last executing test programs:

1m9.00218678s ago: executing program 2 (id=121):
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={0xffffffffffffffff, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000240)="060043076003008cb89e08f086dd", 0x0, 0x5, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000140)=@req3={0x10000, 0x1, 0x100, 0x100, 0xe, 0x0, 0x3}, 0x1c)
sendmmsg(r0, &(0x7f0000000e00)=[{{&(0x7f0000000080)=@qipcrtr={0x2a, 0x3, 0x4001}, 0x80, 0x0}}, {{&(0x7f0000000240)=@hci={0x1f, 0x800, 0x2}, 0x80, 0x0}}], 0x2, 0x45)

1m8.950691746s ago: executing program 2 (id=122):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}})
read$FUSE(r0, &(0x7f0000002140)={0x2020, 0x0, <r1=>0x0, <r2=>0x0, <r3=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1, {0x7, 0x29, 0x9, 0xffffffff9880edd4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9}}, 0x50)
r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x18)
syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(r0, &(0x7f00000063c0)="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", 0x2000, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x150, 0x0, 0xfffffffffffffff9, [{{0x5, 0x1, 0x1, 0x2, 0x2, 0x2c73, {0x6, 0x8, 0x5, 0x8302, 0x4, 0x9, 0x5, 0x5, 0x2, 0xa000, 0xfffffffe, r2, r3, 0xba4, 0x1}}, {0x4, 0x2, 0x8, 0x2, 'rootmode'}}, {{0x5, 0x2, 0x0, 0x0, 0x2, 0x0, {0x4, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x6, 0x8, 0x5670, 0x8, 0x4, 0x6000, 0x9c5, 0x0, r3, 0x78d9, 0x5}}, {0x1, 0x4, 0x1, 0xbfa1, '\x00'}}]}, 0x0, 0x0, 0x0})
getdents64(r4, 0x0, 0xc0)

1m7.99557711s ago: executing program 2 (id=141):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0)
open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
umount2(&(0x7f0000000340)='./file0/file0\x00', 0x8)

1m7.872382442s ago: executing program 2 (id=143):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x44, 0x2c, 0xd3f, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xb, 0xfff3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_fw={{0x7}, {0x18, 0x2, [@TCA_FW_INDEV={0x14, 0x3, 'hsr0\x00'}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x4004000)

1m7.798869649s ago: executing program 2 (id=145):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000800)={'filter\x00', 0x104, 0x4, 0x3c8, 0x110, 0x110, 0x110, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@arp={@empty, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac}, {@empty, {[0x0, 0x0, 0x0, 0xff]}}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 'dvmrp0\x00', 'netdevsim0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac, @empty, @dev={0xac, 0x14, 0x14, 0x41}, @rand_addr=0x64010101, 0x8, 0x1}}}, {{@arp={@loopback, @local, 0x0, 0x0, 0x0, 0x0, {@mac=@local}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pim6reg0\x00', 'veth0\x00', {}, {}, 0x0, 0x20}, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x80ca, 0x8}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418)

1m7.79225832s ago: executing program 32 (id=145):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000800)={'filter\x00', 0x104, 0x4, 0x3c8, 0x110, 0x110, 0x110, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@arp={@empty, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac}, {@empty, {[0x0, 0x0, 0x0, 0xff]}}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 'dvmrp0\x00', 'netdevsim0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac, @empty, @dev={0xac, 0x14, 0x14, 0x41}, @rand_addr=0x64010101, 0x8, 0x1}}}, {{@arp={@loopback, @local, 0x0, 0x0, 0x0, 0x0, {@mac=@local}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pim6reg0\x00', 'veth0\x00', {}, {}, 0x0, 0x20}, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x80ca, 0x8}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418)

37.09040734s ago: executing program 0 (id=687):
r0 = bpf$ITER_CREATE(0xb, 0x0, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000500)={r0, 0x58, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r1=>0x0}}, 0x10)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={0x0, &(0x7f0000000640)=""/43, 0x0, 0x2b, 0x0, 0x8}, 0x28)
bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@bloom_filter={0x1e, 0x0, 0x0, 0xfffffffa, 0x1080, 0xffffffffffffffff, 0xbf34, '\x00', r1, r2, 0x5, 0x1, 0x5, 0x5}, 0x50)

32.437731259s ago: executing program 0 (id=687):
r0 = bpf$ITER_CREATE(0xb, 0x0, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000500)={r0, 0x58, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r1=>0x0}}, 0x10)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={0x0, &(0x7f0000000640)=""/43, 0x0, 0x2b, 0x0, 0x8}, 0x28)
bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@bloom_filter={0x1e, 0x0, 0x0, 0xfffffffa, 0x1080, 0xffffffffffffffff, 0xbf34, '\x00', r1, r2, 0x5, 0x1, 0x5, 0x5}, 0x50)

30.882796522s ago: executing program 0 (id=687):
r0 = bpf$ITER_CREATE(0xb, 0x0, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000500)={r0, 0x58, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r1=>0x0}}, 0x10)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={0x0, &(0x7f0000000640)=""/43, 0x0, 0x2b, 0x0, 0x8}, 0x28)
bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@bloom_filter={0x1e, 0x0, 0x0, 0xfffffffa, 0x1080, 0xffffffffffffffff, 0xbf34, '\x00', r1, r2, 0x5, 0x1, 0x5, 0x5}, 0x50)

25.53606439s ago: executing program 3 (id=836):
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x3d, &(0x7f0000000000)='cgroup\x00\x8d\f\xf3\xcd\xc6X$\x01n-Hg\x144-.\xe2\x053\xe2\xf4\xbf[\xe9\xdddU\x91\x9d,\t\x8d\xc3@\x86,\x7f\xe2Z\xe8L\x80\xdbe~c\xbc\x9b\xcf\x9b\x1cH\x95\xf3'}, 0x30)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="0200"], 0x10)
socketpair(0x2, 0x1, 0x6, &(0x7f0000000140))

25.414951242s ago: executing program 3 (id=839):
bpf$BPF_PROG_QUERY(0x10, &(0x7f00000001c0)={@cgroup, 0xb, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)

24.890060304s ago: executing program 3 (id=845):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xc, 0xd, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000026000000850000000700000095"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000640)="d9b9547ed3c0021a6fd6a67ab922", 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

24.707320432s ago: executing program 0 (id=687):
r0 = bpf$ITER_CREATE(0xb, 0x0, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000500)={r0, 0x58, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r1=>0x0}}, 0x10)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={0x0, &(0x7f0000000640)=""/43, 0x0, 0x2b, 0x0, 0x8}, 0x28)
bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@bloom_filter={0x1e, 0x0, 0x0, 0xfffffffa, 0x1080, 0xffffffffffffffff, 0xbf34, '\x00', r1, r2, 0x5, 0x1, 0x5, 0x5}, 0x50)

23.989177173s ago: executing program 3 (id=845):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xc, 0xd, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000026000000850000000700000095"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000640)="d9b9547ed3c0021a6fd6a67ab922", 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

22.523356807s ago: executing program 0 (id=687):
r0 = bpf$ITER_CREATE(0xb, 0x0, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000500)={r0, 0x58, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r1=>0x0}}, 0x10)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={0x0, &(0x7f0000000640)=""/43, 0x0, 0x2b, 0x0, 0x8}, 0x28)
bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@bloom_filter={0x1e, 0x0, 0x0, 0xfffffffa, 0x1080, 0xffffffffffffffff, 0xbf34, '\x00', r1, r2, 0x5, 0x1, 0x5, 0x5}, 0x50)

22.451067464s ago: executing program 33 (id=687):
r0 = bpf$ITER_CREATE(0xb, 0x0, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000500)={r0, 0x58, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r1=>0x0}}, 0x10)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={0x0, &(0x7f0000000640)=""/43, 0x0, 0x2b, 0x0, 0x8}, 0x28)
bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@bloom_filter={0x1e, 0x0, 0x0, 0xfffffffa, 0x1080, 0xffffffffffffffff, 0xbf34, '\x00', r1, r2, 0x5, 0x1, 0x5, 0x5}, 0x50)

22.442437365s ago: executing program 3 (id=845):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xc, 0xd, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000026000000850000000700000095"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000640)="d9b9547ed3c0021a6fd6a67ab922", 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

22.39454268s ago: executing program 34 (id=845):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xc, 0xd, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000026000000850000000700000095"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000640)="d9b9547ed3c0021a6fd6a67ab922", 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

22.39174753s ago: executing program 35 (id=870):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000000040)=0xf2b, 0x4)
getsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000000100)=""/25, &(0x7f0000000180)=0x19)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x0, &(0x7f0000000200)})
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000000000071000040"])
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0)
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
accept4(0xffffffffffffffff, &(0x7f0000000040)=@alg, &(0x7f00000000c0)=0x80, 0x80800)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_NMI(r3, 0xae9a)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x4000081, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x5, 0x6, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x0, 0x1c, 0x0, 0xffffffffffffffff, 0x6], 0x0, 0x41901})
ioctl$KVM_RUN(r3, 0xae80, 0x0)

22.237355995s ago: executing program 36 (id=871):
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r2, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

22.19233081s ago: executing program 37 (id=867):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x3000, 0x0, 0x1})
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000380)={0x2, 0x34000, 0x1})
io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x2, 0x20002f7})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xe, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="3eaa00000000000071107a000000000095"], 0x0}, 0x94)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000000)={0x3000, 0x2000, 0x1})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000100)='./cgroup.cpu/cpuset.cpus\x00', 0xa10008, &(0x7f0000000040)=ANY=[], 0x81, 0x25f, &(0x7f0000000640)="$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")

22.079642451s ago: executing program 38 (id=869):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000030000"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000007200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r1}, 0x10)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], &(0x7f0000000840)=""/262, 0x37, 0x106, 0x1}, 0x20)

22.034820275s ago: executing program 8 (id=877):
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpu.idle\x00', 0x2, 0x0)
write$cgroup_int(r1, &(0x7f0000000200), 0x12)

22.034609296s ago: executing program 39 (id=877):
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpu.idle\x00', 0x2, 0x0)
write$cgroup_int(r1, &(0x7f0000000200), 0x12)

22.034541415s ago: executing program 9 (id=879):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x12, 0x0, &(0x7f0000000000)="b9ff03076044238c9e9e15f088a84cb688a8", 0x0, 0x0, 0x60000000, 0x0, 0xfffffe99, 0x0, 0x0}, 0x50)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)
recvmsg$unix(r0, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@rights={{0x14, 0x1, 0x1, [<r2=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r1, 0x1, 0x41, &(0x7f0000000040)=r2, 0x4)

21.948665714s ago: executing program 40 (id=879):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x12, 0x0, &(0x7f0000000000)="b9ff03076044238c9e9e15f088a84cb688a8", 0x0, 0x0, 0x60000000, 0x0, 0xfffffe99, 0x0, 0x0}, 0x50)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)
recvmsg$unix(r0, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@rights={{0x14, 0x1, 0x1, [<r2=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r1, 0x1, 0x41, &(0x7f0000000040)=r2, 0x4)

21.936964045s ago: executing program 2 (id=872):
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006100000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0x14, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0xa000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)

21.88968965s ago: executing program 41 (id=872):
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006100000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0x14, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0xa000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)

21.880538061s ago: executing program 3 (id=874):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000005e500000200000009", @ANYRES32=0x0, @ANYBLOB], 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x75, r0}, 0x38)

21.778510131s ago: executing program 42 (id=874):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000005e500000200000009", @ANYRES32=0x0, @ANYBLOB], 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x75, r0}, 0x38)

21.734596385s ago: executing program 0 (id=873):
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="b4050000200080066110000000000000c6000000000000009500d800000000009f33ef60916e55893f1eeb0b2ae13d922e6235592ce847e2566c43d72918a897323fd0723043c47c896ce0bce66a245ad9d6817fd98cd824498949714ffaac8a6f77ef0000ca5d82054d54d53cd2b6db714e75d9bdae214fa68a0557eb2c5ca683a4b6fcfcff0bffffffffffd47042eaebfa6fa26fa7a347c7faa8e700458c60897d4a6148a1c11428427c40de60beacf871ab5c2ff88a02084e5b5271e45f00003826fb8579c1fb01d2c5553d2ccb5fc5b51fe6b174ebd9907dcff414ed55b0c20cdbe7009a6fe7cc78762f1d4dcdbca64920db9a50f86c21632f7a4bd344e0bd74ff05d37ef68e3b9db863c758ffffffffabe90ac5d08dd9d4e0359c41cf3626e1230bc1cd4c02c460ceb44276e9bd94d1c2e6d17dc5c2edf332a62f5fe68fbbbbfcfd00000000000fbf940e6652d357474ed5f816f66ac3027460ae66317f83cdd7a7eb2a7003d1a6cf5478533584961c329fcf5a43e05c92bfef0dcd28000000003f2915a3039c9a78f63b8ec7e60a0000fed7d67c440e23d130e51eea1e085bebabe7059de9cbfc5117c024185a062acb6b8eec31c21b3af8b9eedb4660ed2deb7acf2a33a376a5cb7d4266d5b0be14488d14b473502486ad8dd600000000000000000000c7766ea7c581782c0d90f42a85303835fc291c25d29e6bead5d7360f2e1929d7736ebc8558c4506407d3046022bdf25485bd5442169e9b4c1278343581b7a06f65e8ea6b042c4fd08381e5000000000000006398d6480000001a723b91030000006480304c66b217aea0156ce9eef911fe5b7370f79987303ecb3aabc53c60014a0101ab766754f596b41da9534d12b8306a1b36cf3b03f0d790879f523eabfbee83d8bd472ef69660cf6ec897106c51e54a17497f384c4956b41f3843e7c878b1e11316d8ddae1c6c3b85aaf7a9fcaf8f5d6186c42542d68ba72682c938d3c0a2e6e10eed71b1d31c9f300b41745329bf34495c63e43fb896e4903fb0fae54a8f0fe3b48a5b29d279070647e65097c8ecf32a15080000000000000001007ba4a70a084bd994ac5e00000000000000000000000000351a30cd97f83d72631d0fe92efa974a53f4dc1eb9a86df632a6d463688123f64d42a919bcfc44a90ffd680200000091f842a91c977f6075d07e39e669b0713af0498a99bf5261cb3269d499a5202d7a08b33ade7b38829b9bd39619688d5e9af22170ef83e5b92cbb32b655c45de1c154aad81bf64351668a3f76d5afa958aff76249e0ffdf8e45155536a1a44bfcbfbfd232af000052f9002a"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x12, 0x5, 0x4, 0x12}, 0x50)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[@ANYRES32=r1, @ANYRES32=r0, @ANYBLOB="05"], 0x10)
close(r0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000380))
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff})
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r1}, &(0x7f0000000500), &(0x7f0000000540)=r0}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r1}, &(0x7f0000000000), &(0x7f0000000080)=r2}, 0x20)

21.734462155s ago: executing program 43 (id=873):
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x12, 0x5, 0x4, 0x12}, 0x50)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[@ANYRES32=r1, @ANYRES32=r0, @ANYBLOB="05"], 0x10)
close(r0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000380))
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff})
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r1}, &(0x7f0000000500), &(0x7f0000000540)=r0}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r1}, &(0x7f0000000000), &(0x7f0000000080)=r2}, 0x20)

5.939805234s ago: executing program 5 (id=1072):
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0)
syz_mount_image$fuse(&(0x7f0000000100), &(0x7f0000002080)='./file0\x00', 0x8000, &(0x7f0000000380)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0)
write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="2d0000000400000000000000000000000100000000c01fa8"], 0x2d)

5.022842754s ago: executing program 5 (id=1077):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0)
ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x1000)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000730000400000000081"])
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

4.569764109s ago: executing program 5 (id=1087):
openat(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x711301, 0x58)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000)
r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/igmp\x00')
pread64(r3, &(0x7f0000000180)=""/15, 0xfffffe9c, 0xb6)

4.294653656s ago: executing program 7 (id=1089):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6, 0x0, 0x40, 0x7f}, 0x1c)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'syz_tun\x00', <r2=>0x0})
bind$packet(r1, &(0x7f0000000300)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14)
syz_emit_ethernet(0x32, &(0x7f00000002c0)={@random="e904a200", @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0xe000, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x10, 0x0, @gue={{0x2, 0x1, 0x1, 0x4}}}}}}}, 0x0)

4.186406277s ago: executing program 7 (id=1091):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0)
sendmsg$sock(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000640)=@l2tp={0x2, 0x0, @rand_addr=0x64010100, 0x1}, 0x80, 0x0}, 0x4008015)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

3.997746975s ago: executing program 7 (id=1095):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240))
epoll_create1(0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180))
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd, 0x400000, 0x0, 0xffffffffffffff1b, 0x7a}, 0x0, &(0x7f0000000280)={0x3fc, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)

3.477449077s ago: executing program 5 (id=1100):
r0 = syz_usb_connect(0x2, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="0f011001daa18c4089612d187301010203010902240001000000000904"], 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)

3.131332751s ago: executing program 7 (id=1101):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x56a, 0x16, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x38, 0x0, [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0xb, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0xfe, 0x8, 0x1}}}}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, &(0x7f0000000180)={0x0, 0x9, 0x9, {0x9, 0x23, "5e1ae4e8aa3945"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)

1.457977236s ago: executing program 5 (id=1125):
socket$nl_generic(0x10, 0x3, 0x10)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/vmallocinfo\x00', 0x0, 0x0)
socket(0x10, 0x80002, 0x0)
pipe2(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
syz_usb_connect$uac1(0x0, 0xa4, &(0x7f00000001c0)=ANY=[@ANYBLOB="2a01000020000040b708000000000000430109029200030172e5000904000000010100000a24010000000201020c0d240700000500006e626805000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r1, @ANYBLOB="05", @ANYRES16=r0, @ANYRES16=r1], 0x0)

1.206710231s ago: executing program 1 (id=1129):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_int(r0, 0x29, 0x7, &(0x7f0000000040)=0x3, 0x4)

1.138977438s ago: executing program 4 (id=1131):
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r0, &(0x7f0000000340)={0x1f, @none}, 0x3)

1.138750908s ago: executing program 4 (id=1132):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x2008002, &(0x7f00000000c0)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1000}}, {@nodiscard}, {@quota}]}, 0x1, 0x558, &(0x7f0000000680)="$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")
syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x10000, 0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x148)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x42)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r1, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @desc2}})
write$P9_RLERRORu(r0, 0x0, 0x0)

1.138637348s ago: executing program 1 (id=1133):
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x1000000, &(0x7f0000000000), 0x1, 0x7b9, &(0x7f00000007c0)="$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")
open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x68)
r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0)
write$cgroup_subtree(r0, &(0x7f00000000c0)={[{0x2d, 'rlimit'}]}, 0x8)

1.11192196s ago: executing program 7 (id=1134):
pipe(0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/tty/ldiscs\x00', 0x0, 0x0)
pread64(r0, &(0x7f0000000080)=""/79, 0x4f, 0x7f)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff})
connect$unix(r2, 0x0, 0x0)
r3 = socket$inet6(0xa, 0x80002, 0x0)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e2a, 0xffffffff, @mcast2, 0x9}, 0x1c)
setsockopt$inet6_IPV6_DSTOPTS(r3, 0x29, 0x3b, &(0x7f0000000140)={0x3a}, 0x8)
sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00)

1.039427847s ago: executing program 1 (id=1135):
r0 = open(&(0x7f00000000c0)='./bus\x00', 0x147c7c, 0x10)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0)
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000080)={0x20000004})
accept4(0xffffffffffffffff, &(0x7f0000000040)=@alg, &(0x7f00000000c0)=0x80, 0x80800)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[], 0x44}}, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_NMI(r3, 0xae9a)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0xe331, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0xfffffffffffffffd, 0x5, 0x0, 0x0, 0xffffffffffffffff]})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x5, 0x6, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x0, 0x1c, 0x0, 0xffffffffffffffff, 0x6], 0x0, 0x41901})
ioctl$KVM_RUN(r3, 0xae80, 0x0)

788.527802ms ago: executing program 4 (id=1136):
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000001740), 0x188580, 0x0)
ioctl$PTP_PEROUT_REQUEST2(r0, 0x40383d0c, &(0x7f0000000040)={{0x0, 0x400}, {0x0, 0x101}, 0x21, 0x6})

788.064122ms ago: executing program 7 (id=1137):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000600)=0x8)
r0 = getpid()
r1 = timerfd_create(0x0, 0x80800)
readv(r1, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5}, 0x50)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001100)={{r4, <r5=>0xffffffffffffffff}, &(0x7f0000001080), &(0x7f00000010c0)='%pI4   \x00'}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="9800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r5, <r6=>0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000300)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32=r6], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r8)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, r9, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@void, @void}}}, 0x14}}, 0x4000054)

787.506872ms ago: executing program 1 (id=1138):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r1, 0x105, 0x70bd2d, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x48004)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r0)

690.202362ms ago: executing program 1 (id=1139):
syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x1a00404, &(0x7f0000000080)={[{@grpquota}, {@nomblk_io_submit}]}, 0x1, 0xbac, &(0x7f00000017c0)="$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")
creat(&(0x7f0000000280)='./bus\x00', 0x2)
r0 = open(&(0x7f0000000200)='./bus\x00', 0x44000, 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r0, 0xc0096616, 0x0)

503.511431ms ago: executing program 4 (id=1140):
r0 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'lo\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@bridge_newneigh={0x24, 0x1c, 0x1, 0x70bd2c, 0x25dfdbff, {0x2, 0x0, 0x0, r1, 0x2, 0x7, 0x8}, [@NDA_DST_IPV4={0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0x0)

472.896324ms ago: executing program 4 (id=1141):
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0xa00008, &(0x7f0000000000), 0x1, 0x7c8, &(0x7f0000001280)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x18e)
write$binfmt_elf64(r0, &(0x7f0000000400)=ANY=[], 0x78)
close(r0)

413.983879ms ago: executing program 6 (id=1142):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000040)='GPL\x00'}, 0x80)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000780)=ANY=[@ANYRES32, @ANYRES32=r0, @ANYBLOB="1100"], 0x14)

342.932517ms ago: executing program 1 (id=1143):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000cc0)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000f80)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e00)={0x40, 0x13, 0x6, @local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)

342.603257ms ago: executing program 6 (id=1144):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000f9ffff030000000000000000850000002c00000095"], &(0x7f0000000040)='GPL\x00', 0x5, 0xbf, &(0x7f00000020c0)=""/191}, 0x80)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r2=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r1, r2}, 0x10)
syz_emit_ethernet(0x5e, &(0x7f0000000140)={@broadcast, @random="865bf01e5196", @val={@val, {0x8100, 0x4, 0x0, 0x4}}, {@canfd={0xd, {{0x2, 0x0, 0x1}, 0xb, 0x2, 0x0, 0x0, "439cc99a9cb8de1e23f45b87d13b41f2562701f1862b1063d6c500e9a1fd77d2cd8416bfb9c45d348d10b03ce03fa0ea160bb20edb4c31fbdc430a70d975ddf4"}}}}, 0x0)

339.951716ms ago: executing program 4 (id=1145):
openat(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x711301, 0x58)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x2, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x10}, 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$netlink(0x10, 0x3, 0x0)
r4 = accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000280))
sendmmsg$inet(r4, &(0x7f0000007b40), 0x0, 0x40)
r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0)
fcntl$setstatus(r5, 0x4, 0x42000)

339.785257ms ago: executing program 6 (id=1146):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000000000000f3000040"])

159.907944ms ago: executing program 6 (id=1147):
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000002c0), 0x40, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7030000000000008500000053000000b70000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000340)="c1dfb080cd21d308098ee68886dd", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

127.052077ms ago: executing program 6 (id=1148):
openat(0xffffffffffffff9c, &(0x7f0000000740)='./file1\x00', 0x183042, 0x15)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mount$incfs(&(0x7f00000007c0)='.\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000840), 0x1004002, 0x0)
chdir(&(0x7f00000001c0)='./bus\x00')
syz_mount_image$fuse(0x0, &(0x7f0000000580)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
renameat2(0xffffffffffffff9c, &(0x7f00000007c0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000680)='./file1\x00', 0x2)

10.921099ms ago: executing program 6 (id=1149):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
openat(0xffffffffffffff9c, 0x0, 0x101d81, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r0}, 0x10)
pause()
socket$inet(0x2, 0x6, 0x2)

0s ago: executing program 5 (id=1150):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2800c1e, &(0x7f0000000040)={[{@test_dummy_encryption}, {@usrjquota}]}, 0xff, 0x249, &(0x7f0000000500)="$eJzs3T9oJGUcBuB3ZneNuVvk1EYQ/4CIaCCcnWBzNgoHchwiggoRERslEWKCXWJlY6G1SiqbIHZGS0kTbBTBKmqK2AgaLAwWWqzsTiIx2aBx484l8zwwOzM7881vhpn3m2VhmACNdSnJlSStJFNJOkmKgyvcWw2X9mZXJjdmkl7vqV+KwXrVfGW/3cUky0keSbJeFnmlnSyuPbf92+YTD7y90Ln/w7VnJ8d6kHt2tree3P3g2lufXH148atvfrpW5Eq6fzuu01cM+a5dJLf9H8VuEEW77j3g37j+xsff9nN/e5L7BvnvpEx18t6Zv2m9k4feP67tuz9/fec49xU4fb1ep38PXO4BjVMm6aYop5NU02U5PV39hv+udaF8dW7+9amX5xZmX6q7pwJOSzfZevyziU8vHsr/j60q/8A5Vf0ptfX09dXv+xO7rZM2Bc6ku6pR//4/9cLSgzlh/oGzT/6hueQfmkv+obnkH5pL/qG55B+aS/6hueQfmkv+4ZybOH7RwfwDAM3Sm6j7CWSgLnX3PwAAAAAAAAAAAAAAAAAAwFErkxsz+8O4an7xXrLzWJL2sPqtwfuIk5sHnxd+Lfqr/aWomo3k+XtG3MCIPqr56etbfqi3/pd311t/aTZZfjPJ5Xb76PVX7F1//92t/7C88+KIBU7o8Lt7H31mvPUP+2O13vpXN5PP+/3P5WH9T5k7BuPh/U+3f/5GrP/a7yNuAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgLH5MwAA//8lhG1E")
openat(0xffffffffffffff9c, &(0x7f0000000740)='./file1\x00', 0x183042, 0x15)
lsetxattr$security_capability(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080), &(0x7f0000000000)=@v3={0x3000000, [{0x7fffffff, 0xabda}, {0x3, 0x2}], 0xee00}, 0x18, 0x1)
creat(&(0x7f0000000240)='./file1\x00', 0x0)

kernel console output (not intermixed with test programs):

=275 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   22.121894][   T28] audit: type=1400 audit(1760733146.109:73): avc:  denied  { open } for  pid=275 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   23.986369][  T285] bridge0: port 1(bridge_slave_0) entered blocking state
[   23.993485][  T285] bridge0: port 1(bridge_slave_0) entered disabled state
[   24.001013][  T285] device bridge_slave_0 entered promiscuous mode
[   24.008179][  T285] bridge0: port 2(bridge_slave_1) entered blocking state
[   24.015279][  T285] bridge0: port 2(bridge_slave_1) entered disabled state
[   24.022971][  T285] device bridge_slave_1 entered promiscuous mode
[   24.087527][  T283] bridge0: port 1(bridge_slave_0) entered blocking state
[   24.094661][  T283] bridge0: port 1(bridge_slave_0) entered disabled state
[   24.102188][  T283] device bridge_slave_0 entered promiscuous mode
[   24.120063][  T283] bridge0: port 2(bridge_slave_1) entered blocking state
[   24.127385][  T283] bridge0: port 2(bridge_slave_1) entered disabled state
[   24.135099][  T283] device bridge_slave_1 entered promiscuous mode
[   24.197768][  T287] bridge0: port 1(bridge_slave_0) entered blocking state
[   24.204894][  T287] bridge0: port 1(bridge_slave_0) entered disabled state
[   24.212507][  T287] device bridge_slave_0 entered promiscuous mode
[   24.223237][  T284] bridge0: port 1(bridge_slave_0) entered blocking state
[   24.230363][  T284] bridge0: port 1(bridge_slave_0) entered disabled state
[   24.238192][  T284] device bridge_slave_0 entered promiscuous mode
[   24.245441][  T284] bridge0: port 2(bridge_slave_1) entered blocking state
[   24.252715][  T284] bridge0: port 2(bridge_slave_1) entered disabled state
[   24.260327][  T284] device bridge_slave_1 entered promiscuous mode
[   24.266942][  T286] bridge0: port 1(bridge_slave_0) entered blocking state
[   24.274049][  T286] bridge0: port 1(bridge_slave_0) entered disabled state
[   24.281711][  T286] device bridge_slave_0 entered promiscuous mode
[   24.288592][  T287] bridge0: port 2(bridge_slave_1) entered blocking state
[   24.295775][  T287] bridge0: port 2(bridge_slave_1) entered disabled state
[   24.303333][  T287] device bridge_slave_1 entered promiscuous mode
[   24.320806][  T286] bridge0: port 2(bridge_slave_1) entered blocking state
[   24.327921][  T286] bridge0: port 2(bridge_slave_1) entered disabled state
[   24.335483][  T286] device bridge_slave_1 entered promiscuous mode
[   24.497870][  T285] bridge0: port 2(bridge_slave_1) entered blocking state
[   24.504970][  T285] bridge0: port 2(bridge_slave_1) entered forwarding state
[   24.512397][  T285] bridge0: port 1(bridge_slave_0) entered blocking state
[   24.519692][  T285] bridge0: port 1(bridge_slave_0) entered forwarding state
[   24.588386][  T286] bridge0: port 2(bridge_slave_1) entered blocking state
[   24.595951][  T286] bridge0: port 2(bridge_slave_1) entered forwarding state
[   24.603440][  T286] bridge0: port 1(bridge_slave_0) entered blocking state
[   24.610594][  T286] bridge0: port 1(bridge_slave_0) entered forwarding state
[   24.633893][  T283] bridge0: port 2(bridge_slave_1) entered blocking state
[   24.641086][  T283] bridge0: port 2(bridge_slave_1) entered forwarding state
[   24.648438][  T283] bridge0: port 1(bridge_slave_0) entered blocking state
[   24.655504][  T283] bridge0: port 1(bridge_slave_0) entered forwarding state
[   24.675720][  T284] bridge0: port 2(bridge_slave_1) entered blocking state
[   24.683110][  T284] bridge0: port 2(bridge_slave_1) entered forwarding state
[   24.690432][  T284] bridge0: port 1(bridge_slave_0) entered blocking state
[   24.697739][  T284] bridge0: port 1(bridge_slave_0) entered forwarding state
[   24.717179][  T287] bridge0: port 2(bridge_slave_1) entered blocking state
[   24.724454][  T287] bridge0: port 2(bridge_slave_1) entered forwarding state
[   24.732395][  T287] bridge0: port 1(bridge_slave_0) entered blocking state
[   24.739430][  T287] bridge0: port 1(bridge_slave_0) entered forwarding state
[   24.749990][   T43] bridge0: port 1(bridge_slave_0) entered disabled state
[   24.757749][   T43] bridge0: port 2(bridge_slave_1) entered disabled state
[   24.765160][   T43] bridge0: port 1(bridge_slave_0) entered disabled state
[   24.772827][   T43] bridge0: port 2(bridge_slave_1) entered disabled state
[   24.780338][   T43] bridge0: port 1(bridge_slave_0) entered disabled state
[   24.787919][   T43] bridge0: port 1(bridge_slave_0) entered disabled state
[   24.795125][   T43] bridge0: port 2(bridge_slave_1) entered disabled state
[   24.802447][   T43] bridge0: port 1(bridge_slave_0) entered disabled state
[   24.809775][   T43] bridge0: port 2(bridge_slave_1) entered disabled state
[   24.817235][   T43] bridge0: port 2(bridge_slave_1) entered disabled state
[   24.825727][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   24.833407][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   24.854365][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   24.862980][   T43] bridge0: port 1(bridge_slave_0) entered blocking state
[   24.870110][   T43] bridge0: port 1(bridge_slave_0) entered forwarding state
[   24.878898][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   24.897104][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   24.905563][   T43] bridge0: port 2(bridge_slave_1) entered blocking state
[   24.913166][   T43] bridge0: port 2(bridge_slave_1) entered forwarding state
[   24.928359][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   24.945149][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   24.953008][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   24.961582][   T43] bridge0: port 1(bridge_slave_0) entered blocking state
[   24.971466][   T43] bridge0: port 1(bridge_slave_0) entered forwarding state
[   24.993784][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   25.002310][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   25.010606][   T43] bridge0: port 2(bridge_slave_1) entered blocking state
[   25.017779][   T43] bridge0: port 2(bridge_slave_1) entered forwarding state
[   25.025799][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   25.035065][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   25.043640][   T43] bridge0: port 1(bridge_slave_0) entered blocking state
[   25.050849][   T43] bridge0: port 1(bridge_slave_0) entered forwarding state
[   25.058330][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   25.067197][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   25.075587][   T43] bridge0: port 2(bridge_slave_1) entered blocking state
[   25.082815][   T43] bridge0: port 2(bridge_slave_1) entered forwarding state
[   25.090455][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   25.099083][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   25.107462][   T43] bridge0: port 1(bridge_slave_0) entered blocking state
[   25.114559][   T43] bridge0: port 1(bridge_slave_0) entered forwarding state
[   25.122080][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   25.130445][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   25.139277][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   25.147774][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   25.166617][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   25.175121][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   25.183736][   T43] bridge0: port 2(bridge_slave_1) entered blocking state
[   25.190788][   T43] bridge0: port 2(bridge_slave_1) entered forwarding state
[   25.198604][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   25.206751][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   25.214511][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   25.223651][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   25.232380][   T43] bridge0: port 1(bridge_slave_0) entered blocking state
[   25.239720][   T43] bridge0: port 1(bridge_slave_0) entered forwarding state
[   25.247342][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   25.255730][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   25.264268][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   25.273161][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   25.281605][   T43] bridge0: port 2(bridge_slave_1) entered blocking state
[   25.288769][   T43] bridge0: port 2(bridge_slave_1) entered forwarding state
[   25.302212][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   25.310563][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   25.330137][  T285] device veth0_vlan entered promiscuous mode
[   25.338530][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   25.347654][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   25.356296][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   25.364904][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   25.373810][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   25.382907][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   25.391345][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   25.399600][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   25.408928][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   25.416773][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   25.436509][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   25.445021][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   25.453331][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   25.462727][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   25.475122][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   25.483594][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   25.492233][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   25.500982][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   25.521235][  T285] device veth1_macvtap entered promiscuous mode
[   25.528319][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   25.537657][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   25.546273][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   25.554921][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   25.574790][  T286] device veth0_vlan entered promiscuous mode
[   25.581824][  T283] device veth0_vlan entered promiscuous mode
[   25.592580][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   25.600922][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   25.609870][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   25.619428][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   25.627652][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   25.635949][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   25.644988][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   25.653653][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   25.662324][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   25.670821][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   25.679045][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   25.686839][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   25.694902][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   25.702983][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   25.713987][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   25.722493][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   25.730003][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   25.745643][  T287] device veth0_vlan entered promiscuous mode
[   25.753378][  T283] device veth1_macvtap entered promiscuous mode
[   25.761585][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   25.769816][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   25.777446][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   25.785214][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   25.793823][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   25.813094][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   25.821819][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   25.832143][  T284] device veth0_vlan entered promiscuous mode
[   25.847633][  T285] request_module fs-gadgetfs succeeded, but still no fs?
[   25.847690][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   25.864034][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   25.873052][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   25.881471][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   25.894075][  T284] device veth1_macvtap entered promiscuous mode
[   25.904550][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   25.913371][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   25.922041][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   25.933870][  T286] device veth1_macvtap entered promiscuous mode
[   25.945218][  T287] device veth1_macvtap entered promiscuous mode
[   26.079492][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   26.089890][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   26.101182][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   26.112013][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   26.700072][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   26.709143][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   26.719474][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   26.728193][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   26.736949][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   26.745574][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   26.772487][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   26.773438][   T28] kauditd_printk_skb: 30 callbacks suppressed
[   26.773454][   T28] audit: type=1400 audit(1760733150.839:104): avc:  denied  { create } for  pid=348 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   26.781075][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   26.940297][  T356] loop0: detected capacity change from 0 to 128
[   26.947281][   T28] audit: type=1400 audit(1760733150.999:105): avc:  denied  { create } for  pid=348 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   26.967944][  T356] EXT4-fs: Ignoring removed nomblk_io_submit option
[   26.979777][  T356] EXT4-fs (loop0): Test dummy encryption mode enabled
[   26.993924][   T28] audit: type=1326 audit(1760733151.059:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=353 comm="syz.4.5" exe="/root/syz-executor" sig=31 arch=c000003e syscall=39 compat=0 ip=0x7f8dce785e67 code=0x0
[   27.020055][   T28] audit: type=1400 audit(1760733151.069:107): avc:  denied  { create } for  pid=360 comm="syz.1.9" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[   27.042069][  T356] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[   27.052350][   T28] audit: type=1400 audit(1760733151.119:108): avc:  denied  { mount } for  pid=355 comm="syz.0.6" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[   27.074311][  T356] ext4 filesystem being mounted at /1/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   27.116942][   T28] audit: type=1400 audit(1760733151.179:109): avc:  denied  { write } for  pid=355 comm="syz.0.6" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   27.163357][  T356] fscrypt: AES-256-XTS using implementation "xts-aes-aesni"
[   27.198878][  T373] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1
[   27.208314][  T373] F2FS-fs (loop3): Unable to read 1th superblock
[   27.215201][  T373] I/O error, dev loop3, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1
[   27.224588][  T373] F2FS-fs (loop3): Unable to read 2th superblock
[   27.409815][  T377] loop3: detected capacity change from 0 to 256
[   27.416835][   T28] audit: type=1400 audit(1760733151.179:110): avc:  denied  { add_name } for  pid=355 comm="syz.0.6" name="cpu.stat" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   27.442218][   T28] audit: type=1400 audit(1760733151.179:111): avc:  denied  { create } for  pid=355 comm="syz.0.6" name="cpu.stat" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   27.442925][  T285] EXT4-fs (loop0): unmounting filesystem.
[   27.465145][   T28] audit: type=1400 audit(1760733151.179:112): avc:  denied  { create } for  pid=367 comm="syz.3.10" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   27.492715][  T362] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[   27.496798][   T28] audit: type=1400 audit(1760733151.179:113): avc:  denied  { setopt } for  pid=367 comm="syz.3.10" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   27.589782][  T380] netlink: 3 bytes leftover after parsing attributes in process `syz.0.12'.
[   28.401804][  T398] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[   28.409502][  T398] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[   28.601532][  T337] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready
[   28.626749][  T337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   28.639761][  T337] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready
[   28.648503][  T337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   28.656930][  T337] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   28.673017][  T337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   28.681363][  T337] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   28.690151][  T337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   29.034015][  T398] syz.4.17 (398) used greatest stack depth: 21944 bytes left
[   29.247598][    T6] usb 2-1: new full-speed USB device number 2 using dummy_hcd
[   29.652601][    T6] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[   29.669837][    T6] usb 2-1: New USB device found, idVendor=0566, idProduct=3004, bcdDevice= 0.00
[   29.691453][    T6] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   29.709574][    T6] usb 2-1: config 0 descriptor??
[   29.716265][  T410] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[   29.782053][  T434] netlink: 4 bytes leftover after parsing attributes in process `syz.3.31'.
[   29.877597][  T439] loop2: detected capacity change from 0 to 256
[   29.918505][  T443] capability: warning: `syz.0.35' uses deprecated v2 capabilities in a way that may be insecure
[   29.958041][   T19] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   29.974866][   T19] hid-generic 0000:0000:0000.0001: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[   30.139027][    T6] monterey 0003:0566:3004.0002: unknown main item tag 0x0
[   30.156549][    T6] monterey 0003:0566:3004.0002: item fetching failed at offset 3/5
[   30.164820][    T6] monterey: probe of 0003:0566:3004.0002 failed with error -22
[   30.191487][  T288] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   30.344848][    T6] usb 2-1: USB disconnect, device number 2
[   30.384736][  T288] usb 4-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65
[   30.418427][  T288] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   30.461735][  T288] usb 4-1: Product: syz
[   30.477541][  T288] usb 4-1: Manufacturer: syz
[   30.693772][  T288] usb 4-1: SerialNumber: syz
[   30.907583][  T288] usb 4-1: config 0 descriptor??
[   31.017245][  T473] loop1: detected capacity change from 0 to 8192
[   31.097590][  T475] loop1: detected capacity change from 0 to 16
[   31.117397][  T475] erofs: (device loop1): mounted with root inode @ nid 36.
[   31.136345][  T475] erofs: (device loop1): erofs_read_inode: bogus i_mode (4355) @ nid 46
[   31.221109][    T6] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   31.240391][  T479] netlink: 24 bytes leftover after parsing attributes in process `syz.1.49'.
[   31.288982][  T479] netlink: 4 bytes leftover after parsing attributes in process `syz.1.49'.
[   31.350788][  T486] process 'syz.4.51' launched './file0' with NULL argv: empty string added
[   31.390983][  T491] loop1: detected capacity change from 0 to 256
[   31.408872][  T491] FAT-fs (loop1): bogus logical sector size 65529
[   31.415808][  T491] FAT-fs (loop1): Can't find a valid FAT filesystem
[   31.424789][    T6] usb 3-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x7D, skipping
[   31.435724][    T6] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 255
[   31.447768][    T6] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   31.457503][    T6] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   31.470030][    T6] usb 3-1: Product: syz
[   31.482413][    T6] usb 3-1: Manufacturer: syz
[   31.487071][    T6] usb 3-1: SerialNumber: syz
[   31.699128][  T469] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[   31.811487][  T346] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[   31.992852][  T346] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[   32.003771][  T346] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   32.014736][  T346] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   32.024829][  T346] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[   32.038669][  T346] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[   32.047866][  T346] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[   32.056004][  T346] usb 2-1: Manufacturer: syz
[   32.061816][  T346] usb 2-1: config 0 descriptor??
[   32.308605][  T469] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[   32.475828][  T346] appleir 0003:05AC:8243.0003: unknown main item tag 0x0
[   32.539385][  T346] appleir 0003:05AC:8243.0003: No inputs registered, leaving
[   32.575032][  T510] loop4: detected capacity change from 0 to 128
[   32.639257][    T6] cdc_ncm 3-1:1.0: bind() failure
[   32.645973][    T6] cdc_ncm: probe of 3-1:1.1 failed with error -71
[   32.653725][  T337] Bluetooth: hci0: Frame reassembly failed (-84)
[   32.670272][    T6] cdc_mbim: probe of 3-1:1.1 failed with error -71
[   32.676949][   T28] kauditd_printk_skb: 42 callbacks suppressed
[   32.676964][   T28] audit: type=1400 audit(1760733156.729:156): avc:  denied  { append } for  pid=496 comm="syz.1.56" name="hiddev0" dev="devtmpfs" ino=604 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   32.686073][  T511] Bluetooth: hci0: Malformed Event: 0x02
[   32.714513][  T346] appleir 0003:05AC:8243.0003: hiddev96,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0
[   32.724110][    T6] usb 3-1: USB disconnect, device number 2
[   32.748936][  T514] device gretap1 entered promiscuous mode
[   32.792275][  T346] usb 2-1: USB disconnect, device number 3
[   32.904376][   T19] usb 4-1: USB disconnect, device number 2
[   32.932495][   T28] audit: type=1400 audit(1760733156.999:157): avc:  denied  { write } for  pid=521 comm="syz.3.64" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1
[   33.032634][  T527] netlink: 20 bytes leftover after parsing attributes in process `syz.3.66'.
[   33.053543][  T529] netlink: 'syz.3.67': attribute type 4 has an invalid length.
[   33.065084][  T529] syz.3.67 (529) used greatest stack depth: 20672 bytes left
[   33.081193][   T28] audit: type=1400 audit(1760733157.139:158): avc:  denied  { connect } for  pid=530 comm="syz.3.68" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   33.116353][   T28] audit: type=1400 audit(1760733157.139:159): avc:  denied  { setopt } for  pid=530 comm="syz.3.68" lport=46346 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   33.124873][  T535] loop2: detected capacity change from 0 to 256
[   33.152394][   T28] audit: type=1400 audit(1760733157.219:160): avc:  denied  { ioctl } for  pid=536 comm="syz.3.71" path="socket:[16022]" dev="sockfs" ino=16022 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   33.152471][  T537] device syzkaller0 entered promiscuous mode
[   33.193963][   T28] audit: type=1400 audit(1760733157.259:161): avc:  denied  { setopt } for  pid=536 comm="syz.3.71" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   33.213960][  T405] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[   33.225039][   T28] audit: type=1400 audit(1760733157.289:162): avc:  denied  { write } for  pid=534 comm="syz.2.69" laddr=::1 lport=60 faddr=::1 fport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   33.293049][   T28] audit: type=1400 audit(1760733157.359:163): avc:  denied  { name_bind } for  pid=542 comm="syz.2.74" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1
[   33.324842][   T28] audit: type=1400 audit(1760733157.359:164): avc:  denied  { read } for  pid=544 comm="syz.3.75" name="binder1" dev="binder" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[   33.349968][  T549] loop1: detected capacity change from 0 to 16
[   33.357625][  T549] erofs: (device loop1): erofs_fc_fill_super: rootino(nid 36) is not a directory(i_mode 26222)
[   33.375674][   T28] audit: type=1400 audit(1760733157.359:165): avc:  denied  { open } for  pid=544 comm="syz.3.75" path="/dev/binderfs/binder1" dev="binder" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[   33.427895][  T556] loop2: detected capacity change from 0 to 128
[   33.928074][  T567] netlink: 8 bytes leftover after parsing attributes in process `syz.2.83'.
[   33.943145][  T567] netlink: 8 bytes leftover after parsing attributes in process `syz.2.83'.
[   33.969644][  T573] loop4: detected capacity change from 0 to 512
[   34.222789][  T588] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1
[   34.232129][  T588] F2FS-fs (loop5): Unable to read 1th superblock
[   34.239194][  T588] I/O error, dev loop5, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1
[   34.248600][  T588] F2FS-fs (loop5): Unable to read 2th superblock
[   34.420255][  T565] syz.1.81 (565) used greatest stack depth: 20480 bytes left
[   34.549192][  T602] overlayfs: statfs failed on './file0'
[   34.581490][  T511] Bluetooth: hci0: command 0x1003 tx timeout
[   34.581543][   T45] Bluetooth: hci0: Opcode 0x1003 failed: -110
[   34.839505][  T607] Zero length message leads to an empty skb
[   34.853463][  T607] 9pnet_fd: Insufficient options for proto=fd
[   35.012230][  T607] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   36.060408][  T643] netlink: 'syz.2.114': attribute type 11 has an invalid length.
[   36.068396][  T643] netlink: 36 bytes leftover after parsing attributes in process `syz.2.114'.
[   36.078654][  T643] netlink: 'syz.2.114': attribute type 11 has an invalid length.
[   36.086448][  T641] loop4: detected capacity change from 0 to 8192
[   36.093588][  T643] netlink: 36 bytes leftover after parsing attributes in process `syz.2.114'.
[   36.103326][  T641] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   36.137324][  T647] loop2: detected capacity change from 0 to 512
[   36.210021][  T651] device syzkaller0 entered promiscuous mode
[   36.244677][  T655] 9pnet_fd: Insufficient options for proto=fd
[   36.817082][  T683] 9pnet_fd: Insufficient options for proto=fd
[   37.594517][  T709] bridge0: port 1(bridge_slave_0) entered blocking state
[   37.601923][  T709] bridge0: port 1(bridge_slave_0) entered disabled state
[   37.614815][  T709] device bridge_slave_0 entered promiscuous mode
[   37.623996][  T709] bridge0: port 2(bridge_slave_1) entered blocking state
[   37.631236][  T709] bridge0: port 2(bridge_slave_1) entered disabled state
[   37.639331][  T709] device bridge_slave_1 entered promiscuous mode
[   37.772980][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   37.780745][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   37.790124][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   38.029113][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   38.039545][    T8] bridge0: port 1(bridge_slave_0) entered blocking state
[   38.046657][    T8] bridge0: port 1(bridge_slave_0) entered forwarding state
[   38.091465][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   38.107423][  T337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   38.111948][  T730] loop4: detected capacity change from 0 to 128
[   38.116552][  T337] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   38.130811][  T337] bridge0: port 2(bridge_slave_1) entered blocking state
[   38.137919][  T337] bridge0: port 2(bridge_slave_1) entered forwarding state
[   38.150815][  T730] syz.4.150: attempt to access beyond end of device
[   38.150815][  T730] loop4: rw=2049, sector=138, nr_sectors = 112 limit=128
[   38.153754][  T337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   38.167483][  T730] syz.4.150: attempt to access beyond end of device
[   38.167483][  T730] loop4: rw=2049, sector=138, nr_sectors = 112 limit=128
[   38.173925][  T337] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   38.194691][  T337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   38.202964][  T337] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   38.219868][  T337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   38.228387][  T337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   38.263120][  T337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   38.271252][  T337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   38.280542][  T709] device veth0_vlan entered promiscuous mode
[   38.290467][  T337] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   38.299121][  T337] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   38.307775][   T10] device bridge_slave_1 left promiscuous mode
[   38.314474][   T10] bridge0: port 2(bridge_slave_1) entered disabled state
[   38.322636][   T10] device bridge_slave_0 left promiscuous mode
[   38.328925][   T10] bridge0: port 1(bridge_slave_0) entered disabled state
[   38.337684][   T10] device veth1_macvtap left promiscuous mode
[   38.343899][   T10] device veth0_vlan left promiscuous mode
[   38.467281][   T28] kauditd_printk_skb: 28 callbacks suppressed
[   38.467297][   T28] audit: type=1400 audit(1760733162.529:194): avc:  denied  { name_bind } for  pid=745 comm="syz.3.157" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1
[   38.510364][  T337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   38.525632][  T337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   38.556843][  T709] device veth1_macvtap entered promiscuous mode
[   38.600399][  T756] bridge0: port 2(bridge_slave_1) entered disabled state
[   38.607778][  T756] bridge0: port 1(bridge_slave_0) entered disabled state
[   38.629233][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   38.640927][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   38.653562][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   38.669962][  T756] bridge0: port 2(bridge_slave_1) entered forwarding state
[   38.677451][   T28] audit: type=1400 audit(1760733162.739:195): avc:  denied  { link } for  pid=759 comm="syz.0.163" name="#e" dev="tmpfs" ino=172 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[   38.699387][   T28] audit: type=1400 audit(1760733162.739:196): avc:  denied  { rename } for  pid=759 comm="syz.0.163" name="#f" dev="tmpfs" ino=172 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[   38.724586][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   38.735439][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   38.747982][  T760] device bridge_slave_1 left promiscuous mode
[   38.754713][  T760] bridge0: port 2(bridge_slave_1) entered disabled state
[   39.041945][  T760] device bridge_slave_0 left promiscuous mode
[   39.048607][  T760] bridge0: port 1(bridge_slave_0) entered disabled state
[   40.209800][  T784] loop0: detected capacity change from 0 to 16
[   40.262687][  T784] erofs: (device loop0): mounted with root inode @ nid 36.
[   40.275422][   T28] audit: type=1400 audit(1760733164.339:197): avc:  denied  { create } for  pid=792 comm="syz.1.175" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   40.291838][  T793] 8021q: VLANs not supported on ip6_vti0
[   40.305435][   T28] audit: type=1400 audit(1760733164.369:198): avc:  denied  { mount } for  pid=787 comm="syz.3.173" name="/" dev="ramfs" ino=18514 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1
[   40.328616][   T28] audit: type=1400 audit(1760733164.369:199): avc:  denied  { remount } for  pid=787 comm="syz.3.173" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1
[   40.348488][   T28] audit: type=1400 audit(1760733164.369:200): avc:  denied  { mounton } for  pid=787 comm="syz.3.173" path="/52/file0" dev="ramfs" ino=18514 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1
[   40.501926][  T804] fuse: Bad value for 'fd'
[   40.894415][  T812] netlink: 4 bytes leftover after parsing attributes in process `syz.1.181'.
[   41.044403][   T28] audit: type=1400 audit(1760733165.109:201): avc:  denied  { setopt } for  pid=826 comm="syz.4.188" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   41.106754][  T829] device syzkaller0 entered promiscuous mode
[   41.465501][   T28] audit: type=1400 audit(1760733165.529:202): avc:  denied  { unmount } for  pid=283 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1
[   41.543405][   T28] audit: type=1400 audit(1760733165.609:203): avc:  denied  { execute } for  pid=838 comm="syz.4.194" name="file0" dev="tmpfs" ino=273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[   41.660731][  T850] loop3: detected capacity change from 0 to 128
[   41.708085][  T854] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[   41.729082][  T854] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[   41.752188][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready
[   41.778743][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   41.794612][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready
[   41.808174][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   41.845598][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   41.853901][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   41.865980][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   41.874907][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   42.229776][  T874] capability: warning: `syz.4.206' uses 32-bit capabilities (legacy support in use)
[   42.262697][  T879] netlink: 4 bytes leftover after parsing attributes in process `syz.3.207'.
[   42.272760][  T879] netlink: 12 bytes leftover after parsing attributes in process `syz.3.207'.
[   42.413424][  T902] loop0: detected capacity change from 0 to 128
[   42.462786][  T905] device syzkaller0 entered promiscuous mode
[   42.588306][  T910] loop3: detected capacity change from 0 to 8192
[   42.639526][  T915] loop4: detected capacity change from 0 to 128
[   42.906198][  T938] loop3: detected capacity change from 0 to 128
[   42.923094][  T938] =======================================================
[   42.923094][  T938] WARNING: The mand mount option has been deprecated and
[   42.923094][  T938]          and is ignored by this kernel. Remove the mand
[   42.923094][  T938]          option from the mount to silence this warning.
[   42.923094][  T938] =======================================================
[   43.688566][  T972] device syzkaller0 entered promiscuous mode
[   43.704226][  T969] kvm [968]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00
[   43.713020][  T969] kvm [968]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00
[   44.084295][  T981] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3343437945 (53495007120 ns) > initial count (52285443328 ns). Using initial count to start timer.
[   44.361290][ T1002] loop5: detected capacity change from 0 to 2048
[   44.441360][   T28] kauditd_printk_skb: 12 callbacks suppressed
[   44.454515][   T28] audit: type=1400 audit(1760733168.499:216): avc:  denied  { bind } for  pid=1003 comm="syz.5.260" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   44.461139][ T1006] 9pnet_fd: Insufficient options for proto=fd
[   44.522419][ T1014] netlink: 8 bytes leftover after parsing attributes in process `syz.3.264'.
[   44.532790][ T1014] netlink: 8 bytes leftover after parsing attributes in process `syz.3.264'.
[   44.561707][ T1016] loop5: detected capacity change from 0 to 8192
[   44.590362][ T1016]  loop5: p1 p2 p3 p4[DM]
[   44.595302][ T1016] loop5: p1 size 835329 extends beyond EOD, truncated
[   44.606784][ T1016] loop5: p2 size 327680 extends beyond EOD, truncated
[   44.614557][ T1016] loop5: p3 start 1052673 is beyond EOD, truncated
[   44.621243][ T1016] loop5: p4 size 262144 extends beyond EOD, truncated
[   44.657602][ T1022] device syzkaller0 entered promiscuous mode
[   44.665205][   T28] audit: type=1400 audit(1760733168.729:217): avc:  denied  { write } for  pid=1019 comm="syz.3.268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   44.695696][  T362] udevd[362]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory
[   44.695713][  T334] udevd[334]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory
[   44.698633][  T405] udevd[405]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory
[   44.745286][ T1025] raw_sendmsg: syz.3.270 forgot to set AF_INET. Fix it!
[   45.181298][   T28] audit: type=1400 audit(1760733169.239:218): avc:  denied  { read write } for  pid=1034 comm="syz.3.274" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[   45.205954][   T28] audit: type=1400 audit(1760733169.239:219): avc:  denied  { open } for  pid=1034 comm="syz.3.274" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[   45.301439][   T45] Bluetooth: hci0: Opcode 0x1003 failed: -110
[   45.304407][  T509] Bluetooth: hci0: command 0x1003 tx timeout
[   46.177010][ T1094] device syzkaller0 entered promiscuous mode
[   46.307517][ T1105] netlink: 8 bytes leftover after parsing attributes in process `syz.3.301'.
[   46.342236][ T1107] kvm [1106]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00
[   46.350938][ T1107] kvm [1106]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00
[   46.354563][ T1110] netlink: 8 bytes leftover after parsing attributes in process `syz.3.303'.
[   46.369605][ T1110] netlink: 8 bytes leftover after parsing attributes in process `syz.3.303'.
[   46.395136][   T28] audit: type=1400 audit(1760733170.459:220): avc:  denied  { map } for  pid=1112 comm="syz.5.304" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=19956 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[   46.421526][   T28] audit: type=1400 audit(1760733170.459:221): avc:  denied  { read write } for  pid=1112 comm="syz.5.304" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=19956 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[   46.479237][ T1121] loop3: detected capacity change from 0 to 256
[   46.537657][ T1125] device syzkaller0 entered promiscuous mode
[   46.596369][ T1134] loop3: detected capacity change from 0 to 128
[   46.617389][ T1134] FAT-fs (loop3): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1)
[   46.618732][ T1130] loop5: detected capacity change from 0 to 8192
[   46.637597][ T1130] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   46.657502][   T43] FAT-fs (loop3): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1)
[   46.728647][ T1145] loop1: detected capacity change from 0 to 16
[   46.733789][ T1147] netlink: 12 bytes leftover after parsing attributes in process `syz.3.319'.
[   46.745333][ T1145] erofs: dax options not supported
[   46.769160][ T1147] 8021q: VLANs not supported on gre0
[   46.778050][ T1144] netlink: 8 bytes leftover after parsing attributes in process `syz.4.318'.
[   46.787882][ T1144] netlink: 8 bytes leftover after parsing attributes in process `syz.4.318'.
[   46.876892][ T1158] netlink: 12 bytes leftover after parsing attributes in process `syz.3.322'.
[   46.916318][   T28] audit: type=1400 audit(1760733170.979:222): avc:  denied  { setopt } for  pid=1161 comm="syz.3.325" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   47.607632][ T1186] kvm [1185]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00
[   47.616451][ T1186] kvm [1185]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00
[   47.656638][ T1189] netlink: 8 bytes leftover after parsing attributes in process `syz.1.335'.
[   47.666008][ T1189] netlink: 8 bytes leftover after parsing attributes in process `syz.1.335'.
[   47.725499][ T1195] 9p: Unknown Cache mode readahead
[   47.894524][   T28] audit: type=1400 audit(1760733171.959:223): avc:  denied  { create } for  pid=1207 comm="syz.1.343" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:fusefs_t tclass=chr_file permissive=1
[   47.996829][ T1217] device syzkaller0 entered promiscuous mode
[   48.019301][ T1222] netlink: 8 bytes leftover after parsing attributes in process `syz.4.348'.
[   48.080596][ T1228] kvm [1227]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00
[   48.094991][ T1228] kvm [1227]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00
[   48.161626][ T1233] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[   48.644467][ T1265] loop3: detected capacity change from 0 to 128
[   48.657819][ T1265] FAT-fs (loop3): error, corrupted file size (i_pos 548, 512)
[   48.665441][ T1265] FAT-fs (loop3): Filesystem has been set read-only
[   48.715687][ T1269] kvm [1266]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00
[   48.724195][ T1269] kvm [1266]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00
[   48.815378][ T1277] netlink: 'syz.3.368': attribute type 3 has an invalid length.
[   48.970251][   T28] audit: type=1400 audit(1760733173.029:224): avc:  denied  { bind } for  pid=1290 comm="syz.0.375" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   49.155933][   T28] audit: type=1400 audit(1760733173.219:225): avc:  denied  { ioctl } for  pid=1304 comm="syz.1.379" path="/dev/input/event1" dev="devtmpfs" ino=261 ioctlcmd=0x4502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[   49.301429][  T511] Bluetooth: hci0: command 0x1003 tx timeout
[   49.301462][ T1043] Bluetooth: hci0: Opcode 0x1003 failed: -110
[   49.465492][ T1315] loop0: detected capacity change from 0 to 16
[   49.486449][   T28] kauditd_printk_skb: 1 callbacks suppressed
[   49.486463][   T28] audit: type=1400 audit(1760733173.549:227): avc:  denied  { mounton } for  pid=1313 comm="syz.0.383" path="/syzcgroup/cpu/syz0/cpuset.cpus" dev="cgroup" ino=61 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1
[   49.519655][ T1315] erofs: (device loop0): EXPERIMENTAL compressed fragments feature in use. Use at your own risk!
[   49.544862][ T1315] erofs: (device loop0): EXPERIMENTAL global deduplication feature in use. Use at your own risk!
[   49.557732][ T1315] erofs: (device loop0): erofs_fc_fill_super: rootino(nid 36) is not a directory(i_mode 142700)
[   49.603682][ T1337] loop4: detected capacity change from 0 to 128
[   49.613629][ T1334] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[   49.689265][   T28] audit: type=1400 audit(1760733173.749:228): avc:  denied  { getopt } for  pid=1339 comm="syz.5.393" lport=132 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   49.792781][  T337] Bluetooth: hci0: Frame reassembly failed (-84)
[   49.906817][   T28] audit: type=1400 audit(1760733173.969:229): avc:  denied  { sqpoll } for  pid=1361 comm="syz.4.403" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[   49.967708][ T1365] kvm [1364]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00
[   49.982419][ T1365] kvm [1364]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00
[   50.544922][ T1369] kvm [1368]: vcpu0, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0x3
[   51.055424][   T28] audit: type=1400 audit(1760733175.119:230): avc:  denied  { ioctl } for  pid=1386 comm="syz.3.411" path="mnt:[4026532291]" dev="nsfs" ino=4026532291 ioctlcmd=0x940c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[   51.157887][   T28] audit: type=1400 audit(1760733175.219:231): avc:  denied  { append } for  pid=1394 comm="syz.4.415" name="loop2" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[   51.861536][   T45] Bluetooth: hci0: command 0x1003 tx timeout
[   51.861568][ T1043] Bluetooth: hci0: Opcode 0x1003 failed: -110
[   51.953125][  T511] Bluetooth: hci0: Malformed Event: 0x02
[   51.959392][   T10] Bluetooth: hci0: Frame reassembly failed (-84)
[   51.981861][   T10] Bluetooth: hci0: Frame reassembly failed (-84)
[   52.247367][ T1452] loop5: detected capacity change from 0 to 512
[   53.876409][   T28] audit: type=1400 audit(1760733177.939:232): avc:  denied  { read write } for  pid=1482 comm="syz.5.447" name="vhost-vsock" dev="devtmpfs" ino=268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[   53.911678][   T28] audit: type=1400 audit(1760733177.969:233): avc:  denied  { open } for  pid=1482 comm="syz.5.447" path="/dev/vhost-vsock" dev="devtmpfs" ino=268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[   53.945409][   T28] audit: type=1400 audit(1760733178.009:234): avc:  denied  { create } for  pid=1488 comm="syz.1.451" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1
[   54.021487][  T511] Bluetooth: hci0: command 0x1003 tx timeout
[   54.027596][ T1043] Bluetooth: hci0: Opcode 0x1003 failed: -110
[   54.072506][   T28] audit: type=1400 audit(1760733178.139:235): avc:  denied  { associate } for  pid=1500 comm="syz.5.457" name="0" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[   54.187101][   T28] audit: type=1400 audit(1760733178.179:236): avc:  denied  { map } for  pid=1504 comm="syz.0.458" path="socket:[23272]" dev="sockfs" ino=23272 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   54.237122][ T1512] fuse: root generation should be zero
[   54.518412][ T1532] loop0: detected capacity change from 0 to 8192
[   54.642389][ T1548] __nla_validate_parse: 6 callbacks suppressed
[   54.642407][ T1548] netlink: 8 bytes leftover after parsing attributes in process `syz.5.472'.
[   54.670046][ T1549] loop3: detected capacity change from 0 to 16
[   54.718486][ T1555] netlink: 8 bytes leftover after parsing attributes in process `syz.5.472'.
[   54.729753][ T1549] erofs: (device loop3): EXPERIMENTAL compressed fragments feature in use. Use at your own risk!
[   54.811103][ T1549] erofs: (device loop3): EXPERIMENTAL global deduplication feature in use. Use at your own risk!
[   54.862288][ T1549] erofs: (device loop3): erofs_fc_fill_super: rootino(nid 36) is not a directory(i_mode 142700)
[   55.926204][ T1604] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[   55.942999][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready
[   55.955648][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   55.972803][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready
[   55.981234][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   55.989902][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   55.998648][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   56.008171][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   56.016919][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   56.463090][ T1623] loop3: detected capacity change from 0 to 128
[   57.396580][ T1655] netlink: 8 bytes leftover after parsing attributes in process `syz.5.508'.
[   57.482669][ T1665] syz.3.513[1665] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   57.482770][ T1665] syz.3.513[1665] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   57.557076][ T1667] loop5: detected capacity change from 0 to 8192
[   57.600419][ T1667] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   57.696110][   T28] kauditd_printk_skb: 2 callbacks suppressed
[   57.696126][   T28] audit: type=1400 audit(1760733181.759:239): avc:  denied  { watch watch_reads } for  pid=1686 comm="syz.0.524" path="/83/file0" dev="tmpfs" ino=468 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[   57.747660][   T28] audit: type=1400 audit(1760733181.809:240): avc:  denied  { remount } for  pid=1666 comm="syz.5.514" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1
[   57.781705][ T1667] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1052)
[   57.792068][ T1667] FAT-fs (loop5): Filesystem has been set read-only
[   57.799554][ T1667] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1052)
[   57.808893][ T1667] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1052)
[   57.818182][ T1687] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1052)
[   57.860472][ T1687] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1052)
[   58.040766][   T28] audit: type=1326 audit(1760733182.099:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1720 comm="syz.3.537" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7feb49d8efc9 code=0x0
[   58.156629][ T1733] syz.4.541[1733] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   58.156738][ T1733] syz.4.541[1733] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   58.881555][ T1772] netlink: 12 bytes leftover after parsing attributes in process `syz.1.556'.
[   59.392798][ T1790] loop5: detected capacity change from 0 to 8192
[   59.508143][   T28] audit: type=1326 audit(1760733183.569:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1802 comm="syz.1.569" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f94f918efc9 code=0x0
[   59.563996][ T1806] netlink: 8 bytes leftover after parsing attributes in process `syz.0.570'.
[   59.578669][ T1806] netlink: 8 bytes leftover after parsing attributes in process `syz.0.570'.
[   59.671600][ T1800] FAT-fs (loop5): error, corrupted directory (invalid entries)
[   59.680414][ T1800] FAT-fs (loop5): Filesystem has been set read-only
[   59.691267][ T1790] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 0)
[   60.204557][ T1817] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[   61.186338][   T45] Bluetooth: hci0: Malformed Event: 0x02
[   61.192483][  T337] Bluetooth: hci0: Frame reassembly failed (-84)
[   61.485814][ T1842] netlink: 8 bytes leftover after parsing attributes in process `syz.5.581'.
[   61.515294][ T1842] netlink: 8 bytes leftover after parsing attributes in process `syz.5.581'.
[   62.366264][   T28] audit: type=1400 audit(1760733186.429:243): avc:  denied  { ioctl } for  pid=1878 comm="syz.4.594" path="socket:[26763]" dev="sockfs" ino=26763 ioctlcmd=0x8906 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   62.550262][ T1891] loop3: detected capacity change from 0 to 16
[   62.561935][ T1891] erofs: (device loop3): EXPERIMENTAL compressed fragments feature in use. Use at your own risk!
[   62.582444][ T1891] erofs: (device loop3): EXPERIMENTAL global deduplication feature in use. Use at your own risk!
[   62.593935][ T1891] erofs: (device loop3): erofs_fc_fill_super: rootino(nid 36) is not a directory(i_mode 142700)
[   63.221472][ T1043] Bluetooth: hci0: Opcode 0x1003 failed: -110
[   63.227710][   T45] Bluetooth: hci0: command 0x1003 tx timeout
[   63.288664][   T28] audit: type=1400 audit(1760733187.349:244): avc:  denied  { setcurrent } for  pid=1916 comm="syz.4.608" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[   63.420223][   T28] audit: type=1400 audit(1760733187.479:245): avc:  denied  { getattr } for  pid=1930 comm="syz.1.614" name="[userfaultfd]" dev="anon_inodefs" ino=26438 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[   63.477594][ T1934] loop5: detected capacity change from 0 to 16
[   63.522027][  T405] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[   63.922342][  T511] Bluetooth: hci0: Malformed Event: 0x02
[   63.928680][   T43] Bluetooth: hci0: Frame reassembly failed (-84)
[   65.258476][ T2006] netlink: 8 bytes leftover after parsing attributes in process `syz.1.640'.
[   66.016689][  T511] Bluetooth: hci0: command 0x1003 tx timeout
[   66.051572][ T1043] Bluetooth: hci0: Opcode 0x1003 failed: -110
[   66.492550][   T28] audit: type=1326 audit(1760733190.559:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2045 comm="syz.4.657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8dce78efc9 code=0x7ffc0000
[   66.526852][   T28] audit: type=1326 audit(1760733190.579:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2045 comm="syz.4.657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8dce78efc9 code=0x7ffc0000
[   66.573247][   T28] audit: type=1326 audit(1760733190.579:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2045 comm="syz.4.657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8dce78efc9 code=0x7ffc0000
[   66.656998][   T28] audit: type=1326 audit(1760733190.579:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2045 comm="syz.4.657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=175 compat=0 ip=0x7f8dce78efc9 code=0x7ffc0000
[   66.818287][   T28] audit: type=1326 audit(1760733190.579:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2045 comm="syz.4.657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8dce78efc9 code=0x7ffc0000
[   67.103760][   T28] audit: type=1326 audit(1760733190.579:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2045 comm="syz.4.657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f8dce78efc9 code=0x7ffc0000
[   67.211196][   T28] audit: type=1326 audit(1760733190.579:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2045 comm="syz.4.657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f8dce78efc9 code=0x7ffc0000
[   67.722780][   T28] audit: type=1400 audit(1760733191.789:253): avc:  denied  { relabelfrom } for  pid=2079 comm="syz.3.670" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1
[   67.858359][ T2091] device syzkaller0 entered promiscuous mode
[   68.318255][ T2127] device syzkaller0 entered promiscuous mode
[   68.882359][ T2133] bridge0: port 1(bridge_slave_0) entered blocking state
[   68.889542][ T2133] bridge0: port 1(bridge_slave_0) entered disabled state
[   68.897891][ T2133] device bridge_slave_0 entered promiscuous mode
[   68.916043][ T2133] bridge0: port 2(bridge_slave_1) entered blocking state
[   68.923284][ T2133] bridge0: port 2(bridge_slave_1) entered disabled state
[   68.930905][ T2133] device bridge_slave_1 entered promiscuous mode
[   69.353198][  T512] device bridge_slave_1 left promiscuous mode
[   69.360614][  T512] bridge0: port 2(bridge_slave_1) entered disabled state
[   69.384252][  T512] device bridge_slave_0 left promiscuous mode
[   69.398806][  T512] bridge0: port 1(bridge_slave_0) entered disabled state
[   69.422051][  T512] device veth1_macvtap left promiscuous mode
[   69.437852][  T512] device veth0_vlan left promiscuous mode
[   69.767943][ T2133] bridge0: port 2(bridge_slave_1) entered blocking state
[   69.775064][ T2133] bridge0: port 2(bridge_slave_1) entered forwarding state
[   71.171379][    C1] sched: RT throttling activated
[   72.211788][   T10] bridge0: port 2(bridge_slave_1) entered disabled state
[   72.255647][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   72.271814][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   72.343335][  T337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   72.364215][  T337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   72.372961][  T337] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   72.381252][  T337] bridge0: port 1(bridge_slave_0) entered blocking state
[   72.388363][  T337] bridge0: port 1(bridge_slave_0) entered forwarding state
[   72.399606][  T337] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   72.408693][  T337] bridge0: port 2(bridge_slave_1) entered blocking state
[   72.415980][  T337] bridge0: port 2(bridge_slave_1) entered forwarding state
[   72.424041][  T337] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   72.432610][  T337] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   72.441170][ T2221] device syzkaller0 entered promiscuous mode
[   72.453055][ T2133] device veth0_vlan entered promiscuous mode
[   72.462241][  T337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   72.471880][  T337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   72.491552][  T337] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   72.499285][  T337] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   72.517841][ T2133] device veth1_macvtap entered promiscuous mode
[   72.531892][  T337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   72.540684][  T337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   72.560085][  T337] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   72.582588][  T337] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   72.598053][  T337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   72.607132][  T337] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   72.635964][  T337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   72.662545][   T28] kauditd_printk_skb: 1 callbacks suppressed
[   72.662560][   T28] audit: type=1400 audit(1760733196.729:255): avc:  denied  { mounton } for  pid=2133 comm="syz-executor" path="/root/syzkaller.WVickz/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1
[   72.845634][ T2263] device syzkaller0 entered promiscuous mode
[   73.332900][ T2280] loop4: detected capacity change from 0 to 16
[   73.620357][ T2285] bridge0: port 1(bridge_slave_0) entered blocking state
[   73.677062][ T2285] bridge0: port 1(bridge_slave_0) entered disabled state
[   73.691320][   T28] audit: type=1400 audit(1760733197.759:256): avc:  denied  { create } for  pid=2318 comm="syz.3.768" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   73.721907][ T2285] device bridge_slave_0 entered promiscuous mode
[   73.735972][ T2285] bridge0: port 2(bridge_slave_1) entered blocking state
[   73.744053][ T2285] bridge0: port 2(bridge_slave_1) entered disabled state
[   73.751827][ T2285] device bridge_slave_1 entered promiscuous mode
[   73.839231][ T2336] loop3: detected capacity change from 0 to 16
[   73.961777][ T2285] bridge0: port 2(bridge_slave_1) entered blocking state
[   73.968870][ T2285] bridge0: port 2(bridge_slave_1) entered forwarding state
[   73.976228][ T2285] bridge0: port 1(bridge_slave_0) entered blocking state
[   73.983321][ T2285] bridge0: port 1(bridge_slave_0) entered forwarding state
[   74.008547][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   74.017486][   T43] bridge0: port 1(bridge_slave_0) entered disabled state
[   74.025540][   T43] bridge0: port 2(bridge_slave_1) entered disabled state
[   74.046529][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   74.056116][   T43] bridge0: port 1(bridge_slave_0) entered blocking state
[   74.063254][   T43] bridge0: port 1(bridge_slave_0) entered forwarding state
[   74.074642][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   74.083822][   T43] bridge0: port 2(bridge_slave_1) entered blocking state
[   74.090941][   T43] bridge0: port 2(bridge_slave_1) entered forwarding state
[   74.105109][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   74.122960][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   74.146644][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   74.160302][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   74.169440][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   74.177341][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   74.186623][ T2285] device veth0_vlan entered promiscuous mode
[   74.212707][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   74.223350][ T2285] device veth1_macvtap entered promiscuous mode
[   74.237065][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   74.256554][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   74.332235][  T512] device bridge_slave_1 left promiscuous mode
[   74.338518][  T512] bridge0: port 2(bridge_slave_1) entered disabled state
[   74.346568][  T512] device bridge_slave_0 left promiscuous mode
[   74.353034][  T512] bridge0: port 1(bridge_slave_0) entered disabled state
[   74.361815][  T512] device veth1_macvtap left promiscuous mode
[   74.367995][  T512] device veth0_vlan left promiscuous mode
[   74.409774][ T2365] syz.3.785 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[   74.649813][ T2382] loop3: detected capacity change from 0 to 16
[   74.659626][ T2373] bridge0: port 1(bridge_slave_0) entered blocking state
[   74.669677][ T2373] bridge0: port 1(bridge_slave_0) entered disabled state
[   74.677414][ T2373] device bridge_slave_0 entered promiscuous mode
[   74.684793][ T2373] bridge0: port 2(bridge_slave_1) entered blocking state
[   74.691932][ T2373] bridge0: port 2(bridge_slave_1) entered disabled state
[   74.699562][ T2373] device bridge_slave_1 entered promiscuous mode
[   74.781521][ T2391] Driver unsupported XDP return value 0 on prog  (id 146) dev N/A, expect packet loss!
[   77.452869][ T2440] loop5: detected capacity change from 0 to 16
[   77.485002][  T405] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[   77.540055][ T2446] device syzkaller0 entered promiscuous mode
[   77.566941][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   77.582693][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   77.593402][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   77.602713][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   77.615727][    T8] bridge0: port 1(bridge_slave_0) entered blocking state
[   77.622852][    T8] bridge0: port 1(bridge_slave_0) entered forwarding state
[   77.660000][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   77.688945][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   77.697825][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   77.709420][    T8] bridge0: port 2(bridge_slave_1) entered blocking state
[   77.716539][    T8] bridge0: port 2(bridge_slave_1) entered forwarding state
[   77.748299][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   79.327257][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   79.482389][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   79.491231][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   79.545976][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   79.556417][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   79.583790][ T2373] device veth0_vlan entered promiscuous mode
[   79.593909][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   79.616786][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   79.624931][ T2472] loop5: detected capacity change from 0 to 16
[   79.648714][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   79.664449][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   79.697490][ T2373] device veth1_macvtap entered promiscuous mode
[   79.742253][   T43] device bridge_slave_1 left promiscuous mode
[   79.748511][   T43] bridge0: port 2(bridge_slave_1) entered disabled state
[   79.770908][   T43] device bridge_slave_0 left promiscuous mode
[   79.778823][   T43] bridge0: port 1(bridge_slave_0) entered disabled state
[   79.791574][   T43] device veth1_macvtap left promiscuous mode
[   79.804934][   T43] device veth0_vlan left promiscuous mode
[   80.031677][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   80.102092][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   80.134945][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   80.424396][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   80.433180][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   80.697474][ T2519] bridge0: port 1(bridge_slave_0) entered blocking state
[   80.704644][ T2519] bridge0: port 1(bridge_slave_0) entered disabled state
[   80.712456][ T2519] device bridge_slave_0 entered promiscuous mode
[   80.719679][ T2519] bridge0: port 2(bridge_slave_1) entered blocking state
[   80.727013][ T2519] bridge0: port 2(bridge_slave_1) entered disabled state
[   80.734577][ T2519] device bridge_slave_1 entered promiscuous mode
[   80.805225][ T2519] bridge0: port 2(bridge_slave_1) entered blocking state
[   80.812303][ T2519] bridge0: port 2(bridge_slave_1) entered forwarding state
[   80.819577][ T2519] bridge0: port 1(bridge_slave_0) entered blocking state
[   80.826709][ T2519] bridge0: port 1(bridge_slave_0) entered forwarding state
[   80.852381][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   80.860156][    T8] bridge0: port 1(bridge_slave_0) entered disabled state
[   80.868416][    T8] bridge0: port 2(bridge_slave_1) entered disabled state
[   80.877764][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   80.886664][    T8] bridge0: port 1(bridge_slave_0) entered blocking state
[   80.893727][    T8] bridge0: port 1(bridge_slave_0) entered forwarding state
[   80.905464][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   80.914017][    T8] bridge0: port 2(bridge_slave_1) entered blocking state
[   80.921049][    T8] bridge0: port 2(bridge_slave_1) entered forwarding state
[   80.934198][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   80.947358][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   80.962040][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   80.974207][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   80.982454][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   80.989895][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   81.002075][ T2519] device veth0_vlan entered promiscuous mode
[   81.013460][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   81.026260][ T2519] device veth1_macvtap entered promiscuous mode
[   81.036692][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   81.083863][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   81.132293][ T2535] loop4: detected capacity change from 0 to 16
[   81.140535][ T2535] erofs: (device loop4): EXPERIMENTAL compressed fragments feature in use. Use at your own risk!
[   81.175760][ T2535] erofs: (device loop4): EXPERIMENTAL global deduplication feature in use. Use at your own risk!
[   81.189801][ T2540] device syzkaller0 entered promiscuous mode
[   81.207644][ T2535] erofs: (device loop4): erofs_fc_fill_super: rootino(nid 36) is not a directory(i_mode 142700)
[   81.348511][ T2545] bridge0: port 1(bridge_slave_0) entered blocking state
[   81.356108][ T2545] bridge0: port 1(bridge_slave_0) entered disabled state
[   81.375732][ T2545] device bridge_slave_0 entered promiscuous mode
[   81.402707][ T2545] bridge0: port 2(bridge_slave_1) entered blocking state
[   81.421626][ T2545] bridge0: port 2(bridge_slave_1) entered disabled state
[   81.429509][ T2545] device bridge_slave_1 entered promiscuous mode
[   81.442025][ T2554] device pim6reg1 entered promiscuous mode
[   81.452696][   T43] device bridge_slave_1 left promiscuous mode
[   81.458917][   T43] bridge0: port 2(bridge_slave_1) entered disabled state
[   81.476379][   T43] device bridge_slave_0 left promiscuous mode
[   81.484196][   T43] bridge0: port 1(bridge_slave_0) entered disabled state
[   81.496615][   T43] device bridge_slave_1 left promiscuous mode
[   81.502987][   T43] bridge0: port 2(bridge_slave_1) entered disabled state
[   81.510619][   T43] device bridge_slave_0 left promiscuous mode
[   81.516924][   T43] bridge0: port 1(bridge_slave_0) entered disabled state
[   81.525752][   T43] device veth1_macvtap left promiscuous mode
[   81.532123][   T43] device veth0_vlan left promiscuous mode
[   81.538459][   T43] device veth1_macvtap left promiscuous mode
[   81.544937][   T43] device veth0_vlan left promiscuous mode
[   81.658498][   T28] audit: type=1400 audit(1760733205.709:257): avc:  denied  { read } for  pid=2564 comm="syz.5.859" name="ppp" dev="devtmpfs" ino=158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[   81.681588][   T28] audit: type=1400 audit(1760733205.709:258): avc:  denied  { open } for  pid=2564 comm="syz.5.859" path="/dev/ppp" dev="devtmpfs" ino=158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[   81.705274][   T28] audit: type=1400 audit(1760733205.709:259): avc:  denied  { ioctl } for  pid=2564 comm="syz.5.859" path="/dev/ppp" dev="devtmpfs" ino=158 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[   82.489250][ T2563] bridge0: port 1(bridge_slave_0) entered blocking state
[   82.500621][ T2563] bridge0: port 1(bridge_slave_0) entered disabled state
[   82.519923][ T2563] device bridge_slave_0 entered promiscuous mode
[   82.529686][ T2563] bridge0: port 2(bridge_slave_1) entered blocking state
[   82.537028][ T2563] bridge0: port 2(bridge_slave_1) entered disabled state
[   82.552205][ T2563] device bridge_slave_1 entered promiscuous mode
[   83.553208][   T43] device bridge_slave_1 left promiscuous mode
[   83.559411][   T43] bridge0: port 2(bridge_slave_1) entered disabled state
[   83.585915][   T43] device bridge_slave_0 left promiscuous mode
[   83.618043][   T43] bridge0: port 1(bridge_slave_0) entered disabled state
[   83.631917][   T43] device bridge_slave_1 left promiscuous mode
[   83.638121][   T43] bridge0: port 2(bridge_slave_1) entered disabled state
[   83.645782][   T43] device bridge_slave_0 left promiscuous mode
[   83.659937][   T43] bridge0: port 1(bridge_slave_0) entered disabled state
[   83.680470][   T43] device bridge_slave_1 left promiscuous mode
[   83.686731][   T43] bridge0: port 2(bridge_slave_1) entered disabled state
[   83.694398][   T43] device bridge_slave_0 left promiscuous mode
[   83.700560][   T43] bridge0: port 1(bridge_slave_0) entered disabled state
[   83.708913][   T43] device veth1_macvtap left promiscuous mode
[   83.715259][   T43] device veth0_vlan left promiscuous mode
[   84.153137][ T2615] bridge0: port 1(bridge_slave_0) entered blocking state
[   84.160416][ T2615] bridge0: port 1(bridge_slave_0) entered disabled state
[   84.168329][ T2615] device bridge_slave_0 entered promiscuous mode
[   84.192980][ T2615] bridge0: port 2(bridge_slave_1) entered blocking state
[   84.200116][ T2615] bridge0: port 2(bridge_slave_1) entered disabled state
[   84.207699][ T2615] device bridge_slave_1 entered promiscuous mode
[   84.214595][ T2624] bridge0: port 1(bridge_slave_0) entered blocking state
[   84.221886][ T2624] bridge0: port 1(bridge_slave_0) entered disabled state
[   84.229396][ T2624] device bridge_slave_0 entered promiscuous mode
[   84.236459][ T2617] bridge0: port 1(bridge_slave_0) entered blocking state
[   84.243561][ T2617] bridge0: port 1(bridge_slave_0) entered disabled state
[   84.251040][ T2617] device bridge_slave_0 entered promiscuous mode
[   84.258078][ T2621] bridge0: port 1(bridge_slave_0) entered blocking state
[   84.265310][ T2621] bridge0: port 1(bridge_slave_0) entered disabled state
[   84.272813][ T2621] device bridge_slave_0 entered promiscuous mode
[   84.283353][ T2624] bridge0: port 2(bridge_slave_1) entered blocking state
[   84.290487][ T2624] bridge0: port 2(bridge_slave_1) entered disabled state
[   84.298179][ T2624] device bridge_slave_1 entered promiscuous mode
[   84.304932][ T2617] bridge0: port 2(bridge_slave_1) entered blocking state
[   84.312387][ T2617] bridge0: port 2(bridge_slave_1) entered disabled state
[   84.319975][ T2617] device bridge_slave_1 entered promiscuous mode
[   84.326645][ T2621] bridge0: port 2(bridge_slave_1) entered blocking state
[   84.333811][ T2621] bridge0: port 2(bridge_slave_1) entered disabled state
[   84.341570][ T2621] device bridge_slave_1 entered promiscuous mode
[   84.552788][ T2615] bridge0: port 2(bridge_slave_1) entered blocking state
[   84.560225][ T2615] bridge0: port 2(bridge_slave_1) entered forwarding state
[   84.567585][ T2615] bridge0: port 1(bridge_slave_0) entered blocking state
[   84.574691][ T2615] bridge0: port 1(bridge_slave_0) entered forwarding state
[   84.588491][ T2621] bridge0: port 2(bridge_slave_1) entered blocking state
[   84.595890][ T2621] bridge0: port 2(bridge_slave_1) entered forwarding state
[   84.603274][ T2621] bridge0: port 1(bridge_slave_0) entered blocking state
[   84.610441][ T2621] bridge0: port 1(bridge_slave_0) entered forwarding state
[   84.622671][ T2617] bridge0: port 2(bridge_slave_1) entered blocking state
[   84.629751][ T2617] bridge0: port 2(bridge_slave_1) entered forwarding state
[   84.637122][ T2617] bridge0: port 1(bridge_slave_0) entered blocking state
[   84.644308][ T2617] bridge0: port 1(bridge_slave_0) entered forwarding state
[   84.652920][    T8] bridge0: port 1(bridge_slave_0) entered disabled state
[   84.660271][    T8] bridge0: port 2(bridge_slave_1) entered disabled state
[   84.668009][    T8] bridge0: port 1(bridge_slave_0) entered disabled state
[   84.675740][    T8] bridge0: port 1(bridge_slave_0) entered disabled state
[   84.683502][    T8] bridge0: port 2(bridge_slave_1) entered disabled state
[   84.690850][    T8] bridge0: port 2(bridge_slave_1) entered disabled state
[   84.745532][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   84.753244][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   84.765701][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   84.773485][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   84.791756][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   84.800780][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   84.809204][    T8] bridge0: port 1(bridge_slave_0) entered blocking state
[   84.816298][    T8] bridge0: port 1(bridge_slave_0) entered forwarding state
[   84.823715][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   84.832741][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   84.841083][    T8] bridge0: port 2(bridge_slave_1) entered blocking state
[   84.848160][    T8] bridge0: port 2(bridge_slave_1) entered forwarding state
[   84.855734][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   84.863342][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   84.891094][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   84.898771][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   84.906486][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   84.915907][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   84.924295][    T8] bridge0: port 1(bridge_slave_0) entered blocking state
[   84.931431][    T8] bridge0: port 1(bridge_slave_0) entered forwarding state
[   84.939796][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   84.948955][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   84.957400][    T8] bridge0: port 2(bridge_slave_1) entered blocking state
[   84.964495][    T8] bridge0: port 2(bridge_slave_1) entered forwarding state
[   84.971952][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   84.980430][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   84.988890][    T8] bridge0: port 1(bridge_slave_0) entered blocking state
[   84.996000][    T8] bridge0: port 1(bridge_slave_0) entered forwarding state
[   85.003616][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   85.012171][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   85.020342][    T8] bridge0: port 2(bridge_slave_1) entered blocking state
[   85.027519][    T8] bridge0: port 2(bridge_slave_1) entered forwarding state
[   85.035218][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   85.043739][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   85.052147][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   85.060689][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   85.069272][    T8] bridge0: port 1(bridge_slave_0) entered blocking state
[   85.076375][    T8] bridge0: port 1(bridge_slave_0) entered forwarding state
[   85.085585][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   85.093347][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   85.101660][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   85.126813][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   85.135450][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   85.143948][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   85.153288][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   85.162679][    T8] bridge0: port 2(bridge_slave_1) entered blocking state
[   85.169740][    T8] bridge0: port 2(bridge_slave_1) entered forwarding state
[   85.177414][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   85.185941][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   85.195515][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   85.203772][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   85.212092][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   85.220289][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   85.228772][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   85.237313][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   85.261527][  T512] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   85.278865][ T2624] device veth0_vlan entered promiscuous mode
[   85.287400][  T512] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   85.296038][  T512] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   85.306876][  T512] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   85.317640][  T512] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   85.327460][  T512] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   85.446848][   T28] audit: type=1400 audit(1760733209.419:260): avc:  denied  { bind } for  pid=2686 comm="syz.5.896" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   85.477170][ T2617] device veth0_vlan entered promiscuous mode
[   85.522621][ T2617] device veth1_macvtap entered promiscuous mode
[   85.609655][  T512] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   85.618021][  T512] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   85.626790][  T512] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   85.635481][  T512] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   85.643808][  T512] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   85.652304][  T512] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   85.660598][  T512] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   85.669157][  T512] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   85.677643][  T512] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   85.687026][  T512] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   85.694704][  T512] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   85.710312][ T2615] device veth0_vlan entered promiscuous mode
[   85.721280][  T512] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   85.729409][  T512] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   85.737879][  T512] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   85.746486][  T512] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   85.755300][  T512] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   85.763045][  T512] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   85.780447][ T2621] device veth0_vlan entered promiscuous mode
[   85.793162][  T512] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   85.801968][  T512] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   85.810260][  T512] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   85.820369][  T512] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   85.829354][  T512] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   85.837064][  T512] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   85.848695][ T2615] device veth1_macvtap entered promiscuous mode
[   85.863491][ T2624] device veth1_macvtap entered promiscuous mode
[   85.870504][  T512] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   85.878624][  T512] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   85.885627][ T2697] loop4: detected capacity change from 0 to 512
[   85.887492][  T512] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   85.901350][  T512] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   85.909290][ T2697] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   85.919110][  T512] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   85.931940][  T512] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   85.940395][  T512] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   85.948990][  T512] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   85.955182][ T2697] EXT4-fs (loop4): 1 orphan inode deleted
[   85.963214][ T2697] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[   85.972133][ T2697] ext4 filesystem being mounted at /3/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   85.997591][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   86.007206][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   86.016321][ T2617] EXT4-fs (loop4): unmounting filesystem.
[   86.019897][ T2621] device veth1_macvtap entered promiscuous mode
[   86.034328][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   86.042927][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   86.054098][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   86.063339][ T2702] loop4: detected capacity change from 0 to 512
[   86.064578][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   86.079334][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   86.108341][   T28] audit: type=1400 audit(1760733210.169:261): avc:  denied  { append } for  pid=2704 comm="syz.5.901" name="001" dev="devtmpfs" ino=182 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[   86.109983][ T2702] [EXT4 FS bs=4096, gc=1, bpg=95, ipg=32, mo=e040e01c, mo2=0000]
[   86.144276][ T2702] System zones: 0-2, 18-18, 34-34
[   86.154390][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   86.163993][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   86.190973][ T2702] EXT4-fs error (device loop4): ext4_do_update_inode:5256: inode #3: comm syz.4.900: corrupted inode contents
[   86.209484][ T2702] EXT4-fs error (device loop4): ext4_dirty_inode:6121: inode #3: comm syz.4.900: mark_inode_dirty error
[   86.221810][ T2702] EXT4-fs error (device loop4): ext4_do_update_inode:5256: inode #3: comm syz.4.900: corrupted inode contents
[   86.250032][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   86.258896][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   86.267600][ T2702] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #3: comm syz.4.900: mark_inode_dirty error
[   86.312900][ T2702] Quota error (device loop4): write_blk: dquota write failed
[   86.320442][ T2702] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota
[   86.330525][ T2702] EXT4-fs error (device loop4): ext4_acquire_dquot:6803: comm syz.4.900: Failed to acquire dquot type 0
[   86.351230][ T2702] EXT4-fs (loop4): 1 orphan inode deleted
[   86.505835][   T43] device bridge_slave_1 left promiscuous mode
[   86.577499][ T2702] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[   86.593697][   T43] bridge0: port 2(bridge_slave_1) entered disabled state
[   86.695698][ T2702] ext4 filesystem being mounted at /4/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   86.730584][   T43] device bridge_slave_0 left promiscuous mode
[   86.739600][   T43] bridge0: port 1(bridge_slave_0) entered disabled state
[   86.757648][   T43] device veth1_macvtap left promiscuous mode
[   86.760748][   T10] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14
[   86.763796][   T43] device veth0_vlan left promiscuous mode
[   86.784100][   T10] EXT4-fs error (device loop4): ext4_release_dquot:6839: comm kworker/u4:1: Failed to release dquot type 1
[   86.823276][ T2617] EXT4-fs (loop4): unmounting filesystem.
[   87.113345][ T2729] device syzkaller0 entered promiscuous mode
[   87.142291][ T2733] loop6: detected capacity change from 0 to 512
[   87.184096][ T2733] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[   87.228544][ T2733] ext4 filesystem being mounted at /2/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   87.334143][   T28] audit: type=1400 audit(1760733211.399:262): avc:  denied  { write } for  pid=2732 comm="syz.6.906" name="file1" dev="loop6" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   87.374338][   T28] audit: type=1400 audit(1760733211.429:263): avc:  denied  { open } for  pid=2732 comm="syz.6.906" name="file1" dev="loop6" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   87.445462][ T2624] EXT4-fs (loop6): unmounting filesystem.
[   87.462835][   T28] audit: type=1400 audit(1760733211.469:264): avc:  denied  { ioctl } for  pid=2732 comm="syz.6.906" path="/dev/vhost-vsock" dev="devtmpfs" ino=268 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[   87.535388][   T28] audit: type=1400 audit(1760733211.489:265): avc:  denied  { read } for  pid=2732 comm="syz.6.906" name="file1" dev="loop6" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   87.857989][   T28] audit: type=1400 audit(1760733211.489:266): avc:  denied  { map } for  pid=2732 comm="syz.6.906" path="/2/file1/file1" dev="loop6" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   87.884626][   T28] audit: type=1400 audit(1760733211.599:267): avc:  denied  { create } for  pid=2754 comm="syz.6.913" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[   87.904102][   T28] audit: type=1400 audit(1760733211.599:268): avc:  denied  { write } for  pid=2754 comm="syz.6.913" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[   88.192756][ T2786] loop4: detected capacity change from 0 to 512
[   88.199553][ T2786] EXT4-fs: Ignoring removed nomblk_io_submit option
[   88.206971][ T2786] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[   88.221217][ T2786] EXT4-fs (loop4): 1 truncate cleaned up
[   88.227131][ T2786] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[   88.351215][  T511] Bluetooth: hci0: Malformed Event: 0x02
[   88.357381][   T10] Bluetooth: hci0: Frame reassembly failed (-84)
[   88.414392][   T10] Bluetooth: hci0: Frame reassembly failed (-84)
[   88.661446][   T28] audit: type=1400 audit(1760733212.719:269): avc:  denied  { read } for  pid=2790 comm="syz.6.926" name="file0" dev="tmpfs" ino=44 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[   88.684667][ T2617] EXT4-fs (loop4): unmounting filesystem.
[   88.698738][   T28] audit: type=1400 audit(1760733212.719:270): avc:  denied  { open } for  pid=2790 comm="syz.6.926" path="/5/file0" dev="tmpfs" ino=44 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[   88.718934][ T2799] loop4: detected capacity change from 0 to 512
[   88.769431][ T2799] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.927: couldn't read orphan inode 26 (err -116)
[   88.782205][ T2799] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[   88.792984][ T2799] ext4 filesystem being mounted at /15/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   88.807352][ T2799] EXT4-fs error (device loop4): ext4_do_update_inode:5256: inode #3: comm syz.4.927: corrupted inode contents
[   88.819638][ T2799] EXT4-fs error (device loop4): ext4_dirty_inode:6121: inode #3: comm syz.4.927: mark_inode_dirty error
[   88.832193][ T2799] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.927: bg 0: block 64: padding at end of block bitmap is not set
[   88.847360][ T2799] EXT4-fs error (device loop4): ext4_acquire_dquot:6803: comm syz.4.927: Failed to acquire dquot type 0
[   88.873956][ T2617] EXT4-fs (loop4): unmounting filesystem.
[   89.032027][ T2829] loop6: detected capacity change from 0 to 512
[   89.043734][ T2823] kvm [2822]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x7
[   89.054895][ T2823] kvm [2822]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x7
[   89.097070][ T2829] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[   89.106295][ T2832] input: syz0 as /devices/virtual/input/input4
[   89.148834][ T2829] EXT4-fs error (device loop6): ext4_xattr_block_get:546: inode #15: comm syz.6.939: corrupted xattr block 19
[   89.194314][ T2829] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop6 ino=15
[   89.214123][ T2624] EXT4-fs (loop6): unmounting filesystem.
[   89.270285][ T2840] loop6: detected capacity change from 0 to 128
[   89.281913][ T2840] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[   89.291130][ T2840] ext4 filesystem being mounted at /13/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   89.325976][ T2840] EXT4-fs warning (device loop6): verify_group_input:151: Cannot add at group 2054250869 (only 1 groups)
[   89.348231][ T2624] EXT4-fs (loop6): unmounting filesystem.
[   89.360160][ T2843] loop4: detected capacity change from 0 to 512
[   89.384824][ T2843] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[   89.393615][ T2851] loop6: detected capacity change from 0 to 512
[   89.394388][ T2843] ext4 filesystem being mounted at /19/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[   89.435442][ T2851] EXT4-fs (loop6): Test dummy encryption mode enabled
[   89.439203][ T2843] EXT4-fs error (device loop4): ext4_map_blocks:635: inode #2: block 18: comm syz.4.944: lblock 23 mapped to illegal pblock 18 (length 1)
[   89.449047][ T2851] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[   89.457359][ T2843] EXT4-fs (loop4): Remounting filesystem read-only
[   89.475370][ T2843] EXT4-fs error (device loop4): ext4_readdir:263: inode #2: block 3: comm syz.4.944: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=2, rec_len=2060, size=2048 fake=1
[   89.495375][ T2843] EXT4-fs (loop4): Remounting filesystem read-only
[   89.502573][ T2843] EXT4-fs error (device loop4): ext4_readdir:263: inode #2: block 12: comm syz.4.944: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0
[   89.524176][ T2843] EXT4-fs (loop4): Remounting filesystem read-only
[   89.530891][ T2843] EXT4-fs error (device loop4): ext4_readdir:263: inode #2: block 13: comm syz.4.944: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0
[   89.552410][ T2843] EXT4-fs (loop4): Remounting filesystem read-only
[   89.559077][ T2843] EXT4-fs error (device loop4): ext4_readdir:263: inode #2: block 14: comm syz.4.944: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0
[   89.579693][ T2843] EXT4-fs (loop4): Remounting filesystem read-only
[   89.586514][ T2843] EXT4-fs error (device loop4): ext4_readdir:263: inode #2: block 15: comm syz.4.944: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0
[   89.607396][ T2843] EXT4-fs (loop4): Remounting filesystem read-only
[   89.614181][ T2843] EXT4-fs error (device loop4): ext4_readdir:263: inode #2: block 16: comm syz.4.944: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653245223, rec_len=1, size=2048 fake=0
[   89.635843][   T58] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[   89.643979][ T2843] EXT4-fs (loop4): Remounting filesystem read-only
[   89.650707][ T2843] EXT4-fs error (device loop4): ext4_readdir:263: inode #2: block 17: comm syz.4.944: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0
[   89.671263][ T2843] EXT4-fs (loop4): Remounting filesystem read-only
[   89.677879][ T2843] EXT4-fs error (device loop4): ext4_map_blocks:635: inode #2: block 18: comm syz.4.944: lblock 23 mapped to illegal pblock 18 (length 1)
[   89.692292][ T2843] EXT4-fs (loop4): Remounting filesystem read-only
[   89.699131][ T2843] EXT4-fs error (device loop4): ext4_readdir:263: inode #2: block 19: comm syz.4.944: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0
[   89.733167][ T2624] EXT4-fs (loop6): unmounting filesystem.
[   89.815550][ T2861] loop7: detected capacity change from 0 to 512
[   89.826778][ T2863] loop6: detected capacity change from 0 to 256
[   89.839918][ T2861] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem
[   89.842776][   T58] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   89.853128][ T2863] exfat: Deprecated parameter 'utf8'
[   89.873994][   T58] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   89.892958][ T2863] exfat: Deprecated parameter 'namecase'
[   89.894040][   T58] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   89.898759][ T2863] exfat: Deprecated parameter 'utf8'
[   89.908722][ T2863] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d)
[   89.929509][   T58] usb 6-1: New USB device found, idVendor=0eef, idProduct=72d0, bcdDevice= 0.00
[   89.930792][ T2861] EXT4-fs error (device loop7): ext4_orphan_get:1400: inode #15: comm syz.7.950: iget: bad extended attribute block 851968
[   89.948884][   T58] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   89.966985][ T2861] EXT4-fs error (device loop7): ext4_orphan_get:1405: comm syz.7.950: couldn't read orphan inode 15 (err -117)
[   89.979388][   T58] usb 6-1: config 0 descriptor??
[   89.987136][ T2861] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none.
[   89.987239][ T2863] exFAT-fs (loop6): hint_cluster is invalid (1)
[   90.017833][ T2863] exFAT-fs (loop6): error, invalid access to exfat cache (entry 0x00000000)
[   90.028021][ T2621] EXT4-fs (loop7): unmounting filesystem.
[   90.033899][ T2863] exFAT-fs (loop6): error, failed to bmap (inode : ffff8881332d8d30 iblock : 9, err : -5)
[   90.059954][ T2863] syz.6.951: attempt to access beyond end of device
[   90.059954][ T2863] loop6: rw=2049, sector=34359738488, nr_sectors = 8 limit=256
[   90.387503][   T58] hid (null): invalid report_size 34467
[   90.395705][   T58] hid-multitouch 0003:0EEF:72D0.0004: invalid report_size 34467
[   90.403481][   T58] hid-multitouch 0003:0EEF:72D0.0004: item 0 2 1 7 parsing failed
[   90.412133][   T58] hid-multitouch: probe of 0003:0EEF:72D0.0004 failed with error -22
[   90.421722][ T1043] Bluetooth: hci0: Opcode 0x1003 failed: -110
[   90.421916][  T511] Bluetooth: hci0: command 0x1003 tx timeout
[   90.484644][ T2884] loop1: detected capacity change from 0 to 128
[   90.495689][ T2884] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[   90.505136][ T2884] ext4 filesystem being mounted at /4/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[   90.548990][ T2615] EXT4-fs (loop1): unmounting filesystem.
[   90.593727][  T288] usb 6-1: USB disconnect, device number 2
[   91.152370][ T2897] loop5: detected capacity change from 0 to 8192
[   92.232185][   T28] kauditd_printk_skb: 14 callbacks suppressed
[   92.232201][   T28] audit: type=1400 audit(1760733216.299:283): avc:  denied  { read } for  pid=2954 comm="syz.7.983" name="msr" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[   92.285982][   T28] audit: type=1400 audit(1760733216.299:284): avc:  denied  { open } for  pid=2954 comm="syz.7.983" path="/dev/cpu/0/msr" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[   92.978841][   T28] audit: type=1400 audit(1760733217.039:285): avc:  denied  { write } for  pid=2970 comm="syz.7.988" path="socket:[35339]" dev="sockfs" ino=35339 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   93.191037][ T2990] loop1: detected capacity change from 0 to 512
[   93.216234][ T2990] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[   93.225637][ T2990] ext4 filesystem being mounted at /10/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   93.240861][   T28] audit: type=1400 audit(1760733217.309:286): avc:  denied  { append } for  pid=2989 comm="syz.1.995" name="file2" dev="loop1" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   93.331307][ T2615] EXT4-fs (loop1): unmounting filesystem.
[   93.358236][   T28] audit: type=1400 audit(1760733217.419:287): avc:  denied  { getopt } for  pid=2996 comm="syz.1.997" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   93.386637][ T3000] loop7: detected capacity change from 0 to 7
[   93.401534][  T347] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[   93.442334][ T3000] loop7: detected capacity change from 7 to 8
[   93.470124][ T3007] loop6: detected capacity change from 0 to 256
[   93.573784][ T3015] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1005'.
[   93.628348][  T347] usb 8-1: Using ep0 maxpacket: 32
[   93.669140][ T3020] loop1: detected capacity change from 0 to 4096
[   93.683075][  T347] usb 8-1: unable to get BOS descriptor or descriptor too short
[   93.698330][  T347] usb 8-1: config 1 interface 0 altsetting 250 endpoint 0x81 has invalid maxpacket 1527, setting to 1024
[   93.712915][  T347] usb 8-1: config 1 interface 0 altsetting 250 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   93.733555][ T3020] EXT4-fs (loop1): Test dummy encryption mode enabled
[   93.791121][  T347] usb 8-1: config 1 interface 0 has no altsetting 0
[   93.811837][  T347] usb 8-1: New USB device found, idVendor=1b1c, idProduct=1c08, bcdDevice= 0.40
[   93.825104][  T347] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   93.833534][  T347] usb 8-1: Product: syz
[   93.838175][  T347] usb 8-1: Manufacturer: syz
[   93.840609][ T3020] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003]
[   93.851182][  T347] usb 8-1: SerialNumber: syz
[   93.853984][ T3020] System zones: 0-5
[   93.860597][ T3020] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[   93.873123][ T2985] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22
[   93.901032][   T28] audit: type=1400 audit(1760733217.959:288): avc:  denied  { ioctl } for  pid=3035 comm="syz.6.1013" path="socket:[35695]" dev="sockfs" ino=35695 ioctlcmd=0x6612 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   93.963522][   T45] Bluetooth: hci0: Malformed Event: 0x02
[   93.969636][  T337] Bluetooth: hci0: Frame reassembly failed (-84)
[   94.012398][ T2615] EXT4-fs (loop1): unmounting filesystem.
[   94.246278][  T347] usbhid 8-1:1.0: can't add hid device: -71
[   94.252366][  T347] usbhid: probe of 8-1:1.0 failed with error -71
[   94.260502][  T347] usb 8-1: USB disconnect, device number 2
[   94.661831][   T28] audit: type=1400 audit(1760733218.679:289): avc:  denied  { create } for  pid=3053 comm="syz.1.1019" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   95.025143][   T28] audit: type=1400 audit(1760733218.679:290): avc:  denied  { connect } for  pid=3053 comm="syz.1.1019" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   95.051440][   T28] audit: type=1400 audit(1760733218.679:291): avc:  denied  { setopt } for  pid=3053 comm="syz.1.1019" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   95.239572][ T3077] input: syz1 as /devices/virtual/input/input6
[   95.353245][   T28] audit: type=1400 audit(1760733219.419:292): avc:  denied  { mount } for  pid=3084 comm="syz.7.1030" name="/" dev="configfs" ino=13590 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1
[   95.691447][  T471] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[   95.871458][  T471] usb 2-1: Using ep0 maxpacket: 8
[   95.879006][  T471] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   95.889399][  T471] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[   95.900041][  T471] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   95.935308][  T471] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   95.943604][  T471] usb 2-1: Product: syz
[   95.947795][  T471] usb 2-1: Manufacturer: syz
[   95.952837][  T471] usb 2-1: SerialNumber: syz
[   96.032269][ T1043] Bluetooth: hci0: Opcode 0x1003 failed: -110
[   96.038483][   T45] Bluetooth: hci0: command 0x1003 tx timeout
[   96.073978][ T3109] loop4: detected capacity change from 0 to 512
[   96.121207][ T3109] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[   96.130724][ T3109] ext4 filesystem being mounted at /36/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   96.167753][  T471] usb 2-1: 0:2 : does not exist
[   96.185055][ T2617] EXT4-fs (loop4): unmounting filesystem.
[   96.193649][  T471] usb 2-1: USB disconnect, device number 4
[   96.366959][ T3127] binfmt_misc: register: failed to install interpreter file ./file0
[   96.402167][  T405] udevd[405]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   96.527795][  T511] Bluetooth: hci0: Malformed Event: 0x02
[   96.533991][   T10] Bluetooth: hci0: Frame reassembly failed (-84)
[   96.941469][  T347] usb 7-1: new full-speed USB device number 2 using dummy_hcd
[   97.152517][  T347] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[   97.168831][  T347] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   97.177914][  T347] usb 7-1: config 0 descriptor??
[   97.602593][   T28] kauditd_printk_skb: 5 callbacks suppressed
[   97.602618][   T28] audit: type=1400 audit(1760733221.669:298): avc:  denied  { read append } for  pid=3156 comm="syz.7.1055" name="usbmon9" dev="devtmpfs" ino=186 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[   97.634504][   T28] audit: type=1400 audit(1760733221.669:299): avc:  denied  { open } for  pid=3156 comm="syz.7.1055" path="/dev/usbmon9" dev="devtmpfs" ino=186 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[   97.682221][   T28] audit: type=1400 audit(1760733221.669:300): avc:  denied  { ioctl } for  pid=3156 comm="syz.7.1055" path="/dev/usbmon9" dev="devtmpfs" ino=186 ioctlcmd=0x9205 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[   97.707301][ T3163] loop1: detected capacity change from 0 to 256
[   97.734627][   T28] audit: type=1400 audit(1760733221.789:301): avc:  denied  { getopt } for  pid=3162 comm="syz.1.1058" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   97.817006][ T3171] loop6: detected capacity change from 0 to 512
[   97.827897][ T3171] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[   97.894271][ T3171] EXT4-fs warning (device loop6): ext4_expand_extra_isize_ea:2818: Unable to expand inode 15. Delete some EAs or run e2fsck.
[   97.908686][ T3171] EXT4-fs (loop6): 1 truncate cleaned up
[   97.915091][ T3171] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[   98.151482][   T37] usb 2-1: new low-speed USB device number 5 using dummy_hcd
[   98.333145][   T37] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   98.343501][   T37] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[   98.356114][   T37] usb 2-1: string descriptor 0 read error: -22
[   98.363073][   T37] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   98.372897][   T37] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   98.388419][   T37] usb 2-1: MIDIStreaming interface descriptor not found
[   98.501435][ T1043] Bluetooth: hci0: Opcode 0x1003 failed: -110
[   98.596216][   T37] usb 2-1: USB disconnect, device number 5
[   99.265798][   T28] audit: type=1400 audit(1760733223.329:302): avc:  denied  { ioctl } for  pid=3199 comm="syz.5.1070" path="/dev/binderfs/binder0" dev="binder" ino=13 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[   99.292922][ T3201] binder: 3199:3201 ioctl 541b 0 returned -22
[   99.307377][ T3202] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[   99.326613][   T28] audit: type=1400 audit(1760733223.329:303): avc:  denied  { set_context_mgr } for  pid=3199 comm="syz.5.1070" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1
[   99.347165][   T28] audit: type=1400 audit(1760733223.359:304): avc:  denied  { map } for  pid=3199 comm="syz.5.1070" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[   99.372323][   T28] audit: type=1400 audit(1760733223.359:305): avc:  denied  { write } for  pid=3199 comm="syz.5.1070" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[   99.407696][  T471] usb 7-1: USB disconnect, device number 2
[   99.419657][ T2624] EXT4-fs (loop6): unmounting filesystem.
[  100.207448][ T3222] loop7: detected capacity change from 0 to 7
[  100.465379][ T3229] loop7: detected capacity change from 0 to 128
[  100.474017][ T3228] loop1: detected capacity change from 0 to 1024
[  100.492193][ T3228] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (7780!=20869)
[  100.511450][ T3228] EXT4-fs (loop1): invalid journal inode
[  100.524069][ T3229] EXT4-fs: Ignoring removed nobh option
[  100.530677][   T28] audit: type=1400 audit(1760733224.589:306): avc:  denied  { append } for  pid=3232 comm="syz.4.1080" name="ptp0" dev="devtmpfs" ino=264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  100.562513][ T3229] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none.
[  100.573421][ T3229] ext4 filesystem being mounted at /40/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  100.605585][   T28] audit: type=1400 audit(1760733224.659:307): avc:  denied  { create } for  pid=3226 comm="syz.7.1078" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1
[  100.629788][ T2621] EXT4-fs (loop7): unmounting filesystem.
[  100.670040][ T3242] loop6: detected capacity change from 0 to 512
[  100.676611][ T3241] loop7: detected capacity change from 0 to 1024
[  100.690312][ T3241] EXT4-fs: Ignoring removed i_version option
[  100.698380][ T3242] EXT4-fs: Ignoring removed nomblk_io_submit option
[  100.707323][ T3241] EXT4-fs (loop7): Test dummy encryption mode enabled
[  100.721443][ T3242] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  100.740975][ T3241] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[  100.798149][ T3242] EXT4-fs (loop6): 1 truncate cleaned up
[  100.804003][ T3242] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[  100.822082][ T3241] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  100.855823][ T3242] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1085'.
[  100.867014][ T3241] EXT4-fs: Cannot change journaled quota options when quota turned on
[  100.876742][ T3242] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1085'.
[  100.941592][ T2621] EXT4-fs (loop7): unmounting filesystem.
[  100.964370][ T2624] EXT4-fs (loop6): unmounting filesystem.
[  101.284557][ T3273] 9pnet_fd: p9_fd_create_unix (3273): problem connecting socket: ./file0: -111
[  101.603485][ T3281] loop6: detected capacity change from 0 to 256
[  102.061621][   T37] usb 6-1: new full-speed USB device number 3 using dummy_hcd
[  102.242482][   T37] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  102.301040][   T37] usb 6-1: New USB device found, idVendor=6189, idProduct=182d, bcdDevice= 1.73
[  102.325325][   T37] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  102.334312][   T37] usb 6-1: Product: syz
[  102.361500][   T37] usb 6-1: Manufacturer: syz
[  102.366194][   T37] usb 6-1: SerialNumber: syz
[  102.377080][   T37] usb 6-1: config 0 descriptor??
[  102.411410][   T58] usb 8-1: new high-speed USB device number 3 using dummy_hcd
[  102.651475][   T58] usb 8-1: Using ep0 maxpacket: 32
[  102.657926][   T58] usb 8-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 254, changing to 11
[  102.687748][   T58] usb 8-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  102.716184][   T58] usb 8-1: config 0 interface 0 has no altsetting 0
[  102.732058][   T58] usb 8-1: New USB device found, idVendor=056a, idProduct=0016, bcdDevice= 0.00
[  102.741669][   T58] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  102.764151][   T58] usb 8-1: config 0 descriptor??
[  102.980672][   T28] kauditd_printk_skb: 1 callbacks suppressed
[  102.980690][   T28] audit: type=1400 audit(1760733227.039:309): avc:  denied  { read write } for  pid=3314 comm="syz.4.1111" name="file1" dev="fuse" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1
[  103.009598][   T28] audit: type=1400 audit(1760733227.039:310): avc:  denied  { open } for  pid=3314 comm="syz.4.1111" path="/48/file0/file1" dev="fuse" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1
[  103.174666][   T58] wacom 0003:056A:0016.0005: Unknown device_type for 'HID 056a:0016'. Assuming pen.
[  103.193095][   T58] wacom 0003:056A:0016.0005: hidraw0: USB HID v0.00 Device [HID 056a:0016] on usb-dummy_hcd.7-1/input0
[  103.205414][   T58] input: Wacom Graphire4 6x8 Pen as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:056A:0016.0005/input/input7
[  103.231480][   T37] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  103.262115][   T37] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0080: ffffffb9
[  103.273616][   T28] audit: type=1400 audit(1760733227.319:311): avc:  denied  { map } for  pid=3333 comm="syz.6.1118" path="/dev/ashmem" dev="devtmpfs" ino=269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  103.472756][   T37] asix: probe of 6-1:0.0 failed with error -71
[  103.564852][   T28] audit: type=1400 audit(1760733227.379:312): avc:  denied  { write } for  pid=3329 comm="syz.1.1116" name="file0" dev="tmpfs" ino=221 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  103.569422][  T347] usb 8-1: USB disconnect, device number 3
[  103.595425][   T37] usb 6-1: USB disconnect, device number 3
[  103.818993][ T3355] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1124'.
[  104.097859][ T3372] loop4: detected capacity change from 0 to 512
[  104.104329][   T37] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  104.128648][ T3374] loop1: detected capacity change from 0 to 2048
[  104.162925][ T3372] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  104.174260][ T3374] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  104.181594][ T3372] ext4 filesystem being mounted at /56/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  104.231509][ T3372] EXT4-fs error (device loop4): ext4_do_update_inode:5256: inode #2: comm syz.4.1132: corrupted inode contents
[  104.243912][ T2615] EXT4-fs (loop1): unmounting filesystem.
[  104.276315][ T3372] EXT4-fs error (device loop4): ext4_dirty_inode:6121: inode #2: comm syz.4.1132: mark_inode_dirty error
[  104.292507][   T37] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  104.311477][   T37] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  104.321825][ T3372] EXT4-fs error (device loop4): ext4_do_update_inode:5256: inode #2: comm syz.4.1132: corrupted inode contents
[  104.342434][   T37] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  104.357646][ T3372] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #2: comm syz.4.1132: mark_inode_dirty error
[  104.371075][   T37] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67
[  104.401400][   T37] usb 6-1: SerialNumber: syz
[  104.406581][ T3372] EXT4-fs (loop4): shut down requested (1)
[  104.413967][   T28] audit: type=1400 audit(1760733228.479:313): avc:  denied  { read } for  pid=85 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1
[  104.438535][ T2617] EXT4-fs (loop4): unmounting filesystem.
[  104.481290][   T28] audit: type=1400 audit(1760733228.479:314): avc:  denied  { search } for  pid=85 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  104.630041][ T3394] loop1: detected capacity change from 0 to 4096
[  104.638626][   T28] audit: type=1400 audit(1760733228.479:315): avc:  denied  { write } for  pid=85 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  104.690138][ T3394] EXT4-fs: Ignoring removed nomblk_io_submit option
[  104.732102][   T28] audit: type=1400 audit(1760733228.479:316): avc:  denied  { add_name } for  pid=85 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  104.756381][   T37] usb 6-1: 0:2 : does not exist
[  104.771516][   T37] usb 6-1: USB disconnect, device number 4
[  104.790759][   T28] audit: type=1400 audit(1760733228.479:317): avc:  denied  { create } for  pid=85 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  104.792621][ T3394] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  104.817826][   T28] audit: type=1400 audit(1760733228.479:318): avc:  denied  { append open } for  pid=85 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  104.848899][ T3402] loop4: detected capacity change from 0 to 2048
[  104.873688][ T2615] EXT4-fs (loop1): unmounting filesystem.
[  104.881088][ T3402] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  104.917703][   T43] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters
[  104.932898][   T43] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  104.945397][   T43] EXT4-fs (loop4): This should not happen!! Data will be lost
[  104.945397][   T43] 
[  104.955361][   T43] EXT4-fs (loop4): Total free blocks count 0
[  104.961878][   T43] EXT4-fs (loop4): Free/Dirty block details
[  104.967870][   T43] EXT4-fs (loop4): free_blocks=66060288
[  104.973721][   T43] EXT4-fs (loop4): dirty_blocks=16
[  104.978911][   T43] EXT4-fs (loop4): Block reservation details
[  104.985307][   T43] EXT4-fs (loop4): i_reserved_data_blocks=1
[  104.991802][  T405] udevd[405]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  104.993001][ T2617] EXT4-fs (loop4): unmounting filesystem.
[  105.191471][   T19] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  105.200382][ T2624] ------------[ cut here ]------------
[  105.205997][ T2624] WARNING: CPU: 0 PID: 2624 at fs/inode.c:335 drop_nlink+0xc5/0x110
[  105.214170][ T2624] Modules linked in:
[  105.218154][ T2624] CPU: 0 PID: 2624 Comm: syz-executor Not tainted syzkaller #0
[  105.225934][ T2624] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  105.236161][ T2624] RIP: 0010:drop_nlink+0xc5/0x110
[  105.241283][ T2624] Code: 1b 48 8d bb b8 04 00 00 be 08 00 00 00 e8 a3 e4 f0 ff f0 48 ff 83 b8 04 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 9b 72 ac ff <0f> 0b eb 86 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 5e ff ff ff 4c
[  105.262145][ T2624] RSP: 0018:ffffc90000997c38 EFLAGS: 00010293
[  105.268387][ T2624] RAX: ffffffff81c3ab65 RBX: ffff88810fcec448 RCX: ffff88811bb06540
[  105.276628][ T2624] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  105.284775][ T2624] RBP: ffffc90000997c60 R08: 0000000000000004 R09: 0000000000000003
[  105.292989][ T2624] R10: fffff52000132f78 R11: 1ffff92000132f78 R12: dffffc0000000000
[  105.301056][ T2624] R13: 1ffff11021f9d892 R14: ffff88810fcec490 R15: 0000000000000000
[  105.309229][ T2624] FS:  0000555578d70500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000
[  105.318444][ T2624] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  105.325169][ T2624] CR2: 0000555578d934e8 CR3: 000000012375a000 CR4: 00000000003506b0
[  105.333296][ T2624] Call Trace:
[  105.336638][ T2624]  <TASK>
[  105.339639][ T2624]  shmem_rmdir+0x5b/0x90
[  105.344001][ T2624]  vfs_rmdir+0x393/0x500
[  105.348355][ T2624]  incfs_kill_sb+0x105/0x220
[  105.353125][ T2624]  deactivate_locked_super+0xb5/0x120
[  105.358560][ T2624]  deactivate_super+0xaf/0xe0
[  105.363408][ T2624]  cleanup_mnt+0x45f/0x4e0
[  105.367939][ T2624]  __cleanup_mnt+0x19/0x20
[  105.372730][ T2624]  task_work_run+0x1db/0x240
[  105.377360][ T2624]  ? __cfi_task_work_run+0x10/0x10
[  105.382573][ T2624]  ? __x64_sys_umount+0x125/0x160
[  105.387625][ T2624]  ? __cfi___x64_sys_umount+0x10/0x10
[  105.393049][ T2624]  exit_to_user_mode_loop+0x9b/0xb0
[  105.398295][ T2624]  exit_to_user_mode_prepare+0x5a/0xa0
[  105.403858][ T2624]  syscall_exit_to_user_mode+0x1a/0x30
[  105.409563][ T2624]  do_syscall_64+0x58/0xa0
[  105.414162][ T2624]  ? clear_bhb_loop+0x30/0x80
[  105.418945][ T2624]  ? clear_bhb_loop+0x30/0x80
[  105.423810][ T2624]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  105.429935][ T2624] RIP: 0033:0x7fa30bf902f7
[  105.434518][ T2624] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  105.454321][ T2624] RSP: 002b:00007ffd83e13b88 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  105.462934][ T2624] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007fa30bf902f7
[  105.471009][ T2624] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd83e13c40
[  105.479227][ T2624] RBP: 00007ffd83e13c40 R08: 0000000000000000 R09: 0000000000000000
[  105.487323][ T2624] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd83e14cd0
[  105.495466][ T2624] R13: 00007fa30c011d7d R14: 0000000000019ac3 R15: 00007ffd83e14d10
[  105.503707][ T2624]  </TASK>
[  105.506797][ T2624] ---[ end trace 0000000000000000 ]---
[  105.517544][ T2624] ==================================================================
[  105.525657][ T2624] BUG: KASAN: null-ptr-deref in ihold+0x20/0x60
[  105.531936][ T2624] Write of size 4 at addr 0000000000000170 by task syz-executor/2624
[  105.540022][ T2624] 
[  105.542360][ T2624] CPU: 0 PID: 2624 Comm: syz-executor Tainted: G        W          syzkaller #0
[  105.551481][ T2624] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  105.554848][ T3423] loop5: detected capacity change from 0 to 128
[  105.561576][ T2624] Call Trace:
[  105.561589][ T2624]  <TASK>
[  105.561598][ T2624]  __dump_stack+0x21/0x24
[  105.561624][ T2624]  dump_stack_lvl+0xee/0x150
[  105.561642][ T2624]  ? __cfi_dump_stack_lvl+0x8/0x8
[  105.561662][ T2624]  ? ihold+0x20/0x60
[  105.561681][ T2624]  ? ihold+0x20/0x60
[  105.561698][ T2624]  ? ihold+0x20/0x60
[  105.561715][ T2624]  print_report+0x3d/0x60
[  105.604417][ T2624]  kasan_report+0x122/0x150
[  105.608957][ T2624]  ? ihold+0x20/0x60
[  105.612884][ T2624]  kasan_check_range+0x280/0x290
[  105.618286][ T2624]  __kasan_check_write+0x14/0x20
[  105.623243][ T2624]  ihold+0x20/0x60
[  105.626990][ T2624]  vfs_rmdir+0x25f/0x500
[  105.631250][ T2624]  incfs_kill_sb+0x105/0x220
[  105.635866][ T2624]  deactivate_locked_super+0xb5/0x120
[  105.641346][ T2624]  deactivate_super+0xaf/0xe0
[  105.646060][ T2624]  cleanup_mnt+0x45f/0x4e0
[  105.650493][ T2624]  __cleanup_mnt+0x19/0x20
[  105.654922][ T2624]  task_work_run+0x1db/0x240
[  105.659529][ T2624]  ? __cfi_task_work_run+0x10/0x10
[  105.664701][ T2624]  ? __x64_sys_umount+0x125/0x160
[  105.669757][ T2624]  ? __cfi___x64_sys_umount+0x10/0x10
[  105.675155][ T2624]  exit_to_user_mode_loop+0x9b/0xb0
[  105.680372][ T2624]  exit_to_user_mode_prepare+0x5a/0xa0
[  105.685840][ T2624]  syscall_exit_to_user_mode+0x1a/0x30
[  105.691330][ T2624]  do_syscall_64+0x58/0xa0
[  105.695757][ T2624]  ? clear_bhb_loop+0x30/0x80
[  105.700451][ T2624]  ? clear_bhb_loop+0x30/0x80
[  105.705143][ T2624]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  105.711569][ T2624] RIP: 0033:0x7fa30bf902f7
[  105.715992][ T2624] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  105.735617][ T2624] RSP: 002b:00007ffd83e13b88 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  105.744045][ T2624] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007fa30bf902f7
[  105.752044][ T2624] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd83e13c40
[  105.760025][ T2624] RBP: 00007ffd83e13c40 R08: 0000000000000000 R09: 0000000000000000
[  105.768003][ T2624] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd83e14cd0
[  105.775984][ T2624] R13: 00007fa30c011d7d R14: 0000000000019ac3 R15: 00007ffd83e14d10
[  105.783982][ T2624]  </TASK>
[  105.787025][ T2624] ==================================================================
[  105.799316][ T3423] EXT4-fs (loop5): Test dummy encryption mode enabled
[  105.805418][ T2624] Disabling lock debugging due to kernel taint
[  105.813717][ T2624] BUG: kernel NULL pointer dereference, address: 0000000000000170
[  105.821640][ T2624] #PF: supervisor write access in kernel mode
[  105.827721][ T2624] #PF: error_code(0x0002) - not-present page
[  105.833733][ T2624] PGD 14617e067 P4D 14617e067 PUD 0 
[  105.839509][ T2624] Oops: 0002 [#1] PREEMPT SMP KASAN
[  105.844726][ T2624] CPU: 1 PID: 2624 Comm: syz-executor Tainted: G    B   W          syzkaller #0
[  105.853768][ T2624] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  105.863846][ T2624] RIP: 0010:ihold+0x26/0x60
[  105.868385][ T2624] Code: 33 36 7c df 55 48 89 e5 41 56 53 48 89 fb e8 01 6a ac ff 48 8d bb 70 01 00 00 be 04 00 00 00 e8 e0 db f0 ff 41 be 01 00 00 00 <f0> 44 0f c1 b3 70 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 f1
[  105.888020][ T2624] RSP: 0018:ffffc90000997c78 EFLAGS: 00010246
[  105.894138][ T2624] RAX: ffff88811bb06500 RBX: 0000000000000000 RCX: ffff88811bb06540
[  105.902290][ T2624] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  105.910350][ T2624] RBP: ffffc90000997c88 R08: dffffc0000000000 R09: fffffbfff0f2d8fd
[  105.918331][ T2624] R10: fffffbfff0f2d8fd R11: 1ffffffff0f2d8fc R12: ffff88810fcec454
[  105.926312][ T2624] R13: dffffc0000000000 R14: 0000000000000001 R15: 0000000000000000
[  105.934292][ T2624] FS:  0000555578d70500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000
[  105.943234][ T2624] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  105.949839][ T2624] CR2: 0000000000000170 CR3: 000000012375a000 CR4: 00000000003506a0
[  105.957952][ T2624] Call Trace:
[  105.961356][ T2624]  <TASK>
[  105.964387][ T2624]  vfs_rmdir+0x25f/0x500
[  105.968646][ T2624]  incfs_kill_sb+0x105/0x220
[  105.973248][ T2624]  deactivate_locked_super+0xb5/0x120
[  105.978643][ T2624]  deactivate_super+0xaf/0xe0
[  105.983427][ T2624]  cleanup_mnt+0x45f/0x4e0
[  105.987855][ T2624]  __cleanup_mnt+0x19/0x20
[  105.992277][ T2624]  task_work_run+0x1db/0x240
[  105.996896][ T2624]  ? __cfi_task_work_run+0x10/0x10
[  106.002024][ T2624]  ? __x64_sys_umount+0x125/0x160
[  106.007088][ T2624]  ? __cfi___x64_sys_umount+0x10/0x10
[  106.012482][ T2624]  exit_to_user_mode_loop+0x9b/0xb0
[  106.017685][ T2624]  exit_to_user_mode_prepare+0x5a/0xa0
[  106.023241][ T2624]  syscall_exit_to_user_mode+0x1a/0x30
[  106.028714][ T2624]  do_syscall_64+0x58/0xa0
[  106.033133][ T2624]  ? clear_bhb_loop+0x30/0x80
[  106.037820][ T2624]  ? clear_bhb_loop+0x30/0x80
[  106.042510][ T2624]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  106.048414][ T2624] RIP: 0033:0x7fa30bf902f7
[  106.052837][ T2624] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  106.072462][ T2624] RSP: 002b:00007ffd83e13b88 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  106.080985][ T2624] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007fa30bf902f7
[  106.088957][ T2624] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd83e13c40
[  106.096929][ T2624] RBP: 00007ffd83e13c40 R08: 0000000000000000 R09: 0000000000000000
[  106.104906][ T2624] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd83e14cd0
[  106.112885][ T2624] R13: 00007fa30c011d7d R14: 0000000000019ac3 R15: 00007ffd83e14d10
[  106.120957][ T2624]  </TASK>
[  106.123975][ T2624] Modules linked in:
[  106.127885][ T2624] CR2: 0000000000000170
[  106.132217][ T2624] ---[ end trace 0000000000000000 ]---
[  106.137759][ T2624] RIP: 0010:ihold+0x26/0x60
[  106.142273][ T2624] Code: 33 36 7c df 55 48 89 e5 41 56 53 48 89 fb e8 01 6a ac ff 48 8d bb 70 01 00 00 be 04 00 00 00 e8 e0 db f0 ff 41 be 01 00 00 00 <f0> 44 0f c1 b3 70 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 f1
[  106.161882][ T2624] RSP: 0018:ffffc90000997c78 EFLAGS: 00010246
[  106.167959][ T2624] RAX: ffff88811bb06500 RBX: 0000000000000000 RCX: ffff88811bb06540
[  106.175937][ T2624] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  106.183957][ T2624] RBP: ffffc90000997c88 R08: dffffc0000000000 R09: fffffbfff0f2d8fd
[  106.192231][ T2624] R10: fffffbfff0f2d8fd R11: 1ffffffff0f2d8fc R12: ffff88810fcec454
[  106.200395][ T2624] R13: dffffc0000000000 R14: 0000000000000001 R15: 0000000000000000
[  106.208554][ T2624] FS:  0000555578d70500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000
[  106.217599][ T2624] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  106.224205][ T2624] CR2: 0000000000000170 CR3: 000000012375a000 CR4: 00000000003506a0
[  106.232193][ T2624] Kernel panic - not syncing: Fatal exception
[  106.238574][ T2624] Kernel Offset: disabled
[  106.242919][ T2624] Rebooting in 86400 seconds..