last executing test programs:

16.33786035s ago: executing program 4 (id=20):
r0 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f00000001c0)={[{@block_validity}, {@debug}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x8}}, {@delalloc}, {@jqfmt_vfsold}]}, 0xfd, 0x4a5, &(0x7f0000000b80)="$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")
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4)
bind$inet(r1, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f)
connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10)
sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x300)
setsockopt$inet_int(r1, 0x0, 0x19, &(0x7f0000000180)=0x1f5, 0x4)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000003c0)="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", 0x2000, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x3)
ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x6, 0xd1, 0x3, '\x00', 0x1})
ioctl$KVM_RUN(r4, 0xae80, 0x0)
setsockopt$inet_int(r1, 0x0, 0x5, &(0x7f0000000440)=0x134, 0x4)
r5 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r6 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0)
pwrite64(r6, &(0x7f00000005c0)="282eba2780cb761fb8f33b680cfdb0d819ab6157e1a46f81a6958bbc8a4abb7aaf3ec598f56ac0ad56edeb81e3d718aa752459bcfeecf58875608991bc28100e121c3e57cb89c797945094927fb41572b5240a76616d7375c197d7a6ee", 0x5d, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x12, r6, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
syz_clone3(&(0x7f0000000080)={0x180801600, 0x0, 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r7 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0)
write$selinux_load(r5, &(0x7f00000004c0)=ANY=[@ANYBLOB="f765aa06bdd4d75782f549d99f35f116b313aa2ab5f31d03bb1eb94663cb", @ANYRES16=r0, @ANYBLOB="f6eddd2b7d33071cc654fe1b941c4daa0dc3edaf90ac6f70383008cf951b4cb4946ec37754eae3358c8ce92e60ce4492355f3a8d06addcb201ffc97992d1422e367847b28056cdbd191beb702a0f63336504674af1ecb7116a7a008a51bee5878b3b505d7a0836fba6072653e9cc3cb0306063b844237b0d3f56667f4271403e54ddd2bf4cbfffed221a438e08b244d37539a41b20cceeba0ee7d69530b754b296cc9a8f", @ANYRESOCT=r6, @ANYRES32=r7], 0x2000)
recvmmsg(r1, &(0x7f0000003e00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003dc0)=""/31, 0x20}, 0x8000}], 0x1, 0x45833af92e4a39df, 0x0)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./file0\x00', 0x59b801, 0x1ce)
r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0)
r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
ioctl$KVM_IOEVENTFD(r10, 0x4040ae79, &(0x7f0000000240)={0x27800000000, 0x0, 0x1, 0xffffffffffffffff, 0x1f})
ioctl$FS_IOC_FSSETXATTR(r8, 0x401c5820, &(0x7f0000000000)={0x8028, 0x4, 0x0, 0x8, 0x4})

14.727885664s ago: executing program 4 (id=29):
capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0xd, 0x85, 0xffffffff, 0x2})
r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x202, 0x0)
ioctl$RTC_IRQP_SET(r0, 0x4008700c, 0xa87)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x3c1, 0x3, 0xbb0, 0x0, 0x168, 0x9, 0x0, 0xb, 0xae0, 0x250, 0x250, 0xae0, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [], [], 'veth0_to_bridge\x00', 'sit0\x00', {}, {}, 0x6c}, 0x6000000, 0xa8, 0xf0, 0x0, {0x0, 0x28e}}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private0={0xfc, 0x0, '\x00', 0x1}, 'dvmrp0\x00'}}}, {{@uncond, 0x0, 0x9c0, 0x9f0, 0x0, {}, [@common=@unspec=@u32={{0x7e0}, {[{[{0x5, 0x1}, {0x1, 0x3}, {0x7, 0x1}, {0x5, 0x2}, {0x8, 0x3}, {0x1, 0x3}, {0x1ff, 0x3}, {0x60fc, 0x5756dd22089a9e07}, {0xd7a, 0x2}, {0x6, 0x1}, {0x7fff}], [{0x8001, 0x1}, {0xfe0, 0x80000000}, {0x0, 0x8}, {0x4, 0x6}, {0x9, 0x3fe}, {0x200, 0x4}, {0x3, 0x810}, {}, {0xfff, 0x5}, {0x3, 0x2}, {0x6fc9, 0x3}], 0x1, 0x20}, {[{0x4, 0x1}, {0x55c7, 0x2}, {0xff, 0x1}, {0x1000, 0x2}, {0x5c9eda8a}, {0x8000}, {0x5, 0x3}, {0x0, 0x2}, {0xfffffffa}, {0x5, 0x2}, {0x63010bb0, 0x1}], [{0x6, 0x7ff}, {0x8, 0xfff}, {0x6, 0x3}, {0x5b, 0x3}, {0x9, 0x4}, {0x7, 0x7}, {0x0, 0x1}, {0x1000}, {0x2, 0xa359}, {0xb, 0x27b}, {0x5, 0x2}], 0x6, 0xa}, {[{0x7, 0x2}, {0x9}, {0x80, 0x3}, {0x57, 0x1}, {0x3, 0x3}, {0x3, 0x3}, {0x8}, {0x100, 0x1}, {0x201, 0x1}, {0x3, 0x1}, {0xa668, 0x2}], [{0x4, 0x6}, {0x507, 0x7}, {0x9, 0x9}, {0x1, 0x1000}, {0xb6, 0xa}, {0x1, 0x7}, {0x8, 0x3}, {0x3, 0x71}, {0x0, 0x4}, {0x6, 0x1}, {0x3ff, 0x2}], 0x2, 0x6}, {[{0x4c, 0x3}, {0xf, 0x3}, {0xa3, 0x1}, {}, {0x8001, 0x3}, {0x5}, {0xffff}, {0x328f}, {0xa7e}, {0x9, 0x3}, {0x10}], [{0x0, 0x10001}, {0x1, 0x4ee}, {0x0, 0x2}, {0xc45, 0xae7}, {0x7, 0x400}, {0xd, 0x3}, {0x9, 0x4}, {0xd, 0x4}, {0x60000000}, {0x81, 0x1ff}, {0x80, 0x8000}], 0x9, 0x9}, {[{0x3d38fe75, 0x2}, {0x1, 0x3}, {0x8000, 0x2}, {0x2, 0x2}, {0x4, 0x3}, {0x8000, 0x2}, {0x4f94b4ce, 0x3}, {}, {0x8}, {0x9, 0x2}, {0x4}], [{0x9}, {0x5, 0x9}, {0x5, 0x5}, {0x4, 0x81}, {0x743, 0xe}, {0x3, 0xa0000}, {0x1e, 0x8001}, {0x5, 0x5}, {0x4, 0x1}, {0x800, 0x8001}, {0x1, 0x8}], 0xb, 0x1}, {[{0x0, 0x3}, {0x7, 0x1}, {0x10001, 0x2}, {0xffff254f}, {0x8, 0x2}, {0x4, 0x1}, {0x8000, 0x2}, {0x80, 0x3}, {0x5d, 0x1}, {0x8, 0x1}, {0x4, 0x1}], [{0x2, 0x7}, {0x0, 0x8000}, {0xe52, 0xb1c}, {0xf, 0x4f87}, {0x5, 0x12fe}, {0x8, 0x3}, {0x507c}, {0x7, 0xfffffff7}, {0x3, 0x8}, {0xfffffff9, 0x4}, {0xe0000000, 0x11}], 0x4, 0x8}, {[{0x7ff}, {0x5, 0x3}, {0x1}, {0x401}, {0x5}, {0x6}, {0x57, 0x3}, {0x7f}, {0x7, 0x3}, {0x5}, {0x8000, 0x1}], [{0x9, 0x7}, {0x2, 0x8}, {0x1, 0x1}, {0x0, 0x5}, {0x630, 0x9}, {0x6141, 0x3}, {0x2, 0x2}, {0xbb6, 0xffdf}, {0x10000, 0x7}, {0x6, 0x6}, {0xffff, 0x9}], 0x8, 0x2}, {[{0x0, 0x1}, {0x43e}, {0x4, 0x1}, {0x1, 0x3}, {0x5, 0x2}, {0x2}, {0x5, 0x3}, {0x0, 0x2}, {0xbf2}, {0x5}, {0xaf70, 0x1}], [{0x5, 0x1}, {0x8, 0x6}, {0x4, 0x5}, {0x1, 0x2}, {0x9, 0x4}, {0x3, 0x74}, {0x4, 0x3bcc}, {0x5}, {0xf, 0x6}, {0x21, 0x1}, {0x26ed, 0x7}], 0x8, 0x9}, {[{0x8, 0x1}, {0x800, 0x2}, {0x8, 0x2}, {0x5, 0x2}, {0x8, 0x3}, {0x2, 0x2}, {0xffff}, {0x7, 0x2}, {0x7}, {0x9, 0x1}, {0x5, 0x3}], [{0x4, 0x1}, {0x3f, 0x3}, {0x1ff, 0x6}, {0x27df, 0x6}, {0x7fff}, {0xfffffffc, 0x3}, {0x0, 0xfff}, {0x2, 0x3}, {0x6, 0x6}, {0x0, 0x4}, {0xd, 0x8}], 0xa, 0x1}, {[{0xf, 0x3}, {0x0, 0x2}, {0x3, 0x3}, {0x2}, {0xe7d9}, {0x72, 0x5}, {0x9, 0x1}, {0x4, 0x1}, {0xfffffff1, 0x2}, {0x2405, 0x3}, {0x5, 0x1}], [{0x15c6, 0x4}, {0x10001, 0x4}, {0x80000000, 0x8}, {0x8, 0x101}, {0x6, 0xf2bd}, {0x7, 0x8}, {0x7, 0x5}, {0xfffffffc, 0x4}, {0x5, 0x30000000}, {0x7, 0x3}, {0x9, 0x9}], 0x0, 0x3}, {[{0x800004, 0x2}, {0x3, 0x1}, {0x4, 0x3}, {0x2, 0x1}, {0x35a, 0x1}, {0x9, 0x2}, {0x81, 0x3}, {0x6, 0x3}, {0x2}, {0x4, 0x2}, {0x0, 0x1}], [{0x200000, 0x7}, {0xffffffff, 0x9e}, {0x4, 0x3}, {0xffffffff, 0xc9e}, {0x0, 0xcc000000}, {0x101, 0x4}, {0xc76, 0x1}, {0x2, 0x7}, {0x6, 0x7f}, {0x7, 0x2}, {0x2, 0x2}], 0x2, 0xb}], 0x4, 0x1}}, @common=@rt={{0x138}, {0x8, [0x9, 0x6], 0xfffffffc, 0x20, 0x2, [@mcast1, @mcast1, @remote, @mcast2, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, @private1, @mcast2, @private2={0xfc, 0x2, '\x00', 0x1}, @remote, @dev={0xfe, 0x80, '\x00', 0x1d}, @empty, @empty, @remote], 0xe}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0xc10)

13.920987651s ago: executing program 4 (id=32):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="840000000002010400000000000000000a00000004000180300003802c0001801400030000000000000000000000ffffac1e000114447263065863b18900000000000000000000013c0002802c00018014000300ff0200000000000000000000000000011400040000000000000000000000ffffac1414aa0c000280050001"], 0x84}, 0x1, 0x0, 0x0, 0x24000801}, 0x4)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
syz_open_dev$ptys(0xc, 0x3, 0x1)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
getdents(0xffffffffffffffff, 0xffffffffffffffff, 0x5a)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000640)={[{@block_validity}, {}, {@sysvgroups}, {@journal_path={'journal_path', 0x3d, './file1'}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@sb={'sb', 0x3d, 0xfffffffffffffffd}}, {@nogrpid}, {@noauto_da_alloc}, {@norecovery}], [{@obj_type}]}, 0x2, 0x56a, &(0x7f00000015c0)="$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")
r4 = open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x68)
fallocate(r4, 0x0, 0x9b1, 0x1001ed)
symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000700)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x29}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x2000, 0x1)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_STRSET_GET(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYRESOCT, @ANYRES16=r7, @ANYBLOB="21032cbd7000fedbdf25010000000400030004000180280002802600018008000100060000000c00018008000100040000000c000180080001"], 0x44}, 0x1, 0x0, 0x0, 0x24044094}, 0x4)
fcntl$setpipe(r0, 0x407, 0x9eae)
unshare(0x22020400)
socket$nl_route(0x10, 0x3, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{0xffffffffffffffff, <r8=>0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20)
signalfd4(r8, &(0x7f00000001c0)={[0x5]}, 0x8, 0x0)

12.699924118s ago: executing program 4 (id=36):
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nobarrier}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x6}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x10}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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")
syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x300f401, 0x0, 0x2, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
chdir(&(0x7f00000003c0)='./bus\x00')
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0)

12.645746509s ago: executing program 4 (id=38):
syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbaf, &(0x7f0000002f00)="$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")
r0 = open(&(0x7f0000000000)='./file0\x00', 0x240000, 0x80)
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000080)=0x1)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x40, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2400, 0x0)
ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x42200, 0x0)
ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x12, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]})
close_range(r7, 0xffffffffffffffff, 0x0)
write(r4, &(0x7f0000004200)='t', 0x1)
sendfile(r4, r3, 0x0, 0x3ffff)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
write(r2, &(0x7f0000000200)="c7", 0x1)
sendfile(r2, r1, 0x0, 0x3ffff)
sendfile(r2, r1, 0x0, 0x7ffff000)

12.078066431s ago: executing program 4 (id=42):
r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x4, 0x181040)
preadv(r0, &(0x7f0000001440)=[{&(0x7f0000000040)=""/170, 0xaa}, {&(0x7f0000000100)=""/106, 0x6a}, {&(0x7f0000000180)=""/224, 0xe0}, {&(0x7f0000000280)=""/153, 0x99}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/217, 0xd9}], 0x6, 0x8000, 0x7)
r1 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$MRT6_FLUSH(r1, 0x29, 0xd4, &(0x7f00000014c0)=0x1, 0x4)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000001500)={@remote, @broadcast, 0x1, 0x1, [@local]}, 0x14)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$EBT_SO_GET_INIT_INFO(r3, 0x0, 0x82, &(0x7f0000001540)={'broute\x00', 0x0, 0x0, 0x0, [0x8, 0x8, 0xa, 0x5, 0x4, 0x80000001]}, &(0x7f00000015c0)=0x78)
r4 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0)
ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000001680)=<r5=>0x0)
r6 = getuid()
statx(0xffffffffffffff9c, &(0x7f00000016c0)='./file0\x00', 0x6000, 0xbbe, &(0x7f0000001700)={0x0, 0x0, 0x0, 0x0, <r7=>0x0, <r8=>0x0})
statx(0xffffffffffffffff, &(0x7f0000001800)='./file0\x00', 0x6000, 0x200, &(0x7f0000001840)={0x0, 0x0, 0x0, 0x0, 0x0, <r9=>0x0})
fsetxattr$system_posix_acl(r4, &(0x7f0000001640)='system.posix_acl_access\x00', &(0x7f0000001940)={{}, {0x1, 0x5}, [{0x2, 0x5, r5}, {0x2, 0x1, r6}], {}, [{0x8, 0x1, r8}, {0x8, 0x4, r9}], {0x10, 0x4}, {0x20, 0x1}}, 0x44, 0x2)
sendmsg$inet6(r1, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000001b80)=[{&(0x7f00000019c0)="953fafe84c2837625deb7527773d7c861d52b0c5e1dceaee78316d39bb292226dde4bc567803762df5dd419cb205821cab6a20ae94369325add45f6dd2ad2896ca0809bf88368d83192aff12e2caed5491e45a56893493cb8c5122f2c3f4b836c563c8115890e906e0d49ef797397d2ed92ba09c65c5752e063b7f88796475643c676faac403", 0x86}, {&(0x7f0000001a80)="1937ade82c439142d5d68e58e493f93cacd4d6a69342440acf2eb2a6637b565e15f2d3623021615a6e9d8d0b8d3aff6ee9077ca0d785c3f23191eb43a5d888b0f0d87b15bab9b66fdb83da9cfc0bdd4b042a2ec96b", 0x55}, {&(0x7f0000001b00)="8e289aa8311dd9db42d5f6659520f26b7159523af7c5b4ff032172c4c3aa9010ac8ae6a000dae2781e045b0ad80bc071ead9f73fbdbd153cf0b9c57dbc16ec5c05e569df085fb8a21a", 0x49}], 0x3, &(0x7f0000001bc0)=[@rthdr={{0x78, 0x29, 0x39, {0x89, 0xc, 0x2, 0xa, 0x0, [@empty, @private1={0xfc, 0x1, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x10}, @dev={0xfe, 0x80, '\x00', 0x3f}, @ipv4={'\x00', '\xff\xff', @remote}]}}}], 0x78}, 0x3)
fcntl$F_SET_FILE_RW_HINT(r4, 0x40e, &(0x7f0000001c80))
syz_clone(0x2000, &(0x7f0000001cc0)="5eaace9f16964abf49916e060da6e7b8b281691114498f2731b5e36a48ada9d386c7a8b91b4d985b64c6775febb1743554719eafdd4a8ee4f06e823c982cb407d1fe9258537817bea21098cabe354855b13ccaf3088a3b166d391cf3aad73431dc39561d43d2740cc052e39eefccb7a711940bbf3d6452011098113b8ac5a270f9845b7747ab618489de372c561a3416005ea9449b3c13277d782fd578b62a0f6758243f4c0c95d202bc556149ce415481603d867a9ddad1a4b7a30c13ddd8a4604dd24b7955c93da2ff03951d97c33e05377f71360d785563c4bcd33c0d8d2f8e9134ffd3bb60f7c766ae29", 0xec, &(0x7f0000001dc0), &(0x7f0000001e00), &(0x7f0000001e40)="ad8cb9fe72f1d42c80389927f1575f7bcf1fcafad9dafa2d0a732de1b176e09a330a3b72c4bee189519b2d8f43346ad1dc817bf4df36e3b9160f39f37d417460d7e99b7c0f06ce21c88e89b87c9b7b162810954717c8bdbd1b0e1ea15ea2e20e0d7e1ad1b7ee7cfa0a80438fc1af85aaca7377dc35cecd5942")
r10 = open(&(0x7f0000001ec0)='./file0\x00', 0x410381, 0x8)
mremap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x3000, 0x3, &(0x7f0000ff7000/0x3000)=nil)
syncfs(r0)
io_uring_register$IORING_REGISTER_PBUF_RING(r4, 0x16, &(0x7f0000002280)={&(0x7f0000003000)={[{&(0x7f0000001f00)="ec10bdcc3c1510f6470aa28da3636f450f3d005a4e4e89ea351e72a6b6233bdb7b0e1938c74e9db412f9cba36b7e4af97c8fd1", 0x33, 0x3}, {&(0x7f0000001f40)="cdca95c98d407b4e6c8e9c22f420a897ae4e010aa243adb2ef90430abf6b6aebd3419244ed744180845b74d929a938fe5e65894ae11cdcfd73027dbc93e01b326a2b5ea24a63777c6bea028d584471e4ed2599680f3c6889015c4a008ddcad94b11b76370e69108de97679610613dc87c06b5dff823cad5858f563f0f51642297a5b327a", 0x84}, {&(0x7f0000002000)="6529b0527622ddbbcecbfb1fd1a0703bdf5130ddd33610852d58b951a4f991e540ae956b6303b34ca6e1a6a69e40b289c6257dc467f0ff2fd4bbc022fdaf3b8373983e11ce654e519abbea7b9c12ffdbb6f071c28938867be0046a3473055f68d7188f3696b1f623166a3c0932fb90be96051162d308a82e96e64904aa3ddd1aca22a79b3980304d8e2b4533fc70c76c22ed788ca30aa6d8cb4ab2ce48423fdca1f84c97f608aa477d8e128b036b5da90bbabf5c51b18f4683c79800f76a1f9a19a55bff8a2382fc9f6dc2497e5d770e6cbec820c673", 0xd6}, {&(0x7f0000002100)="596ffc0088aa979fd11de14b3d878fd166f74f16169276a1d59969c4c8dfb1", 0x1f, 0x3}, {&(0x7f0000002140)="e8e235a0c58f391d7cf16d109230fc5c2c6ddd2ddf1e8b0c963facd8ddb65314ef073efc6f6c08c1757c62c4a6125e98364bd514274edf4c9d3a37dbf77194742703ce27243619a5e11ef26d4d9bed98b2bb8c59809ed8f3d521963944a8a9ecdcf827fb643c83c22d0e58cdefad00958b2c43649e7ee2c74eacaf7e64ec973811d264346e731106dae073d84f91269499ced2d660df0c7b5fedd2dbf294900eeabd58856c7e1a58", 0xa8, 0x1}, {&(0x7f0000002200)="59b5f682b557259b8b0baf1efda74e33f175a08ab9a467e43a258dcb9ed0692e09e53e9f060fbdbbc0d3c30a213559da7f82fd509e82eb61ebb4ea74c92a1bfb46f70af57686ed36f0423033f28feaa45356fca5e3121be9972374b7ba8b8392ea708ee436732743165a7d4dfbb9fdb9776e6b098cb33c", 0x77, 0x1}]}, 0x6, 0x1}, 0x1)
sendmsg$nl_xfrm(r4, &(0x7f0000002540)={&(0x7f00000022c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000002500)={&(0x7f0000002300)=@delpolicy={0x1dc, 0x14, 0x100, 0x70bd29, 0x25dfdbfc, {{@in6=@mcast2, @in=@multicast2, 0x4e20, 0x2, 0x4e21, 0x7f, 0xa, 0x80, 0x20, 0x2, 0x0, r7}, 0x6e6bbb, 0x2}, [@tmpl={0x44, 0x5, [{{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xfffff000, 0x2b}, 0x2, @in6=@private2, 0x3502, 0x3, 0x3, 0x81, 0x9, 0x2, 0xca16}]}, @address_filter={0x28, 0x1a, {@in=@empty, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7, 0x7, 0x3}}, @lastused={0xc, 0xf, 0xffffffffffffffff}, @mark={0xc, 0x15, {0x35075a, 0x2}}, @replay_thresh={0x8, 0xb, 0x5}, @algo_aead={0x91, 0x12, {{'aegis128-aesni\x00'}, 0x228, 0x0, "27444764962671ff6c4c55c91568d08ad2839cddc508e42a0d8d950bf1afba5e186edfd58a2e1145f2d2f674e2427cee0b111208e857c75bf34a8998c8c83759fb741439dd"}}, @user_kmaddress={0x2c, 0x13, {@in6=@loopback, @in=@multicast2, 0x0, 0xa}}, @srcaddr={0x14, 0xd, @in6=@initdev={0xfe, 0x88, '\x00', 0x81, 0x0}}, @user_kmaddress={0x2c, 0x13, {@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@local, 0x0, 0xa}}]}, 0x1dc}, 0x1, 0x0, 0x0, 0x24044000}, 0x0)
r11 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x2f)
ioctl$KVM_CREATE_IRQCHIP(r11, 0xae60)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f00000025c0)={'wg2\x00', <r12=>0x0})
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000002680)={'ip6_vti0\x00', &(0x7f0000002600)={'syztnl2\x00', <r13=>0x0, 0x29, 0x2, 0x4, 0x4, 0x1c, @mcast1, @private0, 0x10, 0x1, 0xffff7fff}})
sendmsg$WG_CMD_SET_DEVICE(r10, &(0x7f0000002740)={&(0x7f0000002580)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000002700)={&(0x7f00000026c0)={0x2c, 0x0, 0x8, 0x70bd2c, 0x25dfdbff, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r12}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r13}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x40040)
bind$tipc(r10, &(0x7f0000002780)=@id={0x1e, 0x3, 0x0, {0x4e24, 0x1}}, 0x10)
mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000000, 0x30, 0xffffffffffffffff, 0xe6cef000)
mmap(&(0x7f0000ff4000/0x2000)=nil, 0x2000, 0x2, 0x10010, r11, 0x9d2db000)

11.846242816s ago: executing program 32 (id=42):
r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x4, 0x181040)
preadv(r0, &(0x7f0000001440)=[{&(0x7f0000000040)=""/170, 0xaa}, {&(0x7f0000000100)=""/106, 0x6a}, {&(0x7f0000000180)=""/224, 0xe0}, {&(0x7f0000000280)=""/153, 0x99}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/217, 0xd9}], 0x6, 0x8000, 0x7)
r1 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$MRT6_FLUSH(r1, 0x29, 0xd4, &(0x7f00000014c0)=0x1, 0x4)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000001500)={@remote, @broadcast, 0x1, 0x1, [@local]}, 0x14)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$EBT_SO_GET_INIT_INFO(r3, 0x0, 0x82, &(0x7f0000001540)={'broute\x00', 0x0, 0x0, 0x0, [0x8, 0x8, 0xa, 0x5, 0x4, 0x80000001]}, &(0x7f00000015c0)=0x78)
r4 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0)
ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000001680)=<r5=>0x0)
r6 = getuid()
statx(0xffffffffffffff9c, &(0x7f00000016c0)='./file0\x00', 0x6000, 0xbbe, &(0x7f0000001700)={0x0, 0x0, 0x0, 0x0, <r7=>0x0, <r8=>0x0})
statx(0xffffffffffffffff, &(0x7f0000001800)='./file0\x00', 0x6000, 0x200, &(0x7f0000001840)={0x0, 0x0, 0x0, 0x0, 0x0, <r9=>0x0})
fsetxattr$system_posix_acl(r4, &(0x7f0000001640)='system.posix_acl_access\x00', &(0x7f0000001940)={{}, {0x1, 0x5}, [{0x2, 0x5, r5}, {0x2, 0x1, r6}], {}, [{0x8, 0x1, r8}, {0x8, 0x4, r9}], {0x10, 0x4}, {0x20, 0x1}}, 0x44, 0x2)
sendmsg$inet6(r1, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000001b80)=[{&(0x7f00000019c0)="953fafe84c2837625deb7527773d7c861d52b0c5e1dceaee78316d39bb292226dde4bc567803762df5dd419cb205821cab6a20ae94369325add45f6dd2ad2896ca0809bf88368d83192aff12e2caed5491e45a56893493cb8c5122f2c3f4b836c563c8115890e906e0d49ef797397d2ed92ba09c65c5752e063b7f88796475643c676faac403", 0x86}, {&(0x7f0000001a80)="1937ade82c439142d5d68e58e493f93cacd4d6a69342440acf2eb2a6637b565e15f2d3623021615a6e9d8d0b8d3aff6ee9077ca0d785c3f23191eb43a5d888b0f0d87b15bab9b66fdb83da9cfc0bdd4b042a2ec96b", 0x55}, {&(0x7f0000001b00)="8e289aa8311dd9db42d5f6659520f26b7159523af7c5b4ff032172c4c3aa9010ac8ae6a000dae2781e045b0ad80bc071ead9f73fbdbd153cf0b9c57dbc16ec5c05e569df085fb8a21a", 0x49}], 0x3, &(0x7f0000001bc0)=[@rthdr={{0x78, 0x29, 0x39, {0x89, 0xc, 0x2, 0xa, 0x0, [@empty, @private1={0xfc, 0x1, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x10}, @dev={0xfe, 0x80, '\x00', 0x3f}, @ipv4={'\x00', '\xff\xff', @remote}]}}}], 0x78}, 0x3)
fcntl$F_SET_FILE_RW_HINT(r4, 0x40e, &(0x7f0000001c80))
syz_clone(0x2000, &(0x7f0000001cc0)="5eaace9f16964abf49916e060da6e7b8b281691114498f2731b5e36a48ada9d386c7a8b91b4d985b64c6775febb1743554719eafdd4a8ee4f06e823c982cb407d1fe9258537817bea21098cabe354855b13ccaf3088a3b166d391cf3aad73431dc39561d43d2740cc052e39eefccb7a711940bbf3d6452011098113b8ac5a270f9845b7747ab618489de372c561a3416005ea9449b3c13277d782fd578b62a0f6758243f4c0c95d202bc556149ce415481603d867a9ddad1a4b7a30c13ddd8a4604dd24b7955c93da2ff03951d97c33e05377f71360d785563c4bcd33c0d8d2f8e9134ffd3bb60f7c766ae29", 0xec, &(0x7f0000001dc0), &(0x7f0000001e00), &(0x7f0000001e40)="ad8cb9fe72f1d42c80389927f1575f7bcf1fcafad9dafa2d0a732de1b176e09a330a3b72c4bee189519b2d8f43346ad1dc817bf4df36e3b9160f39f37d417460d7e99b7c0f06ce21c88e89b87c9b7b162810954717c8bdbd1b0e1ea15ea2e20e0d7e1ad1b7ee7cfa0a80438fc1af85aaca7377dc35cecd5942")
r10 = open(&(0x7f0000001ec0)='./file0\x00', 0x410381, 0x8)
mremap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x3000, 0x3, &(0x7f0000ff7000/0x3000)=nil)
syncfs(r0)
io_uring_register$IORING_REGISTER_PBUF_RING(r4, 0x16, &(0x7f0000002280)={&(0x7f0000003000)={[{&(0x7f0000001f00)="ec10bdcc3c1510f6470aa28da3636f450f3d005a4e4e89ea351e72a6b6233bdb7b0e1938c74e9db412f9cba36b7e4af97c8fd1", 0x33, 0x3}, {&(0x7f0000001f40)="cdca95c98d407b4e6c8e9c22f420a897ae4e010aa243adb2ef90430abf6b6aebd3419244ed744180845b74d929a938fe5e65894ae11cdcfd73027dbc93e01b326a2b5ea24a63777c6bea028d584471e4ed2599680f3c6889015c4a008ddcad94b11b76370e69108de97679610613dc87c06b5dff823cad5858f563f0f51642297a5b327a", 0x84}, {&(0x7f0000002000)="6529b0527622ddbbcecbfb1fd1a0703bdf5130ddd33610852d58b951a4f991e540ae956b6303b34ca6e1a6a69e40b289c6257dc467f0ff2fd4bbc022fdaf3b8373983e11ce654e519abbea7b9c12ffdbb6f071c28938867be0046a3473055f68d7188f3696b1f623166a3c0932fb90be96051162d308a82e96e64904aa3ddd1aca22a79b3980304d8e2b4533fc70c76c22ed788ca30aa6d8cb4ab2ce48423fdca1f84c97f608aa477d8e128b036b5da90bbabf5c51b18f4683c79800f76a1f9a19a55bff8a2382fc9f6dc2497e5d770e6cbec820c673", 0xd6}, {&(0x7f0000002100)="596ffc0088aa979fd11de14b3d878fd166f74f16169276a1d59969c4c8dfb1", 0x1f, 0x3}, {&(0x7f0000002140)="e8e235a0c58f391d7cf16d109230fc5c2c6ddd2ddf1e8b0c963facd8ddb65314ef073efc6f6c08c1757c62c4a6125e98364bd514274edf4c9d3a37dbf77194742703ce27243619a5e11ef26d4d9bed98b2bb8c59809ed8f3d521963944a8a9ecdcf827fb643c83c22d0e58cdefad00958b2c43649e7ee2c74eacaf7e64ec973811d264346e731106dae073d84f91269499ced2d660df0c7b5fedd2dbf294900eeabd58856c7e1a58", 0xa8, 0x1}, {&(0x7f0000002200)="59b5f682b557259b8b0baf1efda74e33f175a08ab9a467e43a258dcb9ed0692e09e53e9f060fbdbbc0d3c30a213559da7f82fd509e82eb61ebb4ea74c92a1bfb46f70af57686ed36f0423033f28feaa45356fca5e3121be9972374b7ba8b8392ea708ee436732743165a7d4dfbb9fdb9776e6b098cb33c", 0x77, 0x1}]}, 0x6, 0x1}, 0x1)
sendmsg$nl_xfrm(r4, &(0x7f0000002540)={&(0x7f00000022c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000002500)={&(0x7f0000002300)=@delpolicy={0x1dc, 0x14, 0x100, 0x70bd29, 0x25dfdbfc, {{@in6=@mcast2, @in=@multicast2, 0x4e20, 0x2, 0x4e21, 0x7f, 0xa, 0x80, 0x20, 0x2, 0x0, r7}, 0x6e6bbb, 0x2}, [@tmpl={0x44, 0x5, [{{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xfffff000, 0x2b}, 0x2, @in6=@private2, 0x3502, 0x3, 0x3, 0x81, 0x9, 0x2, 0xca16}]}, @address_filter={0x28, 0x1a, {@in=@empty, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7, 0x7, 0x3}}, @lastused={0xc, 0xf, 0xffffffffffffffff}, @mark={0xc, 0x15, {0x35075a, 0x2}}, @replay_thresh={0x8, 0xb, 0x5}, @algo_aead={0x91, 0x12, {{'aegis128-aesni\x00'}, 0x228, 0x0, "27444764962671ff6c4c55c91568d08ad2839cddc508e42a0d8d950bf1afba5e186edfd58a2e1145f2d2f674e2427cee0b111208e857c75bf34a8998c8c83759fb741439dd"}}, @user_kmaddress={0x2c, 0x13, {@in6=@loopback, @in=@multicast2, 0x0, 0xa}}, @srcaddr={0x14, 0xd, @in6=@initdev={0xfe, 0x88, '\x00', 0x81, 0x0}}, @user_kmaddress={0x2c, 0x13, {@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@local, 0x0, 0xa}}]}, 0x1dc}, 0x1, 0x0, 0x0, 0x24044000}, 0x0)
r11 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x2f)
ioctl$KVM_CREATE_IRQCHIP(r11, 0xae60)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f00000025c0)={'wg2\x00', <r12=>0x0})
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000002680)={'ip6_vti0\x00', &(0x7f0000002600)={'syztnl2\x00', <r13=>0x0, 0x29, 0x2, 0x4, 0x4, 0x1c, @mcast1, @private0, 0x10, 0x1, 0xffff7fff}})
sendmsg$WG_CMD_SET_DEVICE(r10, &(0x7f0000002740)={&(0x7f0000002580)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000002700)={&(0x7f00000026c0)={0x2c, 0x0, 0x8, 0x70bd2c, 0x25dfdbff, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r12}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r13}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x40040)
bind$tipc(r10, &(0x7f0000002780)=@id={0x1e, 0x3, 0x0, {0x4e24, 0x1}}, 0x10)
mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000000, 0x30, 0xffffffffffffffff, 0xe6cef000)
mmap(&(0x7f0000ff4000/0x2000)=nil, 0x2000, 0x2, 0x10010, r11, 0x9d2db000)

8.751865582s ago: executing program 1 (id=70):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="a4010000100001002dbd700000000000e0000001000000000000000000000000ff01000000000000000000000000000100000000000000000000000064000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000032000000ff010000000000000000000000000001000000000000000005000000000000000000000000000000000000000000000000000000000000000400000000000000feffffffffffffff00100000000000000000000000000000000000000000000000000008000000000002000000000000000000000000000002000000000000000000000002000100cd00000000000000480002006362632861657329000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200017000100000025bd7000000000000000000028bd7000aa0e0000"], 0x1a4}}, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0)
r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
fadvise64(r2, 0xdffffffffffffff, 0x1, 0x4)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=ANY=[@ANYBLOB="940000fc025b78fba7cd66005200012dc53596e3927553000002000000a524c78b47440b0001000100"], 0x20}}, 0x80)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x1})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f7410262e66f36d0f330f09660f3a0cb90000a6752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x31}], 0x1, 0x4024e28cdf5c77a0, 0x0, 0x0)
ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000100)={[{0xfffff001, 0xfff, 0x7, 0x0, 0x12, 0x8, 0x40, 0x4, 0x6b, 0x3, 0x7, 0x0, 0x7fffffffffffffff}, {0x7ff, 0x1ff, 0x9, 0x8, 0x10, 0x81, 0x4, 0x40, 0x5, 0xbc, 0x4, 0x9, 0x9}, {0xd2, 0x80b0, 0x5, 0xff, 0x84, 0x9, 0xfc, 0xe, 0xe, 0x9, 0xe, 0x6, 0x7}]})
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x3, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x5, 0x40, 0x40, 0x0, 0x3, 0x2004cb, 0x4000000000000000, 0x2, 0x3, 0x0, 0x1, 0x0, 0x2, 0x9, 0x1], 0x80a0000, 0x450})
ioctl$BTRFS_IOC_GET_DEV_STATS(r4, 0xc4089434, &(0x7f0000000980)={<r5=>0x0, 0x1, 0x0, [0xe, 0x2, 0x5, 0x7ff582b, 0xcea], [0xa86, 0xffffffff, 0xfffffffffffff75c, 0xaa1, 0x4, 0xa, 0x3f, 0x68a2, 0x6, 0x10000, 0x6, 0x3, 0x24d, 0xffffffffffffff99, 0x8000000000000001, 0x5, 0x3, 0xff, 0x80, 0x582, 0x0, 0x4, 0xffffffff, 0x8, 0x5, 0xfffffffffffffffc, 0x8000, 0x200, 0x101, 0x4, 0x6, 0xffff, 0xa7, 0x3, 0x8000000000000000, 0x5, 0x4, 0x1, 0x1, 0x0, 0x401, 0xfd, 0x5, 0x7d9d, 0x2, 0x1, 0x9, 0x8, 0x1, 0xfffffffffffffffc, 0x6, 0x3ee9f278, 0x40, 0x6, 0x7fffffff, 0x1, 0x8, 0x100000000, 0x4, 0x4, 0x80000001, 0x3ff, 0x4, 0x49320000000000, 0xbd8, 0x4, 0x1f3, 0xe, 0x2, 0x3100000, 0x5, 0x8, 0x0, 0x6, 0xfc00000000000000, 0x7, 0x80, 0x4, 0x0, 0xffff, 0x4, 0xf, 0x4, 0x4, 0x7, 0x0, 0x7, 0x1, 0x1, 0x6, 0x6, 0x200, 0x3, 0x5, 0x36e, 0x8, 0x101, 0x550e, 0xfffffffffffff39e, 0x9, 0xfffffffffffffffb, 0xd7c3, 0x7, 0x1ff, 0xfffffffffffffd93, 0x81000, 0x80000001, 0x4, 0x1800000000, 0x1, 0x9, 0x4, 0xfffffffffffff856, 0x2000000000000000, 0x1, 0x8, 0x1000, 0x1, 0x4, 0xd, 0x7]})
ioctl$BTRFS_IOC_GET_DEV_STATS(r4, 0xc4089434, &(0x7f0000000dc0)={<r6=>0x0, 0xcf61, 0x1, [0x9, 0x2, 0x0, 0x10000, 0x8], [0x9, 0x257, 0xe, 0x5df, 0x8, 0x68, 0x7, 0x6, 0x69, 0xffffffff, 0x4, 0x2, 0x2, 0x1c55fc93, 0x86c, 0x973, 0x7d, 0x4, 0x6, 0x8, 0x9, 0x3, 0x2, 0x4, 0x0, 0xd, 0x7fffffffffffffff, 0xffffffffffff0001, 0xa, 0x40, 0x0, 0x0, 0x5, 0x1f2, 0x5, 0x8, 0x10000, 0x9, 0x8, 0x0, 0x2, 0xffffffff, 0x9, 0x5, 0x100000001, 0x4, 0x0, 0x8f0b, 0x7, 0x6, 0x0, 0x0, 0x9cd, 0x7ace, 0x4, 0x10000, 0x4, 0x1, 0x7ff, 0x5, 0x7, 0x3, 0xab, 0x1, 0x6, 0x5, 0x5, 0x8, 0x9, 0x90f0, 0x9, 0xffffffffffff8001, 0x0, 0x4, 0x3, 0x3, 0x6, 0xa, 0x5, 0x401, 0x8000, 0x2, 0x8000, 0x7, 0x7ff, 0x0, 0xffffffffffffff55, 0x0, 0xffffffffffffffff, 0x7, 0x3d4102de, 0x9, 0x5, 0x2, 0x6, 0x6, 0x9, 0x1, 0xce, 0x4, 0x10000, 0xba, 0x7, 0x483, 0xbbf1, 0x0, 0x7ff, 0x9cf, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0, 0x80000000, 0x5, 0x432e2492, 0x5, 0x3, 0x7fffffff, 0x4, 0x9, 0x8]})
ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000001200)={0x1, 0x2, {0x56ee8c54, @usage=0x10, r5, 0xd, 0x7fffffffffffffff, 0xb031, 0x2, 0xf9, 0x44a, @struct={0x3ec, 0x4}, 0x6, 0x2, [0xfffffffffffffffe, 0xff, 0x1, 0x2, 0x1, 0xd9f7]}, {0x7, @struct={0x9, 0x4}, r6, 0x4, 0x4, 0x9, 0xffffffff, 0x7, 0x82, @usage=0xfffffffffffffffb, 0x59a, 0x6, [0x8, 0xfad, 0x10001, 0x800, 0x1, 0x5]}, {0x9, @struct={0xef, 0x5}, 0x0, 0x3, 0x6, 0x2, 0xffffffff8a6ac60e, 0x8, 0xc0, @struct={0xfffffff8}, 0x29c78acb, 0x4, [0x9, 0x8, 0xd, 0xfffffffffffffff7, 0x7, 0x4]}, {0x7, 0x7, 0x100}})
ioctl$KVM_RUN(r4, 0xae80, 0x0)

8.149691155s ago: executing program 1 (id=71):
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0)
syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x300884c, &(0x7f00000005c0), 0x1, 0x515, &(0x7f0000000b40)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0xc2042, 0x150)
r1 = syz_io_uring_setup(0x2341, &(0x7f0000000100)={0x0, 0x2f31, 0x10000, 0x3, 0x12c, 0x0, r0}, &(0x7f0000000080), &(0x7f0000000180), &(0x7f0000000040))
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1)
sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000000000008000200000000002c00018014000300ff01000000000000000000000000000114000400090200000000000000000000000000010c00028005000100000000004700028005000100010000000600040000000000060005"], 0xe4}, 0x1, 0x0, 0x0, 0x404c080}, 0x4008840)
io_uring_register$IORING_REGISTER_FILE_ALLOC_RANGE(r1, 0x19, &(0x7f00000001c0)={0x63f2, 0xf}, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0x100, 0x0)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r3, 0x40086610, &(0x7f00000004c0)={@id={0x2, 0x0, @b}})

7.643909556s ago: executing program 1 (id=73):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="150000001000000008"], 0x50)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000a80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000005000000b70000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x77)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240)=ANY=[@ANYRES32=r0, @ANYRES32=r2], 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000080), &(0x7f0000000100)}, 0x20)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r2, 0xe0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff55, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x86, 0x8, 0x0, 0x0}}, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000680)={&(0x7f0000000540)={0x114, r3, 0x10, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x2, 0x4}}}}, [@NL80211_ATTR_STA_EXT_CAPABILITY={0xf3, 0xac, "8dec7f87987554651b0df1b332652d41f6d98cc7b76f2decc6a96b398f7c013006018aad88fcf2b2c0ba477ceb9014709691fc17d6e7847bb7cbd2ba1fd32ab8695ef1cfdb45488b00beac0d8c133ee920e541063550a4dae5f7dc0167930e72c855a9460c4b8250d71c913db7bec02e5915ff6891a56fb0213c39965b401f05497aa14e7f802add0578c682be36bd28ddfb07ad6387ca593a445026ca8c92e30148247b381fffcdec9ef2eb251990298988b880830aad82f2b9083cdc266a4532ecbafc4039965a9cabfae00dc9a4b80abb7703740d09761bd7f257e05a08178b08b6a109926000a32a10d990c019"}]}, 0x114}, 0x1, 0x0, 0x0, 0x80}, 0x80)
openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0), 0x202081, 0x0)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004"], 0x48)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(r6, r7, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x52, &(0x7f0000000080)=[@cr4={0x1, 0x52862}], 0x1)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000006c0)=[@textreal={0x8, &(0x7f0000000000)="3e0f01cb3e360f01c8d60f0107c1e0a80f01c2baf80c66b8f8e72d8e66efbafc0c66b80000000066ef0f01c866b9800000c00f326635001000000f300f30", 0x3e}], 0x1, 0x8, 0x0, 0x0)
ioctl$KVM_RUN(r7, 0xae80, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x6, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000018200000", @ANYRES32=r4, @ANYBLOB="0000000040000000c302a000000000009500"], &(0x7f00000003c0)='syzkaller\x00', 0x5, 0xd2, &(0x7f00000002c0)=""/210}, 0x94)

7.510588599s ago: executing program 1 (id=76):
syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000180)='./file1\x00', 0x400, &(0x7f0000000280)=ANY=[@ANYRES8=0x0, @ANYBLOB="6092034e5823f645654f6e8edfc3b8e1a948efb0d4b9a9d4c30f5dacb3c1a7ea2587d59165777f070017c2921e793ec5a1384e143b57bb832f14bb43afdef6cb4ed4960b6c732be46a927cdd8c57f93ee6c15401df91ebcbe4f9989843313ea9f243d4dc3d276b966b898100a620b69b543033b9b7bcd9069b9248fbdff46c4a49f094a61938776ce1a1d0f0c84cb7a84bf0b1e2ce5f38f95e11d5b1977ead80625337f66dc391089ab8573d008a4bd03f6f9f01406db632558ed25be4beecd844ac00e52f95c5dc96a1e4a25c80d56aebf6cb33914d6bc72a40bf2fc94efed2f941cf3e"], 0xf9, 0x1213, &(0x7f0000000600)="$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")
mkdir(&(0x7f00000000c0)='./bus\x00', 0x11e)
mount$incfs(&(0x7f00000007c0)='.\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000000), 0xc002, 0x0)
chdir(&(0x7f00000003c0)='./bus\x00')
syz_mount_image$exfat(&(0x7f0000000280), &(0x7f0000001800)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x10, &(0x7f00000018c0)=ANY=[], 0xfd, 0x1501, &(0x7f00000002c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0)
write$P9_RREADLINK(r0, &(0x7f0000000000)={0xffffffffffffff23, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab)
unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x0)

7.396622771s ago: executing program 1 (id=77):
syz_read_part_table(0x1050, &(0x7f0000001080)="$eJzsz7GtwgAMBNBLfn5S0DAC1EwBO2QLdiCj0NCwAqshmYJEMAFK8V5jnXyy5LACf/Os9Gmr6jLnJsn/Utrk/N0e+mTa7a/jsU3aT+12OqQbHnMakvTPZjst96aqqveuy3j/wXMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsHqvAAAA//9cZxAG")

7.054367249s ago: executing program 1 (id=80):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x3000, 0x7, &(0x7f0000ffd000/0x3000)=nil)
r0 = userfaultfd(0x801)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0xdc})
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000140)={{&(0x7f0000ff2000/0xe000)=nil, 0xe000}, 0x2})
ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000080)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x1})
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19)

6.941116761s ago: executing program 33 (id=80):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x3000, 0x7, &(0x7f0000ffd000/0x3000)=nil)
r0 = userfaultfd(0x801)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0xdc})
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000140)={{&(0x7f0000ff2000/0xe000)=nil, 0xe000}, 0x2})
ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000080)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x1})
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19)

3.180133052s ago: executing program 3 (id=113):
syz_usb_connect$uac2(0x3, 0x87, &(0x7f0000000040)=ANY=[@ANYBLOB="12015002000000081e049bd6c5fdbf89aa8a00304000010203010902750003010e0040080b0002010420090904000000010120000924017c01061500020c2403060204ba0300ff010809040100000102200009040101010102200009050109080003070a0825010230060d00090402000001022000090402010101022000090582090004030305082501003c01e900"], &(0x7f0000002d00)={0x0, 0x0, 0x0, 0x0})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000300)=[{0x28, 0x6, 0x4, 0xfffff014}, {0x6, 0x0, 0x1}]}, 0x10)
r1 = socket$inet6(0xa, 0x800, 0x5)
tee(r0, r1, 0x3, 0x1)
syz_usb_connect$uac2(0x3, 0x87, &(0x7f0000000040)=ANY=[@ANYBLOB="12015002000000081e049bd6c5fdbf89aa8a00304000010203010902750003010e0040080b0002010420090904000000010120000924017c01061500020c2403060204ba0300ff010809040100000102200009040101010102200009050109080003070a0825010230060d00090402000001022000090402010101022000090582090004030305082501003c01e900"], &(0x7f0000002d00)={0x0, 0x0, 0x0, 0x0}) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) (async)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000300)=[{0x28, 0x6, 0x4, 0xfffff014}, {0x6, 0x0, 0x1}]}, 0x10) (async)
socket$inet6(0xa, 0x800, 0x5) (async)
tee(r0, r1, 0x3, 0x1) (async)

3.167886752s ago: executing program 3 (id=114):
syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x80c406, &(0x7f00000005c0)=ANY=[], 0xff, 0x2bc, &(0x7f0000000180)="$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") (async)
munmap(&(0x7f0000002000/0x1000)=nil, 0x1000)
syz_btf_id_by_name$bpf_lsm(0x0)
r0 = openat$incfs(0xffffffffffffff9c, 0x0, 0x139081, 0x9c37611dc13d0da6) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c000000680041002abd7000fddbdf250a000300000000000800010002000000060006000100000004000b"], 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x4000012)
write$UHID_INPUT(r0, 0x0, 0x0) (async)
r2 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file2\x00', 0x800004, &(0x7f0000000040)=ANY=[], 0xfe, 0x3bc, &(0x7f0000003040)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x143042, 0x80)
pwritev2(r2, &(0x7f0000000100)=[{&(0x7f0000000040)="af", 0x1}], 0x1, 0x0, 0x6, 0x0) (async)
r3 = socket$nl_route(0x10, 0x3, 0x0) (async)
r4 = socket(0x200000000000011, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) (async)
ioctl$KVM_SET_REGS(r0, 0x4090ae82, 0x0)
sendmsg$nl_route(r3, 0x0, 0x0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, 0x0, 0xe0) (async)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
r5 = open(0x0, 0x0, 0x112) (async)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async)
bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0)
bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) (async)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) (async)
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async)
getdents(r5, 0x0, 0x0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async)
munlockall()
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8)

3.152465002s ago: executing program 3 (id=115):
r0 = io_uring_setup(0x269c, &(0x7f00000003c0)={0x0, 0xbe21, 0x8000, 0x0, 0x321})
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000480)=""/118, 0x76}], 0x1) (async)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async)
r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x7071, 0x0, 0x2, 0x156}, &(0x7f0000000100)=<r2=>0x0, &(0x7f00000000c0)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0) (async)
openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) (async)
mount$9p_fd(0x0, &(0x7f0000000680)='./file0\x00', &(0x7f0000000380), 0x14c98, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0900000003000000000400004300000042000000", @ANYRES32, @ANYBLOB="000000000000003fae9806000000000000000000dbea3591d971d2fedaf1575fd3d16d", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) (async)
close(0x3) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB="01000000000000000000000000e2000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001600)={r5, 0x0, &(0x7f0000001580)=""/92}, 0x20) (async)
fcntl$getownex(r0, 0x10, &(0x7f0000000300)={0x0, <r6=>0x0}) (async)
io_uring_enter(r1, 0xabe, 0x72f8, 0x41, &(0x7f0000000940)={[0x6]}, 0x8)
r7 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_ERR_FILTER(r7, 0x65, 0x7, &(0x7f00000001c0)=0x8, 0x4)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000340)={'lo\x00', <r8=>0x0})
sendmsg$can_raw(r7, &(0x7f0000000140)={&(0x7f0000000000)={0x1d, r8}, 0x10, &(0x7f00000005c0)={&(0x7f0000000380)=@canfd={{0x2, 0x0, 0x1, 0x1}, 0x23, 0x3, 0x0, 0x0, "22bb191c3413648fc570aaa49837f125b6d9fa2ec226aaabb8f7dfe2bf31d8a19abec1420a9e11cdb7d7d9a554bf30755cdf02364042e256d8b1c8c10c764cd9"}, 0x48}}, 0x4008054) (async)
r9 = socket$nl_route(0x10, 0x3, 0x0)
getsockopt$sock_buf(r9, 0x1, 0x3e, &(0x7f0000000080)=""/103, &(0x7f0000000100)=0x67) (async)
syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@any_dev={0x4, 0x6e2, 0x0, 0x0, 0x1000, 0x6, r6, 0x0, 0x100}}}, &(0x7f0000000580)=<r10=>0x0) (async)
r11 = socket$inet6_tcp(0xa, 0x1, 0x0)
r12 = dup(r11)
syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, &(0x7f0000000540)={0x34, 0x0, 0x0, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x6}, 0x0, 0x0, 0x0}) (async)
syz_ublk_setup_queues(r12, r10, &(0x7f0000000180)={0x0, 0x87d6, 0x10, 0x2, 0x395, 0x0, r1}, &(0x7f0000000600)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb3b9, 0x40, 0x2, 0x5d}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x15f5, 0x4, 0x0, 0x31f}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x444b, 0x20, 0x1, 0x285, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5288, 0x200, 0x2, 0x35d, 0x0, r12}}], 0x4, &(0x7f0000001d00)={0x2e, 0x1, 0x0, r12, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0xef}, 0x0, 0x0, '\x00', {0x2, 0x9f2, 0x0, 0x0}}, 0x0) (async)
r13 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r12)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r14=>0xffffffffffffffff})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xe, 0x7fff0000}]})
r15 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_NL_MEDIA_GET(r15, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000900)=ANY=[@ANYBLOB="000000050104f0fec90a70fa", @ANYRES16=0x0, @ANYBLOB="7dbd27bd7000fcdbdf250b000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x4080800)
setsockopt$sock_attach_bpf(r14, 0x1, 0x35, &(0x7f0000000040), 0x13) (async)
sendmsg$BATADV_CMD_GET_VLAN(r12, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r13, @ANYBLOB="0800010000000100000011886124a600300001000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000841}, 0x20000000)

3.099839123s ago: executing program 3 (id=116):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
unshare(0x20060400)
r1 = socket$xdp(0x2c, 0x3, 0x0)
bind$xdp(r1, &(0x7f0000000240), 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff)
r3 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r3)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa)
sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r4, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000002a00)={<r6=>0x0, 0x1, 0x2, 0x1})
ioctl$BTRFS_IOC_DEV_INFO(r1, 0xd000941e, &(0x7f00000017c0)={r6, "bebbd971c78ace186200dc7d1010faa4"})
r7 = socket$nl_route(0x10, 0x3, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="2000000014002101caaf00000000000000000200b000", @ANYRES64=r0, @ANYRES16=r2], 0x20}, 0x1, 0x0, 0x0, 0x4008854}, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000a40)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000a00)={&(0x7f0000002900)=ANY=[@ANYBLOB="300000006a0000042dbd7000fcdbdf25000000000000000008000500", @ANYRES32=r8, @ANYBLOB="04000b090000090008000ad23ec08e8c7e00000200000057e1260673bcac99d86b892d6a1de3e0c89fe594500cabf4e955e7114ef290a525ed86487aa43f4fce14b077930ac2ae4e5d5aa8322769fe1aad7e7a59dfca7ed318fb2f923858c7022360e6b389300f9fe624980c6413ec74d8ea5bb1ca803a6c28f51dc434dc70d452767c2d92058fa154bbe0088e122773b318df0500000000000000257e6dda3174cf"], 0x30}}, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1300000015000100000000000000000002000000", @ANYRES32=r8], 0x18}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', <r9=>0x0})
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000280)={'sit0\x00', &(0x7f0000000a80)={'gre0\x00', <r10=>0x0, 0x40, 0x7800, 0x9, 0x2, {{0x1a, 0x4, 0x0, 0x2, 0x68, 0x66, 0x0, 0x4, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x18}, @remote, {[@lsrr={0x83, 0xf, 0x37, [@remote, @local, @multicast1]}, @timestamp_prespec={0x44, 0x44, 0xb, 0x3, 0xd, [{@dev={0xac, 0x14, 0x14, 0x39}, 0x1}, {@loopback, 0x6}, {@broadcast, 0xfffffff9}, {@local, 0x3}, {@remote, 0x2}, {@dev={0xac, 0x14, 0x14, 0x36}, 0x9}, {@remote, 0x80}, {@empty, 0xb}]}]}}}}})
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000400)={'syztnl1\x00', &(0x7f0000000340)={'tunl0\x00', <r11=>0x0, 0x8000, 0x8000, 0x31dc1806, 0xffffffff, {{0x1c, 0x4, 0x0, 0x8, 0x70, 0x66, 0x0, 0x7f, 0x2f, 0x0, @multicast2, @multicast1, {[@timestamp_addr={0x44, 0x4c, 0xe2, 0x1, 0xa, [{@private=0xa010102, 0xf3}, {@remote, 0x8b8f}, {@rand_addr=0x7, 0x6}, {@multicast1, 0x400}, {@multicast2, 0x10000}, {@multicast2, 0x6e35}, {@broadcast, 0x40}, {@multicast1}, {@dev={0xac, 0x14, 0x14, 0x31}, 0xe543}]}, @end, @ra={0x94, 0x4, 0x7}, @generic={0x7, 0xa, "01174c0f8a6f2863"}]}}}}})
sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000004c0)={&(0x7f00000027c0)=ANY=[@ANYBLOB="c1000001f84453c26c4eba30480ec856124a31062f7dbbcac0c151c91bf2cd832d1fd037367ccc6f5893597160c5faf17eebd162577fc1b217b0b99193a9156a37e8dee846093692ee00951d79351aed9a8ffc00d40e0c13023c2054b22708ef844a3f94c663bffc5355a8cdee25b7ad25442d295622f87bdb8acc1c380c490016b0efc5a08a2a0f63ad5bb0f60dfe53", @ANYRES16=r2, @ANYBLOB="000428bd7000fedbdf25150000002800018008000100", @ANYRES32=r10, @ANYBLOB="1400020067726574617030000000000000000000080003000100000044000180080003000200000008000100", @ANYRES32=r9, @ANYBLOB="0800030000000000080003006ba207c808000100", @ANYRES32=r10, @ANYBLOB="080003000100000008000100", @ANYRES32=r11, @ANYBLOB="08000100", @ANYRES32=r4, @ANYBLOB], 0x80}, 0x1, 0x0, 0x0, 0x44880}, 0x4008014)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x1, 0x7fff0000}]})
r12 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
fsync(r12)
r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0)
fcntl$lock(r13, 0x26, &(0x7f0000000080)={0x1, 0x0, 0x2007, 0x1fd})
syz_open_dev$usbmon(&(0x7f0000000000), 0x10001, 0x50040)
fcntl$lock(r13, 0x26, &(0x7f00000000c0)={0x2, 0x2, 0x9, 0x401})
syz_mount_image$ext4(&(0x7f0000000b80)='ext2\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f00000002c0)={[{@sb={'sb', 0x3d, 0x3}}, {@inlinecrypt}, {@test_dummy_encryption_v1}]}, 0x1, 0xb68, &(0x7f0000000c40)="$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")

3.098720963s ago: executing program 0 (id=117):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmmsg$unix(r0, &(0x7f00000bd000), 0x492492492492846, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'bridge0\x00'}, @IFLA_VFINFO_LIST={0xc, 0x16, 0x0, 0x1, [{0x4}, {0x4}]}, @IFLA_LINKMODE={0x5, 0x11, 0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x4600}, 0x24044800)
r2 = socket$inet6(0xa, 0x400000000001, 0x0)
setsockopt$inet6_IPV6_DSTOPTS(r2, 0x29, 0x3b, &(0x7f0000006280)={0x3b}, 0x8)
syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000200)='./file1\x00', 0x180c858, &(0x7f0000000100)={[{@utf8no}, {@shortname_winnt}, {@uni_xlateno}, {@shortname_win95}, {@numtail}, {@iocharset={'iocharset', 0x3d, 'cp950'}}, {@shortname_lower}, {@rodir}, {@fat=@check_strict}, {@iocharset={'iocharset', 0x3d, 'macturkish'}}, {@rodir}, {@shortname_mixed}, {@uni_xlate}]}, 0xff, 0x371, &(0x7f0000002980)="$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")
r3 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
getdents(r3, &(0x7f0000001fc0)=""/184, 0x20002078)
r4 = dup(r0)
r5 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
read$FUSE(r5, &(0x7f0000004200)={0x2020, 0x0, 0x0, <r6=>0x0}, 0xfffffffffffffc69)
mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB="2c76ff7273806f6e3d703c0f3030296fc72f34f528c18ca9b8021e907b4e2e752c6163636573733d", @ANYRESDEC=r6, @ANYBLOB=',uname=,directio,k'])
r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002180)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
close_range(r7, 0xffffffffffffffff, 0x0)

3.059401714s ago: executing program 3 (id=119):
syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001581c2908570b28851a6d0102030109021b21010001000b0904c8020103010203090504"], 0x0)
r0 = accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80800)
r1 = gettid()
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x19, 0x5, &(0x7f00000000c0)=@framed={{0x85, 0x0, 0x0, 0x0, 0x6c, 0x4}, [@map_idx_val={0x18, 0x8, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x9758}]}, &(0x7f00000010c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc))
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000880)={0xffffffffffffffff, 0x20, &(0x7f0000000840)={&(0x7f0000000680)=""/209, 0xd1, <r4=>0x0, &(0x7f0000000780)=""/152, 0x98}}, 0x10)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = dup(r5)
fsopen(0x0, 0x0)
r7 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0)
ioctl$EXT4_IOC_GETSTATE(r7, 0x40046629, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r8=>0x0)
fcntl$lock(0xffffffffffffffff, 0x22, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x2})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r8, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
pipe2(&(0x7f0000000040)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff}, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={<r11=>0xffffffffffffffff})
splice(r11, 0x0, r10, 0x0, 0x100000000001, 0x0)
read$watch_queue(r9, &(0x7f0000000540)=""/222, 0xe80)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x1f, 0x18, &(0x7f0000000200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10001}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@map_idx={0x18, 0x8, 0x5, 0x0, 0x3}, @ldst={0x3, 0x2, 0x1, 0x8, 0x5, 0xffffffffffffffc0, 0xfffffffffffffffc}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000380)='syzkaller\x00', 0x68b4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000400)={0x1, 0x1, 0x1, 0x5}, 0x10, r4, r2, 0x0, &(0x7f00000008c0)=[r0, r3, r3, r6, r3, r3], 0x0, 0x10, 0xfff}, 0x94)
r12 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b80)=ANY=[@ANYBLOB="3c020000190001000000000000000000fc0200000000000000000000000000000000000000000000000000000000000000000003000000000200002008000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001d00000000000000000000000000000000000000000000000000000000000000dd020000000000000000000000000000000000020000000084010500ac14143b000000000000000000000000000000002b00000000000000ac14140c000000000000000000000000000000000000ff00000000000000000000000000ffffffff00000000000000000000000010000000320000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffff64010102000000003c"], 0x23c}}, 0x0)
fcntl$lock(r0, 0x5, &(0x7f0000000080)={0x2, 0x0, 0x7, 0x5, r1})

2.883871388s ago: executing program 0 (id=122):
syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8052, &(0x7f00000005c0), 0x6, 0x4e9, &(0x7f00000000c0)="$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")
r0 = open(&(0x7f0000000040)='.\x00', 0x20000, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x9, 0x6, 0x9, 0x8, 0x40}, 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0)
getdents64(r0, &(0x7f0000000fc0)=""/224, 0xe0)
getdents64(r0, &(0x7f0000000fc0)=""/224, 0xe0)
fallocate(0xffffffffffffffff, 0x6f, 0x1, 0x8)
unshare(0x22020400)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mount$incfs(&(0x7f00000007c0)='.\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000840), 0x1004002, 0x0)
chdir(&(0x7f00000001c0)='./bus\x00')
unshare(0x6020400)
mount$9p_unix(0x0, &(0x7f0000000400)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x100484, 0x0)
syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8052, &(0x7f00000005c0), 0x6, 0x4e9, &(0x7f00000000c0)="$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") (async)
open(&(0x7f0000000040)='.\x00', 0x20000, 0x0) (async)
bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x9, 0x6, 0x9, 0x8, 0x40}, 0x50) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) (async)
getdents64(r0, &(0x7f0000000fc0)=""/224, 0xe0) (async)
getdents64(r0, &(0x7f0000000fc0)=""/224, 0xe0) (async)
fallocate(0xffffffffffffffff, 0x6f, 0x1, 0x8) (async)
unshare(0x22020400) (async)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) (async)
mount$incfs(&(0x7f00000007c0)='.\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000840), 0x1004002, 0x0) (async)
chdir(&(0x7f00000001c0)='./bus\x00') (async)
unshare(0x6020400) (async)
mount$9p_unix(0x0, &(0x7f0000000400)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x100484, 0x0) (async)

2.695503792s ago: executing program 0 (id=125):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x20088810}, 0x20040040)
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008200122010009058103"], 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007008500000004"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc)
syz_mount_image$erofs(&(0x7f00000001c0), &(0x7f0000000400)='./file2\x00', 0x8002, &(0x7f0000000040)=ANY=[], 0x1, 0x1f3, &(0x7f0000000700)="$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")
r3 = socket(0x1, 0x3, 0x0)
bind$unix(r3, &(0x7f0000000400)=@file={0x1, './bus\x00'}, 0x6e)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB], 0x50)
syz_usb_connect$cdc_ecm(0x5, 0x79, &(0x7f00000008c0)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x67, 0x1, 0x1, 0x7, 0x10, 0x8, "", [{{0x9, 0x4, 0x0, 0xa, 0x2, 0x2, 0x6, 0x0, 0x10, {{0x7, 0x24, 0x6, 0x0, 0x0, "fa8e"}, {0x5, 0x24, 0x0, 0x101}, {0xd, 0x24, 0xf, 0x1, 0x824, 0x9, 0x3, 0x7}, [@mdlm={0x15, 0x24, 0x12, 0x6}, @acm={0x4, 0x24, 0x2, 0xf}, @mbim_extended={0x8, 0x24, 0x1c, 0xf5b3, 0x7, 0xbffe}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x40, 0x7, 0x4, 0xf}}], {{0x9, 0x5, 0x82, 0x2, 0x200, 0xa, 0x8, 0x81}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x5, 0x6, 0x4}}}}}]}}]}}, &(0x7f0000000b40)={0xa, &(0x7f0000000980)={0xa, 0x6, 0x250, 0x3, 0x4, 0x8b, 0x40, 0x8}, 0x0, 0x0, 0x2, [{0x0, 0x0}, {0x0, 0x0}]})
r4 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0)
r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
r6 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000001c0)={'ip6gre0\x00', <r7=>0x0})
sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001400b59500000000000000000a400000", @ANYRES32=r7, @ANYBLOB="14000200fe8000000000000000000000000000aa080009003f0c0000140001"], 0x48}}, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f00000003c0)={@cgroup, 0x1d, 0x1, 0x6, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, &(0x7f0000000100)=[0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0], <r8=>0x0}, 0x40)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={r5, r7, 0x25, 0x25, @val=@netkit={@void, @void, @void, @value=0xffffffffffffffff, r8}}, 0x1c)
r9 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @tid=r9}, &(0x7f0000000300)=<r10=>0x0)
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
timer_settime(r10, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0)
waitid(0x1, r9, 0x0, 0x61000006, 0x0)
sendmsg$nl_route_sched(r4, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)

2.525232966s ago: executing program 5 (id=130):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, 0x0, 0x0)
fcntl$setstatus(r0, 0x4, 0x40800)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
ftruncate(r1, 0x2000009)
sendfile(r0, r1, 0x0, 0x7ffff004)

2.498107996s ago: executing program 5 (id=131):
r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x101802, 0x0)
ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x2, 0x17, 0x891, 0xc, 0x14, 0x9, &(0x7f0000000040)="ed2cf03666304d4095ce724314864108d9c49b3a"})
syz_usb_connect(0x3, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010002aa9dd9108d0e0300b57d010203010902120001000740080904"], 0x0)

2.29781528s ago: executing program 6 (id=133):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0xb, 0x42, 0x40, 0x42}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000880), 0x1006, r0, 0x0, 0xd88d02a0}, 0x38)
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000140)={r0, &(0x7f0000000100), 0x0}, 0x20)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100))
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r3 = dup3(r2, r1, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000000)='./file1\x00', 0x801, &(0x7f0000000440)=ANY=[@ANYRES64=r3, @ANYRESHEX=r3], 0x7f, 0x258, &(0x7f00000001c0)="$eJzsmb9rFEEUx7+zu7e3hAS0sLE5i4ARkr3dPZU0gloqghBFLQ+zhnibnNxdkTvQGGxs/AP8G6y1SCEWdjZiYWURAwELLW1UHNn5cTv3azzhOt+nmHvz5s2892Z238AeCIL4bzn8/P3g2eXVG8sA5rGI8q7Uf3ELG8ew//TcLSnx7baH/eH1GADOi773F/8+gDeXXOCxXJbzH9wcX+x7d4FASjfh4IzS3gJDqGPlOVJMwXBHqe8bsg4eWcruNrP1e5tZGuVNnDdJ3tQAPhD/tz2GdUj3uQdmxNfu9hr1DLjChJClLanJSlz70ZqJgtdfJ0u9MTa2/fNweJCf0AVjC/Idu/30yV7eD5U+goNFJcdwEKuDqYFhTelXUUYYhhXVTWMj/5Nesb4rj83I3wg3sGUb2Ddi1sLxFauNTmKCjX7wjaHXSnh0BGPol2Ndp/GbTxUz53zXYqPfg77Gn3QEsxC0tylnDQQ2tQunMjrLLzQLw96bo+v4vcbyC+CfEmTtLo6Zm8nUUV5USb8bnXU060d039Q8HLbxMUNfum6ODH2Yy7JrWoOg3X1/VQ2dGFjn1OBb0Bd820NS1E/mAaeVKQPnnnErVDtbD6rtbm9lc6u+kW6k20lSOx+djaJzSVXUZtla6l8g6tOcUf9K8hoCY6ZdrvCxU+90WvEO0GnFvu4nL0VrVNy1V82vYp4j6p+DpZ+cq+ulJNIuj49H3H9lOY+J3pI7MXiCIAiCIAiCIAiCIAiCIAgLlY/yV326XphHxZFfQQP5RxUfj5dcFxP+BAAA///6LUUf")
ioctl$UFFDIO_WRITEPROTECT(r3, 0xc018aa06, &(0x7f0000000480)={{&(0x7f0000ffa000/0x4000)=nil, 0x4000}, 0x1})
socket$tipc(0x1e, 0x2, 0x0)
open(&(0x7f0000000040)='./bus\x00', 0x80202, 0x0)

2.273436351s ago: executing program 6 (id=134):
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0xcd0b3000)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r0, &(0x7f0000001580)={0x0, 0xffffffffffffff3c, &(0x7f0000000300)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911040000000000000003c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62458c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f00000025c0)="87fb74cf4d67adbbd062637f514c1f5eb18d7b442e6457a356c6cb1f71a43dfae773c8489cce5145f92615d4bdb13ef54d6ae90ec7733180fcf5adf3e13fdb05b57b748bd14eda042a97fdd84498304a504a0a159b972e8200c2d0f536a3465ec498ed12b924bd134057df36129d3ebe3dd3ce9f0671e5278143e4afa3d43f444681de1b5f9725fca34fa357fe2154981666fb9dc202fc17a0199eb1c25bdd1005e590e84783ee9894c888998dc25a83c14aeee31d114acfa0bcd235d571cd765f4b9259ba43e6fc30291d8a642146c4771898030b736aeee6b247abb0784b154e104e7dcda401f9b1736fea30a41a4153fe6a9a525bd0a3487571f914f05b590e242341ade289d8f5b842c6be4a93c2755dfd47174def782a2f8f61c068b5a012f02c0801601e860def788121e8808c01fed4c920a3698d0d684920918c95b17f76bbcb4f265c931d8f79560ff8114b70f4dd6791e2ed70cfeb89905791b88be26efe1c5c66b7b50b3d2be0dbc066dfc31618f9507f6f340b85a2f76a6dcac9d6ccc289ace5e5fecd25afe22ffa451f5e365ab33cc985f2e9d7f7fb1be4794740a94215d7db14b0ffcec19e5e3c5ae0d8578ef3b65d2a7a77a11e390a6c3a6b391061c886b961e3c2f42d62047bfe1356a44b840d3d956105f4c0fa95db08c4933f00de77cdc057c28b41fecfc8398c442be1ad065954f6c9dfeb2fd7207e8548a00a1d50bdf522d2abfdafd71723616a34830fbfa8fc81e0c2639cc12f363a4919b7a00ac8189dad3e7e54122a2ef430f623658d5e281c9a19442995bb9b0e3f7d13e3016b6f9523be196bf23bbcc5ec802f43ef8b651d688d9d5a44f35c9847e4c32bce3e9ebed2326adadc76f06a195db32c80b3090d7cd65c9d8518ba4e528c5eb5c7a1c5695b21595fa8a8621734bfda8afddd65e1f37a1990220a00fa9bd2c22b0117ceb08ae6af3c944c2eca924abfddad065d1472d0c3f742a49b1e78c669471873706ad157d831d7482b773f07b0673a6ce1e227a7a4d13744bf459434c0ab1c323a38b1a84cbf1ce9741f2b8fdcc2e073e56171603d035aacd83e71d5132831f4f1e8bf517979f132a33fd03783272e9b8c96dfa4e1d320a58d82acfc8d3d53a5a52daafe4dc8be08f4ad53e11cc21374b6ff4ff5ea2ecc5d3f7c057f74f0098e57d990090475cdaffdef0da917653ed10fb70b94b72e5b4d95cbea0fc1dd2579635ad6ab545ba4d7b6d2f5442bdb78beb6c8ed62942a439117025b4566b48d9f3a17fdf4577e8606a4bc4c26557e58312fd2d1a541ebec3e5ae28eef8b2ab0597083716dd12889335570ee7839530eee879d9b137606cd4dd7103991671b4464bb68529eb19fb7a8845e3491bfbac688a87cf0744f429ea112014402915c4c1f6bae08d689d3cb7d641d7befe8fc74a2242310a9a367a39531b4c86da5b39df524e52f33ff9c40b48cb196ffc9ca855b6e698ade8a83e52b9ddc5031ff09e1907e4f8b0d07e64e1fb8e427f8819a7be907aa216bf8e2a4c7cc87ed53bf9490d4cc788b91f3b9f705e984a7e62c7a495e8421b97c39dc954b35468f17c6682334f4e16308448f457faeffff6d1f818522fa441d3a48168bdb12ffebace436a3915b63076cb6a655718647f87eaaf313b5bbd430421eed3a2215e439600a56eac8c65291eb103326a8034662bd337ab51577d9110ec7151be5cc9c54b2a30891acac5ad006ed537dbeb8f16eecbde7cf4e71373faf3c36b772f6d7ea9346875c8cf1049d49d4f8eb01b946c11e8c8e3ab2015f282167acddcc77fff03e1be9134252af0abfe538b4d25fc4ff874b52b9fb0996b5f32b4141dbd30578ff46e13ef6c63fc1620f62cb11a3dce401993976c272a5f62fde3f2a0e654d19e7a39dcdb622b9526d2a15cc18e6f817c916a00775353dd9c8954e66d0445b59bb0f5e6e3b46447232f52a0e398b057d123ef503afcbd48544db6434d2025bfc8dab72262a4fa5426a03061e7f8966e0086ff8ab5a91ab59f19b830394ee8bc76d6fb4816b8f4cde35b7eb9d3811228d51c54828f97fd1e648196c81bc73ed56249a59f318704e84656a6cedd2b8c1e1808d1cc648749abc643131e494c01336d4a14b8609656f2c972dc23c5c2e43fe40119fb88b5ec2aade35c03646e347354c493de8ab3672ccf94af0df333c6678299129d79be0eec281c5b3858ce3995566a390b674635b356692e3e9c53a089638ba0d69e772b7b410a5ae03de12e7de755ee559e1707b7b8003aabc8e2ce03c01e3183ff2d93262f6d5ceaafecdae66bc7cb3952c5a6571d864d502f281db5a228695badca5d022fdb6da56ab15dc377d1c1f8581ff56e28c2b2a84edb629547d28275c2ed571103b4ca7cdeb0776ba9f9dffcd78d21c3d4caa9289ed199672f4e7b912068c49c817114c37d37ea03954bae87d1ddae3da2ad85feb2fbb735b75a51f7bee5c8d88cc7bf64700d1a46ec6b631ae22ac7b06730a86a26bdcb992e1c7b50142de96b14a8468e4514068a30896fc677fddefaebb125c693a8d460469c7fe535f844781940f66d6abd091191c3122d584f5b0f5b0d443713d7d5186124d73de28aca30b719d4a55e09d259bddbf16995aeb1000880890afbd24d4066b0398985a40999de22ce176348e1c1f57eaf75b92a1e4f1482e89a00ac2cc36b20e36af9ec310599c19a5b1d6f8fadba104c58c801c6633315f82ebfa88faddd0b693e2f827f586c1cc5538e93bcf10f81af6dd7ee727df3b5018c0b4e31e40d040a47503b6ace4d29a1162ce487351825255f5584aff7cbd421f85c3d9fbb3784abd9848f16028b68f0d32ed8bb80106e8cc4acb939ff88bd39976d166b2addebf628b3fcd056da2f60e1b90f7a32702954921908ebccb683622a1f574ceba6951bef5e751c338c8279318dc28e36b9fc2bb17c3ad08aceb00fc388e6db112a738f86a4a1eb11526e1b9d73250b326285ed47c4398d93a3933d9a784249b65ad7d78a1f81d96ef36493ed693045a2150a8eb43cecc0c93e7d20b15b39a0646b081c2923b816365b7fbb41683a41732d942c5aa12faf876ec7f036becde8f3295af6dacff38d076d8e06260fee167703bb610745374a2758a6b88e465ca77d1f3105ae8b6b04a1eb509fb178d6249dbbc84d5d1d069278449a89d03e4a9a395d8170c329a296cfc329798cb9b9f1078d098cf3f989fd4ec53e013fbe917df35292d44fb1f3da4da4432a1847d4721514ade8cda5e5c0b51183580fc35266a970ebba74faeda56d4dcb56df51f96ad237452cedbd0cb2bee112713c3d450835811bf3da9745136d428e148fd0932dc77c8d8e61a16c625241fad8425b4ece394eedd5f165bd94923bfa1172be8edc8a4fcaae5f77ee8cc510192b27964da09c3e84efb4bc7154da1a24da8b7e544b42278d2574687ec76143afa6cf193d52a2a7f4c20ee57b6056a1337d5e408117a6cf1ab49c8980f39597f69902085d3e8d374d44e6ab4ed1185a26be2bc7281e9cfbbeb6bed899aa1924d3faa06d95999fbeaf2337494e0c2c39eef5a73fcde84459a9ea48d4e015d9e5bb5839354967ce02f637bc8678d2595b9a918fc36b927d7501f0ac2e3471ce02b5df355689c87f191ef5390900a41deec29984e45a878ece964b0009aad561316fc3b30ce1b49266d32eb17cd30f3e17e1f59014e8c518940dd0a093d1349c1a7c2581963bbe0ba372b6426e81c33c71b2ec8141c5713e52a37fff0a417a5b259e1420d9fb6a731f5baa0cc494221947895aa8fa14745a986a366bff9d0c239a19f85372497565b5b703da16439019df5f3d29f4247fb528854c9648630f03e9dedde5a08a47728ea6a4d42e62eff6fa3bd402325e0f4387b60171c37c180f958ad80955779c899517e7ea76eed00598e01552eaaf08b723daf9d466e8c57af43a15a46528b1119f5074aa3c51f77357ebe158275bc06b89640d7ce3c0a03af01418d7dc6ae8a1be8ab08c1722d66d1e9277480b8b178447667c024f9b78f8a878a2d7cf8e83e5104f6964b2907a989abafc7d7d0df941abf3d7283b6a11d46c2911a42182ec27ab785d92946e1ee8ef44846d561850d2a98c305c382f36d4cfc9b2bfd3b86ef21a0d187adcafbec8268c7d662a34dda1c83c4967097743133bc8c587edf249f5668c34ddb112fa4eb1bea9c8f6a000f1f34428b54688a5e214a7919868b25dbe930e86a243ecf54afe0b518c647d04873d2cf62cb2ab27f00015537a4fd2ea3dc8777abdf3284622347016566da0b9c406ca8c40694e4013a53fbf2e803d51b0bbe5e9df5fc74f66be618856357ccf803c53ed0e3b3fe79f69f0ede9b565d8f7a8ce5aa8cbb4e8fa61be3fd00ffb07e45065498925c14c0b311942d4ed951ad6237aadb5405bc7b2d79e1fd295b7c2ed8efa883e44c86a5053e2f421c6d4dc0c47d3a05d911db37d6efdb8e50fb3f06139ac147bc7162c21aece79eaf72e9779f19eb5395cec3d15a7594ea70a6b373d98651d2215b210f037ea3f8a57ded74474f6fdb64a08b56af52168da70b30aee03472cd8bee5af04cad7303004a4aba464b99", 0xcb3}, {&(0x7f00000006c0)="97b13f5cf9f584c87e0e637d2ff483a311bb412cb3b03c3d9e97e435f2fceb58ff0402ed7b96244b43386c222917662028d7a01206a1990722ccef1d8f39f7c8ae242e58359217b1c6161ea741445cf16b0c48eb18a6c72174dfb7cd1bd0f409dad5a432bed4afb470da3656dd30d70769e229dc91037321d618e1eff4a176ea46d5cd4d5da97f80356e46d9e8166bf2d97210b631654ece218a2a204a1786ab5a60a881a7a294cd2f92438350e6e3ec4439ebe06133ff65b1e32b809ba0482783b563ec8e5778285da5211e5821135433053a7921319c544d5e797f"}, {&(0x7f00000007c0)="75c37714a0bada8343bceb64ccb6d95a2a37b020e0bf1f6a1de4584223a2f285aaca30a9554cd5cdc1659cb9fec462cc5c2220a7cd891ec3bad99fe3c06e15a109ec0fdb6aeeee5ef8e4bfc28e17984a3860b907d549492d47a447782b7357ea72f4b2c26512a6a33c0247b730a6182ea5a99aee25fcee07f9cb0a80595cd5f744fa6898fdffda5b34b19474b8e853467329e4aea36cfd0e00735d37beb0f895c5688259a8935194eefd3a96d55707133a08f03e14da563160a545396b93341f41c161c93687e28a"}, {&(0x7f0000000b00)="1b080b7a30aec939ce8e26e0cbbe37fc064ceef965fd5e3b6739c966492dbdf71c04423d8a403e56dfd224e4e55918a5e31e683fec5cc9460882a0d1628d02d51a8da997073f856e2cd00586c6e8c89c71cf8be6121b0b3a85d597a1afb0cc311f30cc26183c8e594ce5ff62661c9e32cbc9dd9a72985e9857f3bddb52382b6c27ca85d5774cf17b92e2d2097f12a8687e70f90d46381a47706a9124a2cf61b84f26aae22fd4da84ae35b93f7be9fdfdfbf33c59f5c657e9f7e81b81b786082f88af4de07808ff3c954bae"}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000000000000000000000000008500000011000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000080)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xa5bc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
recvmsg$unix(r1, &(0x7f0000001140)={0x0, 0x2, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1}, 0x40000100)
syz_clone(0x2a801400, 0x0, 0x0, 0x0, 0x0, 0x0)

1.769322132s ago: executing program 0 (id=135):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0x4c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4414, 0x287b0}, [@IFLA_XDP={0x24, 0x2b, 0x0, 0x1, [@IFLA_XDP_EXPECTED_FD={0x8}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x19}, @IFLA_XDP_EXPECTED_FD, @IFLA_XDP_FLAGS={0x8, 0x3, 0x4}]}, @IFLA_GROUP={0x8}]}, 0xf9}}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
syz_emit_ethernet(0x46, &(0x7f0000000380)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00cd14", 0x10, 0x3a, 0xff, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x5a, 0x3}}}}}}, 0x0)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0xc000)
futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xb0090199)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0)
keyctl$clear(0x3, 0xfffffffffffffffd)
keyctl$set_reqkey_keyring(0xe, 0x3)
r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x34)
ioctl$KVM_GET_DIRTY_LOG(r4, 0x4010ae42, &(0x7f0000000200)={0x1ff, 0x0, &(0x7f0000ffa000/0x4000)=nil})
r5 = socket$inet_udp(0x2, 0x2, 0x0)
syz_emit_ethernet(0x42, &(0x7f0000000180)=ANY=[], 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f00000000c0)={'syztnl0\x00', <r6=>0x0, 0x7800, 0x7000, 0x1, 0x5, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x3, 0x0, 0x1, 0x4, 0x0, @local, @private=0x10000}}}})
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r5, 0x89f3, &(0x7f0000000940)={'syztnl0\x00', &(0x7f0000000140)={'gre0\x00', r6, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x4, 0x0, @local, @broadcast}}}})
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz0\x00', 0x1ff)
syz_clone3(&(0x7f0000000340)={0xc6107700, &(0x7f00000000c0), 0x0, 0x0, {0x19}, 0x0, 0x44, 0x0, 0x0}, 0x58)
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200000, 0x8)
sendmsg$sock(r0, &(0x7f0000000900)={&(0x7f0000000180)=@nfc_llcp={0x27, 0x0, 0x1, 0x7, 0x7, 0xfa, "e5148a415f6ff966b9bdb118b41a00b28b483a8c1102035faaed18d74faa3ed9a323771814e5acaaa2bf106577f940a5925a89cffed457133844f6beedceda", 0x1c}, 0x80, &(0x7f0000000800)=[{&(0x7f0000000540)="36a961c4266e597ae1192559cd3718f27e3d412c83b2630be51aca62f522d9f3ec189f0a9662dffc127a150d8c64b0ac2146b4b0f05657a9cef018bf4f8ea1fc319e1ea03fbd75c55ae37c18f9c7fec38513084c8b181b57ff69ceb31ce97bd935395596a0da8a9ddf51ca77f1ffe84087e44ac9e85d4715272a4e0d929e9b7fa29c827d00f321d26b05f0324aee7efbd0d27034fbeeb6b9b2aa483795103e2c0517382c65c007cb1d4f3e32e6304e47ee4a8fc3e0d0b09e6191441a3f388dc11c3a", 0xc2}, {&(0x7f0000000640)="80ac160de8b2bd41ca112b713d99533c0bb8b9981f25994cd32247377008d0a4f5b136b27b4f4633948c0dd1663ea5407f483402ac550fa6370936aad69cc0e2faed", 0x42}, {&(0x7f00000006c0)="dadddaa5843677d5536e7984480210d48e3e90562697a1d4ad1b500989067a6c105e4e2577c671437c93bfc453567aac8ea77cf898e380ae7c75a25075fd7e5ddbbf7e1630c3afe8d986b838d5316c710d0221ca72899b268c88bb3476b79fb66dc921063db788f7d6dd1f12436cb9754665f3d5be7d543ba3af36d02146533199672f7f788dc1f61615e85ed4144a6e751a02fb5809f47dd05bffb9a160f0e42449a13a4c2dae4e31d453196d843d1ed94fa66408938acc8f2d690cad0807a9fa7197c88e313a295bce", 0xca}, {&(0x7f00000007c0)}], 0x4, &(0x7f0000000840)=[@timestamping={{0x14, 0x1, 0x25, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x3}}, @timestamping={{0x14, 0x1, 0x25, 0xba}}, @mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @mark={{0x14, 0x1, 0x24, 0x10000}}, @mark={{0x14, 0x1, 0x24, 0x6}}], 0xa8}, 0x20040000)

1.685605003s ago: executing program 2 (id=137):
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e)
r3 = socket$inet6(0xa, 0x3, 0xff)
connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e22, 0x800, @mcast1, 0x6}, 0x1c)
write$binfmt_script(r3, &(0x7f0000000000)={'#! ', './file0', [], 0xa, "bdd92f0efe8000850d650000000000b320655800b2b184ef1b05713031e573"}, 0x2a)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
sendmsg$unix(r2, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18, 0x4000}, 0x80)
r4 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_int(r4, 0x29, 0x1000000000021, &(0x7f0000000180)=0x9, 0x4)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e22, 0x4, @empty, 0x80}, 0x1c)

1.678545074s ago: executing program 2 (id=138):
mlockall(0x1)
mlockall(0x0) (async)
capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) (async)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x40440, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x2800000, &(0x7f0000000380)={[{@debug}, {@delalloc}, {@journal_ioprio}, {@test_dummy_encryption}, {@nodiscard}, {@min_batch_time={'min_batch_time', 0x3d, 0x5}}, {@acl}, {@nomblk_io_submit}]}, 0x1, 0xbc5, &(0x7f0000000700)="$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") (async)
r0 = creat(&(0x7f0000000000)='./file1\x00', 0x4)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f0000000240)={0x2, 0x0, @multicast1}, 0x10) (async)
io_setup(0x202, &(0x7f0000000200)=<r2=>0x0)
io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x4000, 0x2000}])

1.462488249s ago: executing program 2 (id=139):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
fsetxattr$security_evm(r0, &(0x7f0000001000), &(0x7f0000001040)=@ng={0x4, 0x14, "4581fe7d4f61be"}, 0x9, 0x1)
unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x800, &(0x7f0000000000), 0x26, 0x756, &(0x7f00000002c0)="$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")
mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000140), 0x0, 0x0) (async)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e00)}) (async)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0x0, 0x146)
r2 = openat$incfs(r1, &(0x7f0000000100)='.pending_reads\x00', 0x0, 0x130)
ioctl$TIOCL_GETKMSGREDIRECT(r2, 0xc058671e, &(0x7f00000000c0))

1.332751221s ago: executing program 6 (id=140):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2000008, &(0x7f00000000c0)={[{@grpquota}, {@grpquota}]}, 0xff, 0x553, &(0x7f00000009c0)="$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")
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000002000000711225000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000300), r0)
sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)={0x20, r1, 0x60b, 0x70bd2d, 0xfffffffd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}}, 0x4)
sendmsg$IEEE802154_LLSEC_ADD_KEY(r0, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x34, 0x0, 0x402, 0x70bd28, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_KEY_BYTES={0x14, 0x30, "ae86cf60dc2941a0463c3657ed5c5096"}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc}]}, 0x34}, 0x1, 0x0, 0x0, 0x8804}, 0xc080)
r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xe, 0x2, &(0x7f0000000200)=0x1)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f00000001c0)={'wpan1\x00', <r4=>0x0})
sendmsg$NL802154_CMD_NEW_SEC_KEY(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wpan1\x00', <r5=>0x0})
sendmsg$NL802154_CMD_DEL_SEC_DEV(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000225bd7000fbdbdf251b0000000c00060003000000000000000c00060003000000000000000c000600010000000100000008000300", @ANYRES32=r4, @ANYBLOB="08000300", @ANYRES32=r5, @ANYBLOB="8024758218aee8959bdd82f21b8fc15f6d8609fa5b3affe2e9a35e340419f2b92100a6321e3c02e2775424d6b8659bfc740de090541de487270d620ec862e8404d75db1d85fdfe8db37b8bd81ac677ecf7eb3b"], 0x48}, 0x1, 0x0, 0x0, 0x20004811}, 0x30)
unlink(&(0x7f0000000080)='./file3\x00')

1.332393381s ago: executing program 2 (id=141):
r0 = fsopen(&(0x7f00000000c0)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./bus\x00', 0x8, &(0x7f0000000040)={[{@noauto_da_alloc}, {@errors_remount}]}, 0x21, 0x4f3, &(0x7f00000012c0)="$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")
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x123500, 0x0)
lseek(r1, 0x80000000008, 0x0)
r2 = fsmount(r0, 0x1, 0x0)
fchdir(r2)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x72, 0x0, 0x7fff0000}]})
close_range(r3, 0xffffffffffffffff, 0x0)
symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00')
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x5, 0x0, 0x0, 0x2}, 0x94)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1200000032000000040000000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r5, <r6=>0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000380)=r4}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r6, &(0x7f00000001c0), &(0x7f0000000400)=""/198}, 0x20)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x120048, 0x0)
rmdir(&(0x7f0000000100)='./file0\x00')

1.321280451s ago: executing program 5 (id=142):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xff, 0x7fff0000}]})
close_range(r0, 0xffffffffffffffff, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="2d0000000000000000000000000000009500000000000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80)
r1 = fsopen(&(0x7f00000003c0)='adfs\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async, rerun: 32)
bpf$ENABLE_STATS(0x20, 0x0, 0x0) (rerun: 32)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff00000000000000", @ANYRES32, @ANYBLOB="000063db0000e7545aaacaca0e4adb0e3d130000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r4 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) (async, rerun: 32)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (rerun: 32)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async)
r5 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async)
sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async)
sendmmsg$unix(r7, &(0x7f0000003900), 0x34aa945a513d639, 0x0)
recvmmsg(r6, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) (async)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/power/pm_freeze_timeout', 0x242, 0x145)
syz_open_dev$usbfs(&(0x7f0000000040), 0xd, 0x1)
syz_open_procfs(r5, 0x0)
utime(&(0x7f0000000000)='./file1\x00', 0x0) (async, rerun: 32)
socket$nl_xfrm(0x10, 0x3, 0x6) (async, rerun: 32)
write$selinux_attr(r4, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) (async, rerun: 64)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f0000000600)={[{@grpid}]}, 0x1, 0x521, &(0x7f0000000640)="$eJzs3d9rZFcdAPDvvcmkyW5qpiqyFmyLrewW3ZmksRpF2gqiTwW1vq8xmYSQSSZkJnUTiqb4BwgiKvgH+CL44KMg/RNEWNB3UVFEd/VR98qdudH8mEnGZJJZJ58PnMw598f5nnPJ3Lk/DvcGcG29EBFvRMRYRLwcETPF9LRIsd9J+XKPHr6zlKcksuytvyaRFNMO6srL4xFxs1htMiK++qWIbyQn4zZ399YX6/XadlGutja2qs3dvbtrG4urtdXa5vz83M8j4tWF2axwoX6WI+K1L/zxB9/9yRdf++Unvvm7e3++8628WZ/7UKfdEbF0oQA9dOoutbfFgXwbbV9GsCHJ+1MaG3YrAADoR36M//6I+Gj7+H8mxtpHcwAAAMAoyV6fjn8mERkAAAAwstKImI4krRRjAaYjTSuVzhjeD8aNtN5otj6+0tjZXM7nRZSjlK6s1WuzxVjhcpSSvDxXjLE9KL9yrDwfEc9ExPdnptrlylKjvjzsix8AAABwTdx8/uj5/z9m0nYeAAAAGDHlngUAAABgVDjlBwAAgNHn/B8AAABG2pfffDNP2cF7vJff3t1Zb7x9d7nWXK9s7CxVlhrbW5XVRmO1/cy+jbPqqzcaW5+MzZ371Vat2ao2d/fubTR2Nlv31o68AhsAAAC4Qs88/95vk4jY/+xUO0XxHECAI/4w7AYAgzQ27AYAQzM+7AYAQ1M6cwl7CBh1yRnzTw7e6VwrjF9dTnsAAIDBu/3hk/f/J4p5Z18bAP6fGesDANfP0bt7U0NrB3D1SucdAXhr0C0BhuV9nY+nes3v+fCOPu7/d64xZNm5GgYAAAzMdDslaaU4Tp+ONK1UIp6Ox1k5SsnKWr02W5wf/Gam9FRenmuvmZw5ZhgAAAAAAAAAAAAAAAAAAAAAAAAA6MiyJDIAAABgpEWkf0raT/OPuD3z0vTRqwPH3vr147d+eH+x1dqei5hI/jaTT5qIiNaPiumvZF4JAAAAAMM1lf/pnKcXn3PDbhIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAo+bRw3eWDtJVxv3L5yOi3C3+eEy2PyejFBE3/p7E+KH1kogYG0D8/Xcj4la3+Ek8zrKsXLSiW/ypS45fbm+a7vHTiLg5gPhwnb2X73/e6Pb9S+OF9mf37994kS6q9/4v/c/+b6zH/ufpY+Venn3ws2rP+O9GPDveff9zED/pxD8SIi+82Gcfv/61vb2uMw5V2S3+4VjV1sZWtbm7d3dtY3G1tlrbnJ+f+9TCpxdeXZitrqzVa8XfrmG+95FfPD6t/zd6xC8f7f+J7f9SX73P4l8P7j/8QKdQ6hb/zovdf39v9YifFr99Hyvy+fzbB/n9Tv6w53766+dO6/9yj/5PntH/O331Pz7z8le+8/uuc05sDQDgKjR399YX6/Xa9imZyT6W+Z8yERet5/WBtudJyMTZy0w+IU29jEz27c7/48XqueDqJzLZRVYfjwE0Y+LE93QszlthErGf19XnPyQAADBi/nvQf9odJAAAAAAAAAAAAAAAAAAAAOAynfOxZJMR0ffCx2PuD6erAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACn+ncAAAD//+8b0g8=") (rerun: 64)
fchown(0xffffffffffffffff, 0x0, 0x0) (async)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc)

1.234072253s ago: executing program 6 (id=143):
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x8)
mount$overlay(0x0, &(0x7f0000000040)='./cgroup/../file0\x00', &(0x7f00000000c0), 0x1000000, &(0x7f0000000100)={[{@metacopy_off}, {@xino_off}, {@nfs_export_off}, {@redirect_dir_off}, {@index_on}], [{@smackfstransmute={'smackfstransmute', 0x3d, '\xdeQ'}}]})
mkdir(&(0x7f0000000000)='./cgroup/../file0/file0\x00', 0x0)
unlinkat(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/../file0/file0\x00', 0x200)
rmdir(&(0x7f0000000180)='./cgroup/../file0\x00')
r0 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000001800)={'veth1_virt_wifi\x00', <r4=>0x0})
setsockopt$packet_int(r3, 0x107, 0x14, &(0x7f0000000180)=0x2, 0x4)
setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000000)=0x3da, 0x4)
sendto$packet(r3, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc9", 0x26, 0x0, &(0x7f0000000540)={0xc9, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14)
sendmsg$nl_route(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=@ipv6_getnetconf={0x34, 0x52, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@NETCONFA_RP_FILTER={0x8, 0x3, 0x3}, @NETCONFA_IFINDEX={0x8, 0x1, r4}, @NETCONFA_IFINDEX={0x8}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0xffffffff}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x40004)

1.123991246s ago: executing program 6 (id=144):
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x200040, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000025000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x4e, 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000})
syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0f7f"], 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

1.123729756s ago: executing program 5 (id=145):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000d, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
mincore(&(0x7f0000258000/0x2000)=nil, 0x2000, 0x0)
mkdir(&(0x7f00000003c0)='./file0\x00', 0x21)
mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000140), 0x0, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x5, 0xffe0000000000000, &(0x7f0000000000)=0x1)
chdir(&(0x7f0000000400)='./file0\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x20)
lsetxattr$trusted_overlay_opaque(&(0x7f0000000100)='./file1\x00', &(0x7f0000000180), 0x0, 0x0, 0x3)

1.122918506s ago: executing program 2 (id=146):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x68, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_SEQ_ADJ_REPLY={0x4, 0x4}]}, 0x68}}, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$cgroup_pid(r2, 0x0, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000007c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x310, 0x0, 0x2b8, 0x0, 0xf8, 0x6000000, 0x240, 0x3a8, 0x3a8, 0x240, 0x3a8, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'virt_wifi0\x00', 'syzkaller1\x00'}, 0x0, 0xd0, 0xf8, 0x0, {0xd2030000}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xe0, 0x148, 0x0, {}, [@common=@unspec=@quota={{0x38}, {0x4000000}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xa8}, {0x28}}}}, 0x370)
renameat2(r2, &(0x7f0000000140)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x4)
r4 = syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000000000)='./file0\x00', 0x8, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r5=>0x0)
clock_getres(0x4, &(0x7f0000000200))
fcntl$lock(0xffffffffffffffff, 0x22, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x2})
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
getrusage(0xffffffffffffffff, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x40200, 0x0)
ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000040)=0x13)
setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r5, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
mmap(&(0x7f0000176000/0x1000)=nil, 0x1000, 0x300000b, 0x10, r4, 0xec776000)
r7 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000001c0)={'gre0\x00'})
read$FUSE(r2, &(0x7f0000006080)={0x2020}, 0x2020)
pselect6(0x40, &(0x7f0000000100)={0x0, 0x800000000000001, 0x0, 0x6, 0x800, 0xef, 0x8100001, 0xffffffffffffffff}, 0x0, &(0x7f0000000080)={0x1f, 0x0, 0x6, 0x0, 0x0, 0x3, 0x7, 0xc8}, 0x0, 0x0)

1.062158577s ago: executing program 6 (id=147):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
fsetxattr$trusted_overlay_origin(r0, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)={'batadv0\x00', <r1=>0x0})
sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)={0x1c, 0x0, 0x1, 0x4070bd28, 0x1, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}]}, 0x1c}}, 0x18) (async)
r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12013f00000000407f04ffff00000000000109022d000100000000090400001503000000092140000001220f00090581", @ANYRES8], 0x0)
syz_usb_control_io$hid(r2, 0x0, 0x0)
syz_usb_control_io(r2, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async)
r3 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x40040)
ioctl$HIDIOCGUSAGE(r3, 0x501c4814, &(0x7f0000000000)={0x2, 0xffffffff, 0x0, 0xfffff800})

1.048708707s ago: executing program 5 (id=148):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x2, &(0x7f0000006680)) (async)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xfffffffffffffff7, 0x4, &(0x7f0000000100)=0x1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x3a8bc000) (async)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x4, 0xa7e, &(0x7f00000000c0)) (async)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) (async)
getrusage(0x1, &(0x7f0000000000))

879.962061ms ago: executing program 0 (id=149):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x10)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@getchain={0x34, 0x66, 0x100, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0xfff2, 0xfff2}, {0x4, 0x10}, {0xa, 0x3}}, [{0x8, 0xb, 0x2}, {0x8, 0xb, 0x9}]}, 0x34}}, 0x0)

820.774782ms ago: executing program 5 (id=150):
syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00')
syz_usb_connect$midi(0x2, 0x32, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x20, 0x17cc, 0x1915, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x20, 0x1, 0x1, 0x19, 0x0, 0x4, "", {{{0x9, 0x4, 0x0, 0x0, 0x1, 0x1, 0x3, 0x0, 0x6, [], [{{0x9, 0x5, 0x8e, 0x5926dea5f57e149a, 0x0, 0xf, 0xd7, 0x9, {0x5, 0x25, 0x1, 0x1, '\x00'}}}]}}}}}]}}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0})
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r0, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44)
bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, <r1=>0x0}, 0x8)
r2 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000001140)=r1, 0x4)
bpf$LINK_DETACH(0x22, &(0x7f0000000180)=r2, 0x4)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000100)={r2, r0, 0x4, r0}, 0x10)
syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)={{0x12, 0x1, 0x250, 0xca, 0x21, 0x1e, 0x40, 0x763, 0x1002, 0xbb02, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x9, 0x0, 0x90, 0x2, "", [{{0x9, 0x4, 0xf6, 0x1, 0x0, 0xff, 0xc6, 0x67, 0x5}}]}}]}}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0})

816.306792ms ago: executing program 0 (id=151):
r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc3400000000001090224ef66bf73"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f00000000c0)='./file2\x00', 0x0, &(0x7f0000000200)={[{@nouser_xattr}, {@four_active_logs}, {@four_active_logs}, {@nobarrier}, {@fastboot}, {@fastboot}, {@prjjquota={'prjjquota', 0x3d, '-{'}}, {@jqfmt_vfsv1}, {@background_gc_off}, {@fastboot}]}, 0x1, 0x54f9, &(0x7f000000ab40)="$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")
quotactl$Q_QUOTAOFF(0xffffffff80000301, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, 0x0, 0x0)
r1 = creat(&(0x7f00000000c0)='./file1\x00', 0x12)
fsync(r1)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000380)={0x2c, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0003d8000000d803"], 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)

246.678064ms ago: executing program 2 (id=152):
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x31)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000300)='devtmpfs\x00', 0x1214040, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2102, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000), 0x48401, 0x0)
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000100)='./bus\x00', 0x1200082, &(0x7f0000000600)=ANY=[@ANYBLOB="6572726f72733d636f6e74696e75652c6572726f72733d636f6e74696e75652c757466382c756d61736b3d30303030303030303030303030303030303032313632362c696f636861727365743d63703935302c646973636172642c616c6c6f775f7574696d653d3030303030303030352c6572726f72733d72656d6f756e742d726f2c646973636172642c00d50194377d24b5953951fbb0e6d2204f459a2129e54509e955e3ac3e9dd76061aeb341a8ae53564e806289fad8cab1be25d1de2b9d46be57d2e9c2ded432413ab147de643c400dba4f15a90c962bcd8d805d7d5f57"], 0x11, 0x1535, &(0x7f0000001940)="$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")
sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000000)=ANY=[@ANYBLOB="d8"], 0x1d8}}, 0x4000814)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000080)="67400f07c40249af4b8bb9800000c00f3235010200000f300f20a366450f769e00000100440f20c03588001d00445b66baf80cb88cf4b684ef66bafc0ced460f01c9c4827d24c366ba4cf0ff07ef87f345a57a43e16806a4", 0x58}], 0x1, 0x7c, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x4, 0x7, 0x50000}]})
syz_clone(0xb44040, 0x0, 0x0, 0x0, 0x0, 0x0)
prlimit64(0x0, 0x0, &(0x7f0000000140)={0x2000000000000000, 0xfffffffffffffffb}, 0x0)
setitimer(0x1, &(0x7f0000000080)={{0x0, 0xea60}, {0x0, 0xea60}}, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000001c0)={{0x8000000, 0x41000, 0x0, 0x29, 0xfb, 0xa, 0x40, 0x17, 0x0, 0x2e, 0x19}, {0xf000, 0x50000, 0xf, 0x0, 0x22, 0x5, 0x79, 0x1, 0x5, 0xb4, 0x6}, {0xeeef0003, 0x3000, 0x1, 0x5, 0x3, 0x3, 0x0, 0x19, 0x1, 0x5, 0xa, 0x81}, {0x25000, 0x4, 0x44e41e77284b2876, 0x1, 0x0, 0x42, 0xb, 0x0, 0x6, 0x7, 0xc}, {0x50000, 0x7004, 0x9, 0x3, 0x15, 0x19, 0xab, 0x7f, 0x7, 0x83, 0x18, 0x83}, {0x8000000, 0x0, 0xb, 0x6, 0xad, 0xe1, 0x6, 0x88, 0x8, 0x5, 0xff, 0x5}, {0x3000, 0x7000, 0x4, 0x7, 0xc, 0x5, 0x9, 0x5, 0x5, 0x80, 0xff, 0x6d}, {0x1, 0x1000, 0xc, 0x4, 0xb, 0x7, 0x10, 0x34, 0x2, 0xb, 0x3, 0xe}, {0xa000, 0x30}, {0xffffffff, 0x5}, 0x80000031, 0x0, 0xeeef0000, 0x1200d, 0x3, 0x8000, 0xffff1000, [0x6800010000000000, 0x4, 0x61, 0xb]})
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80)
getdents64(r3, 0x0, 0x0)

0s ago: executing program 3 (id=153):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @empty}, 0x2}}, 0x2e)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x1, @multicast2}, 0x3}}, 0x2e)
r4 = socket$pppl2tp(0x18, 0x1, 0x1)
dup2(r4, r2)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000240)={'veth1_virt_wifi\x00', &(0x7f0000000140)=@ethtool_perm_addr={0x20, 0xbd, "0febf4e22f49e33ff3607d32c6588ffb0b6079aa0d27837a298fa3cddf4e772c7f2890efbd011ccc36127394545931f0bbe24bcf3b5169bc9b8835f81ee0dc73b4a64d1b015cf31eb9f0f3c92d6bc52f8910c6a62d208451c1e97f7427fce6dec5f2b14fd16366c8cedbbc877ae5e9f1ae6244da442e6c77a8a1673d29addce77f8c07ca3ecee230ecd4fe5446567d29515814822ccb9e696e8d82a47f83370ed8cb44e0eaf13aabb84a68af93e029f41e0017cb4388e2acf19aa60233"}})
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48)

kernel console output (not intermixed with test programs):

cess permissive=1
[   13.600596][   T28] audit: type=1400 audit(1782660299.099:63): avc:  denied  { siginh } for  pid=225 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[   14.494574][  T233] scp (233) used greatest stack depth: 22216 bytes left
Warning: Permanently added '10.128.0.19' (ED25519) to the list of known hosts.
[   20.635501][   T28] audit: type=1400 audit(1782660306.139:64): avc:  denied  { mounton } for  pid=279 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[   20.636499][  T279] cgroup: Unknown subsys name 'net'
[   20.658165][   T28] audit: type=1400 audit(1782660306.139:65): avc:  denied  { mount } for  pid=279 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   20.685402][   T28] audit: type=1400 audit(1782660306.169:66): avc:  denied  { unmount } for  pid=279 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   20.685568][  T279] cgroup: Unknown subsys name 'devices'
[   20.830228][  T279] cgroup: Unknown subsys name 'hugetlb'
[   20.835833][  T279] cgroup: Unknown subsys name 'rlimit'
[   20.947821][   T28] audit: type=1400 audit(1782660306.449:67): avc:  denied  { setattr } for  pid=279 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   20.970978][   T28] audit: type=1400 audit(1782660306.449:68): avc:  denied  { mounton } for  pid=279 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1
Setting up swapspace version 1, size = 127995904 bytes
[   20.993554][  T281] SELinux:  Context root:object_r:swapfile_t is not valid (left unmapped).
[   20.995710][   T28] audit: type=1400 audit(1782660306.449:69): avc:  denied  { mount } for  pid=279 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1
[   21.025015][  T279] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   21.027367][   T28] audit: type=1400 audit(1782660306.509:70): avc:  denied  { relabelto } for  pid=281 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   21.061391][   T28] audit: type=1400 audit(1782660306.509:71): avc:  denied  { write } for  pid=281 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   21.086975][   T28] audit: type=1400 audit(1782660306.509:72): avc:  denied  { read } for  pid=279 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   21.112440][   T28] audit: type=1400 audit(1782660306.509:73): avc:  denied  { open } for  pid=279 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   21.841181][  T289] bridge0: port 1(bridge_slave_0) entered blocking state
[   21.848241][  T289] bridge0: port 1(bridge_slave_0) entered disabled state
[   21.855716][  T289] device bridge_slave_0 entered promiscuous mode
[   21.862584][  T289] bridge0: port 2(bridge_slave_1) entered blocking state
[   21.869749][  T289] bridge0: port 2(bridge_slave_1) entered disabled state
[   21.877002][  T289] device bridge_slave_1 entered promiscuous mode
[   21.888715][  T287] bridge0: port 1(bridge_slave_0) entered blocking state
[   21.895743][  T287] bridge0: port 1(bridge_slave_0) entered disabled state
[   21.903109][  T287] device bridge_slave_0 entered promiscuous mode
[   21.923493][  T287] bridge0: port 2(bridge_slave_1) entered blocking state
[   21.930625][  T287] bridge0: port 2(bridge_slave_1) entered disabled state
[   21.937900][  T287] device bridge_slave_1 entered promiscuous mode
[   21.971450][  T291] bridge0: port 1(bridge_slave_0) entered blocking state
[   21.978499][  T291] bridge0: port 1(bridge_slave_0) entered disabled state
[   21.986150][  T291] device bridge_slave_0 entered promiscuous mode
[   22.013503][  T290] bridge0: port 1(bridge_slave_0) entered blocking state
[   22.020561][  T290] bridge0: port 1(bridge_slave_0) entered disabled state
[   22.027929][  T290] device bridge_slave_0 entered promiscuous mode
[   22.034679][  T291] bridge0: port 2(bridge_slave_1) entered blocking state
[   22.041750][  T291] bridge0: port 2(bridge_slave_1) entered disabled state
[   22.049584][  T291] device bridge_slave_1 entered promiscuous mode
[   22.071681][  T290] bridge0: port 2(bridge_slave_1) entered blocking state
[   22.078771][  T290] bridge0: port 2(bridge_slave_1) entered disabled state
[   22.086040][  T290] device bridge_slave_1 entered promiscuous mode
[   22.170209][  T288] bridge0: port 1(bridge_slave_0) entered blocking state
[   22.177260][  T288] bridge0: port 1(bridge_slave_0) entered disabled state
[   22.184599][  T288] device bridge_slave_0 entered promiscuous mode
[   22.194569][  T288] bridge0: port 2(bridge_slave_1) entered blocking state
[   22.201626][  T288] bridge0: port 2(bridge_slave_1) entered disabled state
[   22.209129][  T288] device bridge_slave_1 entered promiscuous mode
[   22.306951][  T287] bridge0: port 2(bridge_slave_1) entered blocking state
[   22.314021][  T287] bridge0: port 2(bridge_slave_1) entered forwarding state
[   22.321301][  T287] bridge0: port 1(bridge_slave_0) entered blocking state
[   22.328306][  T287] bridge0: port 1(bridge_slave_0) entered forwarding state
[   22.350279][  T291] bridge0: port 2(bridge_slave_1) entered blocking state
[   22.357321][  T291] bridge0: port 2(bridge_slave_1) entered forwarding state
[   22.364614][  T291] bridge0: port 1(bridge_slave_0) entered blocking state
[   22.371638][  T291] bridge0: port 1(bridge_slave_0) entered forwarding state
[   22.379957][  T289] bridge0: port 2(bridge_slave_1) entered blocking state
[   22.386994][  T289] bridge0: port 2(bridge_slave_1) entered forwarding state
[   22.394273][  T289] bridge0: port 1(bridge_slave_0) entered blocking state
[   22.401311][  T289] bridge0: port 1(bridge_slave_0) entered forwarding state
[   22.415567][  T290] bridge0: port 2(bridge_slave_1) entered blocking state
[   22.422615][  T290] bridge0: port 2(bridge_slave_1) entered forwarding state
[   22.429893][  T290] bridge0: port 1(bridge_slave_0) entered blocking state
[   22.436904][  T290] bridge0: port 1(bridge_slave_0) entered forwarding state
[   22.450550][  T288] bridge0: port 2(bridge_slave_1) entered blocking state
[   22.457583][  T288] bridge0: port 2(bridge_slave_1) entered forwarding state
[   22.464849][  T288] bridge0: port 1(bridge_slave_0) entered blocking state
[   22.471872][  T288] bridge0: port 1(bridge_slave_0) entered forwarding state
[   22.512101][   T41] bridge0: port 1(bridge_slave_0) entered disabled state
[   22.519489][   T41] bridge0: port 2(bridge_slave_1) entered disabled state
[   22.526656][   T41] bridge0: port 1(bridge_slave_0) entered disabled state
[   22.534147][   T41] bridge0: port 2(bridge_slave_1) entered disabled state
[   22.541486][   T41] bridge0: port 1(bridge_slave_0) entered disabled state
[   22.549311][   T41] bridge0: port 2(bridge_slave_1) entered disabled state
[   22.556484][   T41] bridge0: port 1(bridge_slave_0) entered disabled state
[   22.563730][   T41] bridge0: port 2(bridge_slave_1) entered disabled state
[   22.571158][   T41] bridge0: port 1(bridge_slave_0) entered disabled state
[   22.578330][   T41] bridge0: port 2(bridge_slave_1) entered disabled state
[   22.585864][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   22.593271][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   22.619455][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   22.626861][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   22.634670][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   22.642198][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   22.649760][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   22.657855][   T41] bridge0: port 1(bridge_slave_0) entered blocking state
[   22.664878][   T41] bridge0: port 1(bridge_slave_0) entered forwarding state
[   22.672245][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   22.680446][   T41] bridge0: port 2(bridge_slave_1) entered blocking state
[   22.687470][   T41] bridge0: port 2(bridge_slave_1) entered forwarding state
[   22.694864][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   22.703002][   T41] bridge0: port 1(bridge_slave_0) entered blocking state
[   22.710022][   T41] bridge0: port 1(bridge_slave_0) entered forwarding state
[   22.717307][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   22.725459][   T41] bridge0: port 2(bridge_slave_1) entered blocking state
[   22.732472][   T41] bridge0: port 2(bridge_slave_1) entered forwarding state
[   22.761592][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   22.770755][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   22.779637][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   22.787758][   T41] bridge0: port 1(bridge_slave_0) entered blocking state
[   22.794788][   T41] bridge0: port 1(bridge_slave_0) entered forwarding state
[   22.802833][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   22.810790][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   22.818900][   T41] bridge0: port 2(bridge_slave_1) entered blocking state
[   22.825904][   T41] bridge0: port 2(bridge_slave_1) entered forwarding state
[   22.833338][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   22.841530][   T41] bridge0: port 1(bridge_slave_0) entered blocking state
[   22.848561][   T41] bridge0: port 1(bridge_slave_0) entered forwarding state
[   22.855901][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   22.864159][   T41] bridge0: port 2(bridge_slave_1) entered blocking state
[   22.871190][   T41] bridge0: port 2(bridge_slave_1) entered forwarding state
[   22.878607][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   22.886483][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   22.894520][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   22.914302][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   22.922325][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   22.930367][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   22.939952][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   22.948169][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   22.956457][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   22.964728][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   22.973089][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   22.981286][   T41] bridge0: port 1(bridge_slave_0) entered blocking state
[   22.988288][   T41] bridge0: port 1(bridge_slave_0) entered forwarding state
[   23.006350][  T290] device veth0_vlan entered promiscuous mode
[   23.013075][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   23.021487][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   23.029511][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   23.037732][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   23.046145][   T10] bridge0: port 2(bridge_slave_1) entered blocking state
[   23.053200][   T10] bridge0: port 2(bridge_slave_1) entered forwarding state
[   23.060584][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   23.068911][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   23.077116][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   23.085030][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   23.092884][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   23.100933][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   23.108845][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   23.116262][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   23.123730][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   23.131095][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   23.140032][  T289] device veth0_vlan entered promiscuous mode
[   23.151515][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   23.159566][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   23.168252][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   23.176571][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   23.200189][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   23.207618][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   23.215262][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   23.223508][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   23.231746][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   23.239887][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   23.247723][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   23.255711][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   23.263705][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   23.272121][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   23.283059][  T291] device veth0_vlan entered promiscuous mode
[   23.292577][  T288] device veth0_vlan entered promiscuous mode
[   23.299464][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   23.307626][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   23.315832][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   23.324478][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   23.332970][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   23.340986][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   23.349714][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   23.357199][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   23.368817][  T287] device veth0_vlan entered promiscuous mode
[   23.378733][  T289] device veth1_macvtap entered promiscuous mode
[   23.385326][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   23.393266][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   23.401234][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   23.409198][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   23.417243][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   23.426172][  T290] device veth1_macvtap entered promiscuous mode
[   23.437940][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   23.445578][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   23.452969][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   23.460554][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   23.468842][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   23.486962][  T291] device veth1_macvtap entered promiscuous mode
[   23.493757][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   23.502125][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   23.509845][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   23.517987][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   23.526439][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   23.534789][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   23.543247][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   23.551468][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   23.560497][  T287] device veth1_macvtap entered promiscuous mode
[   23.580535][  T289] request_module fs-gadgetfs succeeded, but still no fs?
[   23.589356][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   23.597048][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   23.606527][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   23.614877][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   23.623081][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   23.631450][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   23.639963][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   23.648157][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   23.656488][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   23.667892][  T288] device veth1_macvtap entered promiscuous mode
[   23.676790][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   23.685272][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   23.717248][  T308] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   23.734830][  T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   23.744915][  T308] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   23.773838][  T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   23.795232][  T320] loop0: detected capacity change from 0 to 512
[   23.816242][  T320] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   23.816471][  T322] loop4: detected capacity change from 0 to 512
[   23.836767][  T325] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3'.
[   23.850405][  T320] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[   23.896399][  T320] EXT4-fs error (device loop0): ext4_orphan_get:1431: comm syz.0.6: bad orphan inode 131083
[   23.907864][  T322] EXT4-fs (loop4): 1 truncate cleaned up
[   23.913691][  T320] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[   23.915742][  T322] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[   24.461962][  T346] loop2: detected capacity change from 0 to 1024
[   24.472502][  T346] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869)
[   24.482154][  T335] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 465: padding at end of block bitmap is not set
[   24.498941][  T346] EXT4-fs (loop2): barriers disabled
[   24.504268][  T346] JBD2: no valid journal superblock found
[   24.510187][  T346] EXT4-fs (loop2): error loading journal
[   24.565525][  T346] loop2: detected capacity change from 0 to 1024
[   24.580087][  T346] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869)
[   24.590600][  T346] EXT4-fs (loop2): barriers disabled
[   24.606302][  T346] JBD2: no valid journal superblock found
[   24.613164][  T289] EXT4-fs error (device loop0): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz-executor: bad entry in directory: directory entry overrun - offset=92, inode=0, rec_len=2320, size=1024 fake=0
[   24.614222][  T346] EXT4-fs (loop2): error loading journal
[   24.658657][  T289] EXT4-fs (loop0): unmounting filesystem.
[   24.704637][  T352] loop0: detected capacity change from 0 to 256
[   24.740647][  T354] loop2: detected capacity change from 0 to 256
[   24.748495][  T291] EXT4-fs (loop4): unmounting filesystem.
[   24.779247][  T361] loop4: detected capacity change from 0 to 256
[   24.786542][  T362] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   24.815122][  T364] loop2: detected capacity change from 0 to 512
[   24.823825][  T361] exFAT-fs (loop4): failed to load upcase table (idx : 0x000104d0, chksum : 0xda218cab, utbl_chksum : 0xe619d30d)
[   24.866609][  T364] EXT4-fs: Ignoring removed i_version option
[   24.875348][  T364] EXT4-fs: Ignoring removed orlov option
[   24.882497][  T361] exFAT-fs (loop4): error, invalid access to FAT free cluster (entry 0x00000008)
[   24.892158][  T364] EXT4-fs: journaled quota format not specified
[   24.919412][  T374] loop4: detected capacity change from 0 to 128
[   24.935960][  T374] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[   24.949789][  T374] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[   24.971341][  T374] netlink: 'syz.4.19': attribute type 3 has an invalid length.
[   24.985325][  T374] netlink: 20 bytes leftover after parsing attributes in process `syz.4.19'.
[   24.996357][  T374] netlink: 12 bytes leftover after parsing attributes in process `syz.4.19'.
[   25.018971][  T359] loop1: detected capacity change from 0 to 40427
[   25.025550][  T308] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[   25.029581][  T359] F2FS-fs (loop1): Small segment_count (9 < 1 * 24)
[   25.042287][  T359] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[   25.074704][  T359] F2FS-fs (loop1): Found nat_bits in checkpoint
[   25.087292][  T378] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802c018, mo2=0003]
[   25.107192][  T378] System zones: 1-12
[   25.118864][  T378] EXT4-fs error (device loop4): ext4_do_update_inode:5281: inode #15: comm syz.4.20: corrupted inode contents
[   25.136637][  T359] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[   25.143944][  T378] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem
[   25.153247][  T359] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[   25.161408][  T378] EXT4-fs error (device loop4): ext4_do_update_inode:5281: inode #15: comm syz.4.20: corrupted inode contents
[   25.199436][  T378] EXT4-fs error (device loop4): ext4_evict_inode:329: inode #15: comm syz.4.20: mark_inode_dirty error
[   25.223965][  T378] EXT4-fs (loop4): 1 orphan inode deleted
[   25.242793][  T378] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[   25.359359][  T385] EXT4-fs: Ignoring removed nomblk_io_submit option
[   25.367048][  T382] kvm: vcpu 3: requested lapic timer restore with starting count register 0x390=770954412 (770954412 ns) > initial count (134138459 ns). Using initial count to start timer.
[   25.406316][  T385] EXT4-fs (loop1): revision level too high, forcing read-only mode
[   25.417947][  T388] ------------[ cut here ]------------
[   25.420986][  T385] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c014e028, mo2=0002]
[   25.423492][  T388] WARNING: CPU: 1 PID: 388 at arch/x86/kvm/x86.c:11263 kvm_arch_vcpu_ioctl_run+0x1a32/0x1f60
[   25.431992][  T385] EXT4-fs (loop1): orphan cleanup on readonly fs
[   25.441572][  T388] Modules linked in:
[   25.441604][  T388] CPU: 1 PID: 388 Comm: syz.4.20 Not tainted syzkaller #0
[   25.441625][  T388] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[   25.441635][  T388] RIP: 0010:kvm_arch_vcpu_ioctl_run+0x1a32/0x1f60
[   25.441660][  T388] Code: e8 f3 b0 a6 00 e9 c8 f2 ff ff 44 89 f9 80 e1 07 38 c1 0f 8c 2e e9 ff ff 4c 89 ff e8 78 b0 a6 00 e9 21 e9 ff ff e8 1e 26 61 00 <0f> 0b e9 99 fc ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 3c ef
[   25.495196][  T388] RSP: 0018:ffffc9000df3fc30 EFLAGS: 00010283
[   25.499716][  T385] EXT4-fs warning (device loop1): ext4_enable_quotas:7080: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[   25.501287][  T388] RAX: ffffffff81103e12 RBX: ffff8881160f8000 RCX: 0000000000080000
[   25.515966][  T385] EXT4-fs (loop1): Cannot turn on quotas: error -22
[   25.523751][  T388] RDX: ffffc900052e9000 RSI: 000000000000003f RDI: 0000000000000040
[   25.538267][  T388] RBP: ffffc9000df3fcb0 R08: ffff88811609bcc7 R09: 1ffff11022c13798
[   25.538410][  T385] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.21: bg 0: block 40: padding at end of block bitmap is not set
[   25.546246][  T388] R10: dffffc0000000000 R11: ffffed1022c13799 R12: ffff88813351f000
[   25.546262][  T388] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff8881160f8078
[   25.561993][  T350] syz.3.13 (350) used greatest stack depth: 19808 bytes left
[   25.568230][  T388] FS:  00007fbaa8cc86c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[   25.592522][  T388] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   25.599139][  T388] CR2: 00007fbaa8cc7ff8 CR3: 00000001120d8000 CR4: 00000000003526a0
[   25.607250][  T388] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[   25.615291][  T388] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[   25.623555][  T388] Call Trace:
[   25.626844][  T388]  <TASK>
[   25.627484][  T378] SELinux:  policydb magic number 0x6aa65f7 does not match expected magic number 0xf97cff8c
[   25.629799][  T388]  kvm_vcpu_ioctl+0x8ed/0xc00
[   25.629830][  T388]  ? __kasan_check_write+0x14/0x20
[   25.641569][   T28] kauditd_printk_skb: 89 callbacks suppressed
[   25.641580][   T28] audit: type=1400 audit(1782660311.129:162): avc:  denied  { read write } for  pid=377 comm="syz.4.20" name="uinput" dev="devtmpfs" ino=262 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[   25.644545][  T388]  ? __cfi_kvm_vcpu_ioctl+0x10/0x10
[   25.650408][   T28] audit: type=1400 audit(1782660311.129:163): avc:  denied  { open } for  pid=377 comm="syz.4.20" path="/dev/uinput" dev="devtmpfs" ino=262 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[   25.655774][  T388]  ? selinux_file_ioctl+0x3ad/0x4c0
[   25.681331][  T390] netlink: 12 bytes leftover after parsing attributes in process `syz.3.22'.
[   25.684228][  T388]  ? __cfi_selinux_file_ioctl+0x10/0x10
[   25.707697][  T385] EXT4-fs (loop1): Remounting filesystem read-only
[   25.712608][  T388]  ? _raw_spin_lock_irqsave+0xc2/0x130
[   25.712632][  T388]  ? __cfi__raw_spin_lock_irqsave+0x10/0x10
[   25.723375][  T378] SELinux: failed to load policy
[   25.726912][  T388]  ? __set_current_blocked+0x208/0x230
[   25.733699][  T385] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6180: Corrupt filesystem
[   25.738956][  T388]  ? __fget_files+0x2d1/0x330
[   25.745064][   T28] audit: type=1400 audit(1782660311.129:164): avc:  denied  { load_policy } for  pid=377 comm="syz.4.20" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1
[   25.749757][  T388]  ? security_file_ioctl+0x95/0xc0
[   25.755502][  T385] EXT4-fs (loop1): Remounting filesystem read-only
[   25.763863][  T388]  ? __cfi_kvm_vcpu_ioctl+0x10/0x10
[   25.774331][   T28] audit: type=1400 audit(1782660311.279:165): avc:  denied  { write open } for  pid=377 comm="syz.4.20" path=2F332F66696C65302F66696C65302F233138202864656C6574656429 dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   25.788335][  T388]  __se_sys_ioctl+0x12f/0x1b0
[   25.795877][  T385] EXT4-fs (loop1): 1 truncate cleaned up
[   25.800022][  T388]  __x64_sys_ioctl+0x7b/0x90
[   25.815849][  T385] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[   25.831293][  T388]  x64_sys_call+0x58b/0x9a0
[   25.831320][  T388]  do_syscall_64+0x4c/0xa0
[   25.863959][  T388]  ? clear_bhb_loop+0x30/0x80
[   25.865010][   T28] audit: type=1400 audit(1782660311.369:166): avc:  denied  { setopt } for  pid=389 comm="syz.3.22" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   25.868667][  T388]  ? clear_bhb_loop+0x30/0x80
[   25.893211][  T388]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   25.899177][  T388] RIP: 0033:0x7fbaa7d9ce59
[   25.899814][   T28] audit: type=1400 audit(1782660311.399:167): avc:  denied  { connect } for  pid=389 comm="syz.3.22" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   25.903603][  T388] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   25.903620][  T388] RSP: 002b:00007fbaa8cc8028 EFLAGS: 00000246
[   25.938485][  T385] EXT4-fs error (device loop1): ext4_encrypted_get_link:46: inode #16: comm syz.1.21: bad symlink.
[   25.943443][  T388]  ORIG_RAX: 0000000000000010
[   25.952371][  T385] EXT4-fs error (device loop1): ext4_encrypted_get_link:46: inode #16: comm syz.1.21: bad symlink.
[   25.960203][  T388] RAX: ffffffffffffffda RBX: 00007fbaa8016180 RCX: 00007fbaa7d9ce59
[   25.960221][  T388] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000007
[   25.960231][  T388] RBP: 00007fbaa7e32e6f R08: 0000000000000000 R09: 0000000000000000
[   25.960241][  T388] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   25.960250][  T388] R13: 00007fbaa8016218 R14: 00007fbaa8016180 R15: 00007fffd2f2bae8
[   25.960263][  T388]  </TASK>
[   25.960269][  T388] ---[ end trace 0000000000000000 ]---
[   26.029282][   T28] audit: type=1400 audit(1782660311.399:168): avc:  denied  { write } for  pid=389 comm="syz.3.22" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   26.065779][   T28] audit: type=1400 audit(1782660311.399:169): avc:  denied  { create } for  pid=389 comm="syz.3.22" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   26.090371][  T290] EXT4-fs (loop1): unmounting filesystem.
[   26.094153][   T28] audit: type=1400 audit(1782660311.399:170): avc:  denied  { bind } for  pid=389 comm="syz.3.22" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   26.115587][   T28] audit: type=1400 audit(1782660311.409:171): avc:  denied  { ioctl } for  pid=377 comm="syz.4.20" path=2F332F66696C65302F66696C65302F233138202864656C6574656429 dev="loop4" ino=18 ioctlcmd=0x5820 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   26.176396][  T398] 9p: Unknown Cache mode readahead
[   26.492070][  T414] =======================================================
[   26.492070][  T414] WARNING: The mand mount option has been deprecated and
[   26.492070][  T414]          and is ignored by this kernel. Remove the mand
[   26.492070][  T414]          option from the mount to silence this warning.
[   26.492070][  T414] =======================================================
[   26.528654][   T39] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   26.600660][  T291] EXT4-fs (loop4): unmounting filesystem.
[   26.662078][  T414] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:477: comm syz.2.28: Invalid block bitmap block 0 in block_group 0
[   26.676317][  T414] EXT4-fs error (device loop2): ext4_acquire_dquot:6828: comm syz.2.28: Failed to acquire dquot type 0
[   26.689029][  T414] EXT4-fs error (device loop2): ext4_free_blocks:6220: comm syz.2.28: Freeing blocks not in datazone - block = 0, count = 4096
[   26.703479][  T414] EXT4-fs error (device loop2): ext4_read_inode_bitmap:140: comm syz.2.28: Invalid inode bitmap blk 0 in block_group 0
[   26.717426][  T414] EXT4-fs error (device loop2) in ext4_free_inode:362: Corrupt filesystem
[   26.726462][  T414] EXT4-fs (loop2): 1 orphan inode deleted
[   26.732269][  T414] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[   26.741534][   T39] usb 1-1: Using ep0 maxpacket: 8
[   26.786415][   T39] usb 1-1: config 3 has an invalid interface number: 45 but max is 0
[   26.831099][   T39] usb 1-1: config 3 contains an unexpected descriptor of type 0x1, skipping
[   26.963859][   T39] usb 1-1: config 3 has no interface number 0
[   27.010688][   T39] usb 1-1: config 3 interface 45 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   27.211023][   T39] usb 1-1: config 3 interface 45 has no altsetting 0
[   27.226975][   T39] usb 1-1: New USB device found, idVendor=0582, idProduct=e6ca, bcdDevice=d3.0b
[   27.244951][   T39] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   27.262026][   T39] usb 1-1: Product: syz
[   27.268599][   T41] EXT4-fs error (device loop2): ext4_release_dquot:6864: comm kworker/u4:2: Failed to release dquot type 0
[   27.294978][   T39] usb 1-1: Manufacturer: syz
[   27.300679][  T288] EXT4-fs (loop2): unmounting filesystem.
[   27.306525][  T420] capability: warning: `syz.4.29' uses deprecated v2 capabilities in a way that may be insecure
[   27.317679][   T39] usb 1-1: SerialNumber: syz
[   27.346246][  T427] netlink: 20 bytes leftover after parsing attributes in process `syz.4.32'.
[   27.355239][  T427] netlink: 20 bytes leftover after parsing attributes in process `syz.4.32'.
[   27.570604][  T433] journal_path: Lookup failure for './file1'
[   27.576701][  T433] EXT4-fs: error: could not find journal device path
[   27.639218][   T39] usb 1-1: USB disconnect, device number 2
[   27.738620][  T298] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   27.950363][  T298] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9
[   27.964593][  T328] udevd[328]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:3.45/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   28.022220][  T298] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024
[   28.097815][  T435] EXT4-fs (loop1): revision level too high, forcing read-only mode
[   28.157820][  T298] usb 3-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00
[   28.170017][  T435] EXT4-fs (loop1): orphan cleanup on readonly fs
[   28.177676][  T435] EXT4-fs error (device loop1): ext4_free_blocks:6220: comm syz.1.34: Freeing blocks not in datazone - block = 0, count = 4096
[   28.222226][  T298] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   28.247806][  T435] EXT4-fs (loop1): 1 orphan inode deleted
[   28.280362][  T298] usb 3-1: config 0 descriptor??
[   28.291999][  T435] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[   28.423407][  T435] process 'syz.1.34' launched './file2' with NULL argv: empty string added
[   28.442581][  T430] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[   28.448896][  T435] EXT4-fs error (device loop1): ext4_lookup:1858: inode #16: comm syz.1.34: iget: bad extended attribute block 524288
[   28.475118][  T438] EXT4-fs error (device loop1): ext4_search_dir:1549: inode #2: block 16: comm syz.1.34: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0
[   28.626702][  T440] EXT4-fs: Ignoring removed bh option
[   28.643410][  T440] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[   28.667066][  T440] EXT4-fs error (device loop4): ext4_find_dest_de:2115: inode #12: block 7: comm syz.4.36: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0
[   28.687063][  T440] EXT4-fs (loop4): Remounting filesystem read-only
[   28.694252][  T440] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2800: Unable to expand inode 12. Delete some EAs or run e2fsck.
[   28.713016][  T291] EXT4-fs error (device loop4): ext4_read_inline_dir:1611: inode #12: block 7: comm syz-executor: path /6/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0
[   28.735089][  T291] EXT4-fs (loop4): Remounting filesystem read-only
[   28.742007][  T291] EXT4-fs error (device loop4): ext4_read_inline_dir:1611: inode #12: block 7: comm syz-executor: path /6/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0
[   28.764473][  T291] EXT4-fs (loop4): Remounting filesystem read-only
[   28.771319][  T291] EXT4-fs error (device loop4): empty_inline_dir:1895: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0
[   28.778603][  T309] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   28.791513][  T291] EXT4-fs (loop4): Remounting filesystem read-only
[   28.805030][  T291] EXT4-fs warning (device loop4): empty_inline_dir:1902: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[   28.819359][  T291] EXT4-fs error (device loop4): ext4_read_inline_dir:1611: inode #12: block 7: comm syz-executor: path /6/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0
[   28.841734][  T291] EXT4-fs (loop4): Remounting filesystem read-only
[   28.848263][  T291] EXT4-fs error (device loop4): ext4_read_inline_dir:1611: inode #12: block 7: comm syz-executor: path /6/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0
[   28.870288][  T291] EXT4-fs (loop4): Remounting filesystem read-only
[   28.876937][  T291] EXT4-fs error (device loop4): empty_inline_dir:1895: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0
[   28.896951][  T291] EXT4-fs (loop4): Remounting filesystem read-only
[   28.903535][  T291] EXT4-fs warning (device loop4): empty_inline_dir:1902: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[   28.917779][  T291] EXT4-fs error (device loop4): ext4_read_inline_dir:1611: inode #12: block 7: comm syz-executor: path /6/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0
[   28.940143][  T291] EXT4-fs (loop4): Remounting filesystem read-only
[   28.946669][  T291] EXT4-fs error (device loop4): ext4_read_inline_dir:1611: inode #12: block 7: comm syz-executor: path /6/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0
[   28.968668][  T291] EXT4-fs (loop4): Remounting filesystem read-only
[   28.975225][  T291] EXT4-fs error (device loop4): empty_inline_dir:1895: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0
[   28.990292][  T309] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 2047, setting to 64
[   28.995077][  T291] EXT4-fs warning (device loop4): empty_inline_dir:1902: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[   29.006126][  T309] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0xD has invalid maxpacket 1023
[   29.020703][  T291] EXT4-fs warning (device loop4): empty_inline_dir:1902: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[   29.031319][  T309] usb 2-1: New USB device found, idVendor=0582, idProduct=002f, bcdDevice= 0.40
[   29.044665][  T291] EXT4-fs warning (device loop4): empty_inline_dir:1902: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[   29.053009][  T309] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   29.072833][  T291] EXT4-fs warning (device loop4): empty_inline_dir:1902: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[   29.082843][  T449] set_capacity_and_notify: 6 callbacks suppressed
[   29.082856][  T449] loop0: detected capacity change from 0 to 512
[   29.092373][  T291] EXT4-fs warning (device loop4): empty_inline_dir:1902: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[   29.095679][  T309] usb 2-1: Product: syz
[   29.102885][  T291] EXT4-fs warning (device loop4): empty_inline_dir:1902: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[   29.116578][  T309] usb 2-1: Manufacturer: syz
[   29.139909][  T449] EXT4-fs (loop0): Test dummy encryption mode enabled
[   29.146676][  T449] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[   29.157898][  T291] EXT4-fs warning (device loop4): empty_inline_dir:1902: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[   29.167978][  T449] EXT4-fs (loop0): 1 truncate cleaned up
[   29.177759][  T309] usb 2-1: SerialNumber: syz
[   29.182804][  T449] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[   29.197903][  T435] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[   29.218138][  T449] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni"
[   29.239627][  T289] EXT4-fs (loop0): unmounting filesystem.
[   29.285617][  T456] loop0: detected capacity change from 0 to 128
[   29.414735][  T309] usb 2-1: invalid MIDI in EP 0
[   29.431453][  T309] snd-usb-audio: probe of 2-1:1.0 failed with error -22
[   29.451445][  T309] usb 2-1: USB disconnect, device number 2
[   29.456078][  T328] udevd[328]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   29.493150][  T298] usbhid 3-1:0.0: can't add hid device: -71
[   29.513786][  T298] usbhid: probe of 3-1:0.0 failed with error -71
[   29.547802][  T298] usb 3-1: USB disconnect, device number 2
[   29.758318][  T461] bridge0: port 1(bridge_slave_0) entered blocking state
[   29.788529][  T461] bridge0: port 1(bridge_slave_0) entered disabled state
[   29.819193][  T461] device bridge_slave_0 entered promiscuous mode
[   29.836911][  T313] device bridge_slave_1 left promiscuous mode
[   29.843386][  T313] bridge0: port 2(bridge_slave_1) entered disabled state
[   29.868854][  T313] device bridge_slave_0 left promiscuous mode
[   29.878636][  T313] bridge0: port 1(bridge_slave_0) entered disabled state
[   29.906994][  T313] device veth1_macvtap left promiscuous mode
[   29.913190][  T313] device veth0_vlan left promiscuous mode
[   29.932946][  T290] EXT4-fs (loop1): unmounting filesystem.
[   29.989868][  T468] loop1: detected capacity change from 0 to 16
[   30.033304][  T468] erofs: Unknown parameter 'CowR�$Y��6�G:���O���]�\߃�e���H�!q�t������'
[   30.117603][  T461] bridge0: port 2(bridge_slave_1) entered blocking state
[   30.136404][  T461] bridge0: port 2(bridge_slave_1) entered disabled state
[   30.146910][  T461] device bridge_slave_1 entered promiscuous mode
[   30.165326][  T456] xt_TCPMSS: Only works on TCP SYN packets
[   30.202555][  T472] loop1: detected capacity change from 0 to 512
[   30.207937][  T460] loop2: detected capacity change from 0 to 131072
[   30.216204][  T460] F2FS-fs (loop2): invalid crc value
[   30.236882][  T472] EXT4-fs error (device loop1): ext4_orphan_get:1405: inode #15: comm syz.1.47: inode has both inline data and extents flags
[   30.252406][  T461] bridge0: port 2(bridge_slave_1) entered blocking state
[   30.257933][  T472] EXT4-fs error (device loop1): ext4_orphan_get:1410: comm syz.1.47: couldn't read orphan inode 15 (err -117)
[   30.259467][  T461] bridge0: port 2(bridge_slave_1) entered forwarding state
[   30.271545][  T472] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[   30.278347][  T461] bridge0: port 1(bridge_slave_0) entered blocking state
[   30.293751][  T461] bridge0: port 1(bridge_slave_0) entered forwarding state
[   30.295009][  T472] 9pnet_fd: Insufficient options for proto=fd
[   30.313031][  T460] F2FS-fs (loop2): Found nat_bits in checkpoint
[   30.324965][  T478] syz.0.48 uses obsolete (PF_INET,SOCK_PACKET)
[   30.334575][  T472] EXT4-fs error (device loop1): ext4_lookup:1858: inode #15: comm syz.1.47: inode has both inline data and extents flags
[   30.350490][   T10] bridge0: port 1(bridge_slave_0) entered disabled state
[   30.357677][  T460] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4
[   30.368435][   T10] bridge0: port 2(bridge_slave_1) entered disabled state
[   30.376708][  T290] EXT4-fs (loop1): unmounting filesystem.
[   30.407453][  T482] loop1: detected capacity change from 0 to 256
[   30.417637][  T457] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   30.437021][  T457] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   30.445191][  T482] FAT-fs (loop1): Directory bread(block 64) failed
[   30.452295][  T457] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   30.460738][  T482] FAT-fs (loop1): Directory bread(block 65) failed
[   30.467587][  T457] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   30.475865][  T482] FAT-fs (loop1): Directory bread(block 66) failed
[   30.483047][  T457] bridge0: port 1(bridge_slave_0) entered blocking state
[   30.490102][  T457] bridge0: port 1(bridge_slave_0) entered forwarding state
[   30.497606][  T482] FAT-fs (loop1): Directory bread(block 67) failed
[   30.504299][  T482] FAT-fs (loop1): Directory bread(block 68) failed
[   30.511020][  T482] FAT-fs (loop1): Directory bread(block 69) failed
[   30.515326][  T457] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   30.517575][  T482] FAT-fs (loop1): Directory bread(block 70) failed
[   30.532464][  T482] FAT-fs (loop1): Directory bread(block 71) failed
[   30.536031][  T457] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   30.539207][  T482] FAT-fs (loop1): Directory bread(block 72) failed
[   30.553706][  T482] FAT-fs (loop1): Directory bread(block 73) failed
[   30.557317][  T457] bridge0: port 2(bridge_slave_1) entered blocking state
[   30.567257][  T457] bridge0: port 2(bridge_slave_1) entered forwarding state
[   30.600375][  T457] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   30.608595][  T457] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   30.615410][  T488] loop2: detected capacity change from 0 to 256
[   30.622622][  T457] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   30.623728][  T482] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22
[   30.631553][  T457] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   30.642940][  T488] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x8f9fe1ed, utbl_chksum : 0xe619d30d)
[   30.658275][  T461] device veth0_vlan entered promiscuous mode
[   30.681663][   T28] kauditd_printk_skb: 46 callbacks suppressed
[   30.681675][   T28] audit: type=1400 audit(1782660316.179:215): avc:  denied  { read write } for  pid=487 comm="syz.2.50" name="usbmon9" dev="devtmpfs" ino=186 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[   30.687559][  T457] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   30.705845][   T28] audit: type=1400 audit(1782660316.209:216): avc:  denied  { open } for  pid=487 comm="syz.2.50" path="/dev/usbmon9" dev="devtmpfs" ino=186 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[   30.713377][  T457] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   30.720337][   T28] audit: type=1400 audit(1782660316.209:217): avc:  denied  { ioctl } for  pid=487 comm="syz.2.50" path="/dev/usbmon9" dev="devtmpfs" ino=186 ioctlcmd=0x920a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[   30.743693][  T457] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   30.794892][  T457] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   30.802727][  T497] loop2: detected capacity change from 0 to 512
[   30.809581][  T492] netlink: 96 bytes leftover after parsing attributes in process `syz.1.51'.
[   30.818725][  T499] netlink: 'syz.3.53': attribute type 27 has an invalid length.
[   30.829217][  T499] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[   30.829302][  T497] EXT4-fs error (device loop2): __ext4_fill_super:5452: inode #2: comm syz.2.52: iget: checksum invalid
[   30.848933][  T497] EXT4-fs (loop2): get root inode failed
[   30.853453][  T461] device veth1_macvtap entered promiscuous mode
[   30.854607][  T497] EXT4-fs (loop2): mount failed
[   30.864387][  T457] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   30.873883][  T457] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   30.879740][   T28] audit: type=1400 audit(1782660316.389:218): avc:  denied  { mount } for  pid=505 comm="syz.3.54" name="/" dev="pstore" ino=14600 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1
[   30.881780][  T457] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   30.911767][  T457] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   30.920208][  T457] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   30.931065][  T506] netlink: 84 bytes leftover after parsing attributes in process `syz.3.54'.
[   30.950760][   T28] audit: type=1400 audit(1782660316.459:219): avc:  denied  { append } for  pid=496 comm="syz.2.52" name="loop2" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[   30.980967][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   30.986087][   T28] audit: type=1400 audit(1782660316.489:220): avc:  denied  { getopt } for  pid=510 comm="syz.3.56" lport=130 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   30.992328][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   31.013909][  T497] Illegal XDP return value 256 on prog  (id 7) dev syz_tun, expect packet loss!
[   31.025362][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   31.042707][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   31.071505][  T517] Zero length message leads to an empty skb
[   31.086308][   T28] audit: type=1400 audit(1782660316.589:221): avc:  denied  { setopt } for  pid=520 comm="syz.1.60" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   31.106843][  T521] netlink: 'syz.1.60': attribute type 6 has an invalid length.
[   31.175755][  T529] mmap: syz.0.63 (529) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[   31.390266][  T536] loop0: detected capacity change from 0 to 16
[   31.476872][  T536] erofs: (device loop0): mounted with root inode @ nid 36.
[   31.558643][  T310] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[   31.677111][   T28] audit: type=1400 audit(1782660317.179:222): avc:  denied  { append } for  pid=534 comm="syz.0.65" name="random" dev="devtmpfs" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1
[   31.810269][  T310] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[   31.830398][  T538] 9pnet_virtio: no channels available for device syz
[   31.893830][  T310] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   31.979816][   T28] audit: type=1400 audit(1782660317.309:223): avc:  denied  { create } for  pid=534 comm="syz.0.65" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   32.037002][  T519] loop2: detected capacity change from 0 to 40427
[   32.052512][  T310] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   32.175204][  T519] F2FS-fs (loop2): invalid crc value
[   32.186673][   T28] audit: type=1400 audit(1782660317.329:224): avc:  denied  { setopt } for  pid=534 comm="syz.0.65" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   32.195336][  T310] usb 6-1: Product: syz
[   32.216483][  T519] F2FS-fs (loop2): Found nat_bits in checkpoint
[   32.239085][  T310] usb 6-1: Manufacturer: syz
[   32.243706][  T310] usb 6-1: SerialNumber: syz
[   32.287737][  T519] F2FS-fs (loop2): Start checkpoint disabled!
[   32.304624][  T519] F2FS-fs (loop2): f2fs_disable_checkpoint() finish, err:0
[   32.322094][  T519] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6
[   32.412749][  T519] F2FS-fs (loop2): ino:10, start:0, end:2048, need to trigger GC to reclaim enough free segment when checkpoint is enabled
[   32.464696][  T313] kworker/u4:4: attempt to access beyond end of device
[   32.464696][  T313] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[   32.485072][  T526] netlink: 24 bytes leftover after parsing attributes in process `syz.5.44'.
[   32.499577][  T526] netlink: 4 bytes leftover after parsing attributes in process `syz.5.44'.
[   32.871298][  T560] EXT4-fs: Ignoring removed orlov option
[   33.075589][  T560] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[   33.115942][  T560] netlink: 'syz.2.69': attribute type 3 has an invalid length.
[   33.624156][  T565] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[   33.673973][  T290] EXT4-fs (loop1): unmounting filesystem.
[   33.717087][  T288] EXT4-fs (loop2): unmounting filesystem.
[   33.751037][  T569] kvm: MONITOR instruction emulated as NOP!
[   33.899203][  T577] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   33.926662][  T577] incfs: ino conflict with backing FS 1
[   34.109242][  T310] usb 6-1: 1:1 : UAC_AS_GENERAL descriptor not found
[   34.143302][  T310] usb 6-1: 2:1 : format type 0 is detected, processed as PCM
[   34.320743][  T310] usb 6-1: 2:1 : invalid UAC_FORMAT_TYPE desc
[   34.360534][  T310] usb 6-1: USB disconnect, device number 2
[   34.377424][  T430] udevd[430]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   34.399942][  T591] set_capacity_and_notify: 3 callbacks suppressed
[   34.399957][  T591] loop2: detected capacity change from 0 to 1024
[   34.427252][  T591] EXT4-fs: Ignoring removed bh option
[   34.457801][  T591] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[   34.582096][  T600] bridge0: port 1(bridge_slave_0) entered blocking state
[   34.596029][  T288] EXT4-fs (loop2): unmounting filesystem.
[   34.603269][  T600] bridge0: port 1(bridge_slave_0) entered disabled state
[   34.610787][  T600] device bridge_slave_0 entered promiscuous mode
[   34.621253][  T600] bridge0: port 2(bridge_slave_1) entered blocking state
[   34.629720][  T600] bridge0: port 2(bridge_slave_1) entered disabled state
[   34.637211][  T600] device bridge_slave_1 entered promiscuous mode
[   34.696805][  T600] bridge0: port 2(bridge_slave_1) entered blocking state
[   34.703975][  T600] bridge0: port 2(bridge_slave_1) entered forwarding state
[   34.711287][  T600] bridge0: port 1(bridge_slave_0) entered blocking state
[   34.718308][  T600] bridge0: port 1(bridge_slave_0) entered forwarding state
[   34.738275][  T607] loop0: detected capacity change from 0 to 16
[   34.745310][  T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   34.745725][  T607] erofs: Unknown parameter ''
[   34.759065][  T313] bridge0: port 1(bridge_slave_0) entered disabled state
[   34.766520][  T313] bridge0: port 2(bridge_slave_1) entered disabled state
[   34.801332][  T607] loop0: detected capacity change from 0 to 512
[   34.808366][  T313] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   34.817688][  T313] bridge0: port 1(bridge_slave_0) entered blocking state
[   34.824776][  T313] bridge0: port 1(bridge_slave_0) entered forwarding state
[   34.834304][  T607] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.84: invalid indirect mapped block 4294967295 (level 1)
[   34.848449][  T607] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.84: invalid indirect mapped block 4294967295 (level 1)
[   34.862818][  T313] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   34.866277][  T605] loop2: detected capacity change from 0 to 40427
[   34.871191][  T313] bridge0: port 2(bridge_slave_1) entered blocking state
[   34.884376][  T313] bridge0: port 2(bridge_slave_1) entered forwarding state
[   34.898653][  T607] EXT4-fs (loop0): 2 truncates cleaned up
[   34.898947][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   34.904480][  T605] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[   34.914855][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   34.920274][  T607] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[   34.935145][  T600] device veth0_vlan entered promiscuous mode
[   34.942581][  T605] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[   34.954369][  T605] F2FS-fs (loop2): invalid crc value
[   34.959241][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   34.970720][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   34.975436][  T605] F2FS-fs (loop2): Found nat_bits in checkpoint
[   34.979263][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   34.994905][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   35.003263][  T289] EXT4-fs (loop0): unmounting filesystem.
[   35.009411][  T600] device veth1_macvtap entered promiscuous mode
[   35.025000][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   35.042421][  T605] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[   35.051158][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   35.060258][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   35.062050][  T605] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[   35.068869][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   35.091294][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   35.139175][  T623] netlink: 8 bytes leftover after parsing attributes in process `syz.0.87'.
[   35.378575][   T19] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[   35.411626][  T628] loop5: detected capacity change from 0 to 40427
[   35.418753][  T628] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12
[   35.426538][  T628] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[   35.438754][  T437] usb 1-1: new low-speed USB device number 3 using dummy_hcd
[   35.689497][  T437] usb 1-1: Invalid ep0 maxpacket: 16
[   35.791694][  T628] F2FS-fs (loop5): Found nat_bits in checkpoint
[   35.868654][  T437] usb 1-1: new low-speed USB device number 4 using dummy_hcd
[   35.949313][  T628] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0
[   35.976091][  T628] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[   36.108584][  T437] usb 1-1: Invalid ep0 maxpacket: 16
[   36.114195][  T437] usb usb1-port1: attempt power cycle
[   36.262481][   T28] kauditd_printk_skb: 27 callbacks suppressed
[   36.262525][   T28] audit: type=1400 audit(1782660321.769:252): avc:  denied  { write } for  pid=627 comm="syz.5.89" name="urandom" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1
[   36.301056][  T628] syz.5.89: attempt to access beyond end of device
[   36.301056][  T628] loop5: rw=34817, sector=77824, nr_sectors = 128 limit=40427
[   36.321353][   T28] audit: type=1400 audit(1782660321.829:253): avc:  denied  { setopt } for  pid=639 comm="syz.2.91" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   36.349805][   T28] audit: type=1400 audit(1782660321.859:254): avc:  denied  { remount } for  pid=627 comm="syz.5.89" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[   36.369728][   T19] usb 7-1: device descriptor read/64, error -71
[   36.392543][   T28] audit: type=1400 audit(1782660321.899:255): avc:  denied  { ioctl } for  pid=639 comm="syz.2.91" path="socket:[17288]" dev="sockfs" ino=17288 ioctlcmd=0x671e scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   36.441250][  T461] syz-executor: attempt to access beyond end of device
[   36.441250][  T461] loop5: rw=2051, sector=77824, nr_sectors = 128 limit=40427
[   36.455827][  T461] F2FS-fs (loop5): Issue discard(9728, 9728, 16) failed, ret: -5
[   36.559915][  T647] loop2: detected capacity change from 0 to 40427
[   36.582418][  T647] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[   36.590499][  T647] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[   36.607313][  T647] F2FS-fs (loop2): invalid crc value
[   36.614094][  T647] F2FS-fs (loop2): Found nat_bits in checkpoint
[   36.638578][   T19] usb 7-1: device descriptor read/64, error -71
[   36.648576][  T437] usb 1-1: new low-speed USB device number 5 using dummy_hcd
[   36.657975][  T647] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[   36.665163][  T647] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[   36.680881][  T437] usb 1-1: Invalid ep0 maxpacket: 16
[   36.684749][  T651] loop5: detected capacity change from 0 to 40427
[   36.698961][  T651] F2FS-fs (loop5): Invalid SB checksum offset: 0
[   36.705396][  T651] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock
[   36.713701][   T28] audit: type=1400 audit(1782660322.209:256): avc:  denied  { name_bind } for  pid=646 comm="syz.2.94" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1
[   36.731261][  T651] F2FS-fs (loop5): invalid crc value
[   36.741464][  T651] F2FS-fs (loop5): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437)
[   36.772328][  T651] F2FS-fs (loop5): Try to recover 2th superblock, ret: 0
[   36.779492][  T651] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[   36.828586][  T437] usb 1-1: new low-speed USB device number 6 using dummy_hcd
[   36.851920][  T664] loop2: detected capacity change from 0 to 16
[   36.868925][  T437] usb 1-1: Invalid ep0 maxpacket: 16
[   36.877374][  T437] usb usb1-port1: unable to enumerate USB device
[   36.884275][  T664] erofs: (device loop2): mounted with root inode @ nid 36.
[   36.918563][   T19] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[   36.993134][  T461] syz-executor: attempt to access beyond end of device
[   36.993134][  T461] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[   37.052185][  T666] loop2: detected capacity change from 0 to 40427
[   37.066945][  T666] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[   37.079620][   T19] usb 7-1: device descriptor read/64, error -71
[   37.081938][  T666] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[   37.096257][   T28] audit: type=1400 audit(1782660322.599:257): avc:  denied  { ioctl } for  pid=667 comm="syz.5.99" path="socket:[18115]" dev="sockfs" ino=18115 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   37.100938][  T666] F2FS-fs (loop2): Found nat_bits in checkpoint
[   37.120972][   T28] audit: type=1400 audit(1782660322.599:258): avc:  denied  { read } for  pid=667 comm="syz.5.99" path="socket:[18115]" dev="sockfs" ino=18115 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   37.153333][   T28] audit: type=1400 audit(1782660322.659:259): avc:  denied  { write } for  pid=667 comm="syz.5.99" path="socket:[18115]" dev="sockfs" ino=18115 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   37.176525][   T28] audit: type=1400 audit(1782660322.659:260): avc:  denied  { getopt } for  pid=667 comm="syz.5.99" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   37.177516][  T666] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[   37.203404][  T666] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[   37.211199][   T28] audit: type=1400 audit(1782660322.709:261): avc:  denied  { ioctl } for  pid=667 comm="syz.5.99" path="socket:[17318]" dev="sockfs" ino=17318 ioctlcmd=0x942c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   37.247655][  T666] syz.2.98: attempt to access beyond end of device
[   37.247655][  T666] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[   37.334374][  T696] loop2: detected capacity change from 0 to 128
[   37.348288][  T696] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[   37.357949][  T696] ext4 filesystem being mounted at /23/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   37.368446][   T19] usb 7-1: device descriptor read/64, error -71
[   37.390349][  T288] EXT4-fs (loop2): unmounting filesystem.
[   37.488914][   T19] usb usb7-port1: attempt power cycle
[   37.898587][   T19] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[   37.931166][   T19] usb 7-1: device descriptor read/8, error -71
[   37.955779][  T711] FAT-fs (loop5): Directory bread(block 64) failed
[   37.962446][  T711] FAT-fs (loop5): Directory bread(block 65) failed
[   37.969029][  T711] FAT-fs (loop5): Directory bread(block 66) failed
[   37.975598][  T711] FAT-fs (loop5): Directory bread(block 67) failed
[   37.982706][  T711] FAT-fs (loop5): Directory bread(block 68) failed
[   37.989334][  T711] FAT-fs (loop5): Directory bread(block 69) failed
[   37.995947][  T711] FAT-fs (loop5): Directory bread(block 70) failed
[   38.002542][  T711] FAT-fs (loop5): Directory bread(block 71) failed
[   38.009081][  T711] FAT-fs (loop5): Directory bread(block 72) failed
[   38.015564][  T711] FAT-fs (loop5): Directory bread(block 73) failed
[   38.043977][  T713] mmap: syz.5.110 (713): VmData 29470720 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data.
[   38.079687][   T19] usb 7-1: device descriptor read/8, error -71
[   38.097663][  T718] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended
[   38.120544][  T718] EXT4-fs error (device loop5): ext4_orphan_get:1431: comm syz.5.111: bad orphan inode 13
[   38.130912][  T718] ext4_test_bit(bit=12, block=18) = 1
[   38.136348][  T718] is_bad_inode(inode)=0
[   38.141379][  T718] NEXT_ORPHAN(inode)=0
[   38.145489][  T718] max_ino=32
[   38.148767][  T718] i_nlink=1
[   38.151944][  T718] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[   38.180626][  T718] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[   38.188896][  T718] EXT4-fs warning (device loop5): ext4_update_dynamic_rev:1087: updating to rev 1 because of new feature flag, running e2fsck is recommended
[   38.203792][  T718] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.111: bg 0: block 248: padding at end of block bitmap is not set
[   38.219931][  T718] EXT4-fs error (device loop5): ext4_acquire_dquot:6828: comm syz.5.111: Failed to acquire dquot type 1
[   38.221588][  T741] netlink: 24 bytes leftover after parsing attributes in process `syz.3.116'.
[   38.320639][  T753] syz.2.120: attempt to access beyond end of device
[   38.320639][  T753] loop2: rw=2049, sector=138, nr_sectors = 2 limit=128
[   38.334127][  T754] bridge0: port 2(bridge_slave_1) entered disabled state
[   38.341332][  T754] bridge0: port 1(bridge_slave_0) entered disabled state
[   38.350190][  T754] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check.
[   38.367177][  T461] EXT4-fs (loop5): unmounting filesystem.
[   38.377518][  T754] FAT-fs (loop0): Directory bread(block 64) failed
[   38.386450][  T754] FAT-fs (loop0): Directory bread(block 65) failed
[   38.397265][  T754] FAT-fs (loop0): Directory bread(block 66) failed
[   38.403866][  T754] FAT-fs (loop0): Directory bread(block 67) failed
[   38.410590][  T754] FAT-fs (loop0): Directory bread(block 68) failed
[   38.417353][  T754] FAT-fs (loop0): Directory bread(block 69) failed
[   38.424570][  T754] FAT-fs (loop0): Directory bread(block 70) failed
[   38.431171][  T754] FAT-fs (loop0): Directory bread(block 71) failed
[   38.437859][  T754] FAT-fs (loop0): Directory bread(block 72) failed
[   38.444442][  T754] FAT-fs (loop0): Directory bread(block 73) failed
[   38.503305][  T760] EXT4-fs error (device loop0): ext4_validate_block_bitmap:429: comm syz.0.122: bg 0: block 5: invalid block bitmap
[   38.519485][  T760] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6180: Corrupt filesystem
[   38.520910][  T757] F2FS-fs (loop5): Wrong segment_count / block_count (31 > 0)
[   38.528447][  T760] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.122: invalid indirect mapped block 3 (level 2)
[   38.537003][  T757] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock
[   38.549544][  T760] EXT4-fs (loop0): 2 truncates cleaned up
[   38.566057][  T757] F2FS-fs (loop5): invalid crc value
[   38.567447][  T760] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[   38.591052][  T764] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22
[   38.602923][  T757] F2FS-fs (loop5): Found nat_bits in checkpoint
[   38.621597][  T289] EXT4-fs (loop0): unmounting filesystem.
[   38.639715][  T757] F2FS-fs (loop5): Try to recover 2th superblock, ret: 0
[   38.646852][  T757] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[   38.692124][   T10] kworker/u4:1: attempt to access beyond end of device
[   38.692124][   T10] loop5: rw=2049, sector=40960, nr_sectors = 8 limit=40427
[   38.706325][   T10] kworker/u4:1: attempt to access beyond end of device
[   38.706325][   T10] loop5: rw=2049, sector=40976, nr_sectors = 8 limit=40427
[   38.725606][  T757] VFS:Filesystem freeze failed
[   38.796982][  T783] ptm ptm0: ldisc open failed (-12), clearing slot 0
[   38.928594][  T298] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[   39.041462][  T802] erofs: Unknown parameter ''
[   39.059585][  T430] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[   39.060013][  T802] binder: 801:802 ioctl c018aa06 200000000480 returned -22
[   39.098591][   T65] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[   39.138928][  T298] usb 1-1: Using ep0 maxpacket: 32
[   39.148994][  T298] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 32, changing to 9
[   39.160642][  T298] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[   39.170288][  T298] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   39.179086][  T298] usb 1-1: config 0 descriptor??
[   39.184931][  T298] hub 1-1:0.0: USB hub found
[   39.278552][   T65] usb 6-1: Using ep0 maxpacket: 16
[   39.286034][   T65] usb 6-1: New USB device found, idVendor=0e8d, idProduct=0003, bcdDevice=7d.b5
[   39.295152][   T65] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   39.303181][   T65] usb 6-1: Product: syz
[   39.307342][   T65] usb 6-1: Manufacturer: syz
[   39.311953][   T65] usb 6-1: SerialNumber: syz
[   39.317159][   T65] usb 6-1: config 0 descriptor??
[   39.389396][  T772] erofs: (device loop0): mounted with root inode @ nid 36.
[   39.397849][  T772] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   39.406393][  T772] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   39.471743][  T298] hub 1-1:0.0: config failed, can't read hub descriptor (err -22)
[   39.526767][   T65] usb 6-1: USB disconnect, device number 3
[   39.574607][  T298] usbhid 1-1:0.0: can't add hid device: -71
[   39.580657][  T298] usbhid: probe of 1-1:0.0 failed with error -71
[   39.594151][  T811] netlink: 16 bytes leftover after parsing attributes in process `syz.0.135'.
[   39.603458][  T811] netlink: 16 bytes leftover after parsing attributes in process `syz.0.135'.
[   39.613254][  T298] usb 1-1: USB disconnect, device number 7
[   39.620228][  T811] netlink: 16 bytes leftover after parsing attributes in process `syz.0.135'.
[   39.629799][  T811] netlink: 16 bytes leftover after parsing attributes in process `syz.0.135'.
[   39.638894][  T811] netlink: 16 bytes leftover after parsing attributes in process `syz.0.135'.
[   39.648210][  T811] netlink: 16 bytes leftover after parsing attributes in process `syz.0.135'.
[   39.660157][  T811] netlink: 16 bytes leftover after parsing attributes in process `syz.0.135'.
[   39.669680][  T811] netlink: 16 bytes leftover after parsing attributes in process `syz.0.135'.
[   39.681176][  T811] netlink: 16 bytes leftover after parsing attributes in process `syz.0.135'.
[   39.691224][  T811] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[   39.698913][  T811] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[   39.711159][  T819] futex_wake_op: syz.0.135 tries to shift op by 144; fix this program
[   39.787934][  T818] set_capacity_and_notify: 9 callbacks suppressed
[   39.787981][  T818] loop2: detected capacity change from 0 to 4096
[   39.804220][  T818] EXT4-fs: Ignoring removed nomblk_io_submit option
[   39.811793][  T818] EXT4-fs (loop2): Test dummy encryption mode enabled
[   39.819256][  T818] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003]
[   39.827453][  T818] System zones: 0-5
[   39.832128][  T818] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[   39.894257][  T288] EXT4-fs (loop2): unmounting filesystem.
[   39.913650][  T825] loop2: detected capacity change from 0 to 2048
[   39.951259][  T825] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[   39.960007][  T829] loop6: detected capacity change from 0 to 512
[   39.962067][  T825] ext4 filesystem being mounted at /33/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   39.976784][  T829] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended
[   39.992559][  T288] EXT4-fs error (device loop2): ext4_readdir:263: inode #2: block 16: comm syz-executor: path /33/file0: bad entry in directory: rec_len is smaller than minimal - offset=108, inode=646161, rec_len=0, size=4096 fake=0
[   39.995856][  T829] EXT4-fs error (device loop6): ext4_orphan_get:1431: comm syz.6.140: bad orphan inode 13
[   40.025064][  T829] ext4_test_bit(bit=12, block=18) = 1
[   40.030846][  T829] is_bad_inode(inode)=0
[   40.037930][  T829] NEXT_ORPHAN(inode)=0
[   40.042308][  T829] max_ino=32
[   40.045919][  T288] EXT4-fs (loop2): unmounting filesystem.
[   40.049553][  T829] i_nlink=1
[   40.054809][  T829] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[   40.073634][  T829] EXT4-fs warning (device loop6): ext4_update_dynamic_rev:1087: updating to rev 1 because of new feature flag, running e2fsck is recommended
[   40.088455][  T829] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm syz.6.140: bg 0: block 248: padding at end of block bitmap is not set
[   40.104636][  T829] EXT4-fs error (device loop6): ext4_acquire_dquot:6828: comm syz.6.140: Failed to acquire dquot type 1
[   40.123052][  T600] EXT4-fs (loop6): unmounting filesystem.
[   40.124371][  T839] loop2: detected capacity change from 0 to 512
[   40.129011][  T829] syz.6.140 (829) used greatest stack depth: 19488 bytes left
[   40.152599][  T842] overlayfs: unrecognized mount option "smackfstransmute=�Q" or missing value
[   40.152720][  T839] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[   40.172975][  T839] ext4 filesystem being mounted at /34/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   40.233007][  T288] EXT4-fs (loop2): unmounting filesystem.
[   40.568577][  T298] usb 7-1: new high-speed USB device number 6 using dummy_hcd
[   40.759618][  T298] usb 7-1: config index 0 descriptor too short (expected 45, got 36)
[   40.767780][  T298] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   40.778717][  T298] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   40.788490][  T298] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[   40.801433][  T298] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   40.810620][  T298] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   40.818566][  T805] usb 1-1: new full-speed USB device number 8 using dummy_hcd
[   40.826571][  T298] usb 7-1: config 0 descriptor??
[   40.878597][  T432] usb 6-1: new full-speed USB device number 4 using dummy_hcd
[   40.999670][  T805] usb 1-1: config index 0 descriptor too short (expected 61220, got 36)
[   41.008094][  T805] usb 1-1: config 191 has too many interfaces: 102, using maximum allowed: 32
[   41.017001][  T805] usb 1-1: config 191 has an invalid descriptor of length 0, skipping remainder of the config
[   41.027327][  T805] usb 1-1: config 191 has 0 interfaces, different from the descriptor's value: 102
[   41.036673][  T805] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[   41.045801][  T805] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   41.059893][  T432] usb 6-1: unable to get BOS descriptor or descriptor too short
[   41.067992][  T432] usb 6-1: not running at top speed; connect to a high speed hub
[   41.076455][  T432] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0
[   41.087737][  T432] usb 6-1: New USB device found, idVendor=17cc, idProduct=1915, bcdDevice= 0.40
[   41.096831][  T432] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   41.105140][  T432] usb 6-1: Product: syz
[   41.109516][  T432] usb 6-1: Manufacturer: syz
[   41.114605][  T432] usb 6-1: SerialNumber: syz
[   41.131053][  T868] loop2: detected capacity change from 0 to 256
[   41.137611][  T868] exfat: Deprecated parameter 'utf8'
[   41.145165][  T868] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x58d80169, utbl_chksum : 0xe619d30d)
[   41.238226][  T298] plantronics 0003:047F:FFFF.0001: unknown main item tag 0xd
[   41.246787][  T298] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving
[   41.255842][  T298] plantronics 0003:047F:FFFF.0001: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0
[   41.322172][  T866] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   41.339180][  T866] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   41.348746][   T28] kauditd_printk_skb: 33 callbacks suppressed
[   41.348759][   T28] audit: type=1400 audit(1782660326.859:291): avc:  denied  { ioctl } for  pid=874 comm="syz.3.153" path="socket:[19636]" dev="sockfs" ino=19636 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   41.380197][  T874] ==================================================================
[   41.388274][  T874] BUG: KASAN: use-after-free in mutex_lock+0x86/0x1b0
[   41.395051][  T874] Write of size 8 at addr ffff88813b20a550 by task syz.3.153/874
[   41.402772][  T874] 
[   41.405091][  T874] CPU: 1 PID: 874 Comm: syz.3.153 Tainted: G        W          syzkaller #0
[   41.405836][  T864] loop0: detected capacity change from 0 to 40427
[   41.413755][  T874] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[   41.413767][  T874] Call Trace:
[   41.413772][  T874]  <TASK>
[   41.413778][  T874]  __dump_stack+0x21/0x24
[   41.413803][  T874]  dump_stack_lvl+0x110/0x170
[   41.438121][   T19] usb 7-1: USB disconnect, device number 6
[   41.440722][  T874]  ? __cfi_dump_stack_lvl+0x8/0x8
[   41.440749][  T874]  ? mutex_lock+0x86/0x1b0
[   41.457206][  T864] F2FS-fs (loop0): Found nat_bits in checkpoint
[   41.460641][  T874]  print_address_description+0x71/0x200
[   41.460668][  T874]  print_report+0x4a/0x60
[   41.476716][  T874]  kasan_report+0x122/0x150
[   41.481226][  T874]  ? mutex_lock+0x86/0x1b0
[   41.485648][  T874]  kasan_check_range+0x249/0x2a0
[   41.490588][  T874]  __kasan_check_write+0x14/0x20
[   41.495524][  T874]  mutex_lock+0x86/0x1b0
[   41.498411][  T864] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[   41.499767][  T874]  ? __cfi_mutex_lock+0x10/0x10
[   41.499792][  T874]  ? kfree+0x6f/0xf0
[   41.515929][  T874]  ? l2tp_session_put+0xaf/0x1a0
[   41.520865][  T874]  ? l2tp_session_delete+0x3df/0x4d0
[   41.526149][  T874]  pppol2tp_release+0x178/0x2b0
[   41.531003][  T874]  sock_close+0xc9/0x220
[   41.535258][  T874]  ? __cfi_sock_close+0x10/0x10
[   41.535382][  T864] syz.0.151: attempt to access beyond end of device
[   41.535382][  T864] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[   41.540111][  T874]  __fput+0x1fd/0x8f0
[   41.540136][  T874]  ____fput+0x15/0x20
[   41.540154][  T874]  task_work_run+0x1e1/0x250
[   41.566235][  T874]  ? __cfi_task_work_run+0x10/0x10
[   41.571338][  T874]  ? __cfi___close_range+0x10/0x10
[   41.576448][  T874]  ? handle_softirqs+0x543/0x600
[   41.581382][  T874]  exit_to_user_mode_loop+0x9b/0xb0
[   41.586569][  T874]  exit_to_user_mode_prepare+0x87/0xd0
[   41.592019][  T874]  syscall_exit_to_user_mode+0x1a/0x30
[   41.597479][  T874]  do_syscall_64+0x58/0xa0
[   41.601889][  T874]  ? clear_bhb_loop+0x30/0x80
[   41.606554][  T874]  ? clear_bhb_loop+0x30/0x80
[   41.611209][  T874]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   41.617088][  T874] RIP: 0033:0x7fce4db9ce59
[   41.621502][  T874] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   41.641092][  T874] RSP: 002b:00007ffdc5b6fa28 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[   41.649489][  T874] RAX: 0000000000000000 RBX: 00007ffdc5b6fb10 RCX: 00007fce4db9ce59
[   41.657451][  T874] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[   41.665398][  T874] RBP: 000000000000a164 R08: 0000000000000001 R09: 0000000000000000
[   41.673362][  T874] R10: 0000001b2dd20000 R11: 0000000000000246 R12: 00007ffdc5b6fb50
[   41.681339][  T874] R13: 00007fce4de15fac R14: 000000000000a1a4 R15: 00007fce4de15fa0
[   41.689386][  T874]  </TASK>
[   41.692397][  T874] 
[   41.694700][  T874] Allocated by task 875:
[   41.698935][  T874]  kasan_set_track+0x4b/0x70
[   41.703521][  T874]  kasan_save_alloc_info+0x1f/0x30
[   41.708626][  T874]  __kasan_kmalloc+0x95/0xb0
[   41.713206][  T874]  __kmalloc+0xb4/0x1e0
[   41.717791][  T874]  l2tp_session_create+0x38/0xbd0
[   41.722806][  T874]  pppol2tp_connect+0xbf5/0x1640
[   41.727725][  T874]  __sys_connect+0x3da/0x460
[   41.732297][  T874]  __x64_sys_connect+0x7a/0x90
[   41.737049][  T874]  x64_sys_call+0x88d/0x9a0
[   41.741548][  T874]  do_syscall_64+0x4c/0xa0
[   41.745948][  T874]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   41.751837][  T874] 
[   41.754142][  T874] Freed by task 874:
[   41.756963][  T805] usb 1-1: string descriptor 0 read error: -71
[   41.758019][  T874]  kasan_set_track+0x4b/0x70
[   41.768719][  T874]  kasan_save_free_info+0x2b/0x40
[   41.772518][  T805] usb 1-1: USB disconnect, device number 8
[   41.773743][  T874]  ____kasan_slab_free+0x132/0x180
[   41.784622][  T874]  __kasan_slab_free+0x11/0x20
[   41.789372][  T874]  slab_free_freelist_hook+0xc2/0x190
[   41.794722][  T874]  __kmem_cache_free+0xb7/0x1b0
[   41.799550][  T874]  kfree+0x6f/0xf0
[   41.803245][  T874]  l2tp_session_put+0xaf/0x1a0
[   41.807981][  T874]  l2tp_session_delete+0x3df/0x4d0
[   41.813063][  T874]  pppol2tp_release+0x169/0x2b0
[   41.817972][  T874]  sock_close+0xc9/0x220
[   41.822190][  T874]  __fput+0x1fd/0x8f0
[   41.826147][  T874]  ____fput+0x15/0x20
[   41.830110][  T874]  task_work_run+0x1e1/0x250
[   41.834693][  T874]  exit_to_user_mode_loop+0x9b/0xb0
[   41.839866][  T874]  exit_to_user_mode_prepare+0x87/0xd0
[   41.845297][  T874]  syscall_exit_to_user_mode+0x1a/0x30
[   41.850727][  T874]  do_syscall_64+0x58/0xa0
[   41.855126][  T874]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   41.860996][  T874] 
[   41.863317][  T874] The buggy address belongs to the object at ffff88813b20a400
[   41.863317][  T874]  which belongs to the cache kmalloc-512 of size 512
[   41.877344][  T874] The buggy address is located 336 bytes inside of
[   41.877344][  T874]  512-byte region [ffff88813b20a400, ffff88813b20a600)
[   41.890686][  T874] 
[   41.893021][  T874] The buggy address belongs to the physical page:
[   41.899414][  T874] page:ffffea0004ec8200 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x13b208
[   41.909653][  T874] head:ffffea0004ec8200 order:2 compound_mapcount:0 compound_pincount:0
[   41.917258][   T28] audit: type=1326 audit(1782660327.389:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=880 comm="syz.5.154" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1baeb9ce59 code=0x7ffc0000
[   41.917971][  T874] flags: 0x4000000000010200(slab|head|zone=1)
[   41.944560][   T28] audit: type=1326 audit(1782660327.389:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=880 comm="syz.5.154" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1baeb9ce59 code=0x7ffc0000
[   41.948474][  T874] raw: 4000000000010200 ffffea0004657600 dead000000000003 ffff888100042f00
[   41.981475][  T874] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000
[   41.990050][  T874] page dumped because: kasan: bad access detected
[   41.993240][   T28] audit: type=1326 audit(1782660327.389:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=880 comm="syz.5.154" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1baeb9ce59 code=0x7ffc0000
[   41.996450][  T874] page_owner tracks the page as allocated
[   41.996456][  T874] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x1d2a20(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 313, tgid 313 (kworker/u4:4), ts 29962534013, free_ts 28568274855
[   42.026887][   T28] audit: type=1326 audit(1782660327.389:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=880 comm="syz.5.154" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=247 compat=0 ip=0x7f1baeb9ce59 code=0x7ffc0000
[   42.048551][  T874]  post_alloc_hook+0x1f5/0x210
[   42.048578][  T874]  prep_new_page+0x1c/0x110
[   42.048594][  T874]  get_page_from_freelist+0x2ca9/0x2d20
[   42.048614][  T874]  __alloc_pages+0x1fa/0x610
[   42.073783][   T28] audit: type=1326 audit(1782660327.389:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=880 comm="syz.5.154" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1baeb9ce59 code=0x7ffc0000
[   42.077804][  T874]  alloc_slab_page+0x6e/0xf0
[   42.077824][  T874]  new_slab+0x98/0x3e0
[   42.083554][   T28] audit: type=1326 audit(1782660327.389:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=880 comm="syz.5.154" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1baeb9ce59 code=0x7ffc0000
[   42.087817][  T874]  ___slab_alloc+0x70f/0xb70
[   42.092520][   T28] audit: type=1326 audit(1782660327.389:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=880 comm="syz.5.154" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1baeb9ce59 code=0x7ffc0000
[   42.116919][  T874]  __slab_alloc+0x5e/0xa0
[   42.116945][  T874]  __kmem_cache_alloc_node+0x204/0x2d0
[   42.116963][  T874]  __kmalloc_node_track_caller+0xa1/0x1e0
[   42.116978][  T874]  __alloc_skb+0x226/0x4a0
[   42.121849][   T28] audit: type=1326 audit(1782660327.389:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=880 comm="syz.5.154" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1baeb9ce59 code=0x7ffc0000
[   42.125579][  T874]  __ipv6_ifa_notify+0x200/0xe80
[   42.150953][   T28] audit: type=1400 audit(1782660327.389:300): avc:  denied  { read write } for  pid=880 comm="syz.5.154" name="vhost-vsock" dev="devtmpfs" ino=268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[   42.154586][  T874]  addrconf_ifdown+0xdfd/0x1950
[   42.256871][  T874]  addrconf_notify+0x39f/0xe30
[   42.261617][  T874]  raw_notifier_call_chain+0xa1/0x110
[   42.266968][  T874]  dev_close_many+0x325/0x4d0
[   42.271629][  T874] page last free stack trace:
[   42.276303][  T874]  free_unref_page_prepare+0x80c/0x820
[   42.281745][  T874]  free_unref_page_list+0x117/0x8d0
[   42.286929][  T874]  release_pages+0xc7e/0xce0
[   42.291516][  T874]  __pagevec_release+0x71/0xe0
[   42.296261][  T874]  shmem_undo_range+0x564/0x14e0
[   42.301188][  T874]  shmem_evict_inode+0x21f/0x9c0
[   42.306122][  T874]  evict+0x4c4/0x8c0
[   42.309995][  T874]  iput+0x633/0x690
[   42.313785][  T874]  do_unlinkat+0x380/0x6c0
[   42.318180][  T874]  __x64_sys_unlink+0x49/0x50
[   42.322848][  T874]  x64_sys_call+0x958/0x9a0
[   42.327366][  T874]  do_syscall_64+0x4c/0xa0
[   42.331779][  T874]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   42.337668][  T874] 
[   42.339987][  T874] Memory state around the buggy address:
[   42.345601][  T874]  ffff88813b20a400: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   42.353656][  T874]  ffff88813b20a480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   42.361701][  T874] >ffff88813b20a500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   42.369735][  T874]                                                  ^
[   42.376385][  T874]  ffff88813b20a580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   42.384450][  T874]  ffff88813b20a600: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[   42.392486][  T874] ==================================================================
[   42.403131][  T874] Disabling lock debugging due to kernel taint
[   42.411196][  T432] usb 6-1: MIDIStreaming interface descriptor not found
[   42.424074][  T432] snd-usb-audio: probe of 6-1:1.0 failed with error -12
[   42.434049][  T432] usb 6-1: USB disconnect, device number 4
[   42.448613][  T805] usb 7-1: new high-speed USB device number 7 using dummy_hcd
[   42.497228][  T888] loop0: detected capacity change from 0 to 512
[   42.503799][  T888] ext4: Unknown parameter 'fsmagic'
[   42.638855][  T328] udevd[328]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   42.658059][  T805] usb 7-1: unable to get BOS descriptor or descriptor too short
[   42.666355][  T805] usb 7-1: unable to read config index 0 descriptor/start: -71
[   42.673961][  T805] usb 7-1: can't read configurations, error -71