last executing test programs:

1m20.603608449s ago: executing program 32 (id=17):
syz_open_dev$evdev(&(0x7f0000004840), 0x0, 0x0)
r0 = syz_usb_connect$hid(0x0, 0x34, &(0x7f0000004880)=ANY=[@ANYBLOB="120100020000004086800000000000000001090222000101008032090400000103000000092111010001224c0007058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_connect$hid(0x5, 0x0, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000048c0)={0x24, 0x0, 0x0, &(0x7f0000004900)=ANY=[@ANYBLOB="00224c00000005200973a10185010a19031500250575089501b1020a16031500250575089501b10285020a530415002505750895017e020a5404150025057508950181020a550415002505750895018102c0"], 0x0}, 0x0)
syz_usb_connect$cdc_ncm(0x3, 0x0, 0x0, 0x0)
mknodat(0xffffffffffffff9c, 0x0, 0x11c0, 0x8)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e)
sched_setaffinity(0x0, 0x8, &(0x7f0000000400)=0x2)
mknodat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x10, 0x9)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r1, &(0x7f0000000700)={0x2020, 0x0, <r2=>0x0}, 0x2020)
write$FUSE_INIT(r1, &(0x7f0000002740)={0x50, 0x0, r2, {0x7, 0x2b, 0x1, 0x3800402c, 0x3, 0xfffe, 0x2, 0x6, 0x0, 0x0, 0x100, 0xe}}, 0x50)
read$FUSE(r1, &(0x7f00000027c0)={0x2020}, 0x2020)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1f, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000500000000000000800000001811"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000604000000002e"], 0x0, 0x37}, 0x28)
close(r3)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x13, 0x4, 0x2, 0x0, r3, 0xffffffff}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r5, <r6=>0xffffffffffffffff}, &(0x7f0000000440), &(0x7f0000000480)=r3}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r6}, &(0x7f00000005c0), &(0x7f0000000600)=r3}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r6}, &(0x7f0000000680), &(0x7f00000006c0)=r4}, 0x20)
write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f0000004800)={0x30, 0x5, 0x0, {0x0, 0x1, 0x8, 0x4}}, 0x30)

1m15.941218962s ago: executing program 5 (id=39):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000003800)=@newtaction={0x8a4, 0x30, 0x12f, 0x0, 0x0, {}, [{0x890, 0x1, [@m_police={0x88c, 0x1, 0x0, 0x0, {{0xb}, {0x860, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x80000000, 0x0, 0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x8001, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0x80, 0x5, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffc, 0xb, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0xffffff35, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xfffffffd, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x3, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x3, 0x0, 0x1]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x6, 0xffffffff, 0x7f, 0x401, 0x2, 0x0, 0x2, 0x3de8, 0x4, 0x5, 0x5, 0x0, 0x7fff, 0x75ba, 0x7fffffff, 0x5, 0xffffffff, 0x7ff, 0x2, 0x9, 0x2, 0x0, 0x1000, 0x1, 0x3, 0x6, 0x0, 0xfa, 0x4, 0x0, 0xf, 0x80000001, 0x7, 0xfffffffb, 0x1, 0x20, 0x5, 0xb, 0x1, 0x2f2, 0x7fff, 0x0, 0x81, 0x206, 0x1ff, 0x7, 0x3, 0x5, 0x3, 0x9, 0xfff, 0x401, 0x1, 0x6, 0x7, 0x2, 0x4, 0x7f, 0x5, 0xfffffffb, 0x1, 0x4, 0x5, 0x8, 0x2000009, 0x9, 0x10, 0x9, 0x7, 0xffffff00, 0x97, 0x0, 0x4, 0x8, 0x8, 0x1, 0x958, 0x1fe, 0x4, 0x6, 0x7, 0x80, 0x5, 0xe53, 0x0, 0xfffffffe, 0x4, 0x8, 0x9, 0x7fff, 0x30, 0x8, 0xfffffff7, 0x4, 0x9, 0x1, 0x4, 0x7, 0x9, 0x5, 0x7, 0x6, 0x0, 0x5, 0x2, 0x7, 0x3, 0xcdd, 0x2, 0xd67, 0x7, 0x4, 0x25, 0x9dc5, 0x7, 0xfffffff7, 0x2, 0x400, 0x8, 0x0, 0x7, 0x5, 0x9, 0xa, 0xa, 0x9, 0x5, 0xdb5, 0x101, 0x4, 0x74e4, 0x7fff, 0x7, 0x7ff, 0x1, 0xd70, 0x1, 0x8, 0xa, 0x7, 0x1, 0x82, 0x52e, 0x7, 0x1, 0x5, 0x26, 0x1, 0x1b2a, 0x81, 0x9, 0x1c, 0x767, 0x7, 0x9, 0x10, 0xc2a, 0xff, 0x7, 0x6, 0x3, 0x3, 0xfffffff4, 0x8, 0x3, 0xfff, 0x8, 0x2, 0x5, 0x6, 0x3, 0xd7c3, 0x2, 0x10000, 0x7fff, 0x5, 0x5, 0x0, 0xfffffff7, 0x4, 0x2, 0x0, 0x6ee1847d, 0x10001, 0x7ff, 0x1, 0xf0, 0x7, 0x2, 0x7, 0x4, 0x6, 0x4, 0x7, 0x2, 0x0, 0x1, 0x4, 0x3, 0xfff, 0x80000001, 0x7, 0x676, 0x3, 0x9, 0x2, 0x4, 0x7fff, 0x4a5, 0x23, 0x4, 0x9, 0x8, 0x0, 0x8000, 0xa, 0x9, 0xca000000, 0x2, 0xfffffffa, 0x3, 0x7, 0x9, 0x7, 0x65fe, 0x9, 0x6, 0x4, 0x80000000, 0x5, 0x801, 0xb848, 0x6, 0x6, 0x800, 0x7, 0x1, 0xb, 0x80, 0x2, 0x3, 0x7e54, 0xa, 0x4, 0x4, 0xc, 0x80000001, 0x5, 0x5, 0x10000002, 0x7, 0x7, 0x2, 0x2, 0x4]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x1, 0x7, 0x4, 0x1, {0x7, 0x0, 0x3, 0x7, 0x7, 0x80000001}, {0x4, 0x2, 0x2, 0xa, 0x1ff, 0x1c0000}, 0x9, 0xbc, 0xdf72c67}}], [@TCA_POLICE_RATE64={0xc, 0x8, 0x100000001}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xffffffffffff22ff}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x8a4}}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000))

1m15.906996285s ago: executing program 33 (id=39):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000003800)=@newtaction={0x8a4, 0x30, 0x12f, 0x0, 0x0, {}, [{0x890, 0x1, [@m_police={0x88c, 0x1, 0x0, 0x0, {{0xb}, {0x860, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x80000000, 0x0, 0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x8001, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0x80, 0x5, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffc, 0xb, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0xffffff35, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xfffffffd, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x3, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x3, 0x0, 0x1]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x6, 0xffffffff, 0x7f, 0x401, 0x2, 0x0, 0x2, 0x3de8, 0x4, 0x5, 0x5, 0x0, 0x7fff, 0x75ba, 0x7fffffff, 0x5, 0xffffffff, 0x7ff, 0x2, 0x9, 0x2, 0x0, 0x1000, 0x1, 0x3, 0x6, 0x0, 0xfa, 0x4, 0x0, 0xf, 0x80000001, 0x7, 0xfffffffb, 0x1, 0x20, 0x5, 0xb, 0x1, 0x2f2, 0x7fff, 0x0, 0x81, 0x206, 0x1ff, 0x7, 0x3, 0x5, 0x3, 0x9, 0xfff, 0x401, 0x1, 0x6, 0x7, 0x2, 0x4, 0x7f, 0x5, 0xfffffffb, 0x1, 0x4, 0x5, 0x8, 0x2000009, 0x9, 0x10, 0x9, 0x7, 0xffffff00, 0x97, 0x0, 0x4, 0x8, 0x8, 0x1, 0x958, 0x1fe, 0x4, 0x6, 0x7, 0x80, 0x5, 0xe53, 0x0, 0xfffffffe, 0x4, 0x8, 0x9, 0x7fff, 0x30, 0x8, 0xfffffff7, 0x4, 0x9, 0x1, 0x4, 0x7, 0x9, 0x5, 0x7, 0x6, 0x0, 0x5, 0x2, 0x7, 0x3, 0xcdd, 0x2, 0xd67, 0x7, 0x4, 0x25, 0x9dc5, 0x7, 0xfffffff7, 0x2, 0x400, 0x8, 0x0, 0x7, 0x5, 0x9, 0xa, 0xa, 0x9, 0x5, 0xdb5, 0x101, 0x4, 0x74e4, 0x7fff, 0x7, 0x7ff, 0x1, 0xd70, 0x1, 0x8, 0xa, 0x7, 0x1, 0x82, 0x52e, 0x7, 0x1, 0x5, 0x26, 0x1, 0x1b2a, 0x81, 0x9, 0x1c, 0x767, 0x7, 0x9, 0x10, 0xc2a, 0xff, 0x7, 0x6, 0x3, 0x3, 0xfffffff4, 0x8, 0x3, 0xfff, 0x8, 0x2, 0x5, 0x6, 0x3, 0xd7c3, 0x2, 0x10000, 0x7fff, 0x5, 0x5, 0x0, 0xfffffff7, 0x4, 0x2, 0x0, 0x6ee1847d, 0x10001, 0x7ff, 0x1, 0xf0, 0x7, 0x2, 0x7, 0x4, 0x6, 0x4, 0x7, 0x2, 0x0, 0x1, 0x4, 0x3, 0xfff, 0x80000001, 0x7, 0x676, 0x3, 0x9, 0x2, 0x4, 0x7fff, 0x4a5, 0x23, 0x4, 0x9, 0x8, 0x0, 0x8000, 0xa, 0x9, 0xca000000, 0x2, 0xfffffffa, 0x3, 0x7, 0x9, 0x7, 0x65fe, 0x9, 0x6, 0x4, 0x80000000, 0x5, 0x801, 0xb848, 0x6, 0x6, 0x800, 0x7, 0x1, 0xb, 0x80, 0x2, 0x3, 0x7e54, 0xa, 0x4, 0x4, 0xc, 0x80000001, 0x5, 0x5, 0x10000002, 0x7, 0x7, 0x2, 0x2, 0x4]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x1, 0x7, 0x4, 0x1, {0x7, 0x0, 0x3, 0x7, 0x7, 0x80000001}, {0x4, 0x2, 0x2, 0xa, 0x1ff, 0x1c0000}, 0x9, 0xbc, 0xdf72c67}}], [@TCA_POLICE_RATE64={0xc, 0x8, 0x100000001}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xffffffffffff22ff}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x8a4}}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000))

1m1.204095786s ago: executing program 6 (id=209):
socket$nl_generic(0x10, 0x3, 0x10) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0), 0xffffffffffffffff)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000300)={0x3, &(0x7f0000000340)=[{0x15, 0x0, 0x1, 0xffffffff}, {0x7}, {0x6, 0x2}]})
sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=ANY=[@ANYBLOB="7b08cf00", @ANYRES16=r1, @ANYBLOB="01060000e5ff0000000019"], 0x38}, 0x1, 0x0, 0x0, 0x20040850}, 0x0)
syz_io_uring_setup(0x4c61, &(0x7f00000001c0)={0x0, 0x6f09, 0x602, 0x1, 0x278}, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) (async)
syz_io_uring_setup(0x4c61, &(0x7f00000001c0)={0x0, 0x6f09, 0x602, 0x1, 0x278}, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0))
bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_BIND_MAP(0xa, 0x0, 0x0)
syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) (async)
syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff)
socket$inet6_udp(0xa, 0x2, 0x0)
syz_pidfd_open(0x0, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000005c0)={0xa, 0x400000000008d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000600)=0x8) (async)
sched_setscheduler(0x0, 0x2, &(0x7f0000000600)=0x8)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000520001002cbd7000040000000a00000008000100", @ANYRES32=r2, @ANYBLOB="4cbfa9d95ef764281e0108c970544c8be5a98b859d0c49c4397e86e4a14bf9abc8b9c60817d56bc08ee7fcd7781d91d77309166928d04395d7445defcaced8aef42fd85eb17618793d933d3e04c3ac6b5f504260909413f994daa588c79615a72f56e06a82dfee55ff02a869d1bb3319f1d6cb3c4afe75862bdd3a761daa84d6d2e70268b4a238e7b5bcdae6e7a7ad430c9fadece4043200"/174], 0x1c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) (async)
sendmsg$nl_generic(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000520001002cbd7000040000000a00000008000100", @ANYRES32=r2, @ANYBLOB="4cbfa9d95ef764281e0108c970544c8be5a98b859d0c49c4397e86e4a14bf9abc8b9c60817d56bc08ee7fcd7781d91d77309166928d04395d7445defcaced8aef42fd85eb17618793d933d3e04c3ac6b5f504260909413f994daa588c79615a72f56e06a82dfee55ff02a869d1bb3319f1d6cb3c4afe75862bdd3a761daa84d6d2e70268b4a238e7b5bcdae6e7a7ad430c9fadece4043200"/174], 0x1c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f0000000840)=0x2) (async)
sched_setaffinity(0x0, 0x8, &(0x7f0000000840)=0x2)
sched_setscheduler(r3, 0x1, &(0x7f0000000880)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000008c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f0000000900)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000980), 0x651, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f00000009c0)='./bus\x00', 0x0, 0x400)
recvmmsg(r4, &(0x7f0000000a00), 0x4000087, 0x2, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000a40), 0xffffffffffffffff)
creat(&(0x7f0000000a80)='./bus\x00', 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
socket$nl_generic(0x10, 0x3, 0x10)

1m0.381521059s ago: executing program 6 (id=220):
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
faccessat2(r0, &(0x7f0000000080)='\x00', 0x2, 0x1000)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x22000402, &(0x7f0000000700)={[{@noinit_itable}, {@abort}, {@noinit_itable}, {@noauto_da_alloc}, {@data_err_ignore}, {@grpjquota, 0x2e}, {@mb_optimize_scan}, {@errors_remount}, {@jqfmt_vfsv1}, {@usrquota}, {@usrjquota_path={'usrjquota', 0x3d, '.\x02'}}, {@data_err_ignore}, {@data_err_abort}], [], 0x2c}, 0x1, 0x4ef, &(0x7f0000000200)="$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")

59.305442989s ago: executing program 6 (id=224):
mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x2)
r0 = syz_open_dev$hiddev(&(0x7f0000000000), 0x100000001, 0x210000)
ioctl$HIDIOCGUCODE(r0, 0xc018480d, &(0x7f0000000040)={0x1, 0x2, 0x7, 0x6, 0x6, 0x60})
ioctl$XFS_IOC_GETPARENTS_BY_HANDLE(r0, 0xc040583f, &(0x7f0000000180)={{@_ha_fsid={[0x8, 0x1]}, {0xffff, 0x3ff, 0x4, 0x5}}, {{[0x4, 0xfffffffb, 0x3]}, 0x0, 0x3, 0x7, 0x0, &(0x7f0000000080)=[{{@align=0x9, {0x1, 0x401, 0x3, 0x7}}, 0xb67f, 0x0, '/dev/usb/hiddev#\x00'}, {{@align, {0x1, 0x8, 0x400, 0x40}}, 0x1e8, 0x0, '/dev/usb/hiddev#\x00'}, {{@_ha_fsid={[0x5, 0x2]}, {0x9c, 0x8, 0xdc03, 0x9}}, 0x101, 0x0, '\x00'}, {{@align=0x9, {0xd7, 0x8c, 0x5, 0x7}}, 0x1, 0x0, '{\x00'}, {{@align=0x9, {0x0, 0x4, 0x7, 0x3}}, 0x9f87, 0x0, '/dev/usb/hiddev#\x00'}]}})
r1 = syz_open_dev$hiddev(&(0x7f00000001c0), 0x8, 0x80001)
read$hiddev(r1, &(0x7f0000000200)=""/96, 0x60)
r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
ioctl$BTRFS_IOC_LOGICAL_INO(r2, 0xc0389424, &(0x7f0000000300)={0x7fffffff, 0x10, '\x00', 0x1, &(0x7f00000002c0)=[0x0, 0x0]})
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$HIDIOCAPPLICATION(r2, 0x4802, 0x256c0000000000)
sendmsg$NL80211_CMD_TDLS_OPER(r2, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x28, 0x0, 0x400, 0x70bd27, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xc55, 0x56}}}}, [@NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x400c0)
ioctl$F2FS_IOC_FLUSH_DEVICE(r1, 0x4008f50a, &(0x7f0000000440)={0x7, 0x8})
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000480)={'dummy0\x00'})
openat$cgroup_ro(r2, &(0x7f00000004c0)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0)
prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x8)
getsockopt$inet_tcp_int(r2, 0x6, 0x8, &(0x7f0000000500), &(0x7f0000000540)=0x4)
inotify_init()
ioctl$HIDIOCGSTRING(r0, 0x81044804, &(0x7f0000000580)={0x66, "49ad502918c96ec74e00ad7b6e7a434f2670b1306e3e3f3e3e7d5f8ae74b25aab1862b14594c7a89caf396c7aa158047957d3a2c0f0184a26b2819f7adda05c09a93859406312f5950e3d58a51ddba41b342944efd6333fe1b188d28e8ac6cd5b904757be0e4"})
r4 = socket$packet(0x11, 0x2, 0x300)
ioctl$INCFS_IOC_READ_FILE_SIGNATURE(0xffffffffffffffff, 0x8010671f, &(0x7f00000006c0)={&(0x7f0000000600)=""/187, 0xbb})
socket$can_bcm(0x1d, 0x2, 0x2)
prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x0)
r5 = syz_clone(0x1000, &(0x7f0000000700)="46d7ad596a6ed1f6d73492ba26d924f7f687aea8cca046ca48161051b6d273fe7497125f269cffcd0d20dd2942cb90e4e51314e955444998d2dbc899087e44d2c68a1c9666aa449bc86ae4c3ec139b13c0d59f64ab0a2bd837172be2845a6a76970fa8cf415d24be73caa625f51113447a3b79adbcf589acc5f11ebc792bf11d081ea65a034bc39cc92f32b55d89c176e18c34f42a6398bd670ffe9d082aaa3311403cd9fa39d825b5b2", 0xaa, &(0x7f00000007c0), &(0x7f0000000800), &(0x7f0000000840)="214196ba8a7147a804ef100e4ea1da1df3673bbeacedfa7fe1a6d33ab4b35449ff7bbeab1319f6da")
prlimit64(r5, 0x0, &(0x7f0000000880)={0x1, 0x5}, &(0x7f00000008c0))
ioctl$NILFS_IOCTL_GET_VINFO(r4, 0xc0186e86, &(0x7f0000000940)={&(0x7f0000000900)=[{0x7, 0x6, 0x1}], 0x1, 0x20, 0x0, 0x200})
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl802154(&(0x7f00000009c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000a00)={'wpan0\x00', <r8=>0x0})
sendmsg$NL802154_CMD_DEL_SEC_KEY(r6, &(0x7f0000000ac0)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x38, r7, 0x200, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_KEY={0x10, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0xc, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}]}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x20000004)
sendmsg$NLBL_CALIPSO_C_ADD(r6, &(0x7f0000000c40)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b80)={0x4c, 0x0, 0x800, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x60efa1172848f73b}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000)

59.08874395s ago: executing program 6 (id=226):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000001c00010000000000feffffff07000000", @ANYRES32=r1, @ANYBLOB="800002dfa9aa9d985727c9f000000000a2cb96ba1078a180a41868bc166d3cc9ee67e4394b3e5dffe1884a95a8bcd8da52b702e8174210d256150aa7f615602329d783dbdb819a92028c6e798ad3dd9a4771cfbe27fed41eb4465c80daaa069e5979477f87566e0e216d3a53637a6e1df889f1f30822211042e4a64c9bf0abb5bd5983b78737f46679a610b3109194969daf4f966f37412571a91043a5992947d000000000000000"], 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x4004000)
socket$nl_route(0x10, 0x3, 0x0)
r2 = userfaultfd(0x801)
bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0600000004000000080000000b"], 0x50)
close(0x3)
r3 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r3, 0x0, 0x0)
listen(r3, 0xa)
socket$vsock_stream(0x28, 0x1, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x1c, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x40f00, 0x29, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0xc1})
ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000200)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})
ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000240)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2})

58.388328592s ago: executing program 6 (id=229):
syz_mount_image$f2fs(&(0x7f0000000080), &(0x7f00000001c0)='./file1\x00', 0x3004050, &(0x7f0000000200)=ANY=[], 0x3, 0x1063e, &(0x7f00000007c0)="$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") (async, rerun: 64)
write(0xffffffffffffffff, 0x0, 0x0) (rerun: 64)
creat(&(0x7f0000016740)='./bus\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='sysfs\x00', 0x1214040, 0x0) (async)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000180)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) (async)
chdir(&(0x7f0000000200)='./file0\x00') (async)
newfstatat(0xffffffffffffff9c, &(0x7f0000000240)='./dev\x00', 0x0, 0x100) (async)
mount(0x0, &(0x7f0000000280)='./dev\x00', &(0x7f00000002c0)='devtmpfs\x00', 0x0, 0x0) (async)
io_setup(0x202, &(0x7f0000016780))

57.51354697s ago: executing program 6 (id=237):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)
syz_emit_ethernet(0x4e, &(0x7f0000000180)={@link_local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x3, 0x6, "bdac70", 0x18, 0x3a, 0xff, @local, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0xff, 0x7e, 0x6, 0x7, 0x4, [{0x1, 0x1, "cbd238e05305"}]}}}}}}, 0x0)
r1 = socket$pptp(0x18, 0x1, 0x2)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000200)='./file0\x00', 0x88bc56, 0x0, 0x0, 0x0, &(0x7f0000000240))
mount$overlay(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x8000, &(0x7f0000000380)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [{@obj_user={'obj_user', 0x3d, '-:\\\r\x00\x00'}}], 0x2f})
bind$pptp(r1, 0x0, 0x0)
connect$pptp(r1, 0x0, 0x0)
ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, 0x0)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0xff, 0x7fff0010}]})
close_range(r2, 0xffffffffffffffff, 0x0)
sendto(0xffffffffffffffff, &(0x7f00000003c0)="75479311c6603a6a8af668e1861827a61bf5a32b4d87bef29c89d4d4cbbe8a2f9dcda782440d791581326bf011a0b345b12b525ab30e8d923427734ccf90b3395c11cc4504985ed28613d92f37ed18d206b3ce26402f9dc7cd4b9940d097f5ae22bdce467764b7685b8c6c4ca7344c6fa58f6556466709f369c122e5a2582b98fd9eb046f73e5415070c0914259c36e865aca6d0ea6e2e4c0a5c0fcc86c34ecc86aa66f4f81a799c000e4ee4a44a02927b825f94e7e3f3e6a62c9432d7468a63e0783e3e51b063ae", 0xc8, 0x10, 0x0, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000000100)=0x8, 0x4)
setsockopt$inet6_int(r0, 0x29, 0x33, &(0x7f0000000280)=0xf2b, 0x4)
time(&(0x7f00000000c0))
getsockopt$inet6_buf(r0, 0x29, 0xca, &(0x7f0000000040)=""/30, &(0x7f0000000340)=0x1e)

53.746191512s ago: executing program 34 (id=259):
r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/ip6_tables_names\x00')
read$FUSE(r0, &(0x7f0000000400)={0x2020}, 0x2020)
preadv(r0, &(0x7f0000002440)=[{&(0x7f0000002480)=""/24, 0x18}], 0x1, 0x2, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff})
r3 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r3, 0x0, 0x0)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000002500), r0)
sendmsg$TIPC_CMD_SET_LINK_PRI(r0, &(0x7f00000025c0)={&(0x7f00000024c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000002580)={&(0x7f0000002540)={0x2c, r4, 0x8, 0x70bd29, 0x25dfdbfd, {{}, {}, {0x10, 0x18, {0x1, @bearer=@l2={'ib', 0x3a, 'nr0\x00'}}}}, ["", "", "", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x21}, 0x20008000)
pipe2(&(0x7f0000000240)={0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x0)
splice(r3, 0x0, r5, 0x0, 0x8001, 0x0)
r6 = signalfd4(r2, 0x0, 0x0, 0x100000)
syz_fuse_handle_req(r6, 0x0, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e04, 0x3, @dev={0xfe, 0x80, '\x00', 0x25}, 0x23}, 0x1c)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@setlink={0x3c, 0x13, 0x5, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, 0x102}, [@IFLA_IFNAME={0x14, 0x3, 'macsec0\x00'}, @IFLA_MTU={0x8, 0x4, 0x5}]}, 0x3c}}, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000000c0)=@bpf_lsm={0x6, 0x4, &(0x7f0000000200)=@framed={{}, [@ldst={0x3, 0x0, 0x6, 0x0, 0x3, 0xa0, 0x1}]}, &(0x7f0000000280)='syzkaller\x00', 0x5, 0xd2, &(0x7f00000002c0)=""/210, 0x41100}, 0x94)
setsockopt$inet6_int(r1, 0x29, 0x4d, 0x0, 0x0)

43.564099814s ago: executing program 4 (id=342):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000140)={0x1, &(0x7f0000000180)=[{0x6, 0x5, 0x4, 0x7ffc0001}]}) (async)
syslog(0x2, 0xffffffffffffffff, 0x4b)
r0 = gettid()
timer_create(0x1, &(0x7f00000001c0)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000200)=<r1=>0x0)
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000240)={0x0, 0x0, 0x3ed3, 0x5}) (async)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) (async)
timer_settime(r1, 0x1, &(0x7f0000000280), 0x0)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDSIGACCEPT(r2, 0x5607, 0x2d) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xc, 0x2, &(0x7f00000000c0)=ANY=[@ANYBLOB="850000002200000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80)

42.541183098s ago: executing program 4 (id=348):
bpf$PROG_LOAD(0x5, &(0x7f0000001040)={0x19, 0x4, &(0x7f0000002240)=ANY=[@ANYBLOB="18000000000000000000000000000000711826000000000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000000)={0xffffffffffffffff, 0x4, 0xb4, 0x0, @vifc_lcl_addr=@remote, @rand_addr=0x64010101}, 0x10)

42.472056665s ago: executing program 4 (id=349):
syz_mount_image$ext4(&(0x7f0000003480)='ext3\x00', &(0x7f00000034c0)='./file1\x00', 0x28d6040, &(0x7f0000003500)={[{@jqfmt_vfsold}, {@inlinecrypt}, {@nombcache}]}, 0xff, 0x550, &(0x7f0000003540)="$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")
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000020c0)=@bpf_lsm={0xb, 0x4, &(0x7f00000000c0)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x1004}, 0x94)
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000180)='./mnt\x00', 0x800844, &(0x7f0000000380), 0xfd, 0x24a, &(0x7f0000000e00)="$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")
syz_mount_image$vfat(&(0x7f00000004c0), &(0x7f0000000500)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x40, 0x0, &(0x7f0000000600))
mknod$loop(0x0, 0x200, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x10008001, 0x2000006, 0x401d031, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCGSOFTCAR(r0, 0x4b46, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000640)={0xa, 0x400000000008d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000680)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000006c0)=0x2)
sched_setscheduler(r1, 0x1, &(0x7f0000000700)=0x7)
mmap(&(0x7f0000339000/0x3000)=nil, 0x3000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000740)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000780)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000800), 0x651, 0x0)
recvmmsg(r2, &(0x7f0000000840), 0x4000087, 0x2, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x10, 0x300000f, 0x401d032, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000880))
clock_settime(0x0, &(0x7f00000008c0)={0x77359400})
r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000002300)=@bpf_tracing={0x1a, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18800000d10b0000000000000900000000200000000000"], &(0x7f0000000080)='syzkaller\x00', 0xa8ee, 0x1000, &(0x7f0000001080)=""/4096, 0x41100, 0x0, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000002080)={0x6, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x1a8e3, 0xffffffffffffffff, 0x0, &(0x7f0000002280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f00000022c0), 0x10, 0xb}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000a40)={r4, 0x10, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000040)={0x0, <r5=>0x0}, 0x8)
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000b00)=r5, 0x4)
ioctl$KDSIGACCEPT(r0, 0x4b4e, 0x3a)
bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0)
symlinkat(&(0x7f0000000b80)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
openat(0xffffffffffffff9c, &(0x7f0000000cc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x101341, 0x1af)
mount$bind(0x0, &(0x7f0000000dc0)='.\x00', 0x0, 0x21, 0x0)

42.457102656s ago: executing program 35 (id=237):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)
syz_emit_ethernet(0x4e, &(0x7f0000000180)={@link_local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x3, 0x6, "bdac70", 0x18, 0x3a, 0xff, @local, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0xff, 0x7e, 0x6, 0x7, 0x4, [{0x1, 0x1, "cbd238e05305"}]}}}}}}, 0x0)
r1 = socket$pptp(0x18, 0x1, 0x2)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000200)='./file0\x00', 0x88bc56, 0x0, 0x0, 0x0, &(0x7f0000000240))
mount$overlay(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x8000, &(0x7f0000000380)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [{@obj_user={'obj_user', 0x3d, '-:\\\r\x00\x00'}}], 0x2f})
bind$pptp(r1, 0x0, 0x0)
connect$pptp(r1, 0x0, 0x0)
ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, 0x0)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0xff, 0x7fff0010}]})
close_range(r2, 0xffffffffffffffff, 0x0)
sendto(0xffffffffffffffff, &(0x7f00000003c0)="75479311c6603a6a8af668e1861827a61bf5a32b4d87bef29c89d4d4cbbe8a2f9dcda782440d791581326bf011a0b345b12b525ab30e8d923427734ccf90b3395c11cc4504985ed28613d92f37ed18d206b3ce26402f9dc7cd4b9940d097f5ae22bdce467764b7685b8c6c4ca7344c6fa58f6556466709f369c122e5a2582b98fd9eb046f73e5415070c0914259c36e865aca6d0ea6e2e4c0a5c0fcc86c34ecc86aa66f4f81a799c000e4ee4a44a02927b825f94e7e3f3e6a62c9432d7468a63e0783e3e51b063ae", 0xc8, 0x10, 0x0, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000000100)=0x8, 0x4)
setsockopt$inet6_int(r0, 0x29, 0x33, &(0x7f0000000280)=0xf2b, 0x4)
time(&(0x7f00000000c0))
getsockopt$inet6_buf(r0, 0x29, 0xca, &(0x7f0000000040)=""/30, &(0x7f0000000340)=0x1e)

41.655138438s ago: executing program 4 (id=363):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev_mnt\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./dev_mnt\x00', &(0x7f0000000080)='devtmpfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev_mnt/mapper/control\x00', 0x2, 0x0)
ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f0000000500)={<r1=>r0, &(0x7f0000000400)='fd', 0x0, &(0x7f0000000440)={@_ha_fsid={[0x14, 0x2]}, {0x20, 0x2, 0xffff0000, 0x7e7}}, 0x9, &(0x7f0000000480), &(0x7f00000004c0)=0x100})
write$P9_RVERSION(r1, &(0x7f0000000540)={0x15, 0x65, 0xffff, 0x3ff, 0x8, '9P2000.L'}, 0x15)
ioctl(r0, 0xc138fd16, &(0x7f0000000100)="04")
r2 = syz_clone(0x0, 0x0, 0x43, 0x0, 0x0, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00000001c0)={{{@in=@remote, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in=@initdev}, 0x0, @in=@broadcast}}, &(0x7f00000002c0)=0xe8)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x10, 0x3, &(0x7f0000000640)=ANY=[@ANYBLOB="620ad4ff0000000071101f000000000095"], &(0x7f0000000680)='GPL\x00'}, 0x94)
mount$fuse(0x0, &(0x7f0000000140)='./dev_mnt/mapper/control\x00', &(0x7f0000000180), 0x8, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id', 0x3d, r3}, 0x2c, {}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x7}}, {@max_read={'max_read', 0x3d, 0x1}}], [{@func={'func', 0x3d, 'BPRM_CHECK'}}, {@subj_user={'subj_user', 0x3d, '\xce-'}}, {@appraise}, {@subj_user={'subj_user', 0x3d, 'devtmpfs\x00'}}]}})
process_vm_writev(r2, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x100000000000026d, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev_mnt\x00', 0x1ff) (async)
mount(0x0, &(0x7f0000000040)='./dev_mnt\x00', &(0x7f0000000080)='devtmpfs\x00', 0x0, 0x0) (async)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev_mnt/mapper/control\x00', 0x2, 0x0) (async)
ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f0000000500)={r0, &(0x7f0000000400)='fd', 0x0, &(0x7f0000000440)={@_ha_fsid={[0x14, 0x2]}, {0x20, 0x2, 0xffff0000, 0x7e7}}, 0x9, &(0x7f0000000480), &(0x7f00000004c0)=0x100}) (async)
write$P9_RVERSION(r1, &(0x7f0000000540)={0x15, 0x65, 0xffff, 0x3ff, 0x8, '9P2000.L'}, 0x15) (async)
ioctl(r0, 0xc138fd16, &(0x7f0000000100)="04") (async)
syz_clone(0x0, 0x0, 0x43, 0x0, 0x0, 0x0) (async)
getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00000001c0)={{{@in=@remote, @in6=@mcast2}}, {{@in=@initdev}, 0x0, @in=@broadcast}}, &(0x7f00000002c0)=0xe8) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x10, 0x3, &(0x7f0000000640)=ANY=[@ANYBLOB="620ad4ff0000000071101f000000000095"], &(0x7f0000000680)='GPL\x00'}, 0x94) (async)
mount$fuse(0x0, &(0x7f0000000140)='./dev_mnt/mapper/control\x00', &(0x7f0000000180), 0x8, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id', 0x3d, r3}, 0x2c, {}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x7}}, {@max_read={'max_read', 0x3d, 0x1}}], [{@func={'func', 0x3d, 'BPRM_CHECK'}}, {@subj_user={'subj_user', 0x3d, '\xce-'}}, {@appraise}, {@subj_user={'subj_user', 0x3d, 'devtmpfs\x00'}}]}}) (async)
process_vm_writev(r2, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x100000000000026d, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) (async)

41.356240598s ago: executing program 4 (id=364):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x150000, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000008c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
ioctl$TUNSETDEBUG(r0, 0x400454c9, 0xffffffffffffffff)
ioctl$TUNSETLINK(r0, 0x400454cd, 0x30c)

41.083646506s ago: executing program 4 (id=367):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r0 = openat$binderfs_proc_dir(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r1 = openat(r0, &(0x7f00000001c0)='./file0\x00', 0x10101, 0x0)
ioctl(r1, 0xc0184d08, &(0x7f0000000180))
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x11, &(0x7f0000001a80), 0x8, 0x617, &(0x7f0000001100)="$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")

41.020116332s ago: executing program 36 (id=367):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r0 = openat$binderfs_proc_dir(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r1 = openat(r0, &(0x7f00000001c0)='./file0\x00', 0x10101, 0x0)
ioctl(r1, 0xc0184d08, &(0x7f0000000180))
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x11, &(0x7f0000001a80), 0x8, 0x617, &(0x7f0000001100)="$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")

33.290848856s ago: executing program 9 (id=435):
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000140)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={<r1=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000007c0)=@file={0x0, './file0\x00'}, 0x6e)
recvmmsg(r1, &(0x7f0000000880), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000008c0)=0x2)
listen(0xffffffffffffffff, 0x6)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=@base={0x12, 0x1, 0x8, 0xb}, 0x50)
r3 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0)
read$char_usb(0xffffffffffffffff, 0x0, 0x0)
sendfile(r3, 0xffffffffffffffff, 0x0, 0x1c)
r4 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r4, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="bc000000000105060100000000000000020000003400018014000180080001007f000001080002007f0000011c000280050001000600000006000200303900000600030006bb00003400028014000180080001007f000001080002007f0000011c00028005000100060000000600020006bb00000600030030390000080003000000000e080007"], 0xbc}}, 0x0)
setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000580), 0x4)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00')
pipe(&(0x7f0000002140)={<r6=>0xffffffffffffffff})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002200)={0x18, 0x11, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000f5c8000000000000000100001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000080000008500000006000000850000004600000018120000", @ANYRES32, @ANYBLOB="00000000850000000c000000b7000000800000009500200000000000"], &(0x7f0000000380)='GPL\x00', 0x2, 0x1000, &(0x7f00000010c0)=""/4096, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000020c0)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000002100)={0x2, 0x0, 0x1}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000002180)=[r2, 0xffffffffffffffff, r6], &(0x7f00000021c0)=[{0x0, 0x5, 0xd, 0x1}, {0x2, 0x1, 0x1, 0x9}], 0x10, 0x6}, 0x94)

32.442481211s ago: executing program 9 (id=450):
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xc, 0xe, &(0x7f00000000c0)=ANY=[], 0x0}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0))
mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil)
openat$kvm(0xffffff9c, &(0x7f0000000100), 0x101880, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180), &(0x7f00000001c0), 0x5}, 0x38)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x5}]}, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r0}, 0xc)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
mprotect(&(0x7f0000399000/0x1000)=nil, 0x1000, 0x9)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)

32.343764951s ago: executing program 9 (id=454):
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc\x00', 0x1ff) (async)
mount(0x0, &(0x7f0000000180)='./proc\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/sys/kernel/watchdog\x00', 0x2, 0x0)
write(r0, &(0x7f0000000240)='1', 0x1)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0xa00, 0x1800, 0x101, 0x100}})
ioctl(r1, 0x10, &(0x7f0000000040)="598565e890d31664127f9880e1591b21ca321909bac3f3354a6d78bb20ce82f832252756f6cebc01debe75a04d3dda3d781823e00b5939d34a5932db66f80d0fe7682b73dd716b546af3edd4b4e8bd635a837f51cf5f26fadf44104fa168823eae66928839662dbb1404bb39308176620fd24a2d1d72f224b0435a0c4c4590bc6a5025df1329aaa75cf83fa7ae0c6e7fc4e92aca8280c49e3665987251680d70cee97670d6319df6155759528cfb871cfa24199db6d4ec375547c66e92ff6a2a726105d65ecbb801fa")

32.342664561s ago: executing program 9 (id=455):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file0\x00', 0x3200002, &(0x7f0000000240)={[{@norecovery}, {@quota}]}, 0x3, 0x610, &(0x7f0000000900)="$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")
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/locks\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f00000002c0)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/class/ptp/ptp0/max_vclocks\x00', 0x2, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000800)='fd/3\x00')
sendfile(r2, r1, 0x0, 0x2)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000400)=@filter={'filter\x00', 0x2, 0x4, 0x378, 0xffffffff, 0x0, 0x1d8, 0x0, 0xfeffffff, 0xffffffff, 0x2a8, 0x2a8, 0x2a8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev, @empty, [0x0, 0x0, 0xff000000], [0x0, 0xffffff00], 'macsec0\x00', 'bond_slave_0\x00', {}, {}, 0x6, 0x0, 0x1, 0x8}, 0x2f2, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@ipv6={@private0, @empty, [0x0, 0xffffffff], [0x0, 0x0, 0xffffffff], 'sit0\x00', 'vxcan1\x00'}, 0x0, 0xe0, 0x108, 0x0, {}, [@common=@unspec=@time={{0x38}, {0x4, 0x2, 0xe1ad, 0xe703, 0x4, 0x7, 0x3}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private2={0xfc, 0x2, '\x00', 0x1}, [0xff000000, 0xffffff00, 0xff, 0xff000000], [0xffffff00, 0x0, 0x0, 0xff], 'veth0_to_bond\x00', 'erspan0\x00', {0xff}, {}, 0x29, 0x4, 0x0, 0x10}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d8)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x3, 0x4, &(0x7f00000001c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffff000, 0x0, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0x29}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
read$FUSE(r0, &(0x7f0000000f40)={0x2020}, 0x2020)
pread64(r0, &(0x7f0000002f80)=""/208, 0xd0, 0x8d35)
renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x4)

32.282402168s ago: executing program 9 (id=456):
ioctl$KVM_CAP_PMU_CAPABILITY(0xffffffffffffffff, 0x4068aea3, 0x0)
syz_mount_image$f2fs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0xa04080, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x2, 0x5524, &(0x7f0000000fc0)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000006500)='memory.events.local\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000006540), 0x208e24b)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x50, 0x10, 0x401, 0x0, 0x25dfdbfd, {0x0, 0x0, 0xffff, 0x0, 0x1c42, 0x80}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_LINK={0x8, 0x1, 0x1}]}}}, @IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}]}, 0x50}}, 0x4048050)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x2000)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000006580)={0x0, 0x0})
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
ftruncate(r0, 0x4a8e)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)

32.076567639s ago: executing program 9 (id=457):
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"/2566], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000140), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8020000}, 0x94)

32.043803032s ago: executing program 37 (id=457):
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"/2566], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000140), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8020000}, 0x94)

17.846801291s ago: executing program 0 (id=579):
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r0, 0x4068aea3, &(0x7f0000000180))
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000280)={[0xa, 0x0, 0x1, 0xef, 0x2, 0x8000040000000003, 0xb3, 0x500, 0x2, 0x6, 0xffffffffb, 0x5, 0x10000000007, 0x1ff, 0x1e6, 0x4], 0x80a0000, 0x382fc2})
ioctl$KVM_RUN(r1, 0xae80, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a000028060001001a"], 0x1c}}, 0x0)
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r3)
sendmsg$IPVS_CMD_NEW_DEST(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYRES16=r4, @ANYBLOB="010e28bd7000ffdbdf25050000000800040008000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
sendmsg$IPVS_CMD_GET_SERVICE(r2, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, r4, 0x2, 0x70bd26, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4040}, 0xc0)

17.835649432s ago: executing program 0 (id=580):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
syz_usb_connect(0x0, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002000000407b06032300dc435a5c010902270001010080320904005c03ff0000000705810240000007050202400000070583030a"], 0x0) (async)
mount(0x0, 0x0, &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000003c0), 0x41, 0x0)
r2 = dup(r1)
ioctl$TCSETS(r2, 0x40045431, &(0x7f00000005c0)={0x0, 0x4, 0x0, 0x0, 0x1b, "0062ba7d820700000000000000000000096304"}) (async)
r3 = syz_open_pts(r1, 0x80)
r4 = dup3(r3, r1, 0x80000)
read(r1, &(0x7f0000000600)=""/228, 0xe4) (async)
ioctl$TCSETSW2(r4, 0x402c542c, 0x0)
write$binfmt_script(r2, &(0x7f0000000700)={'#! ', './bus'}, 0x9) (async)
quotactl$Q_SETINFO(0x568ad3e4a4c27578, &(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, 0x0, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYRESHEX], 0x90}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) (async)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) (async)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmmsg$inet6(r6, &(0x7f0000000340)=[{{&(0x7f0000000380)={0xa, 0x4e20, 0x10000, @empty, 0x7fff}, 0x1c, 0x0, 0x0, &(0x7f0000000540)=[@rthdrdstopts={{0x18, 0x29, 0x37, {0x62}}}, @rthdrdstopts={{0x18}}, @dstopts={{0x18, 0x29, 0x37, {0xc}}}], 0x48}}], 0x1, 0x81)
write(r5, &(0x7f0000000140)='7', 0x1) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000180)={'batadv0\x00', <r7=>0x0}) (async)
statx(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x400, 0x4, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, <r8=>0x0})
setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000440)={{{@in6=@ipv4={'\x00', '\xff\xff', @remote}, @in6=@dev={0xfe, 0x80, '\x00', 0x19}, 0x4e20, 0x100, 0x4e22, 0x0, 0xa, 0x0, 0x80, 0x84, r7, r8}, {0x3, 0x2c61, 0x9, 0x3, 0x7, 0x0, 0x8, 0x6}, {0x8, 0x4, 0x4, 0xe}, 0x4, 0x0, 0x0, 0x1, 0x1, 0x3}, {{@in=@rand_addr=0x64010100, 0x4d5, 0x6c}, 0x14, @in6=@rand_addr=' \x01\x00', 0x3507, 0x4, 0x2, 0x8, 0x800, 0x9, 0x4}}, 0xe8)

16.493487268s ago: executing program 0 (id=585):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
times(0x0)
sendmsg$nl_xfrm(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYBLOB="a0000000210001000000000000000000fc020000000000000000000000000009ac14142e000006584a6c7d9ddf45a9eb8c000000000000000000004e23000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ba6b6e0003000000500011000a0101010000000000000000000000007f000001000000000000000000000000ac141438000000000000000000000000000000000000000000000000000000003c0300000000001008000a00"], 0xa0}, 0x1, 0x0, 0x0, 0x6a8dd86ef563b068}, 0x4020800)

16.489419229s ago: executing program 0 (id=586):
syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000380)='./file1\x00', 0x21081e, &(0x7f00000003c0)={[{@grpquota}, {@bsdgroups}, {@quota}]}, 0xfe, 0x506, &(0x7f0000000400)="$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")
r0 = open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$TIPC_NL_LINK_RESET_STATS(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x70, r1, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x48, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffff00}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}]}]}, 0x70}}, 0x80)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000940)='./file1\x00', 0x101042, 0x15)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
listen(r3, 0x5)
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb01001800000000000000200000002000000004000000010000000000000104000000200000000100000000000001080000004000000000"], 0x0, 0x3c}, 0x28)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000400000008000000000000000100"/48, @ANYRES32=r4, @ANYBLOB="010000000200"], 0x50)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r5, &(0x7f00000002c0)="03", &(0x7f0000000300)}, 0x20)
r6 = socket$netlink(0x10, 0x3, 0x4)
write(r6, &(0x7f0000000a00)="4c00000014000103010000000000000002060000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000200", 0x4c)
splice(r6, 0x0, r5, 0x0, 0xdc, 0x1)
pwrite64(r2, &(0x7f0000000980)='2', 0xfdef, 0xc00)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="080100000001050588000000000000000a0000053c0002802c00018014000300ff01000000000000000000000000000114000400ff0200000000000000000000000000010c00028005000100000000003c0001800c00028005000100000000002c00018014000300ff020000000000000000000000000001140004002001000000000000000000000000000108000740000000007400068014000500fe80000000000000000000000000001d08000200ac1414bb080002000a01010008000100e0000001080002006401010108000100ac1e00e52c0003"], 0x108}}, 0x0)
r8 = openat(0xffffffffffffff9c, &(0x7f00000009c0)='./file1\x00', 0x183042, 0x25)
ioctl$KDSETMODE(r2, 0x4b3a, 0x0)
fallocate(r8, 0x20, 0x4000, 0x8000)

16.359288452s ago: executing program 0 (id=588):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./mysys\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./mysys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./mysys/bus/pci/devices/0000:00:05.0/resource0\x00', 0x2, 0x0)
mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3000003, 0x31, r0, 0x5000)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9)
r1 = socket$inet_icmp(0x2, 0x2, 0x1)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x5e23, @local}, 0x10)
mknod$loop(&(0x7f00000002c0)='./file0\x00', 0x6000, 0x0)
r2 = creat(&(0x7f0000000300)='./file0\x00', 0x0)
ioctl$BLKTRACESTART(r2, 0x1279, 0x0)
r3 = socket$inet6_icmp(0xa, 0x2, 0x3a)
setsockopt$inet6_int(r3, 0x29, 0x4b, &(0x7f00000000c0)=0x1, 0x4)
bind$inet6(r3, &(0x7f0000000200)={0xa, 0x4e23, 0x1, @loopback, 0x5}, 0x1c)
r4 = socket$inet6_icmp(0xa, 0x2, 0x3a)
setsockopt$inet6_int(r4, 0x29, 0x4b, &(0x7f0000000240)=0x1, 0x4)
bind$inet6(r4, &(0x7f0000000280)={0xa, 0x4e23, 0x1, @loopback, 0x5}, 0x1c)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_clone3(&(0x7f0000000180)={0x158104100, 0x0, 0x0, 0x0, {0xd}, 0x0, 0x0, 0x0, 0x0}, 0x58)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./mysys\x00', 0x1ff) (async)
mount(0x0, &(0x7f0000000080)='./mysys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) (async)
openat(0xffffffffffffff9c, &(0x7f0000000140)='./mysys/bus/pci/devices/0000:00:05.0/resource0\x00', 0x2, 0x0) (async)
mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3000003, 0x31, r0, 0x5000) (async)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) (async)
socket$inet_icmp(0x2, 0x2, 0x1) (async)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x5e23, @local}, 0x10) (async)
mknod$loop(&(0x7f00000002c0)='./file0\x00', 0x6000, 0x0) (async)
creat(&(0x7f0000000300)='./file0\x00', 0x0) (async)
ioctl$BLKTRACESTART(r2, 0x1279, 0x0) (async)
socket$inet6_icmp(0xa, 0x2, 0x3a) (async)
setsockopt$inet6_int(r3, 0x29, 0x4b, &(0x7f00000000c0)=0x1, 0x4) (async)
bind$inet6(r3, &(0x7f0000000200)={0xa, 0x4e23, 0x1, @loopback, 0x5}, 0x1c) (async)
socket$inet6_icmp(0xa, 0x2, 0x3a) (async)
setsockopt$inet6_int(r4, 0x29, 0x4b, &(0x7f0000000240)=0x1, 0x4) (async)
bind$inet6(r4, &(0x7f0000000280)={0xa, 0x4e23, 0x1, @loopback, 0x5}, 0x1c) (async)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
syz_clone3(&(0x7f0000000180)={0x158104100, 0x0, 0x0, 0x0, {0xd}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async)

16.351688832s ago: executing program 0 (id=589):
r0 = eventfd2(0x0, 0x0)
syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="82", 0x1}], 0x1}}], 0x1, 0x800)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(r2, 0x111, 0x3, 0x0, 0x4)
close_range(r0, 0xffffffffffffffff, 0x0)

6.264871905s ago: executing program 7 (id=675):
r0 = socket$packet(0x11, 0x3, 0x300)
pipe2(&(0x7f00000002c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
read$FUSE(r1, &(0x7f0000001200)={0x2020}, 0x2020)
write$FUSE_INIT(r2, &(0x7f0000003240)={0x6f, 0x0, 0x0, {0x7, 0x28, 0x80000001, 0x0, 0x0, 0x0, 0x2, 0x1}}, 0xfffffede)
fcntl$setpipe(r1, 0x407, 0xc000)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000440)='./proc\x00', &(0x7f0000000480)='proc\x00', 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./proc/sys/kernel/hostname\x00', 0x0, 0x0)
read$eventfd(r4, &(0x7f0000000500), 0x8)
ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r0, 0x8983, &(0x7f0000000180))
mmap(&(0x7f00009c5000/0x4000)=nil, 0x4000, 0x3, 0x28012, r3, 0x0)
mprotect(&(0x7f00009c6000/0x1000)=nil, 0x1000, 0xf)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f00000010c0)=0x9, 0x4)
r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./tracefs/dynamic_events\x00', 0x2, 0x0)
writev(r5, &(0x7f0000000200)=[{&(0x7f0000000240)='#', 0x1}, {&(0x7f0000000280)="2d3acb", 0x3}], 0x2)
ioctl$KVM_GET_XSAVE2(r5, 0x9000aecf, &(0x7f000070c000/0x2000)=nil)
r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/profiling', 0x200080, 0x1c0)
sendto$inet6(r6, &(0x7f00000000c0)="e3ae46341047942367211da8fdd03ed2ba4e1bb51f3d422c8ef1be3d787ed32283f9a429cfe8757454f656314532fd7408a5a878890e248e8fd5cac9987896a17dbd6f48a1c8703a2b2108d987f8d3ec93e8d9e0fcd65e34", 0x58, 0x4080, &(0x7f0000000140)={0xa, 0x4e22, 0x800, @local, 0x1}, 0x1c)
sendto$inet6(r3, &(0x7f0000000340)="c2078e4525cd39e1c5d3049a2d2f8adcf96c3822d2032144cfcf43ff8d7f2699268e76bf1f4177756a807cd76fce339638bbc783005ff2cf1a7e66b04e7ed08c97efdcacbdc149b1db71c2a3c6f5f4917bb441c852fca2b2fe09585db0cb60493279323dbaf9e6f08b6a967f51fa4d", 0x6f, 0x4004844, &(0x7f00000003c0)={0xa, 0x4e21, 0xfffffffd, @loopback}, 0x1c)
ioctl$int_in(r0, 0x5452, &(0x7f0000001100)=0xffff)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001140)={'veth0\x00', <r7=>0x0})
sendto$packet(r0, &(0x7f0000001180)="0b0312002e0064000200475400f6a13bb1000000086086dd4803", 0x100a6, 0x88a8ffff, &(0x7f00000011c0)={0x11, 0x88a8, r7}, 0x14)

5.415941401s ago: executing program 7 (id=688):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0)
close(r0)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000700), 0x20000, 0x0)
ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6)
ioctl$TUNGETVNETLE(r0, 0x40047440, &(0x7f0000000740))
ioctl$BLKREPORTZONE(0xffffffffffffffff, 0xc0101282, 0x0)
openat(0xffffffffffffffff, 0x0, 0x42, 0x0)
r2 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', <r3=>0x0})
mkdirat(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0x26)
mount$bind(0x0, 0x0, 0x0, 0x101091, 0x0)
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x90b5d016a61aa014, 0x0)
r4 = open_tree(0xffffffffffffff9c, &(0x7f00000007c0)='./file0/../file0\x00', 0x81900)
r5 = open_tree(r4, &(0x7f0000000800)='\x00', 0x9801)
move_mount(r5, &(0x7f0000000840)='.\x00', 0xffffffffffffff9c, &(0x7f0000000880)='./file0\x00', 0x0)
mount$fuseblk(0x0, &(0x7f00000008c0)='./file0\x00', 0x0, 0x24000, 0x0)
ioctl$PPPIOCGFLAGS1(0xffffffffffffffff, 0x8004745a, &(0x7f0000000940))
open_tree(r4, &(0x7f0000000900)='\x00', 0x89901)
sendmsg$nl_route_sched(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_FLOWS={0x3c, 0x5, 0x375}]}}]}, 0x40}}, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x10008, &(0x7f0000000100)={[{@debug}, {@resuid={'resuid', 0x3d, 0xee01}}]}, 0xff, 0x49e, &(0x7f0000000140)="$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")
openat(0xffffffffffffff9c, 0x0, 0x181441, 0x148)
prlimit64(0x0, 0x2, &(0x7f0000000080)={0x8000000000009, 0xffffffffffffffff}, 0x0)
prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000004000/0x4000)=nil)
mkdirat(0xffffffffffffffff, &(0x7f0000000ac0)='./bus\x00', 0x0)
mkdir(&(0x7f0000000b00)='./bus\x00', 0x0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
r6 = userfaultfd(0x1)
ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000980)={0xaa, 0xe0})

5.047786088s ago: executing program 7 (id=695):
ioctl$DM_LIST_DEVICES(0xffffffffffffffff, 0xc138fd02, &(0x7f0000000000)={0x4, 0x0, 0x0, 0x140, 0x138, 0x0, 0x0, 0x20000, 0x0, 0x0, {}, "43d54bd2a4dac3b3"})
ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f0000000340)={{<r0=>0xffffffffffffffff, &(0x7f0000000140)='&\x00', 0x140, &(0x7f0000000180)={@align=0x8000000000000001, {0x200, 0x4, 0xd, 0x5}}, 0x8, &(0x7f00000001c0), &(0x7f0000000200)=0x3}, 0x1, &(0x7f0000000300)=[{0x1, 0x8, &(0x7f0000000240)='})$]\x00', &(0x7f0000000280)="d70b1e56580f13cdfbf4d34ec35d8308aa97afbd48d57ea76c07f578f763dd9e67a1c9a5a8f26064ab1e14127da9a69191fe1e93834becd8b9961b8404c77896cbe9117f3f2cf6947f2556fa1de2739525e8d5573568b993ed24d3b2bb0de0d5f9a6b3e86b452a9576e006b3f8c040d7f4a1cce6ef3b50adc505b6", 0x7b, 0xa}]}) (async)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000003c0)={<r1=>0x0, <r2=>0x0})
ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f0000000440)={r1, 0x4, 0xfa23})
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x8800, 0x0) (async)
r4 = open(&(0x7f00000004c0)='./file0\x00', 0x408800, 0x30)
prlimit64(r2, 0x0, &(0x7f0000000500)={0x3, 0x7fffffff}, &(0x7f0000000540))
sendmsg$nl_generic(r4, &(0x7f0000000700)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000006c0)={&(0x7f00000005c0)={0xfc, 0x1e, 0x100, 0x70bd2d, 0x25dfdbff, {0x8}, [@generic="e29d33b7b9b48062c094247469aa84de548a6f2e353ed20582ead91ab41fecbd174e806744bc2636a06951e16d03f8bcb06fde1c2d6568ec77a822f71da3df3e4a19986865c228962dc3dbbb7c85e8bb36090af3fe762ce89c9a252e819e5ad17e236f3a", @nested={0x6f, 0x98, 0x0, 0x1, [@typed={0xc, 0x6, 0x0, 0x0, @u64=0x5}, @generic="86c329265c6e77489306227ccddbc07743e001b5de27016b8ab530deae1b30efbbb84dc32e124746ed1fb181516a49b10fb815b00efba87cd33919f98e7365688cc67809229b1d2649f82d271d7a90399d42461428d8ec70617f330e9c3e70"]}, @typed={0x14, 0xbb, 0x0, 0x0, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}}]}, 0xfc}, 0x1, 0x0, 0x0, 0x1}, 0x8850) (async)
r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000780), r0)
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x20001000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x28, r5, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000800) (async)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000880)) (async)
r6 = creat(&(0x7f00000008c0)='./file0/file0\x00', 0x6)
sendmsg$AUDIT_DEL_RULE(r0, &(0x7f0000000e00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000940)={0x444, 0x3f4, 0x8, 0x70bd25, 0x25dfdbfc, {0x10, 0x1, 0x13, [0x9, 0x3, 0x0, 0x7fff, 0x1, 0x7ff, 0xfffffbcc, 0x3, 0x1, 0x8, 0x3, 0x8001, 0x3, 0x9, 0x0, 0x3, 0x3, 0xc, 0xfa, 0x9, 0x8001, 0x9, 0x0, 0xf4, 0x3, 0x7, 0x2, 0x5, 0xffff, 0x7ff, 0x43, 0x5, 0x8, 0x6, 0x7fff, 0xffffff00, 0x4, 0x465, 0x8, 0x4, 0xfffffff7, 0x6, 0x9, 0x1000, 0x2, 0xe2, 0x8000, 0xfffffffd, 0x9, 0xfffffffa, 0xfffffff7, 0x4, 0x8, 0x5, 0x1, 0x4, 0x8001, 0xfffffffe, 0x9, 0x6, 0x9, 0x4, 0x5, 0x77], [0xfffffff9, 0x2, 0x1, 0x5, 0x5, 0x8, 0x800, 0xd, 0xf, 0xfffff227, 0x7, 0xff, 0x1ff, 0x4, 0xffffff40, 0x8, 0x1, 0x5, 0x8, 0xff, 0x9, 0x7fff, 0x7f, 0x2, 0xffff, 0x3547, 0xe0558a2, 0x8, 0x0, 0x4, 0x200, 0x40, 0x8, 0x4, 0x3, 0xfff, 0xffffffec, 0x8e, 0x8, 0x2, 0x7, 0x8, 0x80000000, 0xc9c8, 0x8, 0x9, 0x4, 0x5, 0x6, 0xa, 0x57, 0x5, 0xe2d, 0x80, 0x7, 0x8, 0x6, 0x7fff, 0x2, 0x5, 0x0, 0x400, 0x414f, 0x6], [0x1, 0x6, 0x380000, 0x0, 0x9, 0x7, 0xf, 0x4, 0xa, 0x8001, 0x8, 0x1, 0x2, 0x6, 0x101, 0x5, 0x3, 0x4, 0x0, 0xd41c, 0x2, 0x2, 0x1, 0x5, 0x0, 0x0, 0x60d2, 0x80000001, 0x5, 0x4, 0x17, 0xe55d, 0x5, 0x4, 0x3, 0x400, 0x8, 0x7, 0xfa6, 0x800, 0x4, 0x2, 0x8, 0x8, 0x14, 0xbd, 0x820, 0x4, 0x0, 0x8, 0x9, 0x2, 0x1, 0x6, 0x6, 0x6, 0x0, 0x5, 0x1, 0x80, 0x91, 0x8000, 0x7, 0x3], [0x1, 0xfffffffd, 0x4, 0x1, 0x8001, 0x4, 0x10, 0x2, 0x1, 0x7, 0x2, 0x8, 0x0, 0x7, 0x3ff, 0x80000001, 0x401, 0xfff, 0xb, 0x6, 0x9, 0x1, 0x80000001, 0x3, 0x3, 0x5, 0x0, 0x1, 0x5, 0x8000, 0x0, 0x0, 0x2, 0xfffffffa, 0x8, 0x2, 0x7, 0x1, 0x6, 0x3, 0x1, 0x8001, 0x100, 0x6, 0x18, 0x9, 0xac6, 0x5, 0xfffffffe, 0x448, 0x7, 0x1, 0x8, 0x2, 0x9, 0x9, 0x4eb, 0x2, 0x10, 0x1ff, 0x74, 0x8000, 0xd122, 0x10], 0x23, ['\x00', '})$]\x00', '})$]\x00', '/dev/kvm\x00', '/dev/kvm\x00', '\x00', '})$]\x00']}, ["", "", ""]}, 0x444}, 0x1, 0x0, 0x0, 0x844}, 0x800) (async)
setsockopt$inet6_IPV6_RTHDRDSTOPTS(r6, 0x29, 0x37, &(0x7f0000000e40)={0x0, 0x3, '\x00', [@generic={0x9, 0x19, "13e79aca02b3bbf56a585f8bb65f9321ee19b3c027ced98a22"}]}, 0x28) (async)
socket$packet(0x11, 0x2, 0x300) (async)
getrlimit(0xf, &(0x7f0000000e80))
setrlimit(0xc, &(0x7f0000000ec0)={0xffffffffffffffff, 0x9})
setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000f00)='macsec0\x00', 0x10) (async)
ioctl$FAT_IOCTL_SET_ATTRIBUTES(r0, 0x40047211, &(0x7f0000000f40)) (async)
read$char_usb(r6, &(0x7f0000000f80)=""/155, 0x9b) (async)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001300)={r0, 0xe0, &(0x7f0000001200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000001040)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000001080), &(0x7f00000010c0)=[0x0], 0x0, 0xf9, &(0x7f0000001100)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000001140), &(0x7f0000001180), 0x8, 0x53, 0x8, 0x8, &(0x7f00000011c0)}}, 0x10) (async)
pipe2(&(0x7f0000001340)={0xffffffffffffffff, <r7=>0xffffffffffffffff}, 0x4080) (async)
timer_create(0x5, &(0x7f0000001380)={0x0, 0x35, 0x2, @tid=r2}, &(0x7f00000013c0)=<r8=>0x0)
timer_settime(r8, 0x1, &(0x7f0000001400), &(0x7f0000001440)) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001740)={r7, 0x0, 0x96, 0x9f, &(0x7f0000001480)="d16841f703caf663634189975b27a55e39ec61a52ba0119b596a8afb6da15b23192fa281ec494d51ac6d7c6430cf739b2bc7c7a3ab1d98a951ab2075eabe1fcb3698b126c833295fbae0418b8426774900f85655c7456d6de2db64a43620ae829626e2e7fc02115e52f0c0a13d90962ef6ca4a9b1338ed68dba32fd350005eefa191e534ff0d6c568e330fa3c66a95aed5f891d6f533", &(0x7f0000001540)=""/159, 0xfffff1a4, 0x0, 0xf3, 0x10, &(0x7f0000001600)="1d15eb6fa71e0eb2e92856c614e662c2794126341a1b9b78ee4d8e0f2621a4444cbc5df08ffd651822e93912232c68b2a8a1e264e8e3d10616a5ab7c32e421538db0ad71b117ba4ad22f7fdaf3755fd30b10a79cffff0c2d798534198cbaa795a65e5cd1dd04f059fcf7905b15952531f1384f1e1e416450b50d8f65c90c21c808a15a47085d496b29b5ba113ef55525c4557e85645bbcc2376cfd1c95110cf3fd22036bce704844f2e8fc0a0ab8cf5f97080cc6ff752877a61ab52c25d26990ba45a6827f23262afe14dd670b780976b706e30ffc64c6fcba507830f9f87d05907e904df49103c3f53e1911b0c960bebe22a6", &(0x7f0000001700)="efef9b0180d69501e250fefcc43d5cf1", 0x7, 0x0, 0x7ff}, 0x50) (async)
getrlimit(0x8, &(0x7f00000017c0))
write$vga_arbiter(r0, &(0x7f0000001800)=@unlock_all, 0xb)
fcntl$lock(r3, 0x24, &(0x7f0000001840)={0x1, 0x3, 0x2ae9, 0x13, r2}) (async)
syz_create_resource$futex(&(0x7f0000001880)=0x2)
prlimit64(r2, 0xa, &(0x7f00000018c0)={0x8000000000000000, 0xa89}, &(0x7f0000001900))

5.008227112s ago: executing program 7 (id=696):
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x13, 0x401d031, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x2200000, &(0x7f0000000200)={[{@discard}, {@journal_dev={'journal_dev', 0x3d, 0x2}}, {@grpquota}, {@stripe={'stripe', 0x3d, 0x3}}, {@stripe={'stripe', 0x3d, 0xf95}}, {@delalloc}, {@nogrpid}, {@noauto_da_alloc}, {@bh}]}, 0xb, 0x572, &(0x7f00000021c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000002740)='./file1\x00', 0x80342, 0xcc)
pwrite64(r0, &(0x7f0000002780)='2', 0xfdef, 0xfecc)
r1 = openat(0xffffffffffffff9c, &(0x7f00000027c0)='./file1\x00', 0x48042, 0x8c)
unshare(0x22020600)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r2 = open(&(0x7f0000000040)='./file1\x00', 0xc2b41, 0x110)
process_madvise(r2, 0x0, 0x0, 0x2, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000000)='task\x00')
fchdir(r3)
mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f00000001c0)='proc\x00', 0x189, 0x0)
r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r5 = syz_open_procfs(r4, &(0x7f0000000340)='map_files\x00')
getdents64(r5, &(0x7f0000000380)=""/253, 0xfd)
fallocate(r1, 0x1, 0x3, 0x8010004)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000540)={0x73622a85, 0x100a, 0x1})
socket$inet(0x2, 0x2, 0x0)
r6 = syz_open_dev$tty1(0xc, 0x4, 0x2)
ioctl$TIOCSWINSZ(r6, 0x5414, 0x0)
mkdir(&(0x7f00000000c0)='my_sys\x00', 0x0)
mount(0x0, &(0x7f0000000180)='my_sys\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000300)='my_sys/bus/pci/devices/0000:00:03.0/resource1\x00', 0x2, 0x0)
mmap$IORING_OFF_SQ_RING(0x0, 0xff, 0x0, 0x12, r7, 0x0)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)

4.857027448s ago: executing program 7 (id=697):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="10000000040000000800000005"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
r3 = open(&(0x7f0000000100)='./bus\x00', 0x400141042, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(r4, 0x0, 0x60, &(0x7f0000000700)={'filter\x00', 0x6001, 0x4, 0x3f0, 0x0, 0x0, 0x1f8, 0x308, 0x308, 0x308, 0x4, 0x0, {[{{@arp={@multicast2, @multicast2, 0xff, 0xff000000, 0x2, 0x7, {@empty, {[0xff, 0xff, 0xff, 0xff, 0x0, 0xff]}}, {@mac, {[0x0, 0x0, 0x0, 0x0, 0xff, 0xff]}}, 0x7ff, 0x9d, 0xf9, 0xd, 0x0, 0x7, 'ip6tnl0\x00', 'hsr0\x00', {}, {0xfd}}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x308}}, {{@arp={@multicast2, @remote, 0x0, 0x0, 0x0, 0x8, {@empty, {[0xff, 0x0, 0xff]}}, {@empty, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}}, 0x0, 0x0, 0xfffc, 0x7, 0x8000, 0x1, 'veth1_vlan\x00', 'team_slave_0\x00', {0x101}, {}, 0x0, 0xe2}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast2, @private, 0x1}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="f9bcdc63c0c8", @empty, @multicast2, @rand_addr=0x64010101, 0x4, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x13, r3, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x13, &(0x7f0000000500)=ANY=[@ANYBLOB="18080000000000000000000002000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1a20fe00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f00000005c0)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000600)=""/222}, 0x78)
sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newae={0x5c, 0x1e, 0x1, 0x70bd2a, 0x25dfdbff, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4d2, 0xa, 0x6c}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x8, 0x3503}, [@replay_esn_val={0x1c, 0x17, {0x0, 0x70bd2c, 0x70bd2d, 0x70bd29, 0x70bd26, 0x1}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x10)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r1, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="0000000002000000000000000000", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)

4.707869473s ago: executing program 7 (id=698):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0)
ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000040)={0xcf47, 0x19, 0x7, 0x9dff, 0x7, "8003e3ffff072000"})
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x3, 0x7fff, 0x16, "b0bfac0000000003000018bfff4000"})
r1 = syz_open_pts(r0, 0x200)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtaction={0x78, 0x1e, 0x109, 0x100, 0x0, {}, [{0x64, 0x1, [@m_mpls={0x34, 0x8, 0x0, 0x0, {{0x9}, {0x4}, {0x6, 0x6, "b171"}, {0xc, 0x7, {0x8e7fd4f484e45390}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_ife={0x2c, 0xf, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}, 0x78}, 0x1, 0x2b1e}, 0x0)
r3 = dup3(r1, r0, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000001a00)={'sit0\x00', &(0x7f0000001880)={'gre0\x00', <r4=>0x0, 0x8000, 0x7800, 0x7, 0x7f, {{0x6, 0x4, 0x2, 0x3e, 0x18, 0x64, 0x0, 0x6, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x37}, @private=0xa010102, {[@end]}}}}})
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x18, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000001540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', r4, @fallback=0x8, 0xffffffffffffffff, 0x8, &(0x7f0000001580)={0x0, 0x1}, 0x8, 0x10, &(0x7f00000015c0), 0x10}, 0x94)
r6 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000001600)={'syz_tun\x00', <r7=>0x0})
setresuid(0x0, 0xee00, 0x0)
clock_adjtime(0x0, &(0x7f0000001900)={0x2, 0x9, 0x6, 0x8, 0xe, 0x2, 0x1, 0xca, 0x100000000, 0xfffffffffffffffd, 0xc, 0x3ff, 0x9, 0x20, 0x401, 0x0, 0x3ce, 0x1, 0x5e54, 0xd2e9, 0x6, 0x6, 0x7, 0x10001, 0xafc, 0x89f})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000016c0))
r8 = memfd_create(&(0x7f0000001700)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x9cgU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xbd\xc1: )Jh\xc7\xf1?\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3\xea$-s\x9d\xc7E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\x920\xdcrI\xfc\x92A\xf3{\x8e\xe24>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9d\x00\x00\x00\x00', 0x3)
write$binfmt_elf64(r8, &(0x7f0000001880)=ANY=[], 0x78)
sendfile(r5, r8, &(0x7f0000000700), 0x4)
fcntl$addseals(r8, 0x409, 0x8)
fallocate(r8, 0x3, 0x40000016, 0x1)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000001640)={r5, r7, 0x25, 0x0, @void}, 0x10)
syz_emit_ethernet(0x22, &(0x7f0000001a40)=ANY=[@ANYBLOB="ffffffffffffbbbbbbbbbbbb08004500004800000000000190787f000001ac1414aa031e90780102000045000000003ad01692f535690c4e210d80344c6e00000000110000e00000020000000002904ad6cf537b49ff77b2484a455a95832935c1b44398d4a322fbe38e757bc5bcf9b04159c42395c0c508677b8d979f157f719a597178a7ed343cda4d138e3d258222314851118d20c783e1bd6aefe1a75204968a0a76702dbd18c6966ec15a308a8f775861f89fd5adbf83ce94e08cb7a5fc36c5f3cb5d39910a04ec5b330f183d95cbdf8ed61a2c09066fa7"], 0x0)
ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000100)=0xa)
syz_mount_image$ext4(&(0x7f00000006c0)='ext4\x00', &(0x7f0000001680)='./file1\x00', 0x0, &(0x7f0000000740)={[{@block_validity}, {@nobh}, {@nombcache}, {@oldalloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@grpjquota}]}, 0x1, 0x595, &(0x7f0000002940)="$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")
r9 = creat(&(0x7f0000002880)='./file1\x00', 0x19a)
r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x50)
r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x3, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000004000000000000007f00000018150000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000a07b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000014000000850000002300000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r11, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000440)="76ea090000000000009ba56a88ca", 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x5, &(0x7f0000000540)=ANY=[@ANYBLOB="18020000000000200000000000000000850000009e000000c30000000000000095"], &(0x7f0000000580)='syzkaller\x00', 0x7, 0xeb, &(0x7f00000005c0)=""/235}, 0x94)
fallocate(r9, 0x0, 0xa95, 0x40000000002)

4.664307878s ago: executing program 38 (id=698):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0)
ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000040)={0xcf47, 0x19, 0x7, 0x9dff, 0x7, "8003e3ffff072000"})
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x3, 0x7fff, 0x16, "b0bfac0000000003000018bfff4000"})
r1 = syz_open_pts(r0, 0x200)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtaction={0x78, 0x1e, 0x109, 0x100, 0x0, {}, [{0x64, 0x1, [@m_mpls={0x34, 0x8, 0x0, 0x0, {{0x9}, {0x4}, {0x6, 0x6, "b171"}, {0xc, 0x7, {0x8e7fd4f484e45390}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_ife={0x2c, 0xf, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}, 0x78}, 0x1, 0x2b1e}, 0x0)
r3 = dup3(r1, r0, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000001a00)={'sit0\x00', &(0x7f0000001880)={'gre0\x00', <r4=>0x0, 0x8000, 0x7800, 0x7, 0x7f, {{0x6, 0x4, 0x2, 0x3e, 0x18, 0x64, 0x0, 0x6, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x37}, @private=0xa010102, {[@end]}}}}})
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x18, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000001540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', r4, @fallback=0x8, 0xffffffffffffffff, 0x8, &(0x7f0000001580)={0x0, 0x1}, 0x8, 0x10, &(0x7f00000015c0), 0x10}, 0x94)
r6 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000001600)={'syz_tun\x00', <r7=>0x0})
setresuid(0x0, 0xee00, 0x0)
clock_adjtime(0x0, &(0x7f0000001900)={0x2, 0x9, 0x6, 0x8, 0xe, 0x2, 0x1, 0xca, 0x100000000, 0xfffffffffffffffd, 0xc, 0x3ff, 0x9, 0x20, 0x401, 0x0, 0x3ce, 0x1, 0x5e54, 0xd2e9, 0x6, 0x6, 0x7, 0x10001, 0xafc, 0x89f})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000016c0))
r8 = memfd_create(&(0x7f0000001700)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x9cgU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xbd\xc1: )Jh\xc7\xf1?\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3\xea$-s\x9d\xc7E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\x920\xdcrI\xfc\x92A\xf3{\x8e\xe24>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9d\x00\x00\x00\x00', 0x3)
write$binfmt_elf64(r8, &(0x7f0000001880)=ANY=[], 0x78)
sendfile(r5, r8, &(0x7f0000000700), 0x4)
fcntl$addseals(r8, 0x409, 0x8)
fallocate(r8, 0x3, 0x40000016, 0x1)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000001640)={r5, r7, 0x25, 0x0, @void}, 0x10)
syz_emit_ethernet(0x22, &(0x7f0000001a40)=ANY=[@ANYBLOB="ffffffffffffbbbbbbbbbbbb08004500004800000000000190787f000001ac1414aa031e90780102000045000000003ad01692f535690c4e210d80344c6e00000000110000e00000020000000002904ad6cf537b49ff77b2484a455a95832935c1b44398d4a322fbe38e757bc5bcf9b04159c42395c0c508677b8d979f157f719a597178a7ed343cda4d138e3d258222314851118d20c783e1bd6aefe1a75204968a0a76702dbd18c6966ec15a308a8f775861f89fd5adbf83ce94e08cb7a5fc36c5f3cb5d39910a04ec5b330f183d95cbdf8ed61a2c09066fa7"], 0x0)
ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000100)=0xa)
syz_mount_image$ext4(&(0x7f00000006c0)='ext4\x00', &(0x7f0000001680)='./file1\x00', 0x0, &(0x7f0000000740)={[{@block_validity}, {@nobh}, {@nombcache}, {@oldalloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@grpjquota}]}, 0x1, 0x595, &(0x7f0000002940)="$eJzs3c1rFOcfAPDvbBKNL7+fEURqD0XwUIt1Y5K+WChoj6WVStu7DckaJBtXshsxqaAe6qWXIi2lVCj9A3rvUXrotX+F0ApSJLSHHpoym1mzZt9ismaj+/nA6PPMzOY7zz7zPPudnV02gL51NP0nF3EkIr5KIg7UbRuMbOPR1f2WH12fSpckVlY++TOJJFtX2z/J/t+XVV6KiF++iDiRa4xbXlyanSwWC/NZfbQyd2W0vLh08tLc5ExhpnB5fGLi9JsT4++8/VZ1+1CHdgw3rGkM+tr5v7/76N77p788tvztTw8O3knibOzPttW1I+kQqp2ba8U91Wd39Y8Nxdl1O45tIchOtJUnjd4ZyMZ5Or6OxIEYyEY98OK7ERErQH8a6DQB/PrNth0LsK1qeUDt2r7+er6df+se+zx7+N7qBVBj+wdX3xuJ4eq10d7l5Ikro/R6d6QL8dMYP/9x9066xLr3U9a70YV4ADU3b0XEqcHBxvkvyea/zTvV7E3YddbH2OjrD7B199L85/Vm+U/ucf4TTfKffU3G7mZ0Hv+5B10I01Ka/73bNP99PHWNDGS1/1VzvqHk4qVi4VRE/D8ijsfQ7rTe7n7O6eX7LXPl+vwvXdL4tVwwO44Hg7uffMz0ZGVyK22u9/BWxMtr+W8SDfP/cDXXXd//6fNxfoMxDhfuvtJqW+f21+t+BrzyY8SrTft/7Y5W0v7+5Gj1fBitnRWN/rp9+LdW8Z+u/d2X9v/e9u0fServ15afPsYPw/8UWm3b7Pm/K/m0Wt6Vrbs2WanMj0XsSj5sXD++9thavbZ/2v7jx9rPf83O/z0R8dkG23/70O2Wu+6E/p9+qv5/ojDUsKZJ4f4Hn3/fKv7G+v+Naul4tmYj899GjmtzZzMAAAAAAADsXLmI2B9JLv+4nMvl86uf7zgUe3PFUrly4mJp4fJ0VL8rOxJDudqd7gN1n4cYyz4PW6uPr6tPRMTBiPh6YE+1np8qFad73XgAAAAAAAAAAAAAAAAAAADYIfa1+P5/6veBXh8d8Mx93OsDAHqm40/+d+OXnoAdqeP4B15Yxj/0L+Mf+pfxD/2r3fjPbeNxANvP6z/0L+Mf+pfxDwAAAAAAAAAAAAAAAAAAAAAAAAAAAF11/ty5dFlZfnR9Kq1PX11cmC1dPTldKM/m5xam8lOl+Sv5mVJppljIT5XmOv29Yql0ZWw8Fq6NVgrlymh5cenCXGnhcuXCpbnJmcKFwtC2tAoAAAAAAAAAAAAAAAAAAACeL+XFpdnJYrEwr9CycCZ2xGFsupB06uUz2cmwqRCDvW+gwjMo9HhiAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIA6/wUAAP//TTk1BQ==")
r9 = creat(&(0x7f0000002880)='./file1\x00', 0x19a)
r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x50)
r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x3, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000004000000000000007f00000018150000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000a07b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000014000000850000002300000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r11, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000440)="76ea090000000000009ba56a88ca", 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x5, &(0x7f0000000540)=ANY=[@ANYBLOB="18020000000000200000000000000000850000009e000000c30000000000000095"], &(0x7f0000000580)='syzkaller\x00', 0x7, 0xeb, &(0x7f00000005c0)=""/235}, 0x94)
fallocate(r9, 0x0, 0xa95, 0x40000000002)

4.476954356s ago: executing program 3 (id=701):
syz_mount_image$vfat(&(0x7f0000000340), &(0x7f0000000380)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x800, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x1, 0x267, &(0x7f00000007c0)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000a40)='cpuset.effective_mems\x00', 0x275a, 0x0)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x1c032, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="12000000250000000800000002"], 0x50)
ioctl$EVIOCGABS3F(r0, 0x8018457f, &(0x7f0000000200)=""/221)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2, <r3=>0xffffffffffffffff}, 0x0, &(0x7f0000000140)=r1}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r3, 0x0, 0x0}, 0x20)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000a80)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000000ac0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000bc0)='rdma.current\x00', 0x275a, 0x0)
write$FUSE_NOTIFY_INVAL_ENTRY(r4, &(0x7f0000000300)={0x37, 0x3, 0x0, {0x2, 0x16, 0x0, 'cpuset.effective_mems\x00'}}, 0x37)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000c00)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0)
io_uring_register$IORING_REGISTER_NAPI(r4, 0x1b, &(0x7f00000001c0)={0x8, 0x0, 0x2, '\x00', 0x80000001}, 0x1)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000c40)='freezer.state\x00', 0x275a, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1ff)
syz_mount_image$vfat(&(0x7f0000000340), &(0x7f0000000380)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x800, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x1, 0x267, &(0x7f00000007c0)="$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") (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000a40)='cpuset.effective_mems\x00', 0x275a, 0x0) (async)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x1c032, 0xffffffffffffffff, 0x0) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="12000000250000000800000002"], 0x50) (async)
ioctl$EVIOCGABS3F(r0, 0x8018457f, &(0x7f0000000200)=""/221) (async)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2}, 0x0, &(0x7f0000000140)=r1}, 0x20) (async)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r3, 0x0, 0x0}, 0x20) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000a80)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) (async)
syz_mount_image$fuse(0x0, &(0x7f0000000ac0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0, 0x0, 0x0, 0x0) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000bc0)='rdma.current\x00', 0x275a, 0x0) (async)
write$FUSE_NOTIFY_INVAL_ENTRY(r4, &(0x7f0000000300)={0x37, 0x3, 0x0, {0x2, 0x16, 0x0, 'cpuset.effective_mems\x00'}}, 0x37) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000c00)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) (async)
io_uring_register$IORING_REGISTER_NAPI(r4, 0x1b, &(0x7f00000001c0)={0x8, 0x0, 0x2, '\x00', 0x80000001}, 0x1) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000c40)='freezer.state\x00', 0x275a, 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1ff) (async)

4.425018391s ago: executing program 3 (id=703):
r0 = userfaultfd(0x801)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0xc1})
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, 0x0)
ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000240)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2})

4.399673054s ago: executing program 3 (id=704):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="020300091b0000000000000000000000040003000000000000000000000000000000000000000000000000000000000005000600000000000a00000000000000fe8000000000000000000000000000bb00000000000000000400040000ff8000000000000000000000000000000000000000000000000000020001000000000000000000000000ff05000500000000000a00000000000000fe8896380000000000000001000000010000000000000000030007000000000002004e24ac14141f00000000000000000200", @ANYBLOB="6da60c"], 0xd8}}, 0x0)

4.331977191s ago: executing program 3 (id=705):
r0 = socket$netlink(0x10, 0x3, 0xa)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x400000000008d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2)
sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000140)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000001c0), 0x651, 0x0)
recvmmsg(r2, &(0x7f0000000200), 0x4000087, 0x2, 0x0)
r4 = socket$inet(0x2, 0x4000000000000001, 0x0)
syz_mount_image$exfat(&(0x7f0000000380), &(0x7f00000003c0)='./file0\x00', 0x900000, &(0x7f0000002840)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,uid=', @ANYRESHEX, @ANYRES32=0x0, @ANYRESHEX=r4, @ANYBLOB="2c616c6c6f775f7574696d653d30303030303030303030303030303030303030303030372c646973636172642c00214b3cf244ea5fb7437f2c69f67a093e240a6e978fa4cd2d"], 0x1, 0x1509, &(0x7f0000002900)="$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")
syz_open_dev$tty1(0xc, 0x4, 0x1)
fstat(0xffffffffffffffff, &(0x7f0000003ec0)={0x0, 0x0, 0x0, 0x0, <r5=>0x0})
quotactl_fd$Q_GETINFO(r4, 0xffffffff80000502, r5, 0x0)
getsockopt$IPT_SO_GET_ENTRIES(r4, 0x0, 0x41, &(0x7f0000004180)=ANY=[@ANYBLOB="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"], &(0x7f0000004040)=0xe4)
socket$inet_udp(0x2, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r6 = dup(r0)
r7 = socket$inet6(0xa, 0x80001, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r7, 0x29, 0x2a, &(0x7f0000000200)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88)
setsockopt$inet6_MCAST_MSFILTER(r7, 0x29, 0x30, &(0x7f00000002c0)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000ffff00000000000000bd0000000000000000000000e4ec01000000004000000000fc00000000000000000000000000013da51fd47aa2e2f70000000000000000000000000000000000000000000000000000000000000006000000000000000005"], 0x310)
setsockopt$inet6_group_source_req(r7, 0x29, 0x2c, &(0x7f0000002700)={0x1, {{0xa, 0x0, 0x4, @mcast1}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x1f}, 0xfffffffc}}}, 0x108)
r8 = open(&(0x7f0000000480)='./file1\x00', 0x109cc2, 0x158)
add_key(&(0x7f00000001c0)='asymmetric\x00', 0x0, &(0x7f0000002500)="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"/472, 0x1d8, 0xffffffffffffffff)
ftruncate(r8, 0x200004)
getsockname(r6, &(0x7f0000000400)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, &(0x7f0000004000)=0x80)
sendfile(r6, r8, 0x0, 0x80001d00c0d1)
read$FUSE(r6, &(0x7f00000004c0)={0x2020}, 0x2020)

2.592946347s ago: executing program 8 (id=708):
r0 = syz_mount_image$ext4(&(0x7f0000005c80)='ext3\x00', &(0x7f0000005cc0)='./file0\x00', 0x1800, &(0x7f0000005d00), 0x26, 0x76c, &(0x7f00000003c0)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x181)
lsetxattr$system_posix_acl(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="0200000001000200000000000400020000000000100001000000000020"], 0x24, 0x3)
lsetxattr$trusted_overlay_redirect(&(0x7f0000000180)='./file0\x00', &(0x7f0000000280), 0x0, 0x0, 0x1)
socket$inet(0x2, 0x3, 0xf37)
socket$inet_udp(0x2, 0x2, 0x0)
fsconfig$FSCONFIG_SET_PATH(0xffffffffffffffff, 0x3, &(0x7f00000076c0)='\x9f\xf0^7W\xac\\|_\xf7\x12{\xe5\x1d\x82\\\xe87\x1e\xabg\x9e\x9dq\x12^FX\xb4A$8\xf3\x86\xaa\'U\xc4\xf2\x15`\xd7A\x9c\x04\x9ah\xc4\x97p\xdf6\x12\xf2\x80\xb8V\x86\xa7\xb8_\x81\xf1T\xe3\xc6\")\x1d\xc4:llq\"j\x18\xcc\x9c\ft\x9fB*\b\xd2}\'\xed8\x0f\x89\xbb~\x7f\x00Q3%%.', &(0x7f0000000380)='./proc/thread-self/fail-nth/file0\x00', r0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="2c00000003010104000000000000000002000000180001801400018008000100e000000108000200e0004000"], 0x2c}}, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48)
syz_mount_image$ext4(&(0x7f0000001340)='ext4\x00', &(0x7f0000001380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8, &(0x7f0000001480)={[{@errors_remount}, {}]}, 0x4, 0x50b, &(0x7f00000014c0)="$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")
r4 = openat(0xffffffffffffff9c, &(0x7f0000001a00)='./file1\x00', 0x42, 0x0)
ioctl$KVM_X86_SET_MSR_FILTER(r4, 0x4188aec6, 0x0)
add_key(0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r4, 0xc0506617, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3000001, 0x11, r3, 0x0)
timer_create(0xb, &(0x7f0000000300)={0x0, 0x21, 0x800000000004}, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_HOPOPTS(r5, 0x29, 0x48, &(0x7f0000000c80)=ANY=[], 0xd0)
syz_clone3(&(0x7f0000000cc0)={0xa00400, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58)
syz_clone3(&(0x7f0000000000)={0x22100, 0x0, 0x0, 0x0, {0x18}, 0x0, 0xfffffffffffffd3c, 0x0, 0xffffffffffffffff, 0x1}, 0x58)
setsockopt$inet_group_source_req(r2, 0x0, 0x2e, &(0x7f0000000b40)={0x1, {{0x2, 0x4, @empty}}, {{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x108)
syz_mount_image$ext4(&(0x7f0000000c80)='ext4\x00', &(0x7f0000000d40)='./file2\x00', 0x404, &(0x7f0000000d80)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@errors_remount}, {@nombcache}]}, 0x1, 0x437, &(0x7f0000000e40)="$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")
openat(0xffffffffffffff9c, &(0x7f0000001280)='./file1\x00', 0x10b442, 0x79)

2.475981779s ago: executing program 3 (id=709):
r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, 0x0) (async)
io_setup(0x5, &(0x7f0000000080)=<r1=>0x0)
r2 = inotify_init() (async)
io_submit(r1, 0x1, &(0x7f00000000c0)=[0x0])
prlimit64(0x0, 0xe, &(0x7f0000000100)={0xa, 0x400000000008d}, 0x0) (async, rerun: 64)
sched_setscheduler(0x0, 0x2, &(0x7f0000000140)=0x8) (rerun: 64)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2) (async)
sched_setscheduler(r3, 0x1, &(0x7f00000001c0)=0x7) (async, rerun: 64)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) (rerun: 64)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f0000000300)=@abs, 0x6e)
prlimit64(r3, 0x7, 0x0, 0x0)
sendmmsg$unix(r5, &(0x7f0000000380), 0x651, 0x0) (async)
recvmmsg(r4, &(0x7f00000003c0), 0x4000087, 0x2, 0x0) (async)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async, rerun: 64)
setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0) (rerun: 64)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
close(r6) (async)
socket$nl_route(0x10, 0x3, 0x0)
syz_emit_ethernet(0x13c, &(0x7f00000016c0)=ANY=[@ANYBLOB="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"], 0x0)
r7 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0)
write$tcp_mem(r7, 0x0, 0x0) (async)
symlinkat(&(0x7f0000000500)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000001500)='./file0\x00') (async)
inotify_add_watch(r2, &(0x7f0000001540)='.\x00', 0x0) (async)
write$binfmt_script(r0, &(0x7f00000002c0)={'#! ', '', [{0x20, '\x0f\x10\t'}]}, 0x8)

2.436066843s ago: executing program 8 (id=710):
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{0x1, <r0=>0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000300)}, 0x20)
setns(0xc9, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000003c0)="5500000018007f5f00fe01b2a4a2809302060000fd00f005020500130a0007003500281014000000190005407f0a006d0004000000d54404009b84136ef75afb83de4411001600c43ab82200000000f2ff00000000", 0x55}], 0x1}, 0x4004000)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xa, 0x10, &(0x7f00000000c0)=@framed={{}, [@printk, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r2, 0x0, 0x10, 0x38, &(0x7f0000000240)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000280)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)

1.495984768s ago: executing program 3 (id=712):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000380)={'\x00', 0x3, 0x6, 0x0, 0x2, 0x8, <r0=>0x0})
sched_setscheduler(r0, 0x2, &(0x7f0000000280)=0xa)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000)
syz_genetlink_get_family_id$smc(0x0, 0xffffffffffffffff)
mkdirat(0xffffffffffffff9c, 0x0, 0x1fc)
unshare(0x64020600)
syz_usb_connect$uac3(0x3, 0x9c, 0x0, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000640)=ANY=[@ANYBLOB="240000001800dd8d26bd7000fcdbdf2502141000fd3d5554a9d5e29f0c9a0000060022002008000f00fe070000c256dbead06138e22348ca41cc3485e1c8b5ba124ee34c80f7f58852c5fd33003ee91eb48dc0345beebfa0585d62594e4a935c722d818e5344975790cd2b99ead239adfa864ae63b7f182b6457b8544aaa55cb7183ca74591fdb11e57d1e09d232b1f623d65f93283f8e38a342"], 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000d80)={0x0, {0x2, 0x4e22, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @empty}, 0xa2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x80})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x4000087, 0x2, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r6 = socket$inet6(0xa, 0x2, 0x0)
r7 = socket(0x10, 0x803, 0x0)
sendmsg$SMC_PNETID_GET(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0)
getsockname$packet(r7, &(0x7f0000000400)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14)
sendmsg$nl_route(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000b00)=ANY=[@ANYBLOB="640000001000370403000000ffffffff00000000", @ANYRES32=r8, @ANYBLOB="0b1b050000000000440012800b00010069703667726500003400028008000100", @ANYRES32, @ANYBLOB="14000600fe8000000000000000000000000000aa1400070000000000000000000000000000bb"], 0x64}, 0x1, 0x0, 0x0, 0x48810}, 0x4000010)
sendmmsg$inet(r6, &(0x7f0000000b80)=[{{&(0x7f0000000bc0)={0x2, 0x4e24, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000c00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}}}}], 0x20}}], 0x1, 0xc0)
syz_ublk_setup_io_uring(0x2c73, &(0x7f0000000040)={0x0, 0x34bb, 0x4, 0x1, 0x206}, &(0x7f0000000480), &(0x7f00000004c0), &(0x7f0000000500))
r9 = mmap$IORING_OFF_CQ_RING(0x7fffffffb000, 0x20ec, 0x0, 0xbd4c341840b03bf2, 0xffffffffffffffff, 0x8000000)
munmap$IORING_OFF_CQ_RING(r9, 0x9)
syz_open_procfs(0x0, &(0x7f0000000c40)='net/ip6_flowlabel\x00')

1.492120639s ago: executing program 5 (id=699):
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000c00)={<r0=>0xffffffffffffffff})
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000c40)={'dummy0\x00', &(0x7f0000000c80)=@ethtool_channels={0x3d, 0xfffffffd, 0x9, 0x2, 0x7, 0x7, 0x401, 0x8, 0x100}})

1.491511709s ago: executing program 8 (id=714):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="020300091b0000000000000000000000040003000000000000000000000000000000000000000000000000000000000005000600000000000a00000000000000fe8000000000000000000000000000bb00000000000000000400040000fffb00000000000000000000000000000000000000000000000000020001000000000000000000000000ff05000500000000000a00000000000000fe8896380000000000000001000000010000000000000000030007000000000002004e24ac14141f00000000000000000200", @ANYBLOB="6da60c"], 0xd8}}, 0x0)

1.463135102s ago: executing program 8 (id=716):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1f, 0xd, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000005080000000000008200000018010000", @ANYRES32, @ANYBLOB="0000000000000000b7080000048004807b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a6000000850000005000000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x35}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYBLOB="a0000000210001000000000000000000fc0200000000000000000000000000090a0101010000000000000000000000004e230000000000000a0080a062000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ba6b6e0003000000500019fc6c3d35bac5e60a411100d96a35e2fe8000000000000000000000000000fc7f000001000000000000000000000000ac1414aa000000000000000000000000200100ffffffde00000000000000"], 0xa0}, 0x1, 0x0, 0x0, 0x6a8dd86ef563b068}, 0x4020800)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r3=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=@ipmr_delroute={0x24, 0x19, 0x300, 0x70bd27, 0x25dfdbff, {0x80, 0x0, 0x4, 0x4, 0xfc, 0x6, 0xc8, 0xa, 0xa00}, [@RTA_MARK={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x4c010)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$gtp(&(0x7f0000000500), 0xffffffffffffffff)
r6 = signalfd4(0xffffffffffffffff, &(0x7f0000000540), 0x8, 0x0)
ppoll(&(0x7f0000000580)=[{r6, 0x747}], 0x1, 0x0, 0x0, 0x0)
sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000000780)={&(0x7f00000004c0), 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x2c, r5, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_NET_NS_FD={0x8, 0x7, r6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4048014}, 0x4000010)
sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x50, r2, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0xffffffff, 0x56}}}}, [@NL80211_ATTR_PMK_LIFETIME={0x8}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x7}, @NL80211_ATTR_SSID={0xb, 0x34, @random="e78290175124b9"}, @NL80211_ATTR_MAC={0xa, 0x6, @random="8ede9dd86988"}]}, 0x50}, 0x1, 0x0, 0x0, 0xc4}, 0x4000000)

1.401988908s ago: executing program 5 (id=717):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1fd)
mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc\x00', 0x1ff)
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x15001, &(0x7f0000000240), 0x1, 0x57c, &(0x7f0000000700)="$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")
socket$nl_route(0x10, 0x3, 0x0)
syz_mount_image$msdos(&(0x7f0000000c80), &(0x7f0000000cc0)='./file0\x00', 0x180c8, &(0x7f0000000d00)=ANY=[@ANYBLOB="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", @ANYRESHEX=0x0, @ANYRES16=0x0], 0x1, 0x24b, &(0x7f0000000e80)="$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")
close(0xffffffffffffffff)
getpid()
prlimit64(0x0, 0xe, &(0x7f0000001100)={0x8, 0x8b}, 0x0)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000001140)='.\x00', 0x0, 0x0)
getdents64(r1, &(0x7f0000001180)=""/221, 0xdd)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/vm/compaction_proactiveness\x00', 0x80401, 0x0)
syz_open_dev$rtc(&(0x7f0000000180), 0x0, 0x103300)
pwrite64(r2, &(0x7f0000000140)="13", 0x1, 0x9)
sendmsg$nl_xfrm(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYBLOB="a0000000210001000000000000000000fc020000000000000000000000000009ac14142e0000000000000000000000004e23000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ba6b6e0003000000500011000a0101010000000000000000000000007f000001000000000000000000000000ac141438000000000000000000000000000000000000000000000000000000003c0300000000001008000a00"], 0xa0}, 0x1, 0x0, 0x0, 0x6a8dd86ef563b068}, 0x4020800)

1.401750678s ago: executing program 2 (id=718):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@deltaction={0x60, 0x18, 0x1, 0x70bd2c, 0x25dfdc00, {0xa}, [@TCA_ACT_TAB={0x4c, 0x1, [{0xc, 0x8d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0x28, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x24, 0x3, 0x6}}, {0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x44000}, 0x20040844) (async)
r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
setsockopt$WPAN_SECURITY_LEVEL(r1, 0x0, 0x2, &(0x7f0000000000)=0xffffffffffffffff, 0x4) (async)
bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x13, 0x10, 0x40000000, 0x0, 0x0, 0xffffffffffffffff, 0x40003}, 0x50)

1.392261269s ago: executing program 2 (id=719):
bpf$MAP_CREATE(0x0, &(0x7f0000001040)=ANY=[@ANYBLOB="0300000004000000040000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000800000"], 0x48)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
setpriority(0x0, 0x0, 0x2a14b58)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x2}, &(0x7f0000000040)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000080)={0x0, 0x0, 0x8000, 0x3ff})
socket$inet6(0xa, 0x3, 0xfd)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
timer_getoverrun(r0) (async)
timer_getoverrun(r0)
splice(r2, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0)
write(r1, 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000a40)={<r3=>0x0, <r4=>0x0})
timer_settime(r0, 0x1, &(0x7f00000000c0)={{r3, r4+60000000}}, 0x0) (async)
timer_settime(r0, 0x1, &(0x7f00000000c0)={{r3, r4+60000000}}, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000140)='./bus\x00', 0x38880, &(0x7f0000000180), 0x1, 0x51a, &(0x7f00000001c0)="$eJzs3c9vI1cdAPCvnThxfnSTlh4AQbu0hQWt1km8bVT1AOWIUCVEjyBtQ+KNothxFDulCXtIz1yRqMSJHvkDOPfEgRsXBDcuywGJHxFog8TBaMaTrDdrb6xNYqfx5yON5r2ZWX+/L868t36O/QIYWTcj4iAiJiLig4iYy47nsi3ebW/JdY8OH6weHT5YzUWr9f4/c+n55Fh0/JvETPaYxYj44acRP8k9Hbext7+5Uq1WdrL6QrO2vdDY27+zUVtZr6xXtsrl5aXlxbfvvlW+sLa+WpvISl99+IeDb/0sSWs2O9LZjovUbnrhJE5iPCK+fxnBhmAsa8/EsBPhueQj4qWIeC29/+diLH02AYDrrNWai9ZcZx0AuO7y6RxYLl/K5gJmI58vldpzeC/HdL5abzRv36/vbq2158rmo5C/v1GtLGZzhfNRyCX1pbT8uF4+Vb8bES9GxC8mp9J6abVeXRvmf3wAYITNnBr//zPZHv8BgGuuOOwEAICB6zH+Hww6DwBgcLz+B4DRY/wHgNFTTL/DYWrYaQAAA+T1PwCMHuM/AIyUH7z3XrK1jrLvv177cG93s/7hnbVKY7NU210trdZ3tkvr9fp6+p09tbMer1qvby+9GbsfzX97u9FcaOzt36vVd7ea99Lv9b5XKaRX+WQBAAzTi69+9udcMiK/M5Vu0bGWQ2GomQGXLT/sBIChGetRBq4/q33B6DrHa3zTA3BNdFmi9wnF6PIBoVar1bq8lIBLdutL5v9hVHXM//srYBgx5vxhdJn/h9HVauX6XfM/+r0QALjazPEDPd7/fynb/yZ7c+DHa6ev+OQyswIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICr7Xj931K2Fvhs5POlUsQLETEfhdz9jWplMSJuRMSfJguTSX1pyDkDAOeV/1suW//r1twbs0+cemXmpDgRET/91fu//Gil2dz5Y8RE7l+Tx8ebn2THy4PPHgA42/E4ne47Xsg/OnywerwNMp+/fzciiu34R4cTcXQSfzzG030xChEx/e9cVm/LdcxdnMfBxxHxxW7tz8VsOgfSXvn0dPwk9gsDjZ9/In4+PdfeJz+LL1xALjBqPkv6n3e73X/5uJnuu9//xbSHOr+s/0seavUo7QMfxz/u/8Z69H83+43x5u++1y5NPX3u44gvj0ccxz7q6H+O4+d6xH+jz/h/+corr/U61/p1xK3oHr8z1kKztr3Q2Nu/s1FbWa+sV7bK5eWl5cW3775VXkjnqBd6jwb/eOf2jV7nkvZP94hfPKP9X++z/Z/+74Mffe0Z8b/5erf4+Xj5GfGTMfEbfcZfmf5tsde5JP5aj/af9fzf7jP+w7/uP7VsOAAwPI29/c2VarWy86zCjaOIs675XBaiv4t/n/2wrkTOI11InoUrkEbXwnc6jszEJcaa6HEz/vz19q/pZETnL3ar9VyxevUYFzHrBlwFJzd9RPx32MkAAAAAAAAAAAAAAABdDeLTUcNuIwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANfX/wMAAP//jMfJaQ==") (async)
syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000140)='./bus\x00', 0x38880, &(0x7f0000000180), 0x1, 0x51a, &(0x7f00000001c0)="$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")
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15)
setrlimit(0x1, &(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff})
socket$inet6(0xa, 0x2, 0x0) (async)
r5 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r5, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=""/29, 0x17}, 0x6}], 0x636, 0x40010003, 0x0) (async)
recvmmsg(r5, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=""/29, 0x17}, 0x6}], 0x636, 0x40010003, 0x0)
bind$inet6(r5, &(0x7f00000007c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) (async)
bind$inet6(r5, &(0x7f00000007c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
sendto$inet6(r5, 0x0, 0x0, 0x0, &(0x7f0000000800)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) (async)
sendto$inet6(r5, 0x0, 0x0, 0x0, &(0x7f0000000800)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)
syz_clone(0x111, 0x0, 0x0, 0x0, 0x0, 0x0)
r6 = io_uring_setup(0x7eb2, &(0x7f0000000840)={0x0, 0xb0dd, 0x80000, 0x1, 0x2ea})
io_uring_setup(0x7d3, &(0x7f0000000a80)={0x0, 0xddf8, 0x80, 0x8000404, 0x17d, 0x0, r6})
clock_nanosleep(0x7, 0x0, &(0x7f00000008c0)={0x77359400}, &(0x7f0000000900))
bpf$MAP_CREATE(0x0, &(0x7f0000003280)=ANY=[@ANYBLOB="0100000004000000040000000001000000000000", @ANYRES64, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="043c1bf24f60060000000000fdff0000000000000000000000004000"], 0x48)
r7 = syz_open_dev$usbmon(&(0x7f00000009c0), 0x7, 0x131841)
ioctl$MON_IOCX_MFETCH(r7, 0xc0109207, &(0x7f0000000a00)={0x0, 0x0, 0xfffffffd}) (async)
ioctl$MON_IOCX_MFETCH(r7, 0xc0109207, &(0x7f0000000a00)={0x0, 0x0, 0xfffffffd})
ioctl$MON_IOCH_MFLUSH(r7, 0x9208, 0x8) (async)
ioctl$MON_IOCH_MFLUSH(r7, 0x9208, 0x8)

1.210052788s ago: executing program 5 (id=720):
pipe2(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x4000)
vmsplice(r0, &(0x7f0000000040)=[{&(0x7f0000000080)="eb", 0x20000101}], 0x1, 0x0)
fcntl$setpipe(r0, 0x407, 0x5)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x1, 0x2, &(0x7f0000000840)=ANY=[@ANYBLOB="6110be000000000095"], &(0x7f0000000880)='GPL\x00'}, 0x94)

1.202893538s ago: executing program 39 (id=589):
r0 = eventfd2(0x0, 0x0)
syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="82", 0x1}], 0x1}}], 0x1, 0x800)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(r2, 0x111, 0x3, 0x0, 0x4)
close_range(r0, 0xffffffffffffffff, 0x0)

1.155818113s ago: executing program 5 (id=722):
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000002f00)={0x11, 0xd, &(0x7f0000002fc0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000003040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000003080)={r1}, 0xc)
sched_setscheduler(0x0, 0x5, &(0x7f0000000140)=0x200002)
r2 = syz_create_resource$futex(&(0x7f00000001c0)=0x1)
futex(r2, 0xb, 0x1, 0x0, 0x0, 0x0)
futex(0x0, 0xd, 0x2, 0x0, r2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000002e40)=ANY=[@ANYBLOB="0a00000005000000020000001c0c000800000000", @ANYRES32, @ANYBLOB="0000000000003741be800f1d8876cd790000000021f903d87f597ccb2c24f0e36dd5d533976e666347556d3b4ce7938f6bfa5b9ca175efacba6aa44900"/70, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
futex(r2, 0xc, 0x1, 0x0, 0x0, 0x1)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000014c0)={'bridge0\x00', <r5=>0x0})
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000002a80)={'bridge0\x00', <r6=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000002b00)={&(0x7f0000002b40)=ANY=[@ANYBLOB="6c0000001000010400d201000072f60000020000", @ANYRES32=r6, @ANYBLOB="05"], 0x6c}, 0x1, 0x0, 0x0, 0x14044085}, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000002b80)={0x0, 0x0, &(0x7f0000002bc0)={&(0x7f0000002c00)=ANY=[@ANYBLOB="780000001000830404000000fedbdf2500007400", @ANYRES32=r5, @ANYBLOB="0008000007500500580012800b0001006272696467650000480002800500190002000000050017"], 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c40)={0x15, 0x0, 0x0, 0x0, 0x0, 0x3e}, 0x94)
sendmsg$nl_route(r3, &(0x7f0000002d00)={0x0, 0x0, &(0x7f0000002d40)={0x0}, 0x9}, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder0\x00', 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19)
r8 = syz_open_procfs(0x0, &(0x7f0000001240)='task\x00')
fchdir(r8)
recvmmsg$unix(r8, &(0x7f0000002a00)=[{{&(0x7f0000001280)=@abs, 0x6e, &(0x7f0000002880)=[{&(0x7f0000001300)=""/160, 0xa0}, {&(0x7f00000013c0)=""/38, 0x26}, {&(0x7f0000001400)=""/142, 0x8e}, {&(0x7f00000014c0)}, {&(0x7f0000001500)=""/193, 0xc1}, {&(0x7f0000001600)=""/98, 0x62}, {&(0x7f0000001680)=""/232, 0xe8}, {&(0x7f0000001780)=""/4096, 0x1000}, {&(0x7f0000002780)=""/241, 0xf1}], 0x9, &(0x7f0000002940)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x88}}], 0x1, 0x43, &(0x7f0000002a40)={0x77359400})
setresuid(0x0, 0xee00, 0xffffffffffffffff)
io_uring_setup(0xa8e, &(0x7f00000000c0)={0x0, 0x4bea, 0x8, 0x0, 0x5})
setrlimit(0x40000000000008, &(0x7f0000000180))
clock_gettime(0x0, &(0x7f0000002d80)={<r9=>0x0, <r10=>0x0})
clock_nanosleep(0x5, 0x1, &(0x7f0000002dc0)={r9, r10+10000000}, &(0x7f0000002e00))

592.17854ms ago: executing program 1 (id=724):
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
r0 = socket(0x1e, 0x1, 0x0)
connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10)
write$binfmt_misc(r0, &(0x7f0000000080), 0x2000011a)
syz_clone3(&(0x7f0000000100)={0x20901400, &(0x7f0000000180), 0x0, 0x0, {0xa}, 0x0, 0x0, 0x0, 0x0}, 0x58)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x1, 0x7fff0000}]})
setreuid(0xee01, 0xee00)

591.62243ms ago: executing program 8 (id=725):
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x200000a, 0x6031, 0xffffffffffffffff, 0x0) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010027bd700000000000010000004c0008804800008024000100975c9d81c983c8209ee781254b899f8ed925ae9f0923423c62f53c57cdbf691c200004000a004e2400000006ff020000000000000000000000000001f185d15b1400020077673200"/110], 0x74}, 0x1, 0x0, 0x0, 0x4084}, 0x20000010) (async)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='pids.current\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x12, r2, 0x0) (async)
r3 = syz_usb_connect$rtl8150(0x0, 0x3f, &(0x7f00000001c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0)
syz_usb_control_io$rtl8150(r3, 0x0, 0x0) (async)
syz_usb_control_io$rtl8150(r3, 0x0, &(0x7f0000000200)={0x2c, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x40, 0x5, 0x1, "ef"}}) (async)
syz_usb_control_io(r3, 0x0, &(0x7f0000000280)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x1c0) (async)
mount(0x0, 0x0, &(0x7f0000000380)='proc\x00', 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000003c0)={0xa, 0x400000000008d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x8) (async)
r4 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f0000000440)=0x2) (async)
sched_setscheduler(r4, 0x1, &(0x7f0000000480)=0x7) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f0000000500)=@abs, 0x6e) (async)
sendmmsg$unix(r6, &(0x7f0000000580), 0x651, 0x0) (async)
recvmmsg(r5, &(0x7f00000005c0), 0x4000087, 0x2, 0x0) (async)
openat$urandom(0xffffffffffffff9c, 0x0, 0x101402, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x7, 0x401d031, 0xffffffffffffffff, 0x0) (async)
add_key(&(0x7f0000000600)='keyring\x00', &(0x7f0000000640)={'syz', 0x0}, 0x0, 0xfffff, 0xfffffffffffffffc) (async)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000680), 0xca00, 0x0) (async)
bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) (async)
socket$inet6_tcp(0xa, 0x1, 0x0)
r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r7, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r7, 0x4008af03, &(0x7f0000000780)={0x2, 0x0, [{0x6000, 0xe5, &(0x7f0000000800)=""/229}, {0x5000, 0x12, &(0x7f0000000900)=""/18}]})

591.12145ms ago: executing program 1 (id=726):
r0 = userfaultfd(0x801)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0xc1})
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000200)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})
ioctl$UFFDIO_COPY(r0, 0xc028aa03, 0x0)

582.324981ms ago: executing program 1 (id=727):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="020300091b0000000000000000000000040003000000000000000000000000000000000000000000000000000000000005000600000000000a00000000000000fe8000000000000000000000000000bb00000000000000000400040000fffd00000000000000000000000000000000000000000000000000020001000000000000000000000000ff05000500000000000a00000000000000fe8896380000000000000001000000010000000000000000030007000000000002004e24ac14141f00000000000000000200", @ANYBLOB="6da60c"], 0xd8}}, 0x0)

571.907712ms ago: executing program 1 (id=728):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x8, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xb, 0x8, 0xc, 0x3, 0x1}, 0x48) (async)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0xc, &(0x7f0000000240)=@framed={{}, [@generic={0x7a, 0xa, 0x0, 0xfffffff0}, @map_fd={0x18, 0x1, 0x1, 0x0, r0}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0xbf, 0x3, 0xa}, @generic={0x7, 0x3, 0x0, 0x0, 0xfffffff0}, @generic={0xb7, 0x4, 0x0, 0x0, 0x5}, @generic={0x85, 0x0, 0x0, 0x0, 0x2}]}, &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r1, 0x0, 0xe, 0x0, &(0x7f0000000380)='\x00'/14, 0x0, 0x3b66, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r3 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_GET(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000004200)={0x14, r3, 0x303, 0x0, 0x0, {0x13}}, 0x14}}, 0x0)

502.513279ms ago: executing program 1 (id=729):
r0 = mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async)
r1 = openat$binderfs_proc_dir(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r1, 0xc0406618, &(0x7f0000000040)={@id={0x2, 0x0, @a}}) (async)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="05000000050000000200000007"], 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0xd, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000003000000000000000040000018110000", @ANYRES32=<r4=>r2, @ANYBLOB="0000000000000000b70800000b0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000007d00000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000280)={r3}, 0xc) (async)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x16, 0x0, 0x104, 0xff, 0x0, 0x1}, 0x48)
close(r5) (async, rerun: 64)
ioctl$int_out(r1, 0x5460, &(0x7f0000000080)) (async, rerun: 64)
r6 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'batadv_slave_0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2000}}}]}, 0x38}}, 0x0) (async)
sendmsg$nl_route_sched(r6, &(0x7f0000000440)={0x0, 0x2b, &(0x7f0000000480)={&(0x7f00000004c0)=@newtfilter={0x68, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0xb, 0xfff3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x4, 0x2, [@TCA_BASIC_EMATCHES={0x34, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x28, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0x406, 0x4, 0x4}}}, @TCF_EM_CONTAINER={0xc, 0x2, 0x0, 0x0, {{0x3, 0x0, 0x8}}}]}]}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x20045010}, 0x0)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="9e0000000400000004002d770a004500000000001a2df05e7a04c5577c972a5b9088bb59eb6a2e7dc7dac4b19c9f77fe017b8d61ef9c8296de3dbfa3997d9cd173622ea39b0a67a6ab214660fc12b4f29828364b3891fbab6432d5fac0266d13cf21a6a9cd98ec6a77a23d983b5bae16878ba78f03ac0cd0a82ef6c015a1ee643636bc", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) (async, rerun: 64)
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x13, 0x8, &(0x7f0000000600)=ANY=[@ANYRESDEC=r0, @ANYRESDEC=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000009500050000000000"], &(0x7f0000000880)='GPL\x00', 0x4, 0xc3, &(0x7f00000008c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000009c0), 0x8, 0x10, &(0x7f0000000a00), 0x10}, 0x94) (async, rerun: 64)
r8 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0)
ioctl$F2FS_IOC_DEFRAGMENT(r8, 0xc010f508, &(0x7f0000000300)={0xfff, 0x2})

502.216389ms ago: executing program 1 (id=730):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = socket(0x10, 0x3, 0x0)
setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, 0x0, 0x0)
setpriority(0x0, 0x0, 0x2a14b58)
mmap(&(0x7f000007a000/0x1000)=nil, 0x1000, 0x1000000, 0x1010, 0xffffffffffffffff, 0x76be7000)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x2}, &(0x7f0000000040)=<r2=>0x0)
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000080)={0x0, 0x0, 0x8000, 0x3ff})
fchownat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x100)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
timer_settime(r2, 0x1, &(0x7f00000000c0), 0x0)
recvmmsg$unix(r1, &(0x7f0000000100)=[{{0x0, 0x0, 0x0}}], 0x1, 0x102, &(0x7f0000000140))
sendmsg$nl_xfrm(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=@migrate={0xa0, 0x21, 0x1, 0x0, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x9}, @in=@dev={0xac, 0x14, 0x14, 0x2e}, 0x4e23, 0x0, 0x0, 0x0, 0xa, 0x80, 0xa0, 0x62}, 0x6e6bba, 0x3}, [@migrate={0x50, 0x11, [{@in=@private=0xa010101, @in=@loopback, @in=@dev={0xac, 0x14, 0x14, 0x38}, @in6=@empty, 0x3c, 0x3, 0x0, 0x10000000, 0x8, 0xa}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x6a8dd86ef563b068}, 0x4020800)

502.074379ms ago: executing program 2 (id=731):
mknod$loop(&(0x7f0000000000)='./file0\x00', 0x6000, 0x1)
r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
ioctl$BLKTRACESTART(r0, 0x1279, 0x0)
syz_emit_ethernet(0x72, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd608a37f2003c2c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa2f000001", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="3020000090380000001e0f0a40392ced23d8d2d1f43576db011312379e53b65c4d212e84adba6efad6bd3f0100000000926171b99e"], 0x0)

450.889205ms ago: executing program 2 (id=732):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010003b15000000080000f7ffffff0000", @ANYRES32=0x0, @ANYBLOB="0002000000800000140012800900010076657468000000004cfe028008000300000000000500110002000000"], 0x44}}, 0x8000)

442.982535ms ago: executing program 2 (id=733):
openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x1123102, 0x0)
r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000280)=<r2=>0x0, &(0x7f00000000c0)=<r3=>0x0)
read$FUSE(0xffffffffffffffff, &(0x7f0000000a80)={0x2020, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}, 0x2020)
syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@new_dev={0x1, 0x18e, 0x0, 0x0, 0x1000, 0xffffffff, r4, 0x0, 0x8}}}, &(0x7f0000000480))
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
dup(r5)
r6 = socket$inet6(0xa, 0x3, 0x7)
setsockopt$inet6_buf(r6, 0x29, 0x39, &(0x7f0000000400)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18)
connect$inet6(r6, &(0x7f0000000780)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}, 0x1c)
sendmmsg$inet6(r6, &(0x7f00000007c0)=[{{0x0, 0x0, 0x0}}], 0x40000000000027f, 0x40000000)
socket(0x1, 0x5, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0)
sendmsg$inet(r8, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000)
recvmsg$unix(r7, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)}, 0x1)
r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x909842, 0x0)
r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0)
r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r11, 0x4020ae46, &(0x7f0000000500)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil})
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xa, 0x4, &(0x7f0000000600)=ANY=[@ANYRES64=r12], &(0x7f0000000640)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
r13 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x9, 0x4, 0x8, 0x100, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000740)={<r14=>0xffffffffffffffff, <r15=>0xffffffffffffffff})
r16 = bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x1, 0xc, &(0x7f0000002b80)=ANY=[@ANYBLOB="180000000000000000000000000000007a0af0ff0000000018110000", @ANYRES32=r13, @ANYBLOB="0000000000000000bfa200000000000007020000f8ffffffbfa300000000000007030000f0ffffffb704000000000000850000000200000095"], &(0x7f0000002c00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r14, 0x1, 0x32, &(0x7f0000002c40)=r16, 0x4)
sendmsg$unix(r15, &(0x7f0000002c80)={0x0, 0x0, 0x0}, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
syz_kvm_setup_cpu$x86(r11, r12, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000680)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0)
ioctl$KVM_RUN(r12, 0xae80, 0x0)

399.35879ms ago: executing program 2 (id=734):
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x14, 0x2a, 0xa01, 0x70bd2d, 0x0, {0x80}}, 0x14}}, 0x0)
syz_usb_connect(0x0, 0x43, &(0x7f0000000040)=ANY=[], 0x0)

336.801926ms ago: executing program 5 (id=735):
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r0 = socket$igmp6(0xa, 0x3, 0x2)
bind$inet6(r0, 0x0, 0x0)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x6, 0x3, &(0x7f00000008c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000900)='syzkaller\x00'}, 0x80)
r2 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000940)={'syz_tun\x00', <r3=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000980)={r1, r3, 0x25, 0x4, @val=@netfilter={0x7, 0x0, 0x9}}, 0x20)
syz_emit_ethernet(0x11, &(0x7f00000009c0)=ANY=[], 0x0)
bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0)
listen(0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={0xffffffffffffffff, &(0x7f0000000280), &(0x7f00000002c0)=@tcp6}, 0x20)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000000440), 0x1}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000004c0)='.', 0xc400}], 0x7}}], 0x44, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet6(0xa, 0x80002, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000ac0)={'syz_tun\x00', <r6=>0x0})
syz_usb_connect$midi(0x2, 0x65, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x1430, 0x474b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x53, 0x1, 0x1, 0xe, 0x30, 0x7, "", {{{0x9, 0x4, 0x0, 0x0, 0x3, 0x1, 0x3, 0x20, 0x8, [], [{{0x9, 0x5, 0x9, 0xc, 0x10, 0xfb, 0x7, 0x6, {0x14, 0x25, 0x1, 0x10, "7f8585e53397bf5ba5ea0e98d618d940"}}}, {{0x9, 0x5, 0xd, 0x3, 0x8, 0x6, 0xff, 0x6f, {0xc, 0x25, 0x1, 0x8, "87f66651a3c8eaad"}}}, {{0x9, 0x5, 0x2, 0x2, 0x40, 0x6, 0x80, 0x8, {0x6, 0x25, 0x1, 0x2, "4584"}}}]}}}}}]}}, &(0x7f0000000080)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x300, 0x7, 0x1f, 0x2, 0x40, 0x1}, 0x32, &(0x7f0000000100)={0x5, 0xf, 0x32, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x34, 0x3, 0x2, 0x9}, @wireless={0xb, 0x10, 0x1, 0xc, 0x634a04471b236a1c, 0x0, 0x2, 0x6, 0x6}, @ext_cap={0x7, 0x10, 0x2, 0x1e, 0x0, 0x7, 0x55e7}, @ss_container_id={0x14, 0x10, 0x4, 0x8, "452475d1f237da6e35a339298f5f856b"}]}})
sendmsg$nl_route_sched(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000b80)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r6, {}, {0x0, 0xfff2}, {0xfff3}}}, 0x24}}, 0x0)

0s ago: executing program 8 (id=736):
r0 = socket$inet6_icmp(0xa, 0x2, 0x3a)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20040040)
fcntl$lock(0xffffffffffffffff, 0x25, 0x0)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
syz_emit_ethernet(0x42, &(0x7f00000001c0)={@local, @random="5c35fdcaedf2", @void, {@ipv4={0x800, @udp={{0xb, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0xc7, 0x11, 0x0, @empty, @empty, {[@rr={0x7, 0x17, 0xd, [@dev={0xac, 0x14, 0x14, 0x10}, @remote, @local, @dev={0xac, 0x14, 0x14, 0x41}, @dev={0xac, 0x14, 0x14, 0x39}]}]}}, {0x1, 0x4e20, 0xffffffffffffff99}}}}}, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x4e23, @empty}, 0x2, 0x0, 0x4}}, 0x2e)
r3 = socket$pppl2tp(0x18, 0x1, 0x1)
syz_usb_connect$uac1(0x3, 0x72, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x40, 0x763, 0x2012, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x60, 0x3, 0x1, 0x0, 0x20, 0x59, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x5, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x7, 0x4, 0x6, {0x7, 0x25, 0x1, 0x4, 0x7, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x8, 0x3, 0x8, {0x7, 0x25, 0x1, 0xc, 0xe, 0xa}}}}}}}}]}}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x24, 0x0}, {0x4, &(0x7f0000000180)=@string={0x4, 0x3, "9ad8"}}]})
connect$pppl2tp(r3, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e22, @local}, 0x2, 0x1}}, 0x2e)
syz_emit_ethernet(0x56, &(0x7f0000000400)=ANY=[@ANYBLOB="aaaaaaaaaaaaaa4c77b99cbb86dd60c6ea090000000000000100000000e01f00000000000000ff020000000000220000000000000001e800c204"], 0x0)
getsockopt(r3, 0x111, 0x5, 0x0, &(0x7f0000000080))
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
wait4(r5, &(0x7f0000000440), 0x2, &(0x7f0000000480))
sendmsg$nl_xfrm(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="400100001a000100feffffff00010000ff010000000000000000000000000001640101000000000000000000000000004e20071c4e21fff9020000203b000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c0000007f00000100000000000000000000000000030000000000000f000000000000000600400000000000fffbffffffffffff1c250800000000000000010000000000fcffffffffffffff0700000000000000ffffffffffffffff0000000000000000ff01000000000000fefffffffffffffffefffffff9030000ffffffff8000000005350000020001002000000000000000480003006465666c61746500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080016"], 0x140}}, 0x844)
ioctl$XFS_IOC_START_COMMIT(r1, 0x80585882, &(0x7f0000000540)={<r6=>0xffffffffffffffff})
write$tun(r6, &(0x7f00000005c0)={@void, @val={0x2, 0x3, 0x6, 0x3, 0x9d, 0x5}, @llc={@snap={0x1, 0xff, '\'', '\bWc', 0x18, "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"}}}, 0x10d)
r7 = dup(r0)
write$P9_RGETATTR(r7, &(0x7f00000019c0)={0xa0, 0x19, 0x1, {0x0, {0x1, 0x3, 0x2}, 0xd0, 0x0, 0x0, 0xb, 0x8, 0x6, 0x2, 0x8000000000000001, 0x7, 0x6, 0x9, 0x7, 0x1, 0x1ff, 0x4, 0x98, 0x9f4, 0x7fffffffffffffff}}, 0xa0)

kernel console output (not intermixed with test programs):

62][ T1555] input: syz1 as /devices/virtual/input/input7
[   58.595539][ T1555] input input8: cannot allocate more than FF_MAX_EFFECTS effects
[   58.724381][ T1553] loop4: detected capacity change from 0 to 40427
[   58.802428][ T1502] loop7: detected capacity change from 0 to 131072
[   58.892585][  T361] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[   59.012640][   T19] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[   59.075254][ T1502] loop7: detected capacity change from 0 to 40427
[   59.082570][  T361] usb 3-1: Using ep0 maxpacket: 16
[   59.085937][ T1502] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12
[   59.088880][  T361] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   59.104494][ T1502] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock
[   59.125235][ T1502] F2FS-fs (loop7): invalid crc value
[   59.145060][  T361] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[   59.157680][  T361] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5
[   59.158276][ T1502] F2FS-fs (loop7): Found nat_bits in checkpoint
[   59.170901][  T361] usb 3-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00
[   59.202529][   T19] usb 5-1: Using ep0 maxpacket: 16
[   59.208792][   T19] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   59.225834][  T361] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   59.230560][   T19] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[   59.252331][ T1502] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0
[   59.259721][   T19] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   59.260152][ T1502] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5
[   59.276989][  T361] usb 3-1: config 0 descriptor??
[   59.294469][ T1502] syz.7.310: attempt to access beyond end of device
[   59.294469][ T1502] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[   59.300014][   T19] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   59.317903][    T6] usb 8-1: unable to read config index 0 descriptor/start: -71
[   59.327147][    T6] usb 8-1: can't read configurations, error -71
[   59.341774][   T19] usb 5-1: Product: syz
[   59.346294][   T19] usb 5-1: Manufacturer: syz
[   59.350952][   T19] usb 5-1: SerialNumber: syz
[   59.485765][  T361] usbhid 3-1:0.0: can't add hid device: -71
[   59.491738][  T361] usbhid: probe of 3-1:0.0 failed with error -71
[   59.505161][  T361] usb 3-1: USB disconnect, device number 7
[   59.542463][ T1575] loop3: detected capacity change from 0 to 2048
[   59.563931][ T1575] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[   59.584299][   T19] usb 5-1: 0:2 : does not exist
[   59.612489][   T19] usb 5-1: 5:0: failed to get current value for ch 0 (-22)
[   59.660102][   T19] usb 5-1: USB disconnect, device number 7
[   59.676588][  T287] EXT4-fs (loop3): unmounting filesystem.
[   59.715061][ T1581] loop3: detected capacity change from 0 to 512
[   59.733928][ T1581] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities
[   59.762866][ T1583] ipt_REJECT: TCP_RESET invalid for non-tcp
[   59.955144][ T1593] loop3: detected capacity change from 0 to 512
[   60.014402][ T1031] kworker/u4:8: attempt to access beyond end of device
[   60.014402][ T1031] loop7: rw=1, sector=145, nr_sectors = 472 limit=128
[   60.066515][ T1603] device batadv_slave_1 entered promiscuous mode
[   60.108051][ T1603] device macsec1 entered promiscuous mode
[   60.115401][ T1605] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[   60.137025][ T1605] ext4 filesystem being mounted at /79/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   60.170738][ T1605] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.341: bg 0: block 145: padding at end of block bitmap is not set
[   60.226754][  T288] EXT4-fs (loop2): unmounting filesystem.
[   60.552584][    T6] usb 8-1: new low-speed USB device number 5 using dummy_hcd
[   60.692884][   T28] kauditd_printk_skb: 555 callbacks suppressed
[   60.692898][   T28] audit: type=1326 audit(1793994224.151:1341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1607 comm="syz.4.342" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa61e36034e code=0x7ffc0000
[   60.743931][    T6] usb 8-1: unable to get BOS descriptor or descriptor too short
[   60.750213][   T28] audit: type=1326 audit(1793994224.181:1342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1607 comm="syz.4.342" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa61e36034e code=0x7ffc0000
[   60.754987][    T6] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   60.815252][   T28] audit: type=1326 audit(1793994224.181:1343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1607 comm="syz.4.342" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa61e36034e code=0x7ffc0000
[   60.821293][    T6] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 32, setting to 8
[   60.857145][   T28] audit: type=1326 audit(1793994224.181:1344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1607 comm="syz.4.342" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa61e36034e code=0x7ffc0000
[   60.878488][    T6] usb 8-1: string descriptor 0 read error: -22
[   60.898179][    T6] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   60.908675][   T28] audit: type=1326 audit(1793994224.181:1345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1607 comm="syz.4.342" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa61e36034e code=0x7ffc0000
[   60.917486][    T6] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   60.962864][   T28] audit: type=1326 audit(1793994224.181:1346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1607 comm="syz.4.342" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa61e36034e code=0x7ffc0000
[   60.963311][ T1612] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22
[   61.012907][   T28] audit: type=1326 audit(1793994224.181:1347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1607 comm="syz.4.342" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa61e36034e code=0x7ffc0000
[   61.023330][    T6] cdc_acm: probe of 8-1:1.0 failed with error -22
[   61.062001][   T28] audit: type=1326 audit(1793994224.181:1348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1607 comm="syz.4.342" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa61e36034e code=0x7ffc0000
[   61.095016][   T28] audit: type=1326 audit(1793994224.181:1349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1607 comm="syz.4.342" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa61e36034e code=0x7ffc0000
[   61.122246][   T28] audit: type=1326 audit(1793994224.191:1350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1607 comm="syz.4.342" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa61e36034e code=0x7ffc0000
[   61.281123][ T1634] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[   61.310335][ T1603] EXT4-fs (loop7): Test dummy encryption mode enabled
[   61.320926][ T1634] ext4 filesystem being mounted at /67/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   61.342163][ T1603] EXT4-fs (loop7): warning: mounting unchecked fs, running e2fsck is recommended
[   61.365255][ T1603] EXT4-fs (loop7): Errors on filesystem, clearing orphan list.
[   61.373526][ T1603] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[   61.403274][    T6] usb 8-1: USB disconnect, device number 5
[   61.453476][ T1653] bridge0: port 1(bridge_slave_0) entered blocking state
[   61.460533][ T1653] bridge0: port 1(bridge_slave_0) entered disabled state
[   61.469773][ T1653] device bridge_slave_0 entered promiscuous mode
[   61.472663][ T1660] netlink: 168 bytes leftover after parsing attributes in process `syz.3.354'.
[   61.477072][ T1653] bridge0: port 2(bridge_slave_1) entered blocking state
[   61.492111][ T1653] bridge0: port 2(bridge_slave_1) entered disabled state
[   61.500148][ T1653] device bridge_slave_1 entered promiscuous mode
[   61.573882][ T1665] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[   61.604287][ T1667] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters
[   61.639254][  T288] EXT4-fs (loop2): unmounting filesystem.
[   61.660303][ T1653] bridge0: port 2(bridge_slave_1) entered blocking state
[   61.667389][ T1653] bridge0: port 2(bridge_slave_1) entered forwarding state
[   61.674677][ T1653] bridge0: port 1(bridge_slave_0) entered blocking state
[   61.681703][ T1653] bridge0: port 1(bridge_slave_0) entered forwarding state
[   61.719046][  T320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   61.727003][  T320] bridge0: port 1(bridge_slave_0) entered disabled state
[   61.734426][  T320] bridge0: port 2(bridge_slave_1) entered disabled state
[   61.745279][  T320] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   61.753487][  T320] bridge0: port 1(bridge_slave_0) entered blocking state
[   61.760511][  T320] bridge0: port 1(bridge_slave_0) entered forwarding state
[   61.769944][  T320] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   61.778269][  T320] bridge0: port 2(bridge_slave_1) entered blocking state
[   61.785321][  T320] bridge0: port 2(bridge_slave_1) entered forwarding state
[   61.793137][ T1675] netlink: 8 bytes leftover after parsing attributes in process `syz.2.357'.
[   61.810650][  T320] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   61.825295][ T1031] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   61.841800][  T320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   61.856118][  T320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   61.864324][  T320] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   61.871753][  T320] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   61.880907][ T1653] device veth0_vlan entered promiscuous mode
[   61.894500][  T320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   61.904260][ T1653] device veth1_macvtap entered promiscuous mode
[   61.914870][  T320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   61.926498][  T320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   61.941515][ T1301] EXT4-fs (loop7): unmounting filesystem.
[   61.995175][ T1688] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended
[   62.014586][ T1692] tipc: Started in network mode
[   62.019591][ T1692] tipc: Node identity 7f000001, cluster identity 4711
[   62.032344][  T291] EXT4-fs (loop4): unmounting filesystem.
[   62.050545][ T1698] device-mapper: ioctl: dm_ctl_ioctl: unknown command 0xc138fd16
[   62.058516][ T1692] tipc: New replicast peer: 127.0.0.2
[   62.064926][ T1688] EXT4-fs error (device loop8): ext4_mb_mark_diskspace_used:3861: comm syz.8.350: Allocating blocks 41-42 which overlap fs metadata
[   62.082302][ T1692] tipc: Enabled bearer <udp:syz0>, priority 10
[   62.088877][ T1698] fuse: Unknown parameter 'func'
[   62.103906][ T1688] EXT4-fs (loop8): Remounting filesystem read-only
[   62.112854][ T1688] EXT4-fs error (device loop8): ext4_acquire_dquot:6828: comm syz.8.350: Failed to acquire dquot type 1
[   62.127139][ T1688] EXT4-fs (loop8): Remounting filesystem read-only
[   62.136847][ T1688] EXT4-fs error (device loop8): mb_free_blocks:1839: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt.
[   62.152806][ T1688] EXT4-fs (loop8): Remounting filesystem read-only
[   62.162748][ T1688] EXT4-fs error (device loop8): ext4_do_update_inode:5281: inode #12: comm syz.8.350: corrupted inode contents
[   62.180098][ T1703] fuse: Unknown parameter 'func'
[   62.197206][ T1688] EXT4-fs (loop8): Remounting filesystem read-only
[   62.209824][ T1706] device-mapper: ioctl: dm_ctl_ioctl: unknown command 0xc138fd16
[   62.222009][ T1688] EXT4-fs error (device loop8): ext4_dirty_inode:6158: inode #12: comm syz.8.350: mark_inode_dirty error
[   62.251185][ T1688] EXT4-fs (loop8): Remounting filesystem read-only
[   62.267548][ T1688] EXT4-fs error (device loop8): ext4_do_update_inode:5281: inode #12: comm syz.8.350: corrupted inode contents
[   62.294577][ T1688] EXT4-fs (loop8): Remounting filesystem read-only
[   62.312540][ T1688] EXT4-fs error (device loop8): __ext4_ext_dirty:202: inode #12: comm syz.8.350: mark_inode_dirty error
[   62.331917][ T1688] EXT4-fs (loop8): Remounting filesystem read-only
[   62.347833][ T1688] EXT4-fs error (device loop8): ext4_do_update_inode:5281: inode #12: comm syz.8.350: corrupted inode contents
[   62.369072][ T1688] EXT4-fs (loop8): Remounting filesystem read-only
[   62.380834][ T1688] EXT4-fs error (device loop8) in ext4_orphan_del:303: Corrupt filesystem
[   62.397862][ T1688] EXT4-fs (loop8): Remounting filesystem read-only
[   62.408979][ T1688] EXT4-fs error (device loop8): ext4_do_update_inode:5281: inode #12: comm syz.8.350: corrupted inode contents
[   62.428145][ T1688] EXT4-fs (loop8): Remounting filesystem read-only
[   62.436206][  T318] device bridge_slave_1 left promiscuous mode
[   62.446460][ T1684] F2FS-fs (loop2): Invalid segment/section count (458783, 24 x 150994945)
[   62.447585][  T318] bridge0: port 2(bridge_slave_1) entered disabled state
[   62.462384][ T1688] EXT4-fs error (device loop8): ext4_truncate:4327: inode #12: comm syz.8.350: mark_inode_dirty error
[   62.477742][  T318] device bridge_slave_0 left promiscuous mode
[   62.486556][ T1684] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[   62.491154][  T318] bridge0: port 1(bridge_slave_0) entered disabled state
[   62.499879][ T1684] F2FS-fs (loop2): invalid crc value
[   62.503110][ T1688] EXT4-fs (loop8): Remounting filesystem read-only
[   62.522017][ T1688] EXT4-fs error (device loop8) in ext4_process_orphan:345: Corrupt filesystem
[   62.532128][  T318] device veth1_macvtap left promiscuous mode
[   62.538571][  T318] device veth0_vlan left promiscuous mode
[   62.552532][ T1688] EXT4-fs (loop8): Remounting filesystem read-only
[   62.561825][ T1684] F2FS-fs (loop2): Found nat_bits in checkpoint
[   62.568476][ T1688] EXT4-fs (loop8): 1 truncate cleaned up
[   62.582108][ T1688] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback.
[   62.658602][ T1684] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[   62.665736][ T1684] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4
[   62.703951][ T1653] EXT4-fs (loop8): unmounting filesystem.
[   62.768120][ T1684] F2FS-fs (loop2): sanity_check_inode: inode (ino=4, mode=16877) should not have inline_data, run fsck to fix
[   62.786571][ T1722] set_capacity_and_notify: 10 callbacks suppressed
[   62.786586][ T1722] loop8: detected capacity change from 0 to 256
[   62.820129][ T1723] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.842685][ T1723] bridge0: port 1(bridge_slave_0) entered disabled state
[   62.850363][ T1723] device bridge_slave_0 entered promiscuous mode
[   62.859387][ T1723] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.866911][ T1723] bridge0: port 2(bridge_slave_1) entered disabled state
[   62.874436][ T1723] device bridge_slave_1 entered promiscuous mode
[   62.882683][  T326] usb 4-1: new full-speed USB device number 9 using dummy_hcd
[   62.921796][ T1729] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22
[   62.979264][ T1723] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.986364][ T1723] bridge0: port 2(bridge_slave_1) entered forwarding state
[   62.993646][ T1723] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.000663][ T1723] bridge0: port 1(bridge_slave_0) entered forwarding state
[   63.022632][ T1733] ip_tables: iptables: counters copy to user failed while replacing table
[   63.058577][ T1031] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   63.070603][  T326] usb 4-1: unable to get BOS descriptor or descriptor too short
[   63.090698][  T326] usb 4-1: not running at top speed; connect to a high speed hub
[   63.098566][ T1031] bridge0: port 1(bridge_slave_0) entered disabled state
[   63.120206][ T1031] bridge0: port 2(bridge_slave_1) entered disabled state
[   63.121741][  T326] usb 4-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice= 0.40
[   63.144544][  T326] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   63.153027][ T1031] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   63.153478][  T326] usb 4-1: Product: syz
[   63.165367][  T326] usb 4-1: Manufacturer: syz
[   63.170018][  T326] usb 4-1: SerialNumber: syz
[   63.170233][ T1031] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.181657][ T1031] bridge0: port 1(bridge_slave_0) entered forwarding state
[   63.190012][ T1031] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   63.200316][ T1747] loop2: detected capacity change from 0 to 512
[   63.206955][ T1031] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.214009][ T1031] bridge0: port 2(bridge_slave_1) entered forwarding state
[   63.221962][ T1747] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   63.246304][ T1031] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   63.254164][ T1747] EXT4-fs error (device loop2): ext4_orphan_get:1405: inode #15: comm syz.2.373: inode has both inline data and extents flags
[   63.268616][ T1031] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   63.276969][ T1747] EXT4-fs error (device loop2): ext4_orphan_get:1410: comm syz.2.373: couldn't read orphan inode 15 (err -117)
[   63.289124][ T1747] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[   63.302942][   T19] tipc: Node number set to 2130706433
[   63.313169][ T1031] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   63.326817][ T1723] device veth0_vlan entered promiscuous mode
[   63.334013][ T1031] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   63.342171][ T1031] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   63.349897][ T1031] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   63.378352][ T1031] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   63.389142][ T1723] device veth1_macvtap entered promiscuous mode
[   63.406897][ T1718] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   63.423071][ T1031] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   63.434073][ T1718] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   63.443114][ T1031] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   63.465280][ T1718] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   63.476138][ T1031] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   63.484509][ T1718] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   63.487637][ T1031] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   63.498308][ T1718] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   63.516817][ T1718] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   63.533014][ T1718] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   63.551765][ T1718] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   63.569015][ T1718] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   63.586758][ T1718] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   63.588923][ T1758] x_tables: ip6_tables: icmp6 match: only valid for protocol 58
[   63.612059][  T326] usb 4-1: MIDIStreaming interface descriptor not found
[   63.621048][ T1759] x_tables: ip6_tables: icmp6 match: only valid for protocol 58
[   63.635693][  T326] usb 4-1: USB disconnect, device number 9
[   63.651545][ T1759] loop9: detected capacity change from 0 to 256
[   63.683802][  T334] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[   63.684390][ T1758] binder: 1757:1758 ioctl c0306201 200000000bc0 returned -14
[   63.701061][  T318] device bridge_slave_1 left promiscuous mode
[   63.708407][  T318] bridge0: port 2(bridge_slave_1) entered disabled state
[   63.720173][ T1759] binder: 1757:1759 ioctl c0306201 200000000bc0 returned -14
[   63.731454][  T318] device bridge_slave_0 left promiscuous mode
[   63.742715][  T304] usb 8-1: new full-speed USB device number 6 using dummy_hcd
[   63.744258][  T318] bridge0: port 1(bridge_slave_0) entered disabled state
[   63.759032][ T1758] binder_alloc: binder_alloc_mmap_handler: 1757 200000ffd000-200001000000 already mapped failed -16
[   63.772289][  T318] device veth1_macvtap left promiscuous mode
[   63.784981][  T318] device veth0_vlan left promiscuous mode
[   63.893720][  T304] usb 8-1: device descriptor read/64, error -71
[   63.984160][  T288] EXT4-fs (loop2): unmounting filesystem.
[   64.043073][ T1766] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.087327][ T1767] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[   64.109687][ T1767] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.116791][ T1767] bridge0: port 2(bridge_slave_1) entered forwarding state
[   64.132453][ T1767] device veth0_vlan left promiscuous mode
[   64.148364][ T1767] device veth0_vlan entered promiscuous mode
[   64.172619][  T304] usb 8-1: device descriptor read/64, error -71
[   64.202764][  T308] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   64.212813][ T1773] loop3: detected capacity change from 0 to 2048
[   64.228116][  T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   64.236926][ T1773] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[   64.246116][ T1773] ext4 filesystem being mounted at /102/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   64.257235][  T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   64.267286][  T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   64.279282][  T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   64.288129][  T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   64.298834][  T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   64.307168][  T830] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[   64.315249][  T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   64.324315][  T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   64.332900][  T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   64.341195][  T308] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready
[   64.352390][  T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   64.361041][  T308] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready
[   64.369531][  T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   64.378158][  T308] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   64.386482][  T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   64.394996][  T308] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   64.404960][ T1779] overlayfs: failed to set xattr on upper
[   64.405763][  T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   64.410685][ T1779] overlayfs: ...falling back to index=off,metacopy=off.
[   64.444963][ T1782] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1782 comm=syz.9.381
[   64.446001][ T1776] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1280 sclass=netlink_route_socket pid=1776 comm=syz.8.379
[   64.485432][  T304] usb 8-1: new full-speed USB device number 7 using dummy_hcd
[   64.508274][ T1784] loop9: detected capacity change from 0 to 4096
[   64.522691][  T830] usb 3-1: Using ep0 maxpacket: 16
[   64.524699][ T1784] EXT4-fs: mb_optimize_scan should be set to 0 or 1.
[   64.528922][  T830] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   64.573924][  T830] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[   64.593343][  T830] usb 3-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73
[   64.610691][  T830] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   64.627201][  T830] usb 3-1: Product: syz
[   64.635569][  T830] usb 3-1: Manufacturer: syz
[   64.645365][  T830] usb 3-1: SerialNumber: syz
[   64.652551][  T304] usb 8-1: device descriptor read/64, error -71
[   64.662028][  T830] usb 3-1: config 0 descriptor??
[   64.869528][ T1769] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   64.882469][ T1769] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   64.899158][ T1769] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   64.917169][ T1769] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   64.933214][  T304] usb 8-1: device descriptor read/64, error -71
[   64.963911][ T1769] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   64.978319][ T1787] loop8: detected capacity change from 0 to 512
[   64.993302][ T1769] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   65.003706][ T1769] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   65.027588][  T287] EXT4-fs (loop3): unmounting filesystem.
[   65.044068][ T1769] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   65.044689][ T1787] loop8: detected capacity change from 0 to 512
[   65.072901][ T1769] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   65.092914][  T304] usb usb8-port1: attempt power cycle
[   65.104802][ T1784] loop9: detected capacity change from 0 to 131072
[   65.123181][ T1787] EXT4-fs warning (device loop8): dx_probe:833: inode #2: comm syz.8.383: Unrecognised inode hash code 255
[   65.134643][ T1787] EXT4-fs warning (device loop8): dx_probe:966: inode #2: comm syz.8.383: Corrupt directory, running e2fsck is recommended
[   65.136764][ T1769] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   65.147493][ T1787] EXT4-fs (loop8): Cannot turn on journaled quota: type 1: error -117
[   65.163585][ T1784] F2FS-fs (loop9): Invalid segment/section count (24 != 24 * 5)
[   65.163914][ T1787] EXT4-fs error (device loop8): ext4_iget_extra_inode:4765: inode #15: comm syz.8.383: corrupted in-inode xattr
[   65.185140][ T1784] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock
[   65.195871][ T1787] EXT4-fs error (device loop8): ext4_orphan_get:1410: comm syz.8.383: couldn't read orphan inode 15 (err -117)
[   65.207809][ T1787] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback.
[   65.212816][ T1784] F2FS-fs (loop9): Test dummy encryption mode enabled
[   65.236979][ T1787] EXT4-fs error (device loop8): __ext4_remount:6637: comm syz.8.383: Abort forced by user
[   65.247078][ T1787] EXT4-fs (loop8): Remounting filesystem read-only
[   65.253649][ T1787] EXT4-fs (loop8): re-mounted. Quota mode: writeback.
[   65.273112][ T1784] F2FS-fs (loop9): invalid crc value
[   65.335006][ T1784] F2FS-fs (loop9): Found nat_bits in checkpoint
[   65.373340][ T1802] EXT4-fs warning (device loop8): dx_probe:833: inode #2: comm syz.8.383: Unrecognised inode hash code 255
[   65.384809][ T1802] EXT4-fs warning (device loop8): dx_probe:966: inode #2: comm syz.8.383: Corrupt directory, running e2fsck is recommended
[   65.398228][ T1802] EXT4-fs warning (device loop8): dx_probe:833: inode #2: comm syz.8.383: Unrecognised inode hash code 255
[   65.409371][ T1784] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0
[   65.409630][ T1802] EXT4-fs warning (device loop8): dx_probe:966: inode #2: comm syz.8.383: Corrupt directory, running e2fsck is recommended
[   65.418475][ T1807] netlink: 16 bytes leftover after parsing attributes in process `syz.3.388'.
[   65.443889][ T1784] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5
[   65.457820][ T1807] binder: 1806:1807 ioctl c0306201 2000000001c0 returned -14
[   65.469240][ T1784] fscrypt: AES-256-XTS using implementation "xts-aes-aesni"
[   65.592544][  T304] usb 8-1: new full-speed USB device number 8 using dummy_hcd
[   65.633532][  T304] usb 8-1: device descriptor read/8, error -71
[   65.783570][  T304] usb 8-1: device descriptor read/8, error -71
[   65.840183][ T1653] EXT4-fs (loop8): unmounting filesystem.
[   65.897221][ T1815] loop9: detected capacity change from 0 to 1024
[   65.922651][ T1815] EXT4-fs (loop9): warning: mounting unchecked fs, running e2fsck is recommended
[   65.957377][ T1817] loop8: detected capacity change from 0 to 512
[   65.973836][ T1815] EXT4-fs (loop9): Errors on filesystem, clearing orphan list.
[   65.981421][ T1815] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback.
[   66.011994][ T1817] EXT4-fs (loop8): can't mount with journal_checksum, fs mounted w/o journal
[   66.095309][  T304] usb 8-1: new full-speed USB device number 9 using dummy_hcd
[   66.226040][ T1823] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks
[   66.398923][ T1828] tmpfs: Unknown parameter 'defcontextC'
[   66.404947][   T28] kauditd_printk_skb: 146 callbacks suppressed
[   66.405013][   T28] audit: type=1400 audit(2000000004.950:1494): avc:  denied  { map } for  pid=1824 comm="syz.3.393" path="socket:[24496]" dev="sockfs" ino=24496 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1
[   66.438781][ T1723] EXT4-fs (loop9): unmounting filesystem.
[   66.494331][  T304] usb 8-1: device descriptor read/8, error -71
[   66.503367][ T1831] ip_tables: iptables: counters copy to user failed while replacing table
[   66.512207][   T28] audit: type=1400 audit(2000000004.950:1495): avc:  denied  { mounton } for  pid=1824 comm="syz.3.393" path="/syzcgroup/unified/syz3" dev="cgroup2" ino=93 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1
[   66.563542][   T28] audit: type=1400 audit(2000000005.050:1496): avc:  denied  { compute_member } for  pid=1830 comm="syz.9.394" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1
[   66.653223][  T304] usb 8-1: device descriptor read/8, error -71
[   66.739013][ T1846] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=32 sclass=netlink_audit_socket pid=1846 comm=syz.7.401
[   66.877703][  T322] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[   66.877802][  T304] usb usb8-port1: unable to enumerate USB device
[   67.169187][   T40] usb 3-1: USB disconnect, device number 8
[   67.219991][ T1860] EXT4-fs: Ignoring removed oldalloc option
[   67.226019][ T1860] EXT4-fs: Ignoring removed orlov option
[   67.279063][ T1860] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[   67.295840][ T1860] ext4 filesystem being mounted at /112/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   67.313043][ T1860] EXT4-fs error (device loop3): ext4_map_blocks:747: inode #15: comm syz.3.405: lblock 0 mapped to illegal pblock 0 (length 1)
[   67.334907][ T1860] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117
[   67.347292][ T1860] EXT4-fs (loop3): This should not happen!! Data will be lost
[   67.347292][ T1860] 
[   67.358990][ T1860] EXT4-fs error (device loop3): ext4_map_blocks:637: inode #15: comm syz.3.405: lblock 0 mapped to illegal pblock 0 (length 1)
[   67.379854][  T287] EXT4-fs (loop3): unmounting filesystem.
[   67.402028][ T1870] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none.
[   67.430761][ T1870] ext4 filesystem being mounted at /7/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   67.447023][   T28] audit: type=1400 audit(2000000006.000:1497): avc:  denied  { setattr } for  pid=1869 comm="syz.8.408" name="file1" dev="loop8" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   67.469041][ T1876] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[   67.478642][ T1876] EXT4-fs (loop2): can't mount with commit=2, fs mounted w/o journal
[   67.487557][ T1876] SELinux:  Context system_u:object_r:tun_ is not valid (left unmapped).
[   67.498809][ T1653] EXT4-fs (loop8): unmounting filesystem.
[   67.505253][   T28] audit: type=1400 audit(2000000006.060:1498): avc:  denied  { relabelto } for  pid=1867 comm="syz.2.406" name="file1" dev="tmpfs" ino=541 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:tun_"
[   67.603963][ T1881] EXT4-fs (loop8): invalid inodes per group: 0
[   67.603963][ T1881] 
[   67.622956][ T1883] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode
[   67.648157][ T1883] EXT4-fs (loop9): 1 truncate cleaned up
[   67.650425][   T28] audit: type=1400 audit(2000000006.060:1499): avc:  denied  { associate } for  pid=1867 comm="syz.2.406" name="file1" dev="tmpfs" ino=541 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:tun_"
[   67.657195][ T1883] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback.
[   67.707039][ T1881] FAULT_INJECTION: forcing a failure.
[   67.707039][ T1881] name failslab, interval 1, probability 0, space 0, times 0
[   67.716867][   T28] audit: type=1400 audit(2000000006.270:1500): avc:  denied  { setattr } for  pid=1882 comm="syz.9.412" name="file0" dev="loop9" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   67.745774][ T1881] CPU: 1 PID: 1881 Comm: syz.8.410 Not tainted syzkaller #0
[   67.747197][ T1883] EXT4-fs (loop9): re-mounted. Quota mode: writeback.
[   67.753087][ T1881] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[   67.753119][ T1881] Call Trace:
[   67.753126][ T1881]  <TASK>
[   67.753134][ T1881]  __dump_stack+0x21/0x24
[   67.780416][ T1881]  dump_stack_lvl+0x110/0x170
[   67.785083][ T1881]  ? __cfi_dump_stack_lvl+0x8/0x8
[   67.790090][ T1881]  dump_stack+0x15/0x24
[   67.794227][ T1881]  should_fail_ex+0x3bf/0x510
[   67.798890][ T1881]  __should_failslab+0xac/0xf0
[   67.803644][ T1881]  should_failslab+0x9/0x20
[   67.808135][ T1881]  __kmem_cache_alloc_node+0x3d/0x2d0
[   67.813496][ T1881]  ? __se_sys_mount+0x153/0x390
[   67.818335][ T1881]  ? __se_sys_mount+0x153/0x390
[   67.823166][ T1881]  kmalloc_trace+0x29/0xb0
[   67.827566][ T1881]  __se_sys_mount+0x153/0x390
[   67.832224][ T1881]  ? __this_cpu_preempt_check+0x13/0x20
[   67.837760][ T1881]  ? __x64_sys_mount+0xd0/0xd0
[   67.842507][ T1881]  ? __kasan_check_write+0x14/0x20
[   67.847605][ T1881]  ? fpregs_restore_userregs+0x128/0x260
[   67.853227][ T1881]  __x64_sys_mount+0xbf/0xd0
[   67.857807][ T1881]  x64_sys_call+0x65d/0x9a0
[   67.862298][ T1881]  do_syscall_64+0x4c/0xa0
[   67.866696][ T1881]  ? clear_bhb_loop+0x30/0x80
[   67.871358][ T1881]  ? clear_bhb_loop+0x30/0x80
[   67.876023][ T1881]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   67.881938][ T1881] RIP: 0033:0x7f548119fb19
[   67.886347][ T1881] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   67.905944][ T1881] RSP: 002b:00007f5482016028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[   67.914353][ T1881] RAX: ffffffffffffffda RBX: 00007f5481425fa0 RCX: 00007f548119fb19
[   67.922314][ T1881] RDX: 0000200000000680 RSI: 0000200000000640 RDI: 0000000000000000
[   67.930268][ T1881] RBP: 00007f5481237b70 R08: 00002000000006c0 R09: 0000000000000000
[   67.938224][ T1881] R10: 0000000000000006 R11: 0000000000000246 R12: 0000000000000000
[   67.946188][ T1881] R13: 00007f5481426038 R14: 00007f5481425fa0 R15: 00007fff625293a8
[   67.954150][ T1881]  </TASK>
[   67.962423][ T1877] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input10
[   67.995093][ T1879] set_capacity_and_notify: 8 callbacks suppressed
[   67.995109][ T1879] loop3: detected capacity change from 0 to 40427
[   68.006321][ T1883] FAULT_INJECTION: forcing a failure.
[   68.006321][ T1883] name fail_futex, interval 1, probability 0, space 0, times 1
[   68.022222][ T1879] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[   68.033490][ T1879] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[   68.056038][ T1883] CPU: 0 PID: 1883 Comm: syz.9.412 Not tainted syzkaller #0
[   68.063366][ T1883] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[   68.073419][ T1883] Call Trace:
[   68.076693][ T1883]  <TASK>
[   68.079618][ T1883]  __dump_stack+0x21/0x24
[   68.083947][ T1883]  dump_stack_lvl+0x110/0x170
[   68.088618][ T1883]  ? __cfi_dump_stack_lvl+0x8/0x8
[   68.093636][ T1883]  ? unwind_get_return_address+0x4d/0x90
[   68.099266][ T1883]  dump_stack+0x15/0x24
[   68.102971][ T1879] F2FS-fs (loop3): invalid crc value
[   68.103414][ T1883]  should_fail_ex+0x3bf/0x510
[   68.113337][ T1883]  should_fail+0xb/0x10
[   68.117493][ T1883]  get_futex_key+0x143/0xb10
[   68.122086][ T1883]  ? __cfi_get_futex_key+0x10/0x10
[   68.127197][ T1883]  ? __kasan_slab_free+0x11/0x20
[   68.132137][ T1883]  ? __kmem_cache_free+0xb7/0x1b0
[   68.137164][ T1883]  ? kfree+0x6f/0xf0
[   68.141055][ T1883]  ? put_fs_context+0x6a5/0x800
[   68.145906][ T1883]  ? __se_sys_mount+0x320/0x390
[   68.150755][ T1883]  futex_wait_setup+0xb8/0x260
[   68.155522][ T1883]  ? __cfi_futex_wait_setup+0x10/0x10
[   68.160898][ T1883]  ? futex_setup_timer+0xb0/0xc0
[   68.165837][ T1883]  futex_wait+0x1ce/0x900
[   68.170163][ T1883]  ? __cfi_futex_wait+0x10/0x10
[   68.175017][ T1883]  ? __cfi_futex_wake+0x10/0x10
[   68.179867][ T1883]  ? __kasan_check_write+0x14/0x20
[   68.184976][ T1883]  do_futex+0x2e2/0x430
[   68.189135][ T1883]  ? mntput+0xc0/0xc0
[   68.193116][ T1883]  ? __cfi_do_futex+0x10/0x10
[   68.197789][ T1883]  __se_sys_futex+0x136/0x310
[   68.202461][ T1883]  ? __x64_sys_futex+0x100/0x100
[   68.207389][ T1883]  ? xfd_validate_state+0x70/0x150
[   68.212502][ T1883]  __x64_sys_futex+0xe5/0x100
[   68.217178][ T1883]  x64_sys_call+0x7ec/0x9a0
[   68.221679][ T1883]  do_syscall_64+0x4c/0xa0
[   68.226090][ T1883]  ? clear_bhb_loop+0x30/0x80
[   68.230766][ T1883]  ? clear_bhb_loop+0x30/0x80
[   68.235441][ T1883]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   68.241335][ T1883] RIP: 0033:0x7f5da4b9fb19
[   68.245742][ T1883] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   68.265347][ T1883] RSP: 002b:00007f5da5b430e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[   68.273754][ T1883] RAX: ffffffffffffffda RBX: 00007f5da4e25fa8 RCX: 00007f5da4b9fb19
[   68.281713][ T1883] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f5da4e25fa8
[   68.289667][ T1883] RBP: 00007f5da4e25fa0 R08: 0000000000000000 R09: 0000000000000000
[   68.297620][ T1883] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   68.305572][ T1883] R13: 00007f5da4e26038 R14: 00007ffef955c030 R15: 00007ffef955c118
[   68.313533][ T1883]  </TASK>
[   68.323758][   T28] audit: type=1400 audit(2000000006.880:1501): avc:  denied  { unlink } for  pid=288 comm="syz-executor" name="file1" dev="tmpfs" ino=541 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:tun_"
[   68.359860][ T1723] EXT4-fs error (device loop9): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /10/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[   68.392361][ T1723] EXT4-fs (loop9): unmounting filesystem.
[   68.398989][ T1879] F2FS-fs (loop3): Found nat_bits in checkpoint
[   68.440533][ T1879] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[   68.454523][ T1879] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[   68.559092][ T1906] netlink: 16 bytes leftover after parsing attributes in process `syz.9.416'.
[   68.578171][ T1906] bridge0: port 2(bridge_slave_1) entered disabled state
[   68.602611][   T40] usb 3-1: new full-speed USB device number 9 using dummy_hcd
[   68.617730][ T1910] loop7: detected capacity change from 0 to 512
[   68.640145][ T1910] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[   68.653678][ T1910] ext4 filesystem being mounted at /18/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   68.671786][ T1301] EXT4-fs (loop7): unmounting filesystem.
[   68.772654][  T830] usb 4-1: new full-speed USB device number 10 using dummy_hcd
[   68.803601][   T40] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[   68.814635][   T40] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64
[   68.825464][   T40] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 64
[   68.836335][   T40] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64
[   68.848345][   T40] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   68.857855][   T40] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   68.865852][   T40] usb 3-1: Product: syz
[   68.870004][   T40] usb 3-1: Manufacturer: syz
[   68.874618][   T40] usb 3-1: SerialNumber: syz
[   68.880307][ T1892] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[   68.888226][   T40] cdc_mbim 3-1:1.0: skipping garbage
[   68.973563][  T830] usb 4-1: config 7 has an invalid interface number: 63 but max is 0
[   68.981710][  T830] usb 4-1: config 7 has no interface number 0
[   68.987833][  T830] usb 4-1: config 7 interface 63 has no altsetting 0
[   68.995518][  T830] usb 4-1: New USB device found, idVendor=17cc, idProduct=1000, bcdDevice=96.ea
[   69.004567][  T830] usb 4-1: New USB device strings: Mfr=0, Product=237, SerialNumber=3
[   69.012767][  T830] usb 4-1: Product: syz
[   69.016924][  T830] usb 4-1: SerialNumber: syz
[   69.088245][ T1892] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[   69.096121][ T1892] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[   69.226296][  T830] snd-usb-audio: probe of 4-1:7.63 failed with error -71
[   69.234023][  T830] usb 4-1: USB disconnect, device number 10
[   69.498304][ T1937] loop9: detected capacity change from 0 to 512
[   69.513839][ T1937] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback.
[   69.522855][ T1937] ext4 filesystem being mounted at /14/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   69.584945][ T1956] loop7: detected capacity change from 0 to 1024
[   69.608884][ T1959] device batadv_slave_0 entered promiscuous mode
[   69.629176][ T1956] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none.
[   69.704829][ T1892] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[   69.712110][ T1892] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[   69.719509][   T40] cdc_mbim 3-1:1.0: dwNtbInMaxSize=8 is too small. Using 2048
[   69.747706][   T40] cdc_mbim 3-1:1.0: setting rx_max = 2048
[   69.981283][ T1968] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   69.997982][ T1968] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   70.068691][ T1967] loop3: detected capacity change from 0 to 40427
[   70.091643][   T40] cdc_mbim 3-1:1.0: cdc-wdm0: USB WDM device
[   70.098950][ T1967] F2FS-fs (loop3): Unrecognized mount option "0x0000000000000016" or missing value
[   70.111141][   T40] cdc_mbim 3-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.2-1, CDC MBIM, 2a:c2:4f:47:bf:c7
[   70.127728][   T40] usb 3-1: USB disconnect, device number 9
[   70.141420][   T40] cdc_mbim 3-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.2-1, CDC MBIM
[   70.216233][   T28] audit: type=1400 audit(2000000008.770:1502): avc:  denied  { read } for  pid=142 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1
[   70.263174][ T1977] loop3: detected capacity change from 0 to 16
[   70.273915][ T1977] erofs: (device loop3): mounted with root inode @ nid 36.
[   70.290071][ T1979] tipc: Enabling of bearer <eth:wlan0> rejected, failed to enable media
[   70.326851][ T1723] EXT4-fs (loop9): unmounting filesystem.
[   70.371109][ T1941] device batadv_slave_0 left promiscuous mode
[   70.415834][ T1986] loop8: detected capacity change from 0 to 512
[   70.425751][ T1986] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode
[   70.440412][ T1986] EXT4-fs warning (device loop8): ext4_multi_mount_protect:298: Invalid MMP block in superblock
[   70.440425][ T1301] EXT4-fs (loop7): unmounting filesystem.
[   70.467675][   T28] audit: type=1400 audit(2000000009.020:1503): avc:  denied  { bind } for  pid=1987 comm="syz.9.435" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   70.488945][ T1991] netlink: 48 bytes leftover after parsing attributes in process `syz.9.435'.
[   70.504102][ T1986] loop8: detected capacity change from 0 to 512
[   70.514402][ T1986] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback.
[   70.523438][ T1986] ext4 filesystem being mounted at /13/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   70.534527][ T1986] EXT4-fs (loop8): unmounting filesystem.
[   70.730535][ T2001] netlink: 'syz.2.439': attribute type 5 has an invalid length.
[   70.762571][   T19] usb 8-1: new full-speed USB device number 10 using dummy_hcd
[   70.892020][ T2004] syz.2.440 (2004) used greatest stack depth: 18984 bytes left
[   70.922632][   T19] usb 8-1: device descriptor read/64, error -71
[   70.969518][ T2011] 9pnet_fd: Insufficient options for proto=fd
[   71.012806][  T324] af_packet: tpacket_rcv: packet too big, clamped from 196 to 4294967272. macoff=96
[   71.202569][   T19] usb 8-1: device descriptor read/64, error -71
[   71.253154][ T2031] netlink: 8 bytes leftover after parsing attributes in process `syz.8.449'.
[   71.262703][   T60] usb 3-1: new full-speed USB device number 10 using dummy_hcd
[   71.353891][ T2044] loop9: detected capacity change from 0 to 1024
[   71.361634][ T2044] EXT4-fs (loop9): warning: mounting unchecked fs, running e2fsck is recommended
[   71.376009][ T2044] EXT4-fs (loop9): Errors on filesystem, clearing orphan list.
[   71.383799][ T2044] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback.
[   71.397266][ T2044] EXT4-fs warning (device loop9): empty_inline_dir:1892: bad inline directory (dir #12) - no `..'
[   71.413391][ T1723] EXT4-fs warning (device loop9): empty_inline_dir:1892: bad inline directory (dir #12) - no `..'
[   71.424248][ T1723] EXT4-fs warning (device loop9): empty_inline_dir:1892: bad inline directory (dir #12) - no `..'
[   71.435150][ T1723] EXT4-fs warning (device loop9): empty_inline_dir:1892: bad inline directory (dir #12) - no `..'
[   71.445873][ T1723] EXT4-fs warning (device loop9): empty_inline_dir:1892: bad inline directory (dir #12) - no `..'
[   71.457010][ T1723] EXT4-fs warning (device loop9): empty_inline_dir:1892: bad inline directory (dir #12) - no `..'
[   71.467704][    T6] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[   71.475334][   T19] usb 8-1: new full-speed USB device number 11 using dummy_hcd
[   71.475502][ T1723] EXT4-fs warning (device loop9): empty_inline_dir:1892: bad inline directory (dir #12) - no `..'
[   71.483534][   T60] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 1024, setting to 64
[   71.494008][ T1723] EXT4-fs warning (device loop9): empty_inline_dir:1892: bad inline directory (dir #12) - no `..'
[   71.506236][   T60] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   71.515204][ T1723] EXT4-fs warning (device loop9): empty_inline_dir:1892: bad inline directory (dir #12) - no `..'
[   71.524249][   T60] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   71.536451][ T1723] EXT4-fs warning (device loop9): empty_inline_dir:1892: bad inline directory (dir #12) - no `..'
[   71.542597][   T60] usb 3-1: Product: syz
[   71.557317][   T60] usb 3-1: Manufacturer: syz
[   71.561906][   T60] usb 3-1: SerialNumber: syz
[   71.569716][ T2014] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[   71.604663][ T1723] EXT4-fs (loop9): unmounting filesystem.
[   71.652662][   T19] usb 8-1: device descriptor read/64, error -71
[   71.683979][    T6] usb 4-1: unable to get BOS descriptor or descriptor too short
[   71.692418][    T6] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   71.702702][    T6] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[   71.713140][    T6] usb 4-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40
[   71.722207][    T6] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   71.730291][    T6] usb 4-1: Product: syz
[   71.734497][    T6] usb 4-1: Manufacturer: syz
[   71.739107][    T6] usb 4-1: SerialNumber: syz
[   71.748943][    T6] usb 4-1: selecting invalid altsetting 1
[   71.754915][    T6] usb 4-1: unit 6 not found!
[   71.770483][ T2049] bridge0: port 1(bridge_slave_0) entered blocking state
[   71.777587][ T2049] bridge0: port 1(bridge_slave_0) entered disabled state
[   71.785209][ T2049] device bridge_slave_0 entered promiscuous mode
[   71.792681][ T2049] bridge0: port 2(bridge_slave_1) entered blocking state
[   71.792695][   T60] cdc_ether: probe of 3-1:1.0 failed with error -71
[   71.806430][   T60] usb 3-1: USB disconnect, device number 10
[   71.811737][ T2049] bridge0: port 2(bridge_slave_1) entered disabled state
[   71.819702][ T2049] device bridge_slave_1 entered promiscuous mode
[   71.862628][ T2049] bridge0: port 2(bridge_slave_1) entered blocking state
[   71.869685][ T2049] bridge0: port 2(bridge_slave_1) entered forwarding state
[   71.876988][ T2049] bridge0: port 1(bridge_slave_0) entered blocking state
[   71.884027][ T2049] bridge0: port 1(bridge_slave_0) entered forwarding state
[   71.908863][  T324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   71.916527][  T324] bridge0: port 1(bridge_slave_0) entered disabled state
[   71.922540][   T19] usb 8-1: device descriptor read/64, error -71
[   71.929908][  T324] bridge0: port 2(bridge_slave_1) entered disabled state
[   71.941522][  T324] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   71.949953][    T6] usb 4-1: 2:0: cannot get min/max values for control 1 (id 2)
[   71.952357][  T324] bridge0: port 1(bridge_slave_0) entered blocking state
[   71.959883][    T6] snd-usb-audio: probe of 4-1:1.0 failed with error -22
[   71.964570][  T324] bridge0: port 1(bridge_slave_0) entered forwarding state
[   71.982336][    T6] usb 4-1: USB disconnect, device number 11
[   71.986555][  T322] udevd[322]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   72.004455][  T308] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   72.012883][  T308] bridge0: port 2(bridge_slave_1) entered blocking state
[   72.020027][  T308] bridge0: port 2(bridge_slave_1) entered forwarding state
[   72.031642][  T308] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   72.040641][  T308] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   72.047619][   T19] usb usb8-port1: attempt power cycle
[   72.058455][  T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   72.071764][  T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   72.080020][  T308] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   72.087578][  T308] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   72.095636][ T2049] device veth0_vlan entered promiscuous mode
[   72.107465][  T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   72.116618][ T2049] device veth1_macvtap entered promiscuous mode
[   72.125713][  T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   72.135219][  T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   72.185085][ T2059] loop0: detected capacity change from 0 to 16
[   72.194588][ T2059] erofs: (device loop0): mounted with root inode @ nid 36.
[   72.204044][ T2059] erofs: (device loop0): z_erofs_readahead: readahead error at page 2 @ nid 89
[   72.213216][ T2059] erofs: (device loop0): z_erofs_do_map_blocks: invalid logical cluster 0 at nid 89
[   72.226284][ T2059] erofs: (device loop0): z_erofs_readahead: readahead error at page 0 @ nid 89
[   72.235579][ T2059] syz.0.460: attempt to access beyond end of device
[   72.235579][ T2059] loop0: rw=524288, sector=524296, nr_sectors = 8 limit=16
[   72.250688][ T2059] erofs: (device loop0): z_erofs_do_map_blocks: invalid logical cluster 0 at nid 89
[   72.260687][ T2059] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -5 in[4096, 0] out[3584]
[   72.271717][ T2060] erofs: (device loop0): z_erofs_do_map_blocks: invalid logical cluster 0 at nid 89
[   72.272236][ T2059] erofs: (device loop0): z_erofs_read_folio: failed to read, err [-117]
[   72.281152][ T2060] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -5 in[4096, 0] out[3584]
[   72.289904][  T318] device bridge_slave_1 left promiscuous mode
[   72.300494][ T2060] erofs: (device loop0): z_erofs_read_folio: failed to read, err [-117]
[   72.306637][  T318] bridge0: port 2(bridge_slave_1) entered disabled state
[   72.315370][ T2060] erofs: (device loop0): z_erofs_do_map_blocks: invalid logical cluster 0 at nid 89
[   72.331354][   T28] kauditd_printk_skb: 5 callbacks suppressed
[   72.331364][   T28] audit: type=1400 audit(2000000010.890:1509): avc:  denied  { write } for  pid=2053 comm="syz.8.459" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   72.333466][ T2060] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -5 in[4096, 0] out[3584]
[   72.367682][ T2059] erofs: (device loop0): z_erofs_do_map_blocks: invalid logical cluster 0 at nid 89
[   72.377271][ T2060] erofs: (device loop0): z_erofs_read_folio: failed to read, err [-117]
[   72.385915][ T2059] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -5 in[4096, 0] out[3584]
[   72.396909][ T2062] erofs: (device loop0): z_erofs_do_map_blocks: invalid logical cluster 0 at nid 89
[   72.406546][ T2059] erofs: (device loop0): z_erofs_read_folio: failed to read, err [-117]
[   72.415610][  T318] device bridge_slave_0 left promiscuous mode
[   72.423385][ T2066] ip_tables: iptables: counters copy to user failed while replacing table
[   72.433078][ T2062] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -5 in[4096, 0] out[3584]
[   72.443995][  T318] bridge0: port 1(bridge_slave_0) entered disabled state
[   72.452128][  T318] device veth1_macvtap left promiscuous mode
[   72.462563][   T19] usb 8-1: new full-speed USB device number 12 using dummy_hcd
[   72.470288][ T2060] erofs: (device loop0): z_erofs_do_map_blocks: invalid logical cluster 0 at nid 89
[   72.473587][  T318] device veth0_vlan left promiscuous mode
[   72.496828][ T2062] erofs: (device loop0): z_erofs_read_folio: failed to read, err [-117]
[   72.513572][   T19] usb 8-1: device descriptor read/8, error -71
[   72.518909][ T2060] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -5 in[4096, 0] out[3584]
[   72.530993][ T2059] erofs: (device loop0): z_erofs_do_map_blocks: invalid logical cluster 0 at nid 89
[   72.540995][ T2060] erofs: (device loop0): z_erofs_read_folio: failed to read, err [-117]
[   72.549403][ T2059] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -5 in[4096, 0] out[3584]
[   72.564208][ T2059] erofs: (device loop0): z_erofs_read_folio: failed to read, err [-117]
[   72.572991][ T2059] erofs: (device loop0): z_erofs_do_map_blocks: invalid logical cluster 0 at nid 89
[   72.582374][ T2082] xt_TPROXY: Can be used only with -p tcp or -p udp
[   72.582417][ T2059] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -5 in[4096, 0] out[3584]
[   72.601104][ T2076] overlayfs: failed to clone upperpath
[   72.607321][ T2059] erofs: (device loop0): z_erofs_read_folio: failed to read, err [-117]
[   72.607636][ T2070] erofs: (device loop0): z_erofs_do_map_blocks: invalid logical cluster 0 at nid 89
[   72.632606][ T2070] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -5 in[4096, 0] out[3584]
[   72.644436][ T2082] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   72.651699][ T2062] erofs: (device loop0): z_erofs_do_map_blocks: invalid logical cluster 0 at nid 89
[   72.665171][ T2070] erofs: (device loop0): z_erofs_read_folio: failed to read, err [-117]
[   72.665245][ T2062] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -5 in[4096, 0] out[3584]
[   72.674859][   T19] usb 8-1: device descriptor read/8, error -71
[   72.684704][ T2060] erofs: (device loop0): z_erofs_do_map_blocks: invalid logical cluster 0 at nid 89
[   72.700342][ T2062] erofs: (device loop0): z_erofs_read_folio: failed to read, err [-117]
[   72.700674][ T2082] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e842c018, mo2=0003]
[   72.708757][ T2060] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -5 in[4096, 0] out[3584]
[   72.717288][ T2082] System zones: 0-1, 3-12
[   72.728737][ T2060] erofs: (device loop0): z_erofs_read_folio: failed to read, err [-117]
[   72.732401][ T2067] erofs: (device loop0): z_erofs_do_map_blocks: invalid logical cluster 0 at nid 89
[   72.751018][ T2067] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -5 in[4096, 0] out[3584]
[   72.752114][ T2082] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[   72.765072][ T2070] erofs: (device loop0): z_erofs_do_map_blocks: invalid logical cluster 0 at nid 89
[   72.770918][ T2067] erofs: (device loop0): z_erofs_read_folio: failed to read, err [-117]
[   72.790218][ T2070] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -5 in[4096, 0] out[3584]
[   72.801004][ T2062] erofs: (device loop0): z_erofs_do_map_blocks: invalid logical cluster 0 at nid 89
[   72.813537][ T2082] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   72.828769][ T2070] erofs: (device loop0): z_erofs_read_folio: failed to read, err [-117]
[   72.837437][ T2062] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -5 in[4096, 0] out[3584]
[   72.852428][ T2070] erofs: (device loop0): z_erofs_do_map_blocks: invalid logical cluster 0 at nid 89
[   72.866661][ T2070] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -5 in[4096, 0] out[3584]
[   72.870638][ T2062] erofs: (device loop0): z_erofs_read_folio: failed to read, err [-117]
[   72.877565][ T2070] erofs: (device loop0): z_erofs_read_folio: failed to read, err [-117]
[   72.886244][ T2067] erofs: (device loop0): z_erofs_do_map_blocks: invalid logical cluster 0 at nid 89
[   72.903947][ T2067] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -5 in[4096, 0] out[3584]
[   72.914747][ T2067] erofs: (device loop0): z_erofs_read_folio: failed to read, err [-117]
[   72.923224][ T2070] erofs: (device loop0): z_erofs_do_map_blocks: invalid logical cluster 0 at nid 89
[   72.932675][ T2070] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -5 in[4096, 0] out[3584]
[   72.943706][ T2070] erofs: (device loop0): z_erofs_read_folio: failed to read, err [-117]
[   72.944503][ T2067] erofs: (device loop0): z_erofs_do_map_blocks: invalid logical cluster 0 at nid 89
[   72.961544][ T2067] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -5 in[4096, 0] out[3584]
[   72.972482][ T2067] erofs: (device loop0): z_erofs_read_folio: failed to read, err [-117]
[   72.974622][ T2062] erofs: (device loop0): z_erofs_do_map_blocks: invalid logical cluster 0 at nid 89
[   72.985685][   T19] usb 8-1: new full-speed USB device number 13 using dummy_hcd
[   72.991288][ T2062] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -5 in[4096, 0] out[3584]
[   73.008831][ T2062] erofs: (device loop0): z_erofs_read_folio: failed to read, err [-117]
[   73.009281][  T287] EXT4-fs (loop3): unmounting filesystem.
[   73.017616][ T2067] erofs: (device loop0): z_erofs_do_map_blocks: invalid logical cluster 0 at nid 89
[   73.032401][ T2067] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -5 in[4096, 0] out[3584]
[   73.047132][   T19] usb 8-1: device descriptor read/8, error -71
[   73.055043][ T2088] erofs: (device loop0): z_erofs_do_map_blocks: invalid logical cluster 0 at nid 89
[   73.062548][ T2067] erofs: (device loop0): z_erofs_read_folio: failed to read, err [-117]
[   73.064586][ T2088] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -5 in[4096, 0] out[3584]
[   73.083721][ T2088] erofs: (device loop0): z_erofs_read_folio: failed to read, err [-117]
[   73.092077][ T2088] erofs: (device loop0): z_erofs_do_map_blocks: invalid logical cluster 0 at nid 89
[   73.102316][ T2088] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -5 in[4096, 0] out[3584]
[   73.122548][ T2088] erofs: (device loop0): z_erofs_read_folio: failed to read, err [-117]
[   73.131024][ T2088] erofs: (device loop0): z_erofs_do_map_blocks: invalid logical cluster 0 at nid 89
[   73.151204][ T2088] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -5 in[4096, 0] out[3584]
[   73.152553][   T40] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[   73.165679][ T2088] erofs: (device loop0): z_erofs_read_folio: failed to read, err [-117]
[   73.178818][ T2088] erofs: (device loop0): z_erofs_do_map_blocks: invalid logical cluster 0 at nid 89
[   73.188426][ T2088] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -5 in[4096, 0] out[3584]
[   73.199238][ T2088] erofs: (device loop0): z_erofs_read_folio: failed to read, err [-117]
[   73.210727][   T19] usb 8-1: device descriptor read/8, error -71
[   73.238102][   T28] audit: type=1400 audit(2000000011.790:1510): avc:  denied  { watch_reads } for  pid=2092 comm="syz.3.468" path="/128/control" dev="tmpfs" ino=766 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[   73.261856][   T28] audit: type=1400 audit(2000000011.790:1511): avc:  denied  { mounton } for  pid=2092 comm="syz.3.468" path="/128/proc" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1
[   73.289828][   T28] audit: type=1400 audit(2000000011.840:1512): avc:  denied  { map } for  pid=2100 comm="syz.0.469" path="/dev/full" dev="devtmpfs" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:null_device_t tclass=chr_file permissive=1
[   73.333555][   T19] usb usb8-port1: unable to enumerate USB device
[   73.362583][   T40] usb 3-1: Using ep0 maxpacket: 16
[   73.370040][   T40] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   73.380364][   T40] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[   73.391499][   T40] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   73.396699][ T2105] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[   73.408533][   T40] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   73.419132][   T28] audit: type=1400 audit(2000000011.980:1513): avc:  denied  { append } for  pid=2104 comm="syz.0.470" name="pfkey" dev="proc" ino=4026532536 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1
[   73.428120][   T40] usb 3-1: Product: syz
[   73.481294][   T28] audit: type=1326 audit(2000000012.030:1514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2104 comm="syz.0.470" exe="/root/ci2-android-6-1/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f30b619fb19 code=0x0
[   73.505669][ T2109] netlink: 36 bytes leftover after parsing attributes in process `syz.7.472'.
[   73.515159][   T40] usb 3-1: Manufacturer: syz
[   73.519915][   T40] usb 3-1: SerialNumber: syz
[   73.581957][ T2114] set_capacity_and_notify: 1 callbacks suppressed
[   73.581974][ T2114] loop7: detected capacity change from 0 to 512
[   73.615547][ T2114] EXT4-fs (loop7): can't mount with journal_checksum, fs mounted w/o journal
[   74.298589][ T2124] netlink: 104 bytes leftover after parsing attributes in process `syz.8.476'.
[   74.298604][   T28] audit: type=1400 audit(2000000012.850:1515): avc:  denied  { nlmsg_read } for  pid=2123 comm="syz.8.476" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   74.344884][ T2126] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2126 comm=syz.8.477
[   74.449834][ T2133] loop7: detected capacity change from 0 to 512
[   74.460019][ T2135] loop0: detected capacity change from 0 to 256
[   74.496692][ T2135] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0xdd63664a, utbl_chksum : 0xe619d30d)
[   74.636717][ T2133] loop7: detected capacity change from 0 to 40427
[   74.649947][ T2133] F2FS-fs (loop7): Invalid SB checksum offset: 0
[   74.656566][ T2133] F2FS-fs (loop7): Can't find valid F2FS filesystem in 2th superblock
[   74.668328][ T2133] F2FS-fs (loop7): invalid crc value
[   74.691320][ T2133] F2FS-fs (loop7): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437)
[   74.722603][  T830] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   74.731924][ T2133] F2FS-fs (loop7): Try to recover 2th superblock, ret: 0
[   74.739981][ T2133] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5
[   74.903944][  T830] usb 1-1: unable to get BOS descriptor or descriptor too short
[   74.917737][  T830] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7
[   74.934392][  T830] usb 1-1: New USB device found, idVendor=1235, idProduct=8213, bcdDevice= 0.40
[   74.946699][  T830] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   74.955851][  T830] usb 1-1: Product: syz
[   74.960062][  T830] usb 1-1: Manufacturer: syz
[   74.964966][  T830] usb 1-1: SerialNumber: syz
[   75.147965][   T28] audit: type=1400 audit(2000000013.700:1516): avc:  denied  { create } for  pid=2153 comm="syz.7.482" name="dm0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[   75.168728][   T28] audit: type=1400 audit(2000000013.700:1517): avc:  denied  { unlink } for  pid=1301 comm="syz-executor" name="dm0" dev="tmpfs" ino=185 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[   75.171394][ T2156] netlink: 16 bytes leftover after parsing attributes in process `syz.7.483'.
[   75.206561][   T28] audit: type=1400 audit(2000000013.760:1518): avc:  denied  { getopt } for  pid=2155 comm="syz.7.483" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   75.592543][   T19] usb 8-1: new high-speed USB device number 14 using dummy_hcd
[   77.552089][   T40] usb 3-1: 0:2 : does not exist
[   77.555521][ T2176] loop2: detected capacity change from 0 to 256
[   77.566800][ T2176] exfat: Deprecated parameter 'utf8'
[   77.575810][ T2176] exfat: Deprecated parameter 'utf8'
[   77.585645][   T40] usb 3-1: 5:0: failed to get current value for ch 0 (-22)
[   78.562735][   T28] audit: type=1400 audit(2000000016.150:1519): avc:  denied  { create } for  pid=2177 comm="syz.0.488" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1
[   78.588446][  T830] usb 1-1: Focusrite Scarlett Gen 3 Mixer Driver enabled (pid=0x8213); report any issues to g@b4.vu
[   78.596400][   T19] usb 8-1: device descriptor read/all, error -71
[   78.600034][   T40] usb 3-1: USB disconnect, device number 11
[   78.611610][  T830] usb 1-1: Error initialising Scarlett Gen 3 Mixer Driver: -22
[   78.624677][  T830] snd-usb-audio: probe of 1-1:1.0 failed with error -22
[   78.634801][  T830] usb 1-1: USB disconnect, device number 2
[   78.635771][ T2176] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d)
[   78.695945][ T2198] loop3: detected capacity change from 0 to 512
[   78.753247][ T2198] EXT4-fs: Ignoring removed orlov option
[   78.770796][ T2179] loop0: detected capacity change from 0 to 512
[   78.781924][ T2198] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 not in group (block 48900)!
[   78.810870][ T2198] EXT4-fs (loop3): group descriptors corrupted!
[   78.823008][   T28] audit: type=1400 audit(2000000017.380:1520): avc:  denied  { mounton } for  pid=2175 comm="syz.2.489" path=2F3130332FE91F7189591E9233614B2F66696C6530 dev="loop2" ino=1048757 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   78.852948][ T1978] udevd[1978]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory
[   78.859342][ T2179] EXT4-fs (loop0): orphan cleanup on readonly fs
[   78.913204][ T2179] Quota error (device loop0): v2_read_file_info: Number of blocks too big for quota file size (2103296 > 6144).
[   78.923913][   T28] audit: type=1400 audit(2000000017.480:1521): avc:  denied  { name_bind } for  pid=2206 comm="syz.2.495" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1
[   78.925258][ T2179] EXT4-fs warning (device loop0): ext4_enable_quotas:7080: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[   78.960475][ T2179] EXT4-fs (loop0): Cannot turn on quotas: error -117
[   78.967740][ T2179] EXT4-fs error (device loop0): ext4_orphan_get:1410: comm syz.0.488: couldn't read orphan inode 26 (err -116)
[   78.979760][ T2179] EXT4-fs (loop0): Remounting filesystem read-only
[   78.986353][ T2179] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[   78.986949][   T28] audit: type=1400 audit(2000000017.510:1522): avc:  denied  { setattr } for  pid=2206 comm="syz.2.495" path="socket:[25372]" dev="sockfs" ino=25372 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   79.129905][ T2198] netlink: 12 bytes leftover after parsing attributes in process `syz.3.493'.
[   79.184383][ T2049] EXT4-fs (loop0): unmounting filesystem.
[   79.229009][ T2226] loop0: detected capacity change from 0 to 512
[   79.236841][ T2228] loop3: detected capacity change from 0 to 256
[   79.261777][ T2228] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0xda10bcab, utbl_chksum : 0xe619d30d)
[   79.275207][ T2226] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[   79.278085][   T28] audit: type=1400 audit(2000000017.830:1523): avc:  denied  { append } for  pid=2227 comm="syz.3.502" path="/131/file1/memory.events.local" dev="loop3" ino=1048758 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   79.345393][ T2226] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #16: comm syz.0.500: invalid indirect mapped block 32768 (level 2)
[   79.372362][ T2226] EXT4-fs (loop0): 1 orphan inode deleted
[   79.384015][ T2226] EXT4-fs (loop0): 1 truncate cleaned up
[   79.389734][ T2226] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[   79.402098][ T2224] loop7: detected capacity change from 0 to 40427
[   79.404350][ T2226] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters
[   79.418820][ T2224] F2FS-fs (loop7): Invalid SB checksum offset: 0
[   79.429367][ T2224] F2FS-fs (loop7): Can't find valid F2FS filesystem in 2th superblock
[   79.438355][ T2224] F2FS-fs (loop7): invalid crc value
[   79.438457][ T2049] EXT4-fs (loop0): unmounting filesystem.
[   79.458541][ T2224] F2FS-fs (loop7): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437)
[   79.480592][ T2224] F2FS-fs (loop7): Try to recover 2th superblock, ret: 0
[   79.487693][ T2224] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5
[   79.507773][ T1301] syz-executor: attempt to access beyond end of device
[   79.507773][ T1301] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[   79.565637][ T2247] ip6t_rpfilter: unknown options
[   79.577447][   T28] audit: type=1400 audit(2000000018.130:1524): avc:  denied  { read } for  pid=2254 comm="syz.7.508" dev="sockfs" ino=26302 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   79.577717][ T2255] 9pnet_fd: Insufficient options for proto=fd
[   79.633452][ T2259] loop7: detected capacity change from 0 to 512
[   79.642708][    T6] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[   79.655563][ T2259] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[   79.664539][ T2259] ext4 filesystem being mounted at /46/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   79.678212][ T2259] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters
[   79.695447][ T2259] EXT4-fs (loop7): Delayed block allocation failed for inode 16 at logical offset 5 with max blocks 29 with error 28
[   79.707755][ T2259] EXT4-fs (loop7): This should not happen!! Data will be lost
[   79.707755][ T2259] 
[   79.717672][ T2259] EXT4-fs (loop7): Total free blocks count 0
[   79.723838][ T2259] EXT4-fs (loop7): Free/Dirty block details
[   79.729799][ T2259] EXT4-fs (loop7): free_blocks=65281
[   79.735410][ T2259] EXT4-fs (loop7): dirty_blocks=29
[   79.740556][ T2259] EXT4-fs (loop7): Block reservation details
[   79.746589][ T2259] EXT4-fs (loop7): i_reserved_data_blocks=29
[   79.760240][ T1301] EXT4-fs (loop7): unmounting filesystem.
[   79.774228][ T2264] FAULT_INJECTION: forcing a failure.
[   79.774228][ T2264] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   79.787360][ T2264] CPU: 1 PID: 2264 Comm: syz.7.511 Not tainted syzkaller #0
[   79.794639][ T2264] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[   79.804678][ T2264] Call Trace:
[   79.807957][ T2264]  <TASK>
[   79.810878][ T2264]  __dump_stack+0x21/0x24
[   79.815190][ T2264]  dump_stack_lvl+0x110/0x170
[   79.819848][ T2264]  ? __cfi_dump_stack_lvl+0x8/0x8
[   79.822544][    T6] usb 4-1: Using ep0 maxpacket: 8
[   79.824870][ T2264]  ? _parse_integer+0x2a/0x40
[   79.824894][ T2264]  dump_stack+0x15/0x24
[   79.831858][    T6] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   79.834551][ T2264]  should_fail_ex+0x3bf/0x510
[   79.834573][ T2264]  should_fail+0xb/0x10
[   79.834587][ T2264]  should_fail_usercopy+0x1a/0x20
[   79.834602][ T2264]  _copy_from_user+0x1e/0xc0
[   79.834616][ T2264]  ___sys_sendmsg+0x1c3/0x360
[   79.839488][    T6] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 3
[   79.848804][ T2264]  ? __sys_sendmsg+0x290/0x290
[   79.848826][ T2264]  ? __kasan_check_write+0x14/0x20
[   79.848843][ T2264]  ? proc_fail_nth_write+0x180/0x200
[   79.848862][ T2264]  ? vfs_write+0xa51/0xd00
[   79.855525][    T6] usb 4-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40
[   79.857653][ T2264]  ? __fdget+0x19c/0x220
[   79.857677][ T2264]  __x64_sys_sendmsg+0x20d/0x2e0
[   79.862946][    T6] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   79.867240][ T2264]  ? __cfi___x64_sys_sendmsg+0x10/0x10
[   79.867264][ T2264]  ? fpregs_assert_state_consistent+0xb1/0xe0
[   79.867286][ T2264]  x64_sys_call+0x171/0x9a0
[   79.872032][    T6] usb 4-1: Product: syz
[   79.880841][ T2264]  do_syscall_64+0x4c/0xa0
[   79.880863][ T2264]  ? clear_bhb_loop+0x30/0x80
[   79.880881][ T2264]  ? clear_bhb_loop+0x30/0x80
[   79.880898][ T2264]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   79.880916][ T2264] RIP: 0033:0x7f1931b9fb19
[   79.886252][    T6] usb 4-1: Manufacturer: syz
[   79.890750][ T2264] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   79.890767][ T2264] RSP: 002b:00007f1932b09028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   79.896369][    T6] usb 4-1: SerialNumber: syz
[   79.900458][ T2264] RAX: ffffffffffffffda RBX: 00007f1931e25fa0 RCX: 00007f1931b9fb19
[   79.900474][ T2264] RDX: 0000000004020800 RSI: 00002000000005c0 RDI: 0000000000000003
[   79.910426][    T6] usb 4-1: rejected 1 configuration due to insufficient available bus power
[   79.913689][ T2264] RBP: 00007f1932b09090 R08: 0000000000000000 R09: 0000000000000000
[   79.913703][ T2264] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   79.913712][ T2264] R13: 00007f1931e26038 R14: 00007f1931e25fa0 R15: 00007ffec8097e78
[   79.913731][ T2264]  </TASK>
[   79.918931][    T6] usb 4-1: no configuration chosen from 1 choice
[   80.612345][   T28] audit: type=1400 audit(2000000019.160:1525): avc:  denied  { nlmsg_write } for  pid=2281 comm="syz.7.518" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1
[   80.691223][ T2287] netlink: 9 bytes leftover after parsing attributes in process `syz.7.520'.
[   80.717554][ T2287] device gretap0 entered promiscuous mode
[   80.820288][   T28] audit: type=1400 audit(2000000019.370:1526): avc:  denied  { getopt } for  pid=2305 comm="syz.8.529" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   80.848922][   T28] audit: type=1400 audit(2000000019.370:1527): avc:  denied  { mounton } for  pid=2305 comm="syz.8.529" path="/33/file0" dev="tmpfs" ino=206 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[   80.910281][ T2314] overlayfs: unrecognized mount option "xino=off:rootcontext=user_u" or missing value
[   80.979312][ T2310] netlink: 'syz.2.524': attribute type 16 has an invalid length.
[   80.987128][ T2310] netlink: 'syz.2.524': attribute type 17 has an invalid length.
[   81.012687][ T2310] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[   81.020073][ T2310] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[   81.027537][ T2310] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[   81.390540][ T2320] loop0: detected capacity change from 0 to 256
[   81.444464][  T320] Bluetooth: hci0: Frame reassembly failed (-84)
[   81.451267][  T320] Bluetooth: hci0: Frame reassembly failed (-84)
[   81.794673][ T2327] loop7: detected capacity change from 0 to 40427
[   81.811200][ T2327] F2FS-fs (loop7): invalid crc value
[   81.823201][ T2327] F2FS-fs (loop7): Found nat_bits in checkpoint
[   81.869503][ T2321] netlink: 20 bytes leftover after parsing attributes in process `syz.0.535'.
[   81.878476][ T2327] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5
[   81.893432][   T19] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   81.909427][   T19] hid-generic 0000:0000:0000.0002: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[   81.943814][ T2321] device team_slave_1 entered promiscuous mode
[   81.974866][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   81.980562][ T2338] fido_id[2338]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[   82.028503][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   82.174336][ T2362] netlink: 28 bytes leftover after parsing attributes in process `syz.2.544'.
[   82.183637][ T2363] netlink: 20 bytes leftover after parsing attributes in process `syz.2.544'.
[   82.192956][ T2363] netlink: 20 bytes leftover after parsing attributes in process `syz.2.544'.
[   82.204321][ T2363] loop2: detected capacity change from 0 to 512
[   82.223209][ T2363] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   82.237623][ T2363] EXT4-fs (loop2): can't mount with data_err=abort, fs mounted w/o journal
[   82.374826][  T304] usb 4-1: USB disconnect, device number 12
[   82.522552][   T40] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[   82.538345][ T2378] SELinux:  Context system_u:object_r:systemd_logger_exec_t:s0 is not valid (left unmapped).
[   82.552210][ T2379] mmap: syz.7.547 (2379): VmData 40960000 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data.
[   82.713674][   T40] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   82.726099][   T40] usb 3-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping
[   82.741249][   T40] usb 3-1: New USB device found, idVendor=2a39, idProduct=3fd4, bcdDevice= 0.40
[   82.751663][   T40] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   82.759728][   T40] usb 3-1: Product: syz
[   82.764196][   T40] usb 3-1: Manufacturer: syz
[   82.768859][   T40] usb 3-1: SerialNumber: syz
[   82.980594][   T40] usb 3-1: USB disconnect, device number 12
[   83.203583][ T1978] udevd[1978]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   83.409607][ T2398] x_tables: duplicate underflow at hook 3
[   83.483645][ T2404] loop7: detected capacity change from 0 to 512
[   83.492545][ T2325] Bluetooth: hci0: command 0x1003 tx timeout
[   83.498561][   T45] Bluetooth: hci0: Opcode 0x1003 failed: -110
[   83.537616][ T2404] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[   83.882534][   T19] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[   84.073630][   T19] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   84.088100][   T19] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[   84.106785][   T19] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0
[   84.128917][   T19] usb 3-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice= 0.40
[   84.158744][   T19] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   84.180311][   T19] usb 3-1: Product: syz
[   84.188000][ T2431] set_capacity_and_notify: 1 callbacks suppressed
[   84.188016][ T2431] loop7: detected capacity change from 0 to 1024
[   84.202536][   T19] usb 3-1: Manufacturer: syz
[   84.207140][   T19] usb 3-1: SerialNumber: syz
[   84.227511][   T28] kauditd_printk_skb: 33 callbacks suppressed
[   84.227525][   T28] audit: type=1400 audit(2000000000.740:1561): avc:  denied  { setopt } for  pid=2432 comm="syz.8.561" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   84.262798][ T2431] ext4: Unknown parameter 'subj_role'
[   84.293252][ T2439] ip_tables: iptables: counters copy to user failed while replacing table
[   84.293467][ T2440] ip_tables: iptables: counters copy to user failed while replacing table
[   84.456511][ T2444] loop7: detected capacity change from 0 to 1024
[   84.489256][ T2444] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   84.498163][ T2444] EXT4-fs (loop7): can't mount with journal_checksum, fs mounted w/o journal
[   84.901829][ T2452] loop0: detected capacity change from 0 to 4096
[   84.944066][ T2452] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[   85.015383][ T2452] EXT4-fs (loop0): Test dummy encryption mode enabled
[   85.026791][ T2452] EXT4-fs (loop0): can't mount with data=, fs mounted w/o journal
[   85.062676][  T361] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[   85.147105][ T2454] loop2: detected capacity change from 0 to 128
[   85.204853][   T28] audit: type=1400 audit(2000000001.720:1562): avc:  denied  { map } for  pid=2453 comm="syz.2.567" path="/115/file0" dev="loop2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1
[   85.264395][  T361] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   85.317918][  T361] usb 4-1: config 1 interface 0 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 768
[   85.336295][   T28] audit: type=1400 audit(2000000001.740:1563): avc:  denied  { execute } for  pid=2453 comm="syz.2.567" path="/115/file0" dev="loop2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1
[   85.344165][   T19] usb 3-1: 0:2 : does not exist
[   85.365205][  T361] usb 4-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 4
[   85.376147][   T19] usb 3-1: USB disconnect, device number 13
[   85.393328][  T361] usb 4-1: New USB device found, idVendor=7b4c, idProduct=0000, bcdDevice= 0.00
[   85.401919][   T28] audit: type=1400 audit(2000000001.910:1564): avc:  denied  { ioctl } for  pid=2462 comm="syz.2.569" path="/117/my_tracefs/events/task/task_rename/filter" dev="tracefs" ino=2344 ioctlcmd=0x587b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1
[   85.402480][  T361] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=35
[   85.437899][  T361] usb 4-1: SerialNumber: syz
[   85.486935][  T361] usb-storage 4-1:1.0: USB Mass Storage device detected
[   85.497968][  T361] scsi host1: usb-storage 4-1:1.0
[   85.540479][ T2475] loop2: detected capacity change from 0 to 16
[   85.551110][ T2475] erofs: (device loop2): mounted with root inode @ nid 36.
[   85.590779][ T2493] netlink: 80 bytes leftover after parsing attributes in process `syz.7.573'.
[   85.615824][ T2495] loop7: detected capacity change from 0 to 512
[   85.642971][ T2499] loop7: detected capacity change from 0 to 1024
[   85.652119][ T2499] EXT4-fs: Mount option(s) incompatible with ext2
[   85.701210][ T2046] usb 4-1: USB disconnect, device number 13
[   85.716499][ T2503] loop0: detected capacity change from 0 to 2048
[   85.768532][ T2503]  loop0: unable to read partition table
[   85.774380][ T2503] loop0: partition table beyond EOD, truncated
[   85.780564][ T2503] loop_reread_partitions: partition scan of loop0 () failed (rc=-5)
[   85.807150][  T103]  loop0: unable to read partition table
[   85.813000][  T103] loop0: partition table beyond EOD, truncated
[   85.822453][   T28] audit: type=1400 audit(2000000002.330:1565): avc:  denied  { mounton } for  pid=2502 comm="syz.0.577" path="/proc/63/task" dev="proc" ino=27769 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1
[   86.122550][    T6] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[   86.313793][    T6] usb 1-1: config 1 interface 0 altsetting 92 bulk endpoint 0x81 has invalid maxpacket 64
[   86.332529][    T6] usb 1-1: config 1 interface 0 altsetting 92 bulk endpoint 0x2 has invalid maxpacket 64
[   86.342359][    T6] usb 1-1: config 1 interface 0 altsetting 92 endpoint 0x83 has an invalid bInterval 0, changing to 7
[   86.373008][    T6] usb 1-1: config 1 interface 0 has no altsetting 0
[   86.393511][    T6] usb 1-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice=dc.00
[   86.412543][    T6] usb 1-1: New USB device strings: Mfr=67, Product=90, SerialNumber=92
[   86.420786][    T6] usb 1-1: Product: syz
[   86.432537][    T6] usb 1-1: Manufacturer: syz
[   86.437119][    T6] usb 1-1: SerialNumber: syz
[   86.453265][ T2516] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[   86.460585][ T2516] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[   86.468444][    T6] pl2303 1-1:1.0: pl2303 converter detected
[   86.482573][    T6] pl2303 1-1:1.0: unknown device type, please report to linux-usb@vger.kernel.org
[   86.671434][   T40] usb 1-1: USB disconnect, device number 3
[   87.064915][   T28] audit: type=1326 audit(2000000003.580:1566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2528 comm="syz.3.584" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0893d9fb19 code=0x7ffc0000
[   87.089737][   T28] audit: type=1326 audit(2000000003.580:1567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2528 comm="syz.3.584" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0893d9fb19 code=0x7ffc0000
[   87.114590][   T28] audit: type=1326 audit(2000000003.580:1568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2528 comm="syz.3.584" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0893d9fb19 code=0x7ffc0000
[   87.139482][   T28] audit: type=1326 audit(2000000003.580:1569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2528 comm="syz.3.584" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0893d9fb19 code=0x7ffc0000
[   87.164214][   T28] audit: type=1326 audit(2000000003.580:1570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2528 comm="syz.3.584" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f0893d9fb19 code=0x7ffc0000
[   87.192561][   T19] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[   87.208789][ T2533] loop0: detected capacity change from 0 to 512
[   87.233896][ T2533] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[   87.243202][ T2533] ext4 filesystem being mounted at /19/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   87.254892][ T2533] EXT4-fs error (device loop0): ext4_lookup:1858: inode #12: comm syz.0.586: iget: bad i_size value: 2533274857506816
[   87.277747][ T2533] netlink: 8 bytes leftover after parsing attributes in process `syz.0.586'.
[   87.286664][ T2533] netlink: 40 bytes leftover after parsing attributes in process `syz.0.586'.
[   87.304611][ T2049] EXT4-fs (loop0): unmounting filesystem.
[   87.383804][   T19] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   87.405680][   T19] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0
[   87.427057][   T19] usb 3-1: New USB device found, idVendor=0552, idProduct=5510, bcdDevice= 0.00
[   87.436236][   T19] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[   87.444567][   T19] usb 3-1: Product: syz
[   87.448867][   T19] usb 3-1: Manufacturer: syz
[   87.666951][ T2568] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   87.689416][ T2568] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   87.715799][   T40] usb 3-1: USB disconnect, device number 14
[   87.803926][ T2570] netlink: 12 bytes leftover after parsing attributes in process `syz.8.595'.
[   87.933004][ T2574] netlink: 12 bytes leftover after parsing attributes in process `syz.3.597'.
[   88.064055][ T2574] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2574 comm=syz.3.597
[   88.235829][ T2583] loop2: detected capacity change from 0 to 256
[   88.342758][ T2583] EXT4-fs (loop2): Test dummy encryption mode enabled
[   88.362532][   T40] usb 4-1: new full-speed USB device number 14 using dummy_hcd
[   88.393626][ T2583] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: comm syz.2.598: inode #1: comm syz.2.598: iget: illegal inode #
[   88.412796][ T2583] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.598: error while reading EA inode 1 err=-117
[   88.438278][ T2583] EXT4-fs (loop2): 1 orphan inode deleted
[   88.455211][ T2583] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[   88.538314][ T2591] EXT4-fs: Invalid want_extra_isize 123
[   88.566696][   T40] usb 4-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config
[   88.583076][   T40] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[   88.592043][   T40] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 52, changing to 4
[   88.632733][   T40] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 13368, setting to 1023
[   88.702980][  T322] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[   88.715775][ T2593] EXT4-fs (loop2): unmounting filesystem.
[   88.737256][ T2593] ip_tables: iptables: counters copy to user failed while replacing table
[   88.826940][   T40] usb 4-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice= 0.40
[   88.841616][   T40] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   88.862521][   T40] usb 4-1: Product: syz
[   88.866698][   T40] usb 4-1: Manufacturer: syz
[   88.871283][   T40] usb 4-1: SerialNumber: syz
[   89.013973][ T2602] device gretap1 entered promiscuous mode
[   89.079311][ T2607] netlink: 12 bytes leftover after parsing attributes in process `syz.8.606'.
[   89.089767][   T40] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found
[   89.103123][   T40] usb 4-1: 0:2 : does not exist
[   89.114507][   T40] usb 4-1: USB disconnect, device number 14
[   89.155488][ T2609] tipc: Failed to remove unknown binding: 66,0,2/0:2806499704/2806499705
[   89.341884][ T2611] FAULT_INJECTION: forcing a failure.
[   89.341884][ T2611] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   89.355036][ T2611] CPU: 0 PID: 2611 Comm: syz.7.608 Not tainted syzkaller #0
[   89.362322][ T2611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[   89.372374][ T2611] Call Trace:
[   89.375663][ T2611]  <TASK>
[   89.378588][ T2611]  __dump_stack+0x21/0x24
[   89.382919][ T2611]  dump_stack_lvl+0x110/0x170
[   89.387591][ T2611]  ? __cfi_dump_stack_lvl+0x8/0x8
[   89.392617][ T2611]  ? _parse_integer+0x2a/0x40
[   89.397293][ T2611]  dump_stack+0x15/0x24
[   89.401442][ T2611]  should_fail_ex+0x3bf/0x510
[   89.406120][ T2611]  should_fail+0xb/0x10
[   89.410275][ T2611]  should_fail_usercopy+0x1a/0x20
[   89.415300][ T2611]  _copy_from_user+0x1e/0xc0
[   89.419886][ T2611]  ___sys_sendmsg+0x1c3/0x360
[   89.424569][ T2611]  ? __sys_sendmsg+0x290/0x290
[   89.429328][ T2611]  ? __kasan_check_write+0x14/0x20
[   89.434443][ T2611]  ? proc_fail_nth_write+0x180/0x200
[   89.439733][ T2611]  ? vfs_write+0xa51/0xd00
[   89.444148][ T2611]  ? __fdget+0x19c/0x220
[   89.448389][ T2611]  __x64_sys_sendmsg+0x20d/0x2e0
[   89.453325][ T2611]  ? __cfi___x64_sys_sendmsg+0x10/0x10
[   89.458788][ T2611]  ? fpregs_assert_state_consistent+0xb1/0xe0
[   89.464855][ T2611]  x64_sys_call+0x171/0x9a0
[   89.469367][ T2611]  do_syscall_64+0x4c/0xa0
[   89.473784][ T2611]  ? clear_bhb_loop+0x30/0x80
[   89.478460][ T2611]  ? clear_bhb_loop+0x30/0x80
[   89.483137][ T2611]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   89.489029][ T2611] RIP: 0033:0x7f1931b9fb19
[   89.493439][ T2611] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   89.513042][ T2611] RSP: 002b:00007f1932b09028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   89.521454][ T2611] RAX: ffffffffffffffda RBX: 00007f1931e25fa0 RCX: 00007f1931b9fb19
[   89.529423][ T2611] RDX: 0000000004020800 RSI: 00002000000005c0 RDI: 0000000000000003
[   89.537391][ T2611] RBP: 00007f1932b09090 R08: 0000000000000000 R09: 0000000000000000
[   89.545364][ T2611] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   89.553329][ T2611] R13: 00007f1931e26038 R14: 00007f1931e25fa0 R15: 00007ffec8097e78
[   89.561305][ T2611]  </TASK>
[   89.587888][ T2613] netlink: 20 bytes leftover after parsing attributes in process `syz.2.609'.
[   89.619255][   T28] kauditd_printk_skb: 565 callbacks suppressed
[   89.619269][   T28] audit: type=1400 audit(2000000006.130:2136): avc:  denied  { sys_module } for  pid=2618 comm="syz.7.612" capability=16  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[   89.706796][   T28] audit: type=1400 audit(2000000006.220:2137): avc:  denied  { ioctl } for  pid=2625 comm="syz.7.614" path="socket:[27142]" dev="sockfs" ino=27142 ioctlcmd=0x5826 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   89.738952][ T2629] veth0_to_hsr: vlans aren't supported yet for dev_uc|mc_add()
[   89.751105][   T28] audit: type=1400 audit(2000000006.270:2138): avc:  denied  { execute } for  pid=2624 comm="syz.8.615" dev="tmpfs" ino=1506 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[   89.774754][   T28] audit: type=1400 audit(2000000006.270:2139): avc:  denied  { execute_no_trans } for  pid=2624 comm="syz.8.615" path=2F6D656D66643A5B0BDB58AE5B35A990FF631F1AA9FDFAADD16D64E7E27F9BD55210F3B6FF54BFD1C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=1506 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[   89.808152][ T2631] xt_hashlimit: max too large, truncated to 1048576
[   90.025690][ T2643] FAULT_INJECTION: forcing a failure.
[   90.025690][ T2643] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   90.047458][ T2643] CPU: 1 PID: 2643 Comm: syz.3.621 Not tainted syzkaller #0
[   90.054762][ T2643] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[   90.064822][ T2643] Call Trace:
[   90.068098][ T2643]  <TASK>
[   90.071026][ T2643]  __dump_stack+0x21/0x24
[   90.075355][ T2643]  dump_stack_lvl+0x110/0x170
[   90.080033][ T2643]  ? __cfi_dump_stack_lvl+0x8/0x8
[   90.085058][ T2643]  dump_stack+0x15/0x24
[   90.089210][ T2643]  should_fail_ex+0x3bf/0x510
[   90.093891][ T2643]  should_fail+0xb/0x10
[   90.098034][ T2643]  should_fail_usercopy+0x1a/0x20
[   90.103042][ T2643]  _copy_from_user+0x1e/0xc0
[   90.107613][ T2643]  iovec_from_user+0x1aa/0x2e0
[   90.112359][ T2643]  __import_iovec+0x6d/0x460
[   90.116927][ T2643]  ? kstrtoull+0x137/0x1d0
[   90.121325][ T2643]  import_iovec+0x7c/0xb0
[   90.125633][ T2643]  ___sys_sendmsg+0x252/0x360
[   90.130291][ T2643]  ? __sys_sendmsg+0x290/0x290
[   90.135035][ T2643]  ? __kasan_check_write+0x14/0x20
[   90.140127][ T2643]  ? proc_fail_nth_write+0x180/0x200
[   90.145398][ T2643]  ? vfs_write+0xa51/0xd00
[   90.149804][ T2643]  ? __fdget+0x19c/0x220
[   90.154028][ T2643]  __x64_sys_sendmsg+0x20d/0x2e0
[   90.158946][ T2643]  ? __cfi___x64_sys_sendmsg+0x10/0x10
[   90.164389][ T2643]  ? fpregs_assert_state_consistent+0xb1/0xe0
[   90.170447][ T2643]  x64_sys_call+0x171/0x9a0
[   90.174933][ T2643]  do_syscall_64+0x4c/0xa0
[   90.179332][ T2643]  ? clear_bhb_loop+0x30/0x80
[   90.184082][ T2643]  ? clear_bhb_loop+0x30/0x80
[   90.188739][ T2643]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   90.194613][ T2643] RIP: 0033:0x7f0893d9fb19
[   90.199012][ T2643] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   90.218602][ T2643] RSP: 002b:00007f0894cd1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   90.226998][ T2643] RAX: ffffffffffffffda RBX: 00007f0894025fa0 RCX: 00007f0893d9fb19
[   90.234949][ T2643] RDX: 0000000004020800 RSI: 00002000000005c0 RDI: 0000000000000003
[   90.242900][ T2643] RBP: 00007f0894cd1090 R08: 0000000000000000 R09: 0000000000000000
[   90.250852][ T2643] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   90.258803][ T2643] R13: 00007f0894026038 R14: 00007f0894025fa0 R15: 00007fff0d71c418
[   90.266761][ T2643]  </TASK>
[   90.486924][ T2656] set_capacity_and_notify: 2 callbacks suppressed
[   90.486940][ T2656] loop3: detected capacity change from 0 to 4096
[   90.529290][ T2656] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[   90.567191][ T2656] overlayfs: "xino" feature enabled using 3 upper inode bits.
[   90.607038][ T2656] overlayfs: "xino" feature enabled using 3 upper inode bits.
[   90.736101][ T2673] netlink: 80 bytes leftover after parsing attributes in process `syz.8.627'.
[   90.783972][ T2678] FAULT_INJECTION: forcing a failure.
[   90.783972][ T2678] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[   90.821735][ T2678] CPU: 1 PID: 2678 Comm: syz.7.629 Not tainted syzkaller #0
[   90.829051][ T2678] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[   90.839107][ T2678] Call Trace:
[   90.842378][ T2678]  <TASK>
[   90.845307][ T2678]  __dump_stack+0x21/0x24
[   90.849641][ T2678]  dump_stack_lvl+0x110/0x170
[   90.854320][ T2678]  ? __cfi_dump_stack_lvl+0x8/0x8
[   90.859350][ T2678]  dump_stack+0x15/0x24
[   90.863500][ T2678]  should_fail_ex+0x3bf/0x510
[   90.868180][ T2678]  should_fail_alloc_page+0x61/0x90
[   90.873389][ T2678]  prepare_alloc_pages+0x131/0x570
[   90.878513][ T2678]  ? __alloc_pages_bulk+0x9d0/0x9d0
[   90.883717][ T2678]  ? kasan_save_alloc_info+0x1f/0x30
[   90.889004][ T2678]  ? kmalloc_trace+0x40/0xb0
[   90.893591][ T2678]  ? io_ring_ctx_alloc+0x54/0xb00
[   90.898617][ T2678]  ? io_uring_create+0x29a/0xde1
[   90.903553][ T2678]  __alloc_pages+0x15b/0x610
[   90.908148][ T2678]  ? __cfi___alloc_pages+0x10/0x10
[   90.913267][ T2678]  ? __this_cpu_preempt_check+0x13/0x20
[   90.918821][ T2678]  ? __mod_node_page_state+0x9e/0xd0
[   90.924112][ T2678]  __kmalloc_large_node+0xa1/0x1c0
[   90.929232][ T2678]  ? io_alloc_hash_table+0x34/0xc0
[   90.934343][ T2678]  __kmalloc+0xe3/0x1e0
[   90.938499][ T2678]  io_alloc_hash_table+0x34/0xc0
[   90.943437][ T2678]  io_ring_ctx_alloc+0xf8/0xb00
[   90.948289][ T2678]  io_uring_create+0x29a/0xde1
[   90.953054][ T2678]  __x64_sys_io_uring_setup+0x21b/0x230
[   90.958604][ T2678]  ? __cfi___x64_sys_io_uring_setup+0x10/0x10
[   90.964676][ T2678]  ? __kasan_check_write+0x14/0x20
[   90.969792][ T2678]  ? fpregs_restore_userregs+0x128/0x260
[   90.975430][ T2678]  ? switch_fpu_return+0xe/0x10
[   90.980282][ T2678]  x64_sys_call+0x4ab/0x9a0
[   90.984783][ T2678]  do_syscall_64+0x4c/0xa0
[   90.989199][ T2678]  ? clear_bhb_loop+0x30/0x80
[   90.993880][ T2678]  ? clear_bhb_loop+0x30/0x80
[   90.998561][ T2678]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   91.004458][ T2678] RIP: 0033:0x7f1931b9fb19
[   91.008869][ T2678] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   91.025630][   T28] audit: type=1400 audit(2000000007.540:2140): avc:  denied  { getopt } for  pid=2685 comm="syz.2.632" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   91.028468][ T2678] RSP: 002b:00007f1932b08fb8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9
[   91.056895][ T2678] RAX: ffffffffffffffda RBX: 0000200000000600 RCX: 00007f1931b9fb19
[   91.064862][ T2678] RDX: 0000200000000380 RSI: 0000200000000600 RDI: 000000000000098b
[   91.072835][ T2678] RBP: 00007f1931c37b70 R08: 0000000000000000 R09: 0000000000000000
[   91.080801][ T2678] R10: 00002000000003c0 R11: 0000000000000206 R12: 0000200000000380
[   91.088766][ T2678] R13: 00002000000003c0 R14: 0000200000000340 R15: 00007ffec8097e78
[   91.096740][ T2678]  </TASK>
[   91.184033][ T2696] FAULT_INJECTION: forcing a failure.
[   91.184033][ T2696] name failslab, interval 1, probability 0, space 0, times 0
[   91.209610][ T2696] CPU: 0 PID: 2696 Comm: syz.7.635 Not tainted syzkaller #0
[   91.216912][ T2696] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[   91.226967][ T2696] Call Trace:
[   91.230245][ T2696]  <TASK>
[   91.233173][ T2696]  __dump_stack+0x21/0x24
[   91.237519][ T2696]  dump_stack_lvl+0x110/0x170
[   91.242206][ T2696]  ? __cfi_dump_stack_lvl+0x8/0x8
[   91.247231][ T2696]  ? release_sock+0x169/0x1c0
[   91.251912][ T2696]  dump_stack+0x15/0x24
[   91.256066][ T2696]  should_fail_ex+0x3bf/0x510
[   91.260747][ T2696]  __should_failslab+0xac/0xf0
[   91.265515][ T2696]  should_failslab+0x9/0x20
[   91.270034][ T2696]  kmem_cache_alloc_node+0x42/0x330
[   91.275241][ T2696]  ? __alloc_skb+0xe8/0x4a0
[   91.279751][ T2696]  __alloc_skb+0xe8/0x4a0
[   91.284083][ T2696]  netlink_sendmsg+0x635/0xbd0
[   91.288854][ T2696]  ? __cfi_netlink_sendmsg+0x10/0x10
[   91.294145][ T2696]  ? security_socket_sendmsg+0x93/0xb0
[   91.299612][ T2696]  ? __cfi_netlink_sendmsg+0x10/0x10
[   91.304899][ T2696]  ____sys_sendmsg+0x5fb/0x9c0
[   91.309664][ T2696]  ? __sys_sendmsg_sock+0x40/0x40
[   91.314687][ T2696]  ? import_iovec+0x7c/0xb0
[   91.319199][ T2696]  ___sys_sendmsg+0x2a2/0x360
[   91.323874][ T2696]  ? __sys_sendmsg+0x290/0x290
[   91.328645][ T2696]  ? __kasan_check_write+0x14/0x20
[   91.333759][ T2696]  ? proc_fail_nth_write+0x180/0x200
[   91.339050][ T2696]  ? vfs_write+0xa51/0xd00
[   91.343467][ T2696]  ? __fdget+0x19c/0x220
[   91.347710][ T2696]  __x64_sys_sendmsg+0x20d/0x2e0
[   91.352648][ T2696]  ? __cfi___x64_sys_sendmsg+0x10/0x10
[   91.358107][ T2696]  ? fpregs_assert_state_consistent+0xb1/0xe0
[   91.364184][ T2696]  x64_sys_call+0x171/0x9a0
[   91.368679][ T2696]  do_syscall_64+0x4c/0xa0
[   91.373077][ T2696]  ? clear_bhb_loop+0x30/0x80
[   91.377738][ T2696]  ? clear_bhb_loop+0x30/0x80
[   91.382396][ T2696]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   91.388270][ T2696] RIP: 0033:0x7f1931b9fb19
[   91.392666][ T2696] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   91.412257][ T2696] RSP: 002b:00007f1932b09028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   91.420653][ T2696] RAX: ffffffffffffffda RBX: 00007f1931e25fa0 RCX: 00007f1931b9fb19
[   91.428606][ T2696] RDX: 0000000004020800 RSI: 00002000000005c0 RDI: 0000000000000003
[   91.436556][ T2696] RBP: 00007f1932b09090 R08: 0000000000000000 R09: 0000000000000000
[   91.444505][ T2696] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   91.452455][ T2696] R13: 00007f1931e26038 R14: 00007f1931e25fa0 R15: 00007ffec8097e78
[   91.460410][ T2696]  </TASK>
[   91.585319][ T2707] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=44288 sclass=netlink_route_socket pid=2707 comm=syz.7.637
[   91.815247][ T2715] netlink: 'syz.2.641': attribute type 3 has an invalid length.
[   91.836031][ T2715] netlink: 'syz.2.641': attribute type 3 has an invalid length.
[   91.852456][ T2716] netlink: 'syz.2.641': attribute type 3 has an invalid length.
[   91.875499][ T2716] netlink: 'syz.2.641': attribute type 3 has an invalid length.
[   92.061528][   T40] kernel read not supported for file bpf-prog (pid: 40 comm: kworker/1:1)
[   92.203589][ T2723] fuse: Bad value for 'fd'
[   92.391942][  T287] EXT4-fs (loop3): unmounting filesystem.
[   92.721958][ T2741] fuse: Bad value for 'fd'
[   92.762686][ T2745] loop3: detected capacity change from 0 to 512
[   92.872550][   T40] usb 8-1: new high-speed USB device number 16 using dummy_hcd
[   92.968396][ T2750] xt_hashlimit: size too large, truncated to 1048576
[   93.062534][   T40] usb 8-1: Using ep0 maxpacket: 16
[   93.069445][   T40] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 175, changing to 7
[   93.094055][   T40] usb 8-1: New USB device found, idVendor=0499, idProduct=2000, bcdDevice= 0.40
[   93.121865][   T40] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   93.145757][   T40] usb 8-1: Product: syz
[   93.157872][   T40] usb 8-1: Manufacturer: syz
[   93.168745][   T40] usb 8-1: SerialNumber: syz
[   93.328879][   T28] audit: type=1326 audit(2000000009.840:2141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2770 comm="syz.2.654" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f164af9fb19 code=0x7ffc0000
[   93.390642][   T28] audit: type=1326 audit(2000000009.840:2142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2770 comm="syz.2.654" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f164af9fb19 code=0x7ffc0000
[   93.451628][ T2778] netlink: 96 bytes leftover after parsing attributes in process `syz.7.646'.
[   93.480313][   T28] audit: type=1326 audit(2000000009.840:2143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2770 comm="syz.2.654" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f164af9fb19 code=0x7ffc0000
[   93.491846][ T2778] 8021q: VLANs not supported on sit0
[   93.507432][   T28] audit: type=1326 audit(2000000009.840:2144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2770 comm="syz.2.654" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f164af6034e code=0x7ffc0000
[   93.551567][   T28] audit: type=1326 audit(2000000009.840:2145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2770 comm="syz.2.654" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f164af9fb19 code=0x7ffc0000
[   96.571314][   T40] snd-usb-audio: probe of 8-1:1.0 failed with error -2
[   96.582919][   T40] snd-usb-audio: probe of 8-1:1.1 failed with error -2
[   96.591206][ T2795] loop7: detected capacity change from 0 to 512
[   96.608025][ T2795] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000103)
[   96.614445][   T40] snd-usb-audio: probe of 8-1:1.2 failed with error -2
[   96.633729][   T40] usb 8-1: USB disconnect, device number 16
[   96.641824][ T1978] udevd[1978]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.2/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   96.859444][   T28] kauditd_printk_skb: 54 callbacks suppressed
[   96.859459][   T28] audit: type=1326 audit(2000000013.370:2200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2806 comm="syz.8.665" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f548119fb19 code=0x7ffc0000
[   96.913485][   T28] audit: type=1326 audit(2000000013.370:2201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2806 comm="syz.8.665" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f548119fb19 code=0x7ffc0000
[   96.960782][   T28] audit: type=1326 audit(2000000013.370:2202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2806 comm="syz.8.665" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f548119fb19 code=0x7ffc0000
[   97.009248][   T28] audit: type=1326 audit(2000000013.370:2203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2806 comm="syz.8.665" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f548119fb19 code=0x7ffc0000
[   97.034370][   T28] audit: type=1326 audit(2000000013.370:2204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2806 comm="syz.8.665" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f548119fb19 code=0x7ffc0000
[   97.059283][   T28] audit: type=1326 audit(2000000013.370:2205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2806 comm="syz.8.665" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f548119fb19 code=0x7ffc0000
[   97.084206][   T28] audit: type=1326 audit(2000000013.370:2206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2806 comm="syz.8.665" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f548119fb19 code=0x7ffc0000
[   97.109102][   T28] audit: type=1326 audit(2000000013.370:2207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2806 comm="syz.8.665" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f548119fb19 code=0x7ffc0000
[   97.134016][   T28] audit: type=1326 audit(2000000013.370:2208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2806 comm="syz.8.665" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f548119fb19 code=0x7ffc0000
[   97.158900][   T28] audit: type=1326 audit(2000000013.370:2209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2806 comm="syz.8.665" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f548119fb19 code=0x7ffc0000
[   97.444191][ T2841] fuse: Bad value for 'fd'
[   97.453406][ T2841] fuse: Bad value for 'user_id'
[   97.493337][ T2850] loop3: detected capacity change from 0 to 512
[   97.517757][ T2850] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   97.538435][ T2850] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[   97.547690][ T2850] ext4 filesystem being mounted at /155/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   97.560011][ T2850] fs-verity (loop3, inode 15): Unrecognized descriptor size: 0 bytes
[   97.570527][ T2850] device macsec1 entered promiscuous mode
[   97.584739][  T287] EXT4-fs (loop3): unmounting filesystem.
[   97.607757][ T2856] fuse: Bad value for 'fd'
[   97.616875][ T2046] hid-generic 0000:056A:003F.0003: unbalanced collection at end of report description
[   97.627352][ T2046] hid-generic: probe of 0000:056A:003F.0003 failed with error -22
[   97.763327][ T2864] loop3: detected capacity change from 0 to 256
[   97.912211][ T2867] loop3: detected capacity change from 0 to 1024
[   97.928316][ T2867] EXT4-fs error (device loop3): ext4_map_blocks:637: inode #3: block 2: comm syz.3.685: lblock 2 mapped to illegal pblock 2 (length 1)
[   97.943855][ T2867] EXT4-fs error (device loop3): ext4_map_blocks:637: inode #3: block 48: comm syz.3.685: lblock 0 mapped to illegal pblock 48 (length 1)
[   97.958318][ T2867] EXT4-fs error (device loop3): ext4_acquire_dquot:6828: comm syz.3.685: Failed to acquire dquot type 0
[   97.969840][ T2867] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5954: Corrupt filesystem
[   97.987072][ T2867] EXT4-fs error (device loop3): ext4_evict_inode:281: inode #11: comm syz.3.685: mark_inode_dirty error
[   98.000787][ T2867] EXT4-fs warning (device loop3): ext4_evict_inode:284: couldn't mark inode dirty (err -117)
[   98.014168][ T2871] fuse: blksize only supported for fuseblk
[   98.021540][ T2867] EXT4-fs (loop3): 1 orphan inode deleted
[   98.027632][ T2867] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[   98.036371][  T308] EXT4-fs error (device loop3): ext4_map_blocks:637: inode #3: block 1: comm kworker/u4:3: lblock 1 mapped to illegal pblock 1 (length 1)
[   98.051232][  T308] EXT4-fs error (device loop3): ext4_release_dquot:6864: comm kworker/u4:3: Failed to release dquot type 0
[   98.063549][ T2867] EXT4-fs (loop3): unmounting filesystem.
[   98.069323][ T2867] EXT4-fs error (device loop3): __ext4_get_inode_loc:4522: comm syz.3.685: Invalid inode table block 1 in block_group 0
[   98.084410][ T2867] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5954: Corrupt filesystem
[   98.093918][ T2867] EXT4-fs error (device loop3): ext4_quota_off:7134: inode #3: comm syz.3.685: mark_inode_dirty error
[   98.295503][ T2876] netlink: 8 bytes leftover after parsing attributes in process `syz.7.688'.
[   98.319423][ T2876] loop7: detected capacity change from 0 to 512
[   98.353754][ T2876] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002]
[   98.364977][ T2876] System zones: 1-12
[   98.375105][ T2876] EXT4-fs error (device loop7): ext4_xattr_inode_iget:401: inode #12: comm syz.7.688: missing EA_INODE flag
[   98.381200][ T2873] loop3: detected capacity change from 0 to 40427
[   98.397602][ T2873] F2FS-fs (loop3): Invalid log sectorsize (512)
[   98.400719][ T2876] EXT4-fs error (device loop7): ext4_xattr_inode_iget:406: comm syz.7.688: error while reading EA inode 12 err=-117
[   98.404299][ T2873] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[   98.425431][ T2873] F2FS-fs (loop3): Invalid gid value -1
[   98.433677][ T2876] EXT4-fs (loop7): 1 orphan inode deleted
[   98.447993][ T2876] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[   98.651737][ T1301] EXT4-fs (loop7): unmounting filesystem.
[   98.701936][ T2900] loop7: detected capacity change from 0 to 1024
[   98.731817][ T2900] EXT4-fs: Ignoring removed bh option
[   98.764823][ T2900] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[   98.913221][ T2903] EXT4-fs (loop7): unmounting filesystem.
[   98.919450][  T308] tipc: Disabling bearer <udp:syz0>
[   98.924846][  T308] tipc: Left network mode
[   99.187091][ T2909] netlink: 36 bytes leftover after parsing attributes in process `syz.8.700'.
[   99.227014][ T2913] loop3: detected capacity change from 0 to 256
[   99.284836][ T2905] bridge0: port 1(bridge_slave_0) entered blocking state
[   99.303976][ T2905] bridge0: port 1(bridge_slave_0) entered disabled state
[   99.320980][ T2905] device bridge_slave_0 entered promiscuous mode
[   99.329408][ T2905] bridge0: port 2(bridge_slave_1) entered blocking state
[   99.348887][ T2905] bridge0: port 2(bridge_slave_1) entered disabled state
[   99.372677][ T2905] device bridge_slave_1 entered promiscuous mode
[   99.499865][ T2940] loop3: detected capacity change from 0 to 256
[   99.997369][  T308] device bridge_slave_1 left promiscuous mode
[  100.028382][  T308] bridge0: port 2(bridge_slave_1) entered disabled state
[  100.338733][  T308] device bridge_slave_0 left promiscuous mode
[  100.362619][  T308] bridge0: port 1(bridge_slave_0) entered disabled state
[  100.383527][  T308] device batadv_slave_1 left promiscuous mode
[  100.468633][  T308] device veth1_macvtap left promiscuous mode
[  100.499212][  T308] device veth0_vlan left promiscuous mode
[  101.283656][ T2905] device veth0_vlan entered promiscuous mode
[  101.295753][ T2905] device veth1_macvtap entered promiscuous mode
[  101.362005][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  101.375032][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  101.392771][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  101.436367][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  101.460807][   T43] bridge0: port 1(bridge_slave_0) entered blocking state
[  101.467904][   T43] bridge0: port 1(bridge_slave_0) entered forwarding state
[  101.517807][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  101.566274][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  101.583839][   T43] bridge0: port 2(bridge_slave_1) entered blocking state
[  101.590928][   T43] bridge0: port 2(bridge_slave_1) entered forwarding state
[  101.639375][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  101.655754][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  101.672358][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  101.709687][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  101.725949][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  101.745577][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  101.862539][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  101.878727][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  101.984813][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  102.000394][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  102.017115][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  102.057382][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  102.075656][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  102.084283][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  102.092563][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  102.100891][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  102.108892][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  102.116642][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  102.126994][ T2962] netlink: 'syz.8.710': attribute type 7 has an invalid length.
[  102.135826][ T2962] netlink: 'syz.8.710': attribute type 5 has an invalid length.
[  102.143997][ T2962] netlink: 17 bytes leftover after parsing attributes in process `syz.8.710'.
[  102.237306][ T2968] netlink: 8 bytes leftover after parsing attributes in process `syz.3.712'.
[  102.258306][ T2983] loop5: detected capacity change from 0 to 1024
[  102.265288][ T2981] IPv6: NLM_F_CREATE should be specified when creating new route
[  102.283826][ T2983] loop5: detected capacity change from 0 to 512
[  102.300069][ T2977] device ip6gre1 entered promiscuous mode
[  102.302037][ T2983] FAT-fs (loop5): Directory bread(block 2080) failed
[  102.329433][ T2983] FAT-fs (loop5): Directory bread(block 2081) failed
[  102.341718][ T2983] FAT-fs (loop5): Directory bread(block 2082) failed
[  102.353869][ T2983] FAT-fs (loop5): Directory bread(block 2083) failed
[  102.363267][ T2983] FAT-fs (loop5): Directory bread(block 2084) failed
[  102.372185][ T2983] FAT-fs (loop5): Directory bread(block 2085) failed
[  102.382247][ T2983] FAT-fs (loop5): Directory bread(block 2086) failed
[  102.390905][ T2983] FAT-fs (loop5): Directory bread(block 2087) failed
[  102.401390][ T2983] FAT-fs (loop5): Directory bread(block 2080) failed
[  102.409025][ T2983] FAT-fs (loop5): Directory bread(block 2081) failed
[  102.416898][   T28] kauditd_printk_skb: 83 callbacks suppressed
[  102.416911][   T28] audit: type=1400 audit(2000000018.940:2290): avc:  denied  { read write } for  pid=2982 comm="syz.5.717" name="rtc0" dev="devtmpfs" ino=263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  102.417347][ T2983] netlink: 80 bytes leftover after parsing attributes in process `syz.5.717'.
[  102.424128][   T28] audit: type=1400 audit(2000000018.940:2291): avc:  denied  { open } for  pid=2982 comm="syz.5.717" path="/dev/rtc0" dev="devtmpfs" ino=263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  102.565464][ T2999] netlink: 52 bytes leftover after parsing attributes in process `syz.5.722'.
[  102.574804][ T2999] bridge0: port 2(bridge_slave_1) entered disabled state
[  102.581955][ T2999] bridge0: port 1(bridge_slave_0) entered disabled state
[  102.619468][ T3000] bridge0: port 1(bridge_slave_0) entered blocking state
[  102.626622][ T3000] bridge0: port 1(bridge_slave_0) entered disabled state
[  102.634584][ T3000] device bridge_slave_0 entered promiscuous mode
[  102.644574][ T3000] bridge0: port 2(bridge_slave_1) entered blocking state
[  102.651669][ T3000] bridge0: port 2(bridge_slave_1) entered disabled state
[  102.659082][ T3000] device bridge_slave_1 entered promiscuous mode
[  102.699220][ T3000] bridge0: port 2(bridge_slave_1) entered blocking state
[  102.706324][ T3000] bridge0: port 2(bridge_slave_1) entered forwarding state
[  102.713621][ T3000] bridge0: port 1(bridge_slave_0) entered blocking state
[  102.720636][ T3000] bridge0: port 1(bridge_slave_0) entered forwarding state
[  102.739885][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  102.747502][   T43] bridge0: port 1(bridge_slave_0) entered disabled state
[  102.755440][   T43] bridge0: port 2(bridge_slave_1) entered disabled state
[  102.766572][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  102.774844][   T43] bridge0: port 1(bridge_slave_0) entered blocking state
[  102.781871][   T43] bridge0: port 1(bridge_slave_0) entered forwarding state
[  102.790587][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  102.798799][   T43] bridge0: port 2(bridge_slave_1) entered blocking state
[  102.805873][   T43] bridge0: port 2(bridge_slave_1) entered forwarding state
[  102.817777][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  102.827011][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  102.841662][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  102.853884][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  102.861862][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  102.869301][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  102.877173][ T3000] device veth0_vlan entered promiscuous mode
[  102.889596][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  102.898576][ T3000] device veth1_macvtap entered promiscuous mode
[  102.907880][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  102.917596][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  103.166854][   T28] audit: type=1400 audit(2000000019.680:2292): avc:  denied  { write } for  pid=3036 comm="syz.2.731" name="file0" dev="tmpfs" ino=863 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  103.190999][   T28] audit: type=1400 audit(2000000019.680:2293): avc:  denied  { open } for  pid=3036 comm="syz.2.731" path="/151/file0" dev="tmpfs" ino=863 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  103.213956][   T28] audit: type=1400 audit(2000000019.680:2294): avc:  denied  { ioctl } for  pid=3036 comm="syz.2.731" path="/151/file0" dev="tmpfs" ino=863 ioctlcmd=0x1279 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  103.238508][  T308] device bridge_slave_1 left promiscuous mode
[  103.244989][  T308] bridge0: port 2(bridge_slave_1) entered disabled state
[  103.252932][  T308] device bridge_slave_0 left promiscuous mode
[  103.259116][  T308] bridge0: port 1(bridge_slave_0) entered disabled state
[  103.267331][  T308] device veth1_macvtap left promiscuous mode
[  103.273449][  T308] device veth0_vlan left promiscuous mode
[  103.632545][  T361] usb 6-1: new full-speed USB device number 2 using dummy_hcd
[  103.706191][   T28] audit: type=1400 audit(2000000020.220:2295): avc:  denied  { ioctl } for  pid=3101 comm="syz.8.736" path="socket:[29896]" dev="sockfs" ino=29896 ioctlcmd=0x5882 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  103.808140][ T3101] ==================================================================
[  103.816235][ T3101] BUG: KASAN: use-after-free in mutex_lock+0x86/0x1b0
[  103.822987][ T3101] Write of size 8 at addr ffff8881333bed50 by task syz.8.736/3101
[  103.830779][ T3101] 
[  103.833082][ T3101] CPU: 1 PID: 3101 Comm: syz.8.736 Not tainted syzkaller #0
[  103.840340][ T3101] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[  103.850374][ T3101] Call Trace:
[  103.853640][ T3101]  <TASK>
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  103.856550][ T3101]  __dump_stack+0x21/0x24
[  103.860875][ T3101]  dump_stack_lvl+0x110/0x170
[  103.865548][ T3101]  ? __cfi_dump_stack_lvl+0x8/0x8
[  103.870578][ T3101]  ? mutex_lock+0x86/0x1b0
[  103.872548][   T28] audit: type=1400 audit(2000000020.320:2296): avc:  denied  { write } for  pid=279 comm="syz-executor" path="pipe:[15381]" dev="pipefs" ino=15381 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1
[  103.874986][ T3101]  print_address_description+0x71/0x200
[  103.903690][ T3101]  print_report+0x4a/0x60
[  103.908037][ T3101]  kasan_report+0x122/0x150
[  103.912544][ T3101]  ? mutex_lock+0x86/0x1b0
[  103.916961][ T3101]  kasan_check_range+0x249/0x2a0
[  103.921903][ T3101]  __kasan_check_write+0x14/0x20
[  103.926840][ T3101]  mutex_lock+0x86/0x1b0
[  103.931095][ T3101]  ? __cfi_mutex_lock+0x10/0x10
[  103.935946][ T3101]  ? kfree+0x6f/0xf0
[  103.939846][ T3101]  ? l2tp_session_put+0xaf/0x1a0
[  103.944796][ T3101]  ? l2tp_session_delete+0x3df/0x4d0
[  103.950091][ T3101]  pppol2tp_release+0x178/0x2b0
[  103.954945][ T3101]  sock_close+0xc9/0x220
[  103.959193][ T3101]  ? __cfi_sock_close+0x10/0x10
[  103.964042][ T3101]  __fput+0x1fd/0x8f0
[  103.968030][ T3101]  ____fput+0x15/0x20
[  103.972023][ T3101]  task_work_run+0x1e1/0x250
[  103.976614][ T3101]  ? __cfi_task_work_run+0x10/0x10
[  103.981730][ T3101]  ? __cfi___close_range+0x10/0x10
[  103.986843][ T3101]  exit_to_user_mode_loop+0x9b/0xb0
[  103.992042][ T3101]  exit_to_user_mode_prepare+0x87/0xd0
[  103.997512][ T3101]  syscall_exit_to_user_mode+0x1a/0x30
[  104.002996][ T3101]  do_syscall_64+0x58/0xa0
[  104.007391][ T3101]  ? clear_bhb_loop+0x30/0x80
[  104.012065][ T3101]  ? clear_bhb_loop+0x30/0x80
[  104.016724][ T3101]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  104.022623][ T3101] RIP: 0033:0x7f548119fb19
[  104.027027][ T3101] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  104.046609][ T3101] RSP: 002b:00007fff62529508 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[  104.055011][ T3101] RAX: 0000000000000000 RBX: 00007f5481427da0 RCX: 00007f548119fb19
[  104.062960][ T3101] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[  104.070906][ T3101] RBP: 00007f5481427da0 R08: 00007f5481426038 R09: 0000000000000000
[  104.078855][ T3101] R10: 00000000003ffc78 R11: 0000000000000246 R12: 000000000001a0bb
[  104.086808][ T3101] R13: 00007f548142609c R14: 0000000000019535 R15: 00007f5481426090
[  104.094760][ T3101]  </TASK>
[  104.097757][ T3101] 
[  104.100053][ T3101] Allocated by task 3102:
[  104.104350][ T3101]  kasan_set_track+0x4b/0x70
[  104.108927][ T3101]  kasan_save_alloc_info+0x1f/0x30
[  104.114009][ T3101]  __kasan_kmalloc+0x95/0xb0
[  104.118575][ T3101]  __kmalloc+0xb4/0x1e0
[  104.122705][ T3101]  l2tp_session_create+0x38/0xbd0
[  104.127708][ T3101]  pppol2tp_connect+0xbf5/0x1640
[  104.132620][ T3101]  __sys_connect+0x3da/0x460
[  104.137186][ T3101]  __x64_sys_connect+0x7a/0x90
[  104.141927][ T3101]  x64_sys_call+0x88d/0x9a0
[  104.146404][ T3101]  do_syscall_64+0x4c/0xa0
[  104.150793][ T3101]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  104.156664][ T3101] 
[  104.158964][ T3101] Freed by task 3101:
[  104.162919][ T3101]  kasan_set_track+0x4b/0x70
[  104.167500][ T3101]  kasan_save_free_info+0x2b/0x40
[  104.172500][ T3101]  ____kasan_slab_free+0x132/0x180
[  104.177600][ T3101]  __kasan_slab_free+0x11/0x20
[  104.182348][ T3101]  slab_free_freelist_hook+0xc2/0x190
[  104.187697][ T3101]  __kmem_cache_free+0xb7/0x1b0
[  104.192529][ T3101]  kfree+0x6f/0xf0
[  104.196241][ T3101]  l2tp_session_put+0xaf/0x1a0
[  104.200982][ T3101]  l2tp_session_delete+0x3df/0x4d0
[  104.206066][ T3101]  pppol2tp_release+0x169/0x2b0
[  104.210895][ T3101]  sock_close+0xc9/0x220
[  104.215107][ T3101]  __fput+0x1fd/0x8f0
[  104.219064][ T3101]  ____fput+0x15/0x20
[  104.223021][ T3101]  task_work_run+0x1e1/0x250
[  104.227603][ T3101]  exit_to_user_mode_loop+0x9b/0xb0
[  104.232779][ T3101]  exit_to_user_mode_prepare+0x87/0xd0
[  104.238210][ T3101]  syscall_exit_to_user_mode+0x1a/0x30
[  104.243649][ T3101]  do_syscall_64+0x58/0xa0
[  104.248036][ T3101]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  104.253902][ T3101] 
[  104.256200][ T3101] The buggy address belongs to the object at ffff8881333bec00
[  104.256200][ T3101]  which belongs to the cache kmalloc-512 of size 512
[  104.270222][ T3101] The buggy address is located 336 bytes inside of
[  104.270222][ T3101]  512-byte region [ffff8881333bec00, ffff8881333bee00)
[  104.283470][ T3101] 
[  104.285773][ T3101] The buggy address belongs to the physical page:
[  104.292156][ T3101] page:ffffea0004ccef00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1333bc
[  104.302367][ T3101] head:ffffea0004ccef00 order:2 compound_mapcount:0 compound_pincount:0
[  104.310666][ T3101] flags: 0x4000000000010200(slab|head|zone=1)
[  104.316730][ T3101] raw: 4000000000010200 0000000000000000 dead000000000001 ffff888100042f00
[  104.325289][ T3101] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000
[  104.333843][ T3101] page dumped because: kasan: bad access detected
[  104.340237][ T3101] page_owner tracks the page as allocated
[  104.345926][ T3101] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 291, tgid 291 (syz-executor), ts 20051344029, free_ts 0
[  104.366217][ T3101]  post_alloc_hook+0x1f5/0x210
[  104.370969][ T3101]  prep_new_page+0x1c/0x110
[  104.375454][ T3101]  get_page_from_freelist+0x2ca9/0x2d20
[  104.380984][ T3101]  __alloc_pages+0x1fa/0x610
[  104.385555][ T3101]  alloc_slab_page+0x6e/0xf0
[  104.390123][ T3101]  new_slab+0x98/0x3e0
[  104.394167][ T3101]  ___slab_alloc+0x70f/0xb70
[  104.398739][ T3101]  __slab_alloc+0x5e/0xa0
[  104.403055][ T3101]  __kmem_cache_alloc_node+0x204/0x2d0
[  104.408494][ T3101]  __kmalloc+0xa4/0x1e0
[  104.412627][ T3101]  fib6_info_alloc+0x34/0xe0
[  104.417197][ T3101]  ip6_route_info_create+0x51b/0x14d0
[  104.422549][ T3101]  addrconf_f6i_alloc+0x19c/0x3f0
[  104.427553][ T3101]  ipv6_add_addr+0x447/0xe80
[  104.432124][ T3101]  addrconf_add_linklocal+0x20e/0x660
[  104.437476][ T3101]  addrconf_addr_gen+0x542/0x690
[  104.442401][ T3101] page_owner free stack trace missing
[  104.447739][ T3101] 
[  104.450039][ T3101] Memory state around the buggy address:
[  104.455669][ T3101]  ffff8881333bec00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  104.463705][ T3101]  ffff8881333bec80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  104.471741][ T3101] >ffff8881333bed00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  104.479775][ T3101]                                                  ^
[  104.486420][ T3101]  ffff8881333bed80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  104.494456][ T3101]  ffff8881333bee00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  104.502491][ T3101] ==================================================================
[  104.511068][ T3101] Disabling lock debugging due to kernel taint
[  104.561117][   T28] audit: type=1400 audit(2000000021.070:2297): avc:  denied  { read } for  pid=85 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1
[  104.593298][   T28] audit: type=1400 audit(2000000021.070:2298): avc:  denied  { search } for  pid=85 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  104.668306][ T2977] syz.3.712 (2977) used greatest stack depth: 17632 bytes left
[  104.686095][   T28] audit: type=1400 audit(2000000021.070:2299): avc:  denied  { write } for  pid=85 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  104.819231][  T361] usb 6-1: device descriptor read/all, error -71
[  105.244710][  T308] tipc: Left network mode
[  105.873222][  T308] device bridge_slave_1 left promiscuous mode
[  105.879351][  T308] bridge0: port 2(bridge_slave_1) entered disabled state
[  105.886728][  T308] device bridge_slave_0 left promiscuous mode
[  105.892848][  T308] bridge0: port 1(bridge_slave_0) entered disabled state
[  105.900507][  T308] device bridge_slave_1 left promiscuous mode
[  105.906654][  T308] bridge0: port 2(bridge_slave_1) entered disabled state
[  105.914065][  T308] device bridge_slave_0 left promiscuous mode
[  105.920143][  T308] bridge0: port 1(bridge_slave_0) entered disabled state
[  105.927970][  T308] device bridge_slave_1 left promiscuous mode
[  105.934133][  T308] bridge0: port 2(bridge_slave_1) entered disabled state
[  105.942158][  T308] device veth1_macvtap left promiscuous mode
[  105.948214][  T308] device veth0_vlan left promiscuous mode
[  105.954238][  T308] device veth1_macvtap left promiscuous mode
[  105.960217][  T308] device veth0_vlan left promiscuous mode
[  105.966267][  T308] device veth0_vlan left promiscuous mode
[  106.932604][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!