last executing test programs:

8.272691445s ago: executing program 0 (id=9190):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10)
socket(0x1e, 0x4, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4016, &(0x7f0000000180)={[{@dioread_nolock}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@noauto_da_alloc}, {@lazytime}, {@grpjquota}, {@quota}]}, 0x1, 0x43c, &(0x7f0000000280)="$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")
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0)
pwrite64(r4, &(0x7f0000000000)='2', 0x1, 0x5fed0)
ioctl$EXT4_IOC_MOVE_EXT(r3, 0x40305829, &(0x7f0000000240)={0x17c04, 0xffffffffffffffff, 0x4ffa1, 0x100002001})

7.92713903s ago: executing program 0 (id=9192):
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x14}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000001500)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10, @void, @value}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x10)
r1 = socket$can_raw(0x1d, 0x3, 0x1)
r2 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'veth0\x00', <r3=>0x0})
sendmsg$can_raw(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x1d, r3}, 0x10, &(0x7f00000003c0)={0x0, 0x10}}, 0x0)

7.91302999s ago: executing program 0 (id=9193):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0)
fcntl$setlease(r1, 0x400, 0x300)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4006, &(0x7f0000000b80)={[{@jqfmt_vfsv0}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@grpjquota}, {@quota}]}, 0x1, 0x438, &(0x7f0000001040)="$eJzs28tvG0UYAPBv7SR9k1CVRx9AoCAiHkmTltIDFxBIHEBCgkM5hiStQt0GNUGiVQQBoXJElbgjjkj8BZzggoATEle4o0oVyqWFk9Hau4nt2G6SOnGofz9pk5ndcWY+7449s5MNoGcNpz+SiP0R8UdEDFaz9QWGq79uLy9O/bO8OJVEufz230ml3K3lxam8aP66fXmmL6LweRJHm9Q7f+XqhclSaeZylh9buPjB2PyVq8/PXpw8P3N+5tLEmTOnTo6/eHrihY7EmcZ168jHc8cOv/7u9Tenzl5/75fvkjz+hjg6ZLjdwafK5Q5X110HatJJXxcbwoYUq900+iv9fzCKsXryBuO1z7raOGBLlcvl8oOtDy+VgXtYEt1uAdAd+Rd9Ov/Nt20aeuwIN1+uToDSuG9nW/VIXxSyMv0N89tOGo6Is0v/fp1usTX3IQAA6vyQjn+eazb+K0TtfaH7sjWUoYi4PyIORsTpiDgUEQ9EVMo+FBEPb7D+xkWSteOfwo1NBbZO6fjvpWxtq378l4/+YqiY5Q5U4u9Pzs2WZk5k78lI9O9K8+Nt6vjx1d+/bHWsdvyXbmn9+Vgwa8eNvl31r5meXJi8m5hr3fw04khfs/iTlZWAJCIOR8SRTdYx+8y3x1odu3P8bXRgnan8TcTT1fO/FA3x55L265Nju6M0c2IsvyrW+vW3a2+1qv+u4u+A9PzvbXr9r8Q/lNSu185vvI5rf37Rck6z2et/IHmnbt9HkwsLl8cjBpI3qo2u3T/RUG5itXwa/8jxLP6B+v5/MFbfiaMRkV7Ej0TEoxHxWNb2xyPiiYg43ib+n1958v3Nxb+7zV/tjDT+6Q2d/9XEQDTuaZ4oXvjp+7pKh9Ybf2Tn/1QlNZLtWc/n33ratbmrGQAAAP5/ChGxP5LC6Eq6UBgdrf4P/6HYWyjNzS88e27uw0vT1WcEhqK/kN/pGqy5HzqeTevz/ERD/mR23/ir4p5KfnRqrjTd7eChx+1r0f9TfxW73Tpgy3leC3qX/g+9S/+H3qX/Q+9q0v/3dKMdwPZr9v3/SRfaAWy/hv5v2Q96iPk/9C79H3qX/g89aX5P3PkheQmJNYko7Ihm3IOJ2BHN6PYnEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQGf8FwAA///05OWN")
r3 = socket(0x10, 0x803, 0x0)
sendmsg$SMC_PNETID_GET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0)
getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
mount(&(0x7f0000000340)=@filename='./bus\x00', &(0x7f0000000780)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000003c0)='ntfs3\x00', 0x2230a1, &(0x7f0000000400)='\x00')
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r5, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="100000004400000008000000280000005fd1b19a", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
r8 = socket$nl_route(0x10, 0x3, 0x0)
syz_emit_ethernet(0x66, &(0x7f0000000100)={@multicast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4adf7", 0x30, 0x3a, 0x0, @empty, @mcast2, {[], @time_exceed={0x2, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "fd9063", 0x0, 0x0, 0x0, @loopback={0xff00000000000000}, @loopback={0x0, 0xffffac1414aa}}}}}}}}, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/18, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e0000001800028014000a"], 0x50}}, 0x0)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000001000000850000008600000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r9}, 0xc)
sendto$inet(r5, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10)
recvfrom(r5, &(0x7f0000000480)=""/110, 0xfffffe32, 0x734, 0x0, 0xfffffffffffffecb)
sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=@newlink={0x54, 0x10, 0x437, 0x1, 0x25dfdbff, {0x0, 0x0, 0x0, r4, 0x40c89}, [@IFLA_OPERSTATE={0x5, 0x10, 0x5}, @IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_DIR={0x5}, @IFLA_GRE_IKEY={0x8, 0x4, 0x3}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x80}]}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x44801}, 0x0)
openat(0xffffffffffffffff, &(0x7f0000000a40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x208000, 0x10)
munmap(&(0x7f0000002000/0x2000)=nil, 0x2000)
mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x20c081, 0x0)
r10 = socket$inet(0x2, 0x2, 0x0)
sendmmsg$inet(r10, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000004c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @empty, @loopback}}}], 0x20}}], 0x1, 0x4040880)
r11 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)
ioctl$EXT4_IOC_GET_ES_CACHE(r11, 0xc020662a, &(0x7f00000001c0)={0x10, 0xfffffffffffff03d, 0x1, 0x9})
bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r2, 0x0, 0x0}, 0x10)

7.649404354s ago: executing program 0 (id=9196):
mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x800000, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0x1, 0x1203, &(0x7f0000002480)="$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")
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x7, 0x10000, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0}, &(0x7f0000000080), &(0x7f0000000180)}, 0x20)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x4, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10)
r2 = getpid()
sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
r5 = inotify_init1(0x0)
inotify_add_watch(r5, &(0x7f00000000c0)='.\x00', 0x4000000e)
r6 = open(&(0x7f0000000040)='./file1\x00', 0x80242, 0x0)
write$FUSE_CREATE_OPEN(r6, &(0x7f0000000180)={0xa0, 0xfffffffffffffff5, 0x0, {{0x3, 0x1, 0x5, 0x6, 0x5, 0x1, {0x5, 0x180, 0xff, 0x1, 0x2, 0xd615, 0x5, 0x800001, 0xfffffffd, 0x8000, 0x0, 0xee00, 0x0, 0x3fa, 0x1}}, {0x0, 0x1f}}}, 0xa0)

6.628294139s ago: executing program 0 (id=9201):
bpf$MAP_CREATE(0x0, 0x0, 0x48)
syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x20c006, &(0x7f0000000300)={[{@i_version}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@nombcache}, {@jqfmt_vfsold}, {@noauto_da_alloc}], [{@smackfsroot={'smackfsroot', 0x3d, '\\}\']'}}]}, 0x0, 0x450, &(0x7f00000017c0)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000140)='.pending_reads\x00', 0x20642, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0100000004000000fd09"], 0x50)
ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f00000050c0)={0x0, 0x6})
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
ioctl$TCSETAF(r2, 0x5408, &(0x7f00000000c0)={0x80, 0x8000, 0x0, 0xb9ff, 0x15})
write$binfmt_aout(r2, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x3, 0x3})
r3 = syz_open_pts(r0, 0x480242)
r4 = dup3(r3, r2, 0x0)
ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000000)=0x17)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid()
sched_setaffinity(0x0, 0x4c, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
munlockall()
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRESDEC=r1, @ANYRES64=0x0], 0x0, 0x7fffffff, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r7}, 0x18)
r8 = socket$inet6(0xa, 0x80002, 0x0)
connect$inet6(r0, &(0x7f0000000400)={0xa, 0x4e27, 0xffffffff, @mcast2, 0x1}, 0x1c)
sendmmsg$inet6(r8, &(0x7f0000003cc0)=[{{0x0, 0xff97, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000580)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000000}}, {@noauto_da_alloc}, {@dioread_nolock}, {@test_dummy_encryption}, {@nobarrier}, {@nodelalloc}, {@minixdf}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x40}}]}, 0x3, 0xba6, &(0x7f0000000c00)="$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")
r9 = syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00')
read$FUSE(r9, &(0x7f0000002080)={0x2020}, 0x2020)

6.5718797s ago: executing program 1 (id=9203):
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x14}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001500)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10)
r2 = socket$can_raw(0x1d, 0x3, 0x1)
r3 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000700)={'veth0\x00', <r4=>0x0})
sendmsg$can_raw(r2, &(0x7f0000000400)={&(0x7f0000000300)={0x1d, r4}, 0x10, &(0x7f00000003c0)={0x0, 0x10}}, 0x0)

6.456145962s ago: executing program 1 (id=9205):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
socket$nl_xfrm(0x10, 0x3, 0x6)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r3 = socket$inet6(0xa, 0x80000, 0x7)
connect$inet6(r3, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, 0x0, 0x0)
sendmmsg(r3, 0x0, 0x0, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1bf8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000feffffff850000002d0000009500000000000000c9573d891c121f81548f5a03bf5d3919a3dacd2f7a297ad78e9dfc9c5d48b62648d6709898960329efdbb7140f4be3d619b27dcd193300f2540d4b2358c8f879dc85a733591e0054e398b8b8e97f74736a81a97aa912f66bd278a06cbe19c71dea666e048abb76abf7610a68c5f7fc0e97b1df8e5bf6a5406186edae6f085057da0737c40ac5d4cb8bd354415f1d5b358c900c07cfdaea50c1c83dc95cff681fc301a6b1fcf7be65d8558963ace2272eb9321be86d5edc089a7619a43237e44a38151782a2e2160b63aa15b80eda"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r6, 0x1, 0x0, 0xfffffffd, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0xa00, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x4)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}}, 0x0)
r7 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f00000000000000000a000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0)
sendmmsg(r7, &(0x7f0000000000), 0x4000000000001f2, 0x0)

5.319602169s ago: executing program 1 (id=9207):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181200", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000580), 0x20202)

5.25570566s ago: executing program 1 (id=9208):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0xc3200, 0x20, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0500000004000000080000000e00000000000000", @ANYRES32, @ANYBLOB="00000700000000c1cb089888a1d8d972603f2ee5871473193b62b64374f185ebbca419aa814fbe78a29c1ed709ee4ec99103fcf1c9623852c81cfed05897cb118cd887d0858541e12cae7aaca658168a16b8be365de421addd504f2a544bf1dbf3fd8401ae34d81d651386365d5483f6325ebf2c1ac2207274d193fdd57d0f10d42a8d77a337702fc93084b7ea4bf9ccb95fe4c84ab69b", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000006020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000ecff850000000400000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000ac0)=ANY=[@ANYRES32=r4, @ANYRES32=<r5=>r3, @ANYBLOB], 0x10)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
syz_mount_image$exfat(&(0x7f0000006c00), &(0x7f0000001b40)='./file1\x00', 0x208008de, &(0x7f0000000b40)=ANY=[], 0x80, 0x150a, &(0x7f0000002080)="$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")
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
open(&(0x7f0000000000)='./file0\x00', 0xae0f97c719246613, 0x1f8)
r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r8}, 0x10)
setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x41, &(0x7f0000000080)=0x196, 0x4)
bind$inet(r6, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r6, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
sendmmsg(r6, &(0x7f0000007fc0), 0x800001d, 0x0)
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x20, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r9}, 0x10)
r10 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
waitid(0x0, r10, 0x0, 0x4, 0x0)
syz_emit_ethernet(0x5e, &(0x7f0000000840)=ANY=[@ANYRESOCT=r5], 0x0)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106a05310300000000000109022400010000c60009040002010300010009210000000122f80409058103"], 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)

4.684736329s ago: executing program 3 (id=9210):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0)
fcntl$setlease(r1, 0x400, 0x300)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4006, &(0x7f0000000b80)={[{@jqfmt_vfsv0}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@grpjquota}, {@quota}]}, 0x1, 0x438, &(0x7f0000001040)="$eJzs28tvG0UYAPBv7SR9k1CVRx9AoCAiHkmTltIDFxBIHEBCgkM5hiStQt0GNUGiVQQBoXJElbgjjkj8BZzggoATEle4o0oVyqWFk9Hau4nt2G6SOnGofz9pk5ndcWY+7449s5MNoGcNpz+SiP0R8UdEDFaz9QWGq79uLy9O/bO8OJVEufz230ml3K3lxam8aP66fXmmL6LweRJHm9Q7f+XqhclSaeZylh9buPjB2PyVq8/PXpw8P3N+5tLEmTOnTo6/eHrihY7EmcZ168jHc8cOv/7u9Tenzl5/75fvkjz+hjg6ZLjdwafK5Q5X110HatJJXxcbwoYUq900+iv9fzCKsXryBuO1z7raOGBLlcvl8oOtDy+VgXtYEt1uAdAd+Rd9Ov/Nt20aeuwIN1+uToDSuG9nW/VIXxSyMv0N89tOGo6Is0v/fp1usTX3IQAA6vyQjn+eazb+K0TtfaH7sjWUoYi4PyIORsTpiDgUEQ9EVMo+FBEPb7D+xkWSteOfwo1NBbZO6fjvpWxtq378l4/+YqiY5Q5U4u9Pzs2WZk5k78lI9O9K8+Nt6vjx1d+/bHWsdvyXbmn9+Vgwa8eNvl31r5meXJi8m5hr3fw04khfs/iTlZWAJCIOR8SRTdYx+8y3x1odu3P8bXRgnan8TcTT1fO/FA3x55L265Nju6M0c2IsvyrW+vW3a2+1qv+u4u+A9PzvbXr9r8Q/lNSu185vvI5rf37Rck6z2et/IHmnbt9HkwsLl8cjBpI3qo2u3T/RUG5itXwa/8jxLP6B+v5/MFbfiaMRkV7Ej0TEoxHxWNb2xyPiiYg43ib+n1958v3Nxb+7zV/tjDT+6Q2d/9XEQDTuaZ4oXvjp+7pKh9Ybf2Tn/1QlNZLtWc/n33ratbmrGQAAAP5/ChGxP5LC6Eq6UBgdrf4P/6HYWyjNzS88e27uw0vT1WcEhqK/kN/pGqy5HzqeTevz/ERD/mR23/ir4p5KfnRqrjTd7eChx+1r0f9TfxW73Tpgy3leC3qX/g+9S/+H3qX/Q+9q0v/3dKMdwPZr9v3/SRfaAWy/hv5v2Q96iPk/9C79H3qX/g89aX5P3PkheQmJNYko7Ihm3IOJ2BHN6PYnEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQGf8FwAA///05OWN")
r3 = socket(0x10, 0x803, 0x0)
sendmsg$SMC_PNETID_GET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0)
getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14)
mount(&(0x7f0000000340)=@filename='./bus\x00', 0x0, &(0x7f00000003c0)='ntfs3\x00', 0x2230a1, &(0x7f0000000400)='\x00')
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r5, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="100000004400000008000000280000005fd1b19a", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
r8 = socket$nl_route(0x10, 0x3, 0x0)
syz_emit_ethernet(0x66, &(0x7f0000000100)={@multicast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4adf7", 0x30, 0x3a, 0x0, @empty, @mcast2, {[], @time_exceed={0x2, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "fd9063", 0x0, 0x0, 0x0, @loopback={0xff00000000000000}, @loopback={0x0, 0xffffac1414aa}}}}}}}}, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/18, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e0000001800028014000a"], 0x50}}, 0x0)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000001000000850000008600000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r9}, 0xc)
sendto$inet(r5, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10)
recvfrom(r5, &(0x7f0000000480)=""/110, 0xfffffe32, 0x734, 0x0, 0xfffffffffffffecb)
sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=@newlink={0x54, 0x10, 0x437, 0x1, 0x25dfdbff, {0x0, 0x0, 0x0, r4, 0x40c89}, [@IFLA_OPERSTATE={0x5, 0x10, 0x5}, @IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_DIR={0x5}, @IFLA_GRE_IKEY={0x8, 0x4, 0x3}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x80}]}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x44801}, 0x0)
openat(0xffffffffffffffff, &(0x7f0000000a40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x208000, 0x10)
munmap(&(0x7f0000002000/0x2000)=nil, 0x2000)
mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x20c081, 0x0)
r10 = socket$inet(0x2, 0x2, 0x0)
sendmmsg$inet(r10, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000004c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @empty, @loopback}}}], 0x20}}], 0x1, 0x4040880)
r11 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)
ioctl$EXT4_IOC_GET_ES_CACHE(r11, 0xc020662a, &(0x7f00000001c0)={0x10, 0xfffffffffffff03d, 0x1, 0x9})
bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r2, 0x0, 0x0}, 0x10)

4.250369175s ago: executing program 3 (id=9213):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
socket$nl_xfrm(0x10, 0x3, 0x6)
openat$sndtimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x38bd84)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
bind$netlink(0xffffffffffffffff, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc)
r3 = socket$inet6(0xa, 0x3, 0x7)
connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0xfffffffe, @local, 0x1}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x1e}, @in=@rand_addr=0x64010101, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20, 0x6c}, {0x0, 0x0, 0xfffffffffffffffe, 0xa0, 0x0, 0x4, 0x4, 0x2}, {}, 0x0, 0x6e6bb9, 0x1}, {{@in=@local, 0xfffffffc, 0x32}, 0x0, @in=@empty, 0x0, 0x0, 0x2, 0x7, 0x200, 0x0, 0x10}}, 0xe8)
sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0x0)
pipe2$watch_queue(0x0, 0x80)
sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, 0x0, 0x4008004)
r4 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
ftruncate(r4, 0x1f)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r5 = syz_open_procfs(0x0, 0x0)
fchdir(r5)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
getpid()

4.180997046s ago: executing program 4 (id=9214):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0xffffffffffffffff, 0x87, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r4}, 0x10)
syz_open_procfs$namespace(0x0, 0xfffffffffffffffe)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f0000001c40)=[{{&(0x7f0000000580)=@phonet, 0x80, &(0x7f0000001b40)=[{&(0x7f0000000780)=""/26, 0x1a}, {&(0x7f00000007c0)=""/240, 0xf0}, {&(0x7f0000000b00)=""/4096, 0x1000}, {&(0x7f00000008c0)=""/36, 0x24}, {&(0x7f0000000900)=""/38, 0x26}, {&(0x7f0000000940)=""/54, 0x36}, {&(0x7f0000000980)=""/78, 0x4e}, {&(0x7f0000000a00)=""/29, 0x1d}, {&(0x7f0000001b00)=""/9, 0x9}], 0x9, &(0x7f0000001c00)=""/13, 0xd}, 0x8}], 0x1, 0x2, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="00000000ff08000000d16a9690ffff00000000636084828616b76b"], 0x48)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r1}, 0x8)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000000040000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r6}, 0x10)
ioctl$KDFONTOP_SET_DEF(0xffffffffffffffff, 0x4b72, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
rt_sigprocmask(0x2, &(0x7f0000000a80), &(0x7f0000000ac0), 0x8)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000001d00)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRESDEC=r3, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10)
memfd_create(&(0x7f0000000000)='prodM\xb0\xea\a\x06\xbe\xaen/\xce4\xb7\xc1\xef\xba!\x9d\rSt\xa24\t\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1dz\xd05\xe2e,\xb1\x84\xea\x91^%A\xe5\x9e\x13TdT\xc6^p\xb0#R\x04\x06\xae\xebA;Y\xeb\x8f\xec\xb4\xf9\x17\xb7\x04\xc2\xc0\xc6\xb4\v\xff\xfc\x88\x90\xabC\x02\x00\xf04\x03\x88\xae9\'>R^P{Vr!\xe2W\xc72\xea\xb7Wp\xc36\x96\xffZ\\A@\x00\x00\x00\xc9\xf3Y\xb8\x89#\xa1\xb1)Dk\xeb\xa1\t\x00{u[\xbd\x9d\xf4\xbf\\\xce\x02P\xf2MY\x05^\xffj\x9c\x14\xb7\xb6v\x1d*1>\x00 \x00\x00\x00\x00\x14C?]\x8c\xb4Y\xcf\x80\x85\xd6\x036\xc8~\xa8\f\x00\x00\xb5M\x9a\x9dc\xaaAU\xec\xe06\xed\xe4\xfb\xdf\a\xd0lg\x13\xf9\x8b:s>\xd7s\xef\xb3\x9f#\x15)\xf9\xe10\xc7\xb262<k\xa8\x88\x01\x00fhD\xe7\xb6\x17\x80\x95\xa8\x1e\t\xb01KB\xcb\x00\x1e\x7fE\x7f\x02\x00\x00\x00y<nGR\x94\x99\xb8\x89\x9b\x8f\xd5\xe6\x02\xb5C\xad\"u\xf4>\x00\x00\x00\x00\x00\x00\x00\x00Nz\x0eu\x8f\x01\x00\x00\x00\x00\x00\x00\xdd\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc3\xa7/\x0f\x9b`\xa5\x98\x81a\xeev\x00\x00\x00\x00\a\x10\x00m2\xf2\xd8,\x17\xf8\x8e\xae\xc8\xad\xed<\"\x8e\n\x9d\xb13\x8d\xef\x96\xd2I\"8=tg\xdfU\xd0q\x95/f\xec\xdc\xa3\xe1[\xc0\xaa\xefz\xc9\xf4[\x00\x00\x00Q\xff}5\x94\x88\xa1\xdc\xa1g\xe0q\xc5:\xe4\xdf\x80\xb3,\xb9\xb2\xdc\x81\x9f6\x0f\x84WY\xbfSY`\xb8\a\x19\xb1\x058\xa4\xc3\xbb\xf8aB:\x84\x02?\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf3o-GU\xb0\x00F\xb3o(aI[\xd6\x9fG\xaeI\x83\x93\x8cC\xc0#\xe0q\xd0Ex|\xdb\xa8\x16\xfe>:\t0\xfd\x8a\xc7\x84\xb5\xc7M-0A\xf0\x94\xf3\xcc\x8d\xbb3\\\"\x882\xb3\xa84\xac\x00\xdd}Ft\xc6\xcc\f}1X#\xe4\xe1\x94i\xce\xa1\xff\x95\x80\xb4T\x9c\x01\xf3\x1cLB\x94m(m\f\xbc\xebY\xa0\xf7\xf0\x9d\x10\xbd\x86\x1by\xe6\xdf\xc0\xc5\xb9\xb9\xbf\xdf~9\nC\xe9\xc5\x0e\xda\x9c(\x9b\"\xc7\x97\xfc\b\xd9\xc2T\xa7*}]\xc8\xb3 .\x9b\x89\x0f\xf8$\xdd>lU\x13EG\xbb1] \xda\x19\xc5\x9b\x15\x95\xc4\xfcw\xbb\x92\x91\xc4\xa6\x907XK\xfc\x17]\xfa\xff\'\xef\x92\x1c\xb8\x1fK\xb2o \xd1\xbd\xb2\x11+\xa3R\xefQ\xc2\xbdW\x05\xec\xb3=@\x03\xc6^\xa2\x15%\xb0\'D#\xb6Q\x8f\x82?S>\x0fP\x9cE\x92{d\xe6\x9cj1\x87\xb3\x01\xde\xe8\x89\xc4s\xb7\x14~}\xaa\x8c\xc3\x95BAE\xf2.\x8f#;a\x94\"\xd1U\xff\xe8v\xd3\x84d\xf4\x134\xa6XI\xe5h\xaa\x15\x9a\xf7Z\xe3%\x88p\x90\xbb\x9dt\xa3\xe1\r\x8d\x94\"\x19\x8b\x17)\xea\xd5\x17\xeb\xe4\x1b\x0fBZ1\xbe\xee\xfa\x1c\xf9\xa6\x11\x94\x06\\P:\xaf\xcex\xc2\x82\x9a\x16\xfc\xa1\xf9q\x12\xe3\x1a\xdc\xb7\x12\xbba\b\xbb\xed\xb2\xd1W\xe2\x8b\x8d8}\x10W\xbd\xa60A\xc3\x03\xfa\x890\x86#\bQ\xcb)\x00]\x9e\x14\xd2\xea\x82\xa8\xb7ZG\x15r\xf1\t\x00\x00\x00 \xc1\xaf\x19?\x00\\\x91\x13\x1b8\xe1\xc3\xa4\v\x94\xbfJ\xb5\xde\x95\x82\x00]B|\xe2[%\xe3\xf0\x04\xba\xed\xdb\xf5\x7f\x9d\xfe>\xf6m$M&\x7fq]\xe4\xf6\x82\xc3\x00\xb1zg}\x99E\xa4\x19\xe9\x1a4a\xd75D-k\x84\xa6\x12+\xebk\xa1\xfek\x89\xef\x18\xc1)6\xa65\xe2D\xbe\xe1\xdfq\xdd68\xf37g\xab9m\xe7\xddO\v?\xe0\xbe}\xa9U\xc7{\xd3\x16W\xbb\xe5\xd2\x93\xfe\xa4\x9d\r$\xe91c8`\x86\xbc)\xe29\xc3}\xb9P\xd5F\xc6\x12\x8c_x\xa8\xfa\xb5K\x03\x85\x93k\xe1\x8e\x1f)\".\xcc\'\v\xa6\x1bj\\\n\xe98yA\xd8T\x85\x80A\xcbo\x99\x99\xeb)r\x1a\xce\x18(\x185LL\xbcOeO\'\xe2\x86&\xe4\xe2\xe7~\x92\xa2\xb2\x1b\xc3\x00\x85\xce\xad7\x87\xa0\xfcc\xf5\xf8\xaf\v,q\xd4\x18\xbdM\x1a\xde\xba*L\x05m6\xecH\xd0T\xb8m\xdb\b\xa6\x02\xfb\x13\xac\x91\x8a\x8d\x94\x93\x8d=\xb1\x84\x9c\x9b\xe5\xc7\xa6\xc9Q\xc1eUc\xcc\x180^\x00\x00\x00\x00\x00\x00\x00\x00\xe7]6+\\\x00\x00\x00\x00?#C.\x1dj\xd9\xc3\xdd&\x80g:N\xec\x06[\x8f\x92\xe2\xb01\xb0\xef\x10,\xde\xf3\x86D\x8b\xf7\xf1>AH\xef\\\xf9\x8b\a\xe0\xb2\xcb\xf0\x97\b\r\xd5`\xb9\xd6\xa4\x1e\xbe\x12-}\xc5\x84\xde@\x18\x87\f\x01O\xedS\x8f\x9en,\xbce\xb2\xe4\x82v\x1c\xed\x84-s\xab\x06b\x9c\xba\xec\xa5\xc9A\x84\xd0\xe0 S\xc8\xa2\xaf\x85\v\xad\xa5\x88\xcf\xb6}`\x14\'\xea\xbfN\xac)\xa1\xe8\xb2\x9f\x112TJ\x16\x8c9\xe9\xf5\x18\x15Dd\x8a%>\x91\x93\x88\xe9\x18\x82]\x9e&\xfa\xaa\xfa8Z2\x00'/1301, 0x3)
syz_emit_ethernet(0x83, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030086dd601b8b97004d88c19edace00000000000000002100000002ff02000000000000000000000000000104004e2000"], 0x0)

3.446255207s ago: executing program 2 (id=9218):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181200", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000580), 0x20202)

3.416966808s ago: executing program 4 (id=9219):
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10)
r3 = dup(r1)
write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r3}})

3.410822458s ago: executing program 2 (id=9220):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c0000000000008001"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38)
syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1810714, &(0x7f00000003c0)={[{@test_dummy_encryption}, {@nobh}, {@minixdf}, {@jqfmt_vfsv1}, {@prjquota}, {@dioread_nolock}, {@barrier_val={'barrier', 0x3d, 0xb}}, {@errors_remount}, {@auto_da_alloc}, {@test_dummy_encryption}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0xff, 0x475, &(0x7f0000000780)="$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")
r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x0)
r2 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
pread64(r2, 0x0, 0x0, 0x101)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
mmap(&(0x7f0000a9f000/0x4000)=nil, 0x4000, 0x4, 0x40010, r1, 0xf8102000)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000016000000b70300000000"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f0000000680)=@v1={0x0, @adiantum, 0x8, @desc1})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000740)='scsi_dispatch_cmd_start\x00', r6}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='scsi_dispatch_cmd_start\x00'}, 0x10)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15)

3.397236488s ago: executing program 4 (id=9221):
prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r4 = syz_open_procfs(0x0, 0x0)
read$FUSE(r4, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r3}, 0x10)
pipe(0x0)
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x1400c, &(0x7f0000000440)={[{@test_dummy_encryption}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x81}}, {@mb_optimize_scan}, {@inlinecrypt}, {@nobh}]}, 0x3, 0x460, &(0x7f00000008c0)="$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") (fail_nth: 1)
setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', 0x0, &(0x7f0000002b40)={{}, {}, [], {}, [], {}, {0x20, 0x6}}, 0x24, 0x0)
io_submit(0x0, 0x0, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r4)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, &(0x7f0000000140))
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
unshare(0x42000000)

2.358649924s ago: executing program 3 (id=9222):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x1a, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000"], &(0x7f0000000340)='syzkaller\x00', 0x1, 0xc5, &(0x7f0000000180)=""/197, 0x0, 0x0, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2620, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) (async)
stat(&(0x7f0000000bc0)='./file0\x00', &(0x7f0000000c00)) (async)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0)
flock(r1, 0x5)
r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0)
flock(r2, 0x1) (async)
flock(r2, 0x2) (async)
dup3(r2, r1, 0x0) (async)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000001200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) (async)
r4 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) (async)
r5 = fsmount(r4, 0x0, 0x0)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000200)={r3, r5, 0x1, 0x0, @void}, 0x10) (async)
r6 = socket$inet(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r6, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) (async)
setsockopt$inet_opts(r6, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) (async)
setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000040)='batadv_slave_0\x00', 0x10) (async)
connect$inet(r6, &(0x7f0000000080)={0x2, 0x0, @broadcast}, 0x10)
setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, 0x0, 0x0)
setsockopt$inet_opts(r6, 0x0, 0x4, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000000140), 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001b00)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

2.291279815s ago: executing program 3 (id=9223):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x8, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000059c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'bridge0\x00'})
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000300)='./file1\x00', 0x1000010, &(0x7f0000000680), 0x1, 0x277, &(0x7f00000006c0)="$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")
socket(0x10, 0x4, 0x434)
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/fib_trie\x00')
read$FUSE(r5, &(0x7f0000006180)={0x2020}, 0x2020)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000000b40)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000940)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000000)=""/43, 0x2b}, {&(0x7f0000000400)=""/8, 0x8}, {&(0x7f0000000480)=""/21, 0x15}], 0x3}, 0x7fffffff}, {{&(0x7f00000009c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f0000000a40), 0x0, &(0x7f0000000a80)=""/157, 0x9d}, 0x8}], 0x3, 0x0, &(0x7f0000003700))

1.775408073s ago: executing program 4 (id=9224):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0)
fcntl$setlease(r1, 0x400, 0x300)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4006, &(0x7f0000000b80)={[{@jqfmt_vfsv0}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@grpjquota}, {@quota}]}, 0x1, 0x438, &(0x7f0000001040)="$eJzs28tvG0UYAPBv7SR9k1CVRx9AoCAiHkmTltIDFxBIHEBCgkM5hiStQt0GNUGiVQQBoXJElbgjjkj8BZzggoATEle4o0oVyqWFk9Hau4nt2G6SOnGofz9pk5ndcWY+7449s5MNoGcNpz+SiP0R8UdEDFaz9QWGq79uLy9O/bO8OJVEufz230ml3K3lxam8aP66fXmmL6LweRJHm9Q7f+XqhclSaeZylh9buPjB2PyVq8/PXpw8P3N+5tLEmTOnTo6/eHrihY7EmcZ168jHc8cOv/7u9Tenzl5/75fvkjz+hjg6ZLjdwafK5Q5X110HatJJXxcbwoYUq900+iv9fzCKsXryBuO1z7raOGBLlcvl8oOtDy+VgXtYEt1uAdAd+Rd9Ov/Nt20aeuwIN1+uToDSuG9nW/VIXxSyMv0N89tOGo6Is0v/fp1usTX3IQAA6vyQjn+eazb+K0TtfaH7sjWUoYi4PyIORsTpiDgUEQ9EVMo+FBEPb7D+xkWSteOfwo1NBbZO6fjvpWxtq378l4/+YqiY5Q5U4u9Pzs2WZk5k78lI9O9K8+Nt6vjx1d+/bHWsdvyXbmn9+Vgwa8eNvl31r5meXJi8m5hr3fw04khfs/iTlZWAJCIOR8SRTdYx+8y3x1odu3P8bXRgnan8TcTT1fO/FA3x55L265Nju6M0c2IsvyrW+vW3a2+1qv+u4u+A9PzvbXr9r8Q/lNSu185vvI5rf37Rck6z2et/IHmnbt9HkwsLl8cjBpI3qo2u3T/RUG5itXwa/8jxLP6B+v5/MFbfiaMRkV7Ej0TEoxHxWNb2xyPiiYg43ib+n1958v3Nxb+7zV/tjDT+6Q2d/9XEQDTuaZ4oXvjp+7pKh9Ybf2Tn/1QlNZLtWc/n33ratbmrGQAAAP5/ChGxP5LC6Eq6UBgdrf4P/6HYWyjNzS88e27uw0vT1WcEhqK/kN/pGqy5HzqeTevz/ERD/mR23/ir4p5KfnRqrjTd7eChx+1r0f9TfxW73Tpgy3leC3qX/g+9S/+H3qX/Q+9q0v/3dKMdwPZr9v3/SRfaAWy/hv5v2Q96iPk/9C79H3qX/g89aX5P3PkheQmJNYko7Ihm3IOJ2BHN6PYnEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQGf8FwAA///05OWN")
r3 = socket(0x10, 0x803, 0x0)
sendmsg$SMC_PNETID_GET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0)
getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14)
mount(&(0x7f0000000340)=@filename='./bus\x00', 0x0, &(0x7f00000003c0)='ntfs3\x00', 0x2230a1, &(0x7f0000000400)='\x00')
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r5, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="100000004400000008000000280000005fd1b19a", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
r8 = socket$nl_route(0x10, 0x3, 0x0)
syz_emit_ethernet(0x66, &(0x7f0000000100)={@multicast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4adf7", 0x30, 0x3a, 0x0, @empty, @mcast2, {[], @time_exceed={0x2, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "fd9063", 0x0, 0x0, 0x0, @loopback={0xff00000000000000}, @loopback={0x0, 0xffffac1414aa}}}}}}}}, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/18, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e0000001800028014000a"], 0x50}}, 0x0)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000001000000850000008600000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r9}, 0xc)
sendto$inet(r5, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10)
recvfrom(r5, &(0x7f0000000480)=""/110, 0xfffffe32, 0x734, 0x0, 0xfffffffffffffecb)
sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=@newlink={0x54, 0x10, 0x437, 0x1, 0x25dfdbff, {0x0, 0x0, 0x0, r4, 0x40c89}, [@IFLA_OPERSTATE={0x5, 0x10, 0x5}, @IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_DIR={0x5}, @IFLA_GRE_IKEY={0x8, 0x4, 0x3}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x80}]}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x44801}, 0x0)
openat(0xffffffffffffffff, &(0x7f0000000a40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x208000, 0x10)
munmap(&(0x7f0000002000/0x2000)=nil, 0x2000)
mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x20c081, 0x0)
r10 = socket$inet(0x2, 0x2, 0x0)
sendmmsg$inet(r10, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000004c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @empty, @loopback}}}], 0x20}}], 0x1, 0x4040880)
r11 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)
ioctl$EXT4_IOC_GET_ES_CACHE(r11, 0xc020662a, &(0x7f00000001c0)={0x10, 0xfffffffffffff03d, 0x1, 0x9})
bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r2, 0x0, 0x0}, 0x10)

1.639768315s ago: executing program 1 (id=9225):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00'})
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000340)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10)
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x280008a, &(0x7f00000007c0)=ANY=[@ANYBLOB="6e6f6e756d7461696c3d302c73686f72746e616d653d77696e39352c73686f72746e616d653d6c6f7765722c696f636861727365743d64656661756c742c756e695f786c6174653d302c6e6f6e756d7461696c3d302c757466383d302c616c6c6f775f7574696d653d30303030303030303030303030303030303030303030322c726f6469722c73686f72866e616d653d6d697865642c73686f72746e616d653d6d697865642c73686f72746e616d653d77696e39352c7569643d", @ANYRESHEX=0x0, @ANYBLOB=',uni_xlate=0,utf8=0,shortname=mixed,uni_xlate=0,shortname=winnt,\x00'], 0x96, 0x2a9, &(0x7f0000000500)="$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")
socket(0x10, 0x3, 0x4)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r6 = syz_open_dev$vcsa(0x0, 0x1, 0x102)
write$P9_RREMOVE(r6, 0x0, 0x2)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18)
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@ipv4_newrule={0x28, 0x20, 0x301, 0x70bd29, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a}, [@FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x800}]}, 0x28}}, 0x0)

951.681276ms ago: executing program 3 (id=9226):
write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065"], 0x15)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x14}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001500)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x50)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10)
r2 = socket$can_raw(0x1d, 0x3, 0x1)
r3 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000700)={'veth0\x00', <r4=>0x0})
sendmsg$can_raw(r2, &(0x7f0000000400)={&(0x7f0000000300)={0x1d, r4}, 0x10, &(0x7f00000003c0)={0x0, 0x10}}, 0x0)

937.539636ms ago: executing program 2 (id=9227):
r0 = socket$inet6_icmp(0xa, 0x2, 0x3a)
ioctl$BTRFS_IOC_FS_INFO(r0, 0x8400941f, &(0x7f0000000380))
r1 = socket(0x2, 0x2, 0x0)
setsockopt$inet_int(r1, 0x0, 0xb, &(0x7f00000000c0)=0x7, 0x4)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000b00000001"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000008000002521ea07a200000000000000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000100)='io_uring_register\x00', r3}, 0x10)
r4 = syz_io_uring_setup(0x3fed, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x8000000}, &(0x7f0000000080), &(0x7f00000000c0))
timer_create(0xfffffffc, 0x0, &(0x7f0000000040))
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff6e, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r5}, 0x10)
tee(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffc01, 0x0)
timer_delete(0x0)
io_uring_register$IORING_UNREGISTER_FILES(r4, 0x3, 0x700, 0x0)
r6 = gettid()
capget(&(0x7f0000000040)={0x20071026, r6}, &(0x7f0000000300)={0x9, 0x0, 0x6, 0x4, 0x1})
sendto$inet(r1, 0x0, 0x0, 0x800, &(0x7f0000000340)={0x2, 0x4e23, @private=0xa010100}, 0x10)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x80801c, &(0x7f0000000580), 0x1, 0x503, &(0x7f0000000880)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008001500b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='scsi_dispatch_cmd_start\x00', r9}, 0x10)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15)

907.509456ms ago: executing program 2 (id=9228):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x8, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000059c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'bridge0\x00'})
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000300)='./file1\x00', 0x1000010, &(0x7f0000000680), 0x1, 0x277, &(0x7f00000006c0)="$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")
socket(0x10, 0x4, 0x434)
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/fib_trie\x00')
read$FUSE(r5, &(0x7f0000006180)={0x2020}, 0x2020)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000000b40)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000940)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000000)=""/43, 0x2b}, {&(0x7f0000000400)=""/8, 0x8}, {&(0x7f0000000480)=""/21, 0x15}], 0x3}, 0x7fffffff}, {{&(0x7f00000009c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f0000000a40), 0x0, &(0x7f0000000a80)=""/157, 0x9d}, 0x8}], 0x3, 0x0, &(0x7f0000003700))

836.682097ms ago: executing program 4 (id=9229):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0xffffffffffffffff, 0x87, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r4}, 0x10)
syz_open_procfs$namespace(0x0, 0xfffffffffffffffe)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f0000001c40)=[{{&(0x7f0000000580)=@phonet, 0x80, &(0x7f0000001b40)=[{&(0x7f0000000780)=""/26, 0x1a}, {&(0x7f00000007c0)=""/240, 0xf0}, {&(0x7f0000000b00)=""/4096, 0x1000}, {&(0x7f00000008c0)=""/36, 0x24}, {&(0x7f0000000900)=""/38, 0x26}, {&(0x7f0000000940)=""/54, 0x36}, {&(0x7f0000000980)=""/78, 0x4e}, {&(0x7f0000000a00)=""/29, 0x1d}, {&(0x7f0000001b00)=""/9, 0x9}], 0x9, &(0x7f0000001c00)=""/13, 0xd}, 0x8}], 0x1, 0x2, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="00000000ff08000000d16a9690ffff00000000636084828616b76b"], 0x48)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r1}, 0x8)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000000040000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r6}, 0x10)
ioctl$KDFONTOP_SET_DEF(0xffffffffffffffff, 0x4b72, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
rt_sigprocmask(0x2, &(0x7f0000000a80), &(0x7f0000000ac0), 0x8)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000001d00)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRESDEC=r3, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10)
memfd_create(&(0x7f0000000000)='prodM\xb0\xea\a\x06\xbe\xaen/\xce4\xb7\xc1\xef\xba!\x9d\rSt\xa24\t\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1dz\xd05\xe2e,\xb1\x84\xea\x91^%A\xe5\x9e\x13TdT\xc6^p\xb0#R\x04\x06\xae\xebA;Y\xeb\x8f\xec\xb4\xf9\x17\xb7\x04\xc2\xc0\xc6\xb4\v\xff\xfc\x88\x90\xabC\x02\x00\xf04\x03\x88\xae9\'>R^P{Vr!\xe2W\xc72\xea\xb7Wp\xc36\x96\xffZ\\A@\x00\x00\x00\xc9\xf3Y\xb8\x89#\xa1\xb1)Dk\xeb\xa1\t\x00{u[\xbd\x9d\xf4\xbf\\\xce\x02P\xf2MY\x05^\xffj\x9c\x14\xb7\xb6v\x1d*1>\x00 \x00\x00\x00\x00\x14C?]\x8c\xb4Y\xcf\x80\x85\xd6\x036\xc8~\xa8\f\x00\x00\xb5M\x9a\x9dc\xaaAU\xec\xe06\xed\xe4\xfb\xdf\a\xd0lg\x13\xf9\x8b:s>\xd7s\xef\xb3\x9f#\x15)\xf9\xe10\xc7\xb262<k\xa8\x88\x01\x00fhD\xe7\xb6\x17\x80\x95\xa8\x1e\t\xb01KB\xcb\x00\x1e\x7fE\x7f\x02\x00\x00\x00y<nGR\x94\x99\xb8\x89\x9b\x8f\xd5\xe6\x02\xb5C\xad\"u\xf4>\x00\x00\x00\x00\x00\x00\x00\x00Nz\x0eu\x8f\x01\x00\x00\x00\x00\x00\x00\xdd\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc3\xa7/\x0f\x9b`\xa5\x98\x81a\xeev\x00\x00\x00\x00\a\x10\x00m2\xf2\xd8,\x17\xf8\x8e\xae\xc8\xad\xed<\"\x8e\n\x9d\xb13\x8d\xef\x96\xd2I\"8=tg\xdfU\xd0q\x95/f\xec\xdc\xa3\xe1[\xc0\xaa\xefz\xc9\xf4[\x00\x00\x00Q\xff}5\x94\x88\xa1\xdc\xa1g\xe0q\xc5:\xe4\xdf\x80\xb3,\xb9\xb2\xdc\x81\x9f6\x0f\x84WY\xbfSY`\xb8\a\x19\xb1\x058\xa4\xc3\xbb\xf8aB:\x84\x02?\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf3o-GU\xb0\x00F\xb3o(aI[\xd6\x9fG\xaeI\x83\x93\x8cC\xc0#\xe0q\xd0Ex|\xdb\xa8\x16\xfe>:\t0\xfd\x8a\xc7\x84\xb5\xc7M-0A\xf0\x94\xf3\xcc\x8d\xbb3\\\"\x882\xb3\xa84\xac\x00\xdd}Ft\xc6\xcc\f}1X#\xe4\xe1\x94i\xce\xa1\xff\x95\x80\xb4T\x9c\x01\xf3\x1cLB\x94m(m\f\xbc\xebY\xa0\xf7\xf0\x9d\x10\xbd\x86\x1by\xe6\xdf\xc0\xc5\xb9\xb9\xbf\xdf~9\nC\xe9\xc5\x0e\xda\x9c(\x9b\"\xc7\x97\xfc\b\xd9\xc2T\xa7*}]\xc8\xb3 .\x9b\x89\x0f\xf8$\xdd>lU\x13EG\xbb1] \xda\x19\xc5\x9b\x15\x95\xc4\xfcw\xbb\x92\x91\xc4\xa6\x907XK\xfc\x17]\xfa\xff\'\xef\x92\x1c\xb8\x1fK\xb2o \xd1\xbd\xb2\x11+\xa3R\xefQ\xc2\xbdW\x05\xec\xb3=@\x03\xc6^\xa2\x15%\xb0\'D#\xb6Q\x8f\x82?S>\x0fP\x9cE\x92{d\xe6\x9cj1\x87\xb3\x01\xde\xe8\x89\xc4s\xb7\x14~}\xaa\x8c\xc3\x95BAE\xf2.\x8f#;a\x94\"\xd1U\xff\xe8v\xd3\x84d\xf4\x134\xa6XI\xe5h\xaa\x15\x9a\xf7Z\xe3%\x88p\x90\xbb\x9dt\xa3\xe1\r\x8d\x94\"\x19\x8b\x17)\xea\xd5\x17\xeb\xe4\x1b\x0fBZ1\xbe\xee\xfa\x1c\xf9\xa6\x11\x94\x06\\P:\xaf\xcex\xc2\x82\x9a\x16\xfc\xa1\xf9q\x12\xe3\x1a\xdc\xb7\x12\xbba\b\xbb\xed\xb2\xd1W\xe2\x8b\x8d8}\x10W\xbd\xa60A\xc3\x03\xfa\x890\x86#\bQ\xcb)\x00]\x9e\x14\xd2\xea\x82\xa8\xb7ZG\x15r\xf1\t\x00\x00\x00 \xc1\xaf\x19?\x00\\\x91\x13\x1b8\xe1\xc3\xa4\v\x94\xbfJ\xb5\xde\x95\x82\x00]B|\xe2[%\xe3\xf0\x04\xba\xed\xdb\xf5\x7f\x9d\xfe>\xf6m$M&\x7fq]\xe4\xf6\x82\xc3\x00\xb1zg}\x99E\xa4\x19\xe9\x1a4a\xd75D-k\x84\xa6\x12+\xebk\xa1\xfek\x89\xef\x18\xc1)6\xa65\xe2D\xbe\xe1\xdfq\xdd68\xf37g\xab9m\xe7\xddO\v?\xe0\xbe}\xa9U\xc7{\xd3\x16W\xbb\xe5\xd2\x93\xfe\xa4\x9d\r$\xe91c8`\x86\xbc)\xe29\xc3}\xb9P\xd5F\xc6\x12\x8c_x\xa8\xfa\xb5K\x03\x85\x93k\xe1\x8e\x1f)\".\xcc\'\v\xa6\x1bj\\\n\xe98yA\xd8T\x85\x80A\xcbo\x99\x99\xeb)r\x1a\xce\x18(\x185LL\xbcOeO\'\xe2\x86&\xe4\xe2\xe7~\x92\xa2\xb2\x1b\xc3\x00\x85\xce\xad7\x87\xa0\xfcc\xf5\xf8\xaf\v,q\xd4\x18\xbdM\x1a\xde\xba*L\x05m6\xecH\xd0T\xb8m\xdb\b\xa6\x02\xfb\x13\xac\x91\x8a\x8d\x94\x93\x8d=\xb1\x84\x9c\x9b\xe5\xc7\xa6\xc9Q\xc1eUc\xcc\x180^\x00\x00\x00\x00\x00\x00\x00\x00\xe7]6+\\\x00\x00\x00\x00?#C.\x1dj\xd9\xc3\xdd&\x80g:N\xec\x06[\x8f\x92\xe2\xb01\xb0\xef\x10,\xde\xf3\x86D\x8b\xf7\xf1>AH\xef\\\xf9\x8b\a\xe0\xb2\xcb\xf0\x97\b\r\xd5`\xb9\xd6\xa4\x1e\xbe\x12-}\xc5\x84\xde@\x18\x87\f\x01O\xedS\x8f\x9en,\xbce\xb2\xe4\x82v\x1c\xed\x84-s\xab\x06b\x9c\xba\xec\xa5\xc9A\x84\xd0\xe0 S\xc8\xa2\xaf\x85\v\xad\xa5\x88\xcf\xb6}`\x14\'\xea\xbfN\xac)\xa1\xe8\xb2\x9f\x112TJ\x16\x8c9\xe9\xf5\x18\x15Dd\x8a%>\x91\x93\x88\xe9\x18\x82]\x9e&\xfa\xaa\xfa8Z2\x00'/1301, 0x3)
syz_emit_ethernet(0x83, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030086dd601b8b97004d88c19edace00000000000000002100000002ff02000000000000000000000000000104004e2000"], 0x0)

138.640108ms ago: executing program 0 (id=9216):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c0000000000008001"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38)
syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1810714, &(0x7f00000003c0)={[{@test_dummy_encryption}, {@nobh}, {@minixdf}, {@jqfmt_vfsv1}, {@prjquota}, {@dioread_nolock}, {@barrier_val={'barrier', 0x3d, 0xb}}, {@errors_remount}, {@auto_da_alloc}, {@test_dummy_encryption}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0xff, 0x475, &(0x7f0000000780)="$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")
r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x0)
r2 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
pread64(r2, 0x0, 0x0, 0x101)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
mmap(&(0x7f0000a9f000/0x4000)=nil, 0x4000, 0x4, 0x40010, r1, 0xf8102000)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000016000000b70300000000fff48500000083000000bf"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f0000000680)=@v1={0x0, @adiantum, 0x8, @desc1})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000740)='scsi_dispatch_cmd_start\x00', r6}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='scsi_dispatch_cmd_start\x00'}, 0x10)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15)

136.939878ms ago: executing program 2 (id=9230):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181200", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000580), 0x20202)

126.246468ms ago: executing program 1 (id=9231):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x10201, 0x0, 0xdddd0000, 0x2000, &(0x7f000091c000/0x2000)=nil})

122.827838ms ago: executing program 2 (id=9232):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000080), &(0x7f00000006c0)='%-010d \x00'}, 0x20)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000200)={0x10201, 0x0, 0xdddd0000, 0x2000, &(0x7f000091c000/0x2000)=nil})

100.292758ms ago: executing program 3 (id=9233):
r0 = syz_usb_connect$uac1(0x4, 0xa6, &(0x7f0000000f40)=ANY=[@ANYRES32], 0x0)
r1 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0x8, 0x3, 0x4a8, 0x0, 0xffffffff, 0xffffffff, 0x150, 0xffffffff, 0x3d8, 0xffffffff, 0xffffffff, 0x3d8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x128, 0x150, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x508)
r2 = socket$inet6_udplite(0xa, 0x2, 0x88)
sendmsg$inet6(r2, &(0x7f0000002280)={&(0x7f0000001e40)={0xa, 0x4e24, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="b005000000000000290000003600000000b2"], 0x5b0}, 0x20008001)
sendmsg$inet6(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000000c0)="5ca7de78b301ed5856", 0x9}], 0x1}, 0x20048080)
sendmsg$inet6(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000840)="6d74c294628914e4", 0x8}, {&(0x7f0000000b40)="83f2f54c", 0x4}], 0x2}, 0x20000044)
syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x0, <r4=>0x0}, 0x8)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000700)=r4, 0x4)
openat$null(0xffffffffffffff9c, &(0x7f0000000e00), 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000e40)={0x11, 0x7, &(0x7f0000000600)=ANY=[@ANYRES8=r0, @ANYRES32=r3, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r5 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0)
writev(r5, &(0x7f0000000080)=[{&(0x7f0000000300)='4', 0x1}], 0x1)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{}, &(0x7f0000000080), &(0x7f0000000100)}, 0x20)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000700)={'syztnl2\x00', &(0x7f0000000b80)={'erspan0\x00', <r6=>0x0, 0x1, 0x10, 0x46, 0xffffffff, {{0x14, 0x4, 0x1, 0x3a, 0x50, 0x66, 0x0, 0x3, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0xe}, @multicast1, {[@ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x14, 0x40, 0x0, 0x8, [0x9, 0x6, 0x7, 0x7fe55d72]}, @generic={0x82, 0x4, 'AS'}, @ra={0x94, 0x4}, @noop, @rr={0x7, 0x1b, 0x40, [@rand_addr=0x64010101, @private=0xa010101, @loopback, @dev={0xac, 0x14, 0x14, 0x3e}, @loopback, @private=0xa010100]}]}}}}})
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="1300000001000000080000000800000001100000", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000010200000000000000000000000c8a7a6b95a658a3782a5bd79c90251c7db00"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000800)={{r7}, &(0x7f0000000780), &(0x7f00000007c0)}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{0x1, <r8=>0xffffffffffffffff}, &(0x7f0000000800), &(0x7f0000000880)}, 0x20)
unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x200)
r9 = open(&(0x7f00000000c0)='./file1\x00', 0x14927e, 0x6)
fallocate(r9, 0x0, 0x0, 0x1001f0)
truncate(&(0x7f0000000080)='./file1\x00', 0x8)
read$rfkill(r9, &(0x7f0000000100), 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0x8, 0x1c, &(0x7f0000000940)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0xc6, &(0x7f0000000a40)=""/198, 0x40f00, 0x4, '\x00', r6, @fallback=0x1a, 0xffffffffffffffff, 0x8, &(0x7f0000000f00)={0x0, 0x1}, 0x8, 0x10, &(0x7f00000007c0)={0x0, 0x1, 0x10, 0xfffffffe}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x9, &(0x7f0000000940)=[r7, r8, r9], &(0x7f0000000c80)=[{0x5, 0x2, 0x2, 0x8}, {0x2, 0x10000003, 0x2}, {0x5, 0x1, 0x0, 0x1}, {0x3, 0x2, 0x6, 0xa}, {0x4, 0x5, 0x10, 0x3}, {0x1, 0x4, 0x3}, {0x0, 0x6, 0x4, 0x8}, {0x3, 0x10000003, 0x10, 0x5}, {0x3, 0x1, 0x7, 0xc}], 0x10, 0x1, @void, @value}, 0x94)
syz_usb_control_io(r0, &(0x7f0000000400)={0x2c, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0003450000004503b003cc9bc83552ffbabe9aa503e83679bcad8414f72575795784bbc3bd0a493057fe99ab81d8376db5f86caecbf50f30a0d3d549595f637acce68b3d094c972bec0ae5"], 0x0, 0x0, 0x0}, 0x0)

0s ago: executing program 4 (id=9234):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000073013100000000009500000000000000ac191d094bde9ba5104185d62de9ff0f92fc0bdde69ab1646bca38ca9d2e0166fbc8fb31206d284fa4aba9da67683a03077ecd011a56792b1b1a"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1d, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
r0 = socket$packet(0x11, 0x2, 0x300)
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00')
getdents64(r1, &(0x7f00000000c0)=""/44, 0x2c)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
r2 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x54)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f0000000140)='./bus\x00')
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r4 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r4, &(0x7f0000000040)={0x28, 0x0, 0x0, @host}, 0x10)
bind$vsock_stream(r4, &(0x7f0000000440), 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r3}, 0x0, &(0x7f00000002c0)}, 0x20)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r5}, 0x10)
time(0x0)
pipe2$9p(&(0x7f0000000000)={<r6=>0xffffffffffffffff}, 0x0)
r7 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
splice(r6, 0x0, r7, 0x0, 0x10000000000016, 0x0)
r8 = open(&(0x7f0000000300)='./bus\x00', 0x14103e, 0x18a)
sendmmsg$sock(r0, &(0x7f0000003480)=[{{&(0x7f0000000380)=@ieee802154={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0302}}}, 0x80, &(0x7f0000000040)=[{&(0x7f00000004c0)="4e7fb2642125b00d8a3ac619a9195b0eb662d0f4844b7e56bb0b0bb1e73d27278b76dc0fc8258adac23329f0daa39ec16c759c01eccae9128b8febebbdd91c7bb0f568ed186d8cef8a0cbb78b4dccaebf16bad018466cfb67558427d001c27e7043b1e0da741259412175c24d243d9c0fa2fb6455be38c21e2a716261689ab0f62f6c5e274747a15bc2467dd6f3c4363e20f5eeaaa28800b51aad7f602194ce525a1789af1ebbd27ed65e3e2ad009b4a618a9432dfc6bef73d5576e8a000fd41c4fbd3c2f90015cbaa3db8c00a", 0xcd}], 0x1, &(0x7f00000006c0)=[@timestamping={{0x14, 0x1, 0x25, 0x3}}, @mark={{0x14, 0x1, 0x24, 0xa}}, @mark={{0x14, 0x1, 0x24, 0x1000}}, @txtime={{0x18, 0x1, 0x3d, 0x7}}, @timestamping={{0x14}}, @timestamping={{0x14, 0x1, 0x25, 0x9}}, @timestamping={{0x14, 0x1, 0x25, 0x9}}, @mark={{0x14, 0x1, 0x24, 0x2}}, @timestamping={{0x14, 0x1, 0x25, 0x47}}], 0xd8}}, {{&(0x7f00000005c0)=@phonet={0x23, 0xf, 0x6, 0x7}, 0x80, &(0x7f0000000980)=[{&(0x7f00000007c0)="70683fd8d7e4e0c9931d8ea437cc0c9a7ae60950477fe8f7580727aa22dc6ee71326088e1031c53adb69929a395a64b9d4d5726a61e1979ece2a686cfb64e7b24be16e100cefb9f57dbface27e8d4d0f819955158f87836b990e6cd04b9f0625a6e44ba927e1b1af22b0448da6456a162b74588ca0e4c3a0cd148567579bb64bff511396c54a680b5a2c1462515642f8f363be26ac8563845ab08870481ff00eb4c76924d3efb6b58ef704a8454846b753001cf8ad0c5932619b0631c2167f27092b4fdf7bdbaffd3e2e4fe3b6f594dd9b5db3301912", 0xd6}, {&(0x7f00000008c0)="c475041e4908251c4853504756d6e99bf71ce11579308e6562f1887b966503e4c8e37631048c0ae6532d906cc109fa74bd51162c49c442451b6411754ac78739da47c392bb5d9b70f5d60ab06d78fda5b782df07ce9eda68c3528a151691911164dd92e781d5a186235424cf820648ab58652e85a57e42c101443e05913b374c38cab79366cb74370d0f312557ac0d465c4195c12642a5e71259e8ab13ac9bc1ad3f3078631e8792", 0xa8}, {&(0x7f0000000400)}], 0x3}}, {{&(0x7f00000009c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x36}}, 0x0, 0x4, 0x0, 0x2}}, 0x80, &(0x7f0000001d40)=[{&(0x7f0000000b00)="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", 0x1000}, {&(0x7f0000001b00)="d741416f61e670b4a732742210d68594086b0f02dfaa50613a5ad4fd4fe4020361d7cf7038d5b9cd8db4acc4e98773f4881ea7b41198b01dd57cde9134a3c8095a903f2dbe3bdb9b2ca056d0ba4dba5e6f345196672c62c50873fcd3f40c4fa22510078293f4b1e37543d920628a960690a91373f5964b6a4db6c031c5b1f3d698a9b69a82dc10b20ff0f09a47f4c4fca5de1bdbae21adb8450bd86971f64d3ec5be3f3013785e5c76455d3cbd56fb9e82a1f0823809bf7e00611b8a822b2b52414ac1b996f02c9997d51e21", 0xcc}, {&(0x7f0000001c00)="d2f1346b", 0x4}, {&(0x7f0000001c40)="6208c8ff4cc1ca7d6e0711a1fc20b2649f2da146f0c7fe9b888296f555e72274d3eb944fad71ba70e4e803156f6d0b3fbd1d2049097c2236a5cd84f8cd9d0644ca58f27f9dff2cbe3cf6bc052f163f5195697aea733524c86352a32ec66cc598fc9b8dbab572e574cd01b397321c27c021cc13", 0x73}, {&(0x7f0000001cc0)="96d4d78a7db0e3c4cc8baf915ecc17c4140889bc60c649350b9d2fbb16db3065efdf54c1c1b4535ec172d0844aaae326a8e6565f8af881be21888bae0afef463e2244488e963898eee4201c9e556e1f8bc86daf15539a2d9df079ddfccdc4fcce6a7b37adfe5", 0x66}], 0x5, &(0x7f0000001dc0)=[@mark={{0x14, 0x1, 0x24, 0x7f}}], 0x18}}, {{&(0x7f0000001e00)=@caif=@util={0x25, "a5710da6ee30cd43c5f7472fbcf4a359"}, 0x80, &(0x7f00000031c0)=[{&(0x7f0000001e80)="b0b4a00b7f1890937375f79d1becd0020cf8d1ccf692d8bf5e0b6fb80911471ba6cabc4f555af56e2087577c0e2766ea833fc24ef269df0a4b860f9d502e265223bfbcb3e06e8122a0e082e928ed22", 0x4f}, {&(0x7f0000001f00)="74792b444200943a4c7aaa8d136b8a56861cfff5ea351b2b01f5e4db40d51298b047e0b4413d8e9d57e32efa48600b8378981740a0afcbbe2044ab3d3f56c3d2ef279a999d922770c928e05bfe6915ead97f4af2e3b59891258b347a3f5e39f76eccad1bdade7e32ad9357d2a5602ae9902806aa2e9e19299147cacadd2d6a3b279b4577e54925a7cf0a0641cca553c8b044d93649d98be767292ad886ba964e9295b8c54c32a4f9de8e3cbd77f3a5f1fe0877eb1ec765aa3ddc724d86dc40a04ee7ff441435718f50a5bec8a4160ee46143c243d19d7e9e3c8331686dbd610306", 0xe1}, {&(0x7f0000002000)="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", 0x1000}, {&(0x7f0000003000)="36008b3176c1bedfebf34c17778ea048e875623d3e66710ed89b59ac7cc39fb80824566f808480b5c69373ac320ac35e21b4eeb106cf0a854cd22399ee819311b22116cabb04370f4ef90ba4298a7534626a24387cb3f19f2f8a1cdec0c55331198b828de31194cb27b1554a014440d47ecbadd72bff6fa33dc0d558925f6e708f160d75be10ea71cce766d94608042eacf91fcddcae17cbcb2f8a03ec2a0e3c3c02c18f0f8cfc53bc6a9ece17a323c023c6999a7e8ebfb95bcf2815ffb28e", 0xbf}, {&(0x7f00000030c0)="4bf0ab9f69542d0e066c783f128566537632062da0faac99bfc0d4a7cc1d13ffbdeb36b87fc7d3885dedf1485999ae19bcf99bcb945874127939439d8b7b11f41bb061e118e6f1eb20236bf4841ddf016f39d749c2a700839a1a600ad9d4eb408ccb353977f10ff8f3563ae7f1d5592a93219f87b5673a233f7d4986e8748a3a92e71530646f2f154160378756ad5e34b80e75d37b84726ec3a6e72f06cdbe98445eab51bb09dd62499b27b981dd9fcc3ec935575a6b51e2484f75da73e7722bd0153b6f26b2aac147973c4245ee31e401d92b470c2bf65e69280b5f8164efd8be2f7e1cf526812ffc", 0xe9}], 0x5, &(0x7f0000003240)=[@timestamping={{0x14}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x200}}, @txtime={{0x18, 0x1, 0x3d, 0x7}}, @timestamping={{0x14, 0x1, 0x25, 0x6}}, @txtime={{0x18, 0x1, 0x3d, 0x3}}, @mark={{0x14, 0x1, 0x24, 0x2}}, @timestamping={{0x14, 0x1, 0x25, 0x5}}], 0xc0}}, {{0x0, 0x0, &(0x7f00000033c0)=[{&(0x7f0000003300)="9083a6f62244309c8feb37b368d19add1b10d7b4752e5c90eb290d7813d57f4dd8929f3e0994132494a441dbfb99d889768eeabcc0c72ef7c9903af6ca01013898", 0x41}, {&(0x7f0000003380)="828d8438e606ef02a1570595ce266549eecfd5a30424ff02abff2d9af0b336fc8012f8eec51bfd7e23bb5757fb", 0x2d}], 0x2, &(0x7f0000003400)=[@txtime={{0x18, 0x1, 0x3d, 0xffffffff}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @mark={{0x14, 0x1, 0x24, 0x4000000}}, @timestamping={{0x14, 0x1, 0x25, 0xfffeffff}}], 0x60}}], 0x5, 0x4040005)
r9 = open(&(0x7f00000001c0)='./file0\x00', 0x14b042, 0x83)
sendfile(r8, r9, 0x0, 0x80000001)

kernel console output (not intermixed with test programs):

ce= 0.00
[ 1692.279504][T25436] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1692.292009][T25436] usb 4-1: config 0 descriptor??
[ 1692.407157][T17647] usb 2-1: not running at top speed; connect to a high speed hub
[ 1692.427530][ T4701] usb 1-1: config 0 has too many interfaces: 202, using maximum allowed: 32
[ 1692.450069][ T4701] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 202
[ 1692.465442][ T4701] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[ 1692.507166][T17647] usb 2-1: config 1 interface 0 has no altsetting 0
[ 1692.647104][T25436] usbhid 4-1:0.0: can't add hid device: -71
[ 1692.647133][ T4701] usb 1-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99
[ 1692.653543][T25436] usbhid: probe of 4-1:0.0 failed with error -71
[ 1692.662583][ T4701] usb 1-1: New USB device strings: Mfr=33, Product=2, SerialNumber=3
[ 1692.671084][T25436] usb 4-1: USB disconnect, device number 90
[ 1692.677160][T17647] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[ 1692.692124][ T4701] usb 1-1: Product: syz
[ 1692.696337][T17647] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1692.704391][ T4701] usb 1-1: Manufacturer: syz
[ 1692.709073][ T4701] usb 1-1: SerialNumber: syz
[ 1692.713800][T17647] usb 2-1: Product: Ч
[ 1692.717933][T17647] usb 2-1: Manufacturer: 
[ 1692.722879][T17647] usb 2-1: SerialNumber: с
[ 1692.727847][ T4701] usb 1-1: config 0 descriptor??
[ 1692.987103][ T4701] snd-usb-audio: probe of 1-1:0.0 failed with error -2
[ 1692.995614][ T4701] usb 1-1: USB disconnect, device number 91
[ 1693.052687][T17647] usb 2-1: USB disconnect, device number 97
[ 1694.264321][   T30] kauditd_printk_skb: 56 callbacks suppressed
[ 1694.264345][   T30] audit: type=1326 audit(1750171227.028:35630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26835 comm="syz.3.8785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff81e27d929 code=0x7ffc0000
[ 1694.647008][   T30] audit: type=1326 audit(1750171227.068:35631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26835 comm="syz.3.8785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff81e27d929 code=0x7ffc0000
[ 1694.818687][   T30] audit: type=1326 audit(1750171227.088:35632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26835 comm="syz.3.8785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff81e27d929 code=0x7ffc0000
[ 1695.133654][   T30] audit: type=1326 audit(1750171227.098:35633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26835 comm="syz.3.8785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff81e27d929 code=0x7ffc0000
[ 1695.162521][   T30] audit: type=1326 audit(1750171227.108:35634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26835 comm="syz.3.8785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff81e27d929 code=0x7ffc0000
[ 1695.211784][   T30] audit: type=1326 audit(1750171227.118:35635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26835 comm="syz.3.8785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7ff81e27d929 code=0x7ffc0000
[ 1695.254025][   T30] audit: type=1326 audit(1750171227.118:35636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26835 comm="syz.3.8785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff81e27d929 code=0x7ffc0000
[ 1695.278192][   T30] audit: type=1326 audit(1750171227.128:35637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26835 comm="syz.3.8785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7ff81e27d929 code=0x7ffc0000
[ 1695.302071][   T30] audit: type=1326 audit(1750171227.128:35638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26835 comm="syz.3.8785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff81e27d929 code=0x7ffc0000
[ 1695.326030][   T30] audit: type=1326 audit(1750171227.138:35639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26835 comm="syz.3.8785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7ff81e27d929 code=0x7ffc0000
[ 1696.887024][ T1520] usb 4-1: new high-speed USB device number 91 using dummy_hcd
[ 1697.158515][T19769] usb 2-1: new full-speed USB device number 98 using dummy_hcd
[ 1697.490608][ T1520] usb 4-1: Using ep0 maxpacket: 16
[ 1697.986628][ T1520] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1697.998308][ T1520] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1698.010302][ T1520] usb 4-1: config 0 interface 0 has no altsetting 0
[ 1698.051689][ T1520] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[ 1698.085904][ T1520] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1698.113732][ T1520] usb 4-1: config 0 descriptor??
[ 1698.677070][ T1520] usbhid 4-1:0.0: can't add hid device: -71
[ 1698.683303][ T1520] usbhid: probe of 4-1:0.0 failed with error -71
[ 1698.700031][ T1520] usb 4-1: USB disconnect, device number 91
[ 1698.857080][T26459] usb 5-1: new high-speed USB device number 105 using dummy_hcd
[ 1698.937000][T17647] usb 1-1: new high-speed USB device number 92 using dummy_hcd
[ 1699.177473][T19769] usb 2-1: not running at top speed; connect to a high speed hub
[ 1699.257151][T19769] usb 2-1: config 1 interface 0 has no altsetting 0
[ 1699.377654][T17647] usb 1-1: Using ep0 maxpacket: 8
[ 1699.417099][T26459] usb 5-1: config 0 has too many interfaces: 202, using maximum allowed: 32
[ 1699.426046][T19769] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[ 1699.435206][T26459] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 202
[ 1699.444289][T19769] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1699.452352][T19769] usb 2-1: Product: Ч
[ 1699.456461][T19769] usb 2-1: Manufacturer: 
[ 1699.461240][T26459] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[ 1699.471148][T19769] usb 2-1: SerialNumber: с
[ 1699.487059][T19769] usb 2-1: can't set config #1, error -71
[ 1699.497992][T19769] usb 2-1: USB disconnect, device number 98
[ 1699.507523][   T30] kauditd_printk_skb: 51 callbacks suppressed
[ 1699.507539][   T30] audit: type=1400 audit(1750171232.278:35691): avc:  denied  { create } for  pid=26906 comm="syz.1.8808" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[ 1699.533916][   T30] audit: type=1326 audit(1750171232.278:35692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26906 comm="syz.1.8808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ff6fc8929 code=0x7ffc0000
[ 1699.557913][   T30] audit: type=1326 audit(1750171232.278:35693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26906 comm="syz.1.8808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4ff6fc8929 code=0x7ffc0000
[ 1699.581980][   T30] audit: type=1326 audit(1750171232.298:35694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26906 comm="syz.1.8808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ff6fc8929 code=0x7ffc0000
[ 1699.605899][T17647] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[ 1699.616514][   T30] audit: type=1326 audit(1750171232.328:35695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26906 comm="syz.1.8808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ff6fc8929 code=0x7ffc0000
[ 1699.640729][T17647] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1699.649882][T17647] usb 1-1: config 1 interface 0 altsetting 0 has an invalid endpoint descriptor of length 2, skipping
[ 1699.661306][T26459] usb 5-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99
[ 1699.670765][   T30] audit: type=1326 audit(1750171232.328:35696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26906 comm="syz.1.8808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4ff6fc8929 code=0x7ffc0000
[ 1699.730375][   T30] audit: type=1326 audit(1750171232.348:35697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26906 comm="syz.1.8808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ff6fc8929 code=0x7ffc0000
[ 1699.745622][T17647] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 1699.756443][   T30] audit: type=1326 audit(1750171232.348:35698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26906 comm="syz.1.8808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ff6fc8929 code=0x7ffc0000
[ 1699.767240][T26459] usb 5-1: New USB device strings: Mfr=33, Product=2, SerialNumber=3
[ 1699.797679][   T30] audit: type=1326 audit(1750171232.348:35699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26906 comm="syz.1.8808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f4ff6fc8929 code=0x7ffc0000
[ 1699.911776][   T30] audit: type=1326 audit(1750171232.348:35700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26906 comm="syz.1.8808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f4ff6fc8963 code=0x7ffc0000
[ 1700.076156][T26459] usb 5-1: Product: syz
[ 1700.080445][T26459] usb 5-1: Manufacturer: syz
[ 1700.085064][T26459] usb 5-1: SerialNumber: syz
[ 1700.103295][T26459] usb 5-1: config 0 descriptor??
[ 1700.227060][T17647] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1700.236203][T17647] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1700.244268][T17647] usb 1-1: Product: ᠁
[ 1700.248567][T17647] usb 1-1: Manufacturer: ఄ
[ 1701.031912][T17647] usb 1-1: SerialNumber: љ
[ 1701.066019][T26459] snd-usb-audio: probe of 5-1:0.0 failed with error -2
[ 1701.107667][T17647] usb 1-1: can't set config #1, error -71
[ 1701.126269][T26459] usb 5-1: USB disconnect, device number 105
[ 1701.152339][T17647] usb 1-1: USB disconnect, device number 92
[ 1704.987067][   T30] kauditd_printk_skb: 190 callbacks suppressed
[ 1704.987101][   T30] audit: type=1400 audit(1750171236.768:35891): avc:  denied  { watch } for  pid=26961 comm="syz.0.8824" path="/530" dev="tmpfs" ino=2909 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[ 1705.163411][   T30] audit: type=1326 audit(1750171237.108:35892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26963 comm="syz.3.8825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff81e27d929 code=0x7ffc0000
[ 1705.187051][T25436] usb 2-1: new high-speed USB device number 99 using dummy_hcd
[ 1705.232393][   T30] audit: type=1326 audit(1750171237.108:35893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26963 comm="syz.3.8825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff81e27d929 code=0x7ffc0000
[ 1705.257710][   T30] audit: type=1326 audit(1750171237.968:35894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26972 comm="syz.3.8827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff81e27d929 code=0x7ffc0000
[ 1705.291334][   T30] audit: type=1326 audit(1750171237.968:35895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26972 comm="syz.3.8827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff81e27d929 code=0x7ffc0000
[ 1705.328246][   T30] audit: type=1400 audit(1750171237.968:35896): avc:  denied  { mac_admin } for  pid=26974 comm="syz.2.8828" capability=33  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[ 1705.350104][   T30] audit: type=1400 audit(1750171237.968:35897): avc:  denied  { relabelto } for  pid=26974 comm="syz.2.8828" name="state" dev="debugfs" ino=13277 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:xserver_misc_device_t:s0"
[ 1705.378510][   T30] audit: type=1400 audit(1750171237.968:35898): avc:  denied  { associate } for  pid=26974 comm="syz.2.8828" name="state" dev="debugfs" ino=13277 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:xserver_misc_device_t:s0"
[ 1705.409132][   T30] audit: type=1326 audit(1750171237.978:35899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26972 comm="syz.3.8827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff81e27d929 code=0x7ffc0000
[ 1705.433399][   T30] audit: type=1326 audit(1750171237.978:35900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26972 comm="syz.3.8827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff81e27d929 code=0x7ffc0000
[ 1705.477044][T25436] usb 2-1: Using ep0 maxpacket: 8
[ 1705.707013][T25436] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[ 1705.717331][T25436] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1705.726413][T25436] usb 2-1: config 1 interface 0 altsetting 0 has an invalid endpoint descriptor of length 2, skipping
[ 1705.738650][T25436] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 1705.957236][T25436] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1705.975785][T25436] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1705.988334][T25436] usb 2-1: Product: ᠁
[ 1705.993500][T25436] usb 2-1: Manufacturer: ఄ
[ 1705.998718][T26994] device veth1_macvtap left promiscuous mode
[ 1706.010645][T26994] device macsec0 entered promiscuous mode
[ 1706.020199][T25436] usb 2-1: SerialNumber: љ
[ 1706.320120][T26967] UDC core: couldn't find an available UDC or it's busy: -16
[ 1706.340383][T26967] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[ 1706.472165][T26967] UDC core: couldn't find an available UDC or it's busy: -16
[ 1706.496482][T26967] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[ 1706.840799][T25436] usb 2-1: 0:2 : does not exist
[ 1706.859176][T25436] usb 2-1: USB disconnect, device number 99
[ 1708.037554][T26926] udevd[26926]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[ 1709.827054][T25436] usb 1-1: new high-speed USB device number 93 using dummy_hcd
[ 1710.916990][T25436] usb 1-1: Using ep0 maxpacket: 32
[ 1711.037455][T25436] usb 1-1: config 0 interface 0 has no altsetting 0
[ 1711.051492][T25436] usb 1-1: New USB device found, idVendor=046d, idProduct=c091, bcdDevice= 0.00
[ 1711.143707][T25436] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1711.194431][T25436] usb 1-1: config 0 descriptor??
[ 1711.215935][   T30] kauditd_printk_skb: 155 callbacks suppressed
[ 1711.215952][   T30] audit: type=1400 audit(1750171243.978:36056): avc:  denied  { create } for  pid=27067 comm="syz.2.8863" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[ 1711.733744][   T30] audit: type=1400 audit(1750171244.498:36057): avc:  denied  { read } for  pid=27071 comm="syz.4.8864" name="event2" dev="devtmpfs" ino=270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[ 1711.764477][   T30] audit: type=1400 audit(1750171244.528:36058): avc:  denied  { open } for  pid=27071 comm="syz.4.8864" path="/dev/input/event2" dev="devtmpfs" ino=270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[ 1711.789804][   T30] audit: type=1400 audit(1750171244.528:36059): avc:  denied  { name_bind } for  pid=27071 comm="syz.4.8864" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1
[ 1711.811989][   T30] audit: type=1400 audit(1750171244.528:36060): avc:  denied  { node_bind } for  pid=27071 comm="syz.4.8864" saddr=::1 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1
[ 1712.136858][   T30] audit: type=1400 audit(1750171244.898:36061): avc:  denied  { create } for  pid=27076 comm="syz.2.8865" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[ 1712.189640][   T30] audit: type=1400 audit(1750171244.928:36062): avc:  denied  { setopt } for  pid=27076 comm="syz.2.8865" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[ 1712.241967][   T30] audit: type=1400 audit(1750171244.928:36063): avc:  denied  { write } for  pid=27076 comm="syz.2.8865" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[ 1712.283319][   T30] audit: type=1400 audit(1750171244.938:36064): avc:  denied  { map_create } for  pid=27076 comm="syz.2.8865" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[ 1712.323827][   T30] audit: type=1400 audit(1750171244.938:36065): avc:  denied  { prog_load } for  pid=27076 comm="syz.2.8865" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[ 1712.538435][T27081] 9pnet: Insufficient options for proto=fd
[ 1712.555286][T25436] logitech-hidpp-device 0003:046D:C091.0008: hidraw0: USB HID v1.01 Device [HID 046d:c091] on usb-dummy_hcd.0-1/input0
[ 1712.704047][T25436] usb 1-1: USB disconnect, device number 93
[ 1713.001084][T27093] fido_id[27093]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory
[ 1715.014027][T27121] SELinux: failed to load policy
[ 1716.616159][   T30] kauditd_printk_skb: 81 callbacks suppressed
[ 1716.616179][   T30] audit: type=1400 audit(1750171249.378:36147): avc:  denied  { name_bind } for  pid=27143 comm="syz.4.8887" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1
[ 1716.619091][T27144] netlink: 48 bytes leftover after parsing attributes in process `syz.4.8887'.
[ 1716.813465][   T30] audit: type=1400 audit(1750171249.378:36148): avc:  denied  { node_bind } for  pid=27143 comm="syz.4.8887" saddr=255.255.255.255 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1
[ 1716.897185][   T30] audit: type=1400 audit(1750171249.538:36149): avc:  denied  { map_create } for  pid=27136 comm="syz.0.8886" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[ 1716.972163][   T30] audit: type=1400 audit(1750171249.538:36150): avc:  denied  { prog_load } for  pid=27136 comm="syz.0.8886" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[ 1717.143662][   T30] audit: type=1400 audit(1750171249.538:36151): avc:  denied  { bpf } for  pid=27136 comm="syz.0.8886" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[ 1717.208816][   T30] audit: type=1400 audit(1750171249.538:36152): avc:  denied  { perfmon } for  pid=27136 comm="syz.0.8886" capability=38  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[ 1717.263039][T27152] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1717.270349][T27152] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1717.291069][T27152] device bridge_slave_0 entered promiscuous mode
[ 1717.306034][   T30] audit: type=1400 audit(1750171249.778:36153): avc:  denied  { execmem } for  pid=27147 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[ 1717.325931][   T30] audit: type=1400 audit(1750171249.818:36154): avc:  denied  { prog_run } for  pid=27148 comm="syz.4.8889" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[ 1717.327615][T27152] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1717.345208][   T30] audit: type=1400 audit(1750171249.838:36155): avc:  denied  { map_read map_write } for  pid=27148 comm="syz.4.8889" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[ 1717.378228][   T30] audit: type=1326 audit(1750171249.838:36156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27148 comm="syz.4.8889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d60b6a929 code=0x7ffc0000
[ 1717.402410][T27152] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1717.446207][T27152] device bridge_slave_1 entered promiscuous mode
[ 1717.678045][T27152] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1717.685149][T27152] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1717.692532][T27152] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1717.699605][T27152] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1717.905745][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 1717.915057][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 1717.944416][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 1717.972020][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 1717.995145][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 1718.020424][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 1718.051443][T27152] device veth0_vlan entered promiscuous mode
[ 1718.061148][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 1718.077818][T26643] device bridge_slave_1 left promiscuous mode
[ 1718.085185][T26643] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1718.108840][T26643] device bridge_slave_0 left promiscuous mode
[ 1718.116669][T26643] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1718.136830][T26643] device veth1_macvtap left promiscuous mode
[ 1718.147745][T26643] device veth0_vlan left promiscuous mode
[ 1718.269198][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 1718.276848][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 1718.284996][T27183] netlink: 48 bytes leftover after parsing attributes in process `syz.4.8899'.
[ 1718.299314][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 1718.311937][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 1718.324698][T27152] device veth1_macvtap entered promiscuous mode
[ 1718.339506][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 1718.347549][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 1718.356040][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 1718.371113][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 1718.379833][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 1718.497147][T25436] usb 1-1: new high-speed USB device number 94 using dummy_hcd
[ 1718.682877][T27202] netlink: 48 bytes leftover after parsing attributes in process `syz.1.8905'.
[ 1718.769013][T25436] usb 1-1: Using ep0 maxpacket: 16
[ 1718.887334][T25436] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1718.918727][T25436] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1718.963407][T25436] usb 1-1: config 0 interface 0 has no altsetting 0
[ 1718.970331][T25436] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[ 1718.979943][T25436] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1718.989798][T25436] usb 1-1: config 0 descriptor??
[ 1719.137645][ T1520] usb 4-1: new high-speed USB device number 92 using dummy_hcd
[ 1719.337036][T25436] usbhid 1-1:0.0: can't add hid device: -71
[ 1719.343720][T25436] usbhid: probe of 1-1:0.0 failed with error -71
[ 1719.352588][T25436] usb 1-1: USB disconnect, device number 94
[ 1719.397026][ T1520] usb 4-1: Using ep0 maxpacket: 8
[ 1719.712838][ T1520] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[ 1719.732859][ T1520] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1719.741961][ T1520] usb 4-1: config 1 interface 0 altsetting 0 has an invalid endpoint descriptor of length 2, skipping
[ 1719.753001][ T1520] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 1720.747053][ T1520] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1720.776430][ T1520] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1720.781316][T27225] overlayfs: failed to resolve './file0': -2
[ 1720.805004][ T1520] usb 4-1: Product: ᠁
[ 1720.815974][ T1520] usb 4-1: Manufacturer: ఄ
[ 1720.824462][T27225] FAULT_INJECTION: forcing a failure.
[ 1720.824462][T27225] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1720.827016][ T1520] usb 4-1: SerialNumber: љ
[ 1720.927078][T27225] CPU: 1 PID: 27225 Comm: syz.1.8911 Not tainted 5.15.185-syzkaller-00339-ge678c93d43cc #0
[ 1720.937107][T27225] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 1720.947183][T27225] Call Trace:
[ 1720.950478][T27225]  <TASK>
[ 1720.953422][T27225]  __dump_stack+0x21/0x30
[ 1720.957794][T27225]  dump_stack_lvl+0xee/0x150
[ 1720.962400][T27225]  ? show_regs_print_info+0x20/0x20
[ 1720.967610][T27225]  ? kstrtouint_from_user+0x1a0/0x200
[ 1720.972994][T27225]  dump_stack+0x15/0x20
[ 1720.977165][T27225]  should_fail+0x3c1/0x510
[ 1720.981594][T27225]  should_fail_usercopy+0x1a/0x20
[ 1720.986638][T27225]  _copy_from_user+0x20/0xd0
[ 1720.991247][T27225]  iovec_from_user+0x1bc/0x2f0
[ 1720.996033][T27225]  __import_iovec+0x71/0x400
[ 1721.000648][T27225]  ? __fget_files+0x2c4/0x320
[ 1721.005353][T27225]  import_iovec+0x7c/0xb0
[ 1721.009701][T27225]  do_preadv+0x1bd/0x330
[ 1721.013961][T27225]  ? _raw_spin_unlock+0x4d/0x70
[ 1721.018842][T27225]  ? vfs_writev+0x540/0x540
[ 1721.023410][T27225]  ? __switch_to_asm+0x3a/0x60
[ 1721.028199][T27225]  ? release_firmware_map_entry+0x190/0x190
[ 1721.034208][T27225]  ? __kasan_check_write+0x14/0x20
[ 1721.039345][T27225]  ? switch_fpu_return+0x15d/0x2c0
[ 1721.044487][T27225]  __x64_sys_preadv+0x9e/0xb0
[ 1721.049186][T27225]  x64_sys_call+0x4f8/0x9a0
[ 1721.053713][T27225]  do_syscall_64+0x4c/0xa0
[ 1721.058168][T27225]  ? clear_bhb_loop+0x50/0xa0
[ 1721.062864][T27225]  ? clear_bhb_loop+0x50/0xa0
[ 1721.067556][T27225]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 1721.073462][T27225] RIP: 0033:0x7f9980583929
[ 1721.077879][T27225] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1721.097493][T27225] RSP: 002b:00007f997ebec038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127
[ 1721.105913][T27225] RAX: ffffffffffffffda RBX: 00007f99807aafa0 RCX: 00007f9980583929
[ 1721.113970][T27225] RDX: 0000000000000001 RSI: 0000200000000600 RDI: 0000000000000003
[ 1721.121939][T27225] RBP: 00007f997ebec090 R08: 0000000000000007 R09: 0000000000000000
[ 1721.129916][T27225] R10: 00000000fffffff9 R11: 0000000000000246 R12: 0000000000000001
[ 1721.137899][T27225] R13: 0000000000000000 R14: 00007f99807aafa0 R15: 00007ffdac7b5788
[ 1721.145895][T27225]  </TASK>
[ 1721.264411][T27232] netlink: 48 bytes leftover after parsing attributes in process `syz.1.8913'.
[ 1721.368066][T27197] UDC core: couldn't find an available UDC or it's busy: -16
[ 1721.375604][T27197] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[ 1721.517087][ T1520] usb 4-1: 0:2 : does not exist
[ 1721.533295][ T1520] usb 4-1: USB disconnect, device number 92
[ 1721.632897][   T30] kauditd_printk_skb: 132 callbacks suppressed
[ 1721.632929][   T30] audit: type=1400 audit(1750171254.398:36289): avc:  denied  { execmem } for  pid=27237 comm="syz.4.8916" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[ 1721.851070][   T30] audit: type=1400 audit(1750171254.578:36290): avc:  denied  { create } for  pid=27237 comm="syz.4.8916" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[ 1721.872033][   T30] audit: type=1400 audit(1750171254.598:36291): avc:  denied  { map_read map_write } for  pid=27237 comm="syz.4.8916" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[ 1722.209501][   T30] audit: type=1400 audit(1750171254.978:36292): avc:  denied  { create } for  pid=27243 comm="syz.3.8918" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[ 1722.829787][   T30] audit: type=1400 audit(1750171255.598:36293): avc:  denied  { create } for  pid=27250 comm="syz.2.8920" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[ 1722.859061][   T30] audit: type=1400 audit(1750171255.618:36294): avc:  denied  { create } for  pid=27254 comm="syz.0.8922" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[ 1722.881067][   T30] audit: type=1400 audit(1750171255.628:36295): avc:  denied  { ioctl } for  pid=27254 comm="syz.0.8922" path="socket:[118691]" dev="sockfs" ino=118691 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[ 1722.907919][   T30] audit: type=1400 audit(1750171255.628:36296): avc:  denied  { module_request } for  pid=27254 comm="syz.0.8922" kmod="netdev-bridge0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[ 1722.930322][   T30] audit: type=1400 audit(1750171255.648:36297): avc:  denied  { mounton } for  pid=27252 comm="syz.1.8921" path="/5/file0" dev="tmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[ 1722.952961][   T30] audit: type=1400 audit(1750171255.648:36298): avc:  denied  { mount } for  pid=27252 comm="syz.1.8921" name="/" dev="incremental-fs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[ 1723.066181][T27257] netem: change failed
[ 1724.139393][T27273] fuse: Unknown parameter ''
[ 1725.827467][T27304] FAULT_INJECTION: forcing a failure.
[ 1725.827467][T27304] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1725.840714][T27304] CPU: 1 PID: 27304 Comm: syz.2.8938 Not tainted 5.15.185-syzkaller-00339-ge678c93d43cc #0
[ 1725.850812][T27304] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 1725.860886][T27304] Call Trace:
[ 1725.864192][T27304]  <TASK>
[ 1725.867138][T27304]  __dump_stack+0x21/0x30
[ 1725.871488][T27304]  dump_stack_lvl+0xee/0x150
[ 1725.876095][T27304]  ? show_regs_print_info+0x20/0x20
[ 1725.881311][T27304]  ? security_file_permission+0x79/0xa0
[ 1725.886894][T27304]  dump_stack+0x15/0x20
[ 1725.891081][T27304]  should_fail+0x3c1/0x510
[ 1725.895525][T27304]  should_fail_usercopy+0x1a/0x20
[ 1725.900577][T27304]  _copy_from_user+0x20/0xd0
[ 1725.905195][T27304]  get_timespec64+0x8b/0x1a0
[ 1725.909818][T27304]  ? timespec64_add_safe+0x1d0/0x1d0
[ 1725.915132][T27304]  ? mutex_unlock+0x89/0x220
[ 1725.919750][T27304]  __se_sys_pselect6+0x136/0x310
[ 1725.924718][T27304]  ? __kasan_check_write+0x14/0x20
[ 1725.929860][T27304]  ? __x64_sys_pselect6+0x100/0x100
[ 1725.935085][T27304]  ? ksys_write+0x1eb/0x240
[ 1725.939616][T27304]  ? __ia32_sys_read+0x90/0x90
[ 1725.944401][T27304]  __x64_sys_pselect6+0xe5/0x100
[ 1725.949374][T27304]  x64_sys_call+0x760/0x9a0
[ 1725.953899][T27304]  do_syscall_64+0x4c/0xa0
[ 1725.958339][T27304]  ? clear_bhb_loop+0x50/0xa0
[ 1725.963044][T27304]  ? clear_bhb_loop+0x50/0xa0
[ 1725.967751][T27304]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 1725.973672][T27304] RIP: 0033:0x7fb26bdfe929
[ 1725.978103][T27304] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1725.997734][T27304] RSP: 002b:00007fb26a467038 EFLAGS: 00000246 ORIG_RAX: 000000000000010e
[ 1726.006180][T27304] RAX: ffffffffffffffda RBX: 00007fb26c025fa0 RCX: 00007fb26bdfe929
[ 1726.014171][T27304] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 1726.022163][T27304] RBP: 00007fb26a467090 R08: 0000200000000480 R09: 0000000000000000
[ 1726.030160][T27304] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1726.038153][T27304] R13: 0000000000000000 R14: 00007fb26c025fa0 R15: 00007ffd61962cc8
[ 1726.046154][T27304]  </TASK>
[ 1726.077455][T27311] FAULT_INJECTION: forcing a failure.
[ 1726.077455][T27311] name failslab, interval 1, probability 0, space 0, times 0
[ 1726.127530][T27311] CPU: 0 PID: 27311 Comm: syz.2.8940 Not tainted 5.15.185-syzkaller-00339-ge678c93d43cc #0
[ 1726.137585][T27311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 1726.147663][T27311] Call Trace:
[ 1726.151082][T27311]  <TASK>
[ 1726.154102][T27311]  __dump_stack+0x21/0x30
[ 1726.158437][T27311]  dump_stack_lvl+0xee/0x150
[ 1726.163030][T27311]  ? show_regs_print_info+0x20/0x20
[ 1726.168233][T27311]  dump_stack+0x15/0x20
[ 1726.172388][T27311]  should_fail+0x3c1/0x510
[ 1726.176802][T27311]  __should_failslab+0xa4/0xe0
[ 1726.181566][T27311]  should_failslab+0x9/0x20
[ 1726.186067][T27311]  slab_pre_alloc_hook+0x3b/0xe0
[ 1726.191022][T27311]  ? avc_alloc_node+0x8f/0x4c0
[ 1726.195791][T27311]  kmem_cache_alloc+0x44/0x260
[ 1726.200554][T27311]  ? avc_has_perm+0x158/0x240
[ 1726.205233][T27311]  avc_alloc_node+0x8f/0x4c0
[ 1726.209828][T27311]  ? avc_xperms_free+0x270/0x270
[ 1726.214772][T27311]  avc_update_node+0x30/0xe30
[ 1726.219458][T27311]  ? __kernel_text_address+0xa0/0x100
[ 1726.224831][T27311]  avc_denied+0x132/0x1b0
[ 1726.229163][T27311]  avc_has_extended_perms+0xab3/0xdc0
[ 1726.234542][T27311]  ? avc_flush+0x2b0/0x2b0
[ 1726.238955][T27311]  ? kasan_set_track+0x5b/0x70
[ 1726.243717][T27311]  ? kasan_set_track+0x4a/0x70
[ 1726.248477][T27311]  ? kasan_set_free_info+0x23/0x40
[ 1726.253584][T27311]  ? ____kasan_slab_free+0x125/0x160
[ 1726.258865][T27311]  ? __kasan_slab_free+0x11/0x20
[ 1726.263799][T27311]  ? __x64_sys_openat+0x136/0x160
[ 1726.268821][T27311]  ? x64_sys_call+0x219/0x9a0
[ 1726.273499][T27311]  ? _kstrtoull+0x3c0/0x4d0
[ 1726.278008][T27311]  ? kstrtouint_from_user+0x1a0/0x200
[ 1726.283379][T27311]  ? kstrtol_from_user+0x260/0x260
[ 1726.288490][T27311]  ? percpu_array_map_lookup_elem+0x100/0x180
[ 1726.294561][T27311]  ioctl_has_perm+0x394/0x4d0
[ 1726.299240][T27311]  ? has_cap_mac_admin+0x330/0x330
[ 1726.304349][T27311]  ? vfs_write+0xc17/0xf70
[ 1726.308928][T27311]  selinux_file_ioctl+0x377/0x480
[ 1726.314059][T27311]  ? selinux_file_alloc_security+0x120/0x120
[ 1726.320059][T27311]  ? mutex_unlock+0x89/0x220
[ 1726.324664][T27311]  ? __mutex_lock_slowpath+0x10/0x10
[ 1726.329960][T27311]  ? __fget_files+0x2c4/0x320
[ 1726.334666][T27311]  security_file_ioctl+0x74/0xa0
[ 1726.339639][T27311]  __se_sys_ioctl+0x53/0x1a0
[ 1726.344237][T27311]  __x64_sys_ioctl+0x7b/0x90
[ 1726.348829][T27311]  x64_sys_call+0x2f/0x9a0
[ 1726.353256][T27311]  do_syscall_64+0x4c/0xa0
[ 1726.357667][T27311]  ? clear_bhb_loop+0x50/0xa0
[ 1726.362369][T27311]  ? clear_bhb_loop+0x50/0xa0
[ 1726.367141][T27311]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 1726.373048][T27311] RIP: 0033:0x7fb26bdfe929
[ 1726.377473][T27311] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1726.397095][T27311] RSP: 002b:00007fb26a467038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1726.405521][T27311] RAX: ffffffffffffffda RBX: 00007fb26c025fa0 RCX: 00007fb26bdfe929
[ 1726.413504][T27311] RDX: 0000000000000000 RSI: 0000000040084503 RDI: 0000000000000003
[ 1726.421481][T27311] RBP: 00007fb26a467090 R08: 0000000000000000 R09: 0000000000000000
[ 1726.429729][T27311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1726.437843][T27311] R13: 0000000000000000 R14: 00007fb26c025fa0 R15: 00007ffd61962cc8
[ 1726.446040][T27311]  </TASK>
[ 1727.477504][   T30] kauditd_printk_skb: 50 callbacks suppressed
[ 1727.477521][   T30] audit: type=1400 audit(1750171260.248:36349): avc:  denied  { create } for  pid=27317 comm="syz.2.8942" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[ 1728.595301][   T30] audit: type=1326 audit(1750171260.278:36350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27317 comm="syz.2.8942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb26bdfe929 code=0x7ffc0000
[ 1728.625519][   T30] audit: type=1326 audit(1750171260.278:36351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27317 comm="syz.2.8942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb26bdfe929 code=0x7ffc0000
[ 1728.746676][   T30] audit: type=1326 audit(1750171260.278:36352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27317 comm="syz.2.8942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb26bdfe929 code=0x7ffc0000
[ 1728.964277][   T30] audit: type=1326 audit(1750171260.278:36353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27317 comm="syz.2.8942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb26bdfe929 code=0x7ffc0000
[ 1728.996328][   T30] audit: type=1326 audit(1750171260.278:36354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27317 comm="syz.2.8942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb26bdfe929 code=0x7ffc0000
[ 1729.060958][   T30] audit: type=1326 audit(1750171260.278:36355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27317 comm="syz.2.8942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fb26bdfe929 code=0x7ffc0000
[ 1729.087526][   T30] audit: type=1326 audit(1750171260.278:36356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27317 comm="syz.2.8942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fb26bdfe963 code=0x7ffc0000
[ 1729.090439][T27330] netlink: 48 bytes leftover after parsing attributes in process `syz.0.8945'.
[ 1729.121173][   T30] audit: type=1326 audit(1750171260.278:36357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27317 comm="syz.2.8942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fb26bdfd3df code=0x7ffc0000
[ 1729.226655][   T30] audit: type=1326 audit(1750171260.278:36358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27317 comm="syz.2.8942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fb26bdfe9b7 code=0x7ffc0000
[ 1731.084095][T27384] FAULT_INJECTION: forcing a failure.
[ 1731.084095][T27384] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1731.098362][T27384] CPU: 0 PID: 27384 Comm: syz.3.8965 Not tainted 5.15.185-syzkaller-00339-ge678c93d43cc #0
[ 1731.108485][T27384] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 1731.118790][T27384] Call Trace:
[ 1731.122090][T27384]  <TASK>
[ 1731.125030][T27384]  __dump_stack+0x21/0x30
[ 1731.129374][T27384]  dump_stack_lvl+0xee/0x150
[ 1731.133984][T27384]  ? show_regs_print_info+0x20/0x20
[ 1731.139195][T27384]  dump_stack+0x15/0x20
[ 1731.143365][T27384]  should_fail+0x3c1/0x510
[ 1731.147793][T27384]  should_fail_usercopy+0x1a/0x20
[ 1731.152836][T27384]  _copy_from_user+0x20/0xd0
[ 1731.157460][T27384]  input_event_from_user+0xae/0x270
[ 1731.162687][T27384]  ? input_handlers_seq_show+0x160/0x160
[ 1731.168338][T27384]  ? kstrtol_from_user+0x260/0x260
[ 1731.173483][T27384]  evdev_write+0x2c3/0x450
[ 1731.177922][T27384]  ? evdev_read+0xb30/0xb30
[ 1731.182452][T27384]  ? fsnotify_perm+0x67/0x5b0
[ 1731.187151][T27384]  ? security_file_permission+0x79/0xa0
[ 1731.192723][T27384]  ? security_file_permission+0x83/0xa0
[ 1731.198292][T27384]  ? evdev_read+0xb30/0xb30
[ 1731.202819][T27384]  vfs_write+0x3ee/0xf70
[ 1731.207084][T27384]  ? file_end_write+0x1b0/0x1b0
[ 1731.211958][T27384]  ? __fget_files+0x2c4/0x320
[ 1731.216662][T27384]  ? __fdget_pos+0x1f7/0x380
[ 1731.221274][T27384]  ? ksys_write+0x71/0x240
[ 1731.225712][T27384]  ksys_write+0x140/0x240
[ 1731.230064][T27384]  ? __ia32_sys_read+0x90/0x90
[ 1731.234849][T27384]  ? debug_smp_processor_id+0x17/0x20
[ 1731.240488][T27384]  __x64_sys_write+0x7b/0x90
[ 1731.245107][T27384]  x64_sys_call+0x8ef/0x9a0
[ 1731.249638][T27384]  do_syscall_64+0x4c/0xa0
[ 1731.254076][T27384]  ? clear_bhb_loop+0x50/0xa0
[ 1731.258788][T27384]  ? clear_bhb_loop+0x50/0xa0
[ 1731.263490][T27384]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 1731.269409][T27384] RIP: 0033:0x7ff81e27d929
[ 1731.273865][T27384] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1731.293502][T27384] RSP: 002b:00007ff81c8c5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 1731.301951][T27384] RAX: ffffffffffffffda RBX: 00007ff81e4a5080 RCX: 00007ff81e27d929
[ 1731.309949][T27384] RDX: 0000000000002250 RSI: 0000200000000040 RDI: 0000000000000004
[ 1731.317941][T27384] RBP: 00007ff81c8c5090 R08: 0000000000000000 R09: 0000000000000000
[ 1731.325928][T27384] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1731.333910][T27384] R13: 0000000000000000 R14: 00007ff81e4a5080 R15: 00007fff3220c278
[ 1731.341903][T27384]  </TASK>
[ 1731.476990][T21459] usb 3-1: new high-speed USB device number 102 using dummy_hcd
[ 1732.218453][T27397] netlink: 48 bytes leftover after parsing attributes in process `syz.3.8969'.
[ 1732.587155][T19769] usb 2-1: new high-speed USB device number 100 using dummy_hcd
[ 1732.748202][T21459] usb 3-1: Using ep0 maxpacket: 8
[ 1732.799085][   T30] kauditd_printk_skb: 167 callbacks suppressed
[ 1732.799103][   T30] audit: type=1326 audit(1750171265.568:36526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27403 comm="syz.4.8971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d60b6a929 code=0x7ffc0000
[ 1732.829743][   T30] audit: type=1326 audit(1750171265.568:36527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27403 comm="syz.4.8971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d60b6a929 code=0x7ffc0000
[ 1732.854131][   T30] audit: type=1326 audit(1750171265.568:36528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27403 comm="syz.4.8971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2d60b6a929 code=0x7ffc0000
[ 1732.877831][   T30] audit: type=1326 audit(1750171265.568:36529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27403 comm="syz.4.8971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d60b6a929 code=0x7ffc0000
[ 1732.901694][T19769] usb 2-1: Using ep0 maxpacket: 16
[ 1732.910545][   T30] audit: type=1326 audit(1750171265.568:36530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27403 comm="syz.4.8971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d60b6a929 code=0x7ffc0000
[ 1732.934746][   T30] audit: type=1326 audit(1750171265.568:36531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27403 comm="syz.4.8971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2d60b6a929 code=0x7ffc0000
[ 1732.959401][   T30] audit: type=1326 audit(1750171265.598:36532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27403 comm="syz.4.8971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d60b6a929 code=0x7ffc0000
[ 1732.983731][   T30] audit: type=1326 audit(1750171265.598:36533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27403 comm="syz.4.8971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d60b6a929 code=0x7ffc0000
[ 1733.007788][   T30] audit: type=1326 audit(1750171265.598:36534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27403 comm="syz.4.8971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2d60b6a929 code=0x7ffc0000
[ 1733.031841][T21459] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[ 1733.042253][   T30] audit: type=1326 audit(1750171265.598:36535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27403 comm="syz.4.8971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d60b6a929 code=0x7ffc0000
[ 1733.104049][T19769] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1733.115438][T21459] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1733.124524][T19769] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1733.134485][T21459] usb 3-1: config 1 interface 0 altsetting 0 has an invalid endpoint descriptor of length 2, skipping
[ 1733.145945][T19769] usb 2-1: config 0 interface 0 has no altsetting 0
[ 1734.623531][T27417] 9pnet: Insufficient options for proto=fd
[ 1734.712456][T21459] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 1734.725380][T19769] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[ 1734.742322][T19769] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1734.797788][T19769] usb 2-1: config 0 descriptor??
[ 1734.813590][T21459] usb 3-1: string descriptor 0 read error: -71
[ 1734.820466][T19769] usb 2-1: can't set config #0, error -71
[ 1734.826487][T21459] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1734.851170][T19769] usb 2-1: USB disconnect, device number 100
[ 1734.857258][T21459] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1734.887086][T21459] usb 3-1: can't set config #1, error -71
[ 1734.900976][T21459] usb 3-1: USB disconnect, device number 102
[ 1735.797733][T27448] kvm [27446]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc0010007 data 0x0
[ 1735.997044][ T1520] usb 4-1: new high-speed USB device number 93 using dummy_hcd
[ 1736.117025][T19769] usb 5-1: new full-speed USB device number 106 using dummy_hcd
[ 1736.172782][T27453] 9pnet: Insufficient options for proto=fd
[ 1736.386972][T19769] usb 5-1: device descriptor read/64, error -71
[ 1736.574654][T27462] netlink: 48 bytes leftover after parsing attributes in process `syz.1.8992'.
[ 1736.787044][T19769] usb 5-1: device descriptor read/64, error -71
[ 1737.057104][T19769] usb 5-1: new full-speed USB device number 107 using dummy_hcd
[ 1737.547012][T19769] usb 5-1: device descriptor read/64, error -71
[ 1737.615505][T27482] 9pnet: Insufficient options for proto=fd
[ 1737.813973][   T30] kauditd_printk_skb: 275 callbacks suppressed
[ 1737.814002][   T30] audit: type=1400 audit(1750171270.578:36811): avc:  denied  { unlink } for  pid=27484 comm="syz.2.9001" name="#d5" dev="tmpfs" ino=3270 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[ 1737.845616][T27485] overlayfs: failed to resolve './file0': -2
[ 1738.614513][   T30] audit: type=1326 audit(1750171271.348:36812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27475 comm="syz.0.8998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdeda0e929 code=0x7ffc0000
[ 1738.701086][   T30] audit: type=1326 audit(1750171271.348:36813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27475 comm="syz.0.8998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdeda0e929 code=0x7ffc0000
[ 1738.783776][   T30] audit: type=1400 audit(1750171271.498:36814): avc:  denied  { create } for  pid=27488 comm="syz.3.9002" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[ 1738.824183][   T30] audit: type=1400 audit(1750171271.538:36815): avc:  denied  { append } for  pid=27489 comm="syz.0.9003" name="001" dev="devtmpfs" ino=181 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[ 1738.856158][   T30] audit: type=1400 audit(1750171271.568:36816): avc:  denied  { read write } for  pid=27492 comm="syz.4.9004" name="raw-gadget" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 1738.880789][   T30] audit: type=1400 audit(1750171271.568:36817): avc:  denied  { open } for  pid=27492 comm="syz.4.9004" path="/dev/raw-gadget" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 1738.904800][   T30] audit: type=1400 audit(1750171271.578:36818): avc:  denied  { setopt } for  pid=27492 comm="syz.4.9004" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[ 1738.933547][   T30] audit: type=1400 audit(1750171271.588:36819): avc:  denied  { module_request } for  pid=27492 comm="syz.4.9004" kmod="ip6t_" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[ 1738.951574][T27499] netlink: 48 bytes leftover after parsing attributes in process `syz.2.9005'.
[ 1738.968648][   T30] audit: type=1400 audit(1750171271.588:36820): avc:  denied  { write } for  pid=27495 comm="syz.1.9006" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[ 1739.346979][ T1520] usb 4-1: new high-speed USB device number 94 using dummy_hcd
[ 1739.617342][ T1520] usb 4-1: Using ep0 maxpacket: 16
[ 1739.736999][ T1520] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1739.756716][ T1520] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1739.784702][ T1520] usb 4-1: config 0 interface 0 has no altsetting 0
[ 1739.803711][ T1520] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[ 1739.813642][ T1520] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1739.827388][ T1520] usb 4-1: config 0 descriptor??
[ 1740.259976][ T1520] usbhid 4-1:0.0: can't add hid device: -71
[ 1740.265953][ T1520] usbhid: probe of 4-1:0.0 failed with error -71
[ 1740.278717][ T1520] usb 4-1: USB disconnect, device number 94
[ 1740.457960][T27535] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1740.465441][T27535] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1740.473633][T27535] device bridge_slave_0 entered promiscuous mode
[ 1740.488775][T27535] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1740.495999][T27535] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1740.503975][T27535] device bridge_slave_1 entered promiscuous mode
[ 1740.526978][T17647] usb 1-1: new full-speed USB device number 95 using dummy_hcd
[ 1740.574170][T27535] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1740.581278][T27535] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1740.588639][T27535] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1740.595685][T27535] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1740.632798][T26643] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 1740.643081][T26643] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1740.651673][T26643] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1740.671911][T26643] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 1740.680312][T26643] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1740.687397][T26643] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1740.702674][T26643] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 1740.711132][T26643] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1740.718217][T26643] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1740.731134][T26643] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 1740.740979][T26643] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 1740.759717][T26643] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 1740.771800][T26643] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 1740.780128][T26643] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 1740.788403][T26643] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 1740.800729][T27535] device veth0_vlan entered promiscuous mode
[ 1740.806973][T17647] usb 1-1: device descriptor read/64, error -71
[ 1740.814592][T26643] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 1740.824127][T27535] device veth1_macvtap entered promiscuous mode
[ 1740.834429][T26643] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 1740.847700][T26643] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 1740.917752][   T45] device bridge_slave_1 left promiscuous mode
[ 1740.923916][   T45] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1740.931557][   T45] device bridge_slave_0 left promiscuous mode
[ 1740.937932][   T45] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1740.946106][   T45] device veth1_macvtap left promiscuous mode
[ 1740.952388][   T45] device veth0_vlan left promiscuous mode
[ 1741.193139][ T1520] usb 2-1: new high-speed USB device number 101 using dummy_hcd
[ 1741.249158][T17647] usb 1-1: device descriptor read/64, error -71
[ 1741.397009][T21459] usb 3-1: new high-speed USB device number 103 using dummy_hcd
[ 1741.486980][ T1520] usb 2-1: Using ep0 maxpacket: 8
[ 1741.516999][T17647] usb 1-1: new full-speed USB device number 96 using dummy_hcd
[ 1741.637052][T21459] usb 3-1: Using ep0 maxpacket: 8
[ 1741.707108][ T1520] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[ 1741.717501][ T1520] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1741.726572][ T1520] usb 2-1: config 1 interface 0 altsetting 0 has an invalid endpoint descriptor of length 2, skipping
[ 1741.737726][ T1520] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 1741.807016][T17647] usb 1-1: device descriptor read/64, error -71
[ 1741.904968][T21459] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[ 1741.915198][T21459] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1741.924398][T21459] usb 3-1: config 1 interface 0 altsetting 0 has an invalid endpoint descriptor of length 2, skipping
[ 1741.935655][T21459] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 1741.960036][ T1520] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1741.983664][ T1520] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1742.119809][ T1520] usb 2-1: Product: ᠁
[ 1742.124131][ T1520] usb 2-1: Manufacturer: ఄ
[ 1742.150634][ T1520] usb 2-1: SerialNumber: љ
[ 1742.547482][ T1520] usb 2-1: 0:2 : does not exist
[ 1742.598192][ T1520] usb 2-1: USB disconnect, device number 101
[ 1743.101238][   T30] kauditd_printk_skb: 251 callbacks suppressed
[ 1743.101257][   T30] audit: type=1400 audit(1750171275.858:37072): avc:  denied  { unmount } for  pid=18541 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[ 1743.159400][   T30] audit: type=1400 audit(1750171275.928:37073): avc:  denied  { create } for  pid=27567 comm="syz.4.9030" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[ 1743.179975][   T30] audit: type=1400 audit(1750171275.938:37074): avc:  denied  { create } for  pid=27567 comm="syz.4.9030" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 1743.201903][   T30] audit: type=1400 audit(1750171275.938:37075): avc:  denied  { write } for  pid=27567 comm="syz.4.9030" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 1743.222869][   T30] audit: type=1400 audit(1750171275.938:37076): avc:  denied  { read } for  pid=27567 comm="syz.4.9030" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 1743.245481][   T30] audit: type=1400 audit(1750171276.008:37077): avc:  denied  { read write } for  pid=27569 comm="syz.3.9031" name="raw-gadget" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 1743.270248][T21459] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1743.274020][   T30] audit: type=1400 audit(1750171276.008:37078): avc:  denied  { open } for  pid=27569 comm="syz.3.9031" path="/dev/raw-gadget" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 1743.335985][T21459] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1743.344353][T21459] usb 3-1: Product: ᠁
[ 1743.348807][T21459] usb 3-1: Manufacturer: ఄ
[ 1743.353420][T21459] usb 3-1: SerialNumber: љ
[ 1743.368402][   T30] audit: type=1400 audit(1750171276.138:37079): avc:  denied  { getopt } for  pid=27567 comm="syz.4.9030" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[ 1743.402900][T27425] udevd[27425]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[ 1743.725503][   T30] audit: type=1326 audit(1750171276.468:37080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27579 comm="syz.1.9033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9980583929 code=0x7ffc0000
[ 1743.749407][ T4701] usb 4-1: new high-speed USB device number 95 using dummy_hcd
[ 1743.765778][   T30] audit: type=1326 audit(1750171276.468:37081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27579 comm="syz.1.9033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9980583929 code=0x7ffc0000
[ 1744.267074][T21459] usb 3-1: 0:2 : does not exist
[ 1744.272053][ T4701] usb 4-1: Using ep0 maxpacket: 16
[ 1744.280753][T21459] usb 3-1: USB disconnect, device number 103
[ 1744.397049][ T4701] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1744.408935][ T4701] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1744.420122][ T4701] usb 4-1: config 0 interface 0 has no altsetting 0
[ 1744.428445][ T4701] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[ 1744.437931][ T4701] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1744.448661][ T4701] usb 4-1: config 0 descriptor??
[ 1744.712368][T27425] udevd[27425]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[ 1745.717012][ T4701] usbhid 4-1:0.0: can't add hid device: -71
[ 1745.724231][ T4701] usbhid: probe of 4-1:0.0 failed with error -71
[ 1745.738534][ T4701] usb 4-1: USB disconnect, device number 95
[ 1749.149779][   T30] kauditd_printk_skb: 88 callbacks suppressed
[ 1749.149806][   T30] audit: type=1400 audit(1750171281.918:37170): avc:  denied  { create } for  pid=27640 comm="syz.4.9052" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[ 1749.193583][   T30] audit: type=1326 audit(1750171281.958:37171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27640 comm="syz.4.9052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d60b6a929 code=0x7ffc0000
[ 1749.196152][   T30] audit: type=1326 audit(1750171281.958:37172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27640 comm="syz.4.9052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d60b6a929 code=0x7ffc0000
[ 1749.219993][   T30] audit: type=1326 audit(1750171281.988:37173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27640 comm="syz.4.9052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2d60b6a929 code=0x7ffc0000
[ 1749.230245][   T30] audit: type=1326 audit(1750171281.998:37174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27640 comm="syz.4.9052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d60b6a929 code=0x7ffc0000
[ 1749.231712][   T30] audit: type=1326 audit(1750171281.998:37175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27640 comm="syz.4.9052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d60b6a929 code=0x7ffc0000
[ 1749.249659][   T30] audit: type=1326 audit(1750171282.018:37176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27640 comm="syz.4.9052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2d60b6a929 code=0x7ffc0000
[ 1749.252896][   T30] audit: type=1326 audit(1750171282.018:37177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27640 comm="syz.4.9052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d60b6a929 code=0x7ffc0000
[ 1749.254246][   T30] audit: type=1326 audit(1750171282.018:37178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27640 comm="syz.4.9052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d60b6a929 code=0x7ffc0000
[ 1749.263843][   T30] audit: type=1326 audit(1750171282.028:37179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27640 comm="syz.4.9052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f2d60b6a929 code=0x7ffc0000
[ 1750.237014][T25436] usb 4-1: new high-speed USB device number 96 using dummy_hcd
[ 1750.537125][T25436] usb 4-1: Using ep0 maxpacket: 16
[ 1750.657378][T25436] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1751.232627][T25436] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1751.243287][T25436] usb 4-1: config 0 interface 0 has no altsetting 0
[ 1751.250115][T25436] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[ 1751.277224][T25436] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1751.364739][T27669] netlink: 60 bytes leftover after parsing attributes in process `syz.1.9061'.
[ 1751.426757][T25436] usb 4-1: config 0 descriptor??
[ 1752.536161][T25436] usbhid 4-1:0.0: can't add hid device: -71
[ 1752.542848][T25436] usbhid: probe of 4-1:0.0 failed with error -71
[ 1752.554191][T25436] usb 4-1: USB disconnect, device number 96
[ 1752.719203][ T3348] usb 1-1: new high-speed USB device number 97 using dummy_hcd
[ 1752.986989][ T3348] usb 1-1: Using ep0 maxpacket: 8
[ 1754.260367][T27706] FAULT_INJECTION: forcing a failure.
[ 1754.260367][T27706] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1754.287047][ T3348] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[ 1754.299366][T27706] CPU: 1 PID: 27706 Comm: syz.1.9075 Not tainted 5.15.185-syzkaller-00339-ge678c93d43cc #0
[ 1754.309383][T27706] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 1754.319462][T27706] Call Trace:
[ 1754.322767][T27706]  <TASK>
[ 1754.325720][T27706]  __dump_stack+0x21/0x30
[ 1754.330077][T27706]  dump_stack_lvl+0xee/0x150
[ 1754.334221][   T30] kauditd_printk_skb: 89 callbacks suppressed
[ 1754.334240][   T30] audit: type=1400 audit(1750171287.068:37269): avc:  denied  { create } for  pid=27710 comm="syz.3.9077" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[ 1754.334686][T27706]  ? show_regs_print_info+0x20/0x20
[ 1754.360694][   T30] audit: type=1400 audit(1750171287.128:37270): avc:  denied  { map_read map_write } for  pid=27709 comm="syz.4.9078" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[ 1754.365555][T27706]  dump_stack+0x15/0x20
[ 1754.365583][T27706]  should_fail+0x3c1/0x510
[ 1754.394089][T27706]  should_fail_usercopy+0x1a/0x20
[ 1754.399131][T27706]  _copy_to_user+0x20/0x90
[ 1754.403570][T27706]  do_fcntl+0xa99/0x1150
[ 1754.407831][T27706]  ? __kasan_check_write+0x14/0x20
[ 1754.412956][T27706]  ? __mutex_lock_slowpath+0x10/0x10
[ 1754.418247][T27706]  ? kill_fasync+0x210/0x210
[ 1754.422848][T27706]  ? __fget_files+0x2c4/0x320
[ 1754.427532][T27706]  ? security_file_fcntl+0x84/0xa0
[ 1754.432650][T27706]  __se_sys_fcntl+0xdf/0x1b0
[ 1754.437242][T27706]  ? debug_smp_processor_id+0x17/0x20
[ 1754.442614][T27706]  __x64_sys_fcntl+0x7b/0x90
[ 1754.447209][T27706]  x64_sys_call+0x6b8/0x9a0
[ 1754.451735][T27706]  do_syscall_64+0x4c/0xa0
[ 1754.456166][T27706]  ? clear_bhb_loop+0x50/0xa0
[ 1754.460851][T27706]  ? clear_bhb_loop+0x50/0xa0
[ 1754.465536][T27706]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 1754.471432][T27706] RIP: 0033:0x7f9980583929
[ 1754.475853][T27706] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1754.495461][T27706] RSP: 002b:00007f997ebec038 EFLAGS: 00000246 ORIG_RAX: 0000000000000048
[ 1754.503878][T27706] RAX: ffffffffffffffda RBX: 00007f99807aafa0 RCX: 00007f9980583929
[ 1754.511852][T27706] RDX: 0000200000000080 RSI: 0000000000000010 RDI: 0000000000000004
[ 1754.519827][T27706] RBP: 00007f997ebec090 R08: 0000000000000000 R09: 0000000000000000
[ 1754.527804][T27706] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1754.535781][T27706] R13: 0000000000000000 R14: 00007f99807aafa0 R15: 00007ffdac7b5788
[ 1754.543764][T27706]  </TASK>
[ 1754.550039][ T3348] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1754.562450][ T3348] usb 1-1: config 1 interface 0 altsetting 0 has an invalid endpoint descriptor of length 2, skipping
[ 1754.574445][   T30] audit: type=1400 audit(1750171287.318:37271): avc:  denied  { prog_run } for  pid=27709 comm="syz.4.9078" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[ 1754.594151][ T3348] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 1754.608606][   T30] audit: type=1400 audit(1750171287.318:37272): avc:  denied  { read write } for  pid=27712 comm="syz.3.9079" name="raw-gadget" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 1754.633027][   T30] audit: type=1400 audit(1750171287.318:37273): avc:  denied  { open } for  pid=27712 comm="syz.3.9079" path="/dev/raw-gadget" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 1754.660415][ T3348] usb 1-1: string descriptor 0 read error: -71
[ 1754.666677][ T3348] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1754.676344][ T3348] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1754.679301][T27713] netlink: 48 bytes leftover after parsing attributes in process `syz.4.9078'.
[ 1754.694579][   T30] audit: type=1400 audit(1750171287.328:37274): avc:  denied  { create } for  pid=27712 comm="syz.3.9079" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[ 1754.714558][ T3348] usb 1-1: can't set config #1, error -71
[ 1754.723088][   T30] audit: type=1400 audit(1750171287.328:37275): avc:  denied  { setopt } for  pid=27712 comm="syz.3.9079" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[ 1754.758091][   T30] audit: type=1400 audit(1750171287.338:37276): avc:  denied  { module_request } for  pid=27712 comm="syz.3.9079" kmod="ip6t_" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[ 1754.780240][   T30] audit: type=1400 audit(1750171287.378:37277): avc:  denied  { create } for  pid=27715 comm="syz.0.9080" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[ 1754.800497][   T30] audit: type=1400 audit(1750171287.378:37278): avc:  denied  { write } for  pid=27712 comm="syz.3.9079" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[ 1754.887426][ T3348] usb 1-1: USB disconnect, device number 97
[ 1757.551715][T27761] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9095'.
[ 1757.681679][T27768] netlink: 48 bytes leftover after parsing attributes in process `syz.0.9098'.
[ 1759.912535][   T30] kauditd_printk_skb: 177 callbacks suppressed
[ 1759.912562][   T30] audit: type=1400 audit(1750171292.678:37456): avc:  denied  { create } for  pid=27803 comm="syz.1.9111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[ 1760.316319][   T30] audit: type=1400 audit(1750171292.788:37457): avc:  denied  { mounton } for  pid=27803 comm="syz.1.9111" path="/44/bus" dev="tmpfs" ino=271 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[ 1760.418602][   T30] audit: type=1400 audit(1750171292.918:37458): avc:  denied  { unlink } for  pid=27803 comm="syz.1.9111" name="#d9" dev="tmpfs" ino=275 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[ 1760.455191][   T30] audit: type=1400 audit(1750171292.938:37459): avc:  denied  { mount } for  pid=27803 comm="syz.1.9111" name="/" dev="overlay" ino=269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[ 1760.486149][   T30] audit: type=1400 audit(1750171292.948:37460): avc:  denied  { create } for  pid=27803 comm="syz.1.9111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[ 1760.506456][   T30] audit: type=1400 audit(1750171292.988:37461): avc:  denied  { connect } for  pid=27803 comm="syz.1.9111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[ 1760.527230][   T30] audit: type=1400 audit(1750171292.988:37462): avc:  denied  { bind } for  pid=27803 comm="syz.1.9111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[ 1760.893810][   T30] audit: type=1400 audit(1750171293.028:37463): avc:  denied  { read write } for  pid=27807 comm="syz.4.9113" name="raw-gadget" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 1760.919763][   T30] audit: type=1400 audit(1750171293.028:37464): avc:  denied  { open } for  pid=27807 comm="syz.4.9113" path="/dev/raw-gadget" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 1760.943923][   T30] audit: type=1400 audit(1750171293.028:37465): avc:  denied  { ioctl } for  pid=27807 comm="syz.4.9113" path="/dev/raw-gadget" dev="devtmpfs" ino=254 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 1764.436018][T27890] netlink: 48 bytes leftover after parsing attributes in process `syz.1.9141'.
[ 1764.477162][T25436] usb 1-1: new high-speed USB device number 98 using dummy_hcd
[ 1765.668796][   T30] kauditd_printk_skb: 115 callbacks suppressed
[ 1765.668813][   T30] audit: type=1326 audit(1750171298.438:37581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27898 comm="syz.4.9145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d60b6a929 code=0x7ffc0000
[ 1765.730387][   T30] audit: type=1326 audit(1750171298.468:37582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27898 comm="syz.4.9145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2d60b6a929 code=0x7ffc0000
[ 1765.819561][   T30] audit: type=1326 audit(1750171298.468:37583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27898 comm="syz.4.9145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d60b6a929 code=0x7ffc0000
[ 1765.861317][   T30] audit: type=1326 audit(1750171298.468:37584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27898 comm="syz.4.9145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2d60b6a929 code=0x7ffc0000
[ 1765.896312][   T30] audit: type=1326 audit(1750171298.468:37585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27898 comm="syz.4.9145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d60b6a929 code=0x7ffc0000
[ 1765.928079][   T30] audit: type=1326 audit(1750171298.468:37586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27898 comm="syz.4.9145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f2d60b6a929 code=0x7ffc0000
[ 1765.952498][   T30] audit: type=1326 audit(1750171298.468:37587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27898 comm="syz.4.9145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d60b6a929 code=0x7ffc0000
[ 1765.976180][   T30] audit: type=1326 audit(1750171298.468:37588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27898 comm="syz.4.9145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7f2d60b6a929 code=0x7ffc0000
[ 1765.999781][T25436] usb 1-1: Using ep0 maxpacket: 16
[ 1766.074020][T27914] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9147'.
[ 1766.334882][   T30] audit: type=1326 audit(1750171298.468:37589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27898 comm="syz.4.9145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d60b6a929 code=0x7ffc0000
[ 1766.388294][   T30] audit: type=1326 audit(1750171298.468:37590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27898 comm="syz.4.9145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f2d60b6a929 code=0x7ffc0000
[ 1766.467179][T25436] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1766.571801][T25436] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1766.665532][T25436] usb 1-1: config 0 interface 0 has no altsetting 0
[ 1766.837108][T25436] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[ 1766.989594][T25436] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1767.104151][T25436] usb 1-1: config 0 descriptor??
[ 1767.137328][T25436] usb 1-1: can't set config #0, error -71
[ 1767.147168][T25436] usb 1-1: USB disconnect, device number 98
[ 1768.357641][T27946] FAULT_INJECTION: forcing a failure.
[ 1768.357641][T27946] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1768.370784][T27946] CPU: 1 PID: 27946 Comm: syz.4.9159 Not tainted 5.15.185-syzkaller-00339-ge678c93d43cc #0
[ 1768.380782][T27946] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 1768.390854][T27946] Call Trace:
[ 1768.394145][T27946]  <TASK>
[ 1768.397087][T27946]  __dump_stack+0x21/0x30
[ 1768.401434][T27946]  dump_stack_lvl+0xee/0x150
[ 1768.406037][T27946]  ? show_regs_print_info+0x20/0x20
[ 1768.411252][T27946]  dump_stack+0x15/0x20
[ 1768.415528][T27946]  should_fail+0x3c1/0x510
[ 1768.419980][T27946]  should_fail_usercopy+0x1a/0x20
[ 1768.425036][T27946]  _copy_from_user+0x20/0xd0
[ 1768.429674][T27946]  __copy_msghdr_from_user+0xaf/0x5e0
[ 1768.435067][T27946]  ? do_kern_addr_fault+0x6b/0x80
[ 1768.440108][T27946]  ? __ia32_sys_shutdown+0x1e0/0x1e0
[ 1768.445486][T27946]  ? find_lowest_rq+0x172/0x660
[ 1768.450357][T27946]  ___sys_sendmsg+0x156/0x260
[ 1768.455059][T27946]  ? __sys_sendmsg+0x250/0x250
[ 1768.459836][T27946]  ? __kasan_check_write+0x14/0x20
[ 1768.465094][T27946]  ? push_rt_task+0x35f/0x5b0
[ 1768.469799][T27946]  ? __fdget+0x1a1/0x230
[ 1768.474059][T27946]  __x64_sys_sendmsg+0x1e2/0x2a0
[ 1768.479025][T27946]  ? release_firmware_map_entry+0x190/0x190
[ 1768.484949][T27946]  ? ___sys_sendmsg+0x260/0x260
[ 1768.489824][T27946]  ? ksys_write+0x1eb/0x240
[ 1768.494348][T27946]  ? __kasan_check_write+0x14/0x20
[ 1768.499484][T27946]  ? switch_fpu_return+0x15d/0x2c0
[ 1768.504622][T27946]  x64_sys_call+0x4b/0x9a0
[ 1768.509173][T27946]  do_syscall_64+0x4c/0xa0
[ 1768.513616][T27946]  ? clear_bhb_loop+0x50/0xa0
[ 1768.518315][T27946]  ? clear_bhb_loop+0x50/0xa0
[ 1768.523009][T27946]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 1768.528930][T27946] RIP: 0033:0x7f2d60b6a929
[ 1768.533375][T27946] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1768.553003][T27946] RSP: 002b:00007f2d5f191038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1768.561442][T27946] RAX: ffffffffffffffda RBX: 00007f2d60d92160 RCX: 00007f2d60b6a929
[ 1768.569459][T27946] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000008
[ 1768.577435][T27946] RBP: 00007f2d5f191090 R08: 0000000000000000 R09: 0000000000000000
[ 1768.585417][T27946] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1768.593434][T27946] R13: 0000000000000000 R14: 00007f2d60d92160 R15: 00007ffd96b0f578
[ 1768.601419][T27946]  </TASK>
[ 1768.770910][T27959] FAULT_INJECTION: forcing a failure.
[ 1768.770910][T27959] name failslab, interval 1, probability 0, space 0, times 0
[ 1768.783821][T27959] CPU: 0 PID: 27959 Comm: syz.3.9166 Not tainted 5.15.185-syzkaller-00339-ge678c93d43cc #0
[ 1768.793832][T27959] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 1768.803911][T27959] Call Trace:
[ 1768.807232][T27959]  <TASK>
[ 1768.810199][T27959]  __dump_stack+0x21/0x30
[ 1768.814558][T27959]  dump_stack_lvl+0xee/0x150
[ 1768.819193][T27959]  ? show_regs_print_info+0x20/0x20
[ 1768.824436][T27959]  dump_stack+0x15/0x20
[ 1768.828633][T27959]  should_fail+0x3c1/0x510
[ 1768.833097][T27959]  __should_failslab+0xa4/0xe0
[ 1768.837893][T27959]  should_failslab+0x9/0x20
[ 1768.842425][T27959]  slab_pre_alloc_hook+0x3b/0xe0
[ 1768.847391][T27959]  ? getname_flags+0xb9/0x500
[ 1768.852102][T27959]  kmem_cache_alloc+0x44/0x260
[ 1768.856903][T27959]  getname_flags+0xb9/0x500
[ 1768.861447][T27959]  user_path_at_empty+0x30/0x1c0
[ 1768.866414][T27959]  do_utimes+0x138/0x2a0
[ 1768.870683][T27959]  ? vfs_utimes+0x570/0x570
[ 1768.875213][T27959]  __x64_sys_utime+0x12a/0x1d0
[ 1768.880001][T27959]  ? __ia32_sys_utimes+0x220/0x220
[ 1768.885141][T27959]  ? __bpf_trace_sys_enter+0x62/0x70
[ 1768.890467][T27959]  ? trace_sys_enter+0x3d/0x50
[ 1768.895256][T27959]  x64_sys_call+0x8a2/0x9a0
[ 1768.899787][T27959]  do_syscall_64+0x4c/0xa0
[ 1768.904224][T27959]  ? clear_bhb_loop+0x50/0xa0
[ 1768.908917][T27959]  ? clear_bhb_loop+0x50/0xa0
[ 1768.913617][T27959]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 1768.919537][T27959] RIP: 0033:0x7ff81e27d929
[ 1768.924263][T27959] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1768.944228][T27959] RSP: 002b:00007ff81c8e6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000084
[ 1768.952673][T27959] RAX: ffffffffffffffda RBX: 00007ff81e4a4fa0 RCX: 00007ff81e27d929
[ 1768.960675][T27959] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000200
[ 1768.968684][T27959] RBP: 00007ff81c8e6090 R08: 0000000000000000 R09: 0000000000000000
[ 1768.976658][T27959] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1768.984737][T27959] R13: 0000000000000000 R14: 00007ff81e4a4fa0 R15: 00007fff3220c278
[ 1768.992715][T27959]  </TASK>
[ 1769.263533][T27971] FAULT_INJECTION: forcing a failure.
[ 1769.263533][T27971] name failslab, interval 1, probability 0, space 0, times 0
[ 1769.276290][T27971] CPU: 1 PID: 27971 Comm: syz.3.9169 Not tainted 5.15.185-syzkaller-00339-ge678c93d43cc #0
[ 1769.286289][T27971] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 1769.296356][T27971] Call Trace:
[ 1769.299646][T27971]  <TASK>
[ 1769.302594][T27971]  __dump_stack+0x21/0x30
[ 1769.306941][T27971]  dump_stack_lvl+0xee/0x150
[ 1769.311670][T27971]  ? show_regs_print_info+0x20/0x20
[ 1769.316908][T27971]  ? security_file_permission+0x79/0xa0
[ 1769.322491][T27971]  dump_stack+0x15/0x20
[ 1769.326666][T27971]  should_fail+0x3c1/0x510
[ 1769.331100][T27971]  __should_failslab+0xa4/0xe0
[ 1769.335881][T27971]  should_failslab+0x9/0x20
[ 1769.340402][T27971]  slab_pre_alloc_hook+0x3b/0xe0
[ 1769.345354][T27971]  ? __se_sys_mount+0x9c/0x380
[ 1769.350138][T27971]  __kmalloc_track_caller+0x6c/0x2c0
[ 1769.355438][T27971]  ? __se_sys_mount+0x9c/0x380
[ 1769.360223][T27971]  ? strnlen_user+0xe8/0x1c0
[ 1769.364834][T27971]  strndup_user+0x74/0x150
[ 1769.369261][T27971]  __se_sys_mount+0x9c/0x380
[ 1769.373865][T27971]  ? fput+0x1a/0x20
[ 1769.377707][T27971]  ? __x64_sys_mount+0xd0/0xd0
[ 1769.382508][T27971]  ? __kasan_check_write+0x14/0x20
[ 1769.387652][T27971]  __x64_sys_mount+0xbf/0xd0
[ 1769.392311][T27971]  x64_sys_call+0x6bf/0x9a0
[ 1769.396837][T27971]  do_syscall_64+0x4c/0xa0
[ 1769.401271][T27971]  ? clear_bhb_loop+0x50/0xa0
[ 1769.405980][T27971]  ? clear_bhb_loop+0x50/0xa0
[ 1769.410683][T27971]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 1769.416604][T27971] RIP: 0033:0x7ff81e27d929
[ 1769.421046][T27971] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1769.440669][T27971] RSP: 002b:00007ff81c8a4038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 1769.449101][T27971] RAX: ffffffffffffffda RBX: 00007ff81e4a5160 RCX: 00007ff81e27d929
[ 1769.457253][T27971] RDX: 0000200000000180 RSI: 0000200000000040 RDI: 0000000000000000
[ 1769.465246][T27971] RBP: 00007ff81c8a4090 R08: 00002000000004c0 R09: 0000000000000000
[ 1769.473232][T27971] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1769.481206][T27971] R13: 0000000000000000 R14: 00007ff81e4a5160 R15: 00007fff3220c278
[ 1769.489188][T27971]  </TASK>
[ 1770.576977][    C0] ------------[ cut here ]------------
[ 1770.582495][    C0] refcount_t: addition on 0; use-after-free.
[ 1770.588677][    C0] WARNING: CPU: 0 PID: 28006 at lib/refcount.c:25 refcount_warn_saturate+0x104/0x1a0
[ 1770.598236][    C0] Modules linked in:
[ 1770.602248][    C0] CPU: 0 PID: 28006 Comm: syz.2.9182 Not tainted 5.15.185-syzkaller-00339-ge678c93d43cc #0
[ 1770.612277][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 1770.622388][    C0] RIP: 0010:refcount_warn_saturate+0x104/0x1a0
[ 1770.628697][    C0] Code: 04 01 48 c7 c7 60 ef 62 85 e8 08 9d 50 02 0f 0b eb df e8 5f d6 1c ff c6 05 ba f8 99 04 01 48 c7 c7 a0 ee 62 85 e8 ec 9c 50 02 <0f> 0b eb c3 e8 43 d6 1c ff c6 05 9f f8 99 04 01 48 c7 c7 00 ef 62
[ 1770.648462][    C0] RSP: 0018:ffffc900000079e0 EFLAGS: 00010246
[ 1770.654570][    C0] RAX: 4d21f1c779fe5100 RBX: 0000000000000002 RCX: ffff888122d2bb40
[ 1770.662600][    C0] RDX: 0000000000000100 RSI: 0000000000000101 RDI: 0000000000000000
[ 1770.670629][    C0] RBP: ffffc900000079f0 R08: dffffc0000000000 R09: fffff52000000e89
[ 1770.678653][    C0] R10: fffff52000000e89 R11: 1ffff92000000e88 R12: ffff8881106b9a08
[ 1770.686652][    C0] R13: dffffc0000000000 R14: 0000000000000002 R15: ffffc90000007ba0
[ 1770.694691][    C0] FS:  0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000
[ 1770.703676][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1770.710306][    C0] CR2: 0000555564d0a4a8 CR3: 000000015c3ec000 CR4: 00000000003506b0
[ 1770.718339][    C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 1770.726330][    C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 1770.734351][    C0] Call Trace:
[ 1770.737670][    C0]  <IRQ>
[ 1770.740527][    C0]  tipc_crypto_xmit+0x1938/0x2400
[ 1770.745575][    C0]  ? tipc_crypto_do_cmd+0xcf0/0xcf0
[ 1770.750816][    C0]  ? __copy_skb_header+0x437/0x600
[ 1770.755959][    C0]  tipc_bearer_xmit_skb+0x226/0x360
[ 1770.761200][    C0]  ? __skb_clone+0x47a/0x790
[ 1770.765890][    C0]  ? tipc_bearer_mtu+0x160/0x160
[ 1770.770866][    C0]  ? skb_clone+0x202/0x360
[ 1770.775292][    C0]  tipc_disc_timeout+0x6a2/0x830
[ 1770.780273][    C0]  ? update_rq_clock+0x4f0/0x580
[ 1770.785224][    C0]  ? tipc_disc_init_msg+0x600/0x600
[ 1770.790552][    C0]  ? __kasan_check_write+0x14/0x20
[ 1770.795689][    C0]  ? _raw_spin_lock_irqsave+0x110/0x110
[ 1770.801273][    C0]  ? tipc_disc_init_msg+0x600/0x600
[ 1770.806490][    C0]  call_timer_fn+0x38/0x290
[ 1770.811044][    C0]  ? tipc_disc_init_msg+0x600/0x600
[ 1770.816263][    C0]  __run_timers+0x639/0x9a0
[ 1770.820808][    C0]  ? calc_index+0x200/0x200
[ 1770.825326][    C0]  ? sched_clock_cpu+0x18/0x3c0
[ 1770.830208][    C0]  run_timer_softirq+0x6a/0xf0
[ 1770.834996][    C0]  handle_softirqs+0x250/0x560
[ 1770.839892][    C0]  __irq_exit_rcu+0x52/0xf0
[ 1770.844424][    C0]  irq_exit_rcu+0x9/0x10
[ 1770.848704][    C0]  sysvec_apic_timer_interrupt+0xa9/0xc0
[ 1770.854353][    C0]  </IRQ>
[ 1770.857311][    C0]  <TASK>
[ 1770.860251][    C0]  asm_sysvec_apic_timer_interrupt+0x1b/0x20
[ 1770.866245][    C0] RIP: 0010:_raw_spin_unlock_irqrestore+0x56/0x80
[ 1770.872698][    C0] Code: 39 6d 86 e8 1c 74 01 fd 4c 89 f7 48 83 3d 69 95 c7 01 00 74 31 e8 3e 77 a9 fc 66 90 f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 <e8> 35 5f a1 fc 65 8b 05 16 c9 5c 7b 85 c0 74 05 5b 41 5e 5d c3 e8
[ 1770.892349][    C0] RSP: 0018:ffffc90000d3f680 EFLAGS: 00000206
[ 1770.898558][    C0] RAX: 0000000000000001 RBX: 0000000000000a06 RCX: dffffc0000000000
[ 1770.906631][    C0] RDX: 0000000000000000 RSI: 0000000000000a06 RDI: 0000000000000001
[ 1770.914641][    C0] RBP: ffffc90000d3f690 R08: dffffc0000000000 R09: fffff94000a9c00f
[ 1770.922657][    C0] R10: fffff94000a9c00f R11: 1ffffd4000a9c00e R12: dffffc0000000000
[ 1770.930664][    C0] R13: ffffea0004ca1c00 R14: 0000000000000020 R15: ffffc90000d3f720
[ 1770.938679][    C0]  release_pages+0x18d/0x10d0
[ 1770.943378][    C0]  ? lru_cache_disable+0x30/0x30
[ 1770.948352][    C0]  ? flush_tlb_mm_range+0x354/0x490
[ 1770.953568][    C0]  ? __kasan_check_read+0x11/0x20
[ 1770.958720][    C0]  ? free_swap_cache+0xf1/0x230
[ 1770.963585][    C0]  free_pages_and_swap_cache+0x86/0xa0
[ 1770.969076][    C0]  tlb_finish_mmu+0x175/0x300
[ 1770.973772][    C0]  exit_mmap+0x40f/0x860
[ 1770.978047][    C0]  ? vm_brk+0x30/0x30
[ 1770.982043][    C0]  ? mutex_unlock+0x89/0x220
[ 1770.986653][    C0]  ? uprobe_clear_state+0x2c1/0x320
[ 1770.991892][    C0]  __mmput+0x93/0x320
[ 1770.995901][    C0]  ? mmput+0x48/0x150
[ 1770.999914][    C0]  mmput+0x50/0x150
[ 1771.003739][    C0]  do_exit+0x9ca/0x27a0
[ 1771.007929][    C0]  ? ____sys_sendmsg+0x753/0x8c0
[ 1771.012888][    C0]  ? put_task_struct+0x90/0x90
[ 1771.017685][    C0]  ? futex_exit_release+0x1d0/0x1d0
[ 1771.022898][    C0]  ? cgroup_freezing+0x86/0xb0
[ 1771.027692][    C0]  do_group_exit+0x141/0x310
[ 1771.032298][    C0]  ? __kasan_check_write+0x14/0x20
[ 1771.037449][    C0]  get_signal+0x66a/0x1480
[ 1771.041975][    C0]  arch_do_signal_or_restart+0xc1/0x10f0
[ 1771.047642][    C0]  ? sock_show_fdinfo+0xa0/0xa0
[ 1771.052514][    C0]  ? get_sigframe_size+0x10/0x10
[ 1771.057490][    C0]  ? __se_sys_futex+0x139/0x310
[ 1771.062357][    C0]  ? fput+0x1a/0x20
[ 1771.066182][    C0]  exit_to_user_mode_loop+0xa7/0xe0
[ 1771.071407][    C0]  exit_to_user_mode_prepare+0x5a/0xa0
[ 1771.076879][    C0]  syscall_exit_to_user_mode+0x1a/0x30
[ 1771.082379][    C0]  do_syscall_64+0x58/0xa0
[ 1771.086806][    C0]  ? clear_bhb_loop+0x50/0xa0
[ 1771.091513][    C0]  ? clear_bhb_loop+0x50/0xa0
[ 1771.096222][    C0]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 1771.102173][    C0] RIP: 0033:0x7f3e704c7929
[ 1771.106602][    C0] Code: Unable to access opcode bytes at RIP 0x7f3e704c78ff.
[ 1771.114010][    C0] RSP: 002b:00007f3e6eb300e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[ 1771.122477][    C0] RAX: 0000000000000001 RBX: 00007f3e706eefa8 RCX: 00007f3e704c7929
[ 1771.130493][    C0] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f3e706eefac
[ 1771.138504][    C0] RBP: 00007f3e706eefa0 R08: 002014354ca5e446 R09: 0000000000000000
[ 1771.146583][    C0] R10: ffffffffffffffff R11: 0000000000000246 R12: 00007f3e706eefac
[ 1771.154599][    C0] R13: 0000000000000000 R14: 00007ffd25963350 R15: 00007ffd25963438
[ 1771.162620][    C0]  </TASK>
[ 1771.165652][    C0] ---[ end trace 3e367188c175d8f7 ]---
[ 1771.171161][    C0] ------------[ cut here ]------------
[ 1771.176623][    C0] refcount_t: underflow; use-after-free.
[ 1771.182406][    C0] WARNING: CPU: 0 PID: 28006 at lib/refcount.c:28 refcount_warn_saturate+0x120/0x1a0
[ 1771.191931][    C0] Modules linked in:
[ 1771.195840][    C0] CPU: 0 PID: 28006 Comm: syz.2.9182 Tainted: G        W         5.15.185-syzkaller-00339-ge678c93d43cc #0
[ 1771.207240][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 1771.217352][    C0] RIP: 0010:refcount_warn_saturate+0x120/0x1a0
[ 1771.223539][    C0] Code: 04 01 48 c7 c7 a0 ee 62 85 e8 ec 9c 50 02 0f 0b eb c3 e8 43 d6 1c ff c6 05 9f f8 99 04 01 48 c7 c7 00 ef 62 85 e8 d0 9c 50 02 <0f> 0b eb a7 e8 27 d6 1c ff c6 05 80 f8 99 04 01 48 c7 c7 40 ee 62
[ 1771.243453][    C0] RSP: 0018:ffffc900000079e0 EFLAGS: 00010246
[ 1771.249582][    C0] RAX: 4d21f1c779fe5100 RBX: 0000000000000003 RCX: ffff888122d2bb40
[ 1771.257606][    C0] RDX: 0000000000000100 RSI: 0000000000000101 RDI: 0000000000000000
[ 1771.265609][    C0] RBP: ffffc900000079f0 R08: dffffc0000000000 R09: fffff52000000e89
[ 1771.273628][    C0] R10: fffff52000000e89 R11: 1ffff92000000e88 R12: ffff8881106b9a08
[ 1771.281666][    C0] R13: dffffc0000000000 R14: 0000000000000003 R15: 00000000c0000000
[ 1771.289681][    C0] FS:  0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000
[ 1771.298845][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1771.305454][    C0] CR2: 0000555564d0a4a8 CR3: 000000015c3ec000 CR4: 00000000003506b0
[ 1771.313479][    C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 1771.321496][    C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 1771.329506][    C0] Call Trace:
[ 1771.332801][    C0]  <IRQ>
[ 1771.335675][    C0]  tipc_crypto_xmit+0x1a82/0x2400
[ 1771.340750][    C0]  ? tipc_crypto_do_cmd+0xcf0/0xcf0
[ 1771.345979][    C0]  ? __copy_skb_header+0x437/0x600
[ 1771.351145][    C0]  tipc_bearer_xmit_skb+0x226/0x360
[ 1771.356398][    C0]  ? __skb_clone+0x47a/0x790
[ 1771.361057][    C0]  ? tipc_bearer_mtu+0x160/0x160
[ 1771.364207][   T30] kauditd_printk_skb: 149 callbacks suppressed
[ 1771.364224][   T30] audit: type=1400 audit(1750171303.938:37740): avc:  denied  { unmount } for  pid=26745 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[ 1771.366014][    C0]  ? skb_clone+0x202/0x360
[ 1771.372502][   T30] audit: type=1400 audit(1750171304.108:37741): avc:  denied  { relabelto } for  pid=28011 comm="syz.0.9185" name="state" dev="debugfs" ino=13277 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:xserver_misc_device_t:s0"
[ 1771.392252][    C0]  tipc_disc_timeout+0x6a2/0x830
[ 1771.396996][   T30] audit: type=1400 audit(1750171304.108:37742): avc:  denied  { associate } for  pid=28011 comm="syz.0.9185" name="state" dev="debugfs" ino=13277 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:xserver_misc_device_t:s0"
[ 1771.424382][    C0]  ? update_rq_clock+0x4f0/0x580
[ 1771.462975][    C0]  ? tipc_disc_init_msg+0x600/0x600
[ 1771.468335][    C0]  ? __kasan_check_write+0x14/0x20
[ 1771.473488][    C0]  ? _raw_spin_lock_irqsave+0x110/0x110
[ 1771.479102][    C0]  ? tipc_disc_init_msg+0x600/0x600
[ 1771.480589][   T30] audit: type=1400 audit(1750171304.248:37743): avc:  denied  { read write } for  pid=28010 comm="syz.1.9183" name="vhost-vsock" dev="devtmpfs" ino=264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[ 1771.484328][    C0]  call_timer_fn+0x38/0x290
[ 1771.513187][    C0]  ? tipc_disc_init_msg+0x600/0x600
[ 1771.514536][   T30] audit: type=1400 audit(1750171304.278:37744): avc:  denied  { open } for  pid=28010 comm="syz.1.9183" path="/dev/vhost-vsock" dev="devtmpfs" ino=264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[ 1771.518492][    C0]  __run_timers+0x639/0x9a0
[ 1771.542808][   T30] audit: type=1400 audit(1750171304.278:37745): avc:  denied  { execute } for  pid=28010 comm="syz.1.9183" name="file1" dev="tmpfs" ino=372 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[ 1771.547144][    C0]  ? calc_index+0x200/0x200
[ 1771.571175][   T30] audit: type=1400 audit(1750171304.338:37746): avc:  denied  { write } for  pid=28013 comm="syz.0.9186" name="igmp6" dev="proc" ino=4026533194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1
[ 1771.573952][    C0]  ? sched_clock_cpu+0x18/0x3c0
[ 1771.598866][   T30] audit: type=1400 audit(1750171304.368:37747): avc:  denied  { execute_no_trans } for  pid=28010 comm="syz.1.9183" path="/59/file1" dev="tmpfs" ino=372 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[ 1771.601689][    C0]  run_timer_softirq+0x6a/0xf0
[ 1771.629938][    C0]  handle_softirqs+0x250/0x560
[ 1771.634765][    C0]  __irq_exit_rcu+0x52/0xf0
[ 1771.639339][    C0]  irq_exit_rcu+0x9/0x10
[ 1771.643620][    C0]  sysvec_apic_timer_interrupt+0xa9/0xc0
[ 1771.649328][    C0]  </IRQ>
[ 1771.652279][    C0]  <TASK>
[ 1771.655207][    C0]  asm_sysvec_apic_timer_interrupt+0x1b/0x20
[ 1771.661215][    C0] RIP: 0010:_raw_spin_unlock_irqrestore+0x56/0x80
[ 1771.667694][    C0] Code: 39 6d 86 e8 1c 74 01 fd 4c 89 f7 48 83 3d 69 95 c7 01 00 74 31 e8 3e 77 a9 fc 66 90 f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 <e8> 35 5f a1 fc 65 8b 05 16 c9 5c 7b 85 c0 74 05 5b 41 5e 5d c3 e8
[ 1771.687354][    C0] RSP: 0018:ffffc90000d3f680 EFLAGS: 00000206
[ 1771.693441][    C0] RAX: 0000000000000001 RBX: 0000000000000a06 RCX: dffffc0000000000
[ 1771.701449][    C0] RDX: 0000000000000000 RSI: 0000000000000a06 RDI: 0000000000000001
[ 1771.709472][    C0] RBP: ffffc90000d3f690 R08: dffffc0000000000 R09: fffff94000a9c00f
[ 1771.717525][    C0] R10: fffff94000a9c00f R11: 1ffffd4000a9c00e R12: dffffc0000000000
[ 1771.725527][    C0] R13: ffffea0004ca1c00 R14: 0000000000000020 R15: ffffc90000d3f720
[ 1771.733563][    C0]  release_pages+0x18d/0x10d0
[ 1771.738293][    C0]  ? lru_cache_disable+0x30/0x30
[ 1771.743259][    C0]  ? flush_tlb_mm_range+0x354/0x490
[ 1771.748511][    C0]  ? __kasan_check_read+0x11/0x20
[ 1771.753556][    C0]  ? free_swap_cache+0xf1/0x230
[ 1771.758438][    C0]  free_pages_and_swap_cache+0x86/0xa0
[ 1771.763919][    C0]  tlb_finish_mmu+0x175/0x300
[ 1771.768643][    C0]  exit_mmap+0x40f/0x860
[ 1771.772923][    C0]  ? vm_brk+0x30/0x30
[ 1771.776935][    C0]  ? mutex_unlock+0x89/0x220
[ 1771.781544][    C0]  ? uprobe_clear_state+0x2c1/0x320
[ 1771.786767][    C0]  __mmput+0x93/0x320
[ 1771.790779][    C0]  ? mmput+0x48/0x150
[ 1771.794783][    C0]  mmput+0x50/0x150
[ 1771.798620][    C0]  do_exit+0x9ca/0x27a0
[ 1771.802796][    C0]  ? ____sys_sendmsg+0x753/0x8c0
[ 1771.807768][    C0]  ? put_task_struct+0x90/0x90
[ 1771.812569][    C0]  ? futex_exit_release+0x1d0/0x1d0
[ 1771.817803][    C0]  ? cgroup_freezing+0x86/0xb0
[ 1771.822588][    C0]  do_group_exit+0x141/0x310
[ 1771.827236][    C0]  ? __kasan_check_write+0x14/0x20
[ 1771.832377][    C0]  get_signal+0x66a/0x1480
[ 1771.836819][    C0]  arch_do_signal_or_restart+0xc1/0x10f0
[ 1771.842480][    C0]  ? sock_show_fdinfo+0xa0/0xa0
[ 1771.847374][    C0]  ? get_sigframe_size+0x10/0x10
[ 1771.852324][    C0]  ? __se_sys_futex+0x139/0x310
[ 1771.857216][    C0]  ? fput+0x1a/0x20
[ 1771.861082][    C0]  exit_to_user_mode_loop+0xa7/0xe0
[ 1771.866291][    C0]  exit_to_user_mode_prepare+0x5a/0xa0
[ 1771.871779][    C0]  syscall_exit_to_user_mode+0x1a/0x30
[ 1771.877300][    C0]  do_syscall_64+0x58/0xa0
[ 1771.881734][    C0]  ? clear_bhb_loop+0x50/0xa0
[ 1771.886415][    C0]  ? clear_bhb_loop+0x50/0xa0
[ 1771.891115][    C0]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 1771.897090][    C0] RIP: 0033:0x7f3e704c7929
[ 1771.901512][    C0] Code: Unable to access opcode bytes at RIP 0x7f3e704c78ff.
[ 1771.908894][    C0] RSP: 002b:00007f3e6eb300e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[ 1771.917349][    C0] RAX: 0000000000000001 RBX: 00007f3e706eefa8 RCX: 00007f3e704c7929
[ 1771.925333][    C0] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f3e706eefac
[ 1771.933329][    C0] RBP: 00007f3e706eefa0 R08: 002014354ca5e446 R09: 0000000000000000
[ 1771.941357][    C0] R10: ffffffffffffffff R11: 0000000000000246 R12: 00007f3e706eefac
[ 1771.949365][    C0] R13: 0000000000000000 R14: 00007ffd25963350 R15: 00007ffd25963438
[ 1771.957393][    C0]  </TASK>
[ 1771.960421][    C0] ---[ end trace 3e367188c175d8f8 ]---
[ 1771.966315][    C0] ------------[ cut here ]------------
[ 1771.971909][    C0] refcount_t: saturated; leaking memory.
[ 1771.977675][    C0] WARNING: CPU: 0 PID: 28006 at lib/refcount.c:22 refcount_warn_saturate+0x158/0x1a0
[ 1771.987196][    C0] Modules linked in:
[ 1771.991112][    C0] CPU: 0 PID: 28006 Comm: syz.2.9182 Tainted: G        W         5.15.185-syzkaller-00339-ge678c93d43cc #0
[ 1772.002506][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 1772.012605][    C0] RIP: 0010:refcount_warn_saturate+0x158/0x1a0
[ 1772.018816][    C0] Code: 04 01 48 c7 c7 40 ee 62 85 e8 b4 9c 50 02 0f 0b eb 8b e8 0b d6 1c ff c6 05 65 f8 99 04 01 48 c7 c7 40 ee 62 85 e8 98 9c 50 02 <0f> 0b e9 6c ff ff ff e8 ec d5 1c ff c6 05 4a f8 99 04 01 48 c7 c7
[ 1772.038465][    C0] RSP: 0018:ffffc900000079e0 EFLAGS: 00010246
[ 1772.044549][    C0] RAX: 4d21f1c779fe5100 RBX: 0000000000000001 RCX: ffff888122d2bb40
[ 1772.052551][    C0] RDX: 0000000000000100 RSI: 0000000000000101 RDI: 0000000000000000
[ 1772.060570][    C0] RBP: ffffc900000079f0 R08: dffffc0000000000 R09: ffffed103ee065e8
[ 1772.068596][    C0] R10: ffffed103ee065e8 R11: 1ffff1103ee065e7 R12: ffff8881106b9a08
[ 1772.076594][    C0] R13: dffffc0000000000 R14: 0000000000000001 R15: ffffc90000007ba0
[ 1772.084606][    C0] FS:  0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000
[ 1772.093604][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1772.100263][    C0] CR2: 0000555564d0a4a8 CR3: 000000015c3ec000 CR4: 00000000003506b0
[ 1772.108275][    C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 1772.116354][    C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 1772.124360][    C0] Call Trace:
[ 1772.127696][    C0]  <IRQ>
[ 1772.130554][    C0]  tipc_crypto_xmit+0x1938/0x2400
[ 1772.135588][    C0]  ? tipc_crypto_do_cmd+0xcf0/0xcf0
[ 1772.140820][    C0]  ? __copy_skb_header+0x437/0x600
[ 1772.145956][    C0]  tipc_bearer_xmit_skb+0x226/0x360
[ 1772.151214][    C0]  ? __skb_clone+0x47a/0x790
[ 1772.155829][    C0]  ? tipc_bearer_mtu+0x160/0x160
[ 1772.160894][    C0]  ? skb_clone+0x202/0x360
[ 1772.165334][    C0]  tipc_disc_timeout+0x6a2/0x830
[ 1772.170313][    C0]  ? tipc_disc_init_msg+0x600/0x600
[ 1772.175533][    C0]  ? _find_next_bit+0x106/0x200
[ 1772.180424][    C0]  ? tipc_disc_init_msg+0x600/0x600
[ 1772.185646][    C0]  call_timer_fn+0x38/0x290
[ 1772.190190][    C0]  ? tipc_disc_init_msg+0x600/0x600
[ 1772.195415][    C0]  __run_timers+0x639/0x9a0
[ 1772.199960][    C0]  ? calc_index+0x200/0x200
[ 1772.204488][    C0]  ? sched_clock_cpu+0x18/0x3c0
[ 1772.209386][    C0]  run_timer_softirq+0x6a/0xf0
[ 1772.214174][    C0]  handle_softirqs+0x250/0x560
[ 1772.218982][    C0]  __irq_exit_rcu+0x52/0xf0
[ 1772.223709][    C0]  irq_exit_rcu+0x9/0x10
[ 1772.227993][    C0]  sysvec_apic_timer_interrupt+0xa9/0xc0
[ 1772.233649][    C0]  </IRQ>
[ 1772.236578][    C0]  <TASK>
[ 1772.239553][    C0]  asm_sysvec_apic_timer_interrupt+0x1b/0x20
[ 1772.245668][    C0] RIP: 0010:_raw_spin_unlock_irqrestore+0x56/0x80
[ 1772.252125][    C0] Code: 39 6d 86 e8 1c 74 01 fd 4c 89 f7 48 83 3d 69 95 c7 01 00 74 31 e8 3e 77 a9 fc 66 90 f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 <e8> 35 5f a1 fc 65 8b 05 16 c9 5c 7b 85 c0 74 05 5b 41 5e 5d c3 e8
[ 1772.271929][    C0] RSP: 0018:ffffc90000d3f680 EFLAGS: 00000206
[ 1772.278040][    C0] RAX: 0000000000000001 RBX: 0000000000000a06 RCX: dffffc0000000000
[ 1772.286149][    C0] RDX: 0000000000000000 RSI: 0000000000000a06 RDI: 0000000000000001
[ 1772.294333][    C0] RBP: ffffc90000d3f690 R08: dffffc0000000000 R09: fffff94000a9c00f
[ 1772.302349][    C0] R10: fffff94000a9c00f R11: 1ffffd4000a9c00e R12: dffffc0000000000
[ 1772.310476][    C0] R13: ffffea0004ca1c00 R14: 0000000000000020 R15: ffffc90000d3f720
[ 1772.318506][    C0]  release_pages+0x18d/0x10d0
[ 1772.323219][    C0]  ? lru_cache_disable+0x30/0x30
[ 1772.328214][    C0]  ? flush_tlb_mm_range+0x354/0x490
[ 1772.333438][    C0]  ? __kasan_check_read+0x11/0x20
[ 1772.338496][    C0]  ? free_swap_cache+0xf1/0x230
[ 1772.343381][    C0]  free_pages_and_swap_cache+0x86/0xa0
[ 1772.348892][    C0]  tlb_finish_mmu+0x175/0x300
[ 1772.353588][    C0]  exit_mmap+0x40f/0x860
[ 1772.357865][    C0]  ? vm_brk+0x30/0x30
[ 1772.361860][    C0]  ? mutex_unlock+0x89/0x220
[ 1772.366449][    C0]  ? uprobe_clear_state+0x2c1/0x320
[ 1772.371674][    C0]  __mmput+0x93/0x320
[ 1772.375682][    C0]  ? mmput+0x48/0x150
[ 1772.379714][    C0]  mmput+0x50/0x150
[ 1772.383539][    C0]  do_exit+0x9ca/0x27a0
[ 1772.387763][    C0]  ? ____sys_sendmsg+0x753/0x8c0
[ 1772.392725][    C0]  ? put_task_struct+0x90/0x90
[ 1772.397537][    C0]  ? futex_exit_release+0x1d0/0x1d0
[ 1772.402955][    C0]  ? cgroup_freezing+0x86/0xb0
[ 1772.407761][    C0]  do_group_exit+0x141/0x310
[ 1772.412369][    C0]  ? __kasan_check_write+0x14/0x20
[ 1772.417519][    C0]  get_signal+0x66a/0x1480
[ 1772.421966][    C0]  arch_do_signal_or_restart+0xc1/0x10f0
[ 1772.427628][    C0]  ? sock_show_fdinfo+0xa0/0xa0
[ 1772.432501][    C0]  ? get_sigframe_size+0x10/0x10
[ 1772.437489][    C0]  ? __se_sys_futex+0x139/0x310
[ 1772.442360][    C0]  ? fput+0x1a/0x20
[ 1772.446167][    C0]  exit_to_user_mode_loop+0xa7/0xe0
[ 1772.451396][    C0]  exit_to_user_mode_prepare+0x5a/0xa0
[ 1772.456876][    C0]  syscall_exit_to_user_mode+0x1a/0x30
[ 1772.462394][    C0]  do_syscall_64+0x58/0xa0
[ 1772.466806][    C0]  ? clear_bhb_loop+0x50/0xa0
[ 1772.471515][    C0]  ? clear_bhb_loop+0x50/0xa0
[ 1772.476233][    C0]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 1772.482168][    C0] RIP: 0033:0x7f3e704c7929
[ 1772.486605][    C0] Code: Unable to access opcode bytes at RIP 0x7f3e704c78ff.
[ 1772.494116][    C0] RSP: 002b:00007f3e6eb300e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[ 1772.502569][    C0] RAX: 0000000000000001 RBX: 00007f3e706eefa8 RCX: 00007f3e704c7929
[ 1772.510578][    C0] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f3e706eefac
[ 1772.518580][    C0] RBP: 00007f3e706eefa0 R08: 002014354ca5e446 R09: 0000000000000000
[ 1772.526568][    C0] R10: ffffffffffffffff R11: 0000000000000246 R12: 00007f3e706eefac
[ 1772.534584][    C0] R13: 0000000000000000 R14: 00007ffd25963350 R15: 00007ffd25963438
[ 1772.542604][    C0]  </TASK>
[ 1772.545636][    C0] ---[ end trace 3e367188c175d8f9 ]---
[ 1772.562099][T28003] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1772.573200][T28024] FAULT_INJECTION: forcing a failure.
[ 1772.573200][T28024] name failslab, interval 1, probability 0, space 0, times 0
[ 1772.575857][T28003] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1772.594424][T28003] device bridge_slave_0 entered promiscuous mode
[ 1772.601767][T28003] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1772.609280][T28003] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1772.616832][T28003] device bridge_slave_1 entered promiscuous mode
[ 1772.637624][T28024] CPU: 0 PID: 28024 Comm: syz.3.9184 Tainted: G        W         5.15.185-syzkaller-00339-ge678c93d43cc #0
[ 1772.649037][T28024] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 1772.659129][T28024] Call Trace:
[ 1772.662422][T28024]  <TASK>
[ 1772.665370][T28024]  __dump_stack+0x21/0x30
[ 1772.669721][T28024]  dump_stack_lvl+0xee/0x150
[ 1772.674363][T28024]  ? show_regs_print_info+0x20/0x20
[ 1772.679566][T28024]  dump_stack+0x15/0x20
[ 1772.683721][T28024]  should_fail+0x3c1/0x510
[ 1772.688136][T28024]  __should_failslab+0xa4/0xe0
[ 1772.692919][T28024]  should_failslab+0x9/0x20
[ 1772.697428][T28024]  slab_pre_alloc_hook+0x3b/0xe0
[ 1772.702363][T28024]  __kmalloc+0x6d/0x2c0
[ 1772.706516][T28024]  ? kvmalloc_node+0x242/0x330
[ 1772.711283][T28024]  kvmalloc_node+0x242/0x330
[ 1772.715875][T28024]  ? __kasan_check_write+0x14/0x20
[ 1772.721044][T28024]  ? mutex_lock+0x95/0x1a0
[ 1772.725469][T28024]  ? vm_mmap+0xb0/0xb0
[ 1772.729622][T28024]  ? stack_depot_fetch+0x70/0x90
[ 1772.734569][T28024]  seq_read_iter+0x1fc/0xd30
[ 1772.739180][T28024]  ? ____kasan_slab_free+0x125/0x160
[ 1772.744463][T28024]  ? __kasan_slab_free+0x11/0x20
[ 1772.749404][T28024]  ? slab_free_freelist_hook+0xc2/0x190
[ 1772.754949][T28024]  ? putname+0x111/0x160
[ 1772.759188][T28024]  ? do_sys_openat2+0x6a7/0x7b0
[ 1772.764046][T28024]  ? __x64_sys_openat+0x136/0x160
[ 1772.769070][T28024]  ? x64_sys_call+0x219/0x9a0
[ 1772.773746][T28024]  seq_read+0x3cc/0x4d0
[ 1772.777911][T28024]  ? seq_open+0x130/0x130
[ 1772.782237][T28024]  ? avc_policy_seqno+0x1b/0x70
[ 1772.787188][T28024]  ? __kasan_check_read+0x11/0x20
[ 1772.792209][T28024]  ? seq_open+0x130/0x130
[ 1772.796555][T28024]  proc_reg_read+0x1c4/0x2b0
[ 1772.801141][T28024]  ? proc_reg_get_unmapped_area+0x390/0x390
[ 1772.807051][T28024]  vfs_read+0x282/0xbe0
[ 1772.811230][T28024]  ? kernel_read+0x1f0/0x1f0
[ 1772.815817][T28024]  ? __kasan_check_write+0x14/0x20
[ 1772.820949][T28024]  ? mutex_lock+0x95/0x1a0
[ 1772.825361][T28024]  ? wait_for_completion_killable_timeout+0x10/0x10
[ 1772.831948][T28024]  ? __fget_files+0x2c4/0x320
[ 1772.836625][T28024]  ? __fdget_pos+0x2d2/0x380
[ 1772.841208][T28024]  ? ksys_read+0x71/0x240
[ 1772.845531][T28024]  ksys_read+0x140/0x240
[ 1772.849768][T28024]  ? vfs_write+0xf70/0xf70
[ 1772.854176][T28024]  ? debug_smp_processor_id+0x17/0x20
[ 1772.859540][T28024]  __x64_sys_read+0x7b/0x90
[ 1772.864042][T28024]  x64_sys_call+0x96d/0x9a0
[ 1772.868546][T28024]  do_syscall_64+0x4c/0xa0
[ 1772.872958][T28024]  ? clear_bhb_loop+0x50/0xa0
[ 1772.877628][T28024]  ? clear_bhb_loop+0x50/0xa0
[ 1772.882299][T28024]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 1772.888201][T28024] RIP: 0033:0x7ff81e27d929
[ 1772.892614][T28024] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1772.912214][T28024] RSP: 002b:00007ff81c8e6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1772.920636][T28024] RAX: ffffffffffffffda RBX: 00007ff81e4a4fa0 RCX: 00007ff81e27d929
[ 1772.928602][T28024] RDX: 0000000000001016 RSI: 0000200000002280 RDI: 0000000000000003
[ 1772.936573][T28024] RBP: 00007ff81c8e6090 R08: 0000000000000000 R09: 0000000000000000
[ 1772.944568][T28024] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1772.952538][T28024] R13: 0000000000000000 R14: 00007ff81e4a4fa0 R15: 00007fff3220c278
[ 1772.960520][T28024]  </TASK>
[ 1772.996844][   T30] audit: type=1400 audit(1750171305.758:37748): avc:  denied  { read write } for  pid=28030 comm="syz.3.9191" name="raw-gadget" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 1773.020847][   T30] audit: type=1400 audit(1750171305.758:37749): avc:  denied  { open } for  pid=28030 comm="syz.3.9191" path="/dev/raw-gadget" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 1773.358888][T28041] netlink: 48 bytes leftover after parsing attributes in process `syz.0.9193'.
[ 1773.371493][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 1773.379531][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 1773.425086][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 1773.437449][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 1773.448747][    T8] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1773.455831][    T8] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1773.475150][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 1773.483869][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 1773.492460][    T8] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1773.499560][    T8] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1773.507170][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 1773.520657][T25611] tipc: Disabling bearer <udp:syz2>
[ 1773.536306][T25611] tipc: Disabling bearer <udp:syz0>
[ 1773.542569][T28046] netlink: 48 bytes leftover after parsing attributes in process `syz.2.9195'.
[ 1773.551706][T25611] tipc: Left network mode
[ 1773.567165][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 1773.576768][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 1773.597641][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 1773.606632][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 1773.615695][T25611] ------------[ cut here ]------------
[ 1773.623294][T25611] refcount_t: saturated; leaking memory.
[ 1773.629665][T25611] WARNING: CPU: 0 PID: 25611 at lib/refcount.c:19 refcount_warn_saturate+0x13c/0x1a0
[ 1773.639862][T25611] Modules linked in:
[ 1773.643978][T25611] CPU: 0 PID: 25611 Comm: kworker/u4:3 Tainted: G        W         5.15.185-syzkaller-00339-ge678c93d43cc #0
[ 1773.655959][T25611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 1773.666325][T25611] Workqueue: netns cleanup_net
[ 1773.671595][T25611] RIP: 0010:refcount_warn_saturate+0x13c/0x1a0
[ 1773.678108][T25611] Code: 04 01 48 c7 c7 00 ef 62 85 e8 d0 9c 50 02 0f 0b eb a7 e8 27 d6 1c ff c6 05 80 f8 99 04 01 48 c7 c7 40 ee 62 85 e8 b4 9c 50 02 <0f> 0b eb 8b e8 0b d6 1c ff c6 05 65 f8 99 04 01 48 c7 c7 40 ee 62
[ 1773.698143][T25611] RSP: 0018:ffffc90000baf7c0 EFLAGS: 00010246
[ 1773.704282][T25611] RAX: 9e09cd5644a75a00 RBX: 0000000000000000 RCX: ffff88811ff94f00
[ 1773.712592][T25611] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000
[ 1773.721364][T25611] RBP: ffffc90000baf7d0 R08: dffffc0000000000 R09: ffffed103ee065e8
[ 1773.729653][T25611] R10: ffffed103ee065e8 R11: 1ffff1103ee065e7 R12: 1ffff92000175f04
[ 1773.738660][T25611] R13: ffff88812016208c R14: 0000000000000000 R15: 0000000000000cc0
[ 1773.746782][T25611] FS:  0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000
[ 1773.755996][T25611] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1773.762899][T25611] CR2: 00007f997eba9f98 CR3: 000000012f051000 CR4: 00000000003506b0
[ 1773.771117][T25611] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 1773.779376][T25611] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 1773.787578][T25611] Call Trace:
[ 1773.790997][T25611]  <TASK>
[ 1773.794009][T25611]  nf_nat_masq_schedule+0x439/0x4c0
[ 1773.799470][T25611]  ? __kasan_check_write+0x14/0x20
[ 1773.804726][T25611]  ? nf_nat_masq_schedule+0x4c0/0x4c0
[ 1773.810384][T25611]  ? masq_device_event+0xd0/0xd0
[ 1773.815485][T25611]  ? nfqnl_rcv_dev_event+0x441/0x470
[ 1773.825392][T25611]  ? __kasan_check_read+0x11/0x20
[ 1773.844065][T25611]  masq_device_event+0x9b/0xd0
[ 1773.853375][T25611]  raw_notifier_call_chain+0x90/0x100
[ 1773.863252][T25611]  dev_close_many+0x32d/0x4d0
[ 1773.870907][T25611]  ? __ww_mutex_lock_interruptible_slowpath+0x20/0x20
[ 1773.878541][T25611]  ? __dev_open+0x4c0/0x4c0
[ 1773.883194][T25611]  ? _raw_spin_lock_irq+0x8f/0xe0
[ 1773.888490][T25611]  ? _raw_spin_lock_irqsave+0x110/0x110
[ 1773.894195][T25611]  ? generic_exec_single+0x226/0x390
[ 1773.899808][T25611]  ? __kasan_check_read+0x11/0x20
[ 1773.904991][T25611]  unregister_netdevice_many+0x44c/0x1990
[ 1773.915793][T25611]  ? alloc_netdev_mqs+0xc90/0xc90
[ 1773.921069][T25611]  ? unregister_netdevice_queue+0x1aa/0x360
[ 1773.927084][T25611]  ? list_netdevice+0x4c0/0x4c0
[ 1773.931996][T25611]  ip6gre_exit_batch_net+0x5a5/0x5f0
[ 1773.937395][T25611]  ? ip6gre_init_net+0x340/0x340
[ 1773.942353][T25611]  ? ip6gre_init_net+0x340/0x340
[ 1773.947373][T25611]  cleanup_net+0x602/0xad0
[ 1773.951839][T25611]  ? ops_init+0x4a0/0x4a0
[ 1773.956191][T25611]  ? pwq_dec_nr_in_flight+0x18c/0x3c0
[ 1773.961668][T25611]  process_one_work+0x6be/0xba0
[ 1773.966663][T25611]  worker_thread+0xa59/0x1200
[ 1773.971464][T25611]  ? _raw_spin_lock_irqsave+0xb0/0x110
[ 1773.977044][T25611]  kthread+0x411/0x500
[ 1773.981525][T25611]  ? worker_clr_flags+0x190/0x190
[ 1773.986685][T25611]  ? kthread_blkcg+0xd0/0xd0
[ 1773.992006][T25611]  ret_from_fork+0x1f/0x30
[ 1773.996576][T25611]  </TASK>
[ 1773.999800][T25611] ---[ end trace 3e367188c175d8fa ]---
[ 1774.115089][T28003] device veth0_vlan entered promiscuous mode
[ 1774.158250][T28003] device veth1_macvtap entered promiscuous mode
[ 1774.633346][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 1774.651784][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 1774.695017][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 1774.707570][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 1774.715960][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 1774.724245][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 1774.733167][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 1774.741761][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 1774.750251][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 1774.758824][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 1774.766456][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 1775.540983][T28078] tipc: Started in network mode
[ 1775.545954][T28078] tipc: Node identity ac14140f, cluster identity 4711
[ 1775.553184][T28078] tipc: New replicast peer: 172.30.1.2
[ 1775.559105][T28078] tipc: Enabled bearer <udp:syz2>, priority 10
[ 1775.666487][T28076] tipc: Started in network mode
[ 1775.671894][T28076] tipc: Node identity ac14140f, cluster identity 4711
[ 1775.679520][T28076] tipc: New replicast peer: 172.30.1.4
[ 1775.685897][T28076] tipc: Enabled bearer <udp:syz2>, priority 10
[ 1776.067955][T28090] FAULT_INJECTION: forcing a failure.
[ 1776.067955][T28090] name failslab, interval 1, probability 0, space 0, times 0
[ 1776.119241][T28090] CPU: 1 PID: 28090 Comm: syz.2.9200 Tainted: G        W         5.15.185-syzkaller-00339-ge678c93d43cc #0
[ 1776.130681][T28090] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 1776.140768][T28090] Call Trace:
[ 1776.144069][T28090]  <TASK>
[ 1776.147033][T28090]  __dump_stack+0x21/0x30
[ 1776.151410][T28090]  dump_stack_lvl+0xee/0x150
[ 1776.156012][T28090]  ? show_regs_print_info+0x20/0x20
[ 1776.161497][T28090]  ? avc_denied+0x1b0/0x1b0
[ 1776.166116][T28090]  dump_stack+0x15/0x20
[ 1776.170284][T28090]  should_fail+0x3c1/0x510
[ 1776.174724][T28090]  __should_failslab+0xa4/0xe0
[ 1776.179513][T28090]  should_failslab+0x9/0x20
[ 1776.184031][T28090]  slab_pre_alloc_hook+0x3b/0xe0
[ 1776.189145][T28090]  ? vm_area_dup+0x26/0x210
[ 1776.193847][T28090]  kmem_cache_alloc+0x44/0x260
[ 1776.198657][T28090]  vm_area_dup+0x26/0x210
[ 1776.203022][T28090]  __split_vma+0xac/0x3e0
[ 1776.207389][T28090]  __do_munmap+0x3ad/0xfe0
[ 1776.211835][T28090]  ? __kasan_check_read+0x11/0x20
[ 1776.216887][T28090]  mmap_region+0x82c/0x1800
[ 1776.221405][T28090]  ? cap_mmap_addr+0x165/0x2e0
[ 1776.226193][T28090]  ? selinux_mmap_addr+0xbe/0xe0
[ 1776.231158][T28090]  ? security_mmap_addr+0x72/0x90
[ 1776.236250][T28090]  do_mmap+0x76c/0xe40
[ 1776.240345][T28090]  vm_mmap_pgoff+0x1ce/0x410
[ 1776.244962][T28090]  ? account_locked_vm+0x260/0x260
[ 1776.250099][T28090]  ksys_mmap_pgoff+0x161/0x1d0
[ 1776.254883][T28090]  __x64_sys_mmap+0xfa/0x110
[ 1776.259488][T28090]  x64_sys_call+0x83/0x9a0
[ 1776.263928][T28090]  do_syscall_64+0x4c/0xa0
[ 1776.268363][T28090]  ? clear_bhb_loop+0x50/0xa0
[ 1776.273059][T28090]  ? clear_bhb_loop+0x50/0xa0
[ 1776.277761][T28090]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 1776.283678][T28090] RIP: 0033:0x7f3e704c7929
[ 1776.288112][T28090] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1776.307748][T28090] RSP: 002b:00007f3e6eaee038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[ 1776.316187][T28090] RAX: ffffffffffffffda RBX: 00007f3e706ef160 RCX: 00007f3e704c7929
[ 1776.324186][T28090] RDX: 0000000000000000 RSI: 0000000000004000 RDI: 00002000005b1000
[ 1776.332214][T28090] RBP: 00007f3e6eaee090 R08: 0000000000000006 R09: 0000000000000000
[ 1776.340298][T28090] R10: 0000000000021011 R11: 0000000000000246 R12: 0000000000000001
[ 1776.348295][T28090] R13: 0000000000000000 R14: 00007f3e706ef160 R15: 00007ffd25963438
[ 1776.356301][T28090]  </TASK>
[ 1776.445457][T21459] usb 2-1: new high-speed USB device number 102 using dummy_hcd
[ 1776.454078][T25611] device bridge_slave_1 left promiscuous mode
[ 1776.467020][T25611] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1776.480028][T25611] device bridge_slave_0 left promiscuous mode
[ 1776.496346][T25611] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1776.514100][T25611] device veth1_macvtap left promiscuous mode
[ 1776.524096][T25611] device veth0_vlan left promiscuous mode
[ 1776.631304][   T30] kauditd_printk_skb: 61 callbacks suppressed
[ 1776.631321][   T30] audit: type=1400 audit(1750171309.398:37811): avc:  denied  { name_bind } for  pid=28096 comm="syz.3.9210" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1
[ 1776.637130][T25436] tipc: Node number set to 2886997007
[ 1776.639635][   T30] audit: type=1400 audit(1750171309.398:37812): avc:  denied  { node_bind } for  pid=28096 comm="syz.3.9210" saddr=255.255.255.255 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1
[ 1776.747310][T21459] usb 2-1: Using ep0 maxpacket: 16
[ 1776.755320][T28097] netlink: 48 bytes leftover after parsing attributes in process `syz.3.9210'.
[ 1776.768029][   T30] audit: type=1400 audit(1750171309.538:37813): avc:  denied  { mount } for  pid=28098 comm="syz.2.9211" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[ 1776.790592][   T58] tipc: Node number set to 2886997007
[ 1776.820791][   T30] audit: type=1400 audit(1750171309.538:37814): avc:  denied  { unmount } for  pid=27535 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[ 1776.914095][T21459] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1776.946039][T21459] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1776.958234][T21459] usb 2-1: config 0 interface 0 has no altsetting 0
[ 1776.971398][T21459] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[ 1777.002331][T21459] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1777.026418][   T30] audit: type=1400 audit(1750171309.788:37815): avc:  denied  { unmount } for  pid=28003 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[ 1777.047557][   T30] audit: type=1400 audit(1750171309.788:37816): avc:  denied  { create } for  pid=28102 comm="syz.3.9213" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[ 1777.050876][T21459] usb 2-1: config 0 descriptor??
[ 1777.671150][   T30] audit: type=1400 audit(1750171309.838:37817): avc:  denied  { create } for  pid=28104 comm="syz.2.9212" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[ 1777.690983][   T30] audit: type=1400 audit(1750171309.838:37818): avc:  denied  { ioctl } for  pid=28104 comm="syz.2.9212" path="socket:[122432]" dev="sockfs" ino=122432 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[ 1777.716547][   T30] audit: type=1400 audit(1750171309.838:37819): avc:  denied  { write } for  pid=28104 comm="syz.2.9212" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[ 1777.782663][   T30] audit: type=1400 audit(1750171309.988:37820): avc:  denied  { create } for  pid=28102 comm="syz.3.9213" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[ 1778.002785][T28129] FAULT_INJECTION: forcing a failure.
[ 1778.002785][T28129] name failslab, interval 1, probability 0, space 0, times 0
[ 1778.015489][T28129] CPU: 0 PID: 28129 Comm: syz.4.9221 Tainted: G        W         5.15.185-syzkaller-00339-ge678c93d43cc #0
[ 1778.026874][T28129] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 1778.036948][T28129] Call Trace:
[ 1778.040226][T28129]  <TASK>
[ 1778.043156][T28129]  __dump_stack+0x21/0x30
[ 1778.047503][T28129]  dump_stack_lvl+0xee/0x150
[ 1778.052101][T28129]  ? show_regs_print_info+0x20/0x20
[ 1778.057307][T28129]  dump_stack+0x15/0x20
[ 1778.061461][T28129]  should_fail+0x3c1/0x510
[ 1778.065878][T28129]  __should_failslab+0xa4/0xe0
[ 1778.070742][T28129]  should_failslab+0x9/0x20
[ 1778.075247][T28129]  slab_pre_alloc_hook+0x3b/0xe0
[ 1778.080200][T28129]  __kmalloc+0x6d/0x2c0
[ 1778.084369][T28129]  ? __se_sys_memfd_create+0xf2/0x3b0
[ 1778.089772][T28129]  ? strnlen_user+0x13b/0x1c0
[ 1778.094467][T28129]  __se_sys_memfd_create+0xf2/0x3b0
[ 1778.099715][T28129]  __x64_sys_memfd_create+0x5b/0x70
[ 1778.104920][T28129]  x64_sys_call+0x473/0x9a0
[ 1778.109427][T28129]  do_syscall_64+0x4c/0xa0
[ 1778.113844][T28129]  ? clear_bhb_loop+0x50/0xa0
[ 1778.118520][T28129]  ? clear_bhb_loop+0x50/0xa0
[ 1778.123197][T28129]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 1778.129091][T28129] RIP: 0033:0x7f507ba01929
[ 1778.133517][T28129] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1778.153305][T28129] RSP: 002b:00007f507a027e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f
[ 1778.161765][T28129] RAX: ffffffffffffffda RBX: 0000000000000460 RCX: 00007f507ba01929
[ 1778.169741][T28129] RDX: 00007f507a027ef0 RSI: 0000000000000000 RDI: 00007f507ba844cc
[ 1778.177716][T28129] RBP: 00002000000008c0 R08: 00007f507a027bb7 R09: 00007f507a027e40
[ 1778.185710][T28129] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000200
[ 1778.193695][T28129] R13: 00007f507a027ef0 R14: 00007f507a027eb0 R15: 0000200000000440
[ 1778.201679][T28129]  </TASK>
[ 1778.956443][T28116] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1778.971679][T28116] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1779.050897][T28116] device bridge_slave_0 entered promiscuous mode
[ 1779.061219][T28116] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1779.068530][T28116] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1779.076203][T28116] device bridge_slave_1 entered promiscuous mode
[ 1779.696497][T28144] netlink: 48 bytes leftover after parsing attributes in process `syz.4.9224'.
[ 1779.966293][T28116] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1779.973458][T28116] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1780.005495][ T8648] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1780.018381][ T8648] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 1780.026144][ T8648] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 1780.046854][ T8648] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 1780.056246][ T8648] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 1780.066560][ T8648] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1780.073701][ T8648] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1780.083283][ T8648] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 1780.091990][ T8648] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 1780.100674][ T8648] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1780.107964][ T8648] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1780.129870][ T8648] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 1780.138520][ T8648] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 1780.146649][ T8648] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 1780.156191][ T8648] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 1780.174456][ T8648] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 1780.184024][ T8648] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 1780.195846][T28116] device veth0_vlan entered promiscuous mode
[ 1780.205705][ T8648] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 1780.214456][ T8648] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 1780.230878][ T8648] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 1780.239116][ T8648] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 1780.246765][ T8648] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 1780.255623][ T8648] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 1780.267008][T21459] usbhid 2-1:0.0: can't add hid device: -71
[ 1780.273029][T21459] usbhid: probe of 2-1:0.0 failed with error -71
[ 1780.290348][T21459] usb 2-1: USB disconnect, device number 102
[ 1780.308315][T25611] device veth0_vlan left promiscuous mode
[ 1781.035409][T28116] device veth1_macvtap entered promiscuous mode
[ 1781.058660][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 1781.068923][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 1781.082914][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 1781.094941][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 1781.103529][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 1781.617704][T25611] ==================================================================
[ 1781.625824][T25611] BUG: KASAN: use-after-free in tcp_metrics_flush_all+0xd3/0x210
[ 1781.633573][T25611] Read of size 4 at addr ffff88812016208c by task kworker/u4:3/25611
[ 1781.641663][T25611] 
[ 1781.644003][T25611] CPU: 1 PID: 25611 Comm: kworker/u4:3 Tainted: G        W         5.15.185-syzkaller-00339-ge678c93d43cc #0
[ 1781.655551][T25611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 1781.665623][T25611] Workqueue: netns cleanup_net
[ 1781.670408][T25611] Call Trace:
[ 1781.673693][T25611]  <TASK>
[ 1781.676631][T25611]  __dump_stack+0x21/0x30
[ 1781.681006][T25611]  dump_stack_lvl+0xee/0x150
[ 1781.685600][T25611]  ? show_regs_print_info+0x20/0x20
[ 1781.690801][T25611]  ? load_image+0x3a0/0x3a0
[ 1781.695320][T25611]  ? __kasan_check_read+0x11/0x20
[ 1781.700347][T25611]  ? preempt_schedule_common+0xbe/0xf0
[ 1781.705810][T25611]  print_address_description+0x7f/0x2c0
[ 1781.711359][T25611]  ? tcp_metrics_flush_all+0xd3/0x210
[ 1781.716736][T25611]  kasan_report+0xf1/0x140
[ 1781.721153][T25611]  ? _raw_spin_lock_bh+0x8e/0xe0
[ 1781.726101][T25611]  ? tcp_metrics_flush_all+0xd3/0x210
[ 1781.731478][T25611]  kasan_check_range+0x280/0x290
[ 1781.736421][T25611]  __kasan_check_read+0x11/0x20
[ 1781.741273][T25611]  tcp_metrics_flush_all+0xd3/0x210
[ 1781.746472][T25611]  ? tcp_net_metrics_init+0x150/0x150
[ 1781.751848][T25611]  tcp_net_metrics_exit_batch+0x10/0x20
[ 1781.757398][T25611]  cleanup_net+0x602/0xad0
[ 1781.761820][T25611]  ? ops_init+0x4a0/0x4a0
[ 1781.766167][T25611]  process_one_work+0x6be/0xba0
[ 1781.771042][T25611]  worker_thread+0xa59/0x1200
[ 1781.775723][T25611]  ? _raw_spin_lock_irqsave+0xb0/0x110
[ 1781.781192][T25611]  kthread+0x411/0x500
[ 1781.785271][T25611]  ? worker_clr_flags+0x190/0x190
[ 1781.790301][T25611]  ? kthread_blkcg+0xd0/0xd0
[ 1781.794920][T25611]  ret_from_fork+0x1f/0x30
[ 1781.799341][T25611]  </TASK>
[ 1781.802358][T25611] 
[ 1781.804680][T25611] Allocated by task 18541:
[ 1781.809097][T25611]  __kasan_slab_alloc+0xbd/0xf0
[ 1781.813955][T25611]  slab_post_alloc_hook+0x4f/0x2b0
[ 1781.819069][T25611]  kmem_cache_alloc+0xf7/0x260
[ 1781.823880][T25611]  copy_net_ns+0x145/0x5c0
[ 1781.828296][T25611]  create_new_namespaces+0x3a2/0x660
[ 1781.833583][T25611]  unshare_nsproxy_namespaces+0x120/0x170
[ 1781.839300][T25611]  ksys_unshare+0x4ac/0x7b0
[ 1781.843806][T25611]  __x64_sys_unshare+0x38/0x40
[ 1781.848578][T25611]  x64_sys_call+0x442/0x9a0
[ 1781.853085][T25611]  do_syscall_64+0x4c/0xa0
[ 1781.857499][T25611]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 1781.863422][T25611] 
[ 1781.865750][T25611] Freed by task 25611:
[ 1781.869817][T25611]  kasan_set_track+0x4a/0x70
[ 1781.874410][T25611]  kasan_set_free_info+0x23/0x40
[ 1781.879347][T25611]  ____kasan_slab_free+0x125/0x160
[ 1781.884462][T25611]  __kasan_slab_free+0x11/0x20
[ 1781.889224][T25611]  slab_free_freelist_hook+0xc2/0x190
[ 1781.894610][T25611]  kmem_cache_free+0x100/0x320
[ 1781.899469][T25611]  cleanup_net+0xa2d/0xad0
[ 1781.903885][T25611]  process_one_work+0x6be/0xba0
[ 1781.908740][T25611]  worker_thread+0xa59/0x1200
[ 1781.913459][T25611]  kthread+0x411/0x500
[ 1781.917530][T25611]  ret_from_fork+0x1f/0x30
[ 1781.921951][T25611] 
[ 1781.924286][T25611] The buggy address belongs to the object at ffff888120162000
[ 1781.924286][T25611]  which belongs to the cache net_namespace of size 3968
[ 1781.938688][T25611] The buggy address is located 140 bytes inside of
[ 1781.938688][T25611]  3968-byte region [ffff888120162000, ffff888120162f80)
[ 1781.952053][T25611] The buggy address belongs to the page:
[ 1781.957682][T25611] page:ffffea0004805800 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888120166000 pfn:0x120160
[ 1781.969223][T25611] head:ffffea0004805800 order:3 compound_mapcount:0 compound_pincount:0
[ 1781.977550][T25611] flags: 0x4000000000010200(slab|head|zone=1)
[ 1781.983640][T25611] raw: 4000000000010200 ffffea00048b1c08 ffffea00047ae208 ffff8881001c5e00
[ 1781.992335][T25611] raw: ffff888120166000 0000000000080001 00000001ffffffff 0000000000000000
[ 1782.000912][T25611] page dumped because: kasan: bad access detected
[ 1782.007319][T25611] page_owner tracks the page as allocated
[ 1782.013031][T25611] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 281, ts 22566043182, free_ts 22473794328
[ 1782.032041][T25611]  post_alloc_hook+0x192/0x1b0
[ 1782.036811][T25611]  prep_new_page+0x1c/0x110
[ 1782.041318][T25611]  get_page_from_freelist+0x2cc5/0x2d50
[ 1782.046862][T25611]  __alloc_pages+0x18f/0x440
[ 1782.051461][T25611]  new_slab+0xa1/0x4d0
[ 1782.055530][T25611]  ___slab_alloc+0x381/0x810
[ 1782.060118][T25611]  __slab_alloc+0x49/0x90
[ 1782.064445][T25611]  kmem_cache_alloc+0x138/0x260
[ 1782.069295][T25611]  copy_net_ns+0x145/0x5c0
[ 1782.073719][T25611]  create_new_namespaces+0x3a2/0x660
[ 1782.079004][T25611]  unshare_nsproxy_namespaces+0x120/0x170
[ 1782.084736][T25611]  ksys_unshare+0x4ac/0x7b0
[ 1782.089241][T25611]  __x64_sys_unshare+0x38/0x40
[ 1782.094008][T25611]  x64_sys_call+0x442/0x9a0
[ 1782.098509][T25611]  do_syscall_64+0x4c/0xa0
[ 1782.102923][T25611]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 1782.108820][T25611] page last free stack trace:
[ 1782.113501][T25611]  free_unref_page_prepare+0x542/0x550
[ 1782.118976][T25611]  free_unref_page+0xa2/0x550
[ 1782.123664][T25611]  free_compound_page+0x78/0xa0
[ 1782.128526][T25611]  __put_compound_page+0x77/0xb0
[ 1782.133472][T25611]  __put_page+0xbc/0xe0
[ 1782.137644][T25611]  skb_release_data+0x3d3/0xa10
[ 1782.142495][T25611]  __kfree_skb+0x50/0x70
[ 1782.146737][T25611]  tcp_recvmsg_locked+0x14ac/0x2640
[ 1782.151936][T25611]  tcp_recvmsg+0x21b/0x720
[ 1782.156355][T25611]  inet_recvmsg+0x134/0x470
[ 1782.160866][T25611]  sock_read_iter+0x2a2/0x340
[ 1782.165544][T25611]  vfs_read+0x68b/0xbe0
[ 1782.169708][T25611]  ksys_read+0x140/0x240
[ 1782.173998][T25611]  __x64_sys_read+0x7b/0x90
[ 1782.178511][T25611]  x64_sys_call+0x96d/0x9a0
[ 1782.183020][T25611]  do_syscall_64+0x4c/0xa0
[ 1782.187442][T25611] 
[ 1782.189765][T25611] Memory state around the buggy address:
[ 1782.195390][T25611]  ffff888120161f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 1782.203450][T25611]  ffff888120162000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1782.211513][T25611] >ffff888120162080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1782.219917][T25611]                       ^
[ 1782.224243][T25611]  ffff888120162100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1782.232301][T25611]  ffff888120162180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1782.240463][T25611] ==================================================================
[ 1782.248551][T25611] Disabling lock debugging due to kernel taint
[ 1782.262667][   T30] kauditd_printk_skb: 76 callbacks suppressed
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[ 1782.262683][   T30] audit: type=1400 audit(1750171315.028:37897): avc:  denied  { unmount } for  pid=28003 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[ 1782.336989][   T30] audit: type=1400 audit(1750171315.028:37898): avc:  denied  { write } for  pid=273 comm="syz-executor" path="pipe:[14598]" dev="pipefs" ino=14598 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1
[ 1782.370617][   T30] audit: type=1400 audit(1750171315.058:37899): avc:  denied  { read } for  pid=83 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1
[ 1782.451166][   T30] audit: type=1400 audit(1750171315.058:37900): avc:  denied  { search } for  pid=83 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1782.498340][   T30] audit: type=1400 audit(1750171315.058:37901): avc:  denied  { write } for  pid=83 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1782.558526][   T30] audit: type=1400 audit(1750171315.058:37902): avc:  denied  { add_name } for  pid=83 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1782.590908][   T30] audit: type=1400 audit(1750171315.058:37903): avc:  denied  { create } for  pid=83 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[ 1782.611623][   T30] audit: type=1400 audit(1750171315.058:37904): avc:  denied  { append open } for  pid=83 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[ 1782.635541][   T30] audit: type=1400 audit(1750171315.058:37905): avc:  denied  { getattr } for  pid=83 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[ 1782.658345][   T30] audit: type=1400 audit(1750171315.088:37906): avc:  denied  { read write } for  pid=28164 comm="syz.1.9231" name="kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[ 1783.377660][T25611] device bridge_slave_1 left promiscuous mode
[ 1783.383804][T25611] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1783.391476][T25611] device bridge_slave_0 left promiscuous mode
[ 1783.397748][T25611] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1783.405861][T25611] device veth1_macvtap left promiscuous mode
[ 1783.411978][T25611] device veth0_vlan left promiscuous mode
[ 1784.020304][T25611] tipc: Disabling bearer <udp:syz2>
[ 1784.025677][T25611] tipc: Left network mode
[ 1784.030276][T25611] tipc: Disabling bearer <udp:syz2>
[ 1784.035965][T25611] tipc: Left network mode
[ 1785.058319][T25611] device bridge_slave_1 left promiscuous mode
[ 1785.064551][T25611] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1785.072222][T25611] device bridge_slave_0 left promiscuous mode
[ 1785.078449][T25611] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1785.086637][T25611] device bridge_slave_1 left promiscuous mode
[ 1785.092891][T25611] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1785.100536][T25611] device bridge_slave_0 left promiscuous mode
[ 1785.106657][T25611] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1785.114834][T25611] device bridge_slave_1 left promiscuous mode
[ 1785.121022][T25611] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1785.129087][T25611] device bridge_slave_0 left promiscuous mode
[ 1785.135212][T25611] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1785.143336][T25611] device bridge_slave_1 left promiscuous mode
[ 1785.149547][T25611] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1785.157402][T25611] device bridge_slave_0 left promiscuous mode
[ 1785.163522][T25611] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1785.172222][T25611] device veth1_macvtap left promiscuous mode
[ 1785.178266][T25611] device veth0_vlan left promiscuous mode
[ 1785.184131][T25611] device veth1_macvtap left promiscuous mode
[ 1785.190182][T25611] device veth0_vlan left promiscuous mode
[ 1785.196060][T25611] device veth1_macvtap left promiscuous mode
[ 1785.202108][T25611] device veth0_vlan left promiscuous mode
[ 1785.208158][T25611] device veth1_macvtap left promiscuous mode
[ 1785.214156][T25611] device veth0_vlan left promiscuous mode