last executing test programs:

11.062268846s ago: executing program 1 (id=177):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400000008020000d9"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000ffffffe6008ecd933aad096ad0", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b7000000000000009500000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
modify_ldt$write(0x1, &(0x7f00000000c0)={0x10806, 0xffffffffffffffff, 0x400}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee2, 0x12, 0xffffffffffffffff, 0x5000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000005c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, r2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10)
socket$tipc(0x1e, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x48, 0x83, 0x0, 0x80000001}, {0x6, 0x5, 0x0, 0xfffffc}]}, 0x10)
r7 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x25, &(0x7f0000000540)=0x710, 0x4)
sendto$inet6(r7, 0x0, 0x0, 0x20000080, &(0x7f0000006080)={0xa, 0x4e23, 0x4, @loopback, 0x4}, 0x1c)
recvmsg(r7, &(0x7f0000000740)={0x0, 0xffffff4b, 0x0, 0x0, 0xfffffffffffffffc}, 0x40002041)
syz_clone(0x26801000, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)

10.976138613s ago: executing program 1 (id=179):
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400"], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00', r6}, 0x10)
utimes(0x0, 0x0)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff)

9.693787785s ago: executing program 2 (id=186):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x6, 0x4, 0xc, 0x7}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000400008500000001000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000000c0)={r1}, 0xc)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff)
write$binfmt_script(r3, &(0x7f0000000400)={'#! ', './file0', [{0x20, 'GPL\x00'}], 0xa, "be8aa8cf6eccb9ca2863013027c03b51db07130c0697485be371bab65d6df6e03d84efea8c32e81890345491d80b50e2e574c1a67ac7ff72a0f738e06b1422f02bb27e4a143bcc3f755e13"}, 0x5b)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r4 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6)
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000c00)=@framed={{}, [@printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10)
close(0xffffffffffffffff)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="340000001900150000000000000000000a0000000002000000020000180009801400e3ff"], 0x34}], 0x1}, 0x0)
socket(0x2c, 0x1, 0x500)
getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14)
sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x50, 0x10, 0x503, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21111, 0x8831}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACSEC_CIPHER_SUITE={0xc, 0x4, 0x80020001000001}, @IFLA_MACSEC_WINDOW={0x8, 0x5, 0x7ffffffe}]}}}, @IFLA_LINK={0x8, 0x5, r9}]}, 0x50}, 0x1, 0x0, 0x0, 0x48890}, 0x0)

8.63756724s ago: executing program 2 (id=188):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r0, 0x1, 0x15, &(0x7f0000000040), 0x10)
getsockopt$sock_timeval(r0, 0x1, 0x43, 0x0, &(0x7f0000000040))
r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00')
pread64(r1, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000000)
ioctl$TIOCSWINSZ(r1, 0x5414, &(0x7f00000003c0)={0x2, 0x3, 0x9aa, 0xfff9})
socket$inet6(0xa, 0x5, 0x39)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0)
readahead(r2, 0x2, 0x7ff)
write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b)
sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x88, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5, 0x0, 0x6}, [@IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz0\x00'}, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x8000000000000000}]}, @IPSET_ATTR_DATA={0x30, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x120}, @IPSET_ATTR_IP2_TO={0xc, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x6}, @IPSET_ATTR_COMMENT={0x5, 0x1a, '\x00'}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x3}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x88}, 0x1, 0x0, 0x0, 0x40}, 0x20040000)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7)
sendmsg$NFT_MSG_GETTABLE(r2, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={0x144, 0x1, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_TABLE_USERDATA={0x14, 0x6, "84f7c2d7615a17f0ac195370ebd68a2f"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_USERDATA={0xfb, 0x6, "91c750e88e8778be78d6c952a6fa2001d595bdbae6ef5534d98068c05c418fa26fee054b38287f54da3ae6ed7d778344256a1cf4190195e86e8c93fec66ee9b4ba85af83d0c68ed079fa91c382840561f04f564696ea543501147a77f45c9c4953e7c6acfbae448c8953bcc4d7fc6b4c046ad8fc672e1d2fdb1a06818960d8f43ba16b016b315d624daaaefcd65899d34e48bf0c56f75d44445d678da2a27bea89cf59194c49886ff6e10e4e2ddc07243f4df401bbe04a0514a8f0118fc6c087e2ab2bff2c95ddd939539f43eed603267a135f61567a0d443d51b1f27d1c570c6301763253d27aa0898ba23c25f050ce3be0e3fa3e13de"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x144}, 0x1, 0x0, 0x0, 0x884}, 0x0)

7.270638299s ago: executing program 2 (id=191):
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0)
sendmsg$AUDIT_TTY_GET(r0, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x3f8, 0x400, 0x70bd24, 0x25dfdbfc, "", ["", "", "", "", "", "", "", ""]}, 0x10}}, 0x40080)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r0)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r1, 0x200, 0x70bd25, 0x25dfdbff, {}, [@ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x4}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x6d3}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008806}, 0x200008c5) (async)
syz_emit_ethernet(0xe, &(0x7f00000002c0)={@multicast, @remote, @void, {@generic={0x8100}}}, 0x0) (async)
openat(r0, &(0x7f0000000000)='./file1\x00', 0x40600, 0xa5) (async)
r2 = openat$cgroup_ro(r0, &(0x7f0000000080)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)
fcntl$lock(r2, 0x26, &(0x7f0000000380)={0x1})

6.900413509s ago: executing program 2 (id=193):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async)
ioprio_set$pid(0x1, 0x0, 0x0) (async)
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42002, 0x0) (async)
getpgrp(0x0) (async)
setrlimit(0xb, &(0x7f00000000c0)={0x1, 0x7})
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) (async, rerun: 32)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0) (async, rerun: 32)
syz_usb_connect(0x0, 0x34, &(0x7f00000008c0)={{0x12, 0x1, 0x300, 0x65, 0xb5, 0x8e, 0x20, 0x5ac, 0x8501, 0x8542, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x22, 0x1, 0x2, 0x1, 0x60, 0xfa, [{{0x9, 0x4, 0xdd, 0x11, 0x0, 0xe, 0x1, 0x0, 0xd, [@uac_as={[@format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x9, 0x2, 0x5, 0x80}, @format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x3, 0x4, 0x0, 0x40}]}]}}]}}]}}, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x9}) (async)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_int(r3, 0x0, 0x19, 0x0, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x3c1, 0x3, 0x318, 0x168, 0x6c, 0x0, 0x168, 0x0, 0x248, 0x258, 0x258, 0x248, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private0, [], [], 'wlan1\x00', 'ip6gre0\x00', {}, {}, 0x11, 0x0, 0x0, 0x48}, 0x0, 0x100, 0x168, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x40000, 0x0, 0x2, 0x0, 0x5}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0xfffffffd, 'netbios-ns\x00', 'syz1\x00'}}}, {{@ipv6={@dev, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'netdevsim0\x00', 'lo\x00'}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x2001}}, {0x28}}}}, 0x378)
setrlimit(0x2, &(0x7f00000000c0)={0x2000000, 0xffffffffffffffff})
r4 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295a5, 0x0, 0x0, {}, [@IFA_RT_PRIORITY={0x8, 0x9, 0x16}, @IFA_CACHEINFO={0x14, 0x6, {0x86a, 0xb, 0x4, 0xa}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async)
prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000ffd000/0x3000)=nil) (async)
sendfile(r0, r1, 0x0, 0x20000023896)
bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1400000004000000040000000200020000000000", @ANYBLOB='\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB="2e01"], 0x50)
ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) (async)
syz_emit_ethernet(0x26, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff0800463300180065001008119078ac1c14aa0a01010083020600"], 0x0) (async)
setsockopt$IP_VS_SO_SET_TIMEOUT(r4, 0x0, 0x48a, &(0x7f0000000840)={0x0, 0x0, 0x1d2}, 0x9) (async)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x10, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x5}, 0x50)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x7d}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xf}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r6}, 0xc)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$SEG6(&(0x7f00000007c0), r7)
sendmsg$SEG6_CMD_SET_TUNSRC(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=ANY=[@ANYBLOB="80000000", @ANYRES16=r8, @ANYBLOB="010027bd7000fcdbdf2503000000"], 0x14}, 0x1, 0x0, 0x0, 0x4008010}, 0x0) (async)
sendmsg$SEG6_CMD_SET_TUNSRC(r1, &(0x7f0000000780)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000340)={&(0x7f0000000700)={0x54, r8, 0x2, 0x70bd28, 0x25dfdbfb, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}, @SEG6_ATTR_DST={0x14, 0x1, @private2}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xfffffeb1}, @SEG6_ATTR_DST={0x14, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}}, @SEG6_ATTR_HMACKEYID={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000000}, 0x84)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x40000, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB="03000000000000009c5efbc8006e6f3d", @ANYRESHEX=r0, @ANYBLOB=',access=user,access=user,noextend,cache=loose,func=BPRM_CHECK,fsname=,\x00'])

6.798315257s ago: executing program 2 (id=195):
madvise(&(0x7f0000000000/0x800000)=nil, 0x800002, 0xe)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000070000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=@base={0x18, 0x4, 0x41, 0x0, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4002, 0x1}, 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000200100000102"], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34e7442af5d985c70550c2bd35501514be8f17563a68f312c628e3b44f53ffc4afba317d96fe77004506ab757bb3ce0e18e1d05814c47b9092ceec4ef6032a", @ANYRES16=r3, @ANYBLOB="00042dbd7000fedbdf254500000008000300", @ANYRES32=r4, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x40c0}, 0x4000000)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x100, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1fb}, 0x94)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r6}, 0x10)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r7}, 0x10)
syz_clone3(&(0x7f0000000340)={0x2107080, &(0x7f00000003c0), 0x0, 0x0, {0x1}, 0x0, 0x0, 0x0, 0x0}, 0x58)

4.315864206s ago: executing program 3 (id=200):
openat(0xffffffffffffffff, 0x0, 0x0, 0x80)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000200)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x4b, 0x0, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f0000000000)=0x1, 0x4)
bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c)
connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='kfree\x00', r1}, 0x18)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
r3 = dup2(r2, r2)
setsockopt$ARPT_SO_SET_ADD_COUNTERS(r3, 0x0, 0x60, &(0x7f0000000280)={'filter\x00', 0x4, [{}, {0x0, 0x100000000000000}]}, 0x68)
pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x0, 0x3938700}, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000680)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@errors_remount}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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")
syz_open_procfs(0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./file1\x00', 0x161842, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r5, 0x8000)
eventfd2(0x0, 0x0)
io_setup(0x6, &(0x7f0000000140))
ioctl$FS_IOC_FIEMAP(r4, 0xc020660b, &(0x7f0000000140)=ANY=[@ANYBLOB="01000000000000000000007ac9cf04"])
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0)

4.244430491s ago: executing program 2 (id=201):
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000001280)='./file1\x00', 0x4002, &(0x7f00000004c0)={[{@nojournal_checksum}, {@debug}, {@barrier_val={'barrier', 0x3d, 0x1}}, {@nobarrier}, {@usrjquota}, {@inlinecrypt}, {@journal_async_commit}, {}, {@init_itable}, {@auto_da_alloc}]}, 0x3, 0xbb8, &(0x7f00000017c0)="$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")
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000040)={'syztnl0\x00', &(0x7f0000000140)={'syztnl0\x00', 0x0, 0x29, 0x7, 0xe, 0x7fff, 0x6a, @mcast2, @initdev={0xfe, 0x88, '\x00', 0xfe, 0x0}, 0x708, 0x20, 0x80000000, 0x8000}})
bpf$MAP_CREATE(0x0, 0x0, 0x48) (async)
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) (async)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000181100"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000208500000004"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000181100"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000208500000004"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10)
bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000004000000410000000000000001000000", @ANYRES32=0x1, @ANYBLOB="000000000000000000ff000000000000000020c4", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0240000005"], 0x48)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fc00101}]})
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f00000028c0)={<r3=>0x0})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18)
socket$key(0xf, 0x3, 0x2) (async)
r4 = socket$key(0xf, 0x3, 0x2)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000100)={r3, 0x0, r4})
syncfs(r0)
bind$inet6(0xffffffffffffffff, 0x0, 0x0) (async)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, 0x0, 0x0) (async)
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, 0x0, 0x0)
listen(0xffffffffffffffff, 0x6)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x9, 0xc, 0x1400}, 0x50)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) (async)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r6}, 0x10)
r7 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000440)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1e7d, 0x2cf6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xe0, 0xb1, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x101, 0x8, 0x1, {0x22, 0x3}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xc, 0x10, 0x3}}}}}]}}]}}, 0x0)
syz_usb_control_io(r7, 0x0, 0x0)
syz_usb_control_io(r7, &(0x7f00000002c0)={0x2c, &(0x7f0000000140)={0x40, 0x8, 0x5, {0x5, 0x31, "f90ef6"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) (async)
syz_usb_control_io(r7, &(0x7f00000002c0)={0x2c, &(0x7f0000000140)={0x40, 0x8, 0x5, {0x5, 0x31, "f90ef6"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)

3.675682866s ago: executing program 3 (id=202):
madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x15)
syz_emit_ethernet(0x4a, &(0x7f0000000440)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x2f, 0x0, @remote, @local, {[], {{0x0, 0x22eb, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0)

3.659568478s ago: executing program 1 (id=203):
r0 = socket$nl_route(0x10, 0x3, 0x0) (async)
getresuid(&(0x7f0000000080), &(0x7f0000000180), &(0x7f00000001c0)=<r1=>0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)=@ipv6_newroute={0x2c, 0x18, 0x1, 0x2070bd27, 0x25dfdbfe, {0xa, 0x20, 0x20, 0x8, 0xfd, 0x2, 0xfe, 0x0, 0x2400}, [@RTA_UID={0x8, 0x19, r1}, @RTA_PRIORITY={0x8, 0x6, 0x9}]}, 0x2c}}, 0x0)
r2 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) (async)
r3 = socket$tipc(0x1e, 0x5, 0x0) (async)
openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x20600, 0x0) (async)
ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r2, 0xf504, 0x0) (async)
r4 = socket$packet(0x11, 0x3, 0x300)
getsockname$packet(r4, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) (async)
bind$tipc(r3, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) (async)
bind$tipc(r2, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x20000003}}}, 0x10) (async)
bind$tipc(r3, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000010000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x18) (async)
r7 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
ioctl$ASHMEM_SET_SIZE(r7, 0x40087703, 0xfffffffa) (async)
mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r7, 0x0) (async)
ioctl$ASHMEM_SET_NAME(r7, 0x40087708, &(0x7f00000007c0)='\x00\x00\x03\x06\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\x87\xa3\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Hd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~\x00\x00\x00\x00\x00\x00\x00')
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async)
ioctl$ASHMEM_SET_NAME(r7, 0x40087708, &(0x7f00000007c0)='\x00\x00\x03\x06\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\x87\xa3\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Hd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~\x00\x00\x00\x00\x00\x00\x00') (async)
bind$tipc(r2, 0x0, 0x0)

3.490149921s ago: executing program 3 (id=204):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x207, &(0x7f0000000380)={[{@minixdf}, {@jqfmt_vfsv1}]}, 0x1, 0x46f, &(0x7f0000001200)="$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")
r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7)
bpf$MAP_CREATE(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="0100000e9627ebc48436200002000000010000000bf91d9be19a004b8cd914b6fdffffffffffffff96e218c65938e663f708c92c34a6749e77a2bbf368363f4b22c80d566661b114cb7066317429c5bb1dd322e9354a2eae26447a16ea939589be92a238b7a36a6edffdf0d3f0b01e3710ddb6434d4473be948b825f2d0c472848d052d638640b7eef89de90a34f2000e7808ba4c75b57b7a0cdbc8cdf1dd0d778db47bb0d6c200a5085351a40076379fa9ad9ba2ce47ba7ad1a2974b69a2a4ae8f74f5e93c4d59e38a4b579eb109fa9dd4f380b5a546626cd"], 0x50)
r2 = socket$inet6(0xa, 0x80001, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f00000001c0)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88)
setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f00000007c0)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000ffff00000000000000bd0000000000000000000000e4ec01000000004000000000fc00000000000000000000000000013da51fd47aa2e2f70000000000000000000000000000000000000000000000000000000000000006000000000000000005"], 0x310)
setsockopt$inet6_group_source_req(r2, 0x29, 0x2c, &(0x7f00000005c0)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x4056, &(0x7f0000000200)={[{@noload}, {@nombcache}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x3}}, {@errors_remount}, {@lazytime}, {@minixdf}, {@noquota}, {@usrjquota}]}, 0x1, 0x451, &(0x7f0000000680)="$eJzs28tvG8UfAPDvbh6/X1/EVOXRBzRQEBWPpElL6YELCCQOICHBoRxD4lahboOaINGqgoJQOaJK3BFHpP4FnOCCgBOCK3BGlSrUSwsno7V3G8e1XcdK6jT+fKRtZ3bHmfl6duzZHW8AA2s8+yeJ2B4Rv0fEWD27ssB4/b+b1y/M/nP9wmwS1epbfye1cjeuX5gtihav21ZkhiPSz5LY26LexXPnT81UKuWzeX5y6fT7k4vnzj83f3rmZPlk+cz0sWNHDk+9cHT6+TWJM4vrxp6PFvbtfu2dy2/MHr/87k9XkiL+pji6MXTnIuOdDj5Zra6mug1vR0M6Ge5jQ1iVofowjZHa+B+LoVjuvLF49dO+Ng5YV9Vqtfpg+8NXagWATSoxxGFAFV/02fVvsd2lqceGcO2l+gVQFvfNfKsfGY40LzPSdH27lsYj4vjFf7/Ktmi+D7FlnSoFAAbad9n859lW8780Gu8L3ZevoZQi4v6I2BkRRyNiV0Q8EFEr+1BEPLzK+psXSW6ff6ZXewqsS9n878V8bWvl/K+Y/UVpKM/tqMU/kpyYr5QPZe/Jr/vrJeYr5akOdXz/ym9ftDvWOP/Ltqz+Yi6Yt+Pq8P9WvmZuZmmm54CbXPskYs9wq/iTWysBSUTsjog9PdYx//Q3+9odaxP/aFd/eA3WmapfRzxV7/+L0RR/Iem8Pjn5/6iUD00WZ8Xtfv7l0pvt6r9z/6+vrP+3tjz/i/j/LCWN67WLq6/j0h+ft72m7PX8H03eXrHvw5mlpbNTEaPJ67V8qXH/dFO56eXyWfwHD7Qe/ztj+Z3YGxHZSfxIRDwaEfvztj8WEY9HxIEO8f/48hPv9R7/+srin+vY/9HU/8uJ0Wje0zoxdOqHb1dUWlpN/Fn/H6mlDuZ7uvn866ZdvZ3NAAAAcO9JI2J7JOnErXSaTkzUf8O/K7amlYXFpWdOLHxwZq7+jEApRtLiTtdYw/3QqfyyvshP578tLvKH8/vGXw5tqeUnZhcqc/0OHgbctjbjP/NXFw+5APe45nW0rX1qB3D3eV4TBpfxD4PL+IfB1WL8e/QMBkSr7/+P+9AO4O5rGv8dl/1MDGBzcf0Pg8v4h8Fl/MNAWtwSd35IfnMk0ojYAM3YLIlIN0QzJNYp0e9PJgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgLXxXwAAAP//JI/k8w==")
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0)
openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', &(0x7f0000000180)={0x80040, 0x4c, 0xe}, 0x18)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xe, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000002c0)={@ifindex, r5, 0x5, 0x0, r5, @void, @value=0x0}, 0x20)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
fchdir(0xffffffffffffffff)
r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL802154_CMD_SET_CCA_MODE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x3c, r6, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_CCA_OPT={0x8, 0xd, 0x1}, @NL802154_ATTR_CCA_MODE={0x8, 0xc, 0x2}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_CCA_MODE={0x8, 0xc, 0x4}, @NL802154_ATTR_CCA_MODE={0x8, 0xc, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0xf9381200e87ac27}, 0x200000d0)
r7 = open(&(0x7f0000000300)='./file1\x00', 0x14b042, 0xc4)
ftruncate(r7, 0x2007ffb)

3.486149872s ago: executing program 1 (id=205):
sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x8041}, 0x0)
r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$selinux_load(r0, 0x0, 0x2000)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000540)=ANY=[@ANYRESDEC=r1, @ANYRES32=r1, @ANYBLOB="ed4ea0dc2378571a3cc4c7f1b336e732b91c61ffef0f30c32f6ed6061043f9d8e79dbb886a7c095ca3eb8fe186ca984dce496d01b0ffc8", @ANYRES64=r0, @ANYRES16=r1, @ANYRES16=r0, @ANYRESDEC=r0, @ANYRES8=r1, @ANYRES8=r0, @ANYRESDEC=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
openat$sndtimer(0xffffffffffffff9c, 0x0, 0x502)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
bind$tipc(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs={0x1}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10)
r6 = socket$inet(0x2, 0x2, 0x1)
sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x14}, 0x4010)
sendmsg$inet(r6, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="2d0000008058", 0x6}], 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x4004814)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a00000000000000001812", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x16, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000711853000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x0, 0x0, 0x0, 0x5}, 0x94)

1.946416855s ago: executing program 1 (id=207):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000897f", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
wait4(r2, &(0x7f0000000640), 0x2, &(0x7f0000000680))
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10)
r3 = syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00')
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x1, 0x803, 0x0)
ioctl$EVIOCGABS20(r3, 0x80184560, &(0x7f0000000000)=""/67)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000004c0)={r3, &(0x7f0000000240)="fa97ccfc7fec5e5a9247af4e41c9d1d0727e9954a308411a6d8ec966df95d31797014a0d91b536317a4d1ecaa889e2ab1ba3dd7e7ff1f1ae552a1d773ab8a83b9104dd810e3696f7502728cfe4ab5d7e65f536a1c4b342f966a0fa7bd9dc917748ea182cdd2e4e2edbc695265a70c90b1c6de955413216f7359e943b965b9f937c2a5758cfe4afbc71d69d95617fe2cdeafafa6e850cd681842ffabe15d9794e6d76c936d09030de4b290f5845ea360ebac264509fde658d7b14d7ab3251959c0c885e1102a7911ac26081386bc986462932e6ad031bbdf2e96bce", &(0x7f0000000380)=""/178, 0x4}, 0x20)
r6 = open(&(0x7f0000000080)='./file1\x00', 0x60c42, 0x86)
preadv2(r6, &(0x7f0000000280)=[{&(0x7f0000000180)=""/190, 0xbe}], 0x1, 0x6, 0xfffffff5, 0xb)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRESOCT=r0, @ANYBLOB="4c00347703e844c30ac630", @ANYRES32=r7, @ANYBLOB="28001280090001007665746800000000180002801400010000000000", @ANYRES8=r2, @ANYRESOCT=r3], 0x50}, 0x1, 0xd, 0x0, 0x480c5}, 0x0)

1.813676146s ago: executing program 3 (id=208):
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0)
r2 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
pipe2$9p(&(0x7f00000001c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x0)
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000100)=<r7=>0x0)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r7, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0)
r8 = timerfd_create(0x0, 0x80000)
read(r8, &(0x7f0000000080)=""/149, 0x95)
prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x6)
write$P9_RVERSION(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15)
r9 = dup(r1)
write$FUSE_BMAP(r0, &(0x7f0000000000)={0x18, 0xfffffffffffffffe}, 0x4f)
write$FUSE_DIRENTPLUS(r9, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0)
write$FUSE_GETXATTR(r9, &(0x7f00000000c0)={0x18}, 0x18)
write$FUSE_INIT(r9, &(0x7f0000000100)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}}, 0x50)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB=',cache=fscache'])
utime(&(0x7f0000000240)='./file1\x00', 0x0)
r10 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0)
write$binfmt_script(r10, &(0x7f0000000440)={'#! ', './file0'}, 0xb)

1.600335312s ago: executing program 1 (id=210):
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="160000000000000004000000"], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00', r6}, 0x10)
utimes(0x0, 0x0)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff)

1.526204209s ago: executing program 0 (id=212):
openat(0xffffffffffffffff, 0x0, 0x0, 0x80)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000200)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x4b, 0x0, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f0000000000)=0x1, 0x4)
bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c)
connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='kfree\x00', r1}, 0x18)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
r3 = dup2(r2, r2)
setsockopt$ARPT_SO_SET_ADD_COUNTERS(r3, 0x0, 0x60, &(0x7f0000000280)={'filter\x00', 0x4, [{}, {0x0, 0x100000000000000}]}, 0x68)
pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x0, 0x3938700}, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000680)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@errors_remount}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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")
syz_open_procfs(0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./file1\x00', 0x161842, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r5, 0x8000)
eventfd2(0x0, 0x0)
ioctl$FS_IOC_FIEMAP(r4, 0xc020660b, &(0x7f0000000140)=ANY=[@ANYBLOB="01000000000000000000007ac9cf04"])
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0)

1.405305888s ago: executing program 3 (id=213):
pipe(&(0x7f0000000640)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r2, &(0x7f0000000a80)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x49, 0x1}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r4, <r5=>0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10)
sendmmsg$inet(r3, &(0x7f0000003300)=[{{&(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='p\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a'], 0x70}}], 0x1, 0x2000c044)
write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x4ffdc, 0xc)

1.348383722s ago: executing program 4 (id=214):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000040000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000f82818110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000480)='percpu_alloc_percpu\x00', r3}, 0x10) (async)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48)
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)={0x1b, 0x0, 0x0, 0xffff52e5, 0x0, r2, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x2}, 0x50) (async)
r6 = syz_open_procfs(0x0, &(0x7f0000001380))
getdents(r6, &(0x7f0000002000)=""/4096, 0x1000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x13, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x100}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@call={0x85, 0x0, 0x0, 0x85}, @generic={0x59, 0x1, 0x9, 0x6, 0x7ff}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x1, 0xe0, &(0x7f00000004c0)=""/224, 0x41100, 0x3e, '\x00', 0x0, 0x0, r6, 0x8, &(0x7f0000000080)={0x8, 0x1}, 0x8, 0x10, &(0x7f00000002c0)={0x2, 0x0, 0x4, 0x28ad}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000440)=[r4, r2], 0x0, 0x10, 0xc7}, 0x94) (async)
r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_LINK_PRI(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x68, r7, 0x22b, 0x70bd27, 0x25dfdbfd, {{}, {}, {0x4c, 0x18, {0xa, @link='broadcast-link\x00'}}}}, 0x68}, 0x1, 0x0, 0x0, 0x20000044}, 0x4000880)

1.233796322s ago: executing program 0 (id=215):
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x19, 0xc, 0x0, &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
r2 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$cgroup_freezer_state(r2, &(0x7f00000005c0), 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x25c, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000010000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={0x0, r3}, 0x18)
r4 = socket(0x840000000002, 0x3, 0xff)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ieee802154(0x0, r5)
sendmsg$IEEE802154_LLSEC_SETPARAMS(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={0x0, 0x20}}, 0x2000c094)
setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000040)='gre0\x00', 0x11)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES64=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x400}, 0x94)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r7}, 0x10)
socket$key(0xf, 0x3, 0x2)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000001540)=@newtaction={0x18, 0x32, 0x829, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0)
sendmmsg$inet(r4, &(0x7f0000000a40)=[{{&(0x7f00000001c0)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001980)=[{&(0x7f0000000200)="a90500040000746400009e150451160200000064c6", 0x15}, {&(0x7f00000002c0)="174640b6d80fb2eedc81ba60ccbb9d", 0xf}], 0x2}}, {{&(0x7f00000004c0)={0x2, 0x4e24, @remote}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000780)="5825be57aff9352b356be67ca2746357d1787b35", 0x14}], 0x1}}], 0x2, 0x4004040)
r8 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCSTI(r8, 0x5412, &(0x7f0000000040)=0x9)
ioctl$TCXONC(r8, 0x540a, 0x0)
ioctl$TIOCSTI(r8, 0x5412, &(0x7f0000000000)=0x7f)

1.186400126s ago: executing program 4 (id=216):
fsopen(&(0x7f0000000000)='msdos\x00', 0x1)
r0 = syz_open_procfs(0x0, &(0x7f0000000380)='net/vlan/config\x00')
read$eventfd(r0, &(0x7f0000000080), 0x51)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x5a1300, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000000000082000040"])
syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00')

1.13212297s ago: executing program 4 (id=217):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000002bc0)={0x0, 0x0, &(0x7f0000002b80)={&(0x7f0000002980)=@dellink={0x34, 0x11, 0x1, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0xc0, 0x1400}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'wg2\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000100}, 0x40004)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
fstat(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@rand_addr=0x64010102, 0xfffe, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, r2}, {0x10000, 0x0, 0x0, 0x3, 0xfffffffffffffffc, 0x0, 0x3, 0xfffffffffffffffe}, {0x0, 0x400100000004, 0x0, 0x8}, 0x0, 0x0, 0x2, 0x2}, {{@in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x2, 0x6c}, 0x2, @in6=@loopback, 0x0, 0x1, 0x1, 0xb7, 0x4, 0x7}}, 0xe8)
r3 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000140)={&(0x7f0000000040)=""/216, 0x21000, 0x800, 0x3b0ead1, 0x3}, 0x20)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r1, 0x8983, &(0x7f0000000000)={0x7, 'veth1_to_batadv\x00', {0x7f}, 0x8})

1.099284403s ago: executing program 0 (id=218):
r0 = openat$binfmt_register(0xffffff9c, &(0x7f0000000040), 0x1, 0x0)
pwrite64(r0, &(0x7f0000000100)="e67ab166972ce298f4681ef5c755f60473b17b7887d68440dd9005bc69f6c3c5238bebfbce42365029d64c37eeaeec2d13731c56a864da45a465e64de685", 0x3e, 0x3)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x24, 0x0, 0x0, 0x0, 0x2, 0xfffffffffffffffe, 0x200, 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = openat(0xffffffffffffff9c, 0x0, 0x88882, 0x0)
sendfile(0xffffffffffffffff, r3, 0x0, 0x3ffff)
ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r3, 0x40045402, &(0x7f0000000240))
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000000))
capset(&(0x7f0000000040)={0x19980330}, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f00000000c0)={[{0x0, 0x8, 0x0, 0x0, 0x3, 0xa5, 0xbd, 0xf9, 0xa9, 0x4, 0x0, 0x0, 0x40000000}, {0x8, 0x5, 0xfc, 0x3, 0x41, 0x0, 0x0, 0x2, 0x6, 0xff, 0x0, 0x2, 0x6}, {0x80000000, 0x9, 0x0, 0xfd, 0x20, 0x5, 0xb3, 0x0, 0x3, 0xfe, 0x80, 0xf6, 0xb82e}], 0x9})
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
r7 = socket$igmp6(0xa, 0x3, 0x2)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'veth0_to_bond\x00', <r8=>0x0})
sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000400)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB, @ANYRES32=r8, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x24000011}, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66ba4300b006ee0f01c40f009b27000000b9800000c00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a000000328fe858b660002fb90d090000b800680000ba000000000f30", 0x5a}], 0x1, 0x0, 0x0, 0x0)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r11}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r10}, &(0x7f00000004c0), &(0x7f0000000300)=r11}, 0x20)
r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000013c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r12, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000000400)="76389e14a3bf35f15517c87583ddd0", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
r13 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r13, @ANYBLOB="01000000000000000100170000000c00068008800601feffffff12e9b04126"], 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x0)

922.338807ms ago: executing program 4 (id=219):
syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x200000, 0x0, 0xfe, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0)
write$P9_RREADLINK(r0, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x1000009, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x200000, 0x0, 0xfe, 0x0, 0x0) (async)
openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) (async)
write$P9_RREADLINK(r0, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) (async)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x1000009, 0x0, 0x1, 0x0, 0x0) (async)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) (async)

812.984655ms ago: executing program 4 (id=220):
socket$inet_udp(0x2, 0x2, 0x0)
unshare(0x74030480)
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
socket$can_raw(0x1d, 0x3, 0x1)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000005000080850000007d00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x10)
capset(&(0x7f0000000380)={0x20080522}, &(0x7f00000003c0)={0x0, 0xfff})
prctl$PR_CAPBSET_DROP(0x18, 0x12)
statx(0xffffffffffffffff, 0x0, 0x4000, 0x7ff, 0x0)
getpid()
openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xf, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000f0000000000000c00000018110000", @ANYRESHEX=0x0, @ANYBLOB="0000000000000000b702000014000200b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='netfs_rreq\x00', r5}, 0x18)
setrlimit(0x3, 0x0)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
munmap(&(0x7f0000066000/0x4000)=nil, 0x4000)

787.298667ms ago: executing program 0 (id=221):
syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x20, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x1c0)
mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f0000000b80), 0x200008, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}]})
syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f0000000200)='./bus\x00', 0x3242cac, &(0x7f0000000380)=ANY=[], 0xff, 0x0, 0x0)
open(&(0x7f00000005c0)='./file0\x00', 0x2a4c0, 0x13)
lremovexattr(&(0x7f0000000000)='./file0\x00', &(0x7f00000003c0)=@known='system.posix_acl_default\x00')

713.434933ms ago: executing program 0 (id=222):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x3, '\x00', 0x0, 0x0}, 0x50)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000040), &(0x7f0000000140)={0x0, 0xfb, 0x4e, 0x7, 0x7, "9b26684ee7490143a8b3815da4412260", "678e46a386af535bd891e3914c462797751a86220202d4382927e9ed784d33fd04144f349a72cc8c287da99cdec703eae9db2349b69f1f4718"}, 0x4e, 0x1)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x16, 0x1c, &(0x7f0000000300)=ANY=[@ANYBLOB="0900d9656967000600000008100000001811002a00095fa82b2279a0c91a23a28d4cb89dad4094f70cd476b4b382a6", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000008000000850000008200000018110000", @ANYRESHEX=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000000000008500000008000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f00000007c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0xfca804a0, 0x35, 0xb, &(0x7f00000002c0)="b80a000500000000", &(0x7f0000000000)=""/11, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

622.093571ms ago: executing program 0 (id=223):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket(0x10, 0x3, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00'}, 0x10)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10)
r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5543, 0x781, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x90, 0x50, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x4, 0x18, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x4e, 0xf5, 0xa}}}}}]}}]}}, 0x0)
syz_usb_control_io(r4, 0x0, 0x0)
syz_usb_control_io$hid(r4, &(0x7f0000000380)={0x24, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="00230500000147336995e41800f1600da966235d45eb26dd120887ea35cc9deaeb24d1281387d51a30b3a4428f6db8308f6e5b530b"], 0x0}, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000002540)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10)
r6 = socket$netlink(0x10, 0x3, 0x0)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_VENDOR(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001740)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01070000000000100000670000000800c30000"], 0x2c}}, 0x0)
bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbff, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000000), 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, &(0x7f0000000180)=0x7, 0x4)
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000680)=@newtaction={0x850, 0x31, 0x1, 0x0, 0x0, {}, [{0x83c, 0x1, [@m_police={0x838, 0x0, 0x0, 0x0, {{0xb}, {0x80c, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa1, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x0, 0x0, 0xb1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400044, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffff, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x8, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x8, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0xd, 0x0, 0x0, 0x0, 0xfffffff9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x40, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x1]}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x9, 0x0, 0x0, 0x800, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28aa9480, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x20000, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0xe44, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x6, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x2, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x27e, 0x0, 0x2, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x8, 0xfffffffd, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000000, 0x0, 0x1000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd8b]}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x850}}, 0x0)
r9 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000013000000850000008600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r10}, 0x18)
r11 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r11, 0x89f3, &(0x7f0000000680)={'sit0\x00', &(0x7f0000000600)={'erspan0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x29, 0x0, @private, @rand_addr, {[@noop]}}}}})
truncate(&(0x7f0000000040)='./file0\x00', 0x7)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0)
fdatasync(r0)

462.193063ms ago: executing program 3 (id=224):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x122261, &(0x7f0000000100)={[{@errors_remount}, {@noload}, {@nogrpid}, {@noquota}, {@noblock_validity}, {}, {@mblk_io_submit}, {@acl}, {@resgid}, {@data_err_ignore}], [], 0x3d}, 0x1, 0x534, &(0x7f0000000200)="$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")
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}}, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x480, &(0x7f0000000000), 0x1, 0x786, &(0x7f0000000f80)="$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")
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000021c0)=0x1, 0x4)
setsockopt(r0, 0x1, 0x7, &(0x7f0000000240)="0100ddbf", 0x4)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e1e, 0x0, @loopback, 0x2}, 0x1c)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7}, 0x1c)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0)
truncate(&(0x7f0000000900)='./file1\x00', 0x3000000)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x20, 0x0, 0x0, 0xfffff00c}, {0x6}]}, 0x10)
sendmmsg$inet(r3, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0)

0s ago: executing program 4 (id=225):
openat(0xffffffffffffffff, 0x0, 0x0, 0x80)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000200)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x4b, 0x0, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f0000000000)=0x1, 0x4)
bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c)
connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='kfree\x00', r1}, 0x18)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
r3 = dup2(r2, r2)
setsockopt$ARPT_SO_SET_ADD_COUNTERS(r3, 0x0, 0x60, &(0x7f0000000280)={'filter\x00', 0x4, [{}, {0x0, 0x100000000000000}]}, 0x68)
pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x0, 0x3938700}, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000680)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@errors_remount}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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")
syz_open_procfs(0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./file1\x00', 0x161842, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r5, 0x8000)
ioctl$FS_IOC_FIEMAP(r4, 0xc020660b, &(0x7f0000000140)=ANY=[@ANYBLOB="01000000000000000000007ac9cf04"])
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0)

kernel console output (not intermixed with test programs):



syzkaller
syzkaller login: [   19.912958][   T24] kauditd_printk_skb: 47 callbacks suppressed
[   19.912990][   T24] audit: type=1400 audit(1754744172.680:59): avc:  denied  { transition } for  pid=217 comm="sshd-session" path="/bin/sh" dev="sda1" ino=90 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[   19.926446][   T24] audit: type=1400 audit(1754744172.680:60): avc:  denied  { noatsecure } for  pid=217 comm="sshd-session" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[   19.939167][   T24] audit: type=1400 audit(1754744172.690:61): avc:  denied  { write } for  pid=217 comm="sh" path="pipe:[14194]" dev="pipefs" ino=14194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1
[   19.961750][   T24] audit: type=1400 audit(1754744172.690:62): avc:  denied  { rlimitinh } for  pid=217 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[   19.980842][   T24] audit: type=1400 audit(1754744172.690:63): avc:  denied  { siginh } for  pid=217 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
Warning: Permanently added '10.128.0.60' (ED25519) to the list of known hosts.
[   30.609934][   T24] audit: type=1400 audit(1754744183.370:64): avc:  denied  { mounton } for  pid=267 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[   30.613165][  T267] cgroup: Unknown subsys name 'net'
[   30.632739][   T24] audit: type=1400 audit(1754744183.370:65): avc:  denied  { mount } for  pid=267 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   30.660182][   T24] audit: type=1400 audit(1754744183.400:66): avc:  denied  { unmount } for  pid=267 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   30.660474][  T267] cgroup: Unknown subsys name 'devices'
[   30.805047][  T267] cgroup: Unknown subsys name 'hugetlb'
[   30.810995][  T267] cgroup: Unknown subsys name 'rlimit'
[   31.011664][   T24] audit: type=1400 audit(1754744183.780:67): avc:  denied  { setattr } for  pid=267 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   31.034981][   T24] audit: type=1400 audit(1754744183.780:68): avc:  denied  { mounton } for  pid=267 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1
Setting up swapspace version 1, size = 127995904 bytes
[   31.060062][   T24] audit: type=1400 audit(1754744183.780:69): avc:  denied  { mount } for  pid=267 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1
[   31.073551][  T269] SELinux:  Context root:object_r:swapfile_t is not valid (left unmapped).
[   31.092601][   T24] audit: type=1400 audit(1754744183.860:70): avc:  denied  { relabelto } for  pid=269 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   31.118221][   T24] audit: type=1400 audit(1754744183.860:71): avc:  denied  { write } for  pid=269 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   31.118782][  T267] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   31.143930][   T24] audit: type=1400 audit(1754744183.870:72): avc:  denied  { read } for  pid=267 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   31.178460][   T24] audit: type=1400 audit(1754744183.870:73): avc:  denied  { open } for  pid=267 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   32.689152][  T275] bridge0: port 1(bridge_slave_0) entered blocking state
[   32.696288][  T275] bridge0: port 1(bridge_slave_0) entered disabled state
[   32.704331][  T275] device bridge_slave_0 entered promiscuous mode
[   32.714475][  T275] bridge0: port 2(bridge_slave_1) entered blocking state
[   32.721663][  T275] bridge0: port 2(bridge_slave_1) entered disabled state
[   32.729731][  T275] device bridge_slave_1 entered promiscuous mode
[   32.814524][  T276] bridge0: port 1(bridge_slave_0) entered blocking state
[   32.821719][  T276] bridge0: port 1(bridge_slave_0) entered disabled state
[   32.829776][  T276] device bridge_slave_0 entered promiscuous mode
[   32.843933][  T276] bridge0: port 2(bridge_slave_1) entered blocking state
[   32.851327][  T276] bridge0: port 2(bridge_slave_1) entered disabled state
[   32.859364][  T276] device bridge_slave_1 entered promiscuous mode
[   32.963515][  T278] bridge0: port 1(bridge_slave_0) entered blocking state
[   32.970921][  T278] bridge0: port 1(bridge_slave_0) entered disabled state
[   32.978709][  T278] device bridge_slave_0 entered promiscuous mode
[   33.021187][  T278] bridge0: port 2(bridge_slave_1) entered blocking state
[   33.028363][  T278] bridge0: port 2(bridge_slave_1) entered disabled state
[   33.036456][  T278] device bridge_slave_1 entered promiscuous mode
[   33.052792][  T277] bridge0: port 1(bridge_slave_0) entered blocking state
[   33.059882][  T277] bridge0: port 1(bridge_slave_0) entered disabled state
[   33.067906][  T277] device bridge_slave_0 entered promiscuous mode
[   33.096617][  T277] bridge0: port 2(bridge_slave_1) entered blocking state
[   33.103867][  T277] bridge0: port 2(bridge_slave_1) entered disabled state
[   33.111985][  T277] device bridge_slave_1 entered promiscuous mode
[   33.224721][  T279] bridge0: port 1(bridge_slave_0) entered blocking state
[   33.232007][  T279] bridge0: port 1(bridge_slave_0) entered disabled state
[   33.240050][  T279] device bridge_slave_0 entered promiscuous mode
[   33.274973][  T279] bridge0: port 2(bridge_slave_1) entered blocking state
[   33.282139][  T279] bridge0: port 2(bridge_slave_1) entered disabled state
[   33.290148][  T279] device bridge_slave_1 entered promiscuous mode
[   33.511667][  T275] bridge0: port 2(bridge_slave_1) entered blocking state
[   33.518767][  T275] bridge0: port 2(bridge_slave_1) entered forwarding state
[   33.526354][  T275] bridge0: port 1(bridge_slave_0) entered blocking state
[   33.533454][  T275] bridge0: port 1(bridge_slave_0) entered forwarding state
[   33.548662][  T276] bridge0: port 2(bridge_slave_1) entered blocking state
[   33.555776][  T276] bridge0: port 2(bridge_slave_1) entered forwarding state
[   33.563223][  T276] bridge0: port 1(bridge_slave_0) entered blocking state
[   33.570310][  T276] bridge0: port 1(bridge_slave_0) entered forwarding state
[   33.582241][  T278] bridge0: port 2(bridge_slave_1) entered blocking state
[   33.589311][  T278] bridge0: port 2(bridge_slave_1) entered forwarding state
[   33.596714][  T278] bridge0: port 1(bridge_slave_0) entered blocking state
[   33.603812][  T278] bridge0: port 1(bridge_slave_0) entered forwarding state
[   33.687693][  T279] bridge0: port 2(bridge_slave_1) entered blocking state
[   33.694795][  T279] bridge0: port 2(bridge_slave_1) entered forwarding state
[   33.702181][  T279] bridge0: port 1(bridge_slave_0) entered blocking state
[   33.709274][  T279] bridge0: port 1(bridge_slave_0) entered forwarding state
[   33.737231][    T9] bridge0: port 1(bridge_slave_0) entered disabled state
[   33.746047][    T9] bridge0: port 2(bridge_slave_1) entered disabled state
[   33.753887][    T9] bridge0: port 1(bridge_slave_0) entered disabled state
[   33.761451][    T9] bridge0: port 2(bridge_slave_1) entered disabled state
[   33.769104][    T9] bridge0: port 1(bridge_slave_0) entered disabled state
[   33.776595][    T9] bridge0: port 2(bridge_slave_1) entered disabled state
[   33.785036][    T9] bridge0: port 1(bridge_slave_0) entered disabled state
[   33.792717][    T9] bridge0: port 2(bridge_slave_1) entered disabled state
[   33.808016][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   33.815911][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   33.850971][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   33.860047][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   33.868679][    T9] bridge0: port 1(bridge_slave_0) entered blocking state
[   33.875915][    T9] bridge0: port 1(bridge_slave_0) entered forwarding state
[   33.896915][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   33.904843][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   33.913162][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   33.921130][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   33.929233][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   33.938142][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   33.946912][    T9] bridge0: port 1(bridge_slave_0) entered blocking state
[   33.953999][    T9] bridge0: port 1(bridge_slave_0) entered forwarding state
[   33.961785][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   33.970410][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   33.978956][    T9] bridge0: port 2(bridge_slave_1) entered blocking state
[   33.986018][    T9] bridge0: port 2(bridge_slave_1) entered forwarding state
[   34.015362][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   34.024989][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   34.033689][    T9] bridge0: port 2(bridge_slave_1) entered blocking state
[   34.040798][    T9] bridge0: port 2(bridge_slave_1) entered forwarding state
[   34.048610][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   34.058472][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   34.067052][    T9] bridge0: port 1(bridge_slave_0) entered blocking state
[   34.074321][    T9] bridge0: port 1(bridge_slave_0) entered forwarding state
[   34.082120][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   34.091103][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   34.099495][    T9] bridge0: port 2(bridge_slave_1) entered blocking state
[   34.106657][    T9] bridge0: port 2(bridge_slave_1) entered forwarding state
[   34.148258][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   34.157352][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   34.165258][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   34.174421][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   34.182699][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   34.191284][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   34.199431][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   34.208036][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   34.233653][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   34.242669][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   34.251513][    T9] bridge0: port 1(bridge_slave_0) entered blocking state
[   34.258577][    T9] bridge0: port 1(bridge_slave_0) entered forwarding state
[   34.266938][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   34.276176][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   34.284538][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   34.293170][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   34.301663][    T9] bridge0: port 2(bridge_slave_1) entered blocking state
[   34.308871][    T9] bridge0: port 2(bridge_slave_1) entered forwarding state
[   34.316400][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   34.325081][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   34.333461][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   34.370060][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   34.378352][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   34.400544][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   34.409033][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   34.417989][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   34.427239][    T9] bridge0: port 1(bridge_slave_0) entered blocking state
[   34.434316][    T9] bridge0: port 1(bridge_slave_0) entered forwarding state
[   34.441900][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   34.452529][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   34.460704][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   34.469629][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   34.478937][    T9] bridge0: port 2(bridge_slave_1) entered blocking state
[   34.486015][    T9] bridge0: port 2(bridge_slave_1) entered forwarding state
[   34.515782][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   34.524692][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   34.534781][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   34.543701][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   34.552704][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   34.579240][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   34.588161][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   34.596144][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   34.605412][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   34.613602][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   34.622544][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   34.630291][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   34.647582][  T278] device veth0_vlan entered promiscuous mode
[   34.658871][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   34.667812][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   34.675856][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   34.683979][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   34.693021][  T275] device veth0_vlan entered promiscuous mode
[   34.699486][  T276] device veth0_vlan entered promiscuous mode
[   34.719226][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   34.728504][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   34.736704][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   34.755783][  T279] device veth0_vlan entered promiscuous mode
[   34.775380][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   34.785246][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   34.794330][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   34.803966][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   34.812660][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   34.821224][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   34.839239][  T278] device veth1_macvtap entered promiscuous mode
[   34.852148][  T279] device veth1_macvtap entered promiscuous mode
[   34.862363][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   34.870429][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   34.879945][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   34.889309][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   34.905286][  T276] device veth1_macvtap entered promiscuous mode
[   34.921647][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   34.930349][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   34.939084][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   34.947865][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   34.956618][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   34.967804][  T275] device veth1_macvtap entered promiscuous mode
[   34.984210][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   34.992312][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   35.001252][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   35.012473][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   35.021245][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   35.035307][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   35.044090][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   35.069451][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   35.079148][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   35.087851][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   35.096846][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   35.105666][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   35.114268][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   35.122934][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   35.131807][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   35.144330][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   35.153073][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   35.184221][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   35.193806][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   35.220239][  T278] request_module fs-gadgetfs succeeded, but still no fs?
[   35.238123][  T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   35.246990][  T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   35.257146][  T296] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   35.265268][  T296] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   35.277379][  T276] cgroup: cgroup: disabling cgroup2 socket matching due to net_prio or net_cls activation
[   35.292882][  T277] device veth0_vlan entered promiscuous mode
[   35.354265][  T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   35.365204][  T302] mmap: syz.2.3 (302) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst.
[   35.383111][  T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   35.410991][  T277] device veth1_macvtap entered promiscuous mode
[   35.439553][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   35.448838][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   35.457921][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   35.460098][  T309] 9pnet: Insufficient options for proto=fd
[   35.533986][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready
[   35.544598][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   35.561616][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready
[   35.580011][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   35.588901][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   35.607847][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   35.627537][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   35.636328][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   35.645572][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   35.654752][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   36.903583][   T24] kauditd_printk_skb: 34 callbacks suppressed
[   36.903636][   T24] audit: type=1400 audit(1754744189.670:108): avc:  denied  { create } for  pid=305 comm="syz.0.1" dev="anon_inodefs" ino=14976 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[   37.420591][    C1] sched: RT throttling activated
[   38.478486][   T24] audit: type=1400 audit(1754744191.240:109): avc:  denied  { prog_run } for  pid=313 comm="syz.2.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[   38.626402][  T323] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue
[   38.636864][  T323] ext4 filesystem being mounted at /1/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   38.979030][   T24] audit: type=1400 audit(1754744191.400:110): avc:  denied  { mount } for  pid=313 comm="syz.2.6" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[   39.088863][   T24] audit: type=1400 audit(1754744191.440:111): avc:  denied  { write } for  pid=313 comm="syz.2.6" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   39.151883][   T24] audit: type=1400 audit(1754744191.440:112): avc:  denied  { add_name } for  pid=313 comm="syz.2.6" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   39.173142][   T24] audit: type=1400 audit(1754744191.440:113): avc:  denied  { create } for  pid=313 comm="syz.2.6" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   39.307461][   T24] audit: type=1400 audit(1754744191.450:114): avc:  denied  { read write } for  pid=313 comm="syz.2.6" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   39.333259][   T24] audit: type=1400 audit(1754744191.450:115): avc:  denied  { open } for  pid=313 comm="syz.2.6" path="/1/file0/file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   39.366791][   T24] audit: type=1400 audit(1754744191.500:116): avc:  denied  { create } for  pid=313 comm="syz.2.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   40.388324][   T24] audit: type=1400 audit(1754744191.500:117): avc:  denied  { write } for  pid=313 comm="syz.2.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   41.343239][  T355] netlink: 148 bytes leftover after parsing attributes in process `syz.0.12'.
[   41.352381][  T355] netlink: 116 bytes leftover after parsing attributes in process `syz.0.12'.
[   41.361322][  T355] netlink: 24 bytes leftover after parsing attributes in process `syz.0.12'.
[   41.968984][   T24] kauditd_printk_skb: 17 callbacks suppressed
[   41.969017][   T24] audit: type=1326 audit(1754744194.730:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=363 comm="syz.1.15" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f3c0b1be9 code=0x7ffc0000
[   42.410594][   T24] audit: type=1326 audit(1754744195.170:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=363 comm="syz.1.15" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f3c0b1be9 code=0x7ffc0000
[   42.516218][   T24] audit: type=1400 audit(1754744195.200:137): avc:  denied  { write } for  pid=354 comm="syz.3.13" name="001" dev="devtmpfs" ino=180 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[   42.920747][   T24] audit: type=1326 audit(1754744195.400:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=363 comm="syz.1.15" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0f3c0b1be9 code=0x7ffc0000
[   43.040192][   T24] audit: type=1326 audit(1754744195.410:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=363 comm="syz.1.15" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f3c0b1be9 code=0x7ffc0000
[   43.092041][  T372] exfat: Bad value for 'umask'
[   43.141793][   T24] audit: type=1326 audit(1754744195.440:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=363 comm="syz.1.15" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0f3c0b1be9 code=0x7ffc0000
[   43.311600][   T24] audit: type=1326 audit(1754744195.680:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=363 comm="syz.1.15" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f3c0b1be9 code=0x7ffc0000
[   43.391205][   T24] audit: type=1326 audit(1754744195.680:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=363 comm="syz.1.15" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f3c0b1be9 code=0x7ffc0000
[   43.418630][   T24] audit: type=1326 audit(1754744195.720:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=363 comm="syz.1.15" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0f3c0b1be9 code=0x7ffc0000
[   43.580857][   T24] audit: type=1326 audit(1754744195.720:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=363 comm="syz.1.15" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f3c0b1be9 code=0x7ffc0000
[   43.691548][  T388] binder: 387:388 ioctl c0306201 2000000003c0 returned -22
[   44.184046][  T401] ======================================================
[   44.184046][  T401] WARNING: the mand mount option is being deprecated and
[   44.184046][  T401]          will be removed in v5.15!
[   44.184046][  T401] ======================================================
[   44.531536][  T401] EXT4-fs (loop1): Ignoring removed nobh option
[   44.557686][  T401] EXT4-fs (loop1): Ignoring removed bh option
[   44.616773][  T401] EXT4-fs (loop1): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,noload,,errors=continue
[   44.662303][  T413] device wg2 entered promiscuous mode
[   45.328656][  T419] overlayfs: conflicting lowerdir path
[   45.846086][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready
[   45.861878][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   45.890936][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready
[   45.921142][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   45.950041][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   45.980474][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   46.011378][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   46.032623][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   46.373483][  T426] exFAT-fs (loop4): Invalid boot checksum (boot checksum : 0x1119ac00, checksum : 0x111b6c00)
[   46.394164][  T426] exFAT-fs (loop4): invalid boot region
[   46.404258][  T426] exFAT-fs (loop4): failed to recognize exfat type
[   46.970633][   T24] kauditd_printk_skb: 92 callbacks suppressed
[   46.970667][   T24] audit: type=1400 audit(1754744199.730:237): avc:  denied  { read write } for  pid=439 comm="syz.4.36" path="socket:[15887]" dev="sockfs" ino=15887 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   47.180719][  T280] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   47.206271][   T24] audit: type=1400 audit(1754744199.970:238): avc:  denied  { write } for  pid=454 comm="syz.0.39" name="tcp6" dev="proc" ino=4026532326 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1
[   47.246995][  T409] F2FS-fs (loop3): Found nat_bits in checkpoint
[   47.582991][  T455] binfmt_misc: register: failed to install interpreter file ./file0
[   47.800901][  T280] usb 3-1: unable to read config index 0 descriptor/start: -71
[   47.895654][  T280] usb 3-1: can't read configurations, error -71
[   49.121830][  T475] netlink: 28 bytes leftover after parsing attributes in process `syz.2.44'.
[   49.162105][   T24] audit: type=1400 audit(1754744201.920:239): avc:  denied  { read } for  pid=477 comm="syz.1.45" dev="nsfs" ino=4026532458 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[   49.183705][  T479] netlink: 176 bytes leftover after parsing attributes in process `syz.0.43'.
[   50.355125][  T482] netlink: 44 bytes leftover after parsing attributes in process `syz.4.41'.
[   50.364087][  T482] netlink: 12 bytes leftover after parsing attributes in process `syz.4.41'.
[   50.383522][   T24] audit: type=1400 audit(1754744201.920:240): avc:  denied  { open } for  pid=477 comm="syz.1.45" path="net:[4026532458]" dev="nsfs" ino=4026532458 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[   52.830679][   T24] audit: type=1400 audit(1754744203.550:241): avc:  denied  { connect } for  pid=477 comm="syz.1.45" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   52.913603][  T488] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   52.938633][  T487] overlayfs: failed to resolve './file1': -2
[   52.958014][   T24] audit: type=1400 audit(1754744205.700:242): avc:  denied  { unlink } for  pid=485 comm="syz.1.47" name="#3" dev="tmpfs" ino=89 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[   53.006295][  T488] capability: warning: `syz.3.46' uses deprecated v2 capabilities in a way that may be insecure
[   53.033495][   T24] audit: type=1326 audit(1754744205.770:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=486 comm="syz.3.46" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3c7a53be9 code=0x7ffc0000
[   53.233992][   T24] audit: type=1326 audit(1754744205.770:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=486 comm="syz.3.46" exe="/root/syz-executor" sig=0 arch=c000003e syscall=126 compat=0 ip=0x7ff3c7a53be9 code=0x7ffc0000
[   53.284119][   T24] audit: type=1326 audit(1754744205.850:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=486 comm="syz.3.46" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3c7a53be9 code=0x7ffc0000
[   53.320704][   T24] audit: type=1326 audit(1754744205.850:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=486 comm="syz.3.46" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3c7a53be9 code=0x7ffc0000
[   53.404025][  T498] input: syz0 as /devices/virtual/input/input4
[   53.419135][   T79] audit: audit_backlog=65 > audit_backlog_limit=64
[   53.442200][   T79] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64
[   53.449892][   T79] audit: backlog limit exceeded
[   53.455615][   T79] audit: audit_backlog=65 > audit_backlog_limit=64
[   53.623368][  T498] FAT-fs (loop1): error, invalid access to FAT (entry 0x0fff0101)
[   53.631502][  T498] FAT-fs (loop1): Filesystem has been set read-only
[   53.726738][  T488] EXT4-fs (loop3): Test dummy encryption mode enabled
[   54.071239][  T488] EXT4-fs (loop3): mounted filesystem without journal. Opts: resuid=0x0000000000000000,barrier=0x00000000000083fc,noblock_validity,discard,data=ordered,debug_want_extra_isize=0x0000000000000084,max_batch_time=0x0000000000000000,test_dummy_encryption,,errors=continue
[   55.091602][  T488] fscrypt: AES-256-CTS-CBC using implementation "cts(cbc-aes-aesni)"
[   56.996869][  T548] overlayfs: failed to resolve './file1': -2
[   57.694136][  T561] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue
[   58.036557][   T24] kauditd_printk_skb: 117 callbacks suppressed
[   58.036588][   T24] audit: type=1400 audit(1754744210.800:359): avc:  denied  { block_suspend } for  pid=550 comm="syz.1.62" capability=36  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[   59.583380][  T578] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock
[   59.660774][  T578] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock
[   59.716212][  T578] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 1 overlaps superblock
[   59.791260][  T578] EXT4-fs (loop0): revision level too high, forcing read-only mode
[   59.799320][  T578] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c042e01c, mo2=0000]
[   59.837202][  T542] F2FS-fs (loop4): Fix alignment : internally, start(4096) end(16896) block(12288)
[   60.069825][  T542] F2FS-fs (loop4): invalid crc value
[   60.081165][  T578] EXT4-fs (loop0): orphan cleanup on readonly fs
[   60.090390][  T542] F2FS-fs (loop4): invalid crc value
[   60.381319][  T542] F2FS-fs (loop4): Failed to get valid F2FS checkpoint
[   60.421586][  T578] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.69: bg 0: block 34: padding at end of block bitmap is not set
[   61.238494][  T578] Quota error (device loop0): write_blk: dquota write failed
[   61.246586][  T578] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota
[   61.256636][  T578] EXT4-fs error (device loop0): ext4_acquire_dquot:6226: comm syz.0.69: Failed to acquire dquot type 1
[   61.397446][  T578] EXT4-fs (loop0): 1 truncate cleaned up
[   62.173599][  T578] EXT4-fs (loop0): mounted filesystem without journal. Opts: noblock_validity,barrier,,errors=continue
[   62.246327][  T593] overlayfs: failed to resolve './file1': -2
[   62.267729][  T595] netlink: 'syz.1.75': attribute type 1 has an invalid length.
[   62.311219][  T594] netlink: 'syz.1.75': attribute type 1 has an invalid length.
[   62.347708][  T595] netlink: 56 bytes leftover after parsing attributes in process `syz.1.75'.
[   62.381384][  T594] netlink: 56 bytes leftover after parsing attributes in process `syz.1.75'.
[   62.411912][   T24] audit: type=1400 audit(1754744215.180:360): avc:  denied  { mount } for  pid=599 comm="syz.3.77" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1
[   62.433377][   T24] audit: type=1400 audit(1754744215.180:361): avc:  denied  { remount } for  pid=599 comm="syz.3.77" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1
[   62.493675][   T24] audit: type=1400 audit(1754744215.180:362): avc:  denied  { read write } for  pid=599 comm="syz.3.77" name="uhid" dev="devtmpfs" ino=261 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[   62.628532][   T24] audit: type=1400 audit(1754744215.180:363): avc:  denied  { open } for  pid=599 comm="syz.3.77" path="/dev/uhid" dev="devtmpfs" ino=261 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[   62.713245][  T605] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue
[   62.740870][  T605] ext4 filesystem being mounted at /15/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   62.760000][   T24] audit: type=1400 audit(1754744215.300:364): avc:  denied  { ioctl } for  pid=602 comm="syz.1.78" path="socket:[15261]" dev="sockfs" ino=15261 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   62.843638][   T24] audit: type=1400 audit(1754744215.310:365): avc:  denied  { wake_alarm } for  pid=601 comm="syz.0.76" capability=35  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[   63.113154][   T24] audit: type=1400 audit(1754744215.340:366): avc:  denied  { create } for  pid=602 comm="syz.1.78" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   63.156962][  T605] netlink: 96 bytes leftover after parsing attributes in process `syz.0.76'.
[   63.351978][   T24] audit: type=1400 audit(1754744215.590:367): avc:  denied  { ioctl } for  pid=601 comm="syz.0.76" path="/15/file0/file2" dev="loop0" ino=16 ioctlcmd=0x660f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   64.385312][   T24] audit: type=1400 audit(1754744215.630:368): avc:  denied  { unmount } for  pid=279 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1
[   64.592478][   T24] audit: type=1400 audit(1754744217.350:369): avc:  denied  { unmount } for  pid=279 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[   64.950970][  T632] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock
[   64.978686][  T632] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock
[   64.979487][  T639] netlink: 8 bytes leftover after parsing attributes in process `syz.3.88'.
[   65.081602][  T632] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 1 overlaps superblock
[   65.261720][  T632] EXT4-fs (loop1): revision level too high, forcing read-only mode
[   65.337038][  T632] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c042e01c, mo2=0000]
[   65.502498][  T632] EXT4-fs (loop1): orphan cleanup on readonly fs
[   65.826155][  T632] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.86: bg 0: block 34: padding at end of block bitmap is not set
[   65.842259][   T24] audit: type=1404 audit(1754744218.610:370): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1
[   65.884024][   T24] audit: type=1404 audit(1754744218.640:371): enforcing=0 old_enforcing=1 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1
[   65.920466][  T632] Quota error (device loop1): write_blk: dquota write failed
[   65.959800][  T632] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota
[   66.000713][   T24] audit: type=1400 audit(1754744218.640:372): avc:  denied  { map_create } for  pid=643 comm="syz.4.89" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[   66.060717][  T632] EXT4-fs error (device loop1): ext4_acquire_dquot:6226: comm syz.1.86: Failed to acquire dquot type 1
[   66.103413][   T24] audit: type=1400 audit(1754744218.650:373): avc:  denied  { prog_load } for  pid=643 comm="syz.4.89" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[   66.122996][  T632] EXT4-fs (loop1): 1 truncate cleaned up
[   66.170943][  T632] EXT4-fs (loop1): mounted filesystem without journal. Opts: noblock_validity,barrier,,errors=continue
[   68.404288][   T24] kauditd_printk_skb: 16 callbacks suppressed
[   68.404321][   T24] audit: type=1400 audit(1754744221.170:390): avc:  denied  { read write } for  pid=669 comm="syz.1.94" name="raw-gadget" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   69.364417][   T24] audit: type=1400 audit(1754744221.200:391): avc:  denied  { open } for  pid=669 comm="syz.1.94" path="/dev/raw-gadget" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   69.428460][   T24] audit: type=1400 audit(1754744221.200:392): avc:  denied  { ioctl } for  pid=669 comm="syz.1.94" path="/dev/raw-gadget" dev="devtmpfs" ino=253 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   69.487774][  T371] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   69.520654][   T24] audit: type=1400 audit(1754744222.090:393): avc:  denied  { read } for  pid=666 comm="syz.0.97" name="rtc0" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[   69.616242][  T676] netlink: 8 bytes leftover after parsing attributes in process `syz.4.100'.
[   69.681137][   T24] audit: type=1400 audit(1754744222.100:394): avc:  denied  { open } for  pid=666 comm="syz.0.97" path="/dev/rtc0" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[   69.721517][   T24] audit: type=1400 audit(1754744222.100:395): avc:  denied  { ioctl } for  pid=666 comm="syz.0.97" path="/dev/rtc0" dev="devtmpfs" ino=258 ioctlcmd=0x700a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[   69.746222][   T24] audit: type=1400 audit(1754744222.100:396): avc:  denied  { name_bind } for  pid=666 comm="syz.0.97" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1
[   70.376704][  T682] xt_hashlimit: max too large, truncated to 1048576
[   70.786708][  T371] usb 2-1: Using ep0 maxpacket: 32
[   70.792530][   T24] audit: type=1400 audit(1754744222.100:397): avc:  denied  { node_bind } for  pid=666 comm="syz.0.97" saddr=::ffff:0.0.0.0 src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1
[   70.821993][  T681] serio: Serial port ptm0
[   70.826566][   T24] audit: type=1400 audit(1754744222.100:398): avc:  denied  { create } for  pid=666 comm="syz.0.97" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   71.072453][  T371] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   71.383763][   T24] audit: type=1400 audit(1754744222.100:399): avc:  denied  { ioctl } for  pid=666 comm="syz.0.97" path="socket:[16240]" dev="sockfs" ino=16240 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   71.410732][  T371] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[   71.422738][  T371] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   71.432354][  T371] usb 2-1: config 0 descriptor??
[   71.470834][  T371] usb 2-1: can't set config #0, error -71
[   71.491776][  T371] usb 2-1: USB disconnect, device number 2
[   71.549966][  T688] hub 6-0:1.0: USB hub found
[   71.575515][  T688] hub 6-0:1.0: 1 port detected
[   72.101207][  T692] exfat: Unknown parameter 'pcr'
[   72.321224][  T703] exfat: Unknown parameter 'µÅ…æ–'
[   72.537488][  T704] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue
[   72.590771][  T704] ext4 filesystem being mounted at /25/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   72.683811][  T710] ------------[ cut here ]------------
[   72.689355][  T710] trace type BPF program uses run-time allocation
[   72.726755][  T710] WARNING: CPU: 1 PID: 710 at kernel/bpf/verifier.c:10513 check_map_prog_compatibility+0x5d6/0x740
[   72.774233][  T710] Modules linked in:
[   72.785122][  T710] CPU: 0 PID: 710 Comm: syz.0.107 Not tainted 5.10.240-syzkaller #0
[   72.793470][  T710] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[   72.805266][  T710] RIP: 0010:check_map_prog_compatibility+0x5d6/0x740
[   72.812328][  T710] Code: 85 e9 14 fe ff ff e8 89 f9 ef ff 31 c0 e9 15 fe ff ff e8 7d f9 ef ff c6 05 13 bd 2c 05 01 48 c7 c7 00 73 05 85 e8 6a 40 fb 02 <0f> 0b e9 85 fc ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c a3 fa ff
[   72.841016][  T710] RSP: 0018:ffffc90001217468 EFLAGS: 00010246
[   72.847445][  T710] RAX: 9b9aadc62e4e9900 RBX: 0000000000000001 RCX: 0000000000080000
[   72.855864][  T710] RDX: ffffc900014db000 RSI: 000000000000195c RDI: 000000000000195d
[   72.864775][  T710] RBP: ffffc900012174b0 R08: dffffc0000000000 R09: ffffed103ee2a5f8
[   72.873344][  T710] R10: ffffed103ee2a5f8 R11: 1ffff1103ee2a5f7 R12: ffff88810db64000
[   72.881663][  T710] R13: 0000000000000011 R14: dffffc0000000000 R15: ffff88811c44e800
[   72.889714][  T710] FS:  00007ff9d83346c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000
[   72.909188][  T710] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   72.929388][  T710] CR2: 000000110c27e533 CR3: 000000011c411000 CR4: 00000000003506b0
[   72.947814][  T710] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[   72.996580][  T710] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[   73.045680][  T710] Call Trace:
[   73.049054][  T710]  ? __fdget+0x1a1/0x230
[   73.060679][  T371] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   73.068290][  T710]  resolve_pseudo_ldimm64+0x526/0x1020
[   73.074396][  T710]  ? bpf_check+0xd680/0xd680
[   73.079125][  T710]  ? kvmalloc_node+0x88/0x130
[   73.091042][  T710]  bpf_check+0x8d4b/0xd680
[   73.095715][  T710]  ? bpf_get_btf_vmlinux+0x60/0x60
[   73.127970][  T710]  ? 0xffffffffa002c000
[   73.194223][  T710]  ? is_bpf_text_address+0x177/0x190
[   73.221404][  T710]  ? selinux_bpf_prog_alloc+0x51/0x140
[   73.250011][  T710]  ? __kernel_text_address+0xa0/0x100
[   73.285022][  T710]  ? unwind_get_return_address+0x4d/0x90
[   73.300707][  T371] usb 5-1: Using ep0 maxpacket: 8
[   73.320504][  T710]  ? stack_trace_save+0xe0/0xe0
[   73.346533][  T710]  ? arch_stack_walk+0xee/0x140
[   73.382803][  T710]  ? stack_trace_save+0x98/0xe0
[   73.417074][  T710]  ? stack_trace_snprint+0xf0/0xf0
[   73.423676][  T371] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   73.451908][  T371] usb 5-1: New USB device found, idVendor=2801, idProduct=0201, bcdDevice=2a.d5
[   73.507678][  T711] EXT4-fs (loop0): Test dummy encryption mode enabled
[   73.589027][  T371] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   73.602330][  T710]  ? __kasan_slab_alloc+0x69/0xf0
[   73.647043][  T711] EXT4-fs (loop0): Ignoring removed bh option
[   73.922024][  T371] usb 5-1: config 0 descriptor??
[   73.930850][  T710]  ? selinux_bpf_prog_alloc+0x51/0x140
[   73.936385][  T710]  ? __kasan_kmalloc+0xec/0x110
[   73.961889][  T710]  ? __kasan_kmalloc+0xda/0x110
[   73.966832][  T710]  ? kmem_cache_alloc_trace+0x184/0x2e0
[   73.991320][  T710]  ? selinux_bpf_prog_alloc+0x51/0x140
[   74.007130][  T710]  ? security_bpf_prog_alloc+0x62/0x90
[   74.013732][  T710]  ? bpf_prog_load+0x949/0x1420
[   74.028911][  T710]  ? __se_sys_bpf+0x442/0x680
[   74.039050][  T710]  ? __x64_sys_bpf+0x7b/0x90
[   74.049200][  T710]  ? do_syscall_64+0x31/0x40
[   74.120922][  T710]  ? entry_SYSCALL_64_after_hwframe+0x61/0xcb
[   74.131011][  T710]  ? memset+0x35/0x40
[   74.135133][  T710]  ? bpf_obj_name_cpy+0x193/0x1e0
[   74.150496][  T710]  bpf_prog_load+0xf5a/0x1420
[   74.160675][  T710]  ? map_freeze+0x320/0x320
[   74.165279][  T710]  ? selinux_bpf+0xc7/0xf0
[   74.169753][  T710]  ? security_bpf+0x82/0xa0
[   74.182929][   T24] kauditd_printk_skb: 18 callbacks suppressed
[   74.182962][   T24] audit: type=1326 audit(1754744226.950:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=702 comm="syz.4.106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6c1b29be9 code=0x7ffc0000
[   74.237761][   T20] usb 5-1: USB disconnect, device number 2
[   74.268801][  T710]  __se_sys_bpf+0x442/0x680
[   74.281616][  T710]  ? __x64_sys_bpf+0x90/0x90
[   74.286410][  T710]  ? fpu__clear_all+0x20/0x20
[   74.296506][   T24] audit: type=1326 audit(1754744226.950:419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=702 comm="syz.4.106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6c1b29be9 code=0x7ffc0000
[   74.380845][  T710]  __x64_sys_bpf+0x7b/0x90
[   74.391370][  T710]  do_syscall_64+0x31/0x40
[   74.400845][  T710]  entry_SYSCALL_64_after_hwframe+0x61/0xcb
[   74.412184][  T710] RIP: 0033:0x7ff9d98cbbe9
[   74.416667][  T710] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   74.471149][  T724] netlink: 8 bytes leftover after parsing attributes in process `syz.4.111'.
[   74.480115][  T710] RSP: 002b:00007ff9d8334038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[   74.500181][  T710] RAX: ffffffffffffffda RBX: 00007ff9d9af2fa0 RCX: 00007ff9d98cbbe9
[   74.532292][  T710] RDX: 0000000000000090 RSI: 00002000000000c0 RDI: 0000000000000005
[   74.580759][  T710] RBP: 00007ff9d994ee19 R08: 0000000000000000 R09: 0000000000000000
[   74.595766][  T710] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   74.604455][   T24] audit: type=1400 audit(1754744227.360:420): avc:  denied  { create } for  pid=725 comm="syz.4.112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   74.645160][  T710] R13: 00007ff9d9af3038 R14: 00007ff9d9af2fa0 R15: 00007fff94d2d618
[   74.665360][   T24] audit: type=1400 audit(1754744227.390:421): avc:  denied  { write } for  pid=725 comm="syz.4.112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   74.708974][  T710] ---[ end trace 1f8d64cf878fd079 ]---
[   74.788499][   T24] audit: type=1400 audit(1754744227.390:422): avc:  denied  { nlmsg_write } for  pid=725 comm="syz.4.112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   74.831543][  T728] exfat: Deprecated parameter 'utf8'
[   74.837218][  T728] exfat: Deprecated parameter 'utf8'
[   74.860255][  T728] exfat: Deprecated parameter 'namecase'
[   74.898324][  T728] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d)
[   74.920473][   T24] audit: type=1400 audit(1754744227.680:423): avc:  denied  { mount } for  pid=727 comm="syz.4.113" name="/" dev="loop4" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[   74.991075][  T731] EXT4-fs (loop3): Test dummy encryption mode enabled
[   75.020687][  T731] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option
[   75.041426][   T24] audit: type=1400 audit(1754744227.810:424): avc:  denied  { read write } for  pid=735 comm="syz.0.116" name="uinput" dev="devtmpfs" ino=257 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[   75.097934][  T588] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[   75.118594][  T731] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2815: Unable to expand inode 17. Delete some EAs or run e2fsck.
[   75.132185][  T731] EXT4-fs (loop3): 1 truncate cleaned up
[   75.140315][  T731] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsv0,nojournal_checksum,barrier,barrier,test_dummy_encryption,nomblk_io_submit,,errors=continue
[   75.158558][   T24] audit: type=1400 audit(1754744227.880:425): avc:  denied  { open } for  pid=735 comm="syz.0.116" path="/dev/uinput" dev="devtmpfs" ino=257 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[   75.183794][   T24] audit: type=1400 audit(1754744227.950:426): avc:  denied  { create } for  pid=730 comm="syz.3.114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   75.207432][   T24] audit: type=1400 audit(1754744227.970:427): avc:  denied  { bind } for  pid=730 comm="syz.3.114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   75.216043][  T736] input: syz1 as /devices/virtual/input/input5
[   75.330681][  T746] EXT4-fs (loop2): mounted filesystem without journal. Opts: sysvgroups,inode_readahead_blks=0x0000000000004000,usrjquota=,acl,grpjquota=,,errors=continue
[   75.347010][  T746] ext4 filesystem being mounted at /16/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   75.390822][  T588] usb 2-1: device descriptor read/64, error -71
[   76.422501][  T756] netlink: 104 bytes leftover after parsing attributes in process `syz.2.120'.
[   76.447144][  T759] overlayfs: failed to resolve './file0': -2
[   76.565425][  T765] netlink: 8 bytes leftover after parsing attributes in process `syz.4.122'.
[   76.575161][  T760] exfat: Unknown parameter 'D'
[   78.111011][  T791] EXT4-fs (loop4): Ignoring removed bh option
[   78.140761][  T791] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   78.393155][  T791] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors
[   78.404127][  T791] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (31873!=20869)
[   78.414374][  T791] EXT4-fs (loop4): filesystem has both journal inode and journal device!
[   79.459760][  T799] tipc: Started in network mode
[   79.464779][  T799] tipc: Own node identity ac1414aa, cluster identity 4711
[   79.472359][  T799] tipc: Enabled bearer <udp:syz2>, priority 10
[   80.040689][  T588] usb 2-1: device descriptor read/64, error -71
[   80.226327][  T808] overlayfs: failed to resolve './file0': -2
[   80.310930][  T588] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[   80.330973][   T15] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[   80.570827][  T588] usb 2-1: Using ep0 maxpacket: 8
[   80.590819][  T471] tipc: 32-bit node address hash set to aa1414ac
[   80.600664][   T15] usb 3-1: device descriptor read/64, error -71
[   80.688181][   T24] kauditd_printk_skb: 41 callbacks suppressed
[   80.688214][   T24] audit: type=1400 audit(1754744233.450:469): avc:  denied  { read append } for  pid=792 comm="syz.1.131" name="kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[   80.803421][   T24] audit: type=1400 audit(1754744233.490:470): avc:  denied  { open } for  pid=792 comm="syz.1.131" path="/dev/kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[   80.900714][   T24] audit: type=1400 audit(1754744233.490:471): avc:  denied  { ioctl } for  pid=792 comm="syz.1.131" path="/dev/kvm" dev="devtmpfs" ino=82 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[   80.990689][   T15] usb 3-1: device descriptor read/64, error -71
[   81.141181][  T588] usb 2-1: unable to get BOS descriptor or descriptor too short
[   81.210715][  T588] usb 2-1: unable to read config index 0 descriptor/start: -71
[   81.222632][  T588] usb 2-1: can't read configurations, error -71
[   81.242646][  T588] usb usb2-port1: attempt power cycle
[   81.260668][   T15] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[   81.700878][   T15] usb 3-1: device descriptor read/64, error -71
[   82.217907][  T827] netlink: 'syz.1.139': attribute type 27 has an invalid length.
[   82.691576][  T827] bridge0: port 2(bridge_slave_1) entered disabled state
[   82.699002][  T827] bridge0: port 1(bridge_slave_0) entered disabled state
[   82.730853][   T24] audit: type=1400 audit(1754744235.430:472): avc:  denied  { read write } for  pid=820 comm="syz.0.138" name="fuse" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1
[   82.831822][   T24] audit: type=1400 audit(1754744235.430:473): avc:  denied  { open } for  pid=820 comm="syz.0.138" path="/dev/fuse" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1
[   82.937900][   T24] audit: type=1400 audit(1754744235.450:474): avc:  denied  { mount } for  pid=820 comm="syz.0.138" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1
[   83.824517][   T24] audit: type=1326 audit(1754744236.580:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=832 comm="syz.1.140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f3c0b1be9 code=0x7ffc0000
[   83.891157][   T24] audit: type=1326 audit(1754744236.580:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=832 comm="syz.1.140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f3c0b1be9 code=0x7ffc0000
[   83.925160][  T838] EXT4-fs (loop1): Unrecognized mount option "dioread_lock.errors=continue" or missing value
[   84.034307][  T841] EXT4-fs (loop4): Mount option "nouser_xattr" will be removed by 3.5
[   84.034307][  T841] Contact linux-ext4@vger.kernel.org if you think we should keep it.
[   84.034307][  T841] 
[   84.063506][   T24] audit: type=1326 audit(1754744236.580:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=832 comm="syz.1.140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f3c0b1be9 code=0x7ffc0000
[   84.159985][   T24] audit: type=1326 audit(1754744236.580:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=832 comm="syz.1.140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f3c0b1be9 code=0x7ffc0000
[   84.199469][  T841] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   84.263573][  T841] EXT4-fs (loop4): mounted filesystem without journal. Opts: dioread_nolock,noauto_da_alloc,nouser_xattr,nojournal_checksum,data_err=ignore,barrier=0x0000000000000009,data_err=ignore,grpquota,nombcache,user_xattr,resuid=0x0000000000000000,quota,,errors=continue
[   84.400868][  T471] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   84.665185][  T471] usb 4-1: Using ep0 maxpacket: 32
[   84.726890][  T857] overlayfs: failed to resolve './file0': -2
[   84.780818][  T471] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   84.806509][  T471] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[   84.840888][  T471] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   84.901363][  T471] usb 4-1: config 0 descriptor??
[   85.041931][  T471] hub 4-1:0.0: USB hub found
[   85.931543][  T471] hub 4-1:0.0: 1 port detected
[   86.182868][  T874] netlink: 112 bytes leftover after parsing attributes in process `syz.3.144'.
[   86.290902][  T471] hub 4-1:0.0: hub_hub_status failed (err = -71)
[   86.310708][  T471] hub 4-1:0.0: config failed, can't get hub status (err -71)
[   86.360668][  T588] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[   87.069378][  T882] netlink: 8 bytes leftover after parsing attributes in process `syz.3.154'.
[   87.230837][   T24] kauditd_printk_skb: 30 callbacks suppressed
[   87.230873][   T24] audit: type=1400 audit(1754744239.890:509): avc:  denied  { ioctl } for  pid=881 comm="syz.3.154" path="socket:[17583]" dev="sockfs" ino=17583 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   87.359608][  T889] SELinux: security_context_str_to_sid(user_u) failed for (dev incremental-fs, type incremental-fs) errno=-22
[   87.384366][   T24] audit: type=1400 audit(1754744239.890:510): avc:  denied  { read } for  pid=881 comm="syz.3.154" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[   87.409913][  T471] usbhid 4-1:0.0: can't add hid device: -71
[   87.416091][  T471] usbhid: probe of 4-1:0.0 failed with error -71
[   87.428639][   T24] audit: type=1400 audit(1754744239.890:511): avc:  denied  { open } for  pid=881 comm="syz.3.154" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[   87.578071][  T895] overlayfs: failed to resolve './file0': -2
[   87.584982][   T24] audit: type=1400 audit(1754744239.890:512): avc:  denied  { ioctl } for  pid=881 comm="syz.3.154" path="/dev/binderfs/binder0" dev="binder" ino=10 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[   87.731450][   T24] audit: type=1400 audit(1754744239.890:513): avc:  denied  { set_context_mgr } for  pid=881 comm="syz.3.154" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1
[   87.831339][   T24] audit: type=1400 audit(1754744240.120:514): avc:  denied  { remount } for  pid=887 comm="syz.3.156" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[   87.965363][   T24] audit: type=1400 audit(1754744240.570:515): avc:  denied  { read } for  pid=901 comm="syz.2.161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   88.131775][  T471] usb 4-1: USB disconnect, device number 2
[   88.253471][  T588] usb 2-1: Using ep0 maxpacket: 32
[   88.350408][   T24] audit: type=1400 audit(1754744241.110:516): avc:  denied  { setopt } for  pid=914 comm="syz.4.166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   88.391011][  T588] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   88.402142][  T588] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[   88.411922][  T588] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   88.421639][  T588] usb 2-1: config 0 descriptor??
[   88.461851][  T588] hub 2-1:0.0: USB hub found
[   88.475827][  T908] EXT4-fs (loop3): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,barrier,auto_da_alloc,nodioread_nolock,,errors=continue
[   88.491016][  T911] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   88.491333][  T908] ext4 filesystem being mounted at /26/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   88.521566][  T922] fuse: Unknown parameter 'fdÀ00000000000000000000010'
[   88.536763][   T24] audit: type=1400 audit(1754744241.300:517): avc:  denied  { write } for  pid=907 comm="syz.3.164" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   88.552161][  T911] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2
[   88.581206][   T24] audit: type=1400 audit(1754744241.300:518): avc:  denied  { open } for  pid=907 comm="syz.3.164" path="/26/file1/file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   88.604864][  T911] EXT4-fs error (device loop0): ext4_free_branches:1026: inode #13: comm syz.0.165: invalid indirect mapped block 2683928664 (level 1)
[   88.680730][  T588] hub 2-1:0.0: 1 port detected
[   88.711017][  T911] EXT4-fs (loop0): Remounting filesystem read-only
[   88.717857][  T911] EXT4-fs (loop0): 1 truncate cleaned up
[   88.727200][  T911] EXT4-fs (loop0): mounted filesystem without journal. Opts: noblock_validity,dioread_nolock,errors=remount-ro,minixdf,jqfmt=vfsv0,usrjquota=."
[   88.839069][  T911] EXT4-fs (loop0): Quota file not on filesystem root. Journaled quota will not work
[   88.883289][  T867] netlink: 112 bytes leftover after parsing attributes in process `syz.1.150'.
[   88.911323][  T935] overlayfs: failed to resolve './file0': -2
[   88.920963][  T588] hub 2-1:0.0: hub_hub_status failed (err = -71)
[   88.928570][  T588] hub 2-1:0.0: config failed, can't get hub status (err -71)
[   89.046404][  T588] usbhid 2-1:0.0: can't add hid device: -71
[   89.053264][  T588] usbhid: probe of 2-1:0.0 failed with error -71
[   89.091177][  T588] usb 2-1: USB disconnect, device number 6
[   90.124888][  T938] binfmt_misc: register: failed to install interpreter file ./file0
[   90.379376][  T944] netlink: 12 bytes leftover after parsing attributes in process `syz.1.174'.
[   90.684333][  T946] binder: 945:946 ioctl c0306201 2000000004c0 returned -14
[   91.249485][  T967] netlink: 4 bytes leftover after parsing attributes in process `syz.3.181'.
[   91.412715][  T967] device vlan2 entered promiscuous mode
[   91.418342][  T967] device dummy0 entered promiscuous mode
[   91.483976][  T978] tc_dump_action: action bad kind
[   91.690736][  T974] EXT4-fs (loop4): Ignoring removed nobh option
[   91.722089][  T974] EXT4-fs error (device loop4): ext4_orphan_get:1395: inode #15: comm syz.4.182: iget: bad i_size value: 38620345925642
[   91.744640][  T974] EXT4-fs error (device loop4): ext4_orphan_get:1400: comm syz.4.182: couldn't read orphan inode 15 (err -117)
[   91.756779][  T280] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   91.774986][  T974] EXT4-fs (loop4): mounted filesystem without journal. Opts: nobh,auto_da_alloc,data_err=ignore,,errors=continue
[   91.911981][  T977] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm syz.4.182: bg 0: block 5: invalid block bitmap
[   91.936363][  T977] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 968 with error 28
[   91.955160][  T977] EXT4-fs (loop4): This should not happen!! Data will be lost
[   91.955160][  T977] 
[   91.980768][  T588] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[   91.999691][  T977] EXT4-fs (loop4): Total free blocks count 0
[   92.006004][  T280] usb 1-1: Using ep0 maxpacket: 16
[   92.011401][  T977] EXT4-fs (loop4): Free/Dirty block details
[   92.017348][  T977] EXT4-fs (loop4): free_blocks=0
[   92.022774][  T977] EXT4-fs (loop4): dirty_blocks=968
[   92.028016][  T977] EXT4-fs (loop4): Block reservation details
[   92.034305][  T977] EXT4-fs (loop4): i_reserved_data_blocks=968
[   92.130740][  T280] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   92.150646][  T280] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[   92.230664][  T588] usb 4-1: Using ep0 maxpacket: 32
[   93.077593][   T24] kauditd_printk_skb: 13 callbacks suppressed
[   93.077687][   T24] audit: type=1400 audit(1754744245.790:532): avc:  denied  { mounton } for  pid=992 comm="syz.4.187" path="/45/file0" dev="tmpfs" ino=275 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[   93.756117][  T280] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   93.765361][  T588] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   93.776634][  T280] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   93.785145][  T588] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[   93.794310][  T280] usb 1-1: Product: syz
[   93.798569][  T588] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   93.806697][  T280] usb 1-1: Manufacturer: syz
[   93.818096][  T280] usb 1-1: SerialNumber: syz
[   93.824363][  T588] usb 4-1: config 0 descriptor??
[   93.941091][  T588] hub 4-1:0.0: USB hub found
[   94.080751][  T588] hub 4-1:0.0: 1 port detected
[   94.250772][  T280] usb 1-1: 0:2 : does not exist
[   94.255816][  T280] usb 1-1: unit 9 not found!
[   94.257496][ T1004] EXT4-fs (loop4): Test dummy encryption mode enabled
[   94.287944][ T1004] EXT4-fs (loop4): Test dummy encryption mode enabled
[   94.309437][ T1004] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption=v1,test_dummy_encryption=v1,,errors=continue
[   94.323108][ T1004] ext4 filesystem being mounted at /47/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   94.330034][  T280] usb 1-1: USB disconnect, device number 2
[   94.354999][  T986] netlink: 112 bytes leftover after parsing attributes in process `syz.3.185'.
[   94.378168][  T300] udevd[300]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   94.398412][   T24] audit: type=1400 audit(1754744247.160:533): avc:  denied  { create } for  pid=1003 comm="syz.4.190" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1
[   94.400731][  T588] hub 4-1:0.0: hub_hub_status failed (err = -71)
[   94.446393][  T588] hub 4-1:0.0: config failed, can't get hub status (err -71)
[   94.480904][ T1004] fscrypt: AES-256-XTS using implementation "xts-aes-aesni"
[   94.492308][   T24] audit: type=1400 audit(1754744247.260:534): avc:  denied  { create } for  pid=1003 comm="syz.4.190" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=fifo_file permissive=1
[   94.570730][  T588] usbhid 4-1:0.0: can't add hid device: -71
[   94.576897][  T588] usbhid: probe of 4-1:0.0 failed with error -71
[   94.598455][   T24] audit: type=1400 audit(1754744247.260:535): avc:  denied  { link } for  pid=1003 comm="syz.4.190" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop4" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=fifo_file permissive=1
[   94.682922][  T588] usb 4-1: USB disconnect, device number 3
[   95.056106][ T1036] bridge: RTM_NEWNEIGH with invalid ether address
[   97.440512][ T1045] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   97.457117][ T1045] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[   97.640637][  T757] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[   97.683199][ T1045] EXT4-fs (loop3): 1 truncate cleaned up
[   97.688930][ T1045] EXT4-fs (loop3): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,user_xattr,errors=remount-ro,quota,
[   97.854769][   T24] audit: type=1400 audit(1754744250.620:536): avc:  denied  { read } for  pid=1042 comm="syz.3.200" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   97.877870][ T1049] EXT4-fs (loop2): can't mount with journal_async_commit, fs mounted w/o journal
[   98.054833][   T24] audit: type=1400 audit(1754744250.820:537): avc:  denied  { read write } for  pid=1047 comm="syz.2.201" path="socket:[16878]" dev="sockfs" ino=16878 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[   98.112115][   T24] audit: type=1400 audit(1754744250.860:538): avc:  denied  { bind } for  pid=1055 comm="syz.1.203" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   98.138755][  T757] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[   98.149566][  T757] usb 1-1: config 1 has an invalid descriptor of length 64, skipping remainder of the config
[   98.171955][ T1061] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349)
[   98.192160][  T757] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[   98.202157][ T1061] EXT4-fs (loop3): orphan cleanup on readonly fs
[   98.208578][   T24] audit: type=1400 audit(1754744250.970:539): avc:  denied  { load_policy } for  pid=1063 comm="syz.1.205" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1
[   98.229048][ T1061] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:510: comm syz.3.204: Block bitmap for bg 0 marked uninitialized
[   98.243020][ T1061] EXT4-fs error (device loop3) in ext4_mb_clear_bb:5645: Corrupt filesystem
[   98.252223][ T1061] EXT4-fs (loop3): 1 orphan inode deleted
[   98.258135][ T1061] EXT4-fs (loop3): mounted filesystem without journal. Opts: minixdf,jqfmt=vfsv1,,errors=continue
[   98.308392][   T24] audit: type=1400 audit(1754744251.070:540): avc:  denied  { mount } for  pid=1060 comm="syz.3.204" name="/" dev="ramfs" ino=16889 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1
[   98.569660][   T24] audit: type=1400 audit(1754744251.330:541): avc:  denied  { create } for  pid=1063 comm="syz.1.205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   98.615799][   T24] audit: type=1400 audit(1754744251.330:542): avc:  denied  { write } for  pid=1063 comm="syz.1.205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   99.710657][   T25] usb 3-1: new full-speed USB device number 6 using dummy_hcd
[   99.720820][  T757] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   99.730092][  T757] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   99.760683][  T757] usb 1-1: Product: syz
[   99.829994][   T24] audit: type=1400 audit(1754744252.590:543): avc:  denied  { nlmsg_write } for  pid=1071 comm="syz.0.206" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1
[   99.850766][  T757] usb 1-1: can't set config #1, error -71
[   99.860767][  T757] usb 1-1: USB disconnect, device number 3
[   99.875467][ T1074] netlink: 48 bytes leftover after parsing attributes in process `syz.1.207'.
[   99.881783][   T24] audit: type=1400 audit(1754744252.590:544): avc:  denied  { read } for  pid=1071 comm="syz.0.206" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   99.942307][   T24] audit: type=1400 audit(1754744252.710:545): avc:  denied  { write } for  pid=1075 comm="syz.3.208" name="binder1" dev="binder" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[   99.968827][ T1078] overlayfs: failed to resolve './file1': -2
[   99.990673][   T24] audit: type=1400 audit(1754744252.730:546): avc:  denied  { unlink } for  pid=1077 comm="syz.0.209" name="#9" dev="tmpfs" ino=249 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[  100.140801][   T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[  100.160912][   T25] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00
[  100.170983][   T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  100.180490][   T25] usb 3-1: config 0 descriptor??
[  100.201281][ T1051] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  100.246798][ T1090] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  100.302200][ T1090] EXT4-fs (loop0): 1 truncate cleaned up
[  100.307927][ T1090] EXT4-fs (loop0): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,user_xattr,errors=remount-ro,quota,
[  100.594329][ T1108] capability: warning: `syz.0.218' uses 32-bit capabilities (legacy support in use)
[  100.603962][   T24] audit: type=1400 audit(1754744253.360:547): avc:  denied  { setopt } for  pid=1105 comm="syz.4.217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  100.663181][   T25] pyra 0003:1E7D:2CF6.0001: item fetching failed at offset 2/3
[  100.681161][   T25] pyra 0003:1E7D:2CF6.0001: parse failed
[  100.687155][   T25] pyra: probe of 0003:1E7D:2CF6.0001 failed with error -22
[  100.747263][ T1108] netlink: 8 bytes leftover after parsing attributes in process `syz.0.218'.
[  100.884908][ T1121] overlayfs: failed to resolve './file1': -2
[  101.438483][ T1128] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue
[  101.549415][ T1128] EXT4-fs error (device loop3): ext4_mb_generate_buddy:808: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters
[  101.570657][  T280] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  101.826113][ T1138] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  101.840733][  T280] usb 1-1: Using ep0 maxpacket: 16
[  101.870737][ T1138] EXT4-fs (loop4): 1 truncate cleaned up
[  101.878144][ T1138] EXT4-fs (loop4): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,user_xattr,errors=remount-ro,quota,
[  101.925701][  T949] ------------[ cut here ]------------
[  101.931469][  T949] kernel BUG at fs/ext4/inode.c:2778!
[  101.937150][  T949] invalid opcode: 0000 [#1] PREEMPT SMP KASAN
[  101.943283][  T949] CPU: 0 PID: 949 Comm: kworker/u4:4 Tainted: G        W         5.10.240-syzkaller #0
[  101.952950][  T949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  101.963075][  T949] Workqueue: writeback wb_workfn (flush-7:3)
[  101.969162][  T949] RIP: 0010:ext4_writepages+0x2ddb/0x2e00
[  101.974939][  T949] Code: 36 94 ff 84 db 75 31 e8 43 34 94 ff 49 bc 00 00 00 00 00 fc ff df 4c 8b 6c 24 30 48 8b 5c 24 38 e9 21 f8 ff ff e8 25 34 94 ff <0f> 0b e8 1e 34 94 ff e8 95 fe 30 ff eb 98 e8 12 34 94 ff e8 89 fe
[  101.994606][  T949] RSP: 0018:ffffc90000de7180 EFLAGS: 00010293
[  102.000743][  T949] RAX: ffffffff81cf6c4b RBX: 0000008410000000 RCX: ffff888110a713c0
[  102.008768][  T949] RDX: 0000000000000000 RSI: 0000008000000000 RDI: 0000000000000000
[  102.016805][  T949] RBP: ffffc90000de74f0 R08: dffffc0000000000 R09: ffffed1027001242
[  102.024839][  T949] R10: ffffed1027001242 R11: 1ffff11027001241 R12: dffffc0000000000
[  102.032866][  T949] R13: ffff888116895000 R14: 0000008000000000 R15: ffff888138009208
[  102.040926][  T949] FS:  0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000
[  102.049909][  T949] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  102.056547][  T949] CR2: 0000000020000000 CR3: 0000000114217000 CR4: 00000000003506b0
[  102.064585][  T949] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  102.072607][  T949] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  102.080984][  T949] Call Trace:
[  102.084329][  T949]  ? search_extable+0x8c/0xd0
[  102.089071][  T949]  ? copy_user_enhanced_fast_string+0x27/0x40
[  102.095204][  T949]  ? ex_handler_copy+0x43/0xf0
[  102.100054][  T949]  ? fixup_exception+0x92/0xd0
[  102.104887][  T949]  ? no_context+0x108/0xb60
[  102.109458][  T949]  ? ext4_readpage+0x220/0x220
[  102.114281][  T949]  ? is_prefetch+0x490/0x490
[  102.118925][  T949]  ? enqueue_task_fair+0xac3/0x2250
[  102.124183][  T949]  ? __bad_area_nosemaphore+0x9c/0x420
[  102.129716][  T949]  ? do_user_addr_fault+0xa18/0xc80
[  102.134976][  T949]  ? ext4_readpage+0x220/0x220
[  102.139792][  T949]  do_writepages+0x12a/0x270
[  102.144435][  T949]  ? do_kern_addr_fault+0x80/0x80
[  102.149516][  T949]  ? __writepage+0x130/0x130
[  102.154159][  T949]  ? __kasan_check_write+0x14/0x20
[  102.159325][  T949]  ? _raw_spin_lock+0x8e/0xe0
[  102.164056][  T949]  ? __kasan_check_write+0x14/0x20
[  102.169226][  T949]  ? _raw_spin_lock+0x8e/0xe0
[  102.173954][  T949]  __writeback_single_inode+0xd5/0xa20
[  102.179474][  T949]  ? wbc_attach_and_unlock_inode+0x171/0x590
[  102.185509][  T949]  writeback_sb_inodes+0x860/0x1400
[  102.190754][  T949]  ? fixup_exception+0x92/0xd0
[  102.195583][  T949]  ? queue_io+0x4c0/0x4c0
[  102.199980][  T949]  ? __kasan_check_read+0x11/0x20
[  102.205057][  T949]  ? queue_io+0x385/0x4c0
[  102.209454][  T949]  wb_writeback+0x3e3/0xb90
[  102.214031][  T949]  ? wb_io_lists_depopulated+0x180/0x180
[  102.219722][  T949]  ? set_worker_desc+0x155/0x1c0
[  102.224715][  T949]  ? __kasan_check_write+0x14/0x20
[  102.229900][  T949]  wb_workfn+0x38f/0xe20
[  102.234215][  T949]  ? inode_wait_for_writeback+0x200/0x200
[  102.239984][  T949]  ? __this_cpu_preempt_check+0x13/0x20
[  102.245593][  T949]  ? tracing_record_taskinfo_sched_switch+0x80/0x3a0
[  102.252323][  T949]  ? _raw_spin_unlock_irq+0x4e/0x70
[  102.257576][  T949]  ? finish_task_switch+0x12e/0x5a0
[  102.262823][  T949]  ? __switch_to_asm+0x34/0x60
[  102.267638][  T949]  ? __schedule+0xb4f/0x1310
[  102.272277][  T949]  ? __kasan_check_read+0x11/0x20
[  102.277358][  T949]  ? read_word_at_a_time+0x12/0x20
[  102.282518][  T949]  ? strscpy+0x9b/0x290
[  102.286724][  T949]  process_one_work+0x6e1/0xba0
[  102.291635][  T949]  worker_thread+0xa6a/0x13b0
[  102.296367][  T949]  ? _raw_spin_lock_irqsave+0xb0/0x110
[  102.301896][  T949]  kthread+0x346/0x3d0
[  102.306009][  T949]  ? worker_clr_flags+0x190/0x190
[  102.311096][  T949]  ? kthread_blkcg+0xd0/0xd0
[  102.315735][  T949]  ret_from_fork+0x1f/0x30
[  102.320190][  T949] Modules linked in:
[  102.349950][  T588] usb 3-1: USB disconnect, device number 6
[  102.356123][  T949] ---[ end trace 1f8d64cf878fd07a ]---
[  102.371687][  T949] RIP: 0010:ext4_writepages+0x2ddb/0x2e00
[  102.380929][  T280] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 78, changing to 10
[  102.392307][  T949] Code: 36 94 ff 84 db 75 31 e8 43 34 94 ff 49 bc 00 00 00 00 00 fc ff df 4c 8b 6c 24 30 48 8b 5c 24 38 e9 21 f8 ff ff e8 25 34 94 ff <0f> 0b e8 1e 34 94 ff e8 95 fe 30 ff eb 98 e8 12 34 94 ff e8 89 fe
[  102.412655][  T280] usb 1-1: New USB device found, idVendor=5543, idProduct=0781, bcdDevice= 0.00
[  102.422114][  T280] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  102.431715][  T949] RSP: 0018:ffffc90000de7180 EFLAGS: 00010293
[  102.439227][  T949] RAX: ffffffff81cf6c4b RBX: 0000008410000000 RCX: ffff888110a713c0
[  102.447820][  T949] RDX: 0000000000000000 RSI: 0000008000000000 RDI: 0000000000000000
[  102.456065][  T949] RBP: ffffc90000de74f0 R08: dffffc0000000000 R09: ffffed1027001242
[  102.464230][  T949] R10: ffffed1027001242 R11: 1ffff11027001241 R12: dffffc0000000000
[  102.472551][  T949] R13: ffff888116895000 R14: 0000008000000000 R15: ffff888138009208
[  102.481100][  T949] FS:  0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000
[  102.490206][  T949] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  102.497213][  T949] CR2: 000020000078b030 CR3: 000000010d07b000 CR4: 00000000003506a0
[  102.505789][  T949] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  102.505966][  T280] usb 1-1: config 0 descriptor??
[  102.514245][  T949] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  102.527468][  T949] Kernel panic - not syncing: Fatal exception
[  102.533781][  T949] Kernel Offset: disabled
[  102.538136][  T949] Rebooting in 86400 seconds..