last executing test programs:

14.430655784s ago: executing program 2 (id=36):
mkdir(&(0x7f0000000100)='./file0\x00', 0x1ff)
prctl$PR_GET_SPECULATION_CTRL(0x35, 0x0, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x2)
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000001000)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3a8, 0x0, 0x148, 0x1e0, 0x278, 0x310, 0xb0, 0x148, 0x1e0, 0x278, 0x310, 0x6, 0x0, {[{{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x6}, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x408)
syz_emit_ethernet(0x36, &(0x7f0000001440)={@random="b399a111ca7e", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x9, 0x28, 0x68, 0x0, 0x0, 0x6, 0x0, @local, @local}, {{0x2, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x20, 0x6}}}}}}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000080)=@file={0x0, './file2\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000300), 0x651, 0x0)
recvmmsg(r2, &(0x7f0000000340), 0x4000087, 0x2, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0xfffbfff9, 0x2000000, 0x11, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f00000003c0)='./file1\x00', 0x200400, &(0x7f0000000400)={[{@stripe={'stripe', 0x3d, 0x4}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x8}}, {@block_validity}, {@norecovery}, {@dioread_nolock}, {@oldalloc}, {@oldalloc}, {@sysvgroups}, {@norecovery}]}, 0x83, 0x566, &(0x7f0000000940)="$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")
sched_rr_get_interval(r0, &(0x7f0000000ec0))
ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, 0x0)
syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x10000, &(0x7f0000000540)=ANY=[@ANYBLOB='nodots,showexec,dots,uid=', @ANYRESHEX=0xee00, @ANYBLOB=',check=normal,fmask=00000000000000000000002,sys_immutable,nodots,dots,nodots,nodots,nodots,fmask=00000000000000000177777,dots,quiet,nodots,nodots,check=relaxed,nodots,umask=00000000000000000076645,nodots,nodots,nfs=stale_rw,nodots,smackfsfloor=fmask,defcontext=unconfined_u,permit_directio,permit_directio,fscontext=staff_u,seclabel,euid>', @ANYRESDEC, @ANYRES64], 0x1, 0x1f5, &(0x7f0000000740)="$eJzs3cFqE1EUANCbmCYTcdGdIAgjLnRV1C+oSAUxIFSy0J2gK7NqN6mb9jP8Bf/LD5CuspEncSadmKYxBDKj7Tmb3pn7Xt+7M2SSTW5SFL7f/RpZ1or2fuzHpBW70Y6ZswAArpNJSvEjFZreCwBQjzXe/3/WvCUAYMvevnv/+vlgcHCY51nE+dl4OB4Wf4v8y1eDgyf5b7vVrPPxeHjrIv80X/zsMM3vxO0y/6yYn1+kuxEx7Mbjh0V+mnvxZpD/Ob8XH7dcOwAAAAAAAAAAAAAAAAAAAAAANOV+5DNL+/vs7S3m+2W+OJrrD7TQv6cT9zrlYdUeKJ3WURQAAAAAAAAAAAAAAAAAAAD8Z45Pvnz+MBp9OqqCXkTMn+ksGXN10Cr/8VqDmw/asdn0flnmBou2yku03QL7y2/uOkF0/pW7s2mQ17BWf+XlTWkaLH8VzNpiXDm9GxGrV390uOnmJyml0bcHR8cnkVYOrp4RvVqfSAAAAAAAAAAAAAAAAAAAcHPNfev7kqyJDQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAA6rf/58Gl8+sDE4j4k78dfBsrZ3IGq0VAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA6+tXAAAA//85ziI4")
r4 = openat(0xffffffffffffff9c, &(0x7f0000000f00)='./file2\x00', 0x942, 0x0)
pwrite64(r4, &(0x7f0000000f40)='a', 0x200000c1, 0x2328)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x28, 0x1, 0x4, 0x3, 0x0, 0x0, {0x3, 0x0, 0x3}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_MODE={0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x40080)
rename(&(0x7f0000000f80)='./file2\x00', &(0x7f0000000fc0)='./file1\x00')

13.356417563s ago: executing program 2 (id=40):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x8, &(0x7f0000000000)=@raw=[@map_fd={0x18, 0x5}, @jmp={0x5, 0x1, 0x7, 0x0, 0x1, 0xffffffffffffffe0, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0xde8c}, @ldst={0x0, 0x0, 0x1, 0x2, 0x8, 0xffffffffffffffe0, 0xfffffffffffffffc}, @call={0x85, 0x0, 0x0, 0x29}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], &(0x7f0000000040)='GPL\x00', 0x7, 0x0, &(0x7f0000000080), 0x41000, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x3, 0x1}, 0x8, 0x10, &(0x7f0000000100)={0x0, 0x9, 0x3, 0x7fffffff}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000140)=[{0x2, 0x4, 0x2, 0xc}], 0x10, 0x101}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001480)={r0, 0x0, 0x1f, 0x1000, &(0x7f0000000240)="85d175ef708bff6d2424ac2e796250386a91ec6fe9851ac930c6f94a21f11e", &(0x7f0000000280)=""/4096, 0xd7, 0x0, 0xf2, 0xc6, &(0x7f0000001280)="ed740a475788fa22fc13dc1bb5c97b23e50e40ba5ac89b215c071c68c7f29229f79144ef6bf7bbe9b952cd5d08f8bb620f88a2a7d7daaafada86e733389812649077bc64f53c8916c5d9de4759592f6557c1b21d02103ba5a538dd3aef25381cadd9d7c8bccf54dccc65752e505fc9fd647c0a82755d30dd933d66798bca0ec143a3ea280c2ef8ecc047d2da0ec66be96289e749c66dee9de47a2ac5a77dd28be644f62db0c018bb98d547cb19196b7324f7405bf3f849b3a91c1e4a7872c61918fad093a0b710622ecb877f30f60884fa99e244f2d947925f6b827e08ba9e00ed42451c1f13bb94f5fa7468d424e281544d", &(0x7f0000001380)="1019a99209a5c3d490c9a3338ed3f261b5dc3202835c9e1da2cab15e181cb0b7fd2de165dd4ec071c221cffcd71e8412388ddd4828006f4d86abe99962f7927a22493447f6d9e98b494858d9420b90acdd2c7a207e900f1cf57dccd8f6f6aaf0e49245780dc4af354881be24822d7a192358944ecf72ca6c5626ee247e99e4735bd01e5302dc7e8c5adc1b758f3540a7cb8f7b1d34f60aebf7ed5bfa910fd2ec134be780f23cc917f9a05be55e34ccb2072e2573a0cfff7e789458906c4fa7e35c6b084fbc1c", 0x1, 0x0, 0x8}, 0x50)
r1 = getpid()
ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000001500)={0xfffffffffffffffe, <r2=>r0, 'id1\x00'})
bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000001580)=r2, 0x4)
r3 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f00000015c0)={0x4, 0x2}, 0x4)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000001700)={'gre0\x00', &(0x7f0000001680)={'sit0\x00', <r4=>0x0, 0x8000, 0x700, 0x200, 0x933, {{0xe, 0x4, 0x1, 0x0, 0x38, 0x65, 0x0, 0xb9, 0x4, 0x0, @private=0xa010101, @local, {[@timestamp_prespec={0x44, 0x24, 0xd6, 0x3, 0x2, [{@multicast2, 0x1}, {@private=0xa010101, 0x6}, {@broadcast, 0x5b}, {@multicast1, 0x6}]}]}}}}})
sendto$packet(0xffffffffffffffff, &(0x7f0000001600)="92ac296f5be501f1c5e6e6bdcd12c11712593543303e0ae4ad7c4dd4276d937233da62fcb32ffd0c0fb91ecc11a21a52439379cb60b40f8f55fd3424e367ae1ce76b41e33d4e32ea068e5854297979b06b67cd653d8743b545b49b6b3739bcfe7f1e80696e04dc2f4589712060e57648bdeba418370d1a51c56a0105672fa3", 0x7f, 0x0, &(0x7f0000001740)={0x11, 0x2, r4, 0x1, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14)
syz_emit_ethernet(0x49, &(0x7f0000001780)={@empty, @random="5051c579a376", @val={@void, {0x8100, 0x4, 0x1, 0x4}}, {@mpls_uc={0x8847, {[{0xf}, {0xffff8}, {0x8e7, 0x0, 0x1}], @llc={@llc={0xbc, 0xbc, "77fc", "26648d804a0aec2fbfa0962eafa8e4ea47cce6e99214842521ca3574c961e5eaa1bba11e850e70"}}}}}}, &(0x7f0000001800)={0x1, 0x3, [0xe2c, 0x3ec, 0x586, 0x513]})
bpf$MAP_CREATE(0x0, &(0x7f0000001840)=@bloom_filter={0x1e, 0x6, 0x437, 0x9, 0xa040, r2, 0x80000000, '\x00', r4, r2, 0x4, 0x4, 0x4, 0x4, @value=r2}, 0x50)
socketpair$unix(0x1, 0x4, 0x0, &(0x7f00000018c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x400454cd, 0x4)
r6 = getpgid(r1)
capset(&(0x7f0000001900)={0x20071026, r6}, &(0x7f0000001940)={0x0, 0xc89, 0x3933eedf, 0x2, 0xc, 0x6fc5b106})
clock_gettime(0x0, &(0x7f0000002d00)={<r7=>0x0, <r8=>0x0})
recvmmsg(r5, &(0x7f0000002c80)=[{{&(0x7f0000001980)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f0000001a40)=[{&(0x7f0000001a00)=""/47, 0x2f}], 0x1}}, {{&(0x7f0000001a80)=@x25, 0x80, &(0x7f0000002bc0)=[{&(0x7f0000001b00)=""/160, 0xa0}, {&(0x7f0000001bc0)=""/4096, 0x1000}], 0x2, &(0x7f0000002c00)=""/70, 0x46}, 0x1}], 0x2, 0x1, &(0x7f0000002d40)={r7, r8+60000000})
r9 = syz_btf_id_by_name$bpf_lsm(&(0x7f0000002d80)='bpf_lsm_bprm_committed_creds\x00')
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000002dc0)=r9, 0x4)
sched_setaffinity(r6, 0x8, &(0x7f0000002e00)=0xe0bc)
getresuid(&(0x7f0000002e40), &(0x7f0000002e80)=<r10=>0x0, &(0x7f0000002ec0))
setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000002f00)={{{@in=@empty, @in6=@dev={0xfe, 0x80, '\x00', 0xd}, 0x4e24, 0x9, 0x4e21, 0x0, 0xa, 0x20, 0xa0, 0x2b, r4, r10}, {0x2, 0x100, 0x5, 0x7fff, 0x1, 0x86, 0x1000, 0xa42}, {0xfff, 0x9, 0x101, 0x7fff}, 0x1ff, 0x6e6bb4, 0x0, 0x0, 0x0, 0x2}, {{@in6=@empty, 0x4d3, 0x32}, 0x0, @in=@multicast1, 0x34ff, 0x3, 0x2, 0x4, 0x9, 0x5, 0x4}}, 0xe8)
r11 = getpid()
ptrace$ARCH_GET_UNTAG_MASK(0x1e, r11, &(0x7f0000003000), 0x4001)
r12 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_SET(r12, &(0x7f0000003100)={&(0x7f0000003040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000030c0)={&(0x7f0000003080)={0x3c, 0x3e9, 0x4, 0xdb8, 0x25dfdbfb, {0x11, 0x0, 0x0, r11, 0x8, 0x1, 0xc0000, 0xfe, 0x0, 0x1, 0x7}, ["", "", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000044}, 0x4000000)
setsockopt$inet_icmp_ICMP_FILTER(r2, 0x1, 0x1, &(0x7f0000003140)={0x4}, 0x4)
syz_open_dev$MSR(&(0x7f0000003180), 0x0, 0x0)
sendmsg$GTP_CMD_GETPDP(r2, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x1c, 0x0, 0x20, 0x70bd27, 0x25dfdbff, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010102}]}, 0x1c}, 0x1, 0x0, 0x0, 0x81}, 0x40000)
sendmsg$nl_generic(r2, &(0x7f0000003500)={&(0x7f00000032c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000034c0)={&(0x7f0000003300)={0x1ac, 0x2a, 0x20, 0x70bd2b, 0x25dfdbfd, {0x14}, [@nested={0x73, 0x101, 0x0, 0x1, [@generic="0d17d7b1012cea54998842e12bfc3e668371078acc1a3087be771e52c20507a54e5d49da1cebcc0634db0bf1f8ea1470c9fc663b53e161f58ec4c8069ea85b68099bb7d22ab92ad4a7621999cc72f5fda142b2df69bf890e15bb49", @nested={0x4, 0x4e}, @nested={0x4, 0x71}, @typed={0xc, 0x81, 0x0, 0x0, @u64=0x1}]}, @nested={0x106, 0x107, 0x0, 0x1, [@typed={0x8, 0x141, 0x0, 0x0, @u32=0x4}, @generic="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"]}, @generic="a28747c825f238511ccf2872455920cae86b71f4a14c93fe4f"]}, 0x1ac}, 0x1, 0x0, 0x0, 0x4800}, 0x4a000)

13.079724642s ago: executing program 2 (id=42):
syz_open_procfs(0x0, &(0x7f0000000000)='net/vlan/vlan0\x00')
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
syz_emit_ethernet(0x37, &(0x7f00000002c0)={@local, @empty, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "182325", 0x1, 0x2c, 0x0, @local, @local, {[], "b9"}}}}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000180), 0x54)
ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r0, 0x8982, &(0x7f0000000080)={0x1, 'wlan0\x00'})
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000340), 0xffffffffffffffff)
sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, r2, 0x101, 0x70bd26, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @local}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x10)
r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r3, 0x54a2)
mount$tmpfs(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000240), 0x80, &(0x7f0000000280)={[], [{@flag='rw'}]})
epoll_create1(0x0)
exit(0xfffffffffffffffb)
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000200)={0x0, &(0x7f0000000040)})
close_range(r4, 0xffffffffffffffff, 0x0)
mount(&(0x7f0000000440)=@rnullb={'/dev/syzrnull', 0x0}, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='romfs\x00', 0x204004, 0x0)

12.2134386s ago: executing program 2 (id=43):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x8, &(0x7f0000000240)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0xfffffffffffffff8}}, {@errors_remount}]}, 0x2, 0x54a, &(0x7f0000011600)="$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")
madvise(0xfffffffffffffffc, 0x0, 0x9)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x5, 0x2, 0x7, 0x0, 0x1, 0x10000}, 0x50)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xb, 0x8, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0xfffffff8}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xd, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@call={0x85, 0x0, 0x0, 0x7}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000400)={r1, r0}, 0xc)
syz_mount_image$exfat(0x0, &(0x7f0000011b80)='./bus\x00', 0xe1c00, 0x0, 0x0, 0x0, &(0x7f0000011bc0))
setxattr$trusted_overlay_origin(&(0x7f0000000900)='./file0\x00', &(0x7f0000000940), 0x0, 0x0, 0x1)
mount$overlay(0x0, &(0x7f00000009c0)='./file0\x00', &(0x7f0000000a00), 0x8, &(0x7f0000000a40)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@index_on}]})

11.454755348s ago: executing program 2 (id=48):
r0 = userfaultfd(0x801)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3})
ppoll(&(0x7f0000000280)=[{r0, 0x300}, {r0, 0x8}, {r0, 0x8280}, {r0, 0x8000}], 0x4, 0x0, &(0x7f0000000300)={[0x8]}, 0x8)
ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000240)={{&(0x7f0000ff9000/0x4000)=nil, 0x4000}})
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
socket$netlink(0x10, 0x3, 0x0)
unshare(0x4000400)
r1 = socket$packet(0x11, 0x3, 0x300)
r2 = socket(0x10, 0x2, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), r2)
getsockname$packet(r2, &(0x7f00000001c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newlink={0x40, 0x10, 0x439, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, 0x9901, 0x49a41}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @remote}, @IFLA_IPTUN_TTL={0x5}]}}}]}, 0x40}}, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r4 = socket$inet6(0xa, 0x3, 0x38)
connect$inet6(r4, &(0x7f0000000b00)={0xa, 0x4e23, 0x0, @loopback, 0xb}, 0x1c)
socket$packet(0x11, 0x3, 0x300)
writev(r4, &(0x7f0000000bc0)=[{&(0x7f0000000c00)=',', 0xf338}], 0x1)
sendto$packet(r1, &(0x7f0000000680)="05d936277c6f5422007f83477ca1b278e3e4018a34e7bfd3de1a00ad6762646c95c716727eb53bcc", 0x28, 0x40880, &(0x7f00000006c0)={0x11, 0x86dd, r3, 0x1, 0x4, 0x6, @local}, 0x14)

10.959311758s ago: executing program 2 (id=53):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x19, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf250000000000000000000001070000000000000000000000000000ffffe000000200000000000004000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0100000000000000040000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000300000000000000000000000020000000000000000000000000000000000000010000030000000044000500fc010000000000000000000000000000000000022b0000000a000000fe8000000000000000000000000000aa0000000001"], 0xfc}}, 0x0) (async)
r2 = socket$inet(0x2, 0x2, 0x1)
setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000300)=0xe095, 0x4)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000a00)={@private0, 0x300, 0x0, 0x2, 0x9, 0x0, 0x4}, 0x20) (async)
r4 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000a40)={@private0, 0x300, 0x0, 0x2, 0x9, 0x0, 0x4}, 0x20) (async, rerun: 32)
sendmsg$inet(r2, &(0x7f0000000340)={&(0x7f0000000380)={0x2, 0x4e24, @broadcast}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000440)="f4a30ea7f0c8", 0x6}], 0x2, &(0x7f0000000480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @broadcast}}}], 0x20}, 0x810) (async, rerun: 32)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r6=>0x0})
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="38000000550001002cbd7000fedbdf2507000000", @ANYRES32=r6, @ANYBLOB="20000100", @ANYRES32=r6, @ANYBLOB="01020100e000f40240ab14d0ad0000000000000008"], 0x38}, 0x1, 0x0, 0x0, 0x6000010}, 0x40080c0) (async, rerun: 64)
r7 = fsopen(&(0x7f0000000600)='ext2\x00', 0x1) (rerun: 64)
fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) (async, rerun: 64)
r8 = fsmount(r7, 0x0, 0x80) (rerun: 64)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={r0, r8, 0x16, 0x0, @void}, 0x10) (async)
fsopen(&(0x7f0000000140)='rootfs\x00', 0x0) (async)
socket$packet(0x11, 0x3, 0x300) (async)
ioctl(0xffffffffffffffff, 0xc138fd03, 0x0) (async)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0) (async)
openat(0xffffffffffffff9c, 0x0, 0x185042, 0x15)
syz_usb_connect$midi(0x5, 0x4f, &(0x7f0000000680)=ANY=[@ANYBLOB="12011003000000403512010440000102030109023d00010118980409040000020103000609058e0b0b000fd70c03c602052501", @ANYRES32], &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0}) (async, rerun: 64)
r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x882, 0x0) (async, rerun: 64)
socket$key(0xf, 0x3, 0x2)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) (async, rerun: 32)
r10 = socket$nl_xfrm(0x10, 0x3, 0x6) (rerun: 32)
sendmsg$nl_xfrm(r10, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000a80)=ANY=[@ANYBLOB="60010000100033060000000000000000fc000000000000000000000000000000fc0100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414000000000000000000000000000000000032000000fe80000000000000000000000000000b00000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000a000100000000000000000048000200656362286369706865725f6e756c6c290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000028001a00ac14142c000000000000000000000000ac1e00010000000000000000000000000a000605"], 0x160}}, 0x0) (async)
ioctl$USBDEVFS_CLEAR_HALT(0xffffffffffffffff, 0x80045515, &(0x7f00000007c0)={0x5})
write$tun(r9, &(0x7f0000000880)={@void, @void, @ipv4=@udp={{0x5, 0x4, 0x0, 0x1c, 0xb0, 0x65, 0x0, 0x20, 0x11, 0x0, @private=0xa010101, @local}, {0x4e22, 0x4e24, 0x9c, 0x0, @wg=@initiation={0x1, 0x2, "b95facef5ed1ba86122d797a7adb40b96ead36401c7c07ec76a9e5ec7dd1c935", "ebd7e0aa555cd134e94e698ea1f62cfd7cffba6ee9e10c75ee9a52b0b59534517a99a8f7e11d5b576d8028789336a69d", "a9bd6c25a822868a85e496d811f09a17738ddec2b861da47a4775928", {"3eddf26455538971ad6de9879ebf8a84", "49d1307cd5394d1f90a33766def63844"}}}}}, 0xb0)

10.957712259s ago: executing program 32 (id=53):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x19, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf250000000000000000000001070000000000000000000000000000ffffe000000200000000000004000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0100000000000000040000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000300000000000000000000000020000000000000000000000000000000000000010000030000000044000500fc010000000000000000000000000000000000022b0000000a000000fe8000000000000000000000000000aa0000000001"], 0xfc}}, 0x0) (async)
r2 = socket$inet(0x2, 0x2, 0x1)
setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000300)=0xe095, 0x4)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000a00)={@private0, 0x300, 0x0, 0x2, 0x9, 0x0, 0x4}, 0x20) (async)
r4 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000a40)={@private0, 0x300, 0x0, 0x2, 0x9, 0x0, 0x4}, 0x20) (async, rerun: 32)
sendmsg$inet(r2, &(0x7f0000000340)={&(0x7f0000000380)={0x2, 0x4e24, @broadcast}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000440)="f4a30ea7f0c8", 0x6}], 0x2, &(0x7f0000000480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @broadcast}}}], 0x20}, 0x810) (async, rerun: 32)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r6=>0x0})
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="38000000550001002cbd7000fedbdf2507000000", @ANYRES32=r6, @ANYBLOB="20000100", @ANYRES32=r6, @ANYBLOB="01020100e000f40240ab14d0ad0000000000000008"], 0x38}, 0x1, 0x0, 0x0, 0x6000010}, 0x40080c0) (async, rerun: 64)
r7 = fsopen(&(0x7f0000000600)='ext2\x00', 0x1) (rerun: 64)
fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) (async, rerun: 64)
r8 = fsmount(r7, 0x0, 0x80) (rerun: 64)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={r0, r8, 0x16, 0x0, @void}, 0x10) (async)
fsopen(&(0x7f0000000140)='rootfs\x00', 0x0) (async)
socket$packet(0x11, 0x3, 0x300) (async)
ioctl(0xffffffffffffffff, 0xc138fd03, 0x0) (async)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0) (async)
openat(0xffffffffffffff9c, 0x0, 0x185042, 0x15)
syz_usb_connect$midi(0x5, 0x4f, &(0x7f0000000680)=ANY=[@ANYBLOB="12011003000000403512010440000102030109023d00010118980409040000020103000609058e0b0b000fd70c03c602052501", @ANYRES32], &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0}) (async, rerun: 64)
r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x882, 0x0) (async, rerun: 64)
socket$key(0xf, 0x3, 0x2)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) (async, rerun: 32)
r10 = socket$nl_xfrm(0x10, 0x3, 0x6) (rerun: 32)
sendmsg$nl_xfrm(r10, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000a80)=ANY=[@ANYBLOB="60010000100033060000000000000000fc000000000000000000000000000000fc0100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414000000000000000000000000000000000032000000fe80000000000000000000000000000b00000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000a000100000000000000000048000200656362286369706865725f6e756c6c290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000028001a00ac14142c000000000000000000000000ac1e00010000000000000000000000000a000605"], 0x160}}, 0x0) (async)
ioctl$USBDEVFS_CLEAR_HALT(0xffffffffffffffff, 0x80045515, &(0x7f00000007c0)={0x5})
write$tun(r9, &(0x7f0000000880)={@void, @void, @ipv4=@udp={{0x5, 0x4, 0x0, 0x1c, 0xb0, 0x65, 0x0, 0x20, 0x11, 0x0, @private=0xa010101, @local}, {0x4e22, 0x4e24, 0x9c, 0x0, @wg=@initiation={0x1, 0x2, "b95facef5ed1ba86122d797a7adb40b96ead36401c7c07ec76a9e5ec7dd1c935", "ebd7e0aa555cd134e94e698ea1f62cfd7cffba6ee9e10c75ee9a52b0b59534517a99a8f7e11d5b576d8028789336a69d", "a9bd6c25a822868a85e496d811f09a17738ddec2b861da47a4775928", {"3eddf26455538971ad6de9879ebf8a84", "49d1307cd5394d1f90a33766def63844"}}}}}, 0xb0)

8.381503502s ago: executing program 3 (id=75):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$XFS_IOC_BULKSTAT(0xffffffffffffffff, 0x8040587f, &(0x7f0000000140)={{0x9, 0x1, 0x4, 0x8000, 0x8}, &(0x7f0000000300)=[{}, {}, {}, {}, {}, {}, {}]})
socketpair$tipc(0x1e, 0x2, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000840)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000880)=0x8)
sched_setaffinity(0x0, 0x0, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x1, &(0x7f00000008c0)=0x5)
pipe(&(0x7f0000000900)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
write(r4, &(0x7f0000000940), 0x11000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
munmap(&(0x7f0000002000/0x1000)=nil, 0x1000)
vmsplice(r3, &(0x7f0000000980)=[{&(0x7f00000009c0), 0x3528a9c0}], 0x1, 0x0)
r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000a00), 0x2, 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000000a40)='./file0\x00', 0x1000000, &(0x7f0000000a80)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@default_permissions}]}}, 0x1, 0x0, 0x0)
read$FUSE(r5, &(0x7f0000000b40)={0x2020, 0x0, <r6=>0x0}, 0x2020)
write$FUSE_INIT(r5, &(0x7f0000002b80)={0x50, 0x0, r6, {0x7, 0x2b, 0x7, 0x800, 0x101, 0x2, 0x2, 0x3ff, 0x0, 0x0, 0x80}}, 0x50)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x40000, 0x8000})
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="400000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100736974000c00028008000100", @ANYRES32, @ANYBLOB="0800030020"], 0x40}}, 0x0)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r7, 0x8982, &(0x7f0000000080)={0x2, 'ip_vti0\x00', {0x3}, 0xfff})

7.839897747s ago: executing program 3 (id=76):
r0 = syz_mount_image$ext4(&(0x7f0000000e80)='ext4\x00', &(0x7f0000000ec0)='./file0\x00', 0x10008, &(0x7f0000000f00)={[{@debug}, {@resuid={'resuid', 0x3d, 0xee01}}]}, 0xff, 0x49e, &(0x7f0000000f40)="$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")
syz_usb_connect(0x0, 0x24, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x6, 0x6f, 0x9, 0x8, 0xff3a, 0x7e49, 0x7977, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x6, 0x0, 0x0, "", [{{0x9, 0x4, 0x76, 0x0, 0x0, 0x8, 0x3, 0x50}}]}}]}}, 0x0)
r1 = signalfd4(r0, &(0x7f0000000000)={[0x3]}, 0x8, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r2)
r4 = syz_open_procfs(0x0, &(0x7f0000000280)='net/vlan/vlan1\x00')
pread64(r4, &(0x7f0000002500)=""/102400, 0x19000, 0xffffffff8)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x2c, r3, 0x200, 0x170bd26, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x5}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008000}, 0x4044080)
sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, r3, 0x100, 0x70bd27, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x7, 0x3a}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000001400)='./file0\x00', 0x182)
r5 = open$dir(&(0x7f0000001440)='./file0\x00', 0x101900, 0x24)
unlinkat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x200)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r5, 0x800c6613, &(0x7f00000024c0)=@v2={0x2, @aes256, 0x1a, '\x00', @b})
syz_mount_image$ext4(&(0x7f0000000e80)='ext4\x00', &(0x7f0000000ec0)='./file0\x00', 0x10008, &(0x7f0000000f00)={[{@debug}, {@resuid={'resuid', 0x3d, 0xee01}}]}, 0xff, 0x49e, &(0x7f0000000f40)="$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") (async)
syz_usb_connect(0x0, 0x24, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x6, 0x6f, 0x9, 0x8, 0xff3a, 0x7e49, 0x7977, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x6, 0x0, 0x0, "", [{{0x9, 0x4, 0x76, 0x0, 0x0, 0x8, 0x3, 0x50}}]}}]}}, 0x0) (async)
signalfd4(r0, &(0x7f0000000000)={[0x3]}, 0x8, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r2) (async)
syz_open_procfs(0x0, &(0x7f0000000280)='net/vlan/vlan1\x00') (async)
pread64(r4, &(0x7f0000002500)=""/102400, 0x19000, 0xffffffff8) (async)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x2c, r3, 0x200, 0x170bd26, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x5}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008000}, 0x4044080) (async)
sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, r3, 0x100, 0x70bd27, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x7, 0x3a}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x1) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000001400)='./file0\x00', 0x182) (async)
open$dir(&(0x7f0000001440)='./file0\x00', 0x101900, 0x24) (async)
unlinkat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x200) (async)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r5, 0x800c6613, &(0x7f00000024c0)=@v2={0x2, @aes256, 0x1a, '\x00', @b}) (async)

7.216785681s ago: executing program 0 (id=78):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000cc1ef420890b070064ef000004010902"], 0x0)
r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x801, 0x0)
r2 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)={0x2000001f})
poll(&(0x7f0000000380)=[{r2, 0x2120}], 0x1, 0x1)
syz_usb_disconnect(r0)
syz_usb_connect$sierra_net(0x6, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, "", {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0xa, 0x2, 0x20, 0xe, 0x1, 0x3}, {0x9, 0x5, 0x6, 0x2, 0x8, 0x3, 0x9, 0xf8}, {0x9, 0x5, 0x5, 0x3, 0x200, 0x6, 0x3, 0x8}}}}}}]}}, 0x0)
r3 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8)
syz_emit_ethernet(0x2a, &(0x7f0000000080)={@broadcast, @remote, @void, {@generic={0x806, "ab8fa1790b8f9c8f61d0d77551bbaf3fb722313fb9cfe9d3c4e63e30"}}}, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0b0000007f000000010001004900000001000000", @ANYRES32, @ANYBLOB="000000000000ee42183af439586c0000000000209f0f6e5f9c8297ee52b16978ace378309d1a661754c12d7ad92006721d656b8b2f2a54d6329033536a7ee0c2bb2207730753d5e003219c6b34f16535694d67c6059ed155b075333e37e6e6ca2394597eaac5ee465db556aaab1701000000000000802a2313531ff9339fa069b03780a38eda11dc5ebbd8f883ed7c33d6be38499418df5c3d094c2b7f361aa6fdd9438e70fec1d957a6075f6249608b011a4a7e123740df4887b7fbe94511dabbd4abebae3689ea5f7b6ea3bca689d7afc0ef40e9790255099d27fdc81f833c373e000000", @ANYRESOCT=r3, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000aa74412cbdde0ae879a7aa702b6b5402454b70ca"], 0x50)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000100)={r4, &(0x7f0000000180), &(0x7f00000001c0)=""/14, 0x2}, 0x20)
syz_usb_control_io$printer(r0, 0x0, 0x0)

5.630654733s ago: executing program 3 (id=83):
r0 = syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x42, &(0x7f0000000240), 0xfe, 0x250, &(0x7f0000000280)="$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")
r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./file1\x00', 0x141442, 0x40)
fallocate(r1, 0x0, 0xfff, 0x9)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./file1\x00', 0x101042, 0x1d8)
fstat(r0, &(0x7f0000000100))
r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0)
ioctl$TCSBRKP(r3, 0x5425, 0xfffffffffffffeff)
pwrite64(r2, &(0x7f0000000840)='2', 0xfdef, 0xc00)
mkdirat(0xffffffffffffff9c, &(0x7f00000007c0)='./file0\x00', 0x181)
mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./bus\x00', 0x1c)
mount$overlay(0x0, &(0x7f00000009c0)='./bus\x00', &(0x7f0000000a00), 0x8, &(0x7f0000000a40)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './cgroup'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
chdir(&(0x7f0000000a80)='./bus\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000ac0)='./file0\x00', 0x1c1)
r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000b00)='./file0\x00', 0x0, 0x0)
lseek(r4, 0x0, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xc, 0x1c, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000001509010000000000b500f8ffffff000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000000a36c00850000001700000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000580)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000880)=@newqdisc={0x8c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x5c, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x4, 0x7fffffffffffffff, 0x0, 0x1000, 0xc, 0x215}}, @TCA_NETEM_RATE={0x14, 0x6, {0x80000001, 0x4, 0x6, 0x2af2}}]}}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000940)={0x1b, 0x0, 0x0, 0x84f5, 0x0, r2, 0x6, '\x00', r7, r1, 0x4, 0x5, 0x2}, 0x50)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
write$P9_RRENAME(r1, &(0x7f00000005c0)={0x7, 0x15, 0x2}, 0x7)

5.610089786s ago: executing program 1 (id=85):
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth0\x00'})
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0xf3f, 0x4)
r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x5)
ioctl$KVM_CAP_VM_TYPES(r1, 0x4068aea3, &(0x7f0000000000)={0xeb, 0x0, 0x1})
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r3 = dup(r2)
prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000140)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2)
r4 = getpid()
sched_setscheduler(r4, 0x1, &(0x7f0000000d80)=0x5)
r5 = socket(0x1e, 0x805, 0x0)
connect$tipc(r5, &(0x7f0000000ec0)=@id={0x1e, 0x3, 0x2, {0x4e24, 0x2}}, 0x10)
connect$tipc(r5, &(0x7f0000001200)=@name={0x1e, 0x2, 0x3, {{0x0, 0x2}, 0x2}}, 0x10)
close(r5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000dc0)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f0000000e00)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r7, &(0x7f0000000e80), 0x318, 0x0)
recvmmsg(r6, &(0x7f0000000ec0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000f00)=0x2)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000f40)={0xd, 0x4, &(0x7f0000001000)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0xa8}, [@ldst={0x6, 0x3}], {0x95, 0x0, 0xc00}}, &(0x7f0000001040)='GPL\x00', 0x2, 0xfd90, &(0x7f0000001080)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000001180), 0x1f2, 0x10, &(0x7f00000011c0), 0xfffffe51}, 0x48)
socket$inet6_tcp(0xa, 0x1, 0x0)
r9 = open_tree(0xffffffffffffff9c, &(0x7f0000001280)='./file0\x00', 0x1800)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000001c0)={0x9, <r10=>0x0}, 0x8)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000e80)={r3, r9, 0x1c, 0x0, @val=@target_btf_id=r10}, 0x14)
ioctl$XFS_IOC_FSGEOMETRY_V4(r3, 0x8070587c, &(0x7f0000001340))
getsockname(r8, &(0x7f00000013c0)=@caif=@util, 0x0)
syz_mount_image$erofs(&(0x7f0000001440), &(0x7f0000001480)='./file0\x00', 0x18000c6, &(0x7f00000014c0)=ANY=[@ANYRES16=0x0, @ANYRES32, @ANYRES16=0x0, @ANYRES8], 0x0, 0x17d, &(0x7f0000001500)="$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")

5.530485694s ago: executing program 4 (id=86):
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/wakeup_count', 0x309082, 0x0) (async)
io_setup(0x4fe, &(0x7f0000000200)=<r1=>0x0) (async)
r2 = socket$inet_icmp(0x2, 0x2, 0x1) (async)
r3 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r3, &(0x7f0000000080)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e22, @multicast2}, 0x4, 0x0, 0x2}}, 0x26) (async)
io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0xf, r0, &(0x7f0000000000)="0800534f1b7d34b2b76986c7", 0xc, 0x8, 0x0, 0x2, r0}]) (async)
r4 = socket$inet_udp(0x2, 0x2, 0x0) (async)
r5 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r5, &(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, r4, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x4000000, @mcast1}}}, 0x32) (async)
sendmmsg$inet(r5, &(0x7f0000000280)=[{{&(0x7f0000000300)={0x2, 0x4e24, @local}, 0x10, 0x0}}, {{&(0x7f0000000340)={0x2, 0x4e24, @local}, 0x10, 0x0}}], 0x2, 0x43) (async)
setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f00000000c0)=0x809, 0x4) (async)
r6 = fsmount(r0, 0x1, 0xe9)
setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(r6, 0x111, 0x3, 0x0, 0x4)

4.659319783s ago: executing program 0 (id=87):
r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x804010, &(0x7f0000000080)=ANY=[@ANYRES64=<r1=>0x0, @ANYRESHEX, @ANYRESHEX=0x0], 0x1, 0x248, &(0x7f0000000480)="$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")
r2 = socket$packet(0x11, 0x2, 0x300)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000280)='./proc\x00', &(0x7f00000002c0)='proc\x00', 0x4000, 0x0)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="02000000040000000800"], 0x50)
openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)={0x101040, 0x8, 0x10}, 0x18)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000009c0)={r4}, 0xc)
r5 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0)
r6 = openat$selinux_policy(0xffffff9c, &(0x7f0000000700), 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r6, 0x0)
renameat2(0xffffffffffffffff, &(0x7f0000000940)='./proc\x00', 0xffffffffffffffff, &(0x7f0000000980)='./proc\x00', 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0xf, &(0x7f00000008c0)=ANY=[@ANYBLOB="1800000003000000000000000f00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055a20100000000009500000000000000bf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000"], 0x0, 0x4, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
write$selinux_load(r5, &(0x7f0000000b80)=ANY=[@ANYRES64=r0, @ANYRESOCT=r1, @ANYRES64=r5, @ANYRESHEX=r3, @ANYRES16=r2, @ANYRESOCT=r2, @ANYRES64=r2, @ANYRES64=r6], 0x17fc)
write(0xffffffffffffffff, &(0x7f0000000340)='27', 0x2)
r7 = getpid()
rt_tgsigqueueinfo(r7, 0x0, 0xb, &(0x7f00000003c0)={0x4, 0xfffffffe, 0x4})
signalfd4(r4, &(0x7f0000000440)={[0xdcfe]}, 0x8, 0x80800)
sched_setscheduler(0x0, 0x2, &(0x7f0000000a00)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f0000000a40)=0x2)
sched_setscheduler(0x0, 0x1, &(0x7f0000000a80)=0x5)
socketpair$unix(0x1, 0x5, 0x0, 0xfffffffffffffffc)
connect$unix(0xffffffffffffffff, &(0x7f0000000b00)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000b80), 0x318, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000000bc0), 0x10106, 0x2, 0x0)
setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2b, &(0x7f0000000c00)={0x2, {{0x2, 0x4ea4, @multicast2}}, {{0x2, 0x4e23, @multicast1}}}, 0x108)
sched_setaffinity(0x0, 0x8, &(0x7f0000000d40)=0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000d80)='./dev\x00', 0x1ff)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="0900000004000000ff0f000003"], 0x48)
close(r8)

4.656229773s ago: executing program 1 (id=88):
r0 = userfaultfd(0x801)
r1 = socket$inet6(0xa, 0x80002, 0x0)
connect$inet6(r1, &(0x7f00000002c0)={0xa, 0x0, 0x0, @dev}, 0x18)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3})
ppoll(&(0x7f0000000280)=[{r0, 0x300}, {r0, 0x8}, {r0, 0x8280}, {r0, 0x8000}], 0x4, 0x0, &(0x7f0000000300)={[0x8]}, 0x8)
ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000240)={{&(0x7f0000ff9000/0x4000)=nil, 0x4000}})
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYRESDEC=r0, @ANYRES16=r0, @ANYRESDEC=0x0], 0x50)
socket$netlink(0x10, 0x3, 0x0)
unshare(0x4000400)
r2 = socket$packet(0x11, 0x3, 0x300)
r3 = socket(0x10, 0x2, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), r3)
syz_clone(0x80000, &(0x7f00000000c0)="bdea4d9ff48fabf0f8bead2775214bb2c2f21877b40042297ed97b416e63fcba5fac6e9dd3d9f5f4a4f576f9489dbf85de8f451cbaaee4e6b2b14fea60d5a6aaee78", 0x42, &(0x7f0000000140), &(0x7f0000000200), &(0x7f0000000380)="969677ffeba142f1776857fd8b29ca14b2669db8aa8e866b1f622cbcd68e0052728e965a0e42ca4b5aaf5397450c7baeeb757cefc0250a2995675bc11dce3bf4ba69df9bf1cd192b3bb934fd2dc77452798b0aa9357493d4525f4e186a3340eaea69fb2ee77ce84f859d044922595633d98ea437918f26fb6867926c2b06e6e5f2da2ee5661524efc362a7e746786ea00ec0de733ddd929674ae0347157bd3aa272f0966072a1c91ed4368177ef64e09bba25fddafd4771360de0e8d4cc9edc5b9f9f5")
getsockname$packet(r3, &(0x7f00000001c0)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newlink={0x40, 0x10, 0x439, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, 0x9901, 0x49a41}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @remote}, @IFLA_IPTUN_TTL={0x5}]}}}]}, 0x40}}, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r5 = socket$inet6(0xa, 0x3, 0x38)
connect$inet6(r5, &(0x7f0000000b00)={0xa, 0x4e23, 0x0, @loopback, 0xb}, 0x1c)
socket$packet(0x11, 0x3, 0x300)
writev(r5, &(0x7f0000000bc0)=[{&(0x7f0000000c00)=',', 0xf338}], 0x1)
sendto$packet(r2, &(0x7f0000000680)="05d936277c6f5422007f83477ca1b278e3e4018a34e7bfd3de1a00ad6762646c95c716727eb53bcc", 0x28, 0x40880, &(0x7f00000006c0)={0x11, 0x86dd, r4, 0x1, 0x4, 0x6, @local}, 0x14)

4.655459553s ago: executing program 3 (id=89):
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000004c0), 0xa82, 0x0)
ioctl$TIOCVHANGUP(r0, 0x5437, 0x0)
io_setup(0x7, &(0x7f0000000500)) (async)
io_setup(0x7, &(0x7f0000000500)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000003000)=[&(0x7f0000003040)={0x0, 0x0, 0x0, 0x1, 0x9, r0, 0x0}])
r2 = socket$tipc(0x1e, 0x5, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x400000000008d}, 0x0) (async)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x400000000008d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) (async)
sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2)
sched_setscheduler(r3, 0x1, &(0x7f00000000c0)=0x7) (async)
sched_setscheduler(r3, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x12, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4005, 0x0, 0x0, 0x0, 0x7}, [@generic={0x6b, 0x1, 0x1, 0x16}]}, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @cgroup_sock_addr=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
connect$unix(r4, &(0x7f0000000440)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f00000004c0), 0x651, 0x0)
recvmmsg(r4, &(0x7f0000000500), 0x4000087, 0x2, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x13, 0x2d, &(0x7f0000001300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1ff}, {}, {}, [@tail_call, @map_val={0x18, 0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x4}, @map_fd={0x18, 0x8}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffc00}}, @exit], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000640)='syzkaller\x00', 0x4, 0xc3, &(0x7f0000000680)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x6}, 0x94)
r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0)
write$uinput_user_dev(r6, &(0x7f00000007c0)={'syz1\x00', {0x9, 0x7, 0x5, 0x5}, 0x3f, [0x3, 0x2, 0x18, 0x2, 0x2, 0x400, 0x80000000, 0x0, 0xfffffc01, 0x0, 0x6, 0x1, 0xfffffffb, 0x39, 0x747d5e13, 0x800, 0xfffffb9a, 0xfffffffe, 0x1, 0xfffffffb, 0x2004, 0x3, 0x0, 0xf250, 0x482, 0x4800, 0x4, 0x3, 0xe, 0x4623f, 0x0, 0x10001, 0x9, 0x8000, 0x0, 0x3, 0x0, 0x3, 0xa, 0x8da8, 0x2, 0x200, 0x2, 0x5, 0xe, 0x4, 0x2, 0x6f, 0xe, 0x7, 0x1, 0x199d, 0x6, 0x2, 0x9, 0xffffffff, 0x4, 0x6, 0x1000, 0x5, 0x3d, 0x8, 0xa, 0x5], [0x7, 0x1e, 0x3, 0x8000, 0xfffffffd, 0xffffffff, 0x9, 0x25, 0x6, 0xfffffff9, 0x3, 0x7fff, 0x72c, 0x1c32, 0x2, 0x8, 0x10000, 0x3fe, 0x7ffd, 0x3, 0x3, 0x297, 0x5, 0x0, 0x8, 0x4, 0x0, 0x3ff, 0x0, 0xfffffffe, 0x8, 0x1000003, 0xd3e, 0xfffffff9, 0xffffffff, 0xc, 0x1, 0xffffffff, 0x6, 0x2000008, 0x800, 0xfdff, 0x2, 0x96, 0xfffffffb, 0x2, 0x0, 0x2, 0x401, 0xc, 0x2, 0xb, 0x8, 0xe, 0x5, 0x7, 0x9, 0x2, 0x1, 0x9, 0x8, 0x4, 0x1fe, 0x3], [0x401, 0x8000e584, 0xffff, 0xcd3, 0xb, 0x1f, 0x404, 0x7a, 0x4008, 0xc, 0x7, 0x9, 0x81e86, 0x5, 0x80000001, 0x8, 0x3f92, 0x6, 0x2, 0x14, 0xfffffffe, 0xfffffff9, 0x0, 0x1000, 0xb, 0x5, 0x4, 0x5, 0x200003, 0x100, 0x5, 0x80, 0x9, 0x8001, 0x10000, 0x0, 0x3, 0x400004, 0x3, 0x6d7e, 0x9, 0x8, 0x3, 0xbf23, 0x9, 0x9, 0x956, 0x0, 0x5, 0xe, 0x6, 0x100fffd, 0x93, 0x9, 0x4, 0xea, 0x9, 0x20000005, 0x3, 0x80, 0x0, 0x9, 0x401, 0x5], [0x108f, 0x10003, 0x3, 0x0, 0x88, 0x2, 0x4000000, 0x4, 0x50, 0x2, 0x763, 0xb, 0x406, 0x1, 0x5, 0x4, 0x7f, 0x5, 0x3fa6, 0x2, 0x0, 0x5, 0x8000, 0x4, 0xe47, 0x4, 0x3, 0x4000004, 0x0, 0x2851, 0x3b, 0x20000001, 0x4, 0x5, 0xa80a, 0x65f413f9, 0x4, 0x20008, 0x8a5, 0x8a, 0x46, 0x409, 0x8003, 0x4, 0x168, 0x800, 0x4, 0xffffffff, 0x7fff, 0xffff8a33, 0xfffffff8, 0xf, 0x3, 0x200, 0x7, 0xd4, 0xfffffffd, 0xa, 0xe, 0x101, 0xfff, 0xf, 0x136, 0x6]}, 0x45c) (async)
write$uinput_user_dev(r6, &(0x7f00000007c0)={'syz1\x00', {0x9, 0x7, 0x5, 0x5}, 0x3f, [0x3, 0x2, 0x18, 0x2, 0x2, 0x400, 0x80000000, 0x0, 0xfffffc01, 0x0, 0x6, 0x1, 0xfffffffb, 0x39, 0x747d5e13, 0x800, 0xfffffb9a, 0xfffffffe, 0x1, 0xfffffffb, 0x2004, 0x3, 0x0, 0xf250, 0x482, 0x4800, 0x4, 0x3, 0xe, 0x4623f, 0x0, 0x10001, 0x9, 0x8000, 0x0, 0x3, 0x0, 0x3, 0xa, 0x8da8, 0x2, 0x200, 0x2, 0x5, 0xe, 0x4, 0x2, 0x6f, 0xe, 0x7, 0x1, 0x199d, 0x6, 0x2, 0x9, 0xffffffff, 0x4, 0x6, 0x1000, 0x5, 0x3d, 0x8, 0xa, 0x5], [0x7, 0x1e, 0x3, 0x8000, 0xfffffffd, 0xffffffff, 0x9, 0x25, 0x6, 0xfffffff9, 0x3, 0x7fff, 0x72c, 0x1c32, 0x2, 0x8, 0x10000, 0x3fe, 0x7ffd, 0x3, 0x3, 0x297, 0x5, 0x0, 0x8, 0x4, 0x0, 0x3ff, 0x0, 0xfffffffe, 0x8, 0x1000003, 0xd3e, 0xfffffff9, 0xffffffff, 0xc, 0x1, 0xffffffff, 0x6, 0x2000008, 0x800, 0xfdff, 0x2, 0x96, 0xfffffffb, 0x2, 0x0, 0x2, 0x401, 0xc, 0x2, 0xb, 0x8, 0xe, 0x5, 0x7, 0x9, 0x2, 0x1, 0x9, 0x8, 0x4, 0x1fe, 0x3], [0x401, 0x8000e584, 0xffff, 0xcd3, 0xb, 0x1f, 0x404, 0x7a, 0x4008, 0xc, 0x7, 0x9, 0x81e86, 0x5, 0x80000001, 0x8, 0x3f92, 0x6, 0x2, 0x14, 0xfffffffe, 0xfffffff9, 0x0, 0x1000, 0xb, 0x5, 0x4, 0x5, 0x200003, 0x100, 0x5, 0x80, 0x9, 0x8001, 0x10000, 0x0, 0x3, 0x400004, 0x3, 0x6d7e, 0x9, 0x8, 0x3, 0xbf23, 0x9, 0x9, 0x956, 0x0, 0x5, 0xe, 0x6, 0x100fffd, 0x93, 0x9, 0x4, 0xea, 0x9, 0x20000005, 0x3, 0x80, 0x0, 0x9, 0x401, 0x5], [0x108f, 0x10003, 0x3, 0x0, 0x88, 0x2, 0x4000000, 0x4, 0x50, 0x2, 0x763, 0xb, 0x406, 0x1, 0x5, 0x4, 0x7f, 0x5, 0x3fa6, 0x2, 0x0, 0x5, 0x8000, 0x4, 0xe47, 0x4, 0x3, 0x4000004, 0x0, 0x2851, 0x3b, 0x20000001, 0x4, 0x5, 0xa80a, 0x65f413f9, 0x4, 0x20008, 0x8a5, 0x8a, 0x46, 0x409, 0x8003, 0x4, 0x168, 0x800, 0x4, 0xffffffff, 0x7fff, 0xffff8a33, 0xfffffff8, 0xf, 0x3, 0x200, 0x7, 0xd4, 0xfffffffd, 0xa, 0xe, 0x101, 0xfff, 0xf, 0x136, 0x6]}, 0x45c)
ioctl$UI_DEV_CREATE(r6, 0x5501) (async)
ioctl$UI_DEV_CREATE(r6, 0x5501)
readv(r6, &(0x7f0000000c40)=[{&(0x7f0000000c80)=""/41, 0x29}], 0x1) (async)
readv(r6, &(0x7f0000000c40)=[{&(0x7f0000000c80)=""/41, 0x29}], 0x1)
write$input_event(r6, &(0x7f0000000cc0)={{0x77359400}, 0x15}, 0xfe4f)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d00)={&(0x7f00000002c0)=ANY=[@ANYRESDEC=r3], &(0x7f0000000d80)=""/217, 0x2e, 0xd9, 0x1, 0x9}, 0x28)
mount$cgroup(0x0, &(0x7f0000000280)='.\x00', &(0x7f0000000300), 0x800000, &(0x7f00000003c0)={[{@name={'name', 0x3d, '-'}}]}) (async)
mount$cgroup(0x0, &(0x7f0000000280)='.\x00', &(0x7f0000000300), 0x800000, &(0x7f00000003c0)={[{@name={'name', 0x3d, '-'}}]})
fsetxattr$security_selinux(r2, &(0x7f0000000e80), &(0x7f0000000ec0)='system_u:object_r:crond_exec_t:s0\x00', 0x22, 0x3)
mount(0x0, &(0x7f0000000f00)='./dev\x00', &(0x7f0000000f40)='devtmpfs\x00', 0x0, 0x0)
ioctl(0xffffffffffffffff, 0xc138fd0f, &(0x7f0000000f80)="0400000000000000000000009001")

4.654969693s ago: executing program 4 (id=90):
r0 = openat$binderfs_log(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder_logs/transaction_log\x00', 0x0, 0x0)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0)
sendmsg$NL80211_CMD_PROBE_MESH_LINK(r0, &(0x7f0000001400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000013c0)={&(0x7f0000000140)={0x1258, r1, 0x300, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x0, 0x8}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_FRAME={0x11e2, 0x33, @data_frame={@msdu=@type11={{0x0, 0x2, 0x6, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x1}, @device_b, @device_b, @broadcast, {0x6, 0xf}, @device_b, @void, @value=@ver_80211n={0x0, 0x448a, 0x1, 0x2, 0x0, 0x1}}, @a_msdu=[{@device_b, @device_a, 0xb3, "a769d346641077c34f5dfe09a93121f8b8495202d1842442ea3db8f9fb724019bb23ea4ea4517b15963a550b83d2abcd256168e4db6d29cd1df3523be53f9f5e1c038f11df3027493cd506c81ab8e3fb9964f8cf010279adb5da50feb13983cd66a8d2b12e900748975a890db26b9ad8e5459cbaf7b61e3c30309d018a9997f8b028b8295394e75acc338978fccee61d15ffb9385b80be597eb0cc16dd0e2f6e1e204805a307f4d686d6e5b03c5d5c90a1787f"}, {@broadcast, @broadcast, 0xda, "e33b0e80840dec022b8248c3ab095cd22798ee083e6c51970f8b63c11c79f7a2dea7427be9fad11875a4419dc8f067f8ac6a81669501da95572a74e5aa44508c49f4fa50fefa91c931a1ff71bb102d71002ad9cc7a7d845e4d0a4636e34d268a473bd73cae60592d8834c3e7d8f8dbfb15a62553bc86f68cd6ef9aebc412fb13b763ec56e49b0a1f5466db2c942855600d9c9178f1beae3e82483338cbda588c1ec899447b86993a26e1fb33029319c069eb7979480ab0a56bf95291976c32ad08f81a30bc8f50f7df0b15fd743e6387e8663a5f6815c703e15e"}, {@device_a, @device_b, 0x1000, "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"}]}}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_FRAME={0x22, 0x33, @mgmt_frame=@deauth={{{0x0, 0x0, 0xc, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x9}, @device_a, @device_a, @from_mac=@device_b, {0x0, 0xffd}, @value=@ver_80211n={0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x8, @void}}]}, 0x1258}, 0x1, 0x0, 0x0, 0x8000}, 0x168c9) (async)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffb000/0x4000)=nil, 0x4000}}) (async)
ioctl$BTRFS_IOC_SPACE_INFO(r0, 0xc0109414, &(0x7f0000001a00)={0x658, 0xf0, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']})
syz_usb_connect$cdc_ecm(0x3, 0x5c, &(0x7f0000000000)=ANY=[], 0x0) (async)
sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f000000b440)={&(0x7f000000b380)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f000000b400)={&(0x7f000000b3c0)={0x40, r1, 0x8, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x168, 0x56}}}}, [@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "25c06be387"}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x4}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "4d38ad728f"}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x44004090) (async)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x800c6613, &(0x7f0000000080)=@v2={0x2, @adiantum, 0x0, '\x00', @a})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000001440)={0x0, 0x34, &(0x7f000000b280)={&(0x7f000000b2c0)=ANY=[@ANYBLOB="9c000000100001040000000003ebffffff000000", @ANYRES32=0x0, @ANYBLOB="fbb4817dbcb5f31a68001280110009006272696467655f736c61766500000000500005800400180005000900010000000500050000000000080025000000000006001f00d500000005001b000100000005000800000000000500060001000000050001000000000006001f0006000000140003006272696467655f736c6176655f30"], 0x9c}, 0x1, 0x0, 0x0, 0x894}, 0x4040) (async)
r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000001440)=ANY=[], 0x0)
syz_usb_control_io$hid(r3, 0x0, 0x0) (async)
syz_usb_control_io$uac1(r3, &(0x7f0000001680)={0x14, &(0x7f0000001480)={0x0, 0x21, 0xf0, {0xf0, 0x31, "18affff6c5fd0c02b2fe86e53b0f96267338d0ffcba11b2f896e52e161fabb237600b2efb3430cd05ac09162e8f9c0769175b0eda39116d55215064e21b37cd39eff0cbe10105a63ca33e4c2f0d82229b33dc86530821708c33a72691ba9ffb1bb82c74ecc7e2de4bf76c2819d164d6071c470509b3f5b32cec78ee546ca4715b16b025b2690a2ff0a47855390f236894a2ca9afe3d5eec992c42f673a4c2b7ed42e70ab6e129a1183928be24324a1c7ee88b132282cc225c89edcfb88a6fd3ca181f7e50e9fbcebde69231b1611803f24d17c6ed95a1f37a0c498d2bae287d45ba662cf991d9f746067da4d74e1"}}, &(0x7f0000001580)={0x0, 0x3, 0xc2, @string={0xc2, 0x3, "04d469f721faf52f86eccb3bf1a17274f520d4f55274a241df0da656cc87065e749f0976e0e93f3b0e890291a79927bae58812506ceb11076a9d672efb577c18b93269837fdb0594fd99d5980627dcd65dec2db5729c9765af89fa077701dd3033a2fca6d70812a7b27715da4aa744374291233539276d60ceb1217eff6d1c6fe1c20249965a3aa6b46aab7b1e1f7d1dfa74136f81891a08271e37b665491eb3bd82f265a54c67a3f693be2bdb74423d99d64c08fe9ecb47e56fa483f31614b7"}}}, &(0x7f0000001980)={0x44, &(0x7f00000016c0)={0x20, 0x3, 0xf6, "1e50466582dad8c72b025058bc0e98a32df0be75152acd8a1f030efeba3c326333767c789e461628b67086f1e76d3aa68555621668f4d7332190070bb5a78aa726b3a7797fb17a895856a7037d77d1eb801f619f1114505823f4bccc3b5f199cf1cc4541a1d7ed33ec0bc8b6a5dfe7ec013ada9faa617111d22e826582b46377603950876efee8c2a3702926d71a1ca6c2d8d2733f57c340121f2600d4f531affe59d68ff8e3c10d3c4d82784303e3ad53bfa7794ec1c86d44f5ff200b2224cfd3a457eb9d8fae2b210c94d06ac08b8ae8c1978f692adb9a0a556455dcc3cddd5630d8312993cfb5e8df183da86e1cee54cb39113563"}, &(0x7f00000017c0)={0x0, 0xa, 0x1, 0xe9}, &(0x7f0000001800)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000001840)={0x20, 0x81, 0x3, "f0fc19"}, &(0x7f0000001880)=ANY=[@ANYBLOB="20800a199abd905200"], &(0x7f00000018c0)={0x20, 0x83, 0x1, "c8"}, &(0x7f0000001900)={0x20, 0x84, 0x2, 'mR'}, &(0x7f0000001940)={0x20, 0x85, 0x3, "a33738"}})

3.602833801s ago: executing program 0 (id=91):
socket$inet_udp(0x2, 0x2, 0x0)
r0 = socket(0x2, 0x3, 0x6)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x5dda, 0x4)
sendto$inet(r0, 0x0, 0x0, 0xdfedac7253303320, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./trace/set_event\x00', 0x2, 0x0)
write(r1, &(0x7f0000000100)='*:mod:', 0x6)
close_range(r0, r1, 0x0)

3.602137071s ago: executing program 1 (id=92):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$sock_linger(r0, 0x1, 0x3d, &(0x7f0000000100)={0x1}, 0x8)
sendmmsg$sock(r0, &(0x7f0000000180)=[{{&(0x7f0000000400)=@ieee802154={0x24, @long={0x3, 0xffff, {0xaaaaaaaaaaaa0102}}}, 0x80, 0x0, 0x0, &(0x7f0000000480)=[@txtime={{0x18, 0x1, 0x41, 0x1000000000003}}], 0x18}}], 0x400000000000234, 0x8840)

3.592297992s ago: executing program 0 (id=93):
pipe2(&(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
fcntl$setpipe(r0, 0x407, 0x0)
r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x40)
epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r1)
syz_usb_connect(0x0, 0xb3, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020f030140000000000001000000010902a1000201008032080b00020e03000009040000000e0100000d240100012700006cdc02010111240201010200000000000000000200f7"], 0x0)

3.580994233s ago: executing program 1 (id=94):
r0 = syz_ublk_setup_io_uring(0x14bc, &(0x7f0000000000)={0x0, 0x27e7, 0x40, 0x3, 0x15b}, &(0x7f0000000080), &(0x7f00000000c0)=<r1=>0x0, &(0x7f0000000100))
mmap$IORING_OFF_SQ_RING(0x0, 0x4, 0x1, 0x4000010, r0, 0x0)
write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0)
read(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r2, &(0x7f00000004c0), 0x10)
sendmsg$can_bcm(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000180)=ANY=[@ANYBLOB="0500000040000000", @ANYRES64=r1, @ANYBLOB="f7dbd7d3f4695abdabbc7c68f0c5b2bc2263dfda29e10374fb7c00a965d221fdc182edbbcee72ae8545d8ac4290a672a5d5984690b8c6551a12fbc9d8f821e2b0bc0dbb3ca89cd172073b966f6777ac58710487d48eac4ce3ff4065b58b95d243ae7628b7b7705cc45df6c7803b4e14f1166b49492b0ad0937db3730e2c5a1f7fb6e2db24ecd524988f851e4792efc6894093fdaee87654628941193e3a4c858b43799b91ea2"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x20000800)
sendmsg$can_bcm(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001080)={&(0x7f00000010c0)=ANY=[@ANYBLOB="060000000000000800000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="000000000100000000000000fc00000029fd71a69d3295d8"], 0x48}, 0x2, 0x0, 0x0, 0x24000040}, 0x800)
ioctl$F2FS_IOC_START_ATOMIC_WRITE(0xffffffffffffffff, 0xf501, 0x0)
syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file1\x00', 0x0, &(0x7f0000000140)={[{@noload}, {@grpjquota}]}, 0x1, 0x5a3, &(0x7f0000000800)="$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")
r3 = openat(0xffffffffffffff9c, &(0x7f0000000dc0)='./file1\x00', 0x42, 0x100)
pwrite64(r3, &(0x7f0000000e00)='\f', 0x1, 0x8000c61)
r4 = open(&(0x7f0000000e40)='./file1\x00', 0x66842, 0x28)
sendfile(r4, r4, 0x0, 0x2c00)
ioctl$KVM_TDX_INIT_VCPU(0xffffffffffffffff, 0xc008aeba, 0x0)
syz_usb_connect$midi(0x4, 0x48, &(0x7f0000000140)=ANY=[], 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./dev\x00', 0x1ff)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r5, &(0x7f0000000300)={0x2, 0x4e22, @multicast1}, 0x22)
r6 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000340)=0x20800001, 0x4)
setsockopt$inet6_int(r6, 0x29, 0x4e, &(0x7f0000000380)=0x1, 0x4)
bind$inet6(r6, &(0x7f00000003c0)={0xa, 0x4e22, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8000}, 0x1c)
listen(r6, 0x80000c03)
mount(0x0, &(0x7f0000000640)='./dev\x00', &(0x7f0000000680)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000006c0)='./mnt\x00', 0x1ff)
mount(&(0x7f0000000700)=@filename='./dev/sda1\x00', &(0x7f0000000740)='./mnt\x00', &(0x7f0000000780)='ext4\x00', 0x0, 0x0)
ioctl$XFS_IOC_BULKSTAT(r3, 0x8040587f, &(0x7f0000000280)={{0x9, 0x0, 0x8, 0x5, 0x2d04}, &(0x7f0000001140)})
r7 = openat(0xffffffffffffff9c, &(0x7f00000007c0)='./mnt\x00', 0x149000, 0x19a)
ioctl$EXT4_IOC_GROUP_EXTEND(r7, 0x40086607, 0x0)

2.526408431s ago: executing program 1 (id=95):
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000680)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000006c0)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f0000000700)=0x2)
write$selinux_access(0xffffffffffffffff, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f00000007c0)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000800)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000840)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000008c0), 0x400000000000041, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x2048c4, &(0x7f0000000080)={[{@shortname_win95}, {@uni_xlateno}, {@shortname_winnt}, {@utf8}, {@fat=@usefree}, {@utf8no}, {@rodir}, {@numtail}, {@uni_xlate}, {@shortname_win95}, {@fat=@showexec}, {@rodir}, {@fat=@flush}]}, 0x0, 0x2c7, &(0x7f0000000140)="$eJzs3E1rE10UwPHTpG3SljZZlAeeBx486EY3Qxs/QZAWxIBSG1EXwtRONGTMhJkYiYjtzq1fwk1x6UpB/QLduHMvbooguOlCHMnLtGM6raFv0zb/H5S5vWfOzB3uTDlzobNx++WjSskzSmZdEmmVhMiqbIpkW62uoe420W6PStiqXJr48fn/m3fuXssXCnMLqvP5xcs5VZ069/7Js9fnP9Ynbr2ZepeS9ey9je+5L+v/rP+78WsxOLojYuqS49TNJdvS5bJXMVRv2JbpWVquepZbV1PdIF6ynVqtqWZ1eXK85lqep2a1qRWrqXVH625TzQdmuaqGYejkuAya5J5R/9XOvuLawoKZP7oR4ZiNRXW6bt5MRgaLa8cxKAAAcLLEVf8/LHta9rTqtOr7Per/hITjf6n/RQa6/t+v2u6hyHoSp0ur/m89DYl0b4T6HwAAAAAAAAAAAAAAAAAAAACA02DT9zO+72eCbfCTEpG0iAS/75KeOObh4pAdcP5xyoX+cS8tYr9oFBvFzrYTz5ekLLZYMjMi8rN9P7SkfL/Tnr9amJvRtqx8sFe6+SuNYlJSQX4gu5Xvh/NnO/kazl+RERkPnz8nGZmOzs9F5DeKo3Lxgp/qntkSQzLy6b44Ysty+77ezn8+q3rleqEnf6y9HwAAAAAAZ4GhW3a8v7fjhgZrfD3xTuf2+oBkQusDfsT6QM/79bD8NxzfdQMAAAAAMEi8UamYtm25XvPpWW8EH7M9lAOKxH056X53HhaRbs/bkzIX/TQSItIbGtnRE91IHmyWv4n8+VxMxz7d+274ya179evjzhPQT3qcf5UAAAAAHIWg6B+KeyAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAywfr8iFuy/n4+QBbmp2K4SAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBl+BwAA//+KNRQm")
r3 = syz_open_procfs(0x0, &(0x7f0000000440)='mounts\x00')
mount$tmpfs(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x104000, 0x0)
mount$bind(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='./file0\x00', 0x0, 0x1333404, 0x0)
mount$bind(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)='./file0\x00', 0x0, 0x93085, 0x0)
mount$bind(&(0x7f00000005c0)='.\x00', &(0x7f0000000600)='./file0\x00', 0x0, 0x1005848, 0x0)
read$FUSE(r3, &(0x7f0000001740)={0x2020}, 0x2020)
recvmmsg(r1, &(0x7f0000000900), 0x80002c1, 0x2, 0x0)
write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000a80), 0xfdef)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x4010d00, 0x0)
r4 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000ac0)={'lo\x00'})
sendmsg$nl_route(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={0x0}, 0x1, 0x0, 0x0, 0x2004c040}, 0x0)
syz_mount_image$ext4(&(0x7f0000000c00)='ext4\x00', &(0x7f0000000c40)='./file1\x00', 0x2200002, &(0x7f0000000c80)={[{@discard}, {}, {@grpquota}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@delalloc}, {@nogrpid}, {@noauto_da_alloc}, {@noauto_da_alloc}]}, 0x1, 0x572, &(0x7f0000000d40)="$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")
bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0x0, 0xc, &(0x7f0000001380)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1900000004000000080000000a"], 0x50)
close(0x3)
bpf$PROG_LOAD(0x5, &(0x7f0000001580)={0x11, 0x14, &(0x7f0000001640)=ANY=[], &(0x7f0000001680)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

2.525948701s ago: executing program 3 (id=96):
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x880, &(0x7f00000000c0)=ANY=[], 0x26, 0x367, &(0x7f0000000140)="$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")
r0 = socket(0x28, 0x80000, 0x5)
setsockopt$inet_mreq(r0, 0x0, 0x20, &(0x7f0000001100)={@local, @local}, 0x8)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f0000001140), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000001180)={'lo\x00'})
fsopen(&(0x7f00000011c0)='ntfs3\x00', 0x1)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
setpriority(0x0, 0x0, 0x2a14b58)
timer_create(0x0, &(0x7f0000001200)={0x0, 0x21, 0x2}, &(0x7f0000001240))
fcntl$lock(r0, 0x5, &(0x7f0000001280)={0x0, 0x0, 0x4, 0x30000})
syz_open_procfs(0x0, 0x0)
timer_settime(0x0, 0x1, &(0x7f00000012c0)={{0x0, 0x3938700}}, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
openat$kvm(0xffffffffffffff9c, &(0x7f0000001300), 0x200, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$msdos(&(0x7f0000001340), &(0x7f0000001380)='./file0\x00', 0x2000000, &(0x7f00000013c0)=ANY=[], 0x1, 0x29b, &(0x7f0000001400)="$eJzs3c9LFG0AB/DHVfHFF8XTy1uXHurUZVDPHZRQkBaKcoMKghHHWnbalZ097EoHO3cJOvYfRMduQfQP+F90k0A8ecqw8dcKXdI08PO5zJf5zjM8zww8c5zNW29eNFaKZCXthMrMQKjMhFDZGQgToRIOrIebb1+9e/3g0eM7s9Xq3P0Y52cXp6ZjjOPXPj95+eH6l86/Dz+OfxoJGxNPN7emv278t3Fl8/vi83oR60VstjoxjUutViddyrO4XC8aSYz38iwtslhvFlm7r1/JW6urvZg2l8dGV9tZUcS02YuNrBc7rdhp92L6LK03Y5IkcWw0cBq19zu7u2Frt3TRs+H8ef+X27FN/Z8Qtte7tW6tPJb9/EJ1bjL+NHw0arvbrQ0e9lNlH/v74TC630+f7A8+LTfKfq+7fbd6YvxIWP7DawcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAODySuKhiaOz291ubbDsk1/1ZZpfqM5N7l/Q3w+Fq0PntgwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOJWit9ZI8zxrC78f9h7kXzANQTi7cNE7EwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJy//p/YAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcFkVvbVGmudZ+6zCt//LGx+rLnqNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHBaPwIAAP//P3honA==")
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000016c0)='memory.events.local\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0)
ftruncate(r1, 0x1000)
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000000000), 0x1, 0xbf0, &(0x7f0000000500)="$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")

1.581665708s ago: executing program 0 (id=97):
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0xf7, 0x0, 0x1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x5}, 0x50) (async)
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0xf7, 0x0, 0x1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x5}, 0x50)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000001c0)=[0x0, 0x0, 0x0], ""/16, <r1=>0x0, 0x0, 0x0, 0x0, 0x4, 0x7, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xb, &(0x7f0000000280)=[{}, {}], 0x10, 0x10, &(0x7f00000002c0), &(0x7f0000000300), 0x8, 0xd3, 0x8, 0x8, &(0x7f0000000340)}}, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={0xffffffffffffffff, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, &(0x7f0000000580)=[0x0, 0x0, 0x0], &(0x7f00000005c0)=[0x0, 0x0], 0x0, 0x2c, &(0x7f0000000600)=[{}, {}], 0x10, 0x10, &(0x7f0000000640), &(0x7f0000000680), 0x8, 0x45, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10) (async)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={0xffffffffffffffff, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, &(0x7f0000000580)=[0x0, 0x0, 0x0], &(0x7f00000005c0)=[0x0, 0x0], <r2=>0x0, 0x2c, &(0x7f0000000600)=[{}, {}], 0x10, 0x10, &(0x7f0000000640), &(0x7f0000000680), 0x8, 0x45, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10)
r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000840)={0xffffffffffffffff}, 0x4)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000880)={0x1b, 0x0, 0x0, 0x6, 0x0, 0xffffffffffffffff, 0x81, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1}, 0x50) (async)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000880)={0x1b, 0x0, 0x0, 0x6, 0x0, 0xffffffffffffffff, 0x81, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1}, 0x50)
r5 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000009c0)={{0x1, <r6=>0xffffffffffffffff}, &(0x7f0000000940), &(0x7f0000000980)}, 0x20)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=@base={0x7, 0x6, 0x7, 0x9, 0x0, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x5}, 0x50)
r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a80)={0x0, 0x6c6}, 0xc)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000ac0)={0x1, <r9=>0xffffffffffffffff}, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x14, 0x17, &(0x7f0000000080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4563, 0x0, 0x0, 0x0, 0x400}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xffff5a04}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000140)='GPL\x00', 0x8, 0x40, &(0x7f0000000180)=""/64, 0x41100, 0x1, '\x00', r1, @lirc_mode2, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000000500)={0x4, 0x2, 0x4, 0x5}, 0x10, r2, r3, 0x6, &(0x7f0000000b00)=[r4, r5, r6, r7, r8, r9, 0x1], &(0x7f0000000b40)=[{0x0, 0x4, 0x10, 0xa}, {0x1, 0x3, 0x2, 0x6}, {0x4, 0x3, 0x0, 0x2}, {0x1, 0x3, 0x0, 0xc}, {0x3, 0x3, 0xc}, {0x3, 0x3, 0x4, 0x7}], 0x10, 0x4}, 0x94)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = openat(0xffffffffffffffff, &(0x7f0000000c80)='./file0\x00', 0x208000, 0x4)
modify_ldt$write(0x1, &(0x7f0000000cc0)={0x8, 0x20000000, 0x4000, 0x0, 0x1, 0x0, 0x1, 0x1}, 0x10) (async)
modify_ldt$write(0x1, &(0x7f0000000cc0)={0x8, 0x20000000, 0x4000, 0x0, 0x1, 0x0, 0x1, 0x1}, 0x10)
pselect6(0x40, &(0x7f0000000d00)={0x7, 0xa, 0x9, 0x1, 0x6395, 0x8, 0x1, 0x8000}, &(0x7f0000000d40)={0x5, 0x7fff, 0x7fffffff, 0x8, 0x4, 0x4, 0x1, 0x3}, &(0x7f0000000d80)={0x8, 0x4, 0x2, 0x978e, 0xa9d1, 0x800, 0x1452, 0x9}, &(0x7f0000000dc0)={0x77359400}, &(0x7f0000000e40)={&(0x7f0000000e00)={[0x6]}, 0x8})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000ec0)={0x3, &(0x7f0000000e80)=[{0x7fff, 0xf9, 0x10, 0x7}, {0x2, 0x1, 0x1, 0x8}, {0x3, 0x4, 0x27, 0x8}]}) (async)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000ec0)={0x3, &(0x7f0000000e80)=[{0x7fff, 0xf9, 0x10, 0x7}, {0x2, 0x1, 0x1, 0x8}, {0x3, 0x4, 0x27, 0x8}]})
ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) (async)
ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1)
r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x11, 0x23, &(0x7f0000000f00)=@raw=[@map_val={0x18, 0x1, 0x2, 0x0, r9, 0x0, 0x0, 0x0, 0x81}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r8}}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}, @tail_call, @initr0={0x18, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0xfffffffe}, @ringbuf_query, @ldst={0x3, 0x2, 0x1, 0x4, 0x7, 0xffffffffffffffe0, 0xfffffffffffffffc}], &(0x7f0000001040)='GPL\x00', 0x5, 0x4e, &(0x7f0000001080)=""/78, 0x41100, 0x0, '\x00', r1, 0x0, r11, 0x8, &(0x7f0000001100)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000001140)={0x6, 0x8, 0xa, 0x8}, 0x10, 0x0, 0x0, 0x9, &(0x7f0000001180)=[r6, r0, 0xffffffffffffffff, r5, r8, 0xffffffffffffffff], &(0x7f00000011c0)=[{0x5, 0x1, 0xc, 0x7}, {0x2, 0x1, 0x8, 0x1}, {0x2, 0x2, 0x8, 0xb}, {0x3, 0x1, 0xb, 0xc}, {0x4, 0x4, 0xc, 0x2}, {0x2, 0x3, 0x1, 0x5}, {0x4, 0x3, 0xb, 0x5}, {0x0, 0x3, 0x4, 0x1}, {0x5, 0x2, 0xa, 0x5}], 0x10, 0x10001}, 0x94)
r13 = openat$cgroup(r5, &(0x7f0000001340)='syz1\x00', 0x200002, 0x0)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001380)={r12, r13, 0x31, 0x0, @val=@tracing={r2, 0xaa}}, 0x20) (async)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001380)={r12, r13, 0x31, 0x0, @val=@tracing={r2, 0xaa}}, 0x20)
getcwd(&(0x7f00000013c0)=""/41, 0x29)
modify_ldt$write2(0x11, &(0x7f0000001400)={0xcde, 0x0, 0x2000, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1}, 0x10)
fdatasync(r10)
r14 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001480), r5)
sendmsg$ETHTOOL_MSG_LINKINFO_SET(r5, &(0x7f0000001540)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x40084}, 0xc, &(0x7f0000001500)={&(0x7f00000014c0)={0x1c, r14, 0x800, 0x70bd2d, 0x25dfdbfb, {}, [@ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x51}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4000811)
ioctl$EXT4_IOC_SETFSUUID(r5, 0x4008662c, &(0x7f0000001580)={0x10, 0x0, "50d9d1a1ebe2af4330915d4f0f68f858"}) (async)
ioctl$EXT4_IOC_SETFSUUID(r5, 0x4008662c, &(0x7f0000001580)={0x10, 0x0, "50d9d1a1ebe2af4330915d4f0f68f858"})
getsockopt$inet6_mreq(r11, 0x29, 0x1b, &(0x7f00000015c0)={@loopback}, &(0x7f0000001600)=0x14) (async)
getsockopt$inet6_mreq(r11, 0x29, 0x1b, &(0x7f00000015c0)={@loopback}, &(0x7f0000001600)=0x14)
r15 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001680), r5)
sendmsg$NL80211_CMD_ASSOCIATE(r5, &(0x7f0000001980)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001940)={&(0x7f00000016c0)={0x240, r15, 0x400, 0x70bd25, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x7, 0x1}}}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x80000001}], @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0xc, 0x2, 0x2, 0x0, {0x1, 0x1124, 0x0, 0x6}, 0x1, 0x8, 0x3}}, @NL80211_ATTR_IE={0x13f, 0x2a, [@prep={0x83, 0x1f, {{}, 0x5, 0xe0, @device_b, 0x3, @void, 0x6, 0x1, @device_b, 0x3}}, @mic={0x8c, 0x10, {0xf71, "3e287c3c548f", @short="a1f82b71e13fa479"}}, @ibss={0x6, 0x2, 0x3}, @dsss={0x3, 0x1, 0x6c}, @random_vendor={0xdd, 0xff, "d0893356cc5915ae525c8a35f855e4cf595764c71ff9359a483e8ca6bdaa783be2d2493831c6cca1512e3eb495e777b46355f98f0454ea7827a44af31e1419ff0c8e972e7800cd30ac2899e6d1f76e3bb0768e780afd3f1f769e16b36581ae9a8e2001ae1b8f40d0b64d685aa844c4f64900380a42eea15d0121a0ca07b9cfa22acd320ee8b15b3923b5c24a9de6a680282d7f5d8f1b5bd943978b1a6538e1a061b268c69bf379c7a9eec284b2bfdf2d7597a73806ec55e2adea4576e5d44b79bcc2cf3f4917ff5d7e0f1bf4414988536ef842236fa3c39d67968bc6963d4f872c24f84e54c87e25e6e7d4b66610e164e3bb8609ebf67522adb6507cf05763"}]}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x8000, 0x3, 0x4, 0x0, {0x4, 0x6, 0x0, 0x6, 0x0, 0x1, 0x1}, 0x1, 0x5, 0x5}}, @crypto_settings=[@NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x4}, @NL80211_ATTR_CONTROL_PORT={0x4}, @NL80211_ATTR_PMK={0x37, 0xfe, "ffa9810f2191c47626e069c80026307e2166e4c124c7b57195558300c1e9ef34415f67b204a503b34ff58b0f6a1399e78d2e3f"}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0x14, 0x49, [0xfac0a, 0xfac06, 0xfac09, 0xfac05]}, @NL80211_ATTR_PMK={0x2f, 0xfe, "cff65f48a4a6aa581c70ee7b9c481bfbf2567a6a732c26958dc9940a957a00aeba1325d39e35fe5b64c941"}, @NL80211_ATTR_AKM_SUITES={0xc, 0x4c, [0xfac11, 0xfac11]}]]}, 0x240}, 0x1, 0x0, 0x0, 0x20000841}, 0xa841)
syz_genetlink_get_family_id$batadv(&(0x7f00000019c0), r5)

1.576018528s ago: executing program 1 (id=98):
r0 = gettid()
timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)=<r1=>0x0)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
timer_settime(r1, 0x1, &(0x7f0000000040), 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
r2 = socket$igmp6(0xa, 0x3, 0x2)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000100)=0xc)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={0xffffffffffffffff, 0x2, 0x4}, 0xc)

1.575562338s ago: executing program 33 (id=98):
r0 = gettid()
timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)=<r1=>0x0)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
timer_settime(r1, 0x1, &(0x7f0000000040), 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
r2 = socket$igmp6(0xa, 0x3, 0x2)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000100)=0xc)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={0xffffffffffffffff, 0x2, 0x4}, 0xc)

1.574836528s ago: executing program 3 (id=99):
syz_usb_connect$cdc_ncm(0x6, 0x73, &(0x7f0000000040)=ANY=[@ANYBLOB="12015002020000002505a1a44000010203010902610002010484080000000001020d000005240600010524020006000606"], 0x0)
r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="0d01000009000008250592d20700006a3b010902241700fa0074980904e4ff11070103000905010200ffe00000090582"], 0x0)
r1 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r1, &(0x7f0000000000), 0x10)
clock_gettime(0x0, &(0x7f0000000080)={<r2=>0x0, <r3=>0x0})
sendmsg$can_bcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x5, 0x4c3, 0x1000, {r2, r3/1000+60000}, {}, {0x0, 0x0, 0x1}, 0x1, @can={{0x0, 0x0, 0x1}, 0xff, 0x2, 0x0, 0x0, "d5bea2784d005b17"}}, 0x48}, 0x1, 0x0, 0x0, 0x5}, 0x408c1)
syz_usb_control_io(r0, 0x0, &(0x7f0000000200)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
nanosleep(&(0x7f00000001c0)={0x77359400}, &(0x7f00000002c0))
syz_open_dev$char_usb(0xc, 0xb4, 0x0)

1.574530358s ago: executing program 4 (id=100):
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000140)='.\x02\x00', 0x22000402, &(0x7f0000000180)={[{@noinit_itable}, {@init_itable}, {@noinit_itable}, {@discard}, {@min_batch_time={'min_batch_time', 0x3d, 0x6}}, {@grpjquota, 0x2e}, {@mb_optimize_scan}, {@errors_remount}, {@jqfmt_vfsv1}, {@usrquota}, {@usrjquota_path={'usrjquota', 0x3d, '.\x02'}}, {@resgid}, {@nolazytime}], [], 0x2c}, 0x81, 0x4fa, &(0x7f0000000280)="$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")
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="5500000018007f03c0fe15b282a380930a50000248a8430b916d0200390009002300ff6c02000000040005001601ffdd070b566881b38432009b3100b125ca997b5fdf13090200fb572fbc10080400240200e260f9", 0x55}], 0x1}, 0x4008014)
syz_mount_image$exfat(&(0x7f0000001300), &(0x7f0000001340)='.\x02\x00', 0x2000cd0, &(0x7f0000001380)=ANY=[@ANYRES64=0x0, @ANYRES16, @ANYRESHEX], 0x1, 0x1517, &(0x7f00000013c0)="$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")

1.552877041s ago: executing program 0 (id=101):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001940)={0x3, 0xc, &(0x7f0000001a00)=ANY=[@ANYBLOB="180200000000000000000000000000008500000011000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000710000009500000000000000"], &(0x7f0000001a80)='GPL\x00'}, 0x65)
syz_usb_connect(0x2, 0xc7, &(0x7f00000002c0)=ANY=[@ANYBLOB="12011002000000408680d20a0000010200010902b5000201008030080b00020e03000009040000010e010001000134"], &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0}) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001ac0)={r0, 0x0, 0xe, 0x0, &(0x7f0000001b40)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xa5bc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x1, 0x0, 0x1, 0x6a4, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x5}, 0x50) (async)
getsockname$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000200)=0x14)
ioctl$XFS_IOC_OPEN_BY_HANDLE(r0, 0xc038586b, &(0x7f0000000580)={r0, &(0x7f0000000500)='\x00\x00\xa1\xf7\xf8v\xdc>\x16\x82\xc7K~O\xb5\x9c$\x83\xd3M\x1f}\x1ch\x99N\x18\x1c\x1a\x06\xfa', 0x400280, &(0x7f00000004c0)={@_ha_fsid={[0xc, 0x8dd]}, {0xe8ce, 0x0, 0x6, 0x5}}, 0x6, &(0x7f00000005c0)={@_ha_fsid}, &(0x7f0000000540)=0x100}) (async)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_lsm={0x1d, 0x11, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000040000000000900000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018390000030000000000001300000000bf9100000000b7020000010000008500000084000000b70000000000000095000000000000000000"], &(0x7f0000000140)='syzkaller\x00', 0x200, 0x7, &(0x7f0000000180)=""/7, 0x40f00, 0x2e, '\x00', r2, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000000280)={0x4, 0x3, 0x5, 0xf9a}, 0x10, 0x0, 0x0, 0x6, &(0x7f00000002c0), &(0x7f0000000300)=[{0x2, 0x3, 0xc, 0x9}, {0x1, 0x1, 0x4, 0xa}, {0x4, 0x5, 0xf, 0xb}, {0x3, 0x4, 0x2, 0x2}, {0x6, 0x3, 0x7, 0x8}, {0x1, 0x4, 0x0, 0x6}]}, 0x94)

1.335800983s ago: executing program 4 (id=102):
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x1a1200, 0x0)
read$FUSE(r0, &(0x7f0000000e80)={0x2020}, 0xd4be3a3d) (async)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) (async)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000140)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) (async)
mlock(&(0x7f0000ffa000/0x4000)=nil, 0x4000)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) (async)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f00000000c0)="66b843008ee066bad004ec0f01c966ba4100b0a5eec42130c6a816eb71e235b8010000000f01d9660f38822042394a04b8010000000f01d9410f01df", 0x3c}], 0x1, 0x43, 0x0, 0x0) (async)
ioctl$KVM_RUN(r3, 0xae80, 0x0) (async)
ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000280)={{0x1, 0x2000, 0xb, 0xad, 0x4, 0xff, 0x7f, 0x5, 0x0, 0x2b, 0x9}, {0x2, 0x70000, 0x0, 0x2a, 0x8, 0x0, 0x7f, 0x1, 0x3, 0xf0, 0x9, 0x5}, {0x2, 0x5000, 0x8, 0x5, 0x1, 0xf3, 0x0, 0xb, 0x0, 0x5, 0xb, 0x9}, {0xdddd0000, 0xffff1000, 0x0, 0xe7, 0x4, 0x2, 0x1, 0x86, 0x8, 0x8b, 0xd, 0xed}, {0x4, 0x8080000, 0x8, 0x3, 0x5, 0x86, 0x9, 0x7f, 0xa, 0x0, 0xf2, 0x43}, {0x70000, 0x6000, 0xb, 0x7c, 0xb1, 0x24, 0x7f, 0xaf, 0x83, 0xc, 0x15, 0x3d}, {0xd000, 0x100002, 0x9, 0x3, 0x2, 0x5, 0x0, 0x3, 0x5, 0x7f, 0x5}, {0x3000, 0xffff1000, 0x5, 0x5, 0x9, 0xf, 0x0, 0x37, 0x4, 0x9, 0xf0}, {0xeeee8000, 0x2070}, {0x2, 0x7}, 0x80000033, 0x0, 0xeeef0000, 0x2104, 0x0, 0x0, 0x80a0000, [0x4, 0x7, 0x7, 0x9]}) (async)
ioctl$KVM_RUN(r3, 0xae80, 0x0) (async)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x8002, &(0x7f0000000240), 0xfc, 0x4f5, &(0x7f0000000980)="$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")

995.492018ms ago: executing program 4 (id=103):
r0 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@gettclass={0x24, 0x2a, 0x200, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x10, 0xfff2}, {0xb, 0x4}, {0x44e9f4f6f6d4d2eb, 0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000080}, 0x4004)
r1 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0)
preadv(r1, &(0x7f00000020c0)=[{&(0x7f00000001c0)=""/250, 0xfa}, {&(0x7f0000000300)=""/208, 0xd0}, {&(0x7f0000000400)=""/204, 0xcc}, {&(0x7f0000000500)=""/230, 0xe6}, {&(0x7f0000000600)=""/36, 0x24}, {&(0x7f0000000f40)=""/4096, 0x1000}, {&(0x7f0000001f40)=""/99, 0x63}, {&(0x7f0000001fc0)=""/165, 0xa5}, {&(0x7f0000002080)=""/11, 0xb}], 0x9, 0x3fa, 0x6)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1, 0x2})
r2 = socket$inet6(0xa, 0x3, 0x8000000003c)
connect$inet6(r2, &(0x7f0000000180)={0xa, 0x3, 0xc, @loopback, 0x9}, 0x1c)
sendmsg(r2, &(0x7f00000000c0)={0x0, 0x33, &(0x7f0000000100)=[{&(0x7f0000000000)=',', 0x584}], 0x1, 0x0, 0x0, 0x2c}, 0x44004)

688.431549ms ago: executing program 4 (id=104):
r0 = userfaultfd(0x801)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3})
ppoll(&(0x7f0000000280)=[{r0, 0x300}, {r0, 0x8}, {r0, 0x8280}, {r0, 0x8000}], 0x4, 0x0, &(0x7f0000000300)={[0x8]}, 0x8)
ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000240)={{&(0x7f0000ff9000/0x4000)=nil, 0x4000}})
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
socket$netlink(0x10, 0x3, 0x0)
unshare(0x4000400)
r1 = socket$packet(0x11, 0x3, 0x300)
r2 = socket(0x10, 0x2, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), r2)
getsockname$packet(r2, &(0x7f00000001c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newlink={0x40, 0x10, 0x439, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, 0x9901, 0x49a41}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @remote}, @IFLA_IPTUN_TTL={0x5}]}}}]}, 0x40}}, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0)
r4 = getpid()
rt_tgsigqueueinfo(r4, r4, 0x11, &(0x7f0000000100)={0x1b, 0x8, 0x512d})
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r5 = socket$inet6(0xa, 0x3, 0x38)
connect$inet6(r5, &(0x7f0000000b00)={0xa, 0x4e23, 0x0, @loopback, 0xb}, 0x1c)
socket$packet(0x11, 0x3, 0x300)
writev(r5, &(0x7f0000000bc0)=[{&(0x7f0000000c00)=',', 0xf338}], 0x1)
sendto$packet(r1, &(0x7f0000000680)="05d936277c6f5422007f83477ca1b278e3e4018a34e7bfd3de1a00ad6762646c95c716727eb53bcc", 0x28, 0x40880, &(0x7f00000006c0)={0x11, 0x86dd, r3, 0x1, 0x4, 0x6, @local}, 0x14)

642.085494ms ago: executing program 6 (id=107):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1)
syz_mount_image$erofs(&(0x7f00000000c0), &(0x7f0000000100)='./file2\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYRES16=0x0, @ANYRESOCT, @ANYRES32], 0x1, 0x1b9, &(0x7f00000002c0)="$eJxiGAWjYBSMWPDo4dcH/7/YPudgYGDgYVBhYIeKv2BGqGFCUn+P413tQR+38P7YpafYH+hxYjPz/3/i7WdhYGA44MjMUALXi6pbBUqHMDDB2aEMTAyaUHY4AyODHpSdwMDEEAZlpzIwMkRC2VlI7HyQej29tMycVL3k/JwUEMMARBiCCCMQYYzuvreNjAwpSO5jBNFQfnFlVXZiTk5qERmMl14MDMQoJhR+bx2ZGGyR3IccX7CwMUAKP0MGVgZDKNuYgZEhGMq2YGCHhQ0kSJD8L8WCMB+aNDgp9f8oY1gzfv6HgMHiHioy+KE5hoZWgIynicnvsEsxEqe97+///8TZhSif/i9kZFBHKp8gRckscFWjX5JboF9cWaWbmZuYnpqemmdkZGxmYGJgYGqkDy6IICSe8o8TXD5xIZnPikMtGyMbQ0ViSUmRIYSE840gJLYSlwlc/jExaChD+KCynw3d4L+ISouRgeHEHag7/v//X8/AoMGO0/GjYBSMglEwgECegRFWVv1ngTEcoJL/4cAoYIDdOQpGwSgYBaNgFIyCUTAKRsEoGAWjYBSMAvIBIAAA//8+/n7D")
r1 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./file2\x00', 0x80000, 0x40)
r2 = socket(0x2, 0xa, 0x300)
r3 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000180)={0x802, 0x0, 0x1, 0x7}, 0x10)
sendmsg$nl_generic(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="200000005200010003000000000000000a0000000c00", @ANYRES32=r3], 0x20}}, 0x0)
sendmsg$inet6(r3, &(0x7f0000000840)={&(0x7f00000004c0)={0xa, 0x4e20, 0xfffffffe, @remote, 0x4}, 0x1c, &(0x7f00000006c0)=[{&(0x7f0000000500)="90605a9e1cf9b224ab28a273a3ad43886ed43ec46e21f00370dcb80bbe7feac980578847791fa72acad8e2a5ce540574527b546dea517ada747ee84fa002e51ea37d651190e3b7507856691700eca262bbc039618e133ab6b36c305121ec7d01bf4b93586f76e7f6763826e8216183cda6af6ae64d438e7093986cc21e0eaec00a587e73db383a1a54bd6b10cea0824a2983d61f95aad34d9c32d4a6cb215cdb1343f35e772b2e820c175a22a219b5244a401adf2101e3969fa0842664c6fce73e81d2db4b290ecf0591705ebb4cb63537ff06b8280f3717c72d672a21", 0xdd}, {&(0x7f0000000600)="6add68bcf1156217704ad9579d37209954c34a2cb1e63d769c663e9088f89c65f58473074a545a175bd9e64b28641c760be4cb4353f5cf55895279ff5d353c731d917120c6ed1af83a1cae6d123f16b7f3fb989b8a85e02cea4985e324a8a88915942ba64b48960a3f289a8528452398ee8d665f71a7cdc5b969e1685177786d", 0x80}, {&(0x7f0000000680)="22081af5452424f0c550bb189e4538aee82611160ac1562999000b3b3d874c5e0cca9891c3cbd2e0", 0x28}], 0x3, &(0x7f0000000700)=[@rthdr={{0x78, 0x29, 0x39, {0x32, 0xc, 0x0, 0x8, 0x0, [@remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @loopback, @private2={0xfc, 0x2, '\x00', 0x1}, @empty, @rand_addr=' \x01\x00']}}}, @dstopts_2292={{0x30, 0x29, 0x4, {0xc, 0x2, '\x00', [@ra={0x5, 0x2, 0xd8a}, @ra={0x5, 0x2, 0x6e90}, @padn={0x1, 0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x3}}, @rthdrdstopts={{0x50, 0x29, 0x37, {0x5c, 0x6, '\x00', [@padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0xf0}, @calipso={0x7, 0x10, {0x1, 0x2, 0x40, 0x7, [0x8]}}, @pad1, @hao={0xc9, 0x10, @loopback}, @enc_lim={0x4, 0x1, 0x6}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x3ff}}], 0x128}, 0x0)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000080)=[{0x30, 0x5, 0x1, 0xfffff034}, {0x6, 0x1, 0x6, 0x6}]}, 0x10)
mmap(&(0x7f00006d6000/0x3000)=nil, 0x3000, 0x80000d, 0x10012, r1, 0x719e7000)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3)
close(r0)
r4 = socket(0x2, 0x2, 0x0)
shutdown(r4, 0x0)
r5 = signalfd4(0xffffffffffffffff, &(0x7f0000000040)={[0x7fffffffffffffff]}, 0x8, 0x0)
ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0)
ioctl$OCFS2_IOC_RESVSP(r5, 0x40305828, 0x0)
r6 = openat$uinput(0xffffffffffffff9c, 0x0, 0x800, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60)
ioctl$UI_SET_LEDBIT(r6, 0x40045569, 0x11)

615.662217ms ago: executing program 5 (id=54):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400), 0x41, 0x0)
mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1000000)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x47f, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x18}}}}]}}]}}, 0x0)
unshare(0x22020600)
socket$can_raw(0x1d, 0x3, 0x1)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_debug_messages', 0x242, 0x10c)
timerfd_gettime(r2, &(0x7f0000000100))
write$tcp_mem(r2, &(0x7f0000000140)={0x9, 0x20, 0x8400000000000000, 0x20, 0xfffffffffffffffb}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x4, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000008500000029000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmmsg$unix(r4, 0x0, 0x0, 0x0)
r5 = accept(r2, 0x0, &(0x7f0000000380))
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
r7 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f00000003c0)=0x207, 0x4)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000480)={'erspan0\x00', <r8=>0x0})
r9 = socket$inet6_udp(0xa, 0x2, 0x0)
getsockopt$inet6_int(r9, 0x29, 0x35, 0x0, &(0x7f00000004c0))
sendto$packet(r7, &(0x7f0000000500)="05031600d3fc140000004788031c09103c28", 0xfce0, 0x4, &(0x7f0000000540)={0x11, 0x86dd, r8, 0x1, 0x0, 0x6, @multicast}, 0x14)
sendmsg$nl_route_sched(r5, &(0x7f0000000580)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x1810001}, 0xc, &(0x7f0000000600)={&(0x7f0000000640)=@newtclass={0x100, 0x28, 0x8, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x9, 0xf}, {0xfff2, 0xfff2}, {0x10, 0x3}}, [@tclass_kind_options=@c_qfq={{0x8}, {0x44, 0x2, [@TCA_QFQ_LMAX={0x8}, @TCA_QFQ_LMAX={0x8, 0x2, 0x8}, @TCA_QFQ_WEIGHT={0x8, 0x1, 0x4}, @TCA_QFQ_WEIGHT={0x8, 0x1, 0x4}, @TCA_QFQ_WEIGHT={0x8, 0x1, 0x6}, @TCA_QFQ_WEIGHT={0x8, 0x1, 0xe7f}, @TCA_QFQ_WEIGHT={0x8, 0x1, 0x4}, @TCA_QFQ_WEIGHT={0x8, 0x1, 0x8c0b}]}}, @tclass_kind_options=@c_fq_codel={0xd}, @TCA_RATE={0x6, 0x5, {0x50, 0xa1}}, @tclass_kind_options=@c_htb={{0x8}, {0x64, 0x2, [@TCA_HTB_RATE64={0xc, 0x6, 0x80}, @TCA_HTB_RATE64={0xc, 0x6, 0xaa}, @TCA_HTB_RATE64={0xc, 0x6, 0x400}, @TCA_HTB_CEIL64={0xc, 0x7, 0x8}, @TCA_HTB_PARMS={0x30, 0x1, {{0x1, 0x1, 0xffe6, 0x9, 0x7, 0x7de5}, {0xf5, 0x3, 0x109, 0x81, 0x8, 0xfffffffd}, 0x5, 0x0, 0x10001, 0xd, 0xbc0c}}]}}, @tclass_kind_options=@c_skbprio={0xc}]}, 0x100}, 0x1, 0x0, 0x0, 0x50}, 0x440c0)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(&(0x7f0000000740), r10)
ioctl$BTRFS_IOC_QGROUP_CREATE(r10, 0x4010942a, &(0x7f0000000780)={0x1, 0x101})
recvmmsg(r3, &(0x7f00000007c0), 0x47538a5, 0x40000144, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x18, {[@global=@item_012={0x1, 0x1, 0x8, "01"}, @global=@item_012={0x1, 0x1, 0x5, '\x00'}, @global=@item_012={0x1, 0x1, 0x1, "ff"}, @local=@item_012={0x1, 0x2, 0x0, "04"}, @main=@item_012={0x1, 0x0, 0x9, "01"}, @local=@item_4={0x3, 0x2, 0x3, "d39ab733"}, @main=@item_012={0x2, 0x0, 0x9, "b2a2"}, @global=@item_012={0x1, 0x1, 0x7, '\b'}, @global=@item_012={0x2, 0x1, 0x2, "c5bd"}, @local]}}, 0x0}, 0x0)
ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000440)={0xcf47, 0x4cc, 0xffff, 0x9dff, 0x1, "8003e3ffff072000"})

557.721842ms ago: executing program 6 (id=107):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1)
syz_mount_image$erofs(&(0x7f00000000c0), &(0x7f0000000100)='./file2\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYRES16=0x0, @ANYRESOCT, @ANYRES32], 0x1, 0x1b9, &(0x7f00000002c0)="$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")
r1 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./file2\x00', 0x80000, 0x40)
r2 = socket(0x2, 0xa, 0x300)
r3 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000180)={0x802, 0x0, 0x1, 0x7}, 0x10)
sendmsg$nl_generic(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="200000005200010003000000000000000a0000000c00", @ANYRES32=r3], 0x20}}, 0x0)
sendmsg$inet6(r3, &(0x7f0000000840)={&(0x7f00000004c0)={0xa, 0x4e20, 0xfffffffe, @remote, 0x4}, 0x1c, &(0x7f00000006c0)=[{&(0x7f0000000500)="90605a9e1cf9b224ab28a273a3ad43886ed43ec46e21f00370dcb80bbe7feac980578847791fa72acad8e2a5ce540574527b546dea517ada747ee84fa002e51ea37d651190e3b7507856691700eca262bbc039618e133ab6b36c305121ec7d01bf4b93586f76e7f6763826e8216183cda6af6ae64d438e7093986cc21e0eaec00a587e73db383a1a54bd6b10cea0824a2983d61f95aad34d9c32d4a6cb215cdb1343f35e772b2e820c175a22a219b5244a401adf2101e3969fa0842664c6fce73e81d2db4b290ecf0591705ebb4cb63537ff06b8280f3717c72d672a21", 0xdd}, {&(0x7f0000000600)="6add68bcf1156217704ad9579d37209954c34a2cb1e63d769c663e9088f89c65f58473074a545a175bd9e64b28641c760be4cb4353f5cf55895279ff5d353c731d917120c6ed1af83a1cae6d123f16b7f3fb989b8a85e02cea4985e324a8a88915942ba64b48960a3f289a8528452398ee8d665f71a7cdc5b969e1685177786d", 0x80}, {&(0x7f0000000680)="22081af5452424f0c550bb189e4538aee82611160ac1562999000b3b3d874c5e0cca9891c3cbd2e0", 0x28}], 0x3, &(0x7f0000000700)=[@rthdr={{0x78, 0x29, 0x39, {0x32, 0xc, 0x0, 0x8, 0x0, [@remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @loopback, @private2={0xfc, 0x2, '\x00', 0x1}, @empty, @rand_addr=' \x01\x00']}}}, @dstopts_2292={{0x30, 0x29, 0x4, {0xc, 0x2, '\x00', [@ra={0x5, 0x2, 0xd8a}, @ra={0x5, 0x2, 0x6e90}, @padn={0x1, 0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x3}}, @rthdrdstopts={{0x50, 0x29, 0x37, {0x5c, 0x6, '\x00', [@padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0xf0}, @calipso={0x7, 0x10, {0x1, 0x2, 0x40, 0x7, [0x8]}}, @pad1, @hao={0xc9, 0x10, @loopback}, @enc_lim={0x4, 0x1, 0x6}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x3ff}}], 0x128}, 0x0)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000080)=[{0x30, 0x5, 0x1, 0xfffff034}, {0x6, 0x1, 0x6, 0x6}]}, 0x10)
mmap(&(0x7f00006d6000/0x3000)=nil, 0x3000, 0x80000d, 0x10012, r1, 0x719e7000)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3)
close(r0)
r4 = socket(0x2, 0x2, 0x0)
shutdown(r4, 0x0)
r5 = signalfd4(0xffffffffffffffff, &(0x7f0000000040)={[0x7fffffffffffffff]}, 0x8, 0x0)
ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0)
ioctl$OCFS2_IOC_RESVSP(r5, 0x40305828, 0x0)
r6 = openat$uinput(0xffffffffffffff9c, 0x0, 0x800, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60)
ioctl$UI_SET_LEDBIT(r6, 0x40045569, 0x11)

489.39341ms ago: executing program 5 (id=54):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400), 0x41, 0x0)
mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1000000)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x47f, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x18}}}}]}}]}}, 0x0)
unshare(0x22020600)
socket$can_raw(0x1d, 0x3, 0x1)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_debug_messages', 0x242, 0x10c)
timerfd_gettime(r2, &(0x7f0000000100))
write$tcp_mem(r2, &(0x7f0000000140)={0x9, 0x20, 0x8400000000000000, 0x20, 0xfffffffffffffffb}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x4, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000008500000029000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmmsg$unix(r4, 0x0, 0x0, 0x0)
r5 = accept(r2, 0x0, &(0x7f0000000380))
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
r7 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f00000003c0)=0x207, 0x4)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000480)={'erspan0\x00', <r8=>0x0})
r9 = socket$inet6_udp(0xa, 0x2, 0x0)
getsockopt$inet6_int(r9, 0x29, 0x35, 0x0, &(0x7f00000004c0))
sendto$packet(r7, &(0x7f0000000500)="05031600d3fc140000004788031c09103c28", 0xfce0, 0x4, &(0x7f0000000540)={0x11, 0x86dd, r8, 0x1, 0x0, 0x6, @multicast}, 0x14)
sendmsg$nl_route_sched(r5, &(0x7f0000000580)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x1810001}, 0xc, &(0x7f0000000600)={&(0x7f0000000640)=@newtclass={0x100, 0x28, 0x8, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x9, 0xf}, {0xfff2, 0xfff2}, {0x10, 0x3}}, [@tclass_kind_options=@c_qfq={{0x8}, {0x44, 0x2, [@TCA_QFQ_LMAX={0x8}, @TCA_QFQ_LMAX={0x8, 0x2, 0x8}, @TCA_QFQ_WEIGHT={0x8, 0x1, 0x4}, @TCA_QFQ_WEIGHT={0x8, 0x1, 0x4}, @TCA_QFQ_WEIGHT={0x8, 0x1, 0x6}, @TCA_QFQ_WEIGHT={0x8, 0x1, 0xe7f}, @TCA_QFQ_WEIGHT={0x8, 0x1, 0x4}, @TCA_QFQ_WEIGHT={0x8, 0x1, 0x8c0b}]}}, @tclass_kind_options=@c_fq_codel={0xd}, @TCA_RATE={0x6, 0x5, {0x50, 0xa1}}, @tclass_kind_options=@c_htb={{0x8}, {0x64, 0x2, [@TCA_HTB_RATE64={0xc, 0x6, 0x80}, @TCA_HTB_RATE64={0xc, 0x6, 0xaa}, @TCA_HTB_RATE64={0xc, 0x6, 0x400}, @TCA_HTB_CEIL64={0xc, 0x7, 0x8}, @TCA_HTB_PARMS={0x30, 0x1, {{0x1, 0x1, 0xffe6, 0x9, 0x7, 0x7de5}, {0xf5, 0x3, 0x109, 0x81, 0x8, 0xfffffffd}, 0x5, 0x0, 0x10001, 0xd, 0xbc0c}}]}}, @tclass_kind_options=@c_skbprio={0xc}]}, 0x100}, 0x1, 0x0, 0x0, 0x50}, 0x440c0)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(&(0x7f0000000740), r10)
ioctl$BTRFS_IOC_QGROUP_CREATE(r10, 0x4010942a, &(0x7f0000000780)={0x1, 0x101})
recvmmsg(r3, &(0x7f00000007c0), 0x47538a5, 0x40000144, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x18, {[@global=@item_012={0x1, 0x1, 0x8, "01"}, @global=@item_012={0x1, 0x1, 0x5, '\x00'}, @global=@item_012={0x1, 0x1, 0x1, "ff"}, @local=@item_012={0x1, 0x2, 0x0, "04"}, @main=@item_012={0x1, 0x0, 0x9, "01"}, @local=@item_4={0x3, 0x2, 0x3, "d39ab733"}, @main=@item_012={0x2, 0x0, 0x9, "b2a2"}, @global=@item_012={0x1, 0x1, 0x7, '\b'}, @global=@item_012={0x2, 0x1, 0x2, "c5bd"}, @local]}}, 0x0}, 0x0)
ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000440)={0xcf47, 0x4cc, 0xffff, 0x9dff, 0x1, "8003e3ffff072000"})

430.488456ms ago: executing program 6 (id=107):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1)
syz_mount_image$erofs(&(0x7f00000000c0), &(0x7f0000000100)='./file2\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYRES16=0x0, @ANYRESOCT, @ANYRES32], 0x1, 0x1b9, &(0x7f00000002c0)="$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")
r1 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./file2\x00', 0x80000, 0x40)
r2 = socket(0x2, 0xa, 0x300)
r3 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000180)={0x802, 0x0, 0x1, 0x7}, 0x10)
sendmsg$nl_generic(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="200000005200010003000000000000000a0000000c00", @ANYRES32=r3], 0x20}}, 0x0)
sendmsg$inet6(r3, &(0x7f0000000840)={&(0x7f00000004c0)={0xa, 0x4e20, 0xfffffffe, @remote, 0x4}, 0x1c, &(0x7f00000006c0)=[{&(0x7f0000000500)="90605a9e1cf9b224ab28a273a3ad43886ed43ec46e21f00370dcb80bbe7feac980578847791fa72acad8e2a5ce540574527b546dea517ada747ee84fa002e51ea37d651190e3b7507856691700eca262bbc039618e133ab6b36c305121ec7d01bf4b93586f76e7f6763826e8216183cda6af6ae64d438e7093986cc21e0eaec00a587e73db383a1a54bd6b10cea0824a2983d61f95aad34d9c32d4a6cb215cdb1343f35e772b2e820c175a22a219b5244a401adf2101e3969fa0842664c6fce73e81d2db4b290ecf0591705ebb4cb63537ff06b8280f3717c72d672a21", 0xdd}, {&(0x7f0000000600)="6add68bcf1156217704ad9579d37209954c34a2cb1e63d769c663e9088f89c65f58473074a545a175bd9e64b28641c760be4cb4353f5cf55895279ff5d353c731d917120c6ed1af83a1cae6d123f16b7f3fb989b8a85e02cea4985e324a8a88915942ba64b48960a3f289a8528452398ee8d665f71a7cdc5b969e1685177786d", 0x80}, {&(0x7f0000000680)="22081af5452424f0c550bb189e4538aee82611160ac1562999000b3b3d874c5e0cca9891c3cbd2e0", 0x28}], 0x3, &(0x7f0000000700)=[@rthdr={{0x78, 0x29, 0x39, {0x32, 0xc, 0x0, 0x8, 0x0, [@remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @loopback, @private2={0xfc, 0x2, '\x00', 0x1}, @empty, @rand_addr=' \x01\x00']}}}, @dstopts_2292={{0x30, 0x29, 0x4, {0xc, 0x2, '\x00', [@ra={0x5, 0x2, 0xd8a}, @ra={0x5, 0x2, 0x6e90}, @padn={0x1, 0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x3}}, @rthdrdstopts={{0x50, 0x29, 0x37, {0x5c, 0x6, '\x00', [@padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0xf0}, @calipso={0x7, 0x10, {0x1, 0x2, 0x40, 0x7, [0x8]}}, @pad1, @hao={0xc9, 0x10, @loopback}, @enc_lim={0x4, 0x1, 0x6}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x3ff}}], 0x128}, 0x0)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000080)=[{0x30, 0x5, 0x1, 0xfffff034}, {0x6, 0x1, 0x6, 0x6}]}, 0x10)
mmap(&(0x7f00006d6000/0x3000)=nil, 0x3000, 0x80000d, 0x10012, r1, 0x719e7000)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3)
close(r0)
r4 = socket(0x2, 0x2, 0x0)
shutdown(r4, 0x0)
r5 = signalfd4(0xffffffffffffffff, &(0x7f0000000040)={[0x7fffffffffffffff]}, 0x8, 0x0)
ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0)
ioctl$OCFS2_IOC_RESVSP(r5, 0x40305828, 0x0)
r6 = openat$uinput(0xffffffffffffff9c, 0x0, 0x800, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60)
ioctl$UI_SET_LEDBIT(r6, 0x40045569, 0x11)

376.614731ms ago: executing program 5 (id=54):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400), 0x41, 0x0)
mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1000000)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x47f, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x18}}}}]}}]}}, 0x0)
unshare(0x22020600)
socket$can_raw(0x1d, 0x3, 0x1)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_debug_messages', 0x242, 0x10c)
timerfd_gettime(r2, &(0x7f0000000100))
write$tcp_mem(r2, &(0x7f0000000140)={0x9, 0x20, 0x8400000000000000, 0x20, 0xfffffffffffffffb}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x4, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000008500000029000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmmsg$unix(r4, 0x0, 0x0, 0x0)
r5 = accept(r2, 0x0, &(0x7f0000000380))
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
r7 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f00000003c0)=0x207, 0x4)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000480)={'erspan0\x00', <r8=>0x0})
r9 = socket$inet6_udp(0xa, 0x2, 0x0)
getsockopt$inet6_int(r9, 0x29, 0x35, 0x0, &(0x7f00000004c0))
sendto$packet(r7, &(0x7f0000000500)="05031600d3fc140000004788031c09103c28", 0xfce0, 0x4, &(0x7f0000000540)={0x11, 0x86dd, r8, 0x1, 0x0, 0x6, @multicast}, 0x14)
sendmsg$nl_route_sched(r5, &(0x7f0000000580)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x1810001}, 0xc, &(0x7f0000000600)={&(0x7f0000000640)=@newtclass={0x100, 0x28, 0x8, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x9, 0xf}, {0xfff2, 0xfff2}, {0x10, 0x3}}, [@tclass_kind_options=@c_qfq={{0x8}, {0x44, 0x2, [@TCA_QFQ_LMAX={0x8}, @TCA_QFQ_LMAX={0x8, 0x2, 0x8}, @TCA_QFQ_WEIGHT={0x8, 0x1, 0x4}, @TCA_QFQ_WEIGHT={0x8, 0x1, 0x4}, @TCA_QFQ_WEIGHT={0x8, 0x1, 0x6}, @TCA_QFQ_WEIGHT={0x8, 0x1, 0xe7f}, @TCA_QFQ_WEIGHT={0x8, 0x1, 0x4}, @TCA_QFQ_WEIGHT={0x8, 0x1, 0x8c0b}]}}, @tclass_kind_options=@c_fq_codel={0xd}, @TCA_RATE={0x6, 0x5, {0x50, 0xa1}}, @tclass_kind_options=@c_htb={{0x8}, {0x64, 0x2, [@TCA_HTB_RATE64={0xc, 0x6, 0x80}, @TCA_HTB_RATE64={0xc, 0x6, 0xaa}, @TCA_HTB_RATE64={0xc, 0x6, 0x400}, @TCA_HTB_CEIL64={0xc, 0x7, 0x8}, @TCA_HTB_PARMS={0x30, 0x1, {{0x1, 0x1, 0xffe6, 0x9, 0x7, 0x7de5}, {0xf5, 0x3, 0x109, 0x81, 0x8, 0xfffffffd}, 0x5, 0x0, 0x10001, 0xd, 0xbc0c}}]}}, @tclass_kind_options=@c_skbprio={0xc}]}, 0x100}, 0x1, 0x0, 0x0, 0x50}, 0x440c0)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(&(0x7f0000000740), r10)
ioctl$BTRFS_IOC_QGROUP_CREATE(r10, 0x4010942a, &(0x7f0000000780)={0x1, 0x101})
recvmmsg(r3, &(0x7f00000007c0), 0x47538a5, 0x40000144, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x18, {[@global=@item_012={0x1, 0x1, 0x8, "01"}, @global=@item_012={0x1, 0x1, 0x5, '\x00'}, @global=@item_012={0x1, 0x1, 0x1, "ff"}, @local=@item_012={0x1, 0x2, 0x0, "04"}, @main=@item_012={0x1, 0x0, 0x9, "01"}, @local=@item_4={0x3, 0x2, 0x3, "d39ab733"}, @main=@item_012={0x2, 0x0, 0x9, "b2a2"}, @global=@item_012={0x1, 0x1, 0x7, '\b'}, @global=@item_012={0x2, 0x1, 0x2, "c5bd"}, @local]}}, 0x0}, 0x0)
ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000440)={0xcf47, 0x4cc, 0xffff, 0x9dff, 0x1, "8003e3ffff072000"})

303.917889ms ago: executing program 6 (id=107):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1)
syz_mount_image$erofs(&(0x7f00000000c0), &(0x7f0000000100)='./file2\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYRES16=0x0, @ANYRESOCT, @ANYRES32], 0x1, 0x1b9, &(0x7f00000002c0)="$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")
r1 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./file2\x00', 0x80000, 0x40)
r2 = socket(0x2, 0xa, 0x300)
r3 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000180)={0x802, 0x0, 0x1, 0x7}, 0x10)
sendmsg$nl_generic(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="200000005200010003000000000000000a0000000c00", @ANYRES32=r3], 0x20}}, 0x0)
sendmsg$inet6(r3, &(0x7f0000000840)={&(0x7f00000004c0)={0xa, 0x4e20, 0xfffffffe, @remote, 0x4}, 0x1c, &(0x7f00000006c0)=[{&(0x7f0000000500)="90605a9e1cf9b224ab28a273a3ad43886ed43ec46e21f00370dcb80bbe7feac980578847791fa72acad8e2a5ce540574527b546dea517ada747ee84fa002e51ea37d651190e3b7507856691700eca262bbc039618e133ab6b36c305121ec7d01bf4b93586f76e7f6763826e8216183cda6af6ae64d438e7093986cc21e0eaec00a587e73db383a1a54bd6b10cea0824a2983d61f95aad34d9c32d4a6cb215cdb1343f35e772b2e820c175a22a219b5244a401adf2101e3969fa0842664c6fce73e81d2db4b290ecf0591705ebb4cb63537ff06b8280f3717c72d672a21", 0xdd}, {&(0x7f0000000600)="6add68bcf1156217704ad9579d37209954c34a2cb1e63d769c663e9088f89c65f58473074a545a175bd9e64b28641c760be4cb4353f5cf55895279ff5d353c731d917120c6ed1af83a1cae6d123f16b7f3fb989b8a85e02cea4985e324a8a88915942ba64b48960a3f289a8528452398ee8d665f71a7cdc5b969e1685177786d", 0x80}, {&(0x7f0000000680)="22081af5452424f0c550bb189e4538aee82611160ac1562999000b3b3d874c5e0cca9891c3cbd2e0", 0x28}], 0x3, &(0x7f0000000700)=[@rthdr={{0x78, 0x29, 0x39, {0x32, 0xc, 0x0, 0x8, 0x0, [@remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @loopback, @private2={0xfc, 0x2, '\x00', 0x1}, @empty, @rand_addr=' \x01\x00']}}}, @dstopts_2292={{0x30, 0x29, 0x4, {0xc, 0x2, '\x00', [@ra={0x5, 0x2, 0xd8a}, @ra={0x5, 0x2, 0x6e90}, @padn={0x1, 0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x3}}, @rthdrdstopts={{0x50, 0x29, 0x37, {0x5c, 0x6, '\x00', [@padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0xf0}, @calipso={0x7, 0x10, {0x1, 0x2, 0x40, 0x7, [0x8]}}, @pad1, @hao={0xc9, 0x10, @loopback}, @enc_lim={0x4, 0x1, 0x6}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x3ff}}], 0x128}, 0x0)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000080)=[{0x30, 0x5, 0x1, 0xfffff034}, {0x6, 0x1, 0x6, 0x6}]}, 0x10)
mmap(&(0x7f00006d6000/0x3000)=nil, 0x3000, 0x80000d, 0x10012, r1, 0x719e7000)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3)
close(r0)
r4 = socket(0x2, 0x2, 0x0)
shutdown(r4, 0x0)
r5 = signalfd4(0xffffffffffffffff, &(0x7f0000000040)={[0x7fffffffffffffff]}, 0x8, 0x0)
ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0)
ioctl$OCFS2_IOC_RESVSP(r5, 0x40305828, 0x0)
r6 = openat$uinput(0xffffffffffffff9c, 0x0, 0x800, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60)
ioctl$UI_SET_LEDBIT(r6, 0x40045569, 0x11)

242.655664ms ago: executing program 5 (id=54):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400), 0x41, 0x0)
mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1000000)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x47f, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x18}}}}]}}]}}, 0x0)
unshare(0x22020600)
socket$can_raw(0x1d, 0x3, 0x1)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_debug_messages', 0x242, 0x10c)
timerfd_gettime(r2, &(0x7f0000000100))
write$tcp_mem(r2, &(0x7f0000000140)={0x9, 0x20, 0x8400000000000000, 0x20, 0xfffffffffffffffb}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x4, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000008500000029000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmmsg$unix(r4, 0x0, 0x0, 0x0)
r5 = accept(r2, 0x0, &(0x7f0000000380))
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
r7 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f00000003c0)=0x207, 0x4)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000480)={'erspan0\x00', <r8=>0x0})
r9 = socket$inet6_udp(0xa, 0x2, 0x0)
getsockopt$inet6_int(r9, 0x29, 0x35, 0x0, &(0x7f00000004c0))
sendto$packet(r7, &(0x7f0000000500)="05031600d3fc140000004788031c09103c28", 0xfce0, 0x4, &(0x7f0000000540)={0x11, 0x86dd, r8, 0x1, 0x0, 0x6, @multicast}, 0x14)
sendmsg$nl_route_sched(r5, &(0x7f0000000580)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x1810001}, 0xc, &(0x7f0000000600)={&(0x7f0000000640)=@newtclass={0x100, 0x28, 0x8, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x9, 0xf}, {0xfff2, 0xfff2}, {0x10, 0x3}}, [@tclass_kind_options=@c_qfq={{0x8}, {0x44, 0x2, [@TCA_QFQ_LMAX={0x8}, @TCA_QFQ_LMAX={0x8, 0x2, 0x8}, @TCA_QFQ_WEIGHT={0x8, 0x1, 0x4}, @TCA_QFQ_WEIGHT={0x8, 0x1, 0x4}, @TCA_QFQ_WEIGHT={0x8, 0x1, 0x6}, @TCA_QFQ_WEIGHT={0x8, 0x1, 0xe7f}, @TCA_QFQ_WEIGHT={0x8, 0x1, 0x4}, @TCA_QFQ_WEIGHT={0x8, 0x1, 0x8c0b}]}}, @tclass_kind_options=@c_fq_codel={0xd}, @TCA_RATE={0x6, 0x5, {0x50, 0xa1}}, @tclass_kind_options=@c_htb={{0x8}, {0x64, 0x2, [@TCA_HTB_RATE64={0xc, 0x6, 0x80}, @TCA_HTB_RATE64={0xc, 0x6, 0xaa}, @TCA_HTB_RATE64={0xc, 0x6, 0x400}, @TCA_HTB_CEIL64={0xc, 0x7, 0x8}, @TCA_HTB_PARMS={0x30, 0x1, {{0x1, 0x1, 0xffe6, 0x9, 0x7, 0x7de5}, {0xf5, 0x3, 0x109, 0x81, 0x8, 0xfffffffd}, 0x5, 0x0, 0x10001, 0xd, 0xbc0c}}]}}, @tclass_kind_options=@c_skbprio={0xc}]}, 0x100}, 0x1, 0x0, 0x0, 0x50}, 0x440c0)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(&(0x7f0000000740), r10)
ioctl$BTRFS_IOC_QGROUP_CREATE(r10, 0x4010942a, &(0x7f0000000780)={0x1, 0x101})
recvmmsg(r3, &(0x7f00000007c0), 0x47538a5, 0x40000144, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x18, {[@global=@item_012={0x1, 0x1, 0x8, "01"}, @global=@item_012={0x1, 0x1, 0x5, '\x00'}, @global=@item_012={0x1, 0x1, 0x1, "ff"}, @local=@item_012={0x1, 0x2, 0x0, "04"}, @main=@item_012={0x1, 0x0, 0x9, "01"}, @local=@item_4={0x3, 0x2, 0x3, "d39ab733"}, @main=@item_012={0x2, 0x0, 0x9, "b2a2"}, @global=@item_012={0x1, 0x1, 0x7, '\b'}, @global=@item_012={0x2, 0x1, 0x2, "c5bd"}, @local]}}, 0x0}, 0x0)
ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000440)={0xcf47, 0x4cc, 0xffff, 0x9dff, 0x1, "8003e3ffff072000"})

186.48829ms ago: executing program 6 (id=107):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1)
syz_mount_image$erofs(&(0x7f00000000c0), &(0x7f0000000100)='./file2\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYRES16=0x0, @ANYRESOCT, @ANYRES32], 0x1, 0x1b9, &(0x7f00000002c0)="$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")
r1 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./file2\x00', 0x80000, 0x40)
r2 = socket(0x2, 0xa, 0x300)
r3 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000180)={0x802, 0x0, 0x1, 0x7}, 0x10)
sendmsg$nl_generic(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="200000005200010003000000000000000a0000000c00", @ANYRES32=r3], 0x20}}, 0x0)
sendmsg$inet6(r3, &(0x7f0000000840)={&(0x7f00000004c0)={0xa, 0x4e20, 0xfffffffe, @remote, 0x4}, 0x1c, &(0x7f00000006c0)=[{&(0x7f0000000500)="90605a9e1cf9b224ab28a273a3ad43886ed43ec46e21f00370dcb80bbe7feac980578847791fa72acad8e2a5ce540574527b546dea517ada747ee84fa002e51ea37d651190e3b7507856691700eca262bbc039618e133ab6b36c305121ec7d01bf4b93586f76e7f6763826e8216183cda6af6ae64d438e7093986cc21e0eaec00a587e73db383a1a54bd6b10cea0824a2983d61f95aad34d9c32d4a6cb215cdb1343f35e772b2e820c175a22a219b5244a401adf2101e3969fa0842664c6fce73e81d2db4b290ecf0591705ebb4cb63537ff06b8280f3717c72d672a21", 0xdd}, {&(0x7f0000000600)="6add68bcf1156217704ad9579d37209954c34a2cb1e63d769c663e9088f89c65f58473074a545a175bd9e64b28641c760be4cb4353f5cf55895279ff5d353c731d917120c6ed1af83a1cae6d123f16b7f3fb989b8a85e02cea4985e324a8a88915942ba64b48960a3f289a8528452398ee8d665f71a7cdc5b969e1685177786d", 0x80}, {&(0x7f0000000680)="22081af5452424f0c550bb189e4538aee82611160ac1562999000b3b3d874c5e0cca9891c3cbd2e0", 0x28}], 0x3, &(0x7f0000000700)=[@rthdr={{0x78, 0x29, 0x39, {0x32, 0xc, 0x0, 0x8, 0x0, [@remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @loopback, @private2={0xfc, 0x2, '\x00', 0x1}, @empty, @rand_addr=' \x01\x00']}}}, @dstopts_2292={{0x30, 0x29, 0x4, {0xc, 0x2, '\x00', [@ra={0x5, 0x2, 0xd8a}, @ra={0x5, 0x2, 0x6e90}, @padn={0x1, 0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x3}}, @rthdrdstopts={{0x50, 0x29, 0x37, {0x5c, 0x6, '\x00', [@padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0xf0}, @calipso={0x7, 0x10, {0x1, 0x2, 0x40, 0x7, [0x8]}}, @pad1, @hao={0xc9, 0x10, @loopback}, @enc_lim={0x4, 0x1, 0x6}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x3ff}}], 0x128}, 0x0)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000080)=[{0x30, 0x5, 0x1, 0xfffff034}, {0x6, 0x1, 0x6, 0x6}]}, 0x10)
mmap(&(0x7f00006d6000/0x3000)=nil, 0x3000, 0x80000d, 0x10012, r1, 0x719e7000)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3)
close(r0)
r4 = socket(0x2, 0x2, 0x0)
shutdown(r4, 0x0)
r5 = signalfd4(0xffffffffffffffff, &(0x7f0000000040)={[0x7fffffffffffffff]}, 0x8, 0x0)
ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0)
ioctl$OCFS2_IOC_RESVSP(r5, 0x40305828, 0x0)
r6 = openat$uinput(0xffffffffffffff9c, 0x0, 0x800, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60)
ioctl$UI_SET_LEDBIT(r6, 0x40045569, 0x11)

104.718909ms ago: executing program 5 (id=54):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400), 0x41, 0x0)
mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1000000)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x47f, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x18}}}}]}}]}}, 0x0)
unshare(0x22020600)
socket$can_raw(0x1d, 0x3, 0x1)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_debug_messages', 0x242, 0x10c)
timerfd_gettime(r2, &(0x7f0000000100))
write$tcp_mem(r2, &(0x7f0000000140)={0x9, 0x20, 0x8400000000000000, 0x20, 0xfffffffffffffffb}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x4, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000008500000029000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmmsg$unix(r4, 0x0, 0x0, 0x0)
r5 = accept(r2, 0x0, &(0x7f0000000380))
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
r7 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f00000003c0)=0x207, 0x4)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000480)={'erspan0\x00', <r8=>0x0})
r9 = socket$inet6_udp(0xa, 0x2, 0x0)
getsockopt$inet6_int(r9, 0x29, 0x35, 0x0, &(0x7f00000004c0))
sendto$packet(r7, &(0x7f0000000500)="05031600d3fc140000004788031c09103c28", 0xfce0, 0x4, &(0x7f0000000540)={0x11, 0x86dd, r8, 0x1, 0x0, 0x6, @multicast}, 0x14)
sendmsg$nl_route_sched(r5, &(0x7f0000000580)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x1810001}, 0xc, &(0x7f0000000600)={&(0x7f0000000640)=@newtclass={0x100, 0x28, 0x8, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x9, 0xf}, {0xfff2, 0xfff2}, {0x10, 0x3}}, [@tclass_kind_options=@c_qfq={{0x8}, {0x44, 0x2, [@TCA_QFQ_LMAX={0x8}, @TCA_QFQ_LMAX={0x8, 0x2, 0x8}, @TCA_QFQ_WEIGHT={0x8, 0x1, 0x4}, @TCA_QFQ_WEIGHT={0x8, 0x1, 0x4}, @TCA_QFQ_WEIGHT={0x8, 0x1, 0x6}, @TCA_QFQ_WEIGHT={0x8, 0x1, 0xe7f}, @TCA_QFQ_WEIGHT={0x8, 0x1, 0x4}, @TCA_QFQ_WEIGHT={0x8, 0x1, 0x8c0b}]}}, @tclass_kind_options=@c_fq_codel={0xd}, @TCA_RATE={0x6, 0x5, {0x50, 0xa1}}, @tclass_kind_options=@c_htb={{0x8}, {0x64, 0x2, [@TCA_HTB_RATE64={0xc, 0x6, 0x80}, @TCA_HTB_RATE64={0xc, 0x6, 0xaa}, @TCA_HTB_RATE64={0xc, 0x6, 0x400}, @TCA_HTB_CEIL64={0xc, 0x7, 0x8}, @TCA_HTB_PARMS={0x30, 0x1, {{0x1, 0x1, 0xffe6, 0x9, 0x7, 0x7de5}, {0xf5, 0x3, 0x109, 0x81, 0x8, 0xfffffffd}, 0x5, 0x0, 0x10001, 0xd, 0xbc0c}}]}}, @tclass_kind_options=@c_skbprio={0xc}]}, 0x100}, 0x1, 0x0, 0x0, 0x50}, 0x440c0)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(&(0x7f0000000740), r10)
ioctl$BTRFS_IOC_QGROUP_CREATE(r10, 0x4010942a, &(0x7f0000000780)={0x1, 0x101})
recvmmsg(r3, &(0x7f00000007c0), 0x47538a5, 0x40000144, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x18, {[@global=@item_012={0x1, 0x1, 0x8, "01"}, @global=@item_012={0x1, 0x1, 0x5, '\x00'}, @global=@item_012={0x1, 0x1, 0x1, "ff"}, @local=@item_012={0x1, 0x2, 0x0, "04"}, @main=@item_012={0x1, 0x0, 0x9, "01"}, @local=@item_4={0x3, 0x2, 0x3, "d39ab733"}, @main=@item_012={0x2, 0x0, 0x9, "b2a2"}, @global=@item_012={0x1, 0x1, 0x7, '\b'}, @global=@item_012={0x2, 0x1, 0x2, "c5bd"}, @local]}}, 0x0}, 0x0)
ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000440)={0xcf47, 0x4cc, 0xffff, 0x9dff, 0x1, "8003e3ffff072000"})

55.044424ms ago: executing program 6 (id=107):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1)
syz_mount_image$erofs(&(0x7f00000000c0), &(0x7f0000000100)='./file2\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYRES16=0x0, @ANYRESOCT, @ANYRES32], 0x1, 0x1b9, &(0x7f00000002c0)="$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")
r1 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./file2\x00', 0x80000, 0x40)
r2 = socket(0x2, 0xa, 0x300)
r3 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000180)={0x802, 0x0, 0x1, 0x7}, 0x10)
sendmsg$nl_generic(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="200000005200010003000000000000000a0000000c00", @ANYRES32=r3], 0x20}}, 0x0)
sendmsg$inet6(r3, &(0x7f0000000840)={&(0x7f00000004c0)={0xa, 0x4e20, 0xfffffffe, @remote, 0x4}, 0x1c, &(0x7f00000006c0)=[{&(0x7f0000000500)="90605a9e1cf9b224ab28a273a3ad43886ed43ec46e21f00370dcb80bbe7feac980578847791fa72acad8e2a5ce540574527b546dea517ada747ee84fa002e51ea37d651190e3b7507856691700eca262bbc039618e133ab6b36c305121ec7d01bf4b93586f76e7f6763826e8216183cda6af6ae64d438e7093986cc21e0eaec00a587e73db383a1a54bd6b10cea0824a2983d61f95aad34d9c32d4a6cb215cdb1343f35e772b2e820c175a22a219b5244a401adf2101e3969fa0842664c6fce73e81d2db4b290ecf0591705ebb4cb63537ff06b8280f3717c72d672a21", 0xdd}, {&(0x7f0000000600)="6add68bcf1156217704ad9579d37209954c34a2cb1e63d769c663e9088f89c65f58473074a545a175bd9e64b28641c760be4cb4353f5cf55895279ff5d353c731d917120c6ed1af83a1cae6d123f16b7f3fb989b8a85e02cea4985e324a8a88915942ba64b48960a3f289a8528452398ee8d665f71a7cdc5b969e1685177786d", 0x80}, {&(0x7f0000000680)="22081af5452424f0c550bb189e4538aee82611160ac1562999000b3b3d874c5e0cca9891c3cbd2e0", 0x28}], 0x3, &(0x7f0000000700)=[@rthdr={{0x78, 0x29, 0x39, {0x32, 0xc, 0x0, 0x8, 0x0, [@remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @loopback, @private2={0xfc, 0x2, '\x00', 0x1}, @empty, @rand_addr=' \x01\x00']}}}, @dstopts_2292={{0x30, 0x29, 0x4, {0xc, 0x2, '\x00', [@ra={0x5, 0x2, 0xd8a}, @ra={0x5, 0x2, 0x6e90}, @padn={0x1, 0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x3}}, @rthdrdstopts={{0x50, 0x29, 0x37, {0x5c, 0x6, '\x00', [@padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0xf0}, @calipso={0x7, 0x10, {0x1, 0x2, 0x40, 0x7, [0x8]}}, @pad1, @hao={0xc9, 0x10, @loopback}, @enc_lim={0x4, 0x1, 0x6}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x3ff}}], 0x128}, 0x0)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000080)=[{0x30, 0x5, 0x1, 0xfffff034}, {0x6, 0x1, 0x6, 0x6}]}, 0x10)
mmap(&(0x7f00006d6000/0x3000)=nil, 0x3000, 0x80000d, 0x10012, r1, 0x719e7000)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3)
close(r0)
r4 = socket(0x2, 0x2, 0x0)
shutdown(r4, 0x0)
r5 = signalfd4(0xffffffffffffffff, &(0x7f0000000040)={[0x7fffffffffffffff]}, 0x8, 0x0)
ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0)
ioctl$OCFS2_IOC_RESVSP(r5, 0x40305828, 0x0)
r6 = openat$uinput(0xffffffffffffff9c, 0x0, 0x800, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60)
ioctl$UI_SET_LEDBIT(r6, 0x40045569, 0x11)

0s ago: executing program 5 (id=54):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400), 0x41, 0x0)
mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1000000)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x47f, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x18}}}}]}}]}}, 0x0)
unshare(0x22020600)
socket$can_raw(0x1d, 0x3, 0x1)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_debug_messages', 0x242, 0x10c)
timerfd_gettime(r2, &(0x7f0000000100))
write$tcp_mem(r2, &(0x7f0000000140)={0x9, 0x20, 0x8400000000000000, 0x20, 0xfffffffffffffffb}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x4, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000008500000029000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmmsg$unix(r4, 0x0, 0x0, 0x0)
r5 = accept(r2, 0x0, &(0x7f0000000380))
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
r7 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f00000003c0)=0x207, 0x4)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000480)={'erspan0\x00', <r8=>0x0})
r9 = socket$inet6_udp(0xa, 0x2, 0x0)
getsockopt$inet6_int(r9, 0x29, 0x35, 0x0, &(0x7f00000004c0))
sendto$packet(r7, &(0x7f0000000500)="05031600d3fc140000004788031c09103c28", 0xfce0, 0x4, &(0x7f0000000540)={0x11, 0x86dd, r8, 0x1, 0x0, 0x6, @multicast}, 0x14)
sendmsg$nl_route_sched(r5, &(0x7f0000000580)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x1810001}, 0xc, &(0x7f0000000600)={&(0x7f0000000640)=@newtclass={0x100, 0x28, 0x8, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x9, 0xf}, {0xfff2, 0xfff2}, {0x10, 0x3}}, [@tclass_kind_options=@c_qfq={{0x8}, {0x44, 0x2, [@TCA_QFQ_LMAX={0x8}, @TCA_QFQ_LMAX={0x8, 0x2, 0x8}, @TCA_QFQ_WEIGHT={0x8, 0x1, 0x4}, @TCA_QFQ_WEIGHT={0x8, 0x1, 0x4}, @TCA_QFQ_WEIGHT={0x8, 0x1, 0x6}, @TCA_QFQ_WEIGHT={0x8, 0x1, 0xe7f}, @TCA_QFQ_WEIGHT={0x8, 0x1, 0x4}, @TCA_QFQ_WEIGHT={0x8, 0x1, 0x8c0b}]}}, @tclass_kind_options=@c_fq_codel={0xd}, @TCA_RATE={0x6, 0x5, {0x50, 0xa1}}, @tclass_kind_options=@c_htb={{0x8}, {0x64, 0x2, [@TCA_HTB_RATE64={0xc, 0x6, 0x80}, @TCA_HTB_RATE64={0xc, 0x6, 0xaa}, @TCA_HTB_RATE64={0xc, 0x6, 0x400}, @TCA_HTB_CEIL64={0xc, 0x7, 0x8}, @TCA_HTB_PARMS={0x30, 0x1, {{0x1, 0x1, 0xffe6, 0x9, 0x7, 0x7de5}, {0xf5, 0x3, 0x109, 0x81, 0x8, 0xfffffffd}, 0x5, 0x0, 0x10001, 0xd, 0xbc0c}}]}}, @tclass_kind_options=@c_skbprio={0xc}]}, 0x100}, 0x1, 0x0, 0x0, 0x50}, 0x440c0)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(&(0x7f0000000740), r10)
ioctl$BTRFS_IOC_QGROUP_CREATE(r10, 0x4010942a, &(0x7f0000000780)={0x1, 0x101})
recvmmsg(r3, &(0x7f00000007c0), 0x47538a5, 0x40000144, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x18, {[@global=@item_012={0x1, 0x1, 0x8, "01"}, @global=@item_012={0x1, 0x1, 0x5, '\x00'}, @global=@item_012={0x1, 0x1, 0x1, "ff"}, @local=@item_012={0x1, 0x2, 0x0, "04"}, @main=@item_012={0x1, 0x0, 0x9, "01"}, @local=@item_4={0x3, 0x2, 0x3, "d39ab733"}, @main=@item_012={0x2, 0x0, 0x9, "b2a2"}, @global=@item_012={0x1, 0x1, 0x7, '\b'}, @global=@item_012={0x2, 0x1, 0x2, "c5bd"}, @local]}}, 0x0}, 0x0)
ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000440)={0xcf47, 0x4cc, 0xffff, 0x9dff, 0x1, "8003e3ffff072000"})

kernel console output (not intermixed with test programs):

rocess permissive=1
[   11.337282][   T24] audit: type=1400 audit(1793012830.489:63): avc:  denied  { siginh } for  pid=216 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
Warning: Permanently added '10.128.1.133' (ED25519) to the list of known hosts.
[   18.052199][   T24] audit: type=1400 audit(1793012837.209:64): avc:  denied  { mounton } for  pid=271 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[   18.053221][  T271] cgroup: Unknown subsys name 'net'
[   18.055557][   T24] audit: type=1400 audit(1793012837.209:65): avc:  denied  { mount } for  pid=271 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   18.059309][   T24] audit: type=1400 audit(1793012837.219:66): avc:  denied  { unmount } for  pid=271 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   18.059442][  T271] cgroup: Unknown subsys name 'devices'
[   18.175465][  T271] cgroup: Unknown subsys name 'hugetlb'
[   18.181041][  T271] cgroup: Unknown subsys name 'rlimit'
[   18.317946][   T24] audit: type=1400 audit(1793012837.479:67): avc:  denied  { setattr } for  pid=271 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   18.341127][   T24] audit: type=1400 audit(1793012837.479:68): avc:  denied  { mounton } for  pid=271 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1
[   18.365977][   T24] audit: type=1400 audit(1793012837.479:69): avc:  denied  { mount } for  pid=271 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1
[   18.370188][  T273] SELinux:  Context root:object_r:swapfile_t is not valid (left unmapped).
Setting up swapspace version 1, size = 127995904 bytes
[   18.397754][   T24] audit: type=1400 audit(1793012837.559:70): avc:  denied  { relabelto } for  pid=273 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   18.423171][  T271] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   18.423311][   T24] audit: type=1400 audit(1793012837.559:71): avc:  denied  { write } for  pid=273 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   18.457408][   T24] audit: type=1400 audit(1793012837.579:72): avc:  denied  { read } for  pid=271 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   18.482891][   T24] audit: type=1400 audit(1793012837.579:73): avc:  denied  { open } for  pid=271 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   18.930487][  T279] bridge0: port 1(bridge_slave_0) entered blocking state
[   18.937800][  T279] bridge0: port 1(bridge_slave_0) entered disabled state
[   18.945408][  T279] device bridge_slave_0 entered promiscuous mode
[   18.952159][  T279] bridge0: port 2(bridge_slave_1) entered blocking state
[   18.959218][  T279] bridge0: port 2(bridge_slave_1) entered disabled state
[   18.966549][  T279] device bridge_slave_1 entered promiscuous mode
[   19.051325][  T283] bridge0: port 1(bridge_slave_0) entered blocking state
[   19.058516][  T283] bridge0: port 1(bridge_slave_0) entered disabled state
[   19.065894][  T283] device bridge_slave_0 entered promiscuous mode
[   19.075785][  T283] bridge0: port 2(bridge_slave_1) entered blocking state
[   19.082805][  T283] bridge0: port 2(bridge_slave_1) entered disabled state
[   19.090186][  T283] device bridge_slave_1 entered promiscuous mode
[   19.106183][  T281] bridge0: port 1(bridge_slave_0) entered blocking state
[   19.113203][  T281] bridge0: port 1(bridge_slave_0) entered disabled state
[   19.120522][  T281] device bridge_slave_0 entered promiscuous mode
[   19.129944][  T281] bridge0: port 2(bridge_slave_1) entered blocking state
[   19.137018][  T281] bridge0: port 2(bridge_slave_1) entered disabled state
[   19.144362][  T281] device bridge_slave_1 entered promiscuous mode
[   19.210665][  T282] bridge0: port 1(bridge_slave_0) entered blocking state
[   19.217820][  T282] bridge0: port 1(bridge_slave_0) entered disabled state
[   19.225213][  T282] device bridge_slave_0 entered promiscuous mode
[   19.237985][  T279] bridge0: port 2(bridge_slave_1) entered blocking state
[   19.245023][  T279] bridge0: port 2(bridge_slave_1) entered forwarding state
[   19.252266][  T279] bridge0: port 1(bridge_slave_0) entered blocking state
[   19.259291][  T279] bridge0: port 1(bridge_slave_0) entered forwarding state
[   19.267075][  T282] bridge0: port 2(bridge_slave_1) entered blocking state
[   19.274142][  T282] bridge0: port 2(bridge_slave_1) entered disabled state
[   19.281379][  T282] device bridge_slave_1 entered promiscuous mode
[   19.298882][  T280] bridge0: port 1(bridge_slave_0) entered blocking state
[   19.305921][  T280] bridge0: port 1(bridge_slave_0) entered disabled state
[   19.313262][  T280] device bridge_slave_0 entered promiscuous mode
[   19.324301][  T280] bridge0: port 2(bridge_slave_1) entered blocking state
[   19.331321][  T280] bridge0: port 2(bridge_slave_1) entered disabled state
[   19.339007][  T280] device bridge_slave_1 entered promiscuous mode
[   19.403297][  T281] bridge0: port 2(bridge_slave_1) entered blocking state
[   19.410351][  T281] bridge0: port 2(bridge_slave_1) entered forwarding state
[   19.417600][  T281] bridge0: port 1(bridge_slave_0) entered blocking state
[   19.424623][  T281] bridge0: port 1(bridge_slave_0) entered forwarding state
[   19.466452][  T283] bridge0: port 2(bridge_slave_1) entered blocking state
[   19.473485][  T283] bridge0: port 2(bridge_slave_1) entered forwarding state
[   19.480754][  T283] bridge0: port 1(bridge_slave_0) entered blocking state
[   19.487772][  T283] bridge0: port 1(bridge_slave_0) entered forwarding state
[   19.496210][  T280] bridge0: port 2(bridge_slave_1) entered blocking state
[   19.503227][  T280] bridge0: port 2(bridge_slave_1) entered forwarding state
[   19.510475][  T280] bridge0: port 1(bridge_slave_0) entered blocking state
[   19.517497][  T280] bridge0: port 1(bridge_slave_0) entered forwarding state
[   19.526380][  T112] bridge0: port 1(bridge_slave_0) entered disabled state
[   19.533586][  T112] bridge0: port 2(bridge_slave_1) entered disabled state
[   19.540879][  T112] bridge0: port 1(bridge_slave_0) entered disabled state
[   19.547997][  T112] bridge0: port 2(bridge_slave_1) entered disabled state
[   19.555176][  T112] bridge0: port 1(bridge_slave_0) entered disabled state
[   19.562268][  T112] bridge0: port 2(bridge_slave_1) entered disabled state
[   19.569841][  T112] bridge0: port 1(bridge_slave_0) entered disabled state
[   19.576956][  T112] bridge0: port 2(bridge_slave_1) entered disabled state
[   19.584384][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   19.591688][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   19.604120][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   19.611691][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   19.619865][  T112] bridge0: port 1(bridge_slave_0) entered blocking state
[   19.626874][  T112] bridge0: port 1(bridge_slave_0) entered forwarding state
[   19.634207][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   19.642264][  T112] bridge0: port 2(bridge_slave_1) entered blocking state
[   19.649280][  T112] bridge0: port 2(bridge_slave_1) entered forwarding state
[   19.673601][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   19.681751][  T112] bridge0: port 1(bridge_slave_0) entered blocking state
[   19.688776][  T112] bridge0: port 1(bridge_slave_0) entered forwarding state
[   19.716277][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   19.724201][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   19.732048][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   19.740670][  T112] bridge0: port 2(bridge_slave_1) entered blocking state
[   19.747694][  T112] bridge0: port 2(bridge_slave_1) entered forwarding state
[   19.756096][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   19.770286][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   19.781004][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   19.800582][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   19.808375][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   19.815842][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   19.823904][    T9] bridge0: port 1(bridge_slave_0) entered blocking state
[   19.830941][    T9] bridge0: port 1(bridge_slave_0) entered forwarding state
[   19.838821][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   19.846987][    T9] bridge0: port 1(bridge_slave_0) entered blocking state
[   19.853982][    T9] bridge0: port 1(bridge_slave_0) entered forwarding state
[   19.861453][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   19.869569][    T9] bridge0: port 1(bridge_slave_0) entered blocking state
[   19.876587][    T9] bridge0: port 1(bridge_slave_0) entered forwarding state
[   19.883916][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   19.899706][  T281] device veth0_vlan entered promiscuous mode
[   19.915448][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   19.923379][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   19.931357][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   19.939142][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   19.947854][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   19.956022][    T9] bridge0: port 2(bridge_slave_1) entered blocking state
[   19.963020][    T9] bridge0: port 2(bridge_slave_1) entered forwarding state
[   19.970453][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   19.978776][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   19.986911][    T9] bridge0: port 2(bridge_slave_1) entered blocking state
[   19.993913][    T9] bridge0: port 2(bridge_slave_1) entered forwarding state
[   20.001316][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   20.009493][    T9] bridge0: port 2(bridge_slave_1) entered blocking state
[   20.016532][    T9] bridge0: port 2(bridge_slave_1) entered forwarding state
[   20.023796][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   20.031737][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   20.051206][  T281] device veth1_macvtap entered promiscuous mode
[   20.059024][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   20.067219][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   20.075611][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   20.083538][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   20.091517][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   20.099747][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   20.107678][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   20.115754][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   20.123835][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   20.132097][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   20.143237][  T279] device veth0_vlan entered promiscuous mode
[   20.153015][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   20.160935][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   20.169239][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   20.177652][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   20.186140][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   20.193497][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   20.203745][  T280] device veth0_vlan entered promiscuous mode
[   20.212632][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   20.220460][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   20.228461][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   20.237133][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   20.245643][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   20.252983][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   20.263891][  T282] device veth0_vlan entered promiscuous mode
[   20.273079][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   20.280978][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   20.289225][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   20.296718][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   20.309067][  T282] device veth1_macvtap entered promiscuous mode
[   20.319044][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   20.327293][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   20.335568][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   20.343605][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   20.352299][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   20.360166][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   20.368412][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   20.380120][  T283] device veth0_vlan entered promiscuous mode
[   20.388230][  T279] device veth1_macvtap entered promiscuous mode
[   20.396584][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   20.404887][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   20.413066][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   20.421258][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   20.429145][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   20.437263][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   20.445381][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   20.453099][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   20.461360][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   20.469572][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   20.478081][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   20.486360][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   20.493725][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   20.506711][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   20.514920][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   20.524803][  T280] device veth1_macvtap entered promiscuous mode
[   20.534221][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   20.541785][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   20.550276][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   20.566849][  T283] device veth1_macvtap entered promiscuous mode
[   20.576485][  T281] request_module fs-gadgetfs succeeded, but still no fs?
[   20.577542][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   20.591907][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   20.600671][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   20.609085][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   20.617517][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   20.625600][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   20.633603][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   20.641339][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   20.649534][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   20.661889][  T281] cgroup: cgroup: disabling cgroup2 socket matching due to net_prio or net_cls activation
[   20.680541][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   20.691702][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   20.741320][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   20.752845][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   20.767048][  T309] EXT4-fs (loop1): Ignoring removed bh option
[   20.781577][  T314] syz.2.3 uses obsolete (PF_INET,SOCK_PACKET)
[   20.811260][  T309] EXT4-fs (loop1): mounted filesystem without journal. Opts: lazytime,sysvgroups,jqfmt=vfsv1,abort,debug_want_extra_isize=0x0000000000000008,lazytime,errors=remount-ro,stripe=0x0000000000000007,bh,auto_da_alloc,
[   20.966798][  T302] F2FS-fs (loop0): invalid crc value
[   20.977844][  T302] F2FS-fs (loop0): Found nat_bits in checkpoint
[   21.012203][  T302] F2FS-fs (loop0): Start checkpoint disabled!
[   21.018617][  T316] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[   21.020828][  T300] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   21.026568][  T316] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[   21.044488][  T316] F2FS-fs (loop3): invalid crc value
[   21.058067][  T302] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6
[   21.105407][  T316] F2FS-fs (loop3): Found nat_bits in checkpoint
[   21.165584][  T330] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2'.
[   21.249088][  T316] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[   21.258232][  T316] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[   21.402326][    T7] attempt to access beyond end of device
[   21.402326][    T7] loop0: rw=2049, want=40984, limit=40427
[   21.553094][  T338] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   21.754634][  T300] usb 5-1: device descriptor read/64, error -71
[   21.990052][  T371] FAULT_INJECTION: forcing a failure.
[   21.990052][  T371] name fail_usercopy, interval 1, probability 0, space 0, times 1
[   22.004419][  T371] CPU: 1 PID: 371 Comm: syz.2.16 Not tainted syzkaller #0
[   22.011527][  T371] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[   22.021582][  T371] Call Trace:
[   22.024874][  T371]  __dump_stack+0x21/0x24
[   22.029193][  T371]  dump_stack_lvl+0x1a7/0x208
[   22.033860][  T371]  ? show_regs_print_info+0x18/0x18
[   22.039049][  T371]  ? proc_fail_nth_read+0x220/0x220
[   22.044240][  T371]  dump_stack+0x15/0x1c
[   22.048383][  T371]  should_fail+0x3ab/0x500
[   22.052791][  T371]  should_fail_usercopy+0x1a/0x20
[   22.057812][  T371]  _copy_from_user+0x20/0xd0
[   22.062409][  T371]  __sys_sendto+0x2e3/0x620
[   22.066992][  T371]  ? __ia32_sys_getpeername+0x90/0x90
[   22.072356][  T371]  ? __kasan_check_read+0x11/0x20
[   22.077368][  T371]  ? __fdget_pos+0x2d9/0x380
[   22.081947][  T371]  ? __ia32_sys_read+0x90/0x90
[   22.086701][  T371]  __x64_sys_sendto+0xe5/0x100
[   22.091457][  T371]  do_syscall_64+0x31/0x40
[   22.095863][  T371]  entry_SYSCALL_64_after_hwframe+0x61/0xcb
[   22.101761][  T371] RIP: 0033:0x7f326c4b1559
[   22.106177][  T371] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   22.124150][  T303] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   22.125774][  T371] RSP: 002b:00007f326aee8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[   22.141602][  T371] RAX: ffffffffffffffda RBX: 00007f326c738090 RCX: 00007f326c4b1559
[   22.149548][  T371] RDX: 0000000000000028 RSI: 0000200000000680 RDI: 0000000000000006
[   22.157497][  T371] RBP: 00007f326aee8090 R08: 00002000000006c0 R09: 0000000000000014
[   22.165446][  T371] R10: 0000000000040880 R11: 0000000000000246 R12: 0000000000000001
[   22.173405][  T371] R13: 00007f326c738128 R14: 00007f326c738090 R15: 00007ffdb3574088
[   22.226414][  T366] F2FS-fs (loop0): Test dummy encryption mode enabled
[   22.233846][  T366] F2FS-fs (loop0): invalid crc value
[   22.241465][  T366] F2FS-fs (loop0): Found nat_bits in checkpoint
[   22.247824][  T300] usb 5-1: device descriptor read/64, error -71
[   22.267619][  T366] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[   22.276445][  T366] fscrypt: AES-256-XTS using implementation "xts-aes-aesni"
[   22.344544][  T366] usb usb2: usbfs: process 366 (syz.0.14) did not claim interface 0 before use
[   22.358437][  T381] usb usb2: usbfs: process 381 (syz.0.14) did not claim interface 0 before use
[   22.376010][  T366] fscrypt: AES-256-CTS-CBC using implementation "cts(cbc-aes-aesni)"
[   22.544104][  T300] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[   22.564153][  T303] usb 4-1: unable to get BOS descriptor or descriptor too short
[   22.644209][  T303] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   22.654478][  T303] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[   22.663847][  T303] usb 4-1: config 1 has no interface number 0
[   22.824157][  T303] usb 4-1: New USB device found, idVendor=0582, idProduct=00a3, bcdDevice= 0.40
[   22.824312][  T300] usb 5-1: device descriptor read/64, error -71
[   22.833330][  T303] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   22.848233][  T303] usb 4-1: Product: syz
[   22.852390][  T303] usb 4-1: Manufacturer: syz
[   22.866350][  T395] F2FS-fs (loop1): invalid crc value
[   22.882492][  T303] usb 4-1: SerialNumber: syz
[   22.894470][  T395] F2FS-fs (loop1): Found nat_bits in checkpoint
[   22.933287][  T404] input: syz1 as /devices/virtual/input/input4
[   22.976869][  T395] F2FS-fs (loop1): Start checkpoint disabled!
[   23.001722][  T395] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6
[   23.087717][  T399] F2FS-fs (loop2): invalid crc value
[   23.103767][  T399] F2FS-fs (loop2): Found nat_bits in checkpoint
[   23.139318][  T399] F2FS-fs (loop2): Start checkpoint disabled!
[   23.146937][  T368] udc-core: couldn't find an available UDC or it's busy
[   23.153883][  T368] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[   23.162100][  T399] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6
[   23.194461][  T405] F2FS-fs (loop0): invalid crc value
[   23.200498][  T399] attempt to access beyond end of device
[   23.200498][  T399] loop2: rw=2049, want=45104, limit=40427
[   23.213980][  T405] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109)
[   23.215273][  T368] udc-core: couldn't find an available UDC or it's busy
[   23.232505][  T368] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[   23.243596][  T405] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[   23.258319][   T24] kauditd_printk_skb: 456 callbacks suppressed
[   23.258329][   T24] audit: type=1400 audit(1793012842.419:530): avc:  denied  { create } for  pid=403 comm="syz.0.21" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=fifo_file permissive=1
[   23.304648][  T303] usb 4-1: unknown sample rate
[   23.310942][  T303] usb 4-1: unknown sample rate
[   23.325330][  T303] usb 4-1: USB disconnect, device number 2
[   23.364101][  T300] usb 5-1: device descriptor read/64, error -71
[   23.368929][  T402] attempt to access beyond end of device
[   23.368929][  T402] loop2: rw=1, want=81920, limit=40427
[   23.395095][  T402] attempt to access beyond end of device
[   23.395095][  T402] loop2: rw=1, want=53248, limit=40427
[   23.412974][  T402] attempt to access beyond end of device
[   23.412974][  T402] loop2: rw=1, want=77824, limit=40427
[   23.432851][  T402] attempt to access beyond end of device
[   23.432851][  T402] loop2: rw=1, want=86016, limit=40427
[   23.444710][  T402] attempt to access beyond end of device
[   23.444710][  T402] loop2: rw=1, want=86024, limit=40427
[   23.455762][  T402] attempt to access beyond end of device
[   23.455762][  T402] loop2: rw=1, want=86032, limit=40427
[   23.466808][  T402] attempt to access beyond end of device
[   23.466808][  T402] loop2: rw=1, want=86040, limit=40427
[   23.480945][  T402] attempt to access beyond end of device
[   23.480945][  T402] loop2: rw=1, want=86048, limit=40427
[   23.492033][  T300] usb usb5-port1: attempt power cycle
[   23.518787][   T24] audit: type=1400 audit(1793012842.679:531): avc:  denied  { create } for  pid=417 comm="syz.1.24" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   23.547715][   T24] audit: type=1400 audit(1793012842.699:532): avc:  denied  { write } for  pid=417 comm="syz.1.24" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   23.671620][   T24] audit: type=1400 audit(1793012842.829:533): avc:  denied  { mmap_zero } for  pid=422 comm="syz.2.23" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1
[   23.682774][  T423] ======================================================
[   23.682774][  T423] WARNING: the mand mount option is being deprecated and
[   23.682774][  T423]          will be removed in v5.15!
[   23.682774][  T423] ======================================================
[   23.691732][  T426] overlayfs: overlapping lowerdir path
[   23.717584][   T24] audit: type=1400 audit(1793012842.879:534): avc:  denied  { mount } for  pid=422 comm="syz.2.23" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1
[   23.744531][   T24] audit: type=1400 audit(1793012842.889:535): avc:  denied  { create } for  pid=422 comm="syz.2.23" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   23.766694][   T24] audit: type=1400 audit(1793012842.889:536): avc:  denied  { bind } for  pid=422 comm="syz.2.23" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   23.790258][  T424]  loop1: p2 p3 < > p4 < p5 >
[   23.794962][  T424] loop1: partition table partially beyond EOD, truncated
[   23.808272][  T424] loop1: p3 start 4284289 is beyond EOD, truncated
[   23.816315][   T24] audit: type=1400 audit(1793012842.979:537): avc:  denied  { unmount } for  pid=433 comm="syz.4.26" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1
[   23.839845][   T24] audit: type=1400 audit(1793012842.999:538): avc:  denied  { unmount } for  pid=283 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1
[   23.896866][   T24] audit: type=1400 audit(1793012843.059:539): avc:  denied  { mounton } for  pid=438 comm="syz.4.30" path="/2/file0" dev="tmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[   24.002309][  T446] Zero length message leads to an empty skb
[   24.064907][  T456] pit: kvm: requested 33523 ns i8254 timer period limited to 200000 ns
[   24.073431][  T456] pit: kvm: requested 73752 ns i8254 timer period limited to 200000 ns
[   24.081996][  T456] pit: kvm: requested 197790 ns i8254 timer period limited to 200000 ns
[   24.090575][  T456] pit: kvm: requested 3352 ns i8254 timer period limited to 200000 ns
[   24.099524][  T456] pit: kvm: requested 83809 ns i8254 timer period limited to 200000 ns
[   24.099551][  T466] FAULT_INJECTION: forcing a failure.
[   24.099551][  T466] name failslab, interval 1, probability 0, space 0, times 1
[   24.108049][  T456] pit: kvm: requested 137447 ns i8254 timer period limited to 200000 ns
[   24.129042][  T456] pit: kvm: requested 137447 ns i8254 timer period limited to 200000 ns
[   24.137558][  T456] pit: kvm: requested 20114 ns i8254 timer period limited to 200000 ns
[   24.140597][  T466] CPU: 1 PID: 466 Comm: syz.0.32 Not tainted syzkaller #0
[   24.146245][  T456] pit: kvm: requested 144152 ns i8254 timer period limited to 200000 ns
[   24.152867][  T466] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[   24.152871][  T466] Call Trace:
[   24.152886][  T466]  __dump_stack+0x21/0x24
[   24.152901][  T466]  dump_stack_lvl+0x1a7/0x208
[   24.162435][  T456] pit: kvm: requested 113981 ns i8254 timer period limited to 200000 ns
[   24.171245][  T466]  ? show_regs_print_info+0x18/0x18
[   24.171254][  T466]  dump_stack+0x15/0x1c
[   24.171262][  T466]  should_fail+0x3ab/0x500
[   24.171277][  T466]  ? __alloc_skb+0x9e/0x520
[   24.209977][  T466]  __should_failslab+0xa4/0xe0
[   24.214736][  T466]  should_failslab+0x9/0x20
[   24.219231][  T466]  kmem_cache_alloc+0x3d/0x2d0
[   24.223975][  T466]  ? memset+0x35/0x40
[   24.227948][  T466]  __alloc_skb+0x9e/0x520
[   24.232269][  T466]  alloc_skb_with_frags+0xa3/0x560
[   24.237367][  T466]  sock_alloc_send_pskb+0x87f/0x9a0
[   24.242540][  T466]  ? __kernel_text_address+0xa0/0x100
[   24.247886][  T466]  ? sock_kzfree_s+0x60/0x60
[   24.252453][  T466]  ? stack_trace_save+0xa6/0xf0
[   24.257276][  T466]  ? stack_trace_snprint+0xe0/0xe0
[   24.262362][  T466]  packet_sendmsg+0x332b/0x4f90
[   24.267191][  T466]  ? memcpy+0x56/0x70
[   24.271146][  T466]  ? avc_has_perm_noaudit+0x3b0/0x3b0
[   24.276491][  T466]  ? kstrtouint_from_user+0x1c4/0x220
[   24.281837][  T466]  ? selinux_socket_sendmsg+0x22f/0x340
[   24.287357][  T466]  ? selinux_socket_accept+0x570/0x570
[   24.292788][  T466]  ? proc_fail_nth_read+0x220/0x220
[   24.297959][  T466]  ? packet_getsockopt+0x900/0x900
[   24.303045][  T466]  ? check_stack_object+0x10f/0x150
[   24.308224][  T466]  ? security_socket_sendmsg+0x82/0xa0
[   24.313657][  T466]  __sys_sendto+0x467/0x620
[   24.318136][  T466]  ? __ia32_sys_getpeername+0x90/0x90
[   24.323483][  T466]  ? __kasan_check_read+0x11/0x20
[   24.328479][  T466]  ? __fdget_pos+0x2d9/0x380
[   24.333044][  T466]  ? __ia32_sys_read+0x90/0x90
[   24.337778][  T466]  __x64_sys_sendto+0xe5/0x100
[   24.342518][  T466]  do_syscall_64+0x31/0x40
[   24.346908][  T466]  entry_SYSCALL_64_after_hwframe+0x61/0xcb
[   24.352772][  T466] RIP: 0033:0x7fef179d8559
[   24.357166][  T466] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   24.376764][  T466] RSP: 002b:00007fef1640f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[   24.385149][  T466] RAX: ffffffffffffffda RBX: 00007fef17c5f090 RCX: 00007fef179d8559
[   24.393094][  T466] RDX: 0000000000000028 RSI: 0000200000000680 RDI: 0000000000000006
[   24.401055][  T466] RBP: 00007fef1640f090 R08: 00002000000006c0 R09: 0000000000000014
[   24.408999][  T466] R10: 0000000000040880 R11: 0000000000000246 R12: 0000000000000001
[   24.416961][  T466] R13: 00007fef17c5f128 R14: 00007fef17c5f090 R15: 00007ffc3dfb07f8
[   24.429808][   T25] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[   24.479273][  T476] ip_tables: iptables: counters copy to user failed while replacing table
[   24.546240][  T479] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability
[   24.577349][  T481] capability: warning: `syz.4.34' uses 32-bit capabilities (legacy support in use)
[   24.587936][  T479] netlink: 72 bytes leftover after parsing attributes in process `syz.4.34'.
[   24.694144][   T25] usb 4-1: Using ep0 maxpacket: 16
[   24.844336][   T25] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   24.874754][   T25] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0
[   24.896895][  T491] EXT4-fs (loop2): Ignoring removed oldalloc option
[   24.903519][  T491] EXT4-fs (loop2): Ignoring removed oldalloc option
[   24.910181][  T491] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   25.053924][  T491] EXT4-fs (loop2): mounted filesystem without journal. Opts: stripe=0x0000000000000004,debug_want_extra_isize=0x0000000000000008,block_validity,norecovery,dioread_nolock,oldalloc,oldalloc,sysvgroups,norecovery,,errors=continue
[   25.340925][   T25] usb 4-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   25.554517][   T25] usb 4-1: config 0 interface 0 has no altsetting 0
[   25.562989][   T25] usb 4-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00
[   25.567458][  T496] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002]
[   25.584310][   T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   25.593054][   T25] usb 4-1: config 0 descriptor??
[   25.598326][  T496] System zones: 1-12
[   25.612366][  T496] EXT4-fs error (device loop1): ext4_orphan_get:1405: inode #15: comm syz.1.39: inode has both inline data and extents flags
[   25.677821][  T496] EXT4-fs error (device loop1): ext4_orphan_get:1410: comm syz.1.39: couldn't read orphan inode 15 (err -117)
[   25.703254][  T511] capability: warning: `syz.2.40' uses deprecated v2 capabilities in a way that may be insecure
[   25.731382][  T496] EXT4-fs (loop1): mounted filesystem without journal. Opts: debug,,errors=continue
[   25.855999][  T490] F2FS-fs (loop4): invalid crc value
[   25.886562][  T490] F2FS-fs (loop4): Found nat_bits in checkpoint
[   25.894224][  T397] usb 1-1: new full-speed USB device number 2 using dummy_hcd
[   25.917281][  T490] F2FS-fs (loop4): Cannot turn on quotas: -2 on 2
[   25.924144][  T490] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4
[   26.066666][  T303] hid-generic 0005:10000:FFFFFFFD.0001: unknown main item tag 0x0
[   26.075167][  T303] hid-generic 0005:10000:FFFFFFFD.0001: unknown main item tag 0x0
[   26.083061][  T303] hid-generic 0005:10000:FFFFFFFD.0001: unknown main item tag 0x0
[   26.091072][  T303] hid-generic 0005:10000:FFFFFFFD.0001: unknown main item tag 0x0
[   26.099091][  T303] hid-generic 0005:10000:FFFFFFFD.0001: unknown main item tag 0x0
[   26.107098][  T303] hid-generic 0005:10000:FFFFFFFD.0001: unknown main item tag 0x0
[   26.115039][  T303] hid-generic 0005:10000:FFFFFFFD.0001: unknown main item tag 0x0
[   26.122930][  T303] hid-generic 0005:10000:FFFFFFFD.0001: unknown main item tag 0x0
[   26.130884][  T303] hid-generic 0005:10000:FFFFFFFD.0001: unknown main item tag 0x0
[   26.138831][  T303] hid-generic 0005:10000:FFFFFFFD.0001: unknown main item tag 0x0
[   26.146763][  T303] hid-generic 0005:10000:FFFFFFFD.0001: unknown main item tag 0x0
[   26.155542][  T303] hid-generic 0005:10000:FFFFFFFD.0001: unknown main item tag 0x0
[   26.163428][  T303] hid-generic 0005:10000:FFFFFFFD.0001: unknown main item tag 0x0
[   26.171627][  T303] hid-generic 0005:10000:FFFFFFFD.0001: unknown main item tag 0x0
[   26.179516][  T303] hid-generic 0005:10000:FFFFFFFD.0001: unknown main item tag 0x0
[   26.187405][  T303] hid-generic 0005:10000:FFFFFFFD.0001: unknown main item tag 0x0
[   26.195364][  T303] hid-generic 0005:10000:FFFFFFFD.0001: unknown main item tag 0x0
[   26.203243][  T303] hid-generic 0005:10000:FFFFFFFD.0001: unknown main item tag 0x0
[   26.211154][  T303] hid-generic 0005:10000:FFFFFFFD.0001: unknown main item tag 0x0
[   26.219039][  T303] hid-generic 0005:10000:FFFFFFFD.0001: unknown main item tag 0x0
[   26.226898][  T303] hid-generic 0005:10000:FFFFFFFD.0001: unknown main item tag 0x0
[   26.235040][  T303] hid-generic 0005:10000:FFFFFFFD.0001: unknown main item tag 0x0
[   26.242914][  T303] hid-generic 0005:10000:FFFFFFFD.0001: unknown main item tag 0x0
[   26.251495][  T303] hid-generic 0005:10000:FFFFFFFD.0001: unknown main item tag 0x0
[   26.259475][  T303] hid-generic 0005:10000:FFFFFFFD.0001: unknown main item tag 0x0
[   26.267793][  T303] hid-generic 0005:10000:FFFFFFFD.0001: unknown main item tag 0x0
[   26.275770][  T303] hid-generic 0005:10000:FFFFFFFD.0001: unknown main item tag 0x0
[   26.283646][  T303] hid-generic 0005:10000:FFFFFFFD.0001: unknown main item tag 0x0
[   26.284629][   T25] input: HID 041e:2801 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:041E:2801.0002/input/input6
[   26.291704][  T303] hid-generic 0005:10000:FFFFFFFD.0001: unknown main item tag 0x0
[   26.310692][  T303] hid-generic 0005:10000:FFFFFFFD.0001: unknown main item tag 0x0
[   26.318884][  T303] hid-generic 0005:10000:FFFFFFFD.0001: unknown main item tag 0x0
[   26.325011][   T25] prodikeys 0003:041E:2801.0002: input,hidraw0: USB HID v0.00 Joystick [HID 041e:2801] on usb-dummy_hcd.3-1/input0
[   26.327209][  T303] hid-generic 0005:10000:FFFFFFFD.0001: unknown main item tag 0x0
[   26.346736][  T303] hid-generic 0005:10000:FFFFFFFD.0001: unknown main item tag 0x0
[   26.355607][   T25] usb 4-1: USB disconnect, device number 3
[   26.356550][  T303] hid-generic 0005:10000:FFFFFFFD.0001: unknown main item tag 0x0
[   26.385187][  T303] hid-generic 0005:10000:FFFFFFFD.0001: unknown main item tag 0x0
[   26.398354][  T303] hid-generic 0005:10000:FFFFFFFD.0001: unknown main item tag 0x0
[   26.406334][  T303] hid-generic 0005:10000:FFFFFFFD.0001: unknown main item tag 0x0
[   26.414174][  T303] hid-generic 0005:10000:FFFFFFFD.0001: unknown main item tag 0x0
[   26.422055][  T303] hid-generic 0005:10000:FFFFFFFD.0001: unknown main item tag 0x0
[   26.429909][  T303] hid-generic 0005:10000:FFFFFFFD.0001: unknown main item tag 0x0
[   26.437800][  T303] hid-generic 0005:10000:FFFFFFFD.0001: unknown main item tag 0x0
[   26.445646][  T303] hid-generic 0005:10000:FFFFFFFD.0001: unknown main item tag 0x0
[   26.453528][  T303] hid-generic 0005:10000:FFFFFFFD.0001: unknown main item tag 0x0
[   26.461356][  T303] hid-generic 0005:10000:FFFFFFFD.0001: unknown main item tag 0x0
[   26.469237][  T303] hid-generic 0005:10000:FFFFFFFD.0001: unknown main item tag 0x0
[   26.477065][  T303] hid-generic 0005:10000:FFFFFFFD.0001: unknown main item tag 0x0
[   26.484956][  T303] hid-generic 0005:10000:FFFFFFFD.0001: unknown main item tag 0x0
[   26.492753][  T303] hid-generic 0005:10000:FFFFFFFD.0001: unknown main item tag 0x0
[   26.500661][  T303] hid-generic 0005:10000:FFFFFFFD.0001: unknown main item tag 0x0
[   26.508500][  T303] hid-generic 0005:10000:FFFFFFFD.0001: unknown main item tag 0x0
[   26.516439][  T303] hid-generic 0005:10000:FFFFFFFD.0001: unknown main item tag 0x0
[   26.524258][  T303] hid-generic 0005:10000:FFFFFFFD.0001: unknown main item tag 0x0
[   26.532137][  T303] hid-generic 0005:10000:FFFFFFFD.0001: unknown main item tag 0x0
[   26.539992][  T303] hid-generic 0005:10000:FFFFFFFD.0001: unknown main item tag 0x0
[   26.547972][  T303] hid-generic 0005:10000:FFFFFFFD.0001: unknown main item tag 0x0
[   26.555950][  T303] hid-generic 0005:10000:FFFFFFFD.0001: unknown main item tag 0x0
[   26.563832][  T303] hid-generic 0005:10000:FFFFFFFD.0001: unknown main item tag 0x0
[   26.571823][  T303] hid-generic 0005:10000:FFFFFFFD.0001: unknown main item tag 0x0
[   26.579744][  T303] hid-generic 0005:10000:FFFFFFFD.0001: unknown main item tag 0x0
[   26.587587][  T303] hid-generic 0005:10000:FFFFFFFD.0001: unknown main item tag 0x0
[   26.595501][  T303] hid-generic 0005:10000:FFFFFFFD.0001: unknown main item tag 0x0
[   26.603330][  T303] hid-generic 0005:10000:FFFFFFFD.0001: unknown main item tag 0x0
[   26.611223][  T303] hid-generic 0005:10000:FFFFFFFD.0001: unknown main item tag 0x0
[   26.614107][  T397] usb 1-1: too many endpoints for config 0 interface 0 altsetting 8: 130, using maximum allowed: 30
[   26.619063][  T303] hid-generic 0005:10000:FFFFFFFD.0001: unknown main item tag 0x0
[   26.637666][  T303] hid-generic 0005:10000:FFFFFFFD.0001: unknown main item tag 0x0
[   26.640561][  T397] usb 1-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 130
[   26.645478][  T303] hid-generic 0005:10000:FFFFFFFD.0001: unknown main item tag 0x0
[   26.666269][  T303] hid-generic 0005:10000:FFFFFFFD.0001: unknown main item tag 0x0
[   26.674092][  T303] hid-generic 0005:10000:FFFFFFFD.0001: unknown main item tag 0x0
[   26.675518][  T397] usb 1-1: config 0 interface 0 has no altsetting 0
[   26.681972][  T303] hid-generic 0005:10000:FFFFFFFD.0001: unknown main item tag 0x0
[   26.696399][  T303] hid-generic 0005:10000:FFFFFFFD.0001: unknown main item tag 0x0
[   26.705162][  T303] hid-generic 0005:10000:FFFFFFFD.0001: unknown main item tag 0x0
[   26.713132][  T303] hid-generic 0005:10000:FFFFFFFD.0001: unknown main item tag 0x0
[   26.721075][  T303] hid-generic 0005:10000:FFFFFFFD.0001: unknown main item tag 0x0
[   26.728947][  T303] hid-generic 0005:10000:FFFFFFFD.0001: unknown main item tag 0x0
[   26.736754][  T303] hid-generic 0005:10000:FFFFFFFD.0001: unknown main item tag 0x0
[   26.744582][  T303] hid-generic 0005:10000:FFFFFFFD.0001: unknown main item tag 0x0
[   26.752373][  T303] hid-generic 0005:10000:FFFFFFFD.0001: unknown main item tag 0x0
[   26.760203][  T303] hid-generic 0005:10000:FFFFFFFD.0001: unknown main item tag 0x0
[   26.768125][  T303] hid-generic 0005:10000:FFFFFFFD.0001: unknown main item tag 0x0
[   26.775949][  T303] hid-generic 0005:10000:FFFFFFFD.0001: unknown main item tag 0x0
[   26.783750][  T303] hid-generic 0005:10000:FFFFFFFD.0001: unknown main item tag 0x0
[   26.784136][  T397] usb 1-1: New USB device found, idVendor=046d, idProduct=c298, bcdDevice= 0.00
[   26.791575][  T303] hid-generic 0005:10000:FFFFFFFD.0001: unknown main item tag 0x0
[   26.800847][  T397] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=64
[   26.813046][  T303] hid-generic 0005:10000:FFFFFFFD.0001: unknown main item tag 0x0
[   26.821817][  T397] usb 1-1: SerialNumber: syz
[   26.830052][  T397] usb 1-1: config 0 descriptor??
[   26.830228][  T303] hid-generic 0005:10000:FFFFFFFD.0001: unknown main item tag 0x0
[   26.836821][  T525] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002]
[   26.842906][  T303] hid-generic 0005:10000:FFFFFFFD.0001: unknown main item tag 0x0
[   26.850814][  T525] System zones: 1-12
[   26.858968][  T303] hid-generic 0005:10000:FFFFFFFD.0001: unknown main item tag 0x0
[   26.870510][  T303] hid-generic 0005:10000:FFFFFFFD.0001: unknown main item tag 0x0
[   26.878436][  T303] hid-generic 0005:10000:FFFFFFFD.0001: unknown main item tag 0x0
[   26.879049][  T397] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[   26.886328][  T303] hid-generic 0005:10000:FFFFFFFD.0001: unknown main item tag 0x0
[   26.894584][  T525] EXT4-fs error (device loop3): ext4_xattr_inode_iget:401: inode #12: comm syz.3.45: missing EA_INODE flag
[   26.901451][  T303] hid-generic 0005:10000:FFFFFFFD.0001: unknown main item tag 0x0
[   26.915524][  T525] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.45: error while reading EA inode 12 err=-117
[   26.920524][  T303] hid-generic 0005:10000:FFFFFFFD.0001: unknown main item tag 0x0
[   26.932921][  T525] EXT4-fs (loop3): 1 orphan inode deleted
[   26.940382][  T303] hid-generic 0005:10000:FFFFFFFD.0001: unknown main item tag 0x0
[   26.946281][  T525] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug,resuid=0x000000000000ee01,,errors=continue
[   26.953882][  T303] hid-generic 0005:10000:FFFFFFFD.0001: unknown main item tag 0x0
[   26.973292][  T303] hid-generic 0005:10000:FFFFFFFD.0001: unknown main item tag 0x0
[   26.981106][  T303] hid-generic 0005:10000:FFFFFFFD.0001: unknown main item tag 0x0
[   26.988907][  T303] hid-generic 0005:10000:FFFFFFFD.0001: unknown main item tag 0x0
[   26.996718][  T303] hid-generic 0005:10000:FFFFFFFD.0001: unknown main item tag 0x0
[   27.004535][  T303] hid-generic 0005:10000:FFFFFFFD.0001: unknown main item tag 0x0
[   27.012325][  T303] hid-generic 0005:10000:FFFFFFFD.0001: unknown main item tag 0x0
[   27.020133][  T303] hid-generic 0005:10000:FFFFFFFD.0001: unknown main item tag 0x0
[   27.027966][  T303] hid-generic 0005:10000:FFFFFFFD.0001: unknown main item tag 0x0
[   27.035862][  T303] hid-generic 0005:10000:FFFFFFFD.0001: unknown main item tag 0x0
[   27.043650][  T303] hid-generic 0005:10000:FFFFFFFD.0001: unknown main item tag 0x0
[   27.051464][  T303] hid-generic 0005:10000:FFFFFFFD.0001: unknown main item tag 0x0
[   27.059303][  T303] hid-generic 0005:10000:FFFFFFFD.0001: unknown main item tag 0x0
[   27.067137][  T303] hid-generic 0005:10000:FFFFFFFD.0001: unknown main item tag 0x0
[   27.074987][  T303] hid-generic 0005:10000:FFFFFFFD.0001: unknown main item tag 0x0
[   27.082781][  T303] hid-generic 0005:10000:FFFFFFFD.0001: unknown main item tag 0x0
[   27.090620][  T303] hid-generic 0005:10000:FFFFFFFD.0001: unknown main item tag 0x0
[   27.098429][  T303] hid-generic 0005:10000:FFFFFFFD.0001: unknown main item tag 0x0
[   27.106239][  T303] hid-generic 0005:10000:FFFFFFFD.0001: unknown main item tag 0x0
[   27.114077][  T303] hid-generic 0005:10000:FFFFFFFD.0001: unknown main item tag 0x0
[   27.121877][  T303] hid-generic 0005:10000:FFFFFFFD.0001: unknown main item tag 0x0
[   27.129751][  T303] hid-generic 0005:10000:FFFFFFFD.0001: unknown main item tag 0x0
[   27.137591][  T303] hid-generic 0005:10000:FFFFFFFD.0001: unknown main item tag 0x0
[   27.145418][  T303] hid-generic 0005:10000:FFFFFFFD.0001: unknown main item tag 0x0
[   27.153216][  T303] hid-generic 0005:10000:FFFFFFFD.0001: unknown main item tag 0x0
[   27.161040][  T303] hid-generic 0005:10000:FFFFFFFD.0001: unknown main item tag 0x0
[   27.168849][  T303] hid-generic 0005:10000:FFFFFFFD.0001: unknown main item tag 0x0
[   27.176662][  T303] hid-generic 0005:10000:FFFFFFFD.0001: unknown main item tag 0x0
[   27.184790][  T303] hid-generic 0005:10000:FFFFFFFD.0001: unknown main item tag 0x0
[   27.192596][  T303] hid-generic 0005:10000:FFFFFFFD.0001: unknown main item tag 0x0
[   27.200453][  T303] hid-generic 0005:10000:FFFFFFFD.0001: unknown main item tag 0x0
[   27.208297][  T303] hid-generic 0005:10000:FFFFFFFD.0001: unknown main item tag 0x0
[   27.216187][  T303] hid-generic 0005:10000:FFFFFFFD.0001: unknown main item tag 0x0
[   27.224018][  T303] hid-generic 0005:10000:FFFFFFFD.0001: unknown main item tag 0x0
[   27.231845][  T303] hid-generic 0005:10000:FFFFFFFD.0001: unknown main item tag 0x0
[   27.239650][  T303] hid-generic 0005:10000:FFFFFFFD.0001: unknown main item tag 0x0
[   27.247528][  T303] hid-generic 0005:10000:FFFFFFFD.0001: unknown main item tag 0x0
[   27.255343][  T303] hid-generic 0005:10000:FFFFFFFD.0001: unknown main item tag 0x0
[   27.263137][  T303] hid-generic 0005:10000:FFFFFFFD.0001: unknown main item tag 0x0
[   27.270957][  T303] hid-generic 0005:10000:FFFFFFFD.0001: unknown main item tag 0x0
[   27.278760][  T303] hid-generic 0005:10000:FFFFFFFD.0001: unknown main item tag 0x0
[   27.286572][  T303] hid-generic 0005:10000:FFFFFFFD.0001: unknown main item tag 0x0
[   27.294380][  T303] hid-generic 0005:10000:FFFFFFFD.0001: unknown main item tag 0x0
[   27.302172][  T303] hid-generic 0005:10000:FFFFFFFD.0001: unknown main item tag 0x0
[   27.309980][  T303] hid-generic 0005:10000:FFFFFFFD.0001: unknown main item tag 0x0
[   27.317781][  T303] hid-generic 0005:10000:FFFFFFFD.0001: unknown main item tag 0x0
[   27.325586][  T303] hid-generic 0005:10000:FFFFFFFD.0001: unknown main item tag 0x0
[   27.335876][  T303] hid-generic 0005:10000:FFFFFFFD.0001: hidraw1: BLUETOOTH HID v0.40 Device [syz0] on syz0
[   27.387219][  T531] EXT4-fs (loop2): mounted filesystem without journal. Opts: auto_da_alloc=0xfffffffffffffff8,errors=remount-ro,
[   27.399967][  T531] ext4 filesystem being mounted at /11/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   27.405668][  T533] fido_id[533]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory
[   27.412898][  T538] fido_id[538]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[   27.464338][  T283] EXT4-fs error (device loop2): ext4_readdir:263: inode #11: block 7: comm syz-executor: path /11/bus/lost+ound: bad entry in directory: inode out of bounds - offset=0, inode=385875968, rec_len=2048, size=2048 fake=0
[   27.485584][  T283] EXT4-fs (loop2): Remounting filesystem read-only
[   27.492616][  T283] EXT4-fs error (device loop2): ext4_lookup:1830: inode #17: comm syz-executor: iget: bad i_size value: 8796093022308
[   27.505543][  T283] EXT4-fs error (device loop2): ext4_lookup:1830: inode #17: comm syz-executor: iget: bad i_size value: 8796093022308
[   27.626638][  T549] FAULT_INJECTION: forcing a failure.
[   27.626638][  T549] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   27.640501][  T549] CPU: 0 PID: 549 Comm: syz.3.50 Not tainted syzkaller #0
[   27.647620][  T549] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[   27.657664][  T549] Call Trace:
[   27.660948][  T549]  __dump_stack+0x21/0x24
[   27.665284][  T549]  dump_stack_lvl+0x1a7/0x208
[   27.670043][  T549]  ? show_regs_print_info+0x18/0x18
[   27.675234][  T549]  ? 0xffffffffa0002b68
[   27.679388][  T549]  ? __kernel_text_address+0xa0/0x100
[   27.684748][  T549]  dump_stack+0x15/0x1c
[   27.688889][  T549]  should_fail+0x3ab/0x500
[   27.693334][  T549]  should_fail_usercopy+0x1a/0x20
[   27.698347][  T549]  _copy_from_user+0x20/0xd0
[   27.702922][  T549]  __copy_msghdr_from_user+0x48a/0x630
[   27.708789][  T549]  ? stack_trace_snprint+0xe0/0xe0
[   27.713874][  T549]  ? __ia32_sys_shutdown+0x1e0/0x1e0
[   27.719131][  T549]  ? kasan_set_track+0x5b/0x70
[   27.723866][  T549]  ? kasan_set_track+0x4a/0x70
[   27.728605][  T549]  ? kasan_set_free_info+0x23/0x40
[   27.733687][  T549]  ? ____kasan_slab_free+0x125/0x160
[   27.738942][  T549]  ? __kasan_slab_free+0x11/0x20
[   27.743949][  T549]  ___sys_sendmsg+0x19a/0x2e0
[   27.748600][  T549]  ? __sys_sendmsg+0x280/0x280
[   27.753336][  T549]  ? kstrtouint_from_user+0x1c4/0x220
[   27.758689][  T549]  __sys_sendmmsg+0x2ab/0x4c0
[   27.763371][  T549]  ? __ia32_sys_sendmsg+0x2d0/0x2d0
[   27.768545][  T549]  ? __ia32_sys_read+0x90/0x90
[   27.773286][  T549]  ? debug_smp_processor_id+0x17/0x20
[   27.778628][  T549]  __x64_sys_sendmmsg+0xa0/0xb0
[   27.783448][  T549]  do_syscall_64+0x31/0x40
[   27.787839][  T549]  entry_SYSCALL_64_after_hwframe+0x61/0xcb
[   27.793703][  T549] RIP: 0033:0x7fc49c105559
[   27.798091][  T549] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   27.817668][  T549] RSP: 002b:00007fc49ab5d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[   27.826055][  T549] RAX: ffffffffffffffda RBX: 00007fc49c38bfa0 RCX: 00007fc49c105559
[   27.834002][  T549] RDX: 0400000000000234 RSI: 0000200000000180 RDI: 0000000000000003
[   27.841945][  T549] RBP: 00007fc49ab5d090 R08: 0000000000000000 R09: 0000000000000000
[   27.849889][  T549] R10: 0000000000008840 R11: 0000000000000246 R12: 0000000000000001
[   27.857844][  T549] R13: 00007fc49c38c038 R14: 00007fc49c38bfa0 R15: 00007ffd6e86aa78
[   28.051642][  T570] netlink: 8 bytes leftover after parsing attributes in process `syz.4.58'.
[   28.096174][  T565] x_tables: duplicate underflow at hook 4
[   28.105136][  T570] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   28.106465][  T568] bridge0: port 1(bridge_slave_0) entered blocking state
[   28.128193][  T568] bridge0: port 1(bridge_slave_0) entered disabled state
[   28.138257][  T570] EXT4-fs (loop4): mounted filesystem without journal. Opts: dioread_nolock,auto_da_alloc=0x0000000000000800,minixdf,noblock_validity,jqfmt=vfsold,quota,nouid32,jqfmt=vfsold,resuid=0x0000000000000000,stripe=0x00000000000001ff,resuid=0x0000000000000000,,errors=continue
[   28.142588][  T568] device bridge_slave_0 entered promiscuous mode
[   28.170992][  T568] bridge0: port 2(bridge_slave_1) entered blocking state
[   28.178308][  T568] bridge0: port 2(bridge_slave_1) entered disabled state
[   28.185540][  T570] ext4 filesystem being mounted at /8/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   28.196716][  T568] device bridge_slave_1 entered promiscuous mode
[   28.197481][  T570] EXT4-fs error (device loop4): ext4_map_blocks:742: inode #15: comm syz.4.58: lblock 0 mapped to illegal pblock 0 (length 1)
[   28.216295][  T570] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117
[   28.228555][  T570] EXT4-fs (loop4): This should not happen!! Data will be lost
[   28.228555][  T570] 
[   28.234641][  T567] F2FS-fs (loop3): Corrupted extension count (64 + 1 > 64)
[   28.242179][  T570] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.58: bg 0: block 112: padding at end of block bitmap is not set
[   28.261627][  T570] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 5 with max blocks 1 with error 28
[   28.265981][  T567] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[   28.274297][  T570] EXT4-fs (loop4): This should not happen!! Data will be lost
[   28.274297][  T570] 
[   28.292674][  T567] F2FS-fs (loop3): invalid crc value
[   28.310490][  T567] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109)
[   28.321005][  T568] bridge0: port 2(bridge_slave_1) entered blocking state
[   28.321877][  T570] EXT4-fs (loop4): Total free blocks count 0
[   28.328722][  T568] bridge0: port 2(bridge_slave_1) entered forwarding state
[   28.328793][  T568] bridge0: port 1(bridge_slave_0) entered blocking state
[   28.343021][  T570] EXT4-fs (loop4): Free/Dirty block details
[   28.348937][  T568] bridge0: port 1(bridge_slave_0) entered forwarding state
[   28.349607][   T24] kauditd_printk_skb: 47 callbacks suppressed
[   28.349616][   T24] audit: type=1400 audit(1793012847.499:587): avc:  denied  { getopt } for  pid=569 comm="syz.4.58" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   28.385229][  T570] EXT4-fs (loop4): free_blocks=0
[   28.387770][  T287] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   28.392478][  T570] EXT4-fs (loop4): dirty_blocks=64
[   28.406257][  T567] F2FS-fs (loop3): Start checkpoint disabled!
[   28.407712][  T580] netlink: 8 bytes leftover after parsing attributes in process `syz.4.58'.
[   28.413025][  T570] EXT4-fs (loop4): Block reservation details
[   28.421716][  T567] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[   28.426991][  T570] EXT4-fs (loop4): i_reserved_data_blocks=4
[   28.440169][  T567] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6
[   28.461006][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   28.468899][    T7] bridge0: port 1(bridge_slave_0) entered disabled state
[   28.470913][   T24] audit: type=1400 audit(1793012847.629:588): avc:  denied  { append } for  pid=566 comm="syz.3.57" path="/11/file0/memory.current" dev="loop3" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   28.499597][    T7] bridge0: port 2(bridge_slave_1) entered disabled state
[   28.510289][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   28.528424][    T7] bridge0: port 1(bridge_slave_0) entered blocking state
[   28.534390][   T24] audit: type=1400 audit(1793012847.699:589): avc:  denied  { map } for  pid=566 comm="syz.3.57" path="/11/file0/memory.current" dev="loop3" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   28.535491][    T7] bridge0: port 1(bridge_slave_0) entered forwarding state
[   28.566204][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   28.574405][    T7] bridge0: port 2(bridge_slave_1) entered blocking state
[   28.581461][    T7] bridge0: port 2(bridge_slave_1) entered forwarding state
[   28.587561][  T567] handle_bad_sector: 2025 callbacks suppressed
[   28.587572][  T567] attempt to access beyond end of device
[   28.587572][  T567] loop3: rw=2049, want=61440, limit=40427
[   28.618740][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   28.629895][  T567] attempt to access beyond end of device
[   28.629895][  T567] loop3: rw=2049, want=73728, limit=40427
[   28.631376][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   28.655121][  T493] usb 1-1: USB disconnect, device number 2
[   28.671341][  T567] attempt to access beyond end of device
[   28.671341][  T567] loop3: rw=2049, want=114688, limit=40427
[   28.684406][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   28.692293][  T567] attempt to access beyond end of device
[   28.692293][  T567] loop3: rw=2049, want=49160, limit=40427
[   28.692725][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   28.707604][  T567] attempt to access beyond end of device
[   28.707604][  T567] loop3: rw=2049, want=50000, limit=40427
[   28.731549][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   28.740150][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   28.751856][  T568] device veth0_vlan entered promiscuous mode
[   28.758501][  T304] attempt to access beyond end of device
[   28.758501][  T304] loop3: rw=2049, want=45104, limit=40427
[   28.763638][  T568] device veth1_macvtap entered promiscuous mode
[   28.780127][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   28.816625][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   28.825918][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   28.835206][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   28.873639][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   28.980696][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   29.096669][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   29.185347][   T24] audit: type=1400 audit(1793012848.349:590): avc:  denied  { accept } for  pid=606 comm="syz.4.63" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1
[   29.593531][  T612] FAULT_INJECTION: forcing a failure.
[   29.593531][  T612] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   29.616776][  T612] CPU: 1 PID: 612 Comm: syz.3.62 Not tainted syzkaller #0
[   29.623887][  T612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[   29.633928][  T612] Call Trace:
[   29.637204][  T612]  __dump_stack+0x21/0x24
[   29.641521][  T612]  dump_stack_lvl+0x1a7/0x208
[   29.646182][  T612]  ? show_regs_print_info+0x18/0x18
[   29.651364][  T612]  ? 0xffffffffa0002588
[   29.655507][  T612]  ? is_bpf_text_address+0x177/0x190
[   29.660781][  T612]  dump_stack+0x15/0x1c
[   29.664925][  T612]  should_fail+0x3ab/0x500
[   29.669329][  T612]  should_fail_usercopy+0x1a/0x20
[   29.671204][  T287] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   29.674338][  T612]  _copy_from_user+0x20/0xd0
[   29.674348][  T612]  ____sys_sendmsg+0x313/0x8f0
[   29.674356][  T612]  ? __sys_sendmsg_sock+0x40/0x40
[   29.674366][  T612]  ? import_iovec+0x7c/0xb0
[   29.674373][  T612]  ___sys_sendmsg+0x236/0x2e0
[   29.674382][  T612]  ? __sys_sendmsg+0x280/0x280
[   29.674390][  T612]  ? kstrtouint_from_user+0x1c4/0x220
[   29.674403][  T612]  __sys_sendmmsg+0x2ab/0x4c0
[   29.674412][  T612]  ? __ia32_sys_sendmsg+0x2d0/0x2d0
[   29.674424][  T612]  ? __ia32_sys_read+0x90/0x90
[   29.674435][  T612]  ? debug_smp_processor_id+0x17/0x20
[   29.674443][  T612]  __x64_sys_sendmmsg+0xa0/0xb0
[   29.674450][  T612]  do_syscall_64+0x31/0x40
[   29.674460][  T612]  entry_SYSCALL_64_after_hwframe+0x61/0xcb
[   29.674476][  T612] RIP: 0033:0x7fc49c105559
[   29.689635][  T287] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[   29.693909][  T612] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   29.785836][  T612] RSP: 002b:00007fc49ab5d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[   29.794225][  T612] RAX: ffffffffffffffda RBX: 00007fc49c38bfa0 RCX: 00007fc49c105559
[   29.802170][  T612] RDX: 0400000000000234 RSI: 0000200000000180 RDI: 0000000000000003
[   29.810117][  T612] RBP: 00007fc49ab5d090 R08: 0000000000000000 R09: 0000000000000000
[   29.818062][  T612] R10: 0000000000008840 R11: 0000000000000246 R12: 0000000000000001
[   29.826007][  T612] R13: 00007fc49c38c038 R14: 00007fc49c38bfa0 R15: 00007ffd6e86aa78
[   29.845964][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   29.855055][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   29.863588][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   29.865392][  T536] udevd[536]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory
[   29.871979][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   29.898469][  T402] device bridge_slave_1 left promiscuous mode
[   29.904928][  T402] bridge0: port 2(bridge_slave_1) entered disabled state
[   29.907528][  T307] udevd[307]: inotify_add_watch(7, /dev/loop3, 10) failed: No such file or directory
[   29.934815][  T617] EXT4-fs (loop3): Ignoring removed bh option
[   29.940652][   T24] audit: type=1400 audit(1793012849.099:591): avc:  denied  { unmount } for  pid=282 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[   29.940907][  T617] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   29.953049][  T536] udevd[536]: inotify_add_watch(7, /dev/loop3, 10) failed: No such file or directory
[   29.982434][  T287] usb 2-1: New USB device found, idVendor=046d, idProduct=0990, bcdDevice= 0.40
[   29.991783][  T402] device bridge_slave_0 left promiscuous mode
[   29.998244][  T287] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   30.006456][  T402] bridge0: port 1(bridge_slave_0) entered disabled state
[   30.007243][  T536] udevd[536]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory
[   30.013740][  T287] usb 2-1: Product: syz
[   30.027291][  T287] usb 2-1: Manufacturer: syz
[   30.028229][  T617] EXT4-fs (loop3): mounted filesystem without journal. Opts: noinit_itable,minixdf,bh,delalloc,dioread_nolock,noquota,,errors=continue
[   30.031878][  T287] usb 2-1: SerialNumber: syz
[   30.050427][  T617] ext4 filesystem being mounted at /13/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   30.062131][  T402] device veth1_macvtap left promiscuous mode
[   30.065097][  T307] udevd[307]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory
[   30.068388][  T402] device veth0_vlan left promiscuous mode
[   30.093100][  T623] xt_bpf: check failed: parse error
[   30.163104][  T307] udevd[307]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory
[   30.163285][  T625] create_pit_timer: 92 callbacks suppressed
[   30.163293][  T625] pit: kvm: requested 33523 ns i8254 timer period limited to 200000 ns
[   30.188010][   T24] audit: type=1400 audit(1793012849.349:592): avc:  denied  { setattr } for  pid=615 comm="syz.3.65" path="/13/file1/file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   30.189015][  T625] pit: kvm: requested 73752 ns i8254 timer period limited to 200000 ns
[   30.219853][  T625] pit: kvm: requested 197790 ns i8254 timer period limited to 200000 ns
[   30.225035][  T307] udevd[307]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory
[   30.228316][  T625] pit: kvm: requested 3352 ns i8254 timer period limited to 200000 ns
[   30.246743][  T625] pit: kvm: requested 83809 ns i8254 timer period limited to 200000 ns
[   30.255120][  T631] netlink: 8 bytes leftover after parsing attributes in process `syz.0.68'.
[   30.258428][  T625] pit: kvm: requested 137447 ns i8254 timer period limited to 200000 ns
[   30.273123][  T625] pit: kvm: requested 137447 ns i8254 timer period limited to 200000 ns
[   30.281742][  T625] pit: kvm: requested 20114 ns i8254 timer period limited to 200000 ns
[   30.291343][  T565] netlink: 68 bytes leftover after parsing attributes in process `syz.1.56'.
[   30.306030][   T24] audit: type=1400 audit(1793012849.469:593): avc:  denied  { create } for  pid=564 comm="syz.1.56" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[   30.325163][  T625] pit: kvm: requested 144152 ns i8254 timer period limited to 200000 ns
[   30.334213][  T638] netlink: 'syz.0.69': attribute type 3 has an invalid length.
[   30.342355][   T24] audit: type=1400 audit(1793012849.499:594): avc:  denied  { write } for  pid=564 comm="syz.1.56" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[   30.362349][  T625] pit: kvm: requested 113981 ns i8254 timer period limited to 200000 ns
[   30.420425][  T307] udevd[307]: inotify_add_watch(7, /dev/loop3, 10) failed: No such file or directory
[   30.440794][   T24] audit: type=1400 audit(1793012849.599:595): avc:  denied  { remount } for  pid=656 comm="syz.4.73" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   30.467370][  T665] netlink: 8 bytes leftover after parsing attributes in process `syz.0.74'.
[   30.476173][   T24] audit: type=1400 audit(1793012849.599:596): avc:  denied  { getopt } for  pid=656 comm="syz.4.73" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   30.495912][  T659] device-mapper: table: 253:0: crypt: Error decoding and setting key
[   30.504003][  T659] device-mapper: ioctl: error adding target to table
[   30.555462][  T287] usb 2-1: 0:1 : does not exist
[   30.576148][  T287] usb 2-1: cannot request logical cluster ID: 0 (err: -71)
[   30.583415][  T287] usb 2-1: unit 80 not found!
[   30.600970][  T287] usb 2-1: USB disconnect, device number 2
[   30.804191][  T300] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[   31.004512][  T402] device bridge_slave_1 left promiscuous mode
[   31.010643][  T402] bridge0: port 2(bridge_slave_1) entered disabled state
[   31.018044][  T402] device bridge_slave_0 left promiscuous mode
[   31.024377][  T402] bridge0: port 1(bridge_slave_0) entered disabled state
[   31.031932][  T402] device veth1_macvtap left promiscuous mode
[   31.038007][  T402] device veth0_vlan left promiscuous mode
[   31.082909][  T536] udevd[536]: inotify_add_watch(7, /dev/loop3, 10) failed: No such file or directory
[   31.101745][  T684] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002]
[   31.112572][  T684] System zones: 1-12
[   31.118140][  T684] EXT4-fs error (device loop3): ext4_xattr_inode_iget:401: inode #12: comm syz.3.76: missing EA_INODE flag
[   31.130124][  T684] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.76: error while reading EA inode 12 err=-117
[   31.146051][  T684] EXT4-fs (loop3): 1 orphan inode deleted
[   31.151775][  T684] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug,resuid=0x000000000000ee01,,errors=continue
[   31.166887][  T688] ip_tables: iptables: counters copy to user failed while replacing table
[   31.224139][  T300] usb 5-1: unable to get BOS descriptor or descriptor too short
[   31.304177][  T300] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   31.314305][  T300] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[   31.434117][  T287] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[   31.564144][  T300] usb 5-1: string descriptor 0 read error: -22
[   31.570324][  T300] usb 5-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40
[   31.579380][  T300] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   31.634852][  T300] usb 5-1: selecting invalid altsetting 1
[   31.640792][  T300] usb 5-1: unit 3 not found!
[   31.674167][  T287] usb 4-1: Using ep0 maxpacket: 8
[   31.794107][  T287] usb 4-1: config 0 has an invalid interface number: 118 but max is 0
[   31.812421][  T287] usb 4-1: config 0 has no interface number 0
[   31.818922][  T287] usb 4-1: New USB device found, idVendor=ff3a, idProduct=7e49, bcdDevice=79.77
[   31.834106][  T287] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   31.854332][  T300] usb 5-1: cannot request logical cluster ID: 0 (err: -71)
[   31.856526][  T287] usb 4-1: config 0 descriptor??
[   31.871801][  T300] usb 5-1: invalid MIXER UNIT descriptor 6
[   31.877741][  T300] snd-usb-audio: probe of 5-1:1.0 failed with error -71
[   31.901686][  T300] usb 5-1: USB disconnect, device number 5
[   31.984107][   T25] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[   32.116408][  T715] udc-core: couldn't find an available UDC or it's busy
[   32.136124][  T715] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[   32.194174][  T287] usb 4-1: string descriptor 0 read error: -71
[   32.200971][  T287] usb-storage 4-1:0.118: USB Mass Storage device detected
[   32.244091][   T25] usb 1-1: Using ep0 maxpacket: 32
[   32.276272][  T287] usb 4-1: USB disconnect, device number 4
[   32.374227][   T25] usb 1-1: config 0 has no interfaces?
[   32.464180][   T25] usb 1-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64
[   32.473210][   T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=4
[   32.481462][   T25] usb 1-1: SerialNumber: syz
[   32.486878][   T25] usb 1-1: config 0 descriptor??
[   32.530466][  T731] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off.
[   32.542349][  T731] overlayfs: missing 'lowerdir'
[   32.705944][  T536] udevd[536]: inotify_add_watch(7, /dev/loop3, 10) failed: No such file or directory
[   32.727328][  T287] usb 1-1: USB disconnect, device number 3
[   33.351181][  T737] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue
[   33.360197][  T737] ext4 filesystem being mounted at /17/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   33.391503][   T24] kauditd_printk_skb: 25 callbacks suppressed
[   33.391512][   T24] audit: type=1400 audit(1793012852.549:622): avc:  denied  { create } for  pid=749 comm="syz.4.86" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   33.457050][   T24] audit: type=1400 audit(1793012852.579:623): avc:  denied  { connect } for  pid=749 comm="syz.4.86" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   33.476631][   T24] audit: type=1400 audit(1793012852.579:624): avc:  denied  { write } for  pid=749 comm="syz.4.86" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   33.524867][  T747] erofs: (device loop1): mounted with root inode @ nid 36.
[   34.267745][   T24] audit: type=1400 audit(1793012853.429:625): avc:  denied  { ioctl } for  pid=761 comm="syz.4.90" path="/dev/binderfs/binder_logs/transaction_log" dev="binder" ino=1048601 ioctlcmd=0xaa00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   34.272100][  T764] bridge0: port 1(bridge_slave_0) entered disabled state
[   34.328579][  T765] udc-core: couldn't find an available UDC or it's busy
[   34.335636][  T759] FAT-fs (loop0): bogus sectors per cluster 0
[   34.335651][  T765] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[   34.341692][  T759] FAT-fs (loop0): Can't find a valid FAT filesystem
[   34.477443][  T774] input: syz1 as /devices/virtual/input/input7
[   34.514977][   T24] audit: type=1400 audit(1793012853.679:626): avc:  denied  { load_policy } for  pid=758 comm="syz.0.87" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1
[   34.534945][   T25] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[   34.542535][  T759] SELinux:  policydb magic number 0xffffffff does not match expected magic number 0xf97cff8c
[   34.543641][  T770] cgroup: No subsys list or none specified
[   34.558610][  T759] SELinux: failed to load policy
[   34.573712][  T775] cgroup: No subsys list or none specified
[   34.579762][   T24] audit: type=1400 audit(1793012853.739:627): avc:  denied  { relabelfrom } for  pid=766 comm="syz.3.89" name="TIPC" dev="sockfs" ino=17869 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   34.579779][  T770] SELinux:  Context system_u:object_r:crond_exec_t:s0 is not valid (left unmapped).
[   34.671695][   T24] audit: type=1400 audit(1793012853.829:628): avc:  denied  { relabelto } for  pid=766 comm="syz.3.89" name="TIPC" dev="sockfs" ino=17869 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=tipc_socket permissive=1 trawcon="system_u:object_r:crond_exec_t:s0"
[   34.834138][   T25] usb 5-1: device descriptor read/64, error -71
[   35.224081][   T25] usb 5-1: device descriptor read/64, error -71
[   35.346436][  T536] udevd[536]: inotify_add_watch(7, /dev/loop1, 10) failed: No such file or directory
[   35.405174][  T784] EXT4-fs (loop1): mounted filesystem without journal. Opts: noload,grpjquota=,,errors=continue
[   35.415750][  T784] ext4 filesystem being mounted at /21/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   35.427853][  T784] EXT4-fs error (device loop1): ext4_map_blocks:742: inode #15: comm syz.1.94: lblock 0 mapped to illegal pblock 0 (length 6)
[   35.441325][  T784] EXT4-fs error (device loop1): ext4_ext_remove_space:2939: inode #15: comm syz.1.94: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0)
[   35.460760][   T24] audit: type=1400 audit(1793012854.619:629): avc:  denied  { ioctl } for  pid=783 comm="syz.1.94" path="/21/file1/file1" dev="loop1" ino=15 ioctlcmd=0x587f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   35.494191][   T25] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[   35.594126][  T300] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[   35.764103][   T25] usb 5-1: device descriptor read/64, error -71
[   35.954130][  T300] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   35.964310][  T300] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2
[   35.973359][  T300] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 1.00
[   35.982394][  T300] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   35.994471][    T7] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm kworker/u4:0: bg 0: block 112: padding at end of block bitmap is not set
[   36.009150][    T7] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 131075 with max blocks 1 with error 117
[   36.021864][    T7] EXT4-fs (loop1): This should not happen!! Data will be lost
[   36.021864][    T7] 
[   36.032030][  T300] uvcvideo: Found UVC 1.00 device <unnamed> (0000:0000)
[   36.085266][  T307] udevd[307]: inotify_add_watch(7, /dev/loop1, 10) failed: No such file or directory
[   36.154098][   T25] usb 5-1: device descriptor read/64, error -71
[   36.234138][  T300] uvcvideo: Failed to query (GET_INFO) UVC control 10 on unit 1: -71 (exp. 1).
[   36.254139][  T300] uvcvideo: Failed to query (GET_INFO) UVC control 11 on unit 1: -71 (exp. 1).
[   36.274180][   T25] usb usb5-port1: attempt power cycle
[   36.279591][  T300] uvcvideo: Failed to query (GET_INFO) UVC control 12 on unit 1: -71 (exp. 1).
[   36.304113][  T300] uvcvideo: Failed to query (GET_INFO) UVC control 14 on unit 1: -71 (exp. 1).
[   36.324104][  T300] uvcvideo: Failed to query (GET_INFO) UVC control 15 on unit 1: -71 (exp. 1).
[   36.344103][  T300] uvcvideo: Failed to query (GET_INFO) UVC control 16 on unit 1: -71 (exp. 1).
[   36.353085][  T300] uvcvideo: No valid video chain found.
[   36.359550][  T300] usb 1-1: USB disconnect, device number 4
[   36.453966][  T536] udevd[536]: inotify_add_watch(7, /dev/loop3, 10) failed: No such file or directory
[   36.488545][  T793] FAT-fs (loop3): Directory bread(block 64) failed
[   36.495232][  T793] FAT-fs (loop3): Directory bread(block 65) failed
[   36.501778][  T793] FAT-fs (loop3): Directory bread(block 66) failed
[   36.508547][  T793] FAT-fs (loop3): Directory bread(block 67) failed
[   36.515229][  T793] FAT-fs (loop3): Directory bread(block 68) failed
[   36.517448][  T536] udevd[536]: inotify_add_watch(7, /dev/loop1, 10) failed: No such file or directory
[   36.521818][  T793] FAT-fs (loop3): Directory bread(block 69) failed
[   36.537799][  T793] FAT-fs (loop3): Directory bread(block 70) failed
[   36.544347][  T793] FAT-fs (loop3): Directory bread(block 71) failed
[   36.550889][  T793] FAT-fs (loop3): Directory bread(block 72) failed
[   36.557513][  T793] FAT-fs (loop3): Directory bread(block 73) failed
[   36.564689][   T24] audit: type=1400 audit(1793012855.729:630): avc:  denied  { mounton } for  pid=790 comm="syz.1.95" path="/22/file0" dev="loop1" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1
[   36.593094][  T304] attempt to access beyond end of device
[   36.593094][  T304] loop3: rw=1, want=1232, limit=256
[   36.626731][  T536] udevd[536]: inotify_add_watch(7, /dev/loop3, 10) failed: No such file or directory
[   36.694129][   T25] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[   36.874159][   T25] usb 5-1: device descriptor read/8, error -71
[   37.144140][   T25] usb 5-1: device descriptor read/8, error -71
[   37.276169][  T536] udevd[536]: inotify_add_watch(7, /dev/loop1, 10) failed: No such file or directory
[   37.366989][  T536] udevd[536]: inotify_add_watch(7, /dev/loop4, 10) failed: No such file or directory
[   37.399066][  T536] udevd[536]: inotify_add_watch(7, /dev/loop4, 10) failed: No such file or directory
[   37.415032][  T807] EXT4-fs error (device loop4): dx_probe:796: inode #2: comm syz.4.100: Directory hole found for htree index block 0
[   37.429693][  T807] EXT4-fs (loop4): Remounting filesystem read-only
[   37.436270][  T807] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -117
[   37.444563][  T807] EXT4-fs error (device loop4): dx_probe:796: inode #2: comm syz.4.100: Directory hole found for htree index block 0
[   37.457008][  T807] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117
[   37.465192][  T807] EXT4-fs (loop4): mounted filesystem without journal. Opts: noinit_itable,init_itable,noinit_itable,discard,min_batch_time=0x0000000000000006,grpjquota=.mb_optimize_scan=0x0000000000000000,errors=remount-ro,jqfmt=vfsv1,usrquota,usrjquota=.,resgid=0x0000000000000000,nolazytime,,
[   37.545406][  T536] udevd[536]: inotify_add_watch(7, /dev/loop4, 10) failed: No such file or directory
[   37.614118][  T712] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[   37.648976][  T536] udevd[536]: inotify_add_watch(7, /dev/loop4, 10) failed: No such file or directory
[   37.698850][    T5] usb 1-1: new full-speed USB device number 5 using dummy_hcd
[   37.775757][    T7] device bridge_slave_1 left promiscuous mode
[   37.781880][    T7] bridge0: port 2(bridge_slave_1) entered disabled state
[   37.789245][    T7] device bridge_slave_0 left promiscuous mode
[   37.795414][    T7] bridge0: port 1(bridge_slave_0) entered disabled state
[   37.802992][    T7] device veth1_macvtap left promiscuous mode
[   37.809121][    T7] device veth0_vlan left promiscuous mode
[   37.874162][  T712] usb 4-1: Using ep0 maxpacket: 8
[   37.926184][  T838] xt_hashlimit: size too large, truncated to 1048576
[   38.004152][  T712] usb 4-1: config index 0 descriptor too short (expected 5924, got 36)
[   38.013420][  T712] usb 4-1: config 250 has an invalid interface number: 228 but max is -1
[   38.030950][  T712] usb 4-1: config 250 has 1 interface, different from the descriptor's value: 0
[   38.049743][  T712] usb 4-1: config 250 has no interface number 0
[   38.062495][  T712] usb 4-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024
[   38.086974][  T712] usb 4-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024
[   38.100803][  T712] usb 4-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0
[   38.119621][  T712] usb 4-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0
[   38.127405][    T5] usb 1-1: unable to get BOS descriptor or descriptor too short
[   38.130093][  T712] usb 4-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17
[   38.151051][  T712] usb 4-1: config 250 interface 228 has no altsetting 0
[   38.174112][    T5] usb 1-1: not running at top speed; connect to a high speed hub
[   38.254138][    T5] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   38.264383][    T5] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2
[   38.273273][    T5] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[   38.294151][  T712] usb 4-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07
[   38.303304][  T712] usb 4-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59
[   38.311813][  T712] usb 4-1: Product: syz
[   38.316053][  T712] usb 4-1: SerialNumber: syz
[   38.374613][  T712] hub 4-1:250.228: bad descriptor, ignoring hub
[   38.380906][  T712] hub: probe of 4-1:250.228 failed with error -5
[   38.414171][    T5] usb 1-1: New USB device found, idVendor=8086, idProduct=0ad2, bcdDevice= 0.00
[   38.423362][    T5] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[   38.431781][    T5] usb 1-1: Product: syz
[   38.436153][    T5] usb 1-1: Manufacturer: syz
[   38.585474][  T712] usblp 4-1:250.228: usblp0: USB Bidirectional printer dev 5 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292
[   38.764121][    T5] uvcvideo: Found UVC 0.00 device syz (8086:0ad2)
[   38.780684][    T5] uvcvideo: No valid video chain found.
[   38.792465][    T5] usb 1-1: USB disconnect, device number 5
SYZFAIL: mount(dev) failed
 (errno 2: No such file or directory)
loop exited with status 67
SYZFAIL: tun: can't open /dev/net/tun
 (errno 2: No such file or directory)
loop exited with status 67
SYZFAIL: tun: can't open /dev/net/tun
 (errno 2: No such file or directory)
loop exited with status 67
SYZFAIL: tun: can't open /dev/net/tun
 (errno 2: No such file or directory)
loop exited with status 67
SYZFAIL: tun: can't open /dev/net/tun
 (errno 2: No such file or directory)
loop exited with status 67
SYZFAIL: tun: can't open /dev/net/tun
 (errno 2: No such file or directory)
loop exited with status 67
SYZFAIL: tun: can't open /dev/net/tun
 (errno 2: No such file or directory)
loop exited with status 67
SYZFAIL: tun: can't open /dev/net/tun
 (errno 2: No such file or directory)
loop exited with status 67
SYZFAIL: tun: can't open /dev/net/tun
 (errno 2: No such file or directory)
loop exited with status 67
SYZFAIL: tun: can't open /dev/net/tun
 (errno 2: No such file or directory)
loop exited with status 67
SYZFAIL: tun: can't open /dev/net/tun
 (errno 2: No such file or directory)
loop exited with status 67
SYZFAIL: tun: can't open /dev/net/tun
 (errno 2: No such file or directory)
loop exited with status 67
SYZFAIL: tun: can't open /dev/net/tun
 (errno 2: No such file or directory)
loop exited with status 67
SYZFAIL: tun: can't open /dev/net/tun
 (errno 2: No such file or directory)
loop exited with status 67
SYZFAIL: tun: can't open /dev/net/tun
 (errno 2: No such file or directory)
loop exited with status 67
SYZFAIL: tun: can't open /dev/net/tun
 (errno 2: No such file or directory)
loop exited with status 67
SYZFAIL: tun: can't open /dev/net/tun
 (errno 2: No such file or directory)
loop exited with status 67
SYZFAIL: tun: can't open /dev/net/tun
 (errno 2: No such file or directory)
loop exited with status 67
SYZFAIL: tun: can't open /dev/net/tun
 (errno 2: No such file or directory)
loop exited with status 67
SYZFAIL: tun: can't open /dev/net/tun
 (errno 2: No such file or directory)
loop exited with status 67
SYZFAIL: tun: can't open /dev/net/tun
 (errno 2: No such file or directory)
loop exited with status 67
SYZFAIL: repeatedly failed to execute the program
proc=5 req=54 state=3 status=67 (errno 32: Broken pipe)
[   38.917861][   T24] audit: type=1400 audit(1793012858.079:631): avc:  denied  { write } for  pid=271 comm="syz-executor" path="pipe:[13154]" dev="pipefs" ino=13154 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1
[   39.274314][  T878] usb 4-1: USB disconnect, device number 5
[   39.282393][  T878] usblp0: removed
[   40.554781][    T7] device bridge_slave_1 left promiscuous mode
[   40.560913][    T7] bridge0: port 2(bridge_slave_1) entered disabled state
[   40.568272][    T7] device bridge_slave_0 left promiscuous mode
[   40.574422][    T7] bridge0: port 1(bridge_slave_0) entered disabled state
[   40.581977][    T7] device bridge_slave_1 left promiscuous mode
[   40.588247][    T7] bridge0: port 2(bridge_slave_1) entered disabled state
[   40.595553][    T7] device bridge_slave_0 left promiscuous mode
[   40.601633][    T7] bridge0: port 1(bridge_slave_0) entered disabled state
[   40.609239][    T7] device bridge_slave_1 left promiscuous mode
[   40.615376][    T7] bridge0: port 2(bridge_slave_1) entered disabled state
[   40.622615][    T7] device bridge_slave_0 left promiscuous mode
[   40.628776][    T7] bridge0: port 1(bridge_slave_0) entered disabled state
[   40.636612][    T7] device veth1_macvtap left promiscuous mode
[   40.642608][    T7] device veth0_vlan left promiscuous mode
[   40.648512][    T7] device veth1_macvtap left promiscuous mode
[   40.654617][    T7] device veth0_vlan left promiscuous mode
[   40.660411][    T7] device veth1_macvtap left promiscuous mode
[   40.666495][    T7] device veth0_vlan left promiscuous mode