last executing test programs:

10.454620012s ago: executing program 1:
mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103)
pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15)
r1 = dup(r0)
write$FUSE_BMAP(r1, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_DIRENTPLUS(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="38010000fe0000", @ANYRES64], 0x138)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000300)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[], [], 0x6}})

10.190658022s ago: executing program 1:
r0 = socket$inet(0x2, 0x2, 0x1)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000300)={'ip6_vti0\x00', <r1=>0x0, 0x29, 0x87, 0x9, 0x8001, 0x1, @mcast1, @empty, 0x8, 0x20, 0x101, 0xff}})
sendmsg$inet(r0, &(0x7f0000000600)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000180)="080027226da0d6", 0x7}], 0x1, &(0x7f0000000240)=[@ip_pktinfo={{0x1c, 0x0, 0x7, {r1, @empty, @local}}}, @ip_tos_u8={{0x11}}], 0x38}, 0x0)

10.132167271s ago: executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00')
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00')
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]})
syz_mount_image$fuse(0x0, &(0x7f0000000c40)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$tmpfs(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000002c0), 0x0, 0x0)
mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x128a877, &(0x7f0000000180)=ANY=[@ANYBLOB='size=2,nr_inodes=4'])
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
getsockopt$inet6_udp_int(r1, 0x11, 0x0, &(0x7f0000000080), &(0x7f00000001c0)=0x4)
r2 = syz_usb_connect(0x0, 0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201040000002f2057155081ed29010203010902120001000000000904"], 0x0)
socket$nl_route(0x10, 0x3, 0x0)
syz_usb_control_io$hid(r2, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
syz_usb_control_io(r2, &(0x7f0000000480)={0x2c, &(0x7f0000000300)={0x0, 0xa, 0xd4, {0xd4, 0x0, "da2f5ab4b4fe732ba36a822b38e2268fddfd08f9accd774f93265bca82b26765ea9a7d5fe2d2aae3c81035091ed0f6893f6873e42ae160f431b62bee2b97f11afc52d2de30d88d44b276ac2bbceaa4004a0274192e7dfae4e84028b65c4ec8084f33553ec7558444630a08c6310e407d2e6f2b51200468a97f450a242993ec3aaca61060c61af6be4576fa9d04a70ed971c160db047768ce5a90093ed6bcf82571359b5952cdc0a9d5d659a697518a180ac90dd2816b742e8673d58c300737ac325d623e4428f4319a908e81aab9adc79db0"}}, &(0x7f0000000400)={0x0, 0x3, 0x3c, @string={0x3c, 0x3, "5633e3b996e701fcd4062c38bde38fe8f9b372e3b0086e5f8ec7fc951a44bbc584b06088ca38c68c89e178cf9d3fd28274a3362cc74deab14776"}}, &(0x7f0000000580)={0x0, 0xf, 0x143, {0x5, 0xf, 0x143, 0x6, [@ss_container_id={0x14, 0x10, 0x4, 0x54, "68a497d73ea51ba50939f591fa11fc92"}, @ext_cap={0x7, 0x10, 0x2, 0x3c, 0x4, 0x6}, @ss_container_id={0x14, 0x10, 0x4, 0x1b, "d3a7036cbaaa2176042b569a3049a913"}, @generic={0xfa, 0x10, 0x1, "f3a4d31ef02423185533ae5e83661c12fb922faa8d282f11ff0dab1adefe86e213cbfb9de6eb9fc4f1e85a585014d5be9cfb5eb23dd9c2948777f46a9e7ae9fdc235721416017d2d08a7dc9c8941de3294d733a283cbd33e420fa58eb4ad52a6e46ea2cebf540fe4f7708813dedc3932ef3972461ef2a6bb25c3e1d8b739958c3d4b26999a6013a00587341f60683fe529a78bccd4d9fed2b5d7d23b907ed86fe9cd0ea8ab38accc80692b21a6c94cba1721a8101c3fca1be94c6acf4d2c82bdc2235d03f6dd5ac5b2f4d42951b335eb09513ad0adfda14e6482cecbe2a221ed8c75c0e627ebec97ac63f799509b1682e1c2735b791148"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0x2, 0x0, 0x4}, @wireless={0xb, 0x10, 0x1, 0x4, 0x0, 0xe6, 0x5, 0x4, 0xc1}]}}, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x80, 0x80, 0x72, 0x6, "3705e5d7", "c0b3d4ca"}}, &(0x7f0000000100)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3, 0x3, 0x8, 0xff, 0x2d, 0x5, 0xe9f2}}}, &(0x7f0000000c00)={0x84, &(0x7f00000007c0)={0x20, 0x9, 0x73, "ab906f77925b05ee0a1901f3044f6860bc3b378637867eab352e1dc023b34ce5b78ecb488f1d4de0cd00cfb2149cbf4e7f569ae14c8a1ff21d3b981f4a63555df38979c274eac9096dedd024c207b9fa922f8dd33502186104c0015a813b5f39b983a17f277999b10095b652d71cf8c97033cf"}, &(0x7f00000004c0)={0x0, 0xa, 0x1, 0x2f}, &(0x7f0000000700)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000740)={0x20, 0x0, 0x4}, &(0x7f0000000880)={0x20, 0x0, 0x8, {0xe0, 0x4, [0x0]}}, &(0x7f0000000940)={0x40, 0x7, 0x2, 0x4475}, &(0x7f0000000980)={0x40, 0x9, 0x1, 0x40}, &(0x7f00000009c0)={0x40, 0xb, 0x2, "d05d"}, &(0x7f0000000a00)={0x40, 0xf, 0x2, 0x5}, &(0x7f0000000a40)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000a80)={0x40, 0x17, 0x6, @local}, &(0x7f0000000ac0)={0x40, 0x19, 0x2, ',{'}, &(0x7f0000000b00)={0x40, 0x1a, 0x2, 0xaab5}, &(0x7f0000000b40)={0x40, 0x1c, 0x1, 0xfa}, &(0x7f0000000b80)={0x40, 0x1e, 0x1, 0xa2}, &(0x7f0000000bc0)={0x40, 0x21, 0x1}})
getpid()
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7}, 0x48)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000580)={{r3}, &(0x7f0000000500), &(0x7f0000000540)='%+9llu \x00'}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000006c0015000000d9fece23b82000000000", @ANYRES32, @ANYBLOB="000000000000000018003480050035"], 0x38}, 0x1, 0x300}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000140)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2001095, 0x0)
syz_mount_image$ext4(&(0x7f00000001c0)='ext3\x00', &(0x7f0000000180)='./file0\x00', 0x838734, &(0x7f0000002380)={[{@max_batch_time}, {@discard, 0x1e}, {@grpid}, {@block_validity}, {@sysvgroups}, {@bh}, {@noblock_validity}, {@nojournal_checksum}, {@jqfmt_vfsold}, {@resuid}, {@errors_continue}, {@jqfmt_vfsv0}, {@debug}]}, 0xee, 0x43a, &(0x7f0000000880)="$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")
syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000ac0)=""/94, 0x5e}, {&(0x7f0000000180)=""/246, 0xf6}, {&(0x7f0000000300)=""/187, 0xbb}], 0x3, 0x9, 0x0)
syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./file0\x00', 0x8, &(0x7f00000001c0)={[{@nodiscard}, {@nobarrier}, {@noflush_merge}, {@six_active_logs}, {@noflush_merge}, {@disable_roll_forward}, {@inline_data}, {@fsync_mode_posix}, {@heap}, {@noinline_data}, {@background_gc_off}, {@adaptive_mode}, {@jqfmt_vfsold}]}, 0x1, 0x54f9, &(0x7f000000ab40)="$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")
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='oom_score\x00')
read$FUSE(r5, &(0x7f0000000340)={0x2020}, 0xcb0a)

6.201293725s ago: executing program 1:
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000001080)=ANY=[@ANYRES8, @ANYBLOB="3d0f5bf53a44eba90d96a44e538ee34ca3f182e4d1505929a85ae4f2682306880249b158cff7c807172f6c37e15a89254a099503b251f8c819c166bc9cf03529524afb57cc25d741eb4f04ebe194810cff001a2e925e0fdafe294ece5e0feae5a3f728ab36ea8110328a647695a1a8f362f5527e0d86bce88cf5be3f774611c2d3b6cf4875635296c4db4fbf89d18c0630f6d668ee4e", @ANYRESDEC=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'team0\x00', <r1=>0x0})
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000980)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x4c, 0x4c, 0x5, [@var={0xb, 0x0, 0x0, 0xe, 0x2, 0x1}, @volatile={0xa}, @struct={0x8, 0x3, 0x0, 0x4, 0x1, 0xfffffff9, [{0x3, 0x3, 0x1}, {0x7, 0x5, 0x5}, {0xc, 0x5, 0x2}]}]}, {0x0, [0x2e, 0x30, 0x61]}}, &(0x7f00000006c0)=""/111, 0x69, 0x6f, 0x1, 0x8}, 0x20)
r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000ac0)={0xffffffffffffffff, 0xb58}, 0xc)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000b00)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x81, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48)
r5 = open(&(0x7f0000000040)='./file2\x00', 0x181042, 0x0)
write$P9_RREADDIR(r5, &(0x7f0000000100)={0x28, 0x29, 0x3, {0x0, [{{0x80, 0x2}, 0x2c4d, 0x80, 0x5, './bus'}]}}, 0x28)
sendfile(r5, r5, &(0x7f0000000240), 0x7f03)
r6 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000bc0)=@generic={&(0x7f0000000b80)='./file0\x00', 0x0, 0x8}, 0x18)
r7 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000c40)=@generic={&(0x7f0000000c00)='./file0\x00', 0x0, 0x18}, 0x18)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000d40)=@bpf_ext={0x1c, 0x14, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x9}, {}, {}, [@btf_id={0x18, 0x6, 0x3, 0x0, 0x2}, @map_idx={0x18, 0x7, 0x5, 0x0, 0x8}, @exit], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000004c0)='syzkaller\x00', 0x6, 0x69, &(0x7f0000000540)=""/105, 0x40f00, 0x2, '\x00', r1, 0x0, r2, 0x8, &(0x7f0000000a40)={0x6, 0x5}, 0x8, 0x10, &(0x7f0000000a80)={0x3, 0x7, 0x80010000, 0xffff}, 0x10, 0x1f11, r0, 0x6, &(0x7f0000000c80)=[r3, r4, r5, 0x1, r6, 0xffffffffffffffff, r7], &(0x7f0000000cc0)=[{0x3, 0x1, 0x10, 0xb}, {0x0, 0x2, 0x3}, {0x5, 0x5, 0x4, 0x7}, {0x2, 0x5, 0xd, 0x5}, {0x2, 0x2, 0x5}, {0x0, 0x3, 0x6, 0x4}], 0x10, 0x3}, 0x90)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x4, 0x8}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b708000000000010"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700)
write$cgroup_int(r10, &(0x7f0000000200), 0x43400)
write$P9_RVERSION(r10, &(0x7f0000000000)=ANY=[@ANYBLOB="1300000065ffff070000000600395032303010"], 0x13)
r11 = userfaultfd(0x1)
ioctl$UFFDIO_API(r11, 0xc018aa3f, &(0x7f0000000040))
read(r11, 0x0, 0x0)
sendmsg$IPCTNL_MSG_EXP_NEW(r10, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x1dc}, 0x1, 0x0, 0x0, 0x4c045}, 0x20008084)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r9}, 0x10)
mmap(&(0x7f0000479000/0x1000)=nil, 0x1000, 0x2, 0x12, 0xffffffffffffffff, 0x0)
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000005c0))
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f00000004c0)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020842500000000002000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

5.578314839s ago: executing program 3:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x4500, &(0x7f0000000140)={[{@init_itable}, {@noquota}, {@nouid32}, {@barrier}, {@noauto_da_alloc}, {@journal_dev={'journal_dev', 0x3d, 0x1ff}}, {@barrier}, {@delalloc}, {@usrquota}]}, 0x10, 0x4d3, &(0x7f0000000ec0)="$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")
r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000005c0))
r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x40942, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
write$binfmt_script(r3, &(0x7f0000000c40)={'#! ', './bus'}, 0x9)
copy_file_range(r3, &(0x7f00000001c0), r2, 0x0, 0xffffffffa003e45c, 0x700000000000000)
ioctl$EXT4_IOC_MIGRATE(r1, 0x6609)

5.249549168s ago: executing program 0:
connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x2e)
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0)
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4008af60, &(0x7f0000000040))
r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r1, 0x40086602, &(0x7f0000000080)={@desc={0x4000, 0x0, @auto="b8f92416074d3848"}})
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r1, 0x40086602, &(0x7f0000000080)={@desc={0x80000, 0x0, @desc2}})
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'team_slave_0\x00', <r3=>0x0})
setsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000080)={r3, @multicast1, @multicast2}, 0xc)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000000)={'tunl0\x00', &(0x7f0000000080)={'gretap0\x00', r3, 0x40, 0x40, 0x5, 0x10, {{0x33, 0x4, 0x3, 0x3f, 0xcc, 0x64, 0x0, 0xff, 0x4, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x1d}, {[@rr={0x7, 0xb, 0x1b, [@private=0xa010102, @broadcast]}, @noop, @rr={0x7, 0x23, 0x9b, [@remote, @remote, @multicast2, @multicast1, @remote, @rand_addr=0x64010101, @loopback, @multicast1]}, @generic={0x86, 0x5, "38bce8"}, @timestamp_prespec={0x44, 0x3c, 0x47, 0x3, 0x6, [{@local, 0xd38fd763}, {@multicast1, 0x9}, {@broadcast, 0x8}, {@local, 0x4}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x42}, {@multicast1, 0x2}, {@broadcast, 0x2c6}]}, @timestamp={0x44, 0x10, 0xa, 0x0, 0x3, [0x937, 0xa, 0x7]}, @cipso={0x86, 0x35, 0x1, [{0x2, 0xd, "ccbf43075bd62c6b3daa43"}, {0x1, 0xa, "43ef221da44d8cc8"}, {0x0, 0x11, "c8e65f930f3a09e3f035b0f470de2d"}, {0x0, 0x7, "b1713def2e"}]}]}}}}})

5.163834471s ago: executing program 4:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
r1 = eventfd(0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x8000003})
ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1)
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000280)=""/73})
ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000480)={0x1, r1})
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000015640)=""/102400, 0x19000)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0x63, &(0x7f0000000600)=""/99}]})
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x90)
socket(0x0, 0x0, 0x0)
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000003c0)='net/igmp6\x00')
read$FUSE(r4, &(0x7f00000099c0)={0x2020}, 0x2020)
read$FUSE(r4, &(0x7f0000000600)={0x2020}, 0x2020)
preadv(r4, &(0x7f0000000100)=[{&(0x7f0000000000)=""/154, 0x9a}], 0x1, 0x0, 0x2)
read$FUSE(r4, &(0x7f0000006980)={0x2020}, 0x2020)
write(0xffffffffffffffff, &(0x7f00000002c0)="fc0000001c000704ab5b2509b868030002ab087a0100000001481093210001c0f0030584050060100000000000039815fa2c53c28648000000b9d95662537a00bc000c00f0ff7f0000b400600033d44000040560916a0033f436313012dafd5a32e273fc83ab82d710f74cec184406f90d435ef8042c2e9a3885f1fc0e5bba2e177312e081bea05d3a021e8ca062914a46ccfc510bb73c9455cdc8363ae4f5df77bc4cfd6239ec2a0f0d1bcae5fa0f5f9dcdd51af51af8502943283f4bb102b2b8f5566791cf190201ded815b2ccd243f395ed94e0ad91bd6433802e0784f2013cd1890058a10000c880ac801fe4af000049f0d4796f00000905", 0xfa)
syz_usb_connect(0x0, 0x10e, &(0x7f0000000380)=ANY=[@ANYBLOB="120100006a249f08ec1888323a3f010203010902fc0001870000000904e600030e010000062406"], 0x0)
syz_read_part_table(0x5ba, &(0x7f00000005c0)="$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")
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r3, 0x27, 0x0, 0xab, 0x0, 0x0, 0x40000000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x400800}, 0xffb6)

5.094218121s ago: executing program 3:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r0}, 0x10)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x4500, &(0x7f0000000140)={[{@init_itable}, {@noquota}, {@nouid32}, {@barrier}, {@noauto_da_alloc}, {@journal_dev={'journal_dev', 0x3d, 0x1ff}}, {@barrier}, {@delalloc}, {@usrquota}]}, 0x10, 0x4d3, &(0x7f0000000ec0)="$eJzs3c9rHG8ZAPBnNtlvf6UmVQ+1YFtsJS3a3aSxbfBQK4g9SEGt9xqTTQjZZEN20zahSIp3BREVPHnyIvgHCNI/QYSC3qWKItrqwYO6srOzmqa73XzpZqcknw9M531ndvZ53rb77rwzLzsBHFkXI+JORIxExNWIGM+2F7Llbquy037dq5dP5ltLEs3m/b8mkWTbOu+VZOtT7UPieER8/W7Et5I349a3tlfmqtXKRlYvN1bXy/Wt7WvLq3NLlaXK2szM9M3ZW7M3ZqcG0s6JiLj9pT/+8Hs/+/LtX3320e8f/PnKt1tpjWX7d7djkNpNL6Z/Fx2jEbFxEMFyMJKtiz32f3dkiMkAANBX6xz/oxHxqfT8fzxG0rNTAAAA4DBpfmEs/pVENAEAAIBDq5DOgU0KpWwuwFgUCqVSew7vx+NkoVqrNz6zWNtcW2jPlZ2IYmFxuVqZyuYKT0QxadWnszm2nfr1PfWZiDgTET8YP5HWS/O16kLeFz8AAADgiDi1Z/z/j/F0/H8s77wAAACAAZvIOwEAAADgwBn/AwAAwOFn/A8AAACH2lfv3Wstzc7zrxcebm2u1B5eW6jUV0qrm/Ol+drGemmpVltKf7Nvtd/7VWu19c/F2ubjcqNSb5TrW9sPVmuba40Hy689AhsAAAAYojMXnv0uiYidz59Il5YP8k4KGIqkz/70ISEvssofhpAQMDQjeScA5GY07wSA3BTzTgDIXb/rAD0n7/x68LkAAAAHY/ITve//uzYAh1sh7wQAgKFz/x+OrqIZgHDkfaTP/ne//99sfqiEAACAgRtLl6RQyu4FjkWhUCpFnE4fC1BMFperlalsfPDb8eKxVn06PTLpO2cYAAAAAAAAAAAAAAAAAAAAAAAAAGhrNpNoAgAAAIdaROFPSfpr/hGT45fH9l4f+CD553i6johHP7n/o8dzjcbGdGv73/63vfHjbPv1PK5gAAAAAHt1xumdcTwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADNKrl0/mO8sw4/7lixEx0TX+hePp6ngUI+Lk35MY3XVcEhEjA4i/8zQiznaLn7TSioloZ9Et/okc4xci4tQA4sNR9qzV/9zp9vkrxMV03f3zN5ot76p3/1eITv83sit+MTuu1f+c3meMc89/Ue4Z/2nEudHu/U8nftKj/7u0z/jf/Mb2dq99zZ9GTHb9/klei1VurK6X61vb15ZX55YqS5W1mZnpm7O3Zm/MTpUXl6uV7M+uMb7/yV/+523tP9kj/kSf9l/eZ/v//fzxy4+1i8Vu8a9c6v79e/bN+F95lPX9rf8Tn87Krf2TnfJOu7zb+Z//5vzb2r/Qo/39/v2v7LP9V7/2nRf7fCkAMAT1re2VuWq1svHeF2In4j1IQ+GgCsfejzQU2oW8eyYAAGDQ/n/Sn3cmAAAAAAAAAAAAAAAAAAAAcHQN4+fE9sbcyaepAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABv9d8AAAD//9u92ow=")
r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000005c0))
r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x40942, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
write$binfmt_script(r4, &(0x7f0000000c40)={'#! ', './bus'}, 0x9)
copy_file_range(r4, &(0x7f00000001c0), r3, 0x0, 0xffffffffa003e45c, 0x700000000000000)
ioctl$EXT4_IOC_MIGRATE(r2, 0x6609)

5.013428874s ago: executing program 0:
sendmsg$NFT_MSG_GETSET(0xffffffffffffffff, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x3, &(0x7f00000000c0)=[{}, {0x2c}, {0x6}]})
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0)
sendmsg$OSF_MSG_REMOVE(r1, &(0x7f0000000300)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000001140)={0x710, 0x1, 0x5, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2}, [{{0x254, 0x1, {{0x0, 0x400}, 0x4e, 0x40, 0x5, 0x1e57, 0x1a, 'syz0\x00', "6ec7d4647e7767e8ef1ac421312d74e0777c97fe4cd0e5ff80127af622610309", "42828fa6be40f30d29a69410e4105577a1542a41df6f3cccd663a1d825bb058a", [{0x7f, 0x8dc5, {0x2, 0x7}}, {0xfc01, 0x8, {0x2, 0xffffffff}}, {0x6c50, 0xa2a5, {0x3, 0x400000}}, {0x2, 0xff, {0x1, 0x20}}, {0x80, 0x3, {0x1, 0x7fffffff}}, {0x3, 0x400, {0x1, 0x4}}, {0xb98, 0x5, {0x3, 0x5bd4}}, {0x9, 0xff, {0x0, 0x100}}, {0x8cd3, 0x6, {0x2, 0xb2f}}, {0x52ca, 0x6, {0x3, 0x8000}}, {0x7fff, 0x1, {0x0, 0x3ff}}, {0x4, 0x3ff, {0x1}}, {0x7, 0x0, {0x1, 0x9}}, {0x8, 0x5, {0x1, 0x6}}, {0x0, 0x78, {0x3, 0xfffffff8}}, {0x6, 0x6, {0x0, 0x3f}}, {0x6, 0x8001, {0x1, 0xfffffffb}}, {0x3, 0x800, {0x2, 0x20}}, {0x2, 0x2, {0x0, 0x1}}, {0x8001, 0x100, {0x3, 0x8000}}, {0x3c5f, 0x6}, {0xdca, 0x6, {0x0, 0xfb6}}, {0x80, 0x7ff, {0x1, 0x7fffffff}}, {0xfffe, 0x100, {0x1, 0xffffff80}}, {0xffc1, 0x0, {0x0, 0x6}}, {0x20, 0x9, {0x0, 0x9}}, {0x8001, 0x7ff, {0x3, 0x1}}, {0x3, 0x7, {0x2, 0x3}}, {0xf001, 0x1, {0x3, 0x614}}, {0x7, 0xffff, {0x3, 0x7}}, {0x0, 0x20, {0x2, 0x2}}, {0x2, 0x9, {0x0, 0x5}}, {0xa7d, 0x401, {0x0, 0x101}}, {0x7, 0xff80, {0x2, 0xfff}}, {0x9, 0xfeff, {0x2, 0x5}}, {0x100, 0x2, {0x3, 0x1}}, {0xffff, 0x3, {0x3, 0x5}}, {0xff, 0x800, {0x3, 0xaf}}, {0x4e3, 0xb4, {0x3, 0xfff}}, {0x4, 0x7, {0x3, 0x401}}]}}}, {{0x254, 0x1, {{0x3, 0x1}, 0x0, 0x2, 0x3f, 0x9, 0x7, 'syz1\x00', "e8c8dc93b49af0fe69fc3198e319487f8b0bea42f5da43661c4f89a9b4bcec51", "902dec787660e16406f893e50cc3ed68088560f8026495da136c863c5306e160", [{0x6, 0x40, {0x1, 0x41}}, {0xe83, 0x5, {0x3, 0x3ff}}, {0x20, 0x0, {0x3, 0x401}}, {0x8, 0xfff9, {0x3, 0x1}}, {0x9, 0x8, {0x3, 0x9}}, {0x80, 0x8, {0x3, 0x7fff800}}, {0x101, 0x1c, {0x3, 0xffffffff}}, {0x5, 0x1, {0x3, 0x10}}, {0x2, 0xf30, {0x1, 0xffff}}, {0x3, 0x7fff, {0x3, 0x7fff}}, {0x8000, 0x3, {0x3, 0x8}}, {0x2, 0x0, {0x2, 0x7}}, {0xfff, 0x101, {0x0, 0x28}}, {0x80, 0x1, {0x0, 0x8001}}, {0x8, 0xcf, {0x3, 0x9}}, {0xc000, 0x3, {0x0, 0x7}}, {0x800, 0x1, {0x3, 0x401}}, {0x1d, 0x4, {0x2, 0xa}}, {0x40, 0x1ff, {0x2, 0x101}}, {0x7ff, 0x8, {0x2, 0x1ff00000}}, {0x8000, 0x0, {0x1, 0x3}}, {0x6, 0xb59b, {0x1, 0x7fff}}, {0x1, 0x231, {0x1, 0x2}}, {0x20, 0x1, {0x3, 0x438}}, {0x9, 0xf0, {0x0, 0x1}}, {0x8, 0x0, {0x2, 0x8}}, {0x8cd, 0x874, {0x2, 0x1f}}, {0x1, 0xff00, {0x3, 0x49}}, {0x7f8f, 0x7ff, {0x0, 0x4}}, {0x4, 0x1, {0x2, 0x6}}, {0x7, 0x6, {0x1, 0x9}}, {0x6, 0x6, {0x3}}, {0x23, 0x0, {0x2, 0x9}}, {0x1f, 0x7f, {0x3, 0xff}}, {0xa3ca, 0x9, {0x3, 0x3}}, {0x6, 0x9, {0x1, 0xfffffffa}}, {0x0, 0x81, {0x2, 0x2}}, {0x6, 0x8001, {0x0, 0xffffff81}}, {0x9, 0x2, {0x1, 0x2}}, {0x9, 0x84fb, {0x2}}]}}}, {{0x254, 0x1, {{0x2, 0xffff}, 0x4, 0x7a, 0x7, 0x6, 0x25, 'syz0\x00', "fbfd68bf04c1b90bda42549a6c8c3a2cf6864e47e60a68397bd5b5632784d095", "658c735fbd19b46a34f1b66a30ff2783ad2e6ac78b2889f20c895b9bae6c0d10", [{0x6, 0x800, {0x3, 0x5}}, {0xffff, 0x8, {0x3, 0x97df}}, {0x2, 0x800, {0x0, 0xff}}, {0x1, 0x7, {0x2, 0x200}}, {0x7, 0x0, {0x2, 0x1}}, {0x71f6, 0x8000, {0x0, 0x5}}, {0xfffc, 0x1}, {0x85ce, 0xaedd, {0x0, 0x101}}, {0xdf8}, {0x3, 0x3, {0x3, 0x2}}, {0x8001, 0x3, {0x2, 0x8}}, {0x7, 0x7}, {0x200, 0x0, {0x2, 0x6}}, {0x5, 0x1, {0x1}}, {0x20, 0x3ff, {0x2, 0x40}}, {0x8, 0x81, {0x2, 0x1}}, {0x48da, 0x5, {0x0, 0x6}}, {0x0, 0x2, {0x3, 0x1ff}}, {0x3800, 0x437b, {0x0, 0x1}}, {0x7f, 0x0, {0x2, 0x5}}, {0x8, 0x1, {0x1, 0x100}}, {0xf0, 0x4, {0x0, 0xffffffff}}, {0x1, 0x3, {0x3, 0x81}}, {0x1f, 0x50, {0x1, 0x8}}, {0x0, 0x2, {0x3, 0x800}}, {0x4, 0x9, {0x0, 0x4}}, {0x0, 0x8, {0x0, 0x9}}, {0x7, 0x8001, {0x1, 0x20}}, {0x9, 0x6, {0x0, 0xdb70}}, {0x8000, 0x3, {0x3, 0x9}}, {0xfff7, 0xffff, {0x2, 0x2}}, {0x1, 0x9, {0x0, 0x4e5}}, {0x4, 0x7ff, {0x0, 0x6}}, {0x7fff, 0x3, {0x3, 0x1ff}}, {0x8, 0x101, {0x1, 0x7}}, {0x6, 0x6, {0x2, 0x3ff}}, {0x7, 0x6091, {0x2, 0x7}}, {0x9, 0xfffd, {0x3, 0xcc4}}, {0x9, 0x6, {0x1, 0x31}}, {0xc7, 0x401, {0x1, 0x20004000}}]}}}]}, 0x710}, 0x1, 0x0, 0x0, 0x8811}, 0x4004001)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000240)='qrtr_ns_message\x00', r0}, 0x10)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000001100)='./file0\x00', 0x3014490, &(0x7f0000000100)={[{@nombcache}, {@usrjquota}, {@errors_remount}, {@norecovery}, {@max_batch_time={'max_batch_time', 0x3d, 0x5}}, {@mblk_io_submit}, {@minixdf}, {@barrier_val}, {@grpjquota}, {}]}, 0x45, 0x7b1, &(0x7f00000004c0)="$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")
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b)
ioctl$FIBMAP(r2, 0x660c, 0x0)

4.805730815s ago: executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00')
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00')
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]})
syz_mount_image$fuse(0x0, &(0x7f0000000c40)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$tmpfs(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000002c0), 0x0, 0x0)
mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x128a877, &(0x7f0000000180)=ANY=[@ANYBLOB='size=2,nr_inodes=4'])
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
getsockopt$inet6_udp_int(r1, 0x11, 0x0, &(0x7f0000000080), &(0x7f00000001c0)=0x4)
r2 = syz_usb_connect(0x0, 0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201040000002f2057155081ed29010203010902120001000000000904"], 0x0)
socket$nl_route(0x10, 0x3, 0x0)
syz_usb_control_io$hid(r2, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
syz_usb_control_io(r2, &(0x7f0000000480)={0x2c, &(0x7f0000000300)={0x0, 0xa, 0xd4, {0xd4, 0x0, "da2f5ab4b4fe732ba36a822b38e2268fddfd08f9accd774f93265bca82b26765ea9a7d5fe2d2aae3c81035091ed0f6893f6873e42ae160f431b62bee2b97f11afc52d2de30d88d44b276ac2bbceaa4004a0274192e7dfae4e84028b65c4ec8084f33553ec7558444630a08c6310e407d2e6f2b51200468a97f450a242993ec3aaca61060c61af6be4576fa9d04a70ed971c160db047768ce5a90093ed6bcf82571359b5952cdc0a9d5d659a697518a180ac90dd2816b742e8673d58c300737ac325d623e4428f4319a908e81aab9adc79db0"}}, &(0x7f0000000400)={0x0, 0x3, 0x3c, @string={0x3c, 0x3, "5633e3b996e701fcd4062c38bde38fe8f9b372e3b0086e5f8ec7fc951a44bbc584b06088ca38c68c89e178cf9d3fd28274a3362cc74deab14776"}}, &(0x7f0000000580)={0x0, 0xf, 0x143, {0x5, 0xf, 0x143, 0x6, [@ss_container_id={0x14, 0x10, 0x4, 0x54, "68a497d73ea51ba50939f591fa11fc92"}, @ext_cap={0x7, 0x10, 0x2, 0x3c, 0x4, 0x6}, @ss_container_id={0x14, 0x10, 0x4, 0x1b, "d3a7036cbaaa2176042b569a3049a913"}, @generic={0xfa, 0x10, 0x1, "f3a4d31ef02423185533ae5e83661c12fb922faa8d282f11ff0dab1adefe86e213cbfb9de6eb9fc4f1e85a585014d5be9cfb5eb23dd9c2948777f46a9e7ae9fdc235721416017d2d08a7dc9c8941de3294d733a283cbd33e420fa58eb4ad52a6e46ea2cebf540fe4f7708813dedc3932ef3972461ef2a6bb25c3e1d8b739958c3d4b26999a6013a00587341f60683fe529a78bccd4d9fed2b5d7d23b907ed86fe9cd0ea8ab38accc80692b21a6c94cba1721a8101c3fca1be94c6acf4d2c82bdc2235d03f6dd5ac5b2f4d42951b335eb09513ad0adfda14e6482cecbe2a221ed8c75c0e627ebec97ac63f799509b1682e1c2735b791148"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0x2, 0x0, 0x4}, @wireless={0xb, 0x10, 0x1, 0x4, 0x0, 0xe6, 0x5, 0x4, 0xc1}]}}, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x80, 0x80, 0x72, 0x6, "3705e5d7", "c0b3d4ca"}}, &(0x7f0000000100)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3, 0x3, 0x8, 0xff, 0x2d, 0x5, 0xe9f2}}}, &(0x7f0000000c00)={0x84, &(0x7f00000007c0)={0x20, 0x9, 0x73, "ab906f77925b05ee0a1901f3044f6860bc3b378637867eab352e1dc023b34ce5b78ecb488f1d4de0cd00cfb2149cbf4e7f569ae14c8a1ff21d3b981f4a63555df38979c274eac9096dedd024c207b9fa922f8dd33502186104c0015a813b5f39b983a17f277999b10095b652d71cf8c97033cf"}, &(0x7f00000004c0)={0x0, 0xa, 0x1, 0x2f}, &(0x7f0000000700)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000740)={0x20, 0x0, 0x4}, &(0x7f0000000880)={0x20, 0x0, 0x8, {0xe0, 0x4, [0x0]}}, &(0x7f0000000940)={0x40, 0x7, 0x2, 0x4475}, &(0x7f0000000980)={0x40, 0x9, 0x1, 0x40}, &(0x7f00000009c0)={0x40, 0xb, 0x2, "d05d"}, &(0x7f0000000a00)={0x40, 0xf, 0x2, 0x5}, &(0x7f0000000a40)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000a80)={0x40, 0x17, 0x6, @local}, &(0x7f0000000ac0)={0x40, 0x19, 0x2, ',{'}, &(0x7f0000000b00)={0x40, 0x1a, 0x2, 0xaab5}, &(0x7f0000000b40)={0x40, 0x1c, 0x1, 0xfa}, &(0x7f0000000b80)={0x40, 0x1e, 0x1, 0xa2}, &(0x7f0000000bc0)={0x40, 0x21, 0x1}})
getpid()
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7}, 0x48)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000580)={{r3}, &(0x7f0000000500), &(0x7f0000000540)='%+9llu \x00'}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000006c0015000000d9fece23b82000000000", @ANYRES32, @ANYBLOB="000000000000000018003480050035"], 0x38}, 0x1, 0x300}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000140)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2001095, 0x0)
syz_mount_image$ext4(&(0x7f00000001c0)='ext3\x00', &(0x7f0000000180)='./file0\x00', 0x838734, &(0x7f0000002380)={[{@max_batch_time}, {@discard, 0x1e}, {@grpid}, {@block_validity}, {@sysvgroups}, {@bh}, {@noblock_validity}, {@nojournal_checksum}, {@jqfmt_vfsold}, {@resuid}, {@errors_continue}, {@jqfmt_vfsv0}, {@debug}]}, 0xee, 0x43a, &(0x7f0000000880)="$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")
syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000ac0)=""/94, 0x5e}, {&(0x7f0000000180)=""/246, 0xf6}, {&(0x7f0000000300)=""/187, 0xbb}], 0x3, 0x9, 0x0)
syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./file0\x00', 0x8, &(0x7f00000001c0)={[{@nodiscard}, {@nobarrier}, {@noflush_merge}, {@six_active_logs}, {@noflush_merge}, {@disable_roll_forward}, {@inline_data}, {@fsync_mode_posix}, {@heap}, {@noinline_data}, {@background_gc_off}, {@adaptive_mode}, {@jqfmt_vfsold}]}, 0x1, 0x54f9, &(0x7f000000ab40)="$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")
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='oom_score\x00')
read$FUSE(r5, &(0x7f0000000340)={0x2020}, 0xcb0a)

4.484681084s ago: executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x80}, 0x48)
mkdir(&(0x7f0000000400)='./file1\x00', 0x0)
mkdir(0x0, 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x10)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mount$overlay(0x0, &(0x7f0000000280)='./file1\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080))
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x7, &(0x7f0000000300)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x90)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x15, 0x3, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2}, 0x48)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000000060000000400000000000007000000000000000000000001050000000800000000000000010000850000000000000000020000000000000a00000000da0005c104d11a851f5ab18e64323cf10ce5a764412631a91a947631984c656180e897a86380d8731b406420"], &(0x7f0000000340)=""/142, 0x52, 0x35b, 0x1}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180b000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r3}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000008c0)=@newlink={0xe8, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4800}, [@IFLA_LINKINFO={0xc8, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xb8, 0x2, 0x0, 0x1, [@IFLA_VLAN_INGRESS_QOS={0x1c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1, 0xbf2f}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffff}}]}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_INGRESS_QOS={0x40, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xfff4, 0x1, {0x5, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffff, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x20, 0x7ff}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7, 0xfffffff9}}]}, @IFLA_VLAN_INGRESS_QOS={0x0, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0x0, 0x1, {0x1000, 0x998}}, @IFLA_VLAN_QOS_MAPPING={0x0, 0x1, {0xb3, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0x0, 0x1, {0x2, 0x101}}, @IFLA_VLAN_QOS_MAPPING={0x0, 0x1, {0x3f, 0x8001}}, @IFLA_VLAN_QOS_MAPPING={0x0, 0x1, {0x9, 0x9}}]}, @IFLA_VLAN_INGRESS_QOS={0x40, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7fff, 0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x62f, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x40, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffff9, 0x101}}]}]}}}]}, 0xe8}}, 0x0)
fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffed3)

4.344333095s ago: executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
select(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x2})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
socket$inet_udp(0x2, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x90)
ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000540)={0x0, 0x0, 0x0, &(0x7f00000002c0)=""/138, 0x0})
ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000740))
ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1})
syz_mount_image$erofs(&(0x7f0000000340), &(0x7f0000000580)='./file2\x00', 0x2000000, &(0x7f0000000080)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16], 0x1, 0x220, &(0x7f00000005c0)="$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")
ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74})
r2 = creat(&(0x7f0000000340)='./file2\x00', 0x2)
close(r2)
r3 = getpid()
r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
connect$bt_l2cap(r5, &(0x7f00000000c0)={0x1f, 0x2, @fixed}, 0xe)
getsockopt$sock_buf(r5, 0x1, 0x1c, &(0x7f0000000000)=""/41, &(0x7f0000000140)=0x29)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}})
syz_pidfd_open(r3, 0x0)

4.24026201s ago: executing program 2:
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x32, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x1})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002180)={<r2=>0xffffffffffffffff})
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
inotify_init1(0x0)
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001100)='fdinfo/4\x00')
pread64(r4, 0x0, 0x0, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x16, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x92}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x70)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f0000000400)={'ip_vti0\x00', &(0x7f0000000680)={'erspan0\x00', <r6=>0x0, 0x8, 0x20, 0x5, 0x1, {{0x1f, 0x4, 0x2, 0x5, 0x7c, 0x67, 0x0, 0x1f, 0x4, 0x0, @rand_addr=0x64010102, @loopback, {[@ra={0x94, 0x4}, @cipso={0x86, 0x62, 0x2, [{0x5, 0xa, "a9d85504cdc60bf6"}, {0x7, 0x11, "26d9faa3820c1c10c9dc89f1385c6b"}, {0x5, 0xb, "dc1574742deb1c6612"}, {0x7, 0x11, "abc00eee167f6207333bd39f430ae4"}, {0x5, 0xf, "0bc9fed7ff8e4535620e61e243"}, {0x6, 0x5, "ea3d08"}, {0x0, 0xa, "26d6cd546543f1a5"}, {0x1, 0x7, "0c052cc915"}]}, @noop]}}}}})
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket(0x1, 0x803, 0x0)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r8, 0x89f2, &(0x7f0000000480)={'syztnl1\x00', &(0x7f00000001c0)={'syztnl1\x00', 0x0, 0x4, 0x29, 0x40, 0x6, 0x3, @empty, @private0={0xfc, 0x0, '\x00', 0x1}, 0x1, 0x1, 0x7fffffff, 0x5}})
getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r7, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=ANY=[@ANYBLOB="600000001000ff0400000000000000000000003e", @ANYRESDEC=0x0, @ANYBLOB="a5fdad8800000000240012800e00010069703665727370616e0000001000028004001200080015009f83080008000500", @ANYRES32=r9, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r9, @ANYBLOB="0a000100aaaaaaaaaa000000"], 0x60}}, 0x0)
sendmsg$ETHTOOL_MSG_COALESCE_GET(r3, &(0x7f00000007c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000580)={&(0x7f0000000740)={0x70, 0x0, 0x2, 0x70bd2b, 0x25dfdbfb, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x2040800}, 0x4010000)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000040)={'ip_vti0\x00', &(0x7f00000000c0)={'syztnl0\x00', <r10=>0x0, 0x10, 0x20, 0x5, 0x1, {{0xb, 0x4, 0x0, 0x2, 0x2c, 0x64, 0x0, 0x1, 0x29, 0x0, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@cipso={0x86, 0x14, 0xffffffffffffffff, [{0x1, 0xe, "57177674a6fe577abe33b003"}]}, @noop, @noop, @noop]}}}}})
r11 = open(&(0x7f0000000000)='./bus\x00', 0x16d43e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x11, r11, 0x0)
pipe(&(0x7f00000002c0)={<r12=>0xffffffffffffffff})
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={0xffffffffffffffff, <r13=>0xffffffffffffffff}, 0x4)
r14 = syz_open_dev$usbfs(&(0x7f0000000000), 0x204, 0x2)
r15 = dup(r14)
ioctl$USBDEVFS_CONTROL(r15, 0xc0185500, &(0x7f0000000080)={0x23, 0x1, 0x14, 0x0, 0x0, 0x0, 0x0})
r16 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000340)={0x0, 0x7fffffff, 0x30}, 0xc)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xd, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x36b, 0x0, 0x0, 0x0, 0x6}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @jmp={0x5, 0x1, 0xb, 0x8, 0x9, 0x2, 0x4}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x7}, @call={0x85, 0x0, 0x0, 0xb3}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}]}, &(0x7f0000000240)='GPL\x00', 0xbc3, 0x0, 0x0, 0x41000, 0x48, '\x00', r10, 0x0, r11, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x0, 0x2, 0x4, 0x2}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000000380)=[r12, r5, r13, r15, r16], &(0x7f0000000500)=[{0x5, 0x1, 0xe, 0xb}, {0x3, 0x4, 0x0, 0x6}, {0x3, 0x4, 0xc, 0x4}, {0x1, 0x3, 0x8, 0x1}, {0x3, 0x5, 0xe, 0xc}, {0x3, 0x1, 0x5, 0x5}, {0x5, 0x3, 0x10, 0x2}, {0x0, 0x0, 0x1}], 0x10, 0xffffff80}, 0x90)
bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@bloom_filter={0x1e, 0x6, 0x3, 0xffff7fff, 0x1800, 0x1, 0x2, '\x00', r10, 0xffffffffffffffff, 0x5, 0x3, 0x5, 0xf}, 0x48)
ioctl$FS_IOC_MEASURE_VERITY(r2, 0xc0046686, &(0x7f0000001140)={0x3, 0x1000, "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"})

4.064349127s ago: executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
select(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x2})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
socket$inet_udp(0x2, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x90)
ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000540)={0x0, 0x0, 0x0, &(0x7f00000002c0)=""/138, 0x0})
ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000740))
ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1})
syz_mount_image$erofs(&(0x7f0000000340), &(0x7f0000000580)='./file2\x00', 0x2000000, &(0x7f0000000080)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16], 0x1, 0x220, &(0x7f00000005c0)="$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")
ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74})
r2 = creat(&(0x7f0000000340)='./file2\x00', 0x2)
close(r2)
r3 = getpid()
r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
connect$bt_l2cap(r5, &(0x7f00000000c0)={0x1f, 0x2, @fixed}, 0xe)
getsockopt$sock_buf(r5, 0x1, 0x1c, &(0x7f0000000000)=""/41, &(0x7f0000000140)=0x29)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}})
syz_pidfd_open(r3, 0x0)

3.867619447s ago: executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
select(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x2})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
socket$inet_udp(0x2, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x90)
ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000540)={0x0, 0x0, 0x0, &(0x7f00000002c0)=""/138, 0x0})
ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000740))
ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1})
syz_mount_image$erofs(&(0x7f0000000340), &(0x7f0000000580)='./file2\x00', 0x2000000, &(0x7f0000000080)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16], 0x1, 0x220, &(0x7f00000005c0)="$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")
listxattr(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r2 = creat(&(0x7f0000000340)='./file2\x00', 0x2)
close(r2)
r3 = getpid()
r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
connect$bt_l2cap(r5, &(0x7f00000000c0)={0x1f, 0x2, @fixed}, 0xe)
getsockopt$sock_buf(r5, 0x1, 0x1c, &(0x7f0000000000)=""/41, &(0x7f0000000140)=0x29)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}})
syz_pidfd_open(r3, 0x0)

3.178441561s ago: executing program 3:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
r1 = eventfd(0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x8000003})
ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1)
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000280)=""/73})
ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000480)={0x1, r1})
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000015640)=""/102400, 0x19000)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0x63, &(0x7f0000000600)=""/99}]})
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x90)
socket(0x0, 0x0, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f00000099c0)={0x2020}, 0x2020)
read$FUSE(0xffffffffffffffff, &(0x7f0000004940)={0x2020}, 0x2020)
preadv(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)=""/154, 0x9a}], 0x1, 0x0, 0x2)
read$FUSE(0xffffffffffffffff, &(0x7f0000006980)={0x2020}, 0x2020)
write(0xffffffffffffffff, &(0x7f00000002c0)="fc0000001c000704ab5b2509b868030002ab087a0100000001481093210001c0f0030584050060100000000000039815fa2c53c28648000000b9d95662537a00bc000c00f0ff7f0000b400600033d44000040560916a0033f436313012dafd5a32e273fc83ab82d710f74cec184406f90d435ef8042c2e9a3885f1fc0e5bba2e177312e081bea05d3a021e8ca062914a46ccfc510bb73c9455cdc8363ae4f5df77bc4cfd6239ec2a0f0d1bcae5fa0f5f9dcdd51af51af8502943283f4bb102b2b8f5566791cf190201ded815b2ccd243f395ed94e0ad91bd6433802e0784f2013cd1890058a10000c880ac801fe4af000049f0d4796f00000905", 0xfa)
syz_usb_connect(0x0, 0x10e, &(0x7f0000000380)=ANY=[@ANYBLOB="120100006a249f08ec1888323a3f010203010902fc0001870000000904e600030e010000062406"], 0x0)
syz_read_part_table(0x5ba, &(0x7f00000005c0)="$eJzs2z9I42cYB/An/uHgOlxpb7rp7oYO5ZY7brxA70qSUyyEqIt0UKiINFMKQkoDghZqBsUM4ugihSz+mdQMTopC5yIOFsHBpUWXgosp4ttObamtlhY+H/jx5H3zfd8nz5DxF/yvdcRP7XY7ExHte7+faP/J6cFmLt/zuPi6NJAui6XG1+9ffcz8ejrd+jStj9J6eel+a+b8bXfzsD/eHd6pd6TvJ9Pzzrebg7cwHndsJbv7YGq6UpitZscPCrWT9yJi9SxX2uyrN9Z6j3/L7aXalepHqY5EOcoxGpVb6r/YPH5++ajQ3Bh7dZFvzW2/SLni357wZv0nnswPNWpvnq0/XHhZ3dovnXZe58p/8O8CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOC/ZSW7+2BqulKYrWbHDwq1k2++/+6T1bNcabOv3ljr7f74s5TbS7Ur1S+iGl/G5zES5cjEaFRuqf9i8/j55aNCc2Ps1UW+Nbf9IuWK/3DOv9p/4sn8UKP25tn6w4WX1a390mnnda58745+AAAAAAAAAAAAAAAAAAAAAERELt/zuPi6NBCRiU+jKz788auOq/12et89k3JPUz1K+8tL91sz52+7m4f9P38wvFP/Ie1PXj+dETH4rw/Djf0SAAD//+nMj6k=")
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r3, 0x27, 0x0, 0xab, 0x0, 0x0, 0x40000000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x400800}, 0xffb6)

2.472926367s ago: executing program 2:
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x80}, 0x48)
mkdir(&(0x7f0000000400)='./file1\x00', 0x0)
mkdir(0x0, 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x10)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mount$overlay(0x0, &(0x7f0000000280)='./file1\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080))
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x7, &(0x7f0000000300)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x90)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x15, 0x3, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2}, 0x48)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000000060000000400000000000007000000000000000000000001050000000800000000000000010000850000000000000000020000000000000a00000000da0005c104d11a851f5ab18e64323cf10ce5a764412631a91a947631984c656180e897a86380d8731b406420"], &(0x7f0000000340)=""/142, 0x52, 0x35b, 0x1}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r3}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000008c0)=@newlink={0xe8, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4800}, [@IFLA_LINKINFO={0xc8, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xb8, 0x2, 0x0, 0x1, [@IFLA_VLAN_INGRESS_QOS={0x1c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1, 0xbf2f}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffff}}]}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_INGRESS_QOS={0x40, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xfff4, 0x1, {0x5, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffff, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x20, 0x7ff}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7, 0xfffffff9}}]}, @IFLA_VLAN_INGRESS_QOS={0x0, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0x0, 0x1, {0x1000, 0x998}}, @IFLA_VLAN_QOS_MAPPING={0x0, 0x1, {0xb3, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0x0, 0x1, {0x2, 0x101}}, @IFLA_VLAN_QOS_MAPPING={0x0, 0x1, {0x3f, 0x8001}}, @IFLA_VLAN_QOS_MAPPING={0x0, 0x1, {0x9, 0x9}}]}, @IFLA_VLAN_INGRESS_QOS={0x40, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7fff, 0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x62f, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x40, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffff9, 0x101}}]}]}}}]}, 0xe8}}, 0x0)
creat(&(0x7f00000000c0)='./bus\x00', 0x60)

2.406794437s ago: executing program 0:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2})
ioctl$TUNSETLINK(r0, 0x400454cd, 0x207)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast})

1.824166145s ago: executing program 4:
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x3, &(0x7f0000002b00)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000ad987993ca093a0b4e0cf0566916fe1b41f52b570771b78bb087d6ef8b20575e67fd5b80e144eca6c3e917086d733d147294a382f475e783d4ad79f4185f002f21bdab2acd"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000000)='kfree\x00', r0}, 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x19, 0x4, 0x4, 0x5, 0x14}, 0x48)
bpf$MAP_UPDATE_CONST_STR(0x4, &(0x7f0000000080)={{r1}, 0x0, 0x0}, 0x20)
r2 = socket$packet(0x11, 0x2, 0x300)
r3 = socket$packet(0x11, 0x3, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', <r4=>0x0})
setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000000)={r4, 0x2, 0x6, @local}, 0x10)
setsockopt$packet_add_memb(r2, 0x107, 0x2, &(0x7f0000000040)={r4, 0x2, 0x6, @local}, 0x10)
r5 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES64, @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r6, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000400)='./file0\x00', 0x1000000, &(0x7f0000000100)=ANY=[@ANYRES64, @ANYRES16, @ANYRESHEX], 0xfe, 0x521, &(0x7f0000001a00)="$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")
setresuid(0x0, 0xee00, 0x0)
connect$inet(r6, &(0x7f0000005300)={0x2, 0x4e21, @empty}, 0x10)
writev(r6, &(0x7f0000000840)=[{&(0x7f0000000340)="b8", 0x1}], 0x1)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r6, 0x6, 0x16, &(0x7f0000000440)=[@window={0x3, 0x0, 0x8}, @mss, @timestamp, @sack_perm, @window={0x3, 0x0, 0xfffc}, @sack_perm, @window, @timestamp], 0x2000000000000117)
setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f00000001c0), 0x4)
sendmmsg$inet(r6, &(0x7f00000028c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000002380)="e04cde4e946aa5af9eb91be47417b3a329a508361b43bc11902883989e2b4457e66920fcf23dc6a88f2a3a83d9b9e54f814ed9477d0cd3a27149405a438a7d1de0b113ced141f2b4ca7f3535cb9f2782cf8146b703842e4290aca5648a9760d86627adf01b500f1210f281d4f7b7df26f0dc7fd1deb318cf7b6a9ba7cb64af00c7576282ab4833db0303a3e1af907687ff6629998c78f375ea203878f88540b79580d41608db25cfbac7c455dca946bcebaf31dfe778a45d5fdeffa3458cae8d4b9e501d6b9077ac58d08f3e4728fa3966767ee73016f8fa333478bddee992d6c53cfaeda6c3b792558d57e937f5b56425", 0xf1}], 0x1}}, {{&(0x7f0000000280)={0x2, 0x4e21, @private=0xa010102}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000380)="28654295fc0ce063dad6f767786debff20394a7b088dfee3d7e3f1f260bff89f698db6443beee390f1430ff2d9cad10a25d8df8b72bc26c4bb53be6b45fa591332aae63b88df36d9b835b12dee006f75a77102bff751a78a081de07d49e1d2d3905c64f8ce46b56408cbc6d82545b5447c8c0ea5fbf498b56669c5eac9bc88f042b58c6fd2c0727b359c5d81ab55bb63057f21b631219361d8c1851850661c6a1ec8fc457ac68bade86f7993a4", 0xad}, {&(0x7f00000004c0)="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", 0xfc}], 0x2, &(0x7f0000000680)=[@ip_tos_int={{0x14, 0x0, 0x1, 0xffffffff}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @loopback, @multicast1}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}}}}], 0x58}}, {{&(0x7f0000000300)={0x2, 0x4e23, @local}, 0x10, &(0x7f0000001c00)=[{&(0x7f0000000700)="f54e7933417ce13df0f6079501d8e796367772c391261bfe1406e44d7a7a69948bd08bd55fa8d31085dedbfeb12d96451a6987f315d1a797f2e03308fd02e9b365f3f0b45b84f4e9839e0506850d6d88733551e5f8f6e8e8cf37b5c2be071590f7326c27bce59b4a25512d69a2ac572a29da06f688f17b4c6eed1f525b1b6e897e2caced113182fa615d2b04c3b6f6fa2e400a245d6d8e7859f5027d33b4d26a6a4b67ec5f03d3c24e30ffae626a3a68c03cea", 0xb3}, {&(0x7f00000007c0)="ad2adcf88c5f406f76bbb87d1792908933c2525752375db42804fe16d38b2aad7f2266391070113d7c75ba763deb7152f99a10c0e0c21e0706555d5fe435f78e9fd33882948b0ea222823ff935859fe489fd81b28ee298e982878bb6d49284a8994b5cb9f34c10c764957fa6f10567ee", 0x70}, {&(0x7f0000000880)="718ea43a34d5cc872ddca55f12379b65873bdf81e918de9e355998b604dab56243e91c44c05929e6654b084eef9e06ab271c4d345fd507ceb1cd72fa282f9b1cfccd4414c17b778e8b663fa512f020bacce362f8393f53b2264589b20a1983e446ea26ea263a06f7af134b58995fbaf6bee0a3167cc83cb7e4332e181b00e7cea1fd379cabbae9fe67ed3e86ebaa8907dd09d6bc4d0b62fb8c4bccc6feb7350799579aed6613cc713e15da298bcb57a3dc127b2f740a851d30138120039ee76e9f30d65febb684cc", 0xc8}, {&(0x7f0000000980)="ed287b51ba33b08fd6c20def81e5795a890e38ed795b3923cbf1a369e8a49bbf49ec8f6f4df918f16212df7b7a9998a03fd37d76f7d4fcea1320790f0b92f1fe49bc82caeae594a112da2bcbebd35aafbb430804a380c41d8e88f374b7a229e76651800c228ea9b10b6a744e7860998c852f2d8efdb2", 0x76}, {&(0x7f0000000a00)="1cf60b7f41745f98162643a1004a48be7e5507471a61c6e8782276ff95ca94908f7e59bd3a", 0x25}, {&(0x7f0000000b00)="59a20b64174fe729d3daa0fae7636fd04c83e258fcc465b083053b7209c92b250003cf1e8363bb3eb23cb21c6a8eaa232236d0da3546ac821477343c0182d3be414a262327ecb3b65bf091f91d2b270bab862cb4cee0d631266f38", 0x5b}, {&(0x7f0000000b80)="70efae7bf7dd711d648b315620d034a05b7ac1eaca81bae112f9112bce2b6cd8d9cb373814e605bb7a9341ad5be6ff372b497daee2c6a03175a58b16dd914e24c24ebff5e3af07440d288f963386487d6251425692", 0x55}, {&(0x7f0000000c00)="b3a8182f882bcf09513e5b164086380cd3c0b00b336eec28c9cbf04f01bfb071429a8ef200054cf31d351f7b8948f0fecde489b176b17147db4d2f2eefb52fa5847d944bdd3424bfc1d81f1487fd3a744b7da86d1d8f16d2d15f350f044f4e3394a882fdc10645f0b25f6e532e0a7449f8c4858bd3ec3f7bc454549b20ccecc7787cba29cb3e82aa33bc1343f09cbd973ee5c2672a5b828b34ded7c52f6c0d4ed6d9f162e8410d6983c16b657dea9471f652fa63271cfa556e8cef964999daa9ba10451b5488bd722747254af2a78b919e5f0574265a76389ed7826d40ad3ea0a8e1a60e1e99fcda60b714d451bed91c61eab010330ea4cf45c6eca76483e0dea3f9de1362e882bf6b8bcc9311c63b5b7e76b507b06ea52a93607648909cc05bd7c46319f3d809ac72b55a5f9dfbd7a2d4547a096c999eed33f0b295725d44db11ed5d99bc09a36f9098cffa18d44ad1b75ea86036b18ed37b04e023b808c15803d4711d24bfb9fd3922df413192f9ff3ffe1cd17622a0d175e28cfd50e0c7926f14bb910a15619e14da7b983d21163585f7d2c171e69f4892acde894286665227cd641c246475dee68e80e32947bcf577aab4915ccfa57d39d0444dbd79aff9227a5735d531e6267a6e90beb5ccfd95e76c4cf737bf1667954a7df52527ed3814b2d73ab028dc4af7e022a991679af15604d137083cc423e60b3e4189209eaf4d875ae8d75b6415bef441e485d6a04469d54fffe39789de3a2c759715cca74e5590a184331d477ef5cb988a2f96573aee1871bf00f30f35f5ef643d253e2c4c485f6b579ababe613cf2e696447aa25103a084911f058605c0d3ee6285e47cfd79cf8e318b06bbe012d61b21aaf0159418b3dfa58b11e883c92972e101e2043b9acdf11cd7c315bd07945e154541de9476f9c631427b5c3ceb43086a4d6dc79ab21a42aff595a56120b2c066877dfab2d0d03a81ac3a36473d1c9d8433777b509df9a87598a2c057dca823725732c3a8bea7052b2214acaa7acf0ab18ba2947512a2951835ba6a4924a98d6d91e3bf2c1dd61a019533b41029cea551159eb571cb4766b97815a548e55171bb2b1e91950247ea8105d1b1d2a1ad8b8b7d5f7f5b54aff0a487a009b0255f77683ea05d46ae5a04c7dea955e5557839d8386d37ff1b94279059fcce70ed0ac4b6fbfe5a8d36f86f9f653f8a0327289a4b192558454be2b3e779a2c4f2908d670028c13ffb732fd73fa030304e40881facbd6a4cec597ccdd37d95bd5b3824880fdcd884d89014d65db675b149aeb92ad073891cf082d493823ae5ebedd4bb3e213e983e7ff95b7a79618469216601d6796f49d5fe8741ed5f41653870691d5dce172c77ba4fb9cb1f973873353a68a573531ec433bd7939104183b3c184f56747d2a1d81a6de46406fed503fdf60233d0f3f835e7f982f23e660b119b9fa9b2cf98d2942c1b7fd9c3891d93df18299f2e35db18b30f597dc0b3ebf72c40316c40587af567c7a1a728649e089efaa2549c902cd971f88594b5f0baf44dc67821ca40d35e8d03edcc2fcc1e20b47c2b4b4dd699ada71590e147faca5548f8690c1f21ba69c21b9ae2977e0381ff1f06257cccd010948b14b30a5ce7ae251ad9134e4215a53b05ca3bcdc78dcab34b9c61ad4d0925cc37fb6c711874d6ed3c954f6f4a15db20910666b288c1ebacc1c31dc405bb95b84f888c067f1c657bf78122806984ddeeb166e778702ae90199dcfe5eb11b68118741d6a2e2adf67aca987eeab432b33b2c83ab7c8c9ec09f058d5fb5b59a3c8a34b0945a9ca43724afb769ba4deeab06b734049e799d524fb73c2ee54613233126c4f472654a7570873b9cf761f883d65b1585a0d55f9672fb4be2f8e3ecf008095dbadde3cee72c488810e6804f58f74812872ae9a5cb1d1c6cc93769f54429d56aa7444572660506ede7776c682fb0ef0012e619ac9cf6f683f48a7fa015be710b3f6a3887b4a75e966f641d2a17beef90dc92b4b2cd049e53b24cbb7915c1d02c5a94ca95fdb7bd0f525daca7965bc4a79ad1b1a378fd15d6e16994a35b260344ede0554db47b3a28c3468645b609e826c72d36af6ba504172de0ebb670366a7f3a640d2e85212621ebdb3735f3f8265e9f8c1893f6a534f568f274d1223510bf06e662778b955a43ae9e4ef41936e5af29f6de06c59d268530d80323ec3348a4934504b20dbc6d150b4612bece73ebf1e38caad97fafd92caff016262b40509425c72488211b676392b599bb065ded6e64b9b2e7cbdd2f7b5804dfb63652793a51ed36fb406ac7ce3b620afd215fa8af2e3162d8517e2fa51c1c52841c3f0a6dc0c5d210d8dd2863c34d047507dd601834a3084026ae49b333ff91f69c0f438446cd4ca8ff937cc01ef21f190719ae9c5b27b2ea4a7ae3085d28f75a4faceca5ee959c06eb706622f60223fe6576c1e6dc6be3d74cd3825fa5901796da421e9c302414e5d5857f18656ff690f17601a54d01f1d8e2d0be87cf39e45c012bf492d0b700ef81323a8464b30850f2b43b76728ea84d244d597808b45ae4ad68be72b5a9124482bd1e4805995de1119e992f1c046fedb4a6986c74bd627acf56b4c194c639a0544a4758176422c96258c3fb10b265e42826a8c719484fd6463b0e82c8005de90b7a949836a5f28bbcee867dd9cb8a884bf7a7f6b481762d2e47249d21947bd749d9bacb9c7e14d55a77548f0d96256983d4280b5ba73af57d113a1af51872f06d6e365a99b34feaede422cbae2f7217c61cff46f787e76343dd8456e1a19918f05167ca7fc991260a3facff8c074138fde2f35bac75a339bcd782015014f3977eaa6af1c4c3bb2e54c9d3fb2ee4d6e1e974d9316421e90b51c1a25c391797ef90a0df10e57be07bb8c6d28e64815b79ed96091ceef8576377f6f92857c8dc5cc95f761dbf8efa10ed958e859fec597de986d44c29f14fcd187c1ed4932a32f50fdac78447abf25673f6b4534dac5a3046893fb04a8c3545fe7217c9e2722af17a836a5666673c690c2bea3778a70723863100c57139c9dfbe04921ac3dd7e9845b80db33cc73f45a01a39082acc6efb87220569bcb2a44016ab0c7a56311e4784ea37bbc1f56241536a7f9fd3a8ff3dce9cea8f5e7969853c671f74b9e42bb3828dea3aa9018409c3ec8db2874379eb971ff684e7d24dad6514ad6cc55f1819162545b7a8b1eaab171cf0b7a459541946c75e9ef055ba583e984e19c87b8dd6756634f823843af024005efe83ec02e26974a93d39dcd53027a46cc023008747e954b9ff1f11f6bdda39dcd5943a9f28304bbe1badd725d4530c32bfaab4d12f03689e3abc1f8141441a216bd6850315c5cd6297bd2c07f4816788850b4e9bdb63810ea46452dc28f939e88a588ac04e3ed3fc720bc04be9d1cb9ea0e18aeb89e0a57a065fce1bda7e5833af1e33ca323edd2581709f410f9b54dccdce636dc345ce7a1dcddf7b0698daa61d2cbc16476d2cb2510311cba87c61ed48a031920bb86235203451042674c3e4f83f446d76ab2a839fbc1f2fb350e789ae47021bc2c451eb9302fca8a825b9a4ba02ebc89bed3e31a15ee3a768bd5137e6cf1649c1887d22f8523f3fa83c6064fc493b9353f375ac2c7f0be77ecea8563f9f1d05f233d13f2906cb02e070d3a4f8c865398429ddaf6674c34bb3955c3a2de987d21dd39a3d83df69057a9e270761a38195bba3dd9a035ba52ad302e6765b836d7493b5a5de47129ea7c0bb53f6ec0666c788726c9dfc9dbcb6531ef262405234e789adb4f0bb0105d1397f5f503e8c3b08d40fb5f1a4f7ae9c34569c2cc7da5128d90d06626d2c62f5b50550a82a792994b34c857fc4a903247a78b0a3899056ad90cad88319b9407ad8d4679965efa754193cb827a75afd30c32a06dda8d5bddcb32fb8ddc066fc64cfce8aefb37bb5fda2e5cabba746a63cbe533134fbec21324c8625faf296c124fad33cf10a8ece54175e720c8171bbc57c0f5cd51de175ee16e0deb0552e0414aa6a5b5bdd8319099c12295526fb547867f41d406958e07e4faa6f9458185f6e62d08513de863ea018e531382ed899c14413ec41d0dd30580b22d8d6bd8795954fd460e5fa47854fde075ee21824e8cfce6427141aec8eadb1dc2b6bbc0e9479908cfac8f67af25d17d56cd09e9226d92545b21efbf25e6a0c3daeefadc378f0e04e7807034cdd66eda7709d1f993457771d8ed5b3781504f7345a2ae417852c1eb3613afc1350a5eb63c64b8ed9042a4ba373077befda3034bfb7be867575d8af1b5eb5fbdba0f01b9054394d60a80c0024aa57be17e87843715fe88886c2add498fa4f60b70369a0793977fe04626aa05cc084913b20d90c7a939341d276e2393ff45414614feb9940647d6c755db86592f309a3e09edcceeefebd5722a3fc9d2198d74354207c6c8edc10f33bbfc72bb4076be2f5cfff299607298a6d1841fea577e98a0c70834b80ce0555c86f1463f82aa085184c7882af4787e8e326c83fa10920dc7f2613d68e8c92e07f59470eecc727b17d4d0f30b113efaf0798a0784c4c14c27c881a0ee9d7b24a53ee4cf2c7c4d38b70c1711c9385b8b0be40f512cb147adc19409e7764d256c7a0cdd94a1115a18d30fada52a054824c94ab3eaaabf4b194b6f8af40e9b05bb53512a92f4b4826904d037afd22f3c166b0565e1250ccd4d0e7ab9cc5c9f124918cab3c26843c83dfb664933378fc52303e7e3b3e07f5257438903a16c5a23aed3f03390d401c9c2ad23e021a511d25e369da2d86ef82a78559de41c199a9a504fd5e6250cf5593c465876c029288cfa7b55fba9b68a511f9b149e75e9ba2889b463394515a7a95cb00fa8764293024335adc197ebf5408239e22e98bac046d833c5b8ebd5ce27378bdfe75bd4623e4aa40eebc1793ffa5aeef1e66f562ea41c848c9ddb3658d1df1f3d4933ce6bf9539e0e93e2053adbf1b11c09f797b759ddc998d0f5a3adf2e676ac6f17ba2d08f655c195d6645d90b1c7f8e11b0bf70f215736ed0835dcaefa4f32004edefd95e1f2e26f2f8a7534b736db4f1216dc0125b9b08cd7ba026804de6eca3d020f4d53b17b8caf087bf3997305b50f7fac48b2c3569cadeb20f70154e69c4f9cd8329b06317b2556bf61878cbc259936f8b6b858c76da52314640be6dd222b22181322cc7ab33fb4a1eb54ac7ce27e63c0986d30a1f00165bed374d1a8b5662f12ee45b11286dd346ae8ff71aeb94c7c9a69d9a911341ac72c8f7e9c17bf0d7896a5b902739f9af553425c799396a04995716206a071a711effe29b7eef47fcfd8b75afe08ac7822b4e182962761f140aeb155ea8f44c364bf332d7688a434ec0035e800261ccb1635abcad8d7d9d7f0735b00fbea328492e6d8b89698fbec3c3ae20faad14e61dd0718d6b2c0d2eeec5a123b10d7b18babd7bdebc34ded084a72570d09b901a998f1b02998e846307a376bb7508f103db05294d6a920baef04b7c111fd7731376d364a4260dfda9aeaa29395fc20d47fd9e9286667b45c07b8631f11cdcea882b1f0617286a0997eba34512bfd804d1b838cefe6caf5b02a0e28e3ac552455e080c816170dd55a11b042c1c235e4b36aef0e3d961351d06e6e4ee8a0774bf9a312e194e50c7033c89812f6e59ee8989c804e9f88a4f063cfd8c69ffcc8024a3831630f994e4654de29f8526bbe374dc21fcc01a1824e9db48442f1f703ac2720b8a5316d1f95115f0522d869bdc901e2893d6", 0x1000}], 0x8, &(0x7f0000001c80)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x893}}, @ip_ttl={{0x14, 0x0, 0x2, 0x800}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @multicast1, @remote}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @local, @local}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x6}}], 0x88}}, {{&(0x7f0000001d40)={0x2, 0x4e22, @multicast2}, 0x10, &(0x7f0000001e00)=[{&(0x7f0000001d80)="be836d607fff06d732db178f665848b51146ccf8a3bb6d613d91858da8f77041c308974712eb998808486885b505ee50ea05f41a6d672e3b998c8d24aa6629519f53fd150edab7e078812a77a2f4597771652fc8ff52fc646eba6f2e1c2411187c96b0d9a24e6f9f2edd7f3a11a1a2a4095ba4248fb0757250", 0x79}], 0x1, &(0x7f0000002a40)=ANY=[@ANYBLOB="140000000000000000000000020000000500000000000000140000000000000000000000020000000000000000000000110000000000000000000000010000009100000000000000180000000000000000000000070000000194040100000000110000000000000000000000010000000500000000000000eeb2453eca024b59f03f8d371ff22097fda37d9aa312626034f5524fa5e837873c35785764ace8591cabc9853af5e4d8750c3a9e1b36d08f"], 0x78}}, {{&(0x7f0000001ec0)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000002480)=[{&(0x7f0000001f00)="504822d08bb73504b9b0a4efe2cab1837c6fe4d4823cd84cea299e5aaebdadd4d540745cb89e6cb31707d53bb90d4af817ecdabb2c6e996aeecc81ac23b457f48a0df39ac217c5f75fd45401c4b883f7e782e65f9954ff79c022174f58c6046b295c4daf356c11ebfeff073b88419abbb8af86b5409ab05cb7677f1c82373f9974c5c8e2ce2f35a47600b03aabba56e39e6fc26a2fa73ad2ebf10e53ac69281d3e43f5445439e28178167e2e9bee891b7a7dfa83c4dbf73a77f09d79768d92e34193f875bca3a4ae8351f899d88d9f8c810e3f342b6fd7eae40b37a7646c5001067b31d1", 0xe4}, {&(0x7f0000002000)="c5bad559a31e73343ad6dabda2e627e31b5a16ce0741d88e4f4a88477fd2be5b69c155cc6c2da63f831bff3805a9eded520a9f959379e93e711dad9dfd23d204db88", 0x42}, {&(0x7f0000002080)="c907ac375e9e445d5442ed72ef14943e3a858d6e9b9a030bb5c053ffb8d06b07d3df97ccd0ab09b4b5db3cafd3a819832134f3466af30d3a766a4e518fb17545d5f3a2948a51ef2483af181426e2a2f31b793f167774f95ad0ba4180e0d8158493ebfaca61c06fb6454f6ff5ed8cae0a15ae55a17f0ad63e011f240e2a37eb5455b6c7d30893bcb4c7c19a61817feeb00ab37df074c2320cc991d49bf5e452da0bfb1b3adab2d4bb7d54ebb6991cd901e141135591705f293a1f8944511247d033f190fb672fcdd1258bad50a071", 0xce}, {&(0x7f0000002180)="48ead62f2f522f0815f0e36d577b3cc1b106ab735ba0c4168297feb730f4fa49ade15124", 0x24}, {&(0x7f00000021c0)="604e117c038011e50890678e83e9250dd5def5ed91e67f5e29ff0ccfbc3286ff91159b635e681ba87b44710daa9a0b5189c9df8ec6f8e2efe80bc4e814f27c956b", 0x41}, {&(0x7f0000002240)="607797fb4dd2b870b54ec88f774fb6387a2e0b230283c878d4ffaea8c2ef622f1cfc1d5c0065725602523025c96925304c62853938ebdf85d7555a32ce0b46ceca418e72c399a63d24666a70930099e5314286431a5922f12f5543f220d9ac986188ba76f2a56f369ffa7873a779ed8b037501d4124b948fffa394a3eab2f961b6495684bc3725b1c554da8fd074f174356066f33a5b0fcf3e5d74210b070d26661ea051c0ae64655429b2170a004f67d30bd0f2ca5494483e6cd05d68ba301b4fb0cacd88e939635f64f1ceb03738f6883b27765159926d09b5bbb3a518a4afc3ea8a9ed25e3ae2a979d56c277430f67a2d6f5d80", 0xf5}], 0x6, &(0x7f0000002b80)=ANY=[@ANYBLOB="110000000000000000000000010000000c000000000000001100000000000000000000000100000020000000000000001c000000000000000000000008000000", @ANYRES32=r4, @ANYBLOB="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"], 0x148}}, {{0x0, 0x0, &(0x7f00000027c0)=[{&(0x7f0000002340)}, {&(0x7f0000002680)="30911acc56a2ca8adffe35c2acf1c73cb604680acf9760", 0x17}, {&(0x7f00000026c0)="88bd38dbbf1db252194731e85232809e92ed4caaa227e63a2872287cd81705d94efd0b260c26dc47dab45e3263ce15cdf25e6da6ed3115903dcb165fcbc15074743ed3a0fadcf6966a9fba4dfaf82682758e1290b71100aab527138ead6ee3344c041f", 0x63}, {&(0x7f0000002740)="a0dfaeb1ea70c345b676b1925712f892e84d79cf63c2c97c5d4a228992c413b3dfd17e2ba91ee83485a2d0f373e9941fea91c3329b9ca61698f6dad9198e593f8fad8a5e7c911d2d6d35ba247d7af7063b6f072ba7b0cb56840f1a28f02f0a", 0x5f}], 0x4, &(0x7f0000002800)=[@ip_ttl={{0x14, 0x0, 0x2, 0xfffffffa}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xe}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @multicast2, @multicast1}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3}}, @ip_retopts={{0x30, 0x0, 0x7, {[@end, @ssrr={0x89, 0x13, 0x94, [@initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @local, @broadcast]}, @timestamp_addr={0x44, 0xc, 0x48, 0x1, 0x6, [{@private=0xa010101, 0x3}]}]}}}], 0x98}}], 0x6, 0x40000c0)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2})
ioctl$TUNSETLINK(r7, 0x400454cd, 0x207)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast})

1.678608377s ago: executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
select(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x2})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
socket$inet_udp(0x2, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000000040)={0x1})
syz_mount_image$erofs(&(0x7f0000000340), &(0x7f0000000580)='./file2\x00', 0x2000000, &(0x7f0000000080)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16], 0x1, 0x220, &(0x7f00000005c0)="$eJzsmL9rFEEUx78zt7e5FRFtUtgoGDCi2cvuoaQ5NIJgJULir0oPs4Z4m5xcVjAHgsHGRjsLwcbCf8AiRSoLO/8BQQsVBAuvsLCxGZmd2b25TM4N63W+TzF8Z9978+a9233FgSCI/5avX359fnp+bvEUgP2YwoR+/r0CMKY0N/w/vbh/8nnzwss3H1+/WzvwcHvneTJEiOEHtb/kdwC8na8gyTPl0b+lmNKbRfBcXwHHCa2vgcHX+hY4rmodgeGG1ncN3ZH+vn9nJY782514SYpZuQRyCeXS2Hm//ibDkt4LIQQz7OsbvXYrjqOuIRxt28VUSuTJ2pNW/6pw0Z/naBr3k128/uTxptxnvZk1+heAI9BFNMCwoJ/PYSLrjWqJUf9hZ3B+xap/12qlqzQUFVlTovlzLM0yxaGZcuHTspxztukgylwDw1FVDEyyk8POR8fbBCAVTvG7eFb/oCVyXbKqGCGeeQDG/ivbolQVmZjsb7+3Td+KwgUrTsH2/v7U9nrn7EMs3zEPvTb/l46NutiHLTU/xCuG48Z8coz5UU9W79XXN3ozK6ut5Wg5WgvDxhkGPDod1tNBpFZr7g3ms5fOp33G+dURvi538aCVJN1ArS5z4SFJumG6D43PZmGr8+OmDktwEcAxtZFj081PrFg5mKt8eOor1bTtRBAEQRAEQRAEQRAEQRAEUYojYOm/oAWEl1PvPwEAAP//p1NjTA==")
listxattr(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)

1.500532704s ago: executing program 4:
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b70300007c4043ab850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='signal_generate\x00', r0}, 0x10)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0xfffffded}, 0x3b)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='ext4_remove_blocks\x00', r1}, 0x10)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600)
openat$cgroup_ro(r2, &(0x7f0000000300)='blkio.bfq.avg_queue_size\x00', 0x7a05, 0x1700)

1.319747771s ago: executing program 2:
sendmsg$NFT_MSG_GETSET(0xffffffffffffffff, 0x0, 0x4000)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x400, 0x0)
sendmsg$OSF_MSG_REMOVE(r1, &(0x7f0000000300)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000001140)={0x710, 0x1, 0x5, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2}, [{{0x254, 0x1, {{0x0, 0x400}, 0x4e, 0x40, 0x5, 0x1e57, 0x1a, 'syz0\x00', "6ec7d4647e7767e8ef1ac421312d74e0777c97fe4cd0e5ff80127af622610309", "42828fa6be40f30d29a69410e4105577a1542a41df6f3cccd663a1d825bb058a", [{0x7f, 0x8dc5, {0x2, 0x7}}, {0xfc01, 0x8, {0x2, 0xffffffff}}, {0x6c50, 0xa2a5, {0x3, 0x400000}}, {0x2, 0xff, {0x1, 0x20}}, {0x80, 0x3, {0x1, 0x7fffffff}}, {0x3, 0x400, {0x1, 0x4}}, {0xb98, 0x5, {0x3, 0x5bd4}}, {0x9, 0xff, {0x0, 0x100}}, {0x8cd3, 0x6, {0x2, 0xb2f}}, {0x52ca, 0x6, {0x3, 0x8000}}, {0x7fff, 0x1, {0x0, 0x3ff}}, {0x4, 0x3ff, {0x1}}, {0x7, 0x0, {0x1, 0x9}}, {0x8, 0x5, {0x1, 0x6}}, {0x0, 0x78, {0x3, 0xfffffff8}}, {0x6, 0x6, {0x0, 0x3f}}, {0x6, 0x8001, {0x1, 0xfffffffb}}, {0x3, 0x800, {0x2, 0x20}}, {0x2, 0x2, {0x0, 0x1}}, {0x8001, 0x100, {0x3, 0x8000}}, {0x3c5f, 0x6}, {0xdca, 0x6, {0x0, 0xfb6}}, {0x80, 0x7ff, {0x1, 0x7fffffff}}, {0xfffe, 0x100, {0x1, 0xffffff80}}, {0xffc1, 0x0, {0x0, 0x6}}, {0x20, 0x9, {0x0, 0x9}}, {0x8001, 0x7ff, {0x3, 0x1}}, {0x3, 0x7, {0x2, 0x3}}, {0xf001, 0x1, {0x3, 0x614}}, {0x7, 0xffff, {0x3, 0x7}}, {0x0, 0x20, {0x2, 0x2}}, {0x2, 0x9, {0x0, 0x5}}, {0xa7d, 0x401, {0x0, 0x101}}, {0x7, 0xff80, {0x2, 0xfff}}, {0x9, 0xfeff, {0x2, 0x5}}, {0x100, 0x2, {0x3, 0x1}}, {0xffff, 0x3, {0x3, 0x5}}, {0xff, 0x800, {0x3, 0xaf}}, {0x4e3, 0xb4, {0x3, 0xfff}}, {0x4, 0x7, {0x3, 0x401}}]}}}, {{0x254, 0x1, {{0x3, 0x1}, 0x0, 0x2, 0x3f, 0x9, 0x7, 'syz1\x00', "e8c8dc93b49af0fe69fc3198e319487f8b0bea42f5da43661c4f89a9b4bcec51", "902dec787660e16406f893e50cc3ed68088560f8026495da136c863c5306e160", [{0x6, 0x40, {0x1, 0x41}}, {0xe83, 0x5, {0x3, 0x3ff}}, {0x20, 0x0, {0x3, 0x401}}, {0x8, 0xfff9, {0x3, 0x1}}, {0x9, 0x8, {0x3, 0x9}}, {0x80, 0x8, {0x3, 0x7fff800}}, {0x101, 0x1c, {0x3, 0xffffffff}}, {0x5, 0x1, {0x3, 0x10}}, {0x2, 0xf30, {0x1, 0xffff}}, {0x3, 0x7fff, {0x3, 0x7fff}}, {0x8000, 0x3, {0x3, 0x8}}, {0x2, 0x0, {0x2, 0x7}}, {0xfff, 0x101, {0x0, 0x28}}, {0x80, 0x1, {0x0, 0x8001}}, {0x8, 0xcf, {0x3, 0x9}}, {0xc000, 0x3, {0x0, 0x7}}, {0x800, 0x1, {0x3, 0x401}}, {0x1d, 0x4, {0x2, 0xa}}, {0x40, 0x1ff, {0x2, 0x101}}, {0x7ff, 0x8, {0x2, 0x1ff00000}}, {0x8000, 0x0, {0x1, 0x3}}, {0x6, 0xb59b, {0x1, 0x7fff}}, {0x1, 0x231, {0x1, 0x2}}, {0x20, 0x1, {0x3, 0x438}}, {0x9, 0xf0, {0x0, 0x1}}, {0x8, 0x0, {0x2, 0x8}}, {0x8cd, 0x874, {0x2, 0x1f}}, {0x1, 0xff00, {0x3, 0x49}}, {0x7f8f, 0x7ff, {0x0, 0x4}}, {0x4, 0x1, {0x2, 0x6}}, {0x7, 0x6, {0x1, 0x9}}, {0x6, 0x6, {0x3}}, {0x23, 0x0, {0x2, 0x9}}, {0x1f, 0x7f, {0x3, 0xff}}, {0xa3ca, 0x9, {0x3, 0x3}}, {0x6, 0x9, {0x1, 0xfffffffa}}, {0x0, 0x81, {0x2, 0x2}}, {0x6, 0x8001, {0x0, 0xffffff81}}, {0x9, 0x2, {0x1, 0x2}}, {0x9, 0x84fb, {0x2}}]}}}, {{0x254, 0x1, {{0x2, 0xffff}, 0x4, 0x7a, 0x7, 0x6, 0x25, 'syz0\x00', "fbfd68bf04c1b90bda42549a6c8c3a2cf6864e47e60a68397bd5b5632784d095", "658c735fbd19b46a34f1b66a30ff2783ad2e6ac78b2889f20c895b9bae6c0d10", [{0x6, 0x800, {0x3, 0x5}}, {0xffff, 0x8, {0x3, 0x97df}}, {0x2, 0x800, {0x0, 0xff}}, {0x1, 0x7, {0x2, 0x200}}, {0x7, 0x0, {0x2, 0x1}}, {0x71f6, 0x8000, {0x0, 0x5}}, {0xfffc, 0x1}, {0x85ce, 0xaedd, {0x0, 0x101}}, {0xdf8}, {0x3, 0x3, {0x3, 0x2}}, {0x8001, 0x3, {0x2, 0x8}}, {0x7, 0x7}, {0x200, 0x0, {0x2, 0x6}}, {0x5, 0x1, {0x1}}, {0x20, 0x3ff, {0x2, 0x40}}, {0x8, 0x81, {0x2, 0x1}}, {0x48da, 0x5, {0x0, 0x6}}, {0x0, 0x2, {0x3, 0x1ff}}, {0x3800, 0x437b, {0x0, 0x1}}, {0x7f, 0x0, {0x2, 0x5}}, {0x8, 0x1, {0x1, 0x100}}, {0xf0, 0x4, {0x0, 0xffffffff}}, {0x1, 0x3, {0x3, 0x81}}, {0x1f, 0x50, {0x1, 0x8}}, {0x0, 0x2, {0x3, 0x800}}, {0x4, 0x9, {0x0, 0x4}}, {0x0, 0x8, {0x0, 0x9}}, {0x7, 0x8001, {0x1, 0x20}}, {0x9, 0x6, {0x0, 0xdb70}}, {0x8000, 0x3, {0x3, 0x9}}, {0xfff7, 0xffff, {0x2, 0x2}}, {0x1, 0x9, {0x0, 0x4e5}}, {0x4, 0x7ff, {0x0, 0x6}}, {0x7fff, 0x3, {0x3, 0x1ff}}, {0x8, 0x101, {0x1, 0x7}}, {0x6, 0x6, {0x2, 0x3ff}}, {0x7, 0x6091, {0x2, 0x7}}, {0x9, 0xfffd, {0x3, 0xcc4}}, {0x9, 0x6, {0x1, 0x31}}, {0xc7, 0x401, {0x1, 0x20004000}}]}}}]}, 0x710}, 0x1, 0x0, 0x0, 0x8811}, 0x4004001)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000240)='qrtr_ns_message\x00', r0}, 0x10)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000001100)='./file0\x00', 0x3014490, &(0x7f0000000100)={[{@nombcache}, {@usrjquota}, {@errors_remount}, {@norecovery}, {@max_batch_time={'max_batch_time', 0x3d, 0x5}}, {@mblk_io_submit}, {@minixdf}, {@barrier_val}, {@grpjquota}, {}]}, 0x45, 0x7b1, &(0x7f00000004c0)="$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")
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b)
ioctl$FIBMAP(r2, 0x660c, 0x0)

1.296633095s ago: executing program 4:
write$cgroup_int(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', <r1=>0x0})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=@ipv6_newroute={0x2c, 0x18, 0x1, 0x0, 0x0, {0xa, 0x10}, [@RTA_OIF={0x8, 0x4, r1}, @RTA_EXPIRES={0x8, 0x17, 0x8001}]}, 0x2c}}, 0x0)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x2, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x37}, {0x4, 0x1, 0xb, 0x9, 0x8}}, {{0x5, 0x0, 0x3}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}}}, &(0x7f0000000bc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

1.26093401s ago: executing program 1:
sendmsg$NFT_MSG_GETSET(0xffffffffffffffff, 0x0, 0x4000)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x3, &(0x7f00000000c0)=[{}, {0x2c}, {0x6}]})
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0)
sendmsg$OSF_MSG_REMOVE(r0, &(0x7f0000000300)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000001140)={0x710, 0x1, 0x5, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2}, [{{0x254, 0x1, {{0x0, 0x400}, 0x4e, 0x40, 0x5, 0x1e57, 0x1a, 'syz0\x00', "6ec7d4647e7767e8ef1ac421312d74e0777c97fe4cd0e5ff80127af622610309", "42828fa6be40f30d29a69410e4105577a1542a41df6f3cccd663a1d825bb058a", [{0x7f, 0x8dc5, {0x2, 0x7}}, {0xfc01, 0x8, {0x2, 0xffffffff}}, {0x6c50, 0xa2a5, {0x3, 0x400000}}, {0x2, 0xff, {0x1, 0x20}}, {0x80, 0x3, {0x1, 0x7fffffff}}, {0x3, 0x400, {0x1, 0x4}}, {0xb98, 0x5, {0x3, 0x5bd4}}, {0x9, 0xff, {0x0, 0x100}}, {0x8cd3, 0x6, {0x2, 0xb2f}}, {0x52ca, 0x6, {0x3, 0x8000}}, {0x7fff, 0x1, {0x0, 0x3ff}}, {0x4, 0x3ff, {0x1}}, {0x7, 0x0, {0x1, 0x9}}, {0x8, 0x5, {0x1, 0x6}}, {0x0, 0x78, {0x3, 0xfffffff8}}, {0x6, 0x6, {0x0, 0x3f}}, {0x6, 0x8001, {0x1, 0xfffffffb}}, {0x3, 0x800, {0x2, 0x20}}, {0x2, 0x2, {0x0, 0x1}}, {0x8001, 0x100, {0x3, 0x8000}}, {0x3c5f, 0x6}, {0xdca, 0x6, {0x0, 0xfb6}}, {0x80, 0x7ff, {0x1, 0x7fffffff}}, {0xfffe, 0x100, {0x1, 0xffffff80}}, {0xffc1, 0x0, {0x0, 0x6}}, {0x20, 0x9, {0x0, 0x9}}, {0x8001, 0x7ff, {0x3, 0x1}}, {0x3, 0x7, {0x2, 0x3}}, {0xf001, 0x1, {0x3, 0x614}}, {0x7, 0xffff, {0x3, 0x7}}, {0x0, 0x20, {0x2, 0x2}}, {0x2, 0x9, {0x0, 0x5}}, {0xa7d, 0x401, {0x0, 0x101}}, {0x7, 0xff80, {0x2, 0xfff}}, {0x9, 0xfeff, {0x2, 0x5}}, {0x100, 0x2, {0x3, 0x1}}, {0xffff, 0x3, {0x3, 0x5}}, {0xff, 0x800, {0x3, 0xaf}}, {0x4e3, 0xb4, {0x3, 0xfff}}, {0x4, 0x7, {0x3, 0x401}}]}}}, {{0x254, 0x1, {{0x3, 0x1}, 0x0, 0x2, 0x3f, 0x9, 0x7, 'syz1\x00', "e8c8dc93b49af0fe69fc3198e319487f8b0bea42f5da43661c4f89a9b4bcec51", "902dec787660e16406f893e50cc3ed68088560f8026495da136c863c5306e160", [{0x6, 0x40, {0x1, 0x41}}, {0xe83, 0x5, {0x3, 0x3ff}}, {0x20, 0x0, {0x3, 0x401}}, {0x8, 0xfff9, {0x3, 0x1}}, {0x9, 0x8, {0x3, 0x9}}, {0x80, 0x8, {0x3, 0x7fff800}}, {0x101, 0x1c, {0x3, 0xffffffff}}, {0x5, 0x1, {0x3, 0x10}}, {0x2, 0xf30, {0x1, 0xffff}}, {0x3, 0x7fff, {0x3, 0x7fff}}, {0x8000, 0x3, {0x3, 0x8}}, {0x2, 0x0, {0x2, 0x7}}, {0xfff, 0x101, {0x0, 0x28}}, {0x80, 0x1, {0x0, 0x8001}}, {0x8, 0xcf, {0x3, 0x9}}, {0xc000, 0x3, {0x0, 0x7}}, {0x800, 0x1, {0x3, 0x401}}, {0x1d, 0x4, {0x2, 0xa}}, {0x40, 0x1ff, {0x2, 0x101}}, {0x7ff, 0x8, {0x2, 0x1ff00000}}, {0x8000, 0x0, {0x1, 0x3}}, {0x6, 0xb59b, {0x1, 0x7fff}}, {0x1, 0x231, {0x1, 0x2}}, {0x20, 0x1, {0x3, 0x438}}, {0x9, 0xf0, {0x0, 0x1}}, {0x8, 0x0, {0x2, 0x8}}, {0x8cd, 0x874, {0x2, 0x1f}}, {0x1, 0xff00, {0x3, 0x49}}, {0x7f8f, 0x7ff, {0x0, 0x4}}, {0x4, 0x1, {0x2, 0x6}}, {0x7, 0x6, {0x1, 0x9}}, {0x6, 0x6, {0x3}}, {0x23, 0x0, {0x2, 0x9}}, {0x1f, 0x7f, {0x3, 0xff}}, {0xa3ca, 0x9, {0x3, 0x3}}, {0x6, 0x9, {0x1, 0xfffffffa}}, {0x0, 0x81, {0x2, 0x2}}, {0x6, 0x8001, {0x0, 0xffffff81}}, {0x9, 0x2, {0x1, 0x2}}, {0x9, 0x84fb, {0x2}}]}}}, {{0x254, 0x1, {{0x2, 0xffff}, 0x4, 0x7a, 0x7, 0x6, 0x25, 'syz0\x00', "fbfd68bf04c1b90bda42549a6c8c3a2cf6864e47e60a68397bd5b5632784d095", "658c735fbd19b46a34f1b66a30ff2783ad2e6ac78b2889f20c895b9bae6c0d10", [{0x6, 0x800, {0x3, 0x5}}, {0xffff, 0x8, {0x3, 0x97df}}, {0x2, 0x800, {0x0, 0xff}}, {0x1, 0x7, {0x2, 0x200}}, {0x7, 0x0, {0x2, 0x1}}, {0x71f6, 0x8000, {0x0, 0x5}}, {0xfffc, 0x1}, {0x85ce, 0xaedd, {0x0, 0x101}}, {0xdf8}, {0x3, 0x3, {0x3, 0x2}}, {0x8001, 0x3, {0x2, 0x8}}, {0x7, 0x7}, {0x200, 0x0, {0x2, 0x6}}, {0x5, 0x1, {0x1}}, {0x20, 0x3ff, {0x2, 0x40}}, {0x8, 0x81, {0x2, 0x1}}, {0x48da, 0x5, {0x0, 0x6}}, {0x0, 0x2, {0x3, 0x1ff}}, {0x3800, 0x437b, {0x0, 0x1}}, {0x7f, 0x0, {0x2, 0x5}}, {0x8, 0x1, {0x1, 0x100}}, {0xf0, 0x4, {0x0, 0xffffffff}}, {0x1, 0x3, {0x3, 0x81}}, {0x1f, 0x50, {0x1, 0x8}}, {0x0, 0x2, {0x3, 0x800}}, {0x4, 0x9, {0x0, 0x4}}, {0x0, 0x8, {0x0, 0x9}}, {0x7, 0x8001, {0x1, 0x20}}, {0x9, 0x6, {0x0, 0xdb70}}, {0x8000, 0x3, {0x3, 0x9}}, {0xfff7, 0xffff, {0x2, 0x2}}, {0x1, 0x9, {0x0, 0x4e5}}, {0x4, 0x7ff, {0x0, 0x6}}, {0x7fff, 0x3, {0x3, 0x1ff}}, {0x8, 0x101, {0x1, 0x7}}, {0x6, 0x6, {0x2, 0x3ff}}, {0x7, 0x6091, {0x2, 0x7}}, {0x9, 0xfffd, {0x3, 0xcc4}}, {0x9, 0x6, {0x1, 0x31}}, {0xc7, 0x401, {0x1, 0x20004000}}]}}}]}, 0x710}, 0x1, 0x0, 0x0, 0x8811}, 0x4004001)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000240)='qrtr_ns_message\x00'}, 0x10)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000001100)='./file0\x00', 0x3014490, &(0x7f0000000100)={[{@nombcache}, {@usrjquota}, {@errors_remount}, {@norecovery}, {@max_batch_time={'max_batch_time', 0x3d, 0x5}}, {@mblk_io_submit}, {@minixdf}, {@barrier_val}, {@grpjquota}, {}]}, 0x45, 0x7b1, &(0x7f00000004c0)="$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")
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b)
ioctl$FIBMAP(r1, 0x660c, 0x0)

1.076409398s ago: executing program 4:
sendmsg$NFT_MSG_GETSET(0xffffffffffffffff, 0x0, 0x4000)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x3, &(0x7f00000000c0)=[{}, {0x2c}, {0x6}]})
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='xdp_exception\x00', r0}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da97e22f4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3ab60fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ad0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bff3b89c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c2ed01faa7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497dad64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6fba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd2310801570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88cf573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb414c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867857ed13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a000000000000000000000000000000000000000000000000000000a0cc2b89ce1525748ce167cbabb881f060599a6a59f645edca1d5c24b2f6b8c997a8f3e1b7679984a566d98d4d31198ee4c5ea7be0d99cf89bba4a6fd0bec12e7792bec3c5038e13b1982f80cdecd07f8908a983a7c9fb81c2ba7f7e87c991f30e50d1b3bbe4cf2a2f5d4571b6568ada51bc121c9139d2a8e0638c84066b1759081802"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x40}, 0x10}, 0x90)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0)
sendmsg$OSF_MSG_REMOVE(r1, &(0x7f0000000300)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000001140)={0x710, 0x1, 0x5, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2}, [{{0x254, 0x1, {{0x0, 0x400}, 0x4e, 0x40, 0x5, 0x1e57, 0x1a, 'syz0\x00', "6ec7d4647e7767e8ef1ac421312d74e0777c97fe4cd0e5ff80127af622610309", "42828fa6be40f30d29a69410e4105577a1542a41df6f3cccd663a1d825bb058a", [{0x7f, 0x8dc5, {0x2, 0x7}}, {0xfc01, 0x8, {0x2, 0xffffffff}}, {0x6c50, 0xa2a5, {0x3, 0x400000}}, {0x2, 0xff, {0x1, 0x20}}, {0x80, 0x3, {0x1, 0x7fffffff}}, {0x3, 0x400, {0x1, 0x4}}, {0xb98, 0x5, {0x3, 0x5bd4}}, {0x9, 0xff, {0x0, 0x100}}, {0x8cd3, 0x6, {0x2, 0xb2f}}, {0x52ca, 0x6, {0x3, 0x8000}}, {0x7fff, 0x1, {0x0, 0x3ff}}, {0x4, 0x3ff, {0x1}}, {0x7, 0x0, {0x1, 0x9}}, {0x8, 0x5, {0x1, 0x6}}, {0x0, 0x78, {0x3, 0xfffffff8}}, {0x6, 0x6, {0x0, 0x3f}}, {0x6, 0x8001, {0x1, 0xfffffffb}}, {0x3, 0x800, {0x2, 0x20}}, {0x2, 0x2, {0x0, 0x1}}, {0x8001, 0x100, {0x3, 0x8000}}, {0x3c5f, 0x6}, {0xdca, 0x6, {0x0, 0xfb6}}, {0x80, 0x7ff, {0x1, 0x7fffffff}}, {0xfffe, 0x100, {0x1, 0xffffff80}}, {0xffc1, 0x0, {0x0, 0x6}}, {0x20, 0x9, {0x0, 0x9}}, {0x8001, 0x7ff, {0x3, 0x1}}, {0x3, 0x7, {0x2, 0x3}}, {0xf001, 0x1, {0x3, 0x614}}, {0x7, 0xffff, {0x3, 0x7}}, {0x0, 0x20, {0x2, 0x2}}, {0x2, 0x9, {0x0, 0x5}}, {0xa7d, 0x401, {0x0, 0x101}}, {0x7, 0xff80, {0x2, 0xfff}}, {0x9, 0xfeff, {0x2, 0x5}}, {0x100, 0x2, {0x3, 0x1}}, {0xffff, 0x3, {0x3, 0x5}}, {0xff, 0x800, {0x3, 0xaf}}, {0x4e3, 0xb4, {0x3, 0xfff}}, {0x4, 0x7, {0x3, 0x401}}]}}}, {{0x254, 0x1, {{0x3, 0x1}, 0x0, 0x2, 0x3f, 0x9, 0x7, 'syz1\x00', "e8c8dc93b49af0fe69fc3198e319487f8b0bea42f5da43661c4f89a9b4bcec51", "902dec787660e16406f893e50cc3ed68088560f8026495da136c863c5306e160", [{0x6, 0x40, {0x1, 0x41}}, {0xe83, 0x5, {0x3, 0x3ff}}, {0x20, 0x0, {0x3, 0x401}}, {0x8, 0xfff9, {0x3, 0x1}}, {0x9, 0x8, {0x3, 0x9}}, {0x80, 0x8, {0x3, 0x7fff800}}, {0x101, 0x1c, {0x3, 0xffffffff}}, {0x5, 0x1, {0x3, 0x10}}, {0x2, 0xf30, {0x1, 0xffff}}, {0x3, 0x7fff, {0x3, 0x7fff}}, {0x8000, 0x3, {0x3, 0x8}}, {0x2, 0x0, {0x2, 0x7}}, {0xfff, 0x101, {0x0, 0x28}}, {0x80, 0x1, {0x0, 0x8001}}, {0x8, 0xcf, {0x3, 0x9}}, {0xc000, 0x3, {0x0, 0x7}}, {0x800, 0x1, {0x3, 0x401}}, {0x1d, 0x4, {0x2, 0xa}}, {0x40, 0x1ff, {0x2, 0x101}}, {0x7ff, 0x8, {0x2, 0x1ff00000}}, {0x8000, 0x0, {0x1, 0x3}}, {0x6, 0xb59b, {0x1, 0x7fff}}, {0x1, 0x231, {0x1, 0x2}}, {0x20, 0x1, {0x3, 0x438}}, {0x9, 0xf0, {0x0, 0x1}}, {0x8, 0x0, {0x2, 0x8}}, {0x8cd, 0x874, {0x2, 0x1f}}, {0x1, 0xff00, {0x3, 0x49}}, {0x7f8f, 0x7ff, {0x0, 0x4}}, {0x4, 0x1, {0x2, 0x6}}, {0x7, 0x6, {0x1, 0x9}}, {0x6, 0x6, {0x3}}, {0x23, 0x0, {0x2, 0x9}}, {0x1f, 0x7f, {0x3, 0xff}}, {0xa3ca, 0x9, {0x3, 0x3}}, {0x6, 0x9, {0x1, 0xfffffffa}}, {0x0, 0x81, {0x2, 0x2}}, {0x6, 0x8001, {0x0, 0xffffff81}}, {0x9, 0x2, {0x1, 0x2}}, {0x9, 0x84fb, {0x2}}]}}}, {{0x254, 0x1, {{0x2, 0xffff}, 0x4, 0x7a, 0x7, 0x6, 0x25, 'syz0\x00', "fbfd68bf04c1b90bda42549a6c8c3a2cf6864e47e60a68397bd5b5632784d095", "658c735fbd19b46a34f1b66a30ff2783ad2e6ac78b2889f20c895b9bae6c0d10", [{0x6, 0x800, {0x3, 0x5}}, {0xffff, 0x8, {0x3, 0x97df}}, {0x2, 0x800, {0x0, 0xff}}, {0x1, 0x7, {0x2, 0x200}}, {0x7, 0x0, {0x2, 0x1}}, {0x71f6, 0x8000, {0x0, 0x5}}, {0xfffc, 0x1}, {0x85ce, 0xaedd, {0x0, 0x101}}, {0xdf8}, {0x3, 0x3, {0x3, 0x2}}, {0x8001, 0x3, {0x2, 0x8}}, {0x7, 0x7}, {0x200, 0x0, {0x2, 0x6}}, {0x5, 0x1, {0x1}}, {0x20, 0x3ff, {0x2, 0x40}}, {0x8, 0x81, {0x2, 0x1}}, {0x48da, 0x5, {0x0, 0x6}}, {0x0, 0x2, {0x3, 0x1ff}}, {0x3800, 0x437b, {0x0, 0x1}}, {0x7f, 0x0, {0x2, 0x5}}, {0x8, 0x1, {0x1, 0x100}}, {0xf0, 0x4, {0x0, 0xffffffff}}, {0x1, 0x3, {0x3, 0x81}}, {0x1f, 0x50, {0x1, 0x8}}, {0x0, 0x2, {0x3, 0x800}}, {0x4, 0x9, {0x0, 0x4}}, {0x0, 0x8, {0x0, 0x9}}, {0x7, 0x8001, {0x1, 0x20}}, {0x9, 0x6, {0x0, 0xdb70}}, {0x8000, 0x3, {0x3, 0x9}}, {0xfff7, 0xffff, {0x2, 0x2}}, {0x1, 0x9, {0x0, 0x4e5}}, {0x4, 0x7ff, {0x0, 0x6}}, {0x7fff, 0x3, {0x3, 0x1ff}}, {0x8, 0x101, {0x1, 0x7}}, {0x6, 0x6, {0x2, 0x3ff}}, {0x7, 0x6091, {0x2, 0x7}}, {0x9, 0xfffd, {0x3, 0xcc4}}, {0x9, 0x6, {0x1, 0x31}}, {0xc7, 0x401, {0x1, 0x20004000}}]}}}]}, 0x710}, 0x1, 0x0, 0x0, 0x8811}, 0x4004001)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000240)='qrtr_ns_message\x00', r0}, 0x10)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000001100)='./file0\x00', 0x3014490, &(0x7f0000000100)={[{@nombcache}, {@usrjquota}, {@errors_remount}, {@norecovery}, {@max_batch_time={'max_batch_time', 0x3d, 0x5}}, {@mblk_io_submit}, {@minixdf}, {@barrier_val}, {@grpjquota}, {}]}, 0x45, 0x7b1, &(0x7f00000004c0)="$eJzs3c9rHNcdAPDvrFY/7VYqFFr3JCi0BuNV5ap2C4Wq9FAKNRjaUw+1xWotHK20RrsylhCJTQjkEkhCbsnF5/y8hFzz45BL8n8EGyeRTRxyCAqzP6SVtCvvOtKuHX8+MNZ7M2/2ve+82TfPmtFuAE+tyfSfTMSJiHg5iRivr08iYrCaykbM1so92NzIp0sSW1v/+Sqplrm/uZGPpn1Sx+qZX0fExy9EnMrsr7e8tr44VywWVur5qcrS1any2vrpK0tzC4WFwvLZ6ZmZM+f+dO7s4cX6zefrx++88s/fvzP73fO/evelT5KYjeP1bc1xHJbJmKwfk8H0EO7yj8OurG/ef7aDQk1nQPYoG0OX0o4ZqPfKiRiPgYP6Z7SXLQMAjspzEbHVzkDbLQDAEy2pXf//1u92AAC90vg9wP3NjXxj6e9vJHrr7t8jYqQWf+P+Zm1Ltn7PbqR6H3TsfrLrzkgSEROHUP9kRLzxwf/fSpc4ovuQAK3cuBkRlyYm94//yb5nFrr1h9arF5ozk3s2Gv+gdz5M5z9/bjX/y2zPf6LF/Ge4xXv3UTz8/Z+5fQjVtJXO//7a9Gzbg6b46yYG6rmfVed8g8nlK8VCOrb9PCJOxuBwmp8+oI6T976/125b8/zv61efeTOtP/25UyJzOzu8e5/5ucrcj4m52d2bEb/Jtoo/Hf+Hq/2ftJn/Xuiwjn/95cXX221L40/jbSz74z9aW7ciftey/5PtMsmBzydOVU+HqcZJ0cJ7szHWrv7J7E7/p0taf+P/Ar2Q9v/YwfFPJM3Pa5Y7funtp8U+uzX+UbtCzed/6/hbn/9DyX+r6aH6uutzlcrKdMRQ8u/968/s7NvIN8qn8Z/8bev3f2P8a3H+/y99/UsdHojsnS/ffvT4j1Ya/3xX/d91IkYeLA60q7+z/p/ZtU8n41+nDXzU4wYAAAAAAAAAAAAAAAAAAAAAAAAA3chExPFIMrntdCaTy9W+w/uXMZYplsqVU5dLq8vzUf2u7IkYzDQ+6nK86fNQp+ufh9/In9mT/2NE/CIiXhsereZz+VJxvt/BAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDdsTbf/5/6YnhP4YF+tBAAOBIjLuwA8LRJstl+NwEA6LWRrkqPHlk7AIDe6e76DwD8FLj+A8DT5yHX/71/BgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADdunD+fLpsfbu5kU/z89fWVhdL107PF8qLuaXVfC5fWrmaWyiVFoqFXL601PaFbtR+FEulqzOxvHp9qlIoV6bKa+sXl0qry5WLV5bmFgoXC4M9iwwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOldeW1+cKxYLKxJ9SSx+WuuHx6U9Et0l4kat/x6X9hxeIoZ2RonR/gxOAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAE+AHwIAAP//4VQjgA==")
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000), 0x208e24b)
ioctl$FIBMAP(0xffffffffffffffff, 0x660c, 0x0)

485.327227ms ago: executing program 0:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mounts\x00')
r1 = open(&(0x7f0000000080)='./file1\x00', 0x10bb42, 0x0)
unshare(0x20400)
r2 = syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000000)='./file2\x00', 0x4001, &(0x7f00000003c0)={[{@nouser_xattr}, {@jqfmt_vfsv0}, {@four_active_logs}, {@data_flush}, {@heap}, {@nouser_xattr}, {@quota}, {@resuid={'resuid', 0x3d, 0xee01}}, {@usrjquota={'usrjquota', 0x3d, 'noflush_merge'}}, {@noflush_merge}, {@noinline_data}, {@grpjquota={'grpjquota', 0x3d, '+~N~^\x05[\x1b=^\x00\x1e\xe1\x06\x86\xa2\xec\xc19lh\xa6\xb1\x84\xe2\x7f\xe0\x13\xa1HTx\x8ey\xd55:\x90\xe5 \x9b\xbc\xbe\x9d/\xacPN\xbed\xb0\x84\xd7\xfd\xff\x92*Q\xe8&\xd8\x1d\x8c5\r\x96I\xc9\x0eq\x01\xd1;t$\xe0XVU\x1c\xbf\x84L\xd3\xf3\xf43\xd1\xb7\"\nn\f\xeby\x9d\xdf\xcb\\\xcc\xe6Zk\xe6\xf6]\xd9/\xe3\xc5k\x17\x04\xee'}}]}, 0x0, 0x550a, &(0x7f0000006200)="$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")
ioctl$F2FS_IOC_GARBAGE_COLLECT(r2, 0x4018f50b, &(0x7f0000000080))
sendfile(r1, r0, 0x0, 0x80000000)

411.485208ms ago: executing program 2:
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000280)={[{@noblock_validity}, {}, {@sysvgroups}, {@sysvgroups}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@errors_continue}, {@jqfmt_vfsv1}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f0000000680)="$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")
chdir(&(0x7f0000000000)='./file0\x00')
creat(&(0x7f0000000040)='./bus\x00', 0x0)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
r0 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2, 0x28011, r0, 0x0)
readv(0xffffffffffffffff, &(0x7f0000001f80)=[{0x0}, {0x0}, {0xffffffffffffffff}], 0x3)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15)
r3 = dup(r2)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000580)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}})
syz_emit_ethernet(0x7e, &(0x7f00000004c0)={@link_local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53aff", 0x48, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x3, 0x0, 0x0, 0x0, {0x0, 0x6, "508359", 0x0, 0x0, 0x0, @private1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [@hopopts={0x3a, 0x1, '\x00', [@calipso={0x7, 0x8, {0x0, 0x0, 0x0, 0x2080}}]}]}}}}}}}, 0x0)
write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_DIRENTPLUS(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="b0"], 0xb0)
write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000140), 0x2, &(0x7f0000000d40)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB="4754e79df1efda0742061f647a5921e179dcb365ac6befe76923169a3d740b236dbe9e25db78ecfe5578d64a6c32defdece623043bf4b95878c2c6d85871fd4160cfa12d335176cc9364bd3fdac1cdd5de0ef18676b8f4befe33b937d2c239512c801c420251a7cebb11e6b8845654f5dc3f365a9d82de319d734315005c62f550f79131763683e6e83a635a0f1ac2d2cc151fbc54a9fb30bccee24c4ef3069977ab22d15305c18206814e727db4b24d3bbade250fa8b3d7db05ca04833382f28d8dc5bf9de89befac48f461fea896b15e2ea289b287ef223cd625ab94f9d3f5af83f7254e719694536b8270bdf3b254", @ANYRESHEX=r2, @ANYBLOB=',\x00'])
chdir(&(0x7f0000000000)='./file0\x00')
mount$incfs(0x0, &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0, 0x0)
socket$igmp(0x2, 0x3, 0x2)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000200)={@mcast2, <r4=>0x0}, &(0x7f0000000340)=0x14)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000180)={'syztnl2\x00', <r5=>r4, 0x29, 0x5, 0x3, 0x1, 0x2a, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x8, 0x40, 0x9, 0x23}})
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r5, 0x2}, 0x90)
r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000400)='sys_exit\x00', r6}, 0x10)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000001880)={0x0, 0x3938700})
r8 = signalfd(r7, &(0x7f0000000000)={[0xfffffffffffffffa]}, 0x8)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r8, 0x89f3, &(0x7f0000000240)={'gretap0\x00', &(0x7f00000006c0)})
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
socket(0x25, 0xa, 0xf7)

102.978515ms ago: executing program 4:
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000480)='devlink_hwmsg\x00', r0}, 0xfffffffffffffea5)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10)
prctl$PR_SET_SECUREBITS(0x1c, 0x1d)
r3 = socket(0x10, 0x2, 0x0)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000003c0)={0x0, <r4=>0x0}, &(0x7f0000000380)=0x7)
setuid(r4)
setgroups(0x0, 0x0)
getgroups(0x1, &(0x7f0000000340)=[<r5=>0xee00])
setgroups(0x2, &(0x7f0000000040)=[r5, r5])
setregid(0x0, r5)
openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000002640), 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r6 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
connect$unix(r7, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r8, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r6, 0x0, 0x0)
recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x8, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x90)
r9 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_tx_ring(r9, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c)
mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r9, 0x0)

90.416827ms ago: executing program 3:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x4, 0xfffd, 0x20000020, 0x19, 0xffffffffffffffff, 0x225b, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x2, 0x6}, 0x48)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x101842, 0x0)
ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000040))
ioctl$PPPIOCSACTIVE(r2, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0})
readv(r2, &(0x7f0000000180), 0x0)
setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000040), 0x8)
bind$bt_sco(r1, &(0x7f0000000400)={0x1f, @none}, 0x8)
listen(r1, 0x3)
shutdown(r1, 0x0)
unshare(0x400)
unshare(0x20000000)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={<r3=>0xffffffffffffffff})
fcntl$dupfd(r3, 0x406, 0xffffffffffffffff)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="181a000000000000050000fffffffd0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='ext4_writepages\x00', r4}, 0x10)
r5 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r5, &(0x7f0000000000), 0x10)
creat(&(0x7f0000000300)='./bus\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup/syz0\x00', 0x1ff)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r7 = openat$cgroup_ro(r6, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
preadv(r7, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/56, 0x38}], 0x1, 0x0, 0x0)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000004400), 0x0, 0x20000000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x3, &(0x7f0000000140)=[{0x3, 0x0, 0x0, 0x2}, {0x35, 0x0, 0x0, 0xe12b}, {0x16}]})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0)

0s ago: executing program 2:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000000000000000000e0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='ext4_writepages\x00', r2}, 0x10)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000740)={{r3}, 0x0, 0x0}, 0x20)
bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
write$cgroup_type(r1, &(0x7f0000000140), 0x9)

kernel console output (not intermixed with test programs):

 mode
[   62.388511][ T1401] device pim6reg1 entered promiscuous mode
[   62.407344][   T23] audit: type=1400 audit(1718750046.680:161): avc:  denied  { unmount } for  pid=373 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1
[   62.429856][  T373] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 46
[   62.438205][  T373] erofs: (device loop3): erofs_readdir: invalid de[0].nameoff 0 @ nid 89
[   62.447089][  T373] erofs: (device loop3): erofs_readdir: invalid de[0].nameoff 0 @ nid 89
[   62.555420][ T1403] EXT4-fs (loop0): EXT4-fs: inode_readahead_blks must be 0 or a power of 2 smaller than 2^31
[   62.565528][   T18] usb 2-1: Using ep0 maxpacket: 32
[   62.726922][ T1403] EXT4-fs error (device loop0): ext4_ext_check_inode:540: inode #16: comm syz-executor.0: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 19200(19200)
[   62.775747][ T1403] EXT4-fs error (device loop0): ext4_orphan_get:1240: comm syz-executor.0: couldn't read orphan inode 16 (err -117)
[   62.813363][ T1403] EXT4-fs (loop0): mounted filesystem without journal. Opts: init_itable,noquota,nouid32,barrier,noauto_da_alloc,journal_dev=0x00000000000001ff,barrier,delalloc,usrquota,,errors=continue
[   62.869976][ T1403] ext4 filesystem being mounted at /root/syzkaller-testdir3359140540/syzkaller.EguFAO/60/file1 supports timestamps until 2038 (0x7fffffff)
[   62.893746][   T18] usb 2-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed
[   62.922896][   T18] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   62.930871][  T124] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[   62.956083][   T18] usb 2-1: Product: syz
[   62.969495][   T18] usb 2-1: Manufacturer: syz
[   62.982272][   T18] usb 2-1: SerialNumber: syz
[   63.005826][   T18] usb 2-1: config 0 descriptor??
[   63.014044][ T1403] EXT4-fs error (device loop0) in ext4_do_update_inode:5534: error 27
[   63.032961][ T1403] EXT4-fs error (device loop0) in ext4_do_update_inode:5534: error 27
[   63.063585][ T1403] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2962: inode #20: comm syz-executor.0: mark inode dirty (error -27)
[   63.078898][ T1434] device syzkaller0 entered promiscuous mode
[   63.089983][ T1403] EXT4-fs warning (device loop0): ext4_evict_inode:321: xattr delete (err -27)
[   63.173516][  T124] usb 3-1: Using ep0 maxpacket: 8
[   63.188043][ T1442] device pim6reg1 entered promiscuous mode
[   63.293683][  T124] usb 3-1: config 135 has an invalid interface number: 230 but max is 0
[   63.302170][  T124] usb 3-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config
[   63.333690][  T124] usb 3-1: config 135 has no interface number 0
[   63.342688][  T124] usb 3-1: config 135 interface 230 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[   63.533647][  T124] usb 3-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a
[   63.547848][ T1464] EXT4-fs (loop3): EXT4-fs: inode_readahead_blks must be 0 or a power of 2 smaller than 2^31
[   63.555121][  T124] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   63.573530][  T124] usb 3-1: Product: syz
[   63.581185][  T124] usb 3-1: Manufacturer: syz
[   63.585838][  T124] usb 3-1: SerialNumber: syz
[   63.618710][ T1470] device syzkaller0 entered promiscuous mode
[   63.784376][ T1387] EXT4-fs (sda1): Unrecognized mount option "discardgrpid" or missing value
[   63.841010][ T1464] EXT4-fs error (device loop3): ext4_ext_check_inode:540: inode #16: comm syz-executor.3: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 19200(19200)
[   63.860381][ T1464] EXT4-fs error (device loop3): ext4_orphan_get:1240: comm syz-executor.3: couldn't read orphan inode 16 (err -117)
[   63.863654][  T124] uvcvideo: Found UVC 0.00 device syz (18ec:3288)
[   63.872604][ T1464] EXT4-fs (loop3): mounted filesystem without journal. Opts: init_itable,noquota,nouid32,barrier,noauto_da_alloc,journal_dev=0x00000000000001ff,barrier,delalloc,usrquota,,errors=continue
[   63.879130][  T124] uvcvideo: No valid video chain found.
[   63.897332][ T1464] ext4 filesystem being mounted at /root/syzkaller-testdir1323082489/syzkaller.h7vG3H/57/file1 supports timestamps until 2038 (0x7fffffff)
[   63.920622][  T124] usb 3-1: USB disconnect, device number 4
[   63.960874][ T1464] EXT4-fs error (device loop3) in ext4_do_update_inode:5534: error 27
[   63.972171][ T1464] EXT4-fs error (device loop3) in ext4_do_update_inode:5534: error 27
[   63.983381][ T1464] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2962: inode #20: comm syz-executor.3: mark inode dirty (error -27)
[   63.993669][   T18] (unnamed net_device) (uninitialized): Assigned a random MAC address: da:2e:96:67:56:19
[   63.997541][ T1464] EXT4-fs warning (device loop3): ext4_evict_inode:321: xattr delete (err -27)
[   64.031688][   T18] rtl8150 2-1:0.0: eth1: rtl8150 is detected
[   64.196744][ T1505] device syzkaller0 entered promiscuous mode
[   64.363644][  T201] net eth1: rx_urb submit failed: -2
[   64.369366][ T1534] EXT4-fs (loop0): EXT4-fs: inode_readahead_blks must be 0 or a power of 2 smaller than 2^31
[   64.535136][ T1534] EXT4-fs error (device loop0): ext4_ext_check_inode:540: inode #16: comm syz-executor.0: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 19200(19200)
[   64.578118][ T1534] EXT4-fs error (device loop0): ext4_orphan_get:1240: comm syz-executor.0: couldn't read orphan inode 16 (err -117)
[   64.594980][ T1534] EXT4-fs (loop0): mounted filesystem without journal. Opts: init_itable,noquota,nouid32,barrier,noauto_da_alloc,journal_dev=0x00000000000001ff,barrier,delalloc,usrquota,,errors=continue
[   64.634192][ T1534] ext4 filesystem being mounted at /root/syzkaller-testdir3359140540/syzkaller.EguFAO/76/file1 supports timestamps until 2038 (0x7fffffff)
[   64.675301][ T1560] device syzkaller0 entered promiscuous mode
[   64.767914][ T1534] EXT4-fs error (device loop0) in ext4_do_update_inode:5534: error 27
[   64.789217][ T1534] EXT4-fs error (device loop0) in ext4_do_update_inode:5534: error 27
[   64.797843][ T1534] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2962: inode #20: comm syz-executor.0: mark inode dirty (error -27)
[   64.798297][   T23] audit: type=1400 audit(1718750049.070:162): avc:  denied  { remove_name } for  pid=144 comm="syslogd" name="messages" dev="tmpfs" ino=1923 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   64.810980][ T1534] EXT4-fs warning (device loop0): ext4_evict_inode:321: xattr delete (err -27)
[   64.845670][   T23] audit: type=1400 audit(1718750049.070:163): avc:  denied  { rename } for  pid=144 comm="syslogd" name="messages" dev="tmpfs" ino=1923 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   64.989861][  T442] usb 2-1: USB disconnect, device number 4
[   65.270695][ T1611] device syzkaller0 entered promiscuous mode
[   65.294514][ T1606] EXT4-fs (loop0): EXT4-fs: inode_readahead_blks must be 0 or a power of 2 smaller than 2^31
[   65.411298][   T23] audit: type=1326 audit(1718750049.680:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1630 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc48b05ff29 code=0x0
[   65.441469][ T1606] EXT4-fs error (device loop0): ext4_ext_check_inode:540: inode #16: comm syz-executor.0: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 19200(19200)
[   65.486516][ T1606] EXT4-fs error (device loop0): ext4_orphan_get:1240: comm syz-executor.0: couldn't read orphan inode 16 (err -117)
[   65.501678][ T1606] EXT4-fs (loop0): mounted filesystem without journal. Opts: init_itable,noquota,nouid32,barrier,noauto_da_alloc,journal_dev=0x00000000000001ff,barrier,delalloc,usrquota,,errors=continue
[   65.521107][ T1606] ext4 filesystem being mounted at /root/syzkaller-testdir3359140540/syzkaller.EguFAO/80/file1 supports timestamps until 2038 (0x7fffffff)
[   65.550508][ T1606] EXT4-fs error (device loop0) in ext4_do_update_inode:5534: error 27
[   65.561431][ T1606] EXT4-fs error (device loop0) in ext4_do_update_inode:5534: error 27
[   65.584922][ T1606] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2962: inode #20: comm syz-executor.0: mark inode dirty (error -27)
[   65.599644][ T1606] EXT4-fs warning (device loop0): ext4_evict_inode:321: xattr delete (err -27)
[   65.709010][ T1660] device syzkaller0 entered promiscuous mode
[   65.803548][  T442] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[   66.030041][ T1683] EXT4-fs (loop0): EXT4-fs: inode_readahead_blks must be 0 or a power of 2 smaller than 2^31
[   66.073826][  T442] usb 3-1: Using ep0 maxpacket: 32
[   66.200271][ T1698] device syzkaller0 entered promiscuous mode
[   66.245129][ T1683] EXT4-fs error (device loop0): ext4_ext_check_inode:540: inode #16: comm syz-executor.0: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 19200(19200)
[   66.273678][ T1683] EXT4-fs error (device loop0): ext4_orphan_get:1240: comm syz-executor.0: couldn't read orphan inode 16 (err -117)
[   66.330787][ T1683] EXT4-fs (loop0): mounted filesystem without journal. Opts: init_itable,noquota,nouid32,barrier,noauto_da_alloc,journal_dev=0x00000000000001ff,barrier,delalloc,usrquota,,errors=continue
[   66.353847][ T1683] ext4 filesystem being mounted at /root/syzkaller-testdir3359140540/syzkaller.EguFAO/83/file1 supports timestamps until 2038 (0x7fffffff)
[   66.383798][  T107] cfg80211: failed to load regulatory.db
[   66.393740][  T442] usb 3-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed
[   66.399498][ T1683] EXT4-fs error (device loop0) in ext4_do_update_inode:5534: error 27
[   66.410751][  T442] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   66.421669][ T1683] EXT4-fs error (device loop0) in ext4_do_update_inode:5534: error 27
[   66.425570][  T442] usb 3-1: Product: syz
[   66.430692][ T1683] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2962: inode #20: comm syz-executor.0: mark inode dirty (error -27)
[   66.434613][  T442] usb 3-1: Manufacturer: syz
[   66.451158][  T442] usb 3-1: SerialNumber: syz
[   66.451176][ T1683] EXT4-fs warning (device loop0): ext4_evict_inode:321: xattr delete (err -27)
[   66.457900][  T442] usb 3-1: config 0 descriptor??
[   66.712985][ T1733] device syzkaller0 entered promiscuous mode
[   66.903793][ T1750] EXT4-fs (loop1): EXT4-fs: inode_readahead_blks must be 0 or a power of 2 smaller than 2^31
[   67.102367][ T1750] EXT4-fs error (device loop1): ext4_ext_check_inode:540: inode #16: comm syz-executor.1: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 19200(19200)
[   67.121451][ T1750] EXT4-fs error (device loop1): ext4_orphan_get:1240: comm syz-executor.1: couldn't read orphan inode 16 (err -117)
[   67.135763][ T1750] EXT4-fs (loop1): mounted filesystem without journal. Opts: init_itable,noquota,nouid32,barrier,noauto_da_alloc,journal_dev=0x00000000000001ff,barrier,delalloc,usrquota,,errors=continue
[   67.169233][ T1750] ext4 filesystem being mounted at /root/syzkaller-testdir3081017292/syzkaller.4rmXCW/83/file1 supports timestamps until 2038 (0x7fffffff)
[   67.236431][ T1645] EXT4-fs (sda1): Unrecognized mount option "discardgrpid" or missing value
[   67.254899][ T1750] EXT4-fs error (device loop1) in ext4_do_update_inode:5534: error 27
[   67.264509][ T1750] EXT4-fs error (device loop1) in ext4_do_update_inode:5534: error 27
[   67.273624][ T1750] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2962: inode #20: comm syz-executor.1: mark inode dirty (error -27)
[   67.340712][ T1789] overlayfs: missing 'lowerdir'
[   67.615530][ T1750] EXT4-fs warning (device loop1): ext4_evict_inode:321: xattr delete (err -27)
[   67.635035][  T442] (unnamed net_device) (uninitialized): Assigned a random MAC address: b6:76:2e:df:c0:d2
[   67.648321][  T442] rtl8150 3-1:0.0: eth1: rtl8150 is detected
[   67.893645][  T595] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[   67.983620][  T201] net eth1: rx_urb submit failed: -2
[   68.153552][  T595] usb 5-1: Using ep0 maxpacket: 8
[   68.333749][  T595] usb 5-1: config 135 has an invalid interface number: 230 but max is 0
[   68.353679][  T595] usb 5-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config
[   68.370290][  T595] usb 5-1: config 135 has no interface number 0
[   68.386905][ T1865] overlayfs: missing 'lowerdir'
[   68.403219][  T595] usb 5-1: config 135 interface 230 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[   68.614042][  T595] usb 5-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a
[   68.633062][  T595] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   68.641220][  T595] usb 5-1: Product: syz
[   68.645679][  T595] usb 5-1: Manufacturer: syz
[   68.650669][  T595] usb 5-1: SerialNumber: syz
[   68.675673][   T18] usb 3-1: USB disconnect, device number 5
[   68.932896][   T23] audit: type=1326 audit(1718750053.200:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1917 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f85aee9df29 code=0x0
[   68.995023][  T442] usb 5-1: USB disconnect, device number 5
[   69.300038][ T1941] erofs: (device loop3): mounted with opts: , root inode @ nid 36.
[   69.323636][  T628] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[   69.584196][  T628] usb 2-1: Using ep0 maxpacket: 32
[   71.072124][ T1967] overlayfs: missing 'lowerdir'
[   71.309294][  T373] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 46
[   71.323683][   T23] audit: type=1326 audit(1718750055.590:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1984 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc48b05ff29 code=0x0
[   71.348850][  T373] erofs: (device loop3): erofs_readdir: invalid de[0].nameoff 0 @ nid 89
[   71.357727][  T373] erofs: (device loop3): erofs_readdir: invalid de[0].nameoff 0 @ nid 89
[   71.363734][  T628] usb 2-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed
[   71.376707][  T628] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   71.384822][  T628] usb 2-1: Product: syz
[   71.388835][  T628] usb 2-1: Manufacturer: syz
[   71.393247][  T628] usb 2-1: SerialNumber: syz
[   71.401756][  T628] usb 2-1: config 0 descriptor??
[   71.502690][ T1993] EXT4-fs (loop2): Ignoring removed mblk_io_submit option
[   71.551857][ T1993] EXT4-fs (loop2): mounted filesystem without journal. Opts: nombcache,usrjquota=,errors=remount-ro,norecovery,max_batch_time=0x0000000000000005,mblk_io_submit,minixdf,barrier=0x0000000000000000,grpjquota=,bsddf,
[   71.694842][ T2008] EXT4-fs error (device loop2): ext4_validate_block_bitmap:418: comm syz-executor.2: bg 0: block 234: padding at end of block bitmap is not set
[   71.778545][  T107] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[   71.786309][ T2008] EXT4-fs (loop2): Remounting filesystem read-only
[   73.452217][ T2019] overlayfs: missing 'lowerdir'
[   73.473725][  T628] (unnamed net_device) (uninitialized): Assigned a random MAC address: ca:04:7c:b0:d7:ec
[   73.503516][  T107] usb 1-1: Using ep0 maxpacket: 8
[   73.513461][  T628] rtl8150 2-1:0.0: eth1: rtl8150 is detected
[   73.536797][  T628] usb 2-1: USB disconnect, device number 5
[   73.683713][  T107] usb 1-1: config 135 has an invalid interface number: 230 but max is 0
[   73.702293][  T107] usb 1-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config
[   73.731228][ T2017] erofs: (device loop4): mounted with opts: , root inode @ nid 36.
[   73.754472][  T107] usb 1-1: config 135 has no interface number 0
[   73.774852][  T107] usb 1-1: config 135 interface 230 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[   74.013662][  T107] usb 1-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a
[   74.031173][  T107] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   74.072849][  T107] usb 1-1: Product: syz
[   74.102702][  T107] usb 1-1: Manufacturer: syz
[   74.120254][  T107] usb 1-1: SerialNumber: syz
[   74.276446][  T371] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 46
[   74.291930][  T371] erofs: (device loop4): erofs_readdir: invalid de[0].nameoff 0 @ nid 89
[   74.311153][  T371] erofs: (device loop4): erofs_readdir: invalid de[0].nameoff 0 @ nid 89
[   74.363641][  T107] usb 1-1: USB disconnect, device number 4
[   74.425156][ T2040] bridge0: port 1(bridge_slave_0) entered blocking state
[   74.432079][ T2040] bridge0: port 1(bridge_slave_0) entered disabled state
[   74.439779][ T2040] device bridge_slave_0 entered promiscuous mode
[   74.447111][ T2040] bridge0: port 2(bridge_slave_1) entered blocking state
[   74.455847][ T2040] bridge0: port 2(bridge_slave_1) entered disabled state
[   74.463718][ T2040] device bridge_slave_1 entered promiscuous mode
[   74.595058][ T2065] overlayfs: missing 'lowerdir'
[   74.918053][ T2040] bridge0: port 2(bridge_slave_1) entered blocking state
[   74.925013][ T2040] bridge0: port 2(bridge_slave_1) entered forwarding state
[   74.932079][ T2040] bridge0: port 1(bridge_slave_0) entered blocking state
[   74.939021][ T2040] bridge0: port 1(bridge_slave_0) entered forwarding state
[   75.083718][ T2081] erofs: (device loop1): mounted with opts: , root inode @ nid 36.
[   75.325582][  T124] bridge0: port 1(bridge_slave_0) entered disabled state
[   75.368094][  T124] bridge0: port 2(bridge_slave_1) entered disabled state
[   75.396533][  T399] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[   75.423678][  T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   75.431424][  T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   75.501659][  T107] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   75.522036][  T107] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   75.570598][  T107] bridge0: port 1(bridge_slave_0) entered blocking state
[   75.577694][  T107] bridge0: port 1(bridge_slave_0) entered forwarding state
[   75.655607][  T399] usb 5-1: Using ep0 maxpacket: 8
[   75.659387][  T107] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   75.661986][   T23] audit: type=1400 audit(1718750059.930:167): avc:  denied  { read } for  pid=2096 comm="syz-executor.2" name="ppp" dev="devtmpfs" ino=1881 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[   75.709526][  T107] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   75.709689][   T23] audit: type=1400 audit(1718750059.930:168): avc:  denied  { open } for  pid=2096 comm="syz-executor.2" path="/dev/ppp" dev="devtmpfs" ino=1881 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[   75.747940][  T107] bridge0: port 2(bridge_slave_1) entered blocking state
[   75.748628][   T23] audit: type=1400 audit(1718750059.950:169): avc:  denied  { ioctl } for  pid=2096 comm="syz-executor.2" path="/dev/ppp" dev="devtmpfs" ino=1881 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[   75.754847][  T107] bridge0: port 2(bridge_slave_1) entered forwarding state
[   75.859048][   T23] audit: type=1400 audit(1718750060.060:170): avc:  denied  { append } for  pid=144 comm="syslogd" name="messages" dev="tmpfs" ino=17307 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   75.917506][  T399] usb 5-1: config 135 has an invalid interface number: 230 but max is 0
[   75.933517][  T399] usb 5-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config
[   75.948948][  T595] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   75.953580][  T399] usb 5-1: config 135 has no interface number 0
[   75.969345][  T595] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   75.973276][  T399] usb 5-1: config 135 interface 230 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[   75.994576][   T23] audit: type=1400 audit(1718750060.060:171): avc:  denied  { open } for  pid=144 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=17307 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   76.033597][    T9] device bridge_slave_1 left promiscuous mode
[   76.039607][    T9] bridge0: port 2(bridge_slave_1) entered disabled state
[   76.063930][    T9] device bridge_slave_0 left promiscuous mode
[   76.069977][    T9] bridge0: port 1(bridge_slave_0) entered disabled state
[   76.093409][   T23] audit: type=1400 audit(1718750060.060:172): avc:  denied  { getattr } for  pid=144 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=17307 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   76.179373][  T369] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 46
[   76.205735][  T399] usb 5-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a
[   76.224998][  T399] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   76.244006][  T399] usb 5-1: Product: syz
[   76.252253][  T369] erofs: (device loop1): erofs_readdir: invalid de[0].nameoff 0 @ nid 89
[   76.260650][  T399] usb 5-1: Manufacturer: syz
[   76.264639][ T2103] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   76.270769][  T399] usb 5-1: SerialNumber: syz
[   76.273182][ T2103] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   76.277817][  T369] erofs: (device loop1): erofs_readdir: invalid de[0].nameoff 0 @ nid 89
[   76.305397][  T595] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   76.324385][  T595] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   76.344312][  T392] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   76.352697][  T392] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   76.368427][  T595] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   76.382417][  T595] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   76.401128][ T2114] EXT4-fs (loop2): EXT4-fs: inode_readahead_blks must be 0 or a power of 2 smaller than 2^31
[   76.421539][  T392] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   76.430525][  T392] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   76.439237][  T392] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   76.447785][  T392] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   76.473293][ T2117] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869)
[   76.492874][   T23] audit: type=1400 audit(1718750060.760:173): avc:  denied  { mounton } for  pid=2040 comm="syz-executor.3" path="/dev/binderfs" dev="devtmpfs" ino=11579 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1
[   76.521563][ T2117] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a814e11d, mo2=0002]
[   76.531698][ T2117] System zones: 0-1, 4-36, 102-102
[   76.544226][ T2117] EXT4-fs (loop1): mounted filesystem without journal. Opts: nombcache,debug,norecovery,grpquota,norecovery,,errors=continue
[   76.686686][ T2114] EXT4-fs error (device loop2): ext4_ext_check_inode:540: inode #16: comm syz-executor.2: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 19200(19200)
[   76.707589][ T2114] EXT4-fs error (device loop2): ext4_orphan_get:1240: comm syz-executor.2: couldn't read orphan inode 16 (err -117)
[   76.732832][ T2114] EXT4-fs (loop2): mounted filesystem without journal. Opts: init_itable,noquota,nouid32,barrier,noauto_da_alloc,journal_dev=0x00000000000001ff,barrier,delalloc,usrquota,,errors=continue
[   76.752516][ T2114] ext4 filesystem being mounted at /root/syzkaller-testdir24446959/syzkaller.3CtS48/73/file1 supports timestamps until 2038 (0x7fffffff)
[   76.799821][  T392] usb 5-1: USB disconnect, device number 6
[   76.855154][ T2114] EXT4-fs error (device loop2) in ext4_do_update_inode:5534: error 27
[   76.943897][ T2114] EXT4-fs error (device loop2) in ext4_do_update_inode:5534: error 27
[   76.982778][ T2114] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2962: inode #20: comm syz-executor.2: mark inode dirty (error -27)
[   77.012466][ T2114] EXT4-fs warning (device loop2): ext4_evict_inode:321: xattr delete (err -27)
[   77.051685][ T2149] erofs: (device loop0): mounted with opts: , root inode @ nid 36.
[   77.824146][ T2181] EXT4-fs (loop4): EXT4-fs: inode_readahead_blks must be 0 or a power of 2 smaller than 2^31
[   77.862722][  T372] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 46
[   77.872659][  T372] erofs: (device loop0): erofs_readdir: invalid de[0].nameoff 0 @ nid 89
[   77.881321][  T372] erofs: (device loop0): erofs_readdir: invalid de[0].nameoff 0 @ nid 89
[   77.962806][ T2188] overlayfs: missing 'lowerdir'
[   78.371361][ T2181] EXT4-fs error (device loop4): ext4_ext_check_inode:540: inode #16: comm syz-executor.4: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 19200(19200)
[   78.391023][ T2181] EXT4-fs error (device loop4): ext4_orphan_get:1240: comm syz-executor.4: couldn't read orphan inode 16 (err -117)
[   78.404407][ T2181] EXT4-fs (loop4): mounted filesystem without journal. Opts: init_itable,noquota,nouid32,barrier,noauto_da_alloc,journal_dev=0x00000000000001ff,barrier,delalloc,usrquota,,errors=continue
[   78.436852][ T2181] ext4 filesystem being mounted at /root/syzkaller-testdir2856666870/syzkaller.tkGuP8/118/file1 supports timestamps until 2038 (0x7fffffff)
[   78.470057][ T2181] EXT4-fs error (device loop4) in ext4_do_update_inode:5534: error 27
[   78.480991][ T2181] EXT4-fs error (device loop4) in ext4_do_update_inode:5534: error 27
[   78.490843][ T2181] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2962: inode #20: comm syz-executor.4: mark inode dirty (error -27)
[   78.523550][ T1338] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[   78.525260][ T2181] EXT4-fs warning (device loop4): ext4_evict_inode:321: xattr delete (err -27)
[   78.773518][ T1338] usb 4-1: Using ep0 maxpacket: 8
[   78.788022][ T2219] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869)
[   79.003717][ T2219] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a814e11d, mo2=0002]
[   79.036047][ T2219] System zones: 0-1, 4-36, 102-102
[   79.042234][ T2219] EXT4-fs (loop1): mounted filesystem without journal. Opts: nombcache,debug,norecovery,grpquota,norecovery,,errors=continue
[   79.057560][ T1338] usb 4-1: config 135 has an invalid interface number: 230 but max is 0
[   79.092135][ T2233] erofs: (device loop2): mounted with opts: , root inode @ nid 36.
[   79.236106][ T1338] usb 4-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config
[   79.291305][ T2233] fuse: Bad value for 'fd'
[   79.303541][ T1338] usb 4-1: config 135 has no interface number 0
[   79.357249][ T1338] usb 4-1: config 135 interface 230 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[   79.460684][ T2241] EXT4-fs (loop0): EXT4-fs: inode_readahead_blks must be 0 or a power of 2 smaller than 2^31
[   79.573802][ T1338] usb 4-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a
[   79.587175][ T1338] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   79.778407][ T1338] usb 4-1: Product: syz
[   79.782420][ T1338] usb 4-1: Manufacturer: syz
[   79.804190][ T1338] usb 4-1: SerialNumber: syz
[   81.212121][ T2253] overlayfs: missing 'lowerdir'
[   81.373668][ T1338] usb 4-1: can't set config #135, error -71
[   81.404154][ T1338] usb 4-1: USB disconnect, device number 4
[   81.422849][ T2241] EXT4-fs error (device loop0): ext4_ext_check_inode:540: inode #16: comm syz-executor.0: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 19200(19200)
[   81.463585][ T2241] EXT4-fs error (device loop0): ext4_orphan_get:1240: comm syz-executor.0: couldn't read orphan inode 16 (err -117)
[   81.484923][ T2266] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869)
[   81.501075][ T2264] EXT4-fs (loop4): EXT4-fs: inode_readahead_blks must be 0 or a power of 2 smaller than 2^31
[   81.504081][ T2241] EXT4-fs (loop0): mounted filesystem without journal. Opts: init_itable,noquota,nouid32,barrier,noauto_da_alloc,journal_dev=0x00000000000001ff,barrier,delalloc,usrquota,,errors=continue
[   81.530250][ T2241] ext4 filesystem being mounted at /root/syzkaller-testdir3359140540/syzkaller.EguFAO/149/file1 supports timestamps until 2038 (0x7fffffff)
[   81.532063][ T2266] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a814e11d, mo2=0002]
[   81.553359][ T2266] System zones: 0-1, 4-36, 102-102
[   81.579091][ T2266] EXT4-fs (loop3): mounted filesystem without journal. Opts: nombcache,debug,norecovery,grpquota,norecovery,,errors=continue
[   81.594003][ T2241] EXT4-fs error (device loop0) in ext4_do_update_inode:5534: error 27
[   81.604433][ T2241] EXT4-fs error (device loop0) in ext4_do_update_inode:5534: error 27
[   81.613043][ T2241] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2962: inode #20: comm syz-executor.0: mark inode dirty (error -27)
[   81.626779][ T2241] EXT4-fs warning (device loop0): ext4_evict_inode:321: xattr delete (err -27)
[   81.874993][ T2264] EXT4-fs error (device loop4): ext4_ext_check_inode:540: inode #16: comm syz-executor.4: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 19200(19200)
[   81.897839][ T2264] EXT4-fs error (device loop4): ext4_orphan_get:1240: comm syz-executor.4: couldn't read orphan inode 16 (err -117)
[   81.911256][ T2264] EXT4-fs (loop4): mounted filesystem without journal. Opts: init_itable,noquota,nouid32,barrier,noauto_da_alloc,journal_dev=0x00000000000001ff,barrier,delalloc,usrquota,,errors=continue
[   82.259712][ T2287] overlayfs: missing 'lowerdir'
[   83.496639][ T2264] ext4 filesystem being mounted at /root/syzkaller-testdir2856666870/syzkaller.tkGuP8/126/file1 supports timestamps until 2038 (0x7fffffff)
[   83.562448][ T2277] EXT4-fs (loop2): EXT4-fs: inode_readahead_blks must be 0 or a power of 2 smaller than 2^31
[   83.643702][ T2286] erofs: (device loop0): mounted with opts: , root inode @ nid 36.
[   84.983199][ T2299] overlayfs: missing 'lowerdir'
[   85.338184][ T2301] device syzkaller0 entered promiscuous mode
[   86.867856][ T2325] overlayfs: missing 'lowerdir'
[   87.420113][    T5] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[   87.486915][ T2321] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869)
[   87.544613][ T2327] erofs: (device loop4): mounted with opts: , root inode @ nid 36.
[   87.554067][ T2321] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a814e11d, mo2=0002]
[   87.562642][ T2321] System zones: 0-1, 4-36, 102-102
[   87.571760][ T2321] EXT4-fs (loop0): mounted filesystem without journal. Opts: nombcache,debug,norecovery,grpquota,norecovery,,errors=continue
[   87.593458][ T2318] EXT4-fs (loop3): EXT4-fs: inode_readahead_blks must be 0 or a power of 2 smaller than 2^31
[   87.644493][ T2327] fuse: Bad value for 'fd'
[   87.664552][ T2331] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869)
[   87.679594][ T2331] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a814e11d, mo2=0002]
[   87.689058][ T2331] System zones: 0-1, 4-36, 102-102
[   87.704469][    T5] usb 3-1: Using ep0 maxpacket: 8
[   87.814917][ T2331] EXT4-fs (loop1): mounted filesystem without journal. Opts: nombcache,debug,norecovery,grpquota,norecovery,,errors=continue
[   87.933623][    T5] usb 3-1: config 135 has an invalid interface number: 230 but max is 0
[   87.967973][    T5] usb 3-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config
[   88.000479][    T5] usb 3-1: config 135 has no interface number 0
[   88.009377][ T2318] EXT4-fs error (device loop3): ext4_ext_check_inode:540: inode #16: comm syz-executor.3: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 19200(19200)
[   88.033722][ T2318] EXT4-fs error (device loop3): ext4_orphan_get:1240: comm syz-executor.3: couldn't read orphan inode 16 (err -117)
[   88.061852][    T5] usb 3-1: config 135 interface 230 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[   88.076371][ T2318] EXT4-fs (loop3): mounted filesystem without journal. Opts: init_itable,noquota,nouid32,barrier,noauto_da_alloc,journal_dev=0x00000000000001ff,barrier,delalloc,usrquota,,errors=continue
[   88.114504][   T23] audit: type=1326 audit(1718750072.390:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2343 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f84b7448f29 code=0x0
[   88.157846][ T2318] ext4 filesystem being mounted at /root/syzkaller-testdir755112569/syzkaller.ndzlHj/15/file1 supports timestamps until 2038 (0x7fffffff)
[   88.196662][ T2318] EXT4-fs error (device loop3) in ext4_do_update_inode:5534: error 27
[   88.219487][ T2318] EXT4-fs error (device loop3) in ext4_do_update_inode:5534: error 27
[   88.247029][ T2318] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2962: inode #20: comm syz-executor.3: mark inode dirty (error -27)
[   88.274930][ T2346] EXT4-fs (loop4): Ignoring removed mblk_io_submit option
[   88.279642][ T2318] EXT4-fs warning (device loop3): ext4_evict_inode:321: xattr delete (err -27)
[   88.300936][ T2346] EXT4-fs (loop4): mounted filesystem without journal. Opts: nombcache,usrjquota=,errors=remount-ro,norecovery,max_batch_time=0x0000000000000005,mblk_io_submit,minixdf,barrier=0x0000000000000000,grpjquota=,bsddf,
[   88.374562][    T5] usb 3-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a
[   88.385590][    T5] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   88.395029][    T5] usb 3-1: Product: syz
[   88.399069][    T5] usb 3-1: Manufacturer: syz
[   88.404283][    T5] usb 3-1: SerialNumber: syz
[   88.424585][    T5] usb 3-1: can't set config #135, error -71
[   88.432060][    T5] usb 3-1: USB disconnect, device number 6
[   88.499650][ T2354] EXT4-fs error (device loop4): ext4_validate_block_bitmap:418: comm syz-executor.4: bg 0: block 234: padding at end of block bitmap is not set
[   88.515517][ T2354] EXT4-fs (loop4): Remounting filesystem read-only
[   88.576423][ T2361] EXT4-fs (loop3): EXT4-fs: inode_readahead_blks must be 0 or a power of 2 smaller than 2^31
[   89.532873][ T2366] overlayfs: missing 'lowerdir'
[   90.066521][ T2367] erofs: (device loop1): mounted with opts: , root inode @ nid 36.
[   90.299514][ T2361] EXT4-fs error (device loop3): ext4_ext_check_inode:540: inode #16: comm syz-executor.3: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 19200(19200)
[   90.337189][ T2361] EXT4-fs error (device loop3): ext4_orphan_get:1240: comm syz-executor.3: couldn't read orphan inode 16 (err -117)
[   90.351508][ T2361] EXT4-fs (loop3): mounted filesystem without journal. Opts: init_itable,noquota,nouid32,barrier,noauto_da_alloc,journal_dev=0x00000000000001ff,barrier,delalloc,usrquota,,errors=continue
[   90.373310][ T2361] ext4 filesystem being mounted at /root/syzkaller-testdir755112569/syzkaller.ndzlHj/16/file1 supports timestamps until 2038 (0x7fffffff)
[   91.212552][ T2380] overlayfs: missing 'lowerdir'
[   91.935163][ T2383] EXT4-fs (loop4): EXT4-fs: inode_readahead_blks must be 0 or a power of 2 smaller than 2^31
[   91.987063][  T369] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 46
[   92.002007][  T369] erofs: (device loop1): erofs_readdir: invalid de[0].nameoff 0 @ nid 89
[   92.011188][  T369] erofs: (device loop1): erofs_readdir: invalid de[0].nameoff 0 @ nid 89
[   92.115656][ T2375] bridge0: port 1(bridge_slave_0) entered blocking state
[   92.140576][ T2375] bridge0: port 1(bridge_slave_0) entered disabled state
[   92.151117][ T2375] device bridge_slave_0 entered promiscuous mode
[   92.163455][ T2375] bridge0: port 2(bridge_slave_1) entered blocking state
[   92.171526][ T2375] bridge0: port 2(bridge_slave_1) entered disabled state
[   92.180914][ T2375] device bridge_slave_1 entered promiscuous mode
[   92.282402][   T23] audit: type=1326 audit(1718750076.550:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2395 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f85aee9df29 code=0x0
[   92.360979][ T2375] bridge0: port 2(bridge_slave_1) entered blocking state
[   92.368338][ T2375] bridge0: port 2(bridge_slave_1) entered forwarding state
[   92.375565][ T2375] bridge0: port 1(bridge_slave_0) entered blocking state
[   92.382533][ T2375] bridge0: port 1(bridge_slave_0) entered forwarding state
[   92.444783][  T595] bridge0: port 1(bridge_slave_0) entered disabled state
[   92.453422][  T595] bridge0: port 2(bridge_slave_1) entered disabled state
[   92.454159][ T2392] erofs: (device loop3): mounted with opts: , root inode @ nid 36.
[   92.486209][  T595] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   92.486667][ T2391] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869)
[   92.507885][ T2392] fuse: Bad value for 'fd'
[   92.515085][  T595] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   92.546098][ T2391] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a814e11d, mo2=0002]
[   92.573757][ T2103] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   92.582547][ T2391] System zones: 0-1, 4-36, 102-102
[   92.591066][ T2383] EXT4-fs error (device loop4): ext4_ext_check_inode:540: inode #16: comm syz-executor.4: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 19200(19200)
[   92.600703][ T2391] EXT4-fs (loop2): mounted filesystem without journal. Opts: nombcache,debug,norecovery,grpquota,norecovery,,errors=continue
[   92.610426][ T2103] bridge0: port 1(bridge_slave_0) entered blocking state
[   92.629697][ T2103] bridge0: port 1(bridge_slave_0) entered forwarding state
[   92.658493][  T399] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[   92.743953][ T2383] EXT4-fs error (device loop4): ext4_orphan_get:1240: comm syz-executor.4: couldn't read orphan inode 16 (err -117)
[   92.799156][ T2383] EXT4-fs (loop4): mounted filesystem without journal. Opts: init_itable,noquota,nouid32,barrier,noauto_da_alloc,journal_dev=0x00000000000001ff,barrier,delalloc,usrquota,,errors=continue
[   92.819883][  T595] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   92.828280][ T2383] ext4 filesystem being mounted at /root/syzkaller-testdir2856666870/syzkaller.tkGuP8/132/file1 supports timestamps until 2038 (0x7fffffff)
[   92.844972][  T595] bridge0: port 2(bridge_slave_1) entered blocking state
[   92.852066][  T595] bridge0: port 2(bridge_slave_1) entered forwarding state
[   92.868568][ T2383] EXT4-fs error (device loop4) in ext4_do_update_inode:5534: error 27
[   92.884732][  T595] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   92.894191][ T2383] EXT4-fs error (device loop4) in ext4_do_update_inode:5534: error 27
[   92.903815][ T2085] device bridge_slave_1 left promiscuous mode
[   92.910580][ T2085] bridge0: port 2(bridge_slave_1) entered disabled state
[   92.912853][ T2383] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2962: inode #20: comm syz-executor.4: mark inode dirty (error -27)
[   92.930667][ T2085] device bridge_slave_0 left promiscuous mode
[   92.931514][ T2383] EXT4-fs warning (device loop4): ext4_evict_inode:321: xattr delete (err -27)
[   92.940985][ T2085] bridge0: port 1(bridge_slave_0) entered disabled state
[   93.013790][  T399] usb 2-1: Using ep0 maxpacket: 32
[   93.158196][ T2103] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   93.179009][ T2103] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   93.191264][ T2410] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869)
[   93.205436][ T2103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   93.225524][ T2103] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   93.233754][ T2103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   93.251670][  T595] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   93.260062][ T2410] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a814e11d, mo2=0002]
[   93.271571][  T595] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   93.281245][ T2410] System zones: 0-1, 4-36, 102-102
[   93.290239][ T2410] EXT4-fs (loop4): mounted filesystem without journal. Opts: nombcache,debug,norecovery,grpquota,norecovery,,errors=continue
[   93.293651][  T399] usb 2-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed
[   93.312822][ T2103] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   93.323952][ T2103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   93.333364][ T2103] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   93.341480][  T399] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   93.350785][ T2103] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   93.383542][    T5] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[   93.391001][  T399] usb 2-1: Product: syz
[   93.395273][  T399] usb 2-1: Manufacturer: syz
[   93.399740][  T399] usb 2-1: SerialNumber: syz
[   93.420273][  T399] usb 2-1: config 0 descriptor??
[   93.543423][   T23] audit: type=1326 audit(1718750077.810:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2418 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc48b05ff29 code=0x0
[   93.809269][ T2421] device syzkaller0 entered promiscuous mode
[   93.845324][ T2422] EXT4-fs (loop2): Ignoring removed mblk_io_submit option
[   93.869001][ T2422] EXT4-fs (loop2): mounted filesystem without journal. Opts: nombcache,usrjquota=,errors=remount-ro,norecovery,max_batch_time=0x0000000000000005,mblk_io_submit,minixdf,barrier=0x0000000000000000,grpjquota=,bsddf,
[   93.895898][    T5] usb 4-1: Using ep0 maxpacket: 8
[   94.013583][    T5] usb 4-1: config 135 has an invalid interface number: 230 but max is 0
[   94.019576][ T2428] device syzkaller0 entered promiscuous mode
[   94.021833][    T5] usb 4-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config
[   94.040400][ T2430] EXT4-fs error (device loop2): ext4_validate_block_bitmap:418: comm syz-executor.2: bg 0: block 234: padding at end of block bitmap is not set
[   94.055541][    T5] usb 4-1: config 135 has no interface number 0
[   94.061777][    T5] usb 4-1: config 135 interface 230 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[   94.076461][ T2430] EXT4-fs (loop2): Remounting filesystem read-only
[   94.159286][ T2433] EXT4-fs (loop4): EXT4-fs: inode_readahead_blks must be 0 or a power of 2 smaller than 2^31
[   94.233888][    T5] usb 4-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a
[   94.247981][    T5] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   94.264978][    T5] usb 4-1: Product: syz
[   94.273358][    T5] usb 4-1: Manufacturer: syz
[   94.294417][    T5] usb 4-1: SerialNumber: syz
[   94.468690][ T2398] EXT4-fs (sda1): Unrecognized mount option "discardgrpid" or missing value
[   94.539198][  T399] (unnamed net_device) (uninitialized): Assigned a random MAC address: 1e:5d:45:bb:0f:6c
[   94.592485][ T2439] erofs: (device loop0): mounted with opts: , root inode @ nid 36.
[   94.596208][  T399] rtl8150 2-1:0.0: eth1: rtl8150 is detected
[   94.894172][ T2433] EXT4-fs error (device loop4): ext4_ext_check_inode:540: inode #16: comm syz-executor.4: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 19200(19200)
[   94.991672][ T2433] EXT4-fs error (device loop4): ext4_orphan_get:1240: comm syz-executor.4: couldn't read orphan inode 16 (err -117)
[   95.090280][ T2433] EXT4-fs (loop4): mounted filesystem without journal. Opts: init_itable,noquota,nouid32,barrier,noauto_da_alloc,journal_dev=0x00000000000001ff,barrier,delalloc,usrquota,,errors=continue
[   95.133707][    T5] uvcvideo: Found UVC 0.00 device syz (18ec:3288)
[   95.140058][    T5] uvcvideo: No valid video chain found.
[   95.145744][ T2433] ext4 filesystem being mounted at /root/syzkaller-testdir2856666870/syzkaller.tkGuP8/134/file1 supports timestamps until 2038 (0x7fffffff)
[   95.176929][    T5] usb 4-1: USB disconnect, device number 5
[   95.304287][ T2375] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 46
[   95.326991][ T2375] erofs: (device loop0): erofs_readdir: invalid de[0].nameoff 0 @ nid 89
[   95.379336][ T2455] erofs: (device loop2): mounted with opts: , root inode @ nid 36.
[   95.395355][ T2375] erofs: (device loop0): erofs_readdir: invalid de[0].nameoff 0 @ nid 89
[   95.662682][ T2433] EXT4-fs error (device loop4) in ext4_do_update_inode:5534: error 27
[   95.732371][ T2433] EXT4-fs error (device loop4) in ext4_do_update_inode:5534: error 27
[   95.769973][ T2433] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2962: inode #20: comm syz-executor.4: mark inode dirty (error -27)
[   95.797325][ T2433] EXT4-fs warning (device loop4): ext4_evict_inode:321: xattr delete (err -27)
[   95.818909][  T201] net eth1: rx_urb submit failed: -2
[   95.826605][ T2467] EXT4-fs (loop0): EXT4-fs: inode_readahead_blks must be 0 or a power of 2 smaller than 2^31
[   95.945899][  T399] usb 2-1: USB disconnect, device number 6
[   96.150849][ T2467] EXT4-fs error (device loop0): ext4_ext_check_inode:540: inode #16: comm syz-executor.0: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 19200(19200)
[   96.151383][  T374] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 46
[   96.186411][ T2467] EXT4-fs error (device loop0): ext4_orphan_get:1240: comm syz-executor.0: couldn't read orphan inode 16 (err -117)
[   96.204299][  T374] erofs: (device loop2): erofs_readdir: invalid de[0].nameoff 0 @ nid 89
[   96.252077][  T374] erofs: (device loop2): erofs_readdir: invalid de[0].nameoff 0 @ nid 89
[   96.336489][ T2467] EXT4-fs (loop0): mounted filesystem without journal. Opts: init_itable,noquota,nouid32,barrier,noauto_da_alloc,journal_dev=0x00000000000001ff,barrier,delalloc,usrquota,,errors=continue
[   96.361021][ T2467] ext4 filesystem being mounted at /root/syzkaller-testdir1242854770/syzkaller.U6IwK2/4/file1 supports timestamps until 2038 (0x7fffffff)
[   96.402095][ T2488] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869)
[   96.420154][ T2503] erofs: (device loop4): mounted with opts: , root inode @ nid 36.
[   96.423539][ T2488] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a814e11d, mo2=0002]
[   96.445001][ T2488] System zones: 0-1, 4-36, 102-102
[   96.451410][ T2488] EXT4-fs (loop1): mounted filesystem without journal. Opts: nombcache,debug,norecovery,grpquota,norecovery,,errors=continue
[   96.522921][ T2467] EXT4-fs error (device loop0) in ext4_do_update_inode:5534: error 27
[   96.523026][ T2504] erofs: (device loop3): mounted with opts: , root inode @ nid 36.
[   96.541023][ T2467] EXT4-fs error (device loop0) in ext4_do_update_inode:5534: error 27
[   96.554913][ T2467] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2962: inode #20: comm syz-executor.0: mark inode dirty (error -27)
[   96.691832][ T2509] EXT4-fs (loop2): EXT4-fs: inode_readahead_blks must be 0 or a power of 2 smaller than 2^31
[   96.699533][ T2467] EXT4-fs warning (device loop0): ext4_evict_inode:321: xattr delete (err -27)
[   98.704199][ T2509] EXT4-fs error (device loop2): ext4_ext_check_inode:540: inode #16: comm syz-executor.2: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 19200(19200)
[   98.777895][ T2529] overlayfs: missing 'lowerdir'
[   98.844144][ T2509] EXT4-fs error (device loop2): ext4_orphan_get:1240: comm syz-executor.2: couldn't read orphan inode 16 (err -117)
[   98.877276][ T2509] EXT4-fs (loop2): mounted filesystem without journal. Opts: init_itable,noquota,nouid32,barrier,noauto_da_alloc,journal_dev=0x00000000000001ff,barrier,delalloc,usrquota,,errors=continue
[   98.948468][ T2509] ext4 filesystem being mounted at /root/syzkaller-testdir24446959/syzkaller.3CtS48/94/file1 supports timestamps until 2038 (0x7fffffff)
[   99.113145][ T2522] EXT4-fs (loop0): EXT4-fs: inode_readahead_blks must be 0 or a power of 2 smaller than 2^31
[   99.154527][ T2535] EXT4-fs (loop3): EXT4-fs: inode_readahead_blks must be 0 or a power of 2 smaller than 2^31
[   99.233569][  T595] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[   99.329366][   T23] audit: type=1326 audit(1718750083.600:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2538 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc48b05ff29 code=0x0
[   99.406115][ T2522] EXT4-fs error (device loop0): ext4_ext_check_inode:540: inode #16: comm syz-executor.0: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 19200(19200)
[   99.425334][ T2522] EXT4-fs error (device loop0): ext4_orphan_get:1240: comm syz-executor.0: couldn't read orphan inode 16 (err -117)
[   99.439305][ T2522] EXT4-fs (loop0): mounted filesystem without journal. Opts: init_itable,noquota,nouid32,barrier,noauto_da_alloc,journal_dev=0x00000000000001ff,barrier,delalloc,usrquota,,errors=continue
[   99.457922][ T2522] ext4 filesystem being mounted at /root/syzkaller-testdir1242854770/syzkaller.U6IwK2/6/file1 supports timestamps until 2038 (0x7fffffff)
[   99.503615][  T595] usb 5-1: Using ep0 maxpacket: 8
[   99.509211][ T2535] EXT4-fs error (device loop3): ext4_ext_check_inode:540: inode #16: comm syz-executor.3: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 19200(19200)
[   99.542977][ T2522] EXT4-fs error (device loop0) in ext4_do_update_inode:5534: error 27
[   99.560169][ T2522] EXT4-fs error (device loop0) in ext4_do_update_inode:5534: error 27
[   99.575570][ T2535] EXT4-fs error (device loop3): ext4_orphan_get:1240: comm syz-executor.3: couldn't read orphan inode 16 (err -117)
[   99.593967][ T2535] EXT4-fs (loop3): mounted filesystem without journal. Opts: init_itable,noquota,nouid32,barrier,noauto_da_alloc,journal_dev=0x00000000000001ff,barrier,delalloc,usrquota,,errors=continue
[   99.597706][ T2522] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2962: inode #20: comm syz-executor.0: mark inode dirty (error -27)
[   99.613216][ T2535] ext4 filesystem being mounted at /root/syzkaller-testdir755112569/syzkaller.ndzlHj/23/file1 supports timestamps until 2038 (0x7fffffff)
[   99.641022][ T2522] EXT4-fs warning (device loop0): ext4_evict_inode:321: xattr delete (err -27)
[   99.672825][ T2535] EXT4-fs error (device loop3) in ext4_do_update_inode:5534: error 27
[   99.677667][  T595] usb 5-1: config 135 has an invalid interface number: 230 but max is 0
[   99.689188][ T2535] EXT4-fs error (device loop3) in ext4_do_update_inode:5534: error 27
[   99.693435][  T595] usb 5-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config
[   99.699799][ T2535] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2962: inode #20: comm syz-executor.3: mark inode dirty (error -27)
[   99.707940][  T595] usb 5-1: config 135 has no interface number 0
[   99.720294][  T442] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[   99.726400][  T595] usb 5-1: config 135 interface 230 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[   99.747928][ T2535] EXT4-fs warning (device loop3): ext4_evict_inode:321: xattr delete (err -27)
[   99.757013][ T2550] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869)
[   99.767112][ T2550] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a814e11d, mo2=0002]
[   99.775625][ T2550] System zones: 0-1, 4-36, 102-102
[   99.781680][ T2550] EXT4-fs (loop1): mounted filesystem without journal. Opts: nombcache,debug,norecovery,grpquota,norecovery,,errors=continue
[   99.896315][ T2556] EXT4-fs (loop3): EXT4-fs: inode_readahead_blks must be 0 or a power of 2 smaller than 2^31
[   99.906577][  T595] usb 5-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a
[   99.916476][  T595] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   99.925642][  T595] usb 5-1: Product: syz
[   99.930245][  T595] usb 5-1: Manufacturer: syz
[   99.935203][  T595] usb 5-1: SerialNumber: syz
[  100.013970][  T442] usb 3-1: Using ep0 maxpacket: 32
[  100.076133][ T2559] erofs: (device loop0): mounted with opts: , root inode @ nid 36.
[  100.116235][ T2556] EXT4-fs error (device loop3): ext4_ext_check_inode:540: inode #16: comm syz-executor.3: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 19200(19200)
[  100.136830][ T2556] EXT4-fs error (device loop3): ext4_orphan_get:1240: comm syz-executor.3: couldn't read orphan inode 16 (err -117)
[  100.151072][ T2556] EXT4-fs (loop3): mounted filesystem without journal. Opts: init_itable,noquota,nouid32,barrier,noauto_da_alloc,journal_dev=0x00000000000001ff,barrier,delalloc,usrquota,,errors=continue
[  100.170661][ T2556] ext4 filesystem being mounted at /root/syzkaller-testdir755112569/syzkaller.ndzlHj/24/file1 supports timestamps until 2038 (0x7fffffff)
[  100.193400][ T2556] EXT4-fs error (device loop3) in ext4_do_update_inode:5534: error 27
[  100.209540][ T2556] EXT4-fs error (device loop3) in ext4_do_update_inode:5534: error 27
[  100.228513][ T2556] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2962: inode #20: comm syz-executor.3: mark inode dirty (error -27)
[  100.246314][ T2556] EXT4-fs warning (device loop3): ext4_evict_inode:321: xattr delete (err -27)
[  100.314176][  T595] uvcvideo: Found UVC 0.00 device syz (18ec:3288)
[  100.323293][  T595] uvcvideo: No valid video chain found.
[  100.325711][  T442] usb 3-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed
[  100.344705][  T595] usb 5-1: USB disconnect, device number 7
[  100.345062][  T442] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  100.372188][  T442] usb 3-1: Product: syz
[  100.376634][  T442] usb 3-1: Manufacturer: syz
[  100.382867][  T442] usb 3-1: SerialNumber: syz
[  100.423106][  T442] usb 3-1: config 0 descriptor??
[  100.460970][ T2567] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869)
[  100.495509][ T2567] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a814e11d, mo2=0002]
[  100.510187][ T2567] System zones: 0-1, 4-36, 102-102
[  100.516331][ T2567] EXT4-fs (loop3): mounted filesystem without journal. Opts: nombcache,debug,norecovery,grpquota,norecovery,,errors=continue
[  100.724036][   T23] audit: type=1326 audit(1718750085.000:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2571 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f85aee9df29 code=0x0
[  100.853109][ T2375] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 46
[  100.893417][ T2375] erofs: (device loop0): erofs_readdir: invalid de[0].nameoff 0 @ nid 89
[  100.998770][ T2375] erofs: (device loop0): erofs_readdir: invalid de[0].nameoff 0 @ nid 89
[  101.245131][ T2574] EXT4-fs (loop1): Ignoring removed mblk_io_submit option
[  101.366691][ T2574] EXT4-fs (loop1): mounted filesystem without journal. Opts: nombcache,usrjquota=,errors=remount-ro,norecovery,max_batch_time=0x0000000000000005,mblk_io_submit,minixdf,barrier=0x0000000000000000,grpjquota=,bsddf,
[  101.405243][ T2544] EXT4-fs (sda1): Unrecognized mount option "discardgrpid" or missing value
[  101.523894][  T442] (unnamed net_device) (uninitialized): Assigned a random MAC address: 42:c7:01:63:ee:11
[  101.572069][ T2581] erofs: (device loop4): mounted with opts: , root inode @ nid 36.
[  101.575088][  T442] rtl8150 3-1:0.0: eth1: rtl8150 is detected
[  101.606207][ T2580] erofs: (device loop0): mounted with opts: , root inode @ nid 36.
[  101.852352][   T23] audit: type=1326 audit(1718750086.120:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2590 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f755906bf29 code=0x0
[  101.918614][   T23] audit: type=1400 audit(1718750086.180:180): avc:  denied  { mount } for  pid=2590 comm="syz-executor.3" name="/" dev="tmpfs" ino=22664 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  102.004391][   T23] audit: type=1400 audit(1718750086.180:181): avc:  denied  { remount } for  pid=2590 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  102.193566][  T595] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  102.295200][   T23] audit: type=1326 audit(1718750086.570:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2615 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fad729f2f29 code=0x0
[  102.331837][ T2603] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869)
[  102.352331][ T2603] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a814e11d, mo2=0002]
[  102.419320][ T2603] System zones: 0-1, 4-36, 102-102
[  102.425279][ T2603] EXT4-fs (loop4): mounted filesystem without journal. Opts: nombcache,debug,norecovery,grpquota,norecovery,,errors=continue
[  102.443566][  T595] usb 4-1: Using ep0 maxpacket: 32
[  102.650242][ T2544] F2FS-fs (loop2): Found nat_bits in checkpoint
[  102.716667][ T2544] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  102.743674][  T201] net eth1: rx_urb submit failed: -2
[  102.772569][ T2626] EXT4-fs (loop0): Ignoring removed mblk_io_submit option
[  102.787739][ T2626] EXT4-fs (loop0): mounted filesystem without journal. Opts: nombcache,usrjquota=,errors=remount-ro,norecovery,max_batch_time=0x0000000000000005,mblk_io_submit,minixdf,barrier=0x0000000000000000,grpjquota=,bsddf,
[  102.864165][ T2625] erofs: (device loop1): mounted with opts: , root inode @ nid 36.
[  102.868247][  T429] usb 3-1: USB disconnect, device number 7
[  102.946225][  T595] usb 4-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed
[  102.967178][  T595] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  102.985455][  T595] usb 4-1: Product: syz
[  103.023594][  T595] usb 4-1: Manufacturer: syz
[  103.035826][  T595] usb 4-1: SerialNumber: syz
[  103.040976][ T2640] EXT4-fs error (device loop0): ext4_validate_block_bitmap:418: comm syz-executor.0: bg 0: block 234: padding at end of block bitmap is not set
[  103.067952][  T595] usb 4-1: config 0 descriptor??
[  103.074443][ T2640] EXT4-fs (loop0): Remounting filesystem read-only
[  103.295418][  T369] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 46
[  103.317918][  T369] erofs: (device loop1): erofs_readdir: invalid de[0].nameoff 0 @ nid 89
[  103.343555][ T2103] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  103.431064][  T369] erofs: (device loop1): erofs_readdir: invalid de[0].nameoff 0 @ nid 89
[  103.603704][ T2103] usb 5-1: Using ep0 maxpacket: 8
[  103.675837][ T2653] erofs: (device loop0): mounted with opts: , root inode @ nid 36.
[  103.723788][ T2103] usb 5-1: config 135 has an invalid interface number: 230 but max is 0
[  103.739268][ T2103] usb 5-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config
[  103.753260][   T23] audit: type=1400 audit(1718750088.030:183): avc:  denied  { mounton } for  pid=2590 comm="syz-executor.3" path="/root/syzkaller-testdir755112569/syzkaller.ndzlHj/27/file0" dev="tmpfs" ino=22664 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  103.951125][ T2103] usb 5-1: config 135 has no interface number 0
[  103.960542][ T2103] usb 5-1: config 135 interface 230 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  104.943765][ T2667] overlayfs: missing 'lowerdir'
[  105.414510][  T595] (unnamed net_device) (uninitialized): Assigned a random MAC address: 2e:79:a8:fe:c4:45
[  105.441579][   T23] audit: type=1400 audit(1718750089.710:184): avc:  denied  { unmount } for  pid=2040 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  105.633650][ T2103] usb 5-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a
[  105.647244][  T595] rtl8150 4-1:0.0: eth1: rtl8150 is detected
[  105.653366][ T2103] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  105.837658][  T595] usb 4-1: USB disconnect, device number 6
[  105.853906][ T2103] usb 5-1: Product: syz
[  105.873980][ T2103] usb 5-1: Manufacturer: syz
[  105.893558][ T2103] usb 5-1: SerialNumber: syz
[  105.938838][ T2103] usb 5-1: can't set config #135, error -71
[  105.959774][ T2103] usb 5-1: USB disconnect, device number 8
[  106.087253][ T2680] erofs: (device loop1): mounted with opts: , root inode @ nid 36.
[  106.184444][ T2678] EXT4-fs (loop3): EXT4-fs: inode_readahead_blks must be 0 or a power of 2 smaller than 2^31
[  106.327700][ T2375] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 46
[  106.407307][ T2375] erofs: (device loop0): erofs_readdir: invalid de[0].nameoff 0 @ nid 89
[  106.480571][ T2678] EXT4-fs error (device loop3): ext4_ext_check_inode:540: inode #16: comm syz-executor.3: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 19200(19200)
[  106.483956][ T2375] erofs: (device loop0): erofs_readdir: invalid de[0].nameoff 0 @ nid 89
[  106.600313][ T2678] EXT4-fs error (device loop3): ext4_orphan_get:1240: comm syz-executor.3: couldn't read orphan inode 16 (err -117)
[  106.622951][ T2678] EXT4-fs (loop3): mounted filesystem without journal. Opts: init_itable,noquota,nouid32,barrier,noauto_da_alloc,journal_dev=0x00000000000001ff,barrier,delalloc,usrquota,,errors=continue
[  106.642362][ T2678] ext4 filesystem being mounted at /root/syzkaller-testdir755112569/syzkaller.ndzlHj/28/file1 supports timestamps until 2038 (0x7fffffff)
[  106.674134][   T23] audit: type=1326 audit(1718750090.950:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2699 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc48b05ff29 code=0x0
[  106.805423][   T23] audit: type=1326 audit(1718750091.080:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2713 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f755906bf29 code=0x0
[  106.885120][ T2709] EXT4-fs (loop2): Ignoring removed mblk_io_submit option
[  106.949792][ T2709] EXT4-fs (loop2): mounted filesystem without journal. Opts: nombcache,usrjquota=,errors=remount-ro,norecovery,max_batch_time=0x0000000000000005,mblk_io_submit,minixdf,barrier=0x0000000000000000,grpjquota=,bsddf,
[  107.064596][ T2720] EXT4-fs (loop1): EXT4-fs: inode_readahead_blks must be 0 or a power of 2 smaller than 2^31
[  107.104341][ T2742] EXT4-fs error (device loop2): ext4_validate_block_bitmap:418: comm syz-executor.2: bg 0: block 234: padding at end of block bitmap is not set
[  107.128036][ T2742] EXT4-fs (loop2): Remounting filesystem read-only
[  107.270478][  T399] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  107.273863][ T2740] erofs: (device loop4): mounted with opts: , root inode @ nid 36.
[  107.513308][ T2720] EXT4-fs error (device loop1): ext4_ext_check_inode:540: inode #16: comm syz-executor.1: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 19200(19200)
[  107.513526][  T399] usb 4-1: Using ep0 maxpacket: 32
[  107.538092][ T2720] EXT4-fs error (device loop1): ext4_orphan_get:1240: comm syz-executor.1: couldn't read orphan inode 16 (err -117)
[  107.551901][ T2720] EXT4-fs (loop1): mounted filesystem without journal. Opts: init_itable,noquota,nouid32,barrier,noauto_da_alloc,journal_dev=0x00000000000001ff,barrier,delalloc,usrquota,,errors=continue
[  107.570640][ T2720] ext4 filesystem being mounted at /root/syzkaller-testdir3081017292/syzkaller.4rmXCW/140/file1 supports timestamps until 2038 (0x7fffffff)
[  107.588334][ T2750] erofs: (device loop0): mounted with opts: , root inode @ nid 36.
[  107.649007][ T2720] EXT4-fs error (device loop1) in ext4_do_update_inode:5534: error 27
[  107.680264][ T2720] EXT4-fs error (device loop1) in ext4_do_update_inode:5534: error 27
[  107.708925][ T2720] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2962: inode #20: comm syz-executor.1: mark inode dirty (error -27)
[  107.722944][ T2720] EXT4-fs warning (device loop1): ext4_evict_inode:321: xattr delete (err -27)
[  107.827424][ T2754] EXT4-fs error (device loop2): ext4_ext_check_inode:540: inode #16: comm syz-executor.2: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 19200(19200)
[  107.855197][  T371] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 46
[  107.872414][ T2754] EXT4-fs error (device loop2): ext4_orphan_get:1240: comm syz-executor.2: couldn't read orphan inode 16 (err -117)
[  107.886931][  T371] erofs: (device loop4): erofs_readdir: invalid de[0].nameoff 0 @ nid 89
[  107.896793][  T371] erofs: (device loop4): erofs_readdir: invalid de[0].nameoff 0 @ nid 89
[  107.907633][ T2754] EXT4-fs (loop2): mounted filesystem without journal. Opts: init_itable,noquota,nouid32,barrier,noauto_da_alloc,journal_dev=0x00000000000001ff,barrier,delalloc,usrquota,,errors=continue
[  107.939010][  T399] usb 4-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed
[  107.944482][ T2754] ext4 filesystem being mounted at /root/syzkaller-testdir24446959/syzkaller.3CtS48/101/file1 supports timestamps until 2038 (0x7fffffff)
[  107.953554][  T399] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  107.972845][  T399] usb 4-1: Product: syz
[  107.989027][  T399] usb 4-1: Manufacturer: syz
[  108.006205][ T2754] EXT4-fs error (device loop2) in ext4_do_update_inode:5534: error 27
[  108.008384][  T399] usb 4-1: SerialNumber: syz
[  108.030768][ T2754] EXT4-fs error (device loop2) in ext4_do_update_inode:5534: error 27
[  108.070914][ T2754] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2962: inode #20: comm syz-executor.2: mark inode dirty (error -27)
[  108.072697][  T399] usb 4-1: config 0 descriptor??
[  108.102687][ T2754] EXT4-fs warning (device loop2): ext4_evict_inode:321: xattr delete (err -27)
[  108.196954][ T2763] device syzkaller0 entered promiscuous mode
[  108.313760][ T2375] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 46
[  108.324998][ T2375] erofs: (device loop0): erofs_readdir: invalid de[0].nameoff 0 @ nid 89
[  108.346326][ T2375] erofs: (device loop0): erofs_readdir: invalid de[0].nameoff 0 @ nid 89
[  108.480170][ T2768] EXT4-fs (loop2): EXT4-fs: inode_readahead_blks must be 0 or a power of 2 smaller than 2^31
[  108.713962][ T2779] overlayfs: missing 'lowerdir'
[  108.865499][ T2781] overlayfs: missing 'lowerdir'
[  109.223897][ T2786] device syzkaller0 entered promiscuous mode
[  109.274946][ T2733] EXT4-fs (sda1): Unrecognized mount option "discardgrpid" or missing value
[  109.307697][ T2768] EXT4-fs error (device loop2): ext4_ext_check_inode:540: inode #16: comm syz-executor.2: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 19200(19200)
[  109.404281][ T2768] EXT4-fs error (device loop2): ext4_orphan_get:1240: comm syz-executor.2: couldn't read orphan inode 16 (err -117)
[  109.417433][ T2768] EXT4-fs (loop2): mounted filesystem without journal. Opts: init_itable,noquota,nouid32,barrier,noauto_da_alloc,journal_dev=0x00000000000001ff,barrier,delalloc,usrquota,,errors=continue
[  109.457151][ T2768] ext4 filesystem being mounted at /root/syzkaller-testdir24446959/syzkaller.3CtS48/102/file1 supports timestamps until 2038 (0x7fffffff)
[  109.726651][  T399] (unnamed net_device) (uninitialized): Assigned a random MAC address: 4e:ef:a7:0f:df:b6
[  111.176967][ T2801] overlayfs: missing 'lowerdir'
[  111.187279][ T2794] erofs: (device loop4): mounted with opts: , root inode @ nid 36.
[  111.313223][ T2798] erofs: (device loop1): mounted with opts: , root inode @ nid 36.
[  111.316625][  T399] rtl8150 4-1:0.0: eth1: rtl8150 is detected
[  111.358177][  T399] usb 4-1: USB disconnect, device number 7
[  111.604712][ T2806] EXT4-fs (loop3): EXT4-fs: inode_readahead_blks must be 0 or a power of 2 smaller than 2^31
[  111.649447][  T371] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 46
[  111.658075][  T371] erofs: (device loop4): erofs_readdir: invalid de[0].nameoff 0 @ nid 89
[  111.667976][ T2809] EXT4-fs (loop0): EXT4-fs: inode_readahead_blks must be 0 or a power of 2 smaller than 2^31
[  111.677316][  T371] erofs: (device loop4): erofs_readdir: invalid de[0].nameoff 0 @ nid 89
[  111.932543][ T2811] EXT4-fs error (device loop2): ext4_ext_check_inode:540: inode #16: comm syz-executor.2: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 19200(19200)
[  111.947838][ T2817] device syzkaller0 entered promiscuous mode
[  111.952204][ T2811] EXT4-fs error (device loop2): ext4_orphan_get:1240: comm syz-executor.2: couldn't read orphan inode 16 (err -117)
[  111.970922][ T2811] EXT4-fs (loop2): mounted filesystem without journal. Opts: init_itable,noquota,nouid32,barrier,noauto_da_alloc,journal_dev=0x00000000000001ff,barrier,delalloc,usrquota,,errors=continue
[  112.009458][ T2811] ext4 filesystem being mounted at /root/syzkaller-testdir24446959/syzkaller.3CtS48/103/file1 supports timestamps until 2038 (0x7fffffff)
[  112.055719][ T2811] EXT4-fs error (device loop2) in ext4_do_update_inode:5534: error 27
[  112.082315][ T2824] EXT4-fs (loop4): EXT4-fs: inode_readahead_blks must be 0 or a power of 2 smaller than 2^31
[  112.093727][ T2811] EXT4-fs error (device loop2) in ext4_do_update_inode:5534: error 27
[  112.112248][ T2811] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2962: inode #20: comm syz-executor.2: mark inode dirty (error -27)
[  112.197015][ T2811] EXT4-fs warning (device loop2): ext4_evict_inode:321: xattr delete (err -27)
[  112.328919][ T2831] overlayfs: missing 'lowerdir'
[  112.715939][ T2824] EXT4-fs error (device loop4): ext4_ext_check_inode:540: inode #16: comm syz-executor.4: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 19200(19200)
[  112.735194][ T2824] EXT4-fs error (device loop4): ext4_orphan_get:1240: comm syz-executor.4: couldn't read orphan inode 16 (err -117)
[  112.748175][ T2824] EXT4-fs (loop4): mounted filesystem without journal. Opts: init_itable,noquota,nouid32,barrier,noauto_da_alloc,journal_dev=0x00000000000001ff,barrier,delalloc,usrquota,,errors=continue
[  112.767969][ T2834] EXT4-fs (loop3): EXT4-fs: inode_readahead_blks must be 0 or a power of 2 smaller than 2^31
[  112.767982][ T2824] ext4 filesystem being mounted at /root/syzkaller-testdir2856666870/syzkaller.tkGuP8/149/file1 supports timestamps until 2038 (0x7fffffff)
[  112.793152][ T2835] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869)
[  112.809814][ T2824] EXT4-fs error (device loop4) in ext4_do_update_inode:5534: error 27
[  112.826882][ T2835] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a814e11d, mo2=0002]
[  112.850692][ T2835] System zones: 0-1, 4-36, 102-102
[  112.856524][ T2824] EXT4-fs error (device loop4) in ext4_do_update_inode:5534: error 27
[  112.872915][ T2835] EXT4-fs (loop0): mounted filesystem without journal. Opts: nombcache,debug,norecovery,grpquota,norecovery,,errors=continue
[  112.893748][ T2824] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2962: inode #20: comm syz-executor.4: mark inode dirty (error -27)
[  113.153980][ T2849] overlayfs: missing 'lowerdir'
[  113.314261][ T2824] EXT4-fs warning (device loop4): ext4_evict_inode:321: xattr delete (err -27)
[  113.608147][ T2855] erofs: (device loop2): mounted with opts: , root inode @ nid 36.
[  114.479881][ T2866] overlayfs: missing 'lowerdir'
[  115.186130][ T2856] erofs: (device loop1): mounted with opts: , root inode @ nid 36.
[  115.502973][ T2871] EXT4-fs (loop3): EXT4-fs: inode_readahead_blks must be 0 or a power of 2 smaller than 2^31
[  115.672260][  T369] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 46
[  115.694326][  T369] erofs: (device loop1): erofs_readdir: invalid de[0].nameoff 0 @ nid 89
[  115.707514][  T369] erofs: (device loop1): erofs_readdir: invalid de[0].nameoff 0 @ nid 89
[  115.726860][ T2878] EXT4-fs error (device loop4): ext4_ext_check_inode:540: inode #16: comm syz-executor.4: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 19200(19200)
[  115.743434][ T2876] device syzkaller0 entered promiscuous mode
[  115.773529][ T2878] EXT4-fs error (device loop4): ext4_orphan_get:1240: comm syz-executor.4: couldn't read orphan inode 16 (err -117)
[  115.792037][ T2878] EXT4-fs (loop4): mounted filesystem without journal. Opts: init_itable,noquota,nouid32,barrier,noauto_da_alloc,journal_dev=0x00000000000001ff,barrier,delalloc,usrquota,,errors=continue
[  115.818724][ T2878] ext4 filesystem being mounted at /root/syzkaller-testdir2856666870/syzkaller.tkGuP8/151/file1 supports timestamps until 2038 (0x7fffffff)
[  115.845789][ T2878] EXT4-fs error (device loop4) in ext4_do_update_inode:5534: error 27
[  115.857661][ T2878] EXT4-fs error (device loop4) in ext4_do_update_inode:5534: error 27
[  115.867115][ T2878] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2962: inode #20: comm syz-executor.4: mark inode dirty (error -27)
[  115.880448][ T2878] EXT4-fs warning (device loop4): ext4_evict_inode:321: xattr delete (err -27)
[  116.135217][ T2889] erofs: (device loop3): mounted with opts: , root inode @ nid 36.
[  116.157578][   T23] audit: type=1326 audit(1718750100.430:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2891 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fad729f2f29 code=0x0
[  116.517048][ T2900] overlayfs: missing 'lowerdir'
[  118.393620][ T2903] EXT4-fs (loop0): Ignoring removed mblk_io_submit option
[  118.581426][ T2903] EXT4-fs (loop0): mounted filesystem without journal. Opts: nombcache,usrjquota=,errors=remount-ro,norecovery,max_batch_time=0x0000000000000005,mblk_io_submit,minixdf,barrier=0x0000000000000000,grpjquota=,bsddf,
[  118.914415][ T2912] erofs: (device loop4): mounted with opts: , root inode @ nid 36.
[  118.923668][ T1338] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  119.220700][ T2917] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869)
[  119.265916][ T2917] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a814e11d, mo2=0002]
[  119.284561][ T2040] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 46
[  119.310326][ T2919] erofs: (device loop0): mounted with opts: , root inode @ nid 36.
[  119.333834][ T1338] usb 2-1: Using ep0 maxpacket: 8
[  119.334312][ T2917] System zones: 0-1, 4-36, 102-102
[  119.346547][ T2040] erofs: (device loop3): erofs_readdir: invalid de[0].nameoff 0 @ nid 89
[  119.384509][ T2917] EXT4-fs (loop2): mounted filesystem without journal. Opts: nombcache,debug,norecovery,grpquota,norecovery,,errors=continue
[  119.386933][ T2040] erofs: (device loop3): erofs_readdir: invalid de[0].nameoff 0 @ nid 89
[  119.453881][ T1338] usb 2-1: config 135 has an invalid interface number: 230 but max is 0
[  119.462518][ T1338] usb 2-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config
[  119.622080][ T2919] fuse: Bad value for 'fd'
[  119.626529][ T1338] usb 2-1: config 135 has no interface number 0
[  119.632701][ T1338] usb 2-1: config 135 interface 230 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  119.683473][    C1] raw-gadget gadget: ignoring, device is not running
[  119.723731][ T1338] usb 2-1: string descriptor 0 read error: -71
[  119.729869][ T1338] usb 2-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a
[  119.779709][ T1338] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  119.983581][ T1338] usb 2-1: can't set config #135, error -71
[  119.990333][  T371] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 46
[  119.990914][ T1338] usb 2-1: USB disconnect, device number 7
[  120.004529][ T2925] erofs: (device loop3): mounted with opts: , root inode @ nid 36.
[  120.008210][  T371] erofs: (device loop4): erofs_readdir: invalid de[0].nameoff 0 @ nid 89
[  120.023055][  T371] erofs: (device loop4): erofs_readdir: invalid de[0].nameoff 0 @ nid 89
[  120.365344][ T2938] erofs: (device loop4): mounted with opts: , root inode @ nid 36.
[  120.622688][ T2941] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869)
[  120.680972][ T2941] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a814e11d, mo2=0002]
[  120.722322][ T2941] System zones: 0-1, 4-36, 102-102
[  120.754568][ T2941] EXT4-fs (loop3): mounted filesystem without journal. Opts: nombcache,debug,norecovery,grpquota,norecovery,,errors=continue
[  120.933647][ T2103] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  121.197363][  T371] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 46
[  121.213518][ T2103] usb 2-1: Using ep0 maxpacket: 8
[  121.218643][  T371] erofs: (device loop4): erofs_readdir: invalid de[0].nameoff 0 @ nid 89
[  121.238371][  T371] erofs: (device loop4): erofs_readdir: invalid de[0].nameoff 0 @ nid 89
[  121.345217][ T2103] usb 2-1: config 135 has an invalid interface number: 230 but max is 0
[  121.353394][ T2103] usb 2-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config
[  121.389484][ T2103] usb 2-1: config 135 has no interface number 0
[  121.408113][ T2103] usb 2-1: config 135 interface 230 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  121.433942][ T1338] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  121.545016][ T2950] EXT4-fs error (device loop4): ext4_ext_check_inode:540: inode #16: comm syz-executor.4: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 19200(19200)
[  121.613752][ T2950] EXT4-fs error (device loop4): ext4_orphan_get:1240: comm syz-executor.4: couldn't read orphan inode 16 (err -117)
[  121.647760][ T2950] EXT4-fs (loop4): mounted filesystem without journal. Opts: init_itable,noquota,nouid32,barrier,noauto_da_alloc,journal_dev=0x00000000000001ff,barrier,delalloc,usrquota,,errors=continue
[  121.673639][ T2103] usb 2-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a
[  121.692883][ T2103] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  121.703526][ T1338] usb 1-1: Using ep0 maxpacket: 8
[  121.709006][ T2950] ext4 filesystem being mounted at /root/syzkaller-testdir2856666870/syzkaller.tkGuP8/155/file1 supports timestamps until 2038 (0x7fffffff)
[  121.733514][ T2103] usb 2-1: Product: syz
[  121.737620][ T2103] usb 2-1: Manufacturer: syz
[  121.742127][ T2103] usb 2-1: SerialNumber: syz
[  121.775140][ T2950] EXT4-fs error (device loop4) in ext4_do_update_inode:5534: error 27
[  121.793566][ T2950] EXT4-fs error (device loop4) in ext4_do_update_inode:5534: error 27
[  121.833619][ T1338] usb 1-1: config 135 has an invalid interface number: 230 but max is 0
[  121.924048][ T1338] usb 1-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config
[  121.934940][ T1338] usb 1-1: config 135 has no interface number 0
[  121.938882][ T2950] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2962: inode #20: comm syz-executor.4: mark inode dirty (error -27)
[  121.941216][ T1338] usb 1-1: config 135 interface 230 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  121.968475][ T2950] EXT4-fs warning (device loop4): ext4_evict_inode:321: xattr delete (err -27)
[  122.058801][ T2966] overlayfs: missing 'lowerdir'
[  122.144027][ T1338] usb 1-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a
[  122.196219][ T1338] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  122.299931][ T1338] usb 1-1: Product: syz
[  122.313508][ T1338] usb 1-1: Manufacturer: syz
[  122.331896][ T1338] usb 1-1: SerialNumber: syz
[  122.463598][ T2103] uvcvideo: Found UVC 0.00 device syz (18ec:3288)
[  122.470915][ T2103] uvcvideo: No valid video chain found.
[  122.500537][ T2103] usb 2-1: USB disconnect, device number 8
[  122.738214][  T392] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  122.763197][   T23] audit: type=1326 audit(1718750107.030:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2973 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f755906bf29 code=0x0
[  122.893662][ T1338] uvcvideo: Found UVC 0.00 device syz (18ec:3288)
[  122.900657][ T1338] uvcvideo: No valid video chain found.
[  122.918208][ T1338] usb 1-1: USB disconnect, device number 5
[  123.023533][  T392] usb 3-1: Using ep0 maxpacket: 8
[  123.163647][  T392] usb 3-1: config 135 has an invalid interface number: 230 but max is 0
[  123.182577][  T392] usb 3-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config
[  123.196493][  T392] usb 3-1: config 135 has no interface number 0
[  123.207409][ T2103] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  123.216978][  T392] usb 3-1: config 135 interface 230 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  123.289448][ T2979] erofs: (device loop1): mounted with opts: , root inode @ nid 36.
[  123.394088][  T392] usb 3-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a
[  123.422399][  T392] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  123.447155][  T392] usb 3-1: Product: syz
[  123.456916][  T392] usb 3-1: Manufacturer: syz
[  123.463567][ T2103] usb 4-1: Using ep0 maxpacket: 32
[  123.471910][  T392] usb 3-1: SerialNumber: syz
[  123.802845][ T2985] erofs: (device loop0): mounted with opts: , root inode @ nid 36.
[  123.843782][ T2103] usb 4-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed
[  123.852685][ T2103] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  124.007187][ T2103] usb 4-1: Product: syz
[  124.011194][ T2103] usb 4-1: Manufacturer: syz
[  124.027386][ T2103] usb 4-1: SerialNumber: syz
[  124.036922][ T2103] usb 4-1: config 0 descriptor??
[  124.090125][ T2989] erofs: (device loop4): mounted with opts: , root inode @ nid 36.
[  124.183803][  T392] uvcvideo: Found UVC 0.00 device syz (18ec:3288)
[  124.191088][  T392] uvcvideo: No valid video chain found.
[  124.215496][  T392] usb 3-1: USB disconnect, device number 8
[  124.280351][  T369] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 46
[  124.290670][  T369] erofs: (device loop1): erofs_readdir: invalid de[0].nameoff 0 @ nid 89
[  124.302083][  T369] erofs: (device loop1): erofs_readdir: invalid de[0].nameoff 0 @ nid 89
[  124.364968][   T23] audit: type=1326 audit(1718750108.640:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2991 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fad729f2f29 code=0x0
[  124.542171][ T2996] EXT4-fs (loop0): Ignoring removed mblk_io_submit option
[  124.572757][ T2995] EXT4-fs error (device loop1): ext4_ext_check_inode:540: inode #16: comm syz-executor.1: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 19200(19200)
[  124.594393][ T2995] EXT4-fs error (device loop1): ext4_orphan_get:1240: comm syz-executor.1: couldn't read orphan inode 16 (err -117)
[  124.596623][ T2996] EXT4-fs (loop0): mounted filesystem without journal. Opts: nombcache,usrjquota=,errors=remount-ro,norecovery,max_batch_time=0x0000000000000005,mblk_io_submit,minixdf,barrier=0x0000000000000000,grpjquota=,bsddf,
[  124.607751][ T2995] EXT4-fs (loop1): mounted filesystem without journal. Opts: init_itable,noquota,nouid32,barrier,noauto_da_alloc,journal_dev=0x00000000000001ff,barrier,delalloc,usrquota,,errors=continue
[  124.649086][ T2995] ext4 filesystem being mounted at /root/syzkaller-testdir3081017292/syzkaller.4rmXCW/152/file1 supports timestamps until 2038 (0x7fffffff)
[  124.712235][ T2995] EXT4-fs error (device loop1) in ext4_do_update_inode:5534: error 27
[  124.733601][ T2995] EXT4-fs error (device loop1) in ext4_do_update_inode:5534: error 27
[  124.751625][   T23] audit: type=1326 audit(1718750109.020:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3004 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc48b05ff29 code=0x0
[  124.755359][ T3003] EXT4-fs error (device loop0): ext4_validate_block_bitmap:418: comm syz-executor.0: bg 0: block 234: padding at end of block bitmap is not set
[  124.790421][ T2995] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2962: inode #20: comm syz-executor.1: mark inode dirty (error -27)
[  124.796206][ T3003] EXT4-fs (loop0): Remounting filesystem read-only
[  124.804016][ T2995] EXT4-fs warning (device loop1): ext4_evict_inode:321: xattr delete (err -27)
[  124.820476][  T371] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 46
[  124.834270][ T2976] EXT4-fs (sda1): Unrecognized mount option "discardgrpid" or missing value
[  124.843363][  T371] erofs: (device loop4): erofs_readdir: invalid de[0].nameoff 0 @ nid 89
[  124.861183][  T371] erofs: (device loop4): erofs_readdir: invalid de[0].nameoff 0 @ nid 89
[  125.053761][ T2103] (unnamed net_device) (uninitialized): Assigned a random MAC address: de:19:eb:a4:b8:8e
[  125.067195][ T2103] rtl8150 4-1:0.0: eth1: rtl8150 is detected
[  125.083889][ T3009] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869)
[  125.096450][ T3009] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a814e11d, mo2=0002]
[  125.105099][ T3009] System zones: 0-1, 4-36, 102-102
[  125.111276][ T3009] EXT4-fs (loop4): mounted filesystem without journal. Opts: nombcache,debug,norecovery,grpquota,norecovery,,errors=continue
[  125.131382][ T3012] EXT4-fs (loop1): EXT4-fs: inode_readahead_blks must be 0 or a power of 2 smaller than 2^31
[  125.141779][  T595] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  125.268887][ T3012] EXT4-fs error (device loop1): ext4_ext_check_inode:540: inode #16: comm syz-executor.1: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 19200(19200)
[  125.288566][  T201] net eth1: rx_urb submit failed: -2
[  125.289240][ T3012] EXT4-fs error (device loop1): ext4_orphan_get:1240: comm syz-executor.1: couldn't read orphan inode 16 (err -117)
[  125.307726][ T3012] EXT4-fs (loop1): mounted filesystem without journal. Opts: init_itable,noquota,nouid32,barrier,noauto_da_alloc,journal_dev=0x00000000000001ff,barrier,delalloc,usrquota,,errors=continue
[  125.327263][ T3012] ext4 filesystem being mounted at /root/syzkaller-testdir3081017292/syzkaller.4rmXCW/153/file1 supports timestamps until 2038 (0x7fffffff)
[  125.376371][ T3012] EXT4-fs error (device loop1) in ext4_do_update_inode:5534: error 27
[  125.385223][ T3012] EXT4-fs error (device loop1) in ext4_do_update_inode:5534: error 27
[  125.394570][ T3012] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2962: inode #20: comm syz-executor.1: mark inode dirty (error -27)
[  125.408785][ T3012] EXT4-fs warning (device loop1): ext4_evict_inode:321: xattr delete (err -27)
[  125.545881][ T3034] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869)
[  125.559905][ T3034] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a814e11d, mo2=0002]
[  125.563557][  T595] usb 3-1: Using ep0 maxpacket: 32
[  125.568199][ T3034] System zones: 0-1, 4-36, 102-102
[  125.578953][ T3034] EXT4-fs (loop0): mounted filesystem without journal. Opts: nombcache,debug,norecovery,grpquota,norecovery,,errors=continue
[  125.843605][  T595] usb 3-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed
[  125.858907][  T595] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  125.890501][  T595] usb 3-1: Product: syz
[  125.903121][  T595] usb 3-1: Manufacturer: syz
[  125.917985][  T595] usb 3-1: SerialNumber: syz
[  125.951208][  T595] usb 3-1: config 0 descriptor??
[  125.964608][  T124] usb 4-1: USB disconnect, device number 8
[  126.223531][  T392] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  126.386487][ T3050] erofs: (device loop3): mounted with opts: , root inode @ nid 36.
[  126.456061][ T3051] erofs: (device loop4): mounted with opts: , root inode @ nid 36.
[  126.464007][  T392] usb 2-1: Using ep0 maxpacket: 8
[  126.583651][  T392] usb 2-1: config 135 has an invalid interface number: 230 but max is 0
[  126.603537][  T392] usb 2-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config
[  126.641902][  T392] usb 2-1: config 135 has no interface number 0
[  126.658244][  T392] usb 2-1: config 135 interface 230 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  126.853756][  T392] usb 2-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a
[  126.901390][  T392] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  126.980847][  T392] usb 2-1: Product: syz
[  126.993766][  T392] usb 2-1: Manufacturer: syz
[  127.013599][  T392] usb 2-1: SerialNumber: syz
[  127.055258][  T595] (unnamed net_device) (uninitialized): Assigned a random MAC address: 4a:25:d1:b3:e7:ec
[  127.118104][  T595] rtl8150 3-1:0.0: eth1: rtl8150 is detected
[  127.265243][ T2040] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 46
[  127.292181][ T2040] erofs: (device loop3): erofs_readdir: invalid de[0].nameoff 0 @ nid 89
[  127.311177][ T2040] erofs: (device loop3): erofs_readdir: invalid de[0].nameoff 0 @ nid 89
[  127.385110][ T3078] EXT4-fs error (device loop4): ext4_ext_check_inode:540: inode #16: comm syz-executor.4: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 19200(19200)
[  127.497535][ T3078] EXT4-fs error (device loop4): ext4_orphan_get:1240: comm syz-executor.4: couldn't read orphan inode 16 (err -117)
[  127.531193][ T3078] EXT4-fs (loop4): mounted filesystem without journal. Opts: init_itable,noquota,nouid32,barrier,noauto_da_alloc,journal_dev=0x00000000000001ff,barrier,delalloc,usrquota,,errors=continue
[  127.551852][ T3078] ext4 filesystem being mounted at /root/syzkaller-testdir2856666870/syzkaller.tkGuP8/161/file1 supports timestamps until 2038 (0x7fffffff)
[  127.602120][ T3095] device syzkaller0 entered promiscuous mode
[  127.618680][ T3078] EXT4-fs error (device loop4) in ext4_do_update_inode:5534: error 27
[  127.628781][ T3078] EXT4-fs error (device loop4) in ext4_do_update_inode:5534: error 27
[  127.633698][  T201] net eth1: rx_urb submit failed: -2
[  127.637793][ T3078] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2962: inode #20: comm syz-executor.4: mark inode dirty (error -27)
[  127.655814][ T3091] erofs: (device loop3): mounted with opts: , root inode @ nid 36.
[  127.663725][  T392] uvcvideo: Found UVC 0.00 device syz (18ec:3288)
[  127.670546][  T392] uvcvideo: No valid video chain found.
[  127.680691][ T3078] EXT4-fs warning (device loop4): ext4_evict_inode:321: xattr delete (err -27)
[  127.695852][ T3007] F2FS-fs (loop2): Found nat_bits in checkpoint
[  127.701438][  T392] usb 2-1: USB disconnect, device number 9
[  127.762638][ T3007] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  128.029012][ T3108] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869)
[  128.042456][ T3106] erofs: (device loop3): mounted with opts: , root inode @ nid 36.
[  128.044901][ T3108] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a814e11d, mo2=0002]
[  128.096514][ T3108] System zones: 0-1, 4-36, 102-102
[  128.114659][ T3108] EXT4-fs (loop0): mounted filesystem without journal. Opts: nombcache,debug,norecovery,grpquota,norecovery,,errors=continue
[  128.348478][ T3113] device syzkaller0 entered promiscuous mode
[  130.037888][  T392] usb 3-1: USB disconnect, device number 9
[  130.184784][ T3125] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869)
[  130.217365][ T3125] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a814e11d, mo2=0002]
[  130.243687][ T3125] System zones: 0-1, 4-36, 102-102
[  130.249417][ T3125] EXT4-fs (loop4): mounted filesystem without journal. Opts: nombcache,debug,norecovery,grpquota,norecovery,,errors=continue
[  130.264288][ T2040] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 46
[  130.282278][ T2040] erofs: (device loop3): erofs_readdir: invalid de[0].nameoff 0 @ nid 89
[  130.303908][ T2040] erofs: (device loop3): erofs_readdir: invalid de[0].nameoff 0 @ nid 89
[  132.320235][ T3156] overlayfs: missing 'lowerdir'
[  132.596751][ T3150] erofs: (device loop0): mounted with opts: , root inode @ nid 36.
[  132.631262][ T3153] erofs: (device loop3): mounted with opts: , root inode @ nid 36.
[  133.425761][ T2040] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 46
[  133.435041][ T3162] erofs: (device loop1): mounted with opts: , root inode @ nid 36.
[  133.453330][ T2040] erofs: (device loop3): erofs_readdir: invalid de[0].nameoff 0 @ nid 89
[  133.483768][ T2040] erofs: (device loop3): erofs_readdir: invalid de[0].nameoff 0 @ nid 89
[  133.508827][   T23] audit: type=1326 audit(1718750117.780:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3166 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fad729f2f29 code=0x0
[  133.661342][ T3171] overlayfs: missing 'lowerdir'
[  133.727499][   T23] audit: type=1326 audit(1718750117.990:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3172 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f85aee9df29 code=0x0
[  133.799214][ T3178] device syzkaller0 entered promiscuous mode
[  133.812378][   T23] audit: type=1326 audit(1718750118.080:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3179 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc48b05ff29 code=0x0
[  133.876910][ T3175] EXT4-fs (loop0): Ignoring removed mblk_io_submit option
[  133.889882][   T23] audit: type=1326 audit(1718750118.160:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3185 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f755906bf29 code=0x0
[  133.927959][ T3175] EXT4-fs (loop0): mounted filesystem without journal. Opts: nombcache,usrjquota=,errors=remount-ro,norecovery,max_batch_time=0x0000000000000005,mblk_io_submit,minixdf,barrier=0x0000000000000000,grpjquota=,bsddf,
[  134.007007][ T3196] EXT4-fs error (device loop0): ext4_validate_block_bitmap:418: comm syz-executor.0: bg 0: block 234: padding at end of block bitmap is not set
[  134.034579][ T3196] EXT4-fs (loop0): Remounting filesystem read-only
[  134.056079][ T3194] EXT4-fs (loop3): Ignoring removed mblk_io_submit option
[  134.073567][  T399] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  134.105484][ T3194] EXT4-fs (loop3): mounted filesystem without journal. Opts: nombcache,usrjquota=,errors=remount-ro,norecovery,max_batch_time=0x0000000000000005,mblk_io_submit,minixdf,barrier=0x0000000000000000,grpjquota=,bsddf,
[  134.203535][ T2905] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  134.214105][ T3199] EXT4-fs error (device loop3): ext4_validate_block_bitmap:418: comm syz-executor.3: bg 0: block 234: padding at end of block bitmap is not set
[  134.230375][ T3199] EXT4-fs (loop3): Remounting filesystem read-only
[  134.333530][  T399] usb 2-1: Using ep0 maxpacket: 32
[  134.443566][ T2905] usb 3-1: Using ep0 maxpacket: 32
[  134.453643][ T2255] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  134.703923][ T2255] usb 5-1: Using ep0 maxpacket: 8
[  134.715710][  T399] usb 2-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed
[  134.726967][  T399] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  134.849286][ T2905] usb 3-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed
[  134.905642][ T3206] erofs: (device loop0): mounted with opts: , root inode @ nid 36.
[  134.908133][ T2905] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  134.923717][  T399] usb 2-1: Product: syz
[  134.931319][  T399] usb 2-1: Manufacturer: syz
[  134.936799][  T399] usb 2-1: SerialNumber: syz
[  134.951780][ T2255] usb 5-1: config 135 has an invalid interface number: 230 but max is 0
[  135.022680][ T2255] usb 5-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config
[  135.064760][  T399] usb 2-1: config 0 descriptor??
[  135.077430][ T2905] usb 3-1: Product: syz
[  135.082899][ T2905] usb 3-1: Manufacturer: syz
[  135.088176][ T2905] usb 3-1: SerialNumber: syz
[  135.286928][ T2905] usb 3-1: config 0 descriptor??
[  135.294476][ T2255] usb 5-1: config 135 has no interface number 0
[  135.311887][ T2255] usb 5-1: config 135 interface 230 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  135.628095][ T2255] usb 5-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a
[  135.715314][ T2255] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  135.724321][ T2255] usb 5-1: Product: syz
[  135.732575][ T2255] usb 5-1: Manufacturer: syz
[  135.738669][ T2255] usb 5-1: SerialNumber: syz
[  135.807882][ T3211] erofs: (device loop3): mounted with opts: , root inode @ nid 36.
[  135.864135][ T3174] tmpfs: Unknown parameter 'max_batch_time'
[  136.098473][  T399] (unnamed net_device) (uninitialized): Assigned a random MAC address: e2:a4:38:28:d9:f4
[  136.385648][ T2905] (unnamed net_device) (uninitialized): Assigned a random MAC address: 2a:9c:f1:13:17:d0
[  136.414137][  T399] rtl8150 2-1:0.0: eth1: rtl8150 is detected
[  136.527913][ T2905] rtl8150 3-1:0.0: eth2: rtl8150 is detected
[  136.540209][ T3219] erofs: (device loop0): mounted with opts: , root inode @ nid 36.
[  136.745028][ T2040] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 46
[  136.764536][ T2040] erofs: (device loop3): erofs_readdir: invalid de[0].nameoff 0 @ nid 89
[  136.776642][ T2040] erofs: (device loop3): erofs_readdir: invalid de[0].nameoff 0 @ nid 89
[  136.780112][ T3174] F2FS-fs (loop1): Found nat_bits in checkpoint
[  136.793542][ T2255] uvcvideo: Found UVC 0.00 device syz (18ec:3288)
[  136.799828][ T2255] uvcvideo: No valid video chain found.
[  136.817060][ T2255] usb 5-1: USB disconnect, device number 9
[  136.921552][ T3234] overlayfs: missing 'lowerdir'
[  136.940345][ T3174] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  137.019109][  T124] usb 2-1: USB disconnect, device number 10
[  137.038392][ T3187] F2FS-fs (loop2): Failed to start F2FS issue_checkpoint_thread (-12)
[  137.313791][ T3247] erofs: (device loop0): mounted with opts: , root inode @ nid 36.
[  137.320363][ T1338] usb 3-1: USB disconnect, device number 10
[  137.383578][  T392] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  137.492902][   T23] audit: type=1326 audit(1718750121.760:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3267 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f84b7448f29 code=0x0
[  137.643486][  T392] usb 4-1: Using ep0 maxpacket: 8
[  137.648892][ T3273] EXT4-fs (loop4): Ignoring removed mblk_io_submit option
[  137.715343][ T3273] EXT4-fs (loop4): mounted filesystem without journal. Opts: nombcache,usrjquota=,errors=remount-ro,norecovery,max_batch_time=0x0000000000000005,mblk_io_submit,minixdf,barrier=0x0000000000000000,grpjquota=,bsddf,
[  137.867870][ T3292] 9pnet: Insufficient options for proto=fd
[  137.874068][  T392] usb 4-1: config 135 has an invalid interface number: 230 but max is 0
[  137.900325][  T392] usb 4-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config
[  137.932250][  T392] usb 4-1: config 135 has no interface number 0
[  138.121746][ T3295] overlayfs: missing 'lowerdir'
[  138.284011][  T392] usb 4-1: config 135 interface 230 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  138.457509][ T3299] erofs: (device loop0): mounted with opts: , root inode @ nid 36.
[  138.469369][ T3296] erofs: (device loop1): mounted with opts: , root inode @ nid 36.
[  138.478532][  T392] usb 4-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a
[  138.533428][  T392] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  138.566770][  T392] usb 4-1: Product: syz
[  138.581256][  T392] usb 4-1: Manufacturer: syz
[  138.716870][  T392] usb 4-1: SerialNumber: syz
[  139.183850][   T23] audit: type=1326 audit(1718750123.450:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3334 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc48b05ff29 code=0x0
[  139.267549][  T369] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 46
[  139.280795][ T3323] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869)
[  139.303958][  T369] erofs: (device loop1): erofs_readdir: invalid de[0].nameoff 0 @ nid 89
[  139.320389][  T369] erofs: (device loop1): erofs_readdir: invalid de[0].nameoff 0 @ nid 89
[  139.329160][ T3323] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a814e11d, mo2=0002]
[  139.342829][ T3323] System zones: 0-1, 4-36, 102-102
[  139.356481][ T3323] EXT4-fs (loop0): mounted filesystem without journal. Opts: nombcache,debug,norecovery,grpquota,norecovery,,errors=continue
[  139.363565][  T392] uvcvideo: Found UVC 0.00 device syz (18ec:3288)
[  139.375801][  T392] uvcvideo: No valid video chain found.
[  139.394112][  T392] usb 4-1: USB disconnect, device number 9
[  139.573600][ T1338] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  139.823520][   T23] audit: type=1326 audit(1718750124.090:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3345 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f85aee9df29 code=0x0
[  139.866233][  T595] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  140.066804][ T3350] EXT4-fs (loop3): Ignoring removed mblk_io_submit option
[  140.073548][ T1338] usb 3-1: Using ep0 maxpacket: 32
[  140.115921][ T3350] EXT4-fs (loop3): mounted filesystem without journal. Opts: nombcache,usrjquota=,errors=remount-ro,norecovery,max_batch_time=0x0000000000000005,mblk_io_submit,minixdf,barrier=0x0000000000000000,grpjquota=,bsddf,
[  140.137838][  T595] usb 5-1: Using ep0 maxpacket: 8
[  140.235859][ T3357] device syzkaller0 entered promiscuous mode
[  140.242310][ T3358] EXT4-fs error (device loop3): ext4_validate_block_bitmap:418: comm syz-executor.3: bg 0: block 234: padding at end of block bitmap is not set
[  140.258082][  T595] usb 5-1: config 135 has an invalid interface number: 230 but max is 0
[  140.263564][ T2255] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  140.266660][  T595] usb 5-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config
[  140.285854][  T595] usb 5-1: config 135 has no interface number 0
[  140.292401][ T3358] EXT4-fs (loop3): Remounting filesystem read-only
[  140.309208][  T595] usb 5-1: config 135 interface 230 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  140.363949][ T1338] usb 3-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed
[  140.372888][ T1338] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  140.382446][ T1338] usb 3-1: Product: syz
[  140.401980][ T1338] usb 3-1: Manufacturer: syz
[  140.409370][ T1338] usb 3-1: SerialNumber: syz
[  140.438506][ T1338] usb 3-1: config 0 descriptor??
[  140.449775][ T3361] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869)
[  140.462863][ T3361] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a814e11d, mo2=0002]
[  140.472155][ T3361] System zones: 0-1, 4-36, 102-102
[  140.492143][ T3361] EXT4-fs (loop0): mounted filesystem without journal. Opts: nombcache,debug,norecovery,grpquota,norecovery,,errors=continue
[  140.505410][  T595] usb 5-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a
[  140.515284][  T595] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  140.523385][  T595] usb 5-1: Product: syz
[  140.527866][  T595] usb 5-1: Manufacturer: syz
[  140.533050][  T595] usb 5-1: SerialNumber: syz
[  140.543730][ T2255] usb 2-1: Using ep0 maxpacket: 32
[  140.595010][ T3366] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'.
[  140.883613][ T2255] usb 2-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed
[  140.900150][ T2255] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  140.925228][ T2255] usb 2-1: Product: syz
[  140.937335][ T2255] usb 2-1: Manufacturer: syz
[  140.950824][ T2255] usb 2-1: SerialNumber: syz
[  140.967715][ T2255] usb 2-1: config 0 descriptor??
[  141.089413][  T392] usb 5-1: USB disconnect, device number 10
[  141.409267][ T3375] overlayfs: missing 'lowerdir'
[  141.443645][ T1338] (unnamed net_device) (uninitialized): Assigned a random MAC address: 4e:96:a3:dd:fc:3a
[  141.464177][ T1338] rtl8150 3-1:0.0: eth1: rtl8150 is detected
[  141.471753][ T3336] F2FS-fs (loop2): Found nat_bits in checkpoint
[  141.587024][ T3336] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  141.658493][   T23] audit: type=1326 audit(1718750125.930:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3390 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f84b7448f29 code=0x0
[  141.691387][ T3394] 9pnet: Insufficient options for proto=fd
[  141.733161][ T3348] EXT4-fs (sda1): Unrecognized mount option "discardgrpid" or missing value
[  141.873841][  T399] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  141.893659][  T201] net eth1: rx_urb submit failed: -2
[  141.904907][ T3400] EXT4-fs (loop4): Ignoring removed mblk_io_submit option
[  141.945837][ T3401] EXT4-fs (loop0): Ignoring removed mblk_io_submit option
[  141.955692][ T3400] EXT4-fs (loop4): mounted filesystem without journal. Opts: nombcache,usrjquota=,errors=remount-ro,norecovery,max_batch_time=0x0000000000000005,mblk_io_submit,minixdf,barrier=0x0000000000000000,grpjquota=,bsddf,
[  141.963587][ T2255] (unnamed net_device) (uninitialized): Assigned a random MAC address: 0e:f4:01:ae:71:0f
[  142.043382][ T2255] rtl8150 2-1:0.0: eth2: rtl8150 is detected
[  142.070599][ T3411] EXT4-fs error (device loop4): ext4_validate_block_bitmap:418: comm syz-executor.4: bg 0: block 234: padding at end of block bitmap is not set
[  142.087693][ T3401] EXT4-fs (loop0): mounted filesystem without journal. Opts: nombcache,usrjquota=,errors=remount-ro,norecovery,max_batch_time=0x0000000000000005,mblk_io_submit,minixdf,barrier=0x0000000000000000,grpjquota=,bsddf,
[  142.094628][ T3411] EXT4-fs (loop4): Remounting filesystem read-only
[  142.133501][  T399] usb 4-1: Using ep0 maxpacket: 8
[  142.211617][ T3416] EXT4-fs error (device loop0): ext4_validate_block_bitmap:418: comm syz-executor.0: bg 0: block 234: padding at end of block bitmap is not set
[  142.227273][ T3416] EXT4-fs (loop0): Remounting filesystem read-only
[  142.263588][  T399] usb 4-1: config 135 has an invalid interface number: 230 but max is 0
[  142.275051][  T399] usb 4-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config
[  142.301025][  T399] usb 4-1: config 135 has no interface number 0
[  142.314979][  T399] usb 4-1: config 135 interface 230 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  142.332041][ T3348] F2FS-fs (loop1): Found nat_bits in checkpoint
[  142.416453][ T3348] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  142.483747][  T399] usb 4-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a
[  142.505489][  T399] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  142.523564][  T201] net eth2: rx_urb submit failed: -2
[  142.543931][  T399] usb 4-1: Product: syz
[  142.549346][  T399] usb 4-1: Manufacturer: syz
[  142.554016][  T399] usb 4-1: SerialNumber: syz
[  142.615271][   T23] audit: type=1326 audit(1718750126.890:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3434 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f84b7448f29 code=0x0
[  142.733713][ T2255] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  142.753751][ T2905] usb 3-1: USB disconnect, device number 11
[  142.847723][ T3436] EXT4-fs (loop4): Ignoring removed mblk_io_submit option
[  142.883228][ T3436] EXT4-fs (loop4): mounted filesystem without journal. Opts: nombcache,usrjquota=,errors=remount-ro,norecovery,max_batch_time=0x0000000000000005,mblk_io_submit,minixdf,barrier=0x0000000000000000,grpjquota=,bsddf,
[  142.993493][ T2255] usb 1-1: Using ep0 maxpacket: 8
[  143.004967][ T3452] EXT4-fs error (device loop4): ext4_validate_block_bitmap:418: comm syz-executor.4: bg 0: block 234: padding at end of block bitmap is not set
[  143.068302][ T3452] EXT4-fs (loop4): Remounting filesystem read-only
[  143.103549][  T399] uvcvideo: Found UVC 0.00 device syz (18ec:3288)
[  143.110356][  T399] uvcvideo: No valid video chain found.
[  143.116429][ T2255] usb 1-1: config 135 has an invalid interface number: 230 but max is 0
[  143.133545][ T2255] usb 1-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config
[  143.154800][  T399] usb 4-1: USB disconnect, device number 10
[  143.161032][ T2255] usb 1-1: config 135 has no interface number 0
[  143.170519][ T2255] usb 1-1: config 135 interface 230 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  143.343565][ T2255] usb 1-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a
[  143.362996][ T2255] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  143.389404][ T2255] usb 1-1: Product: syz
[  143.404063][ T2255] usb 1-1: Manufacturer: syz
[  143.408572][ T2255] usb 1-1: SerialNumber: syz
[  143.474610][ T2255] uvcvideo: Found UVC 0.00 device syz (18ec:3288)
[  143.483369][ T2255] uvcvideo: No valid video chain found.
[  143.498155][  T392] usb 2-1: USB disconnect, device number 11
[  143.573515][ T1338] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  143.642414][ T3466] overlayfs: missing 'lowerdir'
[  143.776930][ T3480] 9pnet: Insufficient options for proto=fd
[  143.807700][ T3469] EXT4-fs error (device loop4): ext4_ext_check_inode:540: inode #16: comm syz-executor.4: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 19200(19200)
[  143.833517][ T1338] usb 3-1: Using ep0 maxpacket: 8
[  143.879414][ T3469] EXT4-fs error (device loop4): ext4_orphan_get:1240: comm syz-executor.4: couldn't read orphan inode 16 (err -117)
[  143.922632][ T3469] EXT4-fs (loop4): mounted filesystem without journal. Opts: init_itable,noquota,nouid32,barrier,noauto_da_alloc,journal_dev=0x00000000000001ff,barrier,delalloc,usrquota,,errors=continue
[  143.953946][  T392] usb 1-1: USB disconnect, device number 6
[  143.964646][ T3469] ext4 filesystem being mounted at /root/syzkaller-testdir2856666870/syzkaller.tkGuP8/172/file1 supports timestamps until 2038 (0x7fffffff)
[  143.983637][ T1338] usb 3-1: config 135 has an invalid interface number: 230 but max is 0
[  144.002857][ T3487] erofs: (device loop3): mounted with opts: , root inode @ nid 36.
[  144.014724][ T1338] usb 3-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config
[  144.027917][ T3469] EXT4-fs error (device loop4) in ext4_do_update_inode:5534: error 27
[  144.033568][ T1338] usb 3-1: config 135 has no interface number 0
[  144.047676][ T3469] EXT4-fs error (device loop4) in ext4_do_update_inode:5534: error 27
[  144.073790][ T3469] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2962: inode #20: comm syz-executor.4: mark inode dirty (error -27)
[  144.074162][ T1338] usb 3-1: config 135 interface 230 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  144.101570][ T3469] EXT4-fs warning (device loop4): ext4_evict_inode:321: xattr delete (err -27)
[  144.174969][   T23] audit: type=1400 audit(1718750128.450:200): avc:  denied  { create } for  pid=3492 comm="syz-executor.1" dev="anon_inodefs" ino=26501 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  144.186866][ T3494] 
[  144.201595][ T3494] **********************************************************
[  144.210351][ T3494] **   NOTICE NOTICE NOTICE NOTICE NOTICE NOTICE NOTICE   **
[  144.218685][ T3494] **                                                      **
[  144.227441][   T23] audit: type=1400 audit(1718750128.450:201): avc:  denied  { ioctl } for  pid=3492 comm="syz-executor.1" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=26501 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  144.255805][ T3494] ** trace_printk() being used. Allocating extra memory.  **
[  144.263697][ T3494] **                                                      **
[  144.271958][ T3494] ** This means that this is a DEBUG kernel and it is     **
[  144.280221][   T23] audit: type=1400 audit(1718750128.450:202): avc:  denied  { read } for  pid=3492 comm="syz-executor.1" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=26501 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  144.283574][ T3494] ** unsafe for production use.                           **
[  144.313283][ T3494] **                                                      **
[  144.323587][ T1338] usb 3-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a
[  144.335858][ T1338] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  144.345043][ T3494] ** If you see this message and you are not debugging    **
[  144.352882][ T1338] usb 3-1: Product: syz
[  144.353204][ T3494] ** the kernel, report this immediately to your vendor!  **
[  144.363503][ T1338] usb 3-1: Manufacturer: syz
[  144.366149][ T3494] **                                                      **
[  144.368767][ T1338] usb 3-1: SerialNumber: syz
[  144.385908][ T3496] EXT4-fs error (device loop3): ext4_ext_check_inode:540: inode #16: comm syz-executor.3: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 19200(19200)
[  144.413841][ T3494] **   NOTICE NOTICE NOTICE NOTICE NOTICE NOTICE NOTICE   **
[  144.432018][ T3494] **********************************************************
[  144.440036][ T3496] EXT4-fs error (device loop3): ext4_orphan_get:1240: comm syz-executor.3: couldn't read orphan inode 16 (err -117)
[  144.473694][ T3496] EXT4-fs (loop3): mounted filesystem without journal. Opts: init_itable,noquota,nouid32,barrier,noauto_da_alloc,journal_dev=0x00000000000001ff,barrier,delalloc,usrquota,,errors=continue
[  144.518525][ T3496] ext4 filesystem being mounted at /root/syzkaller-testdir755112569/syzkaller.ndzlHj/59/file1 supports timestamps until 2038 (0x7fffffff)
[  144.577768][ T3496] EXT4-fs error (device loop3) in ext4_do_update_inode:5534: error 27
[  144.586446][ T3496] EXT4-fs error (device loop3) in ext4_do_update_inode:5534: error 27
[  144.595728][ T3496] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2962: inode #20: comm syz-executor.3: mark inode dirty (error -27)
[  144.609024][ T3496] EXT4-fs warning (device loop3): ext4_evict_inode:321: xattr delete (err -27)
[  144.762151][   T23] audit: type=1326 audit(1718750129.030:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3509 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fad729f2f29 code=0x0
[  144.920841][ T3513] EXT4-fs error (device loop3): ext4_ext_check_inode:540: inode #16: comm syz-executor.3: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 19200(19200)
[  144.923615][ T1338] uvcvideo: Found UVC 0.00 device syz (18ec:3288)
[  144.966764][   T23] audit: type=1326 audit(1718750129.240:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3519 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f85aee9df29 code=0x0
[  144.973215][ T3515] EXT4-fs (loop0): Ignoring removed mblk_io_submit option
[  144.997784][ T3513] EXT4-fs error (device loop3): ext4_orphan_get:1240: comm syz-executor.3: couldn't read orphan inode 16 (err -117)
[  145.009875][ T1338] uvcvideo: No valid video chain found.
[  145.011810][ T1338] usb 3-1: USB disconnect, device number 12
[  145.054229][ T3513] EXT4-fs (loop3): mounted filesystem without journal. Opts: init_itable,noquota,nouid32,barrier,noauto_da_alloc,journal_dev=0x00000000000001ff,barrier,delalloc,usrquota,,errors=continue
[  145.077757][ T3513] ext4 filesystem being mounted at /root/syzkaller-testdir755112569/syzkaller.ndzlHj/60/file1 supports timestamps until 2038 (0x7fffffff)
[  145.111766][ T3513] EXT4-fs error (device loop3) in ext4_do_update_inode:5534: error 27
[  145.121596][ T3513] EXT4-fs error (device loop3) in ext4_do_update_inode:5534: error 27
[  145.133162][ T3515] EXT4-fs (loop0): mounted filesystem without journal. Opts: nombcache,usrjquota=,errors=remount-ro,norecovery,max_batch_time=0x0000000000000005,mblk_io_submit,minixdf,barrier=0x0000000000000000,grpjquota=,bsddf,
[  145.155457][ T3513] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2962: inode #20: comm syz-executor.3: mark inode dirty (error -27)
[  145.193120][ T3513] EXT4-fs warning (device loop3): ext4_evict_inode:321: xattr delete (err -27)
[  145.203526][  T124] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  145.294663][ T3525] EXT4-fs error (device loop0): ext4_validate_block_bitmap:418: comm syz-executor.0: bg 0: block 234: padding at end of block bitmap is not set
[  145.309556][ T3525] EXT4-fs (loop0): Remounting filesystem read-only
[  145.353506][  T392] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  145.362390][ T3527] overlayfs: missing 'lowerdir'
[  145.513624][  T124] usb 5-1: Using ep0 maxpacket: 8
[  145.643744][  T124] usb 5-1: config 135 has an invalid interface number: 230 but max is 0
[  145.663745][  T124] usb 5-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config
[  145.666880][ T3532] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.2'.
[  145.674530][  T392] usb 2-1: Using ep0 maxpacket: 32
[  145.698990][  T124] usb 5-1: config 135 has no interface number 0
[  145.713711][  T124] usb 5-1: config 135 interface 230 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  145.729956][   T23] audit: type=1400 audit(1718750130.000:205): avc:  denied  { write } for  pid=3531 comm="syz-executor.2" name="001" dev="devtmpfs" ino=9236 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[  145.757315][ T3530] erofs: (device loop3): mounted with opts: , root inode @ nid 36.
[  146.074447][  T124] usb 5-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a
[  146.093858][  T124] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  146.112386][  T124] usb 5-1: Product: syz
[  146.120982][  T124] usb 5-1: Manufacturer: syz
[  146.126030][  T392] usb 2-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed
[  146.139815][  T392] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  146.148200][  T124] usb 5-1: SerialNumber: syz
[  146.161345][  T392] usb 2-1: Product: syz
[  146.171453][  T392] usb 2-1: Manufacturer: syz
[  146.181815][  T392] usb 2-1: SerialNumber: syz
[  146.215621][  T392] usb 2-1: config 0 descriptor??
[  146.353943][ T3539] erofs: (device loop2): mounted with opts: , root inode @ nid 36.
[  146.558566][ T2040] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 46
[  146.567686][ T3541] erofs: (device loop0): mounted with opts: , root inode @ nid 36.
[  146.631490][ T2040] erofs: (device loop3): erofs_readdir: invalid de[0].nameoff 0 @ nid 89
[  146.684494][ T2040] erofs: (device loop3): erofs_readdir: invalid de[0].nameoff 0 @ nid 89
[  147.073666][  T124] uvcvideo: Found UVC 0.00 device syz (18ec:3288)
[  147.081037][  T124] uvcvideo: No valid video chain found.
[  147.094900][ T3522] EXT4-fs (sda1): Unrecognized mount option "discardgrpid" or missing value
[  147.112772][  T124] usb 5-1: USB disconnect, device number 11
[  147.223580][  T392] (unnamed net_device) (uninitialized): Assigned a random MAC address: 16:67:f5:c5:e7:2a
[  147.250060][  T392] rtl8150 2-1:0.0: eth1: rtl8150 is detected
[  147.273565][  T595] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  147.312922][  T374] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 46
[  147.322855][ T2375] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 46
[  147.342480][  T374] erofs: (device loop2): erofs_readdir: invalid de[0].nameoff 0 @ nid 89
[  147.373860][  T374] erofs: (device loop2): erofs_readdir: invalid de[0].nameoff 0 @ nid 89
[  147.383964][ T2375] erofs: (device loop0): erofs_readdir: invalid de[0].nameoff 0 @ nid 89
[  147.392670][ T2375] erofs: (device loop0): erofs_readdir: invalid de[0].nameoff 0 @ nid 89
[  147.576812][  T595] usb 4-1: Using ep0 maxpacket: 8
[  147.662761][ T3564] overlayfs: missing 'lowerdir'
[  147.726731][ T3563] device pim6reg1 entered promiscuous mode
[  147.743796][  T595] usb 4-1: config 135 has an invalid interface number: 230 but max is 0
[  147.797434][  T595] usb 4-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config
[  147.915662][  T595] usb 4-1: config 135 has no interface number 0
[  147.932031][  T595] usb 4-1: config 135 interface 230 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  147.971094][   T23] audit: type=1400 audit(1718750132.240:206): avc:  denied  { ioctl } for  pid=3568 comm="syz-executor.4" path="socket:[25359]" dev="sockfs" ino=25359 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  148.063568][  T201] net eth1: rx_urb submit failed: -2
[  148.099967][ T3569] FAT-fs (loop4): Unrecognized mount option "ÿÿÿÿÿÿÿÿÿÿ0xffffffffffffffff" or missing value
[  148.203614][  T595] usb 4-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a
[  148.222093][  T595] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  148.234291][  T595] usb 4-1: Product: syz
[  148.238459][  T595] usb 4-1: Manufacturer: syz
[  148.243191][  T595] usb 4-1: SerialNumber: syz
[  148.427462][ T2103] usb 2-1: USB disconnect, device number 12
[  148.435589][  T595] uvcvideo: Found UVC 0.00 device syz (18ec:3288)
[  148.442142][  T595] uvcvideo: No valid video chain found.
[  148.515913][ T3579] erofs: (device loop0): mounted with opts: , root inode @ nid 36.
[  148.523549][ T3585] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  148.530772][ T3585] IPv6: NLM_F_CREATE should be set when creating new route
[  148.537968][ T3585] IPv6: NLM_F_CREATE should be set when creating new route
[  148.758858][ T3582] EXT4-fs (loop2): Ignoring removed mblk_io_submit option
[  148.778264][   T23] audit: type=1326 audit(1718750133.050:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3587 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f84b7448f29 code=0x0
[  149.054873][ T3582] EXT4-fs (loop2): mounted filesystem without journal. Opts: nombcache,usrjquota=,errors=remount-ro,norecovery,max_batch_time=0x0000000000000005,mblk_io_submit,minixdf,barrier=0x0000000000000000,grpjquota=,bsddf,
[  149.083817][ T3592] EXT4-fs (loop4): Ignoring removed mblk_io_submit option
[  149.084663][ T2255] usb 4-1: USB disconnect, device number 11
[  149.117513][ T3592] EXT4-fs (loop4): mounted filesystem without journal. Opts: nombcache,usrjquota=,errors=remount-ro,norecovery,max_batch_time=0x0000000000000005,mblk_io_submit,minixdf,barrier=0x0000000000000000,grpjquota=,bsddf,
[  149.139714][   T23] audit: type=1326 audit(1718750133.420:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3605 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f85aee9df29 code=0x0
[  149.235020][ T3612] EXT4-fs error (device loop2): ext4_validate_block_bitmap:418: comm syz-executor.2: bg 0: block 234: padding at end of block bitmap is not set
[  149.252754][ T3612] EXT4-fs (loop2): Remounting filesystem read-only
[  149.283218][ T3613] EXT4-fs (loop1): Ignoring removed mblk_io_submit option
[  149.317286][ T3613] EXT4-fs (loop1): mounted filesystem without journal. Opts: nombcache,usrjquota=,errors=remount-ro,norecovery,max_batch_time=0x0000000000000005,mblk_io_submit,minixdf,barrier=0x0000000000000000,grpjquota=,bsddf,
[  149.464016][ T3623] EXT4-fs error (device loop1): ext4_validate_block_bitmap:418: comm syz-executor.1: bg 0: block 234: padding at end of block bitmap is not set
[  149.479415][ T3620] EXT4-fs (loop2): Ignoring removed orlov option
[  149.485267][ T3623] EXT4-fs (loop1): Remounting filesystem read-only
[  149.485914][ T3620] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option
[  149.515525][ T3616] F2FS-fs (loop0): invalid crc value
[  149.520931][ T3616] F2FS-fs (loop0): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root
[  149.535900][ T3616] F2FS-fs (loop0): Found nat_bits in checkpoint
[  149.535923][ T3620] EXT4-fs (loop2): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,sysvgroups,debug_want_extra_isize=0x0000000000000080,orlov,errors=continue,jqfmt=vfsv1,nomblk_io_submit,,errors=continue
[  149.591113][   T23] audit: type=1400 audit(1718750133.860:209): avc:  denied  { mounton } for  pid=3619 comm="syz-executor.2" path="/root/syzkaller-testdir24446959/syzkaller.3CtS48/128/file1/file0/bus" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[  149.617851][ T3620] 9pnet: Insufficient options for proto=fd
[  149.628481][ T3616] F2FS-fs (loop0): recover fsync data on readonly fs
[  149.631201][   T23] audit: type=1400 audit(1718750133.860:210): avc:  denied  { map } for  pid=3619 comm="syz-executor.2" path="/root/syzkaller-testdir24446959/syzkaller.3CtS48/128/file1/file0/bus" dev="devtmpfs" ino=9198 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  149.637054][ T3616] F2FS-fs (loop0): Cannot turn on quotas: -2 on 0
[  149.665981][   T23] audit: type=1400 audit(1718750133.880:211): avc:  denied  { mounton } for  pid=3619 comm="syz-executor.2" path="/root/syzkaller-testdir24446959/syzkaller.3CtS48/128/file1/file0/file0" dev="loop2" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  149.676384][ T3616] F2FS-fs (loop0): Cannot turn on quotas: -2 on 1
[  149.721673][  T374] ==================================================================
[  149.722127][   T23] audit: type=1400 audit(1718750133.950:212): avc:  denied  { create } for  pid=3619 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1
[  149.730096][  T374] BUG: KASAN: use-after-free in ext4_xattr_delete_inode+0xc1f/0xc30
[  149.730106][  T374] Read of size 4 at addr ffff8881e2d50000 by task syz-executor.2/374
[  149.730107][  T374] 
[  149.730128][  T374] CPU: 0 PID: 374 Comm: syz-executor.2 Not tainted 5.4.274-syzkaller-00002-g6f97bd951d82 #0
[  149.730133][  T374] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024
[  149.730136][  T374] Call Trace:
[  149.730160][  T374]  dump_stack+0x1d8/0x241
[  149.750597][   T23] audit: type=1400 audit(1718750133.990:213): avc:  denied  { remove_name } for  pid=374 comm="syz-executor.2" name="lost+found" dev="loop2" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  149.758348][  T374]  ? nf_ct_l4proto_log_invalid+0x258/0x258
[  149.758364][  T374]  ? printk+0xd1/0x111
[  149.766503][   T23] audit: type=1400 audit(1718750133.990:214): avc:  denied  { rmdir } for  pid=374 comm="syz-executor.2" name="lost+found" dev="loop2" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  149.768606][  T374]  ? ext4_xattr_delete_inode+0xc1f/0xc30
[  149.783713][   T23] audit: type=1400 audit(1718750133.990:215): avc:  denied  { unlink } for  pid=374 comm="syz-executor.2" name="file0" dev="loop2" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  149.788865][  T374]  print_address_description+0x8c/0x600
[  149.797709][   T23] audit: type=1400 audit(1718750133.990:216): avc:  denied  { unlink } for  pid=374 comm="syz-executor.2" name="file1" dev="loop2" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1
[  149.820659][  T374]  ? ext4_xattr_delete_inode+0xc1f/0xc30
[  149.820671][  T374]  __kasan_report+0xf3/0x120
[  149.820681][  T374]  ? ext4_xattr_delete_inode+0xc1f/0xc30
[  149.820690][  T374]  kasan_report+0x30/0x60
[  149.820701][  T374]  ext4_xattr_delete_inode+0xc1f/0xc30
[  149.820716][  T374]  ? check_preemption_disabled+0x9f/0x320
[  149.820736][  T374]  ? ext4_expand_extra_isize_ea+0x1bb0/0x1bb0
[  149.953069][  T374]  ? __ext4_journal_start_sb+0x295/0x460
[  149.959204][  T374]  ext4_evict_inode+0x1378/0x1ac0
[  149.964349][  T374]  ? ext4_truncate_restart_trans+0xe0/0xe0
[  149.970357][  T374]  ? wb_io_lists_depopulated+0x85/0x170
[  149.980097][  T374]  ? ext4_truncate_restart_trans+0xe0/0xe0
[  149.987539][  T374]  evict+0x29b/0x6a0
[  149.991644][  T374]  vfs_rmdir+0x24b/0x3c0
[  149.996490][  T374]  do_rmdir+0x2c1/0x580
[  150.000826][  T374]  ? d_delete_notify+0xc0/0xc0
[  150.006865][  T374]  ? _raw_spin_unlock_irq+0x4a/0x60
[  150.012651][  T374]  do_syscall_64+0xca/0x1c0
[  150.017220][  T374]  entry_SYSCALL_64_after_hwframe+0x5c/0xc1
[  150.022939][  T374] RIP: 0033:0x7fc48b05f707
[  150.027796][  T374] Code: 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 07 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
[  150.047353][  T374] RSP: 002b:00007fff9072c188 EFLAGS: 00000207 ORIG_RAX: 0000000000000107
[  150.056268][  T374] RAX: ffffffffffffffda RBX: 0000000000000065 RCX: 00007fc48b05f707
[  150.064539][  T374] RDX: 0000000000000200 RSI: 00007fff9072d330 RDI: 00000000ffffff9c
[  150.073181][  T374] RBP: 00007fc48b0bc6c6 R08: 0000000000000000 R09: 0000000000000000
[  150.081515][  T374] R10: 0000000000000100 R11: 0000000000000207 R12: 00007fff9072d330
[  150.089422][  T374] R13: 00007fc48b0bc6c6 R14: 0000000000024794 R15: 000000000000001e
[  150.097338][  T374] 
[  150.099493][  T374] Allocated by task 3522:
[  150.103687][  T374]  __kasan_kmalloc+0x171/0x210
[  150.108274][  T374]  copy_mount_options+0x5c/0x300
[  150.113128][  T374]  ksys_mount+0x97/0xf0
[  150.117205][  T374]  __x64_sys_mount+0xb1/0xc0
[  150.121632][  T374]  do_syscall_64+0xca/0x1c0
[  150.126008][  T374]  entry_SYSCALL_64_after_hwframe+0x5c/0xc1
[  150.132395][  T374] 
[  150.134543][  T374] Freed by task 3522:
[  150.138618][  T374]  __kasan_slab_free+0x1b5/0x270
[  150.143474][  T374]  kfree+0x123/0x370
[  150.147322][  T374]  ksys_mount+0xcd/0xf0
[  150.151523][  T374]  __x64_sys_mount+0xb1/0xc0
[  150.155933][  T374]  do_syscall_64+0xca/0x1c0
[  150.160264][  T374]  entry_SYSCALL_64_after_hwframe+0x5c/0xc1
[  150.166001][  T374] 
[  150.168188][  T374] The buggy address belongs to the object at ffff8881e2d50000
[  150.168188][  T374]  which belongs to the cache kmalloc-4k of size 4096
[  150.182273][  T374] The buggy address is located 0 bytes inside of
[  150.182273][  T374]  4096-byte region [ffff8881e2d50000, ffff8881e2d51000)
[  150.195948][  T374] The buggy address belongs to the page:
[  150.201962][  T374] page:ffffea00078b5400 refcount:1 mapcount:0 mapping:ffff8881f5c0c280 index:0x0 compound_mapcount: 0
[  150.213066][  T374] flags: 0x8000000000010200(slab|head)
[  150.218971][  T374] raw: 8000000000010200 0000000000000000 0000000200000001 ffff8881f5c0c280
[  150.227726][  T374] raw: 0000000000000000 0000000000040004 00000001ffffffff 0000000000000000
[  150.236289][  T374] page dumped because: kasan: bad access detected
[  150.245113][  T374] page_owner tracks the page as allocated
[  150.251085][  T374] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL)
[  150.267525][  T374]  prep_new_page+0x18f/0x370
[  150.272075][  T374]  get_page_from_freelist+0x2d13/0x2d90
[  150.277405][  T374]  __alloc_pages_nodemask+0x393/0x840
[  150.282698][  T374]  alloc_slab_page+0x39/0x3c0
[  150.287425][  T374]  new_slab+0x97/0x440
[  150.291323][  T374]  ___slab_alloc+0x2fe/0x490
[  150.295729][  T374]  __slab_alloc+0x62/0xa0
[  150.299973][  T374]  __kmalloc+0x19b/0x2e0
[  150.304065][  T374]  kvmalloc_node+0x7e/0xf0
[  150.308314][  T374]  pfifo_fast_init+0x109/0x760
[  150.312925][  T374]  qdisc_create_dflt+0x129/0x250
[  150.317863][  T374]  mq_init+0x2c8/0x6b0
[  150.321839][  T374]  qdisc_create_dflt+0x129/0x250
[  150.326718][  T374]  dev_activate+0x11f/0xc00
[  150.331041][  T374]  __dev_open+0x302/0x420
[  150.335227][  T374]  __dev_change_flags+0x1db/0x6e0
[  150.340070][  T374] page last free stack trace:
[  150.344773][  T374]  __free_pages_ok+0x847/0x950
[  150.349382][  T374]  __free_pages+0x91/0x140
[  150.353610][  T374]  __free_slab+0x221/0x2e0
[  150.358248][  T374]  unfreeze_partials+0x14e/0x180
[  150.363023][  T374]  put_cpu_partial+0x44/0x180
[  150.367532][  T374]  __slab_free+0x297/0x360
[  150.371786][  T374]  qlist_free_all+0x43/0xb0
[  150.376217][  T374]  quarantine_reduce+0x1d9/0x210
[  150.380993][  T374]  __kasan_kmalloc+0x41/0x210
[  150.385504][  T374]  kmem_cache_alloc+0xd9/0x250
[  150.390100][  T374]  getname_flags+0xb8/0x4e0
[  150.394527][  T374]  do_sys_open+0x357/0x810
[  150.398796][  T374]  do_syscall_64+0xca/0x1c0
[  150.403133][  T374]  entry_SYSCALL_64_after_hwframe+0x5c/0xc1
[  150.409448][  T374] 
[  150.411616][  T374] Memory state around the buggy address:
[  150.417102][  T374]  ffff8881e2d4ff00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  150.425015][  T374]  ffff8881e2d4ff80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  150.433211][  T374] >ffff8881e2d50000: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  150.441212][  T374]                    ^
[  150.445222][  T374]  ffff8881e2d50080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  150.453403][  T374]  ffff8881e2d50100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  150.461767][  T374] ==================================================================
[  150.469936][  T374] Disabling lock debugging due to kernel taint
2024/06/18 22:35:34 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF
[  150.476197][   T23] audit: type=1400 audit(1718750133.990:217): avc:  denied  { unmount } for  pid=374 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1
[  150.510266][ T3616] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  150.563506][   T23] audit: type=1400 audit(1718750133.990:218): avc:  denied  { unlink } for  pid=374 comm="syz-executor.2" name="bus" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1