last executing test programs:

10.382224558s ago: executing program 3 (id=842):
r0 = socket$inet(0x2, 0x2, 0x1)
setsockopt$sock_int(r0, 0x1, 0x5, &(0x7f0000000440)=0x1, 0x4) (async)
setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000080)='wg0\x00', 0x4) (async)
sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000640)="00000095ad00", 0x6}], 0x2}, 0x0) (async)
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x2000480, &(0x7f0000000140), 0x1, 0x784, &(0x7f00000007c0)="$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") (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) (async)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000400)='global_dirty_state\x00', r2}, 0x10)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000400)='global_dirty_state\x00', r4}, 0x10) (async)
r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0)
syz_usb_connect$hid(0xf63067478e218e8, 0x36, &(0x7f0000000cc0)=ANY=[], 0x0) (async)
connect$inet6(0xffffffffffffffff, &(0x7f00000003c0)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) (async)
writev(r5, &(0x7f0000000240)=[{&(0x7f0000000800)='9', 0x1}], 0x1f)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0)
write$cgroup_type(r6, &(0x7f0000000180), 0x40001)

10.381245787s ago: executing program 3 (id=845):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="0000ffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYRESDEC], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000271a8e91822c57300741007a84bb4f760b0eba9c43f8d6af1ee7cdca629f168f8b9f5bf66228a6170c74dca3127912a4f8d7089aee71b89382b25c230ba9b2bb820538d6f46fae50e5f5bec8f4d2bfc51d05c54de0242a20904e38ed4eca98498038a754d4a012e4f37614879a7f1ed40717f8c1fd617bf97611b0f135021e560d55c9e543172371467fb006de09b2c9a51e7041ef593c243cfa03320f25137abe1a8ad78390718fdcc1112c5291fea24cb4821cf50a8ae524722e0c9a7ab4a8654eaf2f75", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000007f1600850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000180), r2)
sendmsg$NFC_CMD_GET_TARGET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r3, 0x1}, 0x14}}, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00')
r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r7, 0x0, 0x9}, 0x18)
r8 = socket$nl_generic(0x11, 0x3, 0x10)
syz_emit_ethernet(0x2a, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @dev, @private}, @address_reply}}}}, 0x0)
sendmsg(r8, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x36}], 0x2, 0x0, 0x0, 0x11000000}, 0x0)
gettid()
futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x20, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @cgroup_sysctl, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r9}, 0x10)
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000140)=ANY=[], 0x1, 0x2cd, &(0x7f0000000200)="$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")

9.639920216s ago: executing program 3 (id=849):
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000240), 0x25, 0x4b6, &(0x7f0000000540)="$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")
r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000001afc180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000090000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r2 = getpid()
sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0)
write$vga_arbiter(r5, 0x0, 0xb)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000180))
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8bf00000000bf0800000000000000010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
close_range(r6, 0xffffffffffffffff, 0x0)

8.537997729s ago: executing program 3 (id=854):
socket$nl_xfrm(0x10, 0x3, 0x6)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000300)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bf"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_open_dev$usbfs(0x0, 0x205, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r6, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"})
r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000000c80)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000060000000400000000000007000000000000000061"], 0x0, 0x2a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r7, 0x0, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000001000000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78)
process_madvise(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
readv(r1, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0x940}], 0x1)
ioctl$TIOCVHANGUP(r1, 0x5437, 0x0)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4d8, 0xf002, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0)

7.726270144s ago: executing program 3 (id=857):
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_all\x00', 0x275a, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000021c0)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9046c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4e0664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900000000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b6c7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48fc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa7666b5ded16ee7025f38400be7c1f001b2cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890decacec55bf404e4e1f74b7eed82571be54c72d978cf906df0042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf0e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b3a2327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a998de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270bb29b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4f4ab9e85bf8c6d71a2214d00000000d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f4f5b308cf0d031b0c7f0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f68df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51700eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd63bed8d31c31c37a373d4efd89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f00000000010000000000000000000057d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fa03b84f63e022fe755f4007a4a899eaf52c4f491d8e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c716357d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6cd28cf28fe2ee593e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c24936615ee68538e8fddd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c191355391771f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba1c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63c41cbde2ba66ad81168070c8c6e18abde34ad3e16304d06a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c7340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b9e6626f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f14eafe4b28ec66815cf8d1f56aa1424bc9b5d58790298e5b310d69e50c222563b54e60854e1bfeef448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74df190c57bdfdc1f069f9491bca7a8c59363799be70018c25ece5ad7307dc7a95c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2cdfb7fea73ca18874664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677ec97c5c568a89d6e36b165c39132a0f2708e09ae8268dcc15411483b8506386aa0ece2a94c320b002c77f82cb3cc96c34f7831844cc748e662675a7713c7067081cac15994698c41ff4754268ae2676384ff799783f55d7e5a1a092a01b965dc99cb7a9d98440c355927629f2bcf9dc2396eb2f5d25829715b24327642ac48f1201014a95e0e65e12cdf27e19043e3c5d3e798375cead35b9a93190a52cdecaaccc854a1d41ef365303f0e9b4fc969c9dab6df5e8a795b140fcc09e8a7b694d12932917facd8ceaa4e2d0d16bb0b95387fcd5ff136d8abddf94daf442bbff744591931872a36cf921ad69f2127386e8b0f9afee4da8d3fbec809fbb3ca0fded2859cf25d4c6155d396c5b9bd1a928923123f63f4c40688eae4c697bfc674e03231c42f7eaaf5166bbc4653c71805f9448416e379cc1c40f8f866c9b319a849dd00ff9b84857436ed362c4632bfc3fa7357c24f15bbb07bd91893e61df7eb6dc5e071a9cc2faa7a32a91c4d982f5cfb725dca80b23874877a4980dbd70cda040b1ce527e7188159df77b493efbbd7bfe2680bf44e49eb68e5e33a0a5726072b2699d6244cd5c4a82bf18c668a3d43cec78c5fe1f12283d5dde6d0ea0b1b81ee7c065c938577e4ec93f22f1e6106f337625b7f7798011a60a75c35731fe44fa4fc6add59bac24d045a5780a0737b0f09e9127e9df798a1a58434b00d64ea6121afab030d1100905b6b5ecfd2991dd523098dbfaa85c0067884f987dde054a7ba1a95c1815c40a45878dd97a2721b28db7c52230dc999c4416b2af946ee708001cac72dd4ee55eae2d598cff47e4b929f3"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0100000004000000070000000046613fe5d30cd32a2b816499325a77069725e51ea2dc7d8481800701c82d9ff8b36af929159df3f56daef6bfd67eac3d387dc23536eaf36ac2f10100be", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000580)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"})
r3 = syz_open_pts(0xffffffffffffffff, 0x0)
dup3(r3, 0xffffffffffffffff, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010025bd7000fcdbdf2517000000400006803c00040067636d5f"], 0x54}}, 0x20000000)

7.412989653s ago: executing program 1 (id=858):
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c01000000010104000000000000fff50a0000003c0001802c000180140003000000000000000000000000000000000014000400200100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400200100000000000000000000000000000c00028005000100000000000800074000000000a8000d8008000100ac141400080002000000000014000500ff020000000000000000000400000001140004"], 0x13c}}, 0x0)

6.572792681s ago: executing program 3 (id=863):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000002c0)={r0, 0x58, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r3=>0x0}}, 0x10)
setsockopt$packet_drop_memb(r1, 0x107, 0x2, &(0x7f00000004c0)={r3, 0x1, 0x6, @broadcast}, 0x10)
r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r2}, 0x10)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r6 = openat$cgroup_freezer_state(r5, &(0x7f00000000c0), 0x2, 0x0)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r7}, &(0x7f0000000000), &(0x7f00000005c0)=r8}, 0x20)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000001b40)='sched_switch\x00', r9}, 0x10)
r10 = openat$cgroup_procs(r5, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0)
write$cgroup_pid(r10, &(0x7f0000000040), 0x12)
write$cgroup_freezer_state(r6, &(0x7f0000000400)='FROZEN\x00', 0x7)
write$cgroup_freezer_state(r6, &(0x7f0000000080)='THAWED\x00', 0x7)
r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
pwritev2(r4, &(0x7f0000000040)=[{&(0x7f0000000180)="5ca6dbbe5df38bab2a54acfa60f3182055249a0872c2ae81d66b353cfd277de61e86f136753fc88e5bbe583703567c78567b35713ea3b44dc3bf2d15b4b7b599bc3caf77021e964209c5f14dda466d0693083f867025e5a1783f76da051c4ee98f3952", 0x63}], 0x1, 0x6, 0xfffffffc, 0x17)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r11}, 0x10)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xe28, 0xfffffffffffffff5, &(0x7f0000000980)="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", 0x0, 0x2f, 0xe8034000, 0xf000, 0xfffffffffffffe2a, &(0x7f0000000000), &(0x7f00000000c0)="c6769e45b7c61302926682c7f9e9bb5ba2b3cdf023e8da0392a4cd62e2370f25ae5ba0dab896bcf5b774cd28bebbde39f796ae27d04582bb7c03e9fe830ea22c9fd03f6d2779515fdad3f5d0de07b7b70996102fdb67b1e77a34a5b7136a212fa2c0ea502588309dc3e42c55a6f93e6ba5e1b492f9db48f0fdd2f9fb937b3e8a63dcf9dd855837433998ba579da27559", 0x5dc}, 0x28)

6.26409933s ago: executing program 1 (id=864):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x2cf6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x6, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000500000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10)
syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000040)='./file0\x00', 0x1000801, &(0x7f0000000ac0)=ANY=[@ANYRES64=0x0], 0x2, 0x1fd, &(0x7f00000003c0)="$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")
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]})
socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', <r4=>0x0})
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000003680)='sched_switch\x00', r5}, 0x10)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001900)=@bridge_setlink={0x28, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r4}, [@IFLA_AF_SPEC={0x8, 0xc, 0x0, 0x0, [@AF_BRIDGE={0x4}]}]}, 0x28}}, 0x0)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_async', 0x230240, 0x48)
r7 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x800, 0x0)
read$FUSE(r7, &(0x7f0000003ac0)={0x2020, 0x0, 0x0, 0x0, 0x0, <r8=>0x0}, 0x2020)
sched_setaffinity(r8, 0x8, &(0x7f0000000000)=0x6)
syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r9 = socket$inet6(0xa, 0x3, 0x8000000003c)
setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588)
socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000009007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x5, 0x5, 0x1000, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r10], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)

5.050517952s ago: executing program 0 (id=881):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x183442, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', <r3=>0x0})
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@newlink={0x68, 0x10, 0x409, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x48, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x30, 0x5, 0x0, 0x1, [@IFLA_BRPORT_UNICAST_FLOOD={0x5}, @IFLA_BRPORT_STATE={0x5}, @IFLA_BRPORT_NEIGH_SUPPRESS={0x5}, @IFLA_BRPORT_LEARNING={0x5}, @IFLA_BRPORT_VLAN_TUNNEL={0x5}, @IFLA_BRPORT_FLUSH={0x4}]}}}]}, 0x68}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
mount$fuse(0x0, 0x0, 0x0, 0xc, &(0x7f0000000680)=ANY=[@ANYBLOB="2840d2ee36"])
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r4 = getpid()
sched_setscheduler(r4, 0x1, &(0x7f0000000100)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000400000000dfffff1918120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r8}, 0x10)
mkdir(&(0x7f0000000300)='./bus\x00', 0x80)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x1a, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000000000000950000200000000009a1f3cd91dfa631dbadeeb3981c21b6d6536425ce4cee7ae6ce9e201c874f87741e2b9e8bf08e2c52340981b96849feb0d8ed84f7a9d8cd79366b14b02aae76f9e1f39b7953c7acf1196db27cbaa0a2e57515864068c3b7f8a54c70e0ff00bab0816550c32ebbbe327af58690bf7ec7b30964d7cbdc1a391dca35bf55b90fc799df8c98db613482013fba748f4f9a92021944958584ca5a8906fe239288"], &(0x7f0000000340)='syzkaller\x00', 0x1, 0xc5, &(0x7f0000000180)=""/197, 0x0, 0x0, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x64, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
r9 = signalfd(r0, &(0x7f0000000040)={[0xdb]}, 0x8)
timerfd_gettime(r9, &(0x7f0000000080))

4.376896715s ago: executing program 4 (id=872):
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000280)='./file0\x00', 0x842890, 0x0, 0x1, 0x0, &(0x7f00000006c0))
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r1, &(0x7f0000002140)={0x2020}, 0x2020)
pipe(&(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$inet_udp(0x2, 0x2, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000050000000200000000100000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00'], 0x50)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f00000012c0)='sys_enter\x00', r6}, 0x10)
pipe2(&(0x7f0000000000), 0x0)
fstat(r2, &(0x7f00000004c0))
close(r4)
r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
readv(r7, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/139, 0x8b}, {0x0}], 0x2)
ioctl$TCSETS(r7, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "000080f100df000000a7d9de16c708db7200"})
r8 = syz_open_pts(r7, 0x42)
timerfd_settime(r3, 0x2, &(0x7f0000000540)={{0x77359400}, {0x0, 0x989680}}, &(0x7f0000000580))
dup3(r8, r7, 0x0)
write$binfmt_misc(r3, &(0x7f0000000000), 0xfffffecc)
splice(r2, 0x0, r6, 0x0, 0x200000000622c, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r9=>0xffffffffffffffff})
connect$unix(r9, &(0x7f000057eff8)=@abs, 0x6e)
recvmmsg(r9, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="00005999ebc10000000000000000000000000000648b47d5f01248a997c1092e925d8b682e5a92cd9c3ecb4de4788cff31be2fad414a85c606d5b2452eb97cb7a7c4f02e96dbcac27e08db28e3119d113b505f63f6197aa67f4f33", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)

4.186258973s ago: executing program 0 (id=874):
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000240), 0x25, 0x4b6, &(0x7f0000000540)="$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")
r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000001afc180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000090000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r2 = getpid()
sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0)
write$vga_arbiter(r5, 0x0, 0xb)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000180))
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8bf00000000bf0800000000000000010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
close_range(r6, 0xffffffffffffffff, 0x0)

3.950049574s ago: executing program 4 (id=876):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xb, 0x5, 0x400, 0x4, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10)
r2 = socket$inet6(0xa, 0x80002, 0x88)
bind$inet6(r2, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c)
setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0)
syz_emit_ethernet(0x83, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030086dd601b8b97004d88c19edace00000000000000002100000002ff02000000000000000000000000000104004e20004d13"], 0x0)
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
sendmmsg$inet6(r3, &(0x7f0000000440)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0)
ppoll(&(0x7f0000000d40)=[{r2}], 0x25, &(0x7f0000000300)={0x0, 0x3938700}, 0x0, 0x0) (fail_nth: 3)

3.581282998s ago: executing program 4 (id=877):
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000080)='./file0\x00', 0xa08886, &(0x7f0000000040)=ANY=[@ANYRES32=0x0], 0x9, 0x2a8, &(0x7f0000000500)="$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")
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r2 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
r3 = gettid()
kcmp(r3, 0xffffffffffffffff, 0x2, r2, r2)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000001f00)=[{{&(0x7f0000000480)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000001d00), 0x0, &(0x7f0000001e80)=[@rights={{0x18, 0x1, 0x1, [r5, r1]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, r5, 0xffffffffffffffff, r2, r2]}}], 0x40, 0x4803}}], 0x1, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYRES8=r1, @ANYBLOB="b3d9cde8703f040d85dbecabdf25a0c9d7664b9e9d48f14058b481ed68436e3af7c88b009da0ff969183522fd8781e82c998963211278f66aea05d800bbe2e9a2c55f54394b29c6fc40aa706ca602967451fd823678a46b9f008711c541d35400238f25c172e020512626d259b407b06fab29fa96e86b823dbe4be3de334cae8071a15ca745b5a6af97e07a771d9485c3e8d0df3df6ada174ee05bfe33c0d17195c3f4497d89e538", @ANYBLOB="0000000800080000000400000000000000000000b78c5efe49", @ANYRES64, @ANYRES8=r5, @ANYBLOB="6dd725cc6bdbe9396bd26f5a26c06148a1835b4c61d9821321aa2ae2d32a0b1a81fa0b0fc00f7821de6ab3af9c9fb584f28295f4fa9c1666d0d12aadf649e3714588ebfeb12930fbd08c6f30aef49025246573b128e7c234cccdfbf200b0e5cb705944dcb860e959e4eea394911ef5c5ed9c7d194fabba64c73221022100ae5f10ce39b7ba722cd021f218db03d57e70593d8d7e9fe600dbe704"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='devlink_hwerr\x00', r0}, 0x18)
socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFC_CMD_GET_TARGET(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0)
syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r6)
r7 = getpid()
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000000500000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYRESDEC=r5, @ANYRES32=r8], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2ef68a6aded7931f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r9}, 0x10)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r10}, 0x10)
sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x5)
sched_rr_get_interval(r7, &(0x7f0000000180))

3.358601709s ago: executing program 1 (id=879):
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x31, 0x4, 0x0, 0x0, 0xc4, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @remote, {[@timestamp={0x44, 0x18, 0x0, 0x0, 0x9, [0x401, 0x0, 0x4, 0x0, 0x0]}, @timestamp_prespec={0x44, 0x34, 0xc0, 0x3, 0x1, [{@private=0xa010100}, {@multicast1}, {@remote, 0x8}, {@broadcast}, {@empty}, {@multicast1}]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x8, [{@dev}, {@remote}, {@multicast2}, {@private=0xa010101}, {@rand_addr=0x64010101}, {@broadcast, 0x52b1}, {@multicast2}]}, @noop, @noop, @noop, @lsrr={0x83, 0xb, 0xde, [@rand_addr=0x64010102, @multicast1]}, @rr={0x7, 0x17, 0x0, [@dev, @remote, @multicast1, @private=0xa010102, @remote]}]}}}}})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000180)={'pim6reg1\x00', 0x2})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$TUNSETLINK(r2, 0x400454cd, 0x20)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast})
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)
write$binfmt_script(r4, &(0x7f0000000240), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r4, 0x0)
r5 = dup(r1)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000})
ioctl$KVM_NMI(r6, 0xae9a)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

2.799839211s ago: executing program 0 (id=880):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10)
getpid()
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB, @ANYRESOCT=r2, @ANYRESHEX=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, 0x0, 0x0, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000e00851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000480000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100007fffffff07010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78)

2.619753698s ago: executing program 1 (id=882):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x183442, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', <r3=>0x0})
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@newlink={0x68, 0x10, 0x409, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x48, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x30, 0x5, 0x0, 0x1, [@IFLA_BRPORT_UNICAST_FLOOD={0x5}, @IFLA_BRPORT_STATE={0x5}, @IFLA_BRPORT_NEIGH_SUPPRESS={0x5}, @IFLA_BRPORT_LEARNING={0x5}, @IFLA_BRPORT_VLAN_TUNNEL={0x5}, @IFLA_BRPORT_FLUSH={0x4}]}}}]}, 0x68}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
mount$fuse(0x0, 0x0, 0x0, 0xc, &(0x7f0000000680)=ANY=[@ANYBLOB="2840d2ee36"])
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r4 = getpid()
sched_setscheduler(r4, 0x1, &(0x7f0000000100)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000400000000dfffff1918120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r8}, 0x10)
mkdir(&(0x7f0000000300)='./bus\x00', 0x80)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x1a, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000000000000950000200000000009a1f3cd91dfa631dbadeeb3981c21b6d6536425ce4cee7ae6ce9e201c874f87741e2b9e8bf08e2c52340981b96849feb0d8ed84f7a9d8cd79366b14b02aae76f9e1f39b7953c7acf1196db27cbaa0a2e57515864068c3b7f8a54c70e0ff00bab0816550c32ebbbe327af58690bf7ec7b30964d7cbdc1a391dca35bf55b90fc799df8c98db613482013fba748f4f9a92021944958584ca5a8906fe239288"], &(0x7f0000000340)='syzkaller\x00', 0x1, 0xc5, &(0x7f0000000180)=""/197, 0x0, 0x0, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x64, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
r9 = signalfd(r0, &(0x7f0000000040)={[0xdb]}, 0x8)
timerfd_gettime(r9, &(0x7f0000000080))

2.510886248s ago: executing program 4 (id=883):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000240)={0x8, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108)
bind$bt_hci(0xffffffffffffffff, 0x0, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf)
openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
pipe2$9p(0x0, 0x80800)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x2, 0x2004, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r5, <r6=>0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10)
r8 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_group_source_req(r8, 0x29, 0x2e, &(0x7f0000000240)={0x8, {{0xa, 0x2, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @private1, 0xffffffff}}}, 0x108)
setsockopt$inet6_MCAST_MSFILTER(r8, 0x29, 0x30, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x5000)

2.509839438s ago: executing program 2 (id=884):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000900000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000900)='kmem_cache_free\x00', r2}, 0x10)
r3 = socket(0x10, 0x3, 0x0)
connect$netlink(r3, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc)
sendmsg$nl_route_sched(r3, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000001500)=@newtaction={0x18, 0x32, 0x829, 0x0, 0x0, {0x0, 0x0, 0x2}, [{0x4}]}, 0x18}}, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10)
socket$inet6(0xa, 0x200000000003, 0x87)
syz_emit_ethernet(0x5e, &(0x7f0000000000)={@local, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "3000bb", 0x28, 0x2b, 0x0, @private2, @local, {[@hopopts={0x87}, @srh={0x3b, 0x2, 0x4, 0x1, 0x0, 0x0, 0x0, [@local]}], {0x0, 0x0, 0x8}}}}}}, 0x0)

2.499034969s ago: executing program 2 (id=885):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x183442, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', <r3=>0x0})
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@newlink={0x68, 0x10, 0x409, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x48, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x30, 0x5, 0x0, 0x1, [@IFLA_BRPORT_UNICAST_FLOOD={0x5}, @IFLA_BRPORT_STATE={0x5}, @IFLA_BRPORT_NEIGH_SUPPRESS={0x5}, @IFLA_BRPORT_LEARNING={0x5}, @IFLA_BRPORT_VLAN_TUNNEL={0x5}, @IFLA_BRPORT_FLUSH={0x4}]}}}]}, 0x68}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
mount$fuse(0x0, 0x0, 0x0, 0xc, &(0x7f0000000680)=ANY=[@ANYBLOB="2840d2ee36"])
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r4 = getpid()
sched_setscheduler(r4, 0x1, &(0x7f0000000100)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000400000000dfffff1918120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r8}, 0x10)
mkdir(&(0x7f0000000300)='./bus\x00', 0x80)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x1a, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000000000000950000200000000009a1f3cd91dfa631dbadeeb3981c21b6d6536425ce4cee7ae6ce9e201c874f87741e2b9e8bf08e2c52340981b96849feb0d8ed84f7a9d8cd79366b14b02aae76f9e1f39b7953c7acf1196db27cbaa0a2e57515864068c3b7f8a54c70e0ff00bab0816550c32ebbbe327af58690bf7ec7b30964d7cbdc1a391dca35bf55b90fc799df8c98db613482013fba748f4f9a92021944958584ca5a8906fe239288"], &(0x7f0000000340)='syzkaller\x00', 0x1, 0xc5, &(0x7f0000000180)=""/197, 0x0, 0x0, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x64, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
r9 = signalfd(r0, &(0x7f0000000040)={[0xdb]}, 0x8)
timerfd_gettime(r9, &(0x7f0000000080))

1.820192902s ago: executing program 0 (id=886):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000d8d60b007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[], 0x48)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = add_key$keyring(&(0x7f0000000080), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff)
request_key(&(0x7f0000000100)='asymmetric\x00', &(0x7f0000000140)={'syz', 0x1}, &(0x7f0000000180)='keyring\x00', r4)
keyctl$restrict_keyring(0xa, r4, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000000)='id:cb2e')
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socket(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)

1.74102332s ago: executing program 1 (id=887):
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r2}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff15, 0x10, &(0x7f0000000000), 0xf000000, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)

1.620891611s ago: executing program 4 (id=888):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7b, 0x4)
r1 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r1, 0x107, 0x7, 0x0, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="1b0000000000f6fffffffff7fb7f000000000000b22a4c1f11d2ed96495d6e1f72ee1274dcaab181ce3f916c2f842d4a4ead54a90e60ed812c35d75dd64d34f82023665974634d2025b201a0", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10)
bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=@base={0x18, 0x4, 0x41, 0x0, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4002, 0x5, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r4 = getpid()
sched_setscheduler(r4, 0x1, &(0x7f0000000100)=0x5)
r5 = dup(r1)
ioctl$KVM_IRQ_LINE(r5, 0x4008ae61, &(0x7f0000000280)={0x5, 0x13})
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={<r6=>0xffffffffffffffff})
r7 = syz_open_dev$vcsu(&(0x7f0000000180), 0x0, 0x1)
accept4$bt_l2cap(r7, &(0x7f0000000440)={0x1f, 0x0, @fixed}, &(0x7f0000000400)=0xe, 0x80000)
connect$unix(r6, &(0x7f0000000380)=@abs, 0x6e)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
syz_io_uring_setup(0x45e, &(0x7f00000001c0)={0x0, 0x2ebb, 0x0, 0x4000}, &(0x7f0000000080), &(0x7f00000000c0))
setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x6, 0x300, 0xfc}, 0x1c)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10)

1.572176595s ago: executing program 2 (id=889):
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x2000003, &(0x7f0000000000), 0x1, 0x4f3, &(0x7f0000000bc0)="$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")
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000000002d007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000004c0)='kmem_cache_free\x00', r0}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x2, 0xa, 0x0, 0x0, 0x2}, 0x10}}, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000000740)=[{{&(0x7f00000005c0)=@tipc, 0x80, &(0x7f0000000800)=[{&(0x7f0000001740)=""/4081, 0xff1}, {0x0}, {&(0x7f0000000300)=""/52, 0x34}, {&(0x7f0000000180)=""/51, 0x33}, {&(0x7f0000000240)=""/140, 0x8c}], 0x5}}], 0x1, 0x2, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0)
fsync(r1)

1.494115062s ago: executing program 2 (id=890):
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mounts\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMP(r3, 0x1, 0x40, &(0x7f0000000000)=0x822, 0x4)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10)
open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x1a, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000040000000000000000950000200000000009a1f3cd91dfa631dbadeeb3981c21b6d6536425ce4cee7ae6ce9e201c874f87741e2b9e8bf08e2c52340981b96849feb0d8ed84f7a9d8cd79366b14b02aae76f9e1f39b7953c7acf1196db27cbaa0a2e57515864068c3b7f8a54c70e0ff00bab0816550c32ebbbe327af58690bf7ec7b30964d7cbdc1a391dca35bf55b90fc799df8c98db613482013fba748f4f9a92021944958584ca5a8906fe239288"], &(0x7f0000000340)='syzkaller\x00', 0x1, 0xc5, &(0x7f0000000180)=""/197, 0x0, 0x0, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0xb00, 0x10, 0x0, 0x0, 0x64, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)

1.002687618s ago: executing program 0 (id=891):
socket(0xa, 0x3, 0xe136)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x1001f0)
add_key$user(0x0, 0x0, 0x0, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f00000500000000000000", @ANYRES32, @ANYBLOB="0000000000000000000100001e00001c95f352f3", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r3}, &(0x7f0000000180), &(0x7f0000000200)}, 0x20)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10)
creat(0x0, 0x0)
r5 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0xffffff80, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488)

635.963321ms ago: executing program 4 (id=892):
syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./file0\x00', 0x8, &(0x7f00000004c0)={[{@nodiscard}, {@quota}, {@alloc_mode_def}, {@six_active_logs}, {@noflush_merge}, {@disable_roll_forward}, {@inline_data}, {@noacl}, {@heap}, {@background_gc_off}, {@noextent_cache}, {@adaptive_mode}, {@jqfmt_vfsold}]}, 0x1, 0x5505, &(0x7f0000002480)="$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")
syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x360044, 0x0, 0x0, 0x0, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x3000010, &(0x7f00000001c0)={[{@usrquota}, {@abort}]}, 0x1, 0x515, &(0x7f0000001c40)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0c000000000000000400090009000000000000", @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)

611.163894ms ago: executing program 1 (id=893):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00')
fchdir(r0)
mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0)
r1 = inotify_init1(0x0)
fcntl$setown(r1, 0x8, 0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x1, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10)
fcntl$getownex(r1, 0x10, &(0x7f0000000140)={0x0, <r7=>0x0})
r8 = syz_open_procfs(r7, &(0x7f0000000600)='fd/4\x00')
write$selinux_attr(r8, &(0x7f0000000180)='system_u:object_r:init_exec_t:s0\x00', 0x21)
ioctl$FS_IOC_SETFLAGS(r8, 0x40086602, &(0x7f0000000380))
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)

542.98753ms ago: executing program 2 (id=894):
r0 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000800)={'bridge0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c0000005e000100"/20, @ANYRES32=r2, @ANYBLOB="36b7c4"], 0x1c}}, 0x0)

459.896228ms ago: executing program 2 (id=895):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000800000000"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000d8d60b007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[], 0x48)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = add_key$keyring(&(0x7f0000000080), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff)
request_key(&(0x7f0000000100)='asymmetric\x00', &(0x7f0000000140)={'syz', 0x1}, &(0x7f0000000180)='keyring\x00', r5)
keyctl$restrict_keyring(0xa, r5, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000000)='id:cb2e')
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f00000035c0)={'veth0_vlan\x00', &(0x7f0000000080)=@ethtool_sfeatures={0x3b, 0x2, [{0x3, 0x120000}, {0xf8ed, 0x3}]}})
r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r7, 0x5423, 0x0)
ioctl$TCFLSH(r7, 0x400455c8, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r8 = socket$netlink(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x3, 0x0)
getsockname$packet(r9, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
sendmsg$nl_route(r8, 0x0, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)

0s ago: executing program 0 (id=896):
socket$nl_xfrm(0x10, 0x3, 0x6)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000300)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"})
process_madvise(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
readv(r1, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0x940}], 0x1)

kernel console output (not intermixed with test programs):

 0000000000000000 R14: 00007f722d17af80 R15: 00007ffd9d812608
[  131.384663][ T2503]  </TASK>
[  131.391801][   T30] audit: type=1400 audit(1728275931.939:869): avc:  denied  { write } for  pid=2506 comm="syz.4.528" path="socket:[29311]" dev="sockfs" ino=29311 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1
[  131.426033][   T30] audit: type=1400 audit(1728275931.939:870): avc:  denied  { nlmsg_read } for  pid=2506 comm="syz.4.528" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1
[  131.452015][ T2505] EXT4-fs (loop3): 1 truncate cleaned up
[  131.459037][ T2505] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  131.482839][ T2518] loop1: detected capacity change from 0 to 512
[  131.660556][ T2523] EXT4-fs error (device loop3): ext4_add_entry:2484: inode #2: comm syz.3.527: Directory hole found for htree leaf block 0
[  131.689447][ T2518] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled
[  131.746980][   T60] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  131.778627][ T2518] [EXT4 FS bs=4096, gc=1, bpg=71, ipg=32, mo=a842c09c, mo2=0000]
[  131.786233][ T2518] System zones: 0-2, 18-18, 34-34
[  131.792209][ T2518] EXT4-fs (loop1): 1 orphan inode deleted
[  131.797785][ T2518] EXT4-fs (loop1): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,stripe=0x0000000000000000,nolazytime,noquota,jqfmt=vfsold,minixdf,nodiscard,grpid,debug,,errors=continue. Quota mode: writeback.
[  131.819490][ T2518] ext4 filesystem being mounted at /27/file1 supports timestamps until 2038 (0x7fffffff)
[  132.176964][   T60] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  132.198299][   T60] usb 1-1: config 1 interface 0 altsetting 253 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  132.214391][ T2530] loop3: detected capacity change from 0 to 512
[  132.225686][   T60] usb 1-1: config 1 interface 0 has no altsetting 0
[  132.231361][ T2532] loop4: detected capacity change from 0 to 512
[  132.263968][ T2532] EXT4-fs (loop4): orphan cleanup on readonly fs
[  132.270493][ T2532] EXT4-fs error (device loop4): ext4_ext_check_inode:501: inode #4: comm syz.4.534: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 2048(2048)
[  132.271874][ T2530] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  132.289206][ T2532] EXT4-fs error (device loop4): ext4_quota_enable:6381: comm syz.4.534: Bad quota inode: 4, type: 1
[  132.299631][ T2530] ext4 filesystem being mounted at /6/file0 supports timestamps until 2038 (0x7fffffff)
[  132.312502][   T60] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  132.370285][ T2532] EXT4-fs warning (device loop4): ext4_enable_quotas:6422: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  132.385319][   T60] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  132.394193][   T60] usb 1-1: SerialNumber: syz
[  132.399342][ T2537] loop2: detected capacity change from 0 to 1024
[  132.436549][ T2532] EXT4-fs (loop4): Cannot turn on quotas: error -117
[  132.443207][ T2532] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  132.443877][   T60] cdc_ether 1-1:1.0: skipping garbage
[  132.460297][   T60] usb 1-1: bad CDC descriptors
[  132.467864][ T2537] EXT4-fs (loop2): Ignoring removed orlov option
[  132.474037][ T2537] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option
[  132.705563][ T2537] EXT4-fs (loop2): mounted filesystem without journal. Opts: nombcache,noquota,dioread_lock,orlov,discard,nomblk_io_submit,noload,usrquota,noauto_da_alloc,,errors=continue. Quota mode: writeback.
[  132.782231][ T2330] EXT4-fs error (device loop4): ext4_readdir:260: inode #11: block 4: comm syz-executor: path /9/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=7947, rec_len=12, size=4096 fake=1
[  132.837720][ T2330] EXT4-fs error (device loop4): ext4_ext_check_inode:501: inode #13: comm syz-executor: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0)
[  132.856044][ T2330] EXT4-fs error (device loop4): ext4_ext_check_inode:501: inode #13: comm syz-executor: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0)
[  133.149951][ T2554] loop0: detected capacity change from 0 to 1024
[  133.159986][ T2553] loop3: detected capacity change from 0 to 512
[  133.215155][ T2554] EXT4-fs (loop0): mounted filesystem without journal. Opts: noinit_itable,debug_want_extra_isize=0x0000000000000084,stripe=0x0000000000000007,commit=0x0000000000000005,nouid32,barrier=0x0000000000000005,resuid=0x0000000000000000,data_err=abort,,errors=continue. Quota mode: writeback.
[  133.277252][ T2553] EXT4-fs (loop3): orphan cleanup on readonly fs
[  133.292968][ T2553] EXT4-fs error (device loop3): ext4_ext_check_inode:501: inode #4: comm syz.3.538: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 2048(2048)
[  133.353209][ T2560] loop2: detected capacity change from 0 to 512
[  133.388154][ T2553] EXT4-fs error (device loop3): ext4_quota_enable:6381: comm syz.3.538: Bad quota inode: 4, type: 1
[  133.411354][ T2553] EXT4-fs warning (device loop3): ext4_enable_quotas:6422: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  133.428860][ T2553] EXT4-fs (loop3): Cannot turn on quotas: error -117
[  133.437304][ T2553] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  133.459296][ T2561] bridge0: port 1(bridge_slave_0) entered blocking state
[  133.472464][ T2561] bridge0: port 1(bridge_slave_0) entered disabled state
[  133.473567][ T2560] EXT4-fs warning (device loop2): ext4_enable_quotas:6422: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[  133.495414][ T2560] EXT4-fs (loop2): mount failed
[  133.500613][ T2561] device bridge_slave_0 entered promiscuous mode
[  133.509849][ T2561] bridge0: port 2(bridge_slave_1) entered blocking state
[  133.517056][ T2561] bridge0: port 2(bridge_slave_1) entered disabled state
[  133.524545][ T2561] device bridge_slave_1 entered promiscuous mode
[  133.526745][ T2568] loop1: detected capacity change from 0 to 512
[  133.576010][ T2561] bridge0: port 2(bridge_slave_1) entered blocking state
[  133.582942][ T2561] bridge0: port 2(bridge_slave_1) entered forwarding state
[  133.590000][ T2561] bridge0: port 1(bridge_slave_0) entered blocking state
[  133.596749][ T2561] bridge0: port 1(bridge_slave_0) entered forwarding state
[  133.598543][ T2568] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  133.614913][ T2568] ext4 filesystem being mounted at /29/file0 supports timestamps until 2038 (0x7fffffff)
[  133.636536][ T2232] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  133.644864][ T2232] bridge0: port 1(bridge_slave_0) entered disabled state
[  133.652225][ T2232] bridge0: port 2(bridge_slave_1) entered disabled state
[  133.670865][ T2232] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  133.687996][ T2232] bridge0: port 1(bridge_slave_0) entered blocking state
[  133.694892][ T2232] bridge0: port 1(bridge_slave_0) entered forwarding state
[  133.702426][ T2232] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  133.710647][ T2232] bridge0: port 2(bridge_slave_1) entered blocking state
[  133.717523][ T2232] bridge0: port 2(bridge_slave_1) entered forwarding state
[  134.028791][ T2575] tipc: Started in network mode
[  134.033529][ T2575] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711
[  134.042332][ T2575] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb
[  134.050606][ T2575] tipc: Enabled bearer <udp:syz1>, priority 10
[  134.057325][ T2232] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  134.065221][ T2232] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  134.081016][ T2232] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  134.091982][ T2232] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  134.100830][ T2232] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  134.111464][ T2232] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  134.131740][ T2561] device veth0_vlan entered promiscuous mode
[  134.241420][   T10] device bridge_slave_1 left promiscuous mode
[  134.324233][   T10] bridge0: port 2(bridge_slave_1) entered disabled state
[  134.348883][   T10] device bridge_slave_0 left promiscuous mode
[  134.354917][   T10] bridge0: port 1(bridge_slave_0) entered disabled state
[  134.377839][   T10] device veth1_macvtap left promiscuous mode
[  134.383741][   T10] device veth0_vlan left promiscuous mode
[  134.460567][ T2235] usb 1-1: USB disconnect, device number 13
[  134.545896][  T503] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  134.559001][  T503] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  134.692920][ T2561] device veth1_macvtap entered promiscuous mode
[  134.711887][  T503] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  134.720692][  T503] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  134.730000][  T503] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  135.233706][  T503] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  135.243530][  T503] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  135.319823][  T476] tipc: Node number set to 1
[  135.330466][ T2593] loop2: detected capacity change from 0 to 512
[  135.342771][ T2596] loop4: detected capacity change from 0 to 512
[  135.368442][ T2593] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  135.379481][ T2593] ext4 filesystem being mounted at /6/file0 supports timestamps until 2038 (0x7fffffff)
[  135.399448][   T20] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  135.408799][ T2596] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  135.420069][ T2596] ext4 filesystem being mounted at /0/file0 supports timestamps until 2038 (0x7fffffff)
[  135.462735][ T2235] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  135.547432][ T2603] netlink: 8 bytes leftover after parsing attributes in process `syz.3.549'.
[  135.679623][ T2603] loop3: detected capacity change from 0 to 512
[  135.887296][ T2603] EXT4-fs (loop3): Mount option "norecovery" incompatible with ext2
[  136.038721][   T30] audit: type=1400 audit(1728275936.579:871): avc:  denied  { create } for  pid=2602 comm="syz.3.549" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[  136.086860][ T2611] loop3: detected capacity change from 0 to 1024
[  136.116889][ T2235] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  136.127687][ T2235] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  136.137337][ T2235] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00
[  136.146125][ T2235] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  136.154497][ T2611] EXT4-fs (loop3): Ignoring removed orlov option
[  136.159244][ T2235] usb 1-1: config 0 descriptor??
[  136.165949][   T20] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  136.200989][   T20] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  136.211045][   T20] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00
[  136.212327][ T2611] EXT4-fs (loop3): can't mount with commit=3958, fs mounted w/o journal
[  136.220178][   T20] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  136.237512][   T20] usb 2-1: config 0 descriptor??
[  136.472124][ T2614] loop2: detected capacity change from 0 to 40427
[  136.643641][ T2614] F2FS-fs (loop2): Invalid Fs Meta Ino: node(1) meta(2) root(0)
[  136.670575][ T2614] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  136.686469][ T2614] F2FS-fs (loop2): invalid crc value
[  136.694741][ T2614] F2FS-fs (loop2): Found nat_bits in checkpoint
[  136.716855][ T2614] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  136.723767][ T2614] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  136.733227][ T2622] loop0: detected capacity change from 0 to 16
[  136.817108][ T2622] erofs: (device loop0): erofs_fc_fill_super: rootino(nid 36) is not a directory(i_mode 16700)
[  136.828796][ T2629] netlink: 4 bytes leftover after parsing attributes in process `syz.2.551'.
[  136.882496][ T2630] loop1: detected capacity change from 0 to 16
[  136.891516][ T2630] erofs: (device loop1): erofs_fc_fill_super: rootino(nid 36) is not a directory(i_mode 16700)
[  136.903516][   T30] audit: type=1326 audit(1728275937.439:872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2588 comm="syz.0.546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f722cfc2ff9 code=0x7ffc0000
[  136.926862][   T30] audit: type=1326 audit(1728275937.439:873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2588 comm="syz.0.546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f722cfc2ff9 code=0x7ffc0000
[  136.950219][   T30] audit: type=1326 audit(1728275937.439:874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2588 comm="syz.0.546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f722cfc2ff9 code=0x7ffc0000
[  136.973749][   T30] audit: type=1326 audit(1728275937.439:875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2588 comm="syz.0.546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f722cfc2ff9 code=0x7ffc0000
[  136.997410][   T30] audit: type=1326 audit(1728275937.439:876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2588 comm="syz.0.546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f722cfc2ff9 code=0x7ffc0000
[  137.007489][ T2622] bridge0: port 1(bridge_slave_0) entered blocking state
[  137.021571][   T30] audit: type=1326 audit(1728275937.439:877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2588 comm="syz.0.546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f722cfc2ff9 code=0x7ffc0000
[  137.027271][ T2622] bridge0: port 1(bridge_slave_0) entered forwarding state
[  137.038557][ T2622] xt_hashlimit: size too large, truncated to 1048576
[  137.051252][   T30] audit: type=1326 audit(1728275937.439:878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2588 comm="syz.0.546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f722cfc2ff9 code=0x7ffc0000
[  137.092855][   T30] audit: type=1326 audit(1728275937.449:879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2588 comm="syz.0.546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f722cfc2ff9 code=0x7ffc0000
[  137.117273][   T30] audit: type=1326 audit(1728275937.539:880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2588 comm="syz.0.546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f722cfc2ff9 code=0x7ffc0000
[  137.141199][ T2630] bridge0: port 1(bridge_slave_0) entered blocking state
[  137.148070][ T2630] bridge0: port 1(bridge_slave_0) entered forwarding state
[  137.195727][ T2623] xt_hashlimit: size too large, truncated to 1048576
[  137.206406][   T30] audit: type=1326 audit(1728275937.539:881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2588 comm="syz.0.546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f722cfc2ff9 code=0x7ffc0000
[  137.345569][ T2638] netlink: 'syz.4.556': attribute type 12 has an invalid length.
[  137.361011][ T2640] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb
[  137.369864][ T2640] tipc: Enabled bearer <udp:s>, priority 10
[  138.287461][ T2235] usbhid 1-1:0.0: can't add hid device: -71
[  138.357491][ T2235] usbhid: probe of 1-1:0.0 failed with error -71
[  138.379755][ T2651] loop0: detected capacity change from 0 to 512
[  138.490310][ T2235] usb 1-1: USB disconnect, device number 14
[  138.544398][ T2651] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  138.555561][ T2651] ext4 filesystem being mounted at /12/file0 supports timestamps until 2038 (0x7fffffff)
[  138.842349][ T2670] netlink: 8 bytes leftover after parsing attributes in process `syz.2.563'.
[  138.851162][ T2670] netlink: 20 bytes leftover after parsing attributes in process `syz.2.563'.
[  139.502160][   T20] usbhid 2-1:0.0: can't add hid device: -71
[  139.520268][ T2677] bridge0: port 2(bridge_slave_1) entered disabled state
[  139.536603][ T2677] bridge0: port 2(bridge_slave_1) entered blocking state
[  139.543518][ T2677] bridge0: port 2(bridge_slave_1) entered forwarding state
[  139.552808][   T20] usbhid: probe of 2-1:0.0 failed with error -71
[  139.560724][   T20] usb 2-1: USB disconnect, device number 13
[  139.927904][  T476] usb 3-1: new high-speed USB device number 18 using dummy_hcd
[  140.015125][ T2681] loop0: detected capacity change from 0 to 40427
[  140.087158][ T2681] F2FS-fs (loop0): Invalid Fs Meta Ino: node(1) meta(2) root(0)
[  140.094684][ T2681] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  140.103602][ T2681] F2FS-fs (loop0): invalid crc value
[  140.110194][ T2681] F2FS-fs (loop0): Found nat_bits in checkpoint
[  140.132933][ T2681] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  140.140494][ T2681] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  140.206824][  T476] usb 3-1: device descriptor read/64, error -71
[  140.237981][ T2689] netlink: 4 bytes leftover after parsing attributes in process `syz.0.566'.
[  140.266288][ T2691] loop4: detected capacity change from 0 to 512
[  140.289726][ T2691] EXT4-fs (loop4): orphan cleanup on readonly fs
[  140.296164][ T2691] EXT4-fs error (device loop4): ext4_ext_check_inode:501: inode #4: comm syz.4.568: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 2048(2048)
[  140.315006][ T2691] EXT4-fs error (device loop4): ext4_quota_enable:6381: comm syz.4.568: Bad quota inode: 4, type: 1
[  140.326050][ T2691] EXT4-fs warning (device loop4): ext4_enable_quotas:6422: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  140.340785][ T2691] EXT4-fs (loop4): Cannot turn on quotas: error -117
[  140.347510][ T2691] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  140.642464][ T2704] device gretap1 entered promiscuous mode
[  140.856823][  T476] usb 3-1: device descriptor read/64, error -71
[  140.936800][  T304] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  141.086567][ T2716] serio: Serial port ptm0
[  141.207753][ T2719] loop0: detected capacity change from 0 to 512
[  141.254635][ T2721] loop3: detected capacity change from 0 to 512
[  141.266984][  T476] usb 3-1: new high-speed USB device number 19 using dummy_hcd
[  141.278686][ T2719] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  141.289619][ T2719] ext4 filesystem being mounted at /18/file0 supports timestamps until 2038 (0x7fffffff)
[  141.316980][  T304] usb 5-1: Using ep0 maxpacket: 16
[  141.343722][ T2721] EXT4-fs error (device loop3): ext4_orphan_get:1397: inode #15: comm syz.3.577: iget: bad extended attribute block 1
[  141.356316][ T2721] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.577: couldn't read orphan inode 15 (err -117)
[  141.368847][ T2721] EXT4-fs (loop3): mounted filesystem without journal. Opts: bsddf,resgid=0x0000000000000000,auto_da_alloc=0x000000000000007e,noload,inode_readahead_blks=0x0000000000000000,nombcache,,errors=continue. Quota mode: none.
[  141.446904][  T304] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  141.458216][  T304] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  141.725653][  T304] usb 5-1: New USB device found, idVendor=1294, idProduct=1320, bcdDevice= 0.00
[  141.734606][  T304] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  141.744479][ T2732] loop1: detected capacity change from 0 to 512
[  141.751978][  T304] usb 5-1: config 0 descriptor??
[  141.830347][ T2732] EXT4-fs (loop1): orphan cleanup on readonly fs
[  141.836801][ T2732] EXT4-fs error (device loop1): ext4_ext_check_inode:501: inode #4: comm syz.1.579: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 2048(2048)
[  141.855160][ T2732] EXT4-fs error (device loop1): ext4_quota_enable:6381: comm syz.1.579: Bad quota inode: 4, type: 1
[  141.867331][ T2732] EXT4-fs warning (device loop1): ext4_enable_quotas:6422: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  141.894116][ T2737] netlink: 'syz.2.580': attribute type 12 has an invalid length.
[  141.954407][ T2732] EXT4-fs (loop1): Cannot turn on quotas: error -117
[  141.961291][ T2732] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  142.267833][ T2744] loop0: detected capacity change from 0 to 40427
[  142.324833][ T2747] loop3: detected capacity change from 0 to 1024
[  142.368001][ T2744] F2FS-fs (loop0): Invalid Fs Meta Ino: node(1) meta(2) root(0)
[  142.375605][ T2744] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  142.384728][ T2744] F2FS-fs (loop0): invalid crc value
[  142.384991][ T2747] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,bsddf,nombcache,norecovery,debug_want_extra_isize=0x0000000000000080,lazytime,nojournal_checksum,noblock_validity,noauto_da_alloc,,errors=continue. Quota mode: writeback.
[  142.390139][  T304] usbhid 5-1:0.0: can't add hid device: -71
[  142.424655][  T304] usbhid: probe of 5-1:0.0 failed with error -71
[  142.435388][  T304] usb 5-1: USB disconnect, device number 10
[  142.460823][ T2744] F2FS-fs (loop0): Found nat_bits in checkpoint
[  142.483275][ T2744] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  142.490262][ T2744] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  142.752496][ T2757] netlink: 4 bytes leftover after parsing attributes in process `syz.0.583'.
[  142.982825][   T30] kauditd_printk_skb: 55 callbacks suppressed
[  142.982840][   T30] audit: type=1326 audit(1728275943.519:937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2758 comm="syz.1.585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3e2d33ff9 code=0x7ffc0000
[  143.012588][   T30] audit: type=1326 audit(1728275943.519:938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2758 comm="syz.1.585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3e2d33ff9 code=0x7ffc0000
[  143.035946][   T30] audit: type=1326 audit(1728275943.519:939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2758 comm="syz.1.585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa3e2d33ff9 code=0x7ffc0000
[  143.064331][   T30] audit: type=1326 audit(1728275943.609:940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2758 comm="syz.1.585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3e2d33ff9 code=0x7ffc0000
[  143.087482][   T30] audit: type=1326 audit(1728275943.609:941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2758 comm="syz.1.585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3e2d33ff9 code=0x7ffc0000
[  143.106696][ T2762] loop4: detected capacity change from 0 to 512
[  143.148399][   T30] audit: type=1326 audit(1728275943.609:942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2758 comm="syz.1.585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fa3e2d33ff9 code=0x7ffc0000
[  143.191769][   T30] audit: type=1326 audit(1728275943.609:943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2758 comm="syz.1.585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3e2d33ff9 code=0x7ffc0000
[  143.216216][   T30] audit: type=1326 audit(1728275943.609:944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2758 comm="syz.1.585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fa3e2d33ff9 code=0x7ffc0000
[  143.244123][ T2762] EXT4-fs (loop4): orphan cleanup on readonly fs
[  143.251031][   T30] audit: type=1326 audit(1728275943.609:945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2758 comm="syz.1.585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3e2d33ff9 code=0x7ffc0000
[  143.265774][ T2762] EXT4-fs error (device loop4): ext4_ext_check_inode:501: inode #4: comm syz.4.587: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 2048(2048)
[  143.274561][   T30] audit: type=1326 audit(1728275943.609:946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2758 comm="syz.1.585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3e2d33ff9 code=0x7ffc0000
[  143.326832][ T2762] EXT4-fs error (device loop4): ext4_quota_enable:6381: comm syz.4.587: Bad quota inode: 4, type: 1
[  143.414731][ T2762] EXT4-fs warning (device loop4): ext4_enable_quotas:6422: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  143.428091][ T2764] loop1: detected capacity change from 0 to 40427
[  143.445324][ T2762] EXT4-fs (loop4): Cannot turn on quotas: error -117
[  143.451970][ T2762] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  143.477522][ T2764] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[  143.492359][ T2764] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  143.529070][ T2764] F2FS-fs (loop1): Found nat_bits in checkpoint
[  143.600406][ T2764] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  143.611456][ T2764] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  143.707409][ T2769] loop3: detected capacity change from 0 to 40427
[  143.769288][ T2769] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[  143.777106][ T2769] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  143.795609][ T2769] F2FS-fs (loop3): Found nat_bits in checkpoint
[  143.888570][ T2769] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  143.895642][ T2769] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  144.014980][ T2561] EXT4-fs error (device loop4): ext4_readdir:260: inode #11: block 4: comm syz-executor: path /5/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=7947, rec_len=12, size=4096 fake=1
[  144.049264][ T2561] EXT4-fs error (device loop4): ext4_ext_check_inode:501: inode #13: comm syz-executor: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0)
[  144.089193][ T2561] EXT4-fs error (device loop4): ext4_ext_check_inode:501: inode #13: comm syz-executor: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0)
[  144.245712][ T2785] loop0: detected capacity change from 0 to 512
[  144.308430][ T2789] loop1: detected capacity change from 0 to 512
[  144.323898][ T2785] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  144.338050][ T2785] ext4 filesystem being mounted at /22/file0 supports timestamps until 2038 (0x7fffffff)
[  144.421598][ T2789] EXT4-fs (loop1): orphan cleanup on readonly fs
[  144.429168][ T2789] EXT4-fs error (device loop1): ext4_ext_check_inode:501: inode #4: comm syz.1.592: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 2048(2048)
[  144.447869][ T2789] EXT4-fs error (device loop1): ext4_quota_enable:6381: comm syz.1.592: Bad quota inode: 4, type: 1
[  144.459361][ T2789] EXT4-fs warning (device loop1): ext4_enable_quotas:6422: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  144.477059][ T2789] EXT4-fs (loop1): Cannot turn on quotas: error -117
[  144.483652][ T2789] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  144.718363][ T2793] bridge0: port 1(bridge_slave_0) entered blocking state
[  144.725280][ T2793] bridge0: port 1(bridge_slave_0) entered disabled state
[  144.732819][ T2793] device bridge_slave_0 entered promiscuous mode
[  144.779850][ T2793] bridge0: port 2(bridge_slave_1) entered blocking state
[  144.794949][ T2793] bridge0: port 2(bridge_slave_1) entered disabled state
[  144.811504][ T2793] device bridge_slave_1 entered promiscuous mode
[  145.068004][  T312] device bridge_slave_1 left promiscuous mode
[  145.123410][  T312] bridge0: port 2(bridge_slave_1) entered disabled state
[  145.147167][  T312] device bridge_slave_0 left promiscuous mode
[  145.153172][  T312] bridge0: port 1(bridge_slave_0) entered disabled state
[  145.178667][ T2820] loop2: detected capacity change from 0 to 512
[  145.186803][  T312] device veth1_macvtap left promiscuous mode
[  145.192624][  T312] device veth0_vlan left promiscuous mode
[  145.276172][ T2820] EXT4-fs (loop2): orphan cleanup on readonly fs
[  145.283433][ T2820] EXT4-fs error (device loop2): ext4_ext_check_inode:501: inode #4: comm syz.2.601: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 2048(2048)
[  145.317061][ T2820] EXT4-fs error (device loop2): ext4_quota_enable:6381: comm syz.2.601: Bad quota inode: 4, type: 1
[  145.339626][ T2820] EXT4-fs warning (device loop2): ext4_enable_quotas:6422: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  145.354526][ T2820] EXT4-fs (loop2): Cannot turn on quotas: error -117
[  145.361287][ T2820] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  145.399052][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  145.406423][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  145.450340][ T2793] device veth0_vlan entered promiscuous mode
[  145.466174][ T2818] loop0: detected capacity change from 0 to 40427
[  145.478744][ T2793] device veth1_macvtap entered promiscuous mode
[  145.530755][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  145.536606][ T2830] loop4: detected capacity change from 0 to 512
[  145.542831][ T2418] EXT4-fs error (device loop2): ext4_readdir:260: inode #11: block 4: comm syz-executor: path /15/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=7947, rec_len=12, size=4096 fake=1
[  145.545776][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  145.567922][ T2818] F2FS-fs (loop0): Invalid Fs Meta Ino: node(1) meta(2) root(0)
[  145.573345][   T10] bridge0: port 1(bridge_slave_0) entered blocking state
[  145.587274][   T10] bridge0: port 1(bridge_slave_0) entered forwarding state
[  145.587892][ T2818] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  145.594608][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  145.611175][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  145.611277][ T2418] EXT4-fs error (device loop2): ext4_ext_check_inode:501: inode #13: comm syz-executor: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0)
[  145.637932][ T2418] EXT4-fs error (device loop2): ext4_ext_check_inode:501: inode #13: comm syz-executor: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0)
[  145.641738][   T10] bridge0: port 2(bridge_slave_1) entered blocking state
[  145.662651][   T10] bridge0: port 2(bridge_slave_1) entered forwarding state
[  145.663803][ T2818] F2FS-fs (loop0): invalid crc value
[  145.675238][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  145.683816][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  145.692634][ T2830] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  145.703508][ T2830] ext4 filesystem being mounted at /0/bus supports timestamps until 2038 (0x7fffffff)
[  145.706610][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  145.727448][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  145.735295][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  145.743478][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  145.751980][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  145.759864][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  145.767791][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  145.792928][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  145.801789][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  145.809824][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  145.818701][ T2818] F2FS-fs (loop0): Found nat_bits in checkpoint
[  145.827420][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  145.838824][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  145.847140][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  145.858446][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  145.866048][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  145.873381][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  145.882214][ T2818] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  146.123105][ T2818] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  146.246810][ T2845] loop3: detected capacity change from 0 to 512
[  146.379148][ T2848] netlink: 4 bytes leftover after parsing attributes in process `syz.0.599'.
[  146.421199][ T2845] EXT4-fs (loop3): orphan cleanup on readonly fs
[  146.427934][ T2845] EXT4-fs error (device loop3): ext4_ext_check_inode:501: inode #4: comm syz.3.605: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 2048(2048)
[  146.447157][ T2845] EXT4-fs error (device loop3): ext4_quota_enable:6381: comm syz.3.605: Bad quota inode: 4, type: 1
[  146.448126][  T312] tipc: Disabling bearer <udp:syz1>
[  146.459268][ T2845] EXT4-fs warning (device loop3): ext4_enable_quotas:6422: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  146.463134][  T312] tipc: Disabling bearer <udp:s>
[  146.477672][ T2845] EXT4-fs (loop3): Cannot turn on quotas: error -117
[  146.485831][  T312] tipc: Left network mode
[  146.493300][ T2845] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  146.505126][ T2851] loop4: detected capacity change from 0 to 512
[  146.564491][ T2851] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  146.580402][ T2847] bridge0: port 1(bridge_slave_0) entered blocking state
[  146.587514][ T2847] bridge0: port 1(bridge_slave_0) entered disabled state
[  146.595171][ T2851] ext4 filesystem being mounted at /1/file0 supports timestamps until 2038 (0x7fffffff)
[  146.606215][ T2847] device bridge_slave_0 entered promiscuous mode
[  146.621029][ T2847] bridge0: port 2(bridge_slave_1) entered blocking state
[  146.675773][ T2847] bridge0: port 2(bridge_slave_1) entered disabled state
[  146.691459][ T2861] loop0: detected capacity change from 0 to 512
[  146.698300][ T2847] device bridge_slave_1 entered promiscuous mode
[  146.767105][ T2847] bridge0: port 2(bridge_slave_1) entered blocking state
[  146.774025][ T2847] bridge0: port 2(bridge_slave_1) entered forwarding state
[  146.778657][ T2861] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  146.781102][ T2847] bridge0: port 1(bridge_slave_0) entered blocking state
[  146.798645][ T2847] bridge0: port 1(bridge_slave_0) entered forwarding state
[  146.808321][ T2861] ext4 filesystem being mounted at /24/file0 supports timestamps until 2038 (0x7fffffff)
[  147.136505][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  147.146341][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  147.157613][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  147.177808][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  147.189817][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  147.205003][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  147.219455][ T2847] device veth0_vlan entered promiscuous mode
[  147.229449][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  147.242119][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  147.253462][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  147.539285][ T2871] loop1: detected capacity change from 0 to 256
[  147.561213][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  147.570202][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  147.588854][ T2847] device veth1_macvtap entered promiscuous mode
[  147.621493][  T503] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  147.634390][ T2871] FAT-fs (loop1): bogus sectors per cluster 0
[  147.636362][  T503] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  147.650367][  T503] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  147.660612][  T503] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  147.668987][  T503] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  147.676960][ T2871] FAT-fs (loop1): Can't find a valid FAT filesystem
[  147.684410][ T2883] loop2: detected capacity change from 0 to 512
[  147.772134][ T2883] EXT4-fs error (device loop2): ext4_do_update_inode:5202: inode #3: comm syz.2.607: corrupted inode contents
[  147.787403][ T2883] EXT4-fs error (device loop2): ext4_dirty_inode:6035: inode #3: comm syz.2.607: mark_inode_dirty error
[  147.802930][ T2883] EXT4-fs error (device loop2): ext4_do_update_inode:5202: inode #3: comm syz.2.607: corrupted inode contents
[  147.815541][ T2883] EXT4-fs error (device loop2): __ext4_ext_dirty:183: inode #3: comm syz.2.607: mark_inode_dirty error
[  147.838133][  T312] device bridge_slave_1 left promiscuous mode
[  147.844090][  T312] bridge0: port 2(bridge_slave_1) entered disabled state
[  147.867089][  T312] device bridge_slave_0 left promiscuous mode
[  147.877373][  T312] bridge0: port 1(bridge_slave_0) entered disabled state
[  147.885817][  T312] device veth1_macvtap left promiscuous mode
[  147.892053][  T312] device veth0_vlan left promiscuous mode
[  147.910986][ T2883] EXT4-fs error (device loop2): ext4_acquire_dquot:6187: comm syz.2.607: Failed to acquire dquot type 0
[  147.938696][ T2883] EXT4-fs (loop2): 1 orphan inode deleted
[  147.944251][ T2883] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  147.955823][ T2883] ext4 filesystem being mounted at /0/file1 supports timestamps until 2038 (0x7fffffff)
[  148.070150][ T2909] loop1: detected capacity change from 0 to 256
[  148.256483][ T2911] sch_tbf: burst 53766 is lower than device lo mtu (65550) !
[  148.453330][ T2909] FAT-fs (loop1): bogus sectors per cluster 0
[  148.477466][ T2909] FAT-fs (loop1): Can't find a valid FAT filesystem
[  148.631382][ T2915] loop0: detected capacity change from 0 to 512
[  148.724707][ T2915] EXT4-fs (loop0): orphan cleanup on readonly fs
[  148.736366][ T2915] EXT4-fs error (device loop0): ext4_ext_check_inode:501: inode #4: comm syz.0.620: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 2048(2048)
[  148.814076][ T2913] loop2: detected capacity change from 0 to 40427
[  148.822015][ T2915] EXT4-fs error (device loop0): ext4_quota_enable:6381: comm syz.0.620: Bad quota inode: 4, type: 1
[  148.836851][ T2915] EXT4-fs warning (device loop0): ext4_enable_quotas:6422: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  148.860588][ T2913] F2FS-fs (loop2): Invalid Fs Meta Ino: node(1) meta(2) root(0)
[  148.882591][ T2915] EXT4-fs (loop0): Cannot turn on quotas: error -117
[  148.889387][ T2913] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  148.899246][ T2915] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  148.919696][ T2913] F2FS-fs (loop2): invalid crc value
[  148.921080][ T2922] loop4: detected capacity change from 0 to 512
[  148.940454][ T2913] F2FS-fs (loop2): Found nat_bits in checkpoint
[  148.974023][ T2931] netlink: 8 bytes leftover after parsing attributes in process `syz.1.625'.
[  148.985046][ T2931] loop1: detected capacity change from 0 to 256
[  149.042971][ T2913] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  149.049921][ T2913] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  149.067476][ T2931] exfat: Deprecated parameter 'utf8'
[  149.910613][   T30] kauditd_printk_skb: 6 callbacks suppressed
[  149.910631][   T30] audit: type=1400 audit(1728275950.449:951): avc:  denied  { connect } for  pid=2932 comm="syz.3.626" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  149.938941][ T2931] exfat: Deprecated parameter 'utf8'
[  149.945650][ T2922] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  149.959222][ T2931] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d)
[  149.972300][ T2943] netlink: 4 bytes leftover after parsing attributes in process `syz.2.619'.
[  149.981874][ T2922] ext4 filesystem being mounted at /4/file0 supports timestamps until 2038 (0x7fffffff)
[  150.014807][ T2945] loop0: detected capacity change from 0 to 256
[  150.080476][ T2945] exFAT-fs (loop0): failed to load upcase table (idx : 0x000104d0, chksum : 0x60c5118c, utbl_chksum : 0xe619d30d)
[  150.686668][ T2954] loop1: detected capacity change from 0 to 256
[  150.757068][ T2954] exfat: Unknown parameter 'al|ow_utime'
[  150.781488][ T2954] loop1: detected capacity change from 0 to 512
[  150.794220][ T2954] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  151.238545][    C0] eth0: bad gso: type: 1, size: 1408
[  151.341352][ T2977] loop0: detected capacity change from 0 to 512
[  151.344965][ T2954] EXT4-fs (loop1): 1 truncate cleaned up
[  151.352897][ T2954] EXT4-fs (loop1): mounted filesystem without journal. Opts: lazytime,block_validity,dioread_lock,nombcache,max_dir_size_kb=0x0000000000000009,errors=continue,,errors=continue. Quota mode: none.
[  151.354923][ T2976] loop4: detected capacity change from 0 to 256
[  151.382517][ T2977] EXT4-fs (loop0): orphan cleanup on readonly fs
[  151.389192][ T2977] EXT4-fs error (device loop0): ext4_ext_check_inode:501: inode #4: comm syz.0.634: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 2048(2048)
[  151.407849][ T2977] EXT4-fs error (device loop0): ext4_quota_enable:6381: comm syz.0.634: Bad quota inode: 4, type: 1
[  151.420124][ T2977] EXT4-fs warning (device loop0): ext4_enable_quotas:6422: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  151.634692][ T2977] EXT4-fs (loop0): Cannot turn on quotas: error -117
[  151.641283][ T2977] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  151.724050][ T2976] FAT-fs (loop4): bogus sectors per cluster 0
[  151.733644][ T2976] FAT-fs (loop4): Can't find a valid FAT filesystem
[  152.076855][ T2235] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[  152.351361][ T2993] loop2: detected capacity change from 0 to 40427
[  152.461398][ T2993] F2FS-fs (loop2): Found nat_bits in checkpoint
[  152.516058][ T2993] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  152.540024][ T3006] loop4: detected capacity change from 0 to 40427
[  152.570061][ T3006] F2FS-fs (loop4): Invalid Fs Meta Ino: node(1) meta(2) root(0)
[  152.586888][ T3006] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  152.595856][ T3006] F2FS-fs (loop4): invalid crc value
[  152.602338][ T3006] F2FS-fs (loop4): Found nat_bits in checkpoint
[  152.616961][ T2235] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  152.627692][ T2235] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  152.630838][ T3006] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  152.637234][ T2235] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00
[  152.647595][ T3006] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  152.663109][ T2235] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  152.921039][ T2847] attempt to access beyond end of device
[  152.921039][ T2847] loop2: rw=524288, want=45072, limit=40427
[  152.934680][ T2235] usb 1-1: config 0 descriptor??
[  152.949997][ T3018] loop3: detected capacity change from 0 to 512
[  152.956163][ T2847] attempt to access beyond end of device
[  152.956163][ T2847] loop2: rw=0, want=45072, limit=40427
[  153.006155][ T2847] attempt to access beyond end of device
[  153.006155][ T2847] loop2: rw=2049, want=45104, limit=40427
[  153.038405][ T3018] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  153.049265][ T3018] ext4 filesystem being mounted at /34/file0 supports timestamps until 2038 (0x7fffffff)
[  153.059815][ T3023] netlink: 4 bytes leftover after parsing attributes in process `syz.4.640'.
[  153.565896][ T3027] bridge0: port 1(bridge_slave_0) entered blocking state
[  153.572955][ T3027] bridge0: port 1(bridge_slave_0) entered disabled state
[  153.582726][ T3027] device bridge_slave_0 entered promiscuous mode
[  153.596549][ T3027] bridge0: port 2(bridge_slave_1) entered blocking state
[  153.603522][  T351] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  153.615576][ T3027] bridge0: port 2(bridge_slave_1) entered disabled state
[  153.617382][ T3033] loop4: detected capacity change from 0 to 512
[  153.623314][ T3027] device bridge_slave_1 entered promiscuous mode
[  153.675635][ T3027] bridge0: port 2(bridge_slave_1) entered blocking state
[  153.682488][ T3027] bridge0: port 2(bridge_slave_1) entered forwarding state
[  153.689590][ T3027] bridge0: port 1(bridge_slave_0) entered blocking state
[  153.696361][ T3027] bridge0: port 1(bridge_slave_0) entered forwarding state
[  153.705464][ T3033] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  153.716994][ T3033] ext4 filesystem being mounted at /8/file0 supports timestamps until 2038 (0x7fffffff)
[  153.733519][ T1984] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  153.741740][ T1984] bridge0: port 1(bridge_slave_0) entered disabled state
[  153.753440][ T1984] bridge0: port 2(bridge_slave_1) entered disabled state
[  153.772809][ T1984] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  153.788645][ T3031] loop0: detected capacity change from 0 to 16
[  153.794877][ T1984] bridge0: port 1(bridge_slave_0) entered blocking state
[  153.801764][ T1984] bridge0: port 1(bridge_slave_0) entered forwarding state
[  153.810664][ T1984] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  153.818971][ T1984] bridge0: port 2(bridge_slave_1) entered blocking state
[  153.825809][ T1984] bridge0: port 2(bridge_slave_1) entered forwarding state
[  153.835752][  T503] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  153.848389][ T3031] erofs: (device loop0): erofs_fc_fill_super: rootino(nid 36) is not a directory(i_mode 16700)
[  153.860199][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  153.932111][  T351] usb 2-1: Using ep0 maxpacket: 16
[  154.112235][   T30] audit: type=1326 audit(1728275954.649:952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2995 comm="syz.0.635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f722cfc2ff9 code=0x7ffc0000
[  154.145900][ T3031] bridge0: port 1(bridge_slave_0) entered blocking state
[  154.152782][ T3031] bridge0: port 1(bridge_slave_0) entered forwarding state
[  154.160133][  T351] usb 2-1: config 0 has an invalid interface number: 140 but max is 2
[  154.168537][  T351] usb 2-1: config 0 contains an unexpected descriptor of type 0x2, skipping
[  154.177560][   T30] audit: type=1326 audit(1728275954.679:953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2995 comm="syz.0.635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f722cfc2ff9 code=0x7ffc0000
[  154.201505][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  154.209860][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  154.218754][  T351] usb 2-1: config 0 has an invalid interface number: 177 but max is 2
[  154.226730][  T351] usb 2-1: config 0 has an invalid interface number: 242 but max is 2
[  154.235598][ T3031] xt_hashlimit: size too large, truncated to 1048576
[  154.244732][   T30] audit: type=1326 audit(1728275954.679:954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2995 comm="syz.0.635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f722cfc2ff9 code=0x7ffc0000
[  154.254984][  T351] usb 2-1: config 0 has no interface number 0
[  154.278705][ T3027] device veth0_vlan entered promiscuous mode
[  154.286968][  T351] usb 2-1: config 0 has no interface number 1
[  154.288710][   T30] audit: type=1326 audit(1728275954.679:955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2995 comm="syz.0.635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f722cfc2ff9 code=0x7ffc0000
[  154.292852][  T351] usb 2-1: config 0 has no interface number 2
[  154.292883][  T351] usb 2-1: config 0 interface 140 altsetting 9 endpoint 0x7 has invalid maxpacket 512, setting to 64
[  154.329857][ T3037] loop3: detected capacity change from 0 to 40427
[  154.339611][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  154.340279][   T30] audit: type=1326 audit(1728275954.679:956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2995 comm="syz.0.635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f722cfc2ff9 code=0x7ffc0000
[  154.357127][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  154.370457][   T30] audit: type=1326 audit(1728275954.679:957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2995 comm="syz.0.635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f722cfc2ff9 code=0x7ffc0000
[  154.387218][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  154.402657][ T3037] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[  154.416847][  T351] usb 2-1: config 0 interface 140 altsetting 9 bulk endpoint 0x3 has invalid maxpacket 32
[  154.417309][ T3037] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  154.435362][   T30] audit: type=1326 audit(1728275954.679:958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2995 comm="syz.0.635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f722cfc2ff9 code=0x7ffc0000
[  154.435730][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  154.462387][   T30] audit: type=1326 audit(1728275954.679:959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2995 comm="syz.0.635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f722cfc2ff9 code=0x7ffc0000
[  154.466524][  T351] usb 2-1: config 0 interface 140 altsetting 9 bulk endpoint 0x8D has invalid maxpacket 511
[  154.522553][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  154.522867][   T30] audit: type=1326 audit(1728275954.679:960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2995 comm="syz.0.635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f722cfc2ff9 code=0x7ffc0000
[  154.537257][ T3037] F2FS-fs (loop3): Found nat_bits in checkpoint
[  154.559073][  T351] usb 2-1: config 0 interface 140 altsetting 9 endpoint 0x6 has invalid maxpacket 1024, setting to 64
[  154.578083][  T351] usb 2-1: config 0 interface 140 altsetting 9 has an invalid endpoint with address 0x0, skipping
[  154.596792][  T351] usb 2-1: config 0 interface 140 altsetting 9 endpoint 0xA has an invalid bInterval 255, changing to 7
[  154.598570][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  154.614893][  T351] usb 2-1: config 0 interface 140 altsetting 9 has a duplicate endpoint with address 0x1, skipping
[  154.615067][ T3037] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  154.633070][ T3037] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  154.639161][  T351] usb 2-1: config 0 interface 140 altsetting 9 has an invalid endpoint with address 0x0, skipping
[  154.652704][ T3027] device veth1_macvtap entered promiscuous mode
[  154.661068][  T351] usb 2-1: config 0 interface 140 altsetting 9 has a duplicate endpoint with address 0x3, skipping
[  154.677025][ T1984] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  154.684456][ T1984] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  154.684747][  T351] usb 2-1: config 0 interface 140 altsetting 9 has an invalid endpoint with address 0x1A, skipping
[  154.693714][ T1984] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  154.710968][  T351] usb 2-1: config 0 interface 242 altsetting 4 has a duplicate endpoint with address 0x7, skipping
[  154.726909][  T312] device bridge_slave_1 left promiscuous mode
[  154.730279][  T351] usb 2-1: config 0 interface 140 has no altsetting 0
[  154.732837][  T312] bridge0: port 2(bridge_slave_1) entered disabled state
[  154.739721][  T351] usb 2-1: config 0 interface 177 has no altsetting 0
[  154.753086][  T351] usb 2-1: config 0 interface 242 has no altsetting 0
[  154.759955][  T312] device bridge_slave_0 left promiscuous mode
[  154.765971][  T312] bridge0: port 1(bridge_slave_0) entered disabled state
[  154.773723][  T312] device veth1_macvtap left promiscuous mode
[  154.779682][  T312] device veth0_vlan left promiscuous mode
[  154.809723][ T3047] loop4: detected capacity change from 0 to 512
[  154.874148][ T3047] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  154.885203][ T3047] ext4 filesystem being mounted at /9/file0 supports timestamps until 2038 (0x7fffffff)
[  154.922743][ T1984] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  154.931061][ T1984] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  154.941725][  T351] usb 2-1: New USB device found, idVendor=067b, idProduct=aaa8, bcdDevice=c3.0c
[  154.950819][  T351] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  154.958820][  T351] usb 2-1: Product: syz
[  154.962835][  T351] usb 2-1: Manufacturer: syz
[  154.971462][  T351] usb 2-1: SerialNumber: syz
[  154.979829][  T351] usb 2-1: config 0 descriptor??
[  154.996887][ T3020] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  155.003949][ T3020] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  155.204700][ T3061] loop2: detected capacity change from 0 to 256
[  155.290869][ T3061] FAT-fs (loop2): bogus sectors per cluster 0
[  155.296800][ T3061] FAT-fs (loop2): Can't find a valid FAT filesystem
[  155.477232][  T351] pl2303 2-1:0.140: required interrupt-in endpoint missing
[  155.517345][  T351] pl2303 2-1:0.177: required endpoints missing
[  155.557185][  T351] pl2303 2-1:0.242: required endpoints missing
[  155.565629][  T351] usb 2-1: USB disconnect, device number 14
[  155.836967][ T2235] usbhid 1-1:0.0: can't add hid device: -71
[  155.848421][ T2235] usbhid: probe of 1-1:0.0 failed with error -71
[  155.883746][ T3070] device gretap1 entered promiscuous mode
[  155.965420][ T2235] usb 1-1: USB disconnect, device number 15
[  156.204311][ T3078] serio: Serial port ptm0
[  156.385525][ T2234] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  156.568442][ T3077] loop1: detected capacity change from 0 to 40427
[  156.583560][ T3082] loop3: detected capacity change from 0 to 512
[  156.613679][ T3082] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  156.624632][ T3082] ext4 filesystem being mounted at /38/file0 supports timestamps until 2038 (0x7fffffff)
[  156.637781][ T3077] F2FS-fs (loop1): Invalid Fs Meta Ino: node(1) meta(2) root(0)
[  156.646841][ T3077] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  156.664563][ T3077] F2FS-fs (loop1): invalid crc value
[  156.685065][ T3077] F2FS-fs (loop1): Found nat_bits in checkpoint
[  156.732526][ T3077] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  156.739676][ T3077] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  156.861029][ T3096] netlink: 4 bytes leftover after parsing attributes in process `syz.1.655'.
[  157.060133][ T2234] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  157.070984][ T2234] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  157.080805][ T2234] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00
[  157.090113][ T2234] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  157.110290][ T2234] usb 5-1: config 0 descriptor??
[  157.349435][ T3098] loop1: detected capacity change from 0 to 512
[  157.383843][   T30] kauditd_printk_skb: 28 callbacks suppressed
[  157.383858][   T30] audit: type=1326 audit(1728275957.919:989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3099 comm="syz.2.659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1f21b2ff9 code=0x7ffc0000
[  157.413586][   T30] audit: type=1326 audit(1728275957.919:990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3099 comm="syz.2.659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1f21b2ff9 code=0x7ffc0000
[  157.438703][   T30] audit: type=1326 audit(1728275957.929:991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3099 comm="syz.2.659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd1f21b2ff9 code=0x7ffc0000
[  157.461993][   T30] audit: type=1326 audit(1728275957.929:992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3099 comm="syz.2.659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1f21b2ff9 code=0x7ffc0000
[  157.486021][   T30] audit: type=1326 audit(1728275957.929:993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3099 comm="syz.2.659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1f21b2ff9 code=0x7ffc0000
[  157.509239][   T30] audit: type=1326 audit(1728275957.929:994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3099 comm="syz.2.659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd1f21b2ff9 code=0x7ffc0000
[  157.533307][   T30] audit: type=1326 audit(1728275957.929:995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3099 comm="syz.2.659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1f21b2ff9 code=0x7ffc0000
[  157.558170][   T30] audit: type=1326 audit(1728275957.929:996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3099 comm="syz.2.659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1f21b2ff9 code=0x7ffc0000
[  157.606874][   T30] audit: type=1326 audit(1728275957.929:997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3099 comm="syz.2.659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd1f21b2ff9 code=0x7ffc0000
[  157.630114][   T30] audit: type=1326 audit(1728275957.949:998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3099 comm="syz.2.659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1f21b2ff9 code=0x7ffc0000
[  157.657753][ T3098] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  157.668269][ T3066] loop4: detected capacity change from 0 to 16
[  157.668639][ T3098] ext4 filesystem being mounted at /51/file0 supports timestamps until 2038 (0x7fffffff)
[  157.769588][ T3066] erofs: (device loop4): erofs_fc_fill_super: rootino(nid 36) is not a directory(i_mode 16700)
[  158.173893][ T3066] bridge0: port 1(bridge_slave_0) entered blocking state
[  158.180863][ T3066] bridge0: port 1(bridge_slave_0) entered forwarding state
[  158.215292][ T3066] xt_hashlimit: size too large, truncated to 1048576
[  158.483006][ T3127] loop2: detected capacity change from 0 to 128
[  158.568860][ T3127] EXT4-fs (loop2): Test dummy encryption mode enabled
[  158.586714][ T3127] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: none.
[  158.610981][ T3127] ext4 filesystem being mounted at /5/mnt supports timestamps until 2038 (0x7fffffff)
[  158.620646][ T2234] usbhid 5-1:0.0: can't add hid device: -71
[  158.626416][ T2234] usbhid: probe of 5-1:0.0 failed with error -71
[  158.635746][ T2234] usb 5-1: USB disconnect, device number 11
[  158.799201][ T3137] loop3: detected capacity change from 0 to 512
[  159.037113][ T3137] EXT4-fs (loop3): orphan cleanup on readonly fs
[  159.044568][ T3137] EXT4-fs error (device loop3): ext4_ext_check_inode:501: inode #4: comm syz.3.669: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 2048(2048)
[  159.067546][ T3137] EXT4-fs error (device loop3): ext4_quota_enable:6381: comm syz.3.669: Bad quota inode: 4, type: 1
[  159.088117][ T3137] EXT4-fs warning (device loop3): ext4_enable_quotas:6422: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  159.105866][ T3144] loop4: detected capacity change from 0 to 512
[  159.107112][ T3137] EXT4-fs (loop3): Cannot turn on quotas: error -117
[  159.127753][ T3137] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  159.163623][ T3144] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  159.183318][ T3144] ext4 filesystem being mounted at /11/file0 supports timestamps until 2038 (0x7fffffff)
[  159.301621][ T3152] loop0: detected capacity change from 0 to 128
[  160.088520][ T3154] loop3: detected capacity change from 0 to 40427
[  160.091301][ T3162] loop4: detected capacity change from 0 to 512
[  160.128392][ T3162] EXT4-fs (loop4): orphan cleanup on readonly fs
[  160.138011][ T3167] loop2: detected capacity change from 0 to 128
[  160.144154][ T3162] EXT4-fs error (device loop4): ext4_ext_check_inode:501: inode #4: comm syz.4.675: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 2048(2048)
[  160.165563][ T3154] F2FS-fs (loop3): invalid crc value
[  160.170977][ T3162] EXT4-fs error (device loop4): ext4_quota_enable:6381: comm syz.4.675: Bad quota inode: 4, type: 1
[  160.174950][ T3154] F2FS-fs (loop3): Found nat_bits in checkpoint
[  160.182516][ T3162] EXT4-fs warning (device loop4): ext4_enable_quotas:6422: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  160.202296][ T3168] device wireguard0 entered promiscuous mode
[  160.202661][ T3162] EXT4-fs (loop4): Cannot turn on quotas: error -117
[  160.223050][ T3162] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  160.254365][ T3154] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  160.466564][ T3179] syz.2.674[3179] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  160.466656][ T3179] syz.2.674[3179] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  160.580655][ T3175] loop4: detected capacity change from 0 to 40427
[  160.677159][ T3175] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[  160.684847][ T3175] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  160.695486][ T3175] F2FS-fs (loop4): Found nat_bits in checkpoint
[  160.718229][ T3175] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  160.725124][ T3175] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  160.950784][ T3187] loop1: detected capacity change from 0 to 512
[  160.950908][ T3189] loop2: detected capacity change from 0 to 512
[  160.978207][ T3187] EXT4-fs error (device loop1): __ext4_iget:4903: inode #3: block 127754: comm syz.1.679: invalid block
[  160.989478][ T3187] EXT4-fs error (device loop1): ext4_quota_enable:6381: comm syz.1.679: Bad quota inode: 3, type: 0
[  161.000377][ T3187] EXT4-fs warning (device loop1): ext4_enable_quotas:6422: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix.
[  161.015340][ T3187] EXT4-fs (loop1): mount failed
[  161.116491][ T3194] loop0: detected capacity change from 0 to 512
[  161.355367][ T3194] EXT4-fs (loop0): orphan cleanup on readonly fs
[  161.362032][ T3194] EXT4-fs error (device loop0): ext4_ext_check_inode:501: inode #4: comm syz.0.681: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 2048(2048)
[  161.409649][ T3194] EXT4-fs error (device loop0): ext4_quota_enable:6381: comm syz.0.681: Bad quota inode: 4, type: 1
[  161.421853][ T3194] EXT4-fs warning (device loop0): ext4_enable_quotas:6422: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  161.474903][ T3194] EXT4-fs (loop0): Cannot turn on quotas: error -117
[  161.481698][ T3194] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  161.639357][ T3210] loop4: detected capacity change from 0 to 512
[  161.928100][ T3210] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  161.953304][ T3210] ext4 filesystem being mounted at /15/file0 supports timestamps until 2038 (0x7fffffff)
[  162.375691][ T2277] attempt to access beyond end of device
[  162.375691][ T2277] loop3: rw=524288, want=45072, limit=40427
[  162.396916][ T2277] attempt to access beyond end of device
[  162.396916][ T2277] loop3: rw=0, want=45072, limit=40427
[  162.411778][ T3218] loop1: detected capacity change from 0 to 512
[  162.447382][ T2277] attempt to access beyond end of device
[  162.447382][ T2277] loop3: rw=2049, want=45104, limit=40427
[  162.497524][ T3226] loop0: detected capacity change from 0 to 512
[  162.506630][ T3218] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,auto_da_alloc,minixdf,,errors=continue. Quota mode: writeback.
[  162.513371][ T3228] loop2: detected capacity change from 0 to 512
[  162.526575][ T3218] ext4 filesystem being mounted at /56/bus supports timestamps until 2038 (0x7fffffff)
[  162.549523][ T3218] syz.1.686[3218] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  162.549594][ T3218] syz.1.686[3218] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  162.552505][ T3228] EXT4-fs (loop2): 1 orphan inode deleted
[  162.580721][ T3218] overlayfs: './file2' not a directory
[  162.586126][ T3228] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,init_itable,quota,resgid=0x0000000000000000,sysvgroups,bsddf,dioread_lock,. Quota mode: writeback.
[  162.602252][ T3233] loop4: detected capacity change from 0 to 512
[  162.606045][ T3228] ext4 filesystem being mounted at /9/file1 supports timestamps until 2038 (0x7fffffff)
[  162.618539][ T3226] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  162.632564][ T3226] ext4 filesystem being mounted at /40/file0 supports timestamps until 2038 (0x7fffffff)
[  162.700704][ T3233] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  162.712768][ T3233] ext4 filesystem being mounted at /16/file0 supports timestamps until 2038 (0x7fffffff)
[  164.705773][ T3252] loop2: detected capacity change from 0 to 16
[  164.714686][ T3252] erofs: (device loop2): erofs_fc_fill_super: rootino(nid 36) is not a directory(i_mode 16700)
[  164.792038][ T3252] bridge0: port 1(bridge_slave_0) entered blocking state
[  164.792141][   T30] kauditd_printk_skb: 111 callbacks suppressed
[  164.792153][   T30] audit: type=1326 audit(1728275965.319:1110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3251 comm="syz.2.695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1f21b2ff9 code=0x7ffc0000
[  164.798928][ T3252] bridge0: port 1(bridge_slave_0) entered forwarding state
[  164.850983][   T30] audit: type=1326 audit(1728275965.319:1111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3251 comm="syz.2.695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd1f21b2ff9 code=0x7ffc0000
[  164.874951][   T30] audit: type=1326 audit(1728275965.319:1112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3251 comm="syz.2.695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1f21b2ff9 code=0x7ffc0000
[  164.900143][   T30] audit: type=1326 audit(1728275965.319:1113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3251 comm="syz.2.695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd1f21b2ff9 code=0x7ffc0000
[  164.919625][ T3252] xt_hashlimit: size too large, truncated to 1048576
[  164.923648][   T30] audit: type=1326 audit(1728275965.319:1114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3251 comm="syz.2.695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1f21b2ff9 code=0x7ffc0000
[  165.236431][ T3268] loop1: detected capacity change from 0 to 1024
[  165.320916][ T3258] bridge0: port 1(bridge_slave_0) entered blocking state
[  165.330845][ T3273] loop0: detected capacity change from 0 to 512
[  165.340530][ T3268] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  165.351268][ T3268] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (30349!=20869)
[  165.362834][ T3268] EXT4-fs (loop1): invalid journal inode
[  165.368425][ T3268] EXT4-fs (loop1): can't get journal size
[  165.380949][   T30] audit: type=1326 audit(1728275965.319:1115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3251 comm="syz.2.695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd1f21b2ff9 code=0x7ffc0000
[  165.395422][ T3258] bridge0: port 1(bridge_slave_0) entered disabled state
[  165.409249][ T3268] EXT4-fs (loop1): mounted filesystem without journal. Opts: noload,,errors=continue. Quota mode: writeback.
[  165.445160][ T3258] device bridge_slave_0 entered promiscuous mode
[  165.451541][   T30] audit: type=1326 audit(1728275965.319:1116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3251 comm="syz.2.695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1f21b2ff9 code=0x7ffc0000
[  165.474970][   T30] audit: type=1326 audit(1728275965.319:1117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3251 comm="syz.2.695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd1f21b2ff9 code=0x7ffc0000
[  165.504113][   T30] audit: type=1326 audit(1728275965.329:1118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3251 comm="syz.2.695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1f21b2ff9 code=0x7ffc0000
[  165.529430][   T30] audit: type=1326 audit(1728275965.329:1119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3251 comm="syz.2.695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd1f21b2ff9 code=0x7ffc0000
[  165.540492][ T3273] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  165.563528][ T3273] ext4 filesystem being mounted at /42/file0 supports timestamps until 2038 (0x7fffffff)
[  165.573447][ T3258] bridge0: port 2(bridge_slave_1) entered blocking state
[  165.641891][ T3258] bridge0: port 2(bridge_slave_1) entered disabled state
[  165.651169][ T3258] device bridge_slave_1 entered promiscuous mode
[  165.889159][ T3287] loop1: detected capacity change from 0 to 256
[  166.039456][ T2232] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  166.057772][ T2232] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  166.079045][ T2232] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  166.132456][ T2232] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  166.159091][ T2232] bridge0: port 1(bridge_slave_0) entered blocking state
[  166.166123][ T2232] bridge0: port 1(bridge_slave_0) entered forwarding state
[  166.174232][ T2232] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  166.182456][ T2232] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  166.191720][ T2232] bridge0: port 2(bridge_slave_1) entered blocking state
[  166.198597][ T2232] bridge0: port 2(bridge_slave_1) entered forwarding state
[  166.261063][ T2232] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  166.273227][ T3297] loop0: detected capacity change from 0 to 512
[  166.280621][ T2232] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  166.307264][ T2232] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  166.308714][ T3296] loop1: detected capacity change from 0 to 2048
[  166.321808][  T503] device bridge_slave_1 left promiscuous mode
[  166.341898][  T503] bridge0: port 2(bridge_slave_1) entered disabled state
[  166.354043][  T503] device bridge_slave_0 left promiscuous mode
[  166.355503][ T3297] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: comm syz.0.705: inode #1: comm syz.0.705: iget: illegal inode #
[  166.363192][  T503] bridge0: port 1(bridge_slave_0) entered disabled state
[  166.380223][ T3297] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.705: error while reading EA inode 1 err=-117
[  166.392861][ T3297] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2815: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  166.406752][  T503] device veth1_macvtap left promiscuous mode
[  166.412660][ T3297] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: comm syz.0.705: inode #1: comm syz.0.705: iget: illegal inode #
[  166.425511][ T3297] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.705: error while reading EA inode 1 err=-117
[  166.430625][  T503] device veth0_vlan left promiscuous mode
[  166.437813][ T3297] EXT4-fs (loop0): 1 orphan inode deleted
[  166.443188][ T3296]  loop1: p2 p3 < > p4 < p5 >
[  166.448566][ T3297] EXT4-fs (loop0): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,journal_dev=0x0000000000008000,debug_want_extra_isize=0x000000000000005c,minixdf,resgid=0x0000000000000000,grpquota,usrjquota=,,errors=continue. Quota mode: writeback.
[  166.456979][ T3296] loop1: partition table partially beyond EOD, 
[  166.489949][ T3300] loop2: detected capacity change from 0 to 128
[  166.503332][ T3296] truncated
[  166.506732][ T3296] loop1: p2 start 33028 is beyond EOD, truncated
[  166.518750][ T3302] loop4: detected capacity change from 0 to 512
[  166.526864][ T3296] loop1: p3 start 4284160 is beyond EOD, truncated
[  166.540857][ T3296] loop1: p5 start 33028 is beyond EOD, truncated
[  166.589882][ T3302] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  166.602734][ T3302] ext4 filesystem being mounted at /19/file0 supports timestamps until 2038 (0x7fffffff)
[  166.621860][ T3258] device veth0_vlan entered promiscuous mode
[  166.629518][ T3307] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.705: invalid indirect mapped block 234881024 (level 0)
[  166.642208][ T3258] device veth1_macvtap entered promiscuous mode
[  166.661901][ T3300] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  166.716390][ T3300] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  166.721455][ T2232] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  166.745102][ T2232] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  166.746518][  T313] udevd[313]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory
[  166.761697][ T2232] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  166.795005][ T2232] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  166.902613][ T2232] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  166.978417][ T2232] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  167.001001][ T2232] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  167.011652][ T3313] netlink: 'syz.3.699': attribute type 27 has an invalid length.
[  167.254982][ T3313] bridge0: port 2(bridge_slave_1) entered disabled state
[  167.262039][ T3313] bridge0: port 1(bridge_slave_0) entered disabled state
[  167.564572][ T3335] loop4: detected capacity change from 0 to 8192
[  167.607173][ T3335] FAT-fs (loop4): Unrecognized mount option "ÿÿÿÿ" or missing value
[  167.663169][ T3338] loop3: detected capacity change from 0 to 512
[  167.777638][ T3333] loop0: detected capacity change from 0 to 40427
[  167.811818][ T3338] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  167.817968][ T3333] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[  167.830887][ T3338] ext4 filesystem being mounted at /1/file0 supports timestamps until 2038 (0x7fffffff)
[  167.857301][ T3333] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  167.895902][ T3347] serio: Serial port ptm1
[  168.047879][ T3333] F2FS-fs (loop0): Found nat_bits in checkpoint
[  168.227143][ T3333] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  168.244152][ T3333] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  168.862055][ T3373] loop0: detected capacity change from 0 to 256
[  169.126286][ T3376] loop1: detected capacity change from 0 to 512
[  169.196857][  T304] usb 4-1: new high-speed USB device number 18 using dummy_hcd
[  169.205571][ T3376] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  169.216551][ T3376] ext4 filesystem being mounted at /65/file0 supports timestamps until 2038 (0x7fffffff)
[  169.806883][  T304] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  169.818481][  T304] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  169.829084][  T304] usb 4-1: New USB device found, idVendor=06cb, idProduct=81a7, bcdDevice= 0.00
[  169.838266][  T304] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  169.846607][  T304] usb 4-1: config 0 descriptor??
[  169.966805][ T2490] usb 3-1: new high-speed USB device number 20 using dummy_hcd
[  169.995833][ T3395] loop1: detected capacity change from 0 to 512
[  170.027871][ T3395] EXT4-fs (loop1): Unrecognized mount option "dont_appraise" or missing value
[  170.088380][ T3397] loop4: detected capacity change from 0 to 512
[  170.142856][ T3397] EXT4-fs (loop4): orphan cleanup on readonly fs
[  170.149270][ T3397] EXT4-fs error (device loop4): ext4_ext_check_inode:501: inode #4: comm syz.4.727: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 2048(2048)
[  170.174083][ T3397] EXT4-fs error (device loop4): ext4_quota_enable:6381: comm syz.4.727: Bad quota inode: 4, type: 1
[  170.185169][ T3397] EXT4-fs warning (device loop4): ext4_enable_quotas:6422: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  170.200164][ T3397] EXT4-fs (loop4): Cannot turn on quotas: error -117
[  170.206736][ T3397] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  170.266911][ T2490] usb 3-1: Using ep0 maxpacket: 16
[  170.348153][ T3397] fuse: Bad value for 'fd'
[  170.426894][ T2490] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  170.438121][  T304] hid-rmi 0003:06CB:81A7.000C: item fetching failed at offset 0/5
[  170.445841][  T304] hid-rmi 0003:06CB:81A7.000C: parse failed
[  170.451516][  T304] hid-rmi: probe of 0003:06CB:81A7.000C failed with error -22
[  170.753461][ T2490] usb 3-1: New USB device found, idVendor=045e, idProduct=0721, bcdDevice=90.c4
[  170.785594][ T2490] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  170.793699][ T2490] usb 3-1: Product: syz
[  170.797937][ T2490] usb 3-1: Manufacturer: syz
[  170.802405][ T2490] usb 3-1: SerialNumber: syz
[  170.811126][ T2490] usb 3-1: config 0 descriptor??
[  170.886380][    C0] eth0: bad gso: type: 1, size: 1408
[  170.891907][    C0] eth0: bad gso: type: 1, size: 1408
[  171.051916][ T3385] UDC core: couldn't find an available UDC or it's busy: -16
[  171.062550][ T3385] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  171.062778][ T3417] serio: Serial port ptm1
[  171.366936][ T2490] usb 3-1: Found UVC 0.00 device syz (045e:0721)
[  171.372801][ T3423] loop4: detected capacity change from 0 to 512
[  171.377456][ T2490] usb 3-1: No valid video chain found.
[  171.418476][ T2490] usb 3-1: USB disconnect, device number 20
[  171.571762][ T3423] EXT4-fs error (device loop4): ext4_find_inline_data_nolock:164: inode #12: comm syz.4.733: inline data xattr refers to an external xattr inode
[  171.633962][ T3423] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.733: couldn't read orphan inode 12 (err -117)
[  171.645787][ T3423] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  171.664892][ T3423] EXT4-fs error (device loop4): ext4_add_entry:2484: inode #2: comm syz.4.733: Directory hole found for htree leaf block 0
[  171.791023][  T476] usb 4-1: USB disconnect, device number 18
[  171.816286][ T3433] loop3: detected capacity change from 0 to 512
[  171.830384][ T3435] loop1: detected capacity change from 0 to 16
[  171.838613][ T3435] erofs: (device loop1): erofs_fc_fill_super: rootino(nid 36) is not a directory(i_mode 16700)
[  171.858616][ T3433] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  171.869540][ T3433] ext4 filesystem being mounted at /3/file0 supports timestamps until 2038 (0x7fffffff)
[  171.969021][   T30] kauditd_printk_skb: 26 callbacks suppressed
[  171.969035][   T30] audit: type=1326 audit(1728275972.509:1146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3434 comm="syz.1.737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3e2d33ff9 code=0x7ffc0000
[  172.027348][ T3443] bridge0: port 1(bridge_slave_0) entered blocking state
[  172.034251][ T3443] bridge0: port 1(bridge_slave_0) entered forwarding state
[  172.061613][   T30] audit: type=1326 audit(1728275972.509:1147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3434 comm="syz.1.737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa3e2d33ff9 code=0x7ffc0000
[  172.070747][ T3435] xt_hashlimit: size too large, truncated to 1048576
[  172.162519][   T30] audit: type=1326 audit(1728275972.509:1148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3434 comm="syz.1.737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3e2d33ff9 code=0x7ffc0000
[  172.211133][   T30] audit: type=1326 audit(1728275972.509:1149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3434 comm="syz.1.737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa3e2d33ff9 code=0x7ffc0000
[  172.270285][   T30] audit: type=1326 audit(1728275972.509:1150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3434 comm="syz.1.737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3e2d33ff9 code=0x7ffc0000
[  172.337284][   T30] audit: type=1326 audit(1728275972.509:1151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3434 comm="syz.1.737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa3e2d33ff9 code=0x7ffc0000
[  172.365425][ T3450] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=45215 sclass=netlink_route_socket pid=3450 comm=syz.0.739
[  172.445123][   T30] audit: type=1326 audit(1728275972.509:1152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3434 comm="syz.1.737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3e2d33ff9 code=0x7ffc0000
[  172.518210][   T30] audit: type=1326 audit(1728275972.509:1153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3434 comm="syz.1.737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa3e2d33ff9 code=0x7ffc0000
[  172.596464][   T30] audit: type=1326 audit(1728275972.599:1154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3434 comm="syz.1.737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3e2d33ff9 code=0x7ffc0000
[  172.644049][ T3454] loop4: detected capacity change from 0 to 512
[  172.663734][   T30] audit: type=1326 audit(1728275972.599:1155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3434 comm="syz.1.737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3e2d33ff9 code=0x7ffc0000
[  172.737467][ T3454] EXT4-fs (loop4): Ignoring removed mblk_io_submit option
[  172.746666][ T3454] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  172.758561][ T3454] EXT4-fs (loop4): 1 truncate cleaned up
[  172.764054][ T3454] EXT4-fs (loop4): mounted filesystem without journal. Opts: noload,mblk_io_submit,debug_want_extra_isize=0x000000000000002e,auto_da_alloc,block_validity,nobarrier,,errors=continue. Quota mode: none.
[  172.834822][ T3459] loop3: detected capacity change from 0 to 128
[  172.869568][ T3459] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  172.880114][ T3459] ext4 filesystem being mounted at /5/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff)
[  173.406817][  T304] usb 3-1: new high-speed USB device number 21 using dummy_hcd
[  173.966836][  T304] usb 3-1: Using ep0 maxpacket: 32
[  174.743704][  T304] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  174.754615][  T304] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  174.765340][  T304] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  174.776431][  T304] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  174.870348][ T3492] loop4: detected capacity change from 0 to 512
[  174.881952][ T3494] loop3: detected capacity change from 0 to 256
[  174.899410][  T304] hub 3-1:4.0: USB hub found
[  174.979375][ T3492] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  174.993818][ T3492] ext4 filesystem being mounted at /30/file0 supports timestamps until 2038 (0x7fffffff)
[  175.323411][  T304] hub 3-1:4.0: 2 ports detected
[  175.477328][ T3505] loop0: detected capacity change from 0 to 2048
[  175.537159][ T3505] EXT4-fs error (device loop0): ext4_orphan_get:1423: comm syz.0.754: bad orphan inode 8192
[  175.553482][ T3505] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  175.782998][ T3513] loop1: detected capacity change from 0 to 16
[  175.829578][ T3513] erofs: (device loop1): erofs_fc_fill_super: rootino(nid 36) is not a directory(i_mode 16700)
[  175.851891][ T3518] netlink: 64 bytes leftover after parsing attributes in process `syz.4.759'.
[  175.930546][ T3513] bridge0: port 1(bridge_slave_0) entered blocking state
[  175.937421][ T3513] bridge0: port 1(bridge_slave_0) entered forwarding state
[  175.956986][ T3523] serio: Serial port ptm0
[  175.967340][ T3513] xt_hashlimit: size too large, truncated to 1048576
[  176.181262][ T3520] loop4: detected capacity change from 0 to 40427
[  176.391180][ T3520] F2FS-fs (loop4): Invalid Fs Meta Ino: node(1) meta(2) root(0)
[  176.417314][ T3520] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  176.467656][ T3520] F2FS-fs (loop4): invalid crc value
[  176.475499][ T3520] F2FS-fs (loop4): invalid crc value
[  176.480691][ T3520] F2FS-fs (loop4): Failed to get valid F2FS checkpoint
[  176.646857][  T304] hub 3-1:4.0: activate --> -90
[  177.378432][ T3542] loop0: detected capacity change from 0 to 40427
[  177.395960][ T3544] loop1: detected capacity change from 0 to 128
[  177.413711][   T30] kauditd_printk_skb: 41 callbacks suppressed
[  177.413722][   T30] audit: type=1400 audit(1728275977.949:1197): avc:  denied  { mounton } for  pid=3539 comm="syz.0.763" path="/57/file0" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1
[  177.423304][ T3546] loop4: detected capacity change from 0 to 512
[  177.449214][ T3542] F2FS-fs (loop0): Ignore s_resuid=14, s_resgid=0 w/o reserve_root
[  177.451841][ T3547] loop2: detected capacity change from 0 to 128
[  177.466711][ T3542] F2FS-fs (loop0): Found nat_bits in checkpoint
[  177.492989][ T3546] EXT4-fs (loop4): orphan cleanup on readonly fs
[  177.499612][ T3546] EXT4-fs error (device loop4): ext4_ext_check_inode:501: inode #4: comm syz.4.765: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 2048(2048)
[  177.518218][ T3546] EXT4-fs error (device loop4): ext4_quota_enable:6381: comm syz.4.765: Bad quota inode: 4, type: 1
[  177.529328][ T3546] EXT4-fs warning (device loop4): ext4_enable_quotas:6422: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  177.544559][ T3546] EXT4-fs (loop4): Cannot turn on quotas: error -117
[  177.551274][ T3546] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  177.562033][ T3542] F2FS-fs (loop0): Cannot turn on quotas: -2 on 0
[  177.562110][ T3542] F2FS-fs (loop0): Cannot turn on quotas: -2 on 1
[  177.568898][ T3542] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  177.667468][ T3553] netlink: 76 bytes leftover after parsing attributes in process `syz.1.764'.
[  177.881053][ T3560] loop3: detected capacity change from 0 to 512
[  177.890477][ T2234] usb 3-1: USB disconnect, device number 21
[  177.897024][  T304] usb 3-1-port1: cannot reset (err = -71)
[  177.906065][  T304] usb 3-1-port1: attempt power cycle
[  177.920013][ T3560] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  177.942553][ T3560] ext4 filesystem being mounted at /11/file0 supports timestamps until 2038 (0x7fffffff)
[  178.072109][ T3558] loop4: detected capacity change from 0 to 40427
[  178.219764][ T3558] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[  178.310024][ T3558] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  178.337330][ T3558] F2FS-fs (loop4): Found nat_bits in checkpoint
[  178.362778][ T3577] loop0: detected capacity change from 0 to 1024
[  178.372619][ T3558] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  178.379590][ T3558] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  178.397888][ T3577] EXT4-fs (loop0): Ignoring removed orlov option
[  178.428437][ T3577] EXT4-fs (loop0): can't mount with commit=3958, fs mounted w/o journal
[  178.439934][ T3579] serio: Serial port ptm0
[  178.948514][ T3593] loop3: detected capacity change from 0 to 1024
[  178.984694][ T3582] loop2: detected capacity change from 0 to 40427
[  179.019744][ T3582] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[  179.027366][ T3582] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  179.043288][ T3593] EXT4-fs (loop3): first meta block group too large: 50331648 (group descriptor block count 1)
[  179.056942][ T3582] F2FS-fs (loop2): Found nat_bits in checkpoint
[  179.086906][ T3601] loop4: detected capacity change from 0 to 512
[  179.092910][ T3582] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  179.100106][ T3582] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  179.104375][ T3601] EXT4-fs (loop4): orphan cleanup on readonly fs
[  179.114164][ T3601] EXT4-fs error (device loop4): ext4_ext_check_inode:501: inode #4: comm syz.4.777: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 2048(2048)
[  179.136533][ T3601] EXT4-fs error (device loop4): ext4_quota_enable:6381: comm syz.4.777: Bad quota inode: 4, type: 1
[  179.142244][ T3593] loop3: detected capacity change from 0 to 256
[  179.149227][ T3601] EXT4-fs warning (device loop4): ext4_enable_quotas:6422: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  179.168095][ T3601] EXT4-fs (loop4): Cannot turn on quotas: error -117
[  179.174688][ T3601] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  179.296829][  T476] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[  179.643653][   T30] audit: type=1400 audit(1728275980.019:1198): avc:  denied  { create } for  pid=3581 comm="syz.2.773" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1
[  179.946841][  T476] usb 1-1: device descriptor read/64, error -71
[  180.059144][ T3623] serio: Serial port ptm0
[  180.236842][ T2490] usb 4-1: new high-speed USB device number 19 using dummy_hcd
[  180.536549][  T476] usb 1-1: device descriptor read/64, error -71
[  180.561606][   T30] audit: type=1400 audit(1728275981.109:1199): avc:  denied  { unmount } for  pid=1923 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  180.681067][   T30] audit: type=1400 audit(1728275981.219:1200): avc:  denied  { mounton } for  pid=3632 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1
[  180.727964][ T3632] bridge0: port 1(bridge_slave_0) entered blocking state
[  180.734897][ T3632] bridge0: port 1(bridge_slave_0) entered disabled state
[  180.736848][ T2490] usb 4-1: config 0 has an invalid descriptor of length 30, skipping remainder of the config
[  180.742389][ T3632] device bridge_slave_0 entered promiscuous mode
[  180.751803][ T2490] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  180.767156][ T2490] usb 4-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00
[  180.768043][ T3632] bridge0: port 2(bridge_slave_1) entered blocking state
[  180.776046][ T2490] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  180.783231][ T3632] bridge0: port 2(bridge_slave_1) entered disabled state
[  180.796389][ T2490] usb 4-1: config 0 descriptor??
[  180.797999][ T3632] device bridge_slave_1 entered promiscuous mode
[  180.836831][  T476] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[  180.853033][ T3632] bridge0: port 2(bridge_slave_1) entered blocking state
[  180.859905][ T3632] bridge0: port 2(bridge_slave_1) entered forwarding state
[  180.867000][ T3632] bridge0: port 1(bridge_slave_0) entered blocking state
[  180.873762][ T3632] bridge0: port 1(bridge_slave_0) entered forwarding state
[  180.891968][  T503] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  180.899524][  T503] bridge0: port 1(bridge_slave_0) entered disabled state
[  180.906644][  T503] bridge0: port 2(bridge_slave_1) entered disabled state
[  180.918027][  T503] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  180.925955][  T503] bridge0: port 1(bridge_slave_0) entered blocking state
[  180.932809][  T503] bridge0: port 1(bridge_slave_0) entered forwarding state
[  180.941478][  T503] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  180.949497][  T503] bridge0: port 2(bridge_slave_1) entered blocking state
[  180.956318][  T503] bridge0: port 2(bridge_slave_1) entered forwarding state
[  180.970369][  T503] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  180.979256][  T503] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  180.993956][  T503] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  181.004739][  T503] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  181.012731][  T503] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  181.020166][  T503] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  181.028442][ T3632] device veth0_vlan entered promiscuous mode
[  181.043679][ T3632] device veth1_macvtap entered promiscuous mode
[  181.081564][  T503] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  181.090317][  T503] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  181.101128][  T503] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  181.106731][ T3640] loop1: detected capacity change from 0 to 512
[  181.116006][  T476] usb 1-1: device descriptor read/64, error -71
[  181.133656][ T3640] EXT4-fs (loop1): orphan cleanup on readonly fs
[  181.141290][ T3640] EXT4-fs error (device loop1): ext4_ext_check_inode:501: inode #4: comm syz.1.788: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 2048(2048)
[  181.186988][ T3640] EXT4-fs error (device loop1): ext4_quota_enable:6381: comm syz.1.788: Bad quota inode: 4, type: 1
[  181.199672][ T3640] EXT4-fs warning (device loop1): ext4_enable_quotas:6422: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  181.214276][ T3640] EXT4-fs (loop1): Cannot turn on quotas: error -117
[  181.220873][ T3640] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  181.307927][ T1984] device bridge_slave_1 left promiscuous mode
[  181.321551][ T1984] bridge0: port 2(bridge_slave_1) entered disabled state
[  181.374814][ T1984] device bridge_slave_0 left promiscuous mode
[  181.385079][ T1984] bridge0: port 1(bridge_slave_0) entered disabled state
[  181.393067][ T1984] device veth1_macvtap left promiscuous mode
[  181.403515][ T1984] device veth0_vlan left promiscuous mode
[  181.415580][ T3655] loop3: detected capacity change from 0 to 16
[  181.488390][ T3655] erofs: Unknown parameter '
'
[  181.506819][  T476] usb 1-1: device descriptor read/64, error -71
[  181.668924][ T3651] loop1: detected capacity change from 0 to 40427
[  181.740731][  T476] usb usb1-port1: attempt power cycle
[  181.754468][ T3651] F2FS-fs (loop1): Invalid Fs Meta Ino: node(1) meta(2) root(0)
[  181.762311][ T3651] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  181.771590][ T3651] F2FS-fs (loop1): invalid crc value
[  181.889908][ T3651] F2FS-fs (loop1): Found nat_bits in checkpoint
[  181.997920][ T2234] usb 4-1: USB disconnect, device number 19
[  182.017022][ T3673] syz.3.798[3673] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  182.017095][ T3673] syz.3.798[3673] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  182.070283][   T30] audit: type=1400 audit(1728275982.609:1201): avc:  denied  { write } for  pid=3672 comm="syz.3.798" path="socket:[34335]" dev="sockfs" ino=34335 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  182.258854][ T3651] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  182.296384][ T3651] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  182.347523][ T3680] loop0: detected capacity change from 0 to 2048
[  182.499297][ T3685] netlink: 4 bytes leftover after parsing attributes in process `syz.1.791'.
[  182.508261][ T3685] netlink: 12 bytes leftover after parsing attributes in process `syz.1.791'.
[  182.558025][ T3680] EXT4-fs error (device loop0): ext4_orphan_get:1423: comm syz.0.799: bad orphan inode 8192
[  182.568300][ T3680] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  182.591635][ T3680] overlayfs: './file1' not a directory
[  182.762919][ T3693] loop4: detected capacity change from 0 to 512
[  182.948889][ T3696] serio: Serial port ptm1
[  183.781795][ T3698] serio: Serial port ptm2
[  183.821685][ T3693] EXT4-fs (loop4): orphan cleanup on readonly fs
[  183.828501][ T3693] EXT4-fs error (device loop4): ext4_ext_check_inode:501: inode #4: comm syz.4.802: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 2048(2048)
[  183.865775][ T3693] EXT4-fs error (device loop4): ext4_quota_enable:6381: comm syz.4.802: Bad quota inode: 4, type: 1
[  183.876899][ T3693] EXT4-fs warning (device loop4): ext4_enable_quotas:6422: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  183.891561][ T3693] EXT4-fs (loop4): Cannot turn on quotas: error -117
[  183.898732][ T3693] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  183.916132][ T3709] loop3: detected capacity change from 0 to 512
[  184.596420][ T3709] EXT4-fs (loop3): orphan cleanup on readonly fs
[  184.609280][ T3709] EXT4-fs error (device loop3): ext4_ext_check_inode:501: inode #4: comm syz.3.806: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 2048(2048)
[  184.628850][ T3709] EXT4-fs error (device loop3): ext4_quota_enable:6381: comm syz.3.806: Bad quota inode: 4, type: 1
[  184.706853][ T3709] EXT4-fs warning (device loop3): ext4_enable_quotas:6422: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  184.722858][ T3709] EXT4-fs (loop3): Cannot turn on quotas: error -117
[  184.729935][ T3709] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  184.756102][ T3722] loop4: detected capacity change from 0 to 128
[  184.778160][ T3720] loop0: detected capacity change from 0 to 1024
[  184.867240][ T3720] EXT4-fs (loop0): Ignoring removed orlov option
[  184.954236][ T3731] loop1: detected capacity change from 0 to 512
[  185.465097][ T3720] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a802e018, mo2=0002]
[  185.473096][ T3720] System zones: 0-1, 3-12
[  185.479381][ T3720] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsv1,abort,barrier=0x0000000000000001,orlov,debug_want_extra_isize=0x0000000000000080,nouid32,sysvgroups,grpjquota=,debug,,errors=continue. Quota mode: none.
[  185.504880][ T3718] loop2: detected capacity change from 0 to 40427
[  185.516601][   T30] audit: type=1400 audit(1728275986.049:1202): avc:  denied  { setattr } for  pid=3719 comm="syz.0.809" name="file1" dev="loop0" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1
[  185.540512][   T30] audit: type=1400 audit(1728275986.049:1203): avc:  denied  { map } for  pid=3719 comm="syz.0.809" path="/64/file1/file0/bus" dev="devtmpfs" ino=112 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  185.541204][ T3731] EXT4-fs (loop1): 1 orphan inode deleted
[  185.571418][ T3720] EXT4-fs error (device loop0): ext4_map_blocks:629: inode #18: block 115: comm syz.0.809: lblock 3 mapped to illegal pblock 115 (length 1)
[  185.573314][ T3731] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,init_itable,stripe=0x0000000000000079,resgid=0x0000000000000000,sysvgroups,delalloc,usrquota,. Quota mode: writeback.
[  185.607904][ T3720] EXT4-fs error (device loop0): ext4_clear_blocks:883: inode #14: comm syz.0.809: attempt to clear invalid blocks 1886221359 len 1
[  185.621556][ T3720] EXT4-fs error (device loop0): ext4_ext_remove_space:2923: inode #18: comm syz.0.809: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0)
[  185.635588][ T3731] ext4 filesystem being mounted at /3/file1 supports timestamps until 2038 (0x7fffffff)
[  185.642053][ T3720] EXT4-fs error (device loop0): ext4_evict_inode:294: comm syz.0.809: couldn't truncate inode 18 (err -117)
[  185.656121][   T30] audit: type=1400 audit(1728275986.119:1204): avc:  denied  { rename } for  pid=3719 comm="syz.0.809" name="file0" dev="loop0" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  185.792616][ T3742] fuse: Bad value for 'fd'
[  186.270771][ T3747] input: syz0 as /devices/virtual/input/input10
[  186.464317][ T2204] EXT4-fs error (device loop0): ext4_free_blocks:6225: comm syz-executor: Freeing blocks not in datazone - block = 128, count = 1
[  186.520470][ T3718] F2FS-fs (loop2): Found nat_bits in checkpoint
[  186.552566][ T3718] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  186.582207][ T3757] loop0: detected capacity change from 0 to 512
[  186.735092][ T3758] serio: Serial port ptm0
[  186.902961][ T3761] loop1: detected capacity change from 0 to 512
[  187.008437][ T3757] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  187.019494][ T3757] ext4 filesystem being mounted at /65/file0 supports timestamps until 2038 (0x7fffffff)
[  187.054514][ T3027] attempt to access beyond end of device
[  187.054514][ T3027] loop2: rw=2049, want=45128, limit=40427
[  187.129502][ T3761] EXT4-fs (loop1): orphan cleanup on readonly fs
[  187.135942][ T3761] EXT4-fs error (device loop1): ext4_ext_check_inode:501: inode #4: comm syz.1.817: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 2048(2048)
[  187.162769][ T3761] EXT4-fs error (device loop1): ext4_quota_enable:6381: comm syz.1.817: Bad quota inode: 4, type: 1
[  187.523110][ T3761] EXT4-fs warning (device loop1): ext4_enable_quotas:6422: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  187.555100][ T3761] EXT4-fs (loop1): Cannot turn on quotas: error -117
[  187.568850][ T3761] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  188.622333][ T3791] bridge0: port 2(bridge_slave_1) entered disabled state
[  188.631785][ T3787] loop2: detected capacity change from 0 to 2048
[  188.638517][ T3791] bridge0: port 2(bridge_slave_1) entered blocking state
[  188.645380][ T3791] bridge0: port 2(bridge_slave_1) entered forwarding state
[  188.652760][ T2165] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  188.738084][ T3787] EXT4-fs error (device loop2): ext4_orphan_get:1423: comm syz.2.823: bad orphan inode 8192
[  188.748209][ T3787] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  189.049762][ T3803] loop2: detected capacity change from 0 to 512
[  189.097947][ T3804] netlink: 8 bytes leftover after parsing attributes in process `syz.1.827'.
[  189.108738][ T3803] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled
[  189.112675][ T3804] loop1: detected capacity change from 0 to 512
[  189.119243][ T3803] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended
[  189.133143][ T2165] usb 5-1: Using ep0 maxpacket: 8
[  189.142777][ T3804] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  189.155800][ T3803] EXT4-fs (loop2): warning: checktime reached, running e2fsck is recommended
[  189.167713][ T3803] EXT4-fs error (device loop2): ext4_orphan_get:1397: inode #16: comm syz.2.826: iget: bogus i_mode (5)
[  189.168280][ T3804] EXT4-fs error (device loop1): ext4_orphan_get:1397: inode #15: comm syz.1.827: casefold flag without casefold feature
[  189.179041][ T3803] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.826: couldn't read orphan inode 16 (err -117)
[  189.191644][ T3804] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: inode #12: comm syz.1.827: missing EA_INODE flag
[  189.203040][ T3803] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,jqfmt=vfsold,noquota,errors=remount-ro,stripe=0x0000000000000079,resgid=0x0000000000000000,data_err=ignore,init_itable,errors=continue,. Quota mode: writeback.
[  189.214362][ T3804] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.827: error while reading EA inode 12 err=-117
[  189.251921][ T3804] EXT4-fs (loop1): 1 orphan inode deleted
[  189.257899][ T3804] EXT4-fs (loop1): mounted filesystem without journal. Opts: dioread_nolock,journal_dev=0x0000000000000007,quota,noinit_itable,errors=continue,errors=continue,errors=remount-ro,delalloc,auto_da_alloc,norecovery,errors=continue,journal_ioprio=0x0000000000000001,. Quota mode: writeback.
[  189.346888][ T2165] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  189.357871][ T2165] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  189.367444][ T2165] usb 5-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00
[  189.376512][ T2165] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  189.390229][ T2165] usb 5-1: config 0 descriptor??
[  189.507131][   T30] audit: type=1400 audit(1728275989.989:1205): avc:  denied  { listen } for  pid=3802 comm="syz.2.826" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  189.720172][ T3823] loop4: detected capacity change from 0 to 512
[  189.728197][ T2165] usbhid 5-1:0.0: can't add hid device: -71
[  189.730591][ T3825] loop0: detected capacity change from 0 to 512
[  189.739187][ T2165] usbhid: probe of 5-1:0.0 failed with error -71
[  189.757373][ T2165] usb 5-1: USB disconnect, device number 12
[  189.770463][ T3825] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  189.781933][ T3825] ext4 filesystem being mounted at /71/file0 supports timestamps until 2038 (0x7fffffff)
[  189.827771][ T3823] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  189.839077][ T3823] ext4 filesystem being mounted at /50/file0 supports timestamps until 2038 (0x7fffffff)
[  190.735856][ T3845] serio: Serial port ptm0
[  190.956597][ T3851] bridge0: port 1(bridge_slave_0) entered disabled state
[  191.062223][ T3859] serio: Serial port ptm1
[  191.189862][ T3858] loop0: detected capacity change from 0 to 2048
[  191.359824][ T3850] loop1: detected capacity change from 0 to 40427
[  191.372285][ T3876] netlink: 28 bytes leftover after parsing attributes in process `syz.2.840'.
[  191.396257][ T3878] loop3: detected capacity change from 0 to 256
[  191.415176][ T3858] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  191.428093][ T3850] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[  191.437795][ T3858] tipc: Started in network mode
[  191.442479][ T3858] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711
[  191.442645][ T3850] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  191.451509][ T3858] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb
[  191.460192][ T3878] FAT-fs (loop3): bogus sectors per cluster 0
[  191.467291][ T3858] tipc: Enabled bearer <udp:sy>, priority 10
[  191.474077][ T3878] FAT-fs (loop3): Can't find a valid FAT filesystem
[  191.486964][ T3850] F2FS-fs (loop1): Found nat_bits in checkpoint
[  191.520045][ T3850] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  191.539038][ T3850] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  191.629833][ T3888] loop1: detected capacity change from 0 to 512
[  191.708704][ T3888] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  191.719824][ T3888] ext4 filesystem being mounted at /8/file0 supports timestamps until 2038 (0x7fffffff)
[  192.268008][ T3900] loop3: detected capacity change from 0 to 512
[  192.376145][ T3900] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  192.396982][ T3900] ext4 filesystem being mounted at /25/file0 supports timestamps until 2038 (0x7fffffff)
[  192.593080][ T2165] tipc: Node number set to 1
[  192.610289][ T3909] loop4: detected capacity change from 0 to 512
[  192.927725][ T3885] loop0: detected capacity change from 0 to 131072
[  193.005545][ T3909] EXT4-fs error (device loop4): ext4_do_update_inode:5202: inode #3: comm syz.4.851: corrupted inode contents
[  193.030666][ T3909] EXT4-fs error (device loop4): ext4_dirty_inode:6035: inode #3: comm syz.4.851: mark_inode_dirty error
[  193.047481][ T3909] EXT4-fs error (device loop4): ext4_do_update_inode:5202: inode #3: comm syz.4.851: corrupted inode contents
[  193.347165][ T3909] EXT4-fs error (device loop4): __ext4_ext_dirty:183: inode #3: comm syz.4.851: mark_inode_dirty error
[  193.359119][ T3909] Quota error (device loop4): write_blk: dquota write failed
[  193.366397][ T3909] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota
[  193.377780][ T3885] F2FS-fs (loop0): Found nat_bits in checkpoint
[  193.383945][ T3909] EXT4-fs error (device loop4): ext4_acquire_dquot:6187: comm syz.4.851: Failed to acquire dquot type 0
[  193.407763][ T3909] EXT4-fs error (device loop4): ext4_do_update_inode:5202: inode #16: comm syz.4.851: corrupted inode contents
[  193.428204][ T3885] F2FS-fs (loop0): Mounted with checkpoint version = 753bd00b
[  193.441272][   T30] audit: type=1400 audit(1728275993.979:1206): avc:  denied  { read } for  pid=3884 comm="syz.0.846" name="uhid" dev="devtmpfs" ino=171 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[  193.441444][ T3909] EXT4-fs error (device loop4): ext4_dirty_inode:6035: inode #16: comm syz.4.851: mark_inode_dirty error
[  193.486377][   T30] audit: type=1400 audit(1728275993.979:1207): avc:  denied  { open } for  pid=3884 comm="syz.0.846" path="/dev/uhid" dev="devtmpfs" ino=171 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[  193.689107][ T3909] EXT4-fs error (device loop4): ext4_do_update_inode:5202: inode #16: comm syz.4.851: corrupted inode contents
[  193.978573][ T3933] serio: Serial port ptm1
[  194.064094][ T3936] loop2: detected capacity change from 0 to 512
[  194.071774][ T3909] EXT4-fs error (device loop4): __ext4_ext_dirty:183: inode #16: comm syz.4.851: mark_inode_dirty error
[  194.208189][ T3909] EXT4-fs error (device loop4): ext4_do_update_inode:5202: inode #16: comm syz.4.851: corrupted inode contents
[  194.267128][ T3909] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem
[  194.286987][ T3936] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  194.307220][ T3909] EXT4-fs error (device loop4): ext4_do_update_inode:5202: inode #16: comm syz.4.851: corrupted inode contents
[  194.333983][ T3936] ext4 filesystem being mounted at /41/file0 supports timestamps until 2038 (0x7fffffff)
[  194.369969][ T3909] EXT4-fs error (device loop4): ext4_truncate:4303: inode #16: comm syz.4.851: mark_inode_dirty error
[  194.423139][ T3909] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem
[  194.439288][ T3909] EXT4-fs (loop4): 1 truncate cleaned up
[  194.444812][ T3909] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  194.458934][ T3909] ext4 filesystem being mounted at /54/file1 supports timestamps until 2038 (0x7fffffff)
[  194.877596][ T3949] netlink: 108 bytes leftover after parsing attributes in process `syz.1.858'.
[  194.985365][ T3953] loop2: detected capacity change from 0 to 512
[  195.006320][ T3956] incfs: Can't find or create .incomplete dir in ./file0
[  195.031775][ T3956] incfs: mount failed -17
[  195.090657][ T3953] EXT4-fs (loop2): revision level too high, forcing read-only mode
[  195.104172][ T3953] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002]
[  195.129361][ T3953] System zones: 0-1, 15-15, 18-18, 34-34
[  195.147605][ T3953] EXT4-fs (loop2): orphan cleanup on readonly fs
[  195.164226][ T3953] Quota error (device loop2): v2_read_header: Failed header read: expected=8 got=0
[  195.177207][ T3953] EXT4-fs warning (device loop2): ext4_enable_quotas:6422: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[  195.238637][ T3953] EXT4-fs (loop2): Cannot turn on quotas: error -22
[  195.263771][ T3953] EXT4-fs error (device loop2): ext4_orphan_get:1423: comm syz.2.859: bad orphan inode 16
[  195.284392][ T3963] loop4: detected capacity change from 0 to 512
[  195.298333][ T3953] ext4_test_bit(bit=15, block=18) = 1
[  195.303538][ T3953] is_bad_inode(inode)=0
[  195.312020][ T3953] NEXT_ORPHAN(inode)=0
[  195.315965][ T3953] max_ino=32
[  195.319281][ T3953] i_nlink=2
[  195.327967][ T3953] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  195.553874][ T3963] EXT4-fs (loop4): orphan cleanup on readonly fs
[  195.560609][ T3963] EXT4-fs error (device loop4): ext4_ext_check_inode:501: inode #4: comm syz.4.861: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 2048(2048)
[  195.579127][ T3963] EXT4-fs error (device loop4): ext4_quota_enable:6381: comm syz.4.861: Bad quota inode: 4, type: 1
[  195.590430][ T3963] EXT4-fs warning (device loop4): ext4_enable_quotas:6422: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  195.607586][ T3963] EXT4-fs (loop4): Cannot turn on quotas: error -117
[  195.614881][ T3963] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  195.878133][ T3977] device pim6reg1 entered promiscuous mode
[  196.026797][ T2235] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  196.263477][ T3987] serio: Serial port ptm0
[  196.436884][ T2235] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  196.457304][ T2235] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  196.467699][ T2235] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00
[  196.476582][ T2235] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  196.492360][ T2235] usb 2-1: config 0 descriptor??
[  196.784162][ T3999] loop2: detected capacity change from 0 to 256
[  196.824296][ T4001] bridge0: port 2(bridge_slave_1) entered disabled state
[  196.831339][ T4001] bridge0: port 2(bridge_slave_1) entered blocking state
[  196.838199][ T4001] bridge0: port 2(bridge_slave_1) entered forwarding state
[  196.968027][ T3975] loop1: detected capacity change from 0 to 16
[  197.150429][ T3975] erofs: (device loop1): erofs_fc_fill_super: rootino(nid 36) is not a directory(i_mode 16700)
[  197.357023][   T30] audit: type=1326 audit(1728275997.859:1208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3973 comm="syz.1.864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff84117fff9 code=0x7ffc0000
[  197.422276][   T30] audit: type=1326 audit(1728275997.869:1209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3973 comm="syz.1.864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff84117fff9 code=0x7ffc0000
[  197.445875][   T30] audit: type=1326 audit(1728275997.869:1210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3973 comm="syz.1.864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff84117fff9 code=0x7ffc0000
[  197.469676][   T30] audit: type=1326 audit(1728275997.889:1211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3973 comm="syz.1.864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff84117fff9 code=0x7ffc0000
[  197.491758][ T3975] bridge0: port 1(bridge_slave_0) entered blocking state
[  197.499575][ T3975] bridge0: port 1(bridge_slave_0) entered forwarding state
[  197.507313][   T30] audit: type=1326 audit(1728275997.889:1212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3973 comm="syz.1.864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff84117fff9 code=0x7ffc0000
[  197.512522][ T3975] xt_hashlimit: size too large, truncated to 1048576
[  197.710561][ T4015] loop0: detected capacity change from 0 to 512
[  197.719037][ T4014] loop2: detected capacity change from 0 to 512
[  197.751710][ T4015] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  197.762596][ T4015] ext4 filesystem being mounted at /83/file0 supports timestamps until 2038 (0x7fffffff)
[  197.788569][ T4014] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpjquota=,discard,minixdf,,errors=continue. Quota mode: writeback.
[  197.801973][ T4014] ext4 filesystem being mounted at /45/bus supports timestamps until 2038 (0x7fffffff)
[  197.849414][ T2235] usbhid 2-1:0.0: can't add hid device: -71
[  197.855326][ T2235] usbhid: probe of 2-1:0.0 failed with error -71
[  197.867566][ T2235] usb 2-1: USB disconnect, device number 15
[  197.883047][ T4023] FAULT_INJECTION: forcing a failure.
[  197.883047][ T4023] name failslab, interval 1, probability 0, space 0, times 0
[  197.895927][ T4023] CPU: 1 PID: 4023 Comm: syz.4.876 Not tainted 5.15.165-syzkaller-01568-g80dd36dca275 #0
[  197.905547][ T4023] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
[  197.907723][ T4025] loop2: detected capacity change from 0 to 512
[  197.915450][ T4023] Call Trace:
[  197.915459][ T4023]  <TASK>
[  197.915467][ T4023]  dump_stack_lvl+0x151/0x1c0
[  197.931931][ T4023]  ? io_uring_drop_tctx_refs+0x190/0x190
[  197.937399][ T4023]  dump_stack+0x15/0x20
[  197.941387][ T4023]  should_fail+0x3c6/0x510
[  197.945640][ T4023]  __should_failslab+0xa4/0xe0
[  197.950242][ T4023]  should_failslab+0x9/0x20
[  197.954579][ T4023]  slab_pre_alloc_hook+0x37/0xd0
[  197.959354][ T4023]  __kmalloc+0x6d/0x270
[  197.963346][ T4023]  ? do_sys_poll+0x2d6/0x12e0
[  197.967860][ T4023]  do_sys_poll+0x2d6/0x12e0
[  197.972199][ T4023]  ? stack_trace_save+0x113/0x1c0
[  197.977058][ T4023]  ? stack_trace_snprint+0xf0/0xf0
[  197.982034][ T4023]  ? poll_select_finish+0x7b0/0x7b0
[  197.987040][ T4023]  ? kmem_cache_free+0x116/0x2e0
[  197.991822][ T4023]  ? proc_fail_nth_read+0x210/0x210
[  197.996846][ T4023]  ? fsnotify_perm+0x6a/0x5b0
[  198.001370][ T4023]  ? sigprocmask+0x280/0x280
[  198.005790][ T4023]  __se_sys_ppoll+0x29c/0x330
[  198.010303][ T4023]  ? __x64_sys_ppoll+0xd0/0xd0
[  198.014902][ T4023]  ? __ia32_sys_read+0x90/0x90
[  198.019501][ T4023]  ? debug_smp_processor_id+0x17/0x20
[  198.024709][ T4023]  __x64_sys_ppoll+0xbf/0xd0
[  198.029136][ T4023]  x64_sys_call+0x721/0x9a0
[  198.033475][ T4023]  do_syscall_64+0x3b/0xb0
[  198.037727][ T4023]  ? clear_bhb_loop+0x35/0x90
[  198.042239][ T4023]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  198.047982][ T4023] RIP: 0033:0x7f92f9a11ff9
[  198.052223][ T4023] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  198.071751][ T4023] RSP: 002b:00007f92f868b038 EFLAGS: 00000246 ORIG_RAX: 000000000000010f
[  198.080040][ T4023] RAX: ffffffffffffffda RBX: 00007f92f9bc9f80 RCX: 00007f92f9a11ff9
[  198.087812][ T4023] RDX: 0000000020000300 RSI: 0000000000000025 RDI: 0000000020000d40
[  198.095629][ T4023] RBP: 00007f92f868b090 R08: 0000000000000000 R09: 0000000000000000
[  198.103431][ T4023] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  198.111243][ T4023] R13: 0000000000000000 R14: 00007f92f9bc9f80 R15: 00007fffadc0baf8
[  198.119074][ T4023]  </TASK>
[  198.325679][ T4025] EXT4-fs (loop2): orphan cleanup on readonly fs
[  198.347561][ T4025] EXT4-fs error (device loop2): ext4_ext_check_inode:501: inode #4: comm syz.2.875: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 2048(2048)
[  198.364294][ T4030] loop4: detected capacity change from 0 to 128
[  198.366158][ T4025] EXT4-fs error (device loop2): ext4_quota_enable:6381: comm syz.2.875: Bad quota inode: 4, type: 1
[  198.382481][ T4025] EXT4-fs warning (device loop2): ext4_enable_quotas:6422: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  198.397135][ T4025] EXT4-fs (loop2): Cannot turn on quotas: error -117
[  198.403550][ T4025] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  198.530708][ T4034] device pim6reg1 entered promiscuous mode
[  199.265446][ T4045] bridge0: port 2(bridge_slave_1) entered disabled state
[  199.272584][ T4045] bridge0: port 2(bridge_slave_1) entered blocking state
[  199.279440][ T4045] bridge0: port 2(bridge_slave_1) entered forwarding state
[  199.378470][ T4049] bridge0: port 2(bridge_slave_1) entered disabled state
[  199.385600][ T4049] bridge0: port 2(bridge_slave_1) entered blocking state
[  199.392456][ T4049] bridge0: port 2(bridge_slave_1) entered forwarding state
[  200.265938][ T4067] loop2: detected capacity change from 0 to 512
[  200.295238][ T4067] EXT4-fs (loop2): orphan cleanup on readonly fs
[  200.303853][ T4067] EXT4-fs error (device loop2): ext4_ext_check_inode:501: inode #4: comm syz.2.889: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 2048(2048)
[  200.325532][ T4067] EXT4-fs error (device loop2): ext4_quota_enable:6381: comm syz.2.889: Bad quota inode: 4, type: 1
[  200.336696][ T4067] EXT4-fs warning (device loop2): ext4_enable_quotas:6422: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  200.351363][ T4067] EXT4-fs (loop2): Cannot turn on quotas: error -117
[  200.357989][ T4067] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  201.333958][   T30] kauditd_printk_skb: 30 callbacks suppressed
[  201.333975][   T30] audit: type=1400 audit(1728276001.869:1243): avc:  denied  { ioctl } for  pid=4085 comm="syz.2.894" path="socket:[35224]" dev="sockfs" ino=35224 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
SYZFAIL: ShmemBuilder: too large output offset
size=1953724787 consumed=1969188197 (errno 11: Resource temporarily unavailable)
[  201.862492][ T4081] loop4: detected capacity change from 0 to 40427
[  202.817403][  T312] device bridge_slave_1 left promiscuous mode
[  202.823319][  T312] bridge0: port 2(bridge_slave_1) entered disabled state
[  202.830686][  T312] device bridge_slave_0 left promiscuous mode
[  202.836594][  T312] bridge0: port 1(bridge_slave_0) entered disabled state
[  202.844226][  T312] device veth1_macvtap left promiscuous mode
[  202.850045][  T312] device veth0_vlan left promiscuous mode
[  203.398195][  T312] tipc: Disabling bearer <udp:sy>
[  203.403200][  T312] tipc: Left network mode
[  204.497502][  T312] device bridge_slave_1 left promiscuous mode
[  204.503420][  T312] bridge0: port 2(bridge_slave_1) entered disabled state
[  204.510752][  T312] device bridge_slave_0 left promiscuous mode
[  204.516658][  T312] bridge0: port 1(bridge_slave_0) entered disabled state
[  204.524487][  T312] device bridge_slave_1 left promiscuous mode
[  204.530431][  T312] bridge0: port 2(bridge_slave_1) entered disabled state
[  204.537732][  T312] bridge0: port 1(bridge_slave_0) entered disabled state
[  204.545263][  T312] device bridge_slave_1 left promiscuous mode
[  204.551247][  T312] bridge0: port 2(bridge_slave_1) entered disabled state
[  204.558481][  T312] device bridge_slave_0 left promiscuous mode
[  204.564377][  T312] bridge0: port 1(bridge_slave_0) entered disabled state
[  204.572578][  T312] device veth1_macvtap left promiscuous mode
[  204.578398][  T312] device veth0_vlan left promiscuous mode
[  204.584195][  T312] device veth1_macvtap left promiscuous mode
[  204.590043][  T312] device veth0_vlan left promiscuous mode
[  204.595836][  T312] device veth1_macvtap left promiscuous mode
[  204.601751][  T312] device veth0_vlan left promiscuous mode