last executing test programs:

6.172543165s ago: executing program 1:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100))
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r3 = dup3(r2, r1, 0x0)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000040))
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x4c, 0x0, &(0x7f0000000240)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f00000004c0)={@flat=@binder={0x73622a85, 0x10b, 0x2}, @flat=@weak_handle={0x77682a85, 0x80b}, @flat=@binder={0x73622a85, 0x0, 0xffffffffffffffff}}, &(0x7f0000000140)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})
read$FUSE(r0, 0x0, 0x0)

6.143059219s ago: executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x80000000, 0x446440)
r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='blkio.bfq.io_wait_time\x00', 0x0, 0x0)
getsockopt$nfc_llcp(r1, 0x6, 0x1, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
syz_open_dev$vcsa(&(0x7f0000000000), 0x80000000, 0x446440) (async)
openat$cgroup_ro(r0, &(0x7f0000000040)='blkio.bfq.io_wait_time\x00', 0x0, 0x0) (async)
getsockopt$nfc_llcp(r1, 0x6, 0x1, 0x0, 0x0) (async)

6.098643346s ago: executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newaddr={0x44, 0x14, 0x509, 0x0, 0x0, {0x2, 0x1, 0x0, 0x0, r2}, [@IFA_LOCAL={0x8, 0x2, @local}, @IFA_ADDRESS={0x8, 0x1, @local}, @IFA_BROADCAST={0x8, 0x4, @multicast2}, @IFA_LABEL={0x14, 0x3, 'veth1_to_bond\x00'}]}, 0x44}}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup/syz1\x00', 0x200002, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', <r4=>0x0})
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000800)=@newlink={0x2c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_VFINFO_LIST={0x4}, @IFLA_MTU={0x8}]}, 0x2c}}, 0x0)

6.0742484s ago: executing program 1:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xf, &(0x7f0000000700)=ANY=[@ANYBLOB="0f7be77bffffffff2495f0ff08000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b705000008000000a5000000a2c5d0c22895d625ddf35edce6da3089e1e1e6b779488f651919ec578a4457fb164e62304e4ff5f2afb961a9cffd03ad40dffdc640de1964e00e02ab82b8274cfcb2cfaa880a9bb82c6a40b875077ef6a47b5a4f861ca6b6"], &(0x7f0000000240)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x8, 0x1}, 0x8, 0x10, &(0x7f0000000380)={0x4, 0xb, 0x7fff, 0x100}, 0x10, 0x0, 0x0, 0x9, &(0x7f00000003c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000400)=[{0x2, 0x2, 0x10, 0x2}, {0x2, 0x2, 0xa, 0x6}, {0x2, 0x5, 0x0, 0xc}, {0x2, 0x1, 0xb, 0x8}, {0x4, 0x5, 0xa}, {0x0, 0x2, 0x6, 0xb}, {0x3, 0x5, 0xc, 0xa}, {0x4, 0x5, 0xa, 0xa}, {0x1, 0x1, 0x0, 0x8}], 0x10, 0x8}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000200)='task_newtask\x00', r0}, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
r4 = eventfd(0x0)
r5 = eventfd(0x0)
ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f0000000000)={r5})
ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f0000000100)={r4})
ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f00000000c0)={r5, 0x4, 0x3})
fdatasync(r1)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6], 0x0}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r6}, 0x0, &(0x7f00000002c0)}, 0x20)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="85000000070000006a0a00ff000000004500000000000000950000000000000018100000", @ANYRES32, @ANYRES32], &(0x7f0000000140)='GPL\x00', 0x2, 0x95, &(0x7f0000000180)=""/149}, 0x3f)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000180)='ext4_ext_show_extent\x00', r7}, 0x10)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r8, &(0x7f0000000000), 0x400000)
socket$nl_route(0x10, 0x3, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x4500, &(0x7f0000000200)={[{@errors_remount}, {@noquota}, {@grpjquota}, {@auto_da_alloc_val}, {@nomblk_io_submit}, {@journal_dev={'journal_dev', 0x3d, 0x88}}, {@barrier}, {@delalloc}, {@usrquota}]}, 0x10, 0x4c6, &(0x7f0000000ec0)="$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")

6.031324296s ago: executing program 0:
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x19, 0x4, 0x4, 0x5}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="07000000642044e35aa100000000000018110041", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000dd897b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
socket$nl_netfilter(0x10, 0x3, 0xc)
unshare(0x0)
socket$packet(0x11, 0x3, 0x300)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000538000/0x4000)=nil, 0x4000, 0x7, 0x10, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x30, r6, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0)
r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={<r8=>0xffffffffffffffff})
dup3(r8, r7, 0x0)

5.573585217s ago: executing program 1:
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x19, 0x4, 0x4, 0x5}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="07000000642044e35aa100000000000018110041", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000dd897b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
socket$nl_netfilter(0x10, 0x3, 0xc)
unshare(0x0)
socket$packet(0x11, 0x3, 0x300)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000538000/0x4000)=nil, 0x4000, 0x7, 0x10, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x30, r6, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0)
r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={<r8=>0xffffffffffffffff})
dup3(r8, r7, 0x0)

4.946402294s ago: executing program 0:
pipe2$9p(0x0, 0x0)
syncfs(0xffffffffffffffff)
r0 = open(&(0x7f0000000100)='.\x00', 0x0, 0x0)
fstat(r0, &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0})
socket$nl_xfrm(0x10, 0x3, 0x6)
fsconfig$FSCONFIG_SET_FLAG(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000000)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', <r3=>0x0, 0x2f, 0x6, 0x3, 0x0, 0x49, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, 0x7, 0x70, 0xb39, 0x20}})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYRESOCT=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3}, 0x90)
r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_buf(r4, 0x29, 0x7, &(0x7f0000000000), 0x0)
syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000640)='./bus\x00', 0x0, &(0x7f0000000080)=ANY=[], 0x1, 0x1268, &(0x7f0000002500)="$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")
r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
mkdirat(r5, &(0x7f0000000180)='./bus\x00', 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103)
renameat2(r5, &(0x7f0000000380)='./bus\x00', r5, &(0x7f0000000200)='./bus/file0\x00', 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10)
ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f0000000400))
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x40, 0x6, 0x8}, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x9, 0x0, r7}, 0x48)
socket$pptp(0x18, 0x1, 0x2)
r8 = syz_usb_connect$hid(0x0, 0x6c, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x27b8, 0x1ed, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0)
socket$igmp(0x2, 0x3, 0x2)
syz_usb_control_io$hid(r8, 0x0, 0x0)
syz_usb_control_io$hid(r8, &(0x7f0000000300)={0x24, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x0, "8031fce1"}]}}, 0x0}, 0x0)
syz_usb_control_io$hid(r8, 0x0, 0x0)

4.541867207s ago: executing program 1:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$TCFLSH(r1, 0x400455c8, 0x0)
ioctl$sock_bt_hci(r0, 0x400448dd, &(0x7f0000000100))

3.780386414s ago: executing program 3:
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r3, 0x6, 0x17, &(0x7f0000000180), 0xc2)

3.075019584s ago: executing program 2:
prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x3a, &(0x7f00000000c0)={@mcast1, 0x0, 0x0, 0x103, 0x1}, 0x20)
sendmsg$inet6(r3, &(0x7f0000000600)={&(0x7f0000000000)={0xa, 0x4e21, 0x1000000080000, @loopback}, 0x1c, 0x0, 0x0, &(0x7f00000008c0)=[@pktinfo={{0x24, 0x29, 0x32, {@remote}}}], 0x28}, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
connect$inet6(r4, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r5, 0x0)

2.869422606s ago: executing program 3:
syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x2088010, 0x0, 0x3, 0x0, 0x0)
chroot(&(0x7f0000000000)='./file0/../file0\x00')
r0 = memfd_create(&(0x7f0000000380)='sec\x18rity.selinux\x00\xab)Jr\x12k\xf4q\xf5\x06Z:y5\x06\x97\xc2&\x15\xdeq+\x94wN\xce\xac\x83\x9c\xaf\t\xc9\xebo\xda\xb0\xd6N\x80G\xcf\x15w\xe4\x0f\xfd\x00=p\xec#\xbe\x1a\xbe\x8c\xc4\x83s\xc3N\xa9>d\x9e\x14\x96\xfa\xfe\xfa.\xebv5\x97\xed\xcb\x10\xb3_\xe7BN\xcb \xe7\x9d\x8ep1e\xfe\xd7\xbf\xb1\xcf\xb0\x97\xd8B\x18\xc1\xd2\x0e\t\x92\xf1\\R\xdcX\x17\x97\xe3J\xf4\xff', 0x0)
pwrite64(r0, &(0x7f000003bfff)='/', 0x1, 0x0)
mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0)
chdir(&(0x7f0000000180)='./file0\x00')
symlink(&(0x7f0000001000)='./file0\x00', &(0x7f00000000c0)='./file0\x00')
mount(0x0, &(0x7f0000000040)='./file0/../file0/../file0\x00', 0x0, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x28, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x28}}, 0x0)
sendmsg$TIPC_NL_MON_GET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x14, r2, 0x701}, 0x14}}, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r1)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000280)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000300)={&(0x7f0000001040)={0xdd8, 0x0, 0x800, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x540, 0x11d, 0x0, 0x1, [{0x1c4, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xba}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x8f}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x174, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x40, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x2fc0, 0x0, 0x5, 0x0, 0xc7, 0x6, 0x12c6]}}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0xc, 0x30, 0x60, 0x6c, 0x12, 0x60, 0x1, 0x30, 0x48, 0x6c, 0x2, 0x4, 0x6, 0x48, 0x3, 0xb, 0x9, 0x6, 0x18, 0x24, 0x12, 0x16, 0x1, 0x30, 0x36, 0x0]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_6GHZ={0x54, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x1c, 0x2, [{0x4, 0x3}, {0x4, 0x5}, {0x1, 0x8}, {0x6}, {0x6, 0xa}, {0x5, 0xa}, {0x3, 0x5}, {0x2, 0x9}, {0x2, 0x7}, {0x4, 0x2}, {0x5, 0x9}, {0x3, 0x1}, {0x0, 0x3}, {0x1, 0x6}, {0x4, 0x3}, {0x3, 0x9}, {0x6, 0x4}, {0x4, 0x5}, {0x2, 0x4}, {0x3}, {0x7, 0x6}, {0x7, 0xa}, {0x1, 0x9}, {0x6, 0x2}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x101, 0x20, 0x0, 0x4, 0xede7, 0x5f, 0x8b]}}]}, @NL80211_BAND_6GHZ={0x40, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x20, 0x81, 0x6, 0x1, 0x101, 0x1, 0x1000]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0x469a2e16c0a9526b, 0xc, 0x48, 0x16, 0x36, 0x1b, 0x1, 0x36]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x88a9, 0x98, 0x9, 0x0, 0x3, 0x1, 0x715, 0x1]}}]}, @NL80211_BAND_6GHZ={0x30, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x0, 0xfff, 0x6, 0x2, 0x7ff, 0x5, 0x9]}}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0x18, 0x1b, 0x6, 0x4d, 0x1b, 0x9, 0x3, 0x36, 0x48, 0x9, 0x6, 0xf, 0x24, 0xc, 0x2, 0x5b, 0x1, 0x3]}]}, @NL80211_BAND_2GHZ={0x10, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xb, 0x1, [0xb, 0x36, 0x7b, 0x64, 0x60, 0x36, 0xa]}]}, @NL80211_BAND_5GHZ={0x5c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0xc, 0x1, 0x3, 0x1b, 0x60, 0x48, 0xc, 0x4, 0x60, 0x24, 0x30, 0x9, 0xc, 0x16, 0x4, 0x30, 0x5, 0x4, 0x1, 0x3, 0x4, 0x18, 0xc, 0x3, 0x18, 0x1b, 0xc, 0x24, 0x4, 0x24, 0x1b, 0x48]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1000, 0x400, 0x7, 0xc68b, 0x6, 0x4, 0x20, 0x7ff]}}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0x16, 0x30, 0x2, 0x5, 0x1, 0xb, 0x5, 0x5, 0x1b, 0x18, 0x4, 0x9, 0x60, 0xb, 0x48, 0x3, 0x1b, 0x12]}]}]}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x13}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xb4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x7fffffffffffffff}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xf9}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xffffffffffffffff}]}, {0x344, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x8f}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xd2}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x204, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x11c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x2c, 0x2, [{0x0, 0x7}, {0x2, 0x5}, {0x7}, {0x2, 0x2}, {0x1, 0xa}, {0x1, 0x3}, {0x0, 0x1}, {0x6}, {0x0, 0x4}, {0x7, 0x6}, {0x7, 0x2}, {0x6, 0x5}, {0x0, 0xa}, {0x7, 0x6}, {0x1, 0x1}, {0x5, 0x1}, {0x5, 0x7}, {0x2}, {0x0, 0x9}, {0x1, 0xa}, {0x1, 0x8}, {0x6, 0x6}, {0x1, 0x3}, {0x4, 0x9}, {0x1, 0x4}, {0x5, 0x7}, {0x4, 0x7}, {0x7, 0x6}, {0x1, 0x5}, {0x2, 0x5}, {0x4, 0x2}, {0x0, 0x7}, {0x4, 0x4}, {0x5, 0x8}, {0x3, 0x7}, {0x7, 0x6}, {0x5, 0x1}, {0x6, 0x5}, {0x1, 0x8}, {0x3, 0x9}]}, @NL80211_TXRATE_HT={0x43, 0x2, [{0x3, 0x9}, {0x5, 0xa}, {0x1, 0x4}, {0x5, 0x4}, {0x1, 0x3}, {}, {0x4, 0x3}, {0x2, 0xa}, {0x1, 0x5}, {0x1, 0xa}, {0x3, 0x3}, {0x6, 0x7}, {0x1, 0x8}, {0x1, 0x5}, {0x4, 0x9}, {0x5, 0x8}, {0x3, 0x5}, {0x4, 0x1}, {0x6, 0x4}, {0x1, 0x3}, {0x5, 0x3}, {0x0, 0x6}, {0x3, 0x1}, {0x7, 0x9}, {0x4, 0x6}, {0x7, 0xa}, {0x1, 0x1}, {0x0, 0x2}, {0x1, 0x1}, {0x6, 0x3}, {0x5, 0x3}, {0x6, 0x9}, {0x6}, {0x1, 0x7}, {0x5, 0x3}, {0x2, 0x8}, {0x3, 0x8}, {0x6}, {0x1, 0x6}, {0x7}, {0x0, 0x4}, {0x3}, {0x6, 0x3}, {0x1}, {0x2, 0x3}, {0x5, 0x6}, {0x4, 0x9}, {0x5, 0x7}, {0x5}, {0x4, 0x9}, {0x0, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x6, 0x9}, {0x0, 0x6}, {0x6, 0x1}, {0x5, 0x6}, {0x7, 0x5}, {0x6, 0x4}, {0x3, 0x4}, {0x2, 0x9}, {0x1, 0x3}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4dce, 0x5, 0x7fff, 0x101, 0x3, 0x1, 0xf301, 0x2]}}, @NL80211_TXRATE_HT={0x17, 0x2, [{0x5, 0x9}, {0x3}, {0x0, 0x7}, {0x6, 0x8}, {0x0, 0x3}, {0x5, 0x2}, {0x2}, {0x6, 0x6}, {0x2, 0x7}, {0x0, 0x8}, {0x5, 0x9}, {0x6, 0xa}, {0x6, 0x3}, {0x3, 0x1}, {0x7, 0x1}, {0x5, 0x1}, {0x7, 0x8}, {0x5, 0x6}, {0x0, 0x7}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x6, 0x4, 0x9, 0x80, 0x200, 0x100, 0x3]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x47, 0x2, [{0x3, 0x2}, {0x3, 0x9}, {0x1}, {0x6, 0x8}, {0x0, 0x9}, {0x7, 0x1}, {0x0, 0x2}, {0x7, 0x4}, {0x1, 0xa}, {}, {0x6, 0x1}, {0x0, 0x5}, {0x6, 0x15}, {0x4, 0x8}, {0x3, 0x7}, {0x0, 0x9}, {0x4, 0x4}, {0x0, 0x9}, {0x4, 0x9}, {0x0, 0x2}, {0x2, 0x2}, {0x7, 0x9}, {0x1}, {0x7, 0x6}, {0x1, 0x2}, {0x7, 0x3}, {0x5, 0x8}, {0x1, 0x9}, {0x2, 0x1}, {0x1, 0x8}, {0x1, 0x8}, {0x4, 0xa}, {0x1, 0x3}, {0x7, 0x4}, {0x2, 0x6}, {0x2, 0x5}, {0x7, 0x8}, {0x5, 0x5}, {0x5, 0xa}, {0x1, 0x6}, {0x0, 0x3}, {0x6, 0xa}, {0x2, 0x1}, {0x2, 0x6}, {0x3, 0x4}, {0x7, 0x4}, {0x5, 0x8}, {0x1, 0x4}, {0x2, 0x8}, {0x0, 0x1}, {0x4, 0x2}, {0x7, 0x3}, {0x6}, {0x5, 0x7}, {0x1, 0x9}, {}, {0x3, 0x8}, {0x3, 0x5}, {0x2, 0xa}, {0x2, 0xa}, {0x5, 0x3}, {0x2, 0x2}, {0x0, 0x5}, {0x7}, {0x1, 0x6}, {0x6, 0x2}, {0x6, 0x9}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_60GHZ={0x7c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x40, 0x6, 0x5, 0x0, 0x5, 0xfffd, 0x3]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x3f, 0x2, [{0x0, 0x3}, {0x1, 0x1}, {0x4}, {0x6, 0x6}, {0x5, 0xa}, {0x3, 0x5}, {0x2, 0x8}, {0x2, 0x9}, {0x7, 0x4}, {0x7, 0xa}, {0x1, 0x5}, {0x5, 0x7}, {0x1, 0x7}, {0x4, 0x1}, {0x3, 0x7}, {0x5, 0xa}, {0x0, 0x9}, {0x6, 0x6}, {0x1, 0x1}, {0x4, 0x5}, {0x4, 0x8}, {0x5, 0x5}, {0x1, 0x3}, {0x2, 0x7}, {0x6, 0xa}, {}, {0x0, 0x5}, {0x6, 0x4}, {0x7, 0x8}, {0x2, 0x1}, {0x0, 0x7}, {0x3, 0x8}, {0x6}, {0x4, 0x4}, {0x5, 0x1}, {0x0, 0x8}, {0x0, 0x8}, {0x3}, {0x4, 0x4}, {0x0, 0x3}, {0x1, 0x3}, {0x7, 0x4}, {0x5, 0x6}, {0x3, 0x8}, {0x0, 0x3}, {0x3}, {0x1, 0x9}, {0x1, 0x7}, {0x2}, {0x2, 0x2}, {0x2, 0x1}, {0x7, 0x7}, {0x3}, {0x1, 0x6}, {0x6, 0x3}, {0x1, 0x9}, {0x7, 0x1}, {0x3, 0x2}, {0x6, 0x5}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3b, 0x4, 0x6, 0xa00, 0xfffa, 0x4, 0x6, 0x80]}}]}, @NL80211_BAND_6GHZ={0x28, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x2, 0x6, 0x8, 0x3, 0x20, 0x3f, 0x1ff]}}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x3ff, 0x1, 0x100, 0xdea2, 0x2, 0x9, 0x4]}}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x0, 0x2, 0x7, 0x3ff, 0x3, 0x0, 0x101]}}, @NL80211_TXRATE_LEGACY={0x6, 0x1, [0x2b, 0x2]}, @NL80211_TXRATE_HE_LTF={0x5}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x100, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x3c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x8, 0x0, 0x1, 0x54a, 0x3, 0x32, 0x6]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x7, 0x3f, 0x7, 0x1, 0x8000, 0x3, 0x81]}}]}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_6GHZ={0x14, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_6GHZ={0x1c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_60GHZ={0x68, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x3b, 0x2, [{0x5, 0x6}, {0x3}, {0x3, 0xa}, {0x3, 0x7}, {0x6, 0x1}, {0x3, 0x1}, {0x4, 0x2}, {0x1, 0x4}, {0x1, 0x1}, {0x7, 0x3}, {0x5}, {0x1, 0xa}, {0x4, 0x4}, {0x4, 0x5}, {0x6, 0x8}, {}, {0x4}, {0x1, 0xa}, {0x3, 0xa}, {0x2, 0x8}, {0x4, 0x5}, {0x0, 0x2}, {0x1, 0x6}, {0x3, 0x8}, {0x2, 0x6}, {0x2}, {0x3, 0x5}, {0x1, 0x1}, {0x6, 0x6}, {0x1}, {0x0, 0x8}, {0x4, 0x9}, {0x4, 0x5}, {0x3, 0x1}, {0x2, 0xa}, {0x5, 0x9}, {0x5, 0x9}, {0x7, 0x6}, {0x0, 0x6}, {}, {0x2, 0x2}, {0x6, 0x9}, {0x3, 0x1}, {0x7, 0x1}, {0x2, 0x3}, {0x0, 0x6}, {0x0, 0x2}, {0x6, 0x5}, {0x3, 0xa}, {0x3, 0x5}, {0x2, 0x6}, {0x3, 0x1}, {0x4}, {0x3, 0x3}, {0x0, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x6c]}, @NL80211_TXRATE_GI={0x5}]}]}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}]}]}, @NL80211_ATTR_TID_CONFIG={0x150, 0x11d, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xe1}]}, {0x130, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xf0, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x48, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0xff97, 0x3, 0xe2, 0x8]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x0, 0xfff, 0x1000, 0x3da6, 0x8000, 0x0, 0x2]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_2GHZ={0x3c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x12, 0x2, [{0x0, 0x3}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x4, 0x3}, {0x2}, {}, {0x0, 0x3}, {}, {}]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x2a, 0xff, 0x8, 0x7, 0x0, 0x6616]}}]}, @NL80211_BAND_2GHZ={0x50, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x2, 0x1, 0x0, 0x0, 0xc, 0x0, 0x0, 0x5, 0xc, 0x0, 0x12, 0x24, 0x0, 0x1, 0x48, 0x0, 0x48, 0x0, 0x36, 0x1b, 0x48, 0x5, 0x1b]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3f, 0x0, 0x0, 0xdb9, 0x0, 0xa5ed]}}, @NL80211_TXRATE_VHT={0x14}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x9, 0x1, [0x0, 0x0, 0x0, 0x0, 0x36]}, @NL80211_TXRATE_GI={0x5}]}]}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x284, 0x11d, 0x0, 0x1, [{0xc8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x7}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x6}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x94, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x90, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2]}}, @NL80211_TXRATE_HT={0x15, 0x2, [{}, {}, {}, {0x6, 0x9}, {}, {}, {0x0, 0xa}, {}, {}, {}, {0x0, 0xa}, {0x1}, {}, {0x3}, {}, {}, {0x6}]}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x3, 0x5}, {}, {0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x4}, {0x1, 0x4}, {0x7, 0x2}, {}, {0x7, 0x2}, {0x2, 0x8}, {0x7}, {0x0, 0x7}, {}, {}, {}]}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x8, 0x24, 0x48, 0x0, 0x1a, 0x0, 0x0, 0x0, 0x0, 0x12, 0x16, 0x6, 0x1b]}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x0, 0x0, 0x0, 0x0, 0x3]}, @NL80211_TXRATE_HT={0x23, 0x2, [{0x7}, {}, {0x2}, {0x1, 0x7}, {}, {0x1}, {0x1, 0x7}, {0x0, 0x4}, {0x4, 0x2}, {}, {0x0, 0x8}, {0x1, 0x1}, {0x1}, {0x0, 0x1}, {0x0, 0x8}, {0x2, 0x8}, {}, {0x1}, {}, {0x0, 0x3}, {0x2}, {}, {0x7, 0x2}, {}, {}, {0x2, 0xa}, {0x7}, {0x3, 0x1}, {}, {}, {0x5}]}]}]}]}, {0x128, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x10c, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x4}, @NL80211_BAND_5GHZ={0x2c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x12, 0x9, 0x0, 0x4, 0x1]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x2, 0x0, 0xb, 0x3, 0x3, 0x0]}]}, @NL80211_BAND_6GHZ={0x20, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x7]}}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x50, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x7c, 0x0, 0x0, 0x1, 0x0, 0x1, 0x4]}}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x1}, {0x1}, {}, {0x0, 0x9}, {0x0, 0x1}, {0x2, 0x2}, {0x7, 0x5}, {0x0, 0x6}, {0x3, 0xa}, {0x0, 0x5}, {}, {0x6, 0x6}, {0x6, 0x5}, {}, {0x5, 0x3}, {0x7, 0x6}, {0x1, 0x3}, {0x3, 0x9}, {0x3, 0x8}, {0x7, 0x8}, {}, {}, {0x0, 0x8}]}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x30, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x9, 0x0, 0xf2, 0x0, 0x0, 0x0, 0x4]}}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0x0, 0x0, 0x5, 0x0, 0x0, 0x60, 0x6, 0xc, 0x6c, 0x0, 0x0, 0x0, 0x16, 0x0, 0x6c, 0x48, 0x0, 0x30]}]}, @NL80211_BAND_5GHZ={0x38, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2ccf, 0x8, 0x1, 0x8001, 0x0, 0x4]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x41}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x50, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x44, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x4}, @NL80211_BAND_5GHZ={0x3c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1000, 0x4, 0xbd60, 0x8, 0xfff9, 0x0, 0x9]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x49}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x100000000}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}]}, @NL80211_ATTR_TID_CONFIG={0x438, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}, {0x64, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x40, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x3c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x1f, 0x5, 0x6, 0x5, 0x1, 0x0, 0x1]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xff00, 0x2299, 0x0, 0x0, 0x0, 0x6, 0x0, 0x6]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0x6, 0x1, [0x0, 0x7a]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe8}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x80000000}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5}]}, {0x278, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x5c, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x4c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x5, 0xfc6b, 0x100, 0xaa, 0xff, 0x1, 0x1]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x18, 0x60, 0x0, 0x16, 0x6, 0x5, 0x24, 0xc3, 0x60, 0xb, 0x1b, 0x6, 0xc, 0x1b, 0xc, 0x6, 0x24]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x3, 0x1000, 0x9, 0x7fff, 0x1ff, 0x7f, 0x7]}}]}, @NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}]}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x6}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x60, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x4}, @NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x0, 0x1, 0x0, 0xfbff, 0x0, 0x5, 0x8]}}]}, @NL80211_BAND_6GHZ={0x3c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x9fc, 0x5, 0x0, 0xc79b, 0x2, 0x3]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x0, 0x30, 0x0, 0x24, 0x5a, 0x0, 0x60, 0x24, 0x0, 0x6c, 0x0, 0x18, 0x48, 0x0, 0x60, 0x3, 0x0, 0x0, 0x3, 0x1b, 0x0]}]}, @NL80211_BAND_6GHZ={0x4}]}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x194, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x30, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x0, 0xfffb, 0xa7, 0x0, 0x0, 0x6, 0x9]}}]}, @NL80211_BAND_6GHZ={0x28, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x198, 0x0, 0x9, 0xfff9, 0x200, 0x20, 0x7f]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_2GHZ={0x1c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x17, 0x1, [0x18, 0x18, 0x12, 0x12, 0x0, 0x0, 0x4, 0x36, 0x6c, 0x6, 0x2, 0x60, 0x48, 0x2, 0x5, 0x1b, 0x6, 0x6c, 0x0]}]}, @NL80211_BAND_6GHZ={0x58, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xd, 0x1, [0x0, 0x5, 0x0, 0x18, 0x12, 0x0, 0x0, 0x18, 0x6]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x0, 0x7, 0xff, 0xa00, 0x82fc, 0x3, 0xc03]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x20, 0x2, [{0x4, 0x7}, {0x0, 0x4}, {0x5, 0x1}, {0x5, 0x6}, {0x2}, {0x0, 0x5}, {0x0, 0x7}, {0x7, 0x9}, {0x7, 0x2}, {0x5, 0x7}, {0x7}, {0x0, 0x1}, {0x3, 0x8}, {0x7}, {0x6}, {0x4, 0x1}, {0x7, 0x2}, {0x0, 0x4}, {0x0, 0x1}, {0x3}, {0x5, 0xa}, {0x1, 0x7}, {0x4, 0xa}, {0x1}, {0x1, 0x6}, {0x7, 0x5}, {0x7}, {0x1, 0x2}]}]}, @NL80211_BAND_2GHZ={0x4}, @NL80211_BAND_5GHZ={0x7c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x7f, 0xffff, 0x0, 0x200, 0x1]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0xfffa, 0xd, 0x8, 0x8, 0x0, 0x0, 0xa00f]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x25, 0x2, [{0x4, 0x9}, {0x1, 0xa}, {0x1, 0x5}, {0x1}, {0x3, 0x5}, {0x6}, {0x1, 0x1}, {0x2}, {}, {0x5}, {}, {}, {0x0, 0x4}, {0x1, 0x5}, {0x4}, {0x0, 0x3}, {0x2, 0x5}, {0x2, 0x5}, {0x0, 0x1}, {0x3}, {0x2, 0x2}, {0x6, 0x1}, {0x5, 0x1}, {0x5, 0x2}, {0x6}, {0x0, 0x3}, {0x7, 0x3}, {0x1}, {0x3, 0x8}, {0x4, 0x9}, {0x0, 0x1}, {0x2}, {0x4, 0x6}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x8, 0x1, [0x12, 0x9, 0x5, 0x1]}]}, @NL80211_BAND_6GHZ={0x38, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x5e, 0x0, 0x0, 0x40, 0x9, 0x0, 0x9]}}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x16, 0x9, 0xb, 0xb, 0x9, 0x36, 0x3, 0x3, 0x12, 0x0, 0x0, 0x3, 0x9, 0x36, 0x18, 0x6c, 0x0, 0x0, 0x48, 0x12, 0x6, 0x0, 0xe5a56d6e1dab7580, 0x5, 0x5]}]}]}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xed}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x80000001}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x7}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0xc0, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x68, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x4}, @NL80211_BAND_60GHZ={0x1c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_6GHZ={0x44, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x25, 0x2, [{0x4}, {0x0, 0x4}, {0x6, 0x7}, {0x3, 0x4}, {0x4, 0x4}, {}, {0x0, 0x7}, {0x2}, {0x6}, {0x6, 0x2}, {0x7}, {0x2, 0x2}, {0x1}, {0x7, 0x6}, {0x0, 0x9}, {0x6, 0x5}, {0x3}, {0x3, 0x8}, {0x0, 0x8}, {}, {0x7, 0x1}, {0x3, 0x6}, {}, {0x5, 0x8}, {0x4, 0x3}, {0x3}, {0x3, 0x4}, {0x1, 0x9}, {0x6, 0x7}, {0x4, 0x5}, {0x0, 0x7}, {0x1, 0x6}, {0x0, 0x4}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x18, 0x18, 0x18, 0x1, 0x1, 0x36, 0xb, 0x0, 0x4, 0x0, 0x2]}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x70, 0x11d, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x65}]}, {0x50, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x90}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xfc}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x10, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x47}]}]}]}, 0xdd8}, 0x1, 0x0, 0x0, 0x40000}, 0x0)

2.771848751s ago: executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={0xffffffffffffffff, 0x0, &(0x7f00000005c0)=""/155}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
syz_open_dev$evdev(0x0, 0x0, 0x402040)
sched_setscheduler(0x0, 0x2, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='autogroup\x00')
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r4}, 0x10)
r5 = socket$igmp(0x2, 0x3, 0x2)
sendmmsg$inet(r5, &(0x7f0000004840)=[{{&(0x7f0000000000)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="240000000000000000000000070000004414090300000000000000007f00000100000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414"], 0x48}}], 0x1, 0x0)

2.639822241s ago: executing program 4:
sched_setscheduler(0x0, 0x3, &(0x7f0000000100)=0xf4) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = userfaultfd(0x1) (async)
socket$key(0xf, 0x3, 0x2)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
r3 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8), 0xfffffffffffffd5e) (async)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21}, &(0x7f0000bbdffc)) (async)
timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) (async)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
unshare(0x0) (async)
epoll_create1(0x0) (async)
poll(&(0x7f00000000c0)=[{r2, 0x200}, {r3, 0x9000}, {r1, 0x20}, {r4, 0x2}], 0x4, 0x9) (async)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) (async)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r6}, 0x10)
close(r6) (async)
dup2(r5, r6) (async)
ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r4, 0x8983, &(0x7f0000000080))
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x100000000, 0x4}, 0x0, &(0x7f0000000040)={0x3ff, 0x0, 0xfffffffffffffffd}, 0x0, 0x0)
r7 = accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000000))
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000080)={@remote, 0xff, 0x1, 0x0, 0x0, 0x2, 0x9}, 0x20) (async)
ioctl$BTRFS_IOC_START_SYNC(r7, 0x80089418, &(0x7f00000000c0)=<r8=>0x0)
ioctl$BTRFS_IOC_SNAP_CREATE_V2(r7, 0x50009417, &(0x7f0000000280)={{r7}, r8, 0x10, @inherit={0x60, &(0x7f0000000100)={0x0, 0x3, 0xd58c, 0x7, {0x3, 0x7, 0xffffffffffffffff, 0x5, 0x35f08447}, [0x7, 0x2, 0x8]}}, @name="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"}) (async)
ioctl$BTRFS_IOC_GET_DEV_STATS(r2, 0xc4089434, &(0x7f0000000200)={<r9=>0x0, 0x7f, 0x1, [0x1, 0x4, 0x0, 0x7fffffff, 0x80000000], [0xda8c, 0x7, 0x3, 0x8000000000000000, 0x8000, 0x20000000000, 0x1, 0x3, 0x1ff, 0x9, 0x8, 0x9cb, 0x6, 0xffffffff, 0x6, 0x1ff, 0x8dbf, 0x7, 0x7, 0x8, 0xd6a, 0xffffffff7fffffff, 0x7fffffff, 0xfffffffffffffffc, 0x4, 0x7fffffff, 0x2, 0x8001, 0x10000, 0x8000000000000000, 0x5, 0x4, 0x6, 0x5, 0x8, 0x7, 0x0, 0x4, 0x1, 0x6, 0x7, 0x8000800000, 0xfffffffffffffffd, 0x8, 0x9f, 0x2, 0x5, 0x7fff, 0x2, 0x5, 0x8, 0x2, 0x2, 0x200, 0x5, 0x2, 0x4, 0x934, 0x800, 0xfffffffffffff929, 0xd10, 0x1, 0x3f, 0x4, 0x401, 0x3f, 0x19, 0x80000001, 0x1, 0x3f, 0x2, 0xffff, 0xa9, 0xa00, 0x0, 0x1fc000000000000, 0x2, 0x6, 0xaf78, 0x1000, 0x1, 0xac4, 0x6, 0x3, 0x2, 0x7, 0x3, 0x5, 0x8001, 0xf28, 0x2, 0x1, 0x10001, 0x4, 0xffff, 0x8, 0x2, 0x5, 0x4679, 0x5e05, 0x1, 0x7f, 0x8000000000000000, 0x6444, 0xe37e, 0x80000001, 0x80, 0xfffffffffffff1f4, 0x7fffffffffffffff, 0x100000000, 0x7, 0x3f, 0x62c1, 0x8, 0x80, 0x9, 0x4, 0x1, 0x1, 0x1282, 0x1]})
ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r4, 0x5000943f, &(0x7f0000000640)={{r0}, r8, 0x6, @inherit={0x70, &(0x7f0000000140)={0x0, 0x5, 0x8, 0x88c, {0x22, 0x5, 0x1, 0x36, 0x9a}, [0x5, 0x9, 0xffffffffffffffff, 0x800, 0x80000000]}}, @devid=r9})

2.619325804s ago: executing program 4:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100))
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r3 = dup3(r2, r1, 0x0)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x4c, 0x0, &(0x7f0000000240)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f00000004c0)={@flat=@binder={0x73622a85, 0x10b, 0x2}, @flat=@weak_handle={0x77682a85, 0x80b}, @flat=@binder={0x73622a85, 0x0, 0xffffffffffffffff}}, &(0x7f0000000140)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})
read$FUSE(r0, 0x0, 0x0)

2.566802753s ago: executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={0xffffffffffffffff, 0x0, &(0x7f00000005c0)=""/155}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
syz_open_dev$evdev(0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='autogroup\x00')
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r4}, 0x10)
r5 = socket$igmp(0x2, 0x3, 0x2)
sendmmsg$inet(r5, &(0x7f0000004840)=[{{&(0x7f0000000000)={0x2, 0x4, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="240000000000000000000000070000004414090300000000000000007f00000100000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414"], 0x48}}], 0x1, 0x0)

2.159197856s ago: executing program 2:
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x0, 0x10, 0x2}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x0, 0x3, &(0x7f0000000680)=@framed={{0x18, 0x8}}, 0x0}, 0x90)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r0 = socket(0x10, 0x803, 0x0)
r1 = socket(0x1, 0x1, 0x0)
getsockname$packet(r1, 0x0, &(0x7f0000000200))
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=ANY=[@ANYBLOB="400000001400b59500000000fcff00000a400000", @ANYRES32, @ANYBLOB="1400020000000000000000000000e5ffac141400140006000000000006"], 0x40}}, 0x0)
r2 = socket(0x10, 0x803, 0x0)
r3 = socket(0x1, 0x803, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c0000001400b59500000000000000000a400000", @ANYRES32=r4, @ANYBLOB="1400020000000000000000000000ffff"], 0x2c}}, 0x0)

2.148471587s ago: executing program 2:
mkdir(&(0x7f0000000400)='./file1\x00', 0x0)
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000380), 0x4000000000001c2, 0x8000)
unshare(0x400)
r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$UI_END_FF_ERASE(r4, 0x4004556a, &(0x7f00000000c0))
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000240000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000ec0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CMP_DATA={0x8, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}, @NFTA_CMP_SREG={0x8}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc8}}, 0x0)
symlinkat(&(0x7f0000000140)='./file2\x00', r0, &(0x7f00000003c0)='./file0\x00')
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f0000000140)='./bus\x00')
link(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='./bus\x00')
r7 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TCSETSW(r7, 0x5432, 0x0)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r8, &(0x7f0000000000), 0xfea7)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r8, 0x0)

1.825776637s ago: executing program 0:
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x19, 0x4, 0x4, 0x5}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="07000000642044e35aa100000000000018110041", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000dd897b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
socket$nl_netfilter(0x10, 0x3, 0xc)
unshare(0x0)
socket$packet(0x11, 0x3, 0x300)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000538000/0x4000)=nil, 0x4000, 0x7, 0x10, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x30, r6, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0)
r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={<r8=>0xffffffffffffffff})
dup3(r8, r7, 0x0)

1.800130901s ago: executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10)
r1 = syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x0, &(0x7f0000000240), 0x21, 0x4a6, &(0x7f0000000a40)="$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")
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
r5 = openat$cgroup_procs(r1, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0)
lseek(r5, 0x1, 0x3)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
connect$bt_l2cap(r6, &(0x7f0000000000), 0xe)
shutdown(r6, 0x0)

1.590066473s ago: executing program 4:
r0 = syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x4500, &(0x7f0000000200)={[{@errors_remount}, {@noquota}, {@nouid32}, {@auto_da_alloc_val}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x1}}, {@journal_dev={'journal_dev', 0x3d, 0x3}}, {@barrier}, {@nobh}, {@nogrpid}]}, 0x10, 0x4c6, &(0x7f0000000ec0)="$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")
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_timeval(r1, 0x1, 0x0, &(0x7f0000000100)={0x0, 0x2710}, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
r6 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x0)
ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x5522, 0x0)
ioctl$USBDEVFS_DISCONNECT_CLAIM(r6, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"})
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
setreuid(0x0, 0x0)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000c40)={&(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfc, 0x1}, 0xc, &(0x7f0000000b40)=[{&(0x7f0000000300)={0x1e4, 0x32, 0x20, 0x70bd2a, 0x25dfdbfb, "", [@generic="40cdf4640f81c6c8227e70d81239e9ac0260e2fbc47d824c3edb84c9353352f1e8af08c0817f99b187b1bde403e9d6c3f02ef3ad52e717250a529278635a6b79a2b06f86cd5d7cbb5d6b3e2998a8a6541a7788acfb6eddc3713eb18fb000936aa1126b195ea724faa3ccd9f20754fc2ee54c8eb934bf2a5ac6ee1174857a0772acda3c3455f74358209135ec75b53e46abda6bb69196e33af4788b8aa27465c26f117f684df783f5585c74dc560861256d8c172d87a4dce28f6b1d0efd10115effd84c19df76ac941b1d53798e653b9a9bf50c3d32e01e52cf742b", @generic="f8c9c2e05a13f94e5c238f6a8bd4b910b22829a250cc99f91d5b1a0a4182f0ed9902e77d31db166d7ea9e4a0f35b819870db58d3ae800c3827b62e7b0f452643da7c5eb6e2a7ef62ee40c5183d8e71f2e561120784c95f929580ff54b5fe747af7f539c5", @typed={0x8, 0x46, 0x0, 0x0, @ipv4=@rand_addr=0x64010100}, @generic="191ab175b6cee5187865a4659e48de66b1564874", @generic="785f5794332cd8e733241fe62ce41b5f91495612797f1b60a9aedac6cd4fdad554f2cd95fe1cae46a72293dfd67afb58925e083e349d3453da29ae7b232d3670303816b59f0bc2c386030a79e47babec30fd1a5aa0316eefea5c3ef098751c0ff4317d8d8778aeb106cdc8c69eb2644e9ecdda26eeaa"]}, 0x1e4}, {&(0x7f0000000640)={0x154, 0x1b, 0x800, 0x70bd29, 0x25dfdbfe, "", [@generic="96f100d0411b7cd791d7a684603fb28e075de0e9814eb04094a4a4ea4452", @nested={0x107, 0x61, 0x0, 0x1, [@generic="3ac14416a9c4fc8f7ae20f34736101915ce5a6b9100c23f84ada6c2c1ff7e746e3deec7f6f4ecd3efc3d4eac0fcb6774b19b2c6585f22ceb5f62d145fa732922e8ea86baeb7b8b7bc6972726801fd814ccdd6099f10922d002a80b8d84f6a8f990a426b23b273d2039c97c86c3789af37ad80cb2e64b2c877dcf15d01b0b03ac1260a6928cb95f7bb797d7839b52755cc30565905ff511cee1a99139beb64f1aca8c35ddfbd0c36ba0e8c8ea3165d385cbd1ce423cba3d7bddf910280a836cbcd2e58b6ca3587cb0a56d16da06336aa615c76814844bd657d6b579", @typed={0xc, 0xd7, 0x0, 0x0, @u64=0x4}, @typed={0x8, 0x2, 0x0, 0x0, @uid}, @typed={0x11, 0x1d, 0x0, 0x0, @str='auto_da_alloc'}]}, @generic="924dc1ea5dfb0e54c58dc38d72cad065af", @typed={0x8, 0x12a, 0x0, 0x0, @uid}, @typed={0x4, 0x50}]}, 0x154}, {&(0x7f0000002740)=ANY=[@ANYBLOB="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"], 0x1180}, {&(0x7f0000000180)={0x1c, 0x1c, 0x10, 0x70bd2b, 0x25dfdbfb, "", [@typed={0xc, 0xdb, 0x0, 0x0, @u64=0xfffffffffffffffc}]}, 0x1c}, {&(0x7f00000007c0)={0x144, 0x2e, 0x2c82629f00a770db, 0x70bd2a, 0x25dfdbfc, "", [@nested={0x12b, 0x71, 0x0, 0x1, [@generic="f9604ec029fb22517570c36dcde6ff64b5136f1815c64e47c99d7e1857b4f49b8fa165bd054eea48f11f015f8c3c7d6b8fcb1276d2d0ab9b1dd2a8f8fd35ec5a01bcda6dca7260c9788118442f1182ea245c3c7dea259be3bc2659f4bd7f446aad3d6802dc572b2e62c25aed4e765c33a1ae7072974be0dfac9eddd21cc5d6d98979e25826518635a49b59b80221e1f771c5b8c4f9d3820a2b04380e47c2af31e8fe9ddf3e0ef69f2dee0d1c31c9bea7fa", @generic="236d45f5c0238ca0a1a3bb6b4d4b42aa266c0ed3412c96e45516d21a4b9834dfe5a9fd3a849449350c1a31c35f0834afb77e0618448748b81d19f39d75c0f308d5cdee8224f8a7ba3cbd7a407eaa6419f180387c44c02a2b4d9c9e63a6bc4bc8db9e433feeaf43cea598647afab2d080c3e648ad14e3"]}, @typed={0x8, 0x99, 0x0, 0x0, @pid=r2}]}, 0x144}, {&(0x7f0000000c80)=ANY=[@ANYBLOB="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", @ANYRES32=r2, @ANYBLOB='\x00\x00'], 0x1c8}], 0x6, &(0x7f0000000bc0)=[@rights={{0x20, 0x1, 0x1, [r0, r6, r1, r0]}}, @rights={{0x1c, 0x1, 0x1, [r7, 0xffffffffffffffff, r6]}}, @rights={{0x18, 0x1, 0x1, [r5, r0]}}], 0x58, 0x4000080}, 0x4000000)
ioctl$USBDEVFS_SETINTERFACE(r6, 0x80045510, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000000)=ANY=[], &(0x7f0000000200)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000}, 0x90)
syz_open_dev$evdev(0x0, 0xfffffffffffffffd, 0x0)
socket$tipc(0x1e, 0x5, 0x0)
setreuid(0x0, 0x0)
open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0)
mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)

1.271432313s ago: executing program 2:
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r3, 0x6, 0x17, &(0x7f0000000180), 0xc2)

585.155059ms ago: executing program 3:
unshare(0x2000400)
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6000, 0x1) (async)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40101283, 0x0) (async)
r1 = socket$inet_udp(0x2, 0x2, 0x0) (async)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r2, &(0x7f0000000080)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x3, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}}}, 0x32)
close(r1) (async)
close(r2) (async)
r3 = socket(0x1e, 0x4, 0x0) (async)
r4 = socket(0x1e, 0x4, 0x0)
fgetxattr(r4, &(0x7f0000000080)=@random={'os2.', '-[,:\x00'}, &(0x7f0000000100)=""/175, 0xaf)
setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) (async)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10)
syz_mount_image$f2fs(&(0x7f00000004c0), &(0x7f0000000040)='./bus\x00', 0x2008410, &(0x7f0000000500)=ANY=[], 0x1, 0x5549, &(0x7f0000002100)="$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") (async)
sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) (async)
dup3(r3, r4, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)

572.303591ms ago: executing program 0:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100))
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r3 = dup3(r2, r1, 0x0)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000040))
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x4c, 0x0, &(0x7f0000000240)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f00000004c0)={@flat=@binder={0x73622a85, 0x10b, 0x2}, @flat=@weak_handle={0x77682a85, 0x80b}, @flat=@binder={0x73622a85, 0x0, 0xffffffffffffffff}}, &(0x7f0000000140)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})
read$FUSE(r0, 0x0, 0x0)

528.532948ms ago: executing program 0:
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x4500, &(0x7f0000000300)={[{@init_itable}, {@noquota}, {@nouid32}, {@barrier}, {@resgid}, {@journal_dev={'journal_dev', 0x3d, 0x1ff}}, {@barrier}, {@acl}, {@bh}]}, 0x10, 0x4e0, &(0x7f00000013c0)="$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")
open(&(0x7f0000000180)='./bus\x00', 0x14d27e, 0x0)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
r0 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000400)='./bus\x00', 0x0, &(0x7f0000000840)=ANY=[], 0x1, 0x37f, &(0x7f0000000440)="$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")
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000440)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x483, &(0x7f0000000000)={0x0, @remote, 0x4e23, 0x4, 'none\x00', 0x28, 0xfffffffa, 0x2e}, 0x2c)
setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88)
setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000780)={0x2, {{0x2, 0x4e22, @multicast2}}, 0x1, 0x2, [{{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @empty}}]}, 0x190)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r2, 0x8983, &(0x7f00000004c0)={0x2, 'lo\x00', {0x4}, 0xe5})
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000cc0)=@raw={'raw\x00', 0x2, 0x3, 0x260, 0x0, 0xe8, 0x0, 0xe8, 0x0, 0x1c8, 0x1c8, 0x1c8, 0x1c8, 0x1c8, 0x3, 0x0, {[{{@ip={@loopback, @rand_addr, 0x0, 0x0, 'bridge0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@inet=@multiport={{0x50}, {0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4e21], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1]}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ip={@remote, @dev={0xac, 0x14, 0x14, 0x1a}, 0x0, 0xffffffff, 'team_slave_1\x00', 'macsec0\x00', {}, {}, 0x1d, 0x2, 0x4}, 0x0, 0x98, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2c0)
ioctl$sock_inet_SIOCSARP(r3, 0x8953, &(0x7f00000000c0)={{0x2, 0x0, @local}, {0x0, @remote}, 0x0, {0x2, 0xfffe, @local}})
r4 = socket(0x10, 0x803, 0x0)
write(r4, &(0x7f0000000300)="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", 0xfc)
accept4(r4, &(0x7f0000000680)=@ax25={{0x3, @rose}, [@null, @null, @null, @rose, @netrom, @bcast, @default]}, &(0x7f0000000480)=0x80, 0x100000)
setsockopt$inet_group_source_req(r4, 0x0, 0x2c, &(0x7f00000002c0)={0x7, {{0x2, 0x4e23, @multicast2}}, {{0x2, 0x4e21, @remote}}}, 0x108)
setsockopt$inet_group_source_req(r3, 0x0, 0x2e, &(0x7f0000000180)={0x7, {{0x2, 0x4e22, @rand_addr=0x64010102}}, {{0x2, 0x4e21, @broadcast}}}, 0x108)
close(r1)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r5, 0x0, 0x2a, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88)
sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000400)={&(0x7f0000000080)={0x1c, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000740)=ANY=[@ANYBLOB="61128c000000000061138c0000000000bf2000000000000015000000081400002d0301000000000095000000000000006916600000000000bf67000000000000260600000fff07106706000015000000170300000ee60060bf050000000000001d360000000000006507f9ff01000000a70700004c000000cc75000000000000bf54000000000000070400000400f9ffad4301000000000095000023000000000500000000000000950000000000000032ff7f5be95e09b67754bb12feffffff8ecf264e0f84f9f17d3c51e3c7bdd2d17f2f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd399703d6c4f6f3be5b369289aa6812b8e007e733a9a4f16d0abbd5ad9381806ef08513e3d3778a814261bdb94a05000000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe01c5473d51b546cad5b803306b17cf4ef3f1d45f65727546e7c955ccefa1f6ab689fde4de4e63edf10271a5144ddc8da3aa5b0ab733a1b901627b562ed04ae76002d4519af619e3a2a4d69e0dee5eb106774a8f3e6916dfec88b5634ef79b02d2ca8ff54c158f0200000000eafb735fd552bdc206004aeb0743eb2dc819cf5c8ac86d8a297dff0445a13d00dce431e56723888fb126a163f16fb2ad9bc1172ba7cbebe174cecac4d03723f1c932b3faffffffffffffff5fc998e13b670e373e3e5897f7ad2e99e0e67a993716dbf580469f0f53acbb40b401e3738270b315d362ed834f2a0700000096649a462e7ee4bcf8b07a101c879730beb4000000000000000000000000000000bc00f674629709e7e78f4ddc3d1bc3ebf0bd9d42ca019dd5d022cf7468659fbe2562671cd47840a7afaab43176e65ec1118d46d1e827f3472f4445d253887a5ad103649afa17690884f800031e03a651bb96589a7eab04871bc47287cd313f3bea788ea2bcdc340ffb567b40407d000000000000000000000000005f37d83f84e98a523d80bd0d0d7039dd21be3f3767ce603c9d48cac052ca363f601ae899a53f67b63d20a268bb9f15a0a6e66ce4660fbee91629ab028acfc1d9260e9659a0f6a5480a55c22fe3ae5f562d0ae520c38d2bab6528000000596fb73a96b33c81cdbbd421a27f7f1db054cc7a0a4d372849c99a98822103b9851d924b85b1ca4b21b187db00000000000000066dead3b9670a7604a5ddd0fd2e4fb8a5749a8a8ad78454ba1eebeff1b528da294247d294d2487babb176fdfafeb3d492a325671e6b91afb41f87feda4ce2f468a3758750c0b8f151d4d8574bbbe027687a0e12311cdf3384a26ee3f6f2424b92e5be98ef1f8f2db9a4991e234f9f447e1730ceaf54cf25c0e3ad7cbb0de06d55db89d154c9d3fcd01c551b0ef5d5305845b9a8763b264e8f0bcd0f606fe92e511f122325ebc5fef1b67845d0eb8b8a4f97f83424221e94a5c4623feb8496ccdbc55b27773bfeffe6a91a20e0c27fc80262647f88d8d1123d199b2c7729bb7700e887ea963f00004a1d0851dbfb9308d16cadcc7b477c9a84e3d6bd82526898735552a203c4797228533b1a73ab44aa115136353964648abcc4adbe765556643842290a92eafea0ec2c000000000000000000000000000000e1f3518dc3fc2bbefe043804ac1b6b1c8b7e3afed045a3a808700bca61a39d5bfa83877803013e2d145e642253632f3a283c6eee0e22cb69fe7f94786220c31e9b2a82a9856e947bace74923e4740bf1c17cb41ef19161c3d417655517c28bd08dee32d77a40b834ba7a12223354e9321b8300f7d5d63fa0e8f074adc176285a8f41609ce040cec99943792f5443ca5292447b0f0f240743c4b2b8142ce0b43d4d1731ce11533f61ef241c83557f5aae58a848b5ccce86b8b0fb21fe369c90f06e2d9680003df72f3f0060e6c3415cc1026d342003bece09fbfd062efdd9b48377335903f3b4e87386915e3ac429a4db646da1cc6e29ad8650f4da326cbfdce12c8d5deba32549d6aefe422e0d665d62325c737fe76ec1f3c3670ed96f86738a2cf1c59b5f9b84ffd068f7b4509f53617910a41b811a3f7cd6251f8100008133af11a4db2d00c0ad86ce9f40f3e06b41b45f72"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90)

414.290135ms ago: executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', <r1=>0x0})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x104, &(0x7f0000000680)={&(0x7f0000000600)=ANY=[@ANYBLOB="440000001800010000000000000000000a000000000000000000000018001600140001000a00000000000000000010000000000008000400", @ANYRES32=r1], 0x44}}, 0x0)

410.160287ms ago: executing program 3:
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0x4000, &(0x7f0000000180)=ANY=[@ANYBLOB="73686f72746e616d653d6d697865642c726f6469722c6572726f72733d72656d6f756e742d726f2c73686f72746e616d653d6c6f7765722c646f733178666c6f7070792c73686f72746e616d653d77696e39352c756e695f786c6174653d312c6e6f6e756d7461696c3d302c6e6f6e756d7461696c3d302c73686f72746e616d653d77696e6e742c6e66732c756e695f786c6174653d312c756e695f786c6174653d312c6e66732c757466383d312c726f6469722c6e6f6e756d7461696c3d302c73686f72746e616d653d77696e6e742c6e66732c726f6469722c726f6469722c6e6e6f6e756d7461696c3d312c00c61fbe7fae49c7", @ANYRESOCT=0x0, @ANYRES64, @ANYRES8=0x0, @ANYRES16], 0x1, 0x2a6, &(0x7f0000000800)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000001140)=ANY=[@ANYBLOB="300000004a003b8800000000000000000a008000", @ANYRES32=0x0, @ANYBLOB="000000001400010000000000000000004f"], 0x30}}, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0)
pipe2(0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02})
close(r2)
socket$netlink(0x10, 0x3, 0x0)
preadv(r3, &(0x7f00000003c0)=[{&(0x7f00000000c0)=""/124, 0x7c}], 0x3e8, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})
close(r3)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]})
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000400)={'veth1_to_team\x00', &(0x7f00000001c0)=@ethtool_per_queue_op={0x4b, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80]}})
r5 = epoll_create(0x7)
epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000080))
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f00000001c0)='./bus\x00')
mknod(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0)
open$dir(&(0x7f0000000280)='./bus\x00', 0x260001, 0x0)

306.714383ms ago: executing program 4:
prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x3a, &(0x7f00000000c0)={@mcast1, 0x0, 0x0, 0x103, 0x1}, 0x20)
sendmsg$inet6(r3, &(0x7f0000000600)={&(0x7f0000000000)={0xa, 0x4e21, 0x1000000080000, @loopback}, 0x1c, 0x0, 0x0, &(0x7f00000008c0)=[@pktinfo={{0x24, 0x29, 0x32, {@remote}}}], 0x28}, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
connect$inet6(r4, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r5, 0x0)

293.426934ms ago: executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = dup(r2)
ioctl$KVM_SET_MSRS(r3, 0x80087601, &(0x7f00000001c0)=ANY=[@ANYBLOB="01000000050000f55802"])

149.269296ms ago: executing program 2:
pipe2$9p(0x0, 0x0)
syncfs(0xffffffffffffffff)
r0 = open(&(0x7f0000000100)='.\x00', 0x0, 0x0)
fstat(r0, &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0})
socket$nl_xfrm(0x10, 0x3, 0x6)
fsconfig$FSCONFIG_SET_FLAG(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000000)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', <r3=>0x0, 0x2f, 0x6, 0x3, 0x0, 0x49, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, 0x7, 0x70, 0xb39, 0x20}})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYRESOCT=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3}, 0x90)
r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_buf(r4, 0x29, 0x7, &(0x7f0000000000), 0x0)
syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000640)='./bus\x00', 0x0, &(0x7f0000000080)=ANY=[], 0x1, 0x1268, &(0x7f0000002500)="$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")
r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
mkdirat(r5, &(0x7f0000000180)='./bus\x00', 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103)
renameat2(r5, &(0x7f0000000380)='./bus\x00', r5, &(0x7f0000000200)='./bus/file0\x00', 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10)
ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f0000000400))
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x40, 0x6, 0x8}, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x9, 0x0, r7}, 0x48)
socket$pptp(0x18, 0x1, 0x2)
r8 = syz_usb_connect$hid(0x0, 0x6c, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x27b8, 0x1ed, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0)
socket$igmp(0x2, 0x3, 0x2)
syz_usb_control_io$hid(r8, 0x0, 0x0)
syz_usb_control_io$hid(r8, &(0x7f0000000300)={0x24, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x0, "8031fce1"}]}}, 0x0}, 0x0)
syz_usb_control_io$hid(r8, 0x0, 0x0)

0s ago: executing program 0:
mkdir(&(0x7f0000000400)='./file1\x00', 0x0)
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000380), 0x4000000000001c2, 0x8000)
unshare(0x400)
r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$UI_END_FF_ERASE(r4, 0x4004556a, &(0x7f00000000c0))
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000240000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000ec0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CMP_DATA={0x8, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}, @NFTA_CMP_SREG={0x8}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc8}}, 0x0)
symlinkat(&(0x7f0000000140)='./file2\x00', r0, &(0x7f00000003c0)='./file0\x00')
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f0000000140)='./bus\x00')
link(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='./bus\x00')
r7 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TCSETSW(r7, 0x5432, 0x0)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r8, &(0x7f0000000000), 0xfea7)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r8, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.254' (ED25519) to the list of known hosts.
2024/06/07 13:01:06 fuzzer started
2024/06/07 13:01:07 dialing manager at 10.128.0.163:30000
[   21.398907][   T23] audit: type=1400 audit(1717765267.039:66): avc:  denied  { node_bind } for  pid=345 comm="syz-fuzzer" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1
[   21.419374][   T23] audit: type=1400 audit(1717765267.039:67): avc:  denied  { name_bind } for  pid=345 comm="syz-fuzzer" src=6060 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1
[   21.462617][   T23] audit: type=1400 audit(1717765267.109:68): avc:  denied  { mounton } for  pid=354 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1
[   21.467471][  T353] cgroup1: Unknown subsys name 'net'
[   21.490006][   T23] audit: type=1400 audit(1717765267.109:69): avc:  denied  { mounton } for  pid=353 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[   21.493220][  T353] cgroup1: Unknown subsys name 'net_prio'
[   21.520040][   T23] audit: type=1400 audit(1717765267.109:70): avc:  denied  { mount } for  pid=353 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   21.531661][  T353] cgroup1: Unknown subsys name 'devices'
[   21.554911][   T23] audit: type=1400 audit(1717765267.129:71): avc:  denied  { mount } for  pid=354 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1
[   21.576567][  T360] SELinux:  Context root:object_r:swapfile_t is not valid (left unmapped).
[   21.577909][   T23] audit: type=1400 audit(1717765267.159:72): avc:  denied  { setattr } for  pid=357 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=9288 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   21.609273][   T23] audit: type=1400 audit(1717765267.199:73): avc:  denied  { unmount } for  pid=353 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   21.628824][   T23] audit: type=1400 audit(1717765267.229:74): avc:  denied  { relabelto } for  pid=360 comm="mkswap" name="swap-file" dev="sda1" ino=1927 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   21.653973][   T23] audit: type=1400 audit(1717765267.229:75): avc:  denied  { write } for  pid=360 comm="mkswap" path="/root/swap-file" dev="sda1" ino=1927 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   21.679595][  T358] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   21.774007][  T353] cgroup1: Unknown subsys name 'hugetlb'
[   21.779675][  T353] cgroup1: Unknown subsys name 'rlimit'
2024/06/07 13:01:07 starting 5 executor processes
[   22.438102][  T371] bridge0: port 1(bridge_slave_0) entered blocking state
[   22.445078][  T371] bridge0: port 1(bridge_slave_0) entered disabled state
[   22.452547][  T371] device bridge_slave_0 entered promiscuous mode
[   22.460562][  T371] bridge0: port 2(bridge_slave_1) entered blocking state
[   22.467515][  T371] bridge0: port 2(bridge_slave_1) entered disabled state
[   22.474628][  T371] device bridge_slave_1 entered promiscuous mode
[   22.626131][  T373] bridge0: port 1(bridge_slave_0) entered blocking state
[   22.633062][  T373] bridge0: port 1(bridge_slave_0) entered disabled state
[   22.640316][  T373] device bridge_slave_0 entered promiscuous mode
[   22.654199][  T373] bridge0: port 2(bridge_slave_1) entered blocking state
[   22.661024][  T373] bridge0: port 2(bridge_slave_1) entered disabled state
[   22.668351][  T373] device bridge_slave_1 entered promiscuous mode
[   22.701578][  T372] bridge0: port 1(bridge_slave_0) entered blocking state
[   22.708409][  T372] bridge0: port 1(bridge_slave_0) entered disabled state
[   22.715740][  T372] device bridge_slave_0 entered promiscuous mode
[   22.725766][  T372] bridge0: port 2(bridge_slave_1) entered blocking state
[   22.732635][  T372] bridge0: port 2(bridge_slave_1) entered disabled state
[   22.739842][  T372] device bridge_slave_1 entered promiscuous mode
[   22.756582][  T374] bridge0: port 1(bridge_slave_0) entered blocking state
[   22.763501][  T374] bridge0: port 1(bridge_slave_0) entered disabled state
[   22.770615][  T374] device bridge_slave_0 entered promiscuous mode
[   22.777539][  T374] bridge0: port 2(bridge_slave_1) entered blocking state
[   22.784411][  T374] bridge0: port 2(bridge_slave_1) entered disabled state
[   22.791661][  T374] device bridge_slave_1 entered promiscuous mode
[   22.832394][  T376] bridge0: port 1(bridge_slave_0) entered blocking state
[   22.839228][  T376] bridge0: port 1(bridge_slave_0) entered disabled state
[   22.846626][  T376] device bridge_slave_0 entered promiscuous mode
[   22.856824][  T376] bridge0: port 2(bridge_slave_1) entered blocking state
[   22.863679][  T376] bridge0: port 2(bridge_slave_1) entered disabled state
[   22.870845][  T376] device bridge_slave_1 entered promiscuous mode
[   22.982895][  T371] bridge0: port 2(bridge_slave_1) entered blocking state
[   22.989739][  T371] bridge0: port 2(bridge_slave_1) entered forwarding state
[   22.996886][  T371] bridge0: port 1(bridge_slave_0) entered blocking state
[   23.003631][  T371] bridge0: port 1(bridge_slave_0) entered forwarding state
[   23.078490][  T374] bridge0: port 2(bridge_slave_1) entered blocking state
[   23.085335][  T374] bridge0: port 2(bridge_slave_1) entered forwarding state
[   23.092464][  T374] bridge0: port 1(bridge_slave_0) entered blocking state
[   23.099210][  T374] bridge0: port 1(bridge_slave_0) entered forwarding state
[   23.113624][  T373] bridge0: port 2(bridge_slave_1) entered blocking state
[   23.120444][  T373] bridge0: port 2(bridge_slave_1) entered forwarding state
[   23.127592][  T373] bridge0: port 1(bridge_slave_0) entered blocking state
[   23.134351][  T373] bridge0: port 1(bridge_slave_0) entered forwarding state
[   23.147931][  T372] bridge0: port 2(bridge_slave_1) entered blocking state
[   23.154786][  T372] bridge0: port 2(bridge_slave_1) entered forwarding state
[   23.161896][  T372] bridge0: port 1(bridge_slave_0) entered blocking state
[   23.168648][  T372] bridge0: port 1(bridge_slave_0) entered forwarding state
[   23.183807][  T379] bridge0: port 1(bridge_slave_0) entered disabled state
[   23.190781][  T379] bridge0: port 2(bridge_slave_1) entered disabled state
[   23.198053][  T379] bridge0: port 1(bridge_slave_0) entered disabled state
[   23.205033][  T379] bridge0: port 2(bridge_slave_1) entered disabled state
[   23.212270][  T379] bridge0: port 1(bridge_slave_0) entered disabled state
[   23.219191][  T379] bridge0: port 1(bridge_slave_0) entered disabled state
[   23.226221][  T379] bridge0: port 2(bridge_slave_1) entered disabled state
[   23.233170][  T379] bridge0: port 2(bridge_slave_1) entered disabled state
[   23.240565][  T379] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   23.247896][  T379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   23.275150][  T379] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   23.283508][  T379] bridge0: port 1(bridge_slave_0) entered blocking state
[   23.290329][  T379] bridge0: port 1(bridge_slave_0) entered forwarding state
[   23.298354][  T379] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   23.306279][  T379] bridge0: port 2(bridge_slave_1) entered blocking state
[   23.313107][  T379] bridge0: port 2(bridge_slave_1) entered forwarding state
[   23.354693][  T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   23.362911][  T124] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   23.370842][  T124] bridge0: port 1(bridge_slave_0) entered blocking state
[   23.377676][  T124] bridge0: port 1(bridge_slave_0) entered forwarding state
[   23.386080][  T124] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   23.394399][  T124] bridge0: port 2(bridge_slave_1) entered blocking state
[   23.401209][  T124] bridge0: port 2(bridge_slave_1) entered forwarding state
[   23.408513][  T124] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   23.416296][  T124] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   23.424632][  T124] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   23.441454][   T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   23.448676][   T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   23.455981][   T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   23.464079][   T18] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   23.472719][   T18] bridge0: port 1(bridge_slave_0) entered blocking state
[   23.479530][   T18] bridge0: port 1(bridge_slave_0) entered forwarding state
[   23.486756][   T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   23.494835][   T18] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   23.502801][   T18] bridge0: port 2(bridge_slave_1) entered blocking state
[   23.509608][   T18] bridge0: port 2(bridge_slave_1) entered forwarding state
[   23.530854][  T394] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   23.538239][  T394] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   23.545571][  T394] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   23.554704][  T394] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   23.562816][  T394] bridge0: port 1(bridge_slave_0) entered blocking state
[   23.569623][  T394] bridge0: port 1(bridge_slave_0) entered forwarding state
[   23.581572][  T379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   23.589473][  T379] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   23.597489][  T379] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   23.605033][  T379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   23.612303][  T379] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   23.620055][  T379] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   23.627849][  T379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   23.635988][  T379] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   23.644085][  T379] bridge0: port 1(bridge_slave_0) entered blocking state
[   23.650894][  T379] bridge0: port 1(bridge_slave_0) entered forwarding state
[   23.661435][  T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   23.669608][  T124] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   23.678228][  T124] bridge0: port 2(bridge_slave_1) entered blocking state
[   23.685080][  T124] bridge0: port 2(bridge_slave_1) entered forwarding state
[   23.719153][   T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   23.727420][   T18] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   23.736431][   T18] bridge0: port 2(bridge_slave_1) entered blocking state
[   23.743273][   T18] bridge0: port 2(bridge_slave_1) entered forwarding state
[   23.750543][   T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   23.758431][   T18] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   23.766125][   T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   23.774001][   T18] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   23.781711][   T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   23.789736][   T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   23.797990][   T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   23.805871][   T18] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   23.813703][   T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   23.821303][   T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   23.829255][   T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   23.837187][   T18] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   23.844999][   T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   23.852817][   T18] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   23.871743][  T379] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   23.879966][  T379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   23.898004][  T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   23.906299][  T124] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   23.914568][  T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   23.922494][  T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   23.951789][   T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   23.959617][   T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   23.968503][   T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   23.976719][   T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   23.985159][   T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   23.993070][   T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   24.000954][   T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   24.009167][   T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   24.017472][   T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   24.031711][  T394] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   24.041485][  T379] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   24.049514][  T379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   24.065386][  T394] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   24.073512][  T394] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   24.081768][  T394] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   24.089937][  T394] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   24.098503][  T394] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   24.106575][  T394] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   24.114988][  T394] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   24.122814][  T394] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   24.148440][   T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   24.156976][   T18] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   24.165376][   T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   24.174056][   T18] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   24.182258][   T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   24.190299][   T18] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   24.198601][   T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   24.206762][   T18] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   24.215119][   T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   24.266307][  T379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   24.280112][  T379] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   24.293824][  T379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   24.305163][  T379] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   24.313635][  T379] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   24.334508][  T394] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   24.351811][  T394] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   24.359945][  T394] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   24.368830][  T394] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   24.372567][  T402] ======================================================
[   24.372567][  T402] WARNING: the mand mount option is being deprecated and
[   24.372567][  T402]          will be removed in v5.15!
[   24.372567][  T402] ======================================================
[   24.420292][  T406] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=406 comm=syz-executor.0
[   24.433894][  T406] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[   24.465892][  T402] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:455: comm syz-executor.4: Invalid block bitmap block 0 in block_group 0
[   24.480436][  T402] EXT4-fs error (device loop4): ext4_free_blocks:4799: comm syz-executor.4: Freeing blocks not in datazone - block = 0, count = 4096
[   24.494439][  T402] EXT4-fs error (device loop4): ext4_read_inode_bitmap:134: comm syz-executor.4: Invalid inode bitmap blk 0 in block_group 0
[   24.507517][  T402] EXT4-fs error (device loop4) in ext4_free_inode:352: Corrupt filesystem
[   24.516667][  T402] EXT4-fs (loop4): 1 orphan inode deleted
[   24.523470][  T417] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   24.531468][  T402] EXT4-fs (loop4): mounted filesystem without journal. Opts: €�; sysvgroups,stripe=0x0000000000000000,auto_da_alloc,quota,nogrpid,norecovery,bsddf,bsdgroups,,errors=continue
[   25.049775][  T413] EXT4-fs (loop2): unsupported inode size: 264
[   25.083597][  T413] EXT4-fs (loop2): blocksize: 1024
[   25.273917][  T430] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'.
[   25.357675][  T434] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   25.744957][  T445]  loop3: p2 p3 p7
[   25.751570][  T451] EXT4-fs (loop1): 1 orphan inode deleted
[   25.758068][  T451] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,init_itable,stripe=0x0000000000000079,resgid=0x0000000000000000,sysvgroups,delalloc,usrquota,
[   25.776711][  T409] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   25.784692][  T451] ext4 filesystem being mounted at /root/syzkaller-testdir1829620281/syzkaller.gFmhAP/2/file1 supports timestamps until 2038 (0x7fffffff)
[   25.806522][  T162]  loop3: p2 p3 p7
[   25.859263][  T445] syz-executor.3 (445) used greatest stack depth: 21432 bytes left
[   25.898958][  T457]  loop2: p4 < >
[   26.002718][  T372] EXT4-fs error (device loop1): ext4_map_blocks:617: inode #2: block 3: comm syz-executor.1: lblock 0 mapped to illegal pblock 3 (length 1)
[   26.018978][  T372] EXT4-fs (loop1): Remounting filesystem read-only
[   26.134883][  T162]  loop2: p4 < >
[   26.173575][  T409] usb 1-1: config 0 has no interfaces?
[   26.178985][  T409] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   26.182967][  T372] syz-executor.1 (372) used greatest stack depth: 20760 bytes left
[   26.188389][  T409] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   26.204846][  T409] usb 1-1: config 0 descriptor??
[   26.233928][  T369] udevd[369]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory
[   26.263669][  T369] udevd[369]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory
[   26.321549][  T475] bridge0: port 1(bridge_slave_0) entered blocking state
[   26.328380][  T475] bridge0: port 1(bridge_slave_0) entered disabled state
[   26.336385][  T475] device bridge_slave_0 entered promiscuous mode
[   26.343173][  T475] bridge0: port 2(bridge_slave_1) entered blocking state
[   26.349986][  T475] bridge0: port 2(bridge_slave_1) entered disabled state
[   26.357715][  T475] device bridge_slave_1 entered promiscuous mode
[   26.371602][  T431] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   26.413834][  T475] bridge0: port 2(bridge_slave_1) entered blocking state
[   26.420680][  T475] bridge0: port 2(bridge_slave_1) entered forwarding state
[   26.427814][  T475] bridge0: port 1(bridge_slave_0) entered blocking state
[   26.434567][  T475] bridge0: port 1(bridge_slave_0) entered forwarding state
[   26.449632][  T409] usb 1-1: USB disconnect, device number 2
[   26.470866][  T379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   26.478547][  T379] bridge0: port 1(bridge_slave_0) entered disabled state
[   26.485616][   T18] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   26.493522][  T379] bridge0: port 2(bridge_slave_1) entered disabled state
[   26.504416][  T394] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   26.512380][  T394] bridge0: port 1(bridge_slave_0) entered blocking state
[   26.519207][  T394] bridge0: port 1(bridge_slave_0) entered forwarding state
[   26.527961][   T74] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   26.536053][   T74] bridge0: port 2(bridge_slave_1) entered blocking state
[   26.542885][   T74] bridge0: port 2(bridge_slave_1) entered forwarding state
[   26.558952][  T394] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   26.577225][   T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   26.585799][   T74] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   26.602202][   T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   26.612503][   T23] kauditd_printk_skb: 66 callbacks suppressed
[   26.612509][   T23] audit: type=1400 audit(1717765272.189:138): avc:  denied  { unmount } for  pid=373 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1
[   26.645532][   T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   26.655850][   T23] audit: type=1326 audit(1717765272.239:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=480 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7ba4fe6f69 code=0x0
[   26.661935][   T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   26.688240][   T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   26.704782][   T23] audit: type=1400 audit(1717765272.279:140): avc:  denied  { mounton } for  pid=475 comm="syz-executor.1" path="/dev/binderfs" dev="devtmpfs" ino=11542 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1
[   26.732677][  T431] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   26.742585][   T18] usb 5-1: Using ep0 maxpacket: 8
[   26.747920][  T431] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[   26.760898][  T431] usb 4-1: New USB device found, idVendor=172f, idProduct=0032, bcdDevice= 0.00
[   26.769797][  T431] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   26.779961][  T431] usb 4-1: config 0 descriptor??
[   26.801725][  T179] device bridge_slave_1 left promiscuous mode
[   26.807705][  T179] bridge0: port 2(bridge_slave_1) entered disabled state
[   26.815436][  T179] device bridge_slave_0 left promiscuous mode
[   26.822165][  T431] usbhid 4-1:0.0: couldn't find an input interrupt endpoint
[   26.827426][  T179] bridge0: port 1(bridge_slave_0) entered disabled state
[   26.901603][   T18] usb 5-1: language id specifier not provided by device, defaulting to English
[   27.031834][   T18] usb 5-1: New USB device found, idVendor=2692, idProduct=9025, bcdDevice=e2.a9
[   27.040749][   T18] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   27.048660][   T18] usb 5-1: Product: syz
[   27.052949][   T18] usb 5-1: Manufacturer: 쟃➶⇒갮웞蕴ƀ侭�붩輠�爬襔䈰謂ꀶ㤰⨙��࣌긡晃⒟經힩Ģ⥯梚邋ᮣ뾗附뜨�솉딉谓ᰞ暶듇��呷藻壑떜௃ϲྪᰭ�輡䆙찶쌛���먢⢅嶹Ὲ쉶⌠겒�镉䅬�鶵喰罄�㞛糱鮃
[   27.080073][   T18] usb 5-1: SerialNumber: syz
[   27.141618][   T23] audit: type=1400 audit(1717765272.319:141): avc:  denied  { write } for  pid=489 comm="syz-executor.0" name="dev" dev="proc" ino=4026532555 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1
[   27.182458][   T18] usb 5-1: config 0 descriptor??
[   27.415626][  T494] EXT4-fs (loop3): Test dummy encryption mode enabled
[   27.430391][   T74] usb 5-1: USB disconnect, device number 2
[   27.439560][  T494] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,usrquota,,errors=continue
[   27.519493][  T494] 
[   27.522065][  T494] **********************************************************
[   27.530807][  T494] **   NOTICE NOTICE NOTICE NOTICE NOTICE NOTICE NOTICE   **
[   27.538289][  T494] **                                                      **
[   27.545981][  T494] ** trace_printk() being used. Allocating extra memory.  **
[   27.554109][  T494] **                                                      **
[   27.561308][  T494] ** This means that this is a DEBUG kernel and it is     **
[   27.568644][  T494] ** unsafe for production use.                           **
[   27.576075][  T494] **                                                      **
[   27.641502][  T494] ** If you see this message and you are not debugging    **
[   27.652347][  T494] ** the kernel, report this immediately to your vendor!  **
[   27.659585][  T494] **                                                      **
[   27.666783][  T494] **   NOTICE NOTICE NOTICE NOTICE NOTICE NOTICE NOTICE   **
[   27.673979][  T494] **********************************************************
[   27.681776][   T23] audit: type=1400 audit(1717765272.899:142): avc:  denied  { ioctl } for  pid=499 comm="syz-executor.2" path="/dev/uinput" dev="devtmpfs" ino=9292 ioctlcmd=0x556a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[   27.985937][   T23] audit: type=1400 audit(1717765272.949:143): avc:  denied  { create } for  pid=499 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   28.006747][   T23] audit: type=1400 audit(1717765272.949:144): avc:  denied  { write } for  pid=499 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   28.027527][   T23] audit: type=1400 audit(1717765273.179:145): avc:  denied  { mount } for  pid=502 comm="syz-executor.1" name="/" dev="loop1" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1
[   28.188611][   T23] audit: type=1400 audit(1717765273.389:146): avc:  denied  { nlmsg_write } for  pid=502 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1
[   28.331456][   T74] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[   28.372729][  T513] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue
[   28.382145][  T513] ext4 filesystem being mounted at /root/syzkaller-testdir1098312690/syzkaller.2W2vDA/4/file0 supports timestamps until 2038 (0x7fffffff)
[   28.404886][   T23] audit: type=1400 audit(1717765273.619:147): avc:  denied  { create } for  pid=512 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   28.429129][  T513] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check.
[   28.615249][  T526] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1)
[   28.662082][  T179] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1)
[   28.671042][  T179] attempt to access beyond end of device
[   28.671042][  T179] loop2: rw=1, want=169, limit=128
[   28.701581][   T74] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[   28.712461][   T74] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[   28.722567][   T74] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00
[   28.734198][   T74] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   28.851432][  T394] usb 5-1: new full-speed USB device number 3 using dummy_hcd
[   29.061445][  T379] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   29.116105][   T18] usb 4-1: USB disconnect, device number 2
[   29.202159][  T508] tipc: Enabling of bearer <ib:dummy0> rejected, media not registered
[   29.261526][  T394] usb 5-1: not running at top speed; connect to a high speed hub
[   29.361534][  T394] usb 5-1: config 1 interface 0 altsetting 32 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   29.374247][  T394] usb 5-1: config 1 interface 0 has no altsetting 0
[   29.422042][  T379] usb 3-1: config 0 has no interfaces?
[   29.427357][  T379] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   29.436379][  T379] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   29.436943][  T542] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'.
[   29.455544][  T379] usb 3-1: config 0 descriptor??
[   29.456086][  T541] fscrypt (sda1, inode 1965): Unsupported encryption flags (0x10)
[   29.571550][  T394] usb 5-1: New USB device found, idVendor=046d, idProduct=c286, bcdDevice= 0.40
[   29.580489][  T394] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   29.588459][  T394] usb 5-1: Product: syz
[   29.592531][  T394] usb 5-1: Manufacturer: 찄햖眪禖邳霠哜럼槽�㵾ࣜ鹆儕ྡ蠉ﶮ⢩䀲瀚↻날檨嫉䌯⫝̸ 얺쥛誚惞ᘤ࡟�븦㷸覴�旣펿阜ᮙ�㚾韾窪㒣ⴞ䋬ᳶ൙౺墔꠵䳞ද撔ꋘ陦䇂﹌缪繭췺ᇔ干ꬑі셄뙨뢭�〙㨯뱲隔啦쩓Ꙉ뼃Ჷ�󠾋䎓얋匱�븓�锂올��巂����겷�ꋵ㤡甜�꯷Ǥ㴰
[   29.630890][  T394] usb 5-1: SerialNumber: syz
[   29.755154][   T74] aiptek 1-1:17.0: Aiptek using 400 ms programming speed
[   29.973303][   T74] input: Aiptek as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:17.0/input/input5
[   30.001556][   T74] input: failed to attach handler kbd to device input5, error: -5
[   30.141523][  T394] usbhid 5-1:1.0: can't add hid device: -71
[   30.150204][  T394] usbhid: probe of 5-1:1.0 failed with error -71
[   30.169119][  T394] usb 5-1: USB disconnect, device number 3
[   30.733195][  T561] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue
[   30.741995][  T561] ext4 filesystem being mounted at /root/syzkaller-testdir1098312690/syzkaller.2W2vDA/7/file0 supports timestamps until 2038 (0x7fffffff)
[   30.763790][  T561] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check.
[   31.817446][  T379] usb 3-1: USB disconnect, device number 2
[   31.846171][  T394] usb 1-1: USB disconnect, device number 3
[   32.070900][  T583] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1)
[   32.082202][  T579] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a80ce118, mo2=0000]
[   32.090209][  T579] System zones: 0-1, 3-12
[   32.096314][  T579] EXT4-fs error (device loop0): ext4_map_blocks:731: inode #3: block 1: comm syz-executor.0: lblock 1 mapped to illegal pblock 1 (length 1)
[   32.125633][  T591] erofs: (device loop1): mounted with opts: , root inode @ nid 36.
[   32.141188][  T579] __quota_error: 19 callbacks suppressed
[   32.141196][  T579] Quota error (device loop0): write_blk: dquota write failed
[   32.161342][  T579] Quota error (device loop0): find_free_dqentry: Can't write quota data block 1
[   32.170347][  T579] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota
[   32.180489][   T23] audit: type=1400 audit(1717765277.399:167): avc:  denied  { read } for  pid=590 comm="syz-executor.1" name="msr" dev="devtmpfs" ino=9169 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[   32.203472][  T579] EXT4-fs error (device loop0): ext4_map_blocks:617: inode #3: block 1: comm syz-executor.0: lblock 1 mapped to illegal pblock 1 (length 1)
[   32.203953][   T23] audit: type=1400 audit(1717765277.399:168): avc:  denied  { open } for  pid=590 comm="syz-executor.1" path="/dev/cpu/0/msr" dev="devtmpfs" ino=9169 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[   32.218435][  T579] Quota error (device loop0): do_insert_tree: Can't read tree quota block 1
[   32.269128][  T592] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[   32.269444][   T23] audit: type=1400 audit(1717765277.469:169): avc:  denied  { ioctl } for  pid=584 comm="syz-executor.4" path="socket:[13415]" dev="sockfs" ino=13415 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   32.276707][  T592] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[   32.278567][  T592] F2FS-fs (loop3): invalid crc value
[   32.301988][  T579] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota
[   32.315426][  T592] F2FS-fs (loop3): Found nat_bits in checkpoint
[   32.476108][  T579] EXT4-fs error (device loop0): ext4_free_blocks:4799: comm syz-executor.0: Freeing blocks not in datazone - block = 0, count = 4096
[   32.476292][  T592] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[   32.490907][   T23] audit: type=1400 audit(1717765277.469:170): avc:  denied  { create } for  pid=590 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   32.496527][  T592] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[   32.517671][  T579] EXT4-fs error (device loop0): ext4_map_blocks:617: inode #3: block 1: comm syz-executor.0: lblock 1 mapped to illegal pblock 1 (length 1)
[   32.542144][  T579] Quota error (device loop0): do_insert_tree: Can't read tree quota block 1
[   32.550727][  T579] EXT4-fs (loop0): 1 orphan inode deleted
[   32.556283][  T579] EXT4-fs (loop0): mounted filesystem without journal. Opts: sysvgroups,quota,auto_da_alloc,nodiscard,journal_dev=0x0000000000000004,norecovery,bsddf,debug,,errors=continue
[   32.760458][  T610] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a800e018, mo2=0000]
[   32.769148][  T610] System zones: 0-1, 3-12
[   32.775508][  T610] EXT4-fs error (device loop2): ext4_map_blocks:731: inode #3: block 1: comm syz-executor.2: lblock 1 mapped to illegal pblock 1 (length 1)
[   32.790901][  T610] EXT4-fs error (device loop2): ext4_map_blocks:617: inode #3: block 1: comm syz-executor.2: lblock 1 mapped to illegal pblock 1 (length 1)
[   32.791279][  T609] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue
[   32.807744][  T610] EXT4-fs error (device loop2): ext4_free_blocks:4799: comm syz-executor.2: Freeing blocks not in datazone - block = 0, count = 4096
[   32.834770][  T609] ext4 filesystem being mounted at /root/syzkaller-testdir4286532063/syzkaller.7wBHOK/7/file0 supports timestamps until 2038 (0x7fffffff)
[   32.852912][  T610] EXT4-fs error (device loop2): ext4_map_blocks:617: inode #3: block 1: comm syz-executor.2: lblock 1 mapped to illegal pblock 1 (length 1)
[   32.869892][  T610] EXT4-fs (loop2): 1 orphan inode deleted
[   32.876658][  T610] EXT4-fs (loop2): mounted filesystem without journal. Opts: sysvgroups,nolazytime,user_xattr,nodiscard,journal_dev=0x0000000000000004,nogrpid,bsddf,debug,,errors=continue
[   32.903682][  T606] F2FS-fs (loop4): Wrong segment_count / block_count (64 > 16384)
[   32.913165][  T606] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[   32.924828][  T609] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check.
[   32.988337][  T606] F2FS-fs (loop4): Found nat_bits in checkpoint
[   33.104485][  T579] EXT4-fs error (device loop0): ext4_ext_check_inode:540: inode #15: comm syz-executor.0: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0)
[   33.134016][  T606] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[   33.144457][  T606] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[   33.279051][  T632] EXT4-fs error (device loop0): ext4_map_blocks:617: inode #3: block 1: comm syz-executor.0: lblock 1 mapped to illegal pblock 1 (length 1)
[   33.476932][  T606] attempt to access beyond end of device
[   33.476932][  T606] loop4: rw=2049, want=45104, limit=40427
[   33.590592][  T632] EXT4-fs error (device loop0): ext4_map_blocks:617: inode #3: block 1: comm syz-executor.0: lblock 1 mapped to illegal pblock 1 (length 1)
[   33.832767][  T371] attempt to access beyond end of device
[   33.832767][  T371] loop4: rw=2049, want=45120, limit=40427
[   33.905664][  T610] EXT4-fs error (device loop2): ext4_ext_check_inode:540: inode #15: comm syz-executor.2: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0)
[   34.131696][  T646] EXT4-fs error (device loop2): ext4_map_blocks:617: inode #3: block 1: comm syz-executor.2: lblock 1 mapped to illegal pblock 1 (length 1)
[   34.211415][  T379] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[   34.491443][  T379] usb 1-1: Using ep0 maxpacket: 32
[   34.529064][  T654] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1)
[   34.650351][    T9] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1)
[   34.659818][    T9] attempt to access beyond end of device
[   34.659818][    T9] loop3: rw=1, want=169, limit=128
[   34.681493][   T74] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[   34.741455][  T394] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[   34.781596][  T379] usb 1-1: New USB device found, idVendor=0763, idProduct=1041, bcdDevice=e1.78
[   34.790465][  T379] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   34.800931][  T379] usb 1-1: Product: syz
[   34.805062][  T661] erofs: (device loop3): mounted with opts: , root inode @ nid 36.
[   34.812908][  T379] usb 1-1: Manufacturer: syz
[   34.817346][  T379] usb 1-1: SerialNumber: syz
[   34.825345][  T379] usb 1-1: config 0 descriptor??
[   34.866790][  T379] snd-usb-audio: probe of 1-1:0.0 failed with error -2
[   34.873127][  T663] netlink: 316 bytes leftover after parsing attributes in process `syz-executor.3'.
[   34.885446][  T663] netlink: 'syz-executor.3': attribute type 12 has an invalid length.
[   35.051480][   T74] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[   35.063335][   T74] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[   35.073299][   T74] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00
[   35.082235][   T74] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   35.092546][  T664] usb 1-1: USB disconnect, device number 4
[   35.111532][  T394] usb 3-1: config 0 has no interfaces?
[   35.116821][  T394] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   35.125717][  T394] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   35.135153][  T394] usb 3-1: config 0 descriptor??
[   35.230300][  T669] EXT4-fs (loop3): mounted filesystem without journal. Opts: journal_dev=0x000000000000007f,usrquota,,errors=continue
[   35.354160][  T677] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a80ce118, mo2=0000]
[   35.362462][  T677] System zones: 0-1, 3-12
[   35.369669][  T677] EXT4-fs error (device loop1): ext4_map_blocks:731: inode #3: block 1: comm syz-executor.1: lblock 1 mapped to illegal pblock 1 (length 1)
[   35.385680][  T677] EXT4-fs error (device loop1): ext4_map_blocks:617: inode #3: block 1: comm syz-executor.1: lblock 1 mapped to illegal pblock 1 (length 1)
[   35.400416][  T677] EXT4-fs error (device loop1): ext4_free_blocks:4799: comm syz-executor.1: Freeing blocks not in datazone - block = 0, count = 4096
[   35.414326][  T677] EXT4-fs error (device loop1): ext4_map_blocks:617: inode #3: block 1: comm syz-executor.1: lblock 1 mapped to illegal pblock 1 (length 1)
[   35.428771][  T677] EXT4-fs (loop1): 1 orphan inode deleted
[   35.440218][  T677] EXT4-fs (loop1): mounted filesystem without journal. Opts: sysvgroups,quota,auto_da_alloc,nodiscard,journal_dev=0x0000000000000004,norecovery,bsddf,debug,,errors=continue
[   35.563209][  T648] tipc: Enabling of bearer <ib:dummy0> rejected, media not registered
[   36.081558][   T74] aiptek 5-1:17.0: Aiptek using 400 ms programming speed
[   36.098835][   T74] input: Aiptek as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:17.0/input/input8
[   36.120102][   T74] input: failed to attach handler kbd to device input8, error: -5
[   36.122297][  T677] EXT4-fs error (device loop1): ext4_ext_check_inode:540: inode #15: comm syz-executor.1: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0)
[   36.226328][  T677] EXT4-fs error (device loop1): ext4_map_blocks:617: inode #3: block 1: comm syz-executor.1: lblock 1 mapped to illegal pblock 1 (length 1)
[   36.629183][  T693] EXT4-fs error (device loop1): ext4_map_blocks:617: inode #3: block 1: comm syz-executor.1: lblock 1 mapped to illegal pblock 1 (length 1)
[   36.705689][  T690]  loop3: p1 p4
[   36.709438][  T690] loop3: p1 size 8388608 extends beyond EOD, truncated
[   36.721022][  T690] loop3: p4 start 4278190080 is beyond EOD, truncated
[   37.400488][   T18] usb 3-1: USB disconnect, device number 3
[   37.704406][   T18] usb 5-1: USB disconnect, device number 4
[   37.742937][  T716] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[   37.760804][  T722] incfs: Backing dir is not set, filesystem can't be mounted.
[   37.774288][  T722] incfs: mount failed -2
[   37.779645][  T716] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[   37.840116][  T726] EXT4-fs (loop1): mounted filesystem without journal. Opts: journal_dev=0x000000000000007f,usrquota,,errors=continue
[   37.866840][  T716] F2FS-fs (loop2): Found nat_bits in checkpoint
[   37.993982][  T716] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[   38.011122][  T716] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[   38.035189][   T23] kauditd_printk_skb: 42 callbacks suppressed
[   38.035199][   T23] audit: type=1400 audit(1717765283.249:188): avc:  denied  { setattr } for  pid=715 comm="syz-executor.2" path="/root/syzkaller-testdir826213788/syzkaller.RA0XT8/12/bus" dev="loop2" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   38.456285][  T737] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a80ce118, mo2=0000]
[   38.456325][  T724] F2FS-fs (loop4): Wrong segment_count / block_count (64 > 16384)
[   38.471757][  T737] System zones: 0-1, 3-12
[   38.483040][  T737] EXT4-fs error (device loop3): ext4_map_blocks:731: inode #3: block 1: comm syz-executor.3: lblock 1 mapped to illegal pblock 1 (length 1)
[   38.501427][  T724] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[   38.521678][  T737] Quota error (device loop3): write_blk: dquota write failed
[   38.533515][  T724] F2FS-fs (loop4): Found nat_bits in checkpoint
[   38.550386][  T737] Quota error (device loop3): find_free_dqentry: Can't write quota data block 1
[   38.570236][  T737] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota
[   38.591952][  T737] EXT4-fs error (device loop3): ext4_map_blocks:617: inode #3: block 1: comm syz-executor.3: lblock 1 mapped to illegal pblock 1 (length 1)
[   38.606688][  T743] xt_CT: You must specify a L4 protocol and not use inversions on it
[   38.610614][  T724] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[   38.629994][  T724] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[   38.639865][  T737] Quota error (device loop3): do_insert_tree: Can't read tree quota block 1
[   38.664620][  T737] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota
[   38.703659][  T737] EXT4-fs error (device loop3): ext4_free_blocks:4799: comm syz-executor.3: Freeing blocks not in datazone - block = 0, count = 4096
[   38.721693][  T737] EXT4-fs error (device loop3): ext4_map_blocks:617: inode #3: block 1: comm syz-executor.3: lblock 1 mapped to illegal pblock 1 (length 1)
[   38.751143][  T737] Quota error (device loop3): do_insert_tree: Can't read tree quota block 1
[   38.779031][  T737] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota
[   38.791485][  T737] EXT4-fs (loop3): 1 orphan inode deleted
[   38.791499][  T737] EXT4-fs (loop3): mounted filesystem without journal. Opts: sysvgroups,quota,auto_da_alloc,nodiscard,journal_dev=0x0000000000000004,norecovery,bsddf,debug,,errors=continue
[   38.830279][  T724] attempt to access beyond end of device
[   38.830279][  T724] loop4: rw=2049, want=45104, limit=40427
[   38.906441][  T371] attempt to access beyond end of device
[   38.906441][  T371] loop4: rw=2049, want=45120, limit=40427
[   39.058528][  T752]  loop0: p1 p4
[   39.068498][  T752] loop0: p1 size 8388608 extends beyond EOD, truncated
[   39.091272][  T752] loop0: p4 start 4278190080 is beyond EOD, truncated
[   39.133095][  T743] F2FS-fs (loop2): invalid crc value
[   39.138219][  T743] F2FS-fs (loop2): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root
[   39.147431][  T743] F2FS-fs (loop2): Found nat_bits in checkpoint
[   39.183577][  T743] F2FS-fs (loop2): recover fsync data on readonly fs
[   39.190203][  T743] F2FS-fs (loop2): Cannot turn on quotas: -2 on 0
[   39.196685][  T743] F2FS-fs (loop2): Cannot turn on quotas: -2 on 1
[   39.221794][  T743] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[   39.256201][  T737] EXT4-fs error (device loop3): ext4_ext_check_inode:540: inode #15: comm syz-executor.3: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0)
[   39.334696][  T764] capability: warning: `syz-executor.4' uses deprecated v2 capabilities in a way that may be insecure
[   39.339145][  T737] EXT4-fs error (device loop3): ext4_map_blocks:617: inode #3: block 1: comm syz-executor.3: lblock 1 mapped to illegal pblock 1 (length 1)
[   39.360064][  T737] Quota error (device loop3): do_insert_tree: Can't read tree quota block 1
[   39.368600][  T737] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota
[   39.391426][  T124] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   39.550363][  T767] EXT4-fs error (device loop3): ext4_map_blocks:617: inode #3: block 1: comm syz-executor.3: lblock 1 mapped to illegal pblock 1 (length 1)
[   39.581633][   T74] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[   39.931604][  T124] usb 2-1: config 0 has no interfaces?
[   39.937434][  T124] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   39.946705][  T124] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   39.967962][  T124] usb 2-1: config 0 descriptor??
[   40.041433][  T394] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[   40.131486][   T74] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   40.142251][   T74] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   40.151873][   T74] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   40.164585][   T74] usb 3-1: New USB device found, idVendor=11c2, idProduct=2208, bcdDevice= 0.00
[   40.173545][   T74] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   40.182233][   T74] usb 3-1: config 0 descriptor??
[   40.218161][  T124] usb 2-1: USB disconnect, device number 2
[   40.571485][  T394] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[   40.585667][  T394] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[   40.595969][  T394] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00
[   40.605124][  T394] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   40.791283][  T792] F2FS-fs (loop0): Found nat_bits in checkpoint
[   40.798684][   T74] betop 0003:11C2:2208.0001: item fetching failed at offset 4/5
[   40.806503][   T74] betop 0003:11C2:2208.0001: parse failed
[   40.812146][   T74] betop: probe of 0003:11C2:2208.0001 failed with error -22
[   40.849140][  T792] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[   40.869784][  T801] syz-executor.1 uses obsolete (PF_INET,SOCK_PACKET)
[   40.998643][  T743] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[   41.012686][  T409] usb 3-1: USB disconnect, device number 4
[   41.072613][  T774] tipc: Enabling of bearer <ib:dummy0> rejected, media not registered
[   41.101508][  T816] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a80ce118, mo2=0000]
[   41.116108][  T816] System zones: 0-1, 3-12
[   41.122077][  T816] EXT4-fs error (device loop0): ext4_map_blocks:731: inode #3: block 1: comm syz-executor.0: lblock 1 mapped to illegal pblock 1 (length 1)
[   41.140903][  T816] EXT4-fs error (device loop0): ext4_map_blocks:617: inode #3: block 1: comm syz-executor.0: lblock 1 mapped to illegal pblock 1 (length 1)
[   41.155651][  T816] EXT4-fs error (device loop0): ext4_free_blocks:4799: comm syz-executor.0: Freeing blocks not in datazone - block = 0, count = 4096
[   41.169103][   T74] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[   41.177277][  T816] EXT4-fs error (device loop0): ext4_map_blocks:617: inode #3: block 1: comm syz-executor.0: lblock 1 mapped to illegal pblock 1 (length 1)
[   41.191638][  T816] EXT4-fs (loop0): 1 orphan inode deleted
[   41.197208][  T816] EXT4-fs (loop0): mounted filesystem without journal. Opts: sysvgroups,quota,auto_da_alloc,nodiscard,journal_dev=0x0000000000000004,norecovery,bsddf,debug,,errors=continue
[   41.370336][  T816] EXT4-fs error (device loop0): ext4_ext_check_inode:540: inode #15: comm syz-executor.0: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0)
[   41.411906][  T816] EXT4-fs error (device loop0): ext4_map_blocks:617: inode #3: block 1: comm syz-executor.0: lblock 1 mapped to illegal pblock 1 (length 1)
[   41.541664][   T74] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   41.557533][   T74] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2
[   41.567040][   T74] usb 2-1: too many endpoints for config 1 interface 0 altsetting 0: 226, using maximum allowed: 30
[   41.579588][  T827] EXT4-fs error (device loop0): ext4_map_blocks:617: inode #3: block 1: comm syz-executor.0: lblock 1 mapped to illegal pblock 1 (length 1)
[   41.594788][   T74] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 226
[   41.671589][  T394] aiptek 4-1:17.0: Aiptek using 400 ms programming speed
[   41.679556][  T394] input: Aiptek as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:17.0/input/input11
[   41.688704][  T394] input: failed to attach handler kbd to device input11, error: -5
[   41.821567][   T74] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   41.830423][   T74] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   41.838473][   T74] usb 2-1: Product: syz
[   41.843044][   T74] usb 2-1: Manufacturer: syz
[   41.847433][   T74] usb 2-1: SerialNumber: syz
[   42.186487][  T838] EXT4-fs (loop2): Mount option "data=journal" incompatible with ext2
[   42.442881][  T841] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'.
[   43.054130][   T18] usb 4-1: USB disconnect, device number 3
[   43.191417][  T394] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[   43.199073][  T848] F2FS-fs (loop0): invalid crc value
[   43.231361][  T848] F2FS-fs (loop0): Found nat_bits in checkpoint
[   43.281706][  T848] F2FS-fs (loop0): Cannot turn on quotas: -2 on 1
[   43.288428][  T848] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[   43.441426][  T394] usb 3-1: Using ep0 maxpacket: 32
[   43.611323][  T394] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11
[   43.622521][  T394] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024
[   43.640084][  T394] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[   43.649204][  T394] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   43.659023][  T394] usb 3-1: config 0 descriptor??
[   43.681497][  T851] raw-gadget gadget: fail, usb_ep_enable returned -22
[   43.701907][  T394] hub 3-1:0.0: USB hub found
[   43.882651][  T868] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[   43.890294][  T868] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[   43.900750][  T868] F2FS-fs (loop0): invalid crc value
[   43.907805][  T868] F2FS-fs (loop0): Found nat_bits in checkpoint
[   43.922168][  T394] hub 3-1:0.0: 2 ports detected
[   43.989342][  T868] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[   43.996304][  T868] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[   44.022152][  T409] usb 2-1: USB disconnect, device number 3
[   44.043499][  T879] input: syz1 as /devices/virtual/input/input13
[   44.317164][   T23] kauditd_printk_skb: 25 callbacks suppressed
[   44.317174][   T23] audit: type=1400 audit(1717765289.529:201): avc:  denied  { read } for  pid=886 comm="syz-executor.1" name="usbmon0" dev="devtmpfs" ino=9261 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[   44.346732][   T23] audit: type=1400 audit(1717765289.539:202): avc:  denied  { open } for  pid=886 comm="syz-executor.1" path="/dev/usbmon0" dev="devtmpfs" ino=9261 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[   44.350209][  T887] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=129 sclass=netlink_route_socket pid=887 comm=syz-executor.1
[   44.385867][  T887] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'.
[   44.496962][   T23] audit: type=1400 audit(1717765289.709:203): avc:  denied  { setopt } for  pid=890 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[   44.733376][   T23] audit: type=1400 audit(1717765289.949:204): avc:  denied  { name_bind } for  pid=898 comm="syz-executor.0" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1
[   45.073721][  T906] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[   45.090548][  T906] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[   45.122020][  T906] F2FS-fs (loop3): Found nat_bits in checkpoint
[   45.181420][  T906] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[   45.188293][  T906] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[   45.196965][   T23] audit: type=1400 audit(1717765290.409:205): avc:  denied  { mount } for  pid=905 comm="syz-executor.3" name="/" dev="loop3" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[   45.227164][  T906] F2FS-fs (loop3): Can't enable fs-verity on inode 3: the verity feature is not enabled on this filesystem
[   45.305725][   T23] audit: type=1400 audit(1717765290.499:206): avc:  denied  { unmount } for  pid=475 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[   45.343728][  T917] cgroup: syz-executor.1 (917) created nested cgroup for controller "memory" which has incomplete hierarchy support. Nested cgroups may change behavior in the future.
[   45.361415][  T917] cgroup: "memory" requires setting use_hierarchy to 1 on the root
[   45.524022][  T913] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[   45.546850][  T913] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[   45.572763][  T913] F2FS-fs (loop4): invalid crc value
[   45.599504][  T913] F2FS-fs (loop4): Found nat_bits in checkpoint
[   45.636145][  T920] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue
[   45.661903][  T920] ext4 filesystem being mounted at /root/syzkaller-testdir258141735/syzkaller.JgfnSi/25/bus supports timestamps until 2038 (0x7fffffff)
[   45.685007][  T913] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[   45.694091][  T913] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[   45.828993][  T917] F2FS-fs (loop1): Unrecognized mount option "" or missing value
[   45.836742][  T902] F2FS-fs (loop0): Wrong CP boundary, start(512) end(198144) blocks(1024)
[   45.846147][  T902] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock
[   45.856583][  T902] F2FS-fs (loop0): invalid crc value
[   46.005587][  T902] F2FS-fs (loop0): Found nat_bits in checkpoint
[   46.048293][  T902] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0
[   46.055334][  T902] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4
[   46.265768][  T939] incfs: ino conflict with backing FS 4
[   46.298720][  T939] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check.
[   46.322812][  T939] incfs: ino conflict with backing FS 6
[   46.365286][   T23] audit: type=1400 audit(1717765291.479:207): avc:  denied  { mounton } for  pid=901 comm="syz-executor.0" path="/root/syzkaller-testdir3740726507/syzkaller.r9UmlX/25/file0/file0" dev="loop0" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   46.420230][  T942] debugfs: Directory 'vcpu0' with parent '943-8' already present!
[   46.497930][   T23] audit: type=1400 audit(1717765291.709:208): avc:  denied  { remount } for  pid=916 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[   46.504237][  T917] device pim6reg1 entered promiscuous mode
[   46.520500][   T23] audit: type=1400 audit(1717765291.729:209): avc:  denied  { remove_name } for  pid=374 comm="syz-executor.0" name=".index" dev="loop0" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   46.546044][   T23] audit: type=1400 audit(1717765291.729:210): avc:  denied  { rmdir } for  pid=374 comm="syz-executor.0" name=".index" dev="loop0" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1
[   46.582887][  T948] request_module fs-#! 
[   46.582887][  T948] ÏGªÌ](:å`¸ïïˆPŸ73¶0<^˜"dÂpú¸± succeeded, but still no fs?
[   46.744515][  T957] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1)
[   46.775607][    T9] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1)
[   46.785278][    T9] attempt to access beyond end of device
[   46.785278][    T9] loop4: rw=1, want=169, limit=128
[   47.681387][    C0] raw-gadget gadget: ignoring, device is not running
[   47.695564][  T394] usb 3-1: USB disconnect, device number 5
[   47.701738][  T124] hub 3-1:0.0: hub_ext_port_status failed (err = -71)
[   48.312042][  T993] bridge0: port 1(bridge_slave_0) entered blocking state
[   48.318888][  T993] bridge0: port 1(bridge_slave_0) entered disabled state
[   48.327528][  T993] device bridge_slave_0 entered promiscuous mode
[   48.335042][  T993] bridge0: port 2(bridge_slave_1) entered blocking state
[   48.343027][  T993] bridge0: port 2(bridge_slave_1) entered disabled state
[   48.352174][  T993] device bridge_slave_1 entered promiscuous mode
[   48.358751][  T470] device bridge_slave_1 left promiscuous mode
[   48.365279][  T470] bridge0: port 2(bridge_slave_1) entered disabled state
[   48.373461][  T470] device bridge_slave_0 left promiscuous mode
[   48.397907][  T470] bridge0: port 1(bridge_slave_0) entered disabled state
[   48.574089][  T993] bridge0: port 2(bridge_slave_1) entered blocking state
[   48.580935][  T993] bridge0: port 2(bridge_slave_1) entered forwarding state
[   48.588063][  T993] bridge0: port 1(bridge_slave_0) entered blocking state
[   48.594829][  T993] bridge0: port 1(bridge_slave_0) entered forwarding state
[   48.620188][  T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   48.627486][  T394] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[   48.661552][ T1016] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[   48.679460][  T124] bridge0: port 1(bridge_slave_0) entered disabled state
[   48.686801][  T124] bridge0: port 2(bridge_slave_1) entered disabled state
[   48.704987][ T1016] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem
[   48.740783][  T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   48.742291][ T1016] EXT4-fs (loop3): warning: checktime reached, running e2fsck is recommended
[   48.750676][  T124] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   48.758152][ T1016] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a002c01c, mo2=0002]
[   48.767640][  T124] bridge0: port 1(bridge_slave_0) entered blocking state
[   48.779736][  T124] bridge0: port 1(bridge_slave_0) entered forwarding state
[   48.780245][ T1016] System zones: 0-2, 18-18, 34-34
[   48.788184][  T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   48.799675][ T1016] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:864: updating to rev 1 because of new feature flag, running e2fsck is recommended
[   48.817517][ T1016] EXT4-fs (loop3): 1 truncate cleaned up
[   48.823188][ T1016] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue
[   48.982274][  T124] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   48.990345][  T124] bridge0: port 2(bridge_slave_1) entered blocking state
[   48.997196][  T124] bridge0: port 2(bridge_slave_1) entered forwarding state
[   49.004459][  T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   49.012771][  T124] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   49.020645][  T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   49.029126][  T124] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   49.036786][  T394] usb 5-1: Using ep0 maxpacket: 32
[   49.051487][  T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   49.059600][  T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   49.067801][  T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   49.076103][  T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   49.102077][  T937] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   49.110206][  T937] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   49.118556][  T937] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   49.126696][  T937] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   49.140189][   T74] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   49.148493][   T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   49.161830][  T394] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11
[   49.173304][  T394] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024
[   49.184706][  T394] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[   49.193760][  T394] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   49.202647][  T394] usb 5-1: config 0 descriptor??
[   49.211918][   T18] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[   49.221492][ T1009] raw-gadget gadget: fail, usb_ep_enable returned -22
[   49.241992][  T394] hub 5-1:0.0: USB hub found
[   49.270888][ T1037] kvm: emulating exchange as write
[   49.315147][ T1040] fuse: Bad value for 'fd'
[   49.395371][   T23] kauditd_printk_skb: 10 callbacks suppressed
[   49.395381][   T23] audit: type=1400 audit(1717765294.609:221): avc:  denied  { ioctl } for  pid=1044 comm="syz-executor.0" path="/dev/binderfs/binder0" dev="binder" ino=4 ioctlcmd=0x6208 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[   49.443379][ T1032] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[   49.451362][ T1032] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[   49.463209][ T1032] F2FS-fs (loop3): invalid crc value
[   49.470200][ T1032] F2FS-fs (loop3): Found nat_bits in checkpoint
[   49.530646][ T1032] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[   49.552332][ T1032] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[   49.573390][   T18] usb 3-1: Using ep0 maxpacket: 16
[   49.961545][   T18] usb 3-1: New USB device found, idVendor=0403, idProduct=f850, bcdDevice=99.81
[   49.972112][   T18] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   49.980070][   T18] usb 3-1: Product: syz
[   49.986127][   T18] usb 3-1: Manufacturer: syz
[   49.991533][   T18] usb 3-1: SerialNumber: syz
[   50.009661][   T18] usb 3-1: config 0 descriptor??
[   50.062138][   T18] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected
[   50.072938][   T18] usb 3-1: Detected FT-X
[   50.271798][   T18] ftdi_sio ttyUSB0: Unable to read latency timer: -5
[   50.491508][   T18] ftdi_sio ttyUSB0: Unable to write latency timer: -71
[   50.597823][   T18] ftdi_sio 3-1:0.0: GPIO initialisation failed: -71
[   50.604932][   T18] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0
[   50.613763][   T18] usb 3-1: USB disconnect, device number 6
[   50.620085][   T18] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[   50.629483][   T18] ftdi_sio 3-1:0.0: device disconnected
[   51.071263][ T1082] EXT4-fs (loop2): Unsupported blocksize for fs encryption
[   51.150477][   T23] audit: type=1400 audit(1717765296.359:222): avc:  denied  { view } for  pid=1091 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1
[   51.172032][ T1092] overlayfs: failed to resolve './file0': -2
[   51.182098][ T1089] SELinux:  duplicate or incompatible mount options
[   51.281461][  T394] hub 5-1:0.0: config failed, can't read hub descriptor (err -22)
[   51.289705][ T1082] EXT4-fs error (device loop2): ext4_ext_check_inode:540: inode #2: comm syz-executor.2: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 48385, max 5(4), depth 0(0)
[   51.307613][ T1082] EXT4-fs (loop2): get root inode failed
[   51.313098][ T1082] EXT4-fs (loop2): mount failed
[   51.354875][   T23] audit: type=1400 audit(1717765296.569:223): avc:  denied  { mounton } for  pid=1105 comm="syz-executor.4" path=2F726F6F742F73797A6B616C6C65722D74657374646972313039383331323639302F73797A6B616C6C65722E3257327644412F32382FE91F7189591E9233614B dev="sda1" ino=1971 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=sock_file permissive=1
[   51.388063][  T394] usbhid 5-1:0.0: can't add hid device: -71
[   51.395639][  T394] usbhid: probe of 5-1:0.0 failed with error -71
[   51.427570][ T1104] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue
[   51.438627][  T394] usb 5-1: USB disconnect, device number 5
[   51.445905][ T1104] ext4 filesystem being mounted at /root/syzkaller-testdir4286532063/syzkaller.7wBHOK/36/file0 supports timestamps until 2038 (0x7fffffff)
[   51.513059][ T1111] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsv1,bsddf,barrier=0x0000000000000000,norecovery,debug_want_extra_isize=0x0000000000000080,min_batch_time=0x0000000000000006,nodelalloc,acl,noinit_itable,,errors=continue
[   51.654567][ T1127] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue
[   51.668802][ T1127] ext4 filesystem being mounted at /root/syzkaller-testdir4286532063/syzkaller.7wBHOK/37/bus supports timestamps until 2038 (0x7fffffff)
[   51.689474][ T1116] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0xfff52010)
[   51.699609][ T1116] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[   51.714034][ T1116] F2FS-fs (loop3): Found nat_bits in checkpoint
[   51.755907][ T1116] F2FS-fs (loop3): Cannot turn on quotas: -2 on 2
[   51.762863][ T1116] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[   51.769797][ T1116] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[   51.912520][   T23] audit: type=1400 audit(1717765297.069:224): avc:  denied  { setattr } for  pid=1113 comm="syz-executor.3" path="/root/syzkaller-testdir258141735/syzkaller.JgfnSi/42/file2/hugetlb.2MB.rsvd.usage_in_bytes" dev="loop3" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   52.228807][  T376] attempt to access beyond end of device
[   52.228807][  T376] loop3: rw=2049, want=45120, limit=40427
[   52.442757][ T1153] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue
[   52.451545][ T1153] ext4 filesystem being mounted at /root/syzkaller-testdir4286532063/syzkaller.7wBHOK/39/bus supports timestamps until 2038 (0x7fffffff)
[   52.491439][  T124] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[   52.630491][   T23] audit: type=1400 audit(1717765297.839:225): avc:  denied  { connect } for  pid=1152 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   52.669103][   T23] audit: type=1400 audit(1717765297.839:226): avc:  denied  { shutdown } for  pid=1152 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   52.693716][ T1160] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue
[   52.707919][ T1160] ext4 filesystem being mounted at /root/syzkaller-testdir826213788/syzkaller.RA0XT8/24/bus supports timestamps until 2038 (0x7fffffff)
[   52.794636][ T1170] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 1, start 00000001)
[   52.921472][  T124] usb 1-1: config 0 has an invalid interface number: 190 but max is 0
[   52.929460][  T124] usb 1-1: config 0 has no interface number 0
[   52.935403][  T124] usb 1-1: too many endpoints for config 0 interface 190 altsetting 252: 99, using maximum allowed: 30
[   52.946372][  T124] usb 1-1: config 0 interface 190 altsetting 252 has 0 endpoint descriptors, different from the interface descriptor's value: 99
[   52.959633][  T124] usb 1-1: config 0 interface 190 has no altsetting 0
[   52.966258][  T124] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[   52.975158][  T124] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   53.076945][  T124] usb 1-1: config 0 descriptor??
[   53.295161][ T1170] F2FS-fs (loop4): Invalid Fs Meta Ino: node(1) meta(262146) root(3)
[   53.310619][ T1170] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock
[   53.335678][ T1170] F2FS-fs (loop4): Unrecognized mount option "alloǃ$‚fÀ=def��Vcault" or missing value
[   53.741564][  T431] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[   53.847552][   T23] audit: type=1400 audit(1717765299.059:227): avc:  denied  { mount } for  pid=1167 comm="syz-executor.4" name="/" dev="ramfs" ino=17501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1
[   53.916814][ T1206] EXT4-fs (loop3): Unsupported blocksize for fs encryption
[   54.131465][  T431] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[   54.142171][  T431] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   54.152982][  T431] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   54.162559][  T431] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[   54.251496][  T431] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[   54.260406][  T431] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[   54.268307][  T431] usb 2-1: Manufacturer: syz
[   54.274432][  T431] usb 2-1: config 0 descriptor??
[   54.377346][   T23] audit: type=1400 audit(1717765299.589:228): avc:  denied  { unmount } for  pid=371 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1
[   54.415718][   T23] audit: type=1400 audit(1717765299.629:229): avc:  denied  { lock } for  pid=1213 comm="syz-executor.4" path="socket:[16933]" dev="sockfs" ino=16933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1
[   54.508069][ T1214] EXT4-fs (loop4): Mount option "nouser_xattr" will be removed by 3.5
[   54.508069][ T1214] Contact linux-ext4@vger.kernel.org if you think we should keep it.
[   54.508069][ T1214] 
[   54.526712][  T124] usb 1-1: Cannot set autoneg
[   54.531503][  T124] MOSCHIP usb-ethernet driver: probe of 1-1:0.190 failed with error -71
[   54.540667][  T124] usb 1-1: USB disconnect, device number 5
[   54.547647][ T1214] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended
[   54.564390][ T1214] EXT4-fs error (device loop4): ext4_orphan_get:1236: inode #17: comm syz-executor.4: iget: bad i_size value: -6917529027641081756
[   54.578022][ T1214] EXT4-fs error (device loop4): ext4_orphan_get:1240: comm syz-executor.4: couldn't read orphan inode 17 (err -117)
[   54.590285][ T1214] EXT4-fs (loop4): mounted filesystem without journal. Opts: barrier,nouser_xattr,resgid=0x000000000000ee00,nombcache,noload,,errors=continue
[   54.901976][   T23] audit: type=1400 audit(1717765299.989:230): avc:  denied  { create } for  pid=1191 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   54.937707][  T431] appleir 0003:05AC:8243.0002: item fetching failed at offset 0/1
[   54.959226][ T1232] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue
[   54.960759][  T431] appleir 0003:05AC:8243.0002: parse failed
[   54.968036][ T1232] ext4 filesystem being mounted at /root/syzkaller-testdir258141735/syzkaller.JgfnSi/46/bus supports timestamps until 2038 (0x7fffffff)
[   54.988343][   T23] audit: type=1400 audit(1717765299.989:231): avc:  denied  { bind } for  pid=1191 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   55.008514][  T431] appleir: probe of 0003:05AC:8243.0002 failed with error -22
[   55.016243][   T23] audit: type=1400 audit(1717765299.989:232): avc:  denied  { name_bind } for  pid=1191 comm="syz-executor.1" src=96 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1
[   55.029081][  T394] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[   55.044899][   T23] audit: type=1400 audit(1717765299.999:233): avc:  denied  { node_bind } for  pid=1191 comm="syz-executor.1" src=96 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1
[   55.065650][   T23] audit: type=1400 audit(1717765299.999:234): avc:  denied  { connect } for  pid=1191 comm="syz-executor.1" lport=96 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   55.147702][   T23] audit: type=1400 audit(1717765300.359:235): avc:  denied  { read } for  pid=1231 comm="syz-executor.3" dev="nsfs" ino=4026532402 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[   55.173547][  T431] usb 2-1: USB disconnect, device number 4
[   55.180720][   T23] audit: type=1400 audit(1717765300.359:236): avc:  denied  { open } for  pid=1231 comm="syz-executor.3" path="net:[4026532402]" dev="nsfs" ino=4026532402 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[   55.332688][ T1247] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue
[   55.341707][ T1247] ext4 filesystem being mounted at /root/syzkaller-testdir200492638/syzkaller.TCjVwp/11/file0 supports timestamps until 2038 (0x7fffffff)
[   55.440461][  T394] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   55.450632][  T394] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[   55.532049][  T394] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[   55.902224][  T394] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[   55.910370][  T394] usb 5-1: SerialNumber: syz
[   56.036751][   T23] audit: type=1400 audit(1717765301.249:237): avc:  denied  { set_context_mgr } for  pid=1259 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1
[   56.057013][   T23] audit: type=1400 audit(1717765301.249:238): avc:  denied  { map } for  pid=1259 comm="syz-executor.1" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[   56.201509][  T431] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[   56.302378][  T394] usb 5-1: skipping empty audio interface (v1)
[   56.309495][  T394] snd-usb-audio: probe of 5-1:1.0 failed with error -22
[   56.336520][  T394] usb 5-1: USB disconnect, device number 6
[   56.553303][  T431] usb 3-1: Using ep0 maxpacket: 8
[   56.691474][  T431] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   56.704596][  T431] usb 3-1: New USB device found, idVendor=0e8d, idProduct=2000, bcdDevice=21.c6
[   56.710357][ T1268] F2FS-fs (loop1): invalid crc value
[   56.715011][  T431] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   56.728055][ T1268] F2FS-fs (loop1): Found nat_bits in checkpoint
[   56.729997][  T431] usb 3-1: config 0 descriptor??
[   56.756230][ T1268] F2FS-fs (loop1): Cannot turn on quotas: -2 on 1
[   56.762982][ T1268] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[   56.989322][  T394] usb 3-1: USB disconnect, device number 7
[   57.263017][ T1291] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue
[   57.271846][ T1291] ext4 filesystem being mounted at /root/syzkaller-testdir200492638/syzkaller.TCjVwp/14/bus supports timestamps until 2038 (0x7fffffff)
[   57.743274][ T1301] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue
[   57.752661][ T1301] ext4 filesystem being mounted at /root/syzkaller-testdir826213788/syzkaller.RA0XT8/32/bus supports timestamps until 2038 (0x7fffffff)
[   57.820594][ T1304] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue
[   57.829739][ T1304] ext4 filesystem being mounted at /root/syzkaller-testdir4286532063/syzkaller.7wBHOK/45/file0 supports timestamps until 2038 (0x7fffffff)
[   58.183539][ T1322] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[   58.272045][ T1319] EXT4-fs (loop4): quotafile must be on filesystem root
[   58.545652][ T1319] 9pnet: Insufficient options for proto=fd
[   58.558608][ T1331] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'.
[   58.815195][ T1339] erofs: (device loop2): erofs_parse_options: Unrecognized mount option "ÿÿÿÿ01777777777777777777777ÿÿÿÿÿÿ0xffffffffffffffff01777777777777777777777ÿ18446744073709551615" or missing value
[   59.113114][ T1348] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'.
[   59.242022][ T1345] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option
[   59.274628][ T1345] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869)
[   59.298114][ T1345] EXT4-fs (loop1): mounted filesystem without journal. Opts: nodiscard,nobarrier,norecovery,errors=remount-ro,nombcache,nobarrier,nomblk_io_submit,bsdgroups,
[   59.368501][ T1345] EXT4-fs error (device loop1): htree_dirblock_to_tree:1078: inode #2: block 48: comm syz-executor.1: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=16, rec_len=5, size=1024 fake=0
[   59.448532][ T1352] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue
[   59.458039][ T1352] ext4 filesystem being mounted at /root/syzkaller-testdir1098312690/syzkaller.2W2vDA/37/bus supports timestamps until 2038 (0x7fffffff)
[   59.462667][ T1350] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue
[   59.480810][ T1350] ext4 filesystem being mounted at /root/syzkaller-testdir200492638/syzkaller.TCjVwp/16/file0 supports timestamps until 2038 (0x7fffffff)
[   59.602118][ T1350] EXT4-fs error (device loop0): ext4_find_dest_de:2063: inode #2: block 16: comm syz-executor.0: bad entry in directory: rec_len is smaller than minimal - offset=108, inode=646161, rec_len=0, size=4096 fake=0
[   59.648360][ T1370] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[   59.723266][ T1365] EXT4-fs error (device loop1): ext4_get_branch:178: inode #13: block 1024: comm syz-executor.1: invalid block
[   59.740990][ T1365] EXT4-fs error (device loop1): ext4_free_branches:1022: inode #13: comm syz-executor.1: invalid indirect mapped block 1024 (level 0)
[   59.755073][ T1365] EXT4-fs error (device loop1): ext4_validate_block_bitmap:418: comm syz-executor.1: bg 0: block 35: padding at end of block bitmap is not set
[   59.769699][ T1365] EXT4-fs error (device loop1) in ext4_free_blocks:5019: Corrupt filesystem
[   59.778551][ T1365] EXT4-fs (loop1): 1 truncate cleaned up
[   59.784357][ T1365] EXT4-fs (loop1): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000200,dioread_lock,bsddf,,errors=continue
[   59.865102][ T1377] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue
[   59.873920][ T1377] ext4 filesystem being mounted at /root/syzkaller-testdir826213788/syzkaller.RA0XT8/35/bus supports timestamps until 2038 (0x7fffffff)
[   59.933718][   T23] kauditd_printk_skb: 10 callbacks suppressed
[   59.956585][   T23] audit: type=1400 audit(1717765305.099:249): avc:  denied  { create } for  pid=1364 comm="syz-executor.1" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=blk_file permissive=1
[   60.311059][   T23] audit: type=1326 audit(1717765305.519:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1387 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effc1d01f69 code=0x7ffc0000
[   60.334762][   T23] audit: type=1326 audit(1717765305.519:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1387 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7effc1d01f69 code=0x7ffc0000
[   60.358645][   T23] audit: type=1326 audit(1717765305.519:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1387 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effc1d01f69 code=0x7ffc0000
[   60.382480][   T23] audit: type=1326 audit(1717765305.519:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1387 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7effc1d01f69 code=0x7ffc0000
[   60.406291][   T23] audit: type=1326 audit(1717765305.519:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1387 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effc1d01f69 code=0x7ffc0000
[   60.430641][   T23] audit: type=1326 audit(1717765305.519:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1387 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=221 compat=0 ip=0x7effc1d01f69 code=0x7ffc0000
[   60.454576][   T23] audit: type=1326 audit(1717765305.519:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1387 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effc1d01f69 code=0x7ffc0000
[   60.479738][   T23] audit: type=1326 audit(1717765305.519:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1387 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7effc1d00b60 code=0x7ffc0000
[   60.504076][   T23] audit: type=1326 audit(1717765305.519:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1387 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7effc1d01ccb code=0x7ffc0000
[   60.536315][ T1395] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'.
[   60.571432][  T431] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[   60.869592][ T1416] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[   60.911420][  T431] usb 2-1: Using ep0 maxpacket: 16
[   60.929995][ T1422] Zero length message leads to an empty skb
[   61.061518][  T431] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11
[   61.072766][  T431] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024
[   61.084087][  T431] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40
[   61.093531][  T431] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   61.108439][  T431] usb 2-1: config 0 descriptor??
[   61.131696][ T1388] raw-gadget gadget: fail, usb_ep_enable returned -22
[   61.445327][ T1433] overlayfs: NFS export requires "index=on", falling back to nfs_export=off.
[   61.597341][ T1433] overlayfs: statfs failed on './file0'
[   61.707427][  T431] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0
[   61.714256][  T431] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0
[   61.720991][  T431] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0
[   61.727853][  T431] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0
[   61.734768][  T431] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0
[   61.743130][  T431] cp2112 0003:10C4:EA90.0003: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0
[   61.793058][ T1443] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue
[   61.801839][ T1443] ext4 filesystem being mounted at /root/syzkaller-testdir258141735/syzkaller.JgfnSi/56/bus supports timestamps until 2038 (0x7fffffff)
[   61.864970][ T1450] binder_alloc: 1449: binder_alloc_buf, no vma
[   61.961614][  T431] cp2112 0003:10C4:EA90.0003: Part Number: 0x00 Device Version: 0x00
[   62.255610][ T1454] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option
[   62.365898][ T1454] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2930: inode #16: comm syz-executor.2: corrupted xattr block 8
[   62.378524][ T1454] EXT4-fs (loop2): Remounting filesystem read-only
[   62.385101][ T1454] EXT4-fs warning (device loop2): ext4_evict_inode:321: xattr delete (err -117)
[   62.394026][ T1454] EXT4-fs (loop2): 1 orphan inode deleted
[   62.399596][ T1454] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,noquota,grpjquota=,auto_da_alloc=0x0000000000000000,nomblk_io_submit,journal_dev=0x0000000000000088,barrier,delalloc,usrquota,
[   62.419521][ T1454] ext4 filesystem being mounted at /root/syzkaller-testdir826213788/syzkaller.RA0XT8/42/bus supports timestamps until 2038 (0x7fffffff)
[   62.420807][ T1388] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[   62.536518][ T1388] input: syz1 as /devices/virtual/input/input20
[   62.721498][  T431] cp2112 0003:10C4:EA90.0003: error setting SMBus config
[   62.743753][  T431] cp2112: probe of 0003:10C4:EA90.0003 failed with error -71
[   62.752307][  T431] usb 2-1: USB disconnect, device number 5
[   62.790663][ T1470] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[   62.977850][ T1482] EXT4-fs (loop2): Ignoring removed nobh option
[   62.994144][ T1482] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2930: inode #16: comm syz-executor.2: corrupted xattr block 8
[   63.007299][ T1482] EXT4-fs (loop2): Remounting filesystem read-only
[   63.014032][ T1482] EXT4-fs warning (device loop2): ext4_evict_inode:321: xattr delete (err -117)
[   63.023507][ T1482] EXT4-fs (loop2): 1 orphan inode deleted
[   63.029160][ T1482] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,noquota,nouid32,auto_da_alloc=0x0000000000000000,inode_readahead_blks=0x0000000000000001,journal_dev=0x0000000000000003,barrier,nobh,nogrpid,
[   63.051047][ T1482] ext4 filesystem being mounted at /root/syzkaller-testdir826213788/syzkaller.RA0XT8/45/file1 supports timestamps until 2038 (0x7fffffff)
[   63.590673][ T1495] binder_alloc: 1494: binder_alloc_buf, no vma
[   63.629418][ T1499] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled
[   63.639791][ T1499] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option
[   63.648119][ T1499] EXT4-fs (loop4): can't mount with dioread_nolock if block size != PAGE_SIZE
[   63.863201][ T1509] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option
[   63.879444][ T1509] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2930: inode #16: comm syz-executor.1: corrupted xattr block 8
[   63.891884][ T1509] EXT4-fs (loop1): Remounting filesystem read-only
[   63.898290][ T1509] EXT4-fs warning (device loop1): ext4_evict_inode:321: xattr delete (err -117)
[   63.907482][ T1509] EXT4-fs (loop1): 1 orphan inode deleted
[   63.913188][ T1509] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,noquota,grpjquota=,auto_da_alloc=0x0000000000000000,nomblk_io_submit,journal_dev=0x0000000000000088,barrier,delalloc,usrquota,
[   63.947810][ T1525] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[   63.961993][ T1509] ext4 filesystem being mounted at /root/syzkaller-testdir4286532063/syzkaller.7wBHOK/56/bus supports timestamps until 2038 (0x7fffffff)
[   64.894800][ T1534] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled
[   65.041799][ T1534] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,jqfmt=vfsv1,,errors=continue
[   65.066177][ T1534] ext4 filesystem being mounted at /root/syzkaller-testdir826213788/syzkaller.RA0XT8/47/bus supports timestamps until 2038 (0x7fffffff)
[   65.441039][    T7] Bluetooth: hci0: Frame reassembly failed (-84)
[   65.448347][ T1550] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue
[   65.457129][ T1550] ext4 filesystem being mounted at /root/syzkaller-testdir1098312690/syzkaller.2W2vDA/48/bus supports timestamps until 2038 (0x7fffffff)
[   65.672188][ T1563] EXT4-fs (loop2): mounted filesystem without journal. Opts: journal_dev=0x000000000000007f,usrquota,,errors=continue
[   65.811415][  T431] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[   66.166773][   T23] kauditd_printk_skb: 69 callbacks suppressed
[   66.166783][   T23] audit: type=1400 audit(1717765311.379:328): avc:  denied  { read } for  pid=1573 comm="syz-executor.4" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   66.196849][   T23] audit: type=1400 audit(1717765311.379:329): avc:  denied  { open } for  pid=1573 comm="syz-executor.4" path="/root/syzkaller-testdir1098312690/syzkaller.2W2vDA/49/file0/.pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   66.298138][  T431] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   66.309185][  T431] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   66.319372][  T431] usb 1-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00
[   66.334931][  T431] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   66.351549][  T431] usb 1-1: config 0 descriptor??
[   66.588177][  T121] cfg80211: failed to load regulatory.db
[   66.888046][ T1586] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[   67.285528][  T431] hid-led: probe of 0003:27B8:01ED.0004 failed with error -71
[   67.294292][  T431] usb 1-1: USB disconnect, device number 6
[   67.471396][  T121] Bluetooth: hci0: command 0x1003 tx timeout
[   67.477343][   T96] Bluetooth: hci0: sending frame failed (-49)
[   68.040881][ T1610] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue
[   68.049680][ T1610] ext4 filesystem being mounted at /root/syzkaller-testdir258141735/syzkaller.JgfnSi/64/bus supports timestamps until 2038 (0x7fffffff)
[   68.552480][ T1621] EXT4-fs (loop4): Ignoring removed nobh option
[   68.575245][ T1621] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2930: inode #16: comm syz-executor.4: corrupted xattr block 8
[   68.587704][ T1621] EXT4-fs (loop4): Remounting filesystem read-only
[   68.594886][ T1621] EXT4-fs warning (device loop4): ext4_evict_inode:321: xattr delete (err -117)
[   68.604031][ T1621] EXT4-fs (loop4): 1 orphan inode deleted
[   68.609661][ T1621] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,noquota,nouid32,auto_da_alloc=0x0000000000000000,inode_readahead_blks=0x0000000000000001,journal_dev=0x0000000000000003,barrier,nobh,nogrpid,
[   68.630986][ T1621] ext4 filesystem being mounted at /root/syzkaller-testdir1098312690/syzkaller.2W2vDA/54/file1 supports timestamps until 2038 (0x7fffffff)
[   69.184002][ T1633] binder_alloc: 1632: binder_alloc_buf, no vma
[   69.234018][   T23] audit: type=1400 audit(1717765314.439:330): avc:  denied  { create } for  pid=1634 comm="syz-executor.3" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=blk_file permissive=1
[   69.255145][   T23] audit: type=1400 audit(1717765314.449:331): avc:  denied  { read } for  pid=1634 comm="syz-executor.3" name="file0" dev="sda1" ino=1964 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=blk_file permissive=1
[   69.278337][   T23] audit: type=1400 audit(1717765314.449:332): avc:  denied  { open } for  pid=1634 comm="syz-executor.3" path="/root/syzkaller-testdir258141735/syzkaller.JgfnSi/65/file0" dev="sda1" ino=1964 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=blk_file permissive=1
[   69.332571][   T23] audit: type=1400 audit(1717765314.549:333): avc:  denied  { unlink } for  pid=376 comm="syz-executor.3" name="file0" dev="sda1" ino=1964 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=blk_file permissive=1
[   69.410112][ T1638] EXT4-fs (loop0): Ignoring removed bh option
[   69.417733][ T1646] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
[   69.439385][ T1643] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[   69.450822][ T1638] EXT4-fs error (device loop0): ext4_ext_check_inode:540: inode #16: comm syz-executor.0: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 19200(19200)
[   69.452488][ T1643] FAT-fs (loop3): Filesystem has been set read-only
[   69.478615][ T1643] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[   69.488885][ T1643] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[   69.499254][ T1638] EXT4-fs error (device loop0): ext4_orphan_get:1240: comm syz-executor.0: couldn't read orphan inode 16 (err -117)
[   69.499401][ T1643] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[   69.522285][ T1642] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[   69.525198][ T1638] EXT4-fs (loop0): mounted filesystem without journal. Opts: init_itable,noquota,nouid32,barrier,resgid=0x0000000000000000,journal_dev=0x00000000000001ff,barrier,acl,bh,,errors=continue
[   69.533100][ T1643] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[   69.561415][  T431] Bluetooth: hci0: command 0x1001 tx timeout
[   69.563084][ T1642] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[   69.569153][   T96] Bluetooth: hci0: sending frame failed (-49)
[   69.585603][ T1643] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[   69.596295][ T1638] ext4 filesystem being mounted at /root/syzkaller-testdir200492638/syzkaller.TCjVwp/30/file1 supports timestamps until 2038 (0x7fffffff)
[   69.610970][ T1654] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[   69.622008][ T1643] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[   69.637690][   T23] audit: type=1400 audit(1717765314.849:334): avc:  denied  { map } for  pid=1636 comm="syz-executor.0" path="/root/syzkaller-testdir200492638/syzkaller.TCjVwp/30/file1/bus" dev="devtmpfs" ino=9190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[   69.641138][ T1638] EXT4-fs error (device loop0): ext4_lookup:1814: inode #12: comm syz-executor.0: iget: checksum invalid
[   69.716261][ T1638] netlink: 180 bytes leftover after parsing attributes in process `syz-executor.0'.
[   69.747566][  T993] EXT4-fs warning (device loop0): ext4_empty_dir:2996: inode #12: lblock 0: comm syz-executor.0: error -12 reading directory block
[   69.761340][   T23] audit: type=1400 audit(1717765314.959:335): avc:  denied  { rmdir } for  pid=993 comm="syz-executor.0" name="lost+found" dev="loop0" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   69.761695][  T993] ------------[ cut here ]------------
[   69.789095][  T993] kernel BUG at fs/ext4/ext4.h:2984!
[   69.797203][  T993] invalid opcode: 0000 [#1] PREEMPT SMP KASAN
[   69.803097][  T993] CPU: 0 PID: 993 Comm: syz-executor.0 Not tainted 5.4.274-syzkaller-00016-gdd432c37afcd #0
[   69.812977][  T993] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024
[   69.822891][  T993] RIP: 0010:ext4_free_blocks+0x2290/0x2310
[   69.828522][  T993] Code: 08 48 89 df e8 31 fc c8 ff 49 83 7e 18 00 74 2a e8 35 17 99 ff 49 83 c6 18 e9 6b ff ff ff e8 27 17 99 ff 0f 0b e8 20 17 99 ff <0f> 0b e8 19 17 99 ff 0f 0b e8 12 17 99 ff 0f 0b e8 0b 17 99 ff eb
[   69.848087][  T993] RSP: 0018:ffff8881e951f580 EFLAGS: 00010293
[   69.853985][  T993] RAX: ffffffff81cb2500 RBX: 0000000000000001 RCX: ffff8881e8855e80
[   69.861797][  T993] RDX: 0000000000000000 RSI: 0000000000000019 RDI: 0000000000000001
[   69.869608][  T993] RBP: ffff8881e951f7b0 R08: ffffffff81cb08b9 R09: 0000000000000000
[   69.877420][  T993] R10: 0000000000000000 R11: dffffc0000000001 R12: 000000000000070d
[   69.885230][  T993] R13: dffffc0000000000 R14: ffff8881e68ed000 R15: 0000000000000019
[   69.893040][  T993] FS:  00005555567b9480(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[   69.901813][  T993] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   69.908232][  T993] CR2: 0000001b32923000 CR3: 00000001d36dd000 CR4: 00000000003406b0
[   69.916041][  T993] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[   69.923853][  T993] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[   69.931658][  T993] Call Trace:
[   69.934795][  T993]  ? __die+0xb4/0x100
[   69.938608][  T993]  ? die+0x26/0x50
[   69.942165][  T993]  ? do_trap+0x1e7/0x340
[   69.946245][  T993]  ? ext4_free_blocks+0x2290/0x2310
[   69.951279][  T993]  ? ext4_free_blocks+0x2290/0x2310
[   69.956314][  T993]  ? do_invalid_op+0xfb/0x110
[   69.960827][  T993]  ? ext4_free_blocks+0x2290/0x2310
[   69.965863][  T993]  ? invalid_op+0x1e/0x30
[   69.970031][  T993]  ? ext4_free_blocks+0x649/0x2310
[   69.974975][  T993]  ? ext4_free_blocks+0x2290/0x2310
[   69.980009][  T993]  ? ext4_free_blocks+0x2290/0x2310
[   69.985043][  T993]  ? ext4_truncate+0xb23/0x1290
[   69.989737][  T993]  ? ext4_mb_discard_preallocations+0x250/0x250
[   69.995809][  T993]  ? get_default_free_blocks_flags+0x6d/0x4c0
[   70.001708][  T993]  ? ext4_ext_remove_space+0xc46/0x4ba0
[   70.007085][  T993]  ext4_ext_remove_space+0x2758/0x4ba0
[   70.012389][  T993]  ? ext4_mark_inode_dirty+0x4e7/0x7a0
[   70.017676][  T993]  ? ext4_ext_index_trans_blocks+0x120/0x120
[   70.023493][  T993]  ? ext4_es_lookup_extent+0x9d0/0x9d0
[   70.028787][  T993]  ? ext4_ext_truncate+0x136/0x180
[   70.033732][  T993]  ext4_truncate+0xb23/0x1290
[   70.038244][  T993]  ? ext4_mark_inode_dirty+0x4e7/0x7a0
[   70.043544][  T993]  ? ext4_mark_inode_dirty+0x7a0/0x7a0
[   70.048834][  T993]  ? __ext4_journal_start_sb+0x295/0x460
[   70.054304][  T993]  ext4_evict_inode+0x126a/0x1ac0
[   70.059166][  T993]  ? ext4_truncate_restart_trans+0xe0/0xe0
[   70.064805][  T993]  ? __fsnotify_parent+0x310/0x310
[   70.069752][  T993]  ? fsnotify_destroy_marks+0x1de/0x5a0
[   70.075132][  T993]  ? ext4_truncate_restart_trans+0xe0/0xe0
[   70.080773][  T993]  evict+0x29b/0x6a0
[   70.084506][  T993]  vfs_rmdir+0x24b/0x3c0
[   70.088583][  T993]  do_rmdir+0x2c1/0x580
[   70.092580][  T993]  ? d_delete_notify+0xc0/0xc0
[   70.097177][  T993]  ? _raw_spin_unlock_irq+0x4a/0x60
[   70.102213][  T993]  do_syscall_64+0xca/0x1c0
[   70.106552][  T993]  entry_SYSCALL_64_after_hwframe+0x5c/0xc1
[   70.111421][  T431] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[   70.112281][  T993] RIP: 0033:0x7f132f9aa747
[   70.123822][  T993] Code: 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 07 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
[   70.143273][  T993] RSP: 002b:00007ffed1c1b188 EFLAGS: 00000207 ORIG_RAX: 0000000000000107
[   70.151509][  T993] RAX: ffffffffffffffda RBX: 0000000000000065 RCX: 00007f132f9aa747
[   70.159318][  T993] RDX: 0000000000000200 RSI: 00007ffed1c1c330 RDI: 00000000ffffff9c
2024/06/07 13:01:55 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF
[   70.167128][  T993] RBP: 00007f132fa07636 R08: 0000000000000000 R09: 0000000000000000
[   70.174947][  T993] R10: 0000000000001000 R11: 0000000000000207 R12: 00007ffed1c1c330
[   70.182747][  T993] R13: 00007f132fa07636 R14: 0000000000010e59 R15: 0000000000000019
[   70.190560][  T993] Modules linked in:
[   70.196351][   T23] audit: type=1400 audit(1717765315.409:336): avc:  denied  { write } for  pid=345 comm="syz-fuzzer" path="pipe:[9863]" dev="pipefs" ino=9863 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1
[   70.208415][  T993] ---[ end trace a1c83e317eb586f1 ]---
[   70.241731][  T993] RIP: 0010:ext4_free_blocks+0x2290/0x2310
[   70.247355][  T993] Code: 08 48 89 df e8 31 fc c8 ff 49 83 7e 18 00 74 2a e8 35 17 99 ff 49 83 c6 18 e9 6b ff ff ff e8 27 17 99 ff 0f 0b e8 20 17 99 ff <0f> 0b e8 19 17 99 ff 0f 0b e8 12 17 99 ff 0f 0b e8 0b 17 99 ff eb
[   70.276553][  T993] RSP: 0018:ffff8881e951f580 EFLAGS: 00010293
[   70.282863][  T993] RAX: ffffffff81cb2500 RBX: 0000000000000001 RCX: ffff8881e8855e80
[   70.290637][  T993] RDX: 0000000000000000 RSI: 0000000000000019 RDI: 0000000000000001
[   70.298772][  T993] RBP: ffff8881e951f7b0 R08: ffffffff81cb08b9 R09: 0000000000000000
[   70.306750][  T993] R10: 0000000000000000 R11: dffffc0000000001 R12: 000000000000070d
[   70.316093][  T993] R13: dffffc0000000000 R14: ffff8881e68ed000 R15: 0000000000000019
[   70.325593][  T993] FS:  00005555567b9480(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[   70.334517][  T993] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   70.340925][  T993] CR2: 00007fd2aa9c6580 CR3: 00000001d36dd000 CR4: 00000000003406b0
[   70.348985][  T993] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[   70.357241][  T993] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[   70.381546][  T993] Kernel panic - not syncing: Fatal exception
[   70.387600][  T993] Kernel Offset: disabled
[   70.391721][  T993] Rebooting in 86400 seconds..