last executing test programs:

2m51.07260939s ago: executing program 32 (id=266):
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x240, 0x9b99}, 0x9, [0x6, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x5, 0x25cd, 0x1, 0xa4, 0x6, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x8, 0x9, 0xd, 0x4, 0x12a3, 0x6, 0x1, 0x2, 0x4, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x4, 0x0, 0x91, 0x4, 0x4, 0x7, 0x2, 0x5, 0x400, 0x7ff7, 0x5, 0xa7, 0x7, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x3, 0x1, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x6], [0x9, 0x3, 0x6, 0x5f, 0x4, 0xc66, 0xa8a9, 0x73, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x9, 0x4, 0xa, 0x1000, 0x0, 0x200b398, 0x400000, 0x0, 0x2, 0x1c, 0x7, 0x1, 0x2, 0x54f5bad8, 0x8, 0xfffffffd, 0x400, 0xffff58b9, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00040, 0x5, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x762, 0x1cb, 0x400, 0x4, 0x6, 0x438, 0x2, 0x9, 0x95, 0xfffff50f, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0x2, 0x1, 0xffff, 0x3, 0x2, 0x2e6bf783, 0x80000001, 0xb, 0x5, 0x491, 0x8d3, 0x6, 0x8, 0x3ff, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x7, 0x5, 0x8000003, 0x5, 0x9, 0x0, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x100006, 0x8000, 0x400, 0x3e55, 0xff, 0xd3, 0x8, 0x3437, 0x3, 0x9, 0xfd, 0x401, 0x101, 0xdd80, 0x60a2, 0x17fc, 0x9d26, 0x0, 0x8, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x4, 0x10000, 0x1, 0x8, 0x1], [0xa772, 0x1, 0x5, 0x1afa, 0xbfc, 0x8, 0x7c81, 0x7f, 0x56, 0x40, 0xff, 0x5, 0x7fffffff, 0x80000001, 0xe, 0x9, 0x81, 0x3, 0x9d86, 0xd, 0xfffffff7, 0x8, 0x40f1, 0x2, 0x3, 0x6, 0x80000001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x624dfaee, 0xc, 0x7f, 0x1000, 0x1ff, 0x2000003, 0xffffffff, 0x10000, 0x0, 0x8001, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x1, 0x8, 0x13ffd, 0x1, 0x1b18]}, 0x45c)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000880)={0x0, 0x0, @pic={0x2a, 0xc0, 0x7, 0x6, 0xfb, 0x2, 0xf, 0x4, 0x3, 0x0, 0x3, 0x58, 0x9e, 0x6, 0x6, 0x7f}})
sendmsg$NFT_MSG_GETGEN(r3, 0x0, 0x2000c000)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x180, 0x4, 0x14, 0xf1, 0x0, 0x7fffffffffffe, 0x7, 0x5, 0x3, 0xfffffffffffffffe, 0x45, 0x4, 0xbdb], 0x1, 0x1c4213})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r5 = dup(r4)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

2m9.422019835s ago: executing program 2 (id=748):
syz_emit_ethernet(0x0, 0x0, 0x0)
syz_emit_ethernet(0x5a, &(0x7f00000007c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000025000086dd6000000000022b00fe8000000000000000000000000000aafe8000000000000000000000000000aa2c"], 0x0)

2m9.286959009s ago: executing program 2 (id=751):
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000280)='./bus\x00', 0x1200840, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x3, 0x37c, &(0x7f0000000ec0)="$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")
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)

2m9.040606443s ago: executing program 2 (id=754):
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000500)={[{@barrier}, {@nodioread_nolock}, {@noquota}, {@delalloc}, {@auto_da_alloc}, {@nodioread_nolock}]}, 0x1, 0x599, &(0x7f0000001280)="$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")
syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff)
syz_usb_connect$hid(0x2, 0x0, 0x0, 0x0)
quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f00000002c0)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000000)='.\x00')

2m8.329046063s ago: executing program 2 (id=765):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000000)={[{@discard}, {@data_err_ignore}]}, 0xfe, 0x55b, &(0x7f0000000980)="$eJzs3c9vFFUcAPDvbFt+FaUkhKgH04SDGGRLW39g4gGPRokkesdNOzSkW5Z0t4RWEuEgFy+GmBgjifEP8O6R+A/4V5AoCTGk0YOXNbOdhaXdH6UsdGU/n2TgvXmzvHkz8328t283G8DQmsz+KES8GhHfJhGHWspGIy+c3Dhu/cG1uWxLol7/7K8kknxf8/gk/3s8z7wSEb99HXGisLXe6uraYqlcTpfz/FRt6fJUdXXt5MWl0kK6kF6amZ09/c7szPvvvbv1xXt31tY3z/3zw6d3Pjr9zbH173+5d/hWEmfiYF7W2o6ncL01MxmT+TUZizObDpzuQ2WDJNntE2BHRvI4H4usDzgUI3nUAy++ryKiDgypRPzDkGqOA5pz+67z4PqLN8u7/+HGBGhr+5ON90ZiX2NudGA9eWxmlF2JiT7Un9Xx65+3b2Vb9O99CICert+IiFOjo4/1fy9HS/+3c6e2cczmOvR/8PzcycY/b+1tM/4pPBz/RJvxz3ib2N2J3vFfuNeHajrKxn8ftB3/Ply0mhjJcy81xnxjyYWL5TTr27Ju8niM7c3y3dZzTq/frXcqax3/ZVtWf3MsmJ/HvdFN613zpVrpadrc6v6NiNd6jH+TNvc/ux7ntlnH0fT2653Kerf/2ar/HPFG2/v/aK6TdF+fnGo8D1PNp2Krv28e/b1T/bvd/uz+H+je/omkdb22+uR1/LTv37RT2WSSL5o+4fO/J/m8kd6T77taqtWWpyP2JJ9s3T/z6LXNfPP4rP3Hj7WP/27P//6I+GKb7b955GbHQwfh/s8/0f3vkKgnHYvufvzlj53q317/93YjdTzfs53+r8uZPpZ4mmsHAAAAAAAAg6YQEQcjKRQfpguFYnHj8x1H4kChXKnWTlyorFyaj8Z3ZSdirNBc6R5v+TzEdP552GZ+ZlN+NiIOR8R3I/sb+eJcpTy/240HAAAAAAAAAAAAAAAAAACAATHe4fv/mT9GdvvsgGfOT37D8OoZ//34pSdgIPn/H4aX+IfhJf5heIl/GF7iH4aX+IfhJf5heIl/AAAAAAAAAAAAAAAAAAAAAAAAAAAA6KtzZ89mW339wbW5LD9/ZXVlsXLl5HxaXSwurcwV5yrLl4sLlcpCOS3OVZZ6/XvlSuXy9EysXJ2qpUltqrq6dn6psnKpdv7iUmkhPZ+OPZdWAQAAAAAAAAAAAAAAAAAAwP9LdXVtsVQup8sSEjtKjA7GaUj0ObHbPRMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPPJfAAAA//9j0zaD")
creat(&(0x7f0000000040)='./bus\x00', 0x0)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000180)='./bus\x00', 0x0, 0x63d014, 0x0)
r0 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2, 0x28011, r0, 0x0)
mount$fuse(0x0, 0x0, &(0x7f0000000800), 0x80000, 0x0)
creat(&(0x7f00000001c0)='./file0/file0\x00', 0x1)

2m7.658835109s ago: executing program 2 (id=772):
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x240, 0x9b99}, 0x9, [0x6, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x5, 0x25cd, 0x1, 0xa4, 0x6, 0xa2b9, 0x6, 0x7, 0xe4, 0x9, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x8, 0x9, 0xd, 0x2, 0xffff, 0x6, 0x1, 0x2, 0x4, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x4, 0x0, 0x91, 0x4, 0x4, 0x7, 0x2, 0x5, 0x400, 0x7fff, 0x5, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x3, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x6], [0x9, 0x3, 0x6, 0x5f, 0x4, 0xc66, 0xa8a9, 0x73, 0x8e, 0x10001, 0x7, 0x5, 0x2, 0x9, 0x4, 0x5, 0x1000, 0x0, 0x200b398, 0x400000, 0x0, 0x2, 0x1c, 0x7, 0x1, 0x2, 0x54f5bad8, 0x8, 0xfffffffd, 0x400, 0xffff58b9, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00000, 0x5, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x762, 0x1cb, 0x1, 0x4, 0x6, 0x438, 0x2, 0x9, 0x95, 0x8000, 0x5, 0xfffffff9, 0x200004, 0x1000, 0xfbfff801, 0x5], [0x2, 0x1, 0xffff, 0x3, 0x2, 0x2e6bf783, 0x80000001, 0xb, 0x5, 0x491, 0x8d3, 0x6, 0x8, 0x3ff, 0x2, 0x400, 0x40, 0x6, 0xee4b, 0x7, 0x5, 0x0, 0x5, 0x9, 0x0, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x100006, 0x8000, 0x400, 0x3e55, 0xff, 0xd3, 0x7, 0x3435, 0x3, 0x9, 0xfd, 0x401, 0x101, 0xdd80, 0x60a2, 0x17fc, 0x9d26, 0x5, 0x8, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0xfffffffc, 0x10000, 0x1, 0x8, 0x1], [0xa772, 0x1, 0x5, 0x1afa, 0xbfc, 0x8, 0x7c81, 0x7f, 0x56, 0x40, 0xff, 0x5, 0x7fffffff, 0x7, 0xe, 0x9, 0x81, 0x3, 0x9d86, 0xd, 0xfffffff5, 0x8, 0x40f1, 0x2, 0x3, 0x6, 0x80000001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x624dfaee, 0xc, 0x7f, 0x1000, 0x1ff, 0x2000005, 0xffffffff, 0x10000, 0x0, 0x8001, 0x7fff, 0x1000, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x1, 0x8, 0x13ffd, 0x1, 0x1b18]}, 0x45c)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3801000010000100feffff"], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=@newsa={0x140, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in=@multicast1, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x71c, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@broadcast, {0x0, 0x192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffa, 0x3fc}, 0x80, 0x3500, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @XFRMA_SET_MARK={0x8, 0x1d, 0xfffffeff}]}, 0x140}}, 0x844)
r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000880)={0x0, 0x0, @pic={0x2a, 0xc0, 0x7, 0x6, 0xfb, 0x2, 0xf, 0x4, 0x3, 0x0, 0x3, 0x58, 0x9e, 0x6, 0x6, 0x7f}})
ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000180)=0x3)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x180, 0x4, 0x14, 0xf1, 0x0, 0x7fffffffffffe, 0x5, 0x5, 0x6, 0x0, 0x45, 0x4, 0xbdb], 0x1, 0x1c4213})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r5 = dup(r4)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

2m7.195088174s ago: executing program 2 (id=780):
ioctl$INCFS_IOC_CREATE_FILE(0xffffffffffffffff, 0xc058671e, &(0x7f00000002c0)={{}, {0x10e3a63f}, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
socket$packet(0x11, 0x3, 0x300)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0))
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
sendmmsg$inet(r0, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000540)="7ddb889a", 0xfffffcda}], 0x1}}], 0x1, 0x20000054)
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="680000000002010400000000000000000a00fffd040001802c00038014000180080001000000000008000200ac1414241400018008000100ac14140a08000200ac14141e180002800c0002800500010006"], 0x68}, 0x1, 0x0, 0x0, 0x448c4}, 0x0)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)

2m7.001421683s ago: executing program 33 (id=780):
ioctl$INCFS_IOC_CREATE_FILE(0xffffffffffffffff, 0xc058671e, &(0x7f00000002c0)={{}, {0x10e3a63f}, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
socket$packet(0x11, 0x3, 0x300)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0))
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
sendmmsg$inet(r0, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000540)="7ddb889a", 0xfffffcda}], 0x1}}], 0x1, 0x20000054)
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="680000000002010400000000000000000a00fffd040001802c00038014000180080001000000000008000200ac1414241400018008000100ac14140a08000200ac14141e180002800c0002800500010006"], 0x68}, 0x1, 0x0, 0x0, 0x448c4}, 0x0)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)

1m40.092198855s ago: executing program 6 (id=1071):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file2\x00', 0x10050, &(0x7f00000007c0)={[{@jqfmt_vfsv1}, {@nodioread_nolock}, {@jqfmt_vfsv0}, {@norecovery}, {@nogrpid}, {@dioread_lock}]}, 0x3, 0x546, &(0x7f0000000180)="$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")
readlink(&(0x7f0000000780)='./file2\x00', &(0x7f0000000880)=""/231, 0xe7)

1m39.525550761s ago: executing program 6 (id=1076):
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x85, 0x4f, 0xbe, 0x10, 0x50d, 0x2102, 0x70d0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x1d, 0x0, 0x2, 0xff, 0xff, 0xff, 0x0, [], [{{0x9, 0x5, 0xa, 0x2, 0x10, 0x0, 0xfa}}, {{0x9, 0x5, 0x82, 0x2, 0x450}}]}}]}}]}}, 0x0)
r1 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, 0x0, 0x0)
recvmmsg(r1, 0x0, 0x0, 0x12141, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000c00)={0x84, &(0x7f0000000740)=ANY=[@ANYBLOB="399e32e574f3a2"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000006c0)={0x44, &(0x7f0000000a00)={0x40, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000005c0)={0x44, &(0x7f0000000300)={0x40, 0x6, 0x1, "80"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000540)={0x2c, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x40, 0x5, 0x2, "c340"}})

1m39.349925558s ago: executing program 4 (id=1084):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0)
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0x4})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0})
r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
read$FUSE(r4, &(0x7f00000034c0)={0x2020}, 0xcac)

1m39.349676039s ago: executing program 4 (id=1085):
creat(0x0, 0x80166a87e08db6a7)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(r1, 0x1, 0x0)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000300)={0x18, r4, 0x301, 0x0, 0x0, {0x1c}, [@HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20040005}, 0x40040)

1m38.359782196s ago: executing program 4 (id=1094):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', <r2=>0x0})
ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000800)={@remote, @private2, @private0, 0x1, 0x6, 0x0, 0x100, 0x6, 0x180107, r2})

1m38.359373766s ago: executing program 4 (id=1095):
r0 = socket$inet6(0xa, 0x2, 0x3a)
sendto$inet6(r0, &(0x7f00000000c0)="800064de269bb73c", 0x8, 0x4c880, &(0x7f0000000040)={0xa, 0x4e22, 0x80cd, @remote}, 0x1c)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000000)={[{@discard}, {@data_err_ignore}]}, 0xfe, 0x55b, &(0x7f0000000980)="$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")
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15)
r3 = dup(r2)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3])
write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x4}}, 0x18)
write$FUSE_DIRENTPLUS(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="b0"], 0xb0)
write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2])
chdir(&(0x7f0000000000)='./file0\x00')
mount$incfs(0x0, &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0, 0x0)
rmdir(&(0x7f0000000100)='./file1\x00')
socket$unix(0x1, 0x2, 0x0)

1m38.150888227s ago: executing program 4 (id=1101):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000d00)={0x1, 0x0, [{0xc001102a, 0x0, 0x6}]})

1m37.867153405s ago: executing program 4 (id=1103):
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
personality(0x4000000)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0)
r2 = openat$cgroup_type(r1, &(0x7f0000000300), 0x2, 0x0)
write$cgroup_type(r2, &(0x7f0000000280), 0x9)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000c40), 0x12)

1m37.671296924s ago: executing program 34 (id=1103):
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
personality(0x4000000)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0)
r2 = openat$cgroup_type(r1, &(0x7f0000000300), 0x2, 0x0)
write$cgroup_type(r2, &(0x7f0000000280), 0x9)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000c40), 0x12)

1m36.459428713s ago: executing program 6 (id=1120):
pipe2$9p(&(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_DIRENTPLUS(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="b0"], 0xb0)
write$FUSE_INIT(r2, &(0x7f00000001c0)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x4, 0x800000, 0x4, 0x400, 0x5, 0x1, 0x0, 0x0, 0x1, 0x74}}, 0x50)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2])
r3 = open$dir(&(0x7f0000000340)='./file0\x00', 0x8100, 0x7c)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000440)='kmem_cache_free\x00', r4}, 0x18)
setxattr$trusted_overlay_redirect(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), 0x0, 0x0, 0x1)
getdents64(r3, 0x0, 0x0)

1m36.425103827s ago: executing program 6 (id=1121):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000200)='.\x00', &(0x7f00000004c0)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000009c0), 0x8, 0x0)
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
umount2(&(0x7f0000000040)='.\x00', 0x2)

1m36.424552907s ago: executing program 6 (id=1122):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)={0x1})
ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5, 0x83}, {}, {0xeda7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}]})

1m36.352419164s ago: executing program 6 (id=1124):
r0 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x810, &(0x7f00000002c0), 0x0, 0x236, &(0x7f0000000300)="$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")
ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f0000000580)={@desc={0x1, 0x0, @auto="3ae118327c9db99b"}, 0x40, 0x0, '\x00', @a})
r1 = openat(0xffffffffffffff9c, &(0x7f0000000540)='mnt\x00', 0x0, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0xc0506617, &(0x7f0000000580)={@id={0x2, 0x0, @a}, 0x40, 0x0, '\x00', @a})

1m36.351114254s ago: executing program 35 (id=1124):
r0 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x810, &(0x7f00000002c0), 0x0, 0x236, &(0x7f0000000300)="$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")
ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f0000000580)={@desc={0x1, 0x0, @auto="3ae118327c9db99b"}, 0x40, 0x0, '\x00', @a})
r1 = openat(0xffffffffffffff9c, &(0x7f0000000540)='mnt\x00', 0x0, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0xc0506617, &(0x7f0000000580)={@id={0x2, 0x0, @a}, 0x40, 0x0, '\x00', @a})

1m36.012293007s ago: executing program 5 (id=1128):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4)
bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
syz_emit_ethernet(0xbe, &(0x7f0000000400)={@local, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x2, 0x0, 0xa5, 0x11, 0x0, @empty, @empty}, {0x4e21, 0x4e20, 0x4d, 0x0, @wg=@initiation={0x1, 0x3, "c54bfe6bddb0a35b8f1fcd3d0418dc12b949b7e5560635b5bf39b5152819a973", "88e8514f8160134e4b86cd3e9853ff8bb2024c88c1a600b7f9a70565e32cf58050038d629eb196dcd2c40d3753d18268", "577bf699b4ac2010bd21ec5099fc45596d43ee96eace82320cc38da0", {"2897c63fce331822b0bbca5143bfb766", "4f4c76b74a261703c827481abff75b19"}}}}}}}, 0x0)

1m36.011562217s ago: executing program 5 (id=1129):
r0 = socket$inet6(0xa, 0x3, 0x1)
inotify_rm_watch(0xffffffffffffffff, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000480)={'wlan0\x00', <r3=>0x0})
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r3, @ANYBLOB="08002600901500000800570080"], 0x2c}}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[], 0x2c}}, 0x0)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000003540)={'wlan0\x00', <r7=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000003740)={0x0, 0x0, &(0x7f0000003700)={&(0x7f0000000a40)={0x58, r6, 0x1, 0x470bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_FRAME={0x2a, 0x33, @assoc_req={{{0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x6}, @device_a, @device_a, @initial, {0x2, 0xfff}}, 0x600, 0x8b1, {0x0, 0x6, @default_ibss_ssid}, @val, @void}}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x980}], @NL80211_ATTR_CSA_C_OFFSETS_TX={0x4}]}, 0x58}, 0x1, 0x0, 0x0, 0x20040040}, 0x8800)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
r8 = socket(0x10, 0x3, 0x0)
fsopen(&(0x7f00000003c0)='virtiofs\x00', 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'lo\x00', <r10=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x64, 0x24, 0xd0f, 0x70bd30, 0x25dfdbfb, {0x60, 0x0, 0x0, r10, {0x0, 0xa}, {0xffff, 0xffff}, {0x7, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x38, 0x2, [@TCA_TBF_RATE64={0xc, 0x4, 0x435f1299b2984e5a}, @TCA_TBF_PARMS={0x28, 0x1, {{0x7, 0x1, 0x1, 0x8, 0x1, 0x6}, {0x5, 0x0, 0x8001, 0x8, 0x7}, 0x4, 0x9, 0xd38}}]}}]}, 0x64}}, 0x44080)
open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)

1m35.946848634s ago: executing program 5 (id=1131):
pipe2$9p(&(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe)
write$FUSE_INIT(r2, &(0x7f00000001c0)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x4, 0x800000, 0x4, 0x400, 0x5, 0x1, 0x0, 0x0, 0x1, 0x74}}, 0x50)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2])
r3 = open$dir(&(0x7f0000000340)='./file0\x00', 0x8100, 0x7c)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000440)='kmem_cache_free\x00', r4}, 0x18)
setxattr$trusted_overlay_redirect(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), 0x0, 0x0, 0x1)
getdents64(r3, 0x0, 0x0)

1m35.734402885s ago: executing program 5 (id=1133):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000200)='.\x00', &(0x7f00000004c0)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000009c0), 0x8, 0x0)
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
umount2(&(0x7f0000000040)='.\x00', 0x2)

1m35.671126901s ago: executing program 5 (id=1136):
r0 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b2", 0xf, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_FDB={0x4}]}, 0x1c}}, 0x0)

1m35.37609204s ago: executing program 5 (id=1141):
sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4044020}, 0x4000000)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x240, 0x9b99}, 0x9, [0x6, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x5, 0x25cd, 0x1, 0xa4, 0x6, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x8, 0x9, 0xd, 0x4, 0x12a3, 0x6, 0x1, 0x2, 0x4, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x4, 0x0, 0x91, 0x4, 0x4, 0x7, 0x2, 0x5, 0x400, 0x7ff7, 0x5, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x3, 0x1, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x6], [0x9, 0x3, 0x6, 0x5f, 0x4, 0xc66, 0xa8a9, 0x73, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x9, 0x4, 0xa, 0x1000, 0x0, 0x200b398, 0x400000, 0x0, 0x2, 0x1c, 0x7, 0x1, 0x2, 0x54f5bad8, 0x8, 0xfffffffd, 0x400, 0xffff58b9, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00040, 0x5, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x762, 0x1cb, 0x1, 0x4, 0x6, 0x438, 0x2, 0x9, 0x95, 0xfffff50f, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0x2, 0x1, 0xffff, 0x3, 0x2, 0x2e6bf783, 0x80000001, 0xb, 0x5, 0x491, 0x8d3, 0x6, 0x8, 0x3ff, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x7, 0x5, 0x8000003, 0x5, 0x9, 0x0, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x100006, 0x8000, 0x400, 0x3e55, 0xff, 0xd3, 0x8, 0x3437, 0x3, 0x9, 0xfd, 0x401, 0x101, 0xdd80, 0x60a2, 0x17fc, 0x9d26, 0x0, 0x8, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x4, 0x10000, 0x1, 0x8, 0x1], [0xa772, 0x1, 0x5, 0x1afa, 0xbfc, 0x8, 0x7c81, 0x7f, 0x56, 0x40, 0xff, 0x5, 0x7fffffff, 0x7, 0xe, 0x9, 0x81, 0x3, 0x9d86, 0xd, 0xfffffff7, 0x8, 0x40f1, 0x2, 0x3, 0x6, 0x80000001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x624dfaee, 0xc, 0x7f, 0x1000, 0x1ff, 0x2000003, 0xffffffff, 0x10000, 0x0, 0x8001, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x1, 0x8, 0x13ffd, 0x1, 0x1b18]}, 0x45c)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0)
sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="34000000150a03000000000000000000020000000900020073797a310000000008000340"], 0x34}}, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000880)={0x0, 0x0, @pic={0x2a, 0xc0, 0x7, 0x6, 0xfb, 0x2, 0xf, 0x4, 0x3, 0x0, 0x3, 0x58, 0x9e, 0x6, 0x6, 0x7f}})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x180, 0x4, 0x14, 0xf1, 0x0, 0x7fffffffffffe, 0x7, 0x5, 0x3, 0xfffffffffffffffe, 0x45, 0x4, 0xbdb], 0x1, 0x1c4213})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r5 = dup(r4)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

1m35.319311186s ago: executing program 36 (id=1141):
sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4044020}, 0x4000000)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x240, 0x9b99}, 0x9, [0x6, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x5, 0x25cd, 0x1, 0xa4, 0x6, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x8, 0x9, 0xd, 0x4, 0x12a3, 0x6, 0x1, 0x2, 0x4, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x4, 0x0, 0x91, 0x4, 0x4, 0x7, 0x2, 0x5, 0x400, 0x7ff7, 0x5, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x3, 0x1, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x6], [0x9, 0x3, 0x6, 0x5f, 0x4, 0xc66, 0xa8a9, 0x73, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x9, 0x4, 0xa, 0x1000, 0x0, 0x200b398, 0x400000, 0x0, 0x2, 0x1c, 0x7, 0x1, 0x2, 0x54f5bad8, 0x8, 0xfffffffd, 0x400, 0xffff58b9, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00040, 0x5, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x762, 0x1cb, 0x1, 0x4, 0x6, 0x438, 0x2, 0x9, 0x95, 0xfffff50f, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0x2, 0x1, 0xffff, 0x3, 0x2, 0x2e6bf783, 0x80000001, 0xb, 0x5, 0x491, 0x8d3, 0x6, 0x8, 0x3ff, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x7, 0x5, 0x8000003, 0x5, 0x9, 0x0, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x100006, 0x8000, 0x400, 0x3e55, 0xff, 0xd3, 0x8, 0x3437, 0x3, 0x9, 0xfd, 0x401, 0x101, 0xdd80, 0x60a2, 0x17fc, 0x9d26, 0x0, 0x8, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x4, 0x10000, 0x1, 0x8, 0x1], [0xa772, 0x1, 0x5, 0x1afa, 0xbfc, 0x8, 0x7c81, 0x7f, 0x56, 0x40, 0xff, 0x5, 0x7fffffff, 0x7, 0xe, 0x9, 0x81, 0x3, 0x9d86, 0xd, 0xfffffff7, 0x8, 0x40f1, 0x2, 0x3, 0x6, 0x80000001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x624dfaee, 0xc, 0x7f, 0x1000, 0x1ff, 0x2000003, 0xffffffff, 0x10000, 0x0, 0x8001, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x1, 0x8, 0x13ffd, 0x1, 0x1b18]}, 0x45c)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0)
sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="34000000150a03000000000000000000020000000900020073797a310000000008000340"], 0x34}}, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000880)={0x0, 0x0, @pic={0x2a, 0xc0, 0x7, 0x6, 0xfb, 0x2, 0xf, 0x4, 0x3, 0x0, 0x3, 0x58, 0x9e, 0x6, 0x6, 0x7f}})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x180, 0x4, 0x14, 0xf1, 0x0, 0x7fffffffffffe, 0x7, 0x5, 0x3, 0xfffffffffffffffe, 0x45, 0x4, 0xbdb], 0x1, 0x1c4213})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r5 = dup(r4)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

1m34.46185946s ago: executing program 9 (id=1142):
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f00000000c0)={0x8604, 0x7fff}, 0x10)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6)
timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
splice(r1, 0x0, r2, 0x0, 0x7, 0x0)
mkdir(0x0, 0x108)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="1c0000001a0069ae26bd7000fffffffb1c000000fe000004000200009302a78bb11d36f180ca229b125c03a3e791c3b53a2f10a4875f7e3d4498210c2e6620d9b77ded9decfa7b43838ab7273b4a5b33e8729690d5bff981e238aca95e0a27048cdabae366d33963752cfe75ebafda5da44d0806f57e429d08e9a7777ac91b66ba77744e17e9b79b51cd5548b31585cc38d9107080b664a225fd978ea34ad356de0e0f9c0b08dfa61732f30f02dda998a0e80600958941a03b80038a8d52bd30d1d427500487bf3bbca3c05c3e21e369309e698404396cd22212cb40de192fd7a13263ea9516628ea36d045ac64e3d651cb4c332efa96c19ac9ed8544c8ddc2f91222c8d708481ab0aaf34df29a59102c874a0c3e01759f917cae99d4ff852c0f2472be882f171688a779824"], 0x1c}, 0x1, 0x0, 0x0, 0x20040085}, 0x50)

1m30.864421915s ago: executing program 9 (id=1163):
syz_mount_image$vfat(&(0x7f0000000140), &(0x7f00000001c0)='./file0\x00', 0x2048c5, &(0x7f0000000400)={[{@shortname_win95}, {@shortname_winnt}, {@utf8}, {@fat=@dos1xfloppy}, {@uni_xlate}, {@uni_xlateno}, {@shortname_mixed}, {@fat=@discard}, {@fat=@nocase}, {@utf8}, {@iocharset={'iocharset', 0x3d, 'ascii'}}, {@utf8}, {}]}, 0x0, 0x2a1, &(0x7f0000000840)="$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")
r0 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00')
mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1333c06, 0x0)
mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x11080, 0x0)
mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0)
read$FUSE(r0, &(0x7f0000004d80)={0x2020}, 0x2020)

1m30.752846106s ago: executing program 9 (id=1168):
r0 = socket(0x10, 0x803, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0)
getsockname$packet(r0, &(0x7f0000000000)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r2, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x9}}}, 0x24}}, 0x0)

1m30.455239115s ago: executing program 9 (id=1171):
syz_clone(0xe200, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000340)='./file0\x00', 0x2000092, &(0x7f0000000040)=ANY=[@ANYBLOB="73686f72746e616d653d77696e39352c757466383d312c7379735f696d6d757461626c652c00cf42aea85a8b32bd1e1ef954747483e9"], 0x1, 0x31b, &(0x7f0000000a00)="$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")
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000240)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2b1245d, 0x0, 0xfc, 0x0, &(0x7f00000000c0))

1m30.40481133s ago: executing program 37 (id=1171):
syz_clone(0xe200, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000340)='./file0\x00', 0x2000092, &(0x7f0000000040)=ANY=[@ANYBLOB="73686f72746e616d653d77696e39352c757466383d312c7379735f696d6d757461626c652c00cf42aea85a8b32bd1e1ef954747483e9"], 0x1, 0x31b, &(0x7f0000000a00)="$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")
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000240)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2b1245d, 0x0, 0xfc, 0x0, &(0x7f00000000c0))

3.395701155s ago: executing program 1 (id=2420):
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50)
fsopen(&(0x7f0000000200)='pipefs\x00', 0x1)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10)
socket$packet(0x11, 0x3, 0x300)
syz_open_dev$tty1(0xc, 0x4, 0x1)
r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
r3 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x12, r3, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[], 0x50)
io_submit(0x0, 0x2, &(0x7f0000001500)=[&(0x7f0000000040)={0x1802, 0x0, 0x0, 0x6, 0x8001, r3, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x2}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x9, r1, 0x0, 0x0, 0x8000}])
write$selinux_load(r2, &(0x7f0000000000)=ANY=[], 0x2000)

3.304105344s ago: executing program 1 (id=2422):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x8604, 0x7fff}, 0x10)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6)
timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
splice(r2, 0x0, r3, 0x0, 0x7, 0x0)
mkdir(0x0, 0x108)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x20040085}, 0x50)

2.645947859s ago: executing program 8 (id=2433):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0}, 0x0, &(0x7f0000000380)}, 0x20)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$inet(r2, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0)

2.574296676s ago: executing program 8 (id=2437):
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x3000000, &(0x7f0000000080), 0x1, 0x533, &(0x7f0000000b00)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b0000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xa, &(0x7f00000002c0)=ANY=[@ANYBLOB="1832000002000000000000000000006e7f33d2ffffffffff69d68000ffffffff85100000feffffff18500000050000000000000000000000974bf8ff000000001840000001000000000000000003e700"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000300)="303e3002a0001f14000000d190c937dc6914243b0402d6dcb70ad80851956fe6727ae888746b02cee670a5882a0ad79716584e6b04b7f62edac751", 0x3b, 0xfffffffffffffffc)
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
sched_setaffinity(r0, 0x8, &(0x7f0000000340)=0x2)
r4 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000040)=@ethtool_gstrings={0x1b, 0x1}})
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000380)=ANY=[@ANYBLOB="0500000000000000bf090000000000008000000000000000b90a0000000000000300000000000000e90b"])
fcntl$getownex(0xffffffffffffffff, 0x10, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, 0x0, 0x0)
ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0xc020662a, &(0x7f0000000000)={0x5, 0x80000000003, 0x3, 0x7fffffff})

1.885895764s ago: executing program 1 (id=2442):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x104, 0xc}, 0x50)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="17000000000000000084000001"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2, <r3=>0xffffffffffffffff}, 0x0, &(0x7f0000000040)}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000340)={r3, 0x0, &(0x7f0000002240)=""/4097}, 0x20)

1.863815215s ago: executing program 1 (id=2443):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800001f1a0068099b3c0000000000001860000000000000824d086bb227733218120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000001800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xa5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa10000000000000701"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x49)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="17000000000000000084000001"], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1, <r2=>0xffffffffffffffff}, 0x0, &(0x7f0000000040)}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r2, 0x0, &(0x7f0000001780)=""/4096}, 0x20)

1.842930058s ago: executing program 1 (id=2444):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x2, 0x4, 0x4, 0x84a}, 0x50)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xd, 0x7, 0x4, 0x1, 0x0, r0}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r1}, &(0x7f0000000840), &(0x7f0000000880)=r0}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000e80)={r1, &(0x7f0000000d40), 0x0}, 0x20)

1.81709861s ago: executing program 1 (id=2445):
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
personality(0x4000000)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0)
r1 = openat$cgroup_type(r0, &(0x7f0000000300), 0x2, 0x0)
write$cgroup_type(r1, &(0x7f0000000280), 0x9)
r2 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0)
write$cgroup_pid(r2, &(0x7f0000000c40), 0x12)
r3 = socket$nl_route(0x10, 0x3, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
splice(r3, 0x0, r4, 0x0, 0x1, 0x5)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r6 = openat$cgroup_ro(r5, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
write$cgroup_int(r6, &(0x7f0000000200)=0x1, 0x12)

1.671692994s ago: executing program 8 (id=2449):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='hrtimer_init\x00', r0}, 0x10)
syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0)

1.635991678s ago: executing program 8 (id=2452):
syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f00000000c0)='./file2\x00', 0x0, &(0x7f0000005700)=ANY=[@ANYBLOB="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", @ANYRES64, @ANYBLOB="3a4be99f9f727e8d0262285f8311dc64a122b0328932c72b2382283dcb1539cb6d4840c2d90f6bb77b5e93c4b5", @ANYRESOCT], 0x1, 0x5530, &(0x7f000000c740)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0)
write$cgroup_int(r0, &(0x7f0000000000), 0xffffff6a)
ioctl$FIBMAP(r0, 0x1, &(0x7f0000000080))

1.633367489s ago: executing program 7 (id=2453):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x8604, 0x7fff}, 0x10)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6)
timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
splice(r2, 0x0, r3, 0x0, 0x7, 0x0)
mkdir(0x0, 0x108)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x20040085}, 0x50)

1.604922981s ago: executing program 3 (id=2454):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000004bfa200000000000007020000f8ffffffb70bfa0009000000000000000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0x5c, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='consume_skb\x00', r0}, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='consume_skb\x00', r1}, 0x10)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$tipc(r2, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10, &(0x7f0000004340)=[{&(0x7f0000001c80)="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", 0xd4e}], 0x1}, 0x24000040)

1.504948941s ago: executing program 0 (id=2455):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001c00)=@base={0xb, 0x5, 0x7, 0x9, 0x1}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0b00000007000000010001004900000001"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r2}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20)
bpf$PROG_LOAD(0x5, 0x0, 0x0)

1.504153381s ago: executing program 3 (id=2456):
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xae, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94)
close(0x3)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r0}, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r1}, 0x10)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000010c0))

1.399184332s ago: executing program 0 (id=2457):
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, 0x0)
sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), r5)
r7 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r7, 0x0)
r8 = socket$packet(0x11, 0x3, 0x300)
getsockopt$packet_int(r8, 0x107, 0x12, 0x0, &(0x7f0000000200))
sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x54, r6, 0x1, 0x709d27, 0x25dfdc03, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_PRIVATE_KEY={0x24}]}, 0x54}, 0x1, 0x0, 0x0, 0xc0048d0}, 0x24004084)
write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
openat$ptp0(0xffffffffffffff9c, 0x0, 0x0, 0x0)
splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0)

1.398829672s ago: executing program 3 (id=2458):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, 0x0, 0x0)
listen(r0, 0x5)
accept4(r0, 0x0, 0x0, 0x80800)
mknodat$loop(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x2000, 0x0)
r1 = getpid()
r2 = syz_pidfd_open(r1, 0x0)
setns(r2, 0x24020000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000200)='.\x00', &(0x7f00000004c0)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000009c0), 0x8, 0x0)
mount$bind(0x0, 0x0, 0x0, 0x101091, 0x0)
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
umount2(&(0x7f0000000040)='.\x00', 0x2)

843.353596ms ago: executing program 8 (id=2459):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000095"], &(0x7f0000000440)='GPL\x00', 0x4, 0x99, &(0x7f0000000480)=""/153}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10)
socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$tipc(r2, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
close(r1)

712.578329ms ago: executing program 8 (id=2460):
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x3000000, &(0x7f0000000080), 0x1, 0x533, &(0x7f0000000b00)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b0000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xa, &(0x7f00000002c0)=ANY=[@ANYBLOB="1832000002000000000000000000006e7f33d2ffffffffff69d68000ffffffff85100000feffffff18500000050000000000000000000000974bf8ff000000001840000001000000000000000003e700"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000300)="303e3002a0001f14000000d190c937dc6914243b0402d6dcb70ad80851956fe6727ae888746b02cee670a5882a0ad79716584e6b04b7f62edac751", 0x3b, 0xfffffffffffffffc)
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
sched_setaffinity(r0, 0x8, &(0x7f0000000340)=0x2)
r4 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000040)=@ethtool_gstrings={0x1b, 0x1}})
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000380)=ANY=[@ANYBLOB="0500000000000000bf090000000000008000000000000000b90a0000000000000300000000000000e90b"])
fcntl$getownex(0xffffffffffffffff, 0x10, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, 0x0, 0x0)
ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0xc020662a, &(0x7f0000000000)={0x5, 0x80000000003, 0x3, 0x7fffffff})

302.724599ms ago: executing program 0 (id=2461):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x2, 0x0, 0x0, 0x7, 0x8}, {0x12, 0x3, 0x0, 0x1, 0x1, 0x400}, 0xa5, 0x4, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x78, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xf}, {0xd, 0xa}, {0x6}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x7, 0x10001, 0x3, 0x0, 0x7}, 0xf0, 0x1, 0x8, 0x3, 0x88a, 0x9, 0x8e, 0x1f, 0x3, 0xff, {0x4415, 0x2, 0x800, 0x5, 0x0, 0x5}}}}]}, 0x78}}, 0x4000)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d0f65acc0d06d1a1434e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab0300817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c690220b87b20581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f756436303767d2e24f29e5dad9796edb697a8ad004eea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014751c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc518afc9ffc2cc788bee1b47683db01a2f9398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa407e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a0c93d47018c12e7ba8188a22e8b15c3e233db00002e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab188dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b4896c7aabf4df517d90bdc01e73835d50200a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987595ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e547f7ad33850d9feccd0111a2e3700845dee734fe7da3770845cf442d488afd80e17000000000000000000000000000000000000000000000000000005202000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a12489c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db08407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07af14915f29b719f54926fc32468f65bd06b4092140faed0c329be610c3082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b4c8787361f3289f86ae826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9bc7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa520000afe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da357f9e93ce055019c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff47257f164391c672b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8bc410d9f48bf7eac90529cd6af061c9e53addddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85e9bb70a3009a5d30f479e293a3302e11350ea857b37e76ca2f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f981fd9086e4000000000000646174b55d251f7f8ca5ccc22a5efb33b237eff5597a3c3a5f3a9bb54abb40e54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4445eef08401cd1a3e266db41474e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24c5efd5c8495c1ccd580033c55725f2d60354f8ad5914a0155eaa743350ddb388f486b6de0549ef3b1b3c3b7d4d3a830ff39885776119408029be3788dd8422b1ab7b4c9d5b7d8682fd759c713108e1bdfc64b9121bbf07099def5c0ce3c861ae4b5cad8bba5a0b6059b9ef90c2f96a59320309e25df89484522bb1d6eaa92164f9e4042cb689a45a898354c17b08705205a9189772bcbcb6414e44b33a2470d3bc16f761c33f565b9da5e7991ad8482579cc1b16c1fcec815a5482ae8b1779c5e339971a6ec1217bcfd1ef24284de8a0a9f068f297037d6478c2434a9a18dcc6c7c791e444a79d7ce37f9cf2826b47ad8ca6a2fa254aa02cd098026798a6d336348af0fc11fa2809a5ebbe17ca4d0f889d518f64ee50f562b5fdb1f76d4a7fe14701f8ed0c6a55d66a6efea3e449e6b478abc5b196dd5308cb20c4e2a0bd702651bb39f10523102dcd8ece692159028f314e0d6bfa400475c6699fdc40efe0948e3cef7419a7f113134e5ee20fd87c4521ccfbd32d6f147f743d30866bdd86ca8bf0c7bcc475f4ed53517aaa51f1c151d859a7f0b53abd332c84bdad313e82ac3777a6f7f649ff8a25f6dfe09cb29213896b49a825257bf143e9fa3bbd47009e66fe5705b3ef2b40a182e408c680727d64e00e1ce508f8fd64ac6c84ccc28fc333067de63b9bb5daaa12ce60ee3779ded79651be69d2a413cd948a873dd7ad7017b150828cf100d3df8537f22aff58343c9ee966fceb594bbe10b911427f76a25a219be2f85287b7f83d323a30991067ad1369792166062085ff20c5fb9f6e4f78dd09c7d2d6ca3c8a5d0d26ccbe576f44a1bc94194817"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e088641100050000210283ac141440e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r4, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c)

227.868207ms ago: executing program 0 (id=2462):
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$tipc(r1, &(0x7f00000008c0)={0x0, 0x0, 0x0}, 0x0)
sendmsg$tipc(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b9cbbefce3babab}, 0x0)
sendmsg$inet(r1, &(0x7f0000001d80)={0x0, 0x0, 0x0}, 0x48000)
syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0)
close(r0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r2}, &(0x7f0000000200), &(0x7f0000000240)}, 0x20)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10)

209.703879ms ago: executing program 7 (id=2463):
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280))
bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00', r0}, 0x10)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @random="0106002010ff"})

135.241926ms ago: executing program 7 (id=2464):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x5}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r2}, 0x18)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000180)='percpu_create_chunk\x00', r3}, 0x18)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50)

119.996157ms ago: executing program 0 (id=2465):
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[], 0x50)
fsopen(&(0x7f0000000200)='pipefs\x00', 0x1)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10)
socket$packet(0x11, 0x3, 0x300)
syz_open_dev$tty1(0xc, 0x4, 0x1)
r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
r3 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x12, r3, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[], 0x50)
io_submit(0x0, 0x2, &(0x7f0000001500)=[&(0x7f0000000040)={0x1802, 0x0, 0x0, 0x6, 0x8001, r3, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x2}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x9, r1, 0x0, 0x0, 0x8000}])
write$selinux_load(r2, &(0x7f0000000000)=ANY=[], 0x2000)

94.24491ms ago: executing program 0 (id=2466):
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
personality(0x4000000)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0)
r2 = openat$cgroup_type(r1, &(0x7f0000000300), 0x2, 0x0)
write$cgroup_type(r2, &(0x7f0000000280), 0x9)
r3 = openat$cgroup_procs(r1, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0)
write$cgroup_pid(r3, &(0x7f0000000c40), 0x12)
r4 = socket$nl_route(0x10, 0x3, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
splice(r4, 0x0, r5, 0x0, 0x1, 0x5)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r7 = openat$cgroup_ro(r6, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
write$cgroup_int(r7, &(0x7f0000000200)=0x1, 0x12)

65.262583ms ago: executing program 3 (id=2467):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x73cea2d47785b264, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000340)='console\x00', r1}, 0x18)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x7, 0x1000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1})
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r4}, 0x10)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast})

64.628173ms ago: executing program 7 (id=2468):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
close(r2)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000040)='sys_enter\x00', r3}, 0x10)
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)

10.140888ms ago: executing program 3 (id=2469):
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000007c5e0000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x5}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'pim6reg1\x00', 0x1})
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r3}, 0x10)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast})

9.739278ms ago: executing program 7 (id=2470):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000080)='task_rename\x00', r1}, 0x10)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000080)='task_rename\x00', r2}, 0x10)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r3}, &(0x7f00000004c0), &(0x7f0000000540)=r2}, 0x20)

9.177398ms ago: executing program 7 (id=2471):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000006c0)='kmem_cache_free\x00', r1}, 0x10)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$inet(r3, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000042c0)="86", 0xff0f}], 0x1}, 0x0)
recvmsg(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0)

0s ago: executing program 3 (id=2472):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001f80)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/20], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180100001100000000000000000000001812"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000300)='sys_enter\x00', r3}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x14, 0x4, 0x8, 0x8}, 0x48)

kernel console output (not intermixed with test programs):

ange from 0 to 256
[  101.423676][ T2958] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  101.435034][ T2958] exFAT-fs (loop0): Medium has reported failures. Some data may be lost.
[  101.446565][ T2958] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  101.511748][ T2960] netlink: 4 bytes leftover after parsing attributes in process `syz.0.892'.
[  101.520853][ T2960] device bridge_slave_1 left promiscuous mode
[  101.527285][ T2960] bridge0: port 2(bridge_slave_1) entered disabled state
[  101.542420][ T2960] device bridge_slave_0 left promiscuous mode
[  101.554843][ T2960] bridge0: port 1(bridge_slave_0) entered disabled state
[  101.593307][ T2965] loop6: detected capacity change from 0 to 512
[  101.654074][ T2965] EXT4-fs error (device loop6): ext4_orphan_get:1406: comm syz.6.894: couldn't read orphan inode 26 (err -116)
[  101.683290][ T2965] EXT4-fs (loop6): mounted filesystem without journal. Opts: inlinecrypt,,errors=continue. Quota mode: writeback.
[  101.722421][ T2965] ext4 filesystem being mounted at /13/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  101.739563][ T2971] loop0: detected capacity change from 0 to 128
[  101.766792][ T2965] EXT4-fs error (device loop6): ext4_do_update_inode:5235: inode #3: comm syz.6.894: corrupted inode contents
[  101.791799][ T2965] EXT4-fs error (device loop6): ext4_dirty_inode:6071: inode #3: comm syz.6.894: mark_inode_dirty error
[  101.804144][ T2965] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm syz.6.894: bg 0: block 64: padding at end of block bitmap is not set
[  101.818735][ T2965] EXT4-fs error (device loop6): ext4_acquire_dquot:6200: comm syz.6.894: Failed to acquire dquot type 0
[  101.832329][ T2971] EXT4-fs (loop0): Test dummy encryption mode enabled
[  101.844148][ T2971] EXT4-fs (loop0): Test dummy encryption mode enabled
[  101.853684][ T2971] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option
[  101.883025][ T2971] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption=v1,test_dummy_encryption=v1,nomblk_io_submit,commit=0x0000000000000000,,errors=continue. Quota mode: none.
[  101.905564][ T2971] ext4 filesystem being mounted at /180/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  101.983007][ T2971] fscrypt: AES-256-XTS using implementation "xts-aes-aesni"
[  102.069091][ T2985] loop0: detected capacity change from 0 to 512
[  102.204346][ T2985] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  102.210681][ T2993] loop6: detected capacity change from 0 to 256
[  102.222936][ T2985] ext4 filesystem being mounted at /181/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  102.244456][ T1486] hid-led 0003:27B8:01ED.000B: hidraw0: USB HID v0.00 Device [HID 27b8:01ed] on usb-dummy_hcd.5-1/input0
[  102.267500][ T2993] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d)
[  102.276015][ T2985] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.899: bg 0: block 360: padding at end of block bitmap is not set
[  102.348062][ T2995] loop4: detected capacity change from 0 to 128
[  102.365214][ T1486] hid-led 0003:27B8:01ED.000B: ThingM blink(1) initialized
[  102.417503][ T2995] EXT4-fs (loop4): Test dummy encryption mode enabled
[  102.427175][ T2995] EXT4-fs (loop4): Test dummy encryption mode enabled
[  102.484704][ T2995] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option
[  102.552717][ T2995] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption=v1,test_dummy_encryption=v1,nomblk_io_submit,commit=0x0000000000000000,,errors=continue. Quota mode: none.
[  102.558891][ T1486] usb 6-1: USB disconnect, device number 5
[  102.597693][ T2995] ext4 filesystem being mounted at /176/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  102.602417][ T3005] loop6: detected capacity change from 0 to 512
[  102.631002][ T3005] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  102.721123][ T3005] EXT4-fs (loop6): 1 truncate cleaned up
[  102.728494][ T3005] EXT4-fs (loop6): mounted filesystem without journal. Opts: errors=continue,journal_ioprio=0x0000000000000006,inode_readahead_blks=0x0000000000040000,,errors=continue. Quota mode: none.
[  102.808019][ T3010] SELinux:  policydb magic number 0xe182efa8 does not match expected magic number 0xf97cff8c
[  102.818829][ T3010] SELinux: failed to load policy
[  103.051092][   T26] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  103.074939][ T3014] loop4: detected capacity change from 0 to 1024
[  103.108710][ T3015] loop6: detected capacity change from 0 to 256
[  103.115534][   T30] kauditd_printk_skb: 5 callbacks suppressed
[  103.115547][   T30] audit: type=1400 audit(1761024881.978:309): avc:  denied  { mounton } for  pid=3013 comm="syz.4.910" path="/178/file0" dev="tmpfs" ino=983 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  103.135889][ T3014] EXT4-fs error (device loop4): ext4_map_blocks:630: inode #3: block 2: comm syz.4.910: lblock 2 mapped to illegal pblock 2 (length 1)
[  103.162380][ T3014] EXT4-fs (loop4): Remounting filesystem read-only
[  103.170961][ T3014] Quota error (device loop4): qtree_write_dquot: dquota write failed
[  103.179508][ T3014] EXT4-fs error (device loop4): ext4_map_blocks:630: inode #3: block 48: comm syz.4.910: lblock 0 mapped to illegal pblock 48 (length 1)
[  103.194237][ T3014] EXT4-fs (loop4): Remounting filesystem read-only
[  103.200974][ T3014] Quota error (device loop4): v2_write_file_info: Can't write info structure
[  103.212706][ T3015] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3ec, utbl_chksum : 0xe619d30d)
[  103.226274][ T3014] EXT4-fs error (device loop4): ext4_acquire_dquot:6200: comm syz.4.910: Failed to acquire dquot type 0
[  103.237785][ T3014] EXT4-fs (loop4): Remounting filesystem read-only
[  103.244938][ T3014] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5867: Corrupt filesystem
[  103.254592][ T3014] EXT4-fs (loop4): Remounting filesystem read-only
[  103.261133][ T3014] EXT4-fs error (device loop4): ext4_evict_inode:283: inode #11: comm syz.4.910: mark_inode_dirty error
[  103.272723][ T3014] EXT4-fs (loop4): Remounting filesystem read-only
[  103.279261][ T3014] EXT4-fs warning (device loop4): ext4_evict_inode:286: couldn't mark inode dirty (err -117)
[  103.289838][ T3014] EXT4-fs (loop4): 1 orphan inode deleted
[  103.295691][ T3014] EXT4-fs (loop4): mounted filesystem without journal. Opts: abort,noblock_validity,sysvgroups,errors=remount-ro,auto_da_alloc,inlinecrypt,. Quota mode: none.
[  103.296090][    T8] EXT4-fs error (device loop4): ext4_map_blocks:630: inode #3: block 1: comm kworker/u4:0: lblock 1 mapped to illegal pblock 1 (length 1)
[  103.296247][    T8] EXT4-fs (loop4): Remounting filesystem read-only
[  103.296261][    T8] Quota error (device loop4): remove_tree: Can't read quota data block 1
[  103.296281][    T8] EXT4-fs error (device loop4): ext4_release_dquot:6236: comm kworker/u4:0: Failed to release dquot type 0
[  103.296385][    T8] EXT4-fs (loop4): Remounting filesystem read-only
[  103.296987][ T3014] EXT4-fs error (device loop4): __ext4_get_inode_loc:4352: comm syz.4.910: Invalid inode table block 1 in block_group 0
[  103.297102][ T3014] EXT4-fs (loop4): Remounting filesystem read-only
[  103.297117][ T3014] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5867: Corrupt filesystem
[  103.297198][ T3014] EXT4-fs (loop4): Remounting filesystem read-only
[  103.297212][ T3014] EXT4-fs error (device loop4): ext4_quota_off:6506: inode #3: comm syz.4.910: mark_inode_dirty error
[  103.297295][ T3014] EXT4-fs (loop4): Remounting filesystem read-only
[  103.342152][   T26] usb 1-1: Using ep0 maxpacket: 16
[  103.413975][   T30] audit: type=1400 audit(1761024882.278:310): avc:  denied  { nlmsg_write } for  pid=3031 comm="syz.5.918" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1
[  103.448787][ T3038] xt_bpf: check failed: parse error
[  103.531588][   T26] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  103.548996][   T26] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  103.560075][   T26] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  103.578448][   T26] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  103.587648][   T26] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  103.607981][   T26] usb 1-1: config 0 descriptor??
[  103.609665][   T30] audit: type=1400 audit(1761024882.468:311): avc:  denied  { setopt } for  pid=3053 comm="syz.4.929" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  104.874154][   T26] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.000C/input/input13
[  104.909915][   T30] audit: type=1400 audit(1761024883.768:312): avc:  denied  { read } for  pid=86 comm="acpid" name="event3" dev="devtmpfs" ino=1299 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  104.911770][   T26] microsoft 0003:045E:07DA.000C: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0
[  105.063264][   T30] audit: type=1400 audit(1761024883.768:313): avc:  denied  { open } for  pid=86 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=1299 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  105.107800][   T30] audit: type=1400 audit(1761024883.898:314): avc:  denied  { ioctl } for  pid=86 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=1299 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  105.152602][   T26] usb 1-1: USB disconnect, device number 9
[  105.161785][ T3081] fuse: Bad value for 'fd'
[  105.206745][ T3079] fido_id[3079]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory
[  105.295716][   T30] audit: type=1400 audit(1761024884.158:315): avc:  denied  { mount } for  pid=3084 comm="syz.3.940" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1
[  105.341429][   T39] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[  105.377531][ T3091] loop4: detected capacity change from 0 to 512
[  105.572272][ T3091] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  105.598783][ T3091] ext4 filesystem being mounted at /188/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  106.563470][ T3091] EXT4-fs error (device loop4): ext4_do_update_inode:5235: inode #2: comm syz.4.941: corrupted inode contents
[  106.604206][ T3091] EXT4-fs error (device loop4): ext4_dirty_inode:6071: inode #2: comm syz.4.941: mark_inode_dirty error
[  106.628104][ T3091] EXT4-fs error (device loop4): ext4_do_update_inode:5235: inode #2: comm syz.4.941: corrupted inode contents
[  106.654607][ T3107] SELinux:  policydb version -1797685903 does not match my version range 15-33
[  106.664108][ T3107] SELinux: failed to load policy
[  106.693634][ T3091] EXT4-fs error (device loop4): __ext4_ext_dirty:183: inode #2: comm syz.4.941: mark_inode_dirty error
[  106.731591][   T39] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  106.748597][   T39] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  106.758832][   T39] usb 7-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00
[  106.773423][   T39] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  106.788330][   T39] usb 7-1: config 0 descriptor??
[  106.811263][ T3119] loop4: detected capacity change from 0 to 512
[  106.818248][  T401] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready
[  106.832780][  T401] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  106.842254][  T401] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready
[  106.845247][ T3119] EXT4-fs error (device loop4): ext4_orphan_get:1427: comm syz.4.949: bad orphan inode 13
[  106.850673][  T401] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  106.860457][ T3119] ext4_test_bit(bit=12, block=4) = 1
[  106.869017][  T401] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  106.873536][ T3119] is_bad_inode(inode)=0
[  106.881961][  T401] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  106.885466][ T3119] NEXT_ORPHAN(inode)=0
[  106.898498][ T3119] max_ino=32
[  106.899451][  T401] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  106.909898][ T3119] i_nlink=1
[  106.911018][  T401] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  106.921607][ T3119] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  107.029592][ T3119] EXT4-fs warning (device loop4): dx_probe:833: inode #2: comm syz.4.949: Unrecognised inode hash code 20
[  107.033983][ T3126] loop0: detected capacity change from 0 to 512
[  107.048141][ T3119] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.949: Corrupt directory, running e2fsck is recommended
[  107.067033][ T3119] EXT4-fs warning (device loop4): dx_probe:833: inode #2: comm syz.4.949: Unrecognised inode hash code 20
[  107.080046][ T3119] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.949: Corrupt directory, running e2fsck is recommended
[  107.084092][ T3126] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  107.121635][ T3119] EXT4-fs error (device loop4): ext4_find_dest_de:2115: inode #2: block 13: comm syz.4.949: bad entry in directory: rec_len % 4 != 0 - offset=108, inode=4294901777, rec_len=65535, size=1024 fake=0
[  107.261583][   T20] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  107.285053][ T3131] loop0: detected capacity change from 0 to 512
[  107.309124][ T3131] EXT4-fs (loop0): Journaled quota options ignored when QUOTA feature is enabled
[  107.362723][ T3131] EXT4-fs (loop0): mounted filesystem without journal. Opts: sysvgroups,grpjquota=./mnt,,errors=continue. Quota mode: writeback.
[  107.377495][ T3131] ext4 filesystem being mounted at /188/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  107.597105][   T39] hid-led: probe of 0003:1D34:000A.000D failed with error -71
[  107.656240][   T39] usb 7-1: USB disconnect, device number 5
[  107.791802][   T20] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  107.812075][   T20] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  107.851839][   T20] usb 6-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00
[  107.862565][   T20] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  107.874402][   T20] usb 6-1: config 0 descriptor??
[  108.043771][ T3153] fuse: Bad value for 'fd'
[  108.044516][ T3155] loop4: detected capacity change from 0 to 512
[  108.159429][ T3155] EXT4-fs error (device loop4): ext4_orphan_get:1401: inode #15: comm syz.4.963: casefold flag without casefold feature
[  108.217273][ T3155] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.963: couldn't read orphan inode 15 (err -117)
[  108.240722][ T3158] 9pnet: Insufficient options for proto=fd
[  108.258338][ T3155] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  108.366858][ T3162] loop6: detected capacity change from 0 to 1024
[  108.392989][ T3162] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  108.859895][ T3124] UDC core: couldn't find an available UDC or it's busy: -16
[  108.876223][ T3124] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  108.901460][   T20] hid-led: probe of 0003:1D34:000A.000E failed with error -71
[  108.964456][   T20] usb 6-1: USB disconnect, device number 6
[  109.152819][ T3178] SELinux: failed to load policy
[  109.268877][ T3184] loop6: detected capacity change from 0 to 512
[  109.279512][ T3183] loop0: detected capacity change from 0 to 512
[  109.318299][ T3184] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  109.347797][ T3183] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  109.365633][ T3184] EXT4-fs (loop6): 1 truncate cleaned up
[  109.379205][ T3184] EXT4-fs (loop6): mounted filesystem without journal. Opts: debug_want_extra_isize=0x000000000000002e,min_batch_time=0x0000000000000fff,inode_readahead_blks=0x0000000000000100,stripe=0x0000000000004000,sysvgroups,minixdf,,errors=continue. Quota mode: none.
[  109.404979][ T3183] ext4 filesystem being mounted at /191/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  109.518758][ T3199] loop5: detected capacity change from 0 to 256
[  109.552917][ T3204] loop6: detected capacity change from 0 to 512
[  109.623124][ T3204] EXT4-fs error (device loop6): ext4_orphan_get:1401: inode #15: comm syz.6.979: casefold flag without casefold feature
[  109.650785][ T3199] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d)
[  109.831483][ T3204] EXT4-fs error (device loop6): ext4_orphan_get:1406: comm syz.6.979: couldn't read orphan inode 15 (err -117)
[  109.874369][ T3204] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  110.230426][ T3212] SELinux: failed to load policy
[  110.307223][ T3214] loop4: detected capacity change from 0 to 512
[  110.337805][ T3221] loop5: detected capacity change from 0 to 4096
[  110.363942][ T3214] EXT4-fs (loop4): Test dummy encryption mode enabled
[  110.391862][ T3221] EXT4-fs (loop5): Test dummy encryption mode enabled
[  110.399589][ T3214] EXT4-fs (loop4): Test dummy encryption mode enabled
[  110.418501][ T3221] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003]
[  110.442631][ T3214] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable=0x0000000000000000,minixdf,jqfmt=vfsv1,prjquota,inode_readahead_blks=0x0000000000000100,barrier=0x000000000000000b,errors=remount-ro,auto_da_alloc,test_dummy_encryption,min_batch_time=0x0000. Quota mode: writeback.
[  110.451241][ T3221] System zones: 
[  110.491236][ T3214] EXT4-fs error (device loop4): ext4_add_entry:2486: inode #2: comm syz.4.987: Directory hole found for htree leaf block 0
[  110.503284][ T3230] loop6: detected capacity change from 0 to 1024
[  110.514405][ T3221] 0-5
[  110.517882][ T3214] EXT4-fs (loop4): Remounting filesystem read-only
[  110.524914][ T3221] EXT4-fs (loop5): mounted filesystem without journal. Opts: debug,delalloc,resuid=0x0000000000000000,test_dummy_encryption,nodiscard,data_err=ignore,auto_da_alloc,debug_want_extra_isize=0x0000000000000040,,errors=continue. Quota mode: writeback.
[  110.592116][ T3231] EXT4-fs error (device loop4): ext4_add_entry:2486: inode #2: comm syz.4.987: Directory hole found for htree leaf block 0
[  110.612565][ T3230] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  110.691741][ T3231] EXT4-fs (loop4): Remounting filesystem read-only
[  110.837723][ T3243] netlink: 20 bytes leftover after parsing attributes in process `syz.6.993'.
[  110.848655][ T3243] netlink: 20 bytes leftover after parsing attributes in process `syz.6.993'.
[  110.875290][ T3246] loop6: detected capacity change from 0 to 512
[  111.345741][ T3253] loop5: detected capacity change from 0 to 256
[  111.346649][ T3251] loop4: detected capacity change from 0 to 4096
[  111.364541][ T3253] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3ec, utbl_chksum : 0xe619d30d)
[  111.379530][ T3251] EXT4-fs (loop4): Test dummy encryption mode enabled
[  111.395042][ T3246] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  111.421783][ T3251] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003]
[  111.512039][ T3246] ext4 filesystem being mounted at /30/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  111.530394][ T3251] System zones: 0-5
[  111.543915][ T3251] EXT4-fs (loop4): mounted filesystem without journal. Opts: debug,delalloc,journal_ioprio=0x0000000000000000,test_dummy_encryption,nodiscard,min_batch_time=0x0000000000000004,acl,debug_want_extra_isize=0x0000000000000040,,errors=continue. Quota mode: writeback.
[  111.677405][ T3287] loop0: detected capacity change from 0 to 256
[  111.739274][ T3287] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  111.743333][ T3292] loop4: detected capacity change from 0 to 512
[  111.823002][ T3292] EXT4-fs (loop4): Test dummy encryption mode enabled
[  111.841232][ T3292] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  111.897057][ T3292] EXT4-fs (loop4): 1 truncate cleaned up
[  111.906453][ T3292] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption=v1,resgid=0x0000000000000000,,errors=continue. Quota mode: none.
[  111.967447][ T3301] loop0: detected capacity change from 0 to 256
[  112.004716][ T3301] exfat: Deprecated parameter 'namecase'
[  112.010424][ T3301] exfat: Deprecated parameter 'namecase'
[  112.031555][ T3074] usb 6-1: new full-speed USB device number 7 using dummy_hcd
[  112.074283][ T3301] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xbc8dc3cd, utbl_chksum : 0xe619d30d)
[  112.105420][ T3308] loop6: detected capacity change from 0 to 16
[  112.151780][ T3301] exFAT-fs (loop0): hint_cluster is invalid (4278190089)
[  112.161561][ T3301] exFAT-fs (loop0): error, failed to bmap (inode : ffff888128c8df00 iblock : 8, err : -5)
[  112.181817][ T3301] exFAT-fs (loop0): error, invalid access to FAT (entry 0xff000008)
[  112.199091][  T401] attempt to access beyond end of device
[  112.199091][  T401] loop0: rw=1, want=34225520832, limit=256
[  112.213191][ T3308] erofs: (device loop6): mounted with root inode @ nid 36.
[  112.304527][ T3320] loop6: detected capacity change from 0 to 1024
[  112.325403][ T3320] EXT4-fs (loop6): mounted filesystem without journal. Opts: quota,,errors=continue. Quota mode: writeback.
[  112.342571][   T30] kauditd_printk_skb: 7 callbacks suppressed
[  112.342585][   T30] audit: type=1400 audit(1761024891.208:323): avc:  denied  { rename } for  pid=3319 comm="syz.6.1017" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop6" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=sock_file permissive=1
[  112.384657][ T3323] loop4: detected capacity change from 0 to 256
[  112.394246][   T30] audit: type=1400 audit(1761024891.208:324): avc:  denied  { unlink } for  pid=3319 comm="syz.6.1017" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop6" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=sock_file permissive=1
[  112.448933][ T3323] FAT-fs (loop4): Directory bread(block 64) failed
[  112.455616][ T3323] FAT-fs (loop4): Directory bread(block 65) failed
[  112.462632][ T3074] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  112.463468][ T3323] FAT-fs (loop4): Directory bread(block 66) failed
[  112.473114][ T3074] usb 6-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00
[  112.479240][ T3323] FAT-fs (loop4): Directory bread(block 67) failed
[  112.488645][ T3074] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  112.504686][ T3323] FAT-fs (loop4): Directory bread(block 68) failed
[  112.515272][ T3323] FAT-fs (loop4): Directory bread(block 69) failed
[  112.516753][ T3074] usb 6-1: config 0 descriptor??
[  112.528118][ T3323] FAT-fs (loop4): Directory bread(block 70) failed
[  112.538267][ T3323] FAT-fs (loop4): Directory bread(block 71) failed
[  112.542730][   T30] audit: type=1400 audit(1761024891.408:325): avc:  denied  { bind } for  pid=3326 comm="syz.6.1021" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  112.545320][ T3323] FAT-fs (loop4): Directory bread(block 72) failed
[  112.572011][ T3323] FAT-fs (loop4): Directory bread(block 73) failed
[  112.610044][ T3323] attempt to access beyond end of device
[  112.610044][ T3323] loop4: rw=0, want=1196, limit=256
[  112.816177][ T3345] netlink: 13 bytes leftover after parsing attributes in process `syz.3.1027'.
[  113.004921][ T3074] hid-generic 0003:057E:200E.000F: item fetching failed at offset 0/7
[  113.013556][ T3074] hid-generic: probe of 0003:057E:200E.000F failed with error -22
[  113.051412][  T604] usb 7-1: new high-speed USB device number 6 using dummy_hcd
[  113.173528][ T3352] SELinux: ebitmap start bit (24) is not a multiple of the map unit size (64)
[  113.186093][ T3352] SELinux: failed to load policy
[  113.207521][  T388] usb 6-1: USB disconnect, device number 7
[  113.261511][ T3357] loop0: detected capacity change from 0 to 256
[  113.272065][ T3357] exfat: Deprecated parameter 'utf8'
[  113.277799][ T3357] exfat: Deprecated parameter 'namecase'
[  113.283895][ T3357] exfat: Deprecated parameter 'utf8'
[  113.292629][ T3357] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d)
[  113.309026][ T3357] attempt to access beyond end of device
[  113.309026][ T3357] loop0: rw=0, want=34359738489, limit=256
[  113.431459][  T604] usb 7-1: config index 0 descriptor too short (expected 45, got 36)
[  113.439868][  T604] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11
[  113.451538][  T604] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024
[  113.463140][  T604] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  113.476477][  T604] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  113.485811][  T604] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  113.497116][  T604] usb 7-1: config 0 descriptor??
[  113.521473][ T3342] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  113.619654][ T3361] loop4: detected capacity change from 0 to 256
[  113.641498][   T20] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  113.730677][ T3361] FAT-fs (loop4): error, fat_free: invalid cluster chain (i_pos 196)
[  113.744308][ T3361] FAT-fs (loop4): Filesystem has been set read-only
[  113.751617][   T30] audit: type=1400 audit(1761024892.618:326): avc:  denied  { remount } for  pid=3360 comm="syz.4.1034" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1
[  113.777271][ T3365] loop5: detected capacity change from 0 to 4096
[  113.784079][  T288] FAT-fs (loop4): error, fat_free: invalid cluster chain (i_pos 196)
[  113.851692][ T3365] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  113.885504][ T3365] EXT4-fs error (device loop5): ext4_map_blocks:630: inode #2: block 16: comm syz.5.1036: lblock 0 mapped to illegal pblock 16 (length 1)
[  113.900674][ T3365] EXT4-fs error (device loop5): ext4_map_blocks:630: inode #2: block 16: comm syz.5.1036: lblock 0 mapped to illegal pblock 16 (length 1)
[  113.935674][ T1107] EXT4-fs error (device loop5): __ext4_get_inode_loc:4352: comm syz-executor: Invalid inode table block 4 in block_group 0
[  113.949380][ T1107] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5867: Corrupt filesystem
[  113.959152][ T1107] EXT4-fs error (device loop5): ext4_quota_off:6506: inode #3: comm syz-executor: mark_inode_dirty error
[  113.971000][ T1107] EXT4-fs error (device loop5): __ext4_get_inode_loc:4352: comm syz-executor: Invalid inode table block 4 in block_group 0
[  113.984579][ T1107] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5867: Corrupt filesystem
[  113.985478][  T604] plantronics 0003:047F:FFFF.0010: unknown main item tag 0xd
[  113.995208][ T1107] EXT4-fs error (device loop5): ext4_quota_off:6506: inode #4: comm syz-executor: mark_inode_dirty error
[  114.003246][  T604] plantronics 0003:047F:FFFF.0010: No inputs registered, leaving
[  114.022910][  T604] plantronics 0003:047F:FFFF.0010: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0
[  114.043046][   T20] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  114.052199][   T20] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  114.072486][   T20] usb 1-1: config 0 descriptor??
[  114.562721][  T388] usb 7-1: USB disconnect, device number 6
[  115.241416][ T3208] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  115.289635][ T3394] loop6: detected capacity change from 0 to 512
[  115.367665][ T3394] EXT4-fs error (device loop6): ext4_orphan_get:1401: inode #15: comm syz.6.1046: casefold flag without casefold feature
[  115.381904][ T3394] EXT4-fs error (device loop6): ext4_orphan_get:1406: comm syz.6.1046: couldn't read orphan inode 15 (err -117)
[  115.412639][ T3394] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  115.485712][ T3208] usb 6-1: Using ep0 maxpacket: 16
[  115.509837][ T3398] loop4: detected capacity change from 0 to 256
[  115.570104][ T3400] loop6: detected capacity change from 0 to 8192
[  115.611442][ T3208] usb 6-1: config 0 has an invalid interface number: 251 but max is 0
[  115.624823][ T3208] usb 6-1: config 0 has no interface number 0
[  115.643501][ T3208] usb 6-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16
[  115.669378][ T3208] usb 6-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64
[  115.739184][ T3404] loop6: detected capacity change from 0 to 256
[  115.770300][ T3404] exFAT-fs (loop6): failed to load upcase table (idx : 0x00002e7f, chksum : 0x03279930, utbl_chksum : 0xe619d30d)
[  115.841901][ T3208] usb 6-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4
[  115.851167][ T3208] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  115.859800][ T3208] usb 6-1: Product: syz
[  115.864419][ T3208] usb 6-1: Manufacturer: syz
[  115.869101][ T3208] usb 6-1: SerialNumber: syz
[  115.878627][ T3208] usb 6-1: config 0 descriptor??
[  115.901863][ T3387] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  115.909296][ T3387] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  116.061460][  T388] usb 7-1: new high-speed USB device number 7 using dummy_hcd
[  116.123468][ T3387] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  116.130537][ T3387] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  116.234470][ T3421] loop4: detected capacity change from 0 to 512
[  116.266592][ T3421] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  116.278112][ T3421] ext4 filesystem being mounted at /210/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  116.301489][  T388] usb 7-1: Using ep0 maxpacket: 8
[  116.353821][ T3426] loop4: detected capacity change from 0 to 128
[  116.374844][   T60] usb 1-1: USB disconnect, device number 10
[  116.388257][ T3428] loop0: detected capacity change from 0 to 256
[  116.395310][ T3426] FAT-fs (loop4): Directory bread(block 162) failed
[  116.402207][ T3426] FAT-fs (loop4): Directory bread(block 163) failed
[  116.408907][ T3426] FAT-fs (loop4): Directory bread(block 164) failed
[  116.415200][ T3428] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  116.415756][ T3426] FAT-fs (loop4): Directory bread(block 165) failed
[  116.430066][ T3428] exFAT-fs (loop0): Medium has reported failures. Some data may be lost.
[  116.432907][  T388] usb 7-1: config 0 has no interfaces?
[  116.432933][  T388] usb 7-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5
[  116.432956][  T388] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  116.433742][  T388] usb 7-1: config 0 descriptor??
[  116.454482][ T3428] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  116.457057][ T3426] FAT-fs (loop4): Directory bread(block 166) failed
[  116.489099][ T3426] FAT-fs (loop4): Directory bread(block 167) failed
[  116.496136][ T3426] FAT-fs (loop4): Directory bread(block 168) failed
[  116.503058][ T3426] FAT-fs (loop4): Directory bread(block 169) failed
[  116.516029][ T3426] FAT-fs (loop4): Directory bread(block 162) failed
[  116.522767][ T3426] FAT-fs (loop4): Directory bread(block 163) failed
[  116.529810][ T3426] attempt to access beyond end of device
[  116.529810][ T3426] loop4: rw=3, want=232, limit=128
[  116.540597][ T3426] attempt to access beyond end of device
[  116.540597][ T3426] loop4: rw=2051, want=234, limit=128
[  116.552010][ T3430] loop0: detected capacity change from 0 to 512
[  116.569518][ T3430] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  116.571501][ T3208] asix 6-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  116.584357][ T3430] EXT4-fs error (device loop0): ext4_lookup:1858: inode #15: comm syz.0.1062: iget: bad i_size value: 15393162788874
[  116.600871][ T3208] asix 6-1:0.251 (unnamed net_device) (uninitialized): Failed to read software interface selection register: -71
[  116.614655][ T3208] asix: probe of 6-1:0.251 failed with error -71
[  116.627091][ T3208] usb 6-1: USB disconnect, device number 8
[  116.691184][ T3434] loop0: detected capacity change from 0 to 512
[  116.694222][ T3437] loop4: detected capacity change from 0 to 256
[  116.707669][ T3437] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  116.721979][ T3437] exFAT-fs (loop4): Medium has reported failures. Some data may be lost.
[  116.724469][ T3434] EXT4-fs (loop0): Mount option "noacl" will be removed by 3.5
[  116.724469][ T3434] Contact linux-ext4@vger.kernel.org if you think we should keep it.
[  116.724469][ T3434] 
[  116.734145][   T30] audit: type=1400 audit(1761024895.598:327): avc:  denied  { rename } for  pid=3403 comm="syz.6.1050" name="file0" dev="loop6" ino=1048656 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  116.748387][ T3434] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended
[  116.771763][   T20] usb 7-1: USB disconnect, device number 7
[  116.787417][ T3437] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  116.809759][ T3434] [EXT4 FS bs=4096, gc=1, bpg=3008, ipg=32, mo=80026019, mo2=0000]
[  116.819942][ T3434] EXT4-fs (loop0): 1 truncate cleaned up
[  116.825721][ T3434] EXT4-fs (loop0): mounted filesystem without journal. Opts: nobarrier,noblock_validity,nombcache,acl,barrier=0x000000000000000c,noacl,nodiscard,nodelalloc,resgid=0x00000000000000002,errors=continue. Quota mode: writeback.
[  116.872099][  T338] Quota error (device loop0): free_dqentry: Quota structure has offset to other block (1) than it should (5)
[  116.884031][  T338] EXT4-fs error (device loop0): ext4_release_dquot:6236: comm kworker/u4:3: Failed to release dquot type 1
[  117.005676][ T3441] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  117.014061][ T3441] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  117.168457][ T3453] loop5: detected capacity change from 0 to 256
[  117.483573][ T3459] loop6: detected capacity change from 0 to 512
[  117.582210][ T3459] EXT4-fs (loop6): Quota format mount options ignored when QUOTA feature is enabled
[  117.609026][ T3459] EXT4-fs (loop6): Quota format mount options ignored when QUOTA feature is enabled
[  117.621924][ T3461] netlink: 104 bytes leftover after parsing attributes in process `syz.5.1072'.
[  117.699229][ T3459] EXT4-fs (loop6): revision level too high, forcing read-only mode
[  117.712338][ T3459] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e000e118, mo2=0002]
[  117.718499][ T3464] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3821099475 (7642198950 ns) > initial count (2842047336 ns). Using initial count to start timer.
[  117.720608][ T3459] System zones: 0-1, 15-15, 18-18, 34-34
[  117.744979][ T3459] EXT4-fs (loop6): orphan cleanup on readonly fs
[  117.751773][ T3459] Quota error (device loop6): v2_read_header: Failed header read: expected=8 got=0
[  117.761117][ T3459] EXT4-fs warning (device loop6): ext4_enable_quotas:6452: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[  117.775721][ T3459] EXT4-fs (loop6): Cannot turn on quotas: error -22
[  117.782911][ T3459] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm syz.6.1071: bg 0: block 40: padding at end of block bitmap is not set
[  117.797428][ T3459] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6178: Corrupt filesystem
[  117.806412][ T3459] EXT4-fs (loop6): 1 truncate cleaned up
[  117.808393][ T3471] kvm: pic: single mode not supported
[  117.812131][ T3459] EXT4-fs (loop6): mounted filesystem without journal. Opts: jqfmt=vfsv1,nodioread_nolock,jqfmt=vfsv0,norecovery,nogrpid,dioread_lock,,errors=continue. Quota mode: writeback.
[  117.835088][ T3471] kvm: pic: level sensitive irq not supported
[  117.853848][ T3471] kvm: pic: non byte read
[  117.853882][ T3459] fscrypt (loop6, inode 16): Error -61 getting encryption context
[  117.860977][ T3471] kvm: pic: non byte read
[  117.881834][ T3471] kvm: pic: non byte read
[  117.891811][ T3471] kvm: pic: non byte read
[  117.902019][ T3471] kvm: pic: non byte read
[  117.906884][ T3471] kvm: pic: level sensitive irq not supported
[  117.906944][ T3471] kvm: pic: non byte read
[  117.917838][ T3471] kvm: pic: single mode not supported
[  117.917893][ T3471] kvm: pic: non byte read
[  117.928065][ T3471] kvm: pic: level sensitive irq not supported
[  117.928121][ T3471] kvm: pic: non byte read
[  117.939760][ T3471] kvm: pic: non byte read
[  118.271450][   T26] usb 7-1: new high-speed USB device number 8 using dummy_hcd
[  118.571428][   T26] usb 7-1: Using ep0 maxpacket: 16
[  118.721635][   T26] usb 7-1: config 0 has an invalid interface number: 29 but max is 0
[  118.733688][   T26] usb 7-1: config 0 has no interface number 0
[  118.748390][   T26] usb 7-1: config 0 interface 29 altsetting 0 bulk endpoint 0xA has invalid maxpacket 16
[  118.811844][   T26] usb 7-1: config 0 interface 29 altsetting 0 endpoint 0x82 has invalid maxpacket 1104, setting to 1024
[  118.853089][ T3502] 9pnet: Insufficient options for proto=fd
[  118.868598][   T26] usb 7-1: config 0 interface 29 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024
[  118.951823][ T3509] loop5: detected capacity change from 0 to 512
[  119.003886][ T3513] loop0: detected capacity change from 0 to 256
[  119.014047][ T3509] EXT4-fs (loop5): Quota format mount options ignored when QUOTA feature is enabled
[  119.070646][ T3520] loop4: detected capacity change from 0 to 1024
[  119.075492][ T3509] EXT4-fs (loop5): 1 orphan inode deleted
[  119.082929][ T3509] EXT4-fs (loop5): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,init_itable,jqfmt=vfsv0,resgid=0x0000000000000000,sysvgroups,delalloc,quota,. Quota mode: writeback.
[  119.102581][ T3509] ext4 filesystem being mounted at /148/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  119.107003][ T3513] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x5bae1814, utbl_chksum : 0xe619d30d)
[  119.125543][ T3513] exFAT-fs (loop0): bogus allocation bitmap size(need : 2, cur : 17179869186)
[  119.154379][   T30] audit: type=1400 audit(1761024898.018:328): avc:  denied  { setattr } for  pid=3511 comm="syz.0.1091" name="file1" dev="loop0" ino=1048663 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  119.189971][ T3520] EXT4-fs (loop4): mounted filesystem without journal. Opts: discard,data_err=ignore,,errors=continue. Quota mode: none.
[  119.211771][   T26] usb 7-1: New USB device found, idVendor=050d, idProduct=2102, bcdDevice=70.d0
[  119.220842][   T26] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  119.231457][   T26] usb 7-1: Product: syz
[  119.235662][   T26] usb 7-1: Manufacturer: syz
[  119.240431][   T26] usb 7-1: SerialNumber: syz
[  119.276325][   T26] usb 7-1: config 0 descriptor??
[  119.312698][  T288] EXT4-fs error (device loop4): ext4_lookup:1862: inode #2: comm syz-executor: deleted inode referenced: 11
[  119.324837][  T288] EXT4-fs error (device loop4): ext4_lookup:1862: inode #2: comm syz-executor: deleted inode referenced: 11
[  119.349820][ T3474] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  119.358769][ T3474] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  119.418873][ T3539] device syzkaller0 entered promiscuous mode
[  119.833155][ T3545] bridge0: port 1(bridge_slave_0) entered blocking state
[  119.840337][ T3545] bridge0: port 1(bridge_slave_0) entered disabled state
[  119.848308][ T3545] device bridge_slave_0 entered promiscuous mode
[  119.857379][ T3545] bridge0: port 2(bridge_slave_1) entered blocking state
[  119.864809][ T3545] bridge0: port 2(bridge_slave_1) entered disabled state
[  119.872553][ T3545] device bridge_slave_1 entered promiscuous mode
[  119.931862][ T3545] bridge0: port 2(bridge_slave_1) entered blocking state
[  119.938919][ T3545] bridge0: port 2(bridge_slave_1) entered forwarding state
[  119.946315][ T3545] bridge0: port 1(bridge_slave_0) entered blocking state
[  119.953473][ T3545] bridge0: port 1(bridge_slave_0) entered forwarding state
[  119.973971][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  119.984696][    T8] bridge0: port 1(bridge_slave_0) entered disabled state
[  119.993253][    T8] bridge0: port 2(bridge_slave_1) entered disabled state
[  120.005664][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  120.013996][    T8] bridge0: port 1(bridge_slave_0) entered blocking state
[  120.021069][    T8] bridge0: port 1(bridge_slave_0) entered forwarding state
[  120.030466][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  120.035443][ T3563] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1109'.
[  120.038887][    T8] bridge0: port 2(bridge_slave_1) entered blocking state
[  120.054778][    T8] bridge0: port 2(bridge_slave_1) entered forwarding state
[  120.062561][   T26] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[  120.072532][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  120.080857][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  120.099468][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  120.112595][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  120.120893][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  120.129306][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  120.138069][ T3545] device veth0_vlan entered promiscuous mode
[  120.146040][   T45] device bridge_slave_1 left promiscuous mode
[  120.152450][   T45] bridge0: port 2(bridge_slave_1) entered disabled state
[  120.160361][   T45] device bridge_slave_0 left promiscuous mode
[  120.166815][   T45] bridge0: port 1(bridge_slave_0) entered disabled state
[  120.175363][   T45] device veth1_macvtap left promiscuous mode
[  120.181681][   T45] device veth0_vlan left promiscuous mode
[  120.289371][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  120.299140][ T3545] device veth1_macvtap entered promiscuous mode
[  120.310317][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  120.318543][   T26] usb 6-1: Using ep0 maxpacket: 8
[  120.325700][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  120.341934][   T30] audit: type=1400 audit(1761024899.208:329): avc:  denied  { mount } for  pid=3545 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  120.376948][ T3577] loop7: detected capacity change from 0 to 512
[  120.387672][ T3577] EXT4-fs (loop7): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  120.402313][ T3577] EXT4-fs error (device loop7): ext4_free_branches:1030: inode #11: comm syz.7.1104: invalid indirect mapped block 4294967295 (level 1)
[  120.416814][ T3577] EXT4-fs error (device loop7): ext4_free_branches:1030: inode #11: comm syz.7.1104: invalid indirect mapped block 4294967295 (level 1)
[  120.431741][ T3577] EXT4-fs (loop7): 2 truncates cleaned up
[  120.437605][ T3577] EXT4-fs (loop7): mounted filesystem without journal. Opts: dioread_nolock,grpjquota=,barrier=0x0000000000000004,,errors=continue. Quota mode: writeback.
[  120.456031][ T3577] EXT4-fs (loop7): shut down requested (2)
[  120.466769][ T3577] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop7 ino=12
[  120.475773][ T3577] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop7 ino=12
[  120.484634][   T26] usb 6-1: config 0 has an invalid interface number: 63 but max is 0
[  120.485190][ T3577] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop7 ino=12
[  120.502363][ T3577] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop7 ino=12
[  120.512224][   T26] usb 6-1: config 0 has no interface number 0
[  120.513727][ T3577] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop7 ino=12
[  120.518445][   T26] usb 6-1: New USB device found, idVendor=f65e, idProduct=3868, bcdDevice=c6.17
[  120.527612][ T3577] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop7 ino=12
[  120.536837][   T26] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  120.558949][   T26] usb 6-1: config 0 descriptor??
[  120.601941][   T26] usb-storage 6-1:0.63: USB Mass Storage device detected
[  120.652402][ T3590] loop7: detected capacity change from 0 to 1024
[  120.695593][ T3590] EXT4-fs (loop7): revision level too high, forcing read-only mode
[  120.704475][ T3590] EXT4-fs (loop7): orphan cleanup on readonly fs
[  120.712287][ T3590] EXT4-fs error (device loop7): ext4_validate_block_bitmap:438: comm syz.7.1118: bg 0: block 10: padding at end of block bitmap is not set
[  120.726898][ T3590] Quota error (device loop7): write_blk: dquota write failed
[  120.734364][ T3590] Quota error (device loop7): find_free_dqentry: Can't remove block (3) from entry free list
[  120.744660][ T3590] Quota error (device loop7): qtree_write_dquot: Error -28 occurred while creating quota
[  120.754568][ T3590] EXT4-fs error (device loop7): ext4_acquire_dquot:6200: comm syz.7.1118: Failed to acquire dquot type 0
[  120.766182][ T3590] Quota error (device loop7): write_blk: dquota write failed
[  120.773639][ T3590] Quota error (device loop7): find_free_dqentry: Can't remove block (3) from entry free list
[  120.784032][ T3590] Quota error (device loop7): qtree_write_dquot: Error -28 occurred while creating quota
[  120.794262][ T3590] EXT4-fs error (device loop7): ext4_acquire_dquot:6200: comm syz.7.1118: Failed to acquire dquot type 0
[  120.806074][ T3590] EXT4-fs error (device loop7): ext4_free_blocks:6218: comm syz.7.1118: Freeing blocks not in datazone - block = 0, count = 4096
[  120.807419][   T20] usb 6-1: USB disconnect, device number 9
[  120.820311][ T3590] Quota error (device loop7): write_blk: dquota write failed
[  120.833176][ T3590] EXT4-fs error (device loop7): ext4_acquire_dquot:6200: comm syz.7.1118: Failed to acquire dquot type 0
[  120.844657][ T3590] EXT4-fs (loop7): 1 orphan inode deleted
[  120.850663][ T3590] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  120.961371][   T26] usb 7-1: USB disconnect, device number 8
[  120.990836][ T3599] overlayfs: missing 'lowerdir'
[  121.184782][ T3607] bridge0: port 1(bridge_slave_0) entered blocking state
[  121.192018][ T3607] bridge0: port 1(bridge_slave_0) entered disabled state
[  121.199584][ T3607] device bridge_slave_0 entered promiscuous mode
[  121.208924][ T3607] bridge0: port 2(bridge_slave_1) entered blocking state
[  121.216580][ T3607] bridge0: port 2(bridge_slave_1) entered disabled state
[  121.224425][ T3607] device bridge_slave_1 entered promiscuous mode
[  121.314956][ T3607] bridge0: port 2(bridge_slave_1) entered blocking state
[  121.322074][ T3607] bridge0: port 2(bridge_slave_1) entered forwarding state
[  121.329391][ T3607] bridge0: port 1(bridge_slave_0) entered blocking state
[  121.336638][ T3607] bridge0: port 1(bridge_slave_0) entered forwarding state
[  121.373583][  T338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  121.387854][  T338] bridge0: port 1(bridge_slave_0) entered disabled state
[  121.400109][  T338] bridge0: port 2(bridge_slave_1) entered disabled state
[  121.426955][  T338] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  121.441642][  T338] bridge0: port 1(bridge_slave_0) entered blocking state
[  121.448712][  T338] bridge0: port 1(bridge_slave_0) entered forwarding state
[  121.482331][  T338] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  121.491072][  T338] bridge0: port 2(bridge_slave_1) entered blocking state
[  121.498190][  T338] bridge0: port 2(bridge_slave_1) entered forwarding state
[  121.519650][  T338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  121.536229][  T338] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  121.553438][  T338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  121.562115][ T3627] loop7: detected capacity change from 0 to 16
[  121.570427][  T338] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  121.596225][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  121.609866][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  121.634823][  T338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  121.642782][ T3627] erofs: (device loop7): mounted with root inode @ nid 36.
[  121.643392][  T338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  121.667763][ T3607] device veth0_vlan entered promiscuous mode
[  121.680131][  T338] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  121.688943][  T338] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  121.699563][ T3630] overlayfs: missing 'lowerdir'
[  121.719899][ T3607] device veth1_macvtap entered promiscuous mode
[  121.727471][  T338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  121.736903][  T338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  121.746181][  T338] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  121.776514][   T45] device bridge_slave_1 left promiscuous mode
[  121.786627][   T45] bridge0: port 2(bridge_slave_1) entered disabled state
[  121.802056][   T45] device bridge_slave_0 left promiscuous mode
[  121.808275][   T45] bridge0: port 1(bridge_slave_0) entered disabled state
[  121.832803][   T45] device veth1_macvtap left promiscuous mode
[  121.851464][   T45] device veth0_vlan left promiscuous mode
[  122.005190][  T338] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  122.013605][  T338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  122.026501][  T338] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  122.034976][  T338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  122.274288][ T3652] bridge0: port 1(bridge_slave_0) entered blocking state
[  122.284634][ T3652] bridge0: port 1(bridge_slave_0) entered disabled state
[  122.292652][ T3652] device bridge_slave_0 entered promiscuous mode
[  122.300709][ T3652] bridge0: port 2(bridge_slave_1) entered blocking state
[  122.308324][ T3652] bridge0: port 2(bridge_slave_1) entered disabled state
[  122.316175][ T3652] device bridge_slave_1 entered promiscuous mode
[  122.490848][ T3652] bridge0: port 2(bridge_slave_1) entered blocking state
[  122.497983][ T3652] bridge0: port 2(bridge_slave_1) entered forwarding state
[  122.505439][ T3652] bridge0: port 1(bridge_slave_0) entered blocking state
[  122.512519][ T3652] bridge0: port 1(bridge_slave_0) entered forwarding state
[  122.520894][    T8] bridge0: port 1(bridge_slave_0) entered disabled state
[  122.528651][    T8] bridge0: port 2(bridge_slave_1) entered disabled state
[  122.563558][  T338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  122.571885][  T338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  122.593376][  T338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  122.602675][  T338] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  122.611079][  T338] bridge0: port 1(bridge_slave_0) entered blocking state
[  122.618178][  T338] bridge0: port 1(bridge_slave_0) entered forwarding state
[  122.628214][  T338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  122.642816][  T338] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  122.651096][  T338] bridge0: port 2(bridge_slave_1) entered blocking state
[  122.658189][  T338] bridge0: port 2(bridge_slave_1) entered forwarding state
[  122.681690][  T338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  122.693579][  T338] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  122.707992][  T338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  122.717303][  T338] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  122.739732][  T338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  122.748441][  T338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  122.757655][  T338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  122.769688][  T338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  122.778431][ T3652] device veth0_vlan entered promiscuous mode
[  122.788496][  T338] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  122.796566][  T338] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  122.816136][  T338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  122.824899][  T338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  122.834120][ T3652] device veth1_macvtap entered promiscuous mode
[  122.861187][ T3685] loop7: detected capacity change from 0 to 512
[  122.869218][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  122.877321][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  122.885809][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  122.894373][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  122.903222][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  122.904687][ T3685] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  122.927561][ T3685] ext4 filesystem being mounted at /13/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  123.143570][   T45] device bridge_slave_1 left promiscuous mode
[  123.149977][   T45] bridge0: port 2(bridge_slave_1) entered disabled state
[  123.158397][   T45] device bridge_slave_0 left promiscuous mode
[  123.165646][   T45] bridge0: port 1(bridge_slave_0) entered disabled state
[  123.174479][   T45] device veth1_macvtap left promiscuous mode
[  123.192215][   T45] device veth0_vlan left promiscuous mode
[  123.521419][    T6] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[  126.551418][    T6] usb 8-1: device descriptor read/all, error -71
[  126.557927][ T3712] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1159'.
[  126.587388][ T3723] loop9: detected capacity change from 0 to 128
[  126.594655][ T3712] device bridge_slave_1 left promiscuous mode
[  126.629754][ T3730] loop8: detected capacity change from 0 to 512
[  126.637817][ T3712] bridge0: port 2(bridge_slave_1) entered disabled state
[  126.640462][   T30] kauditd_printk_skb: 3 callbacks suppressed
[  126.640479][   T30] audit: type=1400 audit(1761024905.508:331): avc:  denied  { search } for  pid=3731 comm="syz.0.1167" name="/" dev="configfs" ino=47 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  126.673462][ T3712] device bridge_slave_0 left promiscuous mode
[  126.687426][ T3732] loop0: detected capacity change from 0 to 512
[  126.701229][ T3730] EXT4-fs error (device loop8): ext4_orphan_get:1406: comm syz.8.1166: couldn't read orphan inode 26 (err -116)
[  126.705064][   T30] audit: type=1400 audit(1761024905.518:332): avc:  denied  { mounton } for  pid=3720 comm="syz.9.1163" path="/1/file0" dev="loop9" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1
[  126.727036][ T3712] bridge0: port 1(bridge_slave_0) entered disabled state
[  126.743083][ T3730] EXT4-fs (loop8): mounted filesystem without journal. Opts: inlinecrypt,,errors=continue. Quota mode: writeback.
[  126.755687][   T30] audit: type=1400 audit(1761024905.618:333): avc:  denied  { write } for  pid=3731 comm="syz.0.1167" name="/" dev="configfs" ino=47 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  126.781671][ T3730] ext4 filesystem being mounted at /6/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  126.833932][ T3738] loop0: detected capacity change from 0 to 128
[  126.853553][ T3730] EXT4-fs error (device loop8): ext4_do_update_inode:5235: inode #3: comm syz.8.1166: corrupted inode contents
[  126.866217][ T3730] EXT4-fs error (device loop8): ext4_dirty_inode:6071: inode #3: comm syz.8.1166: mark_inode_dirty error
[  126.893818][ T3738] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  126.910864][ T3730] EXT4-fs error (device loop8): ext4_validate_block_bitmap:438: comm syz.8.1166: bg 0: block 64: padding at end of block bitmap is not set
[  126.926849][ T3738] ext4 filesystem being mounted at /217/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  126.938184][ T3730] Quota error (device loop8): write_blk: dquota write failed
[  126.946263][ T3730] Quota error (device loop8): qtree_write_dquot: Error -117 occurred while creating quota
[  126.956803][ T3730] EXT4-fs error (device loop8): ext4_acquire_dquot:6200: comm syz.8.1166: Failed to acquire dquot type 0
[  126.974064][ T3738] syz.0.1169 (pid 3738) is setting deprecated v1 encryption policy; recommend upgrading to v2.
[  127.237182][ T3748] bridge0: port 1(bridge_slave_0) entered blocking state
[  127.246093][ T3748] bridge0: port 1(bridge_slave_0) entered disabled state
[  127.257674][ T3748] device bridge_slave_0 entered promiscuous mode
[  127.270721][ T3748] bridge0: port 2(bridge_slave_1) entered blocking state
[  127.278324][ T3748] bridge0: port 2(bridge_slave_1) entered disabled state
[  127.288980][ T3748] device bridge_slave_1 entered promiscuous mode
[  127.331400][  T388] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  127.502741][    T6] usb 8-1: new high-speed USB device number 3 using dummy_hcd
[  127.612612][ T3748] bridge0: port 2(bridge_slave_1) entered blocking state
[  127.619766][ T3748] bridge0: port 2(bridge_slave_1) entered forwarding state
[  127.627127][ T3748] bridge0: port 1(bridge_slave_0) entered blocking state
[  127.634208][ T3748] bridge0: port 1(bridge_slave_0) entered forwarding state
[  127.642326][  T388] usb 1-1: Using ep0 maxpacket: 32
[  127.934719][    T8] bridge0: port 1(bridge_slave_0) entered disabled state
[  127.950282][    T8] bridge0: port 2(bridge_slave_1) entered disabled state
[  128.021500][  T388] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  128.037757][  T388] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  128.055890][  T388] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00
[  128.073287][  T388] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  128.081827][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  128.089516][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  128.098126][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  128.108576][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  128.109158][  T388] usb 1-1: config 0 descriptor??
[  128.130271][    T8] bridge0: port 1(bridge_slave_0) entered blocking state
[  128.137606][    T8] bridge0: port 1(bridge_slave_0) entered forwarding state
[  128.146544][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  128.161639][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  128.176317][    T8] bridge0: port 2(bridge_slave_1) entered blocking state
[  128.183946][    T8] bridge0: port 2(bridge_slave_1) entered forwarding state
[  128.211647][    T6] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  128.230292][    T6] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  128.287038][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  128.296918][    T6] usb 8-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00
[  128.298444][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  128.314605][    T6] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  128.346893][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  128.370670][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  128.435562][    T6] usb 8-1: config 0 descriptor??
[  128.469260][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  128.480324][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  128.498880][ T3748] device veth0_vlan entered promiscuous mode
[  128.515626][ T3748] device veth1_macvtap entered promiscuous mode
[  128.532760][ T3771] overlayfs: missing 'lowerdir'
[  128.565399][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  128.577048][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  128.581764][   T30] audit: type=1400 audit(1761024907.438:334): avc:  denied  { associate } for  pid=3772 comm="syz.3.1179" name="core" scontext=root:object_r:etc_runtime_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1
[  128.612078][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  128.630772][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  128.642507][  T388] koneplus 0003:1E7D:2D51.0011: unknown main item tag 0x0
[  128.648616][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  128.652898][  T388] koneplus 0003:1E7D:2D51.0011: unknown main item tag 0x0
[  128.668053][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  128.676536][  T388] koneplus 0003:1E7D:2D51.0011: unknown main item tag 0x0
[  128.677367][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  128.690358][  T388] koneplus 0003:1E7D:2D51.0011: unknown main item tag 0x0
[  128.692647][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  128.708284][  T388] koneplus 0003:1E7D:2D51.0011: unknown main item tag 0x0
[  128.708741][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  128.724330][  T388] koneplus 0003:1E7D:2D51.0011: hidraw0: USB HID v0.00 Device [HID 1e7d:2d51] on usb-dummy_hcd.0-1/input0
[  128.745454][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  128.753505][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  128.851436][  T388] koneplus 0003:1E7D:2D51.0011: couldn't init struct koneplus_device
[  128.859677][  T388] koneplus 0003:1E7D:2D51.0011: couldn't install mouse
[  128.867691][  T388] koneplus: probe of 0003:1E7D:2D51.0011 failed with error -71
[  128.877566][  T388] usb 1-1: USB disconnect, device number 11
[  128.901999][   T10] device bridge_slave_1 left promiscuous mode
[  128.903322][ T3778] fido_id[3778]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory
[  128.911521][   T10] bridge0: port 2(bridge_slave_1) entered disabled state
[  128.932675][ T3074] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[  128.940840][   T10] device bridge_slave_0 left promiscuous mode
[  128.947543][ T3752] UDC core: couldn't find an available UDC or it's busy: -16
[  128.955568][   T10] bridge0: port 1(bridge_slave_0) entered disabled state
[  128.963143][ T3752] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  128.972426][   T10] device veth1_macvtap left promiscuous mode
[  128.978879][   T10] device veth0_vlan left promiscuous mode
[  128.992857][    T6] hid-generic 0003:0D8C:0022.0012: unknown main item tag 0x0
[  129.003727][    T6] hid-generic 0003:0D8C:0022.0012: unknown main item tag 0x0
[  129.019032][    T6] hid-generic 0003:0D8C:0022.0012: unknown main item tag 0x0
[  129.035215][    T6] hid-generic 0003:0D8C:0022.0012: unknown main item tag 0x0
[  129.052702][    T6] hid-generic 0003:0D8C:0022.0012: hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.7-1/input0
[  129.071563][   T26] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  129.193178][ T3752] UDC core: couldn't find an available UDC or it's busy: -16
[  129.200858][ T3752] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  129.209093][   T20] usb 8-1: USB disconnect, device number 3
[  129.291489][ T3074] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  129.302522][ T3074] usb 9-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023
[  129.312946][ T3074] usb 9-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1023
[  129.331425][   T26] usb 2-1: Using ep0 maxpacket: 32
[  129.452160][   T26] usb 2-1: config 0 has an invalid interface number: 184 but max is 0
[  129.462868][   T26] usb 2-1: config 0 has no interface number 0
[  129.470066][   T26] usb 2-1: config 0 interface 184 has no altsetting 0
[  129.481462][ T3074] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  129.491140][ T3074] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  129.499671][ T3074] usb 9-1: Product: syz
[  129.504386][ T3074] usb 9-1: Manufacturer: syz
[  129.509098][ T3074] usb 9-1: SerialNumber: syz
[  129.663120][   T26] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  129.672584][   T26] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  129.684986][   T26] usb 2-1: Product: syz
[  129.690736][   T26] usb 2-1: Manufacturer: syz
[  129.696467][   T26] usb 2-1: SerialNumber: syz
[  129.713588][   T26] usb 2-1: config 0 descriptor??
[  129.761849][ T3775] raw-gadget.2 gadget: fail, usb_ep_enable returned -22
[  129.769359][ T3775] raw-gadget.2 gadget: fail, usb_ep_enable returned -22
[  129.777708][   T26] smsc75xx v1.0.0
[  129.842620][ T3804] loop7: detected capacity change from 0 to 256
[  129.880572][ T3804] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  130.421504][   T26] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32
[  130.460824][   T26] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32
[  130.487704][   T26] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind
[  130.504887][   T26] smsc75xx: probe of 2-1:0.184 failed with error -32
[  132.221471][   T30] audit: type=1400 audit(1761024909.498:335): avc:  denied  { watch } for  pid=3809 comm="syz.0.1193" path="/222/file0" dev="tmpfs" ino=1234 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  132.252563][ T3814] raw-gadget.2 gadget: fail, usb_ep_enable returned -22
[  132.259579][ T3814] raw-gadget.2 gadget: fail, usb_ep_enable returned -22
[  132.274302][  T604] usb 2-1: USB disconnect, device number 3
[  132.361886][ T3074] cdc_ncm 9-1:1.0: failed to get mac address
[  132.394179][ T3074] cdc_ncm 9-1:1.0: bind() failure
[  132.431463][ T3074] cdc_ncm: probe of 9-1:1.1 failed with error -71
[  132.481477][ T3074] cdc_mbim: probe of 9-1:1.1 failed with error -71
[  132.498575][ T3074] usb 9-1: USB disconnect, device number 2
[  132.661583][   T26] usb 1-1: new full-speed USB device number 12 using dummy_hcd
[  133.606583][ T3852] loop7: detected capacity change from 0 to 1024
[  133.683505][ T3852] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  133.685406][  T604] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  133.821809][   T26] usb 1-1: config 0 has too many interfaces: 249, using maximum allowed: 32
[  133.834414][   T26] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 249
[  133.843623][   T26] usb 1-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  133.854659][   T26] usb 1-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid maxpacket 255, setting to 64
[  133.865549][   T26] usb 1-1: config 0 interface 0 has no altsetting 0
[  133.951505][   T26] usb 1-1: New USB device found, idVendor=05ac, idProduct=0222, bcdDevice= 0.00
[  133.960624][   T26] usb 1-1: New USB device strings: Mfr=0, Product=9, SerialNumber=0
[  133.968759][   T26] usb 1-1: Product: syz
[  133.971392][  T604] usb 2-1: Using ep0 maxpacket: 32
[  133.977836][   T26] usb 1-1: config 0 descriptor??
[  134.001451][ T3825] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  134.271531][  T604] usb 2-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f
[  134.280692][  T604] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  134.289090][  T604] usb 2-1: Product: syz
[  134.293400][  T604] usb 2-1: Manufacturer: syz
[  134.298008][  T604] usb 2-1: SerialNumber: syz
[  134.306506][  T604] usb 2-1: config 0 descriptor??
[  134.442290][   T26] apple 0003:05AC:0222.0013: unknown main item tag 0x0
[  134.449287][   T26] apple 0003:05AC:0222.0013: unknown main item tag 0x0
[  134.457107][   T26] apple 0003:05AC:0222.0013: hidraw0: USB HID v1.01 Device [syz] on usb-dummy_hcd.0-1/input0
[  134.648353][  T617] usb 1-1: USB disconnect, device number 12
[  134.916966][ T3876] loop7: detected capacity change from 0 to 16
[  135.002503][ T3876] erofs: (device loop7): mounted with root inode @ nid 36.
[  135.010513][ T3876] erofs: (device loop7): init_inode_xattrs: xattr_isize 12 of nid 46 is not supported yet
[  135.020607][ T3876] SELinux: inode_doinit_use_xattr:  getxattr returned 95 for dev=loop7 ino=46
[  135.029603][ T3876] erofs: (device loop7): init_inode_xattrs: xattr_isize 12 of nid 46 is not supported yet
[  135.076568][   T30] audit: type=1400 audit(1761024913.938:336): avc:  denied  { create } for  pid=3878 comm="syz.3.1219" dev="anon_inodefs" ino=47050 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  135.098566][   T30] audit: type=1400 audit(1761024913.938:337): avc:  denied  { ioctl } for  pid=3878 comm="syz.3.1219" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=47050 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  135.131296][   T30] audit: type=1400 audit(1761024913.998:338): avc:  denied  { create } for  pid=3878 comm="syz.3.1219" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  135.165852][ T3883] 9pnet: Insufficient options for proto=fd
[  135.179953][   T30] audit: type=1400 audit(1761024913.998:339): avc:  denied  { setopt } for  pid=3878 comm="syz.3.1219" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  135.258867][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready
[  135.267400][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  135.277709][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready
[  135.296427][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  135.319803][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  135.368919][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  135.406841][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  135.415289][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  135.434886][ T3898] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1227'.
[  135.444008][ T3898] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1227'.
[  135.499459][ T3904] SELinux: failed to load policy
[  135.591403][ T3850] usb 2-1: USB disconnect, device number 4
[  135.611042][ T3911] device gre1 entered promiscuous mode
[  135.655219][ T3916] 9pnet: Insufficient options for proto=fd
[  135.704668][ T3924] tipc: Started in network mode
[  135.709577][ T3924] tipc: Node identity 4a9db770767, cluster identity 4711
[  135.717250][ T3924] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  135.725323][ T3924] device syzkaller0 entered promiscuous mode
[  135.735723][ T3924] tipc: Resetting bearer <eth:syzkaller0>
[  135.743411][ T3923] tipc: Resetting bearer <eth:syzkaller0>
[  135.750292][ T3923] tipc: Disabling bearer <eth:syzkaller0>
[  135.801399][   T60] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  135.961648][ T1486] usb 9-1: new low-speed USB device number 3 using dummy_hcd
[  135.979204][   T30] audit: type=1400 audit(1761024914.838:340): avc:  denied  { create } for  pid=3932 comm="syz.3.1242" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  135.998924][   T30] audit: type=1400 audit(1761024914.838:341): avc:  denied  { read } for  pid=3932 comm="syz.3.1242" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  136.031869][   T30] audit: type=1400 audit(1761024914.898:342): avc:  denied  { write } for  pid=3932 comm="syz.3.1242" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  136.081410][   T60] usb 1-1: Using ep0 maxpacket: 16
[  136.121451][ T3850] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  136.211452][   T60] usb 1-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0
[  136.221663][   T60] usb 1-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0
[  136.231977][   T60] usb 1-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  136.245006][   T60] usb 1-1: config 1 interface 0 has no altsetting 0
[  136.341513][ T1486] usb 9-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[  136.350648][ T1486] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  136.359430][ T1486] usb 9-1: config 0 descriptor??
[  136.391418][ T3850] usb 2-1: Using ep0 maxpacket: 16
[  136.411572][   T60] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  136.420808][   T60] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  136.428889][   T60] usb 1-1: Product: syz
[  136.433151][   T60] usb 1-1: Manufacturer: syz
[  136.437747][   T60] usb 1-1: SerialNumber: syz
[  136.521476][ T3850] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  136.611487][ T3850] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  136.621773][ T1486] asix 9-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random
[  136.703507][   T60] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 13 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8
[  136.711523][ T3850] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  136.881509][ T3850] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=9d.3d
[  136.890688][ T3850] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  136.898809][ T3850] usb 2-1: Product: syz
[  136.903068][ T3850] usb 2-1: Manufacturer: syz
[  136.907719][ T3850] usb 2-1: SerialNumber: syz
[  136.913372][ T3850] usb 2-1: config 0 descriptor??
[  136.917777][   T30] audit: type=1400 audit(1761024915.778:343): avc:  denied  { read write } for  pid=3906 comm="syz.0.1230" name="lp0" dev="devtmpfs" ino=1502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1
[  136.942116][   T30] audit: type=1400 audit(1761024915.778:344): avc:  denied  { open } for  pid=3906 comm="syz.0.1230" path="/dev/usb/lp0" dev="devtmpfs" ino=1502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1
[  137.081418][ T3907] usblp0:failed reading printer status (-32)
[  137.089466][   T60] usb 1-1: USB disconnect, device number 13
[  137.098025][   T60] usblp0: removed
[  137.172114][ T1701] usb 2-1: USB disconnect, device number 5
[  137.774269][ T3996] loop1: detected capacity change from 0 to 128
[  137.798001][ T3996] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  137.808704][ T3996] ext4 filesystem being mounted at /13/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  137.847710][   T30] kauditd_printk_skb: 1 callbacks suppressed
[  137.847725][   T30] audit: type=1400 audit(1761024916.708:346): avc:  denied  { create } for  pid=3995 comm="syz.1.1268" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[  137.874648][   T30] audit: type=1400 audit(1761024916.708:347): avc:  denied  { read write open } for  pid=3995 comm="syz.1.1268" path="/13/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file1" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[  137.919888][   T30] audit: type=1400 audit(1761024916.708:348): avc:  denied  { setattr } for  pid=3995 comm="syz.1.1268" path="/13/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file1" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[  137.964476][   T30] audit: type=1400 audit(1761024916.738:349): avc:  denied  { ioctl } for  pid=3995 comm="syz.1.1268" path="/13/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file1" dev="loop1" ino=12 ioctlcmd=0x6609 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[  137.964767][ T3850] usb 1-1: new full-speed USB device number 14 using dummy_hcd
[  138.236232][ T4005] overlayfs: missing 'lowerdir'
[  138.571453][ T3850] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  138.580622][ T3850] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  138.588984][ T3850] usb 1-1: Product: syz
[  138.593232][ T3850] usb 1-1: Manufacturer: syz
[  138.597823][ T3850] usb 1-1: SerialNumber: syz
[  138.606180][ T3850] usb 1-1: config 0 descriptor??
[  138.671461][ T1486] asix 9-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  138.681726][ T1486] asix: probe of 9-1:0.0 failed with error -71
[  138.688751][ T1486] usb 9-1: USB disconnect, device number 3
[  139.027346][ T4013] overlayfs: failed to clone upperpath
[  139.036631][ T4013] overlayfs: failed to clone upperpath
[  139.087090][ T4027] device bridge_slave_0 left promiscuous mode
[  139.093435][ T4027] bridge0: port 1(bridge_slave_0) entered disabled state
[  139.102166][ T4027] device bridge_slave_1 left promiscuous mode
[  139.108632][ T4027] bridge0: port 2(bridge_slave_1) entered disabled state
[  139.984705][   T60] usb 1-1: USB disconnect, device number 14
[  140.000903][ T4048] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1287'.
[  140.047000][ T4052] loop8: detected capacity change from 0 to 128
[  140.057381][ T4052] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  140.069167][ T4052] ext4 filesystem being mounted at /16/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  140.155692][ T4060] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue
[  140.179840][   T30] audit: type=1400 audit(1761024919.038:350): avc:  denied  { ioctl } for  pid=4064 comm="syz.7.1295" path="socket:[48380]" dev="sockfs" ino=48380 ioctlcmd=0x8b37 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  140.299450][ T4084] overlayfs: failed to clone upperpath
[  140.401412][   T60] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[  140.641420][   T60] usb 1-1: Using ep0 maxpacket: 32
[  140.761456][   T60] usb 1-1: config 0 has an invalid interface number: 184 but max is 0
[  140.769728][   T60] usb 1-1: config 0 has no interface number 0
[  140.776142][   T60] usb 1-1: config 0 interface 184 has no altsetting 0
[  140.951442][   T60] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  140.960535][   T60] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  140.968660][   T60] usb 1-1: Product: syz
[  140.972870][   T60] usb 1-1: Manufacturer: syz
[  140.977467][   T60] usb 1-1: SerialNumber: syz
[  140.982798][   T60] usb 1-1: config 0 descriptor??
[  141.019054][ T4115] overlayfs: missing 'lowerdir'
[  141.024723][   T60] smsc75xx v1.0.0
[  141.055137][ T4118] netlink: 320 bytes leftover after parsing attributes in process `syz.1.1319'.
[  141.461457][   T60] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32
[  141.472439][   T60] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32
[  141.482193][   T60] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind
[  141.492814][   T60] smsc75xx: probe of 1-1:0.184 failed with error -32
[  142.188407][ T4156] loop8: detected capacity change from 0 to 40427
[  142.234008][ T4156] F2FS-fs (loop8): fault_injection options not supported
[  142.242329][ T4156] F2FS-fs (loop8): invalid crc value
[  142.265738][ T4156] F2FS-fs (loop8): Found nat_bits in checkpoint
[  142.303967][ T4156] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5
[  142.327831][   T30] audit: type=1400 audit(1761024921.188:351): avc:  denied  { append } for  pid=4155 comm="syz.8.1334" path="/23/file1/blkio.bfq.avg_queue_size" dev="loop8" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[  142.441439][   T30] audit: type=1400 audit(1761024921.298:352): avc:  denied  { map } for  pid=4155 comm="syz.8.1334" path="/23/file1/blkio.bfq.avg_queue_size" dev="loop8" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[  142.488758][ T3607] attempt to access beyond end of device
[  142.488758][ T3607] loop8: rw=2049, want=45104, limit=40427
[  142.520257][ T3850] usb 1-1: USB disconnect, device number 15
[  142.589808][ T4176] loop0: detected capacity change from 0 to 16
[  142.612207][ T4176] erofs: (device loop0): mounted with root inode @ nid 36.
[  142.620453][ T4176] erofs: (device loop0): init_inode_xattrs: xattr_isize 12 of nid 46 is not supported yet
[  142.631483][ T4176] SELinux: inode_doinit_use_xattr:  getxattr returned 95 for dev=loop0 ino=46
[  142.650389][ T4176] erofs: (device loop0): init_inode_xattrs: xattr_isize 12 of nid 46 is not supported yet
[  142.709615][ T4178] loop0: detected capacity change from 0 to 512
[  142.743838][ T4178] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  142.793745][ T4178] EXT4-fs (loop0): 1 truncate cleaned up
[  142.813319][ T4178] EXT4-fs (loop0): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,resuid=0x000000000000ee01,debug_want_extra_isize=0x0000000000000068,lazytime,nombcache,noload,,errors=continue. Quota mode: none.
[  143.271431][  T617] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[  143.511399][  T617] usb 1-1: Using ep0 maxpacket: 32
[  143.641490][  T617] usb 1-1: config 0 has an invalid interface number: 184 but max is 0
[  143.649991][  T617] usb 1-1: config 0 has no interface number 0
[  143.660122][  T617] usb 1-1: config 0 interface 184 has no altsetting 0
[  143.751703][ T4220] loop8: detected capacity change from 0 to 128
[  143.841828][  T617] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  143.850975][  T617] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  143.871173][  T617] usb 1-1: Product: syz
[  143.877649][  T617] usb 1-1: Manufacturer: syz
[  143.890043][  T617] usb 1-1: SerialNumber: syz
[  143.896270][  T617] usb 1-1: config 0 descriptor??
[  143.942163][  T617] smsc75xx v1.0.0
[  143.978090][ T4222] loop8: detected capacity change from 0 to 40427
[  144.094831][ T4222] F2FS-fs (loop8): fault_injection options not supported
[  144.103031][ T4222] F2FS-fs (loop8): invalid crc value
[  144.109728][ T4222] F2FS-fs (loop8): Found nat_bits in checkpoint
[  144.139894][ T4222] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5
[  144.381423][  T617] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32
[  144.392927][  T617] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32
[  144.402894][  T617] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind
[  144.413370][  T617] smsc75xx: probe of 1-1:0.184 failed with error -32
[  144.706176][ T3607] attempt to access beyond end of device
[  144.706176][ T3607] loop8: rw=2049, want=45104, limit=40427
[  146.144900][ T1701] usb 1-1: USB disconnect, device number 16
[  146.240783][   T30] audit: type=1326 audit(1761024925.098:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4279 comm="syz.1.1382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c34e9ffc9 code=0x7ffc0000
[  146.265472][   T30] audit: type=1326 audit(1761024925.098:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4279 comm="syz.1.1382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c34e9ffc9 code=0x7ffc0000
[  146.290194][   T30] audit: type=1326 audit(1761024925.128:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4279 comm="syz.1.1382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9c34e9ffc9 code=0x7ffc0000
[  146.314383][ T4274] pit: kvm: requested 75428 ns i8254 timer period limited to 200000 ns
[  146.314835][   T30] audit: type=1400 audit(1761024925.128:356): avc:  denied  { create } for  pid=4279 comm="syz.1.1382" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  146.342938][   T30] audit: type=1326 audit(1761024925.128:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4279 comm="syz.1.1382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c34e9ffc9 code=0x7ffc0000
[  146.343143][ T4274] pit: kvm: requested 66209 ns i8254 timer period limited to 200000 ns
[  146.371241][   T30] audit: type=1326 audit(1761024925.128:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4279 comm="syz.1.1382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c34e9ffc9 code=0x7ffc0000
[  146.396986][ T4274] pit: kvm: requested 79619 ns i8254 timer period limited to 200000 ns
[  146.400622][   T30] audit: type=1326 audit(1761024925.148:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4279 comm="syz.1.1382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f9c34e9ffc9 code=0x7ffc0000
[  146.429940][   T30] audit: type=1326 audit(1761024925.148:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4279 comm="syz.1.1382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c34e9ffc9 code=0x7ffc0000
[  146.431785][ T4274] pit: kvm: requested 170133 ns i8254 timer period limited to 200000 ns
[  146.453428][   T30] audit: type=1326 audit(1761024925.148:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4279 comm="syz.1.1382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c34e9ffc9 code=0x7ffc0000
[  146.493841][ T4293] device bridge_slave_0 left promiscuous mode
[  146.500060][ T4293] bridge0: port 1(bridge_slave_0) entered disabled state
[  146.508861][ T4293] device bridge_slave_1 left promiscuous mode
[  146.515300][ T4293] bridge0: port 2(bridge_slave_1) entered disabled state
[  146.548705][ T4295] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1389'.
[  146.846248][ T4312] overlayfs: missing 'lowerdir'
[  147.532624][ T4325] fuse: Bad value for 'fd'
[  147.678862][ T4338] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  147.928738][ T4365] loop8: detected capacity change from 0 to 256
[  147.982519][ T4365] FAT-fs (loop8): Directory bread(block 64) failed
[  147.996723][ T4365] FAT-fs (loop8): Directory bread(block 65) failed
[  148.003403][ T4365] FAT-fs (loop8): Directory bread(block 66) failed
[  148.011726][ T4365] FAT-fs (loop8): Directory bread(block 67) failed
[  148.018411][ T4365] FAT-fs (loop8): Directory bread(block 68) failed
[  148.026095][ T4365] FAT-fs (loop8): Directory bread(block 69) failed
[  148.033425][ T4365] FAT-fs (loop8): Directory bread(block 70) failed
[  148.040050][ T4365] FAT-fs (loop8): Directory bread(block 71) failed
[  148.046916][ T4365] FAT-fs (loop8): Directory bread(block 72) failed
[  148.054134][ T4365] FAT-fs (loop8): Directory bread(block 73) failed
[  148.085337][ T4375] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  148.092789][ T4375] IPv6: NLM_F_CREATE should be set when creating new route
[  148.094721][ T4365] attempt to access beyond end of device
[  148.094721][ T4365] loop8: rw=0, want=1196, limit=256
[  148.130808][   T30] audit: type=1400 audit(1761024926.988:362): avc:  denied  { ioctl } for  pid=4377 comm="syz.0.1426" path="socket:[49352]" dev="sockfs" ino=49352 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  148.136291][ T4378] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1426'.
[  148.546369][ T4399] SELinux: failed to load policy
[  148.826102][ T4410] loop0: detected capacity change from 0 to 40427
[  148.838568][ T4410] F2FS-fs (loop0): fault_injection options not supported
[  148.841380][   T26] usb 9-1: new high-speed USB device number 4 using dummy_hcd
[  148.901955][ T4410] F2FS-fs (loop0): invalid crc value
[  148.928449][ T4410] F2FS-fs (loop0): Found nat_bits in checkpoint
[  148.987127][ T4410] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  149.139204][ T4431] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1446'.
[  149.141403][   T26] usb 9-1: Using ep0 maxpacket: 32
[  149.167754][ T4434] netem: change failed
[  149.301457][   T26] usb 9-1: config 0 has an invalid interface number: 12 but max is 0
[  149.314920][   T26] usb 9-1: config 0 has no interface number 0
[  149.323915][   T26] usb 9-1: config 0 interface 12 has no altsetting 0
[  149.511589][   T26] usb 9-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[  149.537169][   T26] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  149.550332][  T285] attempt to access beyond end of device
[  149.550332][  T285] loop0: rw=2049, want=45104, limit=40427
[  149.554960][   T26] usb 9-1: Product: syz
[  149.589787][   T26] usb 9-1: Manufacturer: syz
[  149.609649][   T26] usb 9-1: SerialNumber: syz
[  149.630997][   T26] usb 9-1: config 0 descriptor??
[  150.554399][ T4504] loop0: detected capacity change from 0 to 16
[  150.592386][ T4504] erofs: (device loop0): mounted with root inode @ nid 36.
[  151.347057][ T4523] loop0: detected capacity change from 0 to 1024
[  151.355585][ T4523] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  151.383102][ T4523] EXT4-fs (loop0): mounted filesystem without journal. Opts: dioread_nolock,data_err=abort,inlinecrypt,noauto_da_alloc,data_err=ignore,delalloc,errors=remount-ro,grpquota,discard,user_xattr,mb_optimize_scan=0x0000000000000001,errors=remount-ro,. Quota mode: writeback.
[  151.421406][   T30] kauditd_printk_skb: 8 callbacks suppressed
[  151.421423][   T30] audit: type=1400 audit(1761024930.278:371): avc:  denied  { setattr } for  pid=4522 comm="syz.0.1482" name="work" dev="loop0" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1
[  151.449683][   T30] audit: type=1400 audit(1761024930.288:372): avc:  denied  { rename } for  pid=4522 comm="syz.0.1482" name="#17" dev="loop0" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[  151.471932][   T30] audit: type=1400 audit(1761024930.288:373): avc:  denied  { unlink } for  pid=4522 comm="syz.0.1482" name="#17" dev="loop0" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1
[  151.494609][   T30] audit: type=1400 audit(1761024930.288:374): avc:  denied  { unlink } for  pid=4522 comm="syz.0.1482" name="#18" dev="loop0" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[  151.497549][  T285] EXT4-fs error (device loop0): mb_free_blocks:1860: group 0, inode 16: block 81:freeing already freed block (bit 5); block bitmap corrupt.
[  151.516692][   T30] audit: type=1400 audit(1761024930.298:375): avc:  denied  { write } for  pid=4522 comm="syz.0.1482" name="/" dev="overlay" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  151.531699][  T285] EXT4-fs (loop0): Remounting filesystem read-only
[  151.552786][   T30] audit: type=1400 audit(1761024930.298:376): avc:  denied  { add_name } for  pid=4522 comm="syz.0.1482" name=131377C5FC35D41454D5D41D29AD1A6029598146E6BE166E41AD0DBD4054033C9F33BBDA8224A2F3D772E7636E48B33CBF708372E8F1B9933EC5127743BE2206209EF02DF9CBF2F6E880D338 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  151.589826][   T39] usb 9-1: USB disconnect, device number 4
[  151.662056][ T4535] loop0: detected capacity change from 0 to 128
[  151.693620][   T30] audit: type=1400 audit(1761024930.558:377): avc:  denied  { mount } for  pid=4534 comm="syz.0.1488" name="/" dev="loop0" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1
[  151.724297][   T30] audit: type=1400 audit(1761024930.588:378): avc:  denied  { unmount } for  pid=285 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1
[  151.786874][ T4545] loop0: detected capacity change from 0 to 512
[  151.827964][ T4545] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  151.842032][ T4545] ext4 filesystem being mounted at /257/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  152.020715][ T4568] loop8: detected capacity change from 0 to 512
[  152.062295][ T4568] EXT4-fs (loop8): Test dummy encryption mode enabled
[  152.088611][ T4568] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode
[  152.193581][ T4568] EXT4-fs error (device loop8): ext4_orphan_get:1427: comm syz.8.1500: bad orphan inode 131083
[  152.357929][ T4568] EXT4-fs (loop8): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable,noload,,errors=continue. Quota mode: none.
[  153.151380][ T1486] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[  153.771546][ T1486] usb 1-1: config 220 has an invalid interface number: 76 but max is 2
[  153.787543][ T1486] usb 1-1: config 220 contains an unexpected descriptor of type 0x2, skipping
[  153.796801][ T1486] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  153.807590][ T1486] usb 1-1: config 220 has no interface number 2
[  153.814361][ T1486] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  153.832809][ T1486] usb 1-1: config 220 interface 0 has no altsetting 0
[  153.839677][ T1486] usb 1-1: config 220 interface 76 has no altsetting 0
[  153.846887][ T1486] usb 1-1: config 220 interface 1 has no altsetting 0
[  153.900906][   T30] audit: type=1400 audit(1761024932.758:379): avc:  denied  { read write } for  pid=4624 comm="syz.8.1522" name="ppp" dev="devtmpfs" ino=154 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  153.930477][   T30] audit: type=1400 audit(1761024932.788:380): avc:  denied  { open } for  pid=4624 comm="syz.8.1522" path="/dev/ppp" dev="devtmpfs" ino=154 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  154.011463][ T1486] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  154.031367][ T1486] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  154.040565][ T1486] usb 1-1: Product: syz
[  154.045460][ T1486] usb 1-1: Manufacturer: syz
[  154.050141][ T1486] usb 1-1: SerialNumber: syz
[  154.421557][ T1486] usb 1-1: Found UVC 7.01 device syz (8086:0b07)
[  154.427955][ T1486] usb 1-1: No valid video chain found.
[  154.441408][ T1486] usb 1-1: selecting invalid altsetting 0
[  154.536807][ T1486] usb 1-1: USB disconnect, device number 17
[  155.263117][ T4668] loop0: detected capacity change from 0 to 16
[  155.357408][ T4668] erofs: (device loop0): mounted with root inode @ nid 36.
[  155.416548][ T4668] erofs: (device loop0): init_inode_xattrs: xattr_isize 12 of nid 46 is not supported yet
[  155.428718][ T4668] SELinux: inode_doinit_use_xattr:  getxattr returned 95 for dev=loop0 ino=46
[  155.439626][ T4668] erofs: (device loop0): init_inode_xattrs: xattr_isize 12 of nid 46 is not supported yet
[  155.628931][ T4688] overlayfs: missing 'lowerdir'
[  158.189363][   T30] kauditd_printk_skb: 6 callbacks suppressed
[  158.189378][   T30] audit: type=1400 audit(1761024937.048:387): avc:  denied  { bind } for  pid=4819 comm="syz.8.1604" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  158.215327][   T30] audit: type=1400 audit(1761024937.058:388): avc:  denied  { listen } for  pid=4819 comm="syz.8.1604" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  158.240363][   T30] audit: type=1400 audit(1761024937.058:389): avc:  denied  { write } for  pid=4819 comm="syz.8.1604" path="socket:[51214]" dev="sockfs" ino=51214 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  158.441470][   T30] audit: type=1400 audit(1761024937.308:390): avc:  denied  { wake_alarm } for  pid=4826 comm="syz.1.1607" capability=35  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  158.748182][ T4846] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1616'.
[  158.895741][ T4855] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1619'.
[  160.312491][   T30] audit: type=1400 audit(1761024939.178:391): avc:  denied  { create } for  pid=4877 comm="syz.3.1629" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  160.439245][   T30] audit: type=1400 audit(1761024939.198:392): avc:  denied  { getopt } for  pid=4877 comm="syz.3.1629" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  160.458687][   T30] audit: type=1400 audit(1761024939.198:393): avc:  denied  { ioctl } for  pid=4877 comm="syz.3.1629" path="socket:[50738]" dev="sockfs" ino=50738 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  160.490782][   T30] audit: type=1400 audit(1761024939.348:394): avc:  denied  { write } for  pid=4877 comm="syz.3.1629" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  161.258043][ T4916] netlink: 'syz.1.1644': attribute type 4 has an invalid length.
[  161.915330][   T30] audit: type=1400 audit(1761024940.778:395): avc:  denied  { getopt } for  pid=4941 comm="syz.3.1656" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  163.000227][ T4968] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  163.021935][   T30] audit: type=1400 audit(1761024941.878:396): avc:  denied  { setopt } for  pid=4971 comm="syz.0.1669" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  163.599224][   T30] audit: type=1400 audit(1761024942.458:397): avc:  denied  { map } for  pid=5005 comm="syz.7.1683" path="socket:[51404]" dev="sockfs" ino=51404 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1
[  164.399062][   T30] audit: type=1326 audit(1761025033.256:398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5063 comm="syz.7.1708" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4aaf783fc9 code=0x0
[  165.031487][   T30] audit: type=1400 audit(1761025033.866:399): avc:  denied  { watch_reads } for  pid=5085 comm="syz.8.1718" path="/97" dev="tmpfs" ino=529 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  165.193238][ T5105] overlayfs: missing 'lowerdir'
[  166.650115][ T5150] binder: Bad value for 'stats'
[  167.435118][ T5182] binder: Bad value for 'stats'
[  168.711453][   T30] audit: type=1400 audit(1761025037.526:400): avc:  denied  { setattr } for  pid=5227 comm="syz.8.1775" name="/" dev="configfs" ino=47 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  169.048508][ T5248] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1776'.
[  169.057777][ T5248] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1776'.
[  172.193628][   T30] audit: type=1400 audit(1761025041.056:401): avc:  denied  { execute_no_trans } for  pid=5318 comm="syz.8.1815" path=2F6D656D66643AA39F6EB4645204693502ACCEE1889D5B4038D7CE1F2039497F151D933DB5E75C274CE6D28EBC294A7454447181CF81BAE531F520C8103EC95C85174CBFCF91DF4DF3025E542A202864656C6574656429 dev="tmpfs" ino=1415 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  173.445612][ T5357] 9pnet: Insufficient options for proto=fd
[  173.950036][   T30] audit: type=1400 audit(1761025042.806:402): avc:  denied  { ioctl } for  pid=5366 comm="syz.0.1835" path="socket:[52316]" dev="sockfs" ino=52316 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  174.106084][ T5381] 9pnet: Insufficient options for proto=fd
[  174.373148][ T5398] Illegal XDP return value 2553145257, expect packet loss!
[  175.786591][ T5444] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1869'.
[  176.673758][   T30] audit: type=1400 audit(1761025045.536:403): avc:  denied  { lock } for  pid=5475 comm="syz.0.1882" path="socket:[52075]" dev="sockfs" ino=52075 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  177.453277][ T5526] 9pnet: Insufficient options for proto=fd
[  178.339137][ T5550] 9pnet: Insufficient options for proto=fd
[  178.572234][ T5577] 9pnet: Insufficient options for proto=fd
[  179.002442][ T5601] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1936'.
[  179.931075][ T5646] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1956'.
[  179.990898][   T30] audit: type=1400 audit(1761025048.846:404): avc:  denied  { setopt } for  pid=5662 comm="syz.7.1964" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  180.842056][ T5692] 9pnet: Insufficient options for proto=fd
[  181.379539][   T30] audit: type=1400 audit(1761025050.226:405): avc:  denied  { execute } for  pid=5696 comm="syz.3.1977" name="file0" dev="ramfs" ino=53378 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1
[  181.581435][   T30] audit: type=1400 audit(1761025050.226:406): avc:  denied  { execute_no_trans } for  pid=5696 comm="syz.3.1977" path="/file0" dev="ramfs" ino=53378 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1
[  181.696371][ T5708] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1983'.
[  184.387596][ T5809] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2022'.
[  184.441647][ T5809] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2022'.
[  184.725254][   T30] audit: type=1400 audit(1761025053.586:407): avc:  denied  { mount } for  pid=5816 comm="syz.3.2026" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1
[  184.819202][ T5832] cgroup: noprefix used incorrectly
[  185.031832][   T30] audit: type=1400 audit(1761025053.836:408): avc:  denied  { ioctl } for  pid=5851 comm="syz.3.2041" path="/516/file0" dev="tmpfs" ino=2773 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  185.598720][ T5870] fuse: Bad value for 'fd'
[  185.862619][ T5887] xt_socket: unknown flags 0x4c
[  187.580132][   T30] audit: type=1326 audit(1761025056.436:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5961 comm="syz.1.2084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c34e9ffc9 code=0x7ffc0000
[  187.671048][   T30] audit: type=1326 audit(1761025056.486:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5961 comm="syz.1.2084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c34e9ffc9 code=0x7ffc0000
[  187.707980][   T30] audit: type=1326 audit(1761025056.486:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5961 comm="syz.1.2084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=255 compat=0 ip=0x7f9c34e9ffc9 code=0x7ffc0000
[  187.743546][ T5981] device batadv_slave_1 entered promiscuous mode
[  187.750013][   T30] audit: type=1326 audit(1761025056.486:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5961 comm="syz.1.2084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c34e9ffc9 code=0x7ffc0000
[  187.775076][   T30] audit: type=1326 audit(1761025056.486:413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5961 comm="syz.1.2084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c34e9ffc9 code=0x7ffc0000
[  187.798753][ T5979] device batadv_slave_1 left promiscuous mode
[  187.812826][   T30] audit: type=1326 audit(1761025056.486:414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5961 comm="syz.1.2084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9c34e9ffc9 code=0x7ffc0000
[  187.860580][   T30] audit: type=1326 audit(1761025056.486:415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5961 comm="syz.1.2084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c34e9ffc9 code=0x7ffc0000
[  187.894523][   T30] audit: type=1326 audit(1761025056.486:416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5961 comm="syz.1.2084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c34e9ffc9 code=0x7ffc0000
[  187.921944][   T30] audit: type=1326 audit(1761025056.486:417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5961 comm="syz.1.2084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=75 compat=0 ip=0x7f9c34e9ffc9 code=0x7ffc0000
[  188.499969][ T6039] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  188.511285][ T6039] FAT-fs (loop3): unable to read boot sector
[  190.133940][ T6084] 9pnet: Could not find request transport: fd0x0000000000000003
[  192.269710][ T6136] overlayfs: missing 'lowerdir'
[  194.680609][ T6192] overlayfs: missing 'lowerdir'
[  194.719213][    C1] hrtimer: interrupt took 37701 ns
[  196.179825][ T6214] 9pnet: Insufficient options for proto=fd
[  196.188398][ T6209] device veth1_to_bridge entered promiscuous mode
[  196.255837][ T3773] bridge0: port 2(bridge_slave_1) entered disabled state
[  197.212449][ T6242] overlayfs: missing 'lowerdir'
[  197.218901][ T6248] 9pnet: Insufficient options for proto=fd
[  199.078917][ T6285] 9pnet: Insufficient options for proto=fd
[  199.133578][ T6297] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2215'.
[  199.197550][ T6305] overlayfs: missing 'lowerdir'
[  200.190988][ T6323] xt_CT: No such helper "pptp"
[  200.251321][    C0] sched: RT throttling activated
[  200.365549][ T6348] fuse: Bad value for 'fd'
[  200.611245][   T30] kauditd_printk_skb: 1 callbacks suppressed
[  200.611261][   T30] audit: type=1400 audit(1761025069.466:419): avc:  denied  { rename } for  pid=6370 comm="syz.3.2245" name="file0" dev="tmpfs" ino=2974 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[  200.647920][ T6371] 9pnet: Insufficient options for proto=fd
[  201.492110][   T30] audit: type=1326 audit(1761025070.336:420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6406 comm="syz.1.2257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c34e9ffc9 code=0x7ffc0000
[  202.005448][   T30] audit: type=1326 audit(1761025070.336:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6406 comm="syz.1.2257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f9c34e9ffc9 code=0x7ffc0000
[  202.029356][   T30] audit: type=1326 audit(1761025070.336:422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6406 comm="syz.1.2257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c34e9ffc9 code=0x7ffc0000
[  202.054879][   T30] audit: type=1326 audit(1761025070.336:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6406 comm="syz.1.2257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c34e9ffc9 code=0x7ffc0000
[  203.555028][ T6472] syz.8.2285[6472] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  203.555129][ T6472] syz.8.2285[6472] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  203.620858][   T30] audit: type=1400 audit(1761025072.476:424): avc:  denied  { read } for  pid=6471 comm="syz.8.2285" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=55307 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  207.421517][   T30] audit: type=1326 audit(1761025076.236:425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6536 comm="syz.0.2309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc604c21fc9 code=0x7ffc0000
[  207.463590][   T30] audit: type=1326 audit(1761025076.236:426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6536 comm="syz.0.2309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc604c21fc9 code=0x7ffc0000
[  207.695786][ T6548] fuse: blksize only supported for fuseblk
[  207.860000][ T6558] overlayfs: missing 'lowerdir'
[  208.576070][ T6570] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2321'.
[  208.935749][ T6594] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2331'.
[  209.110620][ T6604] overlayfs: missing 'lowerdir'
[  209.202057][ T6609] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2338'.
[  209.211521][ T6607] capability: warning: `syz.0.2337' uses 32-bit capabilities (legacy support in use)
[  209.252548][ T6609] device veth3 entered promiscuous mode
[  209.258560][ T6609] bridge1: port 1(veth3) entered blocking state
[  209.275352][ T6609] bridge1: port 1(veth3) entered disabled state
[  209.296427][ T6609] bridge1: port 1(veth3) entered blocking state
[  209.302840][ T6609] bridge1: port 1(veth3) entered forwarding state
[  209.345099][   T45] bridge1: port 1(veth3) entered disabled state
[  209.373957][ T6613] device veth5 entered promiscuous mode
[  209.380757][ T6615] SELinux:  Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped).
[  209.400473][   T30] audit: type=1400 audit(1761025078.256:427): avc:  denied  { relabelto } for  pid=6614 comm="syz.8.2340" name="199" dev="tmpfs" ino=1064 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0"
[  209.427319][ T6613] bridge1: port 2(veth5) entered blocking state
[  209.441410][ T6613] bridge1: port 2(veth5) entered disabled state
[  209.452128][ T6613] bridge1: port 2(veth5) entered blocking state
[  209.458143][   T30] audit: type=1400 audit(1761025078.256:428): avc:  denied  { associate } for  pid=6614 comm="syz.8.2340" name="199" dev="tmpfs" ino=1064 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:fsadm_exec_t:s0"
[  209.458469][ T6613] bridge1: port 2(veth5) entered forwarding state
[  209.534990][   T30] audit: type=1400 audit(1761025078.306:429): avc:  denied  { write } for  pid=6614 comm="syz.8.2340" name="199" dev="tmpfs" ino=1064 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0"
[  209.565416][   T45] bridge1: port 2(veth5) entered disabled state
[  209.587763][ T6625] netlink: 256 bytes leftover after parsing attributes in process `syz.1.2345'.
[  209.641405][   T30] audit: type=1400 audit(1761025078.306:430): avc:  denied  { add_name } for  pid=6614 comm="syz.8.2340" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0"
[  209.701568][   T30] audit: type=1400 audit(1761025078.306:431): avc:  denied  { associate } for  pid=6614 comm="syz.8.2340" name="file1" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  209.737105][   T30] audit: type=1400 audit(1761025078.306:432): avc:  denied  { remove_name } for  pid=3607 comm="syz-executor" name="file0" dev="tmpfs" ino=1070 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0"
[  209.825499][   T30] audit: type=1400 audit(1761025078.306:433): avc:  denied  { unlink } for  pid=3607 comm="syz-executor" name="file0" dev="tmpfs" ino=1070 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=fifo_file permissive=1
[  210.150759][   T30] audit: type=1400 audit(1761025078.306:434): avc:  denied  { rmdir } for  pid=3607 comm="syz-executor" name="199" dev="tmpfs" ino=1064 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0"
[  211.512354][ T6679] sch_tbf: burst 4398 is lower than device lo mtu (65550) !
[  211.714622][ T6691] fuse: Bad value for 'fd'
[  211.866168][ T6695] device gre1 left promiscuous mode
[  212.191603][ T6681] overlayfs: failed to clone upperpath
[  212.199900][ T6702] overlayfs: missing 'lowerdir'
[  212.559688][ T6718] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6718 comm=syz.1.2384
[  212.718276][ T6723] fuse: Bad value for 'fd'
[  213.709345][ T6779] ------------[ cut here ]------------
[  213.721365][ T6779] trace type BPF program uses run-time allocation
[  213.730242][ T6779] WARNING: CPU: 0 PID: 6779 at kernel/bpf/verifier.c:11722 check_map_prog_compatibility+0x6cd/0x870
[  213.750056][ T6779] Modules linked in:
[  213.756310][ T6779] CPU: 0 PID: 6779 Comm: syz.7.2412 Not tainted syzkaller #0
[  213.769480][ T6779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  213.789319][ T6779] RIP: 0010:check_map_prog_compatibility+0x6cd/0x870
[  213.802776][ T6779] Code: ee ff 48 c7 c6 80 ee 47 85 4c 8b 65 d0 e9 fd fc ff ff e8 e6 4c ee ff c6 05 54 98 6b 05 01 48 c7 c7 e0 ea 47 85 e8 f3 5a 25 03 <0f> 0b e9 88 fb ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c ac f9 ff
[  213.843820][ T6779] RSP: 0018:ffffc90000f3f428 EFLAGS: 00010246
[  213.856505][ T6779] RAX: 8c6d67e3e7510d00 RBX: 0000000000000001 RCX: 0000000000080000
[  213.879758][ T6779] RDX: ffffc9000b34b000 RSI: 0000000000002b3c RDI: 0000000000002b3d
[  213.896789][ T6779] RBP: ffffc90000f3f470 R08: dffffc0000000000 R09: ffffed103ee04e93
[  213.919907][ T6779] R10: ffffed103ee04e93 R11: 1ffff1103ee04e92 R12: ffff888115dbc000
[  213.935834][ T6779] R13: 0000000000000011 R14: dffffc0000000000 R15: ffff88812709c800
[  213.947595][ T6779] FS:  00007f4aae1ec6c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000
[  213.960145][ T6779] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  213.970285][ T6779] CR2: 0000001b2e423ffc CR3: 00000001108e5000 CR4: 00000000003506b0
[  213.981851][ T6779] Call Trace:
[  213.988720][ T6779]  <TASK>
[  213.993102][ T6779]  resolve_pseudo_ldimm64+0x685/0x11d0
[  214.000977][ T6779]  ? check_attach_btf_id+0xde0/0xde0
[  214.008913][ T6779]  ? __mark_reg_known+0x1b0/0x1b0
[  214.017658][ T6779]  ? security_capable+0x87/0xb0
[  214.024822][ T6779]  bpf_check+0x2c25/0xf280
[  214.029516][ T6779]  ? 0xffffffffa0028000
[  214.042625][ T6779]  ? is_bpf_text_address+0x177/0x190
[  214.052613][ T6779]  ? bpf_get_btf_vmlinux+0x60/0x60
[  214.071408][ T6779]  ? unwind_get_return_address+0x4d/0x90
[  214.083988][ T6779]  ? stack_trace_save+0xe0/0xe0
[  214.099298][ T6779]  ? arch_stack_walk+0xee/0x140
[  214.104700][ T6779]  ? stack_trace_save+0x98/0xe0
[  214.109778][ T6779]  ? __stack_depot_save+0x34/0x480
[  214.126064][ T6779]  ? __kasan_slab_alloc+0x69/0xf0
[  214.131611][ T6779]  ? __kasan_kmalloc+0xec/0x110
[  214.146062][ T6779]  ? __kasan_kmalloc+0xda/0x110
[  214.156193][ T6779]  ? kmem_cache_alloc_trace+0x119/0x270
[  214.164948][ T6779]  ? selinux_bpf_prog_alloc+0x51/0x140
[  214.181383][ T6779]  ? security_bpf_prog_alloc+0x62/0x90
[  214.187042][ T6779]  ? bpf_prog_load+0x97c/0x1550
[  214.202363][ T6779]  ? __sys_bpf+0x4c3/0x730
[  214.217358][ T6779]  ? __x64_sys_bpf+0x7c/0x90
[  214.227501][ T6779]  ? x64_sys_call+0x4b9/0x9a0
[  214.238613][ T6779]  ? do_syscall_64+0x4c/0xa0
[  214.251554][ T6779]  ? entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  214.265734][ T6779]  ? check_stack_object+0x81/0x140
[  214.281178][ T6779]  ? memset+0x35/0x40
[  214.285495][ T6779]  ? bpf_obj_name_cpy+0x193/0x1e0
[  214.312447][ T6779]  bpf_prog_load+0x1042/0x1550
[  214.317282][ T6779]  ? __kasan_check_write+0x14/0x20
[  214.351085][ T6779]  ? map_freeze+0x360/0x360
[  214.362633][ T6779]  ? selinux_bpf+0xc7/0xf0
[  214.371162][ T6779]  ? security_bpf+0x82/0xa0
[  214.422001][ T6779]  __sys_bpf+0x4c3/0x730
[  214.426463][ T6779]  ? bpf_link_show_fdinfo+0x310/0x310
[  214.437635][ T6779]  ? __kasan_check_write+0x14/0x20
[  214.481422][ T6779]  ? switch_fpu_return+0x15d/0x2c0
[  214.486641][ T6779]  __x64_sys_bpf+0x7c/0x90
[  214.491261][ T6779]  x64_sys_call+0x4b9/0x9a0
[  214.544052][ T6779]  do_syscall_64+0x4c/0xa0
[  214.567954][ T6779]  ? clear_bhb_loop+0x50/0xa0
[  214.581408][ T6779]  ? clear_bhb_loop+0x50/0xa0
[  214.586180][ T6779]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  214.597446][ T6779] RIP: 0033:0x7f4aaf783fc9
[  214.609246][ T6779] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  214.631523][ T6779] RSP: 002b:00007f4aae1ec038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  214.661079][ T6779] RAX: ffffffffffffffda RBX: 00007f4aaf9dafa0 RCX: 00007f4aaf783fc9
[  214.672549][ T6779] RDX: 0000000000000094 RSI: 00002000000004c0 RDI: 0000000000000005
[  214.695025][ T6779] RBP: 00007f4aaf806f91 R08: 0000000000000000 R09: 0000000000000000
[  214.713766][ T6779] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  214.727843][ T6779] R13: 00007f4aaf9db038 R14: 00007f4aaf9dafa0 R15: 00007ffca942f908
[  214.749029][ T6779]  </TASK>
[  214.759172][ T6779] ---[ end trace 7061e647a7127afa ]---
[  215.430788][ T6846] overlayfs: missing 'lowerdir'
[  216.141701][ T6888] overlayfs: missing 'lowerdir'
[  217.133151][ T6898] sch_tbf: burst 4398 is lower than device lo mtu (65550) !
[  317.441271][    C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
[  317.448307][    C0] 	(detected by 0, t=10002 jiffies, g=31453, q=347)
[  317.454912][    C0] rcu: All QSes seen, last rcu_preempt kthread activity 10003 (4294968955-4294958952), jiffies_till_next_fqs=1, root ->qsmask 0x0
[  317.468385][    C0] rcu: rcu_preempt kthread starved for 10004 jiffies! g31453 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1
[  317.479603][    C0] rcu: 	Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
[  317.489585][    C0] rcu: RCU grace-period kthread stack dump:
[  317.495567][    C0] task:rcu_preempt     state:R  running task     stack:28488 pid:   14 ppid:     2 flags:0x00004000
[  317.506386][    C0] Call Trace:
[  317.509694][    C0]  <TASK>
[  317.512643][    C0]  __schedule+0xb6e/0x14c0
[  317.517213][    C0]  ? release_firmware_map_entry+0x190/0x190
[  317.523148][    C0]  ? _raw_spin_unlock_irqrestore+0x5b/0x80
[  317.528991][    C0]  ? __mod_timer+0x7ae/0xb30
[  317.533609][    C0]  schedule+0x11e/0x1e0
[  317.537788][    C0]  schedule_timeout+0x12c/0x2e0
[  317.542828][    C0]  ? console_conditional_schedule+0x30/0x30
[  317.548741][    C0]  ? update_process_times+0x200/0x200
[  317.554146][    C0]  ? prepare_to_swait_event+0x308/0x320
[  317.559711][    C0]  rcu_gp_fqs_loop+0x293/0xf60
[  317.564491][    C0]  ? debug_smp_processor_id+0x17/0x20
[  317.569892][    C0]  ? __note_gp_changes+0x4e2/0x9e0
[  317.575026][    C0]  ? rcu_gp_init+0xc00/0xc00
[  317.579633][    C0]  ? _raw_spin_unlock_irq+0x4e/0x70
[  317.584941][    C0]  ? rcu_gp_init+0x9a7/0xc00
[  317.589641][    C0]  rcu_gp_kthread+0x98/0x330
[  317.594245][    C0]  ? wake_nocb_gp+0x1d0/0x1d0
[  317.598950][    C0]  ? __kasan_check_read+0x11/0x20
[  317.603992][    C0]  ? __kthread_parkme+0xac/0x200
[  317.608948][    C0]  ? preempt_count_add+0x90/0x1b0
[  317.613989][    C0]  kthread+0x411/0x500
[  317.618078][    C0]  ? wake_nocb_gp+0x1d0/0x1d0
[  317.622780][    C0]  ? kthread_blkcg+0xd0/0xd0
[  317.627382][    C0]  ret_from_fork+0x1f/0x30
[  317.631825][    C0]  </TASK>
[  317.634877][    C0] rcu: Stack dump where RCU GP kthread last ran:
[  317.641250][    C0] Sending NMI from CPU 0 to CPUs 1:
[  317.646484][    C1] NMI backtrace for cpu 1
[  317.646498][    C1] CPU: 1 PID: 6894 Comm: syz.8.2460 Tainted: G        W         syzkaller #0
[  317.646515][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  317.646525][    C1] RIP: 0010:asm_sysvec_irq_work+0x0/0x20
[  317.646553][    C1] Code: e8 85 5a e3 ff e9 b0 03 00 00 0f 01 ca fc 6a ff e8 b5 02 00 00 48 89 c4 48 8d 6c 24 01 48 89 e7 e8 25 51 e3 ff e9 90 03 00 00 <0f> 01 ca fc 6a ff e8 95 02 00 00 48 89 c4 48 8d 6c 24 01 48 89 e7
[  317.646568][    C1] RSP: 0018:ffffc90000cd7bf8 EFLAGS: 00000046
[  317.646583][    C1] RAX: 00000000000000f6 RBX: 00000000000000f6 RCX: 000000000000083f
[  317.646593][    C1] RDX: 0000000000000000 RSI: 00000000000000f6 RDI: 000000000000083f
[  317.646603][    C1] RBP: ffffc90000cd7c20 R08: dffffc0000000000 R09: ffffed103ee265e7
[  317.646616][    C1] R10: ffffed103ee265e7 R11: 1ffff1103ee265e6 R12: 0000000000000000
[  317.646628][    C1] R13: dffffc0000000001 R14: ffffffff85e649f8 R15: dffffc0000000000
[  317.646641][    C1] FS:  00007f8717f9e6c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000
[  317.646655][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  317.646667][    C1] CR2: 0000001b2e91aff8 CR3: 000000011093f000 CR4: 00000000003506a0
[  317.646682][    C1] Call Trace:
[  317.646686][    C1]  <TASK>
[  317.646691][    C1]  ? native_apic_msr_write+0x39/0x50
[  317.646712][    C1]  x2apic_send_IPI_self+0x5e/0x70
[  317.646732][    C1]  arch_irq_work_raise+0x86/0xd0
[  317.646751][    C1]  __irq_work_queue_local+0x115/0x190
[  317.646769][    C1]  irq_work_queue+0x9e/0x150
[  317.646785][    C1]  bpf_send_signal_common+0x2b2/0x420
[  317.646803][    C1]  ? trace_raw_output_bpf_trace_printk+0xd0/0xd0
[  317.646823][    C1]  bpf_send_signal+0x19/0x20
[  317.646839][    C1]  bpf_prog_7ba5217f62dcd359+0x38/0x31c
[  317.646853][    C1]  bpf_trace_run2+0xb0/0x1b0
[  317.646875][    C1]  ? bpf_trace_run1+0x1b0/0x1b0
[  317.646893][    C1]  __bpf_trace_sys_enter+0x62/0x70
[  317.646909][    C1]  trace_sys_enter+0x3d/0x50
[  317.646922][    C1]  syscall_trace_enter+0x118/0x180
[  317.646938][    C1]  syscall_enter_from_user_mode+0x1f/0x30
[  317.646953][    C1]  do_syscall_64+0x24/0xa0
[  317.646970][    C1]  ? clear_bhb_loop+0x50/0xa0
[  317.646983][    C1]  ? clear_bhb_loop+0x50/0xa0
[  317.646997][    C1]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  317.647015][    C1] RIP: 0033:0x7f87194d2099
[  317.647028][    C1] Code: 64 c7 00 16 00 00 00 b8 ff ff ff ff c3 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 04 25
[  317.647042][    C1] RSP: 002b:00007f8717f9db40 EFLAGS: 00000246 ORIG_RAX: 000000000000000f
[  317.647058][    C1] RAX: ffffffffffffffda RBX: 00007f871978cfa8 RCX: 00007f87194d2099
[  317.647071][    C1] RDX: 00007f8717f9db40 RSI: 00007f8717f9dc70 RDI: 0000000000000011
[  317.647082][    C1] RBP: 00007f871978cfa0 R08: 0000000000000000 R09: 0000000000000000
[  317.647092][    C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  317.647102][    C1] R13: 00007f871978d038 R14: 00007ffcc4e3b3a0 R15: 00007ffcc4e3b488
[  317.647118][    C1]  </TASK>
[  428.861227][    C0] BUG: workqueue lockup - pool cpus=0-1 flags=0x4 nice=0 stuck for 211s!
[  428.869852][    C0] Showing busy workqueues and worker pools:
[  428.875786][    C0] workqueue events: flags=0x0
[  428.880522][    C0]   pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=5/256 refcnt=6
[  428.880570][    C0]     in-flight: 1701:cpu_map_kthread_stop
[  428.880603][    C0]     pending: psi_avgs_work, kfree_rcu_monitor, rht_deferred_worker, rht_deferred_worker
[  428.880681][    C0]   pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=4/256 refcnt=5
[  428.880717][    C0]     in-flight: 3850:bpf_map_free_deferred
[  428.880745][    C0]     pending: vmstat_shepherd, kfree_rcu_monitor, rht_deferred_worker
[  428.880801][    C0] workqueue events_long: flags=0x0
[  428.931412][    C0]   pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=3/256 refcnt=4
[  428.931463][    C0]     pending: br_multicast_gc_work, br_multicast_gc_work, br_fdb_cleanup
[  428.931521][    C0]   pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=3/256 refcnt=4
[  428.931558][    C0]     pending: br_fdb_cleanup, br_multicast_gc_work, br_fdb_cleanup
[  428.931611][    C0] workqueue events_unbound: flags=0x2
[  428.968774][    C0]   pwq 4: cpus=0-1 flags=0x4 nice=0 active=2/512 refcnt=4
[  428.968821][    C0]     pending: toggle_allocation_gate, flush_memcg_stats_dwork
[  428.968874][    C0] workqueue events_power_efficient: flags=0x80
[  428.989799][    C0]   pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=3/256 refcnt=4
[  428.989846][    C0]     pending: neigh_periodic_work, neigh_periodic_work, gc_worker
[  428.989898][    C0]   pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=2/256 refcnt=3
[  428.989941][    C0]     pending: wg_ratelimiter_gc_entries, check_lifetime
[  428.989982][    C0] workqueue rcu_gp: flags=0x8
[  429.024893][    C0]   pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2
[  429.024939][    C0]     pending: srcu_invoke_callbacks
[  429.024969][    C0]   pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2
[  429.025006][    C0]     pending: process_srcu
[  429.025029][    C0] workqueue netns: flags=0xe000a
[  429.055309][    C0]   pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/1 refcnt=3
[  429.055351][    C0]     in-flight: 3773:cleanup_net
[  429.055387][    C0] workqueue mm_percpu_wq: flags=0x8
[  429.072727][    C0]   pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2
[  429.072772][    C0]     pending: vmstat_update
[  429.072804][    C0]   pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2
[  429.072841][    C0]     pending: vmstat_update
[  429.072872][    C0] workqueue writeback: flags=0x4a
[  429.102381][    C0]   pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3
[  429.102423][    C0]     pending: wb_workfn
[  429.102455][    C0] workqueue kblockd: flags=0x18
[  429.118880][    C0]   pwq 1: cpus=0 node=0 flags=0x0 nice=-20 active=1/256 refcnt=2
[  429.118925][    C0]     pending: blk_mq_timeout_work
[  429.118964][    C0] workqueue dm_bufio_cache: flags=0x8
[  429.137279][    C0]   pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2
[  429.137326][    C0]     pending: work_fn
[  429.137457][    C0] workqueue mld: flags=0x40008
[  429.153987][    C0]   pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/1 refcnt=2
[  429.154035][    C0]     pending: mld_ifc_work
[  429.154068][    C0] workqueue ipv6_addrconf: flags=0x40008
[  429.171677][    C0]   pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/1 refcnt=2
[  429.171723][    C0]     pending: addrconf_verify_work
[  429.171868][    C0] workqueue wg-kex-wg0: flags=0x6
[  429.189667][    C0]   pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3
[  429.189711][    C0]     pending: wg_packet_handshake_send_worker
[  429.189742][    C0] workqueue wg-crypt-wg0: flags=0x28
[  429.208419][    C0]   pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2
[  429.208466][    C0]     pending: wg_packet_encrypt_worker
[  429.208500][    C0]   pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2
[  429.208537][    C0]     pending: wg_packet_encrypt_worker
[  429.208565][    C0] workqueue wg-crypt-wg1: flags=0x28
[  429.240344][    C0]   pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2
[  429.240392][    C0]     pending: wg_packet_encrypt_worker
[  429.240427][    C0] workqueue wg-kex-wg2: flags=0x6
[  429.258913][    C0]   pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3
[  429.258955][    C0]     pending: wg_packet_handshake_send_worker
[  429.258986][    C0] workqueue wg-crypt-wg2: flags=0x28
[  429.277663][    C0]   pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2
[  429.277713][    C0]     pending: wg_packet_encrypt_worker
[  429.277745][    C0]   pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2
[  429.277782][    C0]     pending: wg_packet_encrypt_worker
[  429.277813][    C0] workqueue wg-kex-wg1: flags=0x6
[  429.309254][    C0]   pwq 4: cpus=0-1 flags=0x4 nice=0 active=2/256 refcnt=4
[  429.309297][    C0]     pending: wg_packet_handshake_send_worker, wg_packet_handshake_send_worker
[  429.309353][    C0] workqueue wg-kex-wg0: flags=0x6
[  429.330742][    C0]   pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3
[  429.330782][    C0]     pending: wg_packet_handshake_send_worker
[  429.330812][    C0] workqueue wg-crypt-wg0: flags=0x28
[  429.349514][    C0]   pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2
[  429.349564][    C0]     pending: wg_packet_encrypt_worker
[  429.349596][    C0]   pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2
[  429.349634][    C0]     pending: wg_packet_encrypt_worker
[  429.349661][    C0] workqueue wg-kex-wg1: flags=0x6
[  429.381230][    C0]   pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3
[  429.381279][    C0]     pending: wg_packet_handshake_send_worker
[  429.381312][    C0] workqueue wg-crypt-wg1: flags=0x28
[  429.400744][    C0]   pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2
[  429.400797][    C0]     pending: wg_packet_encrypt_worker
[  429.400830][    C0]   pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2
[  429.400868][    C0]     pending: wg_packet_encrypt_worker
[  429.400903][    C0] workqueue wg-crypt-wg0: flags=0x28
[  429.432585][    C0]   pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2
[  429.432634][    C0]     pending: wg_packet_encrypt_worker
[  429.432666][    C0]   pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2
[  429.432704][    C0]     pending: wg_packet_encrypt_worker
[  429.432733][    C0] workqueue wg-crypt-wg1: flags=0x28
[  429.464409][    C0]   pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2
[  429.464459][    C0]     pending: wg_packet_encrypt_worker
[  429.464493][    C0] workqueue wg-kex-wg2: flags=0x6
[  429.482726][    C0]   pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3
[  429.482769][    C0]     pending: wg_packet_handshake_send_worker
[  429.482802][    C0] workqueue wg-crypt-wg2: flags=0x28
[  429.501669][    C0]   pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2
[  429.501723][    C0]     pending: wg_packet_encrypt_worker
[  429.501758][    C0]   pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2
[  429.501795][    C0]     pending: wg_packet_encrypt_worker
[  429.501836][    C0] pool 0: cpus=0 node=0 flags=0x0 nice=0 hung=212s workers=9 idle: 3074 1486 291 346 6080 6 604 20
[  429.501926][    C0] pool 2: cpus=1 node=0 flags=0x0 nice=0 hung=212s workers=7 idle: 26 60 617 39 3208 388
[  429.502116][    C0] pool 4: cpus=0-1 flags=0x4 nice=0 hung=211s workers=5 idle: 45 395 8 10