xff00000000000000}, 0x4}}, {{0xa, 0x4e00, 0xa3, @local, 0x4f1}}}, 0x108)
close_range(r2, 0xffffffffffffffff, 0x0)
inotify_init1(0x80000)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x40, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f00000059c0), 0x42, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet(0x2, 0x2, 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0xa, 0x3, 0x3a)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_xfrm(0x10, 0x3, 0x6)
r5 = mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r6, 0x0, 0x0, 0x20000845, &(0x7f0000005a00), 0x1c)
getsockopt$inet6_buf(r6, 0x29, 0x3d, 0x0, &(0x7f0000005a40)=0x37)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000005a80)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, <r7=>0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000005b00)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000005b40))
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
r9 = dup(r8)
syz_ublk_add_dev(r4, 0x0, r5, 0x0, &(0x7f00000000c0)={0x2e, 0x2, 0x0, r4, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, r7, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000080)=@any_dev={0x1, 0x551, 0x0, 0x0, 0x1000, 0x2}}}, &(0x7f00000002c0)=<r10=>0x0)
syz_ublk_setup_queues(r9, r10, &(0x7f0000005b80)={0x0, 0xbd, 0x10, 0x1, 0x7f, 0x0, r1}, &(0x7f0000005c00)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8000e308, 0x42, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b02, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x69}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe7d, 0x800, 0x1, 0x36d}}], 0x1, 0x0, 0x0)

1.813935075s ago: executing program 1 (id=489):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1c0)
mount(0x0, 0x0, &(0x7f0000000080)='proc\x00', 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0xa, 0x400000000008d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x2)
sched_setscheduler(r0, 0x1, &(0x7f0000000180)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000200)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000280), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000002c0), 0x4000087, 0x2, 0x0)
openat$urandom(0xffffffffffffff9c, 0x0, 0x101402, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x7, 0x401d031, 0xffffffffffffffff, 0x0)
add_key(&(0x7f0000000300)='keyring\x00', &(0x7f0000000340)={'syz', 0x0}, 0x0, 0xfffff, 0xfffffffffffffffc)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000380), 0xca00, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x800)
fchdir(0xffffffffffffffff)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x48, &(0x7f00000004c0)={0x6, 0x1, '\x00', [@pad1, @ra={0x5, 0x2, 0x5}, @generic={0x8}]}, 0x18)
ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000540))
ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000840)=0x1)
close(0xffffffffffffffff)

260.886053ms ago: executing program 6 (id=490):
syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x2800000, &(0x7f0000000080)=ANY=[@ANYBLOB="6e6f646973636172642c6261636b67726f756e645f67633d73796e632c6261636b67726f756e645f67633d6f6e2c6e6f757365725f78617474722c6e6f71756f74612c64697361626c655f726f6c6c5f666f72776172642c67635f6d657267652c6e6f757365725f78617474722c636865636b706f696e743d64697361626c652c757365725f78617474722c6673796e635f6d6f64653d7374726963742c646973636172645f756e69743d73656374696f6e2c636865636b706f696e743d64697361626c652c6e6f696e6c696e655f64656e7472792c00ec6da92d1c80a6c720380e3c2c55bf27596d2776ce408c4bb19b149757508e1c7e919c6c2047023baa412d14fa75c8cac6e5f103e13ea52708af0a7c5da8af4ecb6612"], 0x2, 0x5505, &(0x7f0000000e40)="$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") (async, rerun: 32)
r0 = openat(0xffffffffffffff9c, &(0x7f0000006b80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2440, 0x0) (async, rerun: 32)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0f00000004000000040000000001188e363d3e22a426c4df63b2635485e86d7439082593c6c2368c26cdd91bd50cdd561e41b8e682ac159949d86c6550b85bbc1388eaaf6b00a6043f9f7f7ed03fb3cedf29e9fabc9d565e9644e7d986763035e89bdcf3a959c48bba63f2b8960f3e5852d53942b0c652ac04e9d26604863fde35965ffe8c9891bcdd0cae1b08aa4e45d0e167494e30557a9c1568d2e5b765988df455274f1a8c697437384ded0dc0584caa3b4f078a77170d74e8de3ede3538d913fd8c3cb6afeae0"], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1, 0x10, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1ae8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000bfa200000000000007020000f8ffffff850000000300000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = openat(0xffffffffffffffff, 0x0, 0x842, 0x32)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r3, 0x0) (async, rerun: 64)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f00000001c0)={0x1, &(0x7f0000000540)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) (async, rerun: 64)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async)
openat$kvm(0xffffffffffffff9c, 0x0, 0x20c101, 0x0) (async)
socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000580)) (async, rerun: 64)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x25) (rerun: 64)
bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000005c0)={r4, 0x0, &(0x7f0000000600)=""/71}, 0x20)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
flock(0xffffffffffffffff, 0x4)
socket$packet(0x11, 0x2, 0x300)
bpf$MAP_CREATE(0x0, 0x0, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async, rerun: 64)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r2, 0x0, 0xe, 0x0, &(0x7f0000000400)='\x00'/14, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async, rerun: 64)
ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, 0x0)

255.483474ms ago: executing program 2 (id=491):
syz_read_part_table(0x105b, &(0x7f0000001080)="$eJzsz8ttwkAUhtF/7IwtR1mlgGzSSDpIP7DxhgrogrKQqIACjPxAogJgcY5m8WlGV6MbXqo7ZvpZ6jolKXOdpz7D9l7GLvleuy5n0ydpmiSHmnTzTZsy/u8vv3Pv7uNpa1lHP/p8/j38PHyl5vSUJQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgzd0CAAD//2vOCtE=")
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x24040080}, 0x4a095)
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000080)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32)
sendmmsg(r0, &(0x7f00000000c0)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0)
ioctl$TIOCCONS(0xffffffffffffffff, 0x541d)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="495300000000000000006700000008000300", @ANYRES32=0x0, @ANYBLOB="10001f"], 0x2c}, 0x1, 0x0, 0x0, 0x4040}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000280)={0x118, r3, 0x200, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x800, 0x6}}}}, [@NL80211_ATTR_MESH_SETUP={0xe8, 0x70, [@NL80211_MESH_SETUP_USERSPACE_AUTH={0x4}, @NL80211_MESH_SETUP_USERSPACE_MPM={0x4}, @NL80211_MESH_SETUP_IE={0xdb, 0x3, "487c22211a9d92bc1f33cb31b693dd19ff2be3f7118ba746117da8c9c13bcd3f199e27fc5b517635bf4c9557c834b84e6beefec1426dfd9ad1b75145ae70b44e2286d42cb2adcae8bd4c2a879c6257aa03acda24f4a789164722a4b25226bf475335e5e657f7fe66c18c8efff2387602c781ed3c836ce4938896e20de90e75a960c4ea83ff524824a312bb80f43ee47911dc35f852db0465fbb3a9a8a6dadbf0d83f70f4a68aeb79590ba83b153bd36c37057c1632095fb722d1f80625b2a89bb5852029e003aad749dfc23f970507fa2794472d7b168d"}]}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x9}]}, 0x118}, 0x1, 0x0, 0x0, 0x20040040}, 0x80)

234.039646ms ago: executing program 1 (id=492):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000019640), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000780)={0x3, 0x0, [{0xffe, 0x26, &(0x7f00000000c0)=""/38}, {0x5000, 0x58, &(0x7f0000000100)=""/88}, {0xdddd0000, 0x99, &(0x7f0000000180)=""/153}]})

122.009387ms ago: executing program 1 (id=493):
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/image_size', 0x149882, 0x148)
write$UHID_CREATE2(r0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mysys\x00', 0x1ff)
mount(0x0, &(0x7f00000001c0)='./mysys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./mysys/bus/pci/devices/0000:00:05.0/resource0\x00', 0x2, 0x0)
mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x3, 0x11, r1, 0x4000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xe, 0x8031, 0xffffffffffffffff, 0x3000)

0s ago: executing program 2 (id=494):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40042, 0x1)
r1 = socket$packet(0x11, 0x2, 0x300)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'ip6gretap0\x00', <r3=>0x0})
sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newlink={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ipoib={{0xa}, {0x24, 0x2, 0x0, 0x1, [@IFLA_IPOIB_UMCAST={0x6, 0x3, 0x1}, @IFLA_IPOIB_PKEY={0x6, 0x1, 0xfffd}, @IFLA_IPOIB_PKEY={0x6, 0x1, 0x442}, @IFLA_IPOIB_MODE={0x6, 0x2, 0x3}]}}}]}, 0x54}}, 0x0)
timer_create(0xfffffffffffffffd, 0x0, &(0x7f0000000140)=<r4=>0x0)
timer_settime(r4, 0x1, &(0x7f0000000180)={{}, {0x77359400}}, 0x0)
timer_gettime(r4, &(0x7f0000000400))
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48)
r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0xe, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="18020000f0cd00000000000004000000850000000500000095"], &(0x7f00000006c0)='GPL\x00'}, 0x94)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000700)=ANY=[@ANYRES32=r7, @ANYRES32=r8, @ANYBLOB="05"], 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r7, <r9=>0xffffffffffffffff}, &(0x7f0000000780), &(0x7f00000007c0)=r6}, 0x20)
r10 = gettid()
sendmsg$unix(r5, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000880)='\t', 0x1}], 0x1, &(0x7f00000008c0)=[@cred={{0x1c, 0x1, 0x2, {r10}}}, @rights={{0x14, 0x1, 0x1, [r6]}}], 0x38, 0x20008000}, 0x4000080)
clock_gettime(0x0, &(0x7f0000000440)={<r11=>0x0, <r12=>0x0})
timer_settime(r4, 0x1, &(0x7f00000004c0)={{r11, r12+10000000}, {0x77359400}}, 0x0)
sendto$packet(r1, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x11, 0x8100, r3, 0x1, 0x0, 0x6, @local}, 0x14)
close(r0)
r13 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r13, &(0x7f0000000040)=[{{&(0x7f0000000100)={0xa, 0x4e23, 0x6, @mcast2, 0x7}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000000140)}}, {{0x0, 0x0, &(0x7f00000001c0)}}], 0x3, 0x1c000)
r14 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000900)='./file0\x00', &(0x7f0000000940), 0x80, &(0x7f0000000980)={{'fd', 0x3d, r14}, 0x2c, {'rootmode', 0x3d, 0x4000}})
read$FUSE(r14, &(0x7f0000000a00)={0x2020, 0x0, <r15=>0x0, <r16=>0x0, <r17=>0x0}, 0x2020)
write$FUSE_INIT(r14, &(0x7f0000002a40)={0x50, 0x0, r15, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50)
mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x8, &(0x7f0000006dc0)={'trans=fd,', {'rfdno', 0x3d, r9}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@dfltgid={'dfltgid', 0x3d, r17}}, {@access_uid={'access', 0x3d, r16}}, {@loose}, {@access_user}, {@access_user}, {@afid={'afid', 0x3d, 0x4}}, {@dfltgid}]}})
sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, 0x0, 0x8004)
write$cgroup_freezer_state(r0, 0x0, 0x0)
r18 = socket(0x18, 0x800, 0x2)
getsockname$packet(r18, 0x0, &(0x7f0000000480))

kernel console output (not intermixed with test programs):

   47.226259][  T902]  proc_reg_unlocked_ioctl+0x1e6/0x2d0
[   47.231746][  T902]  ? __cfi_proc_reg_unlocked_ioctl+0x10/0x10
[   47.237769][  T902]  __se_sys_ioctl+0x12f/0x1b0
[   47.242472][  T902]  __x64_sys_ioctl+0x7b/0x90
[   47.247082][  T902]  x64_sys_call+0x58b/0x9a0
[   47.251617][  T902]  do_syscall_64+0x4c/0xa0
[   47.256050][  T902]  ? clear_bhb_loop+0x30/0x80
[   47.260766][  T902]  ? clear_bhb_loop+0x30/0x80
[   47.265648][  T902]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   47.271651][  T902] RIP: 0033:0x7f3155d9fb19
[   47.276084][  T902] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   47.295897][  T902] RSP: 002b:00007f3156cce028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   47.304345][  T902] RAX: ffffffffffffffda RBX: 00007f3156025fa0 RCX: 00007f3155d9fb19
[   47.312430][  T902] RDX: 0000200000000140 RSI: 00000000400c4d01 RDI: 0000000000000003
[   47.320516][  T902] RBP: 00007f3155e37b70 R08: 0000000000000000 R09: 0000000000000000
[   47.328518][  T902] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   47.336684][  T902] R13: 00007f3156026038 R14: 00007f3156025fa0 R15: 00007fff7a0e72f8
[   47.344689][  T902]  </TASK>
[   47.355766][  T391] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   47.485685][  T914] xt_CONNSECMARK: invalid mode: 0
[   47.527934][  T905] loop3: detected capacity change from 0 to 40427
[   47.543727][  T905] F2FS-fs (loop3): Fix alignment : internally, start(4096) end(16896) block(12288)
[   47.561566][  T905] F2FS-fs (loop3): invalid crc value
[   47.587451][  T905] F2FS-fs (loop3): Found nat_bits in checkpoint
[   47.638625][  T905] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[   47.715104][  T905] F2FS-fs (loop3): Try to recover all the superblocks, ret: 0
[   47.743656][  T920] f2fs_ckpt-7:3: attempt to access beyond end of device
[   47.743656][  T920] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[   47.832373][   T19] usb 6-1: new low-speed USB device number 3 using dummy_hcd
[   47.994860][    T8] device bridge_slave_1 left promiscuous mode
[   48.004346][    T8] bridge0: port 2(bridge_slave_1) entered disabled state
[   48.019535][    T8] device bridge_slave_0 left promiscuous mode
[   48.032618][    T8] bridge0: port 1(bridge_slave_0) entered disabled state
[   48.033485][   T19] usb 6-1: config 1 interface 0 altsetting 10 endpoint 0x1 is Bulk; changing to Interrupt
[   48.050322][   T19] usb 6-1: config 1 interface 0 altsetting 10 endpoint 0x82 is Bulk; changing to Interrupt
[   48.057178][  T922] ip_tables: iptables: counters copy to user failed while replacing table
[   48.060786][   T19] usb 6-1: config 1 interface 0 has no altsetting 0
[   48.069073][    T8] device veth1_macvtap left promiscuous mode
[   48.083509][    T8] device veth0_vlan left promiscuous mode
[   48.085090][   T19] usb 6-1: string descriptor 0 read error: -22
[   48.103175][   T19] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[   48.121033][   T19] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   48.139813][  T917] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[   48.149343][  T917] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[   48.198982][   T28] kauditd_printk_skb: 3 callbacks suppressed
[   48.198997][   T28] audit: type=1400 audit(1793731787.180:402): avc:  denied  { setopt } for  pid=921 comm="syz.3.183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   48.267122][   T28] audit: type=1400 audit(1793731787.250:403): avc:  denied  { setopt } for  pid=921 comm="syz.3.183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   48.287191][   T28] audit: type=1400 audit(1793731787.270:404): avc:  denied  { read } for  pid=921 comm="syz.3.183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   48.327919][  T928] xt_CONNSECMARK: invalid mode: 0
[   48.334786][  T930] loop7: detected capacity change from 0 to 512
[   48.341495][   T28] audit: type=1400 audit(1793731787.320:405): avc:  denied  { write } for  pid=921 comm="syz.3.183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   48.359875][  T930] ext3: Unknown parameter '.'
[   48.419308][  T933] loop2: detected capacity change from 0 to 16
[   48.429006][  T933] erofs: (device loop2): mounted with root inode @ nid 36.
[   48.447863][   T28] audit: type=1400 audit(1793731787.430:406): avc:  denied  { mounton } for  pid=925 comm="syz.2.184" path="/36/file0" dev="loop2" ino=36 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   48.557554][  T933] tipc: Started in network mode
[   48.562575][  T933] tipc: Node identity 4, cluster identity 4711
[   48.568826][  T933] tipc: Node number set to 4
[   48.574553][  T935] tipc: Enabled bearer <eth:syz_tun>, priority 0
[   48.635120][   T24] usb 6-1: USB disconnect, device number 3
[   49.309481][  T943] loop3: detected capacity change from 0 to 256
[   49.318954][  T943] FAT-fs (loop3): Unrecognized mount option "umaskÈ" or missing value
[   49.752221][    C0] sched: RT throttling activated
[   49.769204][   T28] audit: type=1400 audit(1793731788.180:407): avc:  denied  { sys_module } for  pid=940 comm="syz.3.188" capability=16  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[   50.233402][  T946] netlink: 4 bytes leftover after parsing attributes in process `syz.7.189'.
[   50.246461][   T28] audit: type=1400 audit(1793731789.230:408): avc:  denied  { create } for  pid=949 comm="syz.5.191" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[   50.273962][  T954] FAULT_INJECTION: forcing a failure.
[   50.273962][  T954] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   50.276352][  T953] FAULT_INJECTION: forcing a failure.
[   50.276352][  T953] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   50.287454][   T28] audit: type=1400 audit(1793731789.240:409): avc:  denied  { connect } for  pid=949 comm="syz.5.191" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[   50.300521][  T953] CPU: 1 PID: 953 Comm: syz.6.192 Not tainted syzkaller #0
[   50.327099][  T953] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[   50.337174][  T953] Call Trace:
[   50.340465][  T953]  <TASK>
[   50.343394][  T953]  __dump_stack+0x21/0x24
[   50.347774][  T953]  dump_stack_lvl+0x110/0x170
[   50.352578][  T953]  ? __cfi_dump_stack_lvl+0x8/0x8
[   50.357644][  T953]  dump_stack+0x15/0x24
[   50.361802][  T953]  should_fail_ex+0x3bf/0x510
[   50.366567][  T953]  should_fail+0xb/0x10
[   50.370717][  T953]  should_fail_usercopy+0x1a/0x20
[   50.375913][  T953]  _copy_from_user+0x1e/0xc0
[   50.380496][  T953]  iovec_from_user+0x1aa/0x2e0
[   50.385345][  T953]  __import_iovec+0x6d/0x460
[   50.389938][  T953]  ? kstrtoull+0x137/0x1d0
[   50.394355][  T953]  import_iovec+0x7c/0xb0
[   50.398680][  T953]  ___sys_sendmsg+0x252/0x360
[   50.403436][  T953]  ? __sys_sendmsg+0x290/0x290
[   50.408192][  T953]  ? __kasan_check_write+0x14/0x20
[   50.413397][  T953]  ? proc_fail_nth_write+0x180/0x200
[   50.418864][  T953]  ? vfs_write+0xa51/0xd00
[   50.423304][  T953]  ? __fdget+0x19c/0x220
[   50.427549][  T953]  __x64_sys_sendmsg+0x20d/0x2e0
[   50.432573][  T953]  ? __cfi___x64_sys_sendmsg+0x10/0x10
[   50.438053][  T953]  ? fpregs_assert_state_consistent+0xb1/0xe0
[   50.444124][  T953]  x64_sys_call+0x171/0x9a0
[   50.448625][  T953]  do_syscall_64+0x4c/0xa0
[   50.453057][  T953]  ? clear_bhb_loop+0x30/0x80
[   50.457743][  T953]  ? clear_bhb_loop+0x30/0x80
[   50.462431][  T953]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   50.468329][  T953] RIP: 0033:0x7f75b2b9fb19
[   50.472744][  T953] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   50.492346][  T953] RSP: 002b:00007f75b3a3d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   50.500791][  T953] RAX: ffffffffffffffda RBX: 00007f75b2e25fa0 RCX: 00007f75b2b9fb19
[   50.508794][  T953] RDX: 0000000000000000 RSI: 00002000000007c0 RDI: 0000000000000003
[   50.516779][  T953] RBP: 00007f75b3a3d090 R08: 0000000000000000 R09: 0000000000000000
[   50.523484][  T957] loop5: detected capacity change from 0 to 2048
[   50.524801][  T953] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   50.539091][  T953] R13: 00007f75b2e26038 R14: 00007f75b2e25fa0 R15: 00007ffe7bc65588
[   50.547077][  T953]  </TASK>
[   50.553753][  T957] EXT4-fs: Ignoring removed oldalloc option
[   50.557351][  T954] CPU: 1 PID: 954 Comm: syz.7.193 Not tainted syzkaller #0
[   50.566885][  T954] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[   50.577035][  T954] Call Trace:
[   50.580335][  T954]  <TASK>
[   50.583271][  T954]  __dump_stack+0x21/0x24
[   50.587600][  T954]  dump_stack_lvl+0x110/0x170
[   50.592269][  T954]  ? __cfi_dump_stack_lvl+0x8/0x8
[   50.597280][  T954]  dump_stack+0x15/0x24
[   50.601421][  T954]  should_fail_ex+0x3bf/0x510
[   50.606084][  T954]  should_fail+0xb/0x10
[   50.610271][  T954]  should_fail_usercopy+0x1a/0x20
[   50.615299][  T954]  _copy_from_user+0x1e/0xc0
[   50.619899][  T954]  iovec_from_user+0x1aa/0x2e0
[   50.624674][  T954]  __import_iovec+0x6d/0x460
[   50.629252][  T954]  ? kstrtoull+0x137/0x1d0
[   50.633677][  T954]  import_iovec+0x7c/0xb0
[   50.637999][  T954]  ___sys_sendmsg+0x252/0x360
[   50.642698][  T954]  ? __sys_sendmsg+0x290/0x290
[   50.647620][  T954]  ? __kasan_check_write+0x14/0x20
[   50.652727][  T954]  ? proc_fail_nth_write+0x180/0x200
[   50.658026][  T954]  ? vfs_write+0xa51/0xd00
[   50.662444][  T954]  ? __fdget+0x19c/0x220
[   50.666679][  T954]  __x64_sys_sendmsg+0x20d/0x2e0
[   50.671605][  T954]  ? __cfi___x64_sys_sendmsg+0x10/0x10
[   50.677056][  T954]  ? fpregs_assert_state_consistent+0xb1/0xe0
[   50.683236][  T954]  x64_sys_call+0x171/0x9a0
[   50.687726][  T954]  do_syscall_64+0x4c/0xa0
[   50.692142][  T954]  ? clear_bhb_loop+0x30/0x80
[   50.696816][  T954]  ? clear_bhb_loop+0x30/0x80
[   50.701502][  T954]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   50.707395][  T954] RIP: 0033:0x7f7d61f9fb19
[   50.711801][  T954] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   50.731422][  T954] RSP: 002b:00007f7d62e88028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   50.739829][  T954] RAX: ffffffffffffffda RBX: 00007f7d62225fa0 RCX: 00007f7d61f9fb19
[   50.747787][  T954] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000007
[   50.755748][  T954] RBP: 00007f7d62e88090 R08: 0000000000000000 R09: 0000000000000000
[   50.763709][  T954] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   50.771672][  T954] R13: 00007f7d62226038 R14: 00007f7d62225fa0 R15: 00007ffc8f8adb38
[   50.779648][  T954]  </TASK>
[   50.877862][  T969] xt_CONNSECMARK: invalid mode: 0
[   50.920469][  T972] netlink: 104 bytes leftover after parsing attributes in process `syz.7.201'.
[   50.929555][  T972] netlink: 16 bytes leftover after parsing attributes in process `syz.7.201'.
[   50.938486][  T972] netlink: 16 bytes leftover after parsing attributes in process `syz.7.201'.
[   50.972607][   T28] audit: type=1400 audit(1793731789.960:410): avc:  denied  { create } for  pid=975 comm="syz.7.202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1
[   50.994184][  T976] syz.7.202 uses obsolete (PF_INET,SOCK_PACKET)
[   51.019046][  T957] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[   51.024090][  T963] loop3: detected capacity change from 0 to 40427
[   51.039048][  T963] F2FS-fs (loop3): Small segment_count (9 < 1 * 24)
[   51.048573][  T963] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[   51.063435][  T963] F2FS-fs (loop3): Found nat_bits in checkpoint
[   51.092629][  T956] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters
[   51.124857][  T956] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 690 with error 28
[   51.137369][   T28] audit: type=1400 audit(1793731790.110:411): avc:  denied  { bind } for  pid=988 comm="syz.6.205" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   51.149865][  T963] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[   51.159195][  T991] netlink: 124 bytes leftover after parsing attributes in process `syz.6.206'.
[   51.164514][  T963] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[   51.195783][  T956] EXT4-fs (loop5): This should not happen!! Data will be lost
[   51.195783][  T956] 
[   51.206753][  T287] syz-executor: attempt to access beyond end of device
[   51.206753][  T287] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[   51.206877][  T956] EXT4-fs (loop5): Total free blocks count 0
[   51.227031][  T956] EXT4-fs (loop5): Free/Dirty block details
[   51.235822][  T956] EXT4-fs (loop5): free_blocks=4096
[   51.262495][  T956] EXT4-fs (loop5): dirty_blocks=704
[   51.273143][  T999] capability: warning: `syz.6.210' uses deprecated v2 capabilities in a way that may be insecure
[   51.317629][  T956] EXT4-fs (loop5): Block reservation details
[   51.323241][  T956] EXT4-fs (loop5): i_reserved_data_blocks=44
[   51.340411][  T939] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   51.342857][  T939] hid-generic 0000:0000:0000.0003: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[   51.444023][ T1009] FAULT_INJECTION: forcing a failure.
[   51.444023][ T1009] name failslab, interval 1, probability 0, space 0, times 0
[   51.466929][  T368] EXT4-fs (loop5): unmounting filesystem.
[   51.480932][ T1009] CPU: 1 PID: 1009 Comm: syz.3.212 Not tainted syzkaller #0
[   51.488339][ T1009] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[   51.498494][ T1009] Call Trace:
[   51.501837][ T1009]  <TASK>
[   51.504769][ T1009]  __dump_stack+0x21/0x24
[   51.509117][ T1009]  dump_stack_lvl+0x110/0x170
[   51.513811][ T1009]  ? __cfi_dump_stack_lvl+0x8/0x8
[   51.518881][ T1009]  ? _parse_integer_limit+0x18e/0x1d0
[   51.524449][ T1009]  dump_stack+0x15/0x24
[   51.528625][ T1009]  should_fail_ex+0x3bf/0x510
[   51.533321][ T1009]  __should_failslab+0xac/0xf0
[   51.538154][ T1009]  should_failslab+0x9/0x20
[   51.542688][ T1009]  __kmem_cache_alloc_node+0x3d/0x2d0
[   51.548098][ T1009]  ? bpf_prog_test_run_skb+0x230/0x18a0
[   51.553668][ T1009]  ? __cfi_avc_has_perm_noaudit+0x10/0x10
[   51.559406][ T1009]  ? kstrtouint_from_user+0x113/0x170
[   51.564805][ T1009]  ? bpf_prog_test_run_skb+0x230/0x18a0
[   51.570382][ T1009]  __kmalloc+0xa4/0x1e0
[   51.574651][ T1009]  bpf_prog_test_run_skb+0x230/0x18a0
[   51.580062][ T1009]  ? __fget_files+0x2d1/0x330
[   51.584756][ T1009]  ? __kasan_check_write+0x14/0x20
[   51.590037][ T1009]  ? __cfi_bpf_prog_test_run_skb+0x10/0x10
[   51.595917][ T1009]  bpf_prog_test_run+0x3b4/0x5c0
[   51.600883][ T1009]  ? bpf_prog_query+0x270/0x270
[   51.605781][ T1009]  ? selinux_bpf+0xce/0xf0
[   51.610224][ T1009]  ? security_bpf+0x93/0xb0
[   51.614757][ T1009]  __sys_bpf+0x5ee/0x850
[   51.619085][ T1009]  ? bpf_link_show_fdinfo+0x330/0x330
[   51.624488][ T1009]  ? __cfi_ksys_write+0x10/0x10
[   51.629349][ T1009]  ? debug_smp_processor_id+0x17/0x20
[   51.634739][ T1009]  __x64_sys_bpf+0x7c/0x90
[   51.639263][ T1009]  x64_sys_call+0x488/0x9a0
[   51.643776][ T1009]  do_syscall_64+0x4c/0xa0
[   51.648192][ T1009]  ? clear_bhb_loop+0x30/0x80
[   51.652874][ T1009]  ? clear_bhb_loop+0x30/0x80
[   51.657539][ T1009]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   51.663508][ T1009] RIP: 0033:0x7fb562b9fb19
[   51.667919][ T1009] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   51.687531][ T1009] RSP: 002b:00007fb563a1a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[   51.695946][ T1009] RAX: ffffffffffffffda RBX: 00007fb562e25fa0 RCX: 00007fb562b9fb19
[   51.704092][ T1009] RDX: 0000000000000050 RSI: 0000200000001180 RDI: 000000000000000a
[   51.712055][ T1009] RBP: 00007fb563a1a090 R08: 0000000000000000 R09: 0000000000000000
[   51.720274][ T1009] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   51.728234][ T1009] R13: 00007fb562e26038 R14: 00007fb562e25fa0 R15: 00007ffc4f243aa8
[   51.736288][ T1009]  </TASK>
[   51.778456][ T1016] FAULT_INJECTION: forcing a failure.
[   51.778456][ T1016] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   51.830940][ T1016] CPU: 1 PID: 1016 Comm: syz.2.215 Not tainted syzkaller #0
[   51.838379][ T1016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[   51.848447][ T1016] Call Trace:
[   51.851733][ T1016]  <TASK>
[   51.854670][ T1016]  __dump_stack+0x21/0x24
[   51.859031][ T1016]  dump_stack_lvl+0x110/0x170
[   51.863809][ T1016]  ? __cfi_dump_stack_lvl+0x8/0x8
[   51.868861][ T1016]  dump_stack+0x15/0x24
[   51.873123][ T1016]  should_fail_ex+0x3bf/0x510
[   51.877833][ T1016]  should_fail+0xb/0x10
[   51.882102][ T1016]  should_fail_usercopy+0x1a/0x20
[   51.887230][ T1016]  _copy_from_user+0x1e/0xc0
[   51.891845][ T1016]  ___sys_sendmsg+0x1c3/0x360
[   51.896543][ T1016]  ? __sys_sendmsg+0x290/0x290
[   51.901328][ T1016]  ? kstrtouint+0x74/0xe0
[   51.905696][ T1016]  ? __fdget+0x19c/0x220
[   51.909985][ T1016]  __sys_sendmmsg+0x2cc/0x4e0
[   51.914686][ T1016]  ? __cfi___sys_sendmmsg+0x10/0x10
[   51.919997][ T1016]  ? __cfi_ksys_write+0x10/0x10
[   51.924873][ T1016]  __x64_sys_sendmmsg+0xa0/0xb0
[   51.929420][ T1017] loop3: detected capacity change from 0 to 40427
[   51.929863][ T1016]  x64_sys_call+0x3f5/0x9a0
[   51.937319][ T1017] F2FS-fs (loop3): Insane cp_payload (553648128 >= 504)
[   51.940938][ T1016]  do_syscall_64+0x4c/0xa0
[   51.940969][ T1016]  ? clear_bhb_loop+0x30/0x80
[   51.940987][ T1016]  ? clear_bhb_loop+0x30/0x80
[   51.948099][ T1017] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[   51.952322][ T1016]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   51.952349][ T1016] RIP: 0033:0x7fb1dfd9fb19
[   51.957604][ T1017] F2FS-fs (loop3): invalid crc value
[   51.961666][ T1016] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   51.961682][ T1016] RSP: 002b:00007fb1e0bde028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[   51.961706][ T1016] RAX: ffffffffffffffda RBX: 00007fb1e0025fa0 RCX: 00007fb1dfd9fb19
[   51.969975][ T1017] F2FS-fs (loop3): Ignore s_resuid=0, s_resgid=65535 w/o reserve_root and reserve_node
[   51.975763][ T1016] RDX: 0000000000000001 RSI: 0000200000000100 RDI: 0000000000000003
[   51.975775][ T1016] RBP: 00007fb1e0bde090 R08: 0000000000000000 R09: 0000000000000000
[   51.975785][ T1016] R10: 0000000004014080 R11: 0000000000000246 R12: 0000000000000001
[   51.975796][ T1016] R13: 00007fb1e0026038 R14: 00007fb1e0025fa0 R15: 00007ffe10251f48
[   52.010859][ T1017] F2FS-fs (loop3): Found nat_bits in checkpoint
[   52.013644][ T1016]  </TASK>
[   53.024127][ T1035] netlink: 'syz.2.221': attribute type 4 has an invalid length.
[   53.037758][ T1017] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[   53.048827][ T1035] netlink: 'syz.2.221': attribute type 4 has an invalid length.
[   53.050214][ T1017] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[   53.083994][  T334] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[   53.092160][  T334] hid-generic 0000:0000:0000.0004: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[   53.094651][ T1047] syz.3.216: attempt to access beyond end of device
[   53.094651][ T1047] loop3: rw=0, sector=45064, nr_sectors = 8 limit=40427
[   53.125758][ T1050] netlink: 20 bytes leftover after parsing attributes in process `syz.2.225'.
[   53.146129][ T1052] xt_CONNSECMARK: invalid mode: 0
[   53.293088][ T1057] FAULT_INJECTION: forcing a failure.
[   53.293088][ T1057] name failslab, interval 1, probability 0, space 0, times 0
[   53.306119][ T1057] CPU: 1 PID: 1057 Comm: syz.6.229 Not tainted syzkaller #0
[   53.313429][ T1057] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[   53.323496][ T1057] Call Trace:
[   53.326796][ T1057]  <TASK>
[   53.329736][ T1057]  __dump_stack+0x21/0x24
[   53.334092][ T1057]  dump_stack_lvl+0x110/0x170
[   53.338966][ T1057]  ? __cfi_dump_stack_lvl+0x8/0x8
[   53.344015][ T1057]  dump_stack+0x15/0x24
[   53.348192][ T1057]  should_fail_ex+0x3bf/0x510
[   53.352901][ T1057]  __should_failslab+0xac/0xf0
[   53.357698][ T1057]  should_failslab+0x9/0x20
[   53.362309][ T1057]  __kmem_cache_alloc_node+0x3d/0x2d0
[   53.367698][ T1057]  ? kvmalloc_node+0x28a/0x460
[   53.372619][ T1057]  ? kvmalloc_node+0x28a/0x460
[   53.377405][ T1057]  __kmalloc_node+0xa2/0x1e0
[   53.382030][ T1057]  kvmalloc_node+0x28a/0x460
[   53.386636][ T1057]  ? __cfi_kvmalloc_node+0x10/0x10
[   53.391767][ T1057]  ? _raw_spin_unlock_irqrestore+0x5a/0x80
[   53.397599][ T1057]  __kvm_mmu_topup_memory_cache+0x30b/0x490
[   53.403863][ T1057]  ? __cfi_mutex_unlock+0x10/0x10
[   53.408902][ T1057]  kvm_mmu_topup_memory_cache+0x20/0x30
[   53.414469][ T1057]  kvm_mmu_load+0x99/0x2570
[   53.419079][ T1057]  ? kvm_hv_setup_tsc_page+0x5f2/0xa80
[   53.424547][ T1057]  ? queue_delayed_work_on+0x10d/0x160
[   53.430023][ T1057]  ? kvm_apic_has_interrupt+0x776/0x780
[   53.435580][ T1057]  vcpu_enter_guest+0x4d3b/0x7050
[   53.440624][ T1057]  ? memset+0x35/0x40
[   53.444632][ T1057]  ? __cfi_avc_has_perm+0x10/0x10
[   53.449678][ T1057]  ? pvclock_gtod_update_fn+0x270/0x270
[   53.455251][ T1057]  ? is_bpf_text_address+0x177/0x190
[   53.460556][ T1057]  ? kernel_text_address+0xa0/0xd0
[   53.465773][ T1057]  ? __kernel_text_address+0xd/0x30
[   53.471086][ T1057]  ? unwind_get_return_address+0x4d/0x90
[   53.476735][ T1057]  ? __cfi_stack_trace_consume_entry+0x10/0x10
[   53.482902][ T1057]  ? arch_stack_walk+0xfc/0x150
[   53.487776][ T1057]  ? stack_trace_save+0xa6/0xf0
[   53.492665][ T1057]  ? vmx_vcpu_pi_load+0x14c/0x840
[   53.497709][ T1057]  ? __cfi_vmx_vcpu_pi_load+0x10/0x10
[   53.503108][ T1057]  ? _parse_integer_limit+0x18e/0x1d0
[   53.508549][ T1057]  ? __asan_set_shadow_00+0xe/0x10
[   53.513698][ T1057]  ? do_vfs_ioctl+0x1b68/0x1cd0
[   53.518575][ T1057]  ? vmx_vcpu_load_vmcs+0x479/0x730
[   53.523794][ T1057]  ? __this_cpu_preempt_check+0x13/0x20
[   53.529365][ T1057]  ? xfd_validate_state+0x70/0x150
[   53.534506][ T1057]  ? fpu_swap_kvm_fpstate+0x81/0x5d0
[   53.539822][ T1057]  ? __local_bh_enable_ip+0x58/0x80
[   53.545045][ T1057]  kvm_arch_vcpu_ioctl_run+0xe6d/0x1f60
[   53.550710][ T1057]  kvm_vcpu_ioctl+0x8ed/0xc00
[   53.555510][ T1057]  ? __cfi_kvm_vcpu_ioctl+0x10/0x10
[   53.560808][ T1057]  ? selinux_file_ioctl+0x3ad/0x4c0
[   53.566127][ T1057]  ? __cfi_selinux_file_ioctl+0x10/0x10
[   53.571700][ T1057]  ? mutex_unlock+0x8f/0x230
[   53.576311][ T1057]  ? __cfi_mutex_unlock+0x10/0x10
[   53.581396][ T1057]  ? __fget_files+0x2d1/0x330
[   53.586120][ T1057]  ? security_file_ioctl+0x95/0xc0
[   53.591248][ T1057]  ? __cfi_kvm_vcpu_ioctl+0x10/0x10
[   53.596477][ T1057]  __se_sys_ioctl+0x12f/0x1b0
[   53.601172][ T1057]  __x64_sys_ioctl+0x7b/0x90
[   53.605786][ T1057]  x64_sys_call+0x58b/0x9a0
[   53.610307][ T1057]  do_syscall_64+0x4c/0xa0
[   53.614744][ T1057]  ? clear_bhb_loop+0x30/0x80
[   53.619444][ T1057]  ? clear_bhb_loop+0x30/0x80
[   53.624150][ T1057]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   53.630158][ T1057] RIP: 0033:0x7f75b2b9fb19
[   53.634581][ T1057] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   53.654300][ T1057] RSP: 002b:00007f75b3a3d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   53.663002][ T1057] RAX: ffffffffffffffda RBX: 00007f75b2e25fa0 RCX: 00007f75b2b9fb19
[   53.670996][ T1057] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 000000000000000a
[   53.679107][ T1057] RBP: 00007f75b3a3d090 R08: 0000000000000000 R09: 0000000000000000
[   53.687095][ T1057] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   53.695094][ T1057] R13: 00007f75b2e26038 R14: 00007f75b2e25fa0 R15: 00007ffe7bc65588
[   53.703083][ T1057]  </TASK>
[   54.052023][ T1080] loop5: detected capacity change from 0 to 512
[   54.064056][   T28] kauditd_printk_skb: 129 callbacks suppressed
[   54.064115][   T28] audit: type=1400 audit(1793731793.020:541): avc:  denied  { create } for  pid=1075 comm="syz.5.235" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[   54.115262][ T1080] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[   54.145653][ T1080] EXT4-fs warning (device loop5): ext4_xattr_inode_get:506: inode #11: comm syz.5.235: EA inode hash validation failed
[   54.158426][ T1080] EXT4-fs (loop5): 1 orphan inode deleted
[   54.164277][ T1080] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[   54.173854][   T28] audit: type=1400 audit(1793731793.030:542): avc:  denied  { setopt } for  pid=1075 comm="syz.5.235" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[   54.333881][ T1091] loop7: detected capacity change from 0 to 2048
[   54.340614][ T1091] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22
[   54.349113][   T28] audit: type=1400 audit(1793731793.310:543): avc:  denied  { ioctl } for  pid=1088 comm="syz.7.238" path="socket:[21747]" dev="sockfs" ino=21747 ioctlcmd=0x586a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   54.497232][   T39] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[   54.514320][   T39] hid-generic 0000:0000:0000.0005: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[   54.686723][  T368] EXT4-fs (loop5): unmounting filesystem.
[   54.914572][ T1109] loop7: detected capacity change from 0 to 512
[   54.946099][ T1109] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[   54.965804][ T1109] EXT4-fs (loop7): 1 truncate cleaned up
[   54.980626][ T1109] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[   55.043596][   T28] audit: type=1400 audit(1793731794.030:544): avc:  denied  { bind } for  pid=1117 comm="syz.3.248" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   55.064898][ T1116] size and base must be multiples of 4 kiB
[   55.071014][ T1116] CPU: 1 PID: 1116 Comm: syz.6.247 Not tainted syzkaller #0
[   55.078498][ T1116] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[   55.088578][ T1116] Call Trace:
[   55.091880][ T1116]  <TASK>
[   55.094831][ T1116]  __dump_stack+0x21/0x24
[   55.099186][ T1116]  dump_stack_lvl+0x110/0x170
[   55.103883][ T1116]  ? __cfi_dump_stack_lvl+0x8/0x8
[   55.108929][ T1116]  ? has_cap_mac_admin+0x370/0x370
[   55.114246][ T1116]  dump_stack+0x15/0x24
[   55.118428][ T1116]  mtrr_add+0x8d/0xa0
[   55.122428][ T1116]  mtrr_ioctl+0x90c/0xfb0
[   55.126789][ T1116]  ? __cfi_mtrr_ioctl+0x10/0x10
[   55.131931][ T1116]  ? selinux_file_ioctl+0x3ad/0x4c0
[   55.137168][ T1116]  ? __fget_files+0x2d1/0x330
[   55.141925][ T1116]  ? __cfi_mtrr_ioctl+0x10/0x10
[   55.146797][ T1116]  proc_reg_unlocked_ioctl+0x1e6/0x2d0
[   55.152281][ T1116]  ? __cfi_proc_reg_unlocked_ioctl+0x10/0x10
[   55.158290][ T1116]  __se_sys_ioctl+0x12f/0x1b0
[   55.162011][ T1050] loop2: detected capacity change from 0 to 262144
[   55.163002][ T1116]  __x64_sys_ioctl+0x7b/0x90
[   55.163026][ T1116]  x64_sys_call+0x58b/0x9a0
[   55.178620][ T1116]  do_syscall_64+0x4c/0xa0
[   55.183074][ T1116]  ? clear_bhb_loop+0x30/0x80
[   55.187783][ T1116]  ? clear_bhb_loop+0x30/0x80
[   55.192499][ T1116]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   55.198414][ T1116] RIP: 0033:0x7f75b2b9fb19
[   55.202846][ T1116] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   55.222555][ T1116] RSP: 002b:00007f75b3a3d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   55.231003][ T1116] RAX: ffffffffffffffda RBX: 00007f75b2e25fa0 RCX: 00007f75b2b9fb19
[   55.238992][ T1116] RDX: 0000200000000140 RSI: 00000000400c4d01 RDI: 0000000000000003
[   55.247203][ T1116] RBP: 00007f75b2c37b70 R08: 0000000000000000 R09: 0000000000000000
[   55.254101][  T886] EXT4-fs error (device loop7): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /15/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[   55.255359][ T1116] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   55.255376][ T1116] R13: 00007f75b2e26038 R14: 00007f75b2e25fa0 R15: 00007ffe7bc65588
[   55.287104][   T28] audit: type=1400 audit(1793731794.270:545): avc:  denied  { rmdir } for  pid=886 comm="syz-executor" name="lost+found" dev="loop7" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   55.292640][ T1116]  </TASK>
[   55.315205][  T886] EXT4-fs error (device loop7): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0
[   55.347392][  T886] EXT4-fs error (device loop7): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /15/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[   55.373150][  T886] EXT4-fs error (device loop7): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0
[   55.385262][ T1050] F2FS-fs (loop2): Found nat_bits in checkpoint
[   55.402695][  T886] EXT4-fs error (device loop7): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /15/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[   55.432999][ T1126] FAULT_INJECTION: forcing a failure.
[   55.432999][ T1126] name failslab, interval 1, probability 0, space 0, times 0
[   55.435131][ T1050] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[   55.462935][ T1050] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=1050 comm=syz.2.225
[   55.481916][ T1126] CPU: 1 PID: 1126 Comm: syz.6.250 Not tainted syzkaller #0
[   55.485644][  T886] EXT4-fs error (device loop7): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0
[   55.489246][ T1126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[   55.489258][ T1126] Call Trace:
[   55.489264][ T1126]  <TASK>
[   55.489270][ T1126]  __dump_stack+0x21/0x24
[   55.509551][  T886] EXT4-fs error (device loop7): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /15/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[   55.518912][ T1126]  dump_stack_lvl+0x110/0x170
[   55.518936][ T1126]  ? __cfi_dump_stack_lvl+0x8/0x8
[   55.518949][ T1126]  ? stack_trace_save+0xa6/0xf0
[   55.518968][ T1126]  ? __stack_depot_save+0x36/0x490
[   55.518987][ T1126]  dump_stack+0x15/0x24
[   55.518999][ T1126]  should_fail_ex+0x3bf/0x510
[   55.519016][ T1126]  __should_failslab+0xac/0xf0
[   55.519034][ T1126]  should_failslab+0x9/0x20
[   55.519051][ T1126]  __kmem_cache_alloc_node+0x3d/0x2d0
[   55.519070][ T1126]  ? bpf_prog_test_run_flow_dissector+0x269/0x640
[   55.519089][ T1126]  ? bpf_prog_test_run_flow_dissector+0x269/0x640
[   55.519108][ T1126]  __kmalloc+0xa4/0x1e0
[   55.519122][ T1126]  bpf_prog_test_run_flow_dissector+0x269/0x640
[   55.523708][  T886] EXT4-fs error (device loop7): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0
[   55.525327][ T1126]  ? __cfi_bpf_prog_test_run_flow_dissector+0x10/0x10
[   55.529938][  T886] EXT4-fs error (device loop7): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /15/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[   55.551279][ T1126]  ? __kasan_check_write+0x14/0x20
[   55.551307][ T1126]  ? __cfi_bpf_prog_test_run_flow_dissector+0x10/0x10
[   55.551326][ T1126]  bpf_prog_test_run+0x3b4/0x5c0
[   55.551343][ T1126]  ? bpf_prog_query+0x270/0x270
[   55.551357][ T1126]  ? selinux_bpf+0xce/0xf0
[   55.551375][ T1126]  ? security_bpf+0x93/0xb0
[   55.551395][ T1126]  __sys_bpf+0x5ee/0x850
[   55.558080][  T886] EXT4-fs error (device loop7): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0
[   55.561157][ T1126]  ? bpf_link_show_fdinfo+0x330/0x330
[   55.561183][ T1126]  ? __cfi_ksys_write+0x10/0x10
[   55.561200][ T1126]  ? debug_smp_processor_id+0x17/0x20
[   55.561222][ T1126]  __x64_sys_bpf+0x7c/0x90
[   55.561237][ T1126]  x64_sys_call+0x488/0x9a0
[   55.561255][ T1126]  do_syscall_64+0x4c/0xa0
[   55.561268][ T1126]  ? clear_bhb_loop+0x30/0x80
[   55.561287][ T1126]  ? clear_bhb_loop+0x30/0x80
[   55.561304][ T1126]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   55.561323][ T1126] RIP: 0033:0x7f75b2b9fb19
[   55.561337][ T1126] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   55.561351][ T1126] RSP: 002b:00007f75b3a3d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[   55.561368][ T1126] RAX: ffffffffffffffda RBX: 00007f75b2e25fa0 RCX: 00007f75b2b9fb19
[   55.561381][ T1126] RDX: 0000000000000050 RSI: 0000200000000bc0 RDI: 000000000000000a
[   55.561392][ T1126] RBP: 00007f75b3a3d090 R08: 0000000000000000 R09: 0000000000000000
[   55.561402][ T1126] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   55.561413][ T1126] R13: 00007f75b2e26038 R14: 00007f75b2e25fa0 R15: 00007ffe7bc65588
[   55.561429][ T1126]  </TASK>
[   55.624308][   T39] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[   55.692048][   T28] audit: type=1400 audit(1793731794.670:546): avc:  denied  { setattr } for  pid=1133 comm="syz.3.254" name="fuse" dev="devtmpfs" ino=93 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1
[   55.791230][   T39] hid-generic 0000:0000:0000.0006: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[   55.927249][ T1119] EXT4-fs (loop7): unmounting filesystem.
[   55.929463][ T1141] fido_id[1141]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[   56.028851][   T28] audit: type=1400 audit(1793731795.010:547): avc:  denied  { append } for  pid=1145 comm="syz.6.260" name="snapshot" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[   56.139871][ T1151] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.147124][ T1151] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.154429][  T395] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[   56.164232][ T1151] device bridge_slave_0 entered promiscuous mode
[   56.172431][   T39] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[   56.183088][ T1151] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.190297][ T1151] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.235892][ T1157] FAULT_INJECTION: forcing a failure.
[   56.235892][ T1157] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   56.249001][ T1157] CPU: 1 PID: 1157 Comm: syz.2.261 Not tainted syzkaller #0
[   56.257182][ T1157] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[   56.267871][ T1157] Call Trace:
[   56.272929][ T1157]  <TASK>
[   56.275953][ T1157]  __dump_stack+0x21/0x24
[   56.280324][ T1157]  dump_stack_lvl+0x110/0x170
[   56.285079][ T1157]  ? __cfi_dump_stack_lvl+0x8/0x8
[   56.290128][ T1157]  dump_stack+0x15/0x24
[   56.294303][ T1157]  should_fail_ex+0x3bf/0x510
[   56.298977][ T1157]  should_fail+0xb/0x10
[   56.303136][ T1157]  should_fail_usercopy+0x1a/0x20
[   56.308173][ T1157]  _copy_from_iter+0x18a/0xfe0
[   56.312949][ T1157]  ? raw_irqentry_exit_cond_resched+0x29/0x30
[   56.319005][ T1157]  ? irqentry_exit+0x37/0x40
[   56.323593][ T1157]  ? sysvec_reschedule_ipi+0x78/0x80
[   56.328908][ T1157]  ? __cfi__copy_from_iter+0x10/0x10
[   56.334198][ T1157]  ? __check_object_size+0x45a/0x600
[   56.339504][ T1157]  kernfs_fop_write_iter+0x198/0x470
[   56.344781][ T1157]  vfs_write+0x5ef/0xd00
[   56.349012][ T1157]  ? __cfi_vfs_write+0x10/0x10
[   56.353764][ T1157]  ? mutex_lock+0x9d/0x1b0
[   56.358175][ T1157]  ? __cfi_mutex_lock+0x10/0x10
[   56.363022][ T1157]  ? __fdget_pos+0x2cd/0x380
[   56.367599][ T1157]  ? ksys_write+0x70/0x260
[   56.372017][ T1157]  ksys_write+0x14a/0x260
[   56.376429][ T1157]  ? __cfi_ksys_write+0x10/0x10
[   56.381275][ T1157]  ? fpregs_restore_userregs+0x128/0x260
[   56.386895][ T1157]  __x64_sys_write+0x7b/0x90
[   56.391470][ T1157]  x64_sys_call+0x27b/0x9a0
[   56.395962][ T1157]  do_syscall_64+0x4c/0xa0
[   56.400376][ T1157]  ? clear_bhb_loop+0x30/0x80
[   56.405069][ T1157]  ? clear_bhb_loop+0x30/0x80
[   56.409751][ T1157]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   56.415783][ T1157] RIP: 0033:0x7fb1dfd9fb19
[   56.420230][ T1157] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   56.439847][ T1157] RSP: 002b:00007fb1e0b9c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[   56.448267][ T1157] RAX: ffffffffffffffda RBX: 00007fb1e0026180 RCX: 00007fb1dfd9fb19
[   56.456235][ T1157] RDX: 0000000000000007 RSI: 0000200000000340 RDI: 0000000000000006
[   56.464435][ T1157] RBP: 00007fb1e0b9c090 R08: 0000000000000000 R09: 0000000000000000
[   56.472411][ T1157] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   56.480379][ T1157] R13: 00007fb1e0026218 R14: 00007fb1e0026180 R15: 00007ffe10251f48
[   56.488378][ T1157]  </TASK>
[   56.522236][ T1151] device bridge_slave_1 entered promiscuous mode
[   56.603287][   T39] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   56.613614][  T395] usb 4-1: too many endpoints for config 1 interface 0 altsetting 13: 33, using maximum allowed: 30
[   56.624542][   T39] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[   56.638687][  T395] usb 4-1: config 1 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 33
[   56.653556][  T395] usb 4-1: config 1 interface 0 has no altsetting 0
[   56.661690][   T39] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   56.670892][   T39] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   56.679286][   T39] usb 6-1: Product: syz
[   56.683581][   T39] usb 6-1: Manufacturer: syz
[   56.688317][  T395] usb 4-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.40
[   56.697778][   T39] usb 6-1: SerialNumber: syz
[   56.698043][  T391] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   56.702503][  T395] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   56.702527][  T395] usb 4-1: Product: syz
[   56.702539][  T395] usb 4-1: Manufacturer: syz
[   56.702552][  T395] usb 4-1: SerialNumber: syz
[   56.731911][  T391] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   56.733906][   T39] cdc_ncm 6-1:1.0: skipping garbage
[   56.741974][  T391] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   56.745457][   T39] usb 6-1: selecting invalid altsetting 1
[   56.752758][  T391] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   56.766138][  T391] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   56.774589][  T391] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.782116][  T391] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.789759][  T391] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   56.798286][  T391] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   56.806744][  T391] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.813834][  T391] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.824721][  T391] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   56.832567][  T391] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   56.848023][  T391] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   56.861848][ T1151] device veth0_vlan entered promiscuous mode
[   56.868380][  T391] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   56.876677][  T391] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   56.884896][  T391] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   56.903102][  T391] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   56.914367][ T1151] device veth1_macvtap entered promiscuous mode
[   56.924549][  T391] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   56.949452][  T391] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   57.463634][   T39] cdc_ncm 6-1:1.0: failed GET_NTB_PARAMETERS
[   57.478209][    T8] device bridge_slave_1 left promiscuous mode
[   57.484499][   T39] cdc_ncm 6-1:1.0: bind() failure
[   57.484533][    T8] bridge0: port 2(bridge_slave_1) entered disabled state
[   57.498791][   T39] usb 6-1: USB disconnect, device number 4
[   57.499878][    T8] device bridge_slave_0 left promiscuous mode
[   57.511141][    T8] bridge0: port 1(bridge_slave_0) entered disabled state
[   57.519324][    T8] device veth1_macvtap left promiscuous mode
[   57.525575][    T8] device veth0_vlan left promiscuous mode
[   57.607154][ T1136] device vlan2 entered promiscuous mode
[   57.612844][ T1136] device syz_tun entered promiscuous mode
[   57.795403][ T1174] loop2: detected capacity change from 0 to 256
[   57.804895][ T1175] netlink: 32 bytes leftover after parsing attributes in process `syz.2.265'.
[   57.853336][ T1177] FAULT_INJECTION: forcing a failure.
[   57.853336][ T1177] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   57.866625][ T1177] CPU: 0 PID: 1177 Comm: syz.6.266 Not tainted syzkaller #0
[   57.873934][ T1177] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[   57.884024][ T1177] Call Trace:
[   57.887301][ T1177]  <TASK>
[   57.890229][ T1177]  __dump_stack+0x21/0x24
[   57.894573][ T1177]  dump_stack_lvl+0x110/0x170
[   57.899281][ T1177]  ? __cfi_dump_stack_lvl+0x8/0x8
[   57.904404][ T1177]  ? _parse_integer+0x2a/0x40
[   57.909096][ T1177]  dump_stack+0x15/0x24
[   57.913273][ T1177]  should_fail_ex+0x3bf/0x510
[   57.917971][ T1177]  should_fail+0xb/0x10
[   57.922247][ T1177]  should_fail_usercopy+0x1a/0x20
[   57.927285][ T1177]  _copy_from_user+0x1e/0xc0
[   57.931984][ T1177]  ___sys_sendmsg+0x1c3/0x360
[   57.936689][ T1177]  ? __sys_sendmsg+0x290/0x290
[   57.941515][ T1177]  ? __kasan_check_write+0x14/0x20
[   57.946888][ T1177]  ? proc_fail_nth_write+0x180/0x200
[   57.952187][ T1177]  ? vfs_write+0xa51/0xd00
[   57.956955][ T1177]  ? __fdget+0x19c/0x220
[   57.961693][ T1177]  __x64_sys_sendmsg+0x20d/0x2e0
[   57.966700][ T1177]  ? __cfi___x64_sys_sendmsg+0x10/0x10
[   57.972161][ T1177]  ? fpregs_assert_state_consistent+0xb1/0xe0
[   57.978667][ T1177]  x64_sys_call+0x171/0x9a0
[   57.983190][ T1177]  do_syscall_64+0x4c/0xa0
[   57.987597][ T1177]  ? clear_bhb_loop+0x30/0x80
[   57.992263][ T1177]  ? clear_bhb_loop+0x30/0x80
[   57.997022][ T1177]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   58.002935][ T1177] RIP: 0033:0x7f75b2b9fb19
[   58.007340][ T1177] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   58.027042][ T1177] RSP: 002b:00007f75b3a3d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   58.035488][ T1177] RAX: ffffffffffffffda RBX: 00007f75b2e25fa0 RCX: 00007f75b2b9fb19
[   58.043460][ T1177] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 0000000000000003
[   58.051421][ T1177] RBP: 00007f75b3a3d090 R08: 0000000000000000 R09: 0000000000000000
[   58.059378][ T1177] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   58.067341][ T1177] R13: 00007f75b2e26038 R14: 00007f75b2e25fa0 R15: 00007ffe7bc65588
[   58.075678][ T1177]  </TASK>
[   58.085488][ T1174] netlink: 32 bytes leftover after parsing attributes in process `syz.2.265'.
[   58.153239][   T19] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[   58.190392][   T19] hid-generic 0000:0000:0000.0007: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[   58.194259][ T1178] loop2: detected capacity change from 0 to 40427
[   58.293752][  T395] usbhid 4-1:1.0: can't add hid device: -71
[   58.299834][  T395] usbhid: probe of 4-1:1.0 failed with error -71
[   58.314163][   T28] audit: type=1400 audit(1793731797.300:548): avc:  denied  { watch watch_reads } for  pid=1193 comm="syz.3.274" path="/57/file1" dev="tmpfs" ino=315 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[   58.353281][ T1190] bridge0: port 3(vlan2) entered blocking state
[   58.360847][  T395] usb 4-1: USB disconnect, device number 6
[   58.380324][ T1190] bridge0: port 3(vlan2) entered disabled state
[   58.443122][   T28] audit: type=1400 audit(1793731797.430:549): avc:  denied  { mount } for  pid=1191 comm="syz.5.272" name="/" dev="configfs" ino=14458 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1
[   58.490453][ T1207] loop2: detected capacity change from 0 to 256
[   58.523568][ T1200] bridge0: port 1(bridge_slave_0) entered blocking state
[   58.530742][ T1200] bridge0: port 1(bridge_slave_0) entered disabled state
[   58.539187][ T1200] device bridge_slave_0 entered promiscuous mode
[   58.546485][ T1200] bridge0: port 2(bridge_slave_1) entered blocking state
[   58.553780][ T1200] bridge0: port 2(bridge_slave_1) entered disabled state
[   58.561530][ T1200] device bridge_slave_1 entered promiscuous mode
[   58.682599][ T1216] FAULT_INJECTION: forcing a failure.
[   58.682599][ T1216] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   58.695764][ T1216] CPU: 1 PID: 1216 Comm: syz.6.275 Not tainted syzkaller #0
[   58.703064][ T1216] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[   58.713130][ T1216] Call Trace:
[   58.716523][ T1216]  <TASK>
[   58.719464][ T1216]  __dump_stack+0x21/0x24
[   58.723816][ T1216]  dump_stack_lvl+0x110/0x170
[   58.728506][ T1216]  ? __cfi_dump_stack_lvl+0x8/0x8
[   58.733541][ T1216]  dump_stack+0x15/0x24
[   58.737728][ T1216]  should_fail_ex+0x3bf/0x510
[   58.742520][ T1216]  should_fail+0xb/0x10
[   58.746700][ T1216]  should_fail_usercopy+0x1a/0x20
[   58.751735][ T1216]  strncpy_from_user+0x24/0x2c0
[   58.756707][ T1216]  ? kmem_cache_alloc+0x166/0x320
[   58.761755][ T1216]  ? getname_flags+0xba/0x510
[   58.766485][ T1216]  getname_flags+0xf5/0x510
[   58.770997][ T1216]  user_path_at_empty+0x2f/0x1c0
[   58.775965][ T1216]  __se_sys_open_tree+0x229/0x810
[   58.781014][ T1216]  ? __x64_sys_open_tree+0x90/0x90
[   58.786140][ T1216]  ? debug_smp_processor_id+0x17/0x20
[   58.791523][ T1216]  __x64_sys_open_tree+0x7b/0x90
[   58.796486][ T1216]  x64_sys_call+0x5ae/0x9a0
[   58.801010][ T1216]  do_syscall_64+0x4c/0xa0
[   58.805463][ T1216]  ? clear_bhb_loop+0x30/0x80
[   58.810153][ T1216]  ? clear_bhb_loop+0x30/0x80
[   58.814833][ T1216]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   58.820727][ T1216] RIP: 0033:0x7f75b2b9fb19
[   58.825144][ T1216] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   58.844750][ T1216] RSP: 002b:00007f75b39fb028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ac
[   58.853178][ T1216] RAX: ffffffffffffffda RBX: 00007f75b2e26180 RCX: 00007f75b2b9fb19
[   58.861155][ T1216] RDX: 0000000000001800 RSI: 0000200000001b40 RDI: ffffffffffffff9c
[   58.869565][ T1216] RBP: 00007f75b39fb090 R08: 0000000000000000 R09: 0000000000000000
[   58.877643][ T1216] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   58.885620][ T1216] R13: 00007f75b2e26218 R14: 00007f75b2e26180 R15: 00007ffe7bc65588
[   58.893618][ T1216]  </TASK>
[   58.962389][  T395] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[   59.144602][  T391] device bridge_slave_1 left promiscuous mode
[   59.156468][  T391] bridge0: port 2(bridge_slave_1) entered disabled state
[   59.219894][  T391] device bridge_slave_0 left promiscuous mode
[   59.233709][  T395] usb 4-1: too many endpoints for config 1 interface 0 altsetting 13: 33, using maximum allowed: 30
[   59.282283][  T395] usb 4-1: config 1 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 33
[   59.295985][  T391] bridge0: port 1(bridge_slave_0) entered disabled state
[   59.327546][  T395] usb 4-1: config 1 interface 0 has no altsetting 0
[   59.338996][  T391] device veth1_macvtap left promiscuous mode
[   59.353765][  T391] device veth0_vlan left promiscuous mode
[   59.361246][  T395] usb 4-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.40
[   59.380704][  T395] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   59.392263][  T395] usb 4-1: Product: syz
[   59.396452][  T395] usb 4-1: Manufacturer: syz
[   59.402937][   T28] audit: type=1400 audit(1793731798.390:550): avc:  denied  { read } for  pid=1218 comm="syz.2.277" name="uinput" dev="devtmpfs" ino=262 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[   59.436416][  T395] usb 4-1: SerialNumber: syz
[   59.515895][ T1231] loop2: detected capacity change from 0 to 512
[   59.529711][ T1231] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   59.752397][  T425] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   59.760449][  T425] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   59.770322][ T1231] EXT4-fs (loop2): 1 truncate cleaned up
[   59.776337][ T1231] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[   59.793145][  T425] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   59.802530][  T425] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   59.811067][  T425] bridge0: port 1(bridge_slave_0) entered blocking state
[   59.818231][  T425] bridge0: port 1(bridge_slave_0) entered forwarding state
[   59.826677][  T425] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   59.842520][  T425] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   59.850808][  T425] bridge0: port 2(bridge_slave_1) entered blocking state
[   59.857879][  T425] bridge0: port 2(bridge_slave_1) entered forwarding state
[   59.883211][  T425] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   59.898045][  T425] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   59.916409][  T425] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   59.927422][  T425] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   59.945848][  T425] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   59.957711][  T395] usbhid 4-1:1.0: can't add hid device: -71
[   59.963728][  T425] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   59.964147][  T395] usbhid: probe of 4-1:1.0 failed with error -71
[   59.975440][  T425] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   59.982063][  T395] usb 4-1: USB disconnect, device number 7
[   59.994057][  T425] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   60.004317][  T425] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   60.007045][  T289] EXT4-fs (loop2): unmounting filesystem.
[   60.012701][  T425] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   60.025295][  T425] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   60.033695][ T1200] device veth0_vlan entered promiscuous mode
[   60.040214][   T39] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[   60.050997][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   60.051359][   T39] hid-generic 0000:0000:0000.0008: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[   60.065543][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   60.078604][ T1200] device veth1_macvtap entered promiscuous mode
[   60.090086][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   60.098181][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   60.106557][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   60.127378][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   60.136012][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   60.166911][ T1250] xt_CONNSECMARK: invalid mode: 0
[   60.232369][ T1217] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[   60.603780][ T1217] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   60.613229][   T28] audit: type=1400 audit(1793731799.600:551): avc:  denied  { getopt } for  pid=1259 comm="syz.3.289" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   60.614027][ T1217] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2
[   60.642110][ T1217] usb 7-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00
[   60.651377][ T1217] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   60.661431][ T1217] usb 7-1: Found UVC 1.00 device <unnamed> (046d:0825)
[   60.762291][  T395] usb 6-1: new full-speed USB device number 5 using dummy_hcd
[   60.862433][ T1217] usb 7-1: No streaming interface found for terminal 2.
[   60.942970][  T395] usb 6-1: not running at top speed; connect to a high speed hub
[   60.951490][  T395] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   60.961709][  T395] usb 6-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 1.00
[   60.970814][  T395] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   60.980643][  T395] usb 6-1: Found UVC 1.00 device <unnamed> (0000:0000)
[   60.987584][  T395] usb 6-1: No streaming interface found for terminal 2.
[   61.083351][  T395] usb 7-1: USB disconnect, device number 2
[   61.181761][ T1270] dyndbg: bad flag-op , at start of B_a¯ŠžÓŠ‹‡â’V´ÅÓx¦Oø.G�umNÿ:Dþpê»IÍDÓNÝ?~
[   61.191244][ T1270] dyndbg: flags parse failed
[   61.195902][ T1270] dyndbg: bad flag-op ¨, at start of ¨Z.ªgƵӛBB½Xô6¶`›¸"‡°Õo8÷׊rá|êƒ*8ñG
[   61.204719][ T1270] dyndbg: flags parse failed
[   61.271696][   T24] usb 6-1: USB disconnect, device number 5
[   61.439984][ T1272] netlink: 280 bytes leftover after parsing attributes in process `syz.2.293'.
[   61.519399][ T1274] loop3: detected capacity change from 0 to 512
[   61.679193][ T1274] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[   61.733371][ T1274] ext4 filesystem being mounted at /59/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   62.014887][   T28] audit: type=1400 audit(1793731801.000:552): avc:  denied  { bind } for  pid=1284 comm="syz.8.299" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   62.063421][ T1283] loop5: detected capacity change from 0 to 512
[   62.083573][ T1288] xt_CONNSECMARK: invalid mode: 0
[   62.567885][  T287] EXT4-fs (loop3): unmounting filesystem.
[   62.618185][   T28] audit: type=1326 audit(1793731801.600:553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1308 comm="syz.5.306" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3155d9fb19 code=0x7ffc0000
[   62.643285][   T28] audit: type=1326 audit(1793731801.610:554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1308 comm="syz.5.306" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3155d9fb19 code=0x7ffc0000
[   62.668278][   T28] audit: type=1326 audit(1793731801.620:555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1308 comm="syz.5.306" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=52 compat=0 ip=0x7f3155d9fb19 code=0x7ffc0000
[   62.703281][   T28] audit: type=1326 audit(1793731801.620:556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1308 comm="syz.5.306" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3155d9fb19 code=0x7ffc0000
[   62.729687][ T1310] loop8: detected capacity change from 0 to 2048
[   62.731142][   T28] audit: type=1326 audit(1793731801.620:557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1308 comm="syz.5.306" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3155d9fb19 code=0x7ffc0000
[   62.764453][   T28] audit: type=1326 audit(1793731801.620:558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1308 comm="syz.5.306" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3155d9fb19 code=0x7ffc0000
[   62.790825][   T28] audit: type=1326 audit(1793731801.620:559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1308 comm="syz.5.306" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3155d9fb19 code=0x7ffc0000
[   62.824694][ T1310]  loop8: p1 < > p4
[   62.829806][ T1310] loop8: p4 size 722688 extends beyond EOD, truncated
[   62.989216][ T1316] loop5: detected capacity change from 0 to 40427
[   63.001851][ T1316] F2FS-fs (loop5): Invalid Fs Meta Ino: node(0) meta(2) root(0)
[   63.016040][ T1316] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[   63.026275][ T1316] F2FS-fs (loop5): invalid crc value
[   63.038744][ T1316] F2FS-fs (loop5): Found nat_bits in checkpoint
[   63.117409][ T1336] dyndbg: bad flag-op , at start of B_a¯ŠžÓŠ‹‡â’V´ÅÓx¦Oø.G�umNÿ:Dþpê»IÍDÓNÝ?~
[   63.126914][ T1336] dyndbg: flags parse failed
[   63.131555][ T1336] dyndbg: bad flag-op ¨, at start of ¨Z.ªgƵӛBB½Xô6¶`›¸"‡°Õo8÷׊rá|êƒ*8ñG
[   63.140405][ T1336] dyndbg: flags parse failed
[   63.280807][ T1316] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0
[   63.305805][ T1340] netlink: 40 bytes leftover after parsing attributes in process `syz.3.316'.
[   63.320264][ T1316] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4
[   63.954539][ T1341] loop3: detected capacity change from 0 to 512
[   63.964402][ T1347] loop8: detected capacity change from 0 to 256
[   63.984490][ T1347] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d)
[   64.083742][ T1341] 9pnet_fd: Insufficient options for proto=fd
[   64.202990][ T1340] loop3: detected capacity change from 0 to 256
[   64.212341][   T24] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[   64.392252][  T395] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[   64.392585][ T1340] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xcab3d314, utbl_chksum : 0xe619d30d)
[   64.403625][   T24] usb 3-1: unable to get BOS descriptor or descriptor too short
[   64.430343][   T24] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 32
[   64.451744][   T24] usb 3-1: New USB device found, idVendor=1235, idProduct=8004, bcdDevice= 0.40
[   64.469470][   T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   64.486135][   T24] usb 3-1: Product: syz
[   64.494673][   T24] usb 3-1: Manufacturer: syz
[   64.503596][   T24] usb 3-1: SerialNumber: syz
[   64.518482][ T1345] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[   64.583336][  T395] usb 9-1: too many endpoints for config 1 interface 0 altsetting 13: 33, using maximum allowed: 30
[   64.599608][  T395] usb 9-1: config 1 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 33
[   64.627756][  T395] usb 9-1: config 1 interface 0 has no altsetting 0
[   64.643705][  T395] usb 9-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.40
[   64.661406][  T395] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   64.678090][  T395] usb 9-1: Product: syz
[   64.687772][  T395] usb 9-1: Manufacturer: syz
[   64.693349][   T28] kauditd_printk_skb: 42 callbacks suppressed
[   64.693375][   T28] audit: type=1400 audit(1793731803.680:602): avc:  denied  { read write } for  pid=1357 comm="syz.6.321" name="mtrr" dev="proc" ino=4026532003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1
[   64.727809][  T395] usb 9-1: SerialNumber: syz
[   64.738509][   T24] usb 3-1: MIDIStreaming interface descriptor not found
[   64.746272][ T1358] size and base must be multiples of 4 kiB
[   64.772015][   T24] usb 3-1: USB disconnect, device number 6
[   64.779081][ T1358] CPU: 1 PID: 1358 Comm: syz.6.321 Not tainted syzkaller #0
[   64.786402][ T1358] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[   64.796474][ T1358] Call Trace:
[   64.799756][ T1358]  <TASK>
[   64.802252][   T28] audit: type=1400 audit(1793731803.710:603): avc:  denied  { open } for  pid=1357 comm="syz.6.321" path="/67/proc/mtrr" dev="proc" ino=4026532003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1
[   64.802676][ T1358]  __dump_stack+0x21/0x24
[   64.830361][ T1358]  dump_stack_lvl+0x110/0x170
[   64.835055][ T1358]  ? __cfi_dump_stack_lvl+0x8/0x8
[   64.840085][ T1358]  ? has_cap_mac_admin+0x370/0x370
[   64.845216][ T1358]  dump_stack+0x15/0x24
[   64.849382][ T1358]  mtrr_add+0x8d/0xa0
[   64.853369][ T1358]  mtrr_ioctl+0x90c/0xfb0
[   64.857704][ T1358]  ? __cfi_mtrr_ioctl+0x10/0x10
[   64.862559][ T1358]  ? selinux_file_ioctl+0x3ad/0x4c0
[   64.867769][ T1358]  ? __fget_files+0x2d1/0x330
[   64.869951][   T28] audit: type=1400 audit(1793731803.720:604): avc:  denied  { write } for  pid=1344 comm="syz.2.318" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   64.872445][ T1358]  ? __cfi_mtrr_ioctl+0x10/0x10
[   64.872465][ T1358]  proc_reg_unlocked_ioctl+0x1e6/0x2d0
[   64.902023][ T1358]  ? __cfi_proc_reg_unlocked_ioctl+0x10/0x10
[   64.908010][ T1358]  __se_sys_ioctl+0x12f/0x1b0
[   64.912685][ T1358]  __x64_sys_ioctl+0x7b/0x90
[   64.917261][ T1358]  x64_sys_call+0x58b/0x9a0
[   64.921753][ T1358]  do_syscall_64+0x4c/0xa0
[   64.926154][ T1358]  ? clear_bhb_loop+0x30/0x80
[   64.930819][ T1358]  ? clear_bhb_loop+0x30/0x80
[   64.935567][ T1358]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   64.941463][ T1358] RIP: 0033:0x7f75b2b9fb19
[   64.945870][ T1358] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   64.965457][ T1358] RSP: 002b:00007f75b3a3d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   64.973857][ T1358] RAX: ffffffffffffffda RBX: 00007f75b2e25fa0 RCX: 00007f75b2b9fb19
[   64.981811][ T1358] RDX: 0000200000000140 RSI: 00000000400c4d01 RDI: 0000000000000003
[   64.989761][ T1358] RBP: 00007f75b2c37b70 R08: 0000000000000000 R09: 0000000000000000
[   64.997744][ T1358] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   65.005708][ T1358] R13: 00007f75b2e26038 R14: 00007f75b2e25fa0 R15: 00007ffe7bc65588
[   65.013665][ T1358]  </TASK>
[   65.016973][   T28] audit: type=1400 audit(1793731803.730:605): avc:  denied  { ioctl } for  pid=1357 comm="syz.6.321" path="/67/proc/mtrr" dev="proc" ino=4026532003 ioctlcmd=0x4d01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1
[   65.073317][   T28] audit: type=1326 audit(1793731804.060:606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1348 comm="syz.8.320" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2ab39fb19 code=0x7ffc0000
[   65.079253][ T1362] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64
[   65.122536][   T28] audit: type=1326 audit(1793731804.090:607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1348 comm="syz.8.320" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2ab39fb19 code=0x7ffc0000
[   65.152012][ T1364] loop5: detected capacity change from 0 to 1024
[   65.172283][   T28] audit: type=1326 audit(1793731804.090:608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1348 comm="syz.8.320" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2ab39fb19 code=0x7ffc0000
[   65.183137][ T1362] audit: out of memory in audit_log_start
[   65.203310][ T1364] EXT4-fs (loop5): INFO: recovery required on readonly filesystem
[   65.211137][ T1364] EXT4-fs (loop5): write access will be enabled during recovery
[   65.219262][   T28] audit: type=1326 audit(1793731804.090:609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1348 comm="syz.8.320" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2ab39fb19 code=0x7ffc0000
[   65.229021][ T1364] EXT4-fs (loop5): barriers disabled
[   65.249324][ T1364] JBD2: no valid journal superblock found
[   65.267603][ T1371] fuse: Bad value for 'fd'
[   65.272273][ T1364] EXT4-fs (loop5): error loading journal
[   65.360075][ T1364] loop5: detected capacity change from 0 to 2048
[   65.402897][ T1364] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[   65.426898][ T1364] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns
[   65.546141][ T1364] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer.
[   66.102279][   T24] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[   66.294352][   T24] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 121, changing to 10
[   66.308341][   T24] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 32856, setting to 1024
[   66.326654][ T1406] size and base must be multiples of 4 kiB
[   66.334158][   T24] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00
[   66.343657][ T1406] CPU: 1 PID: 1406 Comm: syz.6.334 Not tainted syzkaller #0
[   66.350951][ T1406] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[   66.361003][ T1406] Call Trace:
[   66.364284][ T1406]  <TASK>
[   66.367208][ T1406]  __dump_stack+0x21/0x24
[   66.371539][ T1406]  dump_stack_lvl+0x110/0x170
[   66.376215][ T1406]  ? __cfi_dump_stack_lvl+0x8/0x8
[   66.381234][ T1406]  ? has_cap_mac_admin+0x370/0x370
[   66.386347][ T1406]  dump_stack+0x15/0x24
[   66.390496][ T1406]  mtrr_add+0x8d/0xa0
[   66.394473][ T1406]  mtrr_ioctl+0x90c/0xfb0
[   66.398809][ T1406]  ? __cfi_mtrr_ioctl+0x10/0x10
[   66.403662][ T1406]  ? selinux_file_ioctl+0x3ad/0x4c0
[   66.408866][ T1406]  ? __fget_files+0x2d1/0x330
[   66.413547][ T1406]  ? __cfi_mtrr_ioctl+0x10/0x10
[   66.418395][ T1406]  proc_reg_unlocked_ioctl+0x1e6/0x2d0
[   66.423864][ T1406]  ? __cfi_proc_reg_unlocked_ioctl+0x10/0x10
[   66.429845][ T1406]  __se_sys_ioctl+0x12f/0x1b0
[   66.434528][ T1406]  __x64_sys_ioctl+0x7b/0x90
[   66.439114][ T1406]  x64_sys_call+0x58b/0x9a0
[   66.443619][ T1406]  do_syscall_64+0x4c/0xa0
[   66.448034][ T1406]  ? clear_bhb_loop+0x30/0x80
[   66.452709][ T1406]  ? clear_bhb_loop+0x30/0x80
[   66.457389][ T1406]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   66.463278][ T1406] RIP: 0033:0x7f75b2b9fb19
[   66.467688][ T1406] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   66.487298][ T1406] RSP: 002b:00007f75b3a3d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   66.495729][ T1406] RAX: ffffffffffffffda RBX: 00007f75b2e25fa0 RCX: 00007f75b2b9fb19
[   66.503698][ T1406] RDX: 0000200000000140 RSI: 00000000400c4d01 RDI: 0000000000000003
[   66.511669][ T1406] RBP: 00007f75b2c37b70 R08: 0000000000000000 R09: 0000000000000000
[   66.519648][ T1406] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   66.527627][ T1406] R13: 00007f75b2e26038 R14: 00007f75b2e25fa0 R15: 00007ffe7bc65588
[   66.535607][ T1406]  </TASK>
[   66.540497][   T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   66.589609][  T368] EXT4-fs (loop5): unmounting filesystem.
[   66.684526][ T1416] netlink: 12 bytes leftover after parsing attributes in process `syz.6.336'.
[   66.755866][   T24] aiptek 3-1:17.0: Aiptek using 400 ms programming speed
[   66.799954][   T24] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:17.0/input/input6
[   66.911247][   T24] usb 3-1: USB disconnect, device number 7
[   66.911286][    C1] aiptek 3-1:17.0: aiptek_irq - usb_submit_urb failed with result -19
[   67.069009][  T395] usbhid 9-1:1.0: can't add hid device: -71
[   67.075146][  T395] usbhid: probe of 9-1:1.0 failed with error -71
[   67.087660][ T1425] loop8: detected capacity change from 0 to 4096
[   67.095009][ T1425] EXT4-fs: Ignoring removed mblk_io_submit option
[   67.098747][  T395] usb 9-1: USB disconnect, device number 2
[   67.101729][ T1425] EXT4-fs: Ignoring removed orlov option
[   67.113964][ T1427] loop3: detected capacity change from 0 to 128
[   67.126836][ T1427] FAULT_INJECTION: forcing a failure.
[   67.126836][ T1427] name failslab, interval 1, probability 0, space 0, times 0
[   67.130002][ T1429] FAULT_INJECTION: forcing a failure.
[   67.130002][ T1429] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   67.147753][ T1427] CPU: 1 PID: 1427 Comm: syz.3.343 Not tainted syzkaller #0
[   67.159842][ T1427] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[   67.169979][ T1427] Call Trace:
[   67.173249][ T1427]  <TASK>
[   67.176168][ T1427]  __dump_stack+0x21/0x24
[   67.180517][ T1427]  dump_stack_lvl+0x110/0x170
[   67.185186][ T1427]  ? __cfi_dump_stack_lvl+0x8/0x8
[   67.190227][ T1427]  ? kasan_set_track+0x60/0x70
[   67.194998][ T1427]  ? kasan_set_track+0x4b/0x70
[   67.199767][ T1427]  dump_stack+0x15/0x24
[   67.203921][ T1427]  should_fail_ex+0x3bf/0x510
[   67.208592][ T1427]  __should_failslab+0xac/0xf0
[   67.213347][ T1427]  should_failslab+0x9/0x20
[   67.217836][ T1427]  slab_pre_alloc_hook+0x30/0x1d0
[   67.222854][ T1427]  ? avc_has_perm_noaudit+0x30a/0x490
[   67.228216][ T1427]  ? memcpy+0x56/0x70
[   67.232184][ T1427]  kmem_cache_alloc_lru+0x49/0x280
[   67.237282][ T1427]  ? __d_alloc+0x34/0x6d0
[   67.241597][ T1427]  ? __cfi_avc_has_perm_noaudit+0x10/0x10
[   67.247384][ T1427]  __d_alloc+0x34/0x6d0
[   67.251528][ T1427]  d_alloc_parallel+0xe2/0x1280
[   67.256362][ T1427]  ? memset+0x35/0x40
[   67.260329][ T1427]  ? msdos_format_name+0xcde/0xe10
[   67.265455][ T1427]  ? __cfi_d_alloc_parallel+0x10/0x10
[   67.270832][ T1427]  ? __kasan_check_write+0x14/0x20
[   67.275952][ T1427]  ? rwsem_read_trylock+0x2af/0x640
[   67.281151][ T1427]  ? downgrade_write+0x370/0x370
[   67.286087][ T1427]  __lookup_slow+0x14f/0x410
[   67.290680][ T1427]  ? lookup_one_len+0x2e0/0x2e0
[   67.295540][ T1427]  ? down_read+0xa6/0xf0
[   67.299776][ T1427]  lookup_slow+0x57/0x70
[   67.304093][ T1427]  walk_component+0x2f5/0x430
[   67.308754][ T1427]  path_lookupat+0x155/0x430
[   67.313326][ T1427]  filename_lookup+0x229/0x580
[   67.318073][ T1427]  ? __cfi_filename_lookup+0x10/0x10
[   67.323352][ T1427]  ? kstrtouint_from_user+0x113/0x170
[   67.328713][ T1427]  vfs_statx+0x11b/0x6b0
[   67.332938][ T1427]  ? __check_object_size+0x45a/0x600
[   67.338217][ T1427]  ? strncpy_from_user+0x172/0x2c0
[   67.343399][ T1427]  ? vfs_fstatat+0x80/0x80
[   67.347799][ T1427]  __se_sys_newfstatat+0x142/0x440
[   67.352896][ T1427]  ? __x64_sys_newfstatat+0xb0/0xb0
[   67.358076][ T1427]  ? __cfi_vfs_write+0x10/0x10
[   67.362823][ T1427]  ? __kasan_check_write+0x14/0x20
[   67.367916][ T1427]  ? mutex_unlock+0x8f/0x230
[   67.372488][ T1427]  ? __cfi_mutex_unlock+0x10/0x10
[   67.377504][ T1427]  ? __cfi_ksys_write+0x10/0x10
[   67.382345][ T1427]  __x64_sys_newfstatat+0x9b/0xb0
[   67.387361][ T1427]  x64_sys_call+0x77c/0x9a0
[   67.391855][ T1427]  do_syscall_64+0x4c/0xa0
[   67.396260][ T1427]  ? clear_bhb_loop+0x30/0x80
[   67.400920][ T1427]  ? clear_bhb_loop+0x30/0x80
[   67.405580][ T1427]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   67.411458][ T1427] RIP: 0033:0x7fb562b9fb19
[   67.415857][ T1427] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   67.435445][ T1427] RSP: 002b:00007fb563a1a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000106
[   67.443851][ T1427] RAX: ffffffffffffffda RBX: 00007fb562e25fa0 RCX: 00007fb562b9fb19
[   67.451820][ T1427] RDX: 0000200000000080 RSI: 0000200000000040 RDI: ffffffffffffff9c
[   67.459782][ T1427] RBP: 00007fb563a1a090 R08: 0000000000000000 R09: 0000000000000000
[   67.467763][ T1427] R10: 0000000000000100 R11: 0000000000000246 R12: 0000000000000001
[   67.475719][ T1427] R13: 00007fb562e26038 R14: 00007fb562e25fa0 R15: 00007ffc4f243aa8
[   67.483682][ T1427]  </TASK>
[   67.487066][ T1429] CPU: 0 PID: 1429 Comm: syz.5.344 Not tainted syzkaller #0
[   67.494365][ T1429] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[   67.504502][ T1429] Call Trace:
[   67.507941][ T1429]  <TASK>
[   67.510854][ T1429]  __dump_stack+0x21/0x24
[   67.515171][ T1429]  dump_stack_lvl+0x110/0x170
[   67.519830][ T1429]  ? __cfi_dump_stack_lvl+0x8/0x8
[   67.524835][ T1429]  ? kvmalloc_node+0x28a/0x460
[   67.529581][ T1429]  ? __kmalloc_node+0xb2/0x1e0
[   67.534325][ T1429]  ? selinux_capable+0x2b6/0x3b0
[   67.539434][ T1429]  dump_stack+0x15/0x24
[   67.543588][ T1429]  should_fail_ex+0x3bf/0x510
[   67.548247][ T1429]  should_fail+0xb/0x10
[   67.552388][ T1429]  should_fail_usercopy+0x1a/0x20
[   67.557401][ T1429]  _copy_from_user+0x1e/0xc0
[   67.561975][ T1429]  vmemdup_user+0x63/0xe0
[   67.566290][ T1429]  map_lookup_elem+0x2b1/0x610
[   67.571043][ T1429]  __sys_bpf+0x509/0x850
[   67.575274][ T1429]  ? bpf_link_show_fdinfo+0x330/0x330
[   67.580635][ T1429]  ? __cfi_ksys_write+0x10/0x10
[   67.585475][ T1429]  ? debug_smp_processor_id+0x17/0x20
[   67.590833][ T1429]  __x64_sys_bpf+0x7c/0x90
[   67.595233][ T1429]  x64_sys_call+0x488/0x9a0
[   67.599726][ T1429]  do_syscall_64+0x4c/0xa0
[   67.604124][ T1429]  ? clear_bhb_loop+0x30/0x80
[   67.608788][ T1429]  ? clear_bhb_loop+0x30/0x80
[   67.613458][ T1429]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   67.619354][ T1429] RIP: 0033:0x7f3155d9fb19
[   67.623790][ T1429] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   67.643389][ T1429] RSP: 002b:00007f3156cce028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[   67.651889][ T1429] RAX: ffffffffffffffda RBX: 00007f3156025fa0 RCX: 00007f3155d9fb19
[   67.659936][ T1429] RDX: 0000000000000020 RSI: 0000200000000500 RDI: 0000000000000001
[   67.668189][ T1429] RBP: 00007f3156cce090 R08: 0000000000000000 R09: 0000000000000000
[   67.676244][ T1429] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   67.684557][ T1429] R13: 00007f3156026038 R14: 00007f3156025fa0 R15: 00007fff7a0e72f8
[   67.693593][ T1429]  </TASK>
[   67.722871][ T1425] EXT4-fs (loop8): Test dummy encryption mode enabled
[   67.750796][ T1425] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback.
[   67.753435][ T1435] size and base must be multiples of 4 kiB
[   67.775641][ T1435] CPU: 1 PID: 1435 Comm: syz.6.346 Not tainted syzkaller #0
[   67.782997][ T1435] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[   67.793069][ T1435] Call Trace:
[   67.796448][ T1435]  <TASK>
[   67.799387][ T1435]  __dump_stack+0x21/0x24
[   67.803735][ T1435]  dump_stack_lvl+0x110/0x170
[   67.808430][ T1435]  ? __cfi_dump_stack_lvl+0x8/0x8
[   67.812177][ T1443] netlink: 'syz.2.348': attribute type 1 has an invalid length.
[   67.813468][ T1435]  ? has_cap_mac_admin+0x370/0x370
[   67.813505][ T1435]  dump_stack+0x15/0x24
[   67.821352][ T1443] netlink: 9016 bytes leftover after parsing attributes in process `syz.2.348'.
[   67.826334][ T1435]  mtrr_add+0x8d/0xa0
[   67.826361][ T1435]  mtrr_ioctl+0x90c/0xfb0
[   67.826376][ T1435]  ? __cfi_mtrr_ioctl+0x10/0x10
[   67.826392][ T1435]  ? selinux_file_ioctl+0x3ad/0x4c0
[   67.826415][ T1435]  ? __fget_files+0x2d1/0x330
[   67.826432][ T1435]  ? __cfi_mtrr_ioctl+0x10/0x10
[   67.843232][ T1425] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni"
[   67.843608][ T1435]  proc_reg_unlocked_ioctl+0x1e6/0x2d0
[   67.880900][ T1435]  ? __cfi_proc_reg_unlocked_ioctl+0x10/0x10
[   67.886876][ T1435]  __se_sys_ioctl+0x12f/0x1b0
[   67.891561][ T1435]  __x64_sys_ioctl+0x7b/0x90
[   67.896146][ T1435]  x64_sys_call+0x58b/0x9a0
[   67.900753][ T1435]  do_syscall_64+0x4c/0xa0
[   67.905154][ T1435]  ? clear_bhb_loop+0x30/0x80
[   67.909819][ T1435]  ? clear_bhb_loop+0x30/0x80
[   67.914491][ T1435]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   67.920375][ T1435] RIP: 0033:0x7f75b2b9fb19
[   67.924893][ T1435] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   67.944748][ T1435] RSP: 002b:00007f75b3a3d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   67.953241][ T1435] RAX: ffffffffffffffda RBX: 00007f75b2e25fa0 RCX: 00007f75b2b9fb19
[   67.961198][ T1435] RDX: 0000200000000140 RSI: 00000000400c4d01 RDI: 0000000000000003
[   67.969156][ T1435] RBP: 00007f75b2c37b70 R08: 0000000000000000 R09: 0000000000000000
[   67.977112][ T1435] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   67.985102][ T1435] R13: 00007f75b2e26038 R14: 00007f75b2e25fa0 R15: 00007ffe7bc65588
[   67.993083][ T1435]  </TASK>
[   68.013353][ T1200] EXT4-fs (loop8): unmounting filesystem.
[   68.036527][ T1452] netlink: 44 bytes leftover after parsing attributes in process `syz.6.354'.
[   68.045646][ T1452] netlink: 43 bytes leftover after parsing attributes in process `syz.6.354'.
[   68.054594][ T1452] netlink: 'syz.6.354': attribute type 6 has an invalid length.
[   68.062739][ T1452] netlink: 'syz.6.354': attribute type 5 has an invalid length.
[   68.070609][ T1452] netlink: 43 bytes leftover after parsing attributes in process `syz.6.354'.
[   68.079724][ T1217] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[   68.152331][   T24] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[   68.344035][   T24] usb 4-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config
[   68.363119][   T24] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[   68.382270][   T24] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[   68.391411][   T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[   68.409598][   T24] usb 4-1: SerialNumber: syz
[   68.523557][ T1217] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   68.545229][ T1217] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2
[   68.564495][ T1217] usb 6-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00
[   68.583943][ T1217] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   68.606588][ T1217] usb 6-1: Found UVC 1.00 device <unnamed> (046d:0825)
[   68.621410][   T24] usb 4-1: 0:2 : does not exist
[   68.644679][   T24] usb 4-1: USB disconnect, device number 8
[   68.657392][ T1471] device vlan2 entered promiscuous mode
[   68.673363][ T1471] IPv6: ADDRCONF(NETDEV_CHANGE): vlan2: link becomes ready
[   68.692426][  T425] IPv6: ADDRCONF(NETDEV_CHANGE): vlan2: link becomes ready
[   68.806349][ T1217] usb 6-1: Failed to query (GET_INFO) UVC control 14 on unit 1: -71 (exp. 1).
[   68.820388][ T1217] usb 6-1: No streaming interface found for terminal 2.
[   68.840154][ T1217] usb 6-1: USB disconnect, device number 6
[   68.863773][  T412] udevd[412]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   69.081783][ T1475] loop2: detected capacity change from 0 to 256
[   69.357733][ T1487] size and base must be multiples of 4 kiB
[   69.363688][ T1487] CPU: 0 PID: 1487 Comm: syz.3.364 Not tainted syzkaller #0
[   69.370984][ T1487] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[   69.381041][ T1487] Call Trace:
[   69.384326][ T1487]  <TASK>
[   69.387262][ T1487]  __dump_stack+0x21/0x24
[   69.391601][ T1487]  dump_stack_lvl+0x110/0x170
[   69.396273][ T1487]  ? __cfi_dump_stack_lvl+0x8/0x8
[   69.401389][ T1487]  ? has_cap_mac_admin+0x370/0x370
[   69.406516][ T1487]  dump_stack+0x15/0x24
[   69.410668][ T1487]  mtrr_add+0x8d/0xa0
[   69.414655][ T1487]  mtrr_ioctl+0x90c/0xfb0
[   69.418995][ T1487]  ? __cfi_mtrr_ioctl+0x10/0x10
[   69.423857][ T1487]  ? selinux_file_ioctl+0x3ad/0x4c0
[   69.429158][ T1487]  ? __fget_files+0x2d1/0x330
[   69.433841][ T1487]  ? __cfi_mtrr_ioctl+0x10/0x10
[   69.438697][ T1487]  proc_reg_unlocked_ioctl+0x1e6/0x2d0
[   69.444170][ T1487]  ? __cfi_proc_reg_unlocked_ioctl+0x10/0x10
[   69.450164][ T1487]  __se_sys_ioctl+0x12f/0x1b0
[   69.454856][ T1487]  __x64_sys_ioctl+0x7b/0x90
[   69.459450][ T1487]  x64_sys_call+0x58b/0x9a0
[   69.463954][ T1487]  do_syscall_64+0x4c/0xa0
[   69.468382][ T1487]  ? clear_bhb_loop+0x30/0x80
[   69.473068][ T1487]  ? clear_bhb_loop+0x30/0x80
[   69.477749][ T1487]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   69.483656][ T1487] RIP: 0033:0x7fb562b9fb19
[   69.488079][ T1487] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   69.507700][ T1487] RSP: 002b:00007fb563a1a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   69.516138][ T1487] RAX: ffffffffffffffda RBX: 00007fb562e25fa0 RCX: 00007fb562b9fb19
[   69.524123][ T1487] RDX: 0000200000000140 RSI: 00000000400c4d01 RDI: 0000000000000003
[   69.532104][ T1487] RBP: 00007fb562c37b70 R08: 0000000000000000 R09: 0000000000000000
[   69.540081][ T1487] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   69.548054][ T1487] R13: 00007fb562e26038 R14: 00007fb562e25fa0 R15: 00007ffc4f243aa8
[   69.556369][ T1487]  </TASK>
[   69.589766][ T1492] loop5: detected capacity change from 0 to 256
[   69.702733][  T368] FAT-fs (loop5): error, corrupted directory (invalid entries)
[   69.740950][  T368] FAT-fs (loop5): Filesystem has been set read-only
[   69.772377][  T368] FAT-fs (loop5): error, corrupted directory (invalid entries)
[   69.915021][   T28] kauditd_printk_skb: 1419 callbacks suppressed
[   69.915035][   T28] audit: type=1400 audit(1793731808.900:2029): avc:  denied  { search } for  pid=1502 comm="syz.8.372" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1
[   70.050010][ T1499] syz.2.369 (1499): drop_caches: 2
[   70.103517][   T28] audit: type=1400 audit(1793731809.090:2030): avc:  denied  { map } for  pid=1509 comm="syz.8.376" path="socket:[23781]" dev="sockfs" ino=23781 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1
[   70.155779][ T1514] loop2: detected capacity change from 0 to 512
[   70.230768][ T1514] loop2: detected capacity change from 0 to 512
[   70.237662][ T1514] EXT4-fs: journaled quota format not specified
[   70.250705][ T1518] size and base must be multiples of 4 kiB
[   70.262320][ T1518] CPU: 0 PID: 1518 Comm: syz.8.380 Not tainted syzkaller #0
[   70.266181][ T1523] netlink: 4 bytes leftover after parsing attributes in process `syz.6.381'.
[   70.269645][ T1518] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[   70.269662][ T1518] Call Trace:
[   70.269667][ T1518]  <TASK>
[   70.269676][ T1518]  __dump_stack+0x21/0x24
[   70.300198][ T1518]  dump_stack_lvl+0x110/0x170
[   70.304893][ T1518]  ? __cfi_dump_stack_lvl+0x8/0x8
[   70.309934][ T1518]  ? has_cap_mac_admin+0x370/0x370
[   70.315075][ T1518]  dump_stack+0x15/0x24
[   70.319239][ T1518]  mtrr_add+0x8d/0xa0
[   70.323242][ T1518]  mtrr_ioctl+0x90c/0xfb0
[   70.327581][ T1518]  ? __cfi_mtrr_ioctl+0x10/0x10
[   70.332448][ T1518]  ? selinux_file_ioctl+0x3ad/0x4c0
[   70.337776][ T1518]  ? __fget_files+0x2d1/0x330
[   70.342470][ T1518]  ? __cfi_mtrr_ioctl+0x10/0x10
[   70.347404][ T1518]  proc_reg_unlocked_ioctl+0x1e6/0x2d0
[   70.353037][ T1518]  ? __cfi_proc_reg_unlocked_ioctl+0x10/0x10
[   70.359004][ T1518]  __se_sys_ioctl+0x12f/0x1b0
[   70.363669][ T1518]  __x64_sys_ioctl+0x7b/0x90
[   70.368257][ T1518]  x64_sys_call+0x58b/0x9a0
[   70.372841][ T1518]  do_syscall_64+0x4c/0xa0
[   70.377340][ T1518]  ? clear_bhb_loop+0x30/0x80
[   70.382010][ T1518]  ? clear_bhb_loop+0x30/0x80
[   70.386696][ T1518]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   70.392588][ T1518] RIP: 0033:0x7fb2ab39fb19
[   70.396996][ T1518] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   70.416686][ T1518] RSP: 002b:00007fb2ac236028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   70.425097][ T1518] RAX: ffffffffffffffda RBX: 00007fb2ab625fa0 RCX: 00007fb2ab39fb19
[   70.433061][ T1518] RDX: 0000200000000140 RSI: 00000000400c4d01 RDI: 0000000000000003
[   70.441016][ T1518] RBP: 00007fb2ab437b70 R08: 0000000000000000 R09: 0000000000000000
[   70.448987][ T1518] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   70.456964][ T1518] R13: 00007fb2ab626038 R14: 00007fb2ab625fa0 R15: 00007ffd907aa2c8
[   70.464946][ T1518]  </TASK>
[   70.468031][   T28] audit: type=1400 audit(1793731809.320:2031): avc:  denied  { ioctl } for  pid=1522 comm="syz.6.381" path="/dev/binderfs/binder0" dev="binder" ino=16 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[   70.498618][   T28] audit: type=1400 audit(1793731809.320:2032): avc:  denied  { set_context_mgr } for  pid=1522 comm="syz.6.381" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1
[   70.521011][  T412] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[   70.533215][ T1523] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1523 comm=syz.6.381
[   70.584582][ T1524] binder: 1522:1524 ioctl c0306201 200000001940 returned -14
[   70.619976][ T1527] bridge0: port 1(bridge_slave_0) entered blocking state
[   70.640163][ T1527] bridge0: port 1(bridge_slave_0) entered disabled state
[   70.647876][ T1527] device bridge_slave_0 entered promiscuous mode
[   70.656326][ T1527] bridge0: port 2(bridge_slave_1) entered blocking state
[   70.668689][ T1527] bridge0: port 2(bridge_slave_1) entered disabled state
[   70.683449][ T1527] device bridge_slave_1 entered promiscuous mode
[   70.690936][    T8] device bridge_slave_1 left promiscuous mode
[   70.698878][    T8] bridge0: port 2(bridge_slave_1) entered disabled state
[   70.709997][    T8] device bridge_slave_0 left promiscuous mode
[   70.716355][    T8] bridge0: port 1(bridge_slave_0) entered disabled state
[   70.728522][    T8] device veth1_macvtap left promiscuous mode
[   70.734614][    T8] device veth0_vlan left promiscuous mode
[   70.744101][   T28] audit: type=1400 audit(1793731809.730:2033): avc:  denied  { map } for  pid=1543 comm="syz.6.387" path="socket:[23876]" dev="sockfs" ino=23876 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1
[   70.942247][ T1469] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[   71.017368][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   71.026629][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   71.057123][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   71.066196][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   71.072991][ T1558] loop8: detected capacity change from 0 to 40427
[   71.083411][   T43] bridge0: port 1(bridge_slave_0) entered blocking state
[   71.090477][   T43] bridge0: port 1(bridge_slave_0) entered forwarding state
[   71.098179][ T1558] F2FS-fs (loop8): Unrecognized mount option "ÿ" or missing value
[   71.113650][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   71.122320][ T1469] usb 3-1: Using ep0 maxpacket: 32
[   71.128587][ T1469] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   71.132195][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   71.149430][ T1469] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   71.162555][   T43] bridge0: port 2(bridge_slave_1) entered blocking state
[   71.169378][ T1469] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[   71.169610][   T43] bridge0: port 2(bridge_slave_1) entered forwarding state
[   71.187857][ T1469] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   71.219854][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   71.230191][ T1469] usb 3-1: config 0 descriptor??
[   71.233239][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   71.248440][ T1469] hub 3-1:0.0: USB hub found
[   71.257676][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   71.276263][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   71.297556][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   71.325976][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   71.345938][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   71.355085][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   71.363262][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   71.371424][ T1527] device veth0_vlan entered promiscuous mode
[   71.378397][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   71.386200][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   71.400499][ T1527] device veth1_macvtap entered promiscuous mode
[   71.457197][ T1469] hub 3-1:0.0: config failed, can't read hub descriptor (err -22)
[   71.499029][ T1469] usbhid 3-1:0.0: can't add hid device: -71
[   71.662930][ T1469] usbhid: probe of 3-1:0.0 failed with error -71
[   71.669535][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   71.697439][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   71.713444][ T1469] usb 3-1: USB disconnect, device number 8
[   71.723950][ T1565] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   71.740902][ T1565] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   71.753334][ T1565] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   71.771821][ T1565] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   71.785393][   T28] audit: type=1400 audit(1793731810.770:2034): avc:  denied  { mount } for  pid=1527 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[   71.796932][ T1575] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1575 comm=syz.6.391
[   71.877625][ T1581] size and base must be multiples of 4 kiB
[   71.892427][ T1581] CPU: 1 PID: 1581 Comm: syz.9.393 Not tainted syzkaller #0
[   71.899758][ T1581] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[   71.909828][ T1581] Call Trace:
[   71.913122][ T1581]  <TASK>
[   71.916069][ T1581]  __dump_stack+0x21/0x24
[   71.920431][ T1581]  dump_stack_lvl+0x110/0x170
[   71.925134][ T1581]  ? __cfi_dump_stack_lvl+0x8/0x8
[   71.930288][ T1581]  ? has_cap_mac_admin+0x370/0x370
[   71.935513][ T1581]  dump_stack+0x15/0x24
[   71.939692][ T1581]  mtrr_add+0x8d/0xa0
[   71.943686][ T1581]  mtrr_ioctl+0x90c/0xfb0
[   71.948062][ T1581]  ? __cfi_mtrr_ioctl+0x10/0x10
[   71.952935][ T1581]  ? selinux_file_ioctl+0x3ad/0x4c0
[   71.958159][ T1581]  ? __fget_files+0x2d1/0x330
[   71.962854][ T1581]  ? __cfi_mtrr_ioctl+0x10/0x10
[   71.967729][ T1581]  proc_reg_unlocked_ioctl+0x1e6/0x2d0
[   71.973210][ T1581]  ? __cfi_proc_reg_unlocked_ioctl+0x10/0x10
[   71.979211][ T1581]  __se_sys_ioctl+0x12f/0x1b0
[   71.983900][ T1581]  __x64_sys_ioctl+0x7b/0x90
[   71.988591][ T1581]  x64_sys_call+0x58b/0x9a0
[   71.993196][ T1581]  do_syscall_64+0x4c/0xa0
[   71.997624][ T1581]  ? clear_bhb_loop+0x30/0x80
[   72.002401][ T1581]  ? clear_bhb_loop+0x30/0x80
[   72.002824][   T28] audit: type=1326 audit(1793731810.940:2035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1573 comm="syz.6.391" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75b2b9fb19 code=0x7ffc0000
[   72.007173][ T1581]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   72.007198][ T1581] RIP: 0033:0x7f4919f9fb19
[   72.042124][ T1581] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   72.059486][   T28] audit: type=1326 audit(1793731810.940:2036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1573 comm="syz.6.391" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75b2b9fb19 code=0x7ffc0000
[   72.061740][ T1581] RSP: 002b:00007f491aedb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   72.061764][ T1581] RAX: ffffffffffffffda RBX: 00007f491a225fa0 RCX: 00007f4919f9fb19
[   72.102875][ T1581] RDX: 0000200000000140 RSI: 00000000400c4d01 RDI: 0000000000000003
[   72.110946][ T1581] RBP: 00007f491a037b70 R08: 0000000000000000 R09: 0000000000000000
[   72.115168][   T28] audit: type=1326 audit(1793731810.940:2037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1573 comm="syz.6.391" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75b2b9fb19 code=0x7ffc0000
[   72.118920][ T1581] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   72.118934][ T1581] R13: 00007f491a226038 R14: 00007f491a225fa0 R15: 00007ffd12f33398
[   72.118952][ T1581]  </TASK>
[   72.162759][   T28] audit: type=1326 audit(1793731810.940:2038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1573 comm="syz.6.391" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75b2b9fb19 code=0x7ffc0000
[   72.430897][ T1593] netlink: 44 bytes leftover after parsing attributes in process `syz.9.398'.
[   72.519782][ T1599] loop9: detected capacity change from 0 to 256
[   72.536965][ T1599] exfat: Deprecated parameter 'namecase'
[   72.546229][ T1599] exfat: Deprecated parameter 'namecase'
[   72.559857][ T1599] exFAT-fs (loop9): failed to load upcase table (idx : 0x0001fe89, chksum : 0xef5d2b8f, utbl_chksum : 0xe619d30d)
[   72.862256][   T60] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[   73.012298][   T60] usb 7-1: device descriptor read/64, error -71
[   73.282663][   T60] usb 7-1: device descriptor read/64, error -71
[   73.372318][  T939] usb 9-1: new high-speed USB device number 3 using dummy_hcd
[   73.553553][  T939] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   73.563747][  T939] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 2
[   73.572282][   T60] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[   73.573485][  T939] usb 9-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00
[   73.589400][  T939] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   73.613651][  T939] usb 9-1: Found UVC 1.00 device <unnamed> (046d:0825)
[   73.700941][ T1612] size and base must be multiples of 4 kiB
[   73.707090][ T1612] CPU: 1 PID: 1612 Comm: syz.2.406 Not tainted syzkaller #0
[   73.714404][ T1612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[   73.724469][ T1612] Call Trace:
[   73.727759][ T1612]  <TASK>
[   73.730693][ T1612]  __dump_stack+0x21/0x24
[   73.735031][ T1612]  dump_stack_lvl+0x110/0x170
[   73.739714][ T1612]  ? __cfi_dump_stack_lvl+0x8/0x8
[   73.744743][ T1612]  ? has_cap_mac_admin+0x370/0x370
[   73.749908][ T1612]  dump_stack+0x15/0x24
[   73.754080][ T1612]  mtrr_add+0x8d/0xa0
[   73.758057][ T1612]  mtrr_ioctl+0x90c/0xfb0
[   73.762371][ T1612]  ? __cfi_mtrr_ioctl+0x10/0x10
[   73.767222][ T1612]  ? selinux_file_ioctl+0x3ad/0x4c0
[   73.772416][ T1612]  ? __fget_files+0x2d1/0x330
[   73.777078][ T1612]  ? __cfi_mtrr_ioctl+0x10/0x10
[   73.781919][ T1612]  proc_reg_unlocked_ioctl+0x1e6/0x2d0
[   73.787369][ T1612]  ? __cfi_proc_reg_unlocked_ioctl+0x10/0x10
[   73.793358][ T1612]  __se_sys_ioctl+0x12f/0x1b0
[   73.798048][ T1612]  __x64_sys_ioctl+0x7b/0x90
[   73.802650][ T1612]  x64_sys_call+0x58b/0x9a0
[   73.807161][ T1612]  do_syscall_64+0x4c/0xa0
[   73.811577][ T1612]  ? clear_bhb_loop+0x30/0x80
[   73.816251][ T1612]  ? clear_bhb_loop+0x30/0x80
[   73.820921][ T1612]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   73.826804][ T1612] RIP: 0033:0x7fb1dfd9fb19
[   73.831207][ T1612] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   73.850797][ T1612] RSP: 002b:00007fb1e0bde028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   73.859204][ T1612] RAX: ffffffffffffffda RBX: 00007fb1e0025fa0 RCX: 00007fb1dfd9fb19
[   73.867169][ T1612] RDX: 0000200000000140 RSI: 00000000400c4d01 RDI: 0000000000000003
[   73.875126][ T1612] RBP: 00007fb1dfe37b70 R08: 0000000000000000 R09: 0000000000000000
[   73.883082][ T1612] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   73.891070][ T1612] R13: 00007fb1e0026038 R14: 00007fb1e0025fa0 R15: 00007ffe10251f48
[   73.899034][ T1612]  </TASK>
[   73.902397][   T60] usb 7-1: device descriptor read/64, error -71
[   73.904261][  T939] usb 9-1: Failed to query (GET_INFO) UVC control 14 on unit 1: -71 (exp. 1).
[   73.921392][  T939] usb 9-1: No streaming interface found for terminal 2.
[   73.941256][  T939] usb 9-1: USB disconnect, device number 3
[   74.123936][ T1626] loop9: detected capacity change from 0 to 128
[   74.141036][ T1631] netlink: 28 bytes leftover after parsing attributes in process `syz.9.412'.
[   74.162339][ T1631] netlink: 28 bytes leftover after parsing attributes in process `syz.9.412'.
[   74.173352][ T1626] FAT-fs (loop9): Unrecognized mount option "gid=ÿÿƒ" or missing value
[   74.181849][ T1631] netlink: 28 bytes leftover after parsing attributes in process `syz.9.412'.
[   74.191878][ T1631] netlink: 28 bytes leftover after parsing attributes in process `syz.9.412'.
[   74.192248][   T60] usb 7-1: device descriptor read/64, error -71
[   74.201138][ T1631] netlink: 28 bytes leftover after parsing attributes in process `syz.9.412'.
[   74.216197][ T1631] netlink: 28 bytes leftover after parsing attributes in process `syz.9.412'.
[   74.225422][ T1631] netlink: 28 bytes leftover after parsing attributes in process `syz.9.412'.
[   74.239595][ T1631] netlink: 28 bytes leftover after parsing attributes in process `syz.9.412'.
[   74.249730][ T1631] netlink: 28 bytes leftover after parsing attributes in process `syz.9.412'.
[   74.278845][ T1636] loop9: detected capacity change from 0 to 256
[   74.332312][   T60] usb usb7-port1: attempt power cycle
[   74.449812][ T1527] FAT-fs (loop9): error, corrupted directory (invalid entries)
[   74.460563][ T1527] FAT-fs (loop9): Filesystem has been set read-only
[   74.484913][ T1641] loop8: detected capacity change from 0 to 512
[   74.485891][ T1527] FAT-fs (loop9): error, corrupted directory (invalid entries)
[   74.526307][ T1641] FAT-fs (loop8): Directory bread(block 199916) failed
[   74.535736][ T1641] FAT-fs (loop8): Directory bread(block 199917) failed
[   74.542711][ T1641] FAT-fs (loop8): Directory bread(block 199918) failed
[   74.549656][ T1641] FAT-fs (loop8): Directory bread(block 199919) failed
[   74.559875][ T1641] FAT-fs (loop8): Directory bread(block 199920) failed
[   74.582284][ T1641] FAT-fs (loop8): Directory bread(block 199921) failed
[   74.592265][ T1641] FAT-fs (loop8): Directory bread(block 199922) failed
[   74.603316][ T1641] FAT-fs (loop8): Directory bread(block 199923) failed
[   74.694739][ T1646] loop8: detected capacity change from 0 to 512
[   74.730744][ T1646] ext3: Unknown parameter '.'
[   74.742348][   T60] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[   74.833261][   T60] usb 7-1: device descriptor read/8, error -71
[   74.869004][ T1647] bridge0: port 1(bridge_slave_0) entered blocking state
[   74.876218][ T1647] bridge0: port 1(bridge_slave_0) entered disabled state
[   74.885786][ T1647] device bridge_slave_0 entered promiscuous mode
[   74.895385][ T1647] bridge0: port 2(bridge_slave_1) entered blocking state
[   74.902744][ T1647] bridge0: port 2(bridge_slave_1) entered disabled state
[   74.910277][ T1647] device bridge_slave_1 entered promiscuous mode
[   74.980337][ T1652] loop8: detected capacity change from 0 to 256
[   74.987728][   T60] usb 7-1: device descriptor read/8, error -71
[   75.002782][ T1652] FAT-fs (loop8): Unrecognized mount option "nonumtail=0㧿Yk°!ü™&–FhØÓ" or missing value
[   75.003980][   T28] kauditd_printk_skb: 423 callbacks suppressed
[   75.003992][   T28] audit: type=1400 audit(1793731813.990:2462): avc:  denied  { mounton } for  pid=1645 comm="syz.8.420" path="/25/sys/devices/platform/i8042/serio0/drvctl" dev="sysfs" ino=28058 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=file permissive=1
[   75.051155][ T1654] loop2: detected capacity change from 0 to 128
[   75.068956][ T1654] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[   75.090195][ T1654] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[   75.102164][ T1655] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=1655 comm=syz.8.420
[   75.104447][   T28] audit: type=1400 audit(1793731814.090:2463): avc:  denied  { getopt } for  pid=1645 comm="syz.8.420" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   75.136353][ T1565] device bridge_slave_1 left promiscuous mode
[   75.202421][ T1565] bridge0: port 2(bridge_slave_1) entered disabled state
[   75.824355][ T1565] device bridge_slave_0 left promiscuous mode
[   75.830638][ T1565] bridge0: port 1(bridge_slave_0) entered disabled state
[   75.839079][  T289] FAT-fs (loop2): error, invalid access to FAT (entry 0xffff0000)
[   75.848102][ T1652] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input7
[   75.856164][  T289] FAT-fs (loop2): Filesystem has been set read-only
[   75.862255][   T28] audit: type=1400 audit(1793731814.130:2464): avc:  denied  { mounton } for  pid=1653 comm="syz.2.421" path="/79/bus/sys" dev="loop2" ino=1048763 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1
[   75.892871][ T1565] device veth1_macvtap left promiscuous mode
[   75.898947][ T1565] device veth0_vlan left promiscuous mode
[   75.904917][   T60] usb 7-1: new high-speed USB device number 6 using dummy_hcd
[   75.915698][  T289] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[   75.935703][   T28] audit: type=1400 audit(1793731814.900:2465): avc:  denied  { mount } for  pid=1657 comm="syz.6.423" name="/" dev="ramfs" ino=23332 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1
[   76.072360][ T1662] Illegal XDP return value 14 on prog  (id 38) dev N/A, expect packet loss!
[   76.142679][  T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   76.162513][  T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   76.184485][  T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   76.213445][  T308] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   76.242310][  T308] bridge0: port 1(bridge_slave_0) entered blocking state
[   76.249393][  T308] bridge0: port 1(bridge_slave_0) entered forwarding state
[   76.267547][  T308] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   76.283843][  T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   76.300211][  T308] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   76.320334][  T308] bridge0: port 2(bridge_slave_1) entered blocking state
[   76.327448][  T308] bridge0: port 2(bridge_slave_1) entered forwarding state
[   76.357313][  T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   76.372057][  T308] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   76.382297][   T60] usb 7-1: device not accepting address 6, error -71
[   76.389338][  T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   76.397539][   T60] usb usb7-port1: unable to enumerate USB device
[   76.407514][  T308] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   76.434228][  T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   76.451581][  T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   76.474376][ T1647] device veth0_vlan entered promiscuous mode
[   76.486773][  T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   76.500381][  T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   76.517213][  T308] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   76.533331][  T308] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   76.555865][  T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   76.573700][ T1647] device veth1_macvtap entered promiscuous mode
[   76.592555][  T308] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   76.611108][  T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   76.623338][  T308] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   76.641833][  T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   76.698361][ T1673] xt_CONNSECMARK: invalid mode: 0
[   76.752268][   T24] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[   76.859783][ T1685] loop8: detected capacity change from 0 to 512
[   76.876396][ T1685] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode
[   76.899365][ T1685] EXT4-fs (loop8): 1 truncate cleaned up
[   76.905303][ T1685] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback.
[   76.930249][   T28] audit: type=1400 audit(1793731815.910:2466): avc:  denied  { create } for  pid=1684 comm="syz.8.431" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   76.953416][   T24] usb 3-1: too many endpoints for config 1 interface 0 altsetting 13: 33, using maximum allowed: 30
[   76.983791][   T24] usb 3-1: config 1 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 33
[   76.998013][ T1200] EXT4-fs (loop8): unmounting filesystem.
[   77.022554][   T24] usb 3-1: config 1 interface 0 has no altsetting 0
[   77.041193][   T24] usb 3-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.40
[   77.060829][   T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   77.076722][   T24] usb 3-1: Product: syz
[   77.081050][   T24] usb 3-1: Manufacturer: syz
[   77.085904][   T24] usb 3-1: SerialNumber: syz
[   77.342309][   T19] usb 9-1: new high-speed USB device number 4 using dummy_hcd
[   77.532253][   T19] usb 9-1: Using ep0 maxpacket: 8
[   77.539066][   T19] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7
[   77.548367][ T1691] loop1: detected capacity change from 0 to 1024
[   77.561719][   T19] usb 9-1: New USB device found, idVendor=2b53, idProduct=0024, bcdDevice= 0.40
[   77.582283][   T19] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   77.591777][   T19] usb 9-1: Product: syz
[   77.596298][   T19] usb 9-1: Manufacturer: syz
[   77.597578][ T1691] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[   77.600945][   T19] usb 9-1: SerialNumber: syz
[   77.629792][   T28] audit: type=1400 audit(1793731816.610:2467): avc:  denied  { create } for  pid=1690 comm="syz.1.433" name=E91F7189591E9233614B scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=sock_file permissive=1
[   77.711951][   T24] usbhid 3-1:1.0: can't add hid device: -71
[   77.719349][   T24] usbhid: probe of 3-1:1.0 failed with error -71
[   77.719493][   T28] audit: type=1400 audit(1793731816.710:2468): avc:  denied  { write } for  pid=1690 comm="syz.1.433" name=E91F7189591E9233614B dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=sock_file permissive=1
[   77.730347][   T24] usb 3-1: USB disconnect, device number 9
[   77.785377][ T1698] FAULT_INJECTION: forcing a failure.
[   77.785377][ T1698] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   77.798523][ T1698] CPU: 0 PID: 1698 Comm: syz.6.434 Not tainted syzkaller #0
[   77.805856][ T1698] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[   77.816018][ T1698] Call Trace:
[   77.819334][ T1698]  <TASK>
[   77.822282][ T1698]  __dump_stack+0x21/0x24
[   77.826614][ T1698]  dump_stack_lvl+0x110/0x170
[   77.831300][ T1698]  ? __cfi_dump_stack_lvl+0x8/0x8
[   77.836324][ T1698]  dump_stack+0x15/0x24
[   77.840479][ T1698]  should_fail_ex+0x3bf/0x510
[   77.845156][ T1698]  should_fail+0xb/0x10
[   77.849310][ T1698]  should_fail_usercopy+0x1a/0x20
[   77.854418][ T1698]  strncpy_from_user+0x24/0x2c0
[   77.859266][ T1698]  ? kmem_cache_alloc+0x166/0x320
[   77.864290][ T1698]  ? getname_flags+0xba/0x510
[   77.868971][ T1698]  getname_flags+0xf5/0x510
[   77.873473][ T1698]  __x64_sys_mkdirat+0x7c/0xa0
[   77.878337][ T1698]  x64_sys_call+0x73d/0x9a0
[   77.882863][ T1698]  do_syscall_64+0x4c/0xa0
[   77.887290][ T1698]  ? clear_bhb_loop+0x30/0x80
[   77.891980][ T1698]  ? clear_bhb_loop+0x30/0x80
[   77.896848][ T1698]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   77.902765][ T1698] RIP: 0033:0x7f75b2b9e987
[   77.907194][ T1698] Code: 00 66 90 48 89 f2 b9 00 01 00 00 48 89 fe bf 9c ff ff ff e9 db f7 ff ff 66 2e 0f 1f 84 00 00 00 00 00 90 b8 02 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   77.926810][ T1698] RSP: 002b:00007f75b39fae58 EFLAGS: 00000246 ORIG_RAX: 0000000000000102
[   77.935235][ T1698] RAX: ffffffffffffffda RBX: 00007f75b39faee0 RCX: 00007f75b2b9e987
[   77.943233][ T1698] RDX: 00000000000001ff RSI: 0000200000003ec0 RDI: 00000000ffffff9c
[   77.951220][ T1698] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[   77.959202][ T1698] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000003ec0
[   77.967184][ T1698] R13: 00007f75b39faea0 R14: 0000000000000000 R15: 0000000000000000
[   77.975172][ T1698]  </TASK>
[   77.994917][   T19] usb 9-1: USB disconnect, device number 4
[   78.233713][  T322] udevd[322]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   78.384082][ T1647] EXT4-fs (loop1): unmounting filesystem.
[   78.400903][ T1700] loop1: detected capacity change from 0 to 512
[   78.417447][ T1700] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   78.467293][ T1700] EXT4-fs (loop1): 1 truncate cleaned up
[   78.482417][ T1700] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[   78.529617][ T1711] loop2: detected capacity change from 0 to 512
[   78.645306][ T1711] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[   78.709281][   T28] audit: type=1400 audit(1793731817.690:2469): avc:  denied  { write } for  pid=1723 comm="syz.8.442" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   78.735833][ T1725] __nla_validate_parse: 24 callbacks suppressed
[   78.735854][ T1725] netlink: 60 bytes leftover after parsing attributes in process `syz.8.442'.
[   78.806736][ T1727] xt_CONNSECMARK: invalid mode: 0
[   78.818991][   T28] audit: type=1400 audit(1793731817.800:2470): avc:  denied  { write open } for  pid=1703 comm="syz.2.437" path=2F202864656C6574656429 dev="loop2" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   78.850545][ T1704] overlayfs: unrecognized mount option "uuid=null" or missing value
[   78.863169][   T28] audit: type=1400 audit(1793731817.830:2471): avc:  denied  { rename } for  pid=1703 comm="syz.2.437" name="#a" dev="loop2" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   78.896148][  T289] EXT4-fs (loop2): unmounting filesystem.
[   78.912950][ T1647] EXT4-fs (loop1): unmounting filesystem.
[   79.001602][ T1732] loop2: detected capacity change from 0 to 512
[   79.142412][ T1742] ip6_tables: ip6tables: counters copy to user failed while replacing table
[   79.154120][ T1737] loop1: detected capacity change from 0 to 40427
[   79.161211][ T1737] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[   79.169398][ T1737] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[   79.182441][ T1737] F2FS-fs (loop1): invalid crc value
[   79.210293][ T1737] F2FS-fs (loop1): Found nat_bits in checkpoint
[   79.247399][ T1751] loop2: detected capacity change from 0 to 256
[   79.254874][ T1737] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[   79.262137][ T1737] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[   79.716187][ T1764] netlink: 88 bytes leftover after parsing attributes in process `syz.8.457'.
[   79.748784][ T1764] netlink: 48 bytes leftover after parsing attributes in process `syz.8.457'.
[   80.239214][ T1786] netlink: 12 bytes leftover after parsing attributes in process `syz.2.466'.
[   80.251041][   T28] kauditd_printk_skb: 7 callbacks suppressed
[   80.251055][   T28] audit: type=1400 audit(1793731819.240:2479): avc:  denied  { accept } for  pid=1781 comm="syz.1.456" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   80.292559][ T1786] loop2: detected capacity change from 0 to 1024
[   80.317425][ T1786] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[   80.347726][ T1795] loop1: detected capacity change from 0 to 512
[   80.365408][ T1795] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   80.396774][ T1795] EXT4-fs (loop1): 1 truncate cleaned up
[   80.411059][ T1795] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[   80.457380][ T1647] EXT4-fs (loop1): unmounting filesystem.
[   80.522106][  T289] EXT4-fs (loop2): unmounting filesystem.
[   80.612277][  T939] usb 9-1: new high-speed USB device number 5 using dummy_hcd
[   80.671701][ T1809] loop1: detected capacity change from 0 to 512
[   80.713493][ T1809] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[   80.731777][ T1809] ext4 filesystem being mounted at /12/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   80.785673][ T1647] EXT4-fs (loop1): unmounting filesystem.
[   80.802290][  T939] usb 9-1: Using ep0 maxpacket: 16
[   80.822292][ T1217] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[   80.840732][  T939] usb 9-1: unable to get BOS descriptor or descriptor too short
[   80.865322][  T939] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[   80.869471][ T1815] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[   80.910937][ T1815] ext4 filesystem being mounted at /14/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   80.932090][  T939] usb 9-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7
[   80.958304][ T1815] EXT4-fs error (device loop1): ext4_do_update_inode:5281: inode #2: comm syz.1.475: corrupted inode contents
[   80.982977][ T1815] EXT4-fs (loop1): Remounting filesystem read-only
[   80.985255][  T939] usb 9-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40
[   80.989699][ T1815] EXT4-fs error (device loop1): ext4_dirty_inode:6158: inode #2: comm syz.1.475: mark_inode_dirty error
[   81.018991][ T1815] EXT4-fs (loop1): Remounting filesystem read-only
[   81.027674][ T1217] usb 3-1: unable to get BOS descriptor or descriptor too short
[   81.045540][  T939] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   81.054527][ T1217] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   81.071251][  T939] usb 9-1: Product: syz
[   81.081248][ T1815] EXT4-fs error (device loop1): ext4_do_update_inode:5281: inode #2: comm syz.1.475: corrupted inode contents
[   81.093247][ T1217] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[   81.102167][  T939] usb 9-1: Manufacturer: syz
[   81.111189][  T939] usb 9-1: SerialNumber: syz
[   81.117440][ T1217] usb 3-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40
[   81.126603][ T1826] ip_tables: iptables: counters copy to user failed while replacing table
[   81.137520][ T1815] EXT4-fs (loop1): Remounting filesystem read-only
[   81.144685][ T1815] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #2: comm syz.1.475: mark_inode_dirty error
[   81.157262][ T1217] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   81.165807][ T1815] EXT4-fs (loop1): Remounting filesystem read-only
[   81.172593][ T1217] usb 3-1: Product: syz
[   81.176786][ T1217] usb 3-1: Manufacturer: syz
[   81.181404][ T1217] usb 3-1: SerialNumber: syz
[   81.187165][   T28] audit: type=1400 audit(1793731820.170:2480): avc:  denied  { rename } for  pid=1814 comm="syz.1.475" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1
[   81.232105][ T1823] EXT4-fs error (device loop1): ext4_get_first_dir_block:3594: inode #18: comm syz.1.475: directory missing '.'
[   81.247092][ T1217] usb 3-1: selecting invalid altsetting 1
[   81.260622][ T1217] usb 3-1: unit 6 not found!
[   81.265555][ T1823] EXT4-fs (loop1): Remounting filesystem read-only
[   81.303129][ T1647] EXT4-fs (loop1): unmounting filesystem.
[   81.407627][ T1835] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   81.452336][   T28] audit: type=1400 audit(1793731820.430:2481): avc:  denied  { ioctl } for  pid=1804 comm="syz.2.472" path="socket:[25016]" dev="sockfs" ino=25016 ioctlcmd=0x8906 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   81.477723][ T1835] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[   81.562500][   T28] audit: type=1400 audit(1793731820.480:2482): avc:  denied  { ioctl } for  pid=1834 comm="syz.1.482" path="socket:[25068]" dev="sockfs" ino=25068 ioctlcmd=0x8934 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[   81.604993][ T1829] syz.6.480 (1829): drop_caches: 2
[   81.658864][ T1647] EXT4-fs (loop1): unmounting filesystem.
[   81.734711][ T1844] FAULT_INJECTION: forcing a failure.
[   81.734711][ T1844] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   81.762261][ T1844] CPU: 1 PID: 1844 Comm: syz.1.484 Not tainted syzkaller #0
[   81.769587][ T1844] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[   81.779650][ T1844] Call Trace:
[   81.782937][ T1844]  <TASK>
[   81.785881][ T1844]  __dump_stack+0x21/0x24
[   81.790229][ T1844]  dump_stack_lvl+0x110/0x170
[   81.795004][ T1844]  ? __cfi_dump_stack_lvl+0x8/0x8
[   81.800080][ T1844]  dump_stack+0x15/0x24
[   81.804251][ T1844]  should_fail_ex+0x3bf/0x510
[   81.808948][ T1844]  should_fail+0xb/0x10
[   81.813144][ T1844]  should_fail_usercopy+0x1a/0x20
[   81.818527][ T1844]  copyin+0x20/0xa0
[   81.822356][ T1844]  _copy_from_iter+0x3cd/0xfe0
[   81.827138][ T1844]  ? __cfi__copy_from_iter+0x10/0x10
[   81.832455][ T1844]  ? __kasan_check_write+0x14/0x20
[   81.837594][ T1844]  ? __build_skb_around+0x24c/0x470
[   81.842822][ T1844]  ? __check_object_size+0x45a/0x600
[   81.848131][ T1844]  netlink_sendmsg+0x73b/0xbd0
[   81.852934][ T1844]  ? __cfi_netlink_sendmsg+0x10/0x10
[   81.858249][ T1844]  ? security_socket_sendmsg+0x93/0xb0
[   81.863724][ T1844]  ? __cfi_netlink_sendmsg+0x10/0x10
[   81.869034][ T1844]  ____sys_sendmsg+0x5fb/0x9c0
[   81.873822][ T1844]  ? __sys_sendmsg_sock+0x40/0x40
[   81.878896][ T1844]  ? import_iovec+0x7c/0xb0
[   81.883500][ T1844]  ___sys_sendmsg+0x2a2/0x360
[   81.888184][ T1844]  ? __sys_sendmsg+0x290/0x290
[   81.892960][ T1844]  ? __kasan_check_write+0x14/0x20
[   81.898082][ T1844]  ? proc_fail_nth_write+0x180/0x200
[   81.903385][ T1844]  ? vfs_write+0xa51/0xd00
[   81.907853][ T1844]  ? __fdget+0x19c/0x220
[   81.912146][ T1844]  __x64_sys_sendmsg+0x20d/0x2e0
[   81.917099][ T1844]  ? __cfi___x64_sys_sendmsg+0x10/0x10
[   81.922584][ T1844]  ? fpregs_assert_state_consistent+0xb1/0xe0
[   81.928667][ T1844]  x64_sys_call+0x171/0x9a0
[   81.933190][ T1844]  do_syscall_64+0x4c/0xa0
[   81.937622][ T1844]  ? clear_bhb_loop+0x30/0x80
[   81.942313][ T1844]  ? clear_bhb_loop+0x30/0x80
[   81.947001][ T1844]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   81.952907][ T1844] RIP: 0033:0x7f6c0459fb19
[   81.957417][ T1844] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   81.977031][ T1844] RSP: 002b:00007f6c054ca028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   81.985458][ T1844] RAX: ffffffffffffffda RBX: 00007f6c04825fa0 RCX: 00007f6c0459fb19
[   81.993618][ T1844] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003
[   82.002729][ T1844] RBP: 00007f6c054ca090 R08: 0000000000000000 R09: 0000000000000000
[   82.010718][ T1844] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   82.018788][ T1844] R13: 00007f6c04826038 R14: 00007f6c04825fa0 R15: 00007ffd98a01aa8
[   82.026777][ T1844]  </TASK>
[   82.522649][ T1805] set_capacity_and_notify: 2 callbacks suppressed
[   82.522668][ T1805] loop2: detected capacity change from 0 to 131072
[   82.560354][ T1805] F2FS-fs (loop2): invalid crc value
[   82.566640][ T1805] F2FS-fs (loop2): invalid crc value
[   82.572537][ T1805] F2FS-fs (loop2): Failed to get valid F2FS checkpoint
[   82.604106][ T1805] loop2: detected capacity change from 0 to 512
[   82.672953][ T1805] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[   82.681936][ T1805] ext4 filesystem being mounted at /92/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   82.753696][ T1217] usb 3-1: 2:0: cannot get min/max values for control 1 (id 2)
[   82.754372][ T1852] x_tables: duplicate underflow at hook 3
[   82.768800][  T939] usb 9-1: Audio class v2/v3 interfaces need an interface association
[   82.777313][ T1217] snd-usb-audio: probe of 3-1:1.0 failed with error -22
[   82.784425][  T939] snd-usb-audio: probe of 9-1:1.0 failed with error -22
[   82.792185][ T1217] usb 3-1: USB disconnect, device number 10
[   82.800374][  T343] udevd[343]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   82.802116][  T939] usb 9-1: 2:1 : incorrect wMaxPacketSize for BADD profile
[   82.838967][  T939] usb 9-1: incorrect wMaxPacketSize 0x20 for BADD profile
[   82.853841][  T939] snd-usb-audio: probe of 9-1:1.1 failed with error -22
[   82.869154][  T320] udevd[320]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.1/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   84.441744][  T289] EXT4-fs (loop2): unmounting filesystem.
[   84.476673][   T28] audit: type=1326 audit(1793731823.460:2483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1866 comm="syz.6.490" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f75b2b9fb19 code=0x7ffc0000
[   84.543707][   T28] audit: type=1326 audit(1793731823.460:2484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1866 comm="syz.6.490" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7f75b2b5bf6c code=0x7ffc0000
[   84.588944][ T1877] loop2: detected capacity change from 0 to 8192
[   84.589491][   T28] audit: type=1326 audit(1793731823.460:2485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1866 comm="syz.6.490" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f75b2b5bfce code=0x7ffc0000
[   84.646108][   T28] audit: type=1326 audit(1793731823.460:2486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1866 comm="syz.6.490" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f75b2b9fb19 code=0x7ffc0000
[   84.671026][   T28] audit: type=1326 audit(1793731823.460:2487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1866 comm="syz.6.490" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75b2b9fb19 code=0x7ffc0000
[   84.712784][    C0] ==================================================================
[   84.720915][    C0] BUG: KASAN: use-after-free in rcu_cblist_dequeue+0x6c/0xb0
[   84.722616][   T28] audit: type=1326 audit(1793731823.460:2488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1866 comm="syz.6.490" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75b2b9fb19 code=0x7ffc0000
[   84.728419][    C0] Read of size 8 at addr ffff88811001d190 by task ksoftirqd/0/13
[   84.728438][    C0] 
[   84.728444][    C0] CPU: 0 PID: 13 Comm: ksoftirqd/0 Not tainted syzkaller #0
[   84.770895][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[   84.780970][    C0] Call Trace:
[   84.784301][    C0]  <TASK>
[   84.787243][    C0]  __dump_stack+0x21/0x24
[   84.791677][    C0]  dump_stack_lvl+0x110/0x170
[   84.796366][    C0]  ? __cfi_dump_stack_lvl+0x8/0x8
[   84.801417][    C0]  ? debug_smp_processor_id+0x17/0x20
[   84.806818][    C0]  ? rcu_cblist_dequeue+0x6c/0xb0
[   84.811869][    C0]  print_address_description+0x71/0x200
[   84.817447][    C0]  print_report+0x4a/0x60
[   84.821888][    C0]  kasan_report+0x122/0x150
[   84.826463][    C0]  ? rcu_cblist_dequeue+0x6c/0xb0
[   84.831678][    C0]  __asan_report_load8_noabort+0x14/0x20
[   84.837418][    C0]  rcu_cblist_dequeue+0x6c/0xb0
[   84.842289][    C0]  rcu_do_batch+0x4bc/0xc30
[   84.846902][    C0]  ? rcu_core+0xf00/0xf00
[   84.851269][    C0]  rcu_core+0x486/0xf00
[   84.855436][    C0]  ? kvm_sched_clock_read+0x18/0x40
[   84.860662][    C0]  ? sched_clock+0x9/0x10
[   84.865011][    C0]  ? rcu_cpu_kthread_park+0x90/0x90
[   84.870240][    C0]  ? __this_cpu_preempt_check+0x13/0x20
[   84.875807][    C0]  ? rcu_softirq_qs+0xd5/0x340
[   84.880591][    C0]  ? __cfi_rcu_softirq_qs+0x10/0x10
[   84.885805][    C0]  ? __schedule+0xcbb/0x1700
[   84.890760][    C0]  rcu_core_si+0x9/0x10
[   84.894942][    C0]  handle_softirqs+0x1dd/0x5f0
[   84.899718][    C0]  ? __cfi_run_ksoftirqd+0x10/0x10
[   84.904842][    C0]  run_ksoftirqd+0x28/0x30
[   84.909281][    C0]  smpboot_thread_fn+0x48c/0x8e0
[   84.914245][    C0]  kthread+0x281/0x320
[   84.918327][    C0]  ? __cfi_smpboot_thread_fn+0x10/0x10
[   84.923805][    C0]  ? __cfi_kthread+0x10/0x10
[   84.928413][    C0]  ret_from_fork+0x1f/0x30
[   84.932838][    C0]  </TASK>
[   84.935866][    C0] 
[   84.938198][    C0] Allocated by task 1877:
[   84.942525][    C0]  kasan_set_track+0x4b/0x70
[   84.947128][    C0]  kasan_save_alloc_info+0x1f/0x30
[   84.952269][    C0]  __kasan_kmalloc+0x95/0xb0
[   84.957136][    C0]  __kmalloc+0xb4/0x1e0
[   84.961309][    C0]  l2tp_session_create+0x38/0xbd0
[   84.966368][    C0]  pppol2tp_connect+0xbf5/0x1640
[   84.971331][    C0]  __sys_connect+0x3da/0x460
[   84.975937][    C0]  __x64_sys_connect+0x7a/0x90
[   84.980715][    C0]  x64_sys_call+0x88d/0x9a0
[   84.985252][    C0]  do_syscall_64+0x4c/0xa0
[   84.989907][    C0]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   84.995913][    C0] 
[   84.998248][    C0] Freed by task 425:
[   85.002145][    C0]  kasan_set_track+0x4b/0x70
[   85.006756][    C0]  kasan_save_free_info+0x2b/0x40
[   85.011792][    C0]  ____kasan_slab_free+0x132/0x180
[   85.016925][    C0]  __kasan_slab_free+0x11/0x20
[   85.021752][    C0]  slab_free_freelist_hook+0xc2/0x190
[   85.027229][    C0]  __kmem_cache_free+0xb7/0x1b0
[   85.032098][    C0]  kfree+0x6f/0xf0
[   85.035836][    C0]  l2tp_session_put+0xaf/0x1a0
[   85.040624][    C0]  l2tp_session_delete+0x3df/0x4d0
[   85.046120][    C0]  l2tp_tunnel_del_work+0x199/0x410
[   85.051367][    C0]  process_one_work+0x717/0xc30
[   85.056240][    C0]  worker_thread+0xa4d/0x11d0
[   85.060939][    C0]  kthread+0x281/0x320
[   85.065021][    C0]  ret_from_fork+0x1f/0x30
[   85.069474][    C0] 
[   85.071800][    C0] Last potentially related work creation:
[   85.077689][    C0]  kasan_save_stack+0x3a/0x60
[   85.082386][    C0]  __kasan_record_aux_stack+0xb6/0xc0
[   85.087943][    C0]  kasan_record_aux_stack_noalloc+0xb/0x10
[   85.094418][    C0]  call_rcu+0xcf/0xf50
[   85.098503][    C0]  pppol2tp_release+0x1e3/0x2b0
[   85.103374][    C0]  sock_close+0xc9/0x220
[   85.107632][    C0]  __fput+0x1fd/0x8f0
[   85.111639][    C0]  ____fput+0x15/0x20
[   85.115649][    C0]  task_work_run+0x1e1/0x250
[   85.120250][    C0]  exit_to_user_mode_loop+0x9b/0xb0
[   85.125461][    C0]  exit_to_user_mode_prepare+0x87/0xd0
[   85.130942][    C0]  syscall_exit_to_user_mode+0x1a/0x30
[   85.136430][    C0]  do_syscall_64+0x58/0xa0
[   85.140863][    C0]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   85.146773][    C0] 
[   85.149107][    C0] Second to last potentially related work creation:
[   85.155701][    C0]  kasan_save_stack+0x3a/0x60
[   85.160406][    C0]  __kasan_record_aux_stack+0xb6/0xc0
[   85.165790][    C0]  kasan_record_aux_stack_noalloc+0xb/0x10
[   85.171620][    C0]  kvfree_call_rcu+0x8b/0x7a0
[   85.176322][    C0]  neigh_destroy+0x476/0x5b0
[   85.180921][    C0]  neigh_cleanup_and_release+0x76/0x1a0
[   85.186481][    C0]  neigh_flush_dev+0x79a/0x950
[   85.191250][    C0]  __neigh_ifdown+0x3f/0x400
[   85.195852][    C0]  neigh_ifdown+0x1f/0x30
[   85.200186][    C0]  rt6_disable_ip+0x878/0x8e0
[   85.204871][    C0]  addrconf_ifdown+0x15d/0x1950
[   85.209733][    C0]  addrconf_notify+0x39f/0xe30
[   85.214517][    C0]  raw_notifier_call_chain+0xa1/0x110
[   85.219896][    C0]  dev_close_many+0x325/0x4d0
[   85.224675][    C0]  unregister_netdevice_many+0x43f/0x1910
[   85.230416][    C0]  default_device_exit_batch+0x951/0x9f0
[   85.236070][    C0]  cleanup_net+0x630/0xb10
[   85.240502][    C0]  process_one_work+0x717/0xc30
[   85.245370][    C0]  worker_thread+0xa4d/0x11d0
[   85.250074][    C0]  kthread+0x281/0x320
[   85.254162][    C0]  ret_from_fork+0x1f/0x30
[   85.258592][    C0] 
[   85.260927][    C0] The buggy address belongs to the object at ffff88811001d000
[   85.260927][    C0]  which belongs to the cache kmalloc-512 of size 512
[   85.275038][    C0] The buggy address is located 400 bytes inside of
[   85.275038][    C0]  512-byte region [ffff88811001d000, ffff88811001d200)
[   85.288417][    C0] 
[   85.290744][    C0] The buggy address belongs to the physical page:
[   85.297157][    C0] page:ffffea0004400700 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x11001c
[   85.307425][    C0] head:ffffea0004400700 order:2 compound_mapcount:0 compound_pincount:0
[   85.315792][    C0] flags: 0x4000000000010200(slab|head|zone=1)
[   85.321902][    C0] raw: 4000000000010200 ffffea00043d5800 dead000000000003 ffff888100042f00
[   85.330939][    C0] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000
[   85.339698][    C0] page dumped because: kasan: bad access detected
[   85.346133][    C0] page_owner tracks the page as allocated
[   85.351855][    C0] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 289, tgid 289 (syz-executor), ts 22391075301, free_ts 22365054830
[   85.373056][    C0]  post_alloc_hook+0x1f5/0x210
[   85.377855][    C0]  prep_new_page+0x1c/0x110
[   85.382381][    C0]  get_page_from_freelist+0x2ca9/0x2d20
[   85.387965][    C0]  __alloc_pages+0x1fa/0x610
[   85.392584][    C0]  alloc_slab_page+0x6e/0xf0
[   85.397214][    C0]  new_slab+0x98/0x3e0
[   85.401307][    C0]  ___slab_alloc+0x70f/0xb70
[   85.405924][    C0]  __slab_alloc+0x5e/0xa0
[   85.408661][ T1886] bridge0: port 1(bridge_slave_0) entered blocking state
[   85.410277][    C0]  __kmem_cache_alloc_node+0x204/0x2d0
[   85.417405][ T1886] bridge0: port 1(bridge_slave_0) entered disabled state
[   85.422758][    C0]  kmalloc_trace+0x29/0xb0
[   85.422787][    C0]  inetdev_init+0x81/0x510
[   85.422807][    C0]  inetdev_event+0x1f4/0x10a0
[   85.435319][   T28] kauditd_printk_skb: 687 callbacks suppressed
[   85.435333][   T28] audit: type=1400 audit(1793731824.380:3176): avc:  denied  { read } for  pid=85 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1
[   85.438646][    C0]  raw_notifier_call_chain+0xa1/0x110
[   85.445238][   T28] audit: type=1400 audit(1793731824.380:3177): avc:  denied  { search } for  pid=85 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   85.449448][    C0]  call_netdevice_notifiers+0x119/0x190
[   85.472007][ T1886] device bridge_slave_0 entered promiscuous mode
[   85.476658][    C0]  register_netdevice+0x1186/0x1550
[   85.476682][    C0]  veth_newlink+0x66a/0xd60
[   85.476700][    C0] page last free stack trace:
[   85.498566][   T28] audit: type=1400 audit(1793731824.380:3178): avc:  denied  { write } for  pid=85 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   85.503752][    C0]  free_unref_page_prepare+0x81b/0x820
[   85.503782][    C0]  free_unref_page+0x93/0x530
[   85.511289][ T1886] bridge0: port 2(bridge_slave_1) entered blocking state
[   85.515296][    C0]  __free_pages+0x67/0x100
[   85.515330][    C0]  __free_slab+0xc7/0x1a0
[   85.515343][    C0]  __unfreeze_partials+0x15a/0x190
[   85.515356][    C0]  put_cpu_partial+0xa9/0x100
[   85.515369][    C0]  __slab_free+0x1c4/0x280
[   85.515388][    C0]  ___cache_free+0xbf/0xd0
[   85.515406][    C0]  qlist_free_all+0xc6/0x140
[   85.520499][ T1886] bridge0: port 2(bridge_slave_1) entered disabled state
[   85.524647][    C0]  kasan_quarantine_reduce+0x14a/0x170
[   85.524673][    C0]  __kasan_slab_alloc+0x24/0x80
[   85.546308][   T28] audit: type=1400 audit(1793731824.380:3179): avc:  denied  { add_name } for  pid=85 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   85.551404][    C0]  slab_post_alloc_hook+0x4f/0x2d0
[   85.556738][   T28] audit: type=1400 audit(1793731824.380:3180): avc:  denied  { create } for  pid=85 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   85.563107][    C0]  __kmem_cache_alloc_node+0x194/0x2d0
[   85.563140][    C0]  kmalloc_trace+0x29/0xb0
[   85.567795][   T28] audit: type=1400 audit(1793731824.380:3181): avc:  denied  { append open } for  pid=85 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   85.571854][    C0]  ref_tracker_alloc+0x16b/0x4a0
[   85.577615][ T1886] device bridge_slave_1 entered promiscuous mode
[   85.581600][    C0]  netdev_hold+0x80/0xc0
[   85.581624][    C0] 
[   85.581628][    C0] Memory state around the buggy address:
[   85.586315][   T28] audit: type=1400 audit(1793731824.380:3182): avc:  denied  { getattr } for  pid=85 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   85.590412][    C0]  ffff88811001d080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   85.645030][ T1886] bridge0: port 2(bridge_slave_1) entered blocking state
[   85.658383][    C0]  ffff88811001d100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[   85.658398][    C0] >ffff88811001d180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   85.658406][    C0]                          ^
[   85.658413][    C0]  ffff88811001d200: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[   85.658422][    C0]  ffff88811001d280: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[   85.658438][    C0] ==================================================================
[   85.663889][ T1886] bridge0: port 2(bridge_slave_1) entered forwarding state
[   85.668319][    C0] Disabling lock debugging due to kernel taint
[   85.691387][ T1886] bridge0: port 1(bridge_slave_0) entered blocking state
[   85.760088][  T939] usb 9-1: USB disconnect, device number 5
[   85.761303][ T1886] bridge0: port 1(bridge_slave_0) entered forwarding state
[   85.781326][   T28] audit: type=1400 audit(1793731824.690:3183): avc:  denied  { write } for  pid=279 comm="syz-executor" path="pipe:[14767]" dev="pipefs" ino=14767 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1
[   85.856047][  T450] EXT4-fs (loop6): unmounting filesystem.
[   86.033975][ T1881] tipc: Resetting bearer <eth:syz_tun>
[   86.040682][ T1881] tipc: Disabling bearer <eth:syz_tun>
[   86.402648][  T391] bridge0: port 1(bridge_slave_0) entered disabled state
[   86.412403][  T391] bridge0: port 2(bridge_slave_1) entered disabled state
[   86.542903][   T10] device bridge_slave_1 left promiscuous mode
[   86.549032][   T10] bridge0: port 2(bridge_slave_1) entered disabled state
[   86.556638][   T10] device bridge_slave_0 left promiscuous mode
[   86.562853][   T10] bridge0: port 1(bridge_slave_0) entered disabled state
[   86.570711][   T10] device veth1_macvtap left promiscuous mode
[   86.943697][   T10] tipc: Disabling bearer <udp:syz2>
[   86.949061][   T10] tipc: Left network mode
[   87.433027][   T10] device bridge_slave_1 left promiscuous mode
[   87.439170][   T10] bridge0: port 2(bridge_slave_1) entered disabled state
[   87.446643][   T10] device bridge_slave_0 left promiscuous mode
[   87.452897][   T10] bridge0: port 1(bridge_slave_0) entered disabled state
[   87.460556][   T10] device bridge_slave_1 left promiscuous mode
[   87.466967][   T10] bridge0: port 2(bridge_slave_1) entered disabled state
[   87.474490][   T10] device bridge_slave_0 left promiscuous mode
[   87.480585][   T10] bridge0: port 1(bridge_slave_0) entered disabled state
[   87.488484][   T10] device bridge_slave_1 left promiscuous mode
[   87.494647][   T10] bridge0: port 2(bridge_slave_1) entered disabled state
[   87.502137][   T10] device bridge_slave_0 left promiscuous mode
[   87.508415][   T10] bridge0: port 1(bridge_slave_0) entered disabled state
[   87.516441][   T10] device bridge_slave_1 left promiscuous mode
[   87.522825][   T10] bridge0: port 2(bridge_slave_1) entered disabled state
[   87.530207][   T10] device bridge_slave_0 left promiscuous mode
[   87.536558][   T10] bridge0: port 1(bridge_slave_0) entered disabled state
[   87.544825][   T10] device veth1_macvtap left promiscuous mode
[   87.550846][   T10] device veth0_vlan left promiscuous mode
[   87.557135][   T10] device veth1_macvtap left promiscuous mode
[   87.563172][   T10] device veth0_vlan left promiscuous mode
[   87.569188][   T10] device veth1_macvtap left promiscuous mode
[   87.575344][   T10] device veth0_vlan left promiscuous mode